kernel-module-8852au-6.6-desktop-6.6.148-1> )lp 181a10b3a88c2497b4a867b74da8c24d62f9eef54fb201ce9190320ec4617b686645193492483d77d08524605d8d48ae39185e2die ݤ&gk@>Bq?ad#+ - Y     9 <@EJpt~(89:G@HDIHXLY\\]^bcdefltuvw`xdyhx Ckernel-module-8852au-6.6-desktop6.6.1481Binary module 8852au for kernel-6.6-desktopBinary module 8852au for kernel-6.6-desktopjlocalhostROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64j#5fc72f7bc4067e9e99c50ba8574b92a437773344a31ff8d9189169d08fdc34dccrootrootkernel-6.6-desktop-6.6.148-1.src.rpminstallonlypkg(kernel-module)kernel-module-8852au-6.6-desktopkernel-module-8852au-6.6-desktop(x86-64)kmod(8852au)    kernel-6.6-desktop(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.6.148-13.0.4-14.6.0-14.0-15.2-14.17.0jtw@jgH@jL@jL@jj9j Pj Pj Pj Pi@iD@iii@h/Mikhail Novosyolov BiteDasher BiteDasher 6.6.144-1BiteDasher BiteDasher 6.6.126-8BiteDasher 6.6.126-7Mikhail Novosyolov 6.6.126-6Mikhail Novosyolov 6.6.126-5Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.6.126-3Mikhail Novosyolov 6.6.126-2Mikhail Novosyolov 6.6.126-1Mikhail Novosyolov Mikhail Novosyolov 6.6.106-3Mikhail Novosyolov - [bot] upd: 6.6.145 -> 6.6.148 - Changelog: - accel/ivpu: Reject firmware log with size smaller than header - afs: Annotate struct afs_addr_list with __counted_by - afs: Turn the afs_addr_list address array into an array of structs - ALSA: hda: conexant: Remove mic bias threshold override - ALSA: hda: Fix cached processing coefficient verbs - ALSA: seq: close a re-opened queue timer in the destructor - ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC - amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN - amt: make the head writable before rewriting the L2 header - amt: re-read skb header pointers after every pull - arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates - arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 - ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() - ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI - ASoC: cs35l56: Don't use devres to unregister component - ASoC: cs35l56: Fix potential probe() deadlock - ASoC: cs35l56: Use complete_all() to signal init_completion - ASoC: cs42l43: Correct report for forced microphone jack - ASoC: mediatek: mt8183: Check runtime resume during probe - ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable() - ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable - ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe() - ASoC: mediatek: mt8192: Check runtime resume during probe - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link - ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() - ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb - ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop - ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup - ASoC: tas2781: bound firmware description string parsing - ata: libata-core: Reject an invalid concurrent positioning ranges count - ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered - ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts - ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning - ata: sata_dwc_460ex: use platform_get_irq() - audit: fix recursive locking deadlock in audit_dupe_exe() - audit: use 'unsigned int' instead of 'unsigned' - audit: widen ino fields to u64 - binfmt_elf_fdpic: only honour the first PT_INTERP - binfmt_misc: set have_execfd only once the interpreter is opened - Bluetooth: btusb: validate Realtek vendor event length - Bluetooth: hci_qca: Clear memdump state on invalid dump size - Bluetooth: hci_sync: Protect UUID list traversal - Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds - Bluetooth: qca: fix NVM tag length underflow in TLV parser - Bluetooth: RFCOMM: Fix session UAF in set_termios - bonding: fix devconf_all NULL dereference when IPv6 is disabled - bootconfig: do not put quotes on cmdline items unless necessary - bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() - bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c - bpf: drop bpf_lsm_getselfattr from hook list - bpf: Fix ld_{abs,ind} failure path analysis in subprogs - bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized - bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() - bpf, sockmap: Reject unhashed UDP sockets on sockmap update - btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 - btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() - btrfs: free mapping node on duplicate reloc root insert - btrfs: reject free space cache with more entries than pages - can: bcm: add locking when updating filter and timer values - can: bcm: add missing device refcount for CAN filter removal - can: bcm: extend bcm_tx_lock usage for data and timer updates - can: bcm: fix CAN frame rx/tx statistics - can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() - can: bcm: fix stale rx/tx ops after device removal - can: bcm: track a single source interface for ANYDEV timeout/throttle ops - can: bcm: validate frame length in bcm_rx_setup() for RTR replies - can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER - can: isotp: serialize TX state transitions under so->rx_lock - can: j1939: fix lockless local-destination check - cdrom: fix stack out-of-bounds read in CDROMVOLCTRL - ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() - comedi: comedi_parport: deal with premature interrupt - coredump: fix pidfs file refcount leak in umh_coredump_setup - crypto: rsa-pkcs1pad: Don't WARN on an empty digest - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning - dma: dw-edma: Fix build warning in dw_edma_pcie_probe() - dmaengine: dw-edma: Fix confusing cleanup.h syntax - dmaengine: dw-edma-pcie: Reject devices without driver data - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up - dm-verity: avoid double increment of &use_bh_wq_enabled - dm-verity: make error counter atomic - dpaa2-eth: put MAC endpoint device on disconnect - dpaa2-switch: put MAC endpoint device on disconnect - drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference - drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources - drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips - drm/amd/display: set new_stream to NULL after release - drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT - drm/amdgpu: fix aperture mapping leak - drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved - drm/amdgpu: fix division by zero with invalid uvd dimensions - drm/amdgpu: Fix VFCT bus number matching with soft filter - drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx8: drop unecessary BUG_ON() - drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() - drm/amdgpu: invoke pm_genpd_remove() before freeing genpd - drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) - drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older - drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 - drm/amdgpu/vce: fix integer overflow in image size - drm/amdgpu/vcn4: avoid rereading IB param length - drm/amdkfd: Check bounds in allocate_event_notification_slot - drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) - drm/amd/pm: make pp_features read-only when scpm is enabled - drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() - drm/dp/mst: fix buffer overflows in sideband chunk accumulation - drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers - drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers - drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() - drm/i915/gem: Add missing nospec on parallel submit slot - drm/i915/gem: Do not leak siblings[] on proto context error - drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU - drm/i915/gt: use correct selftest config symbol - drm/i915: Return NULL on error in active_instance - drm/i915/selftests: Fix GT PM sort comparators - drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() - drm/nouveau: fix reversed error cleanup order in ucopy functions - drm/radeon: fix r100_copy_blit for large BOs - drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() - drm/vc4: Prevent shader BO mappings from becoming writable - drm/virtio: bound EDID block reads to the response buffer - drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker - drm/vmwgfx: Validate vmw_surface_metadata::array_size - exec: fix unsigned loop counter wrap in transfer_args_to_stack() - exfat: validate cluster allocation bits of the allocation bitmap - fbcon: Rename struct fbcon_ops to struct fbcon_par - fbcon: Use correct type for vc_resize() return value - fbdev: efifb: fix memory leak in efifb_probe() - fbdev/efifb: Replace references to global screen_info by local pointer - firewire: net: Fix fragmented datagram reassembly - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() - firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context - firmware_loader: introduce __free() cleanup hanler - fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() - fscrypt: Add missing superblock check in find_or_insert_direct_key() - fscrypt: Avoid dynamic allocation in fscrypt_get_devices() - fs: preserve ACL_DONT_CACHE state in forget_cached_acl() - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list - ftrace: Add global mutex to serialize trace_parser access - geneve: require CAP_NET_ADMIN in the device netns for changelink - gpio: mt7621: avoid corruption of shared interrupt trigger state - gpio: tegra: do not call pinctrl for GPIO direction - gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings - gtp: check skb_pull_data() return in gtp1u_send_echo_resp() - hinic: remove unused ethtool RSS user configuration buffers - hwmon: (asus-ec-sensors) add missed handle for ENOMEM - hwmon: (asus-ec-sensors) fix EC read intervals - hwmon: (asus-ec-sensors) fix looping over banks while reading from EC - hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop - hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop - hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop - hwmon: occ: validate poll response sensor blocks - i2c: davinci: Unregister cpufreq notifier on probe failure - i2c: i801: fix hardware state machine corruption in error path - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) - i2c: imx: separate atomic, dma and non-dma use case - i40e: remove read access to debugfs files - IB/mad: Drop unmatched RMPP responses before reassembly - ice: fix LAG recipe to profile association - ice: use READ_ONCE() to access cached PHC time - ila: reload IPv6 header after pskb_may_pull in checksum adjust - Input: ims-pcu - fix firmware leak in async update - Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() - Input: ims-pcu - fix logic error in packet reset - intel_th: fix MSC output device reference leak - iomap: correct the range of a partial dirty clear - iommu/amd: Bound the early ACPI HID map - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() - iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() - iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() - iommu/vt-d: Disallow SVA if page walk is not coherent - io_uring/rw: fix missing ERESTARTSYS conversion in read paths - ipmi: fix refcount leak in i_ipmi_request() - ipv4: fib: free fib_alias with kfree_rcu() on insert error path - ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup - ipv6: ndisc: fix NULL deref in accept_untracked_na() - ksmbd: bound DACL dedup walk to copied ACEs - ksmbd: defer destroy_previous_session() until after NTLM authentication - ksmbd: pin conn during async oplock break notification - ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL - ksmbd: validate ACE size against SID sub-authorities - ksmbd: validate compound request size before reading StructureSize2 - ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl - KVM: Introduce vcpu->wants_to_run - KVM: nVMX: Hide shadow VMCS right after VMCLEAR - KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available - KVM: x86/mmu: Fix use-after-free on vendor module reload - KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN - libceph: bound get_version reply decode to front len - libceph: Fix multiplication overflow in decode_new_up_state_weight() - libceph: guard missing CRUSH type name lookup - libceph: refresh auth->authorizer_buf{,_len} after authorizer update - libceph: Reject monmaps advertising zero monitors - libceph: reject zero bucket types in crush_decode - libceph: remove debugfs files before client teardown - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() - LoongArch: Fix oops during single-step debugging - lsm: infrastructure management of the sock security - mac802154: hold an interface reference across the scan worker - mac802154: llsec: reject frames shorter than the authentication tag - mctp: serial: handle zero-length frames to prevent rx buffer overflow - media: airspy: Return queued buffers on start_streaming() failure - media: aspeed: fix missing of_reserved_mem_device_release() on probe failure - media: cec: seco: unregister adapter on IR probe failure - media: cedrus: clean up media device on probe failure - media: cedrus: Fix missing cleanup in error path - media: cedrus: skip invalid H.264 reference list entries - media: cx231xx: fix devres lifetime - media: cx23885: add ioremap return check and cleanup - media: marvell-cam: fix missing pci_disable_device() on remove - media: meson: vdec: Fix memory leak in error path of vdec_open - media: msi2500: Return queued buffers on start_streaming() failure - media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe - media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure - media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path - media: nxp: imx8-isi: Fix potential out-of-bounds issues - media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding - media: pci: dm1105: Free allocated workqueue - media: pwc: Drain fill_buf on start_streaming() failure - media: pwc: Return queued buffers on start_streaming() failure - media: radio-si476x: Unregister v4l2_device on probe failure - media: rtl2832: fix use-after-free in rtl2832_remove() - media: rtl2832_sdr: Return queued buffers on start_streaming() failure - media: saa7134: Fix a possible memory leak in saa7134_video_init1 - media: stm32: dcmi: unregister notifier on probe failure - media: sun4i-csi: Return queued buffers on start_streaming() failure - media: tegra-video: vi: fix invalid u32 return value in format lookup - media: ti: vpe: unwind v4l2 device registration on probe error - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() - media: v4l2-ctrls: validate HEVC active reference counts - media: vb2: use ssize_t for vb2_read/vb2_write - media: vidtv: fix reference leak on failed device registration - media: vimc: fix reference leak on failed device registration - media: vivid: add vivid_update_reduced_fps() - media: vivid: check for vb2_is_busy() when toggling caps - media: vpif_capture: fix OF node reference imbalance - mei: bus: access mei_device under device_lock on cleanup - mm/damon/core: disallow overlapping input ranges for damon_set_regions() - mm/damon/core: validate ranges in damon_set_regions() - mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages - mm: refactor mm_access() to not return NULL - mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n - mptcp: decrement subflows counter on failed passive join - mptcp: only set DATA_FIN when a mapping is present - mtd: fix double free and WARN_ON in add_mtd_device() error paths - mtd: mtdswap: remove debugfs stats file on teardown - mtd: nand: mtk-ecc: stop on ECC idle timeouts - mtd: rawnand: Add a helper for calculating a page index - mtd: rawnand: Ensure all continuous terms are always in sync - mtd: rawnand: Pause continuous reads at block boundaries - net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() - net: bridge: vlan: fix vlan range dumps starting with pvid - net: dpaa: fix mode setting - netfilter: nf_conntrack_sip: remove net variable shadowing - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it - netfilter: nf_tables: remove register tracking infrastructure - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() - netfilter: nft_fib: reject fib expression on the netdev egress hook - netfilter: nft_set_pipapo: don't leak bad clone into future transaction - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL - netfilter: nft_set_pipapo: merge deactivate helper into caller - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path - netfilter: nft_set_pipapo: move prove_locking helper around - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone - netfilter: nft_set_pipapo: prepare walk function for on-demand clone - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions - net: hip04: fix RX buffer leak on build_skb failure - net: hsr: fix memory leak on slave unregistration by removing synced VLANs - net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink - net: ipa: fix SMEM state handle leaks in SMP2P init - net: ipv6: fix dif and sdif mismatch in raw6_icmp_error - net/iucv: fix use-after-free of a severed iucv_path - net/iucv: take a reference on the socket found in afiucv_hs_rcv() - net: macb: drop in-flight Tx SKBs on close - net: mana: Validate the packet length reported by the NIC - net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation - net/mlx5e: Report zero bandwidth for non-ETS traffic classes - net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule - net/packet: avoid fanout hook re-registration after unregister - net: pcs: xpcs: fix SGMII state reading - net: qrtr: ns: Raise node count limit to 512 - net: qrtr: restrict socket creation to the initial network namespace - net/sched: act_tunnel_key: Defer dst_release to RCU callback - net: slip: serialize receive against buffer reallocation - net: stmmac: enable the MAC on link up for all supported speeds - net: stmmac: fix l3l4 filter rejecting unsupported offload requests - net: stmmac: reset residual action in L3L4 filters on delete - net/x25: fix use-after-free in x25_kill_by_neigh() - nexthop: initialize extack in nh_res_bucket_migrate() - nfp: Check resource mutex allocation - NFS: Charge unstable writes by request size, not folio size - NFSD: pass nfsd_file to nfsd_iter_read() - nfs: remove dead code for the old swap over NFS implementation - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF - octeontx2: Annotate mmio regions as __iomem - octeontx2-pf: clear stale mailbox IRQ state before request_irq() - octeontx2-pf: fix SQB pointer leak on init failure - octeontx2-vf: clear stale mailbox IRQ state before request_irq() - octeontx2-vf: set TC flower flag on MCAM entry allocation - openvswitch: fix GSO userspace truncation underflow - ovl: use linked upper dentry in copy-up tmpfile - pds_core: check for workqueue allocation failure - pds_core: fix auxiliary device add/del races - pds_core: order completion reads after the ownership check - pds_core: reject component parameter in legacy firmware update - pds_core: yield the CPU while waiting for the adminq to drain - phonet: pep: fix use-after-free in pep_get_sb() - pinctrl: remove pinctrl_gpio_direction_output() - platform/loongarch: laptop: Explicitly reset bl_powered state when suspend - platform/x86/amd/pmc: Avoid logging "(null)" for DMI values - platform/x86/amd/pmc: Don't log during intermediate wakeups - platform/x86: dell-laptop: fix missing cleanups in init error path - platform/x86: dell-smbios: Move request functions for reuse - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug - posix-cpu-timers: Prevent UAF caused by non-leader exec() race - powerpc/time: Prepare to stop elapsing in dynticks-idle - powerpc/vtime: Initialize starttime at boot for native accounting - ppp: annotate data races in ppp_generic - ppp: convert to percpu netstats - ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF - ppp: enable TX scatter-gather - pppoe: reload header pointer after dev_hard_header() - ppp: use IFF_NO_QUEUE in virtual interfaces - proc: Fix broken error paths for namespace links - rbd: Reset positive result codes to zero in object map update path - RDMA/cma: Fix hardware address comparison length in netevent callback - RDMA/erdma: initialize ret for empty receive WR lists - RDMA/hns: Fix potential integer overflow in mhop hem cleanup - RDMA/irdma: Prevent overflows in memory contiguity checks - RDMA/irdma: Prevent rereg_mr for non-mem regions - RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp - RDMA/siw: publish QP after initialization - RDMA/umem: Add helpers for umem dmabuf revoke lock - RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper - RDMA/umem: Add pinned revocable dmabuf import interface - RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device - RDMA/umem: Introduce an option to revoke DMABUF umem - RDMA/umem: Move umem dmabuf revoke logic into helper function - rds: drop incoming messages that cross network namespace boundaries - Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" - Revert "drm/amd/display: Add missing kdoc for ALLM parameters" - RISC-V: KVM: Serialize virtual interrupt pending state updates - rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack - rxrpc: Fix notification vs call-release vs recvmsg - rxrpc: Fix socket notification race - rxrpc: Pull out certain app callback funcs into an ops table - rxrpc: serialize kernel accept preallocation with socket teardown - rxrpc: Use irq-disabling spinlocks between app and I/O thread - sched/vtime: Get rid of generic vtime_task_switch() implementation - sctp: auth: verify auth requirement when auth_chunk is NULL - sctp: don't free the ASCONF's own transport in DEL-IP processing - sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid - sctp: fix auth_hmacs array size in struct sctp_cookie - sctp: validate stream count in sctp_process_strreset_inreq() - selftest: af_unix: Add Kconfig file. - selftests: af_unix: add USER_NS config - selftests/alsa: Fix memory leak in find_controls error path - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs - selftests: openvswitch: add config file - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() - seqlock: Allow KASAN to fail optimizing - seqlock: Allow UBSAN_ALIGNMENT to fail optimizing - seqlock: Cure some more scoped_seqlock() optimization fails - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms - serial: max310x: implement gpio_chip::get_direction() - serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch) - serial: sc16is7xx: implement gpio get_direction() callback - smb/client: handle overlapping allocated ranges in fallocate - smb: client: validate DFS referral PathConsumed - staging: rtl8723bs: fix inverted HT40 secondary channel offset - staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() - SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists - sunrpc: allocate a separate bvec array for socket sends - SUNRPC: Return an error from xdr_buf_to_bvec() on overflow - taskstats: fill_stats_for_tgid: use for_each_thread() - taskstats: retain dead thread stats in TGID queries - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() - tipc: fix infinite loop in __tipc_nl_compat_dumpit - tipc: fix u16 MTU truncation in media and bearer MTU validation - tipc: restrict socket queue dumps in enqueue tracepoints - tls: device: push pending open record on splice EOF - tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() - tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev - tracing: Fix resource leak on mmiotrace trace_pipe close - tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() - tracing/probes: Fix potential underflow in LEN_OR_ZERO macro - tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() - tracing/user_events: Fix use-after-free in user_event_mm_dup() - udmabuf: Do not create malformed scatterlists - udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect - usb: chipidea: fix usage_count leak when autosuspend_delay is negative - usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback - usb: gadget: f_midi: cancel pending IN work before freeing the midi object - usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() - USB: gadget: fsl-udc: fix device name leak on probe failure - usb: gadget: printer: fix infinite loop in printer_read() - USB: gadget: snps-udc: fix device name leak on probe failure - usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown - usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer - USB: serial: ftdi_sio: add support for E+H FXA291 - USB: serial: io_edgeport: cap received transmit credits - USB: serial: keyspan_pda: fix data loss on receive throttling - USB: serial: option: add TDTECH MT5710-CN - USB: storage: add NO_ATA_1X quirk for Longmai USB Key - usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits - VDUSE: avoid leaking information to userspace - vduse: remove unused vaddr parameter of vduse_domain_free_coherent - vduse: take out allocations from vduse_dev_alloc_coherent - vduse: Use fixed 4KB bounce pages for non-4KB page size - VFS/audit: introduce kern_path_parent() for audit - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets - vxlan: mdb: Fix source list corruption on a failed replace - vxlan: require CAP_NET_ADMIN in the device netns for changelink - wan: wanxl: Only reset hardware after BAR mapping - watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() - wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() - wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin - wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() - wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath6kl: fix OOB access from firmware ADDBA window size - wifi: ath6kl: fix OOB read from firmware IE lengths in connect event - wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request - wifi: brcmfmac: fix 802.1X-SHA256 call trace warning - wifi: brcmfmac: initialize SDIO data work before cleanup - wifi: brcmfmac: make release_scratchbuffers idempotent - wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read - wifi: carl9170: fix buffer overflow in rx_stream failover path - wifi: carl9170: fix OOB read from off-by-two in TX status handler - wifi: cfg80211: bound element ID read when checking non-inheritance - wifi: cfg80211: cancel sched scan results work on unregister - wifi: cfg80211: reject unsupported PMSR FTM location requests - wifi: cfg80211: validate PMSR FTM preamble range - wifi: cfg80211: validate PMSR measurement type data - wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() - wifi: iwlwifi: mvm: fix read in wake packet notification handler - wifi: iwlwifi: mvm: validate SAR GEO response payload size - wifi: libertas: fix memory leak in helper_firmware_cb() - wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() - wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock - wifi: mac80211_hwsim: clamp virtio RX length before skb_put - wifi: mac80211: recalculate TIM when a station enters power save - wifi: mac80211: tear down new links on vif update error path - wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() - wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7915: guard HE capability lookups - wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() - wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() - wifi: mwifiex: bound uAP association event IEs to the event buffer - wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper - wifi: nl80211: free RNR data on MBSSID mismatch - wifi: nl80211: validate nested MBSSID IE blobs - wifi: p54: validate RX frame length in p54_rx_eeprom_readback() - wifi: wilc1000: validate assoc response length before subtracting header - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out init_cpu_worker_pool() - x86/boot/compressed: Disable jump tables - xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() - xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert - xprtrdma: Clear receive-side ownership pointers on release - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- [bot] upd: 6.6.144 -> 6.6.145 - Changelog: - 6lowpan: fix NHC entry use-after-free on error path - 9p: skip nlink update in cacheless mode to fix WARN_ON - ACPI: bus: Introduce devm_acpi_install_notify_handler() - ACPI: CPPC: Suppress UBSAN warning caused by field misuse - ACPI: driver: Check ACPI_COMPANION() against NULL during probe - ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() - ACPI: IPMI: Fix message kref handling on dead device - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup - ACPI: NFIT: core: Fix possible deadlock and missing notifications - ACPI: NFIT: core: Fix possible NULL pointer dereference - ACPI: NFIT: core: Use devm_acpi_install_notify_handler() - ACPI: resource: Amend kernel-doc style - afs: Fix callback service message parsers to pass through -EAGAIN - afs: Fix error code in afs_extract_vl_addrs() - afs: Fix further netns teardown to cancel the preallocation charger - afs: Fix netns teardown to cancel the preallocation charger - afs: fix NULL pointer dereference in afs_get_tree() - afs: Fix the volume AFS_VOLUME_RM_TREE is set on - afs: Fix unchecked-length string display in debug statement - afs: Fix vllist leak - afs: use kvfree() to free memory allocated by kvcalloc() - alpha/PCI: Add security_locked_down() check to pci_mmap_resource() - alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs - ALSA: aoa: check snd_ctl_new1() return value - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser - ALSA: cmipci: check snd_ctl_new1() return value - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() - ALSA: es1938: check snd_ctl_new1() return value - ALSA: firewire: isight: bound the sample count to the packet payload - ALSA: gus: check snd_ctl_new1() return value - ALSA: ice1712: check snd_ctl_new1() return value - ALSA: seq: Clear variable event pointer on read - ALSA: seq: Fix partial userptr event expansion - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() - ALSA: seq: midi: Serialize output teardown with event_input - ALSA: usb-audio: avoid kobject path lookup in DualSense match - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks - ALSA: usb-audio: Roll back quirk control caches on write errors - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes - ALSA: virtio: Add missing 384 kHz PCM rate mapping - ALSA: ymfpci: check snd_ctl_new1() return value - amt: fix size calculation in amt_get_size() - apparmor: aa_getprocattr free procattr leak on format failure - apparmor: aa_label_alloc use aa_label_free on alloc failure - apparmor: advertise the tcp fast open fix is applied - apparmor: check label build before no_new_privs test - apparmor: fix label can not be immediately before a declaration - apparmor: fix potential UAF in aa_replace_profiles - apparmor: fix rawdata_f_data implicit flex array - apparmor: grab ns lock and refresh when looking up changehat child profiles - apparmor: put secmark label after secid lookup - arm64: dts: imx8x-colibri: Correct SODIMM PAD settings - arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host - arm64: dts: qcom: sdm630: describe adsp_mem region properly - arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning - arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node - arm64: dts: qcom: sm8450: Fix ICE reg size - arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S - arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc - arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well - arm64: Fix early handling of FEAT_E2H0 not being implemented - arm64: fpsimd: Fix type mismatch in sme_{save,load}_state() - arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() - arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS - arm64/mm: convert ptep_clear() to ptep_get_and_clear() - arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep) - arm64/mm: convert set_pte_at() to set_ptes(..., 1) - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: sysreg: Add layout for ID_AA64MMFR4_EL1 - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: tegra: Fix Tegra234 MGBE PTP clock - arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative - ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint - ARM: imx31: Fix IIM mapping leak in revision check - ARM: imx3: Fix CCM node reference leak - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO - ASoC: codecs: aw88261: fix incorrect masks for boost regs - ASoC: codecs: hdac_hdmi: Validate written enum value - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails - ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count - ASoC: fsl: fsl_audmix: Validate written enum values - ASoC: mediatek: mt8183: Release reserved memory on cleanup - ASoC: mediatek: mt8192: Release reserved memory on cleanup - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put - ASoC: SOF: topology: validate vendor array size before parsing - ASoC: tegra: tegra210_ahub: Validate written enum value - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode - ata: libata: Fix ata_exec_internal() - ata: pata_pxa: Fix DMA channel leak on probe error - ata: sata_gemini: unwind clocks on IDE pinctrl errors - audit: add audit_log_nf_skb helper function - audit: Fix data races of skb_queue_len() readers on audit_queue - audit: fix potential integer overflow in audit_log_n_hex() - batman-adv: access unicast_ttvn skb->data only after skb realloc - batman-adv: bla: reacquire gw address after skb realloc - batman-adv: clean untagged VLAN on netdev registration failure - batman-adv: dat: acquire ARP hw source only after skb realloc - batman-adv: dat: ensure accessible eth_hdr proto field - batman-adv: dat: fix tie-break for candidate selection - batman-adv: ensure minimal ethernet header on TX - batman-adv: fix VLAN priority offset - batman-adv: frag: fix primary_if leak on failed linearization - batman-adv: frag: free unfragmentable packet - batman-adv: gw: acquire ethernet header only after skb realloc - batman-adv: retrieve ethhdr after potential skb realloc on RX - batman-adv: tt: avoid request storms during pending request - batman-adv: tt: prevent TVLV OOB check overflow - binder: fix UAF in binder_free_transaction() - binder: fix UAF in binder_thread_release() - bitops: make BYTES_TO_BITS() treewide-available - bitops: use common function parameter names - block: Avoid mounting the bdev pseudo-filesystem in userspace - block: skip sync_blockdev() on surprise removal in bdev_mark_dead() - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister - Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control - Bluetooth: bnep: pin L2CAP connection during netdev registration - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() - Bluetooth: btmtk: apply the common btmtk_fw_get_filename - Bluetooth: btmtk: Fix btmtk.c undefined reference build error - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown - Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c - Bluetooth: btmtk: remove #ifdef around declarations - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() - Bluetooth: btrtl: validate firmware patch bounds - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB - Bluetooth: btusb: fix use-after-free on marvell probe failure - Bluetooth: btusb: fix use-after-free on registration failure - Bluetooth: btusb: fix wakeup source leak on probe failure - Bluetooth: btusb: mediatek: add MT7922 subsystem reset - Bluetooth: btusb: mediatek: remove the unnecessary goto tag - Bluetooth: btusb: mediatek: reset the controller before downloading the fw - Bluetooth: btusb: mediatek: return error for failed reg access - Bluetooth: fix UAF in bt_accept_dequeue() - Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() - Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state - Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle - Bluetooth: hci: validate codec capability element length - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID - Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: validate option length before reading conf opt value - Bluetooth: MGMT: Fix adv monitor add failure cleanup - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready - Bluetooth: SCO: hold sk properly in sco_conn_ready - Bluetooth: separate CIS_LINK and BIS_LINK link types - Bluetooth: vhci: validate devcoredump state before side effects - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() - bonding: 3ad: fix mux port state on oper down - bonding: add ESP offload features when slaves support - bonding: Correctly support GSO ESP offload - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix xfrm offload feature setup on active-backup mode - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add missing access_ok call to copy_user_syms - bpf: Allow LPM map access from sleepable BPF programs - bpf, arm64: Reject out-of-range B.cond targets - bpf: Check tail zero of bpf_prog_info - bpf: Consistently use bpf_rcu_lock_held() everywhere - bpf: Disable xfrm_decode_session hook attachment - bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket - bpf: Fix effective prog array index with BPF_F_PREORDER - bpf: Fix stack slot index in nospec checks - bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs - bpf,fork: wipe ->bpf_storage before bailouts that access it - bpf, lsm: Add disabled BPF LSM hook list - bpf: Prefer dirty packs for eBPF allocations - bpf: Prefer packs that won't trigger an IBPB flush on allocation - bpf: Reject fragmented frames in devmap - bpf: Restore sysctl new-value from 1 to 0 - bpf: Restrict JIT predictor flush to cBPF - bpf: Run generic devmap egress prog on private skb - bpf: Skip redundant IBPB in pack allocator - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() - bpf: Support for hardening against JIT spraying - bpf: Tighten cgroup storage cookie checks for prog arrays - bpftool: Use libbpf error code for flow dissector query - bpf: Update transport_header when encapsulating UDP tunnel in lwt - bpf: zero-initialize the fib lookup flow struct - bridge: cfm: reject invalid CCM interval at configuration time - bridge: stp: Fix a potential use-after-free when deleting a bridge - btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC - btrfs: do not trim a device which is not writeable - btrfs: fix false IO failure after falling back to buffered write - btrfs: fix incorrect buffered IO fallback for append direct writes - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() - btrfs: zoned: don't account data relocation space-info in statfs free space - bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() - bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path - bus: sunxi-rsb: Always check register address validity - can: bcm: add missing rcu list annotations and operations - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF - can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure - can: esd_usb: kill anchored URBs before freeing netdevs - can: isotp: use unconditional synchronize_rcu() in isotp_release() - cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed - char: tlclk: fix use-after-free in tlclk_cleanup() - cifs: invalidate cfid on unlink/rename/rmdir - cifs: remove all cifs files before kill super - cifs: validate DFS referral string offsets - clk: at91: keep securam node alive while mapping it - clk: qcom: a53: Corrected frequency multiplier for 1152MHz - clk: scmi: Fix clock rate rounding - clk: scpi: Unregister child clock providers on remove - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances - configfs: fix lockless traversals of ->s_children - configfs_lookup(): don't leave ->s_dentry dangling on failure - coresight: cti: Fix DT filter signals silently ignored - coresight: etb10: restore atomic_t for shared reading state - coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() - cpufreq: conservative: Simplify frequency limit handling - cpufreq: Documentation: fix conservative governor freq_step description - cpufreq: Documentation: fix sampling_down_factor range - cpufreq: Fix hotplug-suspend race during reboot - cpufreq: intel_pstate: Sync policy->cur during CPU offline - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation - cpu: hotplug: Bound hotplug states sysfs output - cpu: hotplug: Preserve per instance callback errors - crypto: af_alg - Remove zero-copy support from skcipher and aead - crypto: algif_skcipher - force synchronous processing on trees without ctx->state - crypto: amlogic - avoid double cleanup in meson_crypto_probe() - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 - crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A - crypto: atmel-sha204a - fix blocking and non-blocking rng logic - crypto: caam - use print_hex_dump_devel to guard key hex dumps - crypto: caam - use print_hex_dump_devel to guard key hex dumps again - crypto: cavium/cpt - fix DMA cleanup using wrong loop index - crypto: ccp - Treat zero-length cert chain as query for blob lengths - crypto: crypto4xx - Remove ahash-related code - crypto: crypto4xx - Remove insecure and unused rng_alg - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels - crypto: drbg - Fix returning success on failure in CTR_DRBG - crypto: drbg - Fix the fips_enabled priority boost - crypto: ecc - Fix carry overflow in vli multiplication - crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve - crypto: hisilicon/qm - disable error report before flr - crypto: hisi-trng - Remove crypto_rng interface - crypto: marvell/octeontx - fix DMA cleanup using wrong loop index - crypto: pcrypt - restore callback for non-parallel fallback - crypto: qat - fix restarting state leak on allocation failure - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() - crypto: qat - validate RSA CRT component lengths - crypto: rng - Free default RNG on module exit - crypto: sun4i-ss - Remove insecure and unused rng_alg - crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos/hash - drop workqueue mechanism for SEC1 - crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation - crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor - crypto: talitos/hash - remove useless wrapper - crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request - crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue - crypto: talitos - move code in current_desc_hdr() into a standalone function - crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function - crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function - crypto: talitos - rename first/last to first_desc/last_desc - crypto: talitos - stop using crypto_ahash::init - crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header - cxgb4: Fix decode strings dump for T6 adapters - cxl/test: Add check after kzalloc() memory in alloc_mock_res() - cxl/test: Fix integer overflow in mock LSA bounds checks - cxl/test: Zero out LSA backing memory to avoid leaking to user - dax/kmem: account for partial discontiguous resource upon removal - debugobjects: Plug race against a concurrent OOM disable - device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() - device property: initialize the remaining fields of fwnode_handle in fwnode_init() - devlink: Fix parent ref leak in devl_rate_node_create() - dlm: fix add msg handle in send_queue ordered - dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK - dmaengine: Fix possible use after free - dmaengine: imx-sdma: Refine spba bus searching in probe - dmaengine: qcom: gpi: set DMA_PRIVATE capability - dmaengine: tegra: Fix burst size calculation - dm-bufio: fix wrong count calculation in dm_bufio_issue_discard - dm_early_create: fix freeing used table on dm_resume failure - dm era: fix NULL pointer dereference in metadata_open() - dm era: fix out-of-bounds memory access for non-zero start sector - dm-integrity: don't increment hash_offset twice - dm-ioctl: fix a possible overflow in list_version_get_info - dm-ioctl: report an error if a device has no table - dm-log: fix a bitset_size overflow on 32bit machines - dm-stats: fix dm_jiffies_to_msec64 - dm-stats: fix merge accounting - dm thin metadata: fix metadata snapshot consistency on commit failure - dm thin metadata: fix superblock refcount leak on snapshot shadow failure - dm-verity: fix a possible NULL pointer dereference - dm-verity: increase sprintf buffer size - Documentation: proc: fix section numbering in table of contents - dpaa2-switch: fix VLAN upper check not rejecting bridge join - drbd: reject data replies with an out-of-range payload size - driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() - driver core: Guard deferred probe timeout extension with delayed_work_pending() - driver core: Use mod_delayed_work to prevent lost deferred probe work - driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() - drm/amd/display: Add missing kdoc for ALLM parameters - drm/amd: Fix set but not used warnings - drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() - drm/amdgpu: initialize irq.lock spinlock earlier - drm/amdgpu: set sub_block_index for mca ras sub-blocks - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free - drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm - drm/amdkfd: Validate CRIU-restored IDs before idr_alloc - drm/edid: fix OOB read in drm_parse_tiled_block() - drm/hisilicon/hibmc: move display contrl config to hibmc_probe() - drm/hisilicon/hibmc: use clock to look up the PLL value - drm/msm/dp: fix HPD state status bit shift value - drm/msm/dp: Fix the ISR_* enum values - drm/nouveau/bios: specify correct display fuse register for Ampere and Ada - drm/radeon: fix integer overflow in radeon_align_pitch() - drm/radeon: fix memory leak in radeon_ring_restore() on lock failure - drm/rockchip: Test for imported buffers with drm_gem_is_imported() - drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() - drm/tegra: Fix iommu_map_sgtable() return value check - drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered - drm/tidss: Drop extra drm_mode_config_reset() call - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties - dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback - dt-bindings: pinctrl: nvidia,tegra234: Add missing required block - dt-bindings: power: imx93: Add MIPI PHY power domain - EDAC/i10nm: Don't fail probing if ADXL is missing - EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info - espintcp: use sk_msg_free_partial to fix partial send - evm: terminate and bound the evm_xattrs read buffer - exfat: add exfat_get_dentry_set_by_ei() helper - exfat: bound uniname advance in exfat_find_dir_entry() - exfat: move exfat_chain_set() out of __exfat_resolve_path() - exfat: move free cluster out of exfat_init_ext_entry() - exfat: preserve benign secondary entries during rename and move - exfat: remove unnecessary read entry in __exfat_rename() - exfat: rename argument name for exfat_move_file and exfat_rename_file - ext2: fix ignored return value of generic_write_sync() - ext4: fix kernel BUG in ext4_write_inline_data_end - ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback - ext4: get rid of ppath in get_ext_path() - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes - f2fs: fix listxattr handling of corrupted xattr entries - f2fs: fix potential deadlock in f2fs_balance_fs() - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() - f2fs: validate orphan inode entry count - fbcon: fix NULL pointer dereference for a console without vc_data - fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() - fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() - fbdev: hecubafb: fix potential memory leak in hecubafb_probe() - fbdev: i740fb: fix potential memory leak in i740fb_probe() - fbdev: metronomefb: fix potential memory leak in metronomefb_probe() - fbdev: nvidia: fix potential memory leak in nvidiafb_probe() - fbdev: radeon: fix potential memory leak in radeonfb_pci_register() - fbdev: s3fb: fix potential memory leak in s3_pci_probe() - fbdev: sm501fb: Fix buffer errors in OF binding code - fbdev: sm712: Fix operator precedence in big_swap macro - fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() - fbdev: tridentfb: fix potential memory leak in trident_pci_probe() - fbdev: uvesafb: fix potential memory leak in uvesafb_probe() - fbdev: vesafb: fix memory leak in vesafb_probe() - firmware: arm_scmi: Fix OOB in scmi_power_name_get() - firmware: arm_scmi: Read sensor config as 32-bit value - firmware_loader: fix device reference leak in firmware_upload_register() - firmware_loader: Fix recursive lock in device_cache_fw_images() - flow_dissector: check device type before reading ETH_ADDRS - fpga: dfl: add bounds check in dfh_get_param_size() - fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() - fs: efs: remove unneeded debug prints - fsl/fman: Free init resources on KeyGen failure in fman_init() - fs/ntfs3: add bounds check to run_get_highest_vcn() - fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow - fs/ntfs3: bound attr_off in UpdateResidentValue against data_off - fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length - fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() - fs/ntfs3: fix mount failure on 64K page-size kernels - fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename - fs/ntfs3: fsync files by syncing parent inodes - fs/ntfs3: handle attr_set_size() errors when truncating files - fs/ntfs3: resize log->one_page_buf when adopting on-disk page size - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns - fs/ntfs3: validate lcns_follow in log_replay conversion - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio() - fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid - fuse: fix device node leak in cuse_process_init_reply() - fuse: re-lock request before returning from fuse_ref_folio() - gpio: eic-sprd: use raw_spinlock_t in the irq startup path - gpio-f7188x: Add support for NCT6126D version B - gpio: htc-egpio: use managed gpiochip registration - gpio: mlxbf3: fail probe if gpiochip registration fails - gpio: mvebu: fail probe if gpiochip registration fails - gpio: sch: use raw_spinlock_t in the irq startup path - gpios: palmas: add .get_direction() op - gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe - gpu: host1x: Allow entries in BO caches to be freed - gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path - gpu: host1x: Fix iommu_map_sgtable() return value check - gue: validate REMCSUM private option length - handshake: Require admin permission for DONE command - hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length - hfs/hfsplus: prevent getting negative values of offset/length - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read - HID: add haptics page defines - HID: appleir: fix UAF on pending key_up_timer in remove() - HID: core: Fix OOB read in hid_get_report for numbered reports - HID: letsketch: fix UAF on inrange_timer at driver unbind - HID: lg-g15: cancel pending work on remove to fix a use-after-free - HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter - HID: multitouch: fix out-of-bounds bit access on mt_io_flags - HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() - HID: playstation: validate num_touch_reports in DualShock 4 reports - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads - HID: wacom: stop hardware after post-start probe failures - HID: wiimote: Fix table layout and whitespace errors - hwmon: adm1275: Prevent reading uninitialized stack - hwmon: (asus_atk0110) Check package count before accessing element - hwmon: (it87) Clamp negative values to zero in set_fan() - hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig - hwmon: (occ) unregister sysfs devices outside occ lock - hwmon: (pmbus) Fix passing events to regulator core - hwmon: (w83627hf) remove VID sysfs files on error and remove - hwmon: (w83793) remove vrm sysfs file on probe failure - hwrng: jh7110 - fix refcount leak in starfive_trng_read() - hwrng: virtio: clamp device-reported used.len at copy_data() - hwspinlock: qcom: avoid uninitialized struct members - i2c: core: fix adapter debugfs creation - i2c: core: fix adapter deregistration race - i2c: core: fix adapter registration race - i2c: core: fix hang on adapter registration failure - i2c: core: fix irq domain leak on adapter registration failure - i2c: core: fix NULL-deref on adapter registration failure - i2c: mediatek: fix WRRD for SoCs without auto_restart option - i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() - i2c: mpc: Fix timeout calculations - i2c: stm32f7: truncate clock period instead of rounding it - i3c: master: Prevent reuse of dynamic address on device add failure - i40e: Fix i40e_debug() to use struct i40e_hw argument - ia64: Make acpi_cpufreq_cpu_exit return void - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified - IB/mlx4: Fix refcount leak in add_port() error path - IB/mlx5: Don't take the rereg_mr fallback without a new translation - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier - IB/mlx5: Properly support implicit ODP rereg_mr - ice: fix AQ error code comparison in ice_set_pauseparam() - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() - ice: fix ice_init_link() error return preventing probe - ieee802154: admin-gate legacy LLSEC dump operations - ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation - ieee802154: ca8210: fix cas_ctl leak on spi_async failure - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit - ieee802154: fix kernel-infoleak in dgram_recvmsg() - ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() - iio: accel: bmc150: clamp the device-reported FIFO frame count - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error - iio: accel: mma8452: handle I2C read error(s) in mma8452_read() - iio: adc: lpc32xx: Initialize completion before requesting IRQ - iio: adc: spear: Initialize completion before requesting IRQ - iio: adc: ti-ads124s08: Return reset GPIO lookup errors - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug - iio: common: st_sensors: honour channel endianness in read_axis_data - iio: event: Fix event FIFO reset race - iio: gyro: bmg160: bail out when bandwidth/filter is not in table - iio: gyro: bmg160: wait full startup time after mode change at probe - iio: hid-sensor-rotation: Fix stale or zero output when reading raw values - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ - iio: imu: inv_icm42600: fix timestamp clock period by using lower value - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading - iio: imu: inv_icm42600: stabilized timestamp in interrupt - iio: imu: st_lsm6dsx: deselect shub page before reading whoami - iio: invensense: fix timestamp glitches when switching frequency - iio: invensense: remove redundant initialization of variable period - iio: light: al3010: fix incorrect scale for the highest gain range - iio: light: gp2ap002: fix runtime PM leak on read error - iio: light: opt3001: fix missing state reset on timeout - iio: light: si1133: prevent race condition on timeout - iio: light: si1133: reset counter to prevent race condition - iio: light: tsl2591: return actual error from probe IRQ failure - iio: light: veml6030: fix channel type when pushing events - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call - iio: magnetometer: ak8975: fix potential kernel stack memory leak - iio: pressure: mpl115: fix runtime PM leak on read error - iio: tcs3472: power down chip on probe failure - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check - iio: temperature: ltc2983: Fix reinit_completion() called after conversion start - Input: elan_i2c - prevent division by zero and arithmetic underflow - Input: goodix - clamp the device-reported contact count - Input: iforce - bound the device-reported force-feedback effect index - Input: ims-pcu - add response length checks - Input: ims-pcu - fix DMA mapping violation in line setup - Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging - Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing - Input: ims-pcu - fix race condition in reset_device sysfs callback - Input: ims-pcu - fix type confusion in CDC union descriptor parsing - Input: ims-pcu - fix use-after-free and double-free in disconnect - Input: ims-pcu - release data interface on disconnect - Input: ims-pcu - validate control endpoint type - Input: maplecontrol - set driver data before registering input device - Input: maple_keyb - set driver data before registering input device - Input: maplemouse - fix NULL pointer dereference in open() - Input: maplemouse - set driver data before registering input device - Input: mms114 - fix multi-touch slot corruption - Input: mms114 - fix touch indexing for MMS134S and MMS136 - Input: mms114 - reject an oversized device packet size - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count - Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure - Input: touchwin - reset the packet index on every complete packet - iommu/amd: Fix a stale comment about which legacy mode is user visible - ionic: Fix check in ionic_get_link_ext_stats - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item - ipv4: fib: Don't ignore error route in local/main tables. - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() - ipv4: igmp: remove multicast group from hash table on device destruction - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD - ipv6: fix error handling in disable_ipv6 sysctl - ipv6: fix error handling in disable_policy sysctl - ipv6: fix error handling in forwarding sysctl - ipv6: fix error handling in ignore_routes_with_linkdown sysctl - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). - ipv6: guard against possible NULL deref in __in6_dev_stats_get() - ipv6: mcast: Fix potential UAF in MLD delayed work - ipv6: mcast: Replace locking comments with lockdep annotations. - ipvs: ensure inner headers in ICMP errors are in headroom - ipvs: fix more places with wrong ipv6 transport offsets - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors - ipvs: pass parsed transport offset to state handlers - ipvs: reload ip header after head reallocation - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new - ipvs: use parsed transport offset in SCTP state lookup - ipvs: use parsed transport offset in TCP state lookup - irqchip/crossbar: Fix parent domain resource leak - irqchip/crossbar: Use correct index in crossbar_domain_free() - irqchip/gic-v3-its: Fix OF node reference leak - irqchip/ts4800: Fix missing chained handler cleanup on remove - isofs: bound Rock Ridge symlink components to the SL record - jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() - jiffies: Cast to unsigned long in secs_to_jiffies() conversion - jiffies: Define secs_to_jiffies() - kcm: use WRITE_ONCE() when changing lower socket callbacks - kconfig: fix potential NULL pointer dereference in conf_askvalue - KEYS: Use acquire when reading state in keyring search - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE - ksmbd: centralize ksmbd_conn final release to plug transport leak - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd - ksmbd: fix integer overflow in set_file_allocation_info() - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation - ksmbd: fix use-after-free in same_client_has_lease() - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check - ksmbd: reject undersized DACLs before parsing ACEs - ksmbd: require source read access for duplicate extents - ksmbd: run set info with opener credentials - ksmbd: serialize QUERY_DIRECTORY requests per file - ksmbd: track the connection owning a byte-range lock - ksmbd: use opener credentials for delete-on-close - ksmbd: use opener credentials for FSCTL mutations - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: vgic: Check the interrupt is still ours before migrating it - KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure - KVM: s390: pci: Fix handling of AIF enable without AISB - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode - KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs - leds: uleds: Fix potential buffer overread - libbpf: Fix UAF in strset__add_str() - libbpf: Harden parse_vma_segs() path parsing - libbpf: Report error when a negative kprobe offset is specified - lib/test_meminit: use && for bools - llc: fix SAP refcount leak in llc_ui_autobind() - llc: fix SAP refcount leak when creating incoming sockets - lockd: Plug nlm_file leak when nlm_do_fopen() fails - lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure - LoongArch: Add PIO for early access before ACPI PCI root register - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() - LoongArch: Report dying CPU to RCU in stop_this_cpu() - mac802154: remove interfaces with RCU list deletion - macsec: don't read an unset MAC header in macsec_encrypt() - macsec: fix promiscuity refcount leak in macsec_dev_open() - mailbox: mtk-adsp: fix UAF during device teardown - md/raid10: reset read_slot when reusing r10bio for discard - md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry - media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() - media: cedrus: Fix failure to clean up hardware on probe failure - media: mtk-jpeg: cancel workqueue on release for supported platforms only - media: nxp: imx8-isi: Convert to platform remove callback returning void - media: nxp: imx8-isi: Fix use-after-free on remove - media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code - media: qcom: venus: drop extra padding in NV12 raw size calculation - media: qcom: venus: relax encoder frame/blur dimension steps on v4 - media: qcom: venus: relax encoder frame/blur step size on v6 - media: rockchip: rga: fix too small buffer size - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe - media: uvcvideo: Avoid partial metadata buffers - media: uvcvideo: Fix buffer sequence in frame gaps - media: uvcvideo: Fix sequence number when no EOF - media: v4l2-common: Add YUV24 format info - memstick: ms_block: reject a card that reports too many blocks - mfd: cros_ec: Delay dev_set_drvdata() until probe success - mfd: cs42l43: Sanity check firmware size - mfd: sm501: Fix reference leak on failed device registration - mfd: tps6586x: Fix OF node refcount - minix: avoid overflow in bitmap block count calculation - MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() - MIPS: DEC: Ensure RTC platform device deregistration upon failure - MIPS: DEC: Remove do_IRQ() call indirection - MIPS: Fix big-endian stack argument fetching in o32 wrapper - MIPS: ip22-gio: fix device reference leak in probe - MIPS: ip22-gio: fix gio device memory leak - MIPS: ip22-gio: fix kfree() of static object - MIPS: mm: Fix out-of-bounds write in maar_res_walk() - mips: n64: add __iomem for writel call - mips: ralink: mt7621: add missing __iomem - mips: sched: Fix CPUMASK_OFFSTACK memory corruption - MIPS: smp: report dying CPU to RCU in stop_this_cpu() - mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() - mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() - mmc: vub300: defer reset until cmd_mutex is unlocked - mm/damon/core: make charge_addr_from aware of end-address exclusivity - mm/damon/ops-common: handle extreme intervals in damon_hot_score() - mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() - mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error - mm: do file ownership checks with the proper mount idmap - mm/fake-numa: fix under-allocation detection in uniform split - mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() - mm: shrinker: fix NULL pointer dereference in debugfs - mm: shrinker: remove redundant shrinker_rwsem in debugfs operations - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled - mm/vmscan: flush deferred TLB before freeing large folios - module: decompress: check return value of module_extend_max_pages() - mtd: maps: vmu-flash: fix NULL pointer dereference in initialization - mtd: mchp23k256: use SPI match data for chip caps - mtd: onenand: samsung: report DMA completion timeouts - mtd: rawnand: fix condition in 'nand_select_target()' - mtd: rawnand: fsl_ifc: return errors for failed page reads - mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout - mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout - mtd: rawnand: pl353: fix probe resource allocation - mtd: slram: remove failed entries from the device list - mtd: spi-nor: Drop duplicate Kconfig dependency - mtd: spi-nor: swp: Improve locking user experience - net/9p: fix infinite loop in p9_client_rpc on fatal signal - net/9p: fix race condition on rdma->state in trans_rdma.c - net: add a common function to compute features for upper devices - net: af_key: initialize alg_key_len for IPComp states - net: atm: reject out-of-range traffic classes in QoS validation - net: bcmgenet: Use weighted round-robin TX DMA arbitration - net, bpf: check master for NULL in xdp_master_redirect() - net: Drop the lock in skb_may_tx_timestamp() - net: dsa: sja1105: round up PTP perout pin duration - net: ena: clean up XDP TX queues when regular TX setup fails - net: enetc: check the number of BDs needed for xdp_frame - net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths - net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove - net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp - netfilter: conntrack: revert ct extension genid infrastructure - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump - netfilter: ebtables: module names must be null-terminated - netfilter: ebtables: terminate table name before find_table_lock() - netfilter: ebtables: Use vmalloc_array() to improve code - netfilter: ebtables: zero chainstack array - netfilter: ecache: fix inverted time_after() check - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop - netfilter: ipset: annotate "pos" for concurrent readers/writers - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types - netfilter: ipset: Fix data race between add and dump in all hash types - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() - netfilter: ipset: fix race between dump and ip_set_list resize - netfilter: nf_conncount: callers must hold rcu read lock - netfilter: nf_conncount: fix zone comparison in tuple dedup - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() - netfilter: nf_nat_sip: reload possible stale data pointer - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures - netfilter: nfnl_cthelper: apply per-class values when updating policies - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst - netfilter: nf_reject: skip iphdr options when looking for icmp header - netfilter: nft_compat: ebtables emulation must reject non-bridge targets - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak - netfilter: nft_synproxy: stop bypassing the priv->info snapshot - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock - netfilter: xt_cluster: reject template conntracks in hash match - netfilter: xt_connmark: reject invalid shift parameters - netfilter: xt_nat: reject unsupported target families - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() - netfilter: xt_u32: reject invalid shift counts - net: gianfar: dispose irq mappings on probe failure and device removal - net: ife: require ETH_HLEN to be pullable in ife_decode() - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ipip: require CAP_NET_ADMIN in the device netns for changelink - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes - net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ixp4xx_hss: fix duplicate HDLC netdev allocation - net: lan743x: Initialize eth_syslock spinlock before use - net: liquidio: fix BAR resource leak on PF number failure - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check - net: mana: initialize gdma queue id to INVALID_QUEUE_ID - net: marvell: prestera: initialize err in prestera_port_sfp_bind - net: microchip: vcap: fix races on the shared Super VCAP block - net/mlx5: Check max_macs devlink param value against max capability - net/mlx5e: Fix HV VHCA stats agent registration race - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete - net/mlx5: Fix L3 tunnel entropy refcount leak - net: mvneta: re-enable percpu interrupt on resume - net: openvswitch: reject oversized nested action attrs - net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy - net: psample: fix info leak in PSAMPLE_ATTR_DATA - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() - net: qualcomm: rmnet: validate MAP frame length before ingress parsing - net/sched: act_bpf: use rcu_dereference_bh() to read the filter - net/sched: act_ct: preserve tc_skb_cb across defragmentation - net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload - net/sched: cake: reject overhead values that underflow length - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle - net/sched: cls_bpf: prevent unbounded recursion in offload rollback - net/sched: cls_flow: Dont expose folded kernel pointers - net/sched: hhf: clear heavy-hitter state on reset - net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_drr: annotate data-races around cl->deficit - net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() - net/sched: sch_hfsc: Don't make class passive twice - net/sched: sch_htb: annotate data-races (I) - net/sched: sch_htb: do not change sch->flags in htb_dump() - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants - net: sit: require CAP_NET_ADMIN in the device netns for changelink - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket - net: sparx5: unregister blocking notifier on init failure - net: sungem: fix probe error cleanup - net, team, bonding: Add netdev_base_features helper - net: team: rename team to team_core for linking - net: thunderbolt: Fix frags[] overflow by bounding frame_count - net/tls: Consume empty data records in tls_sw_read_sock() - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() - net: usb: lan78xx: disable VLAN filter in promiscuous mode - net: usb: lan78xx: move functions to avoid forward definitions - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup - net: wwan: iosm: bound device offsets in the MUX downlink decoder - net: wwan: t7xx: check skb_clone in control TX - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure - nfsd: change nfs4_client_to_reclaim() to allocate data - nfsd: Don't reset the write verifier on a commit EAGAIN - nfsd: move name lookup out of nfsd4_list_rec_dir() - nfsd: release layout stid on setlease failure - nfsd: reset write verifier on deferred writeback errors - nfs: keep PG_UPTODATE clear after read errors in page groups - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors - NFSv4/flexfiles: reject zero filehandle version count - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC - NFSv4/pnfs: defer return_range callbacks until after inode unlock - nilfs2: fix backing_dev_info reference leak - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers - NTB: epf: Avoid calling pci_irq_vector() from hardirq context - NTB: epf: Fix doorbell bitmask and IRQ vector handling - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() - NTB: epf: Make db_valid_mask cover only real doorbell bits - NTB: epf: Report 0-based doorbell vector via ntb_db_event() - ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head - ntfs3: cap RESTART_TABLE free-chain walker at rt->used - ntfs3: fix out-of-bounds read in decompress_lznt - ntfs3: validate split-point offset in indx_insert_into_buffer - nvdimm/btt: Free arenas on btt_init() error paths - nvdimm/btt: Free arena sub-allocations on discover_arenas() error path - nvdimm/btt: Handle preemption in BTT lane acquisition - nvme-multipath: fix flex array size in struct nvme_ns_head - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks - nvmet-auth: validate reply message payload bounds against transfer length - nvmet-rdma: handle inline data with a nonzero offset - nvmet: remove superfluous initialization - nvmet: return DHCHAP status codes from nvmet_setup_auth() - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path - nvmet-tcp: Fix potential UAF when ddgst mismatch - ocfs2: add journal NULL check in ocfs2_checkpoint_inode() - ocfs2: avoid moving extents to occupied clusters - ocfs2/dlm: require a ref for locking_state debugfs open - ocfs2: don't BUG_ON an invalid journal dinode - ocfs2: fix buffer head management in ocfs2_read_blocks() - ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write - ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits - ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() - ocfs2: kill osb->system_file_mutex lock - ocfs2: rebase copied fsdlm LVB pointers in locking_state - ocfs2: reject dinodes whose i_rdev disagrees with the file type - ocfs2: reject dinodes with non-canonical i_mode type - ocfs2: reject FITRIM ranges shorter than a cluster - ocfs2: reject non-inline dinodes with i_size and zero i_clusters - ocfs2: use kzalloc for quota recovery bitmap allocation - octeontx2-af: fix VF bringup affecting PF promiscuous state - octeontx2-af: mcs: Fix unsupported secy stats read - octeontx2-pf: check DMAC extraction support before filtering - octeontx2-pf: Clear stats of all resources when freeing resources - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown - octeontx2-pf: mcs: Fix mcs resources free on PF shutdown - of: cpu: add check in __of_find_n_match_cpu_property() - OPP: of: Fix potential memory leak in opp_parse_supplies() - orangefs: keep the readdir entry size 64-bit in fill_from_part() - partitions: aix: bound the pp_count scan to the ppe array - PCI: Add kerneldoc for pci_resize_resource() - PCI: altera: Do not dispose parent IRQ mapping - PCI: altera: Fix resource leaks on probe failure - PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining - PCI/ASPM: Don't reconfigure ASPM entering low-power state - PCI: Check ROM header and data structure addr before accessing - PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() - PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 - PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 - PCI: Fix restoring BARs on BAR resize rollback path - PCI: Free saved list without holding pci_bus_sem - PCI: host-common: Request bus reassignment when not probe-only - PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling - PCI: Introduce named defines for PCI ROM - PCI: iproc: Restore .map_irq() for the platform bus driver - PCI: loongson: Do not ignore downstream devices on external bridges - PCI: mediatek: Convert bool to single quirks entry and bitmap - PCI: mediatek: Fix IRQ domain leak when port fails to enable - PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro - PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() - PCI: mediatek: Use actual physical address instead of virt_to_phys() - PCI: mediatek: Use generic MACRO for TPVPERL delay - PCI: meson: Propagate devm_add_action_or_reset() failure - PCI: Move Resizable BAR code to rebar.c - PCI: Prevent resource tree corruption when BAR resize fails - PCI: rcar-host: Remove unused LIST_HEAD(res) - PCI: Skip Resizable BAR restore on read error - perf/core: Detach event groups during remove_on_exec - perf: Fix dangling cgroup pointer in cpuctx backport - perf: Fix off-by-one stack buffer overflow in kallsyms__parse() - perf trace beauty fcntl: Fix build with older kernel headers - perf/x86/amd/brs: Fix kernel address leakage - perf/x86/amd/core: Always use the NMI latency mitigation - perf/x86/amd/lbr: Fix kernel address leakage - perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() - phy: phy-can-transceiver: Check driver match and driver data against NULL - pinctrl: cs42l43: Fix polarity on debounce - pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: meson: restore non-sleeping GPIO access - pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path - platform/x86/amd/pmc: Add delay_suspend module parameter - platform/x86/amd/pmc: Check for intermediate wakeup in function - platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops - platform/x86: xo15-ebook: Fix wakeup source and GPE handling - pmdomain: imx: Fix i.MX8MP power notifier - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence - PM: sleep: Use complete() in device_pm_sleep_init() - pNFS/filelayout: fix cheking if a layout is striped - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path - posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() - powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus - powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del - powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down - powerpc/pseries: fix memory leak on krealloc failure in papr_init - powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() - power: supply: charger-manager: fix refcount leak in is_full_charged() - power: supply: core: fix supplied_from allocations - power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak - proc: only bump parent nlink when registering directories - proc: protect ptrace_may_access() with exec_update_lock (FD links) - proc: protect ptrace_may_access() with exec_update_lock (part 1) - proc: rename proc_setattr to proc_nochmod_setattr - pwm: imx27: Fix variable truncation in .apply() - qede: fix off-by-one in BD ring consumption on build_skb failure - qede: fix out-of-bounds check for cqe->len_list[] - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup - RDMA/hns: Fix arithmetic overflow in calc_hem_config() - RDMA/hns: Fix warning in poll cq direct mode - RDMA/irdma: Fix OOB read during CQ MR registration - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs - RDMA/irdma: Initialize iwmr->access during MR registration - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference - RDMA/mlx5: Fix undefined shift of user RQ WQE size - RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one - RDMA/mlx5: Remove raw RSS QP restrack tracking - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path - RDMA/rxe: Fix a use-after-free problem in rxe_mmap - RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe - RDMA/siw: bound Read Response placement to the RREAD length - RDMA/srpt: fix integer overflow in immediate data length check - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK - regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions - regulator: ltc3676: Fix incorrect IRQSTAT bit offsets - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() - regulator: scmi: Simplify with scoped for each OF child loop - remoteproc: qcom: Fix leak when custom dump_segments addition fails - reset: sunxi: fix memory region leak on ioremap failure - Revert "crypto: talitos - fix SEC1 32k ahash request limitation" - Revert "crypto: talitos - rename first/last to first_desc/last_desc" - Revert "PCI/MSI: Unmap MSI-X region on error" - Revert "treewide: Fix probing of devices in DT overlays" - ring-buffer: Fix event length with forced 8-byte alignment - riscv: cacheinfo: Fix node reference leak in populate_cache_leaves - riscv: Prevent NULL pointer dereference in machine_kexec_prepare() - riscv: probes: save original sp in rethook trampoline - riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe - rpmsg: use generic driver_override infrastructure - rtc: abx80x: fix the RTC_VL_CLR clearing all status flags - rtc: cmos: unregister HPET IRQ handler on probe failure - rtc: ds1307: Fix off-by-one issue with wday for rx8130 - rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 - rtc: mpfs: fix counter upload completion condition - rtc: msc313: fix NULL deref in shared IRQ handler at probe - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc - s390/monwriter: Reject buffer reuse with different data length - s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() - s390/process: Fix kernel thread function pointer type - s390/zcrypt: Remove the empty file - sched/fair: Fix cpu_util runnable_avg arithmetic - sched/fair: Only update stats for allowed CPUs when looking for dst group - sched: restore timer_slack_ns when resetting RT policy on fork - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT - scsi: elx: efct: Fix I/O leak on unsupported additional CDB - scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() - scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path - scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() - scsi: pm8001: Fix error code in non_fatal_log_show() - scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" - scsi: sas: Skip opt_sectors when DMA reports no real optimization hint - scsi: sg: Report request-table problems when any status is set - scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() - scsi: target: Bound PR-OUT TransportID parsing to the received buffer - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE - scsi: target: Fix hexadecimal CHAP_I handling - scsi: target: Remove tcm_loop target reset handling - scsi: ufs: Fix wrong value printed in unexpected UPIU response case - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it - sctp: fix SCTP_RESET_STREAMS stream list length limit - sctp: hold socket lock when dumping endpoints in sctp_diag - sctp: validate embedded address parameter length - sctp: validate STALE_COOKIE cause length before reading staleness - security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() - seg6: validate SRH length before reading fixed fields - selftests/bpf: Add simple strscpy() implementation - selftests/bpf: Fix bpf_iter/task_vma test - selftests/bpf: Initialize operation name before use - selftests/hid: convert the hid_bpf selftests with struct_ops - selftests/hid: Cover hid_bpf_get_data() size overflow - selftests/hid: do not manually call headers_install - selftests/hid: ensure CKI can compile our new tests on old kernels - selftests/hid: ensure we can compile the tests on kernels pre-6.3 - selftests/hid: force using our compiled libbpf headers - selftests/mm: allow PUD-level entries in compound testcase of hmm tests - selftests/mm: clarify alternate unmapping in compaction_test - selftests/mm: fix exclusive_cow test fork() handling - selftests/net: fix EVP_MD_CTX leak in tcp_mmap - selinux: check connect-related permissions on TCP Fast Open - selinux: fix incorrect execmem checks on overlayfs - seqlock: Change do_task_stat() to use scoped_seqlock_read() - seqlock: fix scoped_seqlock_read kernel-doc - seqlock: Introduce scoped_seqlock_read() - serial: 8250_mid: Disable DMA for selected platforms - serial: 8250_mid: Remove 8250_pci usage - serial: 8250_omap: clear rx_running on zero-length DMA completes - serial: msm: Disable DMA for kernel console UART - slimbus: Convert to platform remove callback returning void - slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership - slimbus: qcom-ngd-ctrl: Fix probe error path ordering - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd - smb/client: always return a value for FS_IOC_GETFLAGS - smb: client: fix change notify replay double-free - smb: client: fix double-free in SMB2_close() replay - smb: client: fix double-free in SMB2_flush() replay - smb: client: fix double-free in SMB2_ioctl() replay - smb: client: fix double-free in SMB2_open() replay - smb/client: Fix error code in smb2_aead_req_alloc() - smb: client: Fix next buffer leak in receive_encrypted_standard() - smb: client: fix overflow in passthrough ioctl bounds check - smb: client: fix query directory replay double-free - smb: client: fix query_info() replay double-free - smb: client: harden POSIX SID length parsing - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() - smb: client: mask server-provided mode to 07777 in modefromsid - smb/client: preserve errors from smb2_set_sparse() - smb: client: reject overlapping data areas in SMB2 responses - smb: client: resolve SWN tcon from live registrations - smb: client: restrict implied bcc[0] exemption to responses without data area - smb: client: use kvzalloc() for megabyte buffer in simple fallocate - smb: client: use unaligned reads in parse_posix_ctxt() - smb: move some duplicate definitions to common/cifsglob.h - smb/server: do not require delete access for non-replacing links - soc: fsl: qe: panic on ioremap() failure in qe_reset() - soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy - sparc: led: avoid trimming a newline from empty writes - spi: dw: fix wrong BAUDR setting after resume - spi: ep93xx: fix double-free of zeropage on DMA setup failure - spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path - spi: hisi-kunpeng: Use dev_err_probe() for host registration failure - spi: meson-spifc: fix runtime PM leak on remove - spi: rpc-if: Use correct device for hardware reinitialization on resume - spi: sh-msiof: abort transfers when reset times out - spi: uniphier: Fix completion initialization order before devm_request_irq() - spi: xilinx: use FIFO occupancy register to determine buffer size - staging: media: atomisp: reduce load_primary_binaries() stack usage - staging: most: video: avoid double free on video register failure - staging: nvec: fix use-after-free in nvec_rx_completed() - staging: rtl8723bs: core: move constants to right side in comparison - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() - staging: rtl8723bs: fix OOB write in HT_caps_handler() - staging: rtl8723bs: fix spaces around binary operators - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() - staging: vme_user: bound slave read/write to the kern_buf size - staging: vme_user: fix location monitor leak in fake bridge - staging: vme_user: fix location monitor leak in tsi148 bridge - SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing - sunrpc: pin svc_xprt across the asynchronous TLS handshake callback - SUNRPC: pin upper rpc_clnt across the TLS connect_worker - SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED - sunrpc: wait for in-flight TLS handshake callback when cancel loses race - sysfs: clamp show() return value in sysfs_kf_read() - tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) - team: fix header_ops type confusion with non-Ethernet ports - thermal: hwmon: Fix critical temperature attribute removal - thermal: intel: Fix dangling resources on thermal_throttle_online() failure - time: Fix off-by-one in compat settimeofday() usec validation - tipc: fix out-of-bounds read in broadcast Gap ACK blocks - tipc: fix UAF in tipc_l2_send_msg() - tipc: fix use-after-free of the discoverer in tipc_disc_rcv() - tipc: prevent snt_unacked underflow on CONN_ACK - tipc: reject inverted service ranges from peer bindings - tipc: require net admin for TIPCv2 netlink mutators - tools lib api: Fix filename__write_int() writing uninitialized stack data - tools lib api: Fix missing null termination in filename__read_int/ull() - tools lib api: Fix mount_overload() snprintf truncation and toupper range - tools/mm/slabinfo: fix total_objects attribute name - tools/mm/slabinfo: Fix trace disable logic inversion - tools/power/x86/intel-speed-select: Harden daemon pidfile open - tools/testing: add linux/args.h header and fix radix, VMA tests - tools/virtio: check mmap return value in vringh_test - tpm: fix event_size output in tpm1_binary_bios_measurements_show - tpm: Make the TPM character devices non-seekable - tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() - tracing: Bound synthetic-field strings with seq_buf - tracing: eprobe: read the complete FILTER_PTR_STRING pointer - tracing/events: Fix to check the simple_tsk_fn creation - tracing/osnoise: Call synchronize_rcu() when unregistering - tracing: Prevent out-of-bounds read in glob matching - tracing/probes: Fix double addition of offset for @+FOFFSET - tracing: probes: fix typo in a log message - treewide: Switch/rename to timer_delete[_sync]() - udf: validate free block extents against the partition length - udf: validate sparing table length as an entry count, not a byte count - udf: validate VAT header length against the VAT inode size - udmabuf: fix DMA direction mismatch in release_udmabuf() - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() - usb: cdc_acm: Add quirk for Uniden BC125AT scanner - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() - USB: chaoskey: Fix slab-use-after-free in chaoskey_release() - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() - usb: dwc3: run gadget disconnect from sleepable suspend context - usb: free iso schedules on failed submit - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler - usb: gadget: f_fs: initialize reset_work at allocation time - usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile - usb: gadget: f_printer: take kref only for successful open - usb: gadget: function: rndis: add length check for header - usb: gadget: function: rndis: add length check to response query - usb: gadget: udc: Fix use-after-free in gadget_match_driver - usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() - usb: host: max3421: Reject hub port requests for non-existent ports - USB: idmouse: fix use-after-free on disconnect race - USB: iowarrior: fix use-after-free on disconnect - usb: iowarrior: remove inherent race with minor number - usbip: tools: support SuperSpeedPlus devices - usbip: vudc: fix NULL deref in vep_dequeue() - USB: ldusb: fix use-after-free on disconnect race - USB: legousbtower: fix use-after-free on disconnect race - USB: misc: uss720: unregister parport on probe failure - usb: mtu3: unmap request DMA on queue failure - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD - USB: serial: digi_acceleport: fix broken rx after throttle - USB: serial: digi_acceleport: fix hard lockup on disconnect - USB: serial: digi_acceleport: fix write buffer corruption - USB: serial: keyspan_pda: fix information leak - USB: serial: option: add Telit Cinterion FE990D50 compositions - usb: sl811-hcd: disable controller wakeup on remove - USB: storage: include US_FL_NO_SAME in quirks mask - usb: typec: anx7411: use devm_pm_runtime_enable() - usb: typec: class: drop PD lookup reference - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres - usb: typec: tcpm: Fix VDM type for Enter Mode commands - usb: typec: tcpm: Validate SVID index in svdm_consume_modes() - usb: typec: ucsi: cancel pending work on system suspend - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove - usb: typec: ucsi: Invert DisplayPort role assignment - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode - USB: ulpi: fix memory leak on registration failure - USB: usb-storage: ene_ub6250: restore media-ready check - usb: xhci: Fix sleep in atomic context in xhci_free_streams() - userfaultfd: gate must_wait writability check on pte_present() - vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter - vduse: hold vduse_lock across IDR lookup in open path - vduse: Requeue failed read to send_list head - veth: fix NAPI leak in XDP enable error path - vfio/mlx5: Fix racy bitfields and tighten struct layout - vfio/pci: Fix racy bitfields and tighten struct layout - vfio/pci: Latch disable_idle_d3 per device - vfio/pci: Release the VGA arbiter client on register_device() failure - vfio/pci: Use a private flag to prevent power state change with VFs - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc - vhost/net: complete zerocopy ubufs only once - vhost/vdpa: validate virtqueue index in mmap and fault paths - virtio-mmio: fix device release warning on module unload - virtio_net: disable cb when NAPI is busy-polled - virtio-net: fix len check in receive_big() - virtio_net: Support dynamic rss indirection table size - vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() - vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). - watchdog: apple: Add "apple,t8103-wdt" compatible - watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 - watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH - watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure - watchdog: unregister PM notifier on watchdog unregister - wifi: ath9k: fix OOB access from firmware tx status queue ID - wifi: cfg80211: fix grammar in MLO group key error message - wifi: mac80211: fix memory leak in ieee80211_register_hw() - wifi: mac80211: free ack status frame on TX header build failure - wifi: mt76: fix argument to ieee80211_is_first_frag() - wifi: mt76: mt7915: fix potential tx_retries underflow - wifi: mt76: mt7921: fix potential tx_retries underflow - wifi: mwifiex: fix permanently busy scans after multiple roam iterations - wifi: rt2x00: avoid full teardown before work setup in probe - wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer - wifi: rtw89: Correct data type for scan index to avoid infinite loop - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response - wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication - wifi: wcn36xx: fix OOB read from short trigger BA firmware response - workqueue: drop spurious '*' from print_worker_info() fn declaration - writeback: Avoid contention on wb->list_lock when switching inodes - writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() - writeback: Fix use after free in inode_switch_wbs_work_fn() - X.509: Fix validation of ASN.1 certificate header - x86/boot: Reject too long acpi_rsdp= values - x86/boot: Validate console=uart8250 baud rate to fix early boot hang - x86/bugs: Enable IBPB flush on BPF JIT allocation - x86/mm: Fix check/use ordering in switch_mm_irqs_off() - x86/platform/olpc: xo15: Drop wakeup source on driver removal - xen/gntdev: fix error handling in ioctl - xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] - xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path - xfrm: use compat translator only for u64 alignment mismatch - xfrm: Use the XFRM_GRO to indicate a GRO call on input - xfrm: validate selector family and prefixlen during match - xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink - xfs: dump the recovered xattri log item if corruption happens - xfs: fail recovery on a committed log item with no regions - xfs: fix stupid compiler warning - xfs: fix unreachable BIGTIME check in dquot flush validation - xfs: move ->iop_recover to xfs_defer_op_type - xfs: recreate work items when recovering intent items - xfs: resample the data fork mapping after cycling ILOCK - xfs: use null daddr for unset first bad log block - xfs: use xfs_defer_finish_one to finish recovered work items - xprtrdma: Avoid 250 ms delay on backlog wakeup - xprtrdma: Check frwr_wp_create() during connect - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot - xprtrdma: Decouple req recycling from RPC completion - xprtrdma: Document and assert reply-handler invariants - xprtrdma: Fix bcall rep leak and unbounded peek - xprtrdma: Post receive buffers after RPC completion - xprtrdma: Remove temp allocation of rpcrdma_rep objects - xprtrdma: Repost Receive buffers for malformed replies - xprtrdma: Resize reply buffers before reposting receives - xprtrdma: Return sendctx slot after Send preparation failure - xprtrdma: Sanitize the reply credit grant after parsing - xprtrdma: Use sendctx DMA state for Send signaling - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Remove rudiment CVE patches- [bot] upd: 6.6.126 -> 6.6.144 - Changelog: - 6lowpan: fix off-by-one in multicast context address compression - 6pack: propagage new tty types - 9p: avoid putting oldfid in p9_client_walk() error path - accel/qaic: Add overflow check to remap_pfn_range during mmap - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: AGDI: fix missing newline in error message - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - af_key: validate families in pfkey_send_migrate() - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() - af_unix: Give up GC if MSG_PEEK intervened. - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - af_unix: Set gc_in_progress to true in unix_gc(). - agp/amd64: Fix broken error propagation in agp_amd64_probe() - alarmtimer: Fix argument order in alarm_timer_forward() - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: asihpi: Fix potential OOB array access at reading cache - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-motu: Protect register DSP event queue positions - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: fix some typos - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda: cs35l56: Put ACPI device after setting companion - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: misc: Use guard() for spin locks - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: Don't setup bogus iov_iter for silencing - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: sc6000: Use standard print API - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: seq: Serialize UMP output teardown with event_input - ALSA: seq: ump: Use guard() for locking - ALSA: timer: Fix UAF at snd_timer_user_params() - ALSA: ua101: Reject too-short USB descriptors - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ensure that won't go past CPER allocated record - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: fix use-after-free in rawdata dedup loop - apparmor: make label_match return a consistent value - apparmor: mediate the implicit connect of TCP fast open sendmsg - apparmor: provide separate audit messages for file and policy checks - apparmor: refcount the pdb - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use passed in gfp flags in aa_alloc_null() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: cputype: Add C1-Premium definitions - arm64: cputype: Add C1-Ultra definitions - arm64: cputype: Add NVIDIA Olympus definitions - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU - arm64: errata: Mitigate TLBI errata on various Arm CPUs - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: io: Extract user memory type in ioremap_prot() - arm64: io: Rename ioremap_prot() to __ioremap_prot() - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64: mm: Batch dsb and isb when populating pgtables - arm64: mm: Don't remap pgtables for allocate vs populate - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: probes: Handle probes on hinted conditional branch instructions - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 - arm64/scs: Fix handling of advance_loc4 - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - arm64: tlb: Allow XZR argument to TLBI ops - arm64: tlb: Flush walk cache when unsharing PMD tables - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI - arm64/xor: fix conflicting attributes for xor_block_template - ARM: 9467/1: mm: Don't use %pK through printk - ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O - ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow - ARM: allow __do_kernel_fault() to report execution of memory faults - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: fix branch predictor hardening - ARM: fix hash_name() fault - ARM: group is_permission_fault() with is_translation_fault() - ARM: integrator: Fix early initialization - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: socfpga: Fix OF node refcount leak in SMP setup - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: codecs: ab8500: Fix casting of private data - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: codecs: simple-mux: Fix enum control bounds check - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: q6asm-dai: close stream only when running - ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks - ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio - ASoC: SOF: Intel: hda-dai: remove dspless special case - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata-scsi: refactor ata_scsi_translate() - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - auxdisplay: line-display: fix OOB read on zero-length message_store() - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE - batman-adv: bla: avoid double decrement of bla.num_requests - batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface - batman-adv: bla: fix report_work leak on backbone_gw purge - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: clear current gateway during teardown - batman-adv: dat: handle forward allocation error - batman-adv: dat: prevent false sharing between VLANs - batman-adv: ensure bcast is writable before modifying TTL - batman-adv: fix fragment reassembly length accounting - batman-adv: fix integer overflow on buff_pos - batman-adv: fix (m|b)cast csum after decrementing TTL - batman-adv: fix tp_meter counter underflow during shutdown - batman-adv: frag: avoid underflow of TTL - batman-adv: frag: disallow unicast fragment in fragment - batman-adv: frag: ensure fragment is writable before modifying TTL - batman-adv: hold claim backbone gateways by reference - batman-adv: iv: recover OGM scheduling after forward packet error - batman-adv: mcast: fix use-after-free in orig_node RCU release - batman-adv: prevent ELP transmission interval underflow - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: add only finished tp_vars to lists - batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE - batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd - batman-adv: tp_meter: avoid role confusion in tp_list - batman-adv: tp_meter: avoid use of uninit sender vars - batman-adv: tp_meter: avoid window underflow - batman-adv: tp_meter: directly shut down timer on cleanup - batman-adv: tp_meter: fix fast recovery precondition - batman-adv: tp_meter: fix race condition in send error reporting - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown - batman-adv: tp_meter: handle overlapping packets - batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection - batman-adv: tp_meter: initialize dec_cwnd explicitly - batman-adv: tp_meter: initialize dup_acks explicitly - batman-adv: tp_meter: initialize last_recv_time during init - batman-adv: tp_meter: keep unacked list in ascending ordered - batman-adv: tp_meter: prevent parallel modifications of last_recv - batman-adv: tp_meter: restrict number of unacked list entries - batman-adv: tt: avoid empty VLAN responses - batman-adv: tt: don't merge change entries with different VIDs - batman-adv: tt: fix negative last_changeset_len - batman-adv: tt: fix negative tt_buff_len - batman-adv: tt: fix TOCTOU race for reported vlans - batman-adv: tt: prevent TVLV entry number overflow - batman-adv: tt: reject oversized local TVLV buffers - batman-adv: tt: track roam count per VID - batman-adv: tvlv: abort OGM send on tvlv append failure - batman-adv: tvlv: avoid race of cifsnotfound handler state - batman-adv: tvlv: enforce 2-byte alignment - batman-adv: tvlv: reject oversized TVLV packets - batman-adv: v: prevent OGM aggregation on disabled hardif - batman-adv: v: stop OGMv2 on disabled interface - bcache: fix cached_dev.sb_bio use-after-free and crash - bcache: fix uninitialized closure object - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: fix UAF in __blkcg_rstat_flush() - blk-cgroup: wait for blkcg cleanup before initializing new disk - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blktrace: fix __this_cpu_read/write in preemptible context - block: add pgmap check to biovec_phys_mergeable - block: relax pgmap check in bio_add_page for compatible zone device pages - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling - Bluetooth: bnep: Fix UAF read of dev->name - Bluetooth: bnep: reject short frames before parsing - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: btmtk: add the function to get the fw name - Bluetooth: btmtk: fix urb->setup_packet leak in error paths - Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c - Bluetooth: btmtk: rename btmediatek_data - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Allow firmware re-download when version matches - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: fix memory leak in error path of hci_alloc_dev() - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_qca: Convert timeout from jiffies to ms - Bluetooth: hci_qca: Migrate to serdev specific shutdown function - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend - Bluetooth: hci_sync: Remove remaining dependencies of hci_request - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths - Bluetooth: HIDP: fix missing length checks in hidp_input_report() - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: ISO: fix UAF in iso_recv_frame - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix backward compatibility with userspace - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: MGMT: validate Add Extended Advertising Data length - Bluetooth: MGMT: validate advertising TLV before type checks - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: Remove 3 repeated macro definitions - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() - Bluetooth: RFCOMM: validate skb length in MCC handlers - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: serialize accept_q access - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Fix NULL pointer dereference - bonding: 3ad: implement proper RCU rules for port->aggregator - bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner - bonding: add support for per-port LACP actor priority - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: fix NULL pointer dereference in actor_port_prio setting - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: print churn state via netlink - bonding: refuse to enslave CAN devices - bpf: Add CHECKSUM_COMPLETE to bpf test progs - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf, devmap: Remove unnecessary if check in for loop - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: export bpf_link_inc_not_zero. - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Forget ranges when refining tnum after JSET - bpf: Free reuseport cBPF prog after RCU grace period. - bpf: handle fake register spill to stack with BPF_ST_MEM instruction - bpf: preserve constant zero when doing partial register restore - bpf: preserve STACK_ZERO slots on partial reg spills - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Reject sleepable kprobe_multi programs at attach time - bpf: Release module BTF IDR before module unload - bpf: Remove mark_precise_scalar_ids() - bpf, skmsg: fix verdict sk_data_ready racing with ktls rx - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: fix tail fragment offset in bpf_msg_push_data - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpf, sockmap: Take state lock for af_unix iter - bpf: support non-r10 register spill/fill to/from stack in precision tracking - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpftool: Fix truncated netlink dumps - bpf: track aligned STACK_ZERO cases as imprecise spilled registers - bpf: Track equal scalars history on per-instruction level - bpf: use kvfree() for replaced sysctl write buffer - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: mcast: Fix a possible use-after-free when removing a bridge port - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: add raid stripe tree definitions - btrfs: add support for inserting raid stripe extents - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() - btrfs: move btrfs_crc32c_final into free-space-cache.c - btrfs: move btrfs_extref_hash into inode-item.h - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: read raid stripe tree from disk - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove btrfs_crc32c wrapper - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: omap-ocp2scp: Convert to platform remove callback returning void - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more) - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: enforce cache groups - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Reset DL migration state on can_attach() failure - cgroup: fix race between task migration and iteration - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix busy dentry used after unmounting - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: qoriq: avoid format string warning - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() - comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: Fix refcount leak in counter_alloc() error path - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: menu: Cleanup after loadavg removal - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - cpuset: Fix missing adaptation for cpuset_is_populated - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel - Remove cfb and ofb - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-tdes - fix DMA sync direction - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - copy IV using skcipher ivsize - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - Move direct access to some PSP registers out of TEE - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - modifying the order of header files - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: hisilicon/zip - remove zlib and gzip - crypto: hisilicon/zip - support deflate algorithm - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: nx - Avoid -Wflex-array-member-not-at-end warning - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - fix context leak in nx842_crypto_free_ctx - crypto: nx - Migrate to scomp API - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: qat - remove unused character device and IOCTLs - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() - crypto: qat - Return pointer directly in adf_ctl_alloc_resources - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: scatterwalk - Backport memcpy_sglist() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: testmgr - Hide ENOENT errors - crypto: testmgr - Hide ENOENT errors better - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - dcache: Limit the minimal number of bucket to two - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING - debugobjects: Do not fill_pool() if pi_blocked_on - debugobjects: Dont call fill_pool() in early boot hardirq context - debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - device property: set fwnode->secondary to NULL in fwnode_init() - dev_printk: add new dev_err_probe() helpers - devres: fix missing node debug info in devm_krealloc() - Disable -Wattribute-alias for clang-23 and newer - dlm: prevent NPD when writing a positive value to event_done - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate() - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: fsl-edma-main: Convert to platform remove callback returning void - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add missing `inline` for `dma_free_attrs` - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: check allocation under invalidate lock - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm init: ensure device probing has finished in dm-mod.waitfor= - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm log: fix out-of-bounds write due to region_count overflow - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: fix a hugetlbfs reservation statement - Documentation: ioctl-number: Extend "Include File" column width - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - Documentation: tracing: Add ring-buffer mapping - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - dpaa2-switch: do not clear any interrupts automatically - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: Balance RCU calls in drbd_adm_dump_devices() - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - driver core: reject devices with unregistered buses - drivers/base/memory: fix memory block reference leak in poison accounting - drivers/base/memory: set mem->altmap after successful device registration - Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: Bound VBIOS record-chain walk loops - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix integer overflow in bios_get_image() - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use krealloc_array() in dal_vector_reserve() - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Validate GPIO pin LUT table size before iterating - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop special case for yellow carp without discovery - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix spelling typos - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu: restart the CS if some parts of the VM are still invalidated - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Check for pdd drm file first in CRIU restore path - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 - drm/amdkfd: fix debug watchpoints for logical devices - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: fix NULL dereference in get_queue_ids() - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/si: Disregard vblank time when no displays are connected - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe - drm/bridge: it66121: acquire reset GPIO in probe - drm/bridge: megachips: remove bridge when irq request fails - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/display/dp_mst: Add protection against 0 vcpi - drm/dp: Add eDP 1.5 bit definition - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/hyperv: validate resolution_count and fix WIN8 fallback - drm/hyperv: validate VMBus packet size in receive callback - drm/i915/acpi: free _DSM package when no connectors - drm/i915: Constify watermark state checker - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update() - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915: Fix potential UAF in TTM object purge - drm/i915/gem: Fix phys BO pread/pwrite with offset - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915: Loop over all active pipes in intel_mbus_dbox_update - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Read Intel DPCD workaround register - drm/i915: Simplify watermark state checker calling convention - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/i915/wm: Verify the correct plane DDB entry - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations - drm/msm/dsi: don't dump registers past the mapped region - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm: Fix dma_free_attrs() buffer size - drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN - drm/msm/shrinker: Fix can_block() logic - drm/msm/snapshot: fix dumping of the unaligned regions - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm: Remove plane hsub/vsub alignment requirement for core helpers - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/ssd130x: Replace .page_height field in device info with a constant - drm/ssd130x: Store the HW buffer in the driver-private CRTC state - drm/ssd130x: Use bool for ssd130x_deviceinfo flags - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/tegra: dsi: fix device leak on probe - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/v3d: Set DMA segment size to avoid debug warnings - drm/v3d: Skip CSD when it has zeroed workgroups - drm/v3d: Store the active job inside the queue's state - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: fix krealloc() memory leak - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() - drm/virtio: Fix driver removal with disabled KMS - drm/virtio: use uninterruptible resv lock for plane updates - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - dt-bindings: net: Fix Tegra234 MGBE PTP clock - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - e1000e: Unroll PTP in probe error handling - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - efi: Allocate runtime workqueue before ACPI init - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix "BUG: Bad page state in z_erofs_do_read_page" - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - err.h: use __always_inline on all error pointer helpers - esp: fix skb leak with espintcp and async crypto - eth: bnxt: always recalculate features after XDP clearing, fix null-deref - ethtool: eeprom: add missing ethnl_ops_begin() / _complete() during fallback - ethtool: eeprom: add more safeties to EEPROM Netlink fallback - ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() - eventpoll: fix ep_remove struct eventpoll / struct file UAF - eventpoll: Fix integer overflow in ep_loop_check_proc() - eventpoll: kill __ep_remove() - eventpoll: move epi_fget() up - eventpoll: rename ep_remove_safe() back to ep_remove() - eventpoll: split __ep_remove() - eventpoll: use hlist_is_singular_node() in __ep_remove() - exfat: fix potential use-after-free in exfat_find_dir_entry() - exit: prevent preemption of oopsing TASK_DEAD task - exit: Sleep at TASK_IDLE when waiting for application core dump - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert bd_bitmap_page to bd_bitmap_folio - ext4: convert bd_buddy_page to bd_buddy_folio - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() - ext4: get rid of ppath in ext4_ext_convert_to_initialized() - ext4: get rid of ppath in ext4_ext_create_new_leaf() - ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() - ext4: get rid of ppath in ext4_ext_insert_extent() - ext4: get rid of ppath in ext4_find_extent() - ext4: get rid of ppath in ext4_split_convert_extents() - ext4: get rid of ppath in ext4_split_extent() - ext4: get rid of ppath in ext4_split_extent_at() - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: publish jinode after initialization - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix to round down start offset of fallocate for pin file - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - f2fs: fix zoned block device information initialization - f2fs: keep atomic write retry from zeroing original data - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - f2fs: Use sysfs_emit_at() to simplify code - f2fs: validate ACL entry sizes in f2fs_acl_from_disk() - f2fs: validate compress cache inode only when enabled - f2fs: zone: fix to avoid inconsistence in between SIT and SSA - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var - fbdev: fix use-after-free in store_modes() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: modedb: fix a possible UAF in fb_find_mode() - fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: offb: fix PCI device reference leak on probe failure - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros - file: add fput() cleanup helper - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: dmi: Correct an indexing error in dmi.h - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fork: defer linking file vma until vma is fully initialized - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fpga: region: fix use-after-free in child_regions_with_firmware() - fs: add for 'init_fs' - fs/adfs: validate nzones in adfs_validate_bblk() - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/ntfs3: validate rec->used in journal-replay file record check - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - ftrace: Check against is_kernel_text() instead of kaslr_offset() - ftrace: Do not over-allocate ftrace memory - ftrace: Have ftrace pages output reflect freed pages - ftrace: Test mcount_loc addr before calling ftrace_call_addr() - ftrace: Update the mcount_loc check of skipped entries - fuse: Check for large folio with SPLICE_F_MOVE - fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject fuse_notify() pagecache ops on directories - fuse: reject oversized dirents in page cache - fuse: re-lock request before replacing page cache folio - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - genetlink: Use internal flags for multicast groups - gfs2: Add metapath_dibh helper - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: fiemap page fault fix - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: fix use-after-free in gfs2_qd_dealloc - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Improve gfs2_consist_inode() usage - gfs2: prevent NULL pointer dereference during unmount - gfs2: Retries missing in gfs2_{rename,exchange} - gfs2: Validate i_depth for exhash directories - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpio: cdev: check if uAPI v2 config attributes are correctly zeroed - gpiolib: acpi: Fix gpio count with string references - gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) - gpio: mvebu: fix NULL pointer dereference in suspend/resume - gpio: mxc: fix irq_high handling - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: rockchip: convert bank->clk to devm_clk_get_enabled() - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: tegra: fix irq_release_resources calling enable instead of disable - gro: change the BUG_ON() in gro_pull_from_frag0() - gve: defer interrupt enabling until NAPI registration - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hdlc_ppp: sync per-proto timers before freeing hdlc state - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: core: Fix size_t specifier in hid_report_raw_event() - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: Check to ensure report responses match the request - HID: pass the buffer size to hid_report_raw_event - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: quirks: really enable the intended work around for appledisplay - HID: roccat: fix use-after-free in roccat_report_event - HID: uclogic: Fix regression of input name assignment - HID: usbhid: fix deadlock in hid_post_reset() - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hpfs: fix a crash if hpfs_map_dnode_bitmap fails - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Fix trace oddity - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hsr: Remove WARN_ONCE() in hsr_addr_is_self(). - hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf - hv_sock: fix ARM64 support - hv: utils: handle and propagate errors in kvp_register - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: (axi-fan-control) Make use of dev_err_probe() - hwmon: (axi-fan-control) Use device firmware agnostic API - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer - hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR - hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple - hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer - hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() - hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() - hwmon: (pmbus/adm1266) reject implausible blackbox record_count - hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors - hwmon: (pmbus/adm1266) seed timestamp from the real-time clock - hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock - hwmon: (pmbus/adm1266) serialize NVMEM blackbox read with pmbus_lock - hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: cp2615: replace deprecated strncpy with strscpy - i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: stm32f7: fix timing computation ignoring i2c-analog-filter - i2c: stub: Reject I2C block transfers with invalid length - i2c: tegra: Don't mark devices with pins as IRQ safe - i2c: tegra: Fix NOIRQ suspend/resume - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: fix VLAN filter lost on add/delete race - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix double-free of tx_buf skb - ice: fix locking in ice_dcb_rebuild() - ice: Fix memory leak in ice_set_ringparam() - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix retry for AQ command 0x06EE - ice: fix setting promisc mode while adding VID filter - ice: fix VF queue configuration with low MTU values - ice: reintroduce retry mechanism for indirect AQ - ice: Remove jumbo_remove step from TX path - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: icmp_msgs_per_sec and icmp_msgs_burst sysctls become per netns - icmp: move icmp_global.credit and icmp_global.stamp to per netns storage - icmp: prevent possible overflow in icmp_global_allow() - ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() - igc: fix missing update of skb->tail in igc_xmit_frame() - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: npcm: Convert to platform remove callback returning void - iio: adc: npcm: fix unbalanced clk_disable_unprepare() - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw - iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux - iio: buffer: Fix wait_queue not being removed - iio: buffer: hw-consumer: fix use-after-free in error path - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: scd30: fix division by zero in write_raw - iio: chemical: scd30: Use guard(mutex) to allow early returns - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: common: st_sensors: Fix use of uninitialize device structs - iio: dac: ad5686: acquire lock when doing powerdown control - iio: dac: ad5686: fix input raw value check - iio: dac: ad5686: fix ref bit initialization for single-channel parts - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: dac: max5821: fix return value check in powerdown sync - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: gyro: adis16260: fix division by zero in write_raw - iio: gyro: itg3200: fix i2c read into the wrong stack location - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: bh1780: fix PM runtime leak on error path - iio: light: cm3323: fix reg_conf not being initialized correctly - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix scan_type struct - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: ssp_sensors: cancel delayed work_refresh on remove - iio: temperature: tsys01: fix broken PROM checksum validation - iio: Use IRQF_NO_THREAD - ima: check return value of crypto_shash_final() in boot aggregate - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: add indirect call wrapper for getfrag() calls - inet: frags: add inet_frag_queue_flush() - inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush - inet: frags: flush pending skbs in fqdir_pre_exit() - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) - Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard - Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem - Input: elan_i2c - validate firmware size before use - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() - Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size - Input: xpad - add "Nova 2 Lite" from GameSir - Input: xpad - add support for ASUS ROG RAIKIRI II - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - Input: xpad - fix out-of-bounds access for Share button - iomap: allocate s_dio_done_wq for async reads as well - iomap: don't revert iov_iter on partially completed buffered writes - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommu, debugobjects: avoid gcc-16.1 section mismatch warnings - iommufd: Fix a race with concurrent allocation and unmap - iommufd: vfio compatibility extension check for noiommu mode - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() - ip6_vti: set netns_immutable on the fallback device. - ip6: vti: Use ip6_tnl.net in vti6_changelink(). - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). - ipc: don't audit capability check in ipc_permissions() - ipc: limit next_id allocation to the valid ID range - ipc/shm: serialize orphan cleanup with shm_nattch updates - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipmi:ssif: Clean up kthread on errors - ipmi:ssif: Fix a shutdown race - ipmi:ssif: NULL thread on error - ipmi:ssif: Remove unnecessary indention - ipv4: account for fraggap on the paged allocation path - ipv4: add new arguments to udp_tunnel_dst_lookup() - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 - ipv4: remove "proto" argument from udp_tunnel_dst_lookup() - ipv4: rename and move ip_route_output_tunnel() - ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options - ipv6: account for fraggap on the paged allocation path - ipv6: add NULL checks for idev in SRv6 paths - ipv6/addrconf: annotate data-races around devconf fields (II) - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: exthdrs: refresh nh after handling HAO option - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() - ipv6: Fix a potential NPD in cleanup_prefix_route() - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: fix possible infinite loop in fib6_select_path() - ipv6: fix possible infinite loop in rt6_fill_node() - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: mcast: Fix use-after-free when processing MLD queries - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rename and move ip6_dst_lookup_tunnel() - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: sit: reload inner IPv6 header after GSO offloads - ipv6: use RCU in ip6_xmit() - ipv6: validate extension header length before copying to cmsg - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: clear the svc scheduler ptr early on edit - ipvs: fix MTU check for GSO packets in tunnel mode - ipvs: fix NULL deref in ip_vs_add_service error path - ipvs: skip ipv6 extension headers for csum checks - irqchip/ath79-cpu: Remove unused function - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - ixgbevf: fix use-after-free in VEPA multicast source pruning - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Leave objtool binary around with 'make clean' - kexec: derive purgatory entry from symbol - KEYS: fix overflow in keyctl_pkey_params_get_2() - keys: Pin request_key_auth payload in instantiate paths - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() - ksmbd: add durable scavenger timer - ksmbd: add support for supplementary groups - ksmbd: avoid reclaiming expired durable opens by the client - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: close durable scavenger races against m_fp_list lookups - ksmbd: Compare MACs in constant time - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers - ksmbd: fix null pointer dereference in compare_guid_key() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds read in smb_check_perm_dacl() - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops - ksmbd: reject non-VALID session in compound request branch - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: scope conn->binding slowpath to bound sessions only - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate owner of durable handle on reconnect - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Fix the month in the name of the failure directory - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - kunit: config: Enable KUNIT_DEBUGFS by default - kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: PMU: Preserve AArch32 counter low bits - KVM: arm64: Remove VPIPT I-cache handling - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Fold requested virtual interrupt check into has_nested_events() - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path - KVM: SVM: Flush the current TLB when transitioning from xAVIC => x2AVIC - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: VMX: Update SVI during runtime APICv activation - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: Fix KVM_GET_MSRS stack info leak - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Fix shadow paging use-after-free due to unexpected role - KVM: x86: Fix Xen hypercall tracepoint argument assignment - KVM: x86: hyper-v: Bound the bank index when querying sparse banks - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - l2tp: do not use sock_hold() in pppol2tp_session_get_sock() - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - leds: lgm-sso: Remove duplicate assignments for priv->mmap - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libbpf: Fix -Wdiscarded-qualifiers under C23 - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: handle rbtree insertion error in decode_choose_args() - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - locking: Fix rwlock support in - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Add WriteCombine shadow mapping in KASAN - LoongArch: Add writecombine support for DMW-based ioremap() - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: kprobes: Fix handling of fatal unrecoverable recursions - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove unused code to avoid build warning - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - loop: fix partition scan race between udev and loop_reread_partitions() - lsm: add backing_file LSM hooks - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac802154: llsec: add skb_cow_data() before in-place crypto - macsec: fix replay protection at XPN lower-PN wrap - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: add sanity check for channel array - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mailbox: Use of_property_match_string() instead of open-coding - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix data lost for writemostly rdev - md/raid1,raid10: don't ignore IO flags - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: fix race between unregister and urb/irq callbacks - media: rc: igorplugusb: fix control request setup packet - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: fix inverted error logic - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: tegra-video: Use accessors for pad config 'try_*' fields - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si - media: vidtv: fix pass-by-value structs causing MSAN warnings - memfd: deny writeable mappings when implying SEAL_WRITE - memory: mtk-smi: Convert to platform remove callback returning void - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - mfd: omap-usb-host: Convert to platform remove callback returning void - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Convert to platform remove callback returning void - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: fix DMA address corruption due to find_vma misuse - misc: fastrpc: Fix NULL pointer dereference in rpmsg callback - misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context - misc: fastrpc: fix use-after-free race in fastrpc_map_create - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Fix host controller programming for fixed driver type - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: litex_mmc: Set mandatory idle clocks before CMD0 - mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: add signal voltage switch in sdhci_resume_host - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/ops-common: call folio_test_lru() after folio_get() - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() - mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/huge_memory: update file PMD counter before folio_put() - mm/hugetlb: avoid false positive lockdep assertion - mm/hugetlb_cma: round up per_node before logging it - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm/hugetlb: rename folio_putback_active_hugetlb() to folio_putback_hugetlb() - mm/hugetlb: rename isolate_hugetlb() to folio_isolate_hugetlb() - mm/hugetlb: restore reservation on error in hugetlb folio copy paths - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory: fix spurious warning when unmapping device-private/exclusive pages - mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node() - mm/migrate: don't call folio_putback_active_hugetlb() on dst hugetlb folio - mm/page_alloc: clear page->private in free_pages_prepare() - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/tracing: rss_stat: ensure curr is false from kthread context - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - module: Fix kernel panic when a symbol st_shndx is out of bounds - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: add-addr: always drop other suboptions - mptcp: allow subflow rcv wnd to shrink - mptcp: cleanup fallback dummy mapping generation - mptcp: close TOCTOU race while computing rcv_wnd - mptcp: do not drop partial packets - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix missing wakeups in edge scenarios - mptcp: fix receive space timestamp initialization - mptcp: fix retransmission loop when csum is enabled - mptcp: fix rx timestamp corruption on fastopen - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: handle first subflow closing consistently - mptcp: introduce the mptcp_init_skb helper - mptcp: pm: ADD_ADDR rtx: allow ID 0 - mptcp: pm: ADD_ADDR rtx: always decrease sk refcount - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: free sk if last - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient - mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mptcp: reset rcv wnd on disconnect - mptcp: sockopt: check timestamping ret value - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: sync the msk->sndbuf at accept() time - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mptcp: use plain bool instead of custom binary enum - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: Convert to platform remove callback returning void - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spinand: Fix kernel doc - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()` - mtd: spi-nor: sst: Fix SST write failure - mtd: spi-nor: sst: Fix write enable before AAI sequence - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - myri10ge: avoid uninitialized variable use - neighbour: add RCU protection to neigh_tables[] - neigh: let neigh_xmit take skb ownership - net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add support for segmenting TCP fraglist GSO packets - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: ag71xx: check error for platform_get_irq - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: Annotate sk->sk_write_space() for UDP SOCKMAP. - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: increase WoL poll timeout - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: keep RBUF EEE/PM disabled - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: Remove custom ndo_poll_controller() - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net: bonding: add broadcast_neighbor option for 802.3ad - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix NULL pointer dereference in bond_do_ioctl() - net: bonding: fix use-after-free in bond_xmit_broadcast() - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: Flush multicast groups when snooping is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - netconsole: propagate device name truncation in dev_name_store() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix potential unregister of netdev that has not been registered yet - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: mt7530: fix FDB entries not aging out with short timeout - net: dsa: mt7530: preserve VLAN tags on trapped link-local frames - net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw - net: dsa: properly keep track of conduit reference - net: dsa: realtek: rtl8365mb: fix mode mask calculation - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: cortina: Carry over frag counter - net: ethernet: cortina: Drop half-assembled SKB - net: ethernet: cortina: Make RX SKB per-port - net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix pinctrl default state restore order on resume - net: fec: fix the PTP periodic output sysfs interface - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: bitwise: add support for doing AND, OR and XOR directly - netfilter: bitwise: rename some boolean operation functions - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: bridge: make ebt_snat ARP rewrite writable - netfilter: conntrack: add missing netlink policy validations - netfilter: conntrack_irc: fix possible out-of-bounds read - netfilter: conntrack: remove sprintf usage - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check - netfilter: ctnetlink: ensure safe access to master conntrack - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: ebtables: fix OOB read in compat_mtw_from_user - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_hbh: reject oversized option lists - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: stop hash:* range iteration at end - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nf_log: validate MAC header was set before dumping it - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nf_queue: hold bridge skb->dev while queued - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix dst corruption in same register operation - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_ct: bail out on template ct in get eval - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag - netfilter: nft_fib: fix stale stack leak via the OIFNAME register - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_inner: Fix IPv6 inner_thoff desync - netfilter: nft_osf: restrict it to ipv4 - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_tunnel: fix use-after-free on object destroy - netfilter: reject zero shift in nft_bitwise - netfilter: require Ethernet MAC header before using eth_hdr() - netfilter: skip recording stale or retransmitted INIT - netfilter: synproxy: add mutex to guard hook reference counting - netfilter: synproxy: refresh tcphdr after skb_ensure_writable - netfilter: x_tables: avoid leaking percpu counter pointers - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: xtables: restrict several matches to inet family - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: x_tables: unregister the templates first - netfilter: xt_cpu: prefer raw_smp_processor_id - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - net: Fix icmp host relookup triggering ip_rt_bug - net: fix segmentation of forwarding fraglist GRO - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix overrun check in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: ftgmac100: fix ring allocation unwind on open failure - net: garp: fix unsigned integer underflow in garp_pdu_parse_attr - net: gro: don't merge zcopy skbs - net: gso: fix tcp fraglist segmentation after pull from frag_list - net: guard timestamp cmsgs to real error queue skbs - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: defer node table free until after RCU readers - net: hsr: fix potential OOB access in supervision frame handling - net: hsr: fix VLAN add unwind on slave errors - net: ifb: report ethtool stats over num_tx_queues - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: ipv4: stop checking crypto_ahash_alignmask - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: stop checking crypto_ahash_alignmask - net/iucv: fix locking in .getsockopt - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - netlabel: validate unlabeled address and mask attribute lengths - net: lan743x: permit VLAN-tagged packets up to configured MTU - net: lan966x: avoid unregistering netdev on register failure - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: queue tie-off or disable during WOL suspend - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: Add NULL guards in teardown path to prevent panic on attach failure - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mana: validate rx_req_idx to prevent out-of-bounds array access - net: mctp: ensure our nlmsg responses are initialised - net: mctp: fix don't require received header reserved bits to be zero - net: mctp i2c: check length before marking flow active - net: mctp-i2c: fix duplicate reception of old data - net/mlx4: avoid GCC 10 __bad_copy_from() false positive - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: Do not restore destination-less TC rules - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Reorder completion before putting command entry in cmd_work_handler - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mv643xx: fix OF node refcount - net: mvpp2: Add metadata support for xdp mode - net: mvpp2: build skb from XDP-adjusted data on XDP_PASS - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: mvpp2: limit XDP frame size to the RX buffer - net: mvpp2: refill RX buffers before XDP or skb use - net: mvpp2: sync RX data at the hardware packet offset - net: ncsi: fix skb leak in error paths - net: netconsole: move newline trimming to function - net: netlink: don't set nsid on local notifications - net: netlink: fix sending unassigned nsid after assigned one - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - netns-ipv4: reorganize netns_ipv4 fast path variables - net: openvswitch: Avoid releasing netdev before teardown completes - net: openvswitch: fix possible kfree_skb of ERR_PTR - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phonet: free phonet_device after RCU grace period - net: phy: add Rust Asix PHY driver - net: phy: aquantia: move to separate directory - net: phy: c45: add genphy_c45_pma_read_ext_abilities() function - net: phy: clean the sfp upstream if phy probing fails - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: DP83TC811: add reading of abilities - net: phy: move at803x PHY driver to dedicated directory - net: phy: qcom: at803x: Use the correct bit to disable extended next page - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() - net: rds: clear i_sends on setup unwind - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: Optimize rds_ib_laddr_check - net/rds: rds_sendmsg should not discard payload_len - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net/sched: act_api: use RCU with deferred freeing for action lifecycle - net: sched: act_csum: validate nested VLAN headers - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flower: revert unintended changes - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net/sched: fix pedit partial COW leading to page cache corruption - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: sfp: improve Nokia GPON sfp fixup - net: sfp: re-implement ignoring the hardware TX_FAULT signal - net: skb: fix cross-cache free of KFENCE-allocated skb head - net: skbuff: fix missing zerocopy reference in pskb_carve helpers - net: skbuff: fix pskb_carve leaking zcopy pages - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skmsg: preserve sg.copy across SG transforms - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint - net/smc: Do not re-initialize smc hashtables - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net: tcp: accept old ack during closing - net/tcp-md5: Fix MAC comparison to be constant-time - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring - net: tls: fix strparser anchor skb leak on offload RX setup failure - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: tls: prevent chain-after-chain in plain text SG - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: iosm: fix potential memory leaks in ipc_imem_init() - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: fix out-of-bounds read in HCP header parsing - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: llcp: Fix use-after-free in llcp_sock_release() - nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfnetlink_osf: validate individual option lengths in fingerprints - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nfsd: check get_user() return when reading princhashlen - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix posix_acl leak on SETACL decode failure - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Fix SECINFO_NO_NAME decode error cleanup - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - NFS: Fix a deadlock involving nfs_release_folio() - nfs: pass explicit offset/count to trace events - NFS: Prevent resource leak in nfs_alloc_server() - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - ntfs3: reject direct userspace writes to reserved $LX* xattrs - ntfs: ->d_compare() must not block - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: layouts: onie-tlv: fix hang on unknown types - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: fix missed admin queue sq doorbell write - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet-tcp: fix race between ICReq handling and queue teardown - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - objtool: Remove max symbol name length limitation - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: reject oversized group bitmap descriptors - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep: restructured interrupt handlers - octeon_ep: set backpressure watermark for RX queues - octeon_ep: support Octeon CN10K devices - octeon_ep: support to fetch firmware info - octeontx2-af: CGX: add bounds check to cgx_speed_mbps index - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: devlink health: use retained error fmsg API - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: fix memory leak in rvu_setup_hw_resources() - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: npc: Fix CPT channel mask in npc_install_flow - octeontx2-af: replace deprecated strncpy with strscpy - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: avoid double free of pool->stack on AQ init failure - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: cap upcall PID array size and pre-size vport replies - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - ovl: Fix uninit-value in ovl_fill_real - padata: Fix pd UAF once and for all - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove comment for reorder_work - padata: Remove cpu online check from cpu add and removal - params: Replace __modinit with __init_or_module - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - parport: Fix race between port and client registration - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Stop ruling out unbound devices as error source - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: endpoint: Remove unused field in struct pci_epf_group - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Log bridge info when first enumerating bridge - PCI: Log bridge windows conditionally - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI: Move pci_read_bridge_windows() below individual window accessors - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: Supply bridge device, not secondary bus, to read window details - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: Update BAR # and window messages - PCI: Use resource names in PCI log messages - PCI: Use resource_set_range() that correctly sets ->end - PCMCIA: Fix garbled log messages for KERN_CONT - pcnet32: stop holding device spin lock during napi_complete_done - pds_core: add an error code check in pdsc_dl_info_get - pds_core: ensure null-termination for firmware version strings - pds_core: fix debugfs_lookup dentry leak and error handling - pds_core: fix error handling in pdsc_devcmd_wait - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf branch: Avoid incrementing NULL - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf: Extract a few helpers - perf: Fix dangling cgroup pointer in cpuctx - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf lock: Fix option value type in parse_max_stack - perf: Make sure to use pmu_ctx->pmu for groups - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf unwind-libdw: Fix invalid reference counts - perf util: Kill die() prototype, dead for a long time - perf/x86/intel/uncore: Skip discovery table for offline dies - phonet: Pass ifindex to fill_addr(). - phonet: Pass net and ifindex to phonet_address_notify(). - phonet/pep: disable BH around forwarded sk_receive_skb() - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access - phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: tegra: xusb: Fix per-pad high-speed termination calibration - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - pidfd: refuse access to tasks that have started exiting harder - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp_accel: Check ACPI_COMPANION() against NULL - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery - platform/x86: ISST: Correct locked bit width - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - pmdomain: ti: omap_prm: Fix a reference leak on device node - PM: hibernate: Don't ignore return from set_memory_ro() - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: Fix a deadlock when returning a delegation during open() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - pNFS: Fix use-after-free in pnfs_update_layout() - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - powerpc/warp: Fix error handling in pika_dtm_thread - power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - pstore/ram: fix resource leak when ioremap() fails - ptp: vclock: Switch from RCU to SRCU - ptrace: Convert ptrace_attach() to use lock guards - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qed: fix double free in qed_cxt_tables_alloc() - quota: fix livelock between quotactl and freeze_super - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - r8152: handle the return value of usb_reset_device() - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu() - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - rcu: s/boost_kthread_mutex/kthread_mutex - RDMA/bnxt_re: zero shared page before exposing to userspace - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix a couple of obvious typos in comments - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/core: Prefer NLA_NUL_STRING - RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA: Move DMA block iterator logic into dedicated files - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: Fix use-after-free in path file creation cleanup - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/siw: Reject MPA FPDU length underflow before signed receive math - RDMA/srp: bound SRP_RSP sense copy by the received length - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/umem: fix kernel-doc warnings - RDMA/umem: Fix truncation for block sizes >= 4G - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - rds: mark snapshot pages dirty in rds_info_getsockopt() - regmap: Synchronize cache for the page selector - regset: use kvzalloc() for regset_get_alloc() - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: fix locking in regulator_resolve_supply() error path - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: pca9450: Make IRQ optional - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - resource: Add resource set range and size helpers - Revert "af_unix: Reject SIOCATMARK on non-stream sockets" - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx" - Revert "crypto: nx - fix context leak in nx842_crypto_free_ctx" - Revert "crypto: nx - Migrate to scomp API" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "ice: fix double-free of tx_buf skb" - Revert "ice: Remove jumbo_remove step from TX path" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "perf unwind-libdw: Fix invalid reference counts" - Revert "ptp: add testptp mask test" - Revert "rust: pin-init: add references to previously initialized fields" - Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors" - Revert "s390/cio: Update purge function to unregister the unused subchannels" - Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" - Revert "wireguard: device: enable threaded NAPI" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - Revert "x86/vdso: Fix output operand size of RDPID" - Revert "xattr: switch to CLASS(fd)" - ring-buffer: Fix reporting of missed events in iterator - ring-buffer: Remove ring_buffer_read_prepare_sync() - riscv: kgdb: fix several debug register assignment bugs - riscv: Sanitize syscall table indexing under speculation - rnbd-srv: Zero the rsp buffer before using it - romfs: check sb_set_blocksize() return value - rpmsg: char: Fix use-after-free on probe error path - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: abx80x: Disable alarm feature if no interrupt attached - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: internal: init: document load-bearing fact of field accessors - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg - rxrpc: Fix data-race warning and potential load/store tearing - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: Fix the ACK parser to extract the SACK table for parsing - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: convert sprintf()/snprintf() to sysfs_emit() - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cio: make sch->lock spinlock pointer a member - s390/cio: use generic driver_override infrastructure - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input before trimming a newline - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf: Disable register readout on sampling events - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/fair: Fix pelt clock sync when entering idle - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scripts/sorttable: Add helper functions for Elf_Ehdr - scripts/sorttable: Add helper functions for Elf_Shdr - scripts/sorttable: Add helper functions for Elf_Sym - scripts/sorttable: Allow matches to functions before function entry - scripts/sorttable: Always use an array for the mcount_loc sorting - scripts/sorttable: Convert Elf_Ehdr to union - scripts/sorttable: Convert Elf_Sym MACRO over to a union - scripts/sorttable: Fix endianness handling in build-time mcount sort - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly - scripts/sorttable: Have mcount rela sort use direct values - scripts/sorttable: Have the ORC code use the _r() functions to read - scripts/sorttable: Make compare_extable() into two functions - scripts/sorttable: Move code from sorttable.h into sorttable.c - scripts/sorttable: Remove unneeded Elf_Rel - scripts/sorttable: Remove unused macro defines - scripts/sorttable: Remove unused write functions - scripts/sorttable: Replace Elf_Shdr Macro with a union - scripts/sorttable: Use a structure of function pointers for elf helpers - scripts/sorttable: Use normal sort if theres no relocs in the mcount section - scripts/sorttable: Use uint64_t for mcount sorting - scripts/sorttable: Zero out weak functions in mcount_loc table - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues - scsi: csiostor: Fix dereference of null pointer rn - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: isci: Fix use-after-free in device removal path - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Make sg_sysfs_class constant - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: core: Fix integer overflow in UNMAP bounds check - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() - scsi: target: iscsi: Validate CHAP_R length before base64 decode - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Fix use-after free in init error and remove paths - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - sctp: diag: reject stale associations in dump_one path - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - sctp: fix race between sctp_wait_for_connect and peeloff - sctp: fix uninit-value in __sctp_rcv_asconf_lookup() - sctp: purge outqueue on stale COOKIE-ECHO handling - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - sctp: stream: fully roll back denied add-stream state - security/keys: fix missed RCU read section on lookup - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: add stack access precision test - selftests/bpf: Add test to ensure kprobe_multi is not sleepable - selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs - selftests/bpf: validate fake register spill/fill precision backtracking logic - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros - selftests/bpf: validate STACK_ZERO is preserved on subreg spill - selftests/bpf: validate zero preservation for sub-slot loads - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/memfd: delete unused declarations - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: skip migration tests if NUMA is unavailable - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: add test for extra_subflows underflow on userspace PM - selftests: mptcp: drop nanoseconds width specifier - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selftests/powerpc: Re-order *FLAGS to follow lib.mk - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selinux: don't reserve xattr slot when we won't fill it - selinux: fix overlayfs mmap() and mprotect() access checks - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serdev: make serdev_bus_type const - serdev: Provide a bustype shutdown function - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: altera_jtaguart: handle uart_add_one_port() failures - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: dz: Convert to use a platform device - serial: dz: Fix bootconsole handover lockup - serial: dz: Fix bootconsole message clobbering at chip reset - serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero - serial: qcom-geni: fix UART_RX_PAR_EN bit position - serial: samsung_tty: Use port lock wrappers - serial: sh-sci: fix memory region release in error path - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - serial: zs: Convert to use a platform device - serial: zs: Fix bootconsole handover lockup - serial: zs: Fix swapped RI/DSR modem line transition counting - serial: zs: Switch to using channel reset - sfc: fix error code in efx_devlink_info_running_versions() - sh: platform_early: remove pdev->driver_override check - signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() - slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock - slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD - slimbus: qcom-ngd-ctrl: fix OF node refcount - slimbus: qcom-ngd-ctrl: Fix up platform_driver registration - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb: client: fix OOB reads parsing symlink error response - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() - smb: client: reject userspace cifs.spnego descriptions - smb: client: require a full NFS mode SID before reading mode bits - smb: client: require net admin for CIFS SWN netlink - smb: client: Use FullSessionKey for AES-256 encryption key derivation - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: common: change the data type of num_aces to le16 - smb: move some duplicate definitions to common/smbacl.h - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get() - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc: qcom: ocmem: use scoped device node handling to simplify error paths - soc: qcom: smem: handle ENOMEM error during probe - soc/tegra: cbb: Set ERD on resume for err interrupt - soc/tegra: pmc: Fix unsafe generic_handle_irq() call - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: geni-qcom: Check DMA interrupts early in ISR - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: microchip-core-qspi: Use helper function devm_clk_get_enabled() - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix runtime pm leak on unbind - spi: qup: fix controller deregistration - spi: qup: fix error pointer deref after DMA setup failure - spi: rockchip: fix controller deregistration - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: spi-ti-qspi: Convert to platform remove callback returning void - spi: spi-ti-qspi: switch to use modern name - spi: sprd: fix controller deregistration - spi: sprd: fix error pointer deref after DMA setup failure - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: st-ssc4: switch to use modern name - spi: sun4i: fix controller deregistration - spi: sun4i: switch to use modern name - spi: sun6i: fix controller deregistration - spi: sun6i: switch to use modern name - spi: syncuacer: fix controller deregistration - spi: synquacer: switch to use modern name - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: ti-qspi: fix controller deregistration - spi: ti-qspi: fix use-after-free after DMA setup failure - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: uniphier: switch to use modern name - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: wpcm-fiu: Fix uninitialized res - spi: wpcm-fiu: Simplify with dev_err_probe() - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - spi: zynq-qspi: switch to use modern name - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - string: add mem_is_zero() helper to check if memory area is all zeros - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - svcrdma: Clean up comment in svc_rdma_accept() - svcrdma: Increase the per-transport rw_ctx count - svcrdma: Reduce the number of rdma_rw contexts per-QP - svcrdma: Remove queue-shortening warnings - sysctl: fix uninitialized variable in proc_do_large_bitmap - sysfs: don't remove existing directory on update failure - tap: free page on error paths in tap_get_user_xdp() - taskstats: set version in TGID exit notifications - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: call sk_data_ready() after listener migration - tcp: defer regular ACK while processing socket backlog - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses. - tcp: Fix imbalanced icsk_accept_queue count. - tcp: optimize inet_use_bhash2_on_bind() - tcp: Rearrange tests in inet_csk_bind_conflict(). - tcp: restrict SO_ATTACH_FILTER to priv users - tcp: Set pingpong threshold via sysctl - tcp: tcp_tx_timestamp() must look at the rtx queue - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address. - tee: optee: prevent use-after-free when the client exits before the supplicant - test_kprobes: clear kprobes between test runs - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thunderbolt: Bound root directory content to block size - thunderbolt: Clamp XDomain response data copy to allocation size - thunderbolt: Fix property read in nhi_wake_supported() - thunderbolt: Limit XDomain response copy to actual frame size - thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() - thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow - thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() - thunderbolt: Reject zero-length property entries in validator - thunderbolt: Validate XDomain request packet size before type cast - time: Fix off-by-one in settimeofday() usec validation - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix double-free in tipc_buf_append() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done - tls: Preserve sk_err across recvmsg() when data has been copied - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tools/rv: Fix cleanup after failed trace setup - tpm: avoid -Wunused-but-set-variable - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: branch: Fix inverted check on stat tracer registration - tracing: Do not call map->ops->elt_free() if elt_alloc() fails - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing/probes: Point the error offset correctly for eprobe argument error - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Rebuild full_name on each hist_field_name() call - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: pch_uart: add check for dma_alloc_coherent() - tty: serial: samsung: Remove redundant port lock acquisition in rx helpers - tty: serial: samsung: use u32 for register interactions - tun: free page on build_skb failure in tun_xdp_one() - tun: free page on short-frame rejection in tun_xdp_one() - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: clear skb->dev before running a sockmap verdict - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - unshare: fix unshare_fs() handling - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - USB: cdc-acm: Fix bit overlap and move quirk definitions to header - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix request skipping after clearing halt - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure - usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: core: convert ci_role_switch to local variable - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - usb: core: Fix SuperSpeed root hub wMaxPacketSize - usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: Fix use after free in debug code - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: dwc3: xilinx: fix error handling in zynqmp init error paths - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports - usb: gadget: f_fs: copy only received bytes on short ep0 read - usb: gadget: f_hid: fix device reference leak in hidg_alloc() - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: net2280: Fix double free in probe error path - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usbip: vudc: Fix use after free bug in vudc_remove due to race condition - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - usb: musb: omap2430: Fix use-after-free in omap2430_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: belkin_sa: validate interrupt status length - USB: serial: cypress_m8: fix memory corruption with small endpoint - USB: serial: cypress_m8: validate interrupt packet headers - USB: serial: digi_acceleport: fix memory corruption with small endpoints - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() - USB: serial: io_ti: fix heap overflow in get_manuf_info() - USB: serial: keyspan: fix missing indat transfer sanity check - USB: serial: kl5kusb105: fix bulk-out buffer overflow - USB: serial: mct_u232: fix memory corruption with small endpoint - USB: serial: mct_u232: fix missing interrupt-in transfer sanity check - USB: serial: mxuport: fix memory corruption with small endpoint - USB: serial: omninet: fix memory corruption with small endpoint - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add MeiG SRM813Q - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add usb-id for Dell Wireless DW5826e-m - USB: serial: safe_serial: fix memory corruption with small endpoint - usb: storage: Add quirks for PNY Elite Portable SSD - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmodes/displayport: validate count before reading Status Update VDO - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT - usb: typec: ucsi: ccg: reject firmware images without a ':' record header - usb: typec: ucsi: Check if power role change actually happened before handling - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO - usb: typec: ucsi: Don't update power_supply on power role change if not connected - usb: typec: ucsi: Move unregister out of atomic section - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: validate connector number in ucsi_connector_change() - usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: check URB actual_length for interrupt-IN notifications - usb: usbtmc: Flush anchored URBs in usbtmc_release - usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write - vfio: Create vfio_fs_type with inode per device - vfio/pci: Insert full vma on mmap'd MMIO fault - vfio/pci: Use unmap_mapping_range() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtiofs: fix UAF on submount umount - virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vrf: Fix a potential NPD when removing a port from a VRF - vsock: fix buffer size clamping order - vsock: keep poll shutdown state consistent - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: reset connection on receiving queue overflow - vsock/vmci: fix sk_ack_backlog leak on failed handshake - vsock/vmci: fix UAF when peer resets connection during handshake - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() - vxlan: validate ND option lengths in vxlan_na_create - vxlan: vnifilter: fix spurious notification on VNI update - vxlan: vnifilter: send notification on VNI add - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: clear shared SRNG pointer state on restart - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() - wifi: ath11k: fix error path leaks in some WMI WOW calls - wifi: ath11k: fix peer resolution on rx path when peer_id=0 - wifi: ath11k: fix warning when unbinding - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath11k: skip status ring entry processing - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix error pointer dereference - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: iwlwifi: mvm: fix race condition in PTP removal - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mt76: connac: introduce helper for mt7925 chipset - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: nl80211: reject oversized EMA RNR lists - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: increase TX report timeout to fix race condition - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: usb: fix memory leaks on USB write failures - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - wireguard: send: append trailer after expanding head - workqueue: Factor out assign_rescuer_work() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - X.509: Fix out-of-bounds access when parsing extensions - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/kexec: Disable KCOV instrumentation after load_segments() - x86/platform/uv: Handle deconfigured sockets - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler - x86/sev: Harden #VC instruction emulation somewhat - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen: Fix xen_e820_swap_entry_with_ram() - x86/xen: make some functions static - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: ah: account for ESN high bits in async callbacks - xfrm: ah: use skb_to_full_sk in async output callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: Check for underflow in xfrm_state_mtu - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: espintcp: do not reuse an in-progress partial send - xfrm: esp: restore combined single-frag length gate - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: Fix the usage of skb->sk - xfrm: input: hold netns during deferred transport reinjection - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: route MIGRATE notifications to caller's netns - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: delete attr leaf freemap entries when empty - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix undersized l_iclog_roundoff values - xfs: mark data structures corrupt on EIO and ENODATA - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: stop reclaim before pushing AIL during unmount - xhci: tegra: Fix ghost USB device on dual-role port unplug - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zonefs: handle integer overflow in zonefs_fname_to_fno - zram: do not forget to endio for partial discard requests - zram: fix use-after-free in zram_bvec_write_partial() - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Fix CIFSwitch vulnerability- FIX GPO Frag vulnerability- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- Remove dead, not used patches- Fix Dirtyfrag- Fix CVE-2026-31431 (Copyfail)- Fix regression with touchpad on notebook Positron Proxima 15 and probably others (bz#19950) - https://bugzilla.rosa.ru/show_bug.cgi?id=19950- [bot] upd: 6.6.106 -> 6.6.126 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - acpi: Break out nesting for hmat_parse_locality() - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - acpi, hmat: calculate abstract distance with HMAT - acpi/hmat: Fix lockdep warning for hmem_register_resource() - acpi, hmat: refactor hmat_register_target_initiators() - ACPI: HMAT: Remove register of memory node for generic target - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - acpi: numa: Add genport target allocation to the HMAT parsing - acpi: numa: Add setting of generic port system locality attributes - acpi: numa: Create enum for memory_target access coordinates indexing - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Initialise scc_index in unix_add_edge(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Use standard print API - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64/fpsimd: signal: Consistently read FPSIMD context - arm64/fpsimd: signal: Fix restoration of SVE context - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state - arm64: kprobes: call set_memory_rox() for kprobe page - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: Set __nocfi on swsusp_arch_resume() - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wsa881x: Drop unused version readout - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates' - base/node / ACPI: Enumerate node access class for 'struct access_coordinate' - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-mq: Abort suspend when wakeup events are pending - blk-mq: add helper for checking if one CPU is mapped to specified hctx - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: don't schedule block kworker on isolated CPUs - blk-mq: setup queue ->tag_set before initializing hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: fix race between set_blocksize and read paths - block: make REQ_OP_ZONE_OPEN a write operation - block: rate-limit capacity change info log - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Improve program stats run-time calculation - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - btrfs: ref-verify: handle damaged extent root tree - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: store fs_info in space_info - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - cachestat: do not flush stats in recency check - caif: fix integer underflow in cffrml_receive() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: refactor wake_up_bit() pattern of calling - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: fix pagecache leak when do writepages - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: Fix uncached read into ITER_KVEC iterator - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - cifs: stop writeback extension when change of size is detected - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - cnic: Fix use-after-free bugs in cnic_delete_task - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Treat cpusets in attaching as populated - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed-acry - Convert to platform remove callback returning void - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd: Avoid evicting resources at S5 - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: Check dce_hwseq before dereferencing it - drm/amd/display: Check NULL before accessing - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix null pointer deref in dcn20_resource.c - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: Remove redundant semicolons - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu: csa unmap use uninterruptible lock - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amdkfd: Don't use sw fault filter if retry cam enabled - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/ast: Use msleep instead of mdelay for edid read - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imx/tve: fix probe device leak - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/adreno: De-spaghettify the use of memory barriers - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/pl111: Fix error handling in pl111_amba_probe - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/tilcdc: Fix removal actions in case of failed probe - drm/tilcdc: request and mapp iomem with devres - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: Add SM7150 - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - epoll: Remove ep_scan_ready_list() in comments - espintcp: fix skb leaks - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - Expand the type of nfs_fattr->valid - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: filesystems without casefold feature cannot be mounted with siphash - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix error message when rejecting the default hash - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: refresh inline data size before write operations - ext4: remove unused return value of __mb_check_buddy - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: drop inode from the donation list when the last file is closed - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix wrong block mapping for multi-devices - f2fs: fix zero-sized extent for precache extents - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - f2fs: use f2fs_err_ratelimited() to avoid redundant logs - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - filelock: add FL_RECLAIM to show_fl_flags() macro - filemap: cap PTE range to be created to allowed zero fill in folio_map_range() - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Fix unused notifier-block in unregister - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware: meson_sm: fix device leak at probe - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix memory leak in posix_clock_open() - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: allocate ff->release_args only if release is needed - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genirq/irq_sim: Initialize work context pointers properly - gfs2: fix freeze error handling - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix use of bio_chain - gpio: 104-idio-16: Define maximum valid register address offset - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpio: ljca: Fix duplicated IRQ mapping - gpio: ljca: Initialize num before accessing item in ljca_gpio_config - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: fix wrong error probe return value - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pca953x: Utilise dev_err_probe() where it makes sense - gpio: pca953x: Utilise temporary variable for struct device - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: update Intel LJCA USB GPIO driver - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - gue: Fix skb memleak with inner IP protocol 0. - gve: Correct ethtool rx_dropped calculation - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: core: Harden s32ton() against conversion to 0 bits - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: playstation: Center initial joystick axes to prevent spurious events - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimer: Remove unused function - hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Add support for Dell OptiPlex 7040 - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: increase max descriptors for XL710 - i40e: remove redundant memory barrier when cleaning Tx descs - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: fix race condition in TX timestamp read for register 0 - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - ima: limit the number of ToMToU integrity violations - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring: move local task_work in exit cancel loop - io_uring/poll: correctly handle io_poll_add() return value on update - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: add exception routes to GC list in rt6_insert_exception - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: avoid possible NULL deref in modify_prefix_route() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: fix GCC mem-intrinsic prefix with sw tags - kasan: refactor pcpu kasan vmalloc unpoison - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel.h: Move ARRAY_SIZE() to a separate header - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: fix null pointer dereference in alloc_preauth_hash() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_session_rpc_open - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: fix use-after-free in session logoff - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Fix softirq masking in FPSIMD register saving sequence - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set synthesized TSA CPUID flags - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: spi-byte: Use devm_led_classdev_register_ext() - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add more instruction opcodes and emit_* helpers - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init() - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - loop: Avoid updating block size under exclusive owner - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md/raid5: fix IO hang when array is broken with IO inflight - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx214: Fix link frequency validation - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: tunner: xc5000: Refactor firmware load - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: verisilicon: Store chroma and motion vectors offset - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memcg: fix data-race KCSAN bug in rstats - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memory tiering: add abstract distance calculation algorithms management - memory tiers: use default_dram_perf_ref_source in log message - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax: add a few more MIN_T/MAX_T users - minmax: avoid overly complicated constant expressions in VM code - minmax: don't use max() in situations that want a C constant expression - minmax: fix up min3() and max3() too - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - minmax: improve macro expansion and type checking - minmax: make generic MIN() and MAX() macros available everywhere - minmax: simplify and clarify min_t()/max_t() implementation - minmax: simplify min()/max()/clamp() implementation - MIPS: Fix a reference leak bug in ip22_check_gio() - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Add missing dev_err newlines - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: SPI mode remove cmd7 - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: fix arithmetic for bdi min_ratio - mm: fix arithmetic for max_prop_frac when setting max_ratio - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix folio is still mapped when deleted - mm: introduce and use {pgd,p4d}_populate_kernel() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm: memcg: add per-memcg zswap writeback stat - mm: memcg: add THP swap out info for anonymous reclaim - mm: memcg: change flush_next_time to flush_last_time - mm: memcg: make stats flushing threshold per-memcg - mm: memcg: move vmstats structs definition above flushing code - mm: memcg: optimize parent iteration in memcg_rstat_updated() - mm: memcg: restore subtree stats flushing - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-tier: fix abstract distance calculation overflow - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mempool: replace kmap_atomic() with kmap_local_page() - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() - mm: migrate_device: use more folio in migrate_device_finalize() - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm, percpu: do not consider sleepable allocations atomic - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm: simplify folio_expected_ref_count() - mm/truncate: unmap large folio on split failure - mm: workingset: move the stats flush into workingset_test_recent() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: nand: raw: atmel: Fix comment in timings preparation - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: allow small head cache usage with large MAX_SKB_FRAGS values - net: Allow to use SMP threads for backlog NAPI. - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: add Makefile for selftests - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: improve shutdown sequence - net: dsa: lantiq_gswip: do also enable or disable cpu port - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: allow loads only when register is initialized - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: drop unused 3rd argument from validate callback ops - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: missing objects with no memcg accounting - netfilter: nf_tables: pass context structure to nft_parse_register_load - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix NULL pointer dereference in l3mdev_l3_rcv - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add support for MC filtering at the slave device - net: hsr: Add VLAN CTAG filter support - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv6: fix field-spanning memcpy warning in AH output - net/ipv6: Remove expired routes with a separated list of routes. - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: fix unregister_netdev call order in macb_remove() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Consider aggregated port speed during rate configuration - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Report rx_discards_phy via rx_dropped - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5e: Use extack in get module eeprom by page callback - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: adin1100: Fix software power-down ready condition - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY - net: phy: clear link parameters on admin link down - net: phy: dp83867: Disable EEE support as not implemented - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: fix phy_uses_state_machine() - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - netpoll: remove netpoll_srcu - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove conditional threaded-NAPI wakeup based on task state. - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix mismatch between CLC header and proposal - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: Fix accessing freed irq affinity_hint - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: stmmac: make sure that ptp_rate is not 0 before configuring EST - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: wait for async completion on last message - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: vlan: sync VLAN features with lower device - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfs_common: factor out nfs_errtbl and nfs_stat_to_errno - NFSD/blocklayout: Fix minlength check in proc_layoutget - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: convert to new timestamp accessors - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't ignore the return code of svc_proc_register() - nfsd: Drop the client reference in client_states_open() - nfsd: Fix a regression in nfsd_setattr() - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - NFSD: Fix last write offset handling in layoutcommit - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() - NFSD: Fix permission check for read access to executable-only files - NFSD: fix race between nfsd registration and exports_proc - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - NFSD: Remove NFSERR_EAGAIN - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Rework encoding and decoding of nfsd4_deviceid - nfsd: set security label during create operations - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: enable nconnect for RDMA - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFS: trace: show TIMEDOUT instead of 0x6e - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: rename free_ctrl callback to match name pattern - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: do not directly handle subsys reset fallout - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvmet-tcp: remove boilerplate code - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix use-after-free in page_pool_recycle_in_ring - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Fix uevent on failure to recover - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI/sysfs: Ensure devices are powered for config reads (part 2) - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test stat: Avoid hybrid assumption when virtualized - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Do not enable BTS for guests - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - phy: Use device_get_match_data() - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - pmdomain: Use device_get_match_data() - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: introduce posix_clock_context concept - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/addnote: Fix overflow on 32-bit builds - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix type confusion in pde_set_flags() - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: add testptp mask test - ptp: Limit time setting of PTP clocks - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: stm32: Always program polarity - pwm: tiehrpwm: Fix corner case in clock divisor calculation - qed: Don't collect too many protection override GRC elements - quota: remove unneeded return value of register_quota_format - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks - rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks - rcu-tasks: Maintain real-time response in rcu_tasks_postscan() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - RDMA/rxe: Remove the direct link to net_device - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "loop: Avoid updating block size under exclusive owner" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "net: Allow to use SMP threads for backlog NAPI." - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf dso: Add missed dso__put to dso__load_kcore" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: Improve exception and system call latency - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: mm: Do not restrict mmap address based on hint - riscv: mm: Use hint address in mmap if available - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Replace function-like macro by static inline function - riscv: stacktrace: Disable KASAN checks for non-current tasks - riscv: stacktrace: fix backtracing through exceptions - riscv: uprobes: Add missing fence.i after building the XOL buffer - rocker: fix memory leak in rocker_world_port_post_fini() - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/bpf: Centralize frame offset calculations - s390/bpf: Change seen_reg to a mask - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b - s390/ctcm: Fix double-kfree - s390/dasd: Fix gendisk parent after copy pair swap - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix __ptep_rdp() inline assembly - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/balancing: Rename newidle_balance() => sched_balance_newidle() - sched/deadline: Fix race in push_dl_task() - sched/deadline: only set free_cpus for online runqueues - sched/fair: Fix pelt lost idle time detection - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched/fair: Use all little CPUs for CPU-bound workloads - sched/pelt: Avoid underestimation of task utilization - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add fill_crypto_prdt variant op - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests: bonding: add missing build configs - selftests: bonding: Add more missing config options - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests/ftrace: traceonoff_triggers: strip off names - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - selftests/net: convert sctp_vrf.sh to run it in unique namespace - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests: netdevsim: set test timeout to 10 minutes - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix GRO coalesce test and add ext header coalesce tests - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: openvswitch: Fix escape chars in regexp. - selftests: Replace sleep with slowwait - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: refactor EFR lock - serial: sc16is7xx: remove unused to_sc16is7xx_port macro - serial: sc16is7xx: remove useless enable of enhanced features - serial: sc16is7xx: reorder code to remove prototype declarations - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix tmpfs reconfiguration (remount) when noswap is set - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - staging: most: remove broken i2c driver - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm: Cap the number of PCR banks - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - tracefs: fix a leak in eventfs_create_events_dir() - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: complete command synchronously on error - ublk: fix deadlock when reading partition table - ublk: make sure io cmd handled in submitter task context - ublk: prevent invalid access with DEBUG - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: Apply the link chain quirk on NEC isoc endpoints - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci: move link chain bit quirk checks into one helper function. - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - vdpa/pds: use %pe for ERR_PTR() in event handler registration - veth: fix data race in veth_get_ethtool_stats - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: move TDLS work to wiphy work - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: remove RX_DROP_UNUSABLE - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: Report correct retbleed mitigation status - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86/vdso: Fix output operand size of RDPID - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: state: fix out-of-bounds read during lookup - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix log CRC mismatches between i386 and other architectures - xfs: rename the old_crc variable in xlog_recover_process - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: Allow users to modify DbC poll interval via sysfs - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbc: Improve performance by removing delay in transfer event polling. - xhci: dbc: poll at different rate depending on data transfer activity - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xsk: Fix race condition in AF_XDP generic RX path - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Patch from Hans to fix SYNA3602 touchpads- Update initrd size (kb#456)6.6.148-1.module.8852au6.6.148-16.6.148-11.15.0.1_0_g48852au.ko/lib/modules/6.6.148-desktop-1rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-strong --param=ssp-buffer-size=4 -m64 -mtune=generichttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=12e8ba0960a019b61e6125e47bccb0aed0de97a5, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-8f6b75924086e3546ba7dd1e9eacda651daf39a20f55eeab4e068abc3c68fc81a5725c77d35618ebc1006a811c6e7c642fa8a23294f5970201eba290c32e7fa2e?7zXZ J!-sD] crv(vX0bRb— $2rN33S`&x M]6l117. iƊC=ڳW+BQ )C(R1.\7N#MTWlI8S&֝\_,&r_^LQNMF&َg]!d}b+:sOMn1gP:jԸ M%bbO{ Y+ L1w,+agqzq /\ <&(O "0-|?`~'-;n<BDMZ&m@mQ 䠹qyqd#N 8𪟔`ӻiMWp}ı[=ާCTݜ]X=+>R W4x ¿fmP$G *~hm[˲IIEi ɯp% м$9lbD u$};Rn;XmldDc+gko~ƣ| ՛įe۟[8)3j^6.pѵ5gF_6O1suH!vk}q P;V&E;^Hbot硤ιI̙cwrTӧq*[֧=߆,ΝOo|JIQKj;%&ꝍ!><{ԃxo^8DM F01|T‰$qQwL}~3Jq~S_Xk3/XY.ގpƄUF>\qӾ\tV(>OC†邯1{0@~*6"T TrS{oWb?G0'~}#6?[>TǠs 4:c';T;WqjNcx̕bLy [<ۧMUIև+.}r&UӬ*BEuҥ,_-Bxew뒠Yrqv"XCUq:orj)swWG!avuG|Lʸ7o ~٤:ތJ8 b];Yķ0|!L>l&~ӛz* tA|^.Ძ}@ lyqu%һF"`wdD J6jmwfnN!l G!-`ے<"l:=213װUʷP _o7B@'0[:xFhktR«i\8[ij g׊7su߈ׁ RT5Wq)ҝ¸ XZAWLIB "6u@}Xb斬 KHAТ޼wNL.je|;[G>P Z<`7s#o.7Cn}; D f}qkK{Eob[vRXK2 kv 3`6i(poKڈ$jA2xt.dX|3 h}jH0~bmN\!KҦH!Pk6UoW+!#}c|mq^mɄ! S27MUMÓI7ڕ1;#jmL&7!&(5m+'x7: #{HTiPx`fyΜlF!m x3 aD# z2]0Õ׋SfUhocg[v(9jJ)0$U/ăkDf@N.7;Zo 同WDtZ$ɘȐS %$bjU3O}*5^xr;3PACmіW ["#G\]*m/K_C-ԟ|=GF,;rrYWH|F\v-k⓵L`aoJ&20j1ρ((w0]8BB&ZKu Ҽ6AKCIxzqŮz#}ӡր-@-+AeiU?%wiw,Ê#ݬ+4[_[`<SA l[wlڜ%q=B`Ae^߈jw+Aڠ;#n d)(Q<$@|!SdK ($rN)5 [ϷeL6ܖҐ Km&%HwMD^ܫbY$iwWgo?)c>[Y>QE 2:GAVR-#\X-@b! 6-׹v͗ɩ1e豓EtnMk" |s"TQ# D=b;Lhyۉ<{Rg ͎f{m|oъA'jӡL3=$]S4/GrR\w&B^E#A4XCR[KGpicdDivo;joݬ>0B2)q{ܐvMȦVoxѥ;Rz3+is;ͥL{ov\w8EHN‡Ck~kywK+ř~vDXџ/,ʸr^ r {ڻ}4R9Ǧn3 &ѫӑ wrxKgM\'pDq~d&:2+xU_CިCʍGfFds{@&1Q+#_\gFId.k!c'ރ rʳoGgה=3?H;O82Jo ub6 :7/ :G_6R༜84z&pC'`//Q,= Pa]x7AEYpnQ^k4@Ok!Ư'`:cytnqK˵F^Ыޥ+qO$H\/ѡםzeUMXIlNJ`6("J^zBOc)xX`K\| ;i~M) l8\\ǒ|l^7z~;q`g?"#6o&,= mX\vHTrÇ?-oɍ2au(WYSwkF$w"Pн "k|c_;LWzΖNIv ɾsh(1 Rb%SJ#67[Scg?HUSr3#\ʹ}c%v" =G@I؎g B0oЂCٓ>g` :s>ts.oP[ܔ4;7zESt6d9__hQf|Y⢨sʧ@U%o -F$>3CcE(NQώ73Uǃdnah\[<ޛڰolͰ(C5?HM 7p:$M@.DvXeB3=V:E!׷ A<@<rVZYZ^(2:~ZF61Tdnޏ;5Mq@t`6a"jH}O,$5,< N)Dh\Cu1Z!Yqa3E0D̢S/)M9*%L]XEdU ?;`wbgQ=Pg{ܺ9v@^Op ENo',tbд(6yd[4{xLʊ5+RLrGq}%|4ƺ;(D?M10f cxhXcyt_I:`V;%y5k̠R'xRT"0qucpoKLrݢI>fVsg%` ÂQ)mT#PF[@߀}qrqhnC`a+h׍jcRp4֌yf v(\Ag4ᦕ9cj2P؂DshɌf~/{?TWRׄSip^MC3<2p) +tUHC5>1e[KQ<LŢ6(ƞ{9`>Wcd?l"֪(=t[Ѡp-hGGRGek LjMz>ɏYƳnYEkaݢeZifh@<*' F8 qf 铭$H)dW r\ ݁D`(M^|}j*\!5K &>> qQZBi_YA w?6F=^Q#|A rՀD7UH,BDD1vAHҾTMȹxm7z[K`ů4N3p16)Hox N_3Zw,+#i肌!i}?i{uc,է$ NjvO+hލiɝ"?+JC"[JGlCl#i%-~b"KȍG[f":f4@p AE QNiI1P2 \Y*gr̒E![*PeɇyW[EV3cc=rv}<ؚU" ]+ʎ' >p9V8I<݆jAaqu̵ gw-U 3U W0&ֶ] hQkF5 @p ph2@T/L?*GZ8XICvLرq>VYqq滙U4a< xs GͰ4$8fY)Q`)Upё c(fT=( 7Eَh&-u~7Pb!Ҧ45Y4Tj]JdgV:d;~G\K~Bn 8 _&'&RE9p)ιuhRr\Wr,Ҭ$6[W񮣝~J,?$,mGdbﮝ{NO側$Kr^RgϺh/rÞ*e\|]$ͩ:ckF9+SBlc9Woq{')0f QX㷱" sqxQyqDЍ8;$G{'|Ij_E}zO%2! !X42'  Iha6`Q{PlSW^]he+5}_8~DWlzٝVL6cԧ HP6YMVgq,li;N˟-nzهIkyTI;PO$GUn=>Cmbxqcgl6I$Sb9J`nAٵם*3vrDհzc$z@ގ-&N8(qTW~ Z 0c O/Sl MUNo9nWT:RMµnhtzp!w[Go:8̸V˼[Jsl󿷘!T~ZZacٔV'f gk0B1^ZvϤ9Z eSBV-ys:\~, .egm;\LIFD/D$?^+OPoy;r:8 48㫯-F2L :NP# juGz$DߩPHHCbg(/lQخñ ?b)Ȝj: 3jPcѬ3`b<{ZӾ7ВF#.bd+i˖)0sPd~M^0,gU=/Zpeo(P=ӵS84}?0JDOXtiUR']1 B#G\*P~hE|+Om[q,:Z$|PZ_?H/L (_uzlz8WZ_Sd1$99<#Ʃo;h4%/ ]$MB& JF&^78j7g7`3+sGڅYUe;b$2m?3N1$g7Xq sn6eL/\.|3nDoco^k5ܪm ^@rBX޹FZ!jƙ9g K7I p|16Aϰf69qhFOpkc@L j:sE3f0o22±BViO$="HwL6XF^C↿φ'{ى#]_B(kh6>zRɞĹ#cFmkc!8[ VS4ʻ뼄8-b{V'ipey`t:4N+F3.fwI{}~/zD:?X29nź j7kSP.op.39om7Q{,W@1d}evI5Uё\)/3|n K};<6֌G^Z;͚x׸Vy#z$y#r#(ίF8+O4b3,?8JѯT鬩5QcU}"H "GrOoN~]Af̠YSF3+kee9*-oe냏*xFV%>} Iͪsx>#gLv'"Nl Kul9t]97VZ!.F*g!mKbe]ՄifmGG")a }%iߢmz[頲Q %٩+2 TbHVdTS⦜;r`ˇǑYds$Ɗ3" :G2&+_5`ڭQjg\-5¼RMZܕ:,(x&E Ԝg@X>:qZKMZIiʆJ\cLm%::"M<^q f5EZ.> o0K8T>r꧒5XXP5 O>YuynH˽ +!Ly'DBy6T@@ 3S!P|:"и-J v7z|680))B*cIf $|d<<7F:|SA*.! \H9]> 9<<:Lm4 .G-KR2 wD(O,\ J٨}y/۬|V.qÉ3%o3}0+Ӻ[۰i}Q2Zaʜ37II`,u?dud 6¨Oy)Rd 1qY"L6 Ұ_Iͅ\|{0 HʺXPvr"ε53YH['d^or7:0P"L[8ӢӾcxL Ūp'峒LhJt>' tޅo.Htj;O{0@ Unݕ9Z_/Ā[ We[e!DAI:Ej@F@Xw "aY=)}o#"Ǹ̛Jp-Б]TZ-5\z@Ftңcj!vzMPQ=ϼ9i_e249&t&e4HMƛ@K]{mzz|֫bjVnV@HfIJ4#&bQxq!$1 R6cN~-2XG<M\|b0И"z*d_o.ۃB_MyBf2AuLU4qcVvcEe.Jzwbc.C7wm5Lrelr Y#KtnQסق8vR=G;;G[ffJc9:2o!4+J4$]s}6U@Y*Em%hY+,ყ~6|4QdE%x[ J&Uz60h` '7Ѵ5ӻӍI$Su=rvkn_hjo;aQp@)!;Ŵqs]#q^gm{êc-m7FADP/DwR~XK1[ *BqYq'ȑo&Xؿ~#,Śrzڹ sCvi\rWccǛ2k5uϏi$r pDQ\͉l%"*"T^8,usM|e?tTvW)D,?wzh^Y.'QoꁛkY&CFi|o06Cb`qo$=̼ ۏ;'^[G+QOEăt,k=eFti׉䳤]!w.!,b/&܌-ծ8'ͯ˜ʆNG0^Nñ(2]L-n*h=4xK\<wA(gɐ$x_I hѫJ%y ,h '*:s*e;AiW'I+e?slq!3a_ju޹K|Q4'@ΰ>Os,BTEWJ V{g7l);tv#Aũvkə}hFfc#œohZ}da}C{H@~DBfW.ECNpjU _Gl +Cq*xewͰ|?hx=$ADR/W<Vc: rre˝ AŞmoc}xp־OS/75fC-W*= z|У2UbZ4D/zr @ggϧw<釩is>F݁ߊګv/slzUG%@٬H)êRwI,FQՙE[Hk3Bg\?j]j?RE>,i+셿et[!܁ jzϑZ-6URq@pK9:ƃ:"IC x ^eA r ؓ$NBa{Cp~p:fۊL;2usyWaA8 S|'V{QSmk_po*SEw%D8S3g3O}ECvN qYP!klZٺ8=j*١jDĐOS q2|Ujj'-< XQ;q{?%8KS ET a~`ׄhe)0Co㾆v0A5`` ]#h~RS͐?; m0&O2P cF,.eq᫄=1E؆&5n E-WފXm}7k9oPgo+ؾ FqqvU)=Y3jtքRϢ\])˜)1Q܄ĶƼK~tsV@ sKOWIy5(:7m(390q5sUPZte7fu-g13Qn](M1 9<{;QsTחX"߱p\q2{p ,'1cO\ ZI?򄁫̰2^F,KETRVl7~L8҇|SVp cᵧXCҵ!=j4Nxq;!!w -*VP9j-ٜv'o)s;*,]/H%Zh[F`-LmD'V , N4Z~%y〉JG,35v/?l(]?r`b1#qE\[ .k+!ޤYU3ЄW!ۙuvA3}Q]`dbOwz>E^QC#|@2HIуǩ0'GE=0 mXtl#Xb^p&S5t J7둯#, zJLY/)UA|k|hy*C2: +/?PW0 HnY_A4& 5O`tiiē>ٖ#7*p,im]s!11wkxw/$.=W=y\ SV(}ҏϡ}}NkMQ?;+ͳ*3]M1g7JTz 8I/ҡ2"kx`1L4F}/7< ;"Xu3 fRKB_.y/ܣע5e*#K(pNR?dڜ4,g U{MW>|1evP5,~ !EtJ2vQJjQ_vpߌפ5&n1N7/W,8B>`pȲm oWkTjU5}ytF Jn sսzT};;H"ؽB<<{|2=`Fq:0"F"^RAꖹc XOyҍXB(\yn5SJ]˵͌o-vP=nZ̢pPC nR-/H2zO@➻F˼KHAnʂyY\'d>&:2G;{_rK o0=IjXrq>7ߪ>3= 2@8<-fV%+`$$4@8K2KyfMAӄkq]Tȡ ɹ$X8^`kV/|ro(JݝJT ~*Z *j>^Br ݨA@93P33RaTnf-d1IӇ!;,Sٔڜ5Ǹ7؇\b1i_xpW"9gTcC<$'j]:_K6&A懂Yv㻉bE _ (iez0$6N = 5Cn| ⤲4r"̱FcٿY%fb {ЮYgMR꓁roȯjA~Q&Px${)ݹ o[X~[&~T7pozy=q=L:)h"!cbTNK'K,}v|sN]f-A^11|$qt%Q$Qf"s,gV*)ulsshh7B7s\32tgZ/{X޺dş}\@|Y7}G6I}_Sc͚2?joCr3AOlAV&J-=D= `ӻq(cQkK9^˔+c9m\2&Cj3CvL7{ByF)fCB~4*w @a=[6$8eJ)0(w)(\T.&J^/{)%oH)"v0jYc$z{/Eh3{bV@$<,lζ>n(O˦d $x@w7$?pmF?i{MI{N F.BQ(4k z*^?TA0Pabl@GeJ!5y%[d$P YOޯ>QN^OFs՗iEC.?Kv|JBX대r@E=S)4@6h **!)= ϯisiɢ3J~[8ɭ)1"O(|]҅F|gMis2M3(Z<|+= P\Ak>^ʂ"n|ݢH^yQ5a:qV:t-BO\xëcu͓7YqR.} U)gF2ݰ波#v8d-NV1=S+TX\&{ X BwPX2$4C{9{S5y ߫Gs6ptҿ"o_!Y[_ J27R5huGA*Oq6}T dTTN)!ca8yk, Y+V_B8AnۤZ]3kbqwͳ~X cTd޵Fq-}"+i"f ^d`3iOPc%TY[DWMlSAGs-FÝʞk e&SYf~9{ta.pxǍǁ#$Ii!)3J@ADԫ]ε^6y8a[>Z {0b3~rJO%ǜoB"Byy?Ur LY g[> bb;TyC@L?3DP|0.TD>SJ xᦏĽoj 2-5wF< ʴAB)ŝ`e^^[ ]o.fryQ/6{.ScEdZǠ/!sgU Po2̂Lfpe|nb(1?'T|ef7A[|/A~.l!.vÀ/>(S9(+;}" ?*`= $痻݄sU) hݼrlQa;t%g} jS?L/;Ƨ^n qP,3$IB'eԗ4ټvxŀܾڑBQ7xƵeЊZ ՠb"TBR yW9,HlKa{L-LO@:Leë;ZFIGyM8K{srP2IMѶZw(/n! qO$:-MjhXKE%[Ƴ’燩Br+`ƳGζ1KQD9>+ʟ4JR*܄4C_8COZ>дj S4Qʆk!"Rr]cl/Bb`Z%W. ݓnsW0 V XII#Gy1P tl.]uzՐ~.v )KXh[~g2A w/ZVY9T_'gmgM3 voh6.Jؒ&*Wpg>i^2's9;sU ITsouL|GԸ͝BV>~~ᝪ E$ڢ%h ǼpD3*3 .bmFNU;EhV,4Dfl:IEC·[Og}?q bӟnD XD__Wʓ)D62vtÜq65;;U~ef"鳄&i =/w^ yҋpT5A*38#ZY0-J" Q\vq5'kĎf=ژ@ A$o@DUII 'Mi*y {H/÷oC@܅P=4wUz~anqNJޖQeERM*k [Wp9"WvfU\ыm3CלK{z6JrDI nǎL_8bfj}Crx фAoNd P~ےaTK&}$Nt)zwe|]WRxU3+yn*pG.R`%_6"Z̎4HrUz:cxls? S[5Yvlˆ@ooKt6[](NW$(}W닼$rA\wS#";zMmb @Yuܝ>mr(䵡u`ށʗxܘ P]l穭\mX6'40cOX7J'mMW(@w  OGawcp'.|;گØ4HdGT% k5JJmL:gMq*8YEkSVɼ6 <]ɰ_ ,;wR  ZF2$'oSLR>! 9hjW[4@TԖB u=pCOڗgF;ee{fzС\ʈΔSj88OfjD~?d#C:U.1loMj\$NӉYL K縰$f[Gб;4n8hծ~DKU8H|c)˻8Ƿ^ް8wnDK Pom)Bm(4`CB|Ilqe*;$A-!~j-霒&Z-3|+; VztxQ%^x¼;15#{GklAt]r \ﵳ4p?{˾z_bbOZ3&{E0aMlv]ZE7Ym~#z@:P#rs٢1h27?m{0* ᔏ=((!0;SǶftl`j^ղz‰Q%X*8q$`|=lc"-xsɪZ#UG-(9t P m-$+D]M ӷsxա(26ced<H<^r׆Ntp6GBOͼMLQe;vROo>Ј!Go)B(Ϭ;`sDm#~}³T_rD >ػNa^6iӷVTӜ7*J|i[as#+2 F,rT.DQٴRa^)`=R=\>\.5P=8R+,zQQh/@ StE|g%^?vЁ:Z ĠBxslXrO6&CtFϢ9AO±;ߏ$Y :."%lm! 6rrրpS͙[KS˒Ԯ-G*>aÓkaf*u7m<3#LPi5x#{w4AdUѥN~ncthWyaH moTm؏ss~k^ˢrb(; ~֥JHe*/OUBb d؏ )r&y0oUPLJpЦY B|j.^;+8U>c&hւQ:_yhnc+'RȇZ Q֧Yے:W~}8ڡA7?rujCz6ukUz9bR+ *'J-MJ d{k2n[Vp$ODWAmSJ%{:w0 Hh^qڏI2b1@=kԐBO\8ʲ{]Z ?RѱjԛBsXGCz)Tִ D˝!l{n5嶙DK J)H#+K_:˫ͨ00-%|Wi9kcLJ n28;)v:\> 8ilVi&f"x+ 8gF.4ơ؆kC(Ȩ@ܜ;(g?}GP ?mgMvʓ}V,0 a# ~0p4v VÆAK=n9.,Ҋǭ(WslROĠX荷xoyh1l'50Ҭ}7F Ԧ%44Ij֒MYtQ9)J.W`\gj- LYW GZxKy*dޒ#Sh( oZ'.ʕe;T6m.ەʻYn@ EU#E1NZ? c%+dCˌvr(X 'LfA-#1s;>Uu(ƀxΈ+|7 Ak.s k*%ӓmM[yaoM~<|&T2nURBfj윣0̔)nN<nnY,Iti񅯯=h=2cUǧCo5'˙W+8v%.N!|0vQ FEjĜq<@$RM)[ғSb%ZZ85n=^O F^NSK\jX,G؉>RvsMY 9k.ӵ 0Z0eфh<^Ev8N lDU\McNA&!AcӚ_=ʨ=E$K{w2]h5]Q 5 eEo|tS-L|ll(~&şLC#o&55kcl@~p_Z&(mXW*vSg('ąp*n v8dC3q5~9t 3\edD) QtjDy:Wdi* aοM;~:HgSlbcO42݆Yi<O0SBClKWjPЎӁ pTXJ\=bWZڇ1n+`3Sw߇SiSuxD'<')..B~s_E=[,#6AG8Z%sˏ7F;W EqEoƥ`A40Ӫ;p goPȜ1&R{c#ƨnvU;6V3H5((Q96)TL>E] Ν3dATTn8 _%4"XhS@³I5v\B,QQ6;=/Jyj.=3lJ=]fb),ϑQPl:pu Kfd /9uĜ_R# cOT\M3:|ҋ >"ԩ .R[gߠ1f+]:>Mqb^;_$d3nT獗Qg;'.Na;ZS}ni_F1-{%md)@׳atE0޷[+hgrPE7郧i+tz "~W^dZM#U?!}APmM Ipcfn/{9(0o6r G*âsu{Ëi )^s1Oe xFcW4BSt "3d:kkU<n"6ߓ&=N/.:-!*|%.5alZVܺJAxma^ 2JO9xvxJ_@yfMP!OdkaOo|NUp)SzU(_xY27x20 gDf!7HFoϞ&áOje<H][@2+}@NL'(K]T< uC`iKr<tUQˆZN'~Js@ipXֶ'J@k'NP6!$Z0iUi/ \3>bRn+_Twޗ<ùmorR_rPS6ZZE!Dn5o$Pb~,x8B]M{vU`r*QKbnd; Gϋ#`2$RuB]J_Ԍ+C 8ez5E~4(Bv 䪅>">٣v,w( S=RYHr0W7 8{ ?ALZDy*ՀuBl  2YF[Ejb2Dp4,1XA%޶!h2yO\b 0sqZ \ox51[ \l7rgv k;߈k3+T gz;csrn64aTAm.m5L1Ƿd2x%`uJ}wG*xzK9.7^*]ĺRK<7MDlTzZ!^ T;3 9J;hHwb1fsq&;?G?is$&U[+߬?HrtW-'cMi_ Q9p~J,RiXqTx hJfM8SAY%ðdn 58;$i`!&eJ0WE !!7ĠsnR{e!@4Jo7Wnwr)8~1Ƥt;kHbsnvۢ hڳnfv<&W|ƅ-׿mhb d9W{G.5-B~ 4ֹ\gǵ~ dbڙZLեf|+:e+sȻekDU̔$y8Ibda"+Z[a c^E(ʕ֢\#짇Lr],UK)s{- 0wH{1*9.(bQ^X8OLzu]>^rX3Qa.rhVY[5Ő5[A%۟#5(|-Ϸgz`򂇹O| zDmT"(ajԳ\VJg#fD=Qtw}sUT ,WqEƼEWEe>PNSr@ d*L  |RZPO ht ux4Sy]A>"瞪TDJRV}rۉ{+l^-*tfۚi9׸=ψ ls Lh]q)&䰒% sf"ט:3y=uDQa=ny ?8]{M+-w֯SKͫ4v3rJmr[ZΉ.mwiIx[v'4SwGl"9…+eywPEBQΩpG wIK[5iW'*':},VF%21/z&gc_T.DR@ {q]1-`rOAHthTjh,'[|K*zP['̖JĮ?H?Y );_*3ju gcd6as =YL;2I@|췌ҡ{/A,mEl(cņ(p#OsT:@|Oލ{qJuf-˾=nbf&QcEH 8B~<Ϸ?i.4TKkO]`ݢ4k9zJkrZmD~*-A*@$}2aV uyt{7 S|Q1H>W]e\z@^z`})#@U!8;u'_Ư7 oFK:^eHwCR`iQCcz]`r(k#qgG&O} #՞!Z~U-ڶ|P߮F $~>C|ʖNKT#ʏNz6S?<K YuS'r`Tid`|&o I f2N|E.5umEoz +NLc pN"N@<˻nc$jO`@33D6`p4w)pA-rӖўTbJ~ćV*b-!/hEq)*\JW5@+mO > õD5>{aݶ1(:!^{) !~`Q`qVUA^SVBns0&·HY|5|Ү$O߸ڂ_b]?qT{_#~bwK&t W,b*{} kIì-B+57qL+vat ~ı}QfLoy%iBT˂dYY?ᢑSsf%]:(Ⱳĝn(R}ܮ/Qt|y*ca?DP3̩ϡG?% W<O8*9;hm!ҒdEH܅vNT),1~Tؿ{~/D[#x&WVfȠu Tku0u)H8'\"r9 }a fYX"'Hk` )$whD?:N9Zwh:GD)9E-LX= Lv "um_j(2jJ1TEyq  _7|ȍ?P /:T͗v/ZSIc7 1Й Ɗ0RU.Q&mإvCJGrOÝ8Bc"٭,WKE=I!xdN-L0Q8Z;qD"ȵ wHM;V;h&"$AN1D(M8[ʵ+-kVd Hr(%lP/v3`\(3!Zjd%a[y|[CRjv4=A. !Q\G.fk7T}a~')9R%:x%!$y_'Vx'hi=Gxʼq# x%S= È'sp)12ͷq##mj t T7v0H׾.W05w9_J3!WHp 'p.%zֶW%5$;%ȷV ܯaĮ>sә7I E"5 +!j )|^I1MoبWη2=] =o W2sW3 武]XdJ8#%{b%X]a3a6_{<2u"IC3Z^MJ S֩RH5B7" M c] ~ǫTDK[wүUQߦ[8NaF]-!=z5m0yo΀oQ ?|9wIF䄣khmD`q)»! %n_74^+e3=fAH'{B쭹\ ^׳Q1F΢vTezFXuE>bѰ1K9fn.r1/ u>CQx@$nCQo` !3XgH@ 09}8}GݔB.%ȗ}G FQr=0h*H^uZ!i%M%N8yȺd6ޭwkD(jJ JA4vUO"r Oʅ{8tݷn 'KkvҢҘ.74Xd=VAAɡg>i=xCoiD$'[Ogd+Z+H*@viaTZ ?&xCsaGj zЀ`zj[ N#!^N_BE,kA R_kOw :m͆!a~_DZr3ȸ{G&"DoiIk7u\ " ?*⿿T;=xC:@##&x 19hm&9 Pi7 4`C UYml*oϨ7#Ƈb[)ŃڟueHTb̜pRPٟju8R]<0~,Jɪ<;̌n|2>)&c &SP𚋘;3-qӁ}){ꭔJ.^6R 9ݟDv%ꋕ-ǘ~jF&Z`^IQhC_l. x^vJm3c\Dz - 1/ө]4!h&QEVm4j5rzp7#-&T,PX{<6mpoBFm{M?]PhVIYſR'ԃU2lUK:&kd)cDE p_Yg'6{+o3Ki GM= {˔D=^(:8Sfݮ4 z+I)wEs,DQ 7C^bQƃk ψ#FPEIVyxfLz|2pR {zaWMnjã$h!8J_T!&PtG`Eyޤ%DبdN֥CѦ)h:B aDTA{7 ?*y]l\o]kR 86KmZVPM5GT#m&)U2+`z.[!ƌ@@ #l'G7|^<60Q1'!u`>Ţ=aHL@V:>:RC5ǟ|l4FAG&] n(LDmӐIoԜ],5qǿ(Q^XowUoE-Kf(s4!M*Ml6,qV檚Tyc$7f=N7m~4rqrT3]L(:.}!_;Z?F7h7/2޵v)%Ke{8Ij=Q@HYO<鳼*>.77I &H:;+l$$x{X% >,XּPQ߈U trx\^FG k((Jc[$AAƍ=2+I&]X%~ h>cUD%7 ;OqŢKc;?w$;>Mëw(_IXvsT(*l\Jn|[_L'$ :;"o bga@IsLTӞ٥qFĺ$]ūVNAXsD)VL0;D(YwCq݉yG~S^Y#?2FYB"(;/f-2NG4 _Z[5RP4. I~dYtç8@ϕu9[m#f㳍>r0\ &~Ǯ-/*#Izغ5M)zL6M^ ,XgOFց­ҿne5_V[ZVcDzA7" >U9 jh~er"[Tв RV~rmw2x33%SP^5gւn!vc?O~Gd]+vKX>.&0%E97\Wt7Ckd./ᬗ۾dgJ(a^9Ē '#q!ouO*,[]߶;! GVmoۯ(tTWb`ٛ$1ZIVZc9+uWЁY%)2)ES.Q:%~~3]kN9C>3N sO,0&A ~@[9 8;)?i-^͘~~~N&Bemp ,t*wc_uچ t2sֽU7-P)ܓD59^>5H$r(nA?n2y%u2߇)N~ O/{El³Wg(8wQ$JD/ّ&)gY}'2tm,KmyE;v)`cgMV`F>cgw&ǗTYA)g~&iF:7J~ntf>hN˦ظjB2JPp 77 kDʗ_# o{ ٓ99%1tzqp"?8O+y3J$%9WVۇ, $Ev``A+fRxC䦴>n 6-"*c)|wsܯF!tXY,;}vazWÞZ~"zCyZWBfo\M꜊gFCK_*Yfa1[}j Z;%)xsr;QE!w5NuvB x3%]7m;0|aW\PvwE͝: !Q1`ZV|VZ޹Ӟaj,vkܠE7L^|HG+5aX⒃^N8*x|2~1||CMP2`#.Nq9b6%5"}Drږ1'OE`Ӛ 9`쪾7خ|pV.KMU.C(oB2 Ӳhvv?ftz46x| H 0;X^D !WY028@OjymP6r u-{IlaސLmSu\ҫcig Dj])XiԘ9:ݙK:[fx봡1!n Z(#ۣ0*&6-m VuTҤ>"T2aGBQJ JyK}dy ě G'뫂c9I ͋aXMivak^W/E ~ Q2p6O\y[> @> >4}OK {Y˞2-xPOSFwy'?҆"iH@`Hrg^ZG/EqE1YmA:L/i߄#˜ĩWxc'DozH.b֜4WopAGUD8@ xH)y/KRǁyܚyq Q#v0\;z!˕іm.Rv|Ι 𢤦@锜  B;XT':'6s {rOwLʅ'c07ɲxfc6wy!D*۾ĸ/;1|S65T-FU L a3$vqg0m. 2ԃMB|{W#|LT?CCW kwv00ബ2bzJ[)p@58\}6_~JP!u^ۨ+RhX%ɣ҃=}UX>b #OEm膬NWIow#enY x! 9δӖdưAbUn7N&dk cq߇>\@$~ƄD? DvބÅ?P݉"eil&ݦMˆѶ `Jvy  C@Ek, mU d[|=S  )1 $xѼ5] 4Mx]٠O"bpĕdT*Yh~r퇩4'+=2.IFYX4/q $vG74vϦݑYH~4\SM0lC+鏭g T2[hе#A{ہj6SQi^*>-Sxh;9Yk⨑[9 sƲNu:v:}ψ#C Wmັ e`]3btL2Xl;\GH,,lB`+mb9obPkӑxm]z/tLJ?E3>q b݋uGBq8'C{ɝ{hS9liKKOIk↤3iIsjVI~@h3.f+"#:b+1]~3 +SIֿ5 48YA՗&UÜ(t4:$?6a-%_(S/bƝ$SD'HÚJh494[[hLxePkP{K9]ijtי$뺛Ն;<\cJ櫒&X ҂Be!Pc.x0A_D9 M b0yhtˎq$/:< fmܼÖPA3 Mm2HXD$M֔s;l朗mmq7Pg14{$*v ̰ة9G*h̿#p3ߡJ(ctmdG x;1f`2 5lprC]-NL2a>kBw6 :V:G"ЃL 26u -$\̒Cr2&zV_źq@u*=bhj8W@%*v@2 Q=: MT7z j8?0~~Y83NTz+xFw$|Cߡ<}d =/$u-nOiKbhokPO#lwa|IcL з=kr\ ZH.:h߲ ZJ^!^XGh~2Hoڧ>d F }Ə cd3َSL~_0]O$Ur C/ȌDa|̵0,!jD;qȒۉ{=I:K@i?%T~ܽ{N3B}oā|M,{qIb ?4_t'>B v 0mf]4:C0PEaY($>aPiu5 xWU$ ^:#j,l~!raN(<@/nTd&h__?rn]@ڷ/6ȦQۥr54?{k|3w5F{~6jܴ-0X4~ۼ# m`МA|8¯xWp?Yѿ<)]}`eН zFA6(`<G0\bi=Y1FCag  [_c^E7! ݉$~,[FewhX`vSzN6Tldot.8+rS9G3TB q)VU=1DvxXqDbro/s%6Yh{mksPX{1oh<Йҕ$^=&X1ڕ(N' =@;*HHXIy̹s|v0_\cZԐ.'='`-(ؗX3_~RTC#L}:Ǯ8w@X%gr'F-+ءJ1GS*c#tϧr\TC:lTdAĠn@ꝱ2מ`|nTaaMm|9:S;ذ'G{1qSCDߙz,Azy5^ωƩC2vR6o{H?/ϓVb`W<~fVg=f؈u93e$$ T6O=>54 vWI_=+ !6"U*!NspZ_3( )w9Y[t5'`A7k[#O*iVCFeMakB>74464`8#8wp2RRf ‚F}T} NR<bː(6%D0Q;k KwV:4 /|r\N}a$Auq5{i[Y^'6pHsCYŽFBHs6kju82 n1!^bf[L{(mECur5>;Ju26̟&*,` 4ԦD_h%\>4ٝ3kkzCG j<"5\·. UN*2Jn6KŸI* 1Ii~*3üݵ8@C&8wMJYCJسi4:닰![9wph-c#s6ß4I2jݛy$_՗ps ,cqAyxYE9O5*y;hYkd.!ܪ$n^3; 7QV^WgV,|1sZ{ P)o#C)NV}K`yMikU9 Cٙ3p!R![٬O%#2BUv\>J+,YMw_kߗrc\ 3h~&l ?@">8bC3ka{ 8ℱ>Vi8rg5SJvA&PN>eEϟ> RN*-# '0U`iv^%}M б%{p|?bVnɀ"]{dG,xRODM @k"]&찠ABkYg9^jk{k6'9QVAUNOw\âI!shX:P+A+5xbK™-PU$3/q+@)x;MOc6٪6s#7pK jy#];R]doݡ1XiU;&uY7F(Nfb R/]Fx'WU wKbQO {T*\#ZcBC eS^[i; 44z f,}kx mkN/ui{ 6@_UvqSAN"iT[<~8 WsWN]>z3DVn1Nk}b'[b0FlI~2qqȷ)v@$@4dq&etV("Pp={-x1t)u4qث2ئGPݶ h鰩&-0M,b]p5&Y+[>& 1/|Dkk&x/[gTo;:ZADw"}[0ځ쎑]9oCT0}U`K'[QMǣ'aqvI?P8%b@㊖ݏN^y "D?A-/*d^3L3 ֠ Mq@KykY[ǽY#;@Nea25S+B*3B~55oEndeRE+T%$oBa<PD9 mf2;0 qs+?Y{ORzoT" DrUB'?3w Ƀ,w#:$f܌wT'7PCBp$ꗆrBcaM_07: f`Pe `YYSWl>jd!{L*AO7iZ, 5Ɩ{7יsQ&);B"Ԗ+5Fo7,,87%`VEƅ' п m'HYT:,+pxM9=`oOP{T_N{{o{5Z(fԿw/q  1nKem} ''eZZKVoyO1B@2)hs@P 8Zaa]b.v\\Zľ >fjHmvggk/qXn+B2rxJtۢ6Eڿ^H\z˨^–oVOy8È1?I RTz90wn_3KkՃ #ɍ: 'Vu3,2+fr ZڂfoP7&,hA)Z+ E]V ;Bgw{/xx(H ay{N %HӞEl]9A8~hPʼn@s <(oD+7)._lr'jsԞnjNן!0v42="Y7 0fR|JK<>'.5$vr7sՉ7"& SWx /h܂+ ,s+L-X< EN?j>#!-7RBfFT'}eEn5ꈂHg*$HL.hI9Mo8x{J 4rv7(׈%z#w`QFeB' K!dĺ 6+ Z .mA[56V֧ǂI-t O +z$/Yva_R77xǥyG+.oJu#eÑeSYY?`S<޸MʃBL*xJNUL^:/y'8GqO_1?- =1dyTT4WSƅiͥ;6 lv,% 1xxp|lih6\l O+չw>6煅Nx.)W1nz( RP/ -9Q̰uڟ (  桨aNYIOĐ: 'v]4\zAP EJM f0bn/=9ero^NK 胹b\[rWUmC@>tseNb.㹈r6\ldZX–m 7k)9v“%01O Y@R\vQip;><$Ck*E [gU1l`~/-yJDOni[2kz9 (dK >d%c2" eij _U<(~KW-wfkoXFzLa'Pٝ)ߕ/Vx9v{Q_*L1@-{s5KLxͣEcw6{'Oh aBVo^)33G̐¦]t<#5*22x $1 K F(;*;B}@ӓ"4uTm#zW^|Y];"^ +E6dZר%h[L6饇xnYo?B=Ǝ6iF"}l: v?N.Ö6%pr^]#|8Y퉽)9+X-fy t3yu¸YzF%|ZCQ{羒LտI 'Д } iU(<ٲ6~X6V+L|@)WEwwKwkumh-pN/Y{9$c5g.o^woZ/Th£w =^g1RWI{S/i\S#c>ͼ!b+LZk}$̰zP8"<~5̫K`h},Kw#Yi'r &VU{ o۔ٵƵ#Zf9Ӹl &GKAܛSti#02Q2I)ŶB6z{Q9w'9ֽ\hQ#6k}5;} (ᒕl1KN)3)̎r{9ͽG.,&#)k B!!~h!XS{L ž~_$<*WDnH$/RS lR8h]Ԟ"HSLJ"_ۢZ7h)&3,|ClwǛJ\e$»}U[?;wr$ôHΗD-c :Ý*bSj&v]I#& {,G^@ݡCJ&Aj]g%Sؕ%LۑV,@7'΄ x= hI TJʡUΆ Qpݬ*%YÙTT@nd g0yz; 👶= ty6Pv*ɟ3+* _8EQT>ʫ8A;s9gPr}Un +r\x{ÆVPQ+&px\47&z{><rC}KXpRw: (ܨބꮚ'} 8tfI[ʲ>%"b b3Drփ-CQ0c1дw~dꃫpU1,v0޽8_4K]*( M֕i(F9/%${C\"EU(iİtE$s4L]3ׇAec JnνeM7L2Wï\?Mh_ |L0?9\}d AU-Z^6 ؤz,Lv]ډ6qOV{SXo6Z!0sCс#Y|RwJ3PAmML'R#fEwk;5dZY1Ocv )|{arL8\>ۈ |p-5ۧڂp*7uWŪd4]>L8;}4@6;ٯ_ahMba5~ q5,?:!5TQ\p]$Y, wOzAEqJþV_)0(3N!]=yFaAr0"BFy`4੓ %m~>Yexfz8,лUC2]W-Qh*j7LK $Y;WaT]TJw^g!;ݰP+L"[L7[ݔ f-ÆbWf|f0񼡏"-ik{Z{xx@_uQ/"Nz)WMյI} /8T,c=nvyg;=g&7JڳչQ Z&6ձZ%DIaBrSKH=3ǚWpY3RtD b>hdO 鮧[L9FZi?R5bSbz l%[*GO1R[9tq}Q`u1u&MH]ϦB}n1GVGadh]C˘S#२Uo_%XC2CX}ݽJg~9(!?GY*) ZoDu-Y KA,,qcCɠUߪíf_XQ=,fD&u x }2B `4-2.]n&QڣMdoViM'nܐLϱ q-Xkf(C7|:?[pOC8Ce 3 8 7 r}G: 1<Ý=3&K> ?Mq)F +c;}s(PHʦv `b{(d6s)yù͖NK><mw}]>HMYf=ŷ@Y㛑kuv:HIQ~ o=@.M}9C"6HtHGF @9q9S=+2G)7}|ό]` +?b 8Y E Cz gn@XMn.堫#8'ZgBK7)ΩB)0@(@N`v*hF(TacM("1=T$P~GAeiiq T-~f+2Q|(^ꍃT"@$A⚞ß #eR44p]-X >SAfAQxhrF`ArKDCX`S..@ltK3 4R c$kWŊuR=ɳG&8IsjҞϜ3H?X6|)s-ic=Yz,,GP &G7"v0~/kdd kQ^qaljݑ F2Ȅn# K{uC]Ҳ @f~s^}XJ^ci*XC&+.֫eR9@bŽMg#y-Ɗbׄh ݎF~)$b?ltD㞼Y }s$j/Sܲö/ɻIK YN:>H˸@ÂpB% +%1`OsuiD5^ ^YV0db7Ub1G:es *W22E^T&o8>J?us"s'7U;y:6w{A xPIq HqhիHG @0ߺp[` ZҜ]Fۖ=*E}Bi ?ܙ\HU%Ξ$%^XBݏxJ3ɏL˦*sSDkex\u߷9c, "Ta}rIl^dL'V{ޗ]OQٓݵXhm0|-$ˠKZHD|8myfﵘ3X uc%s=uhQJSB`a'ke4O^%bBSPO'+ԩR2Z~\! 5ӯ+hw\seHuMaa=}cbݿƄio:~[VNQX^MrR / h;B0w:)^a(^Ƚ7Ml4.G@6T;O >oiC_\GU͋@`m#yȄ\1海S5k2.G7[TxZo.ڳyHDNI湤 |A|=Pp5cY/cKmz B w328d#&Ow1i'!Ajd mXFc}UHpuDM.i]| g"BnZ/j[0y^\^~R"CC ˫6_VnPO=\yji9# RZ 9 e1g"?vXso ee-o_qIǢ^+ӄh 88-Y40C`9ڼϱ8L#YɥwǼ i.Y#k\Vv<")~zl%'E#g:KLQ@mὦhOPY[\^b f:XXvoRc1=K^/ MurRJ0z3Xc6JЀ~5 FЯs}z.ҡC`.CL*"HM5Q3rNn\;+᎒ ;?$,V |Q/}q3iFpoꢠ`Wǝ\/`Q ˰Y*jriÓ\D쯁(kA q|Gut*b5;nkYhnV9JXt]Ό܀.؆le~U"*+;LȑUX1kg5/J`"&ꓙ߲j6 [9wC@&R6x 0.GtyBL.m0ދAewheK:ܵ,6f A/@bq:94w1@Tddt< xvӫ.6t>\P!)BK}&VsHW oEz$QAԨwP)r'@1T0Aە(Ilco]cNU5"mzG}>xLOPC)UϘ]@[lwj@;dV?w0Pnu:4}WfƶH-3_߯UF5ʏ|b멕ԮـI/O v bqMuMI?X3.:5jPcnbvgusAG'L"$x=+}M<-YvNsĬ~D30b O', ce{jl--bhbϋYTrYS>w𗈐ЗT3S["`4tt}fXTt'`#XX5Zm$sKMڗ<#t~4`QjEfB9RJdfS}03.> Xm?I$[hx#ŤZRmť ,bxrq/b͉?v3o!K[U?qY8"jTڲ0X=NwDy4Jyj="['sxtzRo vv5IG7X uX|@H.F=C9iK;Wpp5[剮E5bzUea ys.,f[3S' b_\TFP}gj@)JMAضB`ܯyShEJŖZm=(MDX*h^%Id( .Np7њъ/yжEKn~/Rk/K9y\RgH*%0B9ɦj4=hqCRR::a9y:ԓO an]dLMS'}Cϼ`;|VpRRu|~!l֜ ao9b>^^j-OZ;3>ofl!+=8-lY4_zq9*m迶D%")Vyy^qӉy,Do=XmѨ483Q} ]k(Vk? ,)Ox_Ոj1O 0g6Y[ y75:;a֢I%#Vie'Fk5 8 xwga7g`f6&ZQցZTF VK"Ǿ0*Tϑ]*sȆ~e(; gFŊcDK͇!c^MW.չy3F6 ,x?O4z=e:LQI 4qAx"9I_Te2o5 Z袧o$ T eQ_Ss+aLKݢx)p@ YteĦq躝 wΙBo4^ <ѯCkb8Jz Oy?K ]d wZCnwB nC2\%ebbTt=p5A \h!]TZzrU Ae(}k[ (^/`snza>G >/֚i%u kYiAT({zNw+fH0a3W#ωG,]͛mغkcJn5*bX?czBf7t]n+N=֠2&˅f4D¹ z$Yx0:s-}/ȧ s.N1?zxbW]X3Ri Uaqä*`Eoc!8%d5߂Pz;LJʠ &x'. *o9}d[wrAӈI H[.VnUWgեHkY'p6G+ RSc6 ѻ*]z7z`Nם%Zbb~6G/bPD<Ln|{ N{Ew6%%\p,U)2j*"g3b?D-O;IXn{H>1jW\?i__n\ 8D!jMzPO4aQ 3 =j|Iî|̩!SnTW&ɢ$^N=Nk0LLBa&) #DQr1W 70k( ;5X]y6!6Fگ$P75 (bMft}yq@{l`{eDWJ܃ #ʺ(rajQ[i,PeTs&k[iNd!l) cїES3IqS; _>gyFc ,*m ug-;ɟACNKtnI aEc_(MOtkE!7\^ԑIڃI!OȃvEYj8Pk0]W~E]fzy5{KjPg)E"Pp(er"(_c{ݻ*>IOZߌ@ ٪}5pxڿް)2:C5Ba\<7dQ 2MxoO{@9 TnAHX766Ūl+SpM/t!=9awmߐ"uߨ0De@0zC-J0-F98^@"dBF#Ybi١yC7YtǠvcb5m_|h;<;AX{V`?߄n9lcmlUfBo &zOKlq]mI?-4bQmXo4l]=n2ėuG?\"sQ7Њ]pauvmAU(]%=kڪݡ+\x*_-{2m<$~p@X CSN3B\t}\UIse\h0Ӛ`&Fv p34]KW'n nX y죈3p7t}2_^Š&y>eK[yIZ"EM^a㥎$ov@`PqE`CZtƎ̚zW2Nʬc ~d?0,A Ur+Yoӵp ;k2wu Uu໌(rNs eaZwtT>֬0„sL\(_5Z @ҰcI>T!|1$3&ښSZ呿nޕ[ؒzx-akZ|4?D?{ЙI.Ø"$hY<|>A6t]A Ee$5fܼו)kA~ˏ$핬I /Sj#^$n'8ڳIg}e䡣"tPiɌ"a*&]-mWZ tĂ{ìhJ."Lf\b$5(Rء.ccͪaUo8i&-tq^& kH(ɐ65>SYX}(F.2.,dC - sꘕ ߣ!R_Kً\5K)g-&!BteTafUK)+8KPcL aC&Dky*Rs R;C.0VYUfg @۶Ǣqz$]$dHP9@2#Rb$gk_N5l`l&]ͤ |!R>_v\Ζ|Eok^Hŷ}C1Fյ;I>Mt O_d<3&&!Aտ,` /+4gK @:6_}xcZ+yXNft WJA$M+4+/+W)5ITc7w"$*l+!<վRzn_gl$VUCuzF7PȽw>&eAzfeqhYXz C: r||z&1\`ȤMUƜKT(1*gZ V;G<SI?Pn"֤hb`?D8P:nHX [# RvP r'%7eUྍ{gagi:1ֱW8Wc2(m] UDEO%(h" j55NJ,uq\m4IFŰHA8,L-U/+^^84' 6w9}r_em5r*'HO[}5˓b΋O@㟋< ^+"y$ LVE0:2?'^{R!.hZ= 蠓au>64w0ޓmX rEs.d6B˞Ѫ<} So%#|xV~W.7%4-țQ!Ņ 8Xqdž OrwatrE4:MSȿmH%'ANeMBc_^Wpn@)XFĥ(hU=QT2 'HMCũ3gdm30C0 1-?QFꦈNP„5Ή>:Yk;J]xzP?fDVJڼE2;K8Wnp(N9p$bu֩~:ߛh e"-`h5Ƭg:ZH~21-I1N*7b`^ x%D0٠v 0уnԤ dgu09oR:bq3rҚ,!QeXLv4?bDRZ{ bu'齋1ͬ;m@a^q(pnbXg׍!m\)!\̡n).`H4zXp7&Hn-NIX=|]8yMz-y^f}b[UyJz1!NlyĞj)-.2x?xF+rD@3p}E;ʴnHoS# $zNX] xEoE@W)78 !4bDa=;Ilǿi7*mlj n=Co̾eNٗ+-~&|l[un@/EP5ɗKSOkjV=aCcT{N1ןdm;9BwNvAÞ$5Š2B,u$r݊pR "/q z]>O@L/"eq%]D3֌hGT5WBH{I,~>-Ȝכ.rv[: H p 4@u #EAƮf]U"LbɯIԉm0h{Hޑo.M(fa U"}<堸Z5cd1`2,xb: Ns\[7end*E_ i8YT(q6o9sLc7';`JK)Hs ~TOimL*4ZUWӽ/ˣlii/B1rzjݮap=++)⬧0yL9I$"Y`ŇmyKv)ޓoF ӶjƲ&;MgV-OamMZDFehˉ Ga(Xɮ =Y뜘 N^;::U`7YĂlU8W<:ʰm)p ]EGdɸ@a 1ňR^isSw27[A90O tBdѓK,"īn1򑖄B%=0ZlOAg:7^5. 3aaj蔳c͐yF_-b>3,Bj}p)ڣX P)^'WIB?#$57יt&㞠\ B/L}w8wn ۜ̕j3\ف&.3+j.NpD!?szP$g|WJWNb+<##G$Qg^kn2(ctnSY\!]Oe%5vWuniH NyӶk(I$h&^_ :/hsGai {LC8}>V㛠Q%Hʡdռ$#I/i'bz'`?2!uG(޼mF=FMn;AB-_d]ʊl{;8Z-,t֫h&n9^"ܞ0+ P"Pߦ=ch#az$;rF>SVʾߪ V^elB v{OS4I顏v:\<@ V0"`_uob")2>|X$״8QedIL7X5t =b`2W,JS$Mh/2\^ jH`ς7yǚ$daqbs鳎9E~ݹa\qcݢ+_g U Y|`a #̉v⢻|oZ+W,>.wV6 TltOڔOkI_co;6s^eb{UyĂ\ ~BYXkܙXYnYᨋA{􍑇4;f?a#y]v.t%2z.v+R#|<C 0@l2-) ƣps1Lt&\.^Rc^>Q7:/ Bo'ܢm&#m=:zz #jr2ah`].ceȁN=^ihK[G#.E{Sa=-X d(A{Z<lʠF8zRodny%-SZS{Z!hr!3i‡qw1NʹA;CdjxCc=ٯu,"1cf.`9{msF)j59_'> $!0Wn] :, pD2 C䧨O~bj/G\}ݯN%+>; r/ceh@bcSdi`>xI͛'XvJfnC~U?2atAi >EnLzBaҭ[1rm+ ?1fYS;~5ҧ*d1q]췻  se6vlN_CXd6E (V.w'vhZ{4÷l$зυǴkyff7m詩3"2Yx;lfa@Ǵ@]?Tx\l'5Іgj=)@4dѿ $w[_`BW1 fl鲾uROުču>ҼW&?{~nGۥEb7?7-r:o liH07h%tJ,c{{Ë=nWL Oz ?p!MG8md8,Erjuݚ7r+?>)q? rZʫUO]cEm.cw"Z8Jt,&T !G!z e^}`K(V]`Vd,dU?X4|ޅ2e6М[./,'+2>qMS54a% $x-5L(ע;B$:DUL_\atA5qRm:7` `Hʫ)z5iO ,,`ɢش$0q+#Ԕ]GH3ͮA;nAp,aLJ5[T'sD# x'FW Wo;pŧۈՁ M@JsT!вۧihxq Sr5Of.>sFUͷ"㠠uYlwVurn@V?T;Y֒j8/t!.5SU+Wrή9;- ju5NEm"u6=*δdvz`ͳ>㴰ط{7rEƜiNH9^AM9)NQ0&7Gn4'$|>8z[$36V@oa_7&w9[o*mbQsYr䣆a:ع0nk>+Y\[|ZV9ZR2< Ft4 鎯^rr ap ;Uѳ\-ߙ蛳 *bl-JjT0BMfv O$uʊɨMw.;$`C &'V]%վ~ٮiDt7XuÏn]r,j0%8 b߹cB N byҗx;:DD6U޶GȦ"H>..ilk5Vރ:taAnͯ=Ƴ.h-g8eug76$ ^[JuY|jmS0"PE)j=U>J) wAGЙi 1B3[6@@؁QTg֠if%~.- Y7kGD6lafz,+=3MS\g%(\UǣM޹UƜ(aq0E `I+6`Z0妙LbײJBIuͦJJAGNǙI @{{L)WZ!q))|%,h_anEk4/BmqwX9 QЧzhA:{ -0dFo?pԦR4Mx[JM=x(sJHKD{%40fm]Fie_ @̉oElv1ɵv#?e@09l5z٣H-[3XwuzlRs]ݙPҧ?Vmsp/ȋȱ)ݟJ"M4pIyGe($C6VG K/jhӛsBh>~g*>yq`b~6IJR;:3 ݅F=H/6w^D \ݿ~>p-w0 ͡IVyBQ âixaM5/F,K TcxB*^83l"QΛo5A%)m\7.HtC79NFU3F+gbV+8V$P'c J/jfwWx/rPN滙z`>D. ꃩUi K1i bL;yWabzV\嵲RML*'ŸC㍥T-C??jMzuݖj0u+D-X"U:DKuUX̰$'{a,t}}.'y|HT]6eckpZ^6P90"h ubb>B~@ :ZYJt[6^B/Fb}!7ʇvL(Lg.>rԔ]Qzۂӆt$.ǞϐY~0帿yP?=oC/ڏF-O9ͽ1 2#wɤ'T\v e|+o+5ЧŧȆq7sW3J#\OkNJwsQa;BdZA7| WsF zE%%K4A&ٱJ\@lE)t?CLq<_D/[eN3}; F#+b]U]H+l4Z--n;s: ,5D.2/U(\yBͼ hkZ- l .=8 )Әbu2e5Ydmzk<]؁ʅH [yR]+TvZ:q%Os1t׷i1^yREi3.S/S n-mᮀRN1ܽ82 `a:r/~@fV !peP1gneT+a$x+<Ъ*]P7vO&@M7yQ@'=a<[N 7n@(pGe&$!}.+8WbҒHev3'ނ./12\z1ĩۑ<Gx&x\ 0"RV@>3;,HUYx쬠ywR]Rq*ԚBLz߇HJ*5LmѺ `v:C]]o@fX>>qai O1ȣJv"MFrs]#;yh8M +~ >ݓnx:=uH-Ѽޭ_q3K TRoK=f󍯔-F8p@.~ܣ %"#].@R0y5ɠy#>1bN^@UTڛݢgp䵷Y5~y^? GƘ\nZA)+$ t&-R9GrԤwzZC6j e?__NC8 Xv rBRHV#%B+%/z[xׯy(ⷽ\||:7G(`)z,a2 ^L RI5I3SpkX6OrsolZv}SHY,>b:Wr[lB9>PQ`Jϊ[p%(i+҇/O6KE%xt!?&M6PF>VPs Ӷl)܁f}d)ѫz3%3^:Cl!-pZJ`n z ^zyǡkPث6 ;rmpX3WC"hD} ~nT3;t?Uw\M%T\57`&vH?:AJ{*aYeb">?@t{tQVRC6Slv9n~Fn(^Q(b+XTf9 7tEĵCD;3s>g+ ^c"wH*1a^~#<7<փ_mFU? I?vaD+y_Cl=!%sUb\.|{}R)~&f,[/ZsQF3 l/$YNjRolFZóf`ՕINGg/naESͬxGm",irP _#"d~Xy†;l!=Cf&ͅ+xkj|]ޥ%%"YA߸rԭ2An(dP BHbA sV{מ 8N/|-}S츑-t{s6!KXfeӑFi[fe$|#=шPJ+&꾁(&,̗4m+LeUe~chE7 PE=px +xCX;xTuڴc<_OI\,߳ şe!v|!!3'A*!7.4XA9p"N9AmA 3P?s\Mi^|4/JJqLM(${y۩rhD&a3D_f׶Ȅ/P"alg x":[@AF錞XL6OC0y)#F7 )۳`gZv>ªbTRmRca c\..D77mIQ.hYh?08"͎laԊ[*ҏr46u|Aj̎EӿUԾʌH"S&Xe 8`bAv?aTm$tZe[߾LxhMWZyrfFr+o&mT#j˃OO })KY* 9M0fn#Ǡm)â W)l{zE)jJ:?[MGuwi% 9ߘQ0}D(zz0]a#ׅFGcj⛟Y?drאA~d(}lpJ3;t 쨘c9HW&8k F^{yr/3iʜۺY-:6x?] S",?HP047Pׂ($XX[x̀|$͸WBs 9ZJ͊/𕐴U1kqedɁY3/~kgO?w$$HাJby{ZtǹcjZl6T}V-%:/MdяA{267]AIlO^?٣oiָ=4%6op"?A컧}yOfzG˶]VD>D>HڀX;!?1w9`O D_}ڸ ^]1AZ> ǀt-,Z_fЙ83̂?_Kg/0(f((̛ConhH No!c-@De!;SZ}ᒋecy )RAM&sVW;$9M@TQBb. J DvAYM"Ed $퇂.Q+閚M"V|ji?K?`6 zyTZ#n 序ٲ= "PY@AtPx#[lh>0QQfmЁ.ϩW0/Σ >$2mCKJC ^n%v0e$}|Us8/%=m됤+=M5>{-I sN$Ǣ 379\1wW HŻ`/.ʏ-p4C&Y5BI G&hDUq^x+W5 3Hd;P>i WrQkFd?s:&EhowC:>ֻ0pBDu@#9 Hb9!U6M|MXS=PO=@JbLdPke y1P:pPROvAn+pZm5فv 䇇0m?d;4[U|%AT~Mԫ։ gT5ww]鎇d 7Ì`Y&D_1]&=TmXx{gׅ߰ $Ws`lH>\76YTa{<<è\yj6.I!>ݓ4Ip\-t@f$vmv~RъuID~D,3i_UpgwJ/nS+057^J}t5ïV9ݓԻ,ځj^s7୛ko/<= p펑;g,&l?-MDX"k;|;92vs'.;%DMнJ ѥT\I$q1O3g$jPF ҎMRGUmfy"0 B, ^t-|&FߔiI,>Bc%>p}ˮR#?YReL|ÖF[@to Y oy3W_ >-=XZHȎ.}KFST*'81F]πm_|%,fHt {hU q|W$uZﬗ" E8:.ppԋКB5O"M@OX3zw^sG {@-9 FP`P@|J8Т2AM{!}颦+<Ƴ7u~*-锈[V;϶[:#.`1.Hv{wp垼H#'I Ѭ^샬]CϮS).ùxawc3.и!TA`Du5{I&>{:S"xx#!mSwnzMè;JjLZ_d3l睤|%*ecEm`Ju=p<ƓS8;28{Ww>!Z]V8P5jHd`F)s3>4<_z>/n'FWZD|G^D]$34bv)k5<̜6Z_}P ѓϟc bp4X%V7BфUCeGP$&0#ֆWNߒRoy~&iKHm=UM#Y\rHmuwΘc|Mj@換j\+ &be2J4#5! vz>Զz3+]X> pZAK5҄P?(/WUOo8Dۑ⓫Tue)Uky;\:D/8uUZL+ID1S(ؚ\Qqa;lcޏI4"H;ĤZ~Bwuu&{ r >sfoAF΂T*;jMS!l~yU(Ws֦UI%s`7{#+Cxh3ABʏ|.^N`ko ^Rsh&7AX a|z_Pq}VSKU^nn'8.1 ̫ /Xyѩm-mk1߬$#,i*yxGz%8˖p̓%ΝD-}1]27dCG|}>()DpH$NfxqM{}5~`UNJ*q7.ޅc#'C X9';vj!&7g8E6Ьx(dӀ_wٜ%&!oB;:-}|J$L*.ث6ϒǿhhC/s K2jE[ړ<@nPv[}{ 9 e 2яO҄zy` pZsPB"HBEHh"d,S '(~HP.Ocw,Ae_'8spj֖+=\Ѥ9_iILq}r .2AŇ/yu^)fV7  W#۪tl,+=Nӏ %k86N0[9C-aNsZ_戒91d?|LLjS3غ#g>&elٹC~*$>p7Y/h7, "S!8լ̳ou9Dj>K(ͨ Lc=6ӊL56tZ` N_6u(ϭFgl> ¡T/ŝ0/ZHP{"xh%c !H 8oUѡÊ/șhWeFUk]U/ef2pNN"\AbY|LZD4#5uN"'?BlGaAa{kiqXT8dvlI]9҂8cƥ؋vs'H1 6wl) l!f}>dxe;fX)`0bZv)LK:ߠ?ỹaUY]#$7g]i; sD/o( 3Wg3 ~oc[Ԁ 3QA")Vdrk= y{ɺL;(y_;\3B,zߗskꪽDJr$Tyד NÓ#-? VR0ǓаZ2fCZЇXpi:$O{Tap5`ϲUQ$3isFqg$ ), lw7pK^(a+gQLF οZeryĩ>Q{dH-EBQ"C !7m#?{qz4rQ}8-gl1Lyi4-aw.n$0?WI`v|rO (%_D2If yzn';$]pNΪ* JB $%;zǂ'-`@PXAoFQD Sx" *j;'N^X7L[ʔ bWȖ>Ҽ\ojK艶_@XưH-#}D5]Sc%L%ϡxtJ͐J2t$˛_8FƓ 3E)>q9 ^Q0)/Yּ$H#ڀa_μTnsJuCHQfsӹϙOa7sLtŋAov}!}Cz06R6(/l@JOHÕT02WnT5ذ#gYy I ~Ь#4 Ѷ$sjQC~2 \ 4ZFU7>лw^0z-s1fgFn p#G&,!oLw:7V`Eć 01,?Ka>wR?TB0Y+6WyoO)/  _HA׌oY2kk{r02ģԗBKREi*^ @y4l՗UIG5uޏePEDz;5Y׳NxAظ?͔6ZdaIT`Z+~O#0 Z7)s ~z/wWeW_T%g0z5+CTb#7 L|uC p$Tt &C9(Fj)䑛UhKB(1KhN[?6zLc Zjc^ax[ߊ& I85g=G]AAW_w )P~kXpuz?F ,+mk>uw5}Q#:Hyov :sr_&d s3 =1[MpZS 6Z@Pt:OaJ+6ay/Սq l0qzq> |ؕ I ",v.DOjm&7&S _2bxܠګ"E(Zv;/}VC 9b.Aʹg|kyyYzJt3-XZ9 [.o%Y0XH 6O{.@|T/a=#^^" ˹ \l(ew ;$ƀqŢGn`VOhYl?!eDKv #Vջ݃9c&Gf?"Цa,98Ͷr@/vMЮOLw~vV8!S%F"uc)k\ν1M+a64=! @W>=s :ċ ''.L: 4~Gٰ~̈)8Nh3%ùn.? ʎqn-sPK?7"|R<ML?R$b‘sYn0YB%HZ˗eb螻Xc!KG;ݵ!kD&Sv,LD&~|@Qr~(CB3n\Hג1t.gbV% P(?,Yt WjFTNZH-1䅒53{Awqf/=ŔZ8hRhZ^WK;N/o̞+o7c o|Cphp+5 6&mVU󄹨V\87Vd?>o{)0W],l5H6Iq̠Ak}zF؋6x r?;oX]rl: |hZUDA)9%bROmS/\7Yoh:h$EbZ>+ZPZڄmIoP?l"U5 `]DE! &R+nFEfVtZ;ނ9%~ l($ Vq$O\m܆CZJ/ԆБmۍl"PUA\R玑ܴT5N|߬(4>6?nqư~t1w[u}YlY]>}}No?h*Qfc~8ݫl3:ă۾)4ja4~*Qk3Iwu_XtzPG90p,fvDΞSG{uZk8޼61۠muF* Ku%?,V>t'3_\6.o,@cOGBlx9Y^ 5y5vx'ģHNYSEPefUP~(QPdHҥGA7BU6h-]fA/%|l#ʃ NL3L/*zOɃ>2) m}7K~q}IM62*9Qb*~mJݝ4_ޢR˝W_%QvI*C+S A(8gn~8b)bU{]%5/"X R\4ocA7PmV<ׯβ(ב,i+38 3 3̀ ;?hO?$+tnۇHʫ25QՖ12) ۥo[ݴv{v'o5Yq Vr@?/s5jAQW5Rj^[.en2?)ѵ Wߠ$Qhnh("S=eU+ℂ-O5 ?S7w}~Y]:s.]7< Qn$o#$Rnרū6[h|h1n&:u<#ZTCFJ.mzJz z~NP:j@ zmL+%mZ@|߸u˖f4)ؖSs9||f^*A}vwttFC(.ed %i¢5 w1D9o{:ݗ+b1׉"Yk ת8|53vh` T{o7w_5\;˕1Wv-GSq+ N ʹ@@[: @ OJCDq@:(4)-r2-L\1#7LnlqFlg g/"PƽWi. 2(elUa(<2cI*/.ټ "f l:K+CB=t)̍wk&2sw%S[-H>v6n0B%%8뙘 kdCjxWRt.0]dn,YFp.W,C`1%xkgwˆC#v1 zYf>M0m1HDɉ@C~ %P+dx #,e5Ol@3FO Sw윽fVAxaCQY<0&R3JjMR?Q`=q*$@b"fi %KE~m.7NIQޗNIM8>ߩ&-IK EftqA֟9hzژ5&_#t73C#1B+F WGIM7g=эvjYReמHh'jf |督umFnuEL$`]&}:~6$q\+APZmiŅ:B@8EΒc3MSQ:DlZq[SL#;%4e-T7,_Ҥ,O&˹C)'VP*wTS9?ʤ1$*ZH? "{=,bO=`BT;(N%.v ΀ %]{\\xLI]qdLx3pӛjQk6Q0ƨLPs(= )]Y㇨$>;waק>ʅqR*ƲJ]kT$6ilg{9Ҋl6trԚ@8OJhXEo}jE/koKD@:FTw! 4saےL?p.F,8NLO>]BPd3ɮoFILAFHL+xxߎz;Aœj0 !|#d܈@!;t[s4,>6&}j`vx0ra 8_ ~U4Ŭ'Q5 +Aq[s~nv_ N qohz OU#с pAqOQȅHm 4V{DW17q="ݖq`وZC.Aꗅ^9g,}aynN4W?-`K>;g>?=K{6B[˅E X2bݳ*y=ijHC=yu[dKUjƢckm[t؟gWIΊ=Y8Fx}JK'WZ54j} N)cP ʍu&-uWis\ŝG7_*[А؁kTǷoN@u}pL Zq;M"p5|8>-KU í#Oj=Ttꗩb#' Jq|C3uؚuoqq'$7 `7JuMBٗoԂ2ql ‹A9YdG6?Gi%{e6,O#+y$%`HtW {:<ڎV=}'nxhjHi\)#zMg, _$LTPPi*G^UP-%Kɏ >.5rI W.Ͳj*nʄK ҏ?~@22m6`ob[wV&U}@k▷PZrI-*'OnP}jE=# S8#Y<,d`C#SճP3'{2`oiYf z+ fVJ_B)$<9ʭ=-܈.La0pŁ94)4&FdQyF1ckus:hH}z !$l }uSEf+RVh+t)MgU&nX?qBO<.oRւ+:f $ ok.(GWqgd1atK*nQUū~fR x@Ff8-kzc{zzؤzC>}tYq9$Hax%j%}qTgi% ?q 28^P,tYk0._lꎓ>8C^%gٞAuw0*~߄yJ ?"z}\ᨻ*uirݛjy1q/ 8 ݋7F 鳸i|w,yoH5o+ ՇGhIo{0x z嘥 >bN7s6< J菤H=(-}bd:$]Gd'9>Ҹ?PA9iŵ§:e>*`&a{+&/"́8 D#160$f&7@ lQ'!39r XnGJ.8lǭ|ߴ4o>|І iID1&KVfsSE4 Qٓ D<J97e)|Hr_|~j~>YLk#6Gݐ7XIҳ:rb ɨi;ބ40`rv#U/:"{)i+$@S QB$2'kv-7 3= KɝbveL(d4kRŞiXZWFrNiS\( +<%Zw} ǐթnEB|9+0Z(ŴR0uՓ~j{<(hIʆ;6ACnu ,9A!fYe?G!,Ɩ el†I-iAzUt$)!G~we,;**ƈn^糱 zSQI3A 6#ǥ4&=?iqO1cw9}[ƛ#t! Ȕ {8D DK@86)B~xu5/è0ϸ.$6d7B%{$ ̸kv 8b0xM;$@9!(Hd_9ρiemK=*\蒨rG!lq2YM]QvKhBa- ڽIM2ZWD^?hc"~,tI6N-N5j {ݚBPf!B2`NOΙ{ɮ]~77}BCFDt돨n'/PlZ0ʬ UҿZZ?S5w$A# X:C5VSih*e# Q@v$q㇣6w_kߣM~#\'K2Εi1+>O}nUcSsvZh'tLdK D5v')&Pe3~f94~+q…=S"+ IikX2*ʊ.1 |嬶g_d;i{z`=`^Ϙmǒ| uR=6uyGB!<$ HHm3ּ 2%+BxĘaD2lްs[@Rq,x*6[̂VqZҳEZ; [?/sORXq]pקGs1eޢ `|P1]ζI&X %M >IlG]8v& O ee"&Z*hV_q|ͿSO(DFյ~af>v$JHP "؊t^,!Dk % ͳDBhQ7F3=>E^.q'wR(P!<@j{Μ )>%[:`7|Jyi"ֿE('rMBO2>VTΧ i iMb HKX 2DL=ǪTsY]b?9ɹb<eki2ԓ"e똞56OcNTMǕt#4T+6Q%2F]߯/{m%|.A49{`9qI#;=}@oq fX`x27GHbόDBh/W`u{[tFiVh@t[-g(⃃1pVyKmv|2^wk؎w35yuoP|y>7_"D͗6)A DK:SG#qju;ЎϏUޛ< f1/ w|ꑕyxm=TAXղ즪Xf;<]UX#BՁ`e8Ә o?K-1i -0,O 2D6E juVag9H6Ռm:O;%Dn5E(ݤɿTΊphoG+r{_eJ̘>xNFPN`,)09Jƕv.-5+CF Hl uﰡDX l66!8V Cё}?B4lnaJ{?lwRb7;񷩊뾉Ưׂ;66!C$׭8tPyhXVN$;+L2#kn֔.XЬGh$fSͷp\d4Ԕ4+铆pFDl{D/栎4̫b'_/gzl<駧BNb *u~mǷϭl ̤ c7.#ǻ yޘzۍy|SAMNi[.z.vRdDZHvKh*VZ !ThG VJ쯮Tmbe1Ͽl'WB6|L%ywL/1h;vyW66L6Lƥ+V°\0E! ^6C'BODM 8)gGAVF>{lnȋ#=\?4/ڢ-T(v_srzoDlª!dJ%#;oHO<0U I6vaXi _Ki7pJ( 2"ڈp"˶G^W{Ɏ-*\m4`t%z Gqo(ۃ +/c[RWь{9v~C@77QF% Tz,Kl5,^(-չU](7?)Ï]TQ Q^{ww4"0Ƿ A9j1hڻ]f[2x]yJa9QnxvN9EHjD]rn,3kș= hYuIfm>c6N,ust<~u{c4PKӽfU3F/3B^ƩtgJBoQFԷ ӓߜ1ۇ=u];W1'vxh[zL.j7]SpدkBT՘@ӊD@~duLx@RȥnG/)0\8UAglџP2g>|ZYtHT蓁m +.a=7J ŌWRRmr|5EKXkEyo%V^lbͼX$^wS%zhBLHZ뺘ŠzPۧ5jwfR}$\-&M';_*R˕Zt-06~3ziEb?5yp/ -CEZ=5+|mP!Z3gFS5{kBz5~3)P%jI?} ,2T.NbX@5a& FmdeGqJfu~pc.2`}t쾖OE* i&`Ino];؅a懸b)3͈ͤP.G\ LZms0O>_BӵL9\Lf(S| ܐnlod~{blS@PУ~NBlT}W&/_K9uEW܀h5vڹ1j ?C= 0Uyp>חλR @ uOJ?E;^g.@뛵NSH/MD"TԢ^.<f;x;49fuA O55~5] *UGBbҳ5QLf٭U }7½/ζ])rfzi`B\lBI,R 츳]g4 Pl<I>-|y酚&ԕ,4y'UȮ&gOY`Eو`DΪҫo|,_B_NBwC!$ =+PXcSq{cYU*+6.ROCcth]4R+ iV6agx`IxOp66 Dmzpvx3hoe{awB;.̷fw"Z͞ゼ[Nv@ L˙.g|؞B:l@(XK2XДqj;&j8ZD!a/m">X' nX|;qW3+wMxcM u1zYMeKߞ豞BKrw``}4(b8rTnO['Χ!z8ykG:͢yPhr9eW$?{<7{K^DS!>UpA:1Ǝy満zv2ikxu*AE9 - IW< tbξ< NX,dE;l,Jf|7{ŊE:f0%- 2SM@y-].qFxJKTwdFwsVW^mSLwOEU{ oe; gڷ7`· 9UW$W/:3 "c+ c!D[IݶhLES>V> (2 WH_EO%OEHvDEF*O6Y^.,_Mz )VKivtdg !TP4=ǧ7*JQ:KQ3WO4ҝ9QQuqўM'y`v[n.E3# z$v3l(VϏawҁGCiNω؟S*fIn <4y d N_1å3X=H7Q-SDqUs':؞*cޥl2o?yE)7 nFE`B/ۈF uKt>l΀f[PX/z!$zQe'>Ȋ)y)ٺ"@|k,V@߇Rgy (PiR'%]Z8:,7B:^u7٪}H=7:LBQ=_VW5x/ &N cC(W;[8rf{cR!yP~){ %ȗ>3YU]K'm}:'^c9UU-F ru2 Ϳ0&DЃWi®bNnh}Ri8\^=̓'۰C7;cVBe1>7]T% ?̕_Cp|Op2߾J#vsKH "Ow!w^ z-\Hf^<<{"~9݋rvT}4S ͨQ³AxuC<2M|GON  : 8$rK'H?>bE;˶E[+Lɐ"CHݛB_6DDo2p{H}y\dU5Q^e= ^#fqM"Jg?~'Y%z XU1Pi9Oz_T˲~4寧4YըsjYTg "n®n1]qQ x>N)R利V û+yP[XoGa~C.`OO{Q-T13"Gsu "ƿ i5_l/R N U)N ֜3rՊ@Ԓ6P;&V_~W n卄FBJH㷩!LF~¢ջg}i n'Dp+iY*BKApgL>ZiVck{M0Ssqf\9ShsI@N&.jMPRt"`t( ;{}x;D&[wҖЈ~t|sC(gQBh/xiC/peUIKʎJ֢! SShs+Q޹#aobMBH`iQw?T9*DqoWuؤ\k2W݇ؕ:5ѱ}ԢHgUR1+[#yK[ۣ\wXvʅAQWwjHL84eg/k\CN?lj0a:Y~dQ,ǔZGNK)?^{wnˀ#+P) WNE 䉗/)|tR^YwbJbDI5WkQ(vAbhm h~kXlp_:{{#ܯ$\+@ˋ3_znsZX%TN`85EV\aWMևAo F0DN /۲R:3(#ZU=!@lb=F[t,{JtϽ1 z2 Wy1F}gI:=W& &ePg_;\\5w_C0qRw?+ k7+v2bb02Y4]!FS,@dPOi]^5yE+UkO2o H / x2M"FDdZRmzY ZK[*gH/oL E$&^ddppU IWU&T: W&UeI8/+ k͂$oLmJK5t `{n%#a/TS(IԢn)IhWz=n$QAa2x[c{ʋF$LF&U= t@Q;%rkSY/+v܋f5[NwCpnY~0v#|l^oS-#V];99iYDgrh$b޸GR282m0Vz%g+3JdioFx;ƒ8so$N[r)ncr:lYvm $>9A~3Yx4y/ς:rNT`xJq‹ )ZGu"dqE X ۼ5HGEfߡGQB= ߛX0*W]%=]Nk7ƛG8 Ӷ4|t_l us|HYl4X \mx㇛ kF Y5#Ǜۉe쮅Wh{]sU 5 yiΗf+`p`+?|Mb.٘,W^Azk}e wEsq=Y m x@kI"(TU.g)b?Zog {*€=R~_GsA=fD +#'p+:#w{Y!4̫d1HiJhԇgfd06z֋SM':͌YO;4[rp<]b̐?JiN+Jxm UT㉒Y[P" k}~xZAaEp'B<`2 b +?#8x.cWnS/H0> v]5[ iQǭ`nxq*-iE H*1.b^d`r@}Q;ZJ eW19H^0PKXvi$$/,LrtB,ؓ&"go6Q)E[=*?moʻl \?z/x+2ب G2hLvΓ`su. 1o6L%2gi5ywY~`7<;t2:}222fȢ P_qB cD Htu(x hͼV疕wat"x݊/ѫ6mM<$d9퇁hkn3]݄A@*ξ8C [: |tpStrCJf(D [*B#珬|R~xbi8R[H0`r4$ߙE!^ td]|cgνz6675:db Ѻn@ pY=0~3nR42t $!r`Fl1 e?45$1|V4Ik]n t%D(\v;nSVD>y~6 <[Ho°, f Ud7AjK1{fMw'"/w ?΅; ^j\ |嬒QIiwA+(~!$ ІXP8am so?l*FK܎ 1}KRZ^uE}ՆC@@hqƏ-+%/oJ -_eI1Hޞ@WLn&WY!:j ]=:J)bę,VHARn:!t`3a& //!=.G*랴6I)N\0 !3(-D/&;NLm e5ӭ.UO#'qm 0t 1Y, C̰!ovvFHA243By2x`}.+Iz 5 ՛{;H`vRcA 䗀*_Z_*#Ӳ=o*͔{~Jg:9ɴ!G5-`H?i^^OLTl`0G 8]"0Szjv^Q<;]K5vNa%g?&7a6ĶJ fg1xZirz:ݰ3q6h&Y!aK6I‰xd ܍]o6 tt!+Kmu6 !C=#F&^x=GZ0tś_(F=\0q΁}D"bL&Ԃ%W_?.BfEtc](QlM~Om jh;_5]*/,;Cwx>Y%V+.jSҎ}C`y\WoE Cq=1e@ 93ESqsC=zD*-$\:A8 <w܊B yqv}rRK%CA3Ntjxo|uWe)o6vQ4WS]en)L=SfȺ %Zij~z.f~˪V8,d9ހ42_Q̺ q f~[׊CWdY`"K4pQM<{^hu̫PpHk & e by~&l`rzF9hi{swྍ6Ԝ &^G!w82xM-O=OQNhG2d\YJ[Sl JM׃ L,֑DFL^uR'YyQ?goRk.B[We:{_icPy/DvbzUNXG7u=x HGJZ%J×{})NbEjY)_Z5T։e&_'ZG 9@@E߈wb)R߹3MM}"P)Ń*n& /75mxQ8fZ9%IڣbtxZَBG cQ,SS)k5<$OU:Jg6#@\rӐ# 掛YG22B=Bh9P0Az0 ϟLĪK-cB$wo~U+G0D1-t.a NRGj49dҪXI_pTK'yԓP+-5IO\"hۺ=9@^-6qwT$+!B *N"$J Cգ/A2<\˂(6ѽa  #)oq,4 |Bf4%.oӳgH‚s ߭iD -CЁ?;{/.@@}Kau]#0)MuWWyˋ$׀ ,a~/ֆY [~r $1R<5JpE3GH8U<\o9z{pn,kq$s+갫Py"|/wooAɷv Tx| +YР .01,3 -|ΪvBsy ɉlrSdb|[8Mp:K.*CLpk+󲭓zZVĦ]mZݰܴQ%|̈^+I!xGKA57 6T+-oQT֧Ӂ)_1[:NכE%?y=T5ApIo鏶V,J!5M4WHW O9C \ENs=kzP) gz9cCbӡ!u]{~YFUIಮީf>WZ.;@8OU~(VY"s:m/o0d$x?%\emYDU;BhBq#A8nj44tiPS#t^-*0s==;|g"7._A#/=kqu9?}:W\tӥȁҁQos7\`&4#AVU iF ?YI#0uV_)UvfW.5e;o7 eoc8d$M:ubL8itMEPY[dS04RaTI5]udUX(s9QD,w fg8:F)nl~Eh]!9.ө(!ƒ-{Ɂq,0]N;Sng*) K08584l2&4oUax"=5TMaNwPڃWZ[.>=BAO\0Y sɧH* ;Q'UEb#CLGCOgPQԵO'lJ_j'{Sis alʵh! c^P|FQlD.x?F 5 m&rXi\ \I&F%Q`?^+}hxEl@1C RM[[*f z @R gAEK7,Ō=B_֦e [YuvTC[w9N7W9qݙZт&:r o 'O hWXщF@v7>.Hs.)cn/+DHwJOaGr06nx4v8 韜-Pen.O5QX;ߕ~NLHaV0ǖH($IeL$C_R'oms ⩹Ĥr`JfNA pmG$~#} &VV[]9,J~JNg]cV#^ʹnpAENM36(oEь9eWtog 0i3;BoPWJ "<5[S}a*`-M+#h ~(?XN`|#uqk7{;Q}6(iK{%kj@6^&B4 ߵ$s^ZՇ%s$5j`IvG/xW<+D!@J@*3(zqnMZ Aoqx+# O$|,c>i! #}4.nfj(]8k.5v;iIdCx.Qma,Ε,$ d#[AC z,Q}Č\)jR:ΤYBESJIl+6ُ(0]{<4'3><䙻`u Di Dk{s۝Gx(ĤUgv" ,0[_~;Qek8ǣyRF"%H rHx-'tGDC~tť=/+fk9UhV6z&ǂ/umќ4qU*4hVfM}p*qlfE]#+ u_6oRj֣SκH-ͤB{~KcGCKl? lF+&+{hN ! A %o\'6_9C"4Uމ,b*_"y G-?م.˼]Us)J[.TecB(}|v%g P:&VdJ5|ԜL4_[pښ0Ў4lxmDkD1=Ǹ$5DBCiHHcPql L@%-2,|cW*I?G,R& {Z`D2Xm?0^_诚`w_GCjc2.t4)JF l&\N}q <g`%H`5'j3j:\*1mmTi[z >8v}'a2f\0 L!VK ulo=^胾?Bμ1=N ~F=Z;\. 6J롭h&#Ưg1s(;Ul*D'?4fi=I$-+HTo&V.1͐M kL(JU$F})mԉ o0[~Q^6\9BMbS_nr'(љ=d( љ^|ᖩ V}3.5u> ^wɢ ːRwr~o{+f0m@MQǶ֌A(Z >Ӗ VO7@x-EٞhX(8Jj*R\cU]ם]EpPUU-C]Dkk,#_\-h/MHWI9%/%`c&:g}xԞ :#@s҉E,%4"+oTI~fHa/Q{5l.ZR4!)^+#˩=`\0hW1>kҰ2}SfvB})bZ!wo< `HV=P!dvPhʼ=Ibŧ^w w2r(9h{0$M|=BcI]]]NM\AzmwobX,~Qr{CEas&Qiս5t/6Ӌ({bkkN܌֣"'.]evRvgX`qBn"?hw:`;{Giڸ{;Cx+^!k"|)OG&ћA7w0o˜}h1֧ЩLiHh~F'U=/1Q>w*Ծ3QY8`üepB Êao<`[?e@[CF^wXϔ7dᦘYm> 8а82I30^N"n44mCu9ΓM]/1$Q`? b!j-|>]י9 LWfNGSgQ\{Bc]oW"-PmKPF'T_]Fl%s0Ą8C?27']_٢!=/>$.]z|Xͅ4gt8F.^ v/\ÄjAK8!H \}"䟤9UN8öӰK`[sS$oQ1d)=jRb @e &~Nz'AFN;7eܤs;aKng[sy˥g=LBj$FKfNCLɋ)=\I+M!׏ :,RAB@fvhByvʙ;moH|M[mȊ8 iq_"}uC駊@&>i.ʺ0P-lB1U%D۶)KůSt<}ϼQ- ;4E<{[فcyv8$Ƕ>G\gTpƿZV2RpR/Ј՛=@h+e|Q.-kՔއ5l(Z2Zykj-#6MeqИű#.=n=Q;6 u\2sۙR294`|rntII;GD#kAbjg|pedV>p+4T4x-h^1tU,mN>UIJѡKi2@9w<#,H?`r`yԻ=^7%뤏jQy0˜,\ ieYcv G/հY‚(u|)rġԅ rDP̼r5P,oS*a4=P/^kLl0OVw$Dl-tmfv-#Q(pTy y7! s+ǹ}чO`ٍ V*6ܿͅCЃ 5PԢdHv8!(3_*A35`7>RZ>7ck -FfՀ׍VP÷:+[ń9|9Cp6(p1f/mdAɅyV:;|?aVn]$D,@7e?W4,׳>$3`Q6l2IC\\^h9 zu\LS,_U3V\O&oG:v<0S0M#qjƊ~JB趺3xn,.CʯTq?H(p.797A-zgbfb £$&Cp9 Ԫ6vrᡑaJbuXAqp8~fyieꎝe Uy_XyPƤ8(`kw\9"iդ*=*uDrޒPf B&,]\{0˥ *ͬoK^՜L*@Z޳.B᱄$7nD|/]$1UuxNL`F%}BH,f^j=(3Èom)+E}"Ͱa& ^/!^pkHXPj4 JDGs b QE=*(¢-Ze*y6|HЌdG%[k# v)^˲y?&-bL!8~v01S pX.RF()FqۖhTUd1&FAǼQ11e>zK@&t6-m55 G#XlF..#stQ`Mh",ϓOc(1Id[82vo*wS2r) 3?fj*.nh6LC5Kr&C@.)1dl;,z+;(XI8b8>{ا!^Yes )_&EL`2~`H>TWgZ< ^35&/Uhʆ! kv aϘ`xy!myDatNb\aV>JBqalFvbەs S;:K)p 7NGtЀJxئlko+amC ՌdX9Pf]HTJC*/yPT(A At9Ҿ]51`zɞ91m(Cs.ܳX˩wxd)wE#}Вz6hTV!@I vk:qR܏XڊO `݆g ca+ϼf 4RK<$ݎH#)0- $itiv[ m|fQ3;Ih2.<pռ/*S@^B輘j8$^Eq2Tt"p6$e8s`8+ߖK9P(rՅ7KrϋO@&t~M{{}fK$'iZjnJlHkqj570 o)'KXD*&GYVg/;9-p#VلvPHH 2[Ǩ$f{W25tVQCѰed;|aYn)XVvX>@XBfl#~I4{Ym=F!uS]HA3gDA@]=k?N1jGWzCwFvD)G=聫Km.&ۮ}g"1#Bw-EM^1a)A)y-v1?M+cE͐:dMrE9BXBFyLSHVP"q)"_yʐ j u^ P"bi62w-WmsU\ |4Y 5oXW|)iܟDF% #BCz4ayw6[i a;ѰYFabQګbi!{G P5 'pj]2ggyQMjܪ|ZInnHңN^f:9f7rg:OFe޲?G4yɩZqtL")V\{qd ߷֗yJl<@"w3`g]׫Z^NծMw:A̒r o Z/ Ykf"i;e5H8 Z .kw+qsC%`j6'Lݕ ۖ/|[3Du0_J6Ĭ 2B{(&s.1mI=Y-kqSm Ц4bmd__ʺxojcnG0Lz|Z,**L߰!!6rK}5\qhgC(YUޣɔjtEff >3s1 ;XfPEb(%q2,RkEbWp>0̙}.dR ?fT&|;Tt9,蜞=a.8nP*M{ 9x{ĴC ]b,:!b!HDgr4޷;~ lk~e(TyWe|j:d#/#Ez+:B[1q+},1 7zS;7vL#K-d9 h=& #:(ڒDʅ<+oӄM:9H/'V75/Ck zDpPT> 'tu1IyWM"=jRP,^7=6Uh_u!Q=FLaQ/ͲuKU 9d咡9P kcNB#n8Ft>L@TP]:4䥘\MI`/AXo&޹`C6VqcpC[˩,瘝g&"V3,@9jT Eؖ CDJ7!O}3:mW3 Pߨ~^|y?𝘋wgWs ^оX繓Z(K-W& -d)[ڿvl D3ͱiP8Yhvw!^]c ĄfP%:eã+Eȣ:SꁒqFVSsDN>: /HJ,Mc1'Sxunzv;N?4'@!w@O}l[ eBk$-YS Ft!ÖuWΧm7F- }kRu'ۓVGRkՔA +|]JtЬW5iZY} k{rvw媅x9RV(3uu^E0dxk F8IVmX Z >M=|?$EQi8œΖ%!0u+%`mo1 vꀴ^ՠoa2zcmeooo`Ctx%, 7}( YzɞIu7??+,]D̠`2NI=Pvp~tƲ9SOqWϡI.K+[ΨS҄K`m'cgXc:;e|]8r 'o̰ϻϚ ?䢧G0M&7̆匹CmlB4^lY߱f׊(k/gC ixci8EuiUHb+?&Qq]6H_`ܥ>CVbJ.nY֯ܬhh⹆E+z<'L+^pm>-~i#mUF0K Y˦-M^3Fg, =cz3ųY'pPd7/GH 6BxSum0SʴQOXj j6;`E3P?o:O?:PTS$ݺA*f)Vqm8;˗.SXi"u{Ӟ&Lch~F2P>1$ g@7ΏoSA@/A׻diF?kyVSPy) l}qәT X3 ioJ@ NNXQ|@)AΛXT^LMߒ*m50V{$G9*N+8K\eE)7!Rgԯ=_%Id\yq.™@#bQa9f HgBG=+86}:D v/T Z sV;m1R iyArBoeH/3x-9d1}P~{9Pjd\)@Mnc˿4>^kK UiU6G:{N^tPH@'v\1J B0BK[hsWd#䨥~>e bUZDsaBTBBjrt&) mVo޺:A=&.w.n0ݍ'k ܸ!i*s;cgX%]TIz*Wh›7;Ȯ!*`TҴ1dj4ܚkwfa >L|(/0.1<1[ԶWoR}xRT2Yg%2Eʎ0NyXRTϨZ[؊ka4Jdc9i%^YTt "VA `M7i;Rѕ_Bnk(gRzl"*{kdj<]_O4Qc$\7ҞPT} 1"%Z!QQC1r}d~ip D1dV6xigF~q %t=M̛6#:@$Z4w…p 3{FؗHeL]z =֛Oc8o?-6иK-\eUQ2sdw7>Jzei_j'\gWw 1&GC;)d0׽<)%lzqjX<4S .Ү룚7F{{v*[KV4yf"q)SVPSw~lp 1Az)'w3%f^tŀc+ࢪp:{u~<&.ʫ9N{ (c?2(1șʊA}_twO_ ۲E~$S % 9A!-IC#g 2\7o?'q4Ű=.,ܬO '_\P\ŀo'@5Pۈy`Քw >2(kKPQ5FJgdX l)c &vi$;\_W=J'3^X:$R)qs&xf6ǵCXxi1I~+ 撘L4 gff<ì;QG‰)b[4q1Yr7/ts{wv"q5[fΗ"G7GrduNᢄW_[m?]_ wY4;Run[sfG=zA74d@+@%TRXhSg`K }zkϑf|^^K9ۜrOF+:O 5Od']0=F b0OCͧ64/?%Q`֫[b|֮6FlluR aJҜ1f=s6ss,ܿmR/'ܓ 48ng-QW\^7ST`IC3 oMxt П R(o{K)o,2(і͞ {cLĥc삪+rk~R($L KN=Cu jusYվN  _N̼^ "4pbjb(m5F;RAdn̑흆*4🶻gaypl@fF}èwI/!L[ _6nn!|μ8(i3*W!Ζ q`vk [W(.TřAAVMtYpmˬTz,̉ MVg |_'_IJ ,5`"EKJM.a8=h8=XJ4BD\Z~l#KGJ *\=%s+ET">$.^IK?ă-1偗N65!!4>Ma˪^У F*{;^(ώV:0sDHRQ\}'czxT9αcIȒ*xx.+i@D!P|)xjw>2-qU[a#C"5ь5Q>`N]B (ipVP 񊱵d@ =`+; a>9qTi/[y y~zvqdͳZsC= " k| Mq& 0/7U伯4 VJ_4TOk63P{OI-bpmhOgNloA 86Q> TĤ QO:\bչ*haˌ0Fkxl5%@/5&,=J 􍛒%\ ΧJ9:Un~b1l<67{xY+ C`凮ޞlLR2K$h!ZiFQ3mCb7a9LBυ'RJY]s!Oz O M(n܂ӆFy7@_9Ϙ#t!V7=<6DS 0Vc{fnzYM ;2_e9iƆ-=e֛ĉT0U+^ 𧹈 P}V<K7vw. k1Hrc.-`PyvCv~)jTslDuWUU aF0-] LAՒ v{u7ߠ*Ct37EILmҜe2<>TbXтIZ?˯XK uRʰSU_bQ2ߺ8w(/reOD\u¦TZċA 7dJ{dSEOP׶ZBzgD)%Es}p6UNp|V1Xɛ\($NSEy8f冨!;,`rߙsbMn>JeǎƥC1hT焨:#|р] ϝV3V9rj&&Ɗ{oг1>6"6֜'r&B*Q|mDh*ܱ ӹ>D`rU}̺$' l }FҵtLI+q|~8&Ȅ| k-c&w|#u#Y?@m$9r^LFqPHMH~ck;l0.AwSd(\_7Ӂ>ꆦ(]KɆ O1&) R Lxd S|U[m^iҩ%\%+v2)8V8M5J0j+ T+x42a^=6:t?mMm197qJ ¬Ƚ$'" Qy3hf؁li:~/U*YǢ.)A?÷E8jlA }vUkf_L}L?Ljc.3#B4 W>=x[Y/Oo6Fn i:>l[f2ޔ ƌ9d2y+Ք uէ筻z|cge5_Vf0= agգh/G! u MWh@ɘ ί&A(Q4͛h'UH) eiB> Jj:A ~z'P_|ϝ⎛!M%k!~nx+#  `x )67F$r|MJ1^&MVhEv G;sjx37LM+VPD V>u:O @b_B4XN7t tlpW)cQ[l_u 63_d3^APA R33Ec5.BzC̴vN~ҀO#m,3TY p[spRJ;Aq]D6pCPIS`2mMwgD)YyNz=ZZtg"$d].U?]N.?h}% ;C Z{7`kV->U&s;6@ [OK:y5ZChoHltBO҈-Cڅ3Y vd&O$ߩ 㥠c!'TV Mye\Ȩ9#Yt zeh2X]L N:on[e \c<![vxT_=w,p xv!Ŋ$F{ yuЧ| u0& = CwK+\rC#ai?:PB6JѦ#}?Nms=Gm,EbD7btd/8Xh겅 ւ$]d\ JJR9W1iNBޠ*g5^ϸn=Y>D#6} M۷Ƌ|f7v.U?)~{n[~r9yZRjdMrvwau -˳Gbp PIw0S,,oKD;3N>'y>0w39H~eֳ|6D%#Om hIacN4uBHeEm}%ݗ}z#W#~ V(V Ln tJin2oP/ sX>9~Zy,}rx:.Tcry MnءЃ8k%]%*Ɔ8sx9Ii`lÐ{pʛ:;hh!aevjvZH3Sl籮']-˞+>1VW |9%3bF{+Ca̒noha,ϗ%]QGȾGP B7./er&j2joAi;i]P08J¦oo?^M/<>qUl]Tpܶ s #zG{w%(yҹS9J_X~S\!'~![ S)&s{m2mYr%ҍ$XT}^i =Ce\S9kȅݓ.m y^gZ(#c@.ɑʓ*#^D7. U ^egy݀e"ӮĴa-%$5i$d3Eӟ'1b_b@|Bz%>[ eov8R[ܦesB8r4#+X1ěNтQ]+Hn(P]ZզNj<|[8-/P:gm@x5pR!֏s1֮<kC'9WRu:rh\%7< w ü56bCJ~ f>}c zZu ]slkv]r0C$DC/ݖO![dę[葝IW񐳀A0P5]ݮ '2Gz&\~U9u^\܄g/(ƥ-JF$ -f2ƙo2񾛯x{U٤z3z6ϔsJA[mMdG02N91s/ـkf8Ի Y}q~4`S2{Oe Fx|);p!=lapfgI\#lA6Gu#t(Kisa9*l(+vݤ73z2QKۛu:@_`r՛ %܊B,/`w?NFGPtgq|^QxL#4weY8Yi zKk0c{EQI<5 1g3CP;N .w&Z8T{S6%P/N{cڊ`^k϶]+4¯ Q( iDYC=93a/b4h\j>R_ZQXD(Ϻr1&&|_|T"oO>4ga󘐔j蒆MRDVPA,ԸyPMo*^zGl i8aE9Ne7LLB D X'4!Pab"$\Г(vi{ڤ9;w:˭ N]CB o^ aׂ,lWL"x׍d<Ǧ9&r;ZjX3 e1 w,M7b9t__)uf:41. dͤJ3ߨ3tee|w ;i%,+̕iR]jLA\nҡ=%9C>:>&yɟ7^7Ba@Gy陙 yb4RXfGYaXfDys <$œup!)&v17׀ߌ=%׆;L;" 7m)\FFo"{F4\p'VljEG\!:xHFWцŧ=@wSԍPNȻMfZG1X#Vy>F^kz(VY?hc/)&9U)t8AAg*6n1?'|?Z4iU%](|܏ʆ(/@!Y@2MUN!K|_TRѿ cW\)?z!|XK1{N?Շ{`3؜_OZc2H#%YX4TAY,(c]gS.xNI ~)IZA=/~Ky],_tfXv9zg,zJ1x;RV^lZ` xܱ;ls\HW.GpyGAlFtP4Td'-B)-WNJ^YpfB8vcЌ;>q*xyx[7sV/,y񞝪lTy7|DdGgA:'l|~3c8,_pFVfX(P.neSZnuW]s_8!/e*%x͑;RE;/^LNwXfn)ȂJ6 ެ&)uYgB((q+jycJZM;QHiWJK~j~, ˻ Mf*ck3^t^O*ħTA.eVUj}:W?_=8S-ge/Hk.ƄOlWz%d9(eeVA'W@g~Ę+7,ȕ+liJ/!$i_= @cSӛ諷W- SЖkPz^T1[-2v̽A6PϺfB[B f.Oɨ \㓉Kט1KKQ d j`^mDu 0 V?.7 Dy̑)YM"2MD ;Cφ[b%6zӏwYOĶd-@6n=<,"İ({)Tf46">eغLq%hAD"x  " HAQ(%NAc-ऎQ.oԀ3LG4p{bElEä4+cj$'(||mק,1(mXb^ZI鷮`;nRɐr]?V~Z׵s:aQ]U IP^Zl͔J>5QZѡh5X#O#\F0i'\ŲmZhGz!Cb7*g{,h.A85͹M\y=dcF"I @2 oM욙B^;AzQ˹mfWC Պ&UQl@b(FޣGf(80q[:ucxJ)}D(3Ox?EW0)Ra R~KÿfɥYRPkZOa2Zu  C _bb_ytLs7˸[Yj*UP~szO,]M߀"*X`)t(pxkCDZ̨ uc4c['t FWسRz'Qf/6J½6M,޽oߝ(}o.>̅n,w} A(ꀵ'mEɹf R4Vܙon#y,) KIţ4jZ#7 W;m~,%:WErEAn=pJ`M5q D;&3ϪE.e=!pHoۚ h*?D0t)S*o_QI7#.J&Ug5-f8tĊIE!>kXjBU(RzQ mǷ/%"i;d?E-DᕉNW>XѕXqGOtkyZA8"qЃTho{Gь)cЖes#_WTy>b~'X`e$?ZMNq B X =ǔ(NiL=V@9SᬬsS5'M[~i,lqhR>$y+ 6@6ߕfo :a.0a fd4MNP5Jk4OL *ࣴ_+cyE\ a3_(23aYol]|f[EI'43z dM&m :#'u68P=HL?,Ⓤ=ݮ0fbtهG9-fg&/0}Io^gQworU&bB!أx oՓ%=s'k*E7lWsM!ş37ոxǨlUO\hbY57/javZ.ʊ/-;Pe>bw&ݘ1ms\;yzn4}J $ς4> X* o3'X4 /8̳x-XS0& Y-ƙ&/T/n (ߋC}ۜLVյ-dlQ(5nqK!{HK\,H@d!cZaAR%L#3oz);SYVfL+faI $'.~6U -su ?">jsMf+6qbmMD$AM4 F}_ٟkg2xYz{[h qWBDUTw$2LXىpT;J].@vp:d"hZ:!Ao6@y+* HB|BsXv%TbB\:滇ҭϼ{OmQ9/Bƚ&$P;+,qe "A{G3ߠ2F.seoV O_]vNSEudR^"噷ҖQaKhz.#a׼gzY}` M5z"s2»c.S|+[PMP MI?;rUo|ъ=z*ӾwѝnkN DN^Q:\(y)svVj~YR4%$&kWUqZ7V!6u[{ 1]Bjb?\,*GX%.7zd]Ec52RQr9[(- sR31>n\8_5+zvm "BwN+~'Uar\" fF \Njnӛ;15 e;Vڿ~E;f l"y[p콜1h`iA}^yC)mUeprEkK[>Ktj K!wA2zx`]ԷrF}բ7=n%ʁTC In?~~=\ N*JP|y%+QpZrw!%ci) 0ĝևd]1ccoHUtbȝc:H0 cSQT'qSvE`*gqz:Hw{INddo0l4uX 3%n NƎ{BYN/  'Yxަ0y4>5㶨[L?O$y /_4 #Iu5N8ܼ>̴-gf Η<ý>4 pK*K}##ˈcV?$l!o#EFI`K0[S /|Nj&J2lw; qΞwmS›nyAH ت_A$(x}X9T'zO&ᄉDP1Sצ lB_3q`Pu}Xp>$>x>,Adޒ$;9G񽱯Ch58yNcdkGXֆ "̚GYv~)pUO kqŻ *Q~; GQ7y1av#%gj1{`2f?6Go"j/0qRwzZ֝l (\{jz:,gǕ6疾!ʴL_[ޛB, Q-d'(SHgLMKIǹIjD,x/=Ussiq˧o*oV;k?S~ 2NKԟ8IxyA^Vnd xRZlxm;v/A48<ˠ,7zWAʌRfҥTBԲ+\7P#ƥxCu.g[pSU Zˠ9!X:cBR^[/btxqt= K3_5'' Vnjo# GFvƄ(3<nU ]ZL +K2ٮ8,_$"l,U%E6h] r..{v$`M> [| G6FCu(6m)qfͤ 51_˽;R-q6.!BbY ;{p}7*]g sגl0V fbCrlK<qߣzU29-wws.рh*ΕZ\Bkk RJ2ܠs8k/n-YfMQ>{s3̓A/*0Uȼņ h12p3=CPχI|b\r )fܯBwj [!6fxmô߄(p|0hرB!!ߖZ/֕\ړ_bĻ؍h5;R%lb΂AҲf I+4&T0ndcy:tuԐ[ܬuqL,B&QC7NN}E#KC0ӗl!H\LY65J+KփU%i<TMѷlzoП?p饮tF/VCZ&wP%,* 2w&+,hȂy?jLJg.햱Zޞ>ܤHS/,.('6XZ*!ۡ)yuȎW-93r7Hq*x0E1&qʶO?+?Ժ-0bJ~ 4JbB.{6,Q !sͤyM5YTRL@`qtaj-1:g1 ++ H( %:KHB47 /PLMJ㝶Eδ0[Q ^OT(g:{wK1M$Qt)Zih7}7@V>g|tMr<К B91f4^Q_;نC2TX]FjirdET,hh6eקܚtV`TɽR3*gH_cSh;4$Ӥ鏷 r,?8Hv`oI?̖/Ly`Y<~[I&HT -V2Oꘃ!J=sݢ.{i94n[irĆ@soTCg\nȘ}gJcR4H=Xڃg Pr}"jޛݓ[%f'g|!jMy#3th`oksRc$}K6Mo 5n~'V;UH}|ٸI/] _wF#b!(H^AbmD1wK(ټ)ָX9@} &Ѡ$"{';Fҿ/te:ˁLbS0G†yK]e Ui~ן#34>2h5.ia(+ƺJ.H5D.H/ʥCmrq|)USvM8lDa-k'i2d%v$In?{B ^ _zPTQ sFSKfL" P VT6 1 !l @|I|V.U JDI/'0_=ʮ뷠&vj'_jb.uy|Aa굁Cf5GD%u$?r1yK"IWV:=݌lE H 2.eH6.?PXfxeܭ0l0!;M=BLK׽C=罪?%Eu)d#D"Dʽ梈 F="&#yR~Gg~*KoHZ9卫p8-=J4L}̽#<(l_z{{rNHrur}7Bd*RAXFӿ%.> 1r%!%c-fd;7WդCLge0-YC5ϊXEpҝ2< -4p5^0?Bw< HdC\jX#΂V>惧ƥ?@1tsh@jOk+GSN " ;`R&VFh닍b=v M *5ܘH^;(Tp brڮ;Ћ Ww4/-ggqvg0#6G1ewŭ \r!);!qrM6Qc'^ ߦ=ozƻDL[DuK#_Iٌ nȉ`H-Ҽ7D/'ZLzДeIs4HVuiñ$N$ 0%7=lLp6.rV~V79e@Ҕ3h$H9ĭR79B {BCfZySR3ˎ )aN-ۨxo)pM *(迃d͟aʸ25ohzzI|WLSbǿzvb*Ut$ Fmnjt@ ygKhN:ie%C- އo~7)Kt cX tHѸ2N6-A2n8(0qKCvz|[ qFs\k { ]g.xrɂmR2޿U[;;ӼPfҤ@֧XH 8l9 38^ȭ^ rm C5-4F!YAM !~21s5,Iä<[$ Whq {cc8]]* EKCv;Z^pX>M"^י+նBHHSr7\г2w' O<?}LYhJgr퇃&p{Cd8Aĺf6sđ>Aj,6\=ML~$6 럈-e{naW{~Ó]{2'"+SSf?QտxADMZ*U`]:DpbԥFlڧJXB vR쀢g@C>մubW3yHÉ=w_ @[sAԩ@os_.O^g ]hS[ٔ++/f'wy`.L//et]~ nt?ŪUJzP}W`?[))cj%P;Z\0׵A3^bb7Wfʠmu3HUiWUY^W3, &:KٻR0H?>_Om`0 ^ D"Yp Gz nJV*fPIeYԽjijiW٘ 3 9k`2ut%&a--9 %Քn\mʼnlNoTn#Bia"C!/Q!}W=CT|)#ݎԴ ]em@iMxaJԵ{2BU]@5X;(NXEu 5[GY? C<%zǁk턔-{cU[gĐG sf]SJ2?Ou9ĪzQomHe-|}&߄C >^L)Z\ws4+ux:AI8TY7.nOI3~0[q%nqFԛ_ OOGLwR!RH (НU!&_ڠfn.>.; "Q8şdqqBTj[o -In_df;Sm%9L4&+he6 s@I(?aҜ~ijrjB4wPХ&Gmwx Z|n AʛGG[[y Wa5чJd 0DIi>f=ƫ[*>25*? Mmzf 4&?_ܛ$0ɫԝg$FbTR](!WН'`Qs!XQa=4'脍'*x4 zi;J8U[:u!?oy@M#I Pֆ6erĭP>F@-eXt CPE9v?d$- 9M9BC6u#_ ߩ:G5 7Yvi{ eu bLi)?"7x.(} ź@J! 4iݲ<ֶ$_$G t:/6_ox/M[Q^U)Gȃ&czy% eiy"3(umQ->Iw3gǷNjaw%9iu@!74!CM@,0Y!<>.-y/ǤTvqOHZIFXQCj7‚yw1jurws x7(CmQC4#z*L[s﵎␒&6_oIz% Uq}Eg2 IyUښ<Zs>tv߽@ZcuT4nɧ*ǢW=T+"Hˣu?X|*v>} M`0RLT4=~fqù8!M?bK` dl(P6僽-SDXCTPN_b_Gj t3&i"ә^ XVŀՌ\,G@e)P1;L`4Zg<~'dՃ[On';Q /苅Lgh9PUӎأ~r+x82%%Z/P U953;'yN!E"u4Zsħ*^"HGlr&te.86Gn}Kp_6ַy~v\.¡L1QE{Uec薤*&HdPX\3h\sBa4N(1A6֦,[߮߫osKrwC`|j(A $|GZOQgb֥gp1e2wl:'jޡ]<͋JJc&߹x0ԧwQ/+S3UV^n$X>؏6whdRea m0߮tޭkdjҪ.Ds#+6_y%`ЇY;1 dB}A{>fRtGR!͂4ݔGIɌlh*A1V^L? Ύ.oLVnoTm>~)/Lӌ . `Gxrf]c( ,R%+xz4TPjC/vV~2R>ݸiF9. \ќ).s:+Hkg 1gY͵#(3_ J-"Ljo^>pٻރhTt׵CyYFdh{pϸߍB<;(b 6FW ?JvߥJR-oEi|-UNp"^4x v[ja˝pe\'% OFSf *jG7掺0q 4[떡`YzyB6,EC]*c*a h/fEFOqgx/dTʪ l{aLQo){=n.Com2X0OELמN U 1TTfxt$,i%ڍEP/p\<՝m=tڈ+P4_R2( .bː'ES_6 ?bF+:د*@n]iGR7-sm+у+ɧEgF^σR\iGA# 5(RY9:!T' uNÌ r=N'J(.o|TXYZ̴~ վ]RNzd8WT$P#7, rʮ<=b&v' OF*isž"$:4A7(<>QnaiYuc20zZZsL!/WuQ= G %Ca `ʶIF=oڑ/TK_1@Ev RM({2rq8ԝ%eɲ0;JC?<F/5FR/0gٯI35oAEm\-аpA V+JѨ VXkB;T ?lo2Ɇ _ (zy0<ťwl9> F8s+Cnw^D]~A<<.6p0펢P5\r"܅0(Jzҍoc1 )mGJx{<UppAtI`_Wt#`Rc駅>$a9du= 0#KL/ňv#Y{#*CR| ^|E|2պ[%1㔣<$\*-Z~R%N'_&v^÷&oPgn1Մj|;5Vt͝ttsXV'I(2񨆊X Fӯb 7Ƹ+nNXd|jͦ pT oU_EQnk@ߧPjou˕-(7ظw%MAk7(3BI/UŕqѮZ:|k8t44[%; ;lfK}"BqeBS^_jK3ŗOefN~zctEcnlp7rPXv G=9Tt cd8,=~]bF5ifY=ɪ1. rmu 2'Ae Ԃ=\|ʟ2\XHJE&e8QфG(<Ŏޮ,ǻˆj3_A Z&L=Ot}G`NuGYhܠ2j%Mkf!eX cbiOTvԅErVuCYL'cMWՔsMqUnG16a**!"GW[KP÷W`f?h jUmh ^E1ِjnEu*aG뙙T.k˨ C8.{aS1E*!./rӺdY~"^CRlL6myWvO0V1iuRiYy[ONDmSK&4j|Z=C oEcl]θ}L 2 mO/,4B5s/3WJpK@@A=)}uNph F=AZ &R-Մ8JL!s ;;Eiqf$FmYRUbT[BΛ7WiQJEgH'>aEGֽi6gjwܿQ==-}ͫG/ݽٸ'TPg]Rڀ11$F2u%oʟB|}Ǜ;TXa,uBppf)+n596`Ç{\XMbUzehO!X0cf"q-Z?r;W襬aQ˺I# ø}ʛ3"}lRВW"VӺVԲϒt>麰7!ţ8p] E[O[6_hBNzgT(v$9›f;uXEq#itPO߿Emu .@b/[u]_m)q4>}&{q,R"d$# OٜHf(?Y2㒔OZ ~"+1,d;u( X eTli"ut\=yI"%Κ-d\vpKn4eÄN>G?LF=j~dG,Z]'-ۜM &72Y#d4hΜxsF.oD5eR9#~:%\H ]8ir6mi #[$qbxj= ɝ!Cd[g2l^WӥG{% W,cɔ߬p+/AU<Ɋ_U66JO: ĽJd/lҞ!R L홺cbMl!GϬExP!qp p, h#bӮ`aѲYy~387¯ֲXcy%%Uq4P(Xp杜eE*׽*=R% 5v!$ 28ȁX_;b2Fu+Mx%)v(zIK tDBF*2vï 7#“@yOfSH s&a'ΞڗrS!ڞPo# e + 1<0T.E<7Q]E@f42~ŲܽBp#~n<(ORwcmMA\K̊vt2Dˬ`bOU߹c`p蕎dBYoX\iBT{]^/ 8UsVe'a/-(sVbP{%3R@i5q?B&@ΩZ !y# e }nuq^chƉqew۟ÞTMxqIOSyp)1RzVS7 H&I\B0NjnFz+0dCo'&Bi]JԲQ)jPзDìUrK=J+$m*+.ts"~ݍ1CH ;v0KKR hGeT!P8e!(”{49nMkΔap8D. 6 @.=dC3?F[hBKݿo@QjfBESUAe^,ڥ~&҈ hHB(NUix E[+9g7jJf\7]vo*.FD}5JBoEqrEKlؼqr:G^KPKt?*&i\ܶE^jʹScք@e )1膘^.$7YvA*[ 3Ma.hXntQr$)̩ߘ:ʡ:Q@~}ܶxD?ƘDv uƉtCww5!`a`"x-6 }%۟uyH2="tϟUǝ BO%fdYp<`vQ]=ɶ5jgH- #}QO\z[C[yP].Dz\*]f3˗]}u*@2wW!RVP%nqΰ*!e: y\D.'*/wL:Bd9)qyϖ`Fٳ s6 rISlm07?2xK .BlA)k,aCW~:B !^: 9AnyM -nv^ 7蒺Z)-tC+˥*95 M}7Gb3ƕqxݬ-gz߳MPC]j{.['Cmn:΁:w+f'q^ 4WJ-BWHu:n: a͌W"م{=0~x:1 ,-GeGhEJdA #^ɸei:tPDgSոU{ӻ`źްMথID'La: z-HIxgǁuѩ'Z`:P;^RuFF7oc.n`X_ ?&t(%C[tzp`R/]V){%L}.QX0S]M=koM4P[M-̡.2-p7MOPt/%3!$Zry+ɧIJY@cY|}VZ4-r2p^)*{%@hWz{=չiE!7@;Rv`3gWihc 'H^dh< Կ+BP*>cɴЖNcM a)WZ-<&r2xRy+S@kڎ(M`Prm-WLym<l{-7?_GKo2!˾(V&ο/o a=Guaүk\Jkdu s'\4IqwRZPkM% c@S!;$xV> !0Kڑu?8uK^;띎F k 8`y[U<.a8ZLF듧9V^mЄk O己P*w`^Foo^_U JSAU;0$Y6nٺx{Poh"}@7=Acp^$;S淌;%z|ij!g+JjM*[1eUx$ޔNXgrR̮\֓|^vJXP9>il#`q !&YT@n Q i&wH%B@o$\<*Kuq}V,6;l6mʹWRr{إ2Q\Jd&yۻ-T'|7]Zf#vP'ݣP0*h^;I2bv.tן4cen~-07yQ6_ݭLQa^A{ bO3 &y8FX<D k]ydX \{PGԼuַ}*K]oT/ !n LTU6硘9>[iS?uB(WȈkRa;mv ۝*T>ʅUS<e!a16"Oε,.%O5lJ, 2dg5KjY'W 0gG?Ӣ.FgZ+VB'+kA1O^e ͐T 8R`Ϡ:`O3+~,z֧/ 8O*Tb\թSڱlV_í筋ѕ5}UzQ%k?`]߮Smjx_ Dh`g&1WF+j7]>|\"ױFUχ?3%cROdc5C): hy?B}mC;,ZLzA`ZDԂO2!L(X\,PUL]ZO^^39ufݞjfv7iM'd1@i`aN/ȒfGyd+D{#)ٿ]qdVkJs }f Ǫ:- I7pI1+޳Ƀ E 2R e}H~Hշ@BH&%C>āiyU ST񍔣e qNV "{ F*nV^—_{8 #ֈ־`&pv61ͨew,?Fed~#5y"S*'K[ue?5ȍضM}{7%B Nh׵|g5)Uӎj}l,Zhvx.Һ|w&wr[8 M~ˎ*1MPg/|=@GՆ){t4 P߯]_~G_+%-3]F)T47 8 p4Ka* 𤦮VGa=OY0*ٷ&< h$I`-k*ٍ:Mt{h*ﳦ<K/ YF_9uΘ*ЇoBCniyn( 眰GˇM$_8O$LDa}.џ+pSZrDjz;vDKm]025@밟H&/u!d#ZEGXwYس1Z<1wE-Yਚ gH6:5l\ʝ-2^“9!7VpkvdZՓ?fZkHըMZ=9d5ۻAŁOqP)}'N8-^$4~ڥ8N"QI#ȧ4ToŽvWK8S \nBSDS)c ]ZSt+ge7Ytk ׅ9fXǮVeo'M]K;lRo܉5'YB0|U2p@LL2}\.[)%!"}EӋgiN.?GH.NҶ]Yᦤi4ϑ?3ڻEKt?vA2%iW ?jmǩy -i0nC6,N#6`J`⡪{ 2MF+B/θyJc8y+i g1iz/%* ^/N ;FA$fFfFJ )QYJaoj/GXJ)'ږ9⍦jžWL2 ?K}MaP1{glM\vKQdY8y.M#\v .B?lNvckxnh{P/ѻɸr@i Β WrYm.bA=)@g]qoS>kHrAjkUW$#>KhEjC繖EF1\&tA0#KnK`!N[i:Q\;N.s=88}9%jW=tn| r堺 [4 V.w>:+7)Պ[KV~}rEin[3Dν[-;uaܔ9n.&uI*1iH/Aj-|쁅ҿFHd9a 1L[q⨳Q4i:K^*O|{.e@:Rpkbw\udz"'eҀ:=\mp'E6\ҽsD, ݨs~A['̤?%stȠS[kc%RKV9Edv }ør5shtYSN f3m&,8o]SnV[Z\-ufi"9 @V&^l\^y2_M*[|(T%{XucyxJEK#"o签O~sUjӁU恂l&5\+&Ne ػ^Lgy+ ޸d{oՁllƝײpA8[жXd4&VjIւl;FvonaH"Ln|tL웯8l4ѡi $3bJ쐿0{OWhDWf*EJ* "Tx՘qw/p8/%C%N%pf&x[&f[`ZPi2P\*OX~=yuBCg5w~='nV g8().S1!SCzz7AEq1yv7ylj K)1U`&UXb0pPD$홡`qa >p E᮶K|ً?BpVvc{|s21 (eʡXg/>+l-clcFr*>Qђ \ " A̛=L"QYm"Իs3cmvhMr vj>_BdYapbrț*پaX0&B&vӖ_HK7>#ȅjyW|aPD6Ctq=ڇc|Ŵ\,Ӹ-m_֔m_w<חF|L^Y>SԖ.)\ C#D :;q4j^f=En9K /ͤ2SphBV~V X,q]+ f;s>^6c M셦<Ĺ"&~+m/9`m(9l|FRO^Jѭ+K4EJXï|)Ij΅S6_<X@/7jX~g}τP٢47ӽ@Ks&(&Fhl<2|0)wShy;er%]:9jy`یfݲ竣f[:DMc#ӏoȓjagi4 #@csƄDag"31_բ{.JQ06ڎ61&9{ _s|*QYF-*ݴ߁?VDXGy%x7 㨽:.f.ڿb>5ʩ?imܸ R.(0V:ZW +sxfi*i &"f`)7v@3b+T$ ~K-z͚@ccmJcrn!VѶ7 S^;}gg>=qeR]WFʂL]=\@{O"fSe1n FF73``z؞:jaJqYZ@-_ٚ7$s.(vGrH .;>;eC ;5\t `:S9^W뛇xm]>q6@#5u |9n6r G@se1kt>PW!M5tأg=G?'>=MI 00\蒑d}= ' &f@Tᆼ*CѰ7D٨y dlS;DpR 53sSsCѝ#BIԉ;}XYpކ;r-}rh$tZ bͰ  `Uђ5LڂGO'j%`׉#]U>?:f<"pM"_ZOA܌kA6x|)cCAzmrv30҇wS%>ta`&V[+%T0ك*3L*% ~K茱pf7{G? x"GL8)zZA-;qHzOtDOy "wb029d ?~~ ӄ$y=r~:cDp㜉 |뢟L $YÕ҈ku"眼"iWg1abj:"H佔MmKG]M޻u~ZXrwޘ'"?%qQpz (ј6Kh+oWry|م'ߝQhj7w<>fkb0+tX5#YBf-< Hd6 Exz%+|hyE Y* Hi8u>k50J]F3bdD=QB@-H{Gjmaձ/o 2}@yRe~ U F)PȂN?@+'.0uYaO-a?5!?l@F&dIiR-*{u$~Ok4OV_Űlʶ8B~&r4䚵q̎).$6e[/D2ech[Ou#*cOA=DCA[W{&Vuا 9Ͼ}3cX뉧98e|'%@w5ؗ3:"j?Ϧ5WWsЦYI.F^9dfӿ69]S{<9H73e%/yyVciȌhkQHl: |T ' k%}[ޱ۔[lO=. iORd wO[NELKH4Pקv' G=ۃ tpv^X(Mfrߺ$p #Ōl/ ʬ;*5i$&Q$ݛ-~vN%r4X7^?=0ճյrDߩuS0 eޠ*qhvn87O,re>+s/i-'J)h:V!H[SML2|-2Ma74N6QD*d^TOp皹Hi;+B5/&f/;8%_],b`wJعEZ+G![i_4C**K xd0_)6X$zq(#',Ո~ 66RCs$zz ]@5)]=gs5D,aeҠVRyY-sK!B{}{Nq`^{ 0R<6lvf/i|\Rrژ ˊȦ6_c#(&P%kiCZҵo?6 .:ME30ؓ cFK=X`+\nQiEd(!t'FNFmYJⵑp~ poDڦA=+}QAֳAvCHi8eK}'~j隉 U4,!}ی 4iD%Y+,t}ʖ}ZgB0OO^CS\<$1iߜ/D00 1,,e2lӴ9q(7VKU^VaB3;3yAZ% |I ڮU_9S.1;KwkL0Yu#Xz^/<܃4WǑץM֝ߤ .٢N>?G~6 ^e^n.|>d^;Q/,poEǵ=јK0ol[9@j|J)p-s5[8ȣOLkTT?ɒK0ۍ>W8 W'n1 0'ٵ miB,qwW׃C9fk z/`UJG{HFj(Ex]Lo|c1n]%Y.?8x 2:8:Ӡ E)קJK2٩|1S ( ?ykUʣR!R]‰}0]&_ 8Uh Adbң̲tJ uK{)pLLW_KQk"/Raُ.n#\m*g۰+]oKg_'ErIRh]8=\=J)⃄9 KS`p%]u]:C E?y$-1Nͻk_"i~"zMh}I.~Jsw!Lh _6w>`Ȋ +[11ю&T E-CU~Ov6nʣWE#(6 MAbQȘWޣ4CQ_z23uڒF <_4#uT]["Y&ů!&-ǎǫ\/UJ^ C\d s$uI7fG?INi% y-!LWogtY[Z @kuyZ]9n5xHҙGiL>BA5Nɪf7q֥{r90MI'- M\E>s\ŗ kNwF UJA,Gʂ"Csa~=1Vc9% {6laH ~Z!b4(iST@BEÖͣAuPcwf#vC1d"4@G[Ti_5ia2ei2!gR:E*|z8ߓ!=svDIfC O%G_~G3'܀sQLIAI)ӀqKQIjGs;NrO}%;6nZDpZ+j\GJVTsk*C2_ ڱ뾡1X4}I*]g4/ա'5xC&qeβu ębWc)6oD4V٢Są^R,oNOh5gflm,ݱ˩kGoOk`(HILkSߣ,sgnh JV# Wc^3+w_ m8n BںN;eyrK-pWoe0;wZ!((dVy_l3.+XNkd$sK}ތ٣ᐚx{}V40<5I?&h !2);}Bq8wsTC %\ZIx.rUf2޿4&}UF?ؖOL.JY}Eh 86+?Q /x֮=U"-k(=>DB1ݴ,Q?Z:r=U kU˻"_.Jhl=8?j=RBϥ[?1si~1΢1S>la1[PLlXǡx >J 6cNlw 5]B`3c)Awl$mjJa *&) #o>d,v5syen4K+ַN[/5ozRsoJ^TSC03ש$_&j3+fġ|ޑ dNLHXY> a^7#C]Ѓ(BMX* Ak]Qk6bTh_}ˍA?%2#QúGAr&6@^LC(+Z$ \۞SS ^Lanj AjPUKYg[^"EQUn/^LrһDTn"nlfI>UE!ݾIѳŸP݃~pXxJVwSjny$i绐 A\ <_%IB`<@GY=gnnŬzMz`HrSU -LJ2^6 zx[499Of (mji9_< Q{e!XLg@ 6W&id>;k?:-]pΉPm֗Ez|{DH835)drmS'Rjgb1{7^Z<v_jLIt{jx 7k쪃F TbPb 8<"et2Sȵw JV5tkmx,!C<,Lpz6<㺆g%!|ۿg`b1ІGW$KPA"2FBֵKA4c [tIo#lYtsyW^?NžNOG[OEDfK2o5>ޠ2# `F[hټ Ԡs9ձwIu."MmL\=w76e7:<|(5_%R 1KN ̀EOCL9<x5k6x:ʫ<FT!^@);w5hheɚ"%IqgY8_#8ִq t򏀞?@0411 ,$Y3nb.^};Kv#Z5[mέ٘9̓!MJx 4H nyS{ݤ Ed9_a]_chPTuvu`/VcLG&4Ik- |7`gH=F޼{:\t0VE\nd8q|FYs(MEmM @;BgM IYZHliAd)6It^3T0_UihIpM2aPl uEP}\jȤ(dZ 7Qab[n|,;mUmZ8lQtsA|DGk*ʓ{S%?ʱ +۰lɐBs Ŧ't&AwL뵜?m)3ewu:Hs쏏Y`1ٮ3<}odY*1p2h敚-)Maǵ8;'%YYB\IL \DlINգ[R뭑ڏ?HegRagy:1\){|/`BaI6BKT,c).mm :i,cD|<_73PcGݒ6ۓ+޵#&UýZ#SX ":9@C4RFŅ{ vj@yc~&ojlUL[-ǿTЁhX,+ ) 0r(zҍg0Um3LHۙ'\# G'NepSA8`O3"?[;K[S=iN]tchr\ߐs)e.uU"02j ԫ6b\iWIh1H+,,@ф0#zFz a!d*Pm†WO~G#!c)^[AWނWD _ȍ^PSK@ί iD[RuO& 练txd,ͳI3mEͤ:ܨ^L>ې,gbu!AȑԶn Z7āQYKL-; 5OڭcK{ < h럁|0hFcSUFPr-XJdܰ[p߀_r2A~ծ, K|cC( r)d%3ٯVlNSyϤ٠~[I.R!Ϲfmq5Va÷ujra-u(jzߢ-B>0tunП=VB^.mE>g'߯ijMxJYXyq AM]p:\`6GA\v:)Iad-OpFGvK$Ѭ 6Y-K2cb|ͭ@xW#ߊZY9]C`zs^&Aqɖθhnw/lH! 3GC&óOwݵJ7VA{NRdr0K LʁCg4Eا>A!&2V>?9:Mn#>9R6[*ٻA ekDy/SQZ“i-u=Gȶ( YyVBns17[Gz~v 0/ ]*A<udHׄtV@w3Jcܸ᫯o^(/Jj,W EF.+(poӮQ}F6b n:Xy+y"R?P-gFک.y <*&Y$]@BTlNee8:{HoUd?'}~.;͂p_Hm9j RqsKv-7GGQDmAgE5/LJzH1,hkp⣍r)9~9zv_7-M!d?# t34i邱t9'WU.Ly15إ\Ѝ^!g O<-/vFJ4d'_Ã*Kxkh5O,=HlX׺ZT } ͎ u~z #uq/6gBN` [J=;Ǣ-oz:lVS"Q,'f*Զ{"|e-uU\"8^f7&,'ɀy!xr?oU%v Kg.KXd]HHkGLsSg>]bun&ua/c%bz&_Lی@59^Wu%b Xza͖CdC\'&2\\ i)¯¾L7\z{Pl:Ia9Tc)J::,H/.au)2AS%@̇Ԥ8E\^_PO@_؅u""({ 4ƤUD]?"<IX7Ha]ڃ-T"azxҫ\S$]CF‡~0Yt0qB9Qu W#rκ8k_A'q+_Y Z/yt1=N2}lEM{mj6g9B&E8ߘb~RCt*3(11[ÙμJr_^42Wˠ˄?cjC`-CQJH•=zu(ƠpsxɌ6Z*n]?Vޡ }jUtK`_xryxB.(Jӆt3>Dez.(X]mkMev 'hp(kqVf֠R tʣ.# cLl,Rd[8~: eY#3(4=O/^{Fޙ+BBKkA旍5>W>(rq {O;Jqa7oYLUUn’@$]VqH;XkMm\ A]. R bz?ޔ!S2a#%N)2QZr3iCb,LdQܔn+N߿~Q*Jú_vT{ ^z= ߅̈;T_㴬k3v䤏*v턟y5#&[I_|ffߣCTMrAM:,bx[rW r(lֽa0}H_QGO͚FT()iiFdMN~=Gං!Ie,x%824tvJ wУDo=;QBpӫQk?ʔ8n;Ufob!j9' Sαﶈq|^^Mc{A2es=/q%y%Ԙǭcsg0[8֦K]<|i(_O;_2ū)N6JÝBE4K.(9uqyx|`/ utn+"!Yے榭;, jr++sqU}XDǼQ9^\ Of3gvn B1 G8UmƭX L-Ub||A :N{.dzP2mg-8O*f.ʝju)-!8GjD8 rqqG.Q`@Z n[ܗYJ6Ԏ$RsNңFwwi&0`3w&0ғ*u`D4p{5)4¦s9p,w'sNl)`"rL{tcZzHbx9\B'`] 潆`.?,'Rn|3fxICO0LGY-3rsb4)-bEm'P\a]VmHL`ڏ;p9 L*Gu&f;(#",) 5g}a&= .y}3 ץ{ϊP!<՜Ln.62τhK BzvMRPL@՞ί\փ۩-o*(jCehn@JRYΑʀKgzVP`, 5u~'nȃiu葐k_A>283‹4 $!DUEN,KAV)7VfR^+!@-1l@9`h_5QzsFoSמkRHiR-&1ּƻ)?>.^x4c>f'$/XuwԇfzRKT{5d+`cP?Q2QZ/fG|>g <ۻ.'{@um' DA pxQIy{-PQ!Kqf8^uwa<;Ht[D*T_a\!vB~ŏ>5j7Ȳ%s!JH ?. |5 ~q^Ƚʸ~,=0}Y8'zLon &z2a)"U6sϤEl@ӫ8۪3idm|U"o ÷TTvU UO2Ƃl!~h8jN [)Fm5!<ɂqN PEY6>l(<0dtdr@BvX=eRouUGXpV#ɪg޺ȈuM҂ʝ$ 0 "60t!If!?&WZ ̬s_q;er;_QJy"("D\2OFG-@bR%ϟOSD4HoH#̈́8BțdˈkU%gbDwEYsg%b`ļNGAnn1O[c4ݸ!ߏL+1! Яf:p; .X/Y0WaRMmn BotIq `L+|N#Z;{2} όAxɺ 9|(ӳv /|Ȃ%58kO`n6f$-nf^dazѣ`rY4ty`m@h|H`hDYv]lS0yY_{ ؀[xˤeE+}-6r򽿒=wLlyEo;mfr͆ajc?&kC.5'b+dɲ(1c :0Nq40*FTE> ` zHa,M |r74 oh t8?N_jDzǀeΒ.4#$P*tҜBz&mЀq;.u6/R^ %|A,>iȉ LRjg1z4X6|Du7 (i{^yH9$eR ] znp|6ʊ0 qHj2~y*ąI>⌍7E{U(ts7S,H/[06~oh!11…n ݔ.4_*{ c+6Ggmq B}PKhZƁ7v|$9:hk @/ 3أYpz_mX@}Mnd7֟oqphH)ue2_;^['{K{+a$M{c'p*Dq^->ݱ,9A0r?\ C7LK^̒e%G#Gp8CM@"ReI!wL.$3ªgUhǓ*0@xhђaLeGƿCl+Cc o` ;MIs(=eGಾfakֈжůC,рUWyi!DV֐!ej r-?TNu|mhS^ۦ]pMm@HoM徰$8c"vU2ZgEŝީZ)dޕ#ߍu&B wZ=#jQ?cqC Fb/ B ؀9P. ˜ξ%%W1X(QTX@zAr޹BG5i+C4/epLI\\tTGΈ QxsՈrq68"~9ue=#;fQ! KSk0pq=(,h8 @wcRۗ| U(rAYzxB,N,L=HҮ"E Kg W?3>XޏʵlՐzx/w+r⎠0G2V>װ @{Un*X0~Cp =\KrЭG<]4m:in6T@oz@UN ݍ&8;CLgj"6t_hpP4% 80Eɭ4R })n˘Y{}P.*b|bc &}R N4Rq8'S= ?Og7}; Shr)ŴNPTcTC&#JcrA#lm֋`T3bl-ZmI7))J kw^Kb!!*B{:/5@h4SeX}Y:`ڥ8PD`~@ÖIT i<W)ֈCk m|&?{D:R`-9y87_k9^wWND޿*5zl^g uܝf9BB~@;Xs!W=5Nd79}ty)`ב9>8*Kr u9N'fwι *}c:Ew%V_+C>O6]٠u%d;]&}}MdUn)bz^~=ΗrVz$zWdGf6”DܿHm42Xx3֝?tcmp%jp:+id`.},!f+%I+h_CL̢mc`#/-+@z5ɐKp@w|;hȚMa o:P2]N*;'iO_Y>5lL~ |KF%UTQ@&WJG05trD*Aa'K^?:g_S=yٜJYkzn6Atduг7kîWNs-A(>bzQǚo-HoQ=]Q쿀?rl⽨V,wG( qf :Y^"DD uAU[zR?n<{]==_BX` oTlt1ќ}=%Da5R29qsgI$@/65 v㐈ϰws`2dsPNj~ r5Vt~HX>f%=/N&!A镯lɸS6|&TQSbQ(Xi|8@1]r/ڻ+uw"ʍVryD[r&<^6̾Ozz~ņL0+;,ТP[$&T܇9C]__s^ Lv~Z57-Mb9cKr1ZD;kTuf10# ,{Gcx"3>637?\PV?|/ NKHF=:! ـioId|j0IysQ~މsVV3{AzZg]fKkoa,+۴V`ׯtdgKj.j b#H}K^]y ǺV7i֐.52?7ʎBNŒ_XX Ȅ !=˹hye]F#5;mH`8BqƆpp>r*aUOw掛bn Mjoj=mQ&XxȍO}^O̓%)L4K)V7>lè0aYHbIr]J9-\iI%~|j^QHE_n:K {eG_L ׏$G[7Mw%8?李D2v!Ox3\V#mp@h,vܕȉuzM@,3r@Gv(rx~oWY=sIC<bc;P+عشɉ,-^֩gs5C;( |:mփFNL+#Fee/ 2~ܵvxev4,6Qm.dYƠy?Y?Ӹ&`:%Z"OXNyj0&ȔdM8Nf+ dH(sd=0b]"GP!ZK>_\^+ gcgy|˱띠7ѤlyLu2SB ,B̑ ;ž4f)[>:`x6ȑ$ƪ+lOyЃYL_,u`^Y{oQ4Xh1j@mh%#8l=H/-5)6@|piTT}7!~e{9wZqQf>OJaK9VDz{7a_5VjJ?Q'~tufWiOl+܂S|Ha_"^ *'FaA ǵ&-5+컚]!-{*),F^PɅ4*BMRicN@.,4vhW7fb /|? ۸hLd#*޽[& n2BJ>"2/1QMFixްhXg\Ԙ,S39LÂwaJx_"SgCW_tqJ+X} ]$4ৌ.07Nȕh؛(cscJ ϻ,>y01mJ|'\iÚc˃SYރpu {fSZG[|f>Fgb1t+*vU}#uHC~עnA5*1]xY>sy :]lwF0?ԆRY Ϧ#GŽl>X'XOw'Ro@~-'?ܔX˽\[wBAEh6-m}ҥRxN-Kmx5r pM)uk8} e8:YVV") t;fFq1 P>f% tioM'4]#`԰=U LA[}Bx!r&Evʍ8:o_W{HUcqHplW_jy/V{5dj5n-y 1 ɤK")fH/@t!*A};ئLxIɲ`cA&NP%؜lNsV ku 5 W cܒq>b0sa,APZa劸:hd#\Ԙ6l;\cFmJ]eX1#hW ["嘕v'Kl'ny.qeJaxgOiߖ3,fnjd^ {C$߯XW"u M[뢾Bj({.l#Ei렐1mgQ9?;n?̞x#̦|1Q&Dx}s% wKo%G(pfS5UF>EgQ$1bRhCJȤ1}>x9J7_ z?DNY;GsB;0 _oqOJ<ʺ =ep&iQSxG<9i0;'A rKa1Oؑ%@L<[Ox'}FL1d~'uPVZ [.1{j G=D}*&IfWӞ_-/ ~AZoQZ @7J 'K84" OY-% +OeaSqzΛxwRu X&c.yֶTuyL\GORGVL׉]s$벭`nC6S#CLq&tjIUy v .*|~si`0;SR 5(- ht[Ґnv i~R\ -?ATqY |ґ5f1_=! Mv̓BO~;p/sxH?$ euas .FkaN1&R|yc^ϕɷ4@!h[7ſ~t:keP*|3%= $s^<zyg7A҅1R~Ij ~P/7k#~gbZ42#D~0 YmZ/k c็WnߍZA.|q.Bc1n0Py CxN>؝CoXOY@ ?I(Y⭗1|/B 9d#Wc_}\4-H!kn  7; =DmEQ'P%Ēo{c2:XJ,{XTܢ8{D]iy#."wHJlZ,Gmj.j j_$2H]uY'1,TLXU5$x*չJ[F6m`&[LNy I\{N8, j4?vwA?{4FJ3`Xc.b3{xC*UҾX Y[O}R5_/.jACEw̥8@86|M⏇fa#7;U< _PSUMli>P˵Z\Jfp=%:;e ΥhHM$)^?鲶L%bvr)@MK1QiZbS$mFwĽ^3;xSaiϚA+_㻈MY.A0'5&qTىHc姦dbQYV;pUڛk 1ž@C6 &] 8҅U ߠcM%Qz^v_Ict wѺcR% w'}7b3\lX-)MJ36h^sdn+Kk|-Zzm+^T͞r$1u`H9)D͍p(^q.]r,APHND9vxvW}dˣa[p߷0zd*֠e(0`F%!73 I o8F;4㾇.>R)>3},XrMOae(oX[IoOEdh8M~OF8M}UG˼V]B|jnn2q\*1_vE#U^ nLh!<84<ʶ Uz4Q+z.ꑛAk[ZYQO[YMl', Ttx$}( L1,MdGNh q"@ZƊw1䈎x'ن^hsN9Un h O@8ZRuݝ%Mhb\ߌ=Iâ.}দR%f1E׭WomihK=n:i7vTc (q*mb&3}, [v=>]|΁Aj"TtJxۃlz7>_N\ó8َgc-dAE؜B6XXt²ASn ᯮ~jm \&zT>v!LY8u!q|Tf>CSH̦X,&Ev_& a0'3ڨʎfγ^2I^Hye5 WJHaA{+b {d|fԣ$YhyD<ԯ6r1&0՜bX\np!WW{x]UGY\M"ڡb :ǎ4FǙLZFlxD]DNJ2|iUzl\xHژ6ڛZ쎼X<('VH*,*p{u3W7!d3aEs;g-_%coh35$2MdDBx {G'.v {gc3樧'5 'MZRY"wu0F8b2mWD!UYӛsNH,- KC۪rC0SlVh ~6$<չBbￍ8]K>Bwz$pYevm@P~su5}dOjM0%-q)F6^pu=^&&٩qPbx3>VO8b@ 9ab.%#VF { /=ho9#FQ5ʼ`8jw1)H&DrC(C& r*$Aj/ZgbM : hHI8` ֲ%y趹4 Um\ rC g*pTA1v<(tkKz-#2lCC"v?G bw^l^Jj^6@;c oOǪS@:iytWqZ WB*2=%k3FϡN)/-.6Њ.vtp`,{~t|glZ Bvs?Եؿ|n)4 t=BW9(.$ )Yrxv `ըY}&&DD 4$'֊OG#SnWTꡂTު#g@jĿ0NRY[#>NLfy!ՂJ12LAz oL4_j":|Y8?q4Iց|]9$xDcɝf>9vI ab8`c'ଐd_l0)d>_  )GoZ[%Ai⛈Gu^72WhfO{rW.2uUȘWg>4N"-@'tO_D7JbuF 8z>$PX.RFD[0f@cաE9N;&8Jy<<'aF\gT!ٙ<њM.3#PY fPֲsnYw"ҩHw2J)7@TrVG5@JĤy*!.2atI($I({c%6~jP#pC~J;Oq[E#|1Cbqn1`w(YΩtLb*>P}nYTt{?ickϤDڒR$`sі9^?<}̔ByF#]*L8c* 'F!*#90,PRۢEj?4@a:oX3^dF/lud@Dhՠm쥴fex| <)l} B5JYys2uAzkn6n4g3nq/)i`ϟho..>X z κNN!瘻i-(p_^&Y[24HU.!|}0V0̟/npftZSpƲ7j1=r<οڶ@9Y0Y#gE|,w,V%sp%{whxy_fHt+.I׫q"ޛNhKmKcV tclyͻ0=oesrx'$5N\`c#Y[)0983rba|pYnNG)Wl,vm`6z6C#Nxl¿F#^~f; etbM*rU)>I%T;lz~.uZnƦp¦ۻXhc>e X#ӫ} O3aײԈz Ɍ)!QGEU5p&LF9i%:24[-e}<"9+Y(B2-3ZfBJvl͸HdC}[ O~G^30;mZr\yulfMSy4hmHG-<=U8dY,=nV5sߠi}tDkNZN!4 ʦGi:zNM mqo=ɿr"L& Cu7Ł:E\7"g[q9ن(&~qkaXl"A7,+v^+c`F:f@XV8&0cc.OzD6؂T, qʣrYmTnY$k evML柯}iFjo/-^>׭JW>Nzvz7 rL1ԭ}iM V9O蠃n`H2n}PWBhɌl+Z!H5+БKYZ. ]0}/ڊ~ hhkI>{g=Ohy2l+S۩Җ̺)wfpXY]5nLyN&R'|/Ƙ,e^b0T*.DԁXCң$îWgo@0$SABqJg55P>d5Nm)[O8vwgہC6!uFApH>k-.nXLh`=„/wBUBD1)ѭwrEY:KybΧzakpn,qZl鄞[ѩ0Zx5 NةH'M0`U ݰ*b4{.B.{":^B5V%@+_i\,,tT䷮˭.!Xr)i)E^] __+R-Y-71'kӰ2tPv1e*@-^O #yޯU4}{ʴh)HK{[)So @EhMSr7/b@:X 0E 4iϐE.1i qYzWhwD@"@_p{0 ځc sҶYN1-(X]dQh l[Zy}åi זcR OpH1xt#T̆Ҹl dhfȫd1.6#:Nޘ]{}PuW-yVY:}S#L[\ M7,-UX6nxժMdJ]UOv,<4 wjGb&BACRabR&Q8Il#<ǧpT܎ rsiଥzcMԺjԇh"۠r ]i_s썃0bDsK7i55?0;kT. 'foQ2O릯F⢪Zbn.$p;m hmڕ d*jG F\+-LBҟ%UO{+dTeTE4-t\mpRWƜT7ul=VS/FҚ0u{M[zyy+OE&鈙۬ GGItH}]#(amNom6 Alwn-eU˪ uVPH:M6*ƾ(Yvi3omj"wd7_ ZQ?LNT_t<Φc4M\^olI|GbO);sBg#9(BjV?5{k-lm6f:Gp3TZ#:ڼ8l-_5}'}}Ic32*g O{z&}A:'Xn>17uU;Gp4yUbJ2NЬ-$?˛)x8sAbaogNRe wcf%OE #Wz^.Qc,L4*Tm,]ucXX|1m**cKƍM#ȏG4 [C ڼrwlnQK"{kq+/fkJ'>Vǀ\@^}3 'tU&SFovB)*{/Cfj.L& )g#>rh͚NH*cL(Z#?&5(95ݞ_!j: ;1^uqK*IUn\z(6 ;q?^S%DGGnhH&(?; <W'KC=+"`,%0pO?[nm o6·wW»hWSoh[ .P(oYOtQO~Jy? |k4G/vƣ7׽0WfseKį~ c!*DpȲ%d@lqsrmn_s4-Uhg2]> r2k6^F^"<ɽÉm#yfbiC}4eZ|XU_3&L8+X?Iy0o) ǥm bL .]N%G$2oҺP\?>;-Z+4XgLW?_2Gx煍t+ꖃ+ZHvO0_"!2GQփѝUR~AnhOZ9QH5@kKP%aJ!0IlP[VIRE8ZMU^ctIzX`bf:(UKf\.f0zgQbR:7YMxSinV@fITo%ydTk7ӘLiGkq%rRofƣ4}z313Ѷ^vr8iX\kD›8%~ ٯlR-r}/s(smZqgQ'<4!\7ip~3毻H4B4H ڱsQ`ءÚbd#' $(V zD:'5& $.E-6g-x4W#gH4 e5ou3}5i4{¸~g$seO`!`.f[ݑG6Y^i{!|O;)@eJ@bSC{ʏ@Z~jeд.G$:$\}ݛ1~ҍsv 2+0#Bɾ/DΎcփȪ>vCv <=@1@ gHeQ~yV(=;Cט^xoy5ru|CfϽ I[8:=` uսoi]?$!ãA=ps cFk\}<~Q{X|]|)ŭ $Y7X1GPMT k+Ofa s]oE7$eK;wHOb ǚ6n~>Jv Ԙl &\Z zŢ2 # 91*fv#>NYpq80g Gˤ7lEDiOIH9_iv v6`$ CMvP &o~;6wall QB XKtFPk*</fwI\x[vkg? ]>1̆*uB̴''[qP*'3mqܳ85 2p]/Qfl;DҕHX"%Om0RRr{8n1*ڷ)<|f`>7r | ]!vǖid\ >Hf;e&ڭ'œ~ K\N .\#d򁪑o绋\aƼ0V6TZ 4Ah#`T+ݟVWq4EqVӑpKR" >/SEr8+$I 6&^qĮk&\ yZ%g}˛3/=mTB ՞ԝt[WE$pdFYV9ԾcC`@BXBzlj[U{ci%o`}\wup [F8'Ԯ$9mn`1>C(kp6r$_c ut^5 6FOLn:"rHUis[ tZ~V!CmBfc;bkwy:uR4H˞ Q3/_;#u>@`aS>>[dҀ.UI03?U'ҌGyfa$iɗ'eek"hVA0󚻍vɋ'+ 8YT$)#]M^~a,wJa7"𠢾w8G8ת&:8,qP9mj;ƲS5O['ܙvGSX&DjlBEj⪜}\a$ᠽDP8Ap,Ԟ4cSF4^@tU=iVdbk1:4ycUfg?3JϏ]%`TflQC̯ZIsǑq 9xieʉOia|E0D[t`~D++v1;ҭl_V ɕm!|x ڻ/Q(B~[c7a-.$gPƥ\x ^Ft1k4i$Xmv!9g{꼺8}>o/1n:\j !̭A;\܇Agl3'*n}y {5ݜu&nJM3V0CĐsmnӘI:)msg ܱ +YukhpM6j{1(p1N-apr1=VtOt%`-af~؎Bd49XvrZSˆQNIR'zsn/'AIYI ~}G'5EzbRĔa,64{B [|aq[eQ'"ǤJʠ##;Ö.I\kN{O8"lu+b#1Z:rʵ~JQ/So^N6lA3n4i. ;j xh40ܯJYݤ?i.\9.ġ)S飩Pf|JK!EG&{B1X&ھ9 δWAs6ejңVmPcSa*G{6هuKaGbEt9ZdfR΃y$i~l=+VZU}aR{1/KiĜV/vv[t\D㑐&um>3a"SޣgAYU{Ʃǔ`^%K?]fDd r7CE.9>0r1b˩dԿE;1!syZ@[YSH#FlmT#FWTA]4erzT|i*uRu9lA-x_f: X6(Wl*Y'!yܶeXEZS}ܾM}_ IȾ-|Jf|6D+9 6[)kٖ1"4 @^I0vW͕Xz`\NH5v^=X I F@{? YphCؒ .K~Y|&97mד݋|oѣZ 0zhl9NN2I iprLe`;rl"[ 8 N*}:v.!`Z1PnieOZ蚭[A?R"#U ]CdOgBC⍊N[:# P^zdhd W<-LI3.^X)  i#'ٝcX{*8N ûyеŎqB_ s2z_ϸz0po\4lh&5AwJ6QBi3_a{d5jczɠL7P#EB/݂6L[>Zw9$r("Z ! jwo)iy3;4+tIJcuwm^Rᕓ0 JΑlzrS"O(2IB1g d:euooY, ϻ*MT=2{7)s^ ޽tۈ6D6nEV?b#GWﴊW6;% `*bzt(8j+~ia&C6;uhLFY_Fqe`$f:DS憴L̜BhCﶷ!wB;3\ٝ6qD!'MT{Uu!Tr'(hU] /$ ޘ9! \”&41mag]jޠվVAޤr:K]h nݷ}H WؗJ2EX$`Ww]/߾e<^ tܲtUȬFJ/Fs5#(eFoV P\vXwjzy-WaB`;ybQ'M]V:3Lcee}ӌJ,P8BpY)4p,[$C.rtڈ"je2e&(]N<H6n|2a`C$3WvmJށ>5͜c ghZ&' PbXۢfnt)? ?!NL*LbA_3ے`{ӽ[kHd_OF g P"CoV/i%АR`ׅ{gC3X̕-JOh f7 u_ R4C0ʃ*A~kG w'uQW%|qHڎR.NkT{VytiYtA%͝H_@<'Q{0#ɭ}r=)addƎq(G,ϦGf|l FBUIh wS3Oܞ^\ι΁MU.ll5 GdЪqezJv9We<NbMɒf$wöSK $b 衶-P 6"fae^L|LOmj^4`Q|=QW7])ԫar~qe%,S H]o'~KSTXDau6W9$w̶?k2#n"mWٚaԚ1QËzSS=*ݯ2v\?SwCŸ${_!< ?:Ƃ[U?0ڨOcHPCTWz|O A-}\dovP䡩sEk6$a"Iu9ut~gYWWYdǁ7ۉ8,_bw:y\må #i>/-AE8ӕ+/kl\|=i#NvoDcj,:xtMqK0Ŝ1*a&^(ɖZ%¬ACa]̊1*~1|"zQ)t_46aYVu anrTRJCO#nd*h'y\(J*dQ$);H1n/dopT\A{\\ZF W傊]4g*$lz4"%)jjܣOpXܼv0]eIǫ"$Q/ _Ж5r͊?29@+6=46_{hF^CnEHL= X_UwC:IOTP"vOS>=PUj,ԴDg>*:*S9)⛩^F߅Z:?L"D>T9`z=pz[iVt1!TPP?[bt}I/~1de`!@B\ =uڲNZX ׿N><-¨ߜywgLh L`$ .?0Eۣ/A*)':* ~@|$pA";[@/-|8{ y8("gjPup+B\.I[o,VC* Tr,cЈ'Ɓ 0slf\9Y1WuYvtp˟T͚Woia (!Z R52K8KI')[ɘ?Cjޝ .2b鵘Jse>Ir<NWfsUՈ}B%X"W( i߹}e1t<jne6ldC]C|r-v2fZז}kpOܭw%搲iHηˆA@)aP֫S4G(Ċ Her>-0>o?X *UIJU艘I]T̀5,Bv4mCꈖnԣ;݊;Vd7b2o1pԿ<`3 Q̷b@H玩rIӧ΢k#+v\ vfgy]`PTZ7nAJ xp䎈p]FF I Dn0" qHgn*a۹.^b8,Cw>*ܗD,Y812Keq/?c>"FkCd7 N}r/:_3ؕ^2w" $݆^tѥnPC_MEܗE`Th5$_?M[?|t6v1|(@?2ziόYZ@3Ґ)w2yʃún7;RGL>ZlV&ލЕ*BUNN en  nsdM8Wر3`h*|QGD*ҏH="Ua3P]\ .{"У20a_9BB1YwJ1#ݸ2dlE44'2/-(:YTO R_ҔDPM*3oSf:)gI^/wT Mc(f GWS_(a2O^.@p9F1\+SX\~ne,lq.ӴtdZȟP.$Oe737W9Z1QkA% g~vLEJZ_Pρk^.I*Qw=nUoBJd(*ͣ2˴vvҪOwҵ"5Skf+F{4?xΈ>9# >__T_h@rQ 8նT aڑ_Dӯ5,$8V\دCm{F;Ubb}d\!Ӌe\u 6$'iWzo@ϟGq.ѻBtǦbՖPcGp٥q-MaޗaGdI vsgxNOy5™=knˆש87 ĖFFڰ5a{8 $,0|nU;1hg3Z}:T)(1hڍ5gIN=XtEFFZ:/pzd@h+y{gY?-`VsW+%`CwʊR@)~d[{dQ^⻃bCbyE^!ZӅ͍Ofnv-Ŗ2d܌Gg6 oJG 9UK a,j2JRTye|R*E:Nvp{)T6Lܖ.эfrPZ ?(53¥̋5$zʇ7Qq? D: .+( Co |iI^Mq(H0٫U1,(ӃOX0\KHPtJcm]/z}ʄC$W\rkщId-L#P;J0pV; g'{bLW3 I+t~k]pً Ba߷5rR3`i+V2L3b3c3&>x}y'Ŵ[]TT*)^1H=09x!`Zk>,\Z6b5vd=4 tbL}1W22>rjvjfiUX;XP|%7oH` (FL)tyJ!t|E 2? 7h~ۦs]<^IVv D߼t5mW_`\W4[RC;-B|,R{PkO _r=e4#:!;919(\+]?'nfxV bF]R!H|ɢ gE^S0 En6b0(./ |b6xTu~tUz× }/1h-@NQȤAǃaK ZfcX{n>z u15k+ DeBTw:~mj0aDGe|g\!UDzdȎw5m~W,n=JyENr1W gZs33mQ Cd䵅_cAc2(>vP`C8s&;Ie_yy'v)[Ihf+@[( Y5j&Rn13u+Q5WoV#!@>/U8'ȏVQ-"g%̈nWv}Y USN/ky4sh8@|*z%WHqK1i[ZYq IC|eEV)[ O!k{oཱུ#%4 % _PH>w*Nfwd \UOBATUO5쁳]wNۯ 'ߏkajq>f]TAE`Kj@/NzWPJj{H>:)K`AN-%i,}T7hE8]sۮ:B44,!Sm>Ou&hHKYUITۄK[۠8bg?)Up۲`Sf͜wim̋"g)YC8kTO1zzϕ!SȲ5{/sT4qkʼ6]F\K7<]ZŶ:R$|=Aqn"KywtPpÍqX\2T2'xQ!'dOm \v<ҿ/w)rUEف9])ru0?پk ryO#+\7AyH@etcxUdDDz8h%FQs%7V#'O}\Ml;!Mڸ˔* aIDwdggla6= X&GTuOz_sȍpk.A;Y(2`)s8 MOc燞-D&lBL{FWVV|;iEk-Qڑ:ZĚS#mvf=IF&KoD08_74e;?}_X H#le3@ze2J bCT#ې"˜W qΊfb ~.E0&zL+gT?g"Ϛ̩rd&~L4%Rf>!y }&o)x⍷t K]E_4O5[@FlB2i4|q-.NC0*$dOj7dd7r4 MsĆ64N0CTCt_N˙񛛅x]hM䜉 F7]x8.Xw $'Ez]p Ҙ{+x2J+W@%}G|0&ĠX @ze|^yF&FxyBq8JmE87Ae<gV!ЈIĆNdseVQ#t2Q[KHoQ'! (?adv!6E}'dK ]Rq+ʨ*< m+N~r=4bi9*]8Kq--J9h њp*-QuZ< Ē_zD%摂:/9\_%qw&8:6[nCH'l9zRg[Ձ#%GLY߬3f!]\Q1{AKm0 x f54K4 n|EBc*L3㓟Y跌8 xn@[ĠXq# ;<ab)hAgQb懦Ԗ' Hgޒ,WM^/櫾b,sUC#sE iUێ qЉJ`éiI}M?kJr٪WKQє^uNI[7y)n+NQm?}( j W\Zb#H"-a.@=czVP{LзALʱRBY?XDgE2{B6Mǭ7O:d /#2GA?ٗƼhhnsZ TĀRS&:K,ZROm3?қfcIߐoiX$ߦ.*9 2)>"_DyEKLx*ők'M>zˢBUv6C~[ή5*,{-(l5N3WZoWUʚ;}u/md"R2a~rӹìr+N|/Hjo^a(_0l<[X&8q ,E䤤NYqMf[,'; 1Vo}* o *?Ipf\m,噳=G6l%&& 9#DD+.8NԿ-ͭD#Oڊ$ ,_+zaþx5iR>5#U魃RcEQ4Yֻ#fO!p~#٫w3@.J ^6E&b'fΌEFc(%u}>EEWmSAch6 5yy- o-e2~) zπvʢJ\@w}?m:Hkxrjb`8lHJu*4Fi A{+P"W8# "Φ1 ,N1PiEn;\sq޸fax3{p\ZӮ*|T5{g'jB\q#v0w[Zj-x z AB!4`UUd S#2V{ܦBq ؝>@ŲX+1EZT'd=+ =Bf )!l oucuXEae?:#%hY@naa1,ՆWV1cZT#xkPJfb%QQJ=L@!a]}ʚ)`/Qljj=g|ty6AJEdW}Kt"L=Pw4caba̱]\?r9?VO-EɰX0\׽W֖{nI0}M?u[oå4wNޏ|Ro9?ɾ IX"5p*JQEJk٠reTΌj߈^k ,e%";Z!JF٪ҡ +âQ;:vHN>c tT[fE9jto7]xKi%>.Br)zKj[Rb"G,#n_-'~swGψR+38wcn^Øև)sڟLyWAz42-X9)]I*4UN]NAβD6uR5ή;?dR0ֈk1alDJZSKg[3 gDO<p9XS'}2ks&<{/n֡тnd36Oo(a#nZɼr_j)eM\Bf7e hhE+ F8Or>C4i1_ #q^sI_Ntplz3hhAra%|BQ;P/-72Ecd;y&ڤ)+r*itLDnxyWCڿ|>mhȓߏpc)55Cha*k_z70wG{ZɧouTGStjyɝf12jkݗuUa-\3)kȱ'mk 氆*B \jJUD&ü(b=Лjo %x,{44H7TicPLH84(/ǽpK.&,/!EEP=]Uk(j%RDkJ0ju qu Ic~N=>6ge}jTK06M) :GeyvP,5w =44yL_*,ٺU9]暱8Ÿ$FJRyhz߀(H?cH9ڲ ,5Ei2_0bIl~i !7%QpO $Qbk &bﲎhzK =$^ΟE'5 ppȫ dfeL$C?bE쇢YJ6>*8,#zZjCQv_h0QdD3n҃m  Q\*к Ƚ}!bNJ[ 8B2);]-TpVJ2M'_E=oRRt]2HU"0'UqGvծ ;`W b>q'i<Y32=Uwkai-9`1tR{^ݵ =jkOħw";%R|ш%@lp Q$˷Yo>8.3@u?H?gsn9*z[K_gr5ZЇ!BڸH|jvի~8hr~}#aU`T8GxC XyO+QS>T|P_t?:mAwntU}:h7ѷG/̻ ~<d(iݍ:Bxz4ѫԵ㔧vvzJlhF,rVD R)~Նf? Ki#rZ~t Y鎌NE4ܜ6IiAe0}3TNǑI Zq Wpښ(ʑbBng H/𜒠Ro9X{M\Nk#x/"I-3Uc1+_]^r$(g;ThUT̶̥ؑP,eQY_`wi.,1|`ϰOZ; .vF ZZ^4($86zoՁ!ip}\}9R+/6\#O\Rs]=qSI*#FCsJ-7lM,D*MK&#?%$lFɲ*#T\t7%0б圷mb y! Lq)(uL`[=BQ{8PgW7)\0-4(lPMymỤ(ۂ0zA2Ru'y_檍y8ZYFޞ/O0eU$fA=q )zp_sE ";?j=βC( rmx[LYrpq +䪿-/^#C*:+ )X?Ă0S> ).>xVJVўY#ItvXC&oj7LF^loGB2Py)ݠjE?)<1O ͮNϝv;.ģ&WioO? 'QVoLt"\ج覤,\Y@5/Y;:Lhn _Kf{/є$|F`%{*(uNN"{0LtF^Q`pmi7)uGu<)BG2J|O ih}-}],Nɷqߌń۔(ЧX{8)'dΗ4:(We6LagyKӳ56ڲh7 Jg|Cm`gSɡgX{vʪvM(n)KU ޔiE_rɦf*&[\Xv)3NB`0&*eƜyp&dyS@f%R[XlǢ3<>4:KD-˱ '&l. Qɴ:_@ȃ˒O-GgïVsC3DS<PX]XS5a¶DAE㠨5|qv bcBM7'u=zCS([o_acK4K ieP};,޲n 遣v:Ψ(̐4P*+-p=y\f/rr\eA6~ ~>/@N$q\W"ߓ `%M>-RYqiQs ]@'Gvja٣Rg  WbIxkH+D szJXH&խ xqw"ڑO]LSl-i=R"; Ϋ, ٳs1qO`>RF=ъT,9V&wRKgen2qp'P( BNKi̜ `'D*p'p IOR ē5 3rrb(S^-ڵJ'`3iveB8! 2tT QAwuYՕBm76rF\~9#]ZǬMt^?!ZG@x+ *ՙE?TZx)@8ZxWRC@Tiqָ*Ir>Q.,N~1k)VXlѰ& mS8fJ"l. I;O}lX:uc&Rqo|=҈//?8Y_e Iz4;>3K 670L|cX>ˌf0܃ސ}4bAQ,xސ2!U<A(lxZ]} !`[H\ƀIT_}l,΅&J`P60u[ wVHx<|в-$|p7uuQ&e#f'&>KyT/̮pjVQRDӄ1H:q)Nw`jũ$M< _T jlEAkCHb*2ioZf7ʅ!!lj0 9Cϫ5ut5PUJq.nؕw?D/ 5s@<]R0ol%D?e`LNIĮ'FggNګ$D*#f|Jh8 &'S}4qo5Aƺu%3." [#i =Xݜ~?9 |\h xƠmbFl=DdWz̀,QjN|B#M s`kMZGi3ߍ }z 4E1 ,|z0P@:R9R'oLI'[&R韺]v(Ĕ+0bW;$8/ISsJh G[f!%N52{ȺXqnLaf@f0dzJ;Xt'Sq+t ;[5%2 '\ڿnr ʻNSgCZO4`&#>ʮE"T"ww^8m(gΔ^]K*| f佁-a=PN舡̱*H*$%D&[oZ@t\eN0A7CZ0\C\\Vʻ_u!*X2X  CJxZTKӺf F1H TQ# ͍Pڕ,(1Ԯ7iٟ_\l )D56ZW 5sPN27+/qSbXu7 :&3fgekbzj^[tϕţʰjVl8U7.U1 ԕ*CѾp]ueiJGU7ɧdq`Kr憁Wr*Vܟnձ !TDI5E7;G9McR7kY}iOX:/{ *#_jQ=`0in˭Z0h]XND.Ê8T r~JgPր9{ށ7T,`͐ L:gX0FG o} Z~V3*uS)~Y@ jgN-\N\bHDpZ~Qi>խ. 11 -t4A]Ys`,2n&r?aij?h@XexFNwRgx @=h*CR91߿O;ࡏwZqOW᙮ƆI(e h<ވU-&\6'S2%}eԦQE*τ%/(T/#lReQm|<9I]Jj &$ _!䩣*"H?q 9C:IU4Zny $$-dPkmFi z*O{HHeZ@6S(oTJvI&[,H7_X/qem<*H6F8&) +T]T *}vtaYYo_H|gw=-^ɛ/d CJufynaz;0Ѧ*qT獒J@0rD[i |Iv(V8|\[DR 8#p>uE&'|u;NW5X;5(T"P]f˴h3˒g3։Wlyk})7HM?! qD!Gspºj{ZYyx-eg$Me Őlbmu327&Y(|bWC}!0Qg4&ԠwH*C825·+2ێ^o3*%joT},^0$o\ާG.oE+Lb UKr ?6݃ZNY8,&4Pʓg^G 0;5З5FjJͤR̀K K:NT}IwM_na)>F|U6nUgFxcE 5c(躞lYg bbLL]wUEi\۶`,brw]{.@Iލh#.uW,Ơ%}z^_+ǎwU#_)|%#rGCM@iOWkhdlf $BJoQ8Z)U5s {3+ÞF%lΦj9*#ڴփjLeeEϯ{ܟ;_Uz1Mf٦IlƑu)3ZyVT)pqJLy;HвzQpĩSg]!%rC,Ď|:& X;4 -,@{F04q LJҾ0 G5-~Fľ ^~YG r%e&5b#YGt:{r'LFOd鶊 t<kG{4<ȌjŦfw yhֽGO\Fi,RczcWay~Ao)xǫSL#@MYSa$֭ũI5')< _uY++ /iV$aQk\n[#J$.2WNBTs[N.n`XyǍ,]J?+@&% &(N t@XlUJg,-8Uc{~3P]֛'Ǿ}1=* 鴨9n݊] a+z@ X\f$IܐGMOpA{G ~/ Og?ƅϪ驦ڌɶ-r!MU8MfZ=9XhڞѰX寔;|v. '?c(SAX@%~RhfW,\khB˔c=O9!Bye 2ZN_R14Am9 z?zytMd-܇4o$eG~=@y$Nw0]<19t^J>A?YA*C垡00>U5Y '@FZaCXErf!~eX x/0 m1|7Tc'P^smeB}HZP?."vl&mE6,;/ IiTsJu.*4 ^BgTAOAPb)ӂxLؓoȭʇI ekqG;%ķjҗ1V@@Z$'O0q.Ϻ.> ~rUv2xdajqrm<|xZl^M8½Wti쟾N%A/ W ']\EdyA'Ņ3֏.ΦYwR>y3 >ش8n!)6`3`VYq&5l ]U"f] *Uh7 hv_x~(KNhlyq@p CD0(zy2F Cz9u[w6p#?&aQaЩhؔN /}Y̊lrڇesb;qQut|6L5jvH>Cyf"1_1?raRI%yB=# )^O[^ѺIK;ztr a40u7X_1$ZC+ W.mblT0мMb̠7]7X7 C^-8]>GH3/5}!oB$=wfկ Q6} k-39ҽ@9qRM,Ȓ06>MB lOkpyS?"+l ׬pWUV~~F nAa#WĈapfyg+IqqH@YUv0?:((ydk@tP7k;[uĦv#WB]!![C$E8ZEvUb$PFSM)=*$LXi&k(K`0NvRI@y64k _`-\@ Qx.k{[PM4w (b`ȵ8JJIɹU8WZFa s X3by H7ixWʐ2k&3ad-!{0x(`Ky'˶B}ʆvJ/;2`.`K. 9_MR82L\U>#qJ{+n58FG!nz#ʱC:Fh& 4ʐ_ .bn@,߂+LW&|5^/]q 8φW<3b#`^>aKfq:doZ?ؑ'TPB|hG)  BDy+^O6L8󢡎TM#@OџP͸D`i= +y.eQNu `ƩsSwN ~M&0;4j%!J^Ե<'[:cͺW5Nۄk_"h]Z\L:C0.` "?E5+*eOso ȝx%vrn9bi3}#B_{,s%vs"fNXo@bN):01*}=.rty@6k7$-3C(m:.Y*vAx(̈́5{TlZ7=,KUA7v<!D)x@2Z%$:/v22^ys6RpbLɷhީ*J q3M-Kh n?I2JW";!ΕDx*:WYnl*w%f4@Y;vh_#߫Y^=gi)>n6˲ b{љ APu%ҶE=PPx t(V⮲יۊa `/mC<Û]/Twms:Znj[sA^6!"VL~ ʞZ&q2CW/_]c:1-P.Ո6/ nH<}f9pOSIȸx3yH_楯p@Q,D0$ V2ص>\$'?}L=j?^]SiENl488\V^.&Q [,]*SO+RIh>+$Ys䇫i IV%,pS%tIDMl'g,8 &wpY#䦑"T 3 FL:E۰Ǯ) =Yc}>J k}wt2>X`;b!.ZӀ,)RfD;ۺ[&nQ+".|Tuv(yJV1A];s'3t2%4Tm\ÿrGs@J:8<*芎1/cl<=N76獯|0\J&TJX# "Rqo(Ug =% 6tL" wI3 ‹o\J% ` `Yꤙy!6r V'U xv d kFR( a|"2|@Q7ơ]1Ty0 .~&,{*kt ;2!*xC8@|EJi,8:xS,/N8,Iyt4V:PǛ;m;H7#RрbI|O Ψw-?/8l!Ƥ+kwGxk$ZT!=ZNzk |8Y v|ssms3+Kbq. k&iL3[ > d 38i#BTO`ɔx D[k%6PSzJIJƬG*-,!p>E#3-bgƸVrJ{uWˑ1E삌At fnsP߱r ǿҢ6nPgVwN:pTlhֶpT#aC.e@KIBt)fRbB!u^bUc=Uԅa O,KA5ڜN7v@@uGj!n8mB2e7)L_֮-y£|F~*[x¸=裠 yX|OU0Yۛ#!ѸDϖ~Z!K  Eo}M {{2bEl(z1>Bŷ\kN '͈O}OKbNI5Ȫ{(x {N֓Sk0vSH=DT 8ɉY6%le p䲽Vd7NhZ x0ue M,AhІɃgj]{'CVFL'wJeQ52k%/e XlfxÍ(Ah*xv],@2pjҬB)x/K0rET.v3=m1DX( #Sm{X1Zbuy&`9]{ջCvE-]akp42@m3̲̒'L{M{4^ ; ZE4ꉱ%<('#Ē]2 ^UJ!-3\Q\% i50V:!vGj wfh&?ؚrufr6)aR>]8.ΑV{ɑ5cP#BՑjʼų#^N|\c Kx81A"a)flV7;D[?߰Xb2p9O􀥠O,Q|;T~(G,q0XTN0Rf lsG 179w"౯? Zν7ݺ%ndY_(Qxi>jɒ3(̩f 0ːF(X(+0N,EkC!⼑i\F;d!NZ s`[ ~us %ƎxUw5a>J8}Idlȓ+g ? j78\1Coi;3H39֟-j3y!:uf ,mE[p?TW,]>:| Vf,4j #1s4NC}Ř0y8yHNs eɜ}JR=flc~rA {A%W:6ʱnz{֛ _iN@bosJ+y>S*cfP^"CWOP&xK)<fjIWskI6N,>jBq۸7@hӁ|  D"tL'k:3DŚJ2iB_|[umtJ-9 oKr5I7A0$عܯ;!o2tF:-_Ia/!f 㞬Uu&^1Ȯg GM&Z+Śf,]Ь&ǵh xUxL/SF!=]94D*,bctc{;4SEJHӰaZǐYBMoqR1xX*OD^D$}0,qEؔOۑ~;U[)8luJ.ҹ)ZzoHqP%mE.8 q+m~w}6t}"l-;XHpgϥ0(HlW1"Ѱa$<<b-m:Oٛ38s;7ssq}C&ca/pҧ d2: JiņVȆZ=/7f|r5fOU 6 YL 3r{ɟдqŌ1]qsX8/çOCg};%ϜB22p26 ĭ/G58)DA `TYp?YHc{Ă*cΑrCꕗIO,~Q#nlDԚ6$ǬPxJ 1 e1í.E1Y/1"x<[X`_LE&_H,adĬ&jP6گB"BEP9M#)@@DckMP{!tuMiIw[Ժx h.<،.r?V,;8P UBZk|(9;2dL?fDT O](pnLާ뫾-wԍk5s]E~qc#fH-ӿW/q+.<F0Oݘsv^˽,%`2wW' =|h$հ}9"_WigM# DpomJu;(\V`PY! oSa3&C`WRO/5>`̙//Hi9`f7\~}d }P, !'nCFWC7 k@HgH'IEm;j\LZp]M{}~#6q^-` #p[rNfe?c09qL}(۝{2($ RcmJ%;$}O!5PL/\J,oLQӧo}zY&=W `.Y>3b&)ì ,R6a,azzqiiFVI-1::np  T5>-'݋m6iTBU]b:̂/G-{dGLgNc6G"mU5yG˾wV%{-2lt"3n"\}fl"!_E_Eԁm尕ch$iYLÿ$Mm̓瀶)uTdi\R,D,Ÿݬ)Eb-"ļ^" l4;^m|7F8 Af\`N0TXeKE\1G>1v%hR9|}`=@M=7C 9GO\? za3 w)y/8Nܫe{,0=_ _.B$XX7 =ts)#x>).^N7'3B:jGT8O ~O9)uDgpyG07݄+@z ׿16[5`A`&LP|#YNF]`l%PD&rzuoO;d_%k/01rQ2~54q ;7"(ʞЕf(c#A(oYxU.ڃbY p5vAHhT_@g*zs'u-U ̩NmLX.&ݯ2N]ک)0HZkL1D ZHr#+I $4EɌp+-픑%E;U.& g\+цƪ=, ;͒2]Mܪaf|`3+lնKC뒂`s_xF(EE1(en5.]}n܂.koU1Sot1!,U@.`{`4.fc+4vp nx*b(z bON7E[>..);*[W )bH54Ȼʝ+7Ws eZaq_{>X .tһ-A"h\g mTƠ1w-mz$d.Д '>!OX%Tc;=leCd⓵k^ji* %%bь~ "d_5a{F`x10J 4&4owߚTa-Qd-ЃC$)8+uβ[JcӞ+Y v5= ^H]Iy$78E]6e>vhQշ 2ր;U. E`9Xx8]_TR 7hI݄GGNVL7U ]~fy'H^!N^[dE@s іf9ur+*u6@ Z}PS'Z!EЛYd 4zR֪QL2tduCZ~ȗc);q7㹣9o=9 ]NjE2]JH=eO*SFsТ{Ԭw86#D=e KA7j/RNCZ$n~Z(jaqۆ5M-/h|!JMWHޥ O֪9 mu7<,ԫ-П7A'3;A',+?'Ap+`K+#,ؿ9f{di9}9)M"gI+iHFUY!^\!&nɭqeEX$yeE6#q+д!]MEtL1:W);NfSWgUpcdBklWVVaZ9meCTU`=JqKvO,-1[BGH>PQx2/|&ɌylyKfc&m;YK(Nqqz`WVsWXkavͶg&o--&qWٌf%oE@֢zso㱃x Y7=N!gl0n۱.6A8SlbKXtoibl'(md:退n$;N}FEX?/r ;-Ibպ~^[;huWRN%;՗͏mclҦP+Ȏ!;Z 7֜Zp?x£(֤Z꫋橊Oy//u"R3vN)˗ =JT 1Uu gSkzW^!&Wz-=@ sȼiKg348۳f3iJCE0y;pm~ִqBG $7#k\F.HyV&&tN52e&`JuϹ,ژ&Wןy,UfxyЄ80Ygs^4m2!T+,aXkeޭ)uw(>2Ţ4{(B:]q-UyYLnS 78ú;~$Q\,6ޓ}0ǯ7\l] FKkw F;D8uZDf^W`wkK=a* bل: j2LiTBA)rϷy5ՏM!Rm R&Sl^FR1H"zKl=|MCƧaTU}-`W'FVm)}:*;dȎTHG iҚ1(B 6 y1*@*Td}DdqrF'=N6tP_jQgy[!\0ɝ&BI*J.se=-T񣅾#y9ߢ5x! bd/isLg3dWE\}~a?OG3Zi0Аgvh L<2A\e᭐jxYCS[ @WiF_j/aQ:O7[ ~qNU0AWD1 yO0.*vS!y .pd@T19Z.n(3d爄LOI_@]ݣFDy8BV9kǔж<ƖR}yTSԠ{qH?[YeB^~ENE{]Kdj3Ȼ ?nJ?vЀҩ;[6>@_K:?PYYnm2wkj;lk1l;+wEEW%ӷ%GBsVQ{Z&zG!X{H+]h{ē=醷$?~2D݊Ho>sS]A4LrY@M8b Ţ K:Q +CW1?@V";+o]Tr>9'HQBx -O+T?5VIM_@IMi#RlEa?nPk't䲙> 362 #iM`E3Yq_24@%VSs:p<;;d :$@bi$(X* pQiMU˝yW$>?XinQ!fV-)#RVXoYV)b)ra0K[ cTH35pmqv|o} tKcZ~I`y"uvgn&|h_O As2>¥ʙ'<ԎfO(Lh,Cڐl!ϣ=4Xr?(mɣp2 sY^=/h[ؗ>OC8 D0jj#1Og:X,#֪g yH.3\&"3KcY97m5lQk;:)e6opKZQ _&-oQE(pfTn:2j(  ra &w{a>4;~RJmd4Z:)"   lIt<=&msĽ%vU})B.ϒ6V mq^8}XTɸĤ(^ɸL@΃yYLm.<;Mmnԉ8UFy|\a)]#BJU96KS <5{ *O4j[`5E~mw7š3 /T-h&#KaҚ,f|D>99ܡ:e'qGgH&͟&^z%cO`,cq f##H7lҜPMhI_FK͡_'6.će>~xnr$Cnά64"~ҡ:y&J;3 f.:c; qaS,X er vJoJXp3XJvVҬ:3'A[-=ܺszJM<&1ࡰ vsW]1ܔ]&;}3)2?clKkߩ{'3UPPqm5m3%]M"/ǁ)EiA+ M?P6N!%K ˨ez:,Il$SOθd.F-Lc7<_@qS>D)77]zopg P#r; 0hP7P0AbQ\+ Lay "Y} KtވYKug|B ߍy`g4,#q;f6ydcu%ݎ˜}{j9tTK`_*7\7uV޶qZ jTr r'SN֩j16}=~(CpڡK΄X7n(\ĩ ؇)vqsw*Voa߸ku۷`g>a*] UB/} zsxR XB\q TY"%3 fRK'ȄKstM| q17{X;QR}+sVWPaneWE0de^LYAUi-eK0]IR(gj^ $-K.,2')'RW0Pf k[u 4aOAE  %n $ OjmZ)s;j ҬU}BTZ?r{UD∀/ԉvɭ8wuЉWT(|ty0)0sK% m=cKYPRI[Kpm-j#_Qc zvj?Z\u]1:Ԑ&ԙ.)@7ґ'` SM=wsD W"`W2isaBSڬ'_uJ2mK̄.0$vSzUQlo롬^m7ɾ~I:$<-ʱk5VcLvmf'UyFr\#CWE!+YXhjq_zT+#"IrW.Xc`%&K[V0π"gkJ g3iLy f+'Hy0üq)Vax b k {FBՉmO{ĐCIydfapI#.G䙥VY^Tf7eAs64"Bth!k6e)jɥPJv$&$q¦-tX<ݒ:e_Ir(cbNs0#lsBQ~d^ >FYFNf,ql}KuGWH L/&BQ 1q՞["(;^Z(h Սbʽ+R{,{(9 9̎UAx`KӋ0B;L8rf21O] AL4(J_0ݭCu*3)dZa6f :q}Ypk3? bVvؾQ%ST>b?GG&]T0K(/$́Zftoon=!~ "q( ';ujkHuu ήK<ϟy92*I8 -BOVS ;9 ^_1s~TyRQd&ݍ:gPgf{Pp)x6|B kXIenn@TI O*b (i"9NHy'עE{uOJ:ʼnɑAxLf`Đq#L-PRM;W"N]"m<_'~d[o~9q<ޑZsfw|eZ =v;٩C葛/7Ǿ." ݎak~h:D K '</jwsv2Q2ωkl"h5~ƤJ1MF9}d9ZW;zs]%/7ś# !! @Y l!⌟>l^nsMHaiubud~$te$r|AR%iig(5UcՋMfp' ӆrY-;Z3;udMD \vk 6%Uh $soG}Hlx\ԭm+PN.Yb,ۏ4lX>+O ܋nɛ]"nCe4U\a+ Y֚er&Pal' .{RK do\7L(=eޡiN(dʸwxU7>7I6>܆9>hMh9! `̿ CFk/mZ'|<ɭU;}R#T6aH{\yzHE' >٢ M-bZd/!r>Ƣu/#AaM8s(51uvAaec$-;ziU뎼eAg\KSdl4~~69JMdmτ b-Q.X9}ڗa_ VK'PnfkrH>AS@B%&| JO nl̞MiWwimwg쌟 qik =Tx N%@Y2̇P~vz ϑ'u2Yd,nW"V16loۧzH#^7cD2_]{KM>2Ҋ&̀oZ n|/Yxs]Ajr!4,f clyU<] ) 7L$?9L߸md]@UzǺ1g't 6$0G2\](yD(z1QXpZBH]Vyx!}O [ Vw.WvH`#U8 &@EP! i:3$M3h.u@v5.iVpHhFJsL xE2?hܭ βA_[#'xXğc_+ BZ8+咠QS/$ /+,)zy3H}BԶ2;+ߍ{?ǼUON#&Y=3+QH#4ٳD9OғO(D:9n̜z|Aq檄|_)@p2ёXpHpKdIJDbZ ar`AevCЛ7 pOv2-& ; Y=%$߁89"}tc1- ë_SpO@+ tڳ 4=UP&SyTLJi.u6WGq|s9GTPx*bȜcIƵ T7iҞTX?uC4wy1`ƭ[d;ʹM#C1%N;hbT6!oף[DZ#W T⒥\&c Ǧ!:Zh3¸t9Upjm[L_0lr;mӣm2p!L2z7ku~v/n-ސ{߱LT2lن1~ѬR(TiYf ܯu~%?iZ6c1W^U+9$.)Wb6ea]%`7 0`A5?GVnX@}ilC@Kin'r|J#O1A>1$Mxd$9y#tbN_dzxh.A.:v^;?Ze2MGDb,tž`MQnjq_PQ Ulkv;bMd?:6lxayvPrj/v-} Ψu;1yj1覺K3_V _BkȬt؍ i4S#Պ MdyX#nƇiSD0lBr2F[#AdѬ,AЩoz|ѷ@58{#%a05G&z߽SKveHɄ \@kN(C 4}RҐpo^J}R31Qg 0Kͪɴ}z0nvcυ&}G=7Rt*~!"m@E&q-ljȴs$救 ,Aj`F9aׁV87CD ~ aʊ:hi0י`LI"*ˈC7alXUu yYIz}s]wlr2Sm ޥ]H&|>E@J.{85ɐצvr$AA0bW93٬2e۩%jκ-ˮxz"^.<핟Ef>vz5Aa'Oy-( Q 'Uz9[{ .eF U pHO>/~Wך-cECBK^Ec+d>~/`9:kBKJ[Ke8Q;~aք;(1;]]02m'!0Im1ku.yVj&4)DTpDx i!`+n,#dFw{] Dqkxz<76 rbz{ȓ^I76~84,䫩;枠& ^RV]tNT *,4spsL.s.5Rmdl$LjeDJ`ҍeQ¢U'n+PI0 &@ kneXRJذȅxǎx;1ɾʏt{A!XO#'« @9_A6iŁa q8 X.D^հZ>rn-PDweA= ~knKEpd\˝aPs? H >|("_Kո*kZvS8<-Ri&Փ)ahkěwK{x46W98!_oK Z[b;Q)=랤FXXA%̘3_$&~xq}ԩN&-Үܗ.ua&b밺r~]IvmIsc?Eo,!p#A4Cuw:Ɛ-VlF! 5BP+TF :ۧ8df?RH>e6eZZ Vn P=Y.NmN}Ad[ uAMSQ7W&=: 91PZ./Gp@nM<,.O3gy{f HjF(O_tR*\9J)snc)*o%`utX VIs|c(jW5!LS`[cJ'Tmx[>U7c8fR6+@*ѮƄuqI XGtȩMup*yhe(6―tj p'4.3,揎ojuzj>/E0U>{ YM~S|Hx>X{iQ?(>Y[*cdC;gO;bϬCeTVkכYT&fb׵66}! Sl݊쪇 bp: ΡClvMlӇMT[aD&)Lgwu_В1+w.+ٝ"*#.& v_J;n}cuW̃9`.v!V/ EВP;+8,2+lEt%e*Lx VnzHp4G,fcl}1Y= FihWLJ9Ӥ¬,/h%y:Vm%~-@<7©sWl;=&k =:SLXZ!ox_ىxƳ|^37Rj2C75}YzpڤL/ uk ';H_iA檺=6.*eNQ˸9Uz[{ v8&ț'=eNP1yD)^C͒..7%[ซ:VfcP0Tw:j\DG¬OC+EiYY:ժ|퓴ax!ް͛l8nFJG+zG4C $ܨ aDN@ /Xޭ6ySQ^LX7fu{X f- :,Wﮆ 3fT4OP@Hx?xDe؋$%E:Ox̝_t;;.:PgnYcst ts9X]V\S \ϒN 줘^F$"bHn(sNE]̧o[*QxK'lgEJ%0]e%ݡN^sjcZcEu @Fxܣ8T#ߝYs0*rmκ?XD S_s1#sla6.y [*u3 VfJ $FaJW+>s#7y}7 b|B {6r[٤lj뻹_y-pQq/hK]_xE9bv{R y%?: ~K GykUH5OB9M&cLJl|i)M3Z 55dK["'ʮ.'EW6pBUBzU6P8OՌ'@%i+%,vn_!<#t33?E'ӈX>YTRDzb)'醱񭣱e[ ً^OC=S\1vBraױ3V`TqǑ5l|* ]rIlL|Be\-C=.ၬE`s81yگWA!xRG4֘>`|n8I o7;ë́D賷jfwffU(ҤJ2Glw6Eéy2hdk7{Mm"{|ӪJGEplF:!/pk:ϚoDd)@Y@cP4ٞ"~ 僟ࡕ,xxvf"^yIJB59?:wtj١6aN-0ݗ}R]kD* VЪ@ "{1Go2[& /nxF0 lˑgl^oBzy;Q$[swRTݱw lցAn7;}VƢՋSswľ ъf+%TV (.zΌY#f;!Fcj |!EwxW`&hmGؑn49=NZ]#p\4 GjOD-Ƒ`cP[67cku n:Tae1kT#σP7b老.< o-&Fe;G]`EPk`t$|މ*…=\rCnjk <Zx2F ƍw\ʤ~rB[ΣdǪO?'23`}Ӭ7^Z#z롨3~48Aju$lL+,b4z Uga {$8,'$[/7뱢`*@G*\V7NsCĄܕ7@J>=':X<=)7Ahl#ʂ+Q%V߇&j2iy,؋ +u|K%Χ!0-U_#5 )¿b?x:0 )2[p`=|ȃB\s[jl3 n*W␭ I_9iNN,!ON8EL}棹z}" )pd>%~!PgDjzE#0h'BdCwRNchrҰGq(Oj@X8K^/d33AcF"3FQSgI'׎4\A5}MF3B3Aa%|p߇iU*(|}X0ƶIλVc\\\ |K Eonƛpaw/?Ȧ}{!*|J)&[ٚbρ0Z iLrj?M&Ó̑b1r=Z*ct1֢i8ѷ|&K0%d RۢQ5JYR@.W)ѵ/YTwXދe4iDLߕS VI'(^{&Y`üT7b#d !qb;+|2Z r=ĵ!64ٟKTDE3 ΓRiCB:_:.+8`+Gu-ENѼ/;K23ȿhu)? TLjz1uQqiR}ؑdZdK\ĊX2TҨ:}7}L+[OT[.];3v\ .>9^.1~qZF,^͵<0YiAa6q{6^hT]>vp I~폫Cʔ,0(vwW>y+.F!4xT"BY@@K1wք =gۼ?EݩW:Aoyo:0Xz"-X 3 hd'!IVv&Уuu?zS#`YkZGdJ?MԓhoRb6Vs@z= 4ج>ͬ[2MMC+"ZR/R(:5-ٕ߲[LqNgիat]veumdrd,a8KSjG, /8e~o-"4Wa,EJF~{ dN` T'o۶`]>mCPR, hbn&Ij-2.!&b D"l#.ht e/pLgb!ɂ}KZ^Te9GS;lIfWYyE0Oǖ9%'jVTI0Wgc5FfNQƙIU!{}ylWTbw"9q3;)0Y kN֤&Q*9 s9 {oq& nqT;"{X0\x(fe(ԍn'%:2s3*nǘ2tntd݄tbIw Cucټ9˘J Rmzb/'E~ܷU ӫGEAobL@OhnuҚc %Mm9є(<)G9m{P~%#%Ck_dV,,-)Cl[#xP65<4qk, ǝBM5E$uAR(կ l mz.Nj/n qYZȑcp|bI*͞"?(0}Ymduu0K)’x!f1 qXZ]_e1<]ID_c[f{+i&6u?]ޥNhũԮC6H}RDAwQ3gSH 33ZzV8i9 ' y{잩%5~ypRy\"$2iHB"xθ&.k!ڮ;U'ɎԻ(Z2x)* )e:M'1??kBO?P} S Ha5xc<y${Qs% 7h7Ts bߚm ܣ*C%PgBv@ZBNI:%ɛ͜M!sstP?ٟv`L6~h;R|=| t]IɬQד{ףO3>GNS*i ?.ڤo?[ t'd9m>%ϫ;g> JV&?3gt) /b\ٰa[$MZZ_Ӆwl@vߕ: w{>V'FQG.{2Ti =)q O!PP*aA]r 4sZ(*bpDS,\Iy7l_7=5M6g >6%*.!4\eAuxnjc\2Yer ¬wM;G2ں),0N.%qst+cY#c >'1Kͮ9T]~ |Ӻʜ?4($ָ߅88]jŮ-:T+^'ꊖ 8 sPn5C&ƙC NN",EsHSIyԂ@%$UY}0qLn"}u3VsY_<1<'-8Of{*E98ŪV >cAuXQː+Ho|}iF: vuvNX°<3Xl( |&g-;VkI΅z_᢬?"RBA MewO՗#!|l.op#BCSN)sv'b*j>qE\`[3#w^7<2ލk9A%v񀤵^㺘rhcX2欭NbD܄6'dmOT:KjpxEY"P"~^wp>^}d  :ap__#j۶m͸68p̂ ݊|FHV}Ɵg ̍@Ѣj,W!nAK[ș` ͪ#k&þD3b>M_7Ù[. n]jH{3F 4 ~(l`{y_n9bYfaupz .I,{sX*ݠW*9,ʹ fG/i-kA-xKj'7pppgf6q#?wzrs̸ӗ|r6AA*Uv*픶MҠc\FL5n(W0>_Be-I圁@(|潘77R{&A`+7>S2(+DM `]_] o.N -J sE1*ՒqD" ٗtk~tzb aT %NG;@߷ӟ^`Űu9wQ?Xu?P[؍""(>̴J|k_ yvhFS M^)j(EHk,U0DՇUcHй@^ƶӾ 7Yتc>ae`j k"Hҙ-*1< ]4L.Vb5O)\ oJ'r#lw0,j$жsR2M[xF|5Bd]$f9SAZqbqsXK[I7c]: Et= è7Fܼ=Ihh.4v2^?"t^*;NG؃nr@7GKsɵn9ڢ)dB $mŸ4!f?{7~!sϘK$`jx,c!W=9֩ݓbH4澻Bh UؓuQm^8|U/M_LF&WugOSA;) 5m̠N0G!L{ߗ'DK pv}OhטSf$<ifKf~WGG.մ.nZf&sUnZ+!hcD=3ɬA*M(<7.­ L2w5RnҬcOI?IҾ撍.Nnh, /Ձn[bJX]Pο\ )i;}>5iDEPIy!);j5*hR84ңBDk Wxᢅ-q7yJ'<ă.p"2o]yn˹o-~YHܷ cT oyM4^Xk`LؿGcX+cٟƌ2y܉0b&LimK,,OY7?܃cj b㭩{gwT[<$U:dyj8 㐭#Wn[aZKV~qz7Z;ެhu#8ͰMfDԗ |!wgN+å{"F`3k=Å%\E&7];E1\ShcKX+pO}u擭`ݿT޼~BPbp/S n Kl~P^p*85O|/v~d R4;nWY06\=¯ד92A'o?Q2$wz ]*lTtKUmZO>_nU~fΖŔ\]|YK1|NvNm5ռf5M5GҪ#o7H0PqGh_Et]//ʟ˵HWԲ& ![rrʐ_#߂ģ~ؖ?>f5O]b&˴&DHX\zdyby@)*tW.9ݟi9A| -#c1~_H6Aa0Clw]k Nѷ| aÆ>+:g\iIb6gRy-p.W-sqVqUl .+% YgʒKNrҗE ],$~c$<^nBo*n̿-K̠ y ݒ)`;+!1AH3{q6Sx3ն׃D+n,ۛl]nmJfdL .~!|@4wQ\CTzLKEF*n!GUz))<0^[,}vknD3qqB&jpލ\LJ Li-^Mp;Z3obQ| " dN<>SØE@_(o7]ſ`VUZ8QVC<|Y&.t௱(8Jro5 [Μ ԡQ_V=,+_rv;M ⟍f+2B'4,VMfo~LB N&um"ׯb(_f_X3g Șc>ms!fXۭTW0vE69KzDoG})]WY舄ceXf*_P:%86v zӪF>8TH (WׂR~2`LHVY?=y"&2-#8bv>,"?=BVf˴y(sn̓8R=WT*8gp:;FP}1a(kAR0W_}..h΢dvU]^ X2MtMzC 0xyQvc@)S(4rPcqAcvO醹1By{I㬅58j|+wk$C7W) ԒZ 3,[ȴv- y4`YUwSX/-ԺTp&H[aܹ }auiB芅U[4B}T8sm[kc1PR-cČ]Z7X2/MfC&\kz` ƛ^e2 R$>Th46u)fH >͜];% 9/YVxmn p-:#vJ2/Xh{h rJsa$^TaH!dnQz]]^(뜅ʡٖ-w@6O{I;hX*Δg+.ٴt훠LZi\Oj^]iBokiy䮍 LH3ԕX_;|0-'#~E{R^3_3_ V7팚J{vy{ 73P/¹-i f8g+0,',Y t&oUC$ =*x5Hz++(h^T ro5ǏV)5جbL1Ζ͞<K92Ը>d|{ xb_ p /5 r lihЅ|(NJ] 78J9ۣ`~~q5q65 Ʊ`Vf4#xElƁu/b mv\u]⚵g_%ZT0(ghcy d3_eԠ2OIJs`.c{:=#+W5)SZ[,m橳LԘZu72&mΦyt?tܿN+Hak S%Uէch=%Q:|@ !ӧv++b$c}Z|OB}!N߆M{lr'7b7d._sN[qys+҃(^GH\hF Z2)tR:nKvP2ẏ l3xL0if3D-s!5GIsX-iD7m Zi!$7sை*|΁kJ}+ JDd\cJ hJ?A\̕Cs!-ыՏT< CפK͟ ^lG:P =F:#0H\<MXE僽j$A'F6m&["2wDa =Yힲ@v H۟[1n(n sC?d4̎+g7ewϣq9KI{09>Ǔϋ%ȧiD|SJ r8ZU z6L*}Ne lweJR uk?hS-{_,1F5A@>9:zJFʷdpn *33a/:JMކ7ikCq 3Gqd\ JE#ԛSH:H!ծ]ʅhgNS9ܕXneq\J3';'TicV _}قsI`zA7Sܰlq)Z!?+pMc'-PዂBL 3H I0w`:`cCY2zItj'y\i+T2%ޙU[p/زF%bI#". }b 'DP!9 ǯF~ 4PCcEHJaܑ*2bHkҜ?t_h㐢zspD h9J-na"$sM <%;.BNBo`H^^7QfE9[>$YfqASߦ0͋bP=:mϕ`Fnýnη詒%3aa8YIgȰS J )h04 BIu5@QdtYs;yvX 8S$ԫk#(| '&ˤupxCM‹t'}@/CJ)*5ɗbk(x YNHeN>>PMGM݊&CQKFk߈_kAպ[Q `<׽}0EV%A inXAbHo-~lxa93ܧ\weݾmPM"LlFQ>ES5e6OhfA+mg,ZiYSXԾ9J[ 8@$yn&e% WZ1X>S|"Q Tk,]h1Nr(1D{ us64IU+N3'v#QF-wW_48)tt2_Dhlw{m"_(KpƸQQ#OҟÑy1jljy矪frF &F~/ 6&21٭օIP@v*x@DM*č s鳮Q[ %tD:1w@0h $`xKzlaUU%~Dy DF[lKqmm#aGϦgn0AxO-·Sqkkg~HXcҢT+bb_;`CZAHso=Q_WJij(xRkR ('?$1lFRqP/c D ޗI; |&Bybk$$C:ENr[z|ɔ|WVeG7xB1-0FbId&? jQG*/J3".2lL"$wݦ^Խo7" Sf$դS;[)2|PߋK\27aK? q(X':x/e8X}=bEp4s,&O+k8Rs#=cI UWven)eK 9Ś1Iև TK4?"T\TD63wPK}:\.E ۞~fM^?N\*3qsʴW)״v@ )ד)H_L ;d5;uGTLpK R-~YH=/5~*fD  @ [eߡ8T}Ww 4| iuhOݶ̮O2˚Xʨ}R%y 20ɰʯEB~D*9OLl^{}~7`lc~v#ey4O6u&za #5<-WF:&Hv셻U=^$Xf>iT/169Xa]M|';4 IY3;d>[#m?eɫz&y)]!]j/;c\՟,}ȭ*T-_ ݔRS[gS`m*J=EB࣒dFƐŴ:s9]-(ET@Lg(:bÆD=S}:NͰEy*lȆӟ{_(0hI>દ76@ x=ݡ6~&D50:;{؃t%!9K؟f* tn[XYb;<ν8QN&F0ARaYV[UHjB٠xQK?Z}A;? dR )=Rn+cFΣ{g^旳- {7Pp_=IH$V%RE2[m,&r->8~j~K鈴VfEdp>J${"zD[aCcmm*qCȷtAꤢK'\gR}/*a8T r q4qrOwh46Ukt쑺+\Qٟ_!3-jJn~Dzm k']x=;Arک3lURL*xk;> /=lNMOp6fуM5+)+2e y*7yHΤ2/l(S}z|Jov?u8͡`#j@cGzޙ%r6u}Bczׄ$C~7@%D؇+U-faJ9A4 p㭽f]@,t9]8& B5쳦_X*C(5B*hN!HK͊ɸ|N\n;vL'P=Ba]|=ay~,~J+3 }Pb{ˎch,6_AC8PHHGd_h3`P1)zvRD3epCBdfˈl1QiUU貃nG^x E%>:$qlve|@xbΔ5a9zt7f!市Pt`װx*H㱉]l*Y,-VxTb]fQ^ݧZvŢ̓F_h,]']VH\6iTTdۂ4 B+}`ܵybK']CwA@b6y]8[wEn}!\gkid蜝C`ÅTWdǡlUSh_~r/t32`kh+\ Vf2E9" ¹vik =/ 5MAXx/&Cmark &Hl7ڎ5q9~}:}\09xܚ8i9j,s@׋%/=I. _5rLUN&0 |r*Iv&.2?,|89V_}8mɫE1;oHC2Ut ȊۜUx*S^Uj2 㱲1i8>c$)*Zh\-n¶|Ƚ䨼L$V.hw".(ܢ7)6o$#{M _$)nOӜZn |m{ɈG0Dj.z]r[~AO/=~\ j8U&u5s!#ͱǁpGC-nJ׎{,k"g1m>H%mP-$oUyb@פ3-)cQHa#Ϲ0қ fEkQVt) m0z񐑠o",~[a\P,5On4au恨" rq~ֆ8.xns:;Eԏ} !imUTA ˞Va,.'͡wINfuWP.稘 ]ML|"J琄f:%e*UsTkj":t n O':)-#QZ`w&g) ; UV)$<.l(?mlɰ%+YLykwE9_KjMiWl46>ߗXyyqKR 1q4F^@~1AŒ$_љaƘMp!3>%X˴jOs̽jƱ2 ậiAn:,uu^Kavd7e*C^ V/6xٔ'R2ֶ)͙p7-8b'/}0MIetԣl_$А{ d bë]?wd*bx=.Ij}8m`$m};D$Szԃ;i{Y(m xQ}hs_8ޭm0Ee[܉: ӂOMoqPtr(f˲`S\}]_)S }Xّ?З<1mD'( s&wq^k#j?\Tr[nkhЁ(: `H.X#:EENJ9;߸^%jK"^?qat*:fPT%<"DLQEߺh+f7IKMt4T=Rax'Zd- ׾{ٓ#B@Av*lRkmMu8:xbvqH;RwK;z-G܅5X+mǕdN] X/Ťy eɓB)xHt{^R5 . b08D亚TQҺ Gvwe,SԻ7Wq:qj $ϵڛs2[2+ /_A3_mZHX]RW>-(% n&xnh)rj6QzW0==Mׁmr+[7X? ~p7a}XS7贒'p(ODK9ӵ7eN(ϒ{KMIW55;$, '.0\vA"h8WsDW(Le8NF7eRce:Fw߻Ŵy]W^^Vz{Hč!`^4[DCd6aѪڏ(+IZesѪ^h'RNrVJ# wGEϟs|VE!OB*Iqq1.]V'*l>&HcgybXesH 3'7>1{^-]gFL}G '9Nѕ~3yBy-g?D͗s.5Ȥ<ֆP6_ oSϱi91LEpvE5e{ݩl*}&\kٮI=cthmcs[M肄 2؀#1}rF*V]QX.:׽aL A<ÚO=j.:+MAa6E3,zag B!5+Bu?1 rK (~9r0Pg@ImK'هY'p 3R5Vl'Kd^'nb=RT\x[j0uTG 3O8Sv1KN)RwH <& FeKbnnP`|Op;HI;}GX(3|rS?{ds?}Câ(o+.$VwJA jO"Ea*`\1$WC//YXs'Y{CYΐ%'+uE\g"u>,ػqnL# 6 wڿa2v-XCݜj~:jd]lEb#^ ?SEGxŪ[Df$}9VLoT=hpA`o눚B (Y3@SWiHO`ch:a/bww_CPrw0w/)yvU݂"Fإ~.JQ? b2y/k.?IB~`Κ47(Q%;h]|g['-x'0*OHu7j~! _̚lDNhn0q;Yzc )}AɠS !/Ȼl`|-JYJ,+:. a /E EQ_i Y* 2A3dt' Y]%hܩ7b> j᯻!"wk6].kgXJYֲhCr &B.hty/\!Wޱ+qiJ.<Kh)+-y?G7nI?﷨2xuWp;{S;i.brB#0lWs_G鐡wyXʺ: `tZvWZoSv|Em0BG[!7qտzQr)E6#k5ЙG<*un#C޵ \ЙxH bko|ђ^Ptx-|މ)ȸ[J QYĢliߟe~F+wp(m%Lgm܄Ԁ?8>U1%+$3IYn2"7aܬznW gʺAL7cl9=05?uig,M~[ \m̵^PGK*MLTpPIرq>Bh`L2uv3KYK6܂D}ZbT:dU3_=-DgIcl#V%RP !^ȊUIt1O{|6GT)sB5B1={R;i ]…D9[L\<,[U ޳i^nP{s)c0tum\e>Հhم\_L\ _ߌ{#"sέw[{Is(Bײf:sQ(Χ,X>aC3d ]7$]iDlԊyUPr `.мD80r}vmg\#$}qR&`~ (/pZތ""w p\BkF܋lR eYrxrdr3GCfw},(`Φӟf{O0!d<eEo0,n<SoϋҤdΦExvo,-꺐wG^Wsj=6>+BGYEVK&Ty3=-zȣ>Vd3^;2Nem$pH SטTwTxzF C h{3 -kgj9RDž5W g(} DiaAT"+$ rè ѵM>}mxI o󑹉#t2۷3w::ikP/|?/0^7pUɛ^"yWP1bOzE b%hSs4Wޕ.֧_\=+E[_23(("g|iK0ٰN+ajp! M8pŴ-(9/-TAiء y)aPsW լEIQ.Pm} RE'=<}FRaIegį 6'Z%PkfT8*hadjtHߘ,rE`Q"d)NBlۥhe^EzUrך2jH٠|N=y#Z05|]oӾ! " =7Fk.evq]؏=MfճS ,F=%ETQ<ܥʓp9 ϟjAn%}nM>;Qܽ(p/qWee]?˲fK<&~Q&XA:`@dTC >.UJiD-=rto|`n+:H ;| _I'ږꊞ@ג7MByT zT=<R\p(^<܏} йC?)3>{XUvpCNߡyL}}/x$۸ ܙa턟ȟXe<=+~z%2k֜I,&gTfD̔ҹy iFMLB0*7U*_Afr^6:ژ[H0_}1 h6(꽌M,KN*6٬^-A ;\mUnw)[(6?s,Z66ou۰IV߁jҹ ~1&d:3e!(d ztGN h_XtjvB";)ԋ ACKe#`Rquj^p^t{~` (K$X}>A~&=fsjӖ2DSAKxLt3vj?z[C|YOvZf=۟a+F"LYK|T5 ʚk%.q5~~xDv2qn &XW*{i0A' %!;`rjlٱ7gm+]gb7x2!WcH@b\WJH>IsCT~b'[of>GȜKth!h~44l(RJq Pjk0#,Ѝ,ȇG/=cIcxӈ`%xfX]P5;Un]f:{>q@e yC'{7 = ^=V)X.ҿn[z I-Nž-7Rw7a^](by֠qO}(F7.9E\,1Ɲ>882TN}RJSh幨9+z܍ U!Ē/ y}n ڲ4I%kѬVϟwB`JS,pI8n7g#TNl{㺕6w$TOq]1a1g1ImR]KsZ:!1lGCTP l e:\$b-V٦قm?9T i9b=B=_E'b- bˮ餜zI9X‚ɄO0sqfX OW-!4^8'.m2&7B-'|W_0}wT4›6q&=ӢW깁>Ji3QT0gq~$Zh.5# oq2#Q2TX ] ^nLh$wuO`FOZLW/C{R[`oaKP+ 7p&Q},r]|i-vaK^Q;3NIr6:_*+lP #e횠u#:jg:rm'8\˜~_cTL4< =`Qw-$}grg Aaub%#/Gxu'ծe@Ų-Yycҟ%1qЗ ąVbT 3-]H׿B>vAGSp"CHaQnفS5>JAxͩqa`[#/o UV.[}6rz6MBUCfO\a#KPgISB;E$>5&^dfQD+7oX@Nco9h\ٶbݷdmhx4(;O1sbZUT}[jcጲ )B'"T-Lx9` ! $*`8toaQ{ _M[B4 Aec [XD$Vl՜,՟,ŒƠQ?% 5Dc9FWzwVv꬗Ț:#>RB$q.qJ[>z6߽B%\4*9@M,s/2ցnKܸ0lZ5Y>Jۄ2K۩yUPI=7r'#X, n2/Fcm2д99uMPY ,2D#ӒMKWpz«oE;YoDf`Uj?o~5dܓ }CJTm:~~10vXAC,2>z:Ph r#]ӛ(65yŷd\P)`K) ax>YN+ùgaDAū]cicѕ8p ['7͵~'- L2*~Vˋh'v1{ہ=R C͘T *!&v Bi0CVOZ* k `1%fvzhQވz:!PfwD0GEn ֞5bV,2A?7heg1w;0\Y"0۱9>_h8q=4WKʵ?i3fʢrtHJ5h/'7DŽC ݢA)$n'a&Pp-N]'_h ;i|i XqER.O%D})!Z^-%OR+ሢ>TDOh`ʶ}.Q'Qx_S5{G@gX`}s]œ*eȀ}l)svy|2og"vT isGwn9-,ڍ̀ωscWSBfR?~S%3-ivj$b!`rލ˲wt1I{ܔ/3=&p:垉FucMUi%$Fcu:35m0е>J$8hm'W/hrқ#R40ʘY\3t#SeLطn9Pe_B0+t+ QVBDm1rúo`P{f5Y-cx- + >GސZz?ukڟ'jxvbd`מP:HkMx-e6"EX:UA$Q3k!r챻C&9&1 FuݍUEQ] )8vO'V br/"-F+r?7wH%Ҏn(R.QN!BUA6֐:blT@sŢb䵄nܲ}G} Xѻ㩍y aff8$J81Jug>+&$&QI=dFZ|yBO؃B"M ^jPI02Uvѱfw+(_ܰ\7 Van% Fc~xo:Uc+nGy-{qLNPƭ€Ty}fRw TE.#8!T+ Jw֕mu`H-iXU*dl FHo e~5nVeT|զ*23>8})XpP-XPU;ea%q<7׻UA]33yoD/|Cr`.5mA2,㫗;r4+-9|˒':X4!FEnWWo9.VJ.]XGM:4܁tf=ΦRmS`41 vƲwqT [d/'nݵRL,fS(1Hs:vJt;evkd]kox)k:p%)I`ϑXr'kiS ]?k䚥75dqWUvsȮ-<޽&IA60 V\3eLwZ"[P>DΜԕvtQK OFAd*jQ ,$ ` JgHGP=՟5PXDw H;v>. YO7@EzcdD1Qq=S' yTz,_iktШ%MQ.;|K3y9'rn}}GÏV\mPG/8 enf]tS)r ,eB6)>L!-Xd(pj8bd7a NNj ev!9[~spAկ]z|TfpՒQ@\NzpG7.Cgw|:)$i=Ine1ZPTa\bFʼ7Ux_6&O| *H$PNqֳ(Y!͑)Ɉh'i2AͩN4DgfLB(\V^Z w Fy1?#[FK7PB ӗE2p ~pԿEq+y 7/rB{Uv>:BLdRV6 k eliP"͉RoVMn2R!87Q->y6awιJ%8Aro{E7,p/,enP7_' HZ0Iq>)Ny),Р7iQTm}'K1JWG嬑g_M6n":n9dӆ#'dUKz޴OƄFcoP :Ōqfac փ6kC5u|)~@X3Tݻm4M'vT4`߻-xUG GjsG_єk /`7C|%:!2Z`*JEe9ް$Y,u$:٭G6BjRE2yĤi!x #Gix4`Ғ1>X `"77j5f>l][b]Da~$qzO,xJxqW_OS3^:@M`6+Ԩ鮏b yP*Q*{>{[G}҃)p)'I5ӕZ63'FzB> G.}2]g 5T=49D7u9A(@Rw;va&BUwa ]l!iN-9Yx]3:5mІQObtx(V??XNfTC2?LwpU*u@yNMտX!u>,rϸ *֦  ώ&$nXGupVϖ4BeK 1`i) R0v g'u}'/?K"8rm^ZT[v+#,'ᅌ5tJ æd1( I xG3# F50hJEd0K>1#Loxܳ V"RNB6.DڅWc`\].W1ۖoy>P"[[2z/4HYjA@ %\9쯓FhpÇt}:v b4^sX-ualYjjHH:aŊЁ짪*;n+Qk rڛtBb/4g%ܙ c MʜkOeꮢ3cF ~J5k]K@LnUOb{v E׫nn*Hglk*758m[SAW̃,A%X,+rRu`±Ə;\gA:6L?d`f]U|q|eIAMG]p0 16V)(B\4`=qm< OTgigA# v{#6J֐ Z7KbK[d8UB#O;_Cl>P.<-816xfp=>@uYӐ ~#[[|ҚYWvZ dRFI:3WΡ s,XMi뷔EtL)1O}}6sl @ lz{`XَPrW,:S\ 7!a0 9C[̛l ш=8->ђc3AFEaC_[:Aε1blx̹fmI2? '_HJjeUHQ"' s۳ހr?-syuR~6 [@Q<ΓSBg7@,v",^M5Wb4\&TGJH}r-TVie )'$ ߔO-jb>-5/|T4 { a0jw|~J-NH h'I32qi(L0|a &M$ v&=TEF3Vy- Art@e[eD]9dalkH8aB>sԺ&KE04ِ1 s\k n(ƞ8T?usH++u۴yRX eewgLlq4Cv򻛦E3P0׊ZWTvӻ'0H.׾qKN| 2ZE.Iˆ}||2ڱ̔'Cww^w6J*Dzp6S{C8bx)j?m,okZjwCNdio#M uRVf`{kO,VN0hY91oNnަNdΡ bQsЧ[6K<[ &C Nb,ED|/ \Ej)O8kq<$kWDڛKϥ [=gU9bK^\rejʼn\YmJhZRz(XFs*C r`N}:,EPn߱2@g`ˣQPBUiN-{?K6h (ge03'Z`kS.4 +ѭn',L}-ڤ"P%40 daU꧂z՘~Knr.N½"y|=U9uyg,MԒ>F\c+%> c1\i@O󄱝G`F $hG7 I-(' |f3OvxV\q7U0䂈M8Ts2DS,fyXra`aCZo OӖk:/ س_mPN?%na3K*=%5zMf13Fn`4hձd?)([6ׅƉ?}07 -D}6 zN2c&dzbU#َ`^cBIaaM -mz=A W>v(L15͕\TĄrb^_zZJA4MpH=w%a;QÏ6MIiab+x=ňCys2]qF,C<^hgv:(1KȍfJ&E{C-$ {Suef]] `-m &s7mK$֠ bgc8 _w]@˨!oNb$]-qwJGdOQ~[nvܼ6~ql6jfEvi\';Q)%`sl^ƘE,@hY()"Lv΄vH37v$=Z̽&~z@S^0:pf:oޏ,TX&iGD@ʛt4.lp8(E-Xh#EbL ~U^i6^h}Zf|NUx 'KL@}YJ^(Hb &?)x#Xl]B',,pt7WۗzB E}EZG$m$zk%pvcs/]n"?5bq#_@ jBȶD,tʘU؁{`=ʶ?R}dSkX=ӱInF^} 1$l@PܔzyԅrY*&A%oGbAm| @FBGvs6x6 ۩"//K¹ 4=SF %k d1#&B&md hT/y+[;-G CF67a1$3{B|dq )})peIM>+vxc ~lu1\_"s)D^iɚ[d#O2j/>>io/γ*(3\XT<`(#]~謆s^H&GyV+xS@ޱ:!b3oaU/ y#R98 lՓ&3F0)E1>!梉 W#M =!;)w!4SdEy U}t5K n]T\%ۜη)C|Q ̒RAЩin`] x;''mworH~f.1 'GٻB GrzFVט}]eM!Hقt'@c!GOAKt)X[ 5Q6-ACTmC# 5&|r !k/k-&s-?\2.W<ΕoȷQ`Dkr_n_}UP1| /[feOemʿrnr0x!v1!H!@ g#@ vß/*/5mT|9av[(.O62`TqedԋK:0b>`"ϻfSTވu ֌(ނ @~ik(R:`Mi2ʬG:zdtb=zZ@RI&q9pXaKg T]IrLiB~I٦]^džbM/s1؏tŃ6$a~gWG7Fޤ!]g$ |h@q:7+FV)9Moًo,,2t~P޸K Pi&Kl@Nc&!q3r^)T\ul˨z̦{ f᳣\4|j{2>DS 1 &fn 6YBܭu }S O[ LbuBIk7sQt fl#r{U`!w~L򀪲-el.4݁4!W%i//iӃ .S^ g$T}I2c̢#qߟsߗή&=#㎭ c gZ{'gPi _H  4MP/H~:' YfD_:_bu$1WSqvn{X*U量X<,DZd4 FV?thyD Fի@&ߖ LV"DfǒluKQ L>^<{u5q@ᧁOf+X Lq@猵kкn(WNa"#e;~oj- QӝdR{Z# _I^۷sB_s'+c5߀LbєfʬxA]IƊ%% nv9㙩d )+ V$}Z `-EG*=`⪣F`y Nl(Ug_{r@*Sӿe5 >շ4Wfi\tx3W tM3)dBv]{#dBQZ]Md (W8(w>$!$coD3D#!q9$ 勝/l NT~$k`;_O5 JtK38*aCӬM) Hxw%5 Fq_ (ڙcҒG2Qe!M, 됼g [2l칮nͺ؛<ΤVhc5E{&S XGpf˖) &~Zv?t)9|J"htú"*Wu?~ؘ aY&"6A?GmU &ߡuC] rbٷY!t)*v 3lKzxR 9оR=cӞYq'*Ug-w9r}^M%Qغ|yY&6RJA?,]%iI\\\GheK u1'{@VL~Aļ&^Sm/nlwBt<}m]H7K3hwc{ϯ<X}ᖿV_ӓ;z 8v ϢWL[" lX"-Ԉ[I'VO\OŻk~:=ݝ)d?d '[=(B'9iӰ!O c)Ԭ@:pqujSڲ%&a&< fwƙ1 $V^Lxhz9^%6ۯ2:c}kEp)TZ:~u*Z7mi$'Myg<|%x(6>Oy3KrBXjx5bf+^˟y= f<2  1^3K [nU@^P^fU2zܸ#&~L{)Rb+T'3,ʱ%79poLjG_aK;?||y t昛qbHuFu6t8C^ zΛW'*[{}~06MCtΛj Z~۳:O6mUNfАv5:fdWJZALb{:45tdEe^`E`'5BL.MC I3 2\ksf0>Leʼn gg0c)1\Էev,5(\%gǤ|Q^:%È_&%UoL=hZCJy8K9 Һny4hVt̕ѻum5gX$> )e2Iw|SCFc.#'%MY'~_ԾbT9 po/}\SB)s( 9,1qԯV˵$uǒR RPm`*lxUțTu%al|q 4rJ> ``IRQ/*7]U^$f[ʮZd[PFI=B7hM`XLdu^p}hہ"6*uùD1v" N1Km& khOe T4gEZU@&jŷ-byC2JGX6FJ1Nrpϓo1#`l$KԔ&߁)| lk2 ֽeİF/af&b$tx=] &5\O (5g!Å@Z<($ .r1ZM yfʒ 7&K58sgu)g2spm1o-^iM{h VA"rqqHHtg0iqEu$sZΗmGar3fb7ڸ6\zSBH{p,$Zq)|9'L`ucS8 1艇; Dkƃ=oAWj>)Z[tJY\b[_"HM2z=e)L*#r#`ɭD) ɼ_)K =vz=x6x'Lx:FԚ%& ϫ;qH)*qzp\C@G-aجjz#`NQ4z嶹 Pf'|aG}xNשM{*” *XK:Z)c0vt--4'[a0^Z|Z8#x6 uh+c|9+LIfGR8Iln(~r&(/^Ls;{=-!P>n #fΊ9Dmn)sN"{[g{5-g c(SתAKv&n9 ^!}ͮUX6:]# gVdKy;JT;Sܾϧ _ ;I(l'76O&aB5R?8\ebmb/"彳['ٜi 3lE"oV}HmߙU s9Gư4XV+O$P`C)W("=CwaZV+a ~I7'c/Æ']Oދ9X@,`EjnHbjee B͍.PtyK]Twp"Nd#~BN'bľ߭*ݔCM5:n{KMBmEOBtO>wqI%7mv}Jw?/|"^j8ro`f~w ^ ,-k26_o(Tn{u+н 4.2C$P l'FiZ!Q"NĤe7ʥ F 2PwXC'UJY!7*JYX61N[AiŪw8k W<Nv:69y혪pσ9A FQ'DnLP;E.&O+<HY|9JP%*)e⪔T6JcELFAU36-eY4CwÀ"g>/6,sH֝*<˻+_8~'c۬e_wq28ȕybq0Y*W"7 EO Az`D $* ejMm`Rx=o+jCpM>4,,pyG|_>+`ɍ|+P c4<ğa6R%& !{nH,EhO VZ]:*^2>0qw5:DmRTfep)AL6cs\aC2L~mP}ADw*745U:ڋ$vv?\ܪ'z岍`⷏qp^@gAۛPPΤAeWF!JI./撝`)X,)f'#<41-עSQL -DH"Z|.;RGL?Ȳ uJ}2FYk&"3o\NM_Z"ZF;HE~$T E~ɬ-QoGڌצeii^跬[+Gk:a_QmXWۘ yi|5haHhCʮYIngMly^{ҍjn EvVm2F?>KK#i?xdJ4A::KJ5{^T4aH'X 1/R@L4d)cEL1AqF<otXClwoʙFQ䍾BVFDB?ӗCOxG;A)dVt mĄA gDK"uv*)7~p mB&\0b{[@>GWc1''k;|uk(P:ϔ)2s}g_giSüx|Dcf$`&4!z%0$I'ҷ6Qq/vJ=^ɪ'L=IϺEtU++h$  ޽$ǰ;-XL]ϳ$`x;Y3`m-0\I]Y,o]kbS_͖h50hg $˦jܬf7iљ d)A8"u;}0x%>I:RY Q_V^fkݹً ?aՓSX_YMK%0oHc~PҒX &"E]e+y-MmNWhƫx[D%yyεF*hpRkoɻ3H$e=? 8?fGaVUk(UkR*ZDkjiR*nS-:eQZ}tCx@J<v1i)SڶVK_vԍ"R2 bbb6UIFtT2˼[yTf]n3+'<.Q]U]4TޓV sUjL=Ӡ2Ust>06Ĥp︫H6<@V{){ r.5`Bb*s[^xnͯ[ikPh\؃ě@ 7顳6i4(k]P3N~)t&_`wA:Z^;LJSHGg 4\|ܝv+[I] 'SB}0D ^ODŻ}B!xj+O7ߔ GT+)1ȤmK%3h940"s @AWodAM#* _(Ky"K?DfţWv6t՛\mbR9'iRH_K'$VYͨuXi cѶ6Xq 1Lݜu'5|XoĄǰG_i56xH7tɽ5lgݹAYnoQW&w|5ܘf:Vdyb*pl-1**y586(f٤ zSM4]D@rW)2Cm~o~]~ R"ZCHssDKӊ}wm/Jl=8Oo+JQWu!]z]&lߨ{eC8]|}Gvo'.h֣#n#pGʬP C3TɋLW x*UWf&׬:╏vVk$$d0ܺwtٮ|}pHs NC.E!_?Sko"tI>ǧ֒CW@< 6Ą%qڳR疍RZ#1, t? eoJ@M -NiAQo'T|8ٍH7!7 ڳ+P W++OE .A"W&Gs輆Ϟv1gEDSÐvsL*2[KH qꀋ䞏ǩ9sf,-q^%Y-'Ybq4:U|mQ_b0Fu:.n;Ej5 ]W]݀$#:s9fq; :T4tpsq2kiOߢ 5ͬ#0D3B Jkj#ъZ[OGeމR*FX}xLe~=&҆qsUݘKgjDS J4 c%$e5= ti1[=޽*Z^H?tW!zHXBq y-`t&EĚ DQc_Sa e:=u78|`s/fL?T$CqS].q:[~3> o9T3:"<`|݉13&]~(3I)/`7o 3.]T }V= i2i4\EY0e@½fdz(,A$66I_p u 1bajDol0C6v{oخ#\3G( PL 0HtCgx듻UW=<3)mD|(}-MniRgSS}SE@52wR_ٽ`}t;lo eó3@}cO~ :#2? L2X-\uNwt'iꛔ4HXF`RgLF=IǀcVW'!I뙅b$uM|l㳝<ol8 3r P11 =+:߃?.SBy,26~1ke@tI[ Q+>Rƿy28[;p+#kXqeMþ2ˇAsKZᾨPٻ?FU`fH ׻rljl5); 4%sI)둪R'ӒfH#6֫GXb pbW2'J4-~s?2Gb=P}*D/"ț̷O-}ߔvDz KӼX{4*sWՌwU:_~4/x`qTVv ,kupOcK'2O:Ag WD*Y2iGP6QrU 2sw MUE?)_>3Y4*yifa + Jl0Q7h^Oыl}Ç^KZ#(nt}=7Qg9Y̘XL:UKS3?ChA<3mp|pJ+ :JbX_L4aR:l^aA(W#iD5$u͋lq_H 8?'Ȫ+-Fԟ&ѳwdBƈ~Eg{9yď\/ GȂ,$E}E&eZIH*`[τ=3#B;(Є.lؘruk 4 'XQ f >qbKL;@rЋpt:ݛ\=Lz" A["HCxUqj ̛Ü(Vڦ_ˮZ 6qa`|D<荵8p7BH Z~ѫ/Is_(DK[B"枲f 9o 3ۺ@gplw, c—Hcjmƀ;2'(=M 0S ezt#y7ߵ4E?tPK@hMzB|ke]K*^ l#un~M[s P5*ѸF\hS(_2#?!:ѷ]x}8(@K/6ߐ hEn{) ʕEgϏw;YJM; +HJA];'>4Cf&:VՕ  =jbJDN,/Bc#h,>z+3!kt#ܮJCm;w{ _GXGLrҞɞ5ߠ gkvTT؉dqsI.QWMaX͖>:@4l#*Qgbt?L9xL+Γ!x>=]UetX9A݃.ťv'^1M]LMǖ;A㝀,+ˡނDM- +[}{|ˮ|{T O)([G'6`sdHf$y5_F27\R6ߧpidmU[1)}'%7i'RQRJfhŽ=v)LIu &Xk'Z^pd'< )PEJwa#^'9Aҝ8-OڸGϘR+A?}.in"'c`nI]MygcwZF3v6?ciˈOhYw>C|n xҝEM7U~ wa@ Lӻ+qdtkPK sV\n$i®RKupz G0+ Xޗ[Q\@~a_JYu*/MAfCԠ'~b%*d>13Y^"zA)93%L0d6\(ɳRilVଓ5W"R3^x[DHvK,|q\<C K&ojK_~(?Yz~c:YF- SJόGuR}Koe'auџ׷)1{`|LH:Ō❉z@x0&ʅ7(h>VȞʲ^l/0,ӻ)Q 7Cx1l,3 .*IٶA0DE~Ap9 L'8<׃j{gh@0UK d6ڹ BX ʕTa׷Ƶj331E,%d]}*]\9G-S^^@dm*{.XB( EaC"bABjf6|# (k:g{Tփ{:CzUEdk+Üh!Kb930bfqݖH`} GRCX'X- It~z[MﺯME+,>՚s<V EObi=x7Ak}$nF4ƓJK?6FNP/NNm ~R4T"ؓSu -[:;II~4~v^P Hɀp&.Eu ah+Q]rĕ zXQOc]|q^aۇ(Dຄ7T !ɂC-n^*祩bP'A,BJHF,fgnXIjaP Q-A|7Dy> N^-]}"p3! *IܻD֝xn[d0"vLŽ|GU"SN@*ǤM@.NЕ T'fK5@|5_yj7aZjRw'.gl@A<5nE2-jϧUKb&Ąs*֔DvpTkw[t(ٴqs4goX^ eE>z7TUxhPo[YVSsjWЭsZUk/gc˰?Sʫ d 3+eƷ&o sPZ !K!i%'.AWl*uڇ#_ xts!ge8G, Kl,ǥU fU[w^eNs/\VC'u壷[XމE"*֦D4u66LhJW%-x26 )V{ʃËq&O[gS 7T KOY }[bp6%^#Epm/%鴮9{ri)G"tM Qt @N{EL1r9|p=θ ЌH+< p#siȗkzc|Y~"6*@^|T{TJW8,vffF _"Q'5h=Y?1q~G^`6xt=*EyKyZ5^% \pe\ZZC^~=R(r%&F?+UO \e"hi/鴫K:1pق"`\1S D/$Xkj+4'Dn#*1zrL HFU63Q)y*hdOl;seaƊq67HXĦSÖ`&AXLacc$~y[)Nq+M v.3u|A=(#^c;ca1N<{TT+}𖎋?˦dzwJ KkytH⼅ta;#8obO)ww;6 Q*!x OVҒHeY֏a A %Յ:6d*d1ɢɾ2J`0IGɕh"GF#Yg?]CHŽC yZN@AvǠݣ3ƽ̇;V:w#m|0^K_6e']tko+3xT4^=Njr?< 0Wc尪W:j{nY Ѧj|Ʋ:EuHLUTq|q||T.hټGǜm_gjwҭ-X 8X1oWVSAϡq#4Ӗ4=[,%h EQaL#vn= ;tn?\rf×ކ_%j#~k2Gp]KFxQ=ۨhwhs>~*o* 񼤡gƺ&zfJt;X qpw^HVz@C9 brP2#;? -%qڪJ HСrח*$Qwj_;ߴB~)$+-EWk{u{]ax͡fj;g̒nF0%K`Q88J$ RB&cP xc6Wv(3d[PPLB^MzdAU2:-}sЅ8V~wT%Tŝ@б.֏\rʋ_O#qIFrGc:=w5KG LF1QiTs/"y$JIsXXxNdW2kI">Nx gћ>%mg9*aSsE‰ZE' ^7_; +JȺӁn `MJ^'Udr%X;|p; fRcBI8kMtYf.?h 2(Y ȪM\4@5xʈ,Z W2 sy xA 2,mkDo-2MXPO|)M+`|Chbk,9jtnnRԖ ֒h. 9_iKQ,^"6w6JϦ<n}V'̅+}&\ѧndz ?ou=L`C9v9/jtU=*w1l ̍O6B/mOAu>L{DR~LdgXB UIj,%`/ڸ?*.{l^.3k`S ?Q1:rzfs9VuKYB)5opWhVaٓ- e(Cu,Y3 3œR-P؇gB{N<3XY-f&Nܘ1axcf,7D@Vvݥw9 $o܅ yTHj;>e,[ aʊSġz=!]| Q]@-5Y_p+.dZ%1XW1+%`fU@n k…=T'iZ"g^mS7*)\r{{OXgNddwoD˅ K Scf~e/NNԣXBO$=Ʒ/Zkkbx+v,4(3q ]wȇ90>Hƒ|y2| 5,LH'6Br>"{h]1 ˉsCv" .wqU#6O_gB i?ЅE4&[9 F I&`)$_=ϻPkh.p;w< gbL-YAeH 3cK"#pEFwnۂŵN"ڷ'# )D9us!-9 3f\iqPC_r]ˁ*#fKcMDt<)gAB[5l@$eęǞڏ)5a;zIz USc}Dﻆws7T,+Wٕ^ɟFh&T'B:|+LuM[䩞ΜŊcs@,FӧaC=.3G&3m.Wtx!`)Ijm8džNI7A,>Hʭ `zH#ᢾzKW jɫ%]V!/btV[ ZdS.oe!f"|R}Lc/մt!q$4`%%BjؠXU2"^*>D, v=&AOToVƼ߆z&Brdg [qOl& ! Z#VJum}`2EUN<*AfXJ!щ%% _AMHy#@z'A\z d!?vzH+aH=;;EG/[Mˠ f)^t@wKe'PZe<,7"%3~w M Y m:q jqA6@Տ>9kqsv9X;$Nqz2 MLcKcPnE[.E@NQw)/^EL&?p!<o̤]G|eEm/0g+&)G D6 b0r-I b]X3P PY;N K f4Ll|A1JO*^wp|(lJ@-0E{ j03j{8OH_I6R0ݞ}¿Vu֬T,% ޔ 8!i_gu\Iß&"Iq ՔL5>%^=*)<vW\77 -=g_XWtL3H~EVll{y*̿eY?v5]ߚ\= Xdaulq>*^d($ǣFIޕf4|c)RXH@嘡=j뗕 4^?]u߁`q 9Hm-9$C(V jGZz#/2x$ZN3xwmq>㩪rvq3c>sq*[U=RP'$ t*~ 3X֘0?sA-VfVQ,"E6mC󧯌DY4VYnؓNzE;od({!zyfWV|}`icm#zwwrk_L:jF 6bv+_J"ϻBu A颁 gd:NCfBhoɘ*QJ b#IuI!G"a0iһp;CGiq"K lۿMnt4}=ZdάB=|ŵÝ4g>@%vpԱ$I;H"\L.MISӍ\ ^y+e=8?E 88>Kg95/5ڊX9"wsC_5L^ځ!0 1_[-Ͻ_um3 tIL!tU5J i}k2q kXlN5G[X݆$|E z%XKxŨ|:(Pxhc& [C aVF}k]3jObX (3P=)h%a/$;n7$`7^}K;z}r3؏\b %5OCk:۾Iꚴ!xi|q1[Kf֒v O7d21pTGy(P׉亞xIZѰN{c$c$0"levM VX&b{ R#Zhދ`L;`WWҦ 'U!1@g^q/b0[ۗc.6=A;6?]ݾ 4w;SB @'!4 /\rA-&_i0kMR&^yI%ƿⷍ뗱E;G&=}gE4R[W̩Ln <.6m20;XqDVP~m!UpyZ(R5UsDRUj}[,I >&7Jwo2M# #H)rIE~VǨgf׵2X#qE*#2D(ݎÄ@B!s hX;:#z\w?: +gySDM$`7 MzzypmbFMKkɍcD9.p[ fE\>2F\%% Xm| <6,CcPp뼼R xT2SI{@8]w<yEfbfpɺ Z8]v $ `ȚA5 t\v6@@)Bx,\nqr[1p(Zs;2 8i{Zx31FG0'@)3{ŝHvFnHt*]s@;i""xΓst:y"Ħ@<Ɔe(Enj ]AwbuUH%/q9 c|IpIh*`{EngPˊPS , 2[ٲU`2pр9#=pT)("O7kpK>aTX)MT/W4-ߵY UPe(YQO[`5B?JRU,t Zi2qAju@CRR*$"'\!+zǁ=po2q D՛>iJE3]@L~j(ij<{K`=0C 3 ÅMtY۴8ʍۮoT.]HQ:=VJN[NeA H 5zNźeiٽ3{~b^|"ͦЛܵߌ]9PK"i:);#k%?Sg}GjfT){س[[Jj~Gq'j?AhUUgPJRȃpg_{#zjpĚ%PO'~ J$Wl"$h<[av)(mjfZX$2%9bxױac pfݎ,)} "_:Į7/z$ /VG_\tv(7}T#u I^Dw`f6%CTf/n@C2-dc;AYU΍ԋmN6ZgZ@٬X*7*"akjIے{93_ ;]k3,YyCNsOPʵJ9{_.b*Bn'uO#Ϙw|8Ii^7{-^e[Q*ZR H(GYQj9s@'T9)MTxm%N,0ܸBy*6ut$٣SR)n=p)Jv b٥l۳,4Wuߘ8LkA*z$P`֡J @{]a@-lD2nR~9X6EHDãvc]E3 RU+sxJKX%%nT a,!@'8b:INUT73S6qqөJHnFt ot:J%D9UQ+HPU^,vXv x%h P{8 1KتjҊىD(3A]ӡrڣK$ij#\kNnX^=gt*ģÙ0 ySgOD-y@5D6˞ YS`[\>XS N;d s8=Qf>Nj4]bM<)2i#lpH?>~ ftmBpϮ/O{ir@gh z;,@=Ry xW %6VW~ù\VZ L!^l$7x:npg gJhQokº JCzn|^/S R5R@ `+̫xB 4T!7F )] oBv_F.*En⹚zFs.o3+E˙ h@pT^JE@jOJw^~PIdʭq/,iSl**ڍtEEA<Tu({<=z4%Qo[d(&Irk4T4Jׂ"t`!kkͺܧ=B >^t'm՞6`) |@TNmbဉ[o{C|/"0|U)K@aO9'c5ImKt_Y$/.fzPBVbW?Z/[ ]5,)iyCykvFsH:Mh~t%88&hLkE_: zC\} *s!=QYfm"n22×@B*LlN y` .Ӆ6 cx 7!jnJ A}*]&fʓTVô+qPRT\TYnHu9sO:l`]?{+`TPjVUXS}N'sf:˗)_scVy#9@謶0@R9:W^ױ`+|-RVF8O}q=N{1\p3qUlx\ @)qsVs l=^:e!faBqH q%QUC?܎Q2&Tt{+e%isZqnW+NNa[Y㴸SIh. (q~V é|GO[5)nw8n%b]to#=u9JL֗ϒa/iT1h w2|JK6 c;o|ěF^"zB9f[l(R(EdO1ӔVk鹾E(aY9My(tl9"aT**{90や 9mʆڇʫ4G:v&d#͌-ws^ R#%Ha0{ь4ģ)ܸ&ޖb Hb|э{&hL& ܷ\wܿʜ{8 Y$S ¦X)M?r䐶p~L7f[6i_ oYmb xKI`Rq; ͜.'5mtsD7bE6ǜ+zvqE5gâ&.@ke'v7OFz9@S%)&%q%O{;ԻPKYz|`FR^ӃAŜn U2D F^KrtEVbN'F" XTe]uSl>XZ: &KBkcl}כF8)tڟWE&˩~u& JB16ޘ lZrQtySQV~b bz$a M'WO?943 aqMAՃmQc[Y/N"}'zÙK=E2t"æɁ(5$ V2L(Bt,&N0IPہL\bpd _ JZ 6=*P吩gqtx1d̼vDtq^NJ4^ţ˳j: lTtcwtzVxlXHjs IbY+$Tu*51 BKZqΊ tJg,dYuyuT"_Y@}EL[!IhL` A$PST 2főD@“nِc{++<=q(U,t͛[R)5 #u;T~Y[P.{;Ɂ^#\Zpy.+b.:]A*f1[WNI GYZûQ|h} n8v;RWj S>FO^)}Qw(,<0ș,bԧ1|vUpN8wa g4Dh!ߎa9qe(խٴ> H*;yϞ?O .{%iOkmr|I;?P-dVi #;p܂lE}n HHӽB3c\\j$j Ы)u!jAU(l,܆tXH3pُy#^ Hj3 b˰Ƃjz|TO!m_P^UHcgk342_CaQ  2͞1Jino lC+:;qzqFzIcBw* giH haڹňzo^0|:-yCt?ZH,c*#Y>r>"qCG8!@@]0#\_xfVণZ3!֝"TMpٴlN$FP+%^Tv)gg>+ꏥ @X%m' ]i]S1Ԩy_q4\lAW\ǻ2tka gIK dиY*q 2V2-"ӓKo#CelG,G`I2XT>fox!HFi\HG[SЎ}|)'?6IԦe:d<T|!ݾSe,;+u4DT޺=t<3Jtϛ[lb:!%n8\  ZU)'m4. Cj;C9@E6'gr<;m=Q~ia+ew*a'( 7oaV ^(t^UpZ|*֥y6*܅S][8ܥ$p'^&>T|a%D jt[̈́H(Ƃ7^8I )cڹTEѰ*dxƄF`Z)nQ@Ay="28ɡ7~8 Zy@չG8KƦhg(28}R]nK?c+[͜d,Trᯓ2IJ\cX=I'}gX8?JYqbx̗g>}3llPcB5BտDy4/{Iz1j>4lIǿ +tCt?,d?N2H~s6D==PeUcJpM4 G,Fa!ezpCJ=qy}³^&Xq׀ZLNkPHr/ q׻~ϗ‡+#Bsj[7dRk,@DEMX{P /ɄB8\.gW 8^^{!C8_F$@j_k* (F;OB9[gDQdв.^1~~E@v4y.9֌frʳr$~ʮXPHQn{ `ǃò4K^}T؛i g|'EE(K G7͔Y /7.w!G x@ͣe>#j"8smυ !i),FY2@1xJ~IbEtBݟs}yv8me [Z_űIJ_ᧂGxʣaF Htf=¢C$zs5#pS1[(s߽8 lq (@Wsy1OqA]~9br1彭`{]"_bFk5L-(`Gx0+}Y=D opgXC>"Gӊcgo9 %r%Y\ 7=:BԔY,R=`Raht"ػC̆HTdab ѳYИ,7;nN10P xk2bҨaNW>'ab-%"D'g;$85,KFF/4țB2s'riY Tqayݶ ;CI~gy(qX _h`αBVjBf$IYKd3ZI}mt鵚ק.@E!+&`Á$Wzu,Eי{DE>hBsܾYѨ}:*j1Ujc]<$Ӳ6Iw926L1{m.tx2 ktu\=wʵ7%O揙oSHfTU5 WL^' ;DOGAx. ҏ~ ?^?i@T;qh>E;wUʺl~Y'd 1̍o5Ұ3kn)c&W%@:[CO$=K>&#ZKR6v՛127F\A>5&{[c/ZआrDvAhN&x[`'q-3/u3 sp=H#\-chFG'fo:.f`5#>7SjgaL%*GL6taGe1⎹rQW^407P6 y:{`\`Oܗ5]${Sĥѿ*|n%9GkfN{<9{ {RFN !G+Upp!EóQʹM쯣JWYi7>֏y&Kmg?Ak"-go]hLlW;08_"1:^u|ӓ`$¯D-~wMr]+qE.CgȡqH_40T@%:%6f]Ӂqv`Pz+>>"a8.wAl:6P&Xr_|Ix^dЗvDVE[//5{r)(rz1@tA3D%V40$0_zE<)?CBu3vO=tDX3JhA9#N$ЉvI^HGD藠.7a"dk2UihA>h? Su Zk?|f*՞azLmZ[7 olBw8'u#w}ijT1[ vy_eayXXY]r[tQ !1 x⩺C*,P_sjzW }+O!@%.I:]ݠPedQ&UÂRq38>Zvt}8K s]JK5[`NWa/}JOp鹱F9MºlɈ2,{ͳɥ+*_.;}s]A Q?MC=Cw`ٵ,{jz5oswspEf\G)Dm^,%8ezBr i~e_CSܗ;ԲQV%cb&#5 ]SR\lg՞k4EVw2ӠγIKLZeeʆ,/=}0 &'-Wjxuêij ӰOz~hsUWu"Q+4$i"/F15س!> =-;1ƁǫtOΦ)E?z`ӥyk_&̪^LMvyzRr'1P)x'joQTMqI`F3_ظ\*)/NaӘ#!Se쯺O΁} }y"w՟d.OW1ٟ-$D~p7xOM;`(‚$Z [vJnFԊ\> two{`w&QTSu ~lnB(ML6 ;vtܪ?1ټ 4HpֵߟYyyZ+31,$4TOse6<`afkGW_Q#Lh5\oF2V2F4rv{K o(#,( N-s^n375 by܎ SJǝqI}ñK#,~il0'15iUChB<nWU#dz(Z#6$nAX iNS7 ) jvPge q*c5j,7|]5(,j:D&euE\f[ aSf2)|W0)^5NҮ;sex% 1T*7[۴Ep|Zt Ix[Zc/rR|"pTWu4dˬC%57Mqv7v jA||C/0鍹7YB-́ mPB.XZa68LNDj&ߠ KJirN %P5\DƘj%77w>cǰ65"Skj+s-z:猝JO~'c\7o:ǸQ俽_C(#A#jfP׉v>-HNYudB: W^B}l-}5[a'x4XO)CĐjˏzpGE:n۳ jy*#cK``.H)t2/ttq 7kij 1.w 5[Q=J?]5kmz`I)VagB#.ʢ`{q`>l],?H:gKqV1E/SB̺ͧ5khqy 6mFY4KCL9V똂IK ;~2{V*74,_?gҩcp wm,)|aPTѫJ]g6- .@[7bFw scT*>G Ţǚ`Gi/Ȃ>)40 ]l%ߟ³ To>Ocć(ߜ@㢃M9MVgxo hql n] D{k͟Xa=ݚҢjpƠ&验eC"]msoHߓ_Kt(_dOm1=8s9B8TѾWn ,kQx3(.,V;gecp"Q=7[zlQ벒FnU Fɐ.^ %l" O{Y=SC$xUU#+I/y;tYM1OC=Gȳ@UD-BXpclb ?zG R9@:dzSB6 "%ː xzj 0g-K2-۰}99ۑFyZB"\Hi$YJl-yomb$(Ͻ,pw4hh.Ӛ^3B9]y gDO Okl.Ccjx$枀 hdc{CWq/{GV/ (Z" 77nGm .BT# 3"g@dq4l BtJ u:k!Qx}<ӧ,`.)rZLѸ }MMvbӕ Z{3Vuw>WAө d̋0gҙc iπR J!MV̥4ЩV@ɢl_5yxGRlU9xB+i1Ju Δ;8,:}<^?^z >Xq[8;w$7ؾ9vy򞮾޸Mf2IB!'ϏBsY{l~ 8 xz l-N} +W:%6gDWsnf0xG2T!|{~ YI8ueorRYaݾD$UJ=J`lXy<,XOa WK&.[ QK뵐ݱU6[S"'GeC9Թͭ?jJ 5Y8\QanbV,cf,vOZ,46,p/b""ȴן Y0kc&n䶇F"8Ke A5)3iΕ "yZn|I00ƢCs=?U1qs-@`7hw `E 6?M4X"ݹ+P {D3j7F؏4[E~@'tBd$JR)JF"ޟZ"RYSJc;onxOIWWiUqb垝1Z~/"v34Bz%O%vQKp738Q[*wTtcTN"խG|H[0M*BASIX^K/2%[}pzr-οݤ &m]+<͂sʨ!{ A˿tL<(x/K,5LMf8cUӜć) ͒)& 9L]rez~5w-4lhmUZTASu^nQ\5c͝4W4jΫۋ7}';"'ި +`YYJ=ijV1zμۘ ұ.CoNF̱Gty 7Ҁ2eEl?ȸښċdön޲ hZX8@zSIr}V"j`ŕ]3bLΌS\ |Q;@gWJS$-`fvk]f܈RVQf Yd՝c  vEh$x OԻ$;;^|!TD61K'8(/W!Mz8_$>y3=v> !2-r %b0 !jMxJ·k.e:Is\ &LѡkW"Z<T@M[gv&f}(9 ^P%[sn0 R61{*95Lϸ|!.RSTqFskf4*&UE.Nu>@NaЮĚj X5oi(-xOarvs^ 1k0fSi7mʽiܿ7;-ӂbOC:Љ^dU{PH.^~b ZvEGz%nI)Ind99Cl,< Z8fzC h'/QiF %M*RSaS쉟C +e P^o44Y{en#CDLm9_;bB925 3{#$&yN:ʃk5dnk/0QMHꂴwAphD>F~"ox;XJˆN.EVF̱X, k^>1Q=3 H%(8Q¬_366#UM,@RZ~9a)\WWC I-Be0~ޖ 2 y4qS|%&!_9 ;D;u`ťߟ[㑏 )k ?fjqDo AtF-0t1>}%E4GYmmO&MȕGe_a|@_՜>xϔmQc^}&홲 Lz NC|H8w DKrngO-,PkRFp̵N nuǡXA HcԹR0I"XR8`Y93Lx"w`"V{ »a WD#@uM)"eit>m՚T.C,p1*,5^)lx{Zj!fP`mrZݨ@97 d!!6Qᢼ!c$"?t JIQe>&(g,$70k#ִc у0"c~Sݓt@@c (Vh(Ѱ]wוNOE?c*On?90^' ʱRQKY8uЎybFz\;OsYK2pm{YrA @o:\.khߝhi8It%}8Q9OCs?(mܝ{+>9!wMD8}b踦yڈ/CqtNr`>M6춈m>O8}YX6g>|: aK/4z: #[j'K"4͓@ TΛZ!s7"pG DYIX,B(^vw.nA>~֗;Pj *(O ȯ)Ob~qlPKzmJ%=BNva cKfL.@j0iJto]%t/+(; cg[BV~q{ZTp*z}YepٛPTw(̪հBb>GS)'Cz HB0)FRVU?<T;ކ7aOfᖁByX&tЃӠ0I3BmK(,.gy'bwnqa^D#Ҁl+\"im}_צm# ңX5$it<|m^w(ˆ^I`Bð/,eS ż}cxQ{6ӹB9!IpY7l=,Un@jj )-EߘH5zدȤ] V$$X,ɠn)tMCQ08Gy4z7(9:PG\C@U"kr7i\8VH8x̸J_m:ͽ}^O=J[2&OxO b%md!;+GfFTr%3S]fYÁ ^G*}Dec xM ,\ycC8{Քo5|p \U֒$Iq1zwb:":[ӱ AxK:1޶XKD@&sYi h'Si$U[izho/䎑Aln 'ytI\#4FhffLLЌ ɪh@y<#e%2\Urluc:b<)ڱ 6 (B,wDke]d_ʦj#h&Uo{ۋ[B3Պ&w "!uyJ.;,tlpe/t:ot: *pVSJ ɼ;|21|rjv xWP/D/d`,#æmŐn)r*S±USCMZ7dhjkcjЂm`Dj?h.ª -ځDSGfN- ]A\&z$}mY\B}Wn8Ml$(!)7Y_/# yk mXT֕m!~?qBC ;ٰ8}MrJ3vhEGRiq0;Lh7 ɤˋ/*:WyW;׼S73(7Xgh ☹Bi=a?\"փZ-4SUw™L7-ZDP 0[caJO?&Sw,6JXv;AQQcϋ_!b8.*^jʠ-;'΋3%yӚXkvn#\؃ 3<5% ^ḭ :g dsH;~Gi&,Xx<{%uKB;XRꨕE4%1qA!)T*~NJҶq F=Ԕn( py8uhʧ|8pp_HZ|1̻`f9ͷb$ ^~QV.u`$>e2$P&fVO~/ ٣ƚizr$ׅt߀/ {_Hs!O;&V3DZyJcJ/$ 2M軶@% Ftfs}$:[|!@BB'# ͥGN*0$,X戧 Sֲ_ߊ((CuN)䒈 PnW/K::ko4JWD:['/Lwjy7 \Vi:";8]~A&H-ZT>'AN!?qU@lzO"S4ߩZs`?A)L}v&[g02+F OR?m#u"neʈΰ ;xKM+3M7ƜLUf{ `cfˆ"ots2g\фDEȖ @|5/wAXy ^5V-.t3٩$: Qo-+dL TM)\.1iaukD.C\3*JxL11ɘ`уe~4'΃ZEe6@M^1K"?\9bqׁQqh!Xxm% ."$_*/Fy<@~2|E7T۩FQj UA@MԳcBփ]\q *;k:`}[# O[ab13`,WE4mi4,>=q{-՛HLS#9]йo [D?_@If;NA:+ܬ ´DuFSn4l뀜V9o>1A%Y ̜).#&:E-߬`Rph;N@4 87GoDKh<Grqzoev^|R%}=&˕DGe,(O'&N@甏7 =s ض] UP:2ҙ#-Ƞ?:& 2^yY^d7v &gB»Os ,Pzg;pOpK\@ENNva߭QwtUUbdWA**),cK]tO#aMIIx:;zXwr6 ;[w? ݡƮZ=k>FnN.E'1Ww!`Qҹl΅J~wXiˋ_dLkF daxE `̉.]o;;@CrF#x=UKOe.MmvBJDžuhO(07d; 7D[w_] s,lcp6"WT7f!WOuwcێ OPq,e$lx:`pZNLFAZ7xlw{l7z00Yn4|q+<8PEٳ n(Y6.*PѪ"$7ZmlX\]Zq|"L5 /ZwgB a/Ј\kpKB ȑX LSM/0EU\%\ͨ_e\֑An?<[.8Du[u/mjG%U2/.7Ah7dԮ?Ol*lq7yjTx2G%՛dp \MrJmE ؋To@7E[!1 uؾp缒>[=x_v5K".^ : )ՄZnk0R CU ГS<9] _FeFE6s/*7 `6%IeP_JY]E~YCWoϦsvv"7ZW"dXy`Oq/>=x+qs& T&46{dVTJh4ʷaB!>EZ܌ߪ+#6Ayvi7*Aa"9 l,CY 盐\6x8^ODrXP2}f1gÑWqBYWpQZ,%_p>F^37do?\S8K.?,MXΚ{sj Fѻ]"@?fFH: $u:)jۯ]qv;ton+<ꧭAke ʼ]ËsȤTFM>h4~'>MJ8+&rf9K,j`kPD[&/b U\K$Z Wi/ŭZD}g΍],y8̛IWfĄbairuNK+89bt[ v=rvvq /grc/2㔥O Ŏ _ -y8;\qm@EraWTo.MBkG-ldlA]bubY#"A9PjvB5qd-9C< ݺxwɖ [ cV񬗿ᩆugPP xp/XB6;;T}m5k΋k %1XR:, Y9Ub 9Ѧ:0gfd]j2fv؀i2/u?]fa[AHآ :~ӝ2-tA:%Vdˁ.{zRLI Y Nqfk"Ltdj+]4VX>uJ'TiLcXl{ MjB`uP~0Udv;rRuJT|~AX7X45LoIJn0񨙅L9#A7J!Y2/Tc(R&L"N{N7G5 a,s0;vyAYD\\C0!.U,~X0ݽK/6UKe;p&IS;[yvšg?6v1 c`#D ,˺`E,`]ץDFH[:! R̚]ȷ[9==h%+he΄L3 `&_aЌ ]> Y7I@#*SQv9(Gc WcIf4;9Wc]KFbFIb93r+  4/qgFݜ/$z5 ))u-4"wJ)+.(ɛ^FN*H)x+Vq2xt)@sؿZw{HgTbs|'uM8p #rF  @6gRӼ4dyhv-x@EiUBČ $4܂= B}\xo J#x?Nc;BS t63F–eLI9f_'Y&/O,k.Єb١?`03hU@ G3C;Qijto@>ms%$g;!1_UnQ*tsD4 e>&*YRg0wiO6=X3@HwDl.z2kLd ZFw0^Z.nK!Ih{x-{4+/PGKvX<70ehf0 cYssz[Տ/ ю '#fN G'?7!Z DҢPKW9@vScw9`&2s9Rp8wXֵ'o)r&Xq<&Dk ;6|[i뿦71xCVrx;+Ñ'u~7%G'9w9˺nd>>(i@cvDl,=O\ VX,%Q.F=e"es\O`TO1?НrIc\]"C|s+X(mas>)YBf)S󱵴oȭ2X$vŢ2 P5WgƂ% OTJs)MJ6">\C6%\}e9䋱 lI1MG[ Fe%UMjJn{/"EM+ɯsn2mgI!.J6'Ps$.v&ap`KN(RʋJ"dxrAݙm'`$ZqHQx@ {AＴ% N[\e,S32[GٞBC2`xKpǤLcU? xףĒ/5HįdVÊlqe.3L>2^L[4К Ϩ=jyvD_LrXCpMHؿ^/[z"/XBعc|֜镊VeDf}g3ӁC`kEZSD5 4][~f@/.0V7fۦf ,5+[Ǫl~3p͓%٬j_!؊h+Vf:RD_,?1^eTB-AМ+ %pd۴·[5wo7q]$`P4<r+3mXws$5z,}09H}Q$d &ɫԤ/FIN5J2:qYܾŤ‘5adE~,)kDM8hs/ϘLXV˟ AS;RGtR }$:/$Z9_C-ӇUr6үf8!Ag~kLS]NE)<;T\K{10HUxSmgaZ!bvxh\gpɪsDVZ˅r`\ԓiȃ._:Hm&W`1!UzW1jtsd&Fޘڎlu+v&SR|SA;Zfa wCˢݖM~)@Bw b?-t>vBq5$ $tJEߎF os04\@>^X9M:~zp5V գy-ldz?}̠ : 3_;Py&"4vN9bE c\6_xFR##& :,j1\7w97cc3aa; A0MKi.`va~{mLP(7Z B!cm q,pg^`(\6@il @3 sodMQSӮL48+l+ a]S>PL;P`!i#<|Zշwx v{wSeζ,|QP1mK;PX.%-ZhAԚMG\-,ʃW(~a MwSoR =' & q-ߛ+F 6Hib.Fʃ^J:e]u}у;aJyymd;e.x?R|I7!| ctRқHg cZ6pH7^3ŠS ~dۊ.[]{Y969HXTn/4퓸M ' 2lej/K,E4uv X'V-j )oNRfҎ޴ڞ6/g 0+OGs}x Pmê4D-/t@-G^i~qFtzrJәMaS|f=PW\}`$ ̄v叠 &{4+sX׋)/[CNEL9m*0inBMY + Em*%=gq76)tiqyr[|LIo!C%95lh[v>`;PcE.Й}2ͮe(>mu=yNUQĽ1 jMVv- c'J듺I Adn<eqǜuzcuZb44jJF+'$1JqZOJ&efuwՆ-^Lw=Ga݅kdϝ.M@aMjEfDy&aԅ~lAu2iu@9ʹd}\E#tPBuCpI|`vw$|7>J5 ƸfM->wE4 ?|EYSV5mB\OtD$k {Jqo" ^<.-8 Nxl-Uek$a8%pyQo4w`dK6)̩[FprB}I'{IXm'94z EofUi6㺸kPalAnAq `b|w.-=w ~3Tm9=]5p`Efh.%P ek:I& AҞ$&< FNa !ZkO 5iR;m0k8p%YQQ[gU[m9U.)Fǀ8i *yVD% >V#(#k(707+/8Q g0{ABKgZT/ FM<Gzl8 8mw8ՂFKL N!sVk'?F.UغI|u5j? V9)Ƽ]ѠjA5C  !$-!9^|\Tq1A 6g E|=}q"7RUcQƓ/5`_b7rk aLᓂ8o.Se%>EwB2Xpo< `uࠖQ&mx{)]nӤ 693/TۂɍnD? >ÎߑyҵQRoÊe=0ot`7{oRN\Bƨeu:∷E֊|CHG*rwKGqݽiɫ2fU29-tʛs4)oAǭ:͇bDH").gGٿ(x-]] )E<.m&Lc }Ft@tQ5Bj\^q)jFK)?|p1kLT5ÿ#%=ƽ ;vXI(9O $%fiXbŐk\S8>.a7ЀDHwxmU퐧䤛\ijv i(Pږ7^nH 3VZMIa|5Ro W˦ּivGpei#tIدh6viywvR< N35{<9KK 8Šܿ@v% k"z01gq;s]el)O~qDd6plç9.|g 9)W ,Acamk# [!OCY(Vz:)S 5Au ^]*lKcyuAt WP"*k!7B7h?wԋfG8~vĸ p(k^1/ T xW$Uzzd8am=+*.8UjsֹG!5s+ o= Uum斂)-o;ֿ0p,`"*7Q,6z>zSoLZ-5uWި VMvyaZwh- h9!U뙹wT]]*K''>-6=m,i>̆*InZqUf5݂kI#|>wTΦ,鄔2/j7Sw.z1:ơ|D6JB"AY9 o!JM@&/8@mi s%j ko7%0Yi%hvh* RB( 4bўR`|w̻/QUe;$:<2KDAZESQe嬘1yyo=ۑ<&vk 1,=nfaL@nd7YYR4̓jGU~XoԚL='Q` Vj}?lB54pmN§n}VnuM^VVr68Hk)pnp9/οo(^6\8źPbާrh\6NBOcI3q;]dnj%1Xf!:`$-̧Lai?ĊPP4r&Aa/Tz<δ;ojcxv 0Ggvԏ~<$ ң3vR`mKkvQ>Y"p4 kQ2b֌Zq`- %/d=qJdWˣ-¡o kǣ;QjX ,@;_װt{3W!U  IgK‡>*~L2sݖHXw™4'{P t;\B0;=O1Γy[pg f' }0wLm OwۨU <36`mMoL 1.{b<`*Gl6hIo 95Q;' ާ]q IVEWTG@S%t'X}Odja .4^Fex4.Y QacbA/&s"YJ]D^{RBi8Zft2@kϮao,r]pՊ6YN9rlIo+_\N]pB 9Efܙ7g?`NP{Pl ۔2GFH9)^Ǯ-wѳxi Ju-p۴z>RF _;/!aJ;"bX*\\8f@ Kݥp0ؼsp=.(ٝ vݶ3($&膙-g%++$OʢuЈ0R X`0R-HRwHJ|p 0E9b$.EZhVj$>j'ng} q}Z3:u r.2|=M8{EoN񢞵N^&Ja|u ~ 53t m! {ݯӸIsҍ-E-_"Dw2A,v)NwoF./ppMc=D219,υol~BZQ*LAk*? Ncȳ"W@]ıF@E{-u1 p<i+IES^M#R#ۜF1nT|VӿuPx * .q#-&"Df|Bht[tj׷7m0*܄{~2%3vлsͨCAbQDnCշ[>+zߥEj++0KN`섷.E)G ?Ac #][’Ymx7S).*{b;8DoՐ|ܱp3ȢVwX{L΅Smt^Zmc-/|5vУZd j]S?iEUi_ƃn]] Nc@b&/g)3z 5P(32AM"kx DhF~6Wet|җt1&7{dlr%Mbv|'˂ZHs-m*8 uiJ}VYj};$>.][|n<`loCElH$zo =:!6ōQf5$0L) "nFtdsgP7Bä9/cU|ԺR0b9qI5+"VrvyCɼxdN86[**5v'e#hV86IGtB2Gq[c/52US(d[,E'w>u_ϭHkEsF,Տ|u;n㰯WmbToK ]9-N*ۣ?ڭZc?MPK~ R/n+р,g7UҶag'{iL)WcpIe!m$'e÷e^:Y_I7졛bHgp)ܣ,N /706KlZ'Y)` P:ɋ8vr,ۤT]#8X,Ydqy jS#V:";ۺˬ[1d .> ǼwJ" kB"8}*\p 9 -ʝ;d(O"uBJ5Ng֥IdPxC1n)k2@!-|BToiBcj_GOQ?+="9Ew CY7Bk'P+/mXsg"q\EMJ(GKH2' qYǹH@LPJʬU gԛ╪ hznÒʁxHxSk8=>9/ҥjy)٩e,vO$2VtD"lDFR.# bbQfQi-`8v0eI&6H{q4ZFۧZL;fawP ;׷n,G')}DyYW]uSd{QL+T?Et*q>5CwT?ZD!&}pvaj!qlGye|QR&INy HH+TWx49F_˯/>DPODG̝6#j /P.ss|h%|E7DݓLʍdBH6v^*ûQ>Pė*QҬck7}揂3"PWDdbK;h.:}aMDCKVuf}- %g;{cuu%Q^}!+RVɔ+o+"Pe#|" *y[o+b1& 2E|-S@z&~m%:c2 m:ϚjQ>O7РJ,Lsi3P0!2DśG9?#Z4 ; AS"JL Oـq$Hjp\zT{ElG*C'f39}Tϋ`Ɓ woR!D7pwCd%<9f#VOyN e-_lmR ʅX'*c{Wm >ev*hֻVaJ2j)^H̤ynAҝ8S:\Tm뽯x{r44L־=^z[kN5bNl4}BAqln2G8TkY"#iu960ƅ@4;\s@?.=jzE=,)AAT!Vxl_I2dX; BveK7o{ yQ^ Flϧ cYw͞z`1txHW{πItwݱa /M"\`@j23Yf]GcYl ؇mj[n͓(>OfӎP;e>Du'RvG@3:HV2"xC9Мnef]W*l^(Z):K-fzuk}C+c/DXKژ+uM?.KEݶR&phnZqq.Y uEPATE2 c*uND!hAfR!fM0=K3yPŖS=\^ԘKUt\ZHyAeji;Ob@EWwy3" `me{opyP17Z%cWh J!dwfn|sT+F}[ҢpFGsf Kd╭C0xݯYЖtWIZ3(L~ކ ?Vѥ)GW3ל[3R=#ʕ,UQ&7^apyǭO5}V5rzj) ;{+K;=M-.iZKtԀx UG`|;I\L@ #X7w t/'k6o(lXvI=a%xp)5,|$<kmr/PF߾$,z,(XgKT<1R0S_XRK#LE/Hb"\KTw&Bym_`T؋z y_$e;$V7>t"ZΰDNIʥ1U>zd/]h _&3/͐$d?W>yV &{lS%ӻpVֹ| fԊ8K`A_Jo&*0m_D R+KS[_ISCg ;ׯ uΛUЋt'yD"[1<ċht  gw jйdR3z^h,K'%L''eϡD6Tfs|Co攍w}P+Gin t*DmWWU7Xo ^ʋ ?xEFg>0[W\_//PsXnG66*[\[G/).o/UЪG}lIn qyelq_xkn @o4MƆY&\S}2efHetMƳ~\js_K ?Dcg 5An,:~@//f͂"ӬoY*c꣇R1EqOłofJBw5ls8_Bldha̵N/*'6!jlx#O_^+D6F ):W쨩l@!Eٌ@vnjR9_"ňȺX{㝝i ESR, _1-'tmX_vT2j)i9+ϱEȕu)<Qpdw77A0 ^6U0~]x2MFp%z 0]aCBߏxgLWn3H`.'{eyl_Hcz.}BS&Bˇ74~ҵ  \]XBT7 y!|ŃT3_Z,l/GgK,z ';/;jkRYpj\ m`9y;WcEvK.)ۉ19lE3jԈ/ ,FN ɲ@NޚmG8Щ@p$0MΗ$Em%thCQJ:A ۓ_a*% (.{9q?΂f{{*6:D"Bx0NXikSUg):Wڗs'nlaCtiQӵ#f&ZBITLzKp?/v;"8X kDiV dUxD בHߔoIm{@EɎM{tsI-%h܈-AT!q'2u&畉!,je>z\B8Y`jGR`V|:c›!=pD +VqB7kFqfg[ ⤉p˲u,h[6Aj'7c2XT%/\2q:IW)Ò\hDW#+wR@Q mZɉo!uJ5gzqBDBg{IRoUQ-7`|Ez?eF:h6jzwm`fv!dM'"" \&URw[ KLG>eqmއJl(+?܀=c|ChWvNnz g`q@Ԙ׍KCha5ːP~Bb6k1pLuĜM|Ws7ulHiU% n L'˒gDPq;So-eњPdeV&.E;Vhǎ~ =VʑQF/?kp'鄫TT(ht_In"_9/%(E-^zg( e`.qL'vg5`EckG+נ EȉVXcx!iI[F3 & tޚE߈솃*\RWj?v9%ӻP&NA'*iOwQiQ RQM70;:]M:nH&6qdV/NRk57*Bu1:[}o?cwù~XME\`IV ^Vhx`Hv*rCow#SW*wm9y1F#09tP#'PgM|~#)s-#G8SQVhWϸkj6qҾ;3C a@y9Zu@yʏl6NcBOjb/7%ƛi5t8\MJ.:58PtU ϊ`z]݊{t)@I]TAr`,0teGR.GF&L0܌ŪAͶ'O6 ",4C=/iɉ8οZ:\QF'G iy%(p_1cL3~p`ܫUP+*a"5o[BB+mt3d?C ~lͪAl= J%tԺa[;?ǜmGyPO 7l+zSVYueݨY2d|˕{Gqu SA3=L|c,4jF:aA,`D3Ix/Q(A*{9@SO3(qN`U;)lcV@5k`5n.fĕtw˽krhԭ1lZOBjőÈ8%Ky;~Y9J .V3Kp~_9r֎%wSnR$t,P%%aZ$+ߒ b؎H4ؾKCa|9s@Fܨs߄aEi׵57y "eTC.3R$N;Ng Ct \Bvn$mZ)CF)zh:(fu)%8  0iW3eۜ$;F4w*Tm;xH oku-[ e%z{Ǭ荔:m>d Zܒ9Mf9VX_,)5qX\Hbg58$n7E~XCfjYkbᄺD#s4XzE@C]NUey䕃{𞪝jEn);V$l8ɳr$t%aV(97~\ 6QmKCַ5.J-%AUO(, <8{}njBm4KYTDT7b4, J[՗'/ :$\ 8VyuؔKs(ۂR%DϠ o|_ S+Zس9>,9*@3AzF.chl=bkm࡜JPh6fz"rdN ᏸtk$^=>]C.r(OW Hd 8"GEgPD_7q^I,qcHܿK7rRr'ָw0P= U1kg"hʄ2_*!s 8_eдvx Br?tiƣ>}k~I*D7y)lx j녗})t?ۈbEb$-1[v=Kԭ9*,ipf-JTH1/pvȗWiSاYIą֠ lcChV>.!\޿`vNѓn6*C z@*k;/RMvRZoΐf?Yi =X0c;Γ9g`?G&fs*A`px2z*A>@ï|J- ^ԇ剫+vp pւe _z }AiRjXҎS'.{ yZx:c 2 >HjSDC= CfD+'yf#6{$$fuY;ZU P7YqʆLr LBw<~fG^*K_P+Tj -Vgx E֎lppoJ+gRܪAwӏ6?N55|)mqx|(VL׶FiYrxc +E2QNPd(v|oc~`Ɍ~Eci,eҺc^ 1VIś1i/\\ERi)uK3S"wVKW gOP:~LbcpBB%Qqe3z{QTKO.QT_Xwc;;/{c?ulI1d-xC蓿/´x\^:mG8|C\nt"{aF"Yj ;z|tW +GL&)OO l;%HtYᰜyѬ{U/!쵴iC]D&9i=6LYѽ:aRWCQu紅=n]X"" '0r4sv0|?;z[x}:iت=^EWOztv$gBE2\s ꢊWDрʼ[PR9;-P6>;kgyul l4@|XsyyC :85*΍v2aŋ~+]ޔCNi^͎]?Vdo<t6KZXV5) 1}6𺖊`~8!)REQ8q!+EJg.Yeg %*X/7=O~;aXKGmJܱ'E˛TEN⊒o,Y]YN٭D_5Sǹ70LH%yxoGAr`#!ވS=WihWJՙ^Us1S*L=PxEץ R[HXUG)l8ds Ȟ9Qr-mן}([n+@(Nz?o{"YHwW]JD}1=NWSka,<{N#PtoOh4>Ŀw;$RoÖMиԏ{RXA!p?-Mv7$\hj8XF`Y7YMz!\PUK|ELH'A@Uil+&K(3jg?L/6NFq lrv  qt}BG#%s[c~xn8dO΢o &#cusmLrgtx͎{]󥍖5pj `GMA +a@\ϩkLCVILl$8.S zTG8^"imt׏P =_$bSC j+_E!"^wgu[ٙ`]G%f61ա\JƮ:&VǷ"+U줗X9.l!6nԎ9xǫFoHU~dhn-}!Bh5ڨ;Oq6YƁzTGPY%5c8/ @CP55,gU“yFpʧ\mY;6g'rLyGI_;k ,(Li`:*2>J@.˫~QVOixW|[.QˍKj֞$-䐥3]QҶf8 @Zy 1[Ԛ8mNA ٰ a,k5n9bXMyEᏅogG<3J30EgA2uXUD\B T"쀘.{F_@{z ;6n4N>ƞ͇AtEZq|YU >` W o:HZ}S_EQ IAtdر>FhX5cHY-,Wќ豫R>EERekR']7ٻ{G}_mkH +G$M 1ny$m8맀t7yğ@[j6eQێJ),P#W;KxYZ"_of3H|Ýhhg! ҏf.(=@A=ulHE1E'`Ѓ r˻VhVމ@]FxNI.Le)iLw>ckv:.+LrORo>兿~ھ(_nǣG&C,'s<=4/̞ۡ;Q[I{h%hܭNMVl%NF!=Ow2h;yF n`n/gСC[fH_o ɿ741R;GQsbލQev2I4ƱBT&>gI4a[ڠ*Ur-E[$p[s/ ;PV ʕܰЌY/ɷ=PdZ_Ts)`l_5ބC퇨-m":QDFvlg84 vB7e-\ z\sp8+ 7yt9u}fi}x4 i &ȎtN AvYw(Fi0@A>)[ܘS+^ k-NÆim_1S>l a<gfzwCWPiFcj!H6hWLtKsb\;o`d'RO2EcVY9WC{.5^v?)(Ii'u3ALByYg ǘ_gGnf1cg\lî#'9k|d7ağӗ|~ gx| 譐AӧЃo7$fG>Ob 7P? v|$l$; 4*tAպ I!I>+EP2#Xs[8_cRj:wmmaSJv׭r7Z⒔2F\HaMvmN5D_KaǑo Xe*4: ޖbmcTgLNbB !db{{9fRc_,l=}FVY7}@l@)HEB/K4 ` GBkㆻf>.* o\F`\ ?l߁X-PB [ O6'6RZvsЬ&`v٥39Dpt5$뤓B 9qY&% Yp@aЛ1\H}sVR|(VkwFb9kVH}4NvCqcx 13V5"t4/3+:T^qM¨#yץжRs*wv;4? ZN8etoNE ƒZr-E-T$'LڍbK'>(-]q"kJӪsѫMKG67!Ր.y!qƒD: loM(a1jLBҾ@l}ãr6C>Ud 3k!UMךdJwϔGt9=jҏ<ф .ILy` @O~kWDB,Zj}1Y5A::j eb2wE/rHdeuh42>D=[zKtk ~ԣ2XPDgOKr+Lw`h8k}@_5+'/qeX\<@?R/ ~=}nJQA,ɱ!C$_?ڠ,7G#Sk6DVoڋzS6V󞁶һΙKx-, Wg^\Д% 並u} @&i>D+OWIЖmhU-Q#+/siNDyXD1wuRY ~YY_Si=ۊiC ? T[ ?72f81ZEڞs@BSHwcyOc^N-;0%BBx$ٚ(ys1S0WUNí*XU[tG40iGC?@xΜЯЄ~Z[@'@5xuGG3@XsP3ix<~ry:3Zŕ—j:&cб$Ð2mvS%]AkuqTX 0@&RvO&]/z?ݖiҟ|'53z-alBbQMboNkj fW&OʢA-Xo4hqrCGE^ձZkHJ<$ztX>-tb6xl4k/C0'וй @7Y@,1vhos aKNL=Mn VJUwK,{I8SWkpuŽ)<'"~Y*w1Mq sykKKM*ދHT/HT&\"wjxĹO tM0 t=[\26#So%Fy4%<+32i7R\37T8ʭ(6">K@i\DނT0zLdWoI)JF@  ; u#O/h_Nf>9g9_Z>ֶTrb1l:g3\Flt6~ уޣ&ksroYƤ>l⟍6Z0\[t)g#!+bX f>mi^Z*<ۢ!lB:(wY|7dQ9gq=W fU=kIh>dwwdmL; %tC>ۀT4v "no iχ\3 XAU Qf9"'n| }d]6dIZtv[5\ %:j5JHOG.MR y MKd[t 8gwD܎=I?%rB(Cmt9R鹸/(Œu(皋h6?bq1N5F&ck%2|;@Wdve,;SB\0~I841LCtDA*-`Gi?>_L+@KOVo[_OpC]B3c榣EԆ4z1Q$LFG()}*La'Sify>j]FD3љ,6y՟O++dĐL(HKj)z-Z2klУˑ=Jw{;<}?_Lv_{ؕV^Ѻ=r&(Mчf {NDN$柞fԃpGZl)0hNMiSE^a y*%Xkˇۚ:2 -OKVw;N1'z9ْuίwds #'$\9m`:hGBn'`RJTKGj])}j630 4}7n?dH%}\؊p@S6q\=84QZhvLb ac:4@f\FhC>ն<=/;,A*_+IDQwYuvHSz3!GQhO^s I|FM`8ޖ1b\(gx0c8B1 8)oiiͅi&h𲿫[1 @(ܛ쿣Y_NWl뀛\oxQ_GdA|b&{&,[%yl8ӄ+f3N%;6F2>{G)#ϱ MRmv -}[rus>T;/s]!NRfl+rՊɀ,zϼB¥ } uP^- cYu%" $37Hs6(CSM<#& ƟDKֆVpZT'<-ˆ۶焁莥E[ӎԖD#ز)`(k1>'f鈨F](zGi&t+_gVB̟~v8,|*o-ƘۙĖ) tH"5Z-u7*i0vCpN8|uCh$v ]kĖʐL8"*2Hh@(pw2,xZЎI dz(dDQ| BӈȊ=fqHcIY &0:0|m#]O^74rkKn 5*U}(3&mbPZ$w҆)Ԉ/ Ey-CX*ܧmr(8h}åICa!N2J(6WrcI}}Qf'0:F%;M^:YmVGt @~o3#Ta8WŅ[ m֤繡Ih٠VԮ疗|sYB ^.|"р3T !+@ y~u}HG〠-4({}'8͟jk>IU۽[L=0ь[oi]|tLr6kS_=]""$){߮g',@R<᫈IpbPK+>(]p[:ZAkdUD Mv{؛Iv*Q'4L{hyQ&Chi[A:b(4[㕜.ū_OB^R$KLpKuJ;s̞N:u>>c¸HI)LzrF:z3DD,`It4I(//l۵Kt~k߫"RyٜV !l98#:ŹZƔ#EU$e&Wp,Eg >1jCF?Md[iDLG/щsPNNˍ}4N[5}d`kp~P"b*7:2ieДɰ?t|ۡPuD@iu?mi5̗^YI= PQ|ϴސ>iVc1!˳qT- ;#c| zwT`K4j{ G~;3>9NT#iJNj2! rK1y1-f`y_ @%,;N0b {PPR Xwj4)(7``g^Xߝ׵ǵ8A8GMfLSzt =%$rݸ2'z*u%{D#OY){8 !ь=xiz숬LugP-_|CTJRbp0UM˾j ,#, Q)C<bon,c~BS707^\~Дr(|WZǴJ_1k>\8H=Dfif Jw )Cue'&ޫ1Io ^>8>庣8ЙpKF[T~TKuH ?1q:Vʌ)c@-$5`LP.Mj!g>!kr*A[w? nFsz/{.eRY$ NȢT7<`tTdf~NDU|&iySpn|+&Grբ>gMP@C+KJBc-_)X!N1>\yR`l2P{(I%*0O H!|):RNQd!6UnySW"*dȻAY=G>'M>3}`K!>&)޵d=Ѥ֓[Ad쳊)s4̧ǭcoEOQӟ˖Y#z#` ֺ ]wk]?3XQ'&Ӧ $D^D[7QGtkRY9MLpJVWe2^k(NTva+[_ld̑'Ag0+GEg.l CRy&6rM8|H<=frC 'wx6G :i|ξT\ =1HQ/b oҞ/:X=ix"H[2I0y11` `;Aw=/>bypthaM\UԦ0u>]"R,{6U<;%H?Kueϊx7QF`MT ,-?Y(4R@9՘Jkw띤`n$FmzoP[.=_ kVh/U5 -O36 2wt'UPXw;^k3hކ#] n \n< ǩDգ{A,(eՃ_;{yRjT:SrC/jZC?7-)C5wx,U275!>a {9RJK-nV+Ô%+}i|`C:C:Y` }2/igACʷT@FG/-^~PpmJEY7xw&o/\} w XVRmj[MY/~?b|K1LZ^;:7t<^H'cc&L|xHqŏ y P!FE 5.B/L9*&ERMrQ%bx{9Bڻ9$5Tg aWJp-ioݸϢqXʔ]|LPK{?@,EO/RE ҼAHT5iKzql @#g3/tR܍.{5vXe52z43u$%FԖｈI~l@,,nج7 kQ.$BOCC092#?pi{Z@!2nRkIX5UQtZܬS*)<|@1@M!5wyI)޷IHz$9; CY,e?:DjA|elOT"=;y"1YXY*Sd:< ܪT]j8O\dPy`EYQ3}-3ٛĹRt[GVD-G7xn1*a Yl-YYO޼uΔVQyQ\Cwv1sQ[ªh/!:yIBrwȢYK>|To?&pa&+4PbDg{qJB҄9e -AhjvB?3g>SK/鱁bvis p̯h-ޜpNrs[[^+HL&BD 5 *g_k3Y U0q(daأpQN1F?jWa <&Gu8g@\/.Xr2CdhDPV1)z \G N8o#"A8`l)&R7]sr nmu{U/E20U_~\$EB.3q9u<9A~UOj-ywV5Uml)X=@ ?Wؕ3HU'Iĉb=͸Wzpho~8 TQzBONs* nauլheOJy/ CDwKAǖq2.\NO$bm@}CfQi0H)k^kmƶ f#>xfΗK @UC78uu NK7R8乙3=>|.[b_8fRl=4${b+rf>>al]" 0p*0'ǟs d E D،M_`3@붷u sV~jWAA5&(n)Zq/_o:T@TG񒺖Y= h6Xn55JfиhŞvԗ2~fEg!DF8U/FĈxM,X΁dZU kt%Q!Ųwff5(![1ПZ\ᭉE.QY9L:C|S!|F/(&wJ&#Tc<9G/aeRr]P4ڵdj ˙/y?C0 Z$^厭 aFod-}/Yklkҵlt>j6뼭:h*b.a2pyB;[Ȝm3 ;_V+ND']*!4O;G٪ҾӍ]SG@@{<̌Z;NMCD%08< .`0"'BgȈm呷C 4(N`Zhv@6\i{Pa 9* DCj-#-:wRCEd(1*U&Jd1k1:- Dq.~>=0Sޚ&"9£n@Q\67 4_i\"T(!N֋y׆} QyT8Sk!2BŶh\_j#Q9GbHLט~ y .+%fy-`9qERPb7 _>U~cY>UT2qv_4q}Ls}wu:%2 cў>CU7]F8 $tj4Tf6*4?rG`c_Sd-,kc."?e`[/V Ŏ'h᨝0܍,uI~PxV ΋xly:,ymUn1[:s7i>[]QiKmXΏ'1CR|5&ܾLlQLW'#=E8KÅ=-gSuqƌ8[E\rݘë EHj} xM oGSm; o1fkz !Ta&F!NwvlKJl,zDC4l7C jzfdLBX-Da'DyTzğ|"u2 XSubET&}ja\})O.]O]kg5myI5eu!!&C~]ϮH?+aF[: jHOR5%bZBfګԑ#vp/1JH8m)yq-5G]2+^'aUo_tiWАXGu&)xwK8%/)V/*mgZ EGPKe`;Np׭wP!əվD`ƚ"AX)+L ۢ`2$.fxfA~/@%Sk$v!͔:YOVNyǕD5Rg e<>854 |@>Hrq߳q̅%8wo]?]$whGq3C_qkU,q$}պ:\eLFFl [E3/덛)fuhK3DZ TKg%/Xc4ɣfc_x 63>L*GxI+'fkmuZc<<4SH5ѦQÀ \nΓ'ȉ}LuN7nrǎ(e{76foTm{gűҤ\h>*8M"V{vmX Bw2amՌޞKdY1퉺AF%'>qㆶ;]$!s ڱDI%撝!'&]䶤qS4uxPYGB^_<ơb_ΐv{qxE<-?p@nG>?Tw^[PB,ݲƼt͂5M:LT";IbDIc*~{SW_$;{Qw"<0H gNL/mwf|[yٵpuA*ߎID}u]\rTύN7F.-&-ծKQ "ʄM TPXUF hskQAP> k/];7."_k9Jtӵhg+qV'4HEȞjTSv{Uv#ƋS cEC#0^ ۻlGNΝl:2o+k&҈VBiSjd.HsAt'C8"p4Rt*x^…EmuI>Mz~W)zhӟ*u+y1̷.t l Scf.e%e1wxiZA.\4 `x~)'!|Ourkeq5 d0a)\~@ mڒ\ >ۇX26o8&f WED$NXι R+B% Iih<8t2r"_?'Am0N>Pc:]ԭ1y@A&WTn]2ц5)Ol0J}Em:ӓ/vx T~{_gՂ:΅I}RE*Jui.2+JӓcnBPԃ aa^.5/2OW 0|-`s MCeT />R<0w:[ 7Aw tii`s蓛.c1k]z~3>|XH-±a߰rOf$ؙp\R>6Jhcq!kx &mjTHE^0]e)k.OGZ$/Üؐ&IAӏ^(\ !>L~-gd&+kG?, Z{s 6+gP =廉sέ:\3ug{Oz[#ͬN^R = &ޕ?ª% 'u3o{02&U }ˌ#2Sa,öRM"9]z^CJl}KmM .;:6hoߜ-4bG}ٵFG* aB:t((z\x/y+e*-V}<,q؟UAK}<lCs[*:i7@'D-T#JA+)dCf(!;CC01i~"z2_JODaDsa^zJ@,pJzR4]QcKW O"3\d&s4IҔ !?oRĹG93ΚMu[dKAk2!d̓ /_udذ ԥ7<7LO:;v3+~~1EXY!lZsCWmHж>1c/Ɍ/ W!8bn֚Gܟ}U9?"(RMbw-B FCN~݄G;8fɰzV1w.c"` wO<'"ɿnNuUg44\.]u61alA. p8EY}!Drd Gy=K hD}f6,2}r}2XUԚ>QX'lH8^f{b:ٷ3"m58gnF;1 Zh[=ʝ 3yk,wXXf xj|R甭 |Diݷ|G$( JF#Nzib0L4!{ y8+9j_S"*k}\b D(|W t$̸CDgH0Li{MK[YlZ2$`\!0`e z[Rޥп9b<㾯"'YәVWDj[L!jPKp DW%w圪guV>? RJUǒSv=IKf1BBҌuW)zia{h)i=H7MF:;T`z0gY5"fsʬGO]VSԾ񖂩5@0SD=^ixgEgjK9ݧ_SLDkωnKIiwd$'BH_؁T@&j;6Ell8amuYR"f&~Bx:Up9I+)7S/}  H1fv>Bvv]j8 C N!}Nèw>`X/1;H^)m+L82Jۇ݁"51ȉрc^!>nZW=rWD,FL wQƒ*)-: / {Yi< n*؞݇MR?o>Կri_::[#%  SgJ7/!\ҵ&A,"WQ AIwZPq[.}ws1{[8u-kuV/6~^K)F V҂U(ҁkk|D `XsQ4Ӧ4X}^R֒U~=eVSȕË/n3f/  MFG`^f>1Os'#rA>"rarKųUG[-qTXnMb47pɡBL꺨Bb\.r]ٲ36BBHO Fq_ Ll%/Ԭm_-妠UdJɎ܅='#2;k_;,:?yuK/pX~r(ȩEaɏx6S $Xrm%ӪrjԴa9)j;SKɵcHleI-)#Y.U:5To$`n%&aNUTC4@/T8Qaڿsx e54a\\~A@bʝ,4fm?}K8>$圬;llm;_[y،tIL:]0W305^q``k [g > %,†q`4Gxo4Lk z/K 5_ % 'YU΋w& SQfP)l/ui7 c<,m18JY:y<{`0TY}U,6//;^h݊VJ67{>yQ V,&$[$יn,1|*(ւ[ӛ@+~(<Բ'Kosg"x=DZLy/jP 6+Ipڸ2p1*4ZBsnB.jIgDJq qԳ*6ʐ$NAo,Z;@9JqhF54Q+ׯWsO;$7LmN Ij̭N{-ۖ7`[խ:ojDC8@>e1y*h/߶my`N b /t߮u+~<@^t}cdۋLZVĒf!OZ=5^\<圠@[^ A+C)|K!™)b2; C*6O 㬨w5gR:X Tː#/ZMrgyXUUeQG)N k{Nc*3beֺg1J̊7 D%d,"꼮;g,lC;]vl|n!Q(M7jr~IV1>čsoرCy3v+o#{Sh( νcZ0կ2}5i&Ni˅@yM|a c%-+OG?њ}(?B@-=˅d{a?iɒ.Jn &CFW~K9kZQq^ /c_2uxFG x(K#1گTqP ӏ3œ!Ab ۏ  _|'T04\ncY n8'6 ({SD4zV6nրj3stG`_02 <:Vs"5įoZ^je)ZJl݁Ŵ=%# n+1|Xў"H"\|`v$NI7sO -3;ݜ9wiC2{I 46϶"Hz,|Ėy|bHEfO{ ~Fe S2k 4~&. /`9|^a]7h&</3}1Efj6iu(V`fD(c$*u޻Q灚tJzN0!DTW#ԗ AB K5a&?h*u!,aOS"cgq:]/ӠMXpRpF@\B8gaa^t8:9a?mi<*[(YC\h_68qߧ  3՜"KwA$5MN^W6qA>nVބTϺjj$5T^zqD>k_Ն6Ke)wZFD'@&u>K P"9`h%NXZ3Jo{xgGg{g(4QJDG4vzT|+Rt=)wLvXX@s8ŹF#A j˸FIbsBQ^]{J=HRLtT%Ud*A<wsvL\fWfg61Ө鈪mUVYtD2 \Yy8u|"UP& ҏr|).-MR E=6&A,UE-IBƮk&2<}b]#6U״:I"(ۻ! J_pqJb; dɉ>qS6Q/g-q3ߜC9^Own>kwgv 1Έ]tn)1"v-K<(VR ۩ڕ&ܺc$KNiL(:ؒ|~xr%1|`*[OM jk=4=>fk9h I]\ѐIjdj4)4 q K_G D6NAcӐ.4?Sc KWVa +AoG"6#Z4ezÎA7{7&n*kOX"g~w%&x1+i\&H޴xu"loٗfQVᚊ/rE,`K2 M5IdU}NSƇw>@׈GcMyyin=4N:֕Ž_X d τZii4.6?ug#AǟhO DG*ՍxP|`(NC$Q O4x\@-8eV] A=ۛWa1ue'nWB9^ÑVDN~*a-غ&:m{Cdxam%_1ZTKj)(΀ۺxyYA LZ#1bӒ#+>;(~SKqIFZC,6!nBԨ+H ;#AFҧ佑lݯU3Ӆ بO6Eo 8LH1._EB!>{wuzv&b+-;sM 5Y]BH](]}H05 %3ڒA'ӏk$b a6އ;NMvrWE,ONwR,C=eFwn[각# >dg+ȳM2::+$mCR#P5Zc ֞QB׫g , 'PQ Šu""bOe<kۂNۿp)g~6Գ7`V#&vL*[;rQ*E2 &ۯ3o3AgXAkR?Gąv}},T eobY/N]AYOJ5Vir-,_?a6AI- Z=p4)n&it!yϷzL ]UT T2z!+} GVxҋC2 "ɫccv ~B=Ƒ"6 z5Mܑ4+ K)V7.ɅV=6Ug9!9b {syR3DHwTB%kY ƙ>V?ikV퍒&ԗL zaU)\pH=}7 i o #m;I!tZ#0Gxb4fT~5׿ BDTTK|\`e9H4v?i3i\_Գ`")WA;7ΙqcJ΍J~ICMXIRWCGuDHmY{Vr5ώGnG /PFЪ6/! Xt{|Ke(Yc Z@IQ8KL$q"]eNtHͱjt(0;GebNER L]ڸ/lv01}A^*!d3> iks/5Ǧ=T'1Ep0棲۱@h`It{SFK*,:m(ٿ_CǞj%wAABO/5jQ{BКpxϲp oAH~M2o\+< >'yBo/Ҩ ig']494wdzOty`"+8v[0Cfl*C)L:ߕpL#h ߥOP9p J@KQ*+6ssvj 7p9!7v%YCziDv<I/zsUy)9Ԁ^S ڿUAP7>*ؒG8<Δ1ˁF_ Qv<{`31*S 7ǃ-2r"Ei.wvJ`t\Ss^NBd̛TGjEWǘyWl@G^kB3a \ 0!wz<- aax*n/p m??c%PI:_3$dHNs?z~t*bO87c0Z@gʁZn:g<7s WzGRydconnЀp5.yqlpKdVwpGbGP*u*GbRk.$yB&Kkap_{G*7 QRol=o\\Uf@ *kA m^g0XT&O w_i~`5`Рxu7L+"~Z{N_|uR#`PI<}|ۮRNYT%E +$_~_rc`$蘀u̴sa'\,9TBmp((K0~K;ʴ<HìI|^.!t1=K CT*!LzL Pڃf\Hu/ԷtNSЉkvÕY3 `kfZ \ƖLm:.F.y[-3@vP;i\ˆfF|hi0Qדeb?cj$P Rd Qρ'cPvc;ĥB)f?#Isc$_MS#Fd ]g00wOCK`!a(yhܠO;6^,N9CMhh+yr ~אYv2H;" v4UEk.s)xT2QCęUP׌OǬJLD:YX/-!0)fE,;!Y+; .ApKѡT"SlIv寓It{kRl6j t"wBw CMpB\`韼 7;8BHK>Fb|Un% (ڌhc ĔɬډiBZ/72VtP-k\++'i9kT|PWZ}T4&nrv jY5\qiFhn ŀo~XȔj'ڴ @>u;ZV^|Em#ή` =C*i61 =C,"No@5eR^.dc[܊ ˃SZ샧4́Ay?972?;a{tԛͯ!B9'a9vj\-WsRYZE<)M(`*n&n4xw>¡1U^(=I+7 Agڡdc@5m1j3_`VT8rah(D:QEa Pmo> erpj\ ż}v$,Q7q+[YLd;{R+΢Vyzf~0^@4R[c~ž0u d#6 8Z\& Jvkad̽`i÷/T,epD|j"1+3C ~y55[k7F'ӿ*O4H66>YMHޥA#*X+W_*` L!SxU_Ey Ω;Š1:Qeq: 1ЅWe '~-=Roi40[ nʡ9N0FrHY*,&&C;h2Ge|K3lxshfU3;X9E(vNd*#MĪXek~ECK i>H<4)-遡YCY{d[0x]3:Qqkij'yҷz,Czӎw>N*n}/%& jHR2]HB`qB H9s@yip~,s@bWiueǗ|R!9.-d8uN`U `qz(GqC'R_v(d?@ ?$nl^Q-͡ ͝^{?zhtyXK~b8%Yx0RȥP&:cr[ [a_{>Z N&&s.=ɟ.R"a? |>ʱjds _8Na7|'q٠JK8Ϫ`ƥwP%tlgi3ҺoͰ4حG%)J2`遙KÍs"0 iד](Rc=>!;^o;Xvz@^)M].-FÎKv2"` DrdsjXĵ a2x@fQVp&nH~ZܑUd"]36dLJ* ?A$,=;Kf٩QR\q:"+9bےGcz1=ɇ Ͼg0>`W7 k .9Dl^;1U;K@(õƔh#[a.I(?mǙS/kIS +JAT :z䨍!4byݸN6s㍉Kc~2z&r:]2^I^|ΊYT!oNLTd8;#GQ֜$>T f~{sLTm-yhgeg0 *TncGNF>nԏtJv`ELQ.^qGA{30x |Hy ~'5ByUtE~S)4wI*}`d^ץ&ҷ'sެtI,C6 %&V:M-v7n_M<5}!U!jnojCyBuvxQ4)G"g"lepxeY6(s۬yf&1wGoC]5/ى[5}&dVԣFK&G>:A[*'};c ;L ь5cp`m岡(m@*,o=FcU%OY۽Zfj!>>JV2)Hu>]6BF:+w}t"U8T)Au$ԡ=x:;pȓ[L=*IQ+氋G5VPG 5|b0ȕ4L W! ^sCh 剩,tTA"cĤ q\2D3//_xj0^IN*GVȮ܉ogװN4B- ];7!lBzAJ{R8w30@D d۝7`#m2-Hϑ+S*;p}(h[>C E| 䏄:napݾF~`81p Cg\ T}cI~FNiNTx* K=2BXPz_b|;۹4C@Ft>˖_V}#QQ'A1U }Zj%G7y8((xAVʢ+xҪY$Ý渚.I\C<9O>{[)wZ}2\?>XAyzxe)Tppm !iC N+m4eK齴Ǐoz3| m5uʜ'[2fD˭E|VDQ̬ v5lsd o{~F}(OW.d`팣:/|V7:ۼJ$`&~,`:_fh] ۺAX/ģ'K]W `ݛ;.2L{+YA)Otɜu_b]ip[Z3p2XH*n&)ǽmwm=S5ySI{[B#T1rj5O` u334 jx4g UW$,mxɱch+M wMUʃrf]Ό$הI-q%lhфQOe ;Ydo@F&0yYhzo*Ag~qCvyb 2WN~8зoA;IH/ʕ"џrC8)ϣ4C&̓[.w"PA%̲K|`MIKKݩHaHǷ[qtld5T{200_b:rVES=+$^̱i;^Ao>be9dyr&x"krwc^~#nu$4Kz A O{sHzR)-^jS$bvKtLF)% Qk\E ouPst zP+ I[?|L0.F`|m}&O~ީWZgZq?fxPς'aͻkk>V,A4µ !>y aFq\bb')"xFBWM $:FAjRbg1f0l*]^YzȀ`q{n;`@b1Õv ?U|Anql]{4 0':~,T=YuCeLGf:z Dp+c_na1Nq4{oB^kyM|@dZ\am;uOy`YvF'%JG ~}yHX1/^(c<29KոXlv ܙutQKPM%ѳ%sKaCS!X!Pw33/p'RE<^s޹\@O֫ BZPP*L$Ȓ;:u_RBg,ՠkgn*vA9Ċ57VKƣRFSH2gKg^)!¶޶a9As@4B9 %6\ۚya0xǐ_rC:TvzsZY\RŲ=25c!K]-k'Ǣ~s=~Ylf掊 NIu& Nմv+YQ}IAֳ)h _wFIM'-OkuvdWd7ܺd]>.&J(q7S4}^R֓VPz<4!#^jb8ףīg ]» &8)HOL]rMj [Vs`l*<VD)tSh7<>3%9eި'ʪHL(#x'" -S#ZOvsЬp^$GA|a>3y6ۏ|6>6ɞ5LfU؈fGC: w\w}<`@( `t%BFӆJnDPH#@#Kͦi}ېȘbNY\zcTiL PTLh9g4E5V-J߭x9-GVC9BN/-Q}r- MstĂ:AҫT q`>}%x%?N$/SL"=\u% aTaK+ؑ?ƂkYu$o<6uvp},>ܦm:`*%Jק)~E߳; DG9\nuRBP7f>+pY؈B/"eiw ebIΆNA %|Fjo1{N`P&M#7΁^혴fυ|M\ :tQ?J79F jS`R6⮸ 3ۨ\H-Jb%| `XRCJŰ>2Nп2VcjqbA{͑ Nu[qlZׇ &ŻnD0'Dжg}fi@tz$`\8DB^۲%7HDe6:leDj|;kr $ js)*P{hsЯ#6 _a2Z"%Gw97>xL fF"8w͕AdjdM8a LP7=h鶃xVBwl@ѣ /9r6;jyn3ghC+\YE6#0lFSQ WZr]ٯ4ۈJ۠ǞH\{mr'~yװ~hM}&~%3(:c&y} 2JtӠFxKg9Hֈ0\eʒjx>c}Chگ(_@qxTsw`8]@yutʌ #I_X3ʴ u+"!чkP*qKn7Xi5foPl>AEI[r `цʾJ}HJ\")~<"zԲ- ;l$_Ip)tuKk/qrxzّm,LI]A$w ) 4|͂m@h7H̕eD,-H[cx(rҭ3 {>aYc_- B1+,w~*R^s L!U *mt|L>6/Yyk"69)赌.=V0" KRcjb~ka0vD5G6TL^" -5[0bBܡ>Hi9Ň*ܣindcOؚLвш= hv8/3)lw/i(ΐuRI;a+]8z2gxG# JZL[ۓ49 G|_(M* 7g7&!m%#̙ipeI,SY9 "Cf9j?lgQHXи<OAűv#L@lع%Y@#.f_0UJ=)0(حtu)`eKA Qk#y[{BLgq 2VZtC\kZR=9ͭ {4ϝZkq'()~3 x`gAfp@fadjeAZHE*p"Dh{D@bSm4lj #1LfHΰDR+Z:yܲfU ¨`[mɣƃZI Zr#yUߊ1ეl }ܻ0;3ԱBđ/NgneChj`lB?0F C{! ?6l.BS*jIJJn}iuBS>6$ uƢ5Z[X/vo*ߏ,3ύhX@F ~gN3眦cgy􅉎hveiӥ5 \Z[U>,d4 ]$=hd`rס">S<[ 04~}M'0H0_j:q,<7EJ%uU,bxeo˄l)z\=$6w`wbcr>tNHb3yEtJ=hf6sm*aYijc]W$Z=3`hT@sޯ5 (dCHYb,v6$M}FsJAuU#yw}_|tBvPZs_ Uʏ) a 9؜及=+^h\f9Z8>mx@rbmQ~?h~ZG*2\b]ٹ\%jyxSߥ`_3H?~jN&1ȂH=B6VB+6ې뾟#'9- ̓ŏS %9Ά1G$I7yoӦ (.ћPV]SKv'D7G` iSciU|ptsq4 )KZ-~Bl-0_0hZ/>\}('{9LfF0|8h3]u0u@fF;ۯ( )[[J'f}wLz+S݈0v$F5TMG~ Svt,?k1ӀeهV-j =5O.\~嘝,r{;N0,~!%7lOr@b T 6LN 57E8PieKVBq5Eۨ798Ғ F w0&E@J ,H)-P5V;7NvHJ#Ԁf{x "R&KTݙ1>5hL![+t!^[G_>û , 0O2XcY2w b~چ?BɄP<\+/QGY k_tÁ+Е6 bd31:"暖6D/Fs*czMIf}]d[nd4ٺϭU' zDK"83{Y}] t@$ިݙB`qq' h4~a=(wF_&+co<  :sی;Bw>M&231}Fpvx+ZNM ,QOx`4tdd{- 0I!VLI3/nS1&Ĕ~-t98T=ln{Qtb s*iHZ\Aetԡ#G?ma]c̐; b\._m}vmS.B ;w" BUfm*:Y낞^[ԅ6e-z0 gS0 PMCnz5k8.siR6M*Į#] Xşq .@ ?B(ԗ p8y+`jէTidw^.A7y2?uQՅo̅Ւ&k#Oo2TN q$ҳo|~1d*f]לm97%x|j^Ru}B'Wt.+ZSA1uמRsR_G+QQV/9,2`h߯6*X[uza\c,mL)DStY}CA*bvdDB%HC,Ak 9k@*F[_ܥ RmOjOC9Cy_[jP@Rم4 Ć8;٭UH|oHHẔeK^Vcՙi?RMl=_onPG)YyNCEM,?cX@N6q0%/ a/)vhJmm{7也8?cc,jhTwΏÐFN1C+\PڜaGjQCd"@|EːwAk3T,uclR.| ,H-VlgQ|x%lԆx&%lZvJG&0}[}oϔcTr''ۃXJ/?J -]~K9y A_Ehs?M@!xe{|C_*|R3nW|2BZ^kV6cccq+[c[ kUQU_YH?6]=XwO̫Nxk]g-E/Xp*v6"N:i@qXW}9,4]~O\}8DtŴs@pt70zPNul:hu#Iw%Mc G|5_pc+SjD-m.lƎ~l(fT5!@H[ѣja6CMRKrpSp*VDa8nkв@JU`IѲJ'AH vf%qWbEvļΐe)Yj:27mZBʒX͌6}ރ/־Y1\:٦JS# Q $/'I w~y(]Ox&U.,t$QR^o` ()ۦ0NApKlStw+/?/u+;itGa g#~V#gk~qnPe+FHZ'K_,d-DDs31 =L T¦jlcarf0,5P=?vQ;feyVH/ 9KLxV|H&D4pg*2ܖH2T0xEu *)7G1mɿ7y]>]Zc>.:@MPU)cbi`eRWɍ3?,/f/J0^g0{Xbɝ/ FYhQ 3,tz4t~nkjM3c2 ں_(FHp '-Po54!I/>c?.I::h* |9tTո~<{C{*q.>LW1 nvIsh#pkӷ.gktRc}EVuT2ܯKFH޺b8dy/I&6hx{1?,BأԜY WZ:%D M&#MxQޠؿ3Z8^Y4{ W f.e_<4hƍYÝϣac}jk|T^E}8{ }"fP1Ol&Aݯbފʲ4O9n$Y$n6mk2]P.$/'QU>&yJCOq(.Q E\ǜM\=|JHĐ\V.7ܭ<3o dR8)@F߰[l(][zT-# 䯳K.%g2ïDAe㿞3 ~$݁ |1DzL~)2 Ja]яu<;0"E!L:ur)Q6ɜ4uFJg됫|cv3_='d!B`ku# Қ٭C 2{ HTa~X}L\{}Ly5EJ“/:ݛmj;>ăL*_;2z8F_^ t=aC *1.!@$cM}QoMJBD}˼1svc4rN:QIxA!_k%=Phlj6Qi 7sT~JOYM"98澎B;N5Wa>* k./L/A&rL]aZ*g3jflx# ZgΣ϶KtxJBۿLR T+OT >?ڦޖ{\ Ӻ;8QclX{UGfQurMD!},'b1 iFJs$^nY&l50ŭp6}ݒ 5DJ_vITV&'G_꿻@1\ПVXdX3&7֓(1ƥaOpf-.X& ('I[;E?x-YP"X!6GG3V]d&ThD>''`;! 5{Y9>$|/֕$؋vARhPR;Jf## #uĭ9C񵹤m'R,R6JJ|4g＄` sr*)[3GYjG0v=[lڗؼfuP2`?38. _M:q%ᆝK=#>~k*g`#y`ǟ{+` (]+ahBJ ~&r1R/?WHs}ê &iM|E.L^V 8Xևpy-.uGG%QŨ|}C!_Gl#gȿ*dyPGġ Ro~]~ۯgPB| ֢>3enlاx9?js!E1_u!*Qu0oa;5Od\^lcjn.Sd"Ǒ/S_`Kp ߰2G}0jIcicc0 P:ĂZGu`<TˋZC* ud$,egDe%S@$a<1jGkh09Mt%@ښOd15q7?3Jn~} @4 (,$ 󣧐m+yアsif5ȅ>Yɵ}2=V:V50[3qnaRV1TR-@ M~֞ZA &gE\!C ca< ht3;MJ'zZegH]ߠ\`<UG<\@J8M]omCb?+ ABC-qP/! j 0BY$MV-rpNy:2+#+,1I\YW7m /4Lfś -~ONj_&%Nŏ\^7jYJO*llN#](܉v^ꉋ1 ڴHsE4Dc{Q0Թ/"d{T!k-Dǘ![:$xz :#O'5!z+Gt~f{MOL:|%F1ǣ={0T U ;%?c5w j8 /kHKˮ$g hQc'3`[vnkSJkL1t~85Q| Wp?: b Xbkmv>. :n FHy/c/ۭVIv+}Gm\HcJf{]NIx\gUYx П_|c̡:rN#ӏCF(+16E.ekEW\5E;,bm` cK AX!Qq],X_5ߺAtz29$ɹ2AZ ͸'UЀ}[%Vg^rUSpy 8|e$uÇzuSF)YT6t!7i",nR 5f#Fxcʤ>\[c;>%c!ZΔFDVh~5_T}o`-EdtVhoA!i =bDǽ]!~cr-/x5?0"tóm-LT0{U3 od#Ud /V{K2,:.#[тoZbR'h<U]NX z)V.Z(-p a@jyu{76>h:XdD+cabqf7閸V2qd.-i7|ZpQ5^P@)qmW*_;H#rL5H'Tcc^GmQb;P2kMj]vry#xmTU9>WY?ʒ+d q R{Y-58^51p-d(oi~ Xq{Ȋ\}`gñiVʻv &b}9:c5xfB#ΊEg6JWDX-&(ƣѐPUv(|RUnONB 'R_d&N^D7z6L"xw$L.Q@8WZʫC#[ۤWGĤ[u^q/{9`%mq@KWl6&| Ͼ~ۧ/{K E~?QX=8Sٱw=ECMFx@ݜ?_ǜHoTǯصTȸoG+mH$IT_  RQ?WhT[=2I_7#p$|[CaLde DwQ;3o6Ѵ`.‘VZ:|篕3s>6dCڄ'ڋxlMŏ$p6>qS Sh˓j ]N:6ЦxI6% ɞ)GE ^l?D9L(xgԘK,@[t5m"Ԅa Beo"UfM[ Ś&uuӀ>y 7ۤZvcv*ei c-1+|7T13'o4C,pSUܶQ@t-=$zwE AԗI]< ^@TUeǜְLf6*D;MIa8MtY5z$qD+Mhz:âE xs0.@e:Mg4Ɋ'6 rƞ !$ezՒ;NQ^~۹)]Uط ʎv>>]#l ĕξ?,+RRSaV2}ifeD26!9NŹU=pZ՜]K 86.J5.C%\zh:",iCVh5C`4nk%czXٮ񗟨5=M#yNE[fm37jd@ϥϾٯb1$󒳫Za4;54e?cZݱi񁵐f)Cy [)|zd?b~¤=8@45up"3IŸS)ӝt~"ڏ^)fNٗzeZ*׮kf-ss eDgѹnmD֨i"{5eV-]Q{n Jnh\ᒬVcUpyC^d>/C+[vKH/;]c Q5Φ^0&5($o'S0t^6sBA;@zkI( uK>y{o?JnpvCiLFļ^D7-.z=3u:a޸_ܑ+YvshƺeBʛQ֏1/ꍎ ~E-0ĝ49zȞY@Q!&?\% Wʤ1bk-*3qk\_U rW[QU E׮m ?eA8}~Aeq\C lj.cjDjܛ;$µV2Jn@SUxκ^ (D޹ה:?CwpShPzCb3ɽhS%y%:n}ǎ6soJ+27y OA(A&EWhyճ'1e!n`^JH7Թq=u('5ZIaBxX%M'o o+oU}XZZSGt/_fp@Ju}emu7HvWb䃅"S9$g8Z0?wBg,fRMM@;Z_W2s@ꮨ1픶F2 i(6ڞ0Qo0*A. %jPO9ɑBIGJnk9D)\wW#{7-d'cťwWVPIߊsƧcK5W\RdӱNc"t&<߀"c0FoʱHpmJ v-<vspijw>Ξ!; ڏ?8yx5O@%j,[D s3";m>;,ZT b`!U|&WޤR-A,3M44/-~q۽ I{gK"y~=S\-a$zb )ps$X5R.v&( ⲟimq |IwH iMM?EwH}7ThT E툋~[dp M4^pŖx|^+v! nŪpQ -ϯa۔džU+(#co.Q4)9VڮEQ*SDŽ!F*9dj5EmW-dϼ9yr5H=G[- l]i?ϐŦȚ*xXzX| ={h?vC,*bT2-=2CVazh𒫵jt@"/GVAH_¿m L88-y⼲xa 7ج"q Z6([a*:gs@b+cܥ2d$V3zlxgfK,s|K=enhлD$f3z-hXY:~jȤKu\Y9Ƽ_Crtޠ`ZSiZ͂c?]N.c0x (K,No`,GN0mly3.c ήS:ϝ-w }_z`BVԎyK#XzJ?`|DvfP[M5O;2}Yu /Xi@TUcX4r#AbH.,`*5VEu FV`TQ] cF;kQa"6n_Wh;4f%Õ=Uގr+f3*FQ'*}@4 0l#6A2szvE: TUh0[Tu*<#dFG^nQoƒɷyc=Gz1`>=ʮ9[L-|Jp[ӝZxg8:R ܎#q+2V60:MP{HzgK% HіB{)o ,,)5Ms2h4{BMn0Ȩ FT>{RwocyPsl-7M$5:m`鬥(`rdvaJk=́b:Xz[]=ݴ K!cXCDƃg`w58ג;ZӋt1y$Ǽ6XIP w5G㮤Ή<;]ABhߗ9<4.Wo)@ S+\ `AǨ\}D<(!i̢; MkHarxV6gkJߟyaɕ*|h/Ѽ\2>\YyJOlӵ*;/9)Qǟ6t=Dʒ\8B>AS7$g7eSC5`6[ }S_э:EdUK"od6Ɇ֞8B2wێLyD3ozC/23u3?Y$mgs@Q]# Ԥs ǎG!Ȧ܌p'OQ~/ $c^/!`uƟ=GX!÷>]֘ϋlYŸSGVd!\ruZ ̀8CsHP#S h%*[:>yãCo*^Go-^Ȝ|N '¯@`C|[PҚנ'6rNq\C>R @ Ը 2ĐJQ)=Dӫok@Q °1ռϱ1 pdJX#%cC[9V*>JE{??b)\X/{ ]a:Ͼ\3:l:=(pJ5\qlF.ch LF"[vjPT/q!b{H=eIWfOdNM jT"έn rۦoܽ2-ed41(@\^\#I:~1D*Q["K{c! R2 稅BگWO;;)w ?,[9:^}R,Y $g̓*ـb8 l 03U%ߥqMa`5c$b3#L2q}3UntB&^OA'hթS* |58[ߣ@gs\A,tz崗 0n|!-Fx6L >䉓%Gɴ7h퀄 ]UJ )ʤc鋆IeKw],#䲝$Ccaڀri z'A?֧ KYƎG5?H1mb{Jj׏01|@v\&L܇g'yۛ̌|-E 7#*1>/4 ԕ*wREN =JSH:ed9ݫQ|MFLw&qcFV-d `*L±g{XvG0C<I]88oםҪ9KU#RW U({ZuXѨs" tʙ}%jL,h?@Tnz0 a"OmOĀ:ɕ^)tEtʪ4ʇXvk^^vQM1m.gɔCC:(RMɵiߨgVnKFr: ,_"g +v{=#;Wٷ7th?@D,[)cCɟ}~Uxp[MABkXDpRu*ᥭ nWJ'?v ~d TSCXsJyhEvXBȚ*зx'ԹI%\њ. U@^Ѐ - r\:(OGV6OrRsN6%g oS%($9ߤgfƸTS cg˸;E_d-!Ab('Ar^(,)@Ovd d?ij1>Y&uI})l6文ꁑ>g$cFߛv>wH>oJ9FAq''>="͐0AY bYpi/Wɚ?Qޜ>v5:ַ.ߙ=K ) :?yqw Wu(HGcM.NɫMֿ~p!> IlBggi{|jjĎ,Y|*w^eu,w1jWVI.$}H8£"k {2Ns 4l7(p/D:" J-Ɂ!%8Nm>Xp ٴvZ>.ˆ|@o0zOU\,s$v`[;y^Hj]Et-oM}1g0M``M˾Uܶ #wy&EV1XB?=R9Pl{HZ` m Ӱ\! ӗ#[{M RgGW 0w&) =gGf{1dj,jN2ʮ݈6?M*pL;=)gߐcLx]Ǵf8*`_>+&HXMnKk{+J&Z W O43@F!^<E[B kuնgzAk~F xoebc<}*w,%,aVa޲DEmGa4Ԗ3sԁ׹/uOB@',Ϳ <*zѤ.G*~G&~TL*Ha.3UH&C,Jn?hx&LFs.t^{w/7Ja&)]oйM:X=7P:2KՉ# ܛVe=u0f[iCG)W% R)km^7)Ƨ}5Cg >ryq De7HEV͕[N7L C)Y#Gҳ+:X. Airc5*5TmNo P [>6㼅)᫻" Fߔ0 /m&|\RR~CV3.m_ ҟۧEƧW\t|ca_hH>W=&,ރE'!"Q`g1H;9lS}U\V)9pS/gR#sgRxcU~#ϙc؞p50U lAq O HWM-0"}sDU_9YN΃H_.EvQ$/ )gko;xݝNjn?(OvߢU\{7'y:ڧۨ-?R2-"pj$3\kX) \00w3I\>t#2g2h`h~Awc;${i9BD'3}Da0?V=x8 [7*77S||}ܟCT3H|6@q>#,zb4> 64m Iw{|$(n~:;Y?NA50wm y q呰wd!53N(DgK(b}:3ZZO]ihN ]s?`-ϴN"@i7+Wm/H|jI%۷ue4y%NvׅH)|'6\B!@M!eu=$h_:%*0Ҍ,=c<@?!/w4]~A {ƭT)He2`  I|j` ~xF 6(= Օvɘ(FpvӳXn[݁#[Bd8TFt}q_((;HRu OX)' Qj b#M}iVC%ZDZ@Caq{Z> {77=.{DO]UoE:TP;AX g#V=}4cMU.N36sZpXM#A +KZCGB)V<Lm9poSc8NP)gp lZXcU7D356Ct@|'XǀmrA c\oO(\k)k $|Qhe|a뒨sWOZ4cQ`= %+m!&̏-s/Ji At;i(Q:-iu&744`]2Pm7lZ' 8p x_YU4KEӪ&SpEzJ ?v-oCX=߈J&qc8Ka=~xH =K҅ҭ9~nK P c"'as})X)_xKB P. f4Y֒VU- 0]ÖrxaP}@Re9+S[ Q1Y?(؈kkTN÷/A1e=;ԿnYNCV73d ~6Si9*H4WzK u?qt(=}*GwM2d5# ׉$$D \a7EN. 6 @i/dCJ86ێ蕒LoL./+{@0iإGLn6+݇>Oaw1/L~KUg! }U@*Gi蠞ƾS=)̲5Wxl ٪R?X G1;NK7FXbew4 ?FݷqٜH5NÆP$'\*Bô)-ExHV' G%{,=EmǼ*֊iD&w2vA^L~wz"ħ|b w E7O:#K6&T7t1C'QhZ):jkorn Y:wuċE!atakI?{2}.E '[eò-,io|: pC X1@T8ku{b\xmt*7\quKM7F_SfU2;򵁊v›j]1?7wKG? $->2悒9iltN㓂#R/̉`S|w ^luiz| Y j6 9FII)t}-?CtB3ۜH(,/rS+E>>R 2yJlL´t ςnf2P!h}&ֽ~e_7٤D _Zx@d՟F7oXO# EH_`>mhlOxvh˚q;(]:Tf=T!X F2zĕwÔ6PWܫ{k'Y>+ETk \n2l q7a_2Nf#U@|+*Y__Tj4Uz~F0vM)j8u]ɪub87En͠&cp?sWvq2؎,\`03I&Lc%Ud;vE+ήy(SaT>qD&ƶ(\='?0i+`*blPWHp$ǥnIx{!>@$;!Wr,?9ugk@% 3Uv:+ !~F]1?A1^4w$<ee 5&%z5W:€iu~-r +<03\s=޶ݣPIc@@)*莡{E (rijЯmHu͆[0L\0 nӄ)د3=/6 n%Q*D-,O=63[Y~ekp& -P^sQy[`.ޢ6U%95Pmڶ}!\@tkQhSN!>9F(/7 24tcn\7;Y@ʒW1RXl(pw玐/|JFKBƦ1MYS}a=2e5ƕ}TU pOjA'm{J *!dR]Opwp_v>%uMp' {1䔭 8QA` <%DA;b|mv񮛒 n8&A~Y{engk'6mňnWYe^Sٝ;39+bLTV㕹J0>!FdvdU$U'|mCl8Ԭ GВ3)&Fn\9ȋǥl^WllbW2nk5 rnJKKSQ|X7nUdMCǺm䄲xxzΒJL ,Z4_&c̻^$rE('XiuwawăȊ޺HIԾo <3{!Vv'g Խt pkho 8irc:ɳp <]`%ۗl$~U-ȯM^[wQO%賉0C|Īէ[{z#4vn 9 ƌFY#W@ =,ů*6I®RiZO䈪YZ mm"Jf&dFsPQ# z'N Xz[J eօݣt.' 8Zf1^B4ӢpV#" a] Um7O?wv]@~0x(=!K 5'AkO(/ J'H6Z>‘N:lk'ʓ_^/ҁ}3mO䃴`ҾIgT_zpQhXʞx$*oO(p{0&,~+a(U}m6xսD[h9Pp|6C{fs˰e+xup[uD6ZRLȮbe[Lį?ڜlHc{Hx'l!OSZ0#]WjDR\Hйv[a) [>HXzޣ2Mo= 21T)e.n!|\ )rj-XBߟ,k^}ƴ&ر) U©2%h~"ruf0@әÉ ?NXPTxW: G7UaLTe6+j87p)߱@"ubSiZJpr]2 ɥJ?FGֿt֩Ԍ CTJ?U#/B˹ϸCEL*.q[c9)'•!f|Aw?v:7!X1 7E&1lYʃb5A~"Fn reAbwTb* Gabu {ňbѠ|.Zڐ qh'S<.xajZ 4ovƺ.AGAo~|#4BF2H'_K0Vwtz Ul,&Kڑ`{C{%Oi S|.E(ٓ\ddyNGE^LjHa4R鴔b1}~wYMۢr'įS83@H_K/ כV[I>.2(&2hynSK⾮@?2445SG9mF*vwLjRmN5/'@=:ADEx(z]11Ex?H%Z汩Al~MsA.F2]9;X Odbϻ"MsW)JC$!B2V7ksr.re((!LFO(8br *,RZni( _\gk6^]Uu{mj Ķrv{uh?' 6b/B/]x2IͭB[8 d5ɤK`:OehX-\Hw}6:~gaP2QR={N\m\dxǏ84v;"Vc0y:e(H* ?6#a6YQ_8QBg2Q3_P" a Ҝi~$>J8=)^#,A)Ymjxm5r;0P U0>ΌuyNnj&bsRV6#=$. 3ŝ΁|Oevŧ`x35w:d5wtTlU.2+wJRq:1]vq |nᠡ6~eɺdn{)&sKy0$=rv* =oJaNU6͹»_W)Ċط涎oٰ +cYI=Q9ovQ:|KMr2f/&xlr߿?2Q'ôT\3닢)?d~] ؐ^t0ZY"OLR{D=kL؏?N!G'BqFkH;ͷhss-K9ZKV G,TyQV'to zz*7o@ j;&zI74/3f \NDAIfdL#`QBL-ঃ>l;Y@cSC膴ZmAy#T*BYCS{c6}C<#+a6s(SsCi>;{,%(-IJmEkVs%AmpgB(7R>Bo؂eXd0ԛ )?Ыbgbٗȸ2~b`td>lm mF)Y?d:8{tKUΖ>g=|T\jՈe92Ar_G̖ [*ܢy rI%k1 b݈ГGʰLf4 > ?9E^ᛤSE!uǢ*\|*%t*zxkЦUK&p*S%S~CaH _{T6kÊi#VVK P=`qRղ3u5JL\T089t>,ZcU@Su+w! Qq95Ή1"ʹ ee>,_vBDJaJluX`e 4Şeī4`0% 0[H-U1Γ|G#Þ+p]p=bI}4g$!1^i#C" bG-2X PrC#D?%YI0^aI׾-]E0^TbA16SUY ;~Q S " Y4 %PsegYI>L8~:DatصHcՍ B C":rzQ{ZPHUE|t\$?]_kDڄ݃8䷤ ͡]P>/k;]F1raO<&FʣS9/[9OmU K]#x}k2 F) q)af" r&d.YrgC+tZn/vZ2?2K 7 @R-|{kůh46V[A\(Wt6:Fcy@K x$ds]w&ѹsI hɶ$R9b-.D0?ySs?-ٓR3Ɂ BU7 43=\STS 0 .bg7]o %5Pe%N+3mSqIK[u:](Vut5UG9g^)agY|X!o1-`*Cʘe$CVd&LbhDfwݨfW;{qk[Y@6j3$9ĚScqW yimdo_:uB<$GHy+Sq8A:;}*YUIka}Ka٬:v:pS杀.O=VYtķbP%5U6@`*b)h2J9VY -= Dcc:ҁ`|;ZIl`Q9Q=HcOMn!?En}|M& lekWi*EMyП]Ip K}$b@>O:W f_C[[ewlWEc`VH"f؁\{--LpAҖ1tGeDL'֗HLEGwD&~q 7dg *E{ҶW)WN=_` {ӊexjw7CEmJ-r!\UqtpMӮF8~*nB@$5$LcȍϼdY0ԓC DHՅ~L(! [J|ԄKgA<&q_/edO=uިG`&~?KpSߤ a3!C_TJƯlY>rHO#~rR|LWX1mצ2lND bRYދ+3ZD~ki+2؎la^2@[93LBPhEI\4Wa&oN7fh&)/,1_t w֚]uUU; MR}F$'M4XLoWW-2M }j'HaHFe9Qn 9|R/ nmYgx5;%*g5Z&D^ hu=k!ÜM&zvg- K $ k ^5WpvŞ3jg}̽Qd Z6M^'DFäνx9x.0!>10EYkrzLa LJس(djf\{ȞҸaEƒ7o'BU1m ۀ> 5 $k_~I\KQ%n0]/P ^8ŭYu$h "W{ ໏Bd\';hY<KVsÓwʵSjPipJG0Tj./axx*"&=S0_Y E,(R )O!BR1ESJu~ǭJ( Pv6?d83\h[8vc7j 0fb4t97O0=4HǀH4[Y7) =:w<ژ1qrkGN[K@lSb/cQ}Gm:w"-KuuEX({o FکZ5{ @P8/K;ׇ;9o|G0tv"$}Fԓ J[ P)Ɯ͊VΑv3K@DdԬR}͌y &1t$/2'u,"KG6dD#LPdڻu 3VI'4~g{?#lnnNAakRSn((Xxǭ2l md+T)HlY w|,6PЫQGR*[Qdև.CO34T"*kJE h@,i۠ľ>;F{>/r [mr_7\6"bכ,VzG/|h݆)JjsؔEm_ RY̗֚>W :;'+,,!%P),N\_T[1Z jSH; |XK]vjxM NcYiWC Ķ]ćlx&{ 0+K,ޮX)m$ɀ' 6OGX4zm[E ,8IWS :|źQ]J2GfL@}mF#ŌwϿgDYZU7ےлG #"9  @PVX#0M.j5p3|s#yt/675)j[ nlILB'j JVn|cUݔYzb 7"::!$Bm<ńo{JP-Ρ"aW/T4"p=ݪlg.i8-,$Ƅ󏳳&ލc-1Zj@R%`{;h eّ0ۃ"R1QPەO!?z${,l=, 9Ͳ/E_(A'k?ʟB2~ӄal.n!{^9$ގ0XYHLܕ]ystޖ,ASR8H%BGx L7ߓ[B֌S6 F}tV^ 3umxװLl.g<7Z|i<9/0T(3 InPuEIY,Vy͋4OLȿf4kMo.wRV>dt`;J5k?a (|d>W4|@ݮ[}Vɼ!s~Id!齸XokT`3R7Iü$Τ R*teg%zQ]!=Z`A"V1%&R͹PM '#A^h(5:~Yah:{苖VS6B?𕀂u_;"cpY?I*P4vDXǸFOp\\w@&臦lpۛX؅JlZYg. 4q@< ܡWL'{8q4޹Kw3q;gђ65jtn8SP*7}.\!W 4>O^`Cg$?0gGg&=*k{1}g G\9@/E􎓳׳!\3L"4U#kL4'f!bY.Mʦ(vw;68&t]6ǻbbNOU,Tn\_ui>%"CO <8<0J :{$?bUjeR0,ՍPDNݫayj= ?JeR *1>'%t$5]zyam`ki\>n ŀ:YR'Cdku\iZXCj\E6U;*r^N2¹Hf1?=۸D ǜSi p@X PeaA(_G¾  )0$H;KekK]@J%|S9&e+!3U A {g 0sGJy"UG;SXHhkxF; }_ Bڢ3@%˱(ROo3A吶9v;KD.u ABrZq J kޒ'.D{[,RDJd2hH1%ϓVЗ >/QD;%VUd`c%ٟ~8XTH3E獘|ZaH>5PcN tFMo9߃?7q5Ȣ 7 ў}=L]?R}r?rǨH$b̠7@ttpyy8zε;BfGdK)ƭ@&F3]θdvù! O[=SB7{| Ƭn#iRϹ`B8 @L3eԊK'|Q Xs ~ b;Hߒ˼Me r;y8 [&Xjuwt0{-ѐTS4{ffjBNH=*;M Ot9ڿ2W?˰΄$Z]@+y7l5BMݔt|Ϛ7F Փudy( L:WH"nEA{f/*R\HʶN v'FHB vFtW6)dyUI qN`P3eΉ:n͹Ʋ!z%ae=9%mS<+yZQԽt~5xHlpPMB _8oǹر.jˊ&W&T) A_X2GV9ӦZI|'«hLG ;QK`^4jrӢp| ^ 6Q3SL/:r;5@DtxCa`ljY&!:?K8"6mv`ijOW\ȔL {dH1=6鶅zh*O@{{SXﳆ'6o@- ,Ff eOIPd?k};7aa [л~_V*}6MZn$ï4(৴WV'.U@xEGšC:pJm"T2⨣ OjHc xd: b->= bqA& @g+у l+1:p߸}~>L$ 8U#5-0fɡD@ړc$i :>BUxmU'}"xW4*+9M6[_!]ĮKWe+}M`o2:z8'NrB4Brkọ uG:vך)ZX(At<a2>PE̛ĥ,6m '|y8Bf\Ɛ6exY^ 8J-{96 i>{}i`O$UoSé _}8;˿0]ZE5Iq<,6)-zy`6+0:)|k:r03?ьU+ MW$XX-C >qZҜbxC="܌K+RG!qgZ:Z,P]tZTB-22tsD5ͬ Wf,5^I09(hul~Բ;}Ӽ@2/qDηF"۫n|/I͍䃿\)`"訏u;J4;UW>X=Q yВ >5K. CX ;cZnY~x}H8U&ীF|[5]E)̤p+tg&@{akӚTlvQ5By [=F7,.B͚0g}!kˍtA˪2v(4EQ˲fB &Hbyr=pV.]㙴BQF}uNLhE[v|˥Qm`6| 4rcIU `"ڑ/Nj{L7y|,BxykVw6q{_BsIM6?^x7Xh~+ˊ;mR;;fPU٫d"i.T*e.üCjgS97c`+s >U5MYA]:{X,1_ST_>1!H@j 472w)vAśDH(J(+iAa05z]b 2!ʥ)|︫jJy b/8qx0|?..O5Fި}->"}ʅI29Wt!-tR+Y s~Wa**EdsѬT3^P&.m#[ wb^0iUuJBn>شc!0 ʍpnυ`CڛD1=rawV8 uꦘ*kb3f4_-UB1%mpP̋23 RkoB/[ݫvmZ"#r$\M1E<.%nɜoL,5NڅT{ mcv:Ν&(wƄ@4dzE'1GT4k&J( ib3qYoѲvuvFbw,N}ڂf4 }jMRt /^1Hx>eR Eqo P]F\q{b [z:ZPIN2bʂkf (>t|F~t+n.o$4.ЛsW8 k]27 ;j{:５ TʤAKA؈-[<JBLOC^VjkbVL͖ʀ 1~$UHƶxP}j~"H';CB3Ÿȹ~K/nE{dR+{7v[pvKIc#hB׉v &`K.S}b{9PheXc! E\tbΕGz\7!qԣZhvTT-ͷ^{!/pn($K0jZ*̌D (l|~pi+ƫv1ٌ1,ʡ?qszF V _i+4e4'/֛zi##+U#s B12D3mEP& n_j)u1 " D^Ww{-/FI5.{:^b<`ݖ3.z$Q)&Rñ`< -VL Wy0_G8uH󇪲_b DVSb}i]mn _DD`jGpsPFޡxog 5QjOĀI\oqڰ%yFGdU:|aU-cBjPLwɳ|$dIb+.ΊTs…-?{hT\-oAAaFr }m%OظTO<܇Y|_X\IYLMtZ8ާ3e趌l)l o\{ gi2, "q#e4AVy~GNC^=TIwYɪ|9AoVAw}=5_B(Hsu|^S W,h"ȶujSAoַ{VQjbl#10ߩYy ʧV#W#;">dP-[Abwz(hG: `?-|UGug O%Ʌr68v.TFcN`"1xA+U0ǙhGꀚ+3ZnolUЙggKy}10ƪX?mD|C9CB40z0~Nd]gw 9XNEIb^_K0wg~leʀdgm#(fģpɆXʅ%t"j4KlnRiiu$$sĖބ ^7ޚEJ1J&߫GpUF)})vͭ*gxh_ON;NKS Ww0tQy p:kz5v1 }Ȁ vX۶25d (xX7@TJ'lEt뒻IUxIJF_ xթfV~5ENTnnv:0$#(מhZZzBhCg xqh ;M[WN _n\ HH9!9zvT>[7צ$N1 #P'J!׾1/.Ÿ ƐU[F/ cmŀ˕}&.ҙ p?Ԓ2,!Bu8)wD.zBS,8ueP[AIAdUk+0Olǽov"Iw kbC$e*X!h5\ǥ$+ZFmjNGfuPЋc:lL}m䫞eQPACop*D%9xc)FekͲr]Nvgc~Qw[E(I TVW=N3R/aK5/Q(u|cK_d"Hi j ٠Q!immO[.FAx]{ߧ!i*<#1VE_! _SD@>؆G'=EN4"ap=Vg0%Wg*_E'ctk vꧯ=)u_eु}jSpd~if3;-n접zM 18;wFZDr , 硁/QֹΘr "vyGƱǟXGxOH5 y,$hʾTMnC *@WQCTnX:)%)̰ P+sMV@X;iK_aPb/q SQޣ49gH6ƌ=fF's Hm>R G!#a fa5.p߳H| Ғhw2y썖Т@ۺ}r""|8Sm M̐㇦9;Vs-͏IjJ`o^]i(1B1@ SQ-gfLʞ)2}޵;B$c@ETM%nRÅk軟! -?0s˞=ԗGT͑v8r颙(Lϑ !3gC t[[QC@QvN|pXu]zNp1:= T &nD\Hm+GåH] elUt7%d@*`INSGo0yU{?NS0`Qlx.} Zx9, jRŌuc Ty"K&ݟ [DKNm"cNX;Xw ^r fW.ɵIsH(l]Pӡ ߳f t0*Lgst|_iNQ gEkVM5l_"7>}D ʬJk|@f0 d3:5[g6X1ѡ PXЯq ,qW [qTd Wֳ-5QN%2 1S[pi۔V7I@̥ Tf9àL{ ʠ:H~8蘓eQj&,l391m`?>3Q OT~ 43v*I_+SY }6j)<Q CYT*Sz?/N kz{]a MZK4+C-8w[Cm?hCt)?+ogLJ--{;2&UOBs &WVq\~aKgepyQtgS/" 6.ᣏÜk?DH*kQOqn?f*!|<#O'QY>}LmT94Mꥒ!7xwG{d(V,|OENgFbmgO5,Տ7_ ^ua̳zUf:]R0elt#t[6aPj#^ 5Rf'M\v"R_?5HaV=߾G"J_/,!xRjW5, 0Rjfx?F^ՐRT$p$W5>KlSWO*}ΎƆg~WTu+9X{[ۙS%w1ڟjH,4 gWqzUy&oRbЕIg%DA}vaH  ϔ^^TA[{~W, 7Bq֣䷯k"a`yN9H)v~dyz0M@-ZV]Vf3xI;$SJoF4!۾`.ձj#DݿYDkk}85/]@xBsnvoבQeYbhN_5E&o$2C ˆ`Iկkd~f(; / ,b\Fpcrck]BaR26›:E;.i6pu̵a!;mt6',u_h)YOVEqz Enn _5FcnAd5 9m_x5+@yQ<~zkHiv*׷b)k%in7JA Npeh%%[Üe&LJ= 踧gEj/V,[%-&>O$zBjJ[.dЈcF{ ;ENu@kDt/Ѽ b, H>S5C+bFkw* 9;γ{vU u%;Q8ÕKc9iۜ^C-b>!g$w&澞(AsJ0Y^i{+8#ӔSO-6G5(үe[lI-;ipdl\08NՓu9ք?aFhG&laUW'U@B^@Vі(4H۞ULP:F]}L |m*" ^DMn5vM jY e )nc zՔ)_3Ŝi0zj:<sթ^9UԦ~RSݭ +fʹZP@nβPʁ~gDhS]m+O0h". a6Emou $jF "=3&Edl -G$L p-QG^5-Gp)7HRo Mk#U?d2R7Ѷ:CPoTBsW;wJ ,=Y.Z?C<9$ aϰW+gȓTR,f7\QOnQd7KbotDg)U*²^'D-FPh ;O2Y&r#\gG=ج P$?Au6+}ݡw㟓D9Rܿdx/,S9+^)(*/qOc]׼_ue7O^4TVCX&:t)jozqiBd:QuLˢ&شWpo-"@U+ &̝o]Ϟ  (]/3޹xR*Qp|?TE= tL`d^${f0}Jsvlyoo":F>M}V8j皕k]W;EIp'j.+$.pQZ=_Hɳ2%ɯ:sן5)?AFo0ZjeMlZ AjԿg$YG5Ja|i > =%nt<%7:::K _LK6D"VhL;Q*<# *9GLN\,:w&W*XHBni%BZY0GgB۬q`&BP3Jb8XJr͒%[p8oUMz~e%(d'CFvg{$kUX=tSD+pHibT|ɮ;_/OCn^(,ٷ%mU`(nrotjWmDն)*rijJЍz> %~CQѱ!N-n5v/uM6uD iʎ=6VXcwIm5HGo6;8絁Ȱ/-u;|_qY4J͡^3!o -:+Sg~P6@1P/ykTu8MY$Rm.ٵD>\&N*[HYNe,_õw"!t$rG#ͷI ۘP[ʦI6hGNa/pG;ϑǑ1! VWje@c`wy)rJl#~̥xԚ'Hq@ Sw0 ,.:0KB%C;67U×Mhm#]0v~PwћFֿ3?a=5Vpbw119MℊW}xA>E7޶۲6|cft_+I'FKYsSp4UKuCfA=я9 F ykq`(ٯHwWVU ~K- hDo=RNfs [G^ y^?NHY ]PJU#}L7oCf)azO1hZ[e ZW b'Q:B1҂@b;mۏ.;{b] ZT\XJwMaYX&4`zo.;r)ϝVԀ1i?ӿy8)׹uE7Q>H矌G4{&|fCȥ&Y-vB4l)qs (#/sN !wbB34b_j6#i&Wrsډ䋍:#ح5 ?]'!r%5h~Wx,΄ыu7S So|0O-c7%1 vt}jֹ*< ̉-̿n p";n~뾵: &8w̯%IxUN0y5ZAHmN@5,Ed$~Zf+{;@5ڨ!%\&0'Go@BR?%l7vF~v?L!>ygX&~lܪ{>Z\P*"Kz::ÉBϦiaUh3l)TI {%YUQi^hk#sZu0/`O孀u(ǒ2ܐ=j[(Շa W>oVG&?iښc;͕#[PJr)Xq k|?<ᬺڅ̅?]Uĭ1p403?5 [ꉉzp LE} S,z::ux }"LWO8ebR1B+HHZW}8`(K u6d퐒(W/p7n7G||qvMHt"7d#9ј:mk bߪاveƷ/akyRbI&0IQ˩Ŀ⿋#2^gqMXć)w&l x:'D LK;y @J\(Խ&ca}Of}ܓ4KߩYMٷyArMX\/7'Z슋~̷9V$ȪU`c6X]|2a#*Uf v^"r4q}uVEwl9Uڻ@- 5vN)׌eMMSoOSH~Cd%t$`3I$0NۼEt@/ L11W_V^R].2P^Julm;~fV_A?!2z~^IP30"qAc]+u#*:U o g-#\w#?y(_Sd>{ 0TΰX5YS? #fI&5w~T*<)CsL=&/Qp݂* msRN/GB<Ĺ }Nww)6 +Y覮,m bؘ;8= $8s191R #bC;F" m)e6.ۊ lm!+0dzd+ դbTPx<:hM%`֌c4)kXQ͗PF,nW4"tJ}Gk.n{- -waL[/0̌vIuLG̹34GFJ!*v[~U82@n[sL vtA 3?,["vV y -w) u1! oFV5r)_ib0 ~d֬DK.acײOolJ4hQүv$&݀$%]Yu=̤bk;_/uMqwsԿգkp5!@)~=- `Gzabp^w[G5ځd0l{uI"1n?n8Z26tCnWo+>3&e8>FOy?a۶hS)phg<񐶪1X_;b6?-+6B~Aô=E_Ar o7.yYk^>"$l= h},oJ/8+472v|l;sѤہؓѧ4O]Q1 .+MÒC &v.AQ5e'5KQЙ:(BPINԸ1}x0-WdW7.j̀{- Mdۡ{ͺw/4.YvdZ9~M i_C3=?!3!66d_xU) k@.5[7y9w$dR̯w&%jkۀX+u}j0XXk=#iob%ѧدkբ)PE#r1kEttVq~;2aaCBn*;QTh[7y ^ RTu ɡbtj($pU^J\K RGkii"hEM`  O:B0ܷ%,D脪UuÈ^x$SlJDf|:Ij"U)Ÿr9RҋRk;:S%6~U9wgJcUK<5E4z4׎G)6LD>eĂN^,'oJ>CJgO w 8nꌑ$>L<d#FwbmKkEvVPDB!$(4"8az+۫Mk6gu/Y}$5z$S|ZQ,Hbz kG}J#>?Ncz @`6b2MџJC]JOLa gxp@M7隒 v3~y]),63Deg3ƨ{YUfLsƱ\UƗץ~[ej.>f\TGt=#x~f}f-&1Y؋q˞tJ$ wZݠ7{<)fXz 6'B]ո/kU\u(Eiދ1pna~wޚp̛Z("9;`TY oI ja Oi6⣁kivR»L67BmWfsWSۂ0nTLA2- 0L3!vJH Ca#FzJfJpeRfC4uwStV.뺉M&[f#^3|HcHIFkr&ȸ8F1jq@$݄ ՂJG)V W[8TUK.G&˨X& =Yꣾ?"{eI/; *u&;B_?/gs5+ RFq`ęKɠ̽ݵO%!a@:p@I^ߣ?gBJ8 L~Sp  J Y[K]Hnӹr 8MR'1~BRƇ~!D8+lMu+dKl /(fTf14TWI) 4 qa ߡW퀱ԗ0.&ަfKj`Hy>S1yAKíIRO$' (N%H=w4 \O#r }kf=8͘N;g|˽6 1""}mq2蒜J(ye5[ c KSV}7(,0C((bw4Tyj 臡_Qf=09$S|J7 o.Ki$ 3B~lۋS(=woDd}B\p?n{G*w?I(Lx)&0߳gD-ZGu"E4QQa!}P(qo3|, ^ m#EYCa=}rݎ3[;NPqQzN_q-(s/#;"m9 24V$x|ާJjcp'$o"ԃQ6?FHL!OoT1 PXb|/Sz }5F^_Q}GGO;0+huA^/i֩L2 y-9&Y㩈Ol6 t ohp?nӃ9'VTKn&cb-_5.&k4&90^sN zKWmq͎>nr8C"knK"n4$ۉ&1M&J9y˳ 7ImUZ~=NᎱ@wq~09szg0UbvdY q4:6OGǂ=lw<}񨂕꿊zխC0!ŵd=W_o Ld;*Gt:{9b[ӣq=f䬩a)  瑭My5}^@*S!k2ŭ*E }jv5w/"ZPynreWp <*9؃ȄZ?ғ\Z%ӻ jA^*ls XUwcȜxcWZZi..s^Ǜ>f|(jnE21=5Svh9㻵 !k̶}R`MSz0>g,&d)6>LVhȄL- )wݣE惟tɐ9鏜aqon KȒ tNoY6˰n dwqӴe06K2i>4n#%[QB-I(V _BUU4W1P3] &2o ,_[?`r)+GARej/JZu Ul}si/\@ՃvG 51=$Nɶ1pk񚍻kS|3Vi9,pY NIi}U Ga˳lIa'?SnKK1%UkI}a1TMuU<%=NTXEʼD N>_UXf1oäঘI~ h$1Lnr(Q1pMݬ$5PX}P<ƕl# x6gCC_>z%|g0eڴ:sgCQNh"x`nVE!a<ِ.`l*gH"s4 l| R"=qEPsC᭻Oeb-"wKȃНH:vueRbJ$:A; i( I}ƀuhiޫ8#>+L4([`ݜc/|P:jxL'{đ$~짙`0%&}U0pd4m˯0ìw4ӂ:(ZIdP[9W^hnC: }q1K[k`4"vo/hG6?g|wN'Ju ~iS"9`Y* w ॽqx܌y7|S Vt ?&6Qb M-_@(9})tξ. $ݕ.]k K):y֘Kޅ Cz/ `1 f -XAZ˹gxⷀ\1)XBBtBxm_7((XqEf n[;]6r~>oRei^6Sʭ 4ўP!'>ZtP;D|'m)e/P~@EՂ֢$҅14m+ I//yj20uVJR-֚r#['Bck|X9dZDv!;ULR]{5z_V,Ső<ȼCT얪O(?71l{ehHs\mCڭUD8/ "ėwNJ܋J tm"z245Pdu( ~d}5ҿqZ ~D ]ū7W̳)쎏h#1UH::oŠr`6%* x.cO ,y7' ډ?zF -d{-l`2yyJH֎aP|4TZΆ=t.鮙z֔N2^.)o+cd _3׷pFJ,.tL2 %"NVAynySKv- 6bHCFiq$/L\ZE\g`?O1w7+YYvXw')ۅHíym g%)XB"6IbW0w|,l>e߰ <^g8 0yj&~tӼ+v:V\nqcu4eG 4iߗZ?Ge{a4 ]e>e]0pޑf*Ǘ>hnGuD7vAcR oHO«Af!йmF?8p|#{} ZA4AxO;nN7oc{~ܡaP/)o5 vsS:{W y\y4Gwb~o5DbrE廃^Mœ7^T$_Roke[P\p8z!ǞJ+B&.nv٭Wf.ד@$?ݏ@ns3痤]ī!VCu;v ʻG6x$(t@ZZ <$ ]MO:+Z)//r~mּzGfeB&V4&4GۨBQtyD @J%EKC| ZԂV&Pll[gE(LNXnm6Y+Ovnb=NHNF2֞1)vX]JS돠b% Wδփ?P0C;b.G2~"#ԒVHJ&^YyTh6#z- BuX hw66%x^,N{Qt}Wt?a^]_IwAqtɯyf谏\1|&;+ q%xp4ui.Gr;W/).EGB\nZT~6(x1u|ջ8z{Ba}b~3qcp5MTAHbo>>Y52o*eʊ_ǯ{v@u|,2qIu4־RY:NV.7lj{;JIfs, 9@7bAͷnX5F:md;w{bfndx5q\@WglnL1"(&e5r-b9gb+%׋n*1m$:C-<ƫ5$uyd+P% Q_PB_B9[meW}F̝h.8+t;偖@noNї5f=򴸚 6?a .3=\w]g<ͺAb2kW񍩦}i?n |wTbCs2(IA\Ҏ5vvɢĎ[˔/&*\3ǫp*9nw}oa5d#g }  Ty.z6ą6{+R=d՜P-.\#͓?k0~E̻>ʂ\OQ#Cm<GXT!^)lg$Q{_p!; fto)zK+Lּ.b團ߺO +> {u6/sZ@(/@{Uit,ȧ{E>FE͈.ͧ<9ߕ[_dFbiЭo J}#/cW '$o؇@Q>QݓJ$ Z $vMe]QʹJ]u]iD,)ìH'=zݙ3`Q<$b`[60}LǨ܃wʼnE|D_#xHg֒Y:Fs'DL'Ll׸ƠJ%hUMߖ3MOe'fs4#PuRZ wBpR-Ԏ%9}p'cC=ά.!E秄 >%-tRpр' I|&EQ~}JY,Dg?QNf}_멌E[a}>GT0$H@F=JO{vť]6\e@&YHSͻ,'ʾk2//2c83؄'xU_DH+WD],.%NAwxZbR"Ckm;'Rn{QஓųiX$x,Ӷ$hcUAk~F HHwLFġ8%TRluOqBpǀV)iSٽ4NmT↮*BS4~g~lр]Zn+Tq+E+rgJ0,a;DžS wUB_'Q)j!E@WGR+,94)춲jj4EA2ک@KA4Q0tp7mXVm[6bhCKѧw=_K$Upl^tbۮJh5ij^kLW[{"s(J+Mr) E$'-*/7)&˚EC@OSJ[͡t{`Or]**Bt('!^4u(/v͊@,!]I;$(7*eb*QHˬd"M!E5}ѯ,k{>0.dT)}4:ǟJ  է6ݺNxOy>>V\# s)nBlz:Asn+tЧq~jQ^ѩW+2|<{ˊo;iV-j]3 V򊋾b[kIq;5o4ɸN[kU;9oxַUw+hRRqLhX26ʋgE3E[Y̲ !!IKP:5}jktC@~m1ϑ2xoEJӿ7~>UVv>e[( vK礰yfD7bvkn,?dvK1n׋IaXr .iPLn1OUbHCRh^gEgt4NrE ]P?&5Ei5UQ4Ɋ~%-)gFQ ֺ{6օӿR{^鐪GSKJ 'Z'>U'"^ 'H P7_|*݆pߠY)f>o_R?~El'׷GVh5YZ{夰]s83} 궺-#k.ڽߚX5(ASARV6h(Fꦇ 5$xr_?Չ/[SFk8e;o9KohyۿTawc)e3x=-F<Vv\Lo~w^UtEQL-zFaI*zIêHeEU&kzf6,J0Ff?yI8d3̤/Mg V_}}R y\g6sMJS9~;*'GVLR*]dUD*uD/yW@Cӷm v+FſȵeK($j9'/l$~koֲ܋&A-v0ΎACYQφ-l7RP[NxT=ZGϺn7"r5a/C,\^Z ABx,R8cJZ_&;9o& 'IO)  uyz)npT=gT^Kn9A?'Mz 6 ӥfI-_]t'c)r:VsaQW q2dߓ-v_IU批j}}ey^ZGgEx;֝B~Yu膓\^J|2=XTڶgz/nXJd2Lp&_uX/MVh@ʼnR~&c(wd0ᐄPb@,i<Ҥy L4tB=dCmU1w\}GQA¼77Eڽ|Yud_&l^۔\}IDzuKZ/-D"2SdOwyjMPMy˃b6TAFQ@k3H:٦M5Wת{ѓbg})grUH`ԍEˑ0pR͏ڪ%]Y"NK5UFN\ eU}k?nC1y ¢ҷ#IV-nMO;7'Ѻ{]eG;x?b{c ]g 䔔kw߽yVR10Q pBpz?C08_ _1)8D wRױxC0:ܽ9߃CPثŔD)Đʮ`>vC1&4*޻h^װ5`V};k-8h1Yqm+Bƛ/UgIf'(bm>ӇGF1NÓ@Vͨ'\RP0r:{ݺg6ΰysSbm@GNngS:j<+rIO,L111~ Q=e1vx2dU|r#/*E(z|j]^U#xB; e4j&v EnT9EmtrWwlM$K&5usD|@]tju4DW6厧ėM-0N4;ԼA32>Lq;DSE GP݈?Y=3j3G9HG~gql?kjwRS04,D(g>gNBr-lCC驯r%S8b7H>/[~[+AMyjғd[?/lVݼrۗ׽WrQV^( efq[L~4Y^}I->QA9HnOtoD98Pn:Q춍5dqcU%Ywɞ%i|MZ(ڗBeձ̲6޺8|'w?݁(gFffb%jkOO*jǩ(.Ffyc+k5fQ?!p%İLQF u{KJP.j!"Z/7 u/Wk{3z13]em+! oan"͝tI%Ӱ WeG]5NCzh !yC:>8~8A|^70%XfJl?#}]2Z7͚Nnר>[[s* ;N:yi~4תLOeچҎ=MKh6y@{8|w=0*bM#/MŞaC;^[)jH,EjJ)B zuuΦoe_5`$֝9+dcˁ+>KZEԕpSc0ȹ?31̏ 7bnS午0e;b8TW*;azzHw=9!B[Ӈ;^$?HGEg%4 +پbpM8wy㧳%(=l#U8I)7@? 6뜱p0>'m<點1fp/k,1,[r+-ơ۲,\k\uMQֱM$ uzwIrhIDqG'W>iXg6Ө9Sz)&lKu rFFtLLQ>; ݱOۄTFP9[?Sq UX 4|DLr9CnW\P,)eps; <{K݇aia!׀ pA1VTI0Wi`b9LlVi}CA6TkH>vBzCX,6&ht,pt Qk?{] ʴ w47:asNd_SaJZws~>2'i{@jz0L.I9o%c5ibћxyƬ.j$C`n0*ac vR;xÈʕjņ*YD2ut6㛞&&0tb*OSB]vM#fL, Un*篆@6Vw7ՅX$f!nc9&XHNY}i/UYxr@4fe7/DKU\>mgܾE2O9Z>o$쉵'BCFYدpUk=SQG9<= x Zn<>t@-+3'2$l0u^4 9ՓyjYԒW=;7llVJ54栔c(aSSz #p`9 @D+ܡ74d,Tu³Y4r,[ȡ}H75pI^V.(#rBnHp 3p t~(>U~LAأlϳHl!ת+?tP)W%M>rI9NhPTmK 2=#⚂/z9<#b$~05>W͇DGkKR4?K[вzf8vY>t/hw3pAGl ޫ#C8x7Y8 r8|dU=-)>QEIpUЬ825յV(Z(OC$`Qw/xSg"R,HPDч<(η#NNV 2cb ļyBF.ttFs4[e.XƇ u&[3UT:YC%+\̨[Ջ<4>7Mܤ9?ʷ|85;zK?Ycrp; RO5ZUգ{}!j?;_}GTq6:G)t[*vL@tD35Ĉ;8³0k DS1Cdknz{֯5 ef6B^3l0-3+DlЭ! m_IsIߕ<_A>H6W bqه#Q'wԠ7,dDs^QZZnH14}؁,h=<Qem<m f[[iLck ɩ"I7 uýU.k5f8K0HISex0JI"͟$0hen|k݁{])$%t6)=n 3AP6 `)نuji=rSU[MMw\Zdv-KT;4m)cS!$b%4#F=^؏MT! !D]ma۳/nUwՎ1jZ_)xa| 5P谊q%,{s` L* G}yI c&a[ 613t#"ru4AMWLq6# qјrsji hk,?׿jgw+!ƎTx{&iL}_ !SL4gNQrq z;PT,zl%3TP9K1/(ZIt4u}5QΙVc P PSJDb%u"Kg* ν꛿Gu|+a"m-hBKEYl0_>EK>XCQBo'wYN4 §K]͔Þe{7@Qf {Ie Y#Mj)i޲o$k*s\r,e猥1>Tn*:V[0]? 6ypu=-A^oyƷj#[CJs>.Wt_nT,}ŝ`4lБ}DVw x"_̏o[JzN ӲsΜ[Pg-PFˤw[Zۅ:X+{ s[9T+eA}٢7=t,O{v[Nij#Seg)GxV N(gr1rA͂u~8xyK">JL?Go'l{>Gnu8s|WBe[:M'|FqWqNiMyh(* .ot) g>ߞaأ\*0榕0?d@cgVy,s4;oعm`JA3';2CTOaN5$Xp[];qUo\u) i'ƓУ41Ȁ;i!4fjGB_ZB]Yot/\^jĜك8NQpǡf+" %4JH:4CYNu ДɴA ٲѾ"yQ2enycCx?]f.]}r8EJk*غJ(EZnݖw .QÚ,v`AEP'06VHJ:;n0/"؉ )m5-!X<UR𛛒Ө_ ~gQ]<+,c_Rdr) ftԅP=/GLQLvU*vKi+p&U~:Ip^A/$wwʹ?uUtҖ!4d^W ٛ Zw6`F`E(9b?{:L["Y Qruf?ÌsW9H[3bSn.%NbE "-^ GT4)_4h O55TjCG22ƈ d͚kP4Dg-hvߝjD7$?OG5!ɹ'\'D8^@̗lVMNv-Sz[tO%AS_ c cN^k|kpv0E `2(>}`Lב=I˱`r㫦cæ˝pΞ4yZ;s@9B="SP0!9+=ZZ3x IF~R#?s"e '.hJ?P*d f Rl%;=<b0բ{j.1ck'SBߗU)D,3bJD 4ŭ>TҵR [eqx\Vɶ[,:؞%#=0kĞV3A-Qk1GpN@ŭ a/Cɍ?ANٍ#zx27L@bn%O+]PW-6ģuQ97ӂKif/iӜr` "Yk>VLC8@ONd !8JN"kgZkL" 9|.RSOo8|"7Rqk812UZJ`(mF@j)v"3"֥94gq[=X?, IpfvQ*U$~tEI.{$ tbX ȕ' le4AiO#{!%>oר5c{T9N6zsaROZ2N:Zvm B>8RQɻa ]*{}_\]b~G˲e~z_&5>,OvJ/ōj~1rí3;?hYRv;z;Kk ~HwYF6JbrodS7{,j{ǡҎ%"d,@m:gTTrI!G‘t6dۙR΍wi<]r1t.*S7J3nah} xƜd8Լ!.s `i+l'߱= @}:`eӸ AIY&ůH4"r90m(j$Ol⁃NFU'YE([)E~\ik\bb^:tlr,GRFo^vYv1ܣ?MK'<튲w;ݓ(1Y\f2,ts,.8w=S03s0;ɮ[t]{Cjc 7ޠH>=zxoza".1ܾ/m9O6NO5/ Tl^"=Z1^3R80sQf[?/\PeH Cr?)ݣ牤#;kȰR׀!DFؑy GLhO4Dm?ɃN!^R 77I,$8LE!z[DD+?:K6ˈUs:?6= &̂nH&^ሏƋ 5|8M,Y c0xQ¯aiuw~VadX.ܔo{Xay-G:E'-s!aBDk%겙htv_ɮx9]7NPǦ.mgqOwgefZG!iC& C&s_q35rM!)4v,PpR'Yzщ,)lg; *opLD}[[}E;x0t'>)k "pvl4]@Q/g֠a6rƜVx"nTC5` υGG V/:cz=j]Uu hX h&Yo)%ȁ to[Y wsbX8q](s5`t=f9wm5*8yGht$08YGM' \aҌSI &r|=hoȨ֦kۚQ@Cz||44mCk ;|Z@ZЬWƩY>YWSuzjӪZ_e`ԧ<ןa76CPm=gB%EŠS[a:_'Ӷ083kZ{.I~>C V5j<#i@X˕19XlP|r>fIƈ3 6i57TRM #}yx[ * 7 ]+Ov ծ5|^ޫ/W"3u6Q ͎ɩa9yK %Z6O QSO6溋Ǿ<%g7mך-tpO5RWnnzjIY1י:,+)kB_=S2v43oߪc99ȡ<@!_1C5O"mv:هi২Ga=p=\*铯-h~`+s70"֌T0="F~,ĺ'8sL-;(_FSE𰓡r*)wTFP "FOy5r iU[c#b_/U#ߦ˫!2)"9"{>i#91i"lD.罧zIV^A SQݛ7,`Njתc"=!b9hw'gy6s_02<ՠ1 t''}_AkS)g+zQr'Vm#1m`Nb\. .n K*JgJ% %gpGTaIC c4!!. +~S9c,0R:ˋE?_l-;-Rh5?jJcZ"ː$ R[T5w}c7r,ZQB,]L`罁Xt&+[Z~h7/Wb)qV% ѴRD)SOߘn#$b Z>@!BFa^eSlUj<3ak,F hUu (1Hx?,pZhyNOUQu;?Wݭ 4yGn;NM9#VT_XQZߵ}'$[Q80})@L5ڐ{Pg[jjk R7SN (CR +* z'L3ZD P]F~A(+H5r]J98GJ9l_c kمKv7`(4JF4Gֶ}{E+cZ~ ?<%*IS *_2\(#O{5:&Okh޾5{#v|+W7bgrQ8/x1ɖ$MִƟhxS܇ $ Pz_wMIF2&kZ1EuJ%,Zu*mÔP] J*Taạ6jPpӍKzGaw9C"ސkpŔNi֫{F>Vb㪲aRZ.+C6y" C-o_c2vq|5hcM7m8%6jEc[{f-t;jÎkr&Nͥ=+g򣼤#p7wt]Qή8xoQ0ɏzV6v yGQ-uƲm3]}`y<^Q+CGai* *1L<5G.!5zzL< '<#SsX MB2|Z(N!/ʖ'Bȕ@G,Jkh靯ʯ"SBUU3 vq#9lj3JWq*9!2l&*')Z:P>`תEJ0_4Zro'sABLp%p@CaZrM ~aX$< 9Zy X 8d~$1Z&(:74+&=@E{B;A4O,%P3%\!pTR@pJ1i*r0!b7fNk"b:NS@\(S7a|lN^~F܅d_wϾ{tݵ8'kLsF➞NP`U_xSkϐn`%W_RB~PV@lJ\t>RwjW[)EqxKOs{wAsL)DM}~`imƃ=#F' fKmkYޢfgl粚j#q/.+n,xUo2(!^B9>W}!\ W `D3? < Bx"0t}N]zSs~m3\=_䟩~:)nxPCUj֩j/nmI P}/2rQ^dfdvd(du1u ~[sSZx\O_JL"?g3Sgbax/.Ȇ :H=<'@ ~N4v\MTX#hMAϩ~ҷĜ0/,rށ.C1x=GPyv7nJk(m;69Oύ#GU:+HNe._ dؽyR̒& vl.7qs;qz`ª%F. 1mXyXKLЕG&Z31cmX)4F)lBE~*샔NN6jUEly>oF"*bq3=p7~ 7' HQ7'P1 dMN~rUnB_j/@cy7nњ%8B tlܸ4uM4-#3<%ѯ3'&n{ yru~]pT@ѮjyZɿ {Xj I$^B#;X:+n|=Bi{fj 2D޼S%t'!t惸'% ę[O3atnfPj#%XwULQ23G iD47jik\Xd_rNޤ&t*s a}06LȠb]mƌ$U'u?C<ꆚkfF:u{ ΍ >6ITk/PQtfY,Q^ͬ} v)+LqUy /:5 A=U`xUe 1-ѫ܅+)o+LJieXr 1|L~ FP  gfLYwbomko6l#^] KCD46&!q}jW>s[gx$%95 9eE,rOu1‘|f֭Ї?= 2۰mF[fS2DU"?V3u#8Hmc"s/㎞) N库`ꚙ 9C0~uŕGDβy8aWSR1WG*ڳ@uQ.;Z)a u[o`zsȇ;re/8Hz!peCZJ/sME@.H.01]6+[ZVVۢOϮp>v/~ьD@fN5?l?{q {Ɂ8z/w=%!g&⏿DuQҮ*ŅU'0C-sL'Lr5!)~v/, h[ǾtD?޽W&!qk-yt蔇\$(OW>gaaOMq3U[NМ\JJ ݡ?JPZ'[$ɠ%4hmm[6x/:,2@@Ʊ~ìt,=QI@R ɋ woX6`TpԞ0/OȠ/ۊ1t+ 'rtQ7EM8 Y@^=@>a.YƉ4L $ݜY<qWCvvE~ozyw'<4}ȫ`CCNx$\vKM|=ŧ"t8c_mt*3yE؏X Est39sIsQ\Hk/4ly@[DUM[\jdHLS[arrȣ$/5C}pR.>P'ʯde)_wL -Gf> )j˯OK9Vvő"Д 3SE,1#>Xhᴬ©Ջ]۲;T[y 2w7><;ߖؚ݊;ʨ:v'P$ ۋHtIkFv [!Y}Fgǻ'Hչn=v "))Ǚ۹/-WFڊ]­zwY?[ZILm: AeejPi2]0ʇ,l DĂε50FӃC݈(F;Q7E%Kq=%9 >E Ov*%f7_)-haoɫݻR'^8´<.N[SD'f}OabBK5#ng$FRwYF$o"c0"u і'M% 5&I9Uo{iw:y?:@&miX!w>mXZ:,΂|72@Ŷ& D%)zG\󯢅$W>ѳZ3m>`fޢ)<Ks 6a27y}JFJkR 梳$T6kx_~͊騰 }1W ;P4/_FCfh5ӳ&p^!y ]ǗHYkУsc B?uLj@sep방%Kg$%%}l"5Pz܋,c$}9oֱD眴`SvUHT,y| £x%q?BA^,}tߏqJ[$ܠKruuBN^Aȋmb ¶+=NXm>fa`/PRsHT*ukQjEiHv7_$j8/;FG_.*vm^9LhֻgA X_3\(us5C !N\()yj饐J6ofD2u 'LgFWK9Iۺ"f1'Ȕw@?m =,-eh%q_45&I>=s֨:`f+0 &J!ǝV>>_5=|j WzÍҠ[n5qmp,+Y̬*:whqdž)_hUGkCm`Ώ=1=}}@RhßܭiI賂 NÐ;445isukڡk ƩS4 +S++#Dy/ }q (n eͽ~_KR= T!fbf5S8 У-ph6{hu8'[j:yz\-7op,&ՙ-r:OjG]2M6U_hb->6aFDiB1Hs؜)( fiK0(U`O xH)6pu4{F~Z:7HѴ7 ++0c\{hSeqxnYC;Z:) 9y< Rj,$Pf_|eJ̍H]̑:wpk8@ki6oԖt9J?!pK]Q{Ts^p$#,nV 3oz:\D`a3s|Јx4 Qn:;PZ{y(2ZqN@@z3A!v!H5BڑGN]M1\xvH}INoX$|sH,6od't{\?ɹMaP m*Ձg55 ůPX.R;vV9g=7#֑۲k*;.2 Mr/xĘy_32L\Oi_LNP^U&e['O^6z-yYh:A/Xɧm#\G Q8rr|ޠȯd"/*CWV(HFI#(Q|96Z@nUcKʓs:80VS )Y̘i`a,snf5eXaf)w ɥ5xD,끩ϻ8v ~7TDu& -E7W:s!n9K;shcu1܋XFwa `e"R 5O܅\(MR|ز4~Du.<ʂDDDwmE\{8Cup1B28us*%ۗ ,T@SeەR NhNSG$bˈg_5|{4/-\HPuecŔ`eܰ):3Er6FV,7[:,S}Jl.\ps g5u̻axsQRIQBᡣw:,zcP&6" _ы:_x> .RkCHaMMqha&a-vA b6ҨMʞLxrH/OmQ:[V1K!xJPajJDA2zEl *W17s$@tlګ`2?зW?yݐ2cj2#!'.+Ggi,يZR'}efPAXY,qb9&^e+lrod/ mȞb~9tR="lYX-q.kFe'\dchfȵ}N7TD VPghw$ б"P.{dz{Yr cu^4եL8s7 fDߝce_\| "(b4J;w@G{ P4,z)Ľ"\\"r͂'J'#*c:#0v]<,:/P/" @^$ vB$$fN%v`c7ϸⲀ#B>Gs7EcR=2<b4M*^4ܭ"< GsٵSj8T@އ* 85nSSj+/<Ҽ懙Ūxn0֝>>ϥ_/sq{巾{hYL)˷iA(np a`$ƳPP )b@))CEå`,} Ym!#gYE:P̲/U-jj`,OC1具Бbq*I޹!y9Ρ7uS4ce% Hl7O0^yB85챗Pǥ=^F-3C8icZ GvP;]Zgk٘Nvn%s,kh_bٺ+v|B~N?]0Ty+"blpE85 M=$R#tLRw]] a\C^{Ңw⏨-'Ju U܃W(&=^aH61l@An:>JCEGQ2/ۚ&9' 뵑 @-iRgvz]}A)bG`gEN,6̘s{;ъ68Ju!F%,ݽ-SdW#SR}PXqFpՅMxmF˳@8C/06ܸ99a-EL7iÉ{#Ό3h'sZJQԖ:嶭)| sC7Iux0,q,SاA)o $R< #]uOL φ`4"Vln@+A0.fާ=dP#-hQ<Cܶ%.Oaxεr0;u۷Q}T@^kRJƲDg00Ac!բUB*&3hV&i@,|z4!+2v+ܪlP0\Vwbph%=AvU$z.k dvi`4שҼ"Θnp gCLuk>iJu3zee0cn4,0;2:ƣ]50NfK2%zp½fօegT!;i`S϶:P{^Ҵ[`,Ps>zWSڛҗ_[yyzE"`Ɵ]̭q23&%2e.'N)D-J&u!9sC^?;28~l Oe΋8l7b+{6|IiB!7]FkZ9i M$sRD3fPڄ-|aV"7nF7)]PW|Tɉg{[p/dIhBe&QVʮk5 o$e< pnjÈxS^г!N[qH1Jn UVmvEĚ_"_O otl0(ouzOZ@]]11'D (q6l36vnx|fXy.IJ _1V}Lc t)za9:5s*!nt-ޗx% [B90U^"WHh?NjZ+_`&i:џh,'a&Cf]y~qa@/aq`eAX&|ӝ[&Q7 h! Y "9KUl=6Jdp ˃-_zHz))cl'934S-?%6'(8nj\P3^L }ay˝TdLc]e|ެCXVv/e [m  J`sZxp̦KsPlv7e} E^ɀ<!e=,p 0R\ռ:"#%2/ QU7(3oMy)qGqa};;Pp8"G.PY7 6W(lR9Ps*݄{%vw>TO~h1^HdǏ^B p))Y} MaN?qR,][}Jˈй6V*} qb!Yum`᰽4Y/`3;xq;Yϫ }t8`O'?EvVñ=ߣ Z}/j7"񅜭6G'Hz5Yf `bfDQp 1|.!8$hjoaq~98wE'[Յ e 9"仜j7-Im){PME6gAa_AmE7B]a D\+(Cg`yj#y񛺿pybb3kgW3W4JwwU:543p}?4i%)P/pS⤧)jШd^5/!@'f*_hy&'2 cT}LAWt5hv`G_,@+4*gă2M(+ǿ˅мv{:;mY z S73?&@<ᭁl op ;5HsS]@~K18 Shg}4lQQSLS_pG049R*#~/[Bc#Zi<֓07o/^F;VQv>ao\9'PrGEW>.~z鼊/E}KM­g sg^fG?H iXZ\ae;v.C>3-qMe7u4_rR[꾯\AU8(\sBiCQۼָOڀٽҺ)ii79=`m0G>(kզl<9ц3SȮ7T_3W83#z<ѺIDy!VI<ħQvj(a*"֤il7 B]/On!;ҟ?_?ώ1_ttw%:4 nsWt$̼.jWr~UU+kk}hMhX?A!g[Ȇ9`q~4Pi;]`De{ 'QՖ@y]ڵQg\$j.4NraN3tx():.9G¬a nή(##n`2l yJ1N_3%⊖ӌU;e?r6?mN0@:P'?2z;(46dv)N֚!2OԦ' /]=|zD$ NݳgLT(j+-)o}F%TfiHZΆU 9z=p6 ho>nTG,Xɓt"g7+1/Bh .kIXxA̳ 6eH,w%gƹ]rL)OLl\,?wÓNl&Eyٺ=+ 9,]4k 3%w#03pC& f 9&و~q( uF @{d8=TPN]|%vU  sT9de -M}^'jyҟӑW ТJ3D*FAT6a{wU6'jzLpg v=ZMo4f\Ϝ 7$m ֩&`bl;ex<6qId hH٠^XXt'ṌȿEi"dJ ~-x[SFm'&Wz XL>=q)dH(գZ9̺Ui:7(˴߯ {@^ond!b9<"9سQ P$JpUXKs6(O qX p/~Yrg :7~: 2gc༪(߲6m[{ݏ` ѻ =(xrDy\;>q`'c~ WǥBT,g 33_+"vԴ >OE"<~%?3=Tb1 OR@x&6+ƕe eGHśBXYmNZ vLvN}WA:7'P)1UJߙFH cR"T񁃍~W1 Jm|ym0viACn7MnYߋU)`roZŵֲOHdRx( $ l}:ol^Vɜ ޠmTm l}r%ש\q; ˤ|%S ڟ RTߢc:5^ PcACI}'ȣz5_<-Q~5&NzsͭR*+Fщ?;пZWNq/ZGU8ɚg8$KJ%5ۿ|6^T@;~V}#4=NUG/kcOIW^_$>s gY?Z]EjnSCԞW^6k֑;rZ E^A)jeYrp^YXܠr&e /Jm8"qTQʗ6aPnPK 9Bp5aZ2jdRDoo)Kؓc_{YbyRW%7)UF/_f, 8_Nb'`d-=ٿtXrQ&X5ގ3f ka.$W;kxC a"AAIw3|I'ZLL?4<6CȾ]&v:fZ3C)ҭ&9j ) knߵ HV|2 6<£ !ierXߝ.W0wd}141Nbg/}j)m% mTSC?*7B~FrN$E4t4{3I}P7HIE"MK46NE(5ŧ˨m%4yAWL84w__N<ge6*#vp _@-}$ksc> >}{[י,6hoڬweo[WP)T8s(pn;`IqzW]O:W(F,WW)Ĝɦ#ЛL϶p[jʐIH=[݁,ق!UDCsSMw(4[Rs.$ڰ QK9z8kxcOA 0ZH&dx^ ϋbmo{^_+D-LE 57_{L O Ӣ^+.kgjؠw&uΑaAfL_Wy|@:.1@!%Lg_8c\5"~ %:FP\Ҫm$- N)*Ddh}ĥ{5y N/K[g ]YLa &>ևRh:`7H3ֱS(Zm13Gmh@-l94cjG-_/m:f2:yJRvbkhn܁Pr4++(W\~IиJ,{eH9ˇt)Z)/o4+`ףMPFyك7I~.pL* MJ+4D)DZ`YqEfjʦ-* w^3lVuQ0ꋢ) @mٚ zjpVx܇Ǘwהּ~ae%B*kw1mdMm ~v'"Zꔏ0Ybk1nkWC 4b`J;oBLJ]%>w GcEtpG35E0E+Tpk ~[囬qnaWMZ m E U/ӟ $B. RV>omC Y& uqF!crs[M8KX$8I=(X#Q;qa|b{~_SB<]E;i;ǓjJǖ!erŻPZJt?o;j̪a~ -r١?3.8:(ט>U#:4Eo˚ٵ/v؅%2@ahɢ1fLA .YHljS#5$%2kI_-V2.{']#7Pf6%)R_VP"c䵋ߤELuA }bq9ݺ ꟦c-6@ÍuYv7fxU \ڊZrqTi!.`^mZ. [P&w =!I^}W2> :V7i;C\0bYI9 + jC ;WLgG)tqncP@Jdx!Xa$ }b ,%4lU=6ƺCjwC,,)ej(|i ׇ~J:2Z)ĊI/.ȹ6))I`~1|ɿ@(qp: ( c[F;]R}Xyڎjʨ[gm<͖]qty QrSkD0QAe[!I;j% a8l'O 0DYx,#t-֫e쥑0s Z h1_ ;6UXPkjcsI+eؼfwA.^0,}@7oq4'Ln&/IB)=o2KfZpwgɴ@d 6ptZýd}#*JH rœ|%4cZ}KHR dQ1h &/r=EKUY%X^CE{M6B'TSx2ԂZ͆+GR(|XV 5i߂C:aLl njiۜJf@Lv$2$RAٿu q~#mmYjj j)?o.z2~³D;3 \+urQTgJkE-r?Xס+&8ufY©l&=KGNI_}pg'fb>408HvdoeSB8ihB[ +SKE `#K {|+aB;|1X̪A'Zpʍ␥3[3`d hVQmG;4)0-Dyf_׆3S&"gh!9iCh0&3Y¥=:H|;[BA`[& vj 4PŦws(Wl` 6f{p1JYb.'6DzHL[R%Z )_}`R b2d 0ՉŀAZTO tI]3 $q,*>tq+!^eԷɳ9}Uڠ6RT"C2DqW>L . "uo'Tu\NDSg,,#R' y8 m^~x $k QRcupTLOM4M})ѬZ҆C}4&^~i޸C8t `VE Um6Nx+ #}OGZ`bQ(W³B=#"0\*"r4J  ?ڥFxhHHm߹$͢;)щ+5?0|] ߖ劂Нe&}v<~mF|{Um)$_2}]vB$A?kkK02c-uw}ա}WO]}k OrJiy\=6X"ɷ| Wlؤm49$2`M"G*m'#y[AGu5S{V`ZQWmrj9Ea}eNjAy9gfi5q_^<|4`}A*+5֞aH{S+<|l:nh0?xw>t<+ݿŹTL娐BI#j=*<;38"t9cgۆ@A5_;X;ߍ\4/yjXez t'3Uk; -z<3jjsI儢,<2(XA'EF-H =֠=rgS +:1ۂ#>\d%Yfܢ{sOz}+ 9) :GSL$yS0im6nc뀬!R7xG1\F@lO -&- +N!־hᏋbE:b 7wJz&g }斚*i⳽&FJQR0  z/z*5RȨF@l&В]J7= uINq;r|P0~ZG16CfoYxCbًk6PrD\w&:a\F(ȷ6[ҊqO!1yo0d]Yo]7_\2>*<3__ ʪ]Rmp]E}E/N7X}m⮬C?zˡjHMJ7ND.|s/E-oJZ zoU{¨ ߧ(Yz 4[PJsG {Y@iLq_c+6F*2ȳ_O;K(&Saq[^g~+Z3Cgy+/~Dk[&g$ٹ>ܮ ? u`̪G{ Lܙk+kˀDxՠlŻSSGX?*&AHrSp&ϓɬSirFe\}LJ,zEuyu`*\6uH+drxKS6ub]?5t& ņHyj)d ò_uz?2èJ=H?Yq5SC?O\QFOx1wtBq@i.S$GC5NtՃ ԛ i#A 7Q=bTګB)cV,3iIaei \x@{ī:Pǂs@a։wo1\Aײi=*hꚋ>sLYn51\d}+[%8(_ I1 $Q:г>bn^:\ި(:NN873'QZ ]C;crrΟ`:3?= fZ9Xl:D"ÄհAuֻRũBfK2Q-~(8Tϑ pvzUtĭ8(3ԣv1d/PwwMq Z! &"kUIBJ1y) yB%cIza YGt_{ ȍKȜ;liz5$ βܷstcCkˍ1$&ۀ!hBJY[:CڴP=Tߧҏ]2?f-c99o$R fXԸ?FG3l" pr_~޽6> iт2AyJ]{<6D]QHxAW>1h51gVyf'\q@ F_ `2%ʧ:d{LklXviD>P-Gz?w 8ɩ?g|T.T fB6 UdyYۼn4\7:^RxșU@`8mIUAͳ`g_ꘘlS'ߝUvt:8\kayq/ [@nͥIۃZ5b(&,a!1kE' NZO:~$XUr&5^HRT` XF_YHC f:n &$@ 6ֹzيl\ ~۴  oPQ_؄A07u9\]_O&INb`\h{muRi\<ѱ5,8Rz$}O\uI`֑Ԭ058Y' 1`_GӇ ߹B(NU$s$qQ͓H|8UYi:bS༷Pe V}p]\,<J䭋u.rʑR3 S|HjDvJ S(Y!c!&rH rZjeȴ"Dב%]RJb%XQV+zSSoctwyJcR vu-|8K+]ŏl&ӣi&'uDtdbڎIMQ%׶=e~.ek%Z ;M~YTg c|y`hx_߫p`i9c܄#]J/p3kp)K6A_,??!NuCF*%P9|fM vkT"ٵWbS^ҽy'A`kKۺh0B4mspv1^'Q\ֳpA$r}/XzA dNA8L{.L٦go6RQ"s?A":#^Iz 3t4CHSCLp>[Pe[x>ivQmD`:!PsVavێƗ&(`Fo;_Q#`Y&s0(8M̊М~d`(R&~h'F4CݢqGzfTijmy +d$O84OÌ7~zo39 \ڡU0y%@ M5mbre+,?*0=w1fU+J#}t=-Ȓk叮 pcħT'Uځp}>̃=h'QslWBO4sEd,h0^IZ,`"/ܞ֓T 7l"9'lF71I^Лlw?eg VRsrEsZQbWGŰbЏÏ2ݤ(s=./4 TL/JdO/c/Z}{Ig'U'uٱ+l!"z,X+CC;G!a/+=$hTM ЕKlžh1o\xDs?Q`C1 < E^2kBöKG= J5 Sѿq%<womFJ~d%q^g]>wqj0M"'dT36դ;L,C+ѵwBWo9m,)jfT7`~zg&hL8D 1p+OABy]$|Ȃ39m6426ܭ)״rDEg/k 'wBo 04 `<1xUM[ȯ9𐋪=Z}Y9UBJir=Pe쨓dӕG^ dpd^ *aN%; .If~"d2'Ӗ}Smq {k"q c)x~cYgo4£p*Edjefh/ قƁL_ӾĪIS,` %ziš,fO@}ax6,\ȿP{#NԻ#+)B%,@xK/0X/+b[z?sF3r%{s@byys&z]X©$P/5w\Vp0H G/Э3G+-Ȱ#OЁ+'|u175dMvFA(CWa$\`,qJ u|/3Fre o߀9qκE4ٿ(,4PU&#bQ[; U\t jBe(.\#Zt2ZS^ISŅ;bjAcXMB{k_VǿI>* qTG5%FCeՏb*z !Џƽk˪sp-t饟My1_6ԴG~QwWeu{8 mm* IQGW˸@ҧ6wرybh#85"5OI%׏E5\/Kr`OW Az΋ o՚*$qA̸Xq[A>D~Rk+S1`/Ɩ+!φ+紳 Y5 d28X1+A䛙>JaZ/)p_6,F|(8ɼNUw*ckO"R^T: _"c/x9_#U``<'_Bs2j!&bxmf ;@ydE< ʙQ'"O!0?Ƚ"~`D9gw&.U Y $=OG_;FjmFI 6!X iF`ܢl;5 5:)@'em(58~TB~>W;^}yLw3HF)1~ m`i 3A=- (ޮD&/@ŦΠ0I+T]Iѻ0Zi՜'~R+ ל>dp)$z.q܌\,c_V`[P&A$/x6A 6k6=MUT+ῢ7*lo &y ^+y&865k*iG/53vp5C>L} d6-ܕ.Sګ]Grz_Z׏ ;;iN W؀"&[.2 } LEK2#6Ҹ *[er&EPgu6œEWl4G,kqnnկ$"f2ɂ$ yK?U9!I@^Eb63<\86pO̦/0) TT_(,& R`&A5\v(lNK?? zDW#^qjj:g\V̊Mn^ ̞6,E-<%CX /0}1Oyș՛$!Co%6=qBe^]KBF䠓 LƪZVRWAS %\Jb-#B`/KD! #|zk%k6ͦsB mj)QR4'wwXʾ h*>IZ3bwƆcd*[5?f[7%H1![jQ} t=RJAj\g-N(etƋ⳩"mbR3B ⯥Kǐ{{;9 )E#U㤪2D6 $2 &֬TMN Hn3ξU`Skdd&H^@TdS1)ed|?oL ލ1<Ž0勞ogIwny|~^LwP #%X~qUWE_SnzX-_Ha\[䀪 ث"cpz[r`YQN9CSג|'oSrk=F)jy75d`hU3 "KD!5c Dc1_xH'6%q犤2MB#s?-.@HT߳ RDZ;80 g=hf|uvMhLhdHue\8l+䕂sW}Bow)],Ƌ{B)LRb] jW,JllEBP?~ 90LҗF3܎KNTyc_]UwGlz*3yxl:a>5L'XIn;zax9XqR/a OH(l#"Y Q$?X%Hv@lϐ;δX!d3{e\i7cD`T:< 5ƓۖB@" @ e|0sTJu(C#^|ñ$1^LohA*}2+ .qI+]f5(dȼ?ʘTo'ԵPE)Shrd1pz[$)\G¡֕Pӑon5oؼd7u[ Cs+7,CQPojߪDD;zP#or?(Uźc{'QwP6oU֭|j砾F;> })RV}KxS׺6CiXPM6BS(+'"=@'B_.>3'ZfTHò@/Px}!ޢq"0ۥ)0)ЭIDCnZp,B(> T-N꺮:p_+"xxYx>/cפh{sz^lʙwq^ Ni=ۓv6p9LpCm(&'N6/5yb7sK*^!LoNV@l_ÆF9̓ƲaٶvVMq!>`FҔVe52ft<)}Y=hm{],㳊̌yRKcD͸յ0 o0[z7P v$,98ɽ M$1野N0>٭h$t.}eP aP\$3eE$dϸ-dwF4g=RL?9i:CUP{8#W4`&K!g-FADcK<4C~KXcjL(УbaO^/^# `^{upa ĺ m-rt? 9=_оEv}=±e ݘrHpip=v*9J&|*TLjڮ[n[<,d En U$BgnL-::b %{\XMhZo}FZK4I0 + i؇f)z틍ϬVyݫP?H=ւã(J;h5ϻ_I8[F]Ozζmޜ"YLRoRX~m:W V$QlQ\iXf#[0D':޴0?45f-j0I-g us@:g-2Ozs+}[4*AmQ'B<Ƚ WiʝVX,Ɛ(m7~]Q.3 2MMos3aպ3|܌HV)No{d4uLD&h= i GAP2Rc6 9ڡP:H-Pp_r r:fȬj.>!mgȘYuC&>l+Vݧv~PZpү雒0MmND.cv,Ƈ@䎳=]Kmt̨ ƇŠ]){Ϲ ܒkW A;J1 " >.M1Pnk@xM3U1Y۳݇>wt0S28#Nu_芣apףj #DK:״~Vɟ``pVNn|tSbEo2h3C+2i&ߥ~_߯gsQ K1&"pGֵ.gOnz $77ЇK⋆ $nA1oBQiLqa @ !Փ%"X_."em^JȮ.+L%ԫդ|<2 ߅E,Qς MF3RSV%xIo?k ]\P|PI%0]yԚ4<[؄mHfE4 OM+Ck-Ͽ]n`y"[:h.<]6]+tsƓf^0ɤCjp{4*!^D ]W$)o p/CR baPӑ\ZӋshg6~RTVr Ir6`x}Z:n@ݻaw\0^I,lwELWײGZJ}"Ђ|_liW' 0wg {K4̷Z&.[&f[]YE-aZM}h;+ _E_#EeN×sG 1"*VtQe%PbYVs+bg\]q;Ot.I_̥X(Hs4es tyb,W5=+L\;ƇhXPꙔﺟYMۚƃOFC7r• FSj$F iKI1ѯ/(b,Z:[?iUZ1̚#"޹ZXdCm*ok5  O%ā=de {þ] xq 4~1碵TS8 @JL<d43GϊxkWdZￖG>3s6U^?|';cy% Nn_/|DBj+|!LSZ򋯗"l1Dm:u I 7_GLgPpǐzOMRŅO 4Yĝ]Q ;?„*ͭZ3Ɲo"x=)bsfT`_s qo'7>Ffȳ:ye 5'({߻S GֳO13F׊W̳߻cFAmT[" 7N*?  ևg+!HM^SQ2⾘a-^9zF'ތptڴ=mVUTC =bT/CŲ21ގؘZe zkS2}nn}X~I|HQlKT?sftC1C=99h&3 ^؀#ꎩ[s HG-FýMv+~ekeD'L?uMxh/? {q)u!NWyu-GEoq5^+bs DqH}d3L҉&2xrcD9/ v [Fcބv$$\`߃p CQ0S^Y}7 f GT,jbD];+Oo5!-AnR%A˥Jæ8h췜(] KbK]E#X=舶&dA%yr%?0d0eTܬ7ToS%(cï\ƕ0njI%8qq[4; CD|s\ |Bʒ~3e#Ir(OGfxWnveg%6DbH_N\6V'IlF1:ߎC {6F⍄NXTMvYw (e}x?)Aix|67Vȷ۰mB] qJ wJ˔V16A>]r0`*ws+křĢtoW8l?Qթxx*:&>TpQ\2L/; *AqcQ&<`Ԃ:(;r2D+# wd(e)Ϻxur[­ mYE1hK +RYR]FlW%,U)Ql`Kg1ؠ㳗E`|?}lD[ޤ9vT" ټH=ŭLۮ@qu]D1%2r p |q4Ыmb펍Kx1/4q=a Z^rB3Ƀ9s]>24 ޗ2LΆ ߞ7},9@dǚw$4el]7_תGO}ɮZFW~0k͎ n a{Bὕ'8,>%h~B{;0 #p ҈.?Jb4JPz&#<"~]WsQoۖ,ɞ:Dm*)ԖFT&nHݸH8g7Zx /iZJw #H_֛t*)! 984 Ϯpn{+pf}6\nwSڌ0%ک+\%Ϡl~. ) 0ʵWRL|nK&>6k_\<+Dڌ7ӄ,\n_?YQjW]޶CZ%)1 Gn#hf8+zͷ W,ѽhf95?_sHPx1'r1A;әRHehQF@8ؙ}؟b/'AyR_m\ZF7[@5gH+kRRNۘsԿ7IU(k~&gW7r랑G6 V@VcM1?`"VZMU 9(н0m B YzYK ^͟o0|Õ8ҬM e.Pd[7 D e$~3PF"@}M!4jfd=JQhS`q i_v=z4u~ atpXWՕ%s0_l@5M1G$^ *9 ?02Ҟ=PhY{@[2tiE0 aէߺ5<=SPR;N)!x=*(5i@m*|yA_Y^<@~hALs]!5'eJ~fèr 3H8_ [+,OS#-48RaRx &Aƿ]$cM&xAuߞoy/{XDS ~Ґ]H))>A/! x}"`'QQK\H4Vm c!ojDv~$ &3(3d )v(KYZ,TdQs"Îͻ>e i*2l닃cXiu?HѠԶN=oڞ_"v gɠS=>lb/o`ywRi&nyt@mZ(Mu9ŕw km4kMw ~F:V>?M|[?uwK/z< Ѳ@סn= f剝텉} 4: 4rWӎy-;ݘ-yT>ԾhlY+v$A&W/2+p[:zg̸a,|q6un0IL yK>+oT9kLMє/*`fߌ7 坈SB/ ͪ2Ga2![àU57n1Fuxfu4dqQOfbGִ`W#a-Ƅ f%ZuF A!U 5:Alp{A!`Qk5Uq.߾4x)dT2ݮX-KJÁs :+[wPÈ%nH#[sUX[~MW^ew2ψź` w9۹qUAk !˶ұ>Ib_u(D]l!>,P pSi$jI];Uh,W:H%|՞g Fu~;>#D K>@/p .|aj䑪1 ~J'[Z6cxsmhUJahvi$\jl tbKCWJug+YkbbFn/tW!Gk_ĴB1ץqGL8!(a ZXie;% mHhH NoЗ)k6 XM`=@6L-%an\#8tG f\17me+D4(dl(nnAoxjT3qWX[U03!&e6 Ӻ wú83 qG+/wrkddvϢN/m#_>wU\9.5>|-!`f*)î\zmVWVԗz\)-=_oc@aM5?!9*oC4{Z21Q=B0tMݜkl1viV:d 6SQ|=So/;2ek S;ggNd()*0MVW΢i0f헗N%XE7,Lkw$`b 0L2`Z0 Gh4v7 % nz>|!\6߃aRч~S}FC6hp m+5]%$OK(s@q5b+\f s DIE0D52fMѫO^*èJ+oU6h1O s9GcSrvݮfn.G2YYŠQ.ѠS GYdcSGOS9P3NYu#/]d^ibqDoVA30n63wGN ҅, 4le\SfC .ÒU>ϩWM/*]o{s(t Sӊ6/g"5](04#מb7N`d"z"HRԅVúK*޴4jSHȔ,7 . /N}Am):@ɉW'@_8 !i( D#F4@r!DѪ醖[8¼qUiT'zY9D߁sLiSc‚&6߼=IEwms}uqF-. e~ Ք«)x6JHz6r~iD&[Wȱqn5>2q~_6ɮi"vR®4P3[`CUӏ0W1"~ 6q! j OD_JPftut0# >.US\8ޯp0%3w[@B3Բ~("QQ <5ؐߍhS,`2olܩx>l&c@T Gjշn1-@+s4kн)d@\[$Fm[ G<;\gc~̦Ak:OܭSd2 ]U> oZ2KVL~: CKO$syWt868,ɶܢz7D D@qnn6wF_3PwĴicƪv77*- l hb~(0+e&TUq֑*V?e9H%c~t_c /0*S+YnRٶ4M G9 v_8W5nm0bI4P+Lm2;EZ6K7D+gMq|Z󢁖lK+g; c9 })d  ŧNK%E_v2/^lude 邳oFV^}vuhONY6ܳ8eqs.Ó ^|ƭH#81N-~Lxk&77PѧZ^>eY{:I߱:p%Wv5L7.e %T^/V-C>:eKЁKj lk^>fj0Dv1i $-U6ıeIOic$|kq_9l4׊uzXwDTGf#zo0,^-yXL:qmrBr?/L8&kCN9#O:X,40`Q{ BmG2FwNkJGfnu6܌̜IZ >GvlN}^iS0Z"o)Liw̐<גOǠ!u ^򉶮r}}WP׎F<^Y[ߞ|㷴i6QI@ԄKu7里?x!H%'lkLd=w N!r]?y*ΟW>qޱ\ %!0o\UUh F}1 DBl[Ϋ@KJ_̇6ANxE(4g*ĎhGMNg %iP%6 .%Pi GUYjJNw`liʇA h9 &P6D #6hNLajLIX &ů=Gq;E\I}{ERy؝nA+DqPLyn3%o'vE&BA0G+Q Q>DgdR"\ O "z5m k35jqM{p}eF!n0| մIe 5%Bgifb"JĮ¤@M"FP*m9v?h'VT0:JA3@aPA3M>iP>]?U&Zk hJ#;8Dy:,HYnW"}ltwm^H/w</aɌ *BOD{3Ѡ7N85&e ޏ>}wWpԈh98^cau!q:bNK։&g%TcR N,HGyiBayzA8XT uq*, lel|J}xtr1B3OvU O9tӝn\l}%ՓD% q"n9wm0DB dfyTyK  g - ngo2a ?R=V+Cǒ@3G6Dm\zCTKNm*@ pTm gӗ=́]tmeI$lXlL`c/ͼ[':H0 >š<6"!JJ:s!3,&PFBOm #dr坘,S#KWz ʴ'U6l|¼IVo3ES8;I`~P_4B˦/aP)p,q| ͐rn*wu3spP~8΅xJNE(>Ɇ*QT%#HW"aBjZm'e:ezch\%Gl.vŻ^KغfT8hiwWF3 WJYT}; d+@t٠ی<+qt8"ڄ/+D:€F? E; brXeTg/woOb9h:mБl'J} C pܔ}XУM τ-gAv/U} ivc*K.` 1~;(7 ԋ+UL13EIgjk0΁yo\MbXܨ%=!m %}m}%֫>F^`{58MBOZkIYZW͍kq,l]6)I]vpuZӾw.΋:"'M ?xA"|>i0G2'sҪH*x*Sءw6ƭ&muI8R`q:qj yy%{t(!1mтi?R0ֻGJTΒKH'_h0€T - 1ۈSW&WU2ҩ3IPk}np885}=vb؝CGV@*f_db(nvZ]^0I=ීf'~ 6l9~L^o=Y(VsmcwQDeg1Aj(m=LU# M;MuMҁ&J㒢6kyV׊˄0qAhNl'>2ltP0X)DSl _w+ՠvπGabzǞmRs9x5Yx{7:0dDfasTP['ϛwM3z%m`hNq 0*/F@?gA6\(Z|&9\1^$儁RXJW&1V _2^oKfǂLX044%Kqe@@P8}qqR9xKZ;LH" cn=!>0U,g.&9#Mw& &]z %G'0QEԿa1[.zfzt _IY"tP'#RkRm"Ḧaʠ۽C;9\\<7%}?106S̚};( 9.튮#+;)%mDDb 0AB%ƶNeq0 +2cҶf|G d%_`(QkNS=bF,7V9 N>OϚY͕FDʟ%dS Լ&*!&!ujYtGv<|9ZqJkc${x)C0;1k[x*\Jn#9}>=[L<o6K-tϜFi,8QT|@59ݩi{&_\Re[X.z½㷏q\(2d]崭r. X[Ҳ=% B7^kiW!h51K2DZn YN`Mh@~꿮0)g"zU.TSy"s:`="ŏ'5 U訜ˈ; #tC T*EA4%O+I^ p2  &( |acRZpr#Q%xЙy>˚ i)|=ZsaHS X;G!96+ #NE3["s,d3twk چB~IDO5+>-!B96*'?kENڊ@ [؁_%HE&ԍA5'`׮&+vW&FK({\Fz 2XY,]Bԟ]t1VeTRWo@'l엁D1r'au}` {vp~bMNgN| G}P%!?A4v>ŴUg3}[pcAtRiu\L1FqpyϊR5m^kY2>񍱱>E9~U',7>-S%iXVS}ϐ@S+r~]mU"0Z ی"G豞@tkv #9vԘZ,]E2`·_2,^Rui m3]v~}g+Q#8ĸnؖb5L' 39F&G&mDcw$D"hpH@(JjbȺlnF&뎩Cm6CT- ڬTvG(ԻiOKv SF~AWZo`[~KYwD99(TbNgfA !;{"a:S!ߠ<}?A6jS.'XYfywZC:}xngz%KvAՉ6!%A>AHVR4~Ma%щ[ 2(]k:uulΨk yArϖ*3;2;ki@8 rLXoD iv=I r_laWu" --  )('|裸.)+Ƈ+懢80*m'<__NjacmmrXf g;N,YmкϞe%b0"ʋjpʊBJ%Uqy6L#2^L>d^gxQzpc|f90jI]Ѓl4 zl]}ъM3 T:&LZs3,f;udo iQNѻ)o҆i{ "7AHRr]*h'݂zVbiǗ nXX0ǂjEi& 2eD_z "@gѫ_dt/d P^Ri"˭]EBrv|n g@ ujw}E.mgc'dmnL/ĦDVN憆΁Mڪ9Es1B#I1T0NdWuҊ|֬W2M -)pޑW5wHX(sѲ(m6l݌EE V%bH6׫QQ% S_!7BdSx{=>:Z|e' LYAodKh9 :Vٗ z+.cBx? mhF.~"ɴMvcCԞ%smr f_G@W8۝Z@ʾcT߀\hj]Ԛ6JePd[bPT@֧cL#$au%e&/us+%\|K*cCMΜl׫%g9)H /Gffmm_ JݣK$ FC`B%\&PF ;V 'Rҷ&zY͜ N=y߾9*1y` J\\veE$=g 2:ȝ@b1j3PS~˴SL&K&yukA37|c5e 3K/ezJ2dD9#uKCJ+t.gS|LD׷6IqY|ifm.a8 coK $@L$ Nk!GFaiY\{&`1F"}Vn6F=k/=A˿eqgJ }cmA 5ZƏEm[$rC/GA1I>%̥nχl^-Bߞ dMhq!wƂ+8Q3l\ O6]IC`Eod-xݦrcf NG-5qM*/Bِ%hg}%{vΉ#Cwu YAN o}?/KB11 =NN0V%g_ڪɦ#w0Wtl˺-T_qG=E*c -RP{YJ`&OYol|90{;>!˝xH9 uE]i(aV$J&R_l ?txbKf>`Q +̭q,02n 5gn pآ:iP&qҎ@ JVDMdDU`i׏I_ |5׭ctS]:<'%+ kv:/Ok}3VM r_r;-5em#ţycnX?`۠ wNiE|~M+V d|~RM>ODbmnbYmsg< @vQl׊t=OҖ oSxԵ{Ya*7'3"9\CVhe2(u{Hd0~:yX?43:zT%9MR #.xwD t2\̢mf-&Boɰ/̓ d3Uk9B6~Qsk(}}7{#Eˢsi6ضueWh7%ա׻s_toi8@И.yLQ+e/#` .ljeZ;, vM 2*`w V H,,%: Mh;@ҥ"GSgpi"ǤMkilx Cd;yկXJ ^)B#לyM z'KSWudJ?4W@YЋ䡊[H K٪ l M֗SlΉ'[$I.ņWF܃س+hd]3,7ajSHlakXwK6~o*ހJL1+qG6L+DdUq"j[CKMdz\,WX@rr;_0u՞)Ja*y8&bIa,HS&5f"q EWa]H?{?՟OD(A)d^`b`uH5-bIުhE{}?=bh0 wɌ[T?>j#k73r!:i#2 aq("nQ-/ث|Bx +jxEj%!Bא8 ݦ Xt-BR&: H3@Cȼ؁mr`[`T`}>7+# v6~-PiGi/J)C D`x܌-(uwqh[,'#A.;'٘R>|8mR5[[j#@Eiyn _?n)2WRoX992UOhMr0A3 &<)w6.k#\7r{B}whلƯ6CKZ,~ u~'t FMpOߎ&Bwb<[KQI3E kJ-.o q\1V=de'į(hnE] mG OOz1g ?'mO(QhNۇEeh\nAb-0 Ʊ1 0ʀФa֫/`{;ƚ7mu<2Izcoj3hWb7ut\D=?< o&FHD@| ^uXwhņ~ƲA#|F!Vr9y%;XD+0 h@Ĥ_yD5z WNק0B}[%@_>컢 Ni7ܯ9e%RoLAQL#CWJrC!`RB$YTdU`:E{3.oEJBߢ6_Y:qw&Ma_gU'7ɯ`0 ?jgi)#`*O#gjюMlޭ6 J@om0BLCxra/xaj]MTEpHe~>4_@ ^H5CF8w$8twƛ̉@$ʤeh{0 &Ǻe[ ƍY&_(u#D#BQ uƪ_AIMtJ4 P>%xu ׬DIpUVv>D_8~.6r؝|5(h7dZthcYSY_Y)6zrٷ t5AgO֏ =7{hx- K*$vy *,ӘWug "*ԓD$ڒdpm^yt]\;Ug$r4|3Tn$*UkLOauc"#YPz`,8bUW5(h'sݶe(BP-pQ_[O:b=?&(i`^}{ʸu7,>eehcIk{PXoLnS>k1$-c=8jz2ԉҝ-ύ4 (Mzlv-ڏM< kgu/O҈%R qoTr֌=F-: <]4v )4ԩd ;1/x y8T=/mg[xٺmE#TO \ |F7,dAɮS='xU̖k1T?*LFrlA2vV,ǰD?[}E2Y"-'E6d`7vbiĩCbޑl?W8+I)r&u0 1= =nk`{=Q=gBu;RˀEU>#ݢmtDZ!*gY lZ}4e/JV9NB9곮Ab(6=Ugd fUK&Þ87$2`'/Qc*zI~l& 'QHL$l _h}~x:Oơy]R2Q8 ZoA%eU#7mgetAhؖCS58Cuo˥,5d5q2cpw .@lU2{7>ϩ#k`}yK΃ʛѺ oiwTRHJY T9rcO,RkPIj|:B [-_e~[/ N/aֵ剌.JEMD5 }#ībG~ m8KUkjjgK²YS ,+J/B<3x3ҢN]>x4_ayQbhͥKB\,PܛEm(r Zj鮽!QͿ,`sDеsr[}Q쮨ҼgPfL>h$@L }5E"_e9W qmc9+"ț^twT@yK.%*igQ85,Q0IͣGGHQ2LOBݷfi攋3ȿb(0w7ylQ%yB'YL[Zl洏q8VNM,ZMRL0*a$ߦqܣV|SgXIߐ76|N@ĺC6QA:Z21ՔiyYHiW8 ugYtq ?ly[_t1ȩ' i$;)#A6ϞaM%(rʏ[:,3Hc4q2-::ľ.M9 dupPX-Z3++L(k[\jRH|8FS+ 5>iz$R0:WE7@7fjN8"X(U5’ڞ `L8"QW 彈[}Apy#ua@  0.|Fuݿo nI^z EU&|hFnIT}+Jrd|1^Q"*QkB:P;fJHt RdGYb54m;u|v9vȒJmçj"`/1JYG9H$|%S(-g\40<)l[&Kf+pQ.2jHYW,mqM0'h[j X~EK#ȹƣ-D|D"S4J|UՆF(T=+ړJUC*aK=E O1YvҶFfX-ܽR\TfM`5'Djr*1/ՔG JYyʕVȍSLzG%r%(1{2ַ>\װtz=~Y)㽞rFZxV,sܐ{Ϗ^bht":"9ރK)P_qK0˛0'j!hTkYvHT_zquWZC~q:P^6&#W=|_" rЇpH^l* XSX7Cu9g3 QU\d,8$F0+ȡӫKV1W+m)h~Y%wM qD$CJ"pȕFF#=iز[7 u ;Szy:Y!XW1c;{#أFvC:o U v7^tK`6я*\>_Ym- N.BSfK6aegAuWB CVH\FQoCjb\ #6ag[gWfkc $/ljW V}[G%Xߓ/6Bt ;ޮl$d3 N4 B>RЂ\Y U'S?!f"Xq-WḨUqyqW6;0֭Tws |M|C jJ'ZS ׃2_.rU ۡ9A"\n=` ;;3Kx9 tQUȒ?OV{gQ ?(H<9<gqD"g9ø8 XZ]tc/SF2GmQLICKH_P\fKmME1vYQH3s|EN5dpX"EaW=]}]ե{u],a >)M}BrR|Π*}JFSCzԪ=myQa`HW#DeMoNh. #(; )J5왴bY>}o5e 0s}\nu,÷|6͢Em۫cMMG]q1q$5rl8kObGaB-wWd%-Y@P_Ƣ 0jʱΝ#MVBm_X_"՜Pga"T57&`3:(AGS=)DHπO)|䋆QVIr潱Tˣ}iTYtບ!_tW ˹*MWeAuشMO%<( #?JRwbc$lKZ(WVd#|mu Eld` ˪zG rVP(}f40xsVx^ 5SwHKN&>hp"OzDݲX3IEb FF*ē4C2Bq}Cʴ_'L`3o#m\kdU(1uv.ߦjE/俣Ya'Jhi:^HDx#=4F+lsc64hP3T5Á^jY^;9x `Rdt<񨄪GT:be3K L(}73[A 8}&<U >јlэnejOn9--tD ͅ۳w!)"`! {)ҞeRSAo]Sf/3U/q;¬4U[ʨPTVQ 85/Z/Ad8,:_CΖTT 7~gp :&kaN?Qeas\]2$. %J&ڂe똡@Uk˙*PbH- Mib'hH.0y)r`0C乼8 B.uR4ejn3G]x5#0Yd-di/b'({/+PXQXgqbQvY`Ku0QA-MykH#\fwaη?L,O㳀D J9cp&0l>Eb~@lxTb#+>QX+=:QNv o\~񬈅%M чx}v?dYףjg`s`D(߅w@tfvvތH.;#FX2hծk/p6إJ=yLiXQRc@=*7UyjXꗁ*^rkki4tA{Gdn,6@DY%AhJE(YA'2B٬u\7/E Ik\OQYY-mOfX'cPI'Nh(LW;\ʴ |;Ͼ&uڳMuʯ%W0A%.8,6E;Ga}E%s$exHtg ࣠%5.D1K:LF@XwaV/ntzkJ޴F* 3)QyI|Vv4ˁJԿtr$#j{cξ쮍ts" j`yآn3U|T_!B"Te/5Z*]K<m7DVpi 3Òd6ѻlXa/LKLwhY{ZsZ,dG5ٵWQ*2 0(l-Lt2,B AbLxHIJGnYHߪM$FAY!1L҈oKWD%R7q-zNxMʭOvU${ϳVk^ߧ ZL.O./?a8ʕca {Z 1+RKg .>5O'@ ðMЍy !Y;Mwk^u7ӿh 7Q<](q4\{h8Uy(W9_׼Dykk1H\!bs$je!K+^7LJ WȎVN"36;rJݺ4"I'nQ#v~`━KY'$<! N17W<%Ս8꫆&=HFx/%IfX1u&J%|Ll'ۊdGqV2_C`gh_$!%kSpRb0vs9bnV{+7PLC z]H2MH]jQl"?t}q1ޫ20QIҩ&T17P'kuQPxKP5w]D]:e{Zm'?}0#562i_^֝acn;⌟|aGPb&$I;̇pdoH9[&ER.okmytCClsNB`:G q{/{֗r9"'֡dZ|f752Jpiֹ!!{Ԩ&aw>La"РSBB 3'|e(-o!Q#endGa.yǜ,̓x&8&ẂO010^@ )vQJkǓw\ 쿵t/.~~L  F%ljPl0@\"*r'%*;o $/"%>¢? , t瘂8/?7D~|2Ŷ*>QC@/J~|AJqKf́v4fYJ/ {LSvhOWW[b~kN<$L37<4r$1}3.{KA mq/{D-hyPbCdu){@8]zHSxR|84Y2|DovK`jwd<|>*¸_K>bz?3J%R9xC9%ƹW`?rW .QUW2CЁEJ8vdQkYL#u)<.spԘD 6_y@Ly8[Ƥk+*==\0!wV8b&irx1@' [͜A-a媐$xVQx|beP{+ѷ히 |Ax2< ѢjTm@{~YdV7T¸ rS\QRJ[ 2|`TSGw2S&fEv3:>Dɏn(z(9d@+dOpܑIKsO+4$ 251ÿGVK7LA4Ȏ lJ4|_rrAcn%2]Ӓ V!+5wA$= <>c]P%ÿvQʱTri+}$ S@^jt]M)lzۚ%os0c/֖]I_txJEvZ'ұ1(Wa+~'V*tY~ W;9*,jY0}y_g$ 3 -^Ar0wQ;~xmamf=S.ˇbdAoi 7(|:Q 01_uyX=l+inV_`.! #֜StG;((1<9dnfB]tBG1ZHN!947yP?7*ˬ6$y b<ʇ{^cdfpgHzGˍa](;ڇ`;_p-MBQw*e7G8.} ߔ Ěizmߖp+K,cg+rwOTS[pi0bЌT{r}_Jje\ݐz֏I}jg/x6fɚ TgFp(ZҼ: е-ii Z1ܯPg*xϑY3zw}nu*'$/uO&FEmy]ȞxVpw8&#nOR)'Q1"1`AըdXR[][x̀[/^غ̴wt aUrU: PLP m+JJ[<]fatH|p6Ǎi~-IWɜ2@F**USEmGzqVl찺`DQ8{nojI]#7ocC֫Z" e&$2r 6B"pV/kCUAT?eVO/dt0TQLuC5Qa!rqx[ v/]4ȍz3~lrefߑcS"_g?Ą!"hӒdw{k7? + #tDqOqc]y(d)5fQw~Ѯq="Y̲9e71|C'BNyT@qLGot>A="׮mVq<+q9YM/TiiR] c1z ~A<8d&_x6dz`ns$n;K(4"7檄.X1qW|=MSORi2 A8ߥ@MRT㛼j>mVF꒡"(S *iB˙بZM/OvhK0́Pѫ:qF܆9<hdݨV"-GL׸{a3I" W8 L0r{ V̈aa[Zig qKdjmbCDZv!ŌEY #h'3* >yg ]4*{Cn'%\:cӜ+X'\]y*E&wVoѓ:'Pn-i #;a7".l-sekQli@ȱe}-8Z-w3z^^As/~+/F"wdK,.ek@ҥE~߻y\)h!o0lHU;LHz2` l'~1LʍΠ֠͝ÿy5%e/oڱNG<%S kPBa_UqPR eJ 697 ceO]ҙCA)<wH3_tqZ#c1z MRPWe-Vիƅ2H|^$s&Njآ<΃D[g*/j%CR'>?8EUddL~J#n*bҌBAo (]w(N?j#!BT'ugy^B i.=,Ṃ[M0X a)ͦpu4Dt<1&HظR^zGo^ lgU0:h /Hd wog8qQ,X{4 ARyK!j*1Fq% o z9ɤ%F޶x-2Z|R4dW b5Yw|}JT5oq5wbno;"bWA$T y~)Oo]CoYS{qՎö6PdTҡ8jnǴB=F`V\.uiI- nV!}% (>3]XSmrUeZ28=֕<< HU8vFeSهaz}n#|h2gAdTjw= J|/ ,n=JwAMxV!v<@bx$ѯn|nA; ]=lv>S.%cm4k u.'Y]' xŏ%! TH/wO:ͩ#U/@\C/θ߰alWuc1xNV7sŅv X#<7S2)햴@HS/iVQfCf2:%q~69=*9[j3F{<593P06Vj3׏:9-t|!+9ɾ(n, QX,$m"Ƭ\[Ӳ{4{uFә%dAu<cow-eK_]3c M&?yA2zLa^c 4ݑw-h891 jmFy96JDt>"nxl+{%|Z60ˠ+\;s/E`G1; ŝȎJ(5D* pW7'F}#2֚@_rw|fRvB MՖ|ӯ{PݛR-P_,{ :q tԈ$NsPcA4D->xn$>GDnAq";1zxoah^ DCĽ뀎uQMPdEλ^qV:q񔉤O;:뽧*z10m+ #FHZM2{"+ŠUm&0z9[6o˶.еxA~{l)q%Jvp: Ʊيl@xnL!"=nپ!ƇDT'AhT!Rϛ$\[3N t~5D^eWF4:v݀ga `cf[4n&/XT\<+Dﾲk| ؎{i7T{df?)rT R0 ^Eb`Ŝ i_*wE{{TJgVh@#s #+n+ mq&%DH06E Ys`tS%q$vA7N=@<5-(_<=rәC>JuԞ4zt-WN'9FQYRb  r,$P1SeL]K{.gq=e}hY⻘\>2"qvܱTR|j\ZN@B K "5+Jَo S+JR3|<`O" ^4\:C}{wBNea.<ΫM)A(fn:`s*gq4( >r|vIcb_:7hG?A8`'dz#Tߐ*/w0ͽGԎ4ek : mWoS5LrcurtX5"%5땧@Qۂ DwQ*wjA? =~s(*H~0Թ7?E-CEk'܈}̚{2I .0rS8Xfxvk(ƌ 岩+ғQ]pK@G[? %Mi# m"wk'M,\DC27C8rGGz G?2%Sc}xO"Gը@,!ҫH+ qG-Q:b0!0Y$<*(g.EV֢[z+6ƾN>=MIs2,.:2iIS)5RBK?یnzBTR@ St߅SC6 4"n)Gp-CCtEaQ{__o|֧j~\ |D/c\!Max-PeŰC?KJl!o"Z^At ;9K$D(u@E}ygePn2ߓtotW#ÅC#э2يXN'5W0I"*7Cg!M# <*?WqFXJ^/g+f" !0<bF#wc޶a4xktU#2C[#WH'K)H)ӽ6z5#!;u"%GfjxCl3=a+ύ=vN("z^hIG] <,x73r& rɹ:R򸧺Y) ],S 4G9bܷEA >\/MWX FdH+S.修r?]}w^Rdk YPNG}pHH b4 ^Q6h呖+P*"`ΚPmc}O@ӱ'ʍ+qW:$F~%w ֝㝠'`c++?_02 p8*߂۸A ȜB/FV>s}#?+SHUƧ Βq fnXޓZ!OL {q9EuMRDb=JrM NV@ypF>3L3#Tx%ϛ*H%'I$wՙRE䈞tu|u`uOu{jFgny:͒z;˚yDON㯐W-tIR?S@ !!XzO^yk2R]:LwPUm^\FHWl.ikL=EN$MXw9ER}s 3>r<#B`<eMqA(aMQ}'X'v/3g|"Q"=B:H, ֤:K8"25 (jUz[ 22-?vRNʮNK*[ Q]ԬP "O,aK,CY騹]XLhNGQ8(r =a 9DbNwAip[f} 0c3cmwXPR| n@Ԋ'50MPZ!M7@Uc/n>c`? =)'Qűf%Z+P舀|c aDy֤(@khI‚}Gi˕y#cX=~C\J`c^Ke56Wd& JқLSYP T-M,tvȝSC-M ]hq7fHiKt)#"1-55)*o9ʔTԵNdI[RؿRTaVާTA<p S~-i:Qo@|nҀ`o:|oBl%uč1W:̙>ķ.@xn1w~6L7VP sR^2N]SK 1V :A:X蓝.dzqG߃;&H0^_fBK*AtYCgcPlI^nuW='a`l)-dG(+6,neJʬ5޶jKL:/u(D._q-8\m~`Kwv B,wyNCC##~=վDPD Ii^6L*EQf鐿u* X[hI^%[$9 ĜJ DsR:P >H\ k%E\?lG&: u ?N l1LX9Ϡ:e$ g`ə2cQmUfP|/t 5CpF !rl=u[㼀aSgSt%K _4>t('ONQ<t K|6WC>} Zdl pe G ҭҴ L\mFGoRW;Yefb_:=SvHw4X'{[~5<uDѭYd.yPT9Xofx'{狜Pݚ!7~C2PB8zkiH]_ $ėNbehq4Xp$R3Ezu׸;pɂzM <~*ӿ+R62ZÔg ufnz $KfY)AXI0b~MWqv.KFy?1:5lMmr" `q}݈_[,?\yjAkB"ݹ؂I)/RHZ:D?хC#iH37ۗ0<¿UɢIZOUxX($JcFmF3j .߂QhkeIVw4BD SRp:$hC_6i1ڄF'>ӼvӁW۠B#7aҊ @b-%7TRiVwLRd>/^?;ohMQ^>̒y )1t,]F@=c!P~\%8$릛z/j?\ɈwȄN>nȳمqK]+xCgjQ@)oMCcNVw7%|UYmUcnчX&M(BjJQ-R[d|m `&D 5:ov&KJbdz0{(ٮGbت{R]WyN} :x`ڨ+`(q5V7cWx?tVܸ#|QJ4ѯ}#aSsswVȁWUZ5,x7!5*\6h^&!yC I@;\Rt kg881.q۔_e%dw{oE@BmlWtҝ%">ͳeL_iS[2TD9ΰpmL@igN-ba~{& r?'d&#.Px~/pΡ%"iC7k \f9W)Tf˝]z,$C(w'Ѯ͆[|'uDn|6$?:*3,5/S +s4鎎89`(JEC% =v3ƷB;֊}e?'w35w;N'N5+̚~ە4DZ=imf;feԆQи, 4lO4)lXU>}U|DĪCE+W5/ =`JAS^ȾE''62M<SZ+Mב9<:YMhmڞe5zRBx0HMn4zc UQCBoYP}$QENڂ)~ } @ [qFxma42t8Sb|u9& :5o|Jy$Ss%w)W4~xRT%WJ=b#ņa0s@,&W#WC^}e6mOza֓L?TNOđ 5z̼v>=CCh2őA-+yle|oc{|S"X| 7*d<g\nfD2`CuLj}mO޵OC̲S=D\υ]ғQ(_lDz0|yǺT赢`UMМ6]-6&_$k.0ם&2~W }j> N^T4O&jF 5c"ߞæ،xK0rFd[ylo})S @aotz" 36"mu3SFM"dU+vƩ "z7#>sbÏF?FśgkCjkb-j^p(C<^?Nm ."ҘHD1_S1\+K5n }c=]J+iPHx(vOʢ;5ơ$#IggdⰸXZ6TD ¡@D~Kj#%2!BHW6;;{)Dz4b/X~lR.S6^0t$nYC+MozLlv<dIsc|6a6=4lTbpEǑa{S#Q36 A "/R@.9oǀjBx;yeUXCMԿBe,zٽ`*"iBECyr t]J6lz>+v}1?xڭ hPl appsMD%{$⺴\^8X|r;TËZRF Cw} Ã\,uT2_6'd%}1BGB+k$ a֠1c4|?UiVQ\S}LmhV(r',L-ŜomZL.dTDXjp9~5gҢ2znWht9#WdqdNdU~5ݑ#n^3SǪGW}qUE"5i\FPY IIf&9GaF^q4̓ikYlVDR\ś+c xSg.E9d)G()U=FE$@^*S o/~D6іи&<Rf"mj,ވN1ǫl/Nk6 rpDPe.Tcq4j/jB1"J:D142 81[1-MW947FI76' c7nXhƮvQ %dmE ]M_Zp Qޗa$l,PH"<=p~}hHc/dWo}J g񓵝89 kr5"_|>M'.'Ri䡻0[oeE3%+َ5'%$.}dI|KtZI\*r5aҿڽ\(?sMd2dW67* ڹdџXk|/DjTGfў]%oۘ}'a@CǬOSx`R,"Ir iW!j*Fi'{Ok%q&-%fU^*&dh3 o[X/q+dsĘ=#E#5 uUMQY<wnܚ6qYԨYǪ9*ikZjJ7Os+a\0Dq/1n@iko p kX2asPJ\w>m;Oؠx\(ςuAxҧ[p`XL3#xQ8Fm/ߞfw!!>jiXG}7ٻ":o‰ľt|5' wHݽ&̍AEryĞδ]3 9K:pjk-^>IO|Ա|gWy.mބ-fGa ƚ¡~vqMpf+\,I1"9:QLJC:Ŷ- rAPKcR8F rQ]|`nzU[NuSJ歃Y#2`J =ln}g[IMYޡS_v:,'B^4? S Tblhvcl.L;g7K&qIѤB٨CZy⢼_D>)'^K7g-eWTG5'3֨`6|FX:'~)|-6ɀaawi`YkHIJ] 0_fiEӸ ouY/Nb u=g\)C+I+~ ܿ?5ˋw,XlHZ,Ҁb$7T8r)r- Z~MG<Tu>w-Uؙ1E_A^4iA"aa<5AВJ)@+-,5 0װG3~\Л,\tLXM|\@vRvV]T,=QP#IY#k+mce{'xKJ"fc`܇[H:>XӂpdqngږԯUQfE>G8g^=+,ZRE:Mx/ \>1 /'9BSMخJbh84DkTSo|G$g~I݈ aeA֙@~VcR" M}<p㒧vI:yn{qUh9QYh[!̬̃Tv}@LuSq]] M Wm' 3t7EMVYuUK^G&I-%эhkJ4 'ATPu)~Oj]SimS9MX7E5O'xƴ8IjV$QW^(]shKS o>,7Yf19CEÂ83=X2\dxI&ԃ$P1?< 'vYCV:P!*֛vjEM3=?u"ߊw8bgɣtXZT%h%bA8 VMo>,]k <+~%~4}WbmNgjZ$F@rg h0RL\a @XG^=_Rk}lr|2q/ d#W1GP D8ȓ^-c$kRbISUM!`Bdg (7ÜM:8iBF%ztm.{iX[9O**4j]J^/˒ux. 2&_| ![ KteF0ھ0pS%ԑH|K,t L75Y Dcj v-ABBwĪDm:)?Q*|x¾-vHFjiw@?>L x/tS:NC\1ܿ%kصҁ.Z3q%@!Ĉ CMQ`[DIH; tMk4j‴0U{rDWؽB-lKn^G}{X~Z(?7@YGQ/d*dL,a<mhlr1&eMJ w,͝)vKpvoQ!/;4CYtϱfT+ H/-s? PN sSb&60g;bs .EuyRPS)dܳ ~] 0/"`U_8iW'J&1pԐ yQJjf8,- _>pV۞|hzq|;[)JӪ !7넌`%,GIm^|փ7 m,rT#eDT̎yc.̜ E©f\=w)*x2+Pa؛z-VS k6߉-- m88 Tʨ8w0"gq(}8hb>5xe T3?q d7`Ew˶^pmuj.3[F 4Ȏ)'>s|hB"eӢiEßm*yሁ=U;zd_Rr!@p>w_C4ڲG_A=+lKbSE1SĮZQ`y`tdn<|bg2#s3*yFFv/9߬Wۭg oøyiL4^޸ŝ'ag2X'权 uRmG ( OE+gj [dPtK,?`= QtMֿPQ=w,xw[ y<&.cZ upv;FM0hJjV~r_Z`*.G!Ke9&{%^Niˎ/%*9NK>D=WU#화iNMSM Ym94:US)a Tf V/*.hk.0Hb0d7QCG0kv$EI+SToXrgp=ǙKI}—Rޖ4I.'ȵ?bΣ< /qx9:BE x! *±0fQ6WUľ9Rk*"o\U:}{c\eԦ~J @qNWg;M$-VPsC qU : \ĩ²& E{S5JKpB6Xy&0y 0{vCIQ'.K (4·hq)"Ru߉4pigXlPrXxLSZXSJl)6|^V_I^0x쫭? 8H6;)SpTlK5a> ӐpMoMAK@ \v~[vzZozs2Xl>zOOjiFwafGfw$ҙ1fa],޾P)\PqΚT.P|Sk[mL=/Aҥv} Rq(5wevێ:Y(CZrAzʛbIztw~ . 3*hKwGq ‹v9Nµj\B8˰m;XE>1VH,:( `ihCX/(LLyl0N[xfcx^s-c Shˉn6(* ^iz$vܑK32Jv"r8RX4|mS̪ڥ(Yx!5jƗ-neƔ:~N7BVT2p*vIW3~#qcd8~^GTЍ  | '̺-;K獷[~U| ® !6S0 Ww _>@ǹ U&j@d̪Mݴ ney t}?j85d"Hrӑ!IJJG)KKoqtQRm L=Vf콬ƹsg%$f:&m*>ںu?I %aZ.'8j%0m664EƁ(6Q}iF0ʿ!ZhY%w l zMKۜO0˩{(׏LFL _SlJZ b?([zKDQO|uwSf۲ɮЀV2Ovs)"]>[ɞ!2rvaCI9̴\DZ [ɴrK'"mg\H9RH1T󘸃.g >}f*2& /VbMt 9:yaZˊ47@M?U&Zq#ELŨqSzS3#{6[ӿZ~s,f$~& 蜌&T|&BN~ڧRYHN;ykh K SjmLYhɨ0(DݸfCU5;Tc hSy/U.ЪJ&%=X<28Kqxf>\0bDŽ߭ Ӳt?oW r&M1,Qpq8ņ9^-ocS ޿1Ksg6La+93P~Hd9h{']/}dp:+^+Ҧq-gp.m1̀lC\]KQ)Ydl=Z)Hh6I<&sL)$z A:NSh!`%o։fߢ,7LG)=+~q(@fmexD#J = /BSʽI0NzY?z>[T5nIȿ?)B:'Gp< 5Snb@V£vۂ ^ {(ϬY@_6#]ϼEyߝcci们jDkz(+Z|lW%d:o´(i8vN^DU^*է,%~m/5Nbj>%. iB9/i\(?|1n⻣д BW`*+\9eBrϒHT.5.h2½9MuWL)sj7!4Gpc?Xe_pkf K2 = 7ɝ,{ݷK΁-u~$T>Eʠp]^V |I2RqPڣ#s>0ݾ['*+ 6T%3+Sp,. kmFZ~ jҌ.J+jJfݴsO@8;ɎsjwAޜGߓ 1jʜp3Vݸkw<ѨU_*> k{-IOD M{Mʈ 0|D:ĕQoux_@ì 9rB@P 'xQEA-AdP3c=խ"΁k&rO!5]\ΞH't*ިQl?bXMj =E] )gAH -nf]>4_nȌJ#.QrR"׫}),VHn C:J(Netр)[i;o"s1YнZѸHӷ[BS{Oþ]pC§ Rz~_$CF fTUq#) e !=Q jj-ǺIBz ,\T'(ļrH'8']L}zHG^t7xkoW70r'P+iguq0^N z#j.V#Ћ% ~Uto) Mpj,'lkǢM {9Ŋ1%FnL):fAj &`;}8wdz4賩DuV*Kr8OSW jX˸7Wҗ #͎P+*BZZWOtŃ#J:2B]mcJH&i2!xXT̀IQ'6 @d&QNQ@ ja_Rl?OH5˟PPewҷ/0B4}Cjw[s[O!6qLTs HP [3& 1ܮ^mDr,e>H$Œ&Vn7 f\# }zfmK$i( [o _ ߃r@ɓ{v%&m¾4~ Ɏ4 u~IMGb[|Xx׋j( |&Y+kiU9r/ ]k!dqb@L $ +f~hX@2 h!`##BԱqj?UuesWw?]nn _5ZjպO/7y@k=fXS|6o%$aX1V$M5 V4Z 2-5oadu-ʼ`^\"'?PmA&l>f74Ygk]W'ftVG8}㵚t۽YuU)F$-J:ҢAgix@IwP)C @|%W5 b]!npYAMD:Evb!nqUyS ͲLvjM4#s !^\Gmi}k jtIxRe ӏU٢؈>>RO*еiduKЛuké;cy0vwIS;V gߢRpSk|xJZgpGqyeE- vlw_Ddtc2 IcT$/WpXLCxn F}8$h/ݨm(o.@ XusAWnfucGHCΡmn8P=jmDCtW2pZp^KM{w=dycisǜ]AM]&pRUb]<"dהl5ukb ?pXup<\^">x}h-sl$X9Ҕr2:% @R޻$EL ΪH6hqQ=O\> >[& )Ye=: ;OJۖVC94bB3,{dz.PX^0^^,sҍ k2Һ$%yez?*2[gOI.F$$X<10Aݺ:%z=:m=V+G( ^-X,t*1fUh(K|+ Nq!5їt;;aBԨ q(+g*=/&6syȚ]8#DD}7ԢT9 HNYs"Q8<'+>eDM b-:)pȖOd9'_O J9T3}->b iG!+|P1mKd)E|›\:BJiϑm=4Q ֺzfd?7U9/%M%XPy.K\~,bܚ ƥ|I(d0B>tt[|ɬdA d.mxabJIoy"^[G=={$ȈM'? qėcZs5[+}KKDɐ*5M  7/> aHQ[,T+KD]y#JLZ˘[*n 1Ƅ eJAac,ʠ8f=:C,j4@>YXÚ킇" dDJG?)?Jj 61=q Afpfje4^7Lۃx 3R̜ snF`*.fZ%W[\0d =ĜĢ:/X`AB1'wHͥd7JfWD9aSECm=^*2,=H8Z6il0Mc^Mf&Y`2[*.")VCZWt6eS7.[Xx!=StzlL׽xĭo$i豼4?]p]@z*ulĸ2ԪMfo9z^)Sx@ :.d@]%շB"֤,f#M$b V^\]_nt˖URw-Tۋ&N,څDtw%@,lm/xLUsCQAc@jj RQ7qS|+OU|MϥdD;g_\́ǧaf*CeߗO/ge· &c \Qs$~x%Zb뢼4#l:7'̌`zhMӲ~{Ufi24˲/=5@ -X߃5two):1E~E|?G n2N\!iݬhźO89(Hh=]Y:q;P-U)NĜqhLD_bӼ$z!{ 4c3){V 艡#*٭JEo~9H~Z`)t l]_ mnKso~kR?ql,Ŀ,Kt1_Q{/g 1AȯR5.@LcB7?lE(Qdcre0WJ6ŕpf}*-Qo+ZSgp~ؼzE:5臣s34l;r-{ ez~v,%w4[7&0l"^~#n+M)Z2/)~1\ۇ5nώg+ Ѕpe4D9Ѩh8(‘W aR(A&&  M9~#XB3z e4~@ U)pBRh-wjt]ȐAj|}!: aOkTLOBSI) DzMGua~KnGK]寐-6k?)=ٺ^3>`WM6e2enVј@^d㋜n:=i: 3mi3Z6+FoV& >z9O%U9ٙPp}r{8nb0ԕ"lWfRԎZ(?!`і[1}ix N")Q"EԱ_2I퇆βEm]9-GP7,M]&tl2vKMY.,U#ڿcB*sG"<+`rwyI`; #sURmY^M\# ~eTzaJf גLXC{Ɗ=0JPPŻ.8d#T 7j7L3GY`!Ð_4kW=54t<}hиG0wK<HhT?-\=3ґ#U7Gy%|L'ȶN@\v.PV}4}{d2)%\L"B6} g"ls}r; d)ۀmxv{f%O\ԼZ7xeEc6gs5)Fr0r,W޼0W' &[-do(?яL]? U6 ڡ`\ {mࡎi#<+)m/OTՓ93ɘ 8RsTF9I6d;|Ce?|'X럄+M~bK-%P#hPEtA⹟e `[uGkIPu>8pѫjw0ɕByAF:ͨ2<+TŋU9}QS)+>8q( pLQ0)Ǐ)J29rY <.)$+5TcO٪[8J̤3%]_ef'ԥ͉6N`3e uQ,Oh޹t4^M5^eE ||W *S"3|<*0ŧ08{6UL,&qyk`5w xsC@SUԜ?Ӭ[F*N9d8mKCCYz.0GX\o[@MyÙ'7q QK66^eeiH[ޟ3]$%+ytVuv]8GH6kÏ) J;|d{nB7ܱJ/"J3rs!* $f43hoiS1Δ8@[V+]q LLG],*N2W>/1R!_՝P꽵E1W{fY:Cjb 33mT$W VP85Tʘɐ?wٴ籫ϙ)5³ (OaC y3v&Eu%M8Jr>d9'T|q2tR鋾,ܬ.<D *3eyvVބFbμ F2hJ.;i914_@vae<=p>sG'[-)6H9XkD09r9׫$8Y2y,`aA Uޗ^VH LhMWw6/L m?<)we >r(T*B屘 B$t:s cWIXihoa"-liU+É*($ʑ蔬` byJܗ\9j`Iula9 (Ī}nc+H|Ijܹ+f7+e@z93:GirfSf<"\>3n6|U:|}Lq _ߤ]͂TlK_QgScl&kF8&QJJvDb$p#_'t%ʢ2-Q8]U)ٿ==i[MGORGk,Fg|i(;S`ˉff AW8?XD{~+<(.-}6t/ SS<߸fYJ Β0:_OХVSiP*3W(W֌|GO`Ff#@"n^`VT VlIMVΉ#P_.^Ip9wxRQDw/dM-dz,fzr,<:g:z,y"^BITW@X O<8[_nQ,)9 <\Ws^Tr.QWf; nq@S_3 W,97cբ\ܼZp݁Zn )qci%㈇@/Ƞ;]WTrCX6BbHIoZM])n0E ΗC?ُ)- 7<"wʗMi-,W M3IaBO'}Q||: '1gЏ 7w~KH@(|7DYDh:0H#yfYf8Uǝ|83x|hf@ $'ccfi*̺̅ |^]Ou {ui?} H0h2B';n`BkܘpڸJg]{^;izez섁6#Bx*1yX≬c<,wz,DqBMUvC+ ͔Qi}N gh7jF7|rY qo۫bRgkϗj^ nl> $%\~{Q]|{ m`C9j^`*/CIy1"@hs<Ƕ马n2M鹺xH%XrȱO Gu&tJ BQg6 μZ&w/*i$nj72c&k=TŦ7y@y 0̐竨 Q#`sv8m"''eTbO%mǨ}D5YXIq_rՋD] ;JmJNI_ZaQAWB~pB_C|K_)/H| PKoql̨Xp1+]%6ni)%,u{_8~{?})qy'\J1cĭ8PҚѡ_#uaQy>"~#2T Gv̴zw%N_eL]wPBLjJ;٪p$t4QŴ?Mxc6A\'-_/|XZV Y2Ͼ*vXBCaOGHM 9&340Ŷ BɂW8Ց\U\(̼Եю1HHXȝ+Y%*-{nk 7U'ldY4%'MpS3\-|RjoYx~^)X: .)oRDg   Dtr#+L%p qVH 2!JCw˛=^sT jmhC\#BF:L;utxɟE)T "57캀P͹dWL|h%ĪƃQ@B}PxCxosQ `清xiOVlNKCxu⬯[0/E9I&߇y+F .%[]U|G vB~y}+'ߙg/l3$j=Mެ//T+;}G^՗G cL!$Ɣ'2=o \є݄SC%!5胇!$B kBrTZ V50n\0,j h]+΢h租S$Ȇ>[=&?t89, [+aU{ZB!?4vkfܷRCU(q6]7Wk;s)U #/2BJ (7 Wf<]J{&1WR\ m䔻W1žȨ)hL/u9eB;B\x{uk3ql!,W{ǁ+)yKpGVGLd#S[XvO]!U}}&y ye}T~"zlEv2 IYЇ~tYIvҸbHzv6`lG"A|5_v.WbŅ ?ңN2T@5D]" tx`82-zZĝFZڝMWZI-Y!U7t-\/m4-lٲDg}C?*]%yJ :.m[3;'H,;`o0J;ȃP]hX+p",NYuj޾ 3ws{MP˯Dtu[P ;`PC[볎-Nq:Ɓ|!G7AOG?X 9EM&p&Z࠸?]WvHi| Kb)d=q_udS#~OvsOI7xH$`LO*4[_7((4p_–*$񾽝TQhADUOBY|9 "r a{=Q7pWP4Y?cLJ߇*Eo2_dLxLekld~"aPcg;@`+6V *X0D7l%"JlNj}2<(]o2=|Gwv8W 0QR!\+ T7F\I&٬itqvVQ>.]a[zT4o6Ȭ1E(+=L~`ܶ8͟k6Q *U&+pXZ۟H[?dOH }/&VimxFvI&9kⴙHcWʹK)sE6}ێ"i(Q}~3|u`vME)2٨eXN$Ӊ%02:idHLEs Vj䎱}4tqз+1&pfHID؆mlڣ&7m8M)'S=_&vT/s?ɅB1vP{G 8\UL}Ťz`2dZmrG%ndNi!7[^Y$=is>Ff_WL]csFGۯ&C,30~y݄][ݯ̪TY@Wk>bc/*|Zz#ȗOh&_hEGFX3 F:+:+'#$I'*r|{l.^L]GI$q) hiK̖Y=(C<<ӃWrBa*~:dı/J|d+&~犯Z$!pjgx͗ޑM [9M}?[N^ .UDkf>=UOK =sq͂ b" ?c^y ۋ2ؿeJH2y.خN$x`Dn/?xB`3%3>(V/t :)J< 픆mspAy9xG3^ '4-ot~s%-Em [y[3゛. pG*nQRq9iDuJws-92о}:$/; ƻ9$)ulT+o۞Fc]b/ "g490D]ERwg-= ~ců#sRmڪm¬׶S>K?I3xㅉRn50㝰k_eȢMfܙЯ_Ӻ.n'ywg*XN̩6~,u_}Hh )чi3< <5wI%sgKR=xD6!Ŋ%^j-~J@ X0ah"KM'3\օ}ldJw2'un+b6,^zZ/ VF:a V)0LJ͒"`0hhAj95~6o(}1<uVfiҳ߬܌EgItꌉl ²Pr:x7Y4t~kNv$i&NKe11cV+!ގE([ۂV;NY9 `pW,48;i-uuH2_@sՏd[=$..\ IuȮ,`zØGlQrXsc ,gq{4HWM%*5LȰOaXMf'(`Se(6@Ę:]N)m݈6.Ou^hs@LalM>Y-(+Xa' Y JK~>vgTe&ZmgYeh.Vb;=Gfʞ8 ; Gg_jAH tj8²42Bė.-'lTeYlO qPSgf[W4-* j$AO+$;N"!Ag3 U࡝|ɔWn9Rd|-2Z&Fb7#2_= d>*{^:nc;=P,%}bz~f㌚֝ aӬ4+^36[pp%24̲?4U|OH6 }5HdZm|`r_a\{g<񚦬$)B^@!nI%.jkr1+RQm-. eR-3h?+<(""W'"j{S/*R wˊ)̈h Ews\LHHo61F%A ZI^fJg`v0/dv-?4]~tR *|וDvԂ|\(X65 ՞Bec2.[ w%3w^17Xx(WZ5_i)1؄<CfPlՒ3{VoƬEEiꀡQCy-b"1p -L?tA[klN$ S-7[uIZ͜4"6u 6PY)]kzC$b.sQԷ!. [-+SB9lJ;ȜTmA>uRW?mY캩fx]D_Ԥ NeS3Cy8I#@}#hy c[,@ۗOȕ!+K[N}z3N1c]=< dQ&3zS_EP*}p ztޚ0Z+h6*j' @p?;罥X}HO)HU`Uҏ>qD`3.߮@oHtZ6NUrp.k(n`Xr+=RRMv Ř$K#<.LR1J`i}g֖c^ӶixzrH \L["J:?r CKL?_wK՚},~@Z˽s+"'~0.%i)+R@;\o;y.7`ʭن*6Dc- (nb|9=?Sv%%f#wgw^h(̉\O?bh˵opV6_Z2i 7v6ַV{ջI|\;%4֎5#'l,HMEpBBG0e,`j_ x\yO&W;ްqj6ܰw_j[BA%8vHv#)f@8+y xH-) O#-_E㛏'PELAj^4 &uQ'C/zB|bEJgqmP+},y_[5ĶpU&oNMPmX;$qJW&sҴZyЕ%qucp3#׵V1 0HCvk{_)usR3>!i'G\H(WpHXZ`ވ f&I2 r@o&ULK&qŤcY$H WZ~>ћ,7\gAsF#.Y<+ȹiZ8%R8߯}+~mq%XU8W2  Tk{+,b,齅U8tP\MBk4 Z`UNq㘖j^.Q ZaDnY!ͮ4@gX)pDKY_)ΐ ;1t]O#6ZBdkqnvB һ c`#G4%wn}"В$o֓ * ,51G Ta'74?#3gk|x0Cԯq50X{޾PqnQ؂b99g%6Z<p 7x60|T9;g Нkesj{G)C?u4JQ,V|T漮K l2(B+0L~LCl7ڭѢ O 7~#}@,= A"Z];{43-3gSRwk.mi=qCUoMNfkf`}>(x$tbTgQŠe$a _1!3%NfYS-\mX(EY1* >gmvB,"pz cзGNhTT_<:M $3Gzy{ )=I5 =Ho5AǐESLUf] կ9R~*,PN`bUϕg@) Yl60KNJ 5=)n7'X?Ql#IRuxbIs26 |ٲ7IƄ(_ ^zi DbM }勏14uB%~ xg 8r,E/[Sc t cʘRpfC!eB^'tӅl z0T9&YVLaz[:~ {r ( {R2!`̄;7 _]Ό~?4uRjKEe9˿9WLJh1_Wo;\WD r 63wf>8,GE0D t/LbR"?PxA;[S'As"抨44lÀYess6h f0hoDIH?:,傴g-d Z L`K cc=^بE)pe=b)Z.áJ[ɝAgZ⏒0M*U#;ŞZz\ XĿ'"TSnR>!wF j@*\^]i!`ռ]0]iSl/zzT@NpDu #ϿpXܻ6l:$茋`~59^@#]#<ʐd;/XsZ{ײ ʣ3Z|-`k:c"BECͼI\|MvHǘ38mvmd_5i1Hi RjAl+WB\G?uP` ?WRdJ|xk 1t8XN0lk3Xg#E@y 4̟S.jd` )}:p1WȤ#؝rO'Q$;$ |Ec֝Y |WL}QhV5[=g7LuAHm1!BuS鐼<3RY H_2ぉcaKB̠4Yy&{'C:u׍]uXe&h FnphahTFQMgq~6*B]o!˜7|$KY&"J4r`󟍒 xq [խhYϲ;Do@` o.[/Dx] ݯeDVNFʡڔcBu\~l]B+샆乷Y b*M㌏Ih U7%D+ar =$Gfd iWu9|pX1ʠe7˴ΚR1Bm{ c hjHƑ^]vu0l VH$V̖?T;f--~3%;u9x*x:6r1uw343Va?k5 (u6א\T "^ Β饡d@D+-L&TyZ={BմQ"uLw㻒ivcNعex)k|f病z Vl<"ɣ]:++o[k[t .uҖK# + ٩"BBexmuQWs6|f9?>O哺*N3^ oeJ~EuVeRR4\Q|fð4=[oQ%78IUg®ǿf":PrdC"tEKf%ycdܓ"AĒxVǿoN*jF?bQe/`٨CG҂и kTwBpw@җ#QT OZ؋Mw0IPWs5z3OzZK&Q3uT4hj7|zl5R67; A !^k{Dn1FxG Ќd'`$օukTP:\,.e5JjȼxeJ~m;'t˼ؘ?E8]S6yf|GJ:vu6(N/o GR 1i,yW$L=?Iט@g9`L»RETR}sLdzw:q"[W8 &cr*ԐP\B RU 3@N_J "Y Ja غnpsUKk䜏$i{\Nmn׋r .Fvب D}1hǹ.͉jM cstRw R ^ Ay-}.>EA'/+q W!(ZⱸÑ#J`N? 0N+*W~Hj_&2mP:Yk5kǑ̃h4lu(؁:roz#.h GtygqZdW2W'N⏮"n7ٺ3B+-/GeBpEdDisU΋1p[쟳ݰ]^P ƿV`i@_U3 >g#dQOCn.K8$h(Sm Ka!rǻbI[K[Z9;%ƒݑ͠ZWuJ'Z/ړ$3)7#WwQ)Q*9ckFt ~|{LBZnbϩjv&H]zmh.f2ai햏ߖ=&ĴY+XǑJR!bXXjRR9rܿ%ۙ:S]A2["vw#G ,kV! Z! Tc E=-j/ʷOIRQ{`,Xf';nz&x.yL*=^%*ȸNw kv2NjŊtiz:Z}W~$bXH*PhPIXg:HЈ_:{1oOx9{o1F6&.ZfAk'X{TY>"-?m"h&9S 1Qi}>THB39^uCJ姐iH )<5ӅDy0h6M'P;8S[ds3j h{L Fi'b%uU[JX4k4Ye#B'3O%A'/ЕJ/;Om;&KNd#Q^Lpe%2-J =X_nq/+o76҈$iGfSDJf1$l<"b޿I2her=4N?dvn_n*_pZп@tZ }=d*+뱠,WB^*U(}7=Y!7t0dQch4Sӻ XOz4Spg?(HBBFg ]^1QEtyGp6^k[F¹ nPSׂ?ƶ Yo'H!kQhS@kB1J%Qyݎ+_)Lfܷ} a7W&%>u[*;9a>4$Fq\FlW=tXl3U]/ >}A;W̔ q"!WB w016588%4ݺpx`"5*wxmzV+tZA@/%cZpSطnLȗ*Ti]G) C4fX$XbloiyjG!RMh6c\Jd9&[Sd9;ZE LwW\7<(Lv]-*ur%N>D2?7".էPFq[$\1mtuuoL wz?Biz4䋑-3K@eo:zOιI(=#g:51ȋhA/=9fզV42U}Dgl_ރ &͆+ղ>c60^nHkeoBH\ܒttE`QԵ~4 tm wToU!Q\]V gEe@0[?ÆE1'Kr|+:%-uY:hbZpk? e]ZO$Ґ`xj";9LM~3,2& τ'VMo5אF2:Ʋܭ5.dDKmMH{}[%و › rT?MPVIK-jF=>Ub_$,陞S|?.{% O ڐ2=(D .!Qc X'BtUȮ`ގ,DhIgDHxê8;ώMj)ƽ ч`VU5l \oFi]B8)" ?xf""8?vVB+׊RQn0cq=}r/giDGm 2*C =|jAɦJ[ҪV^ ɡhGN9-xD!lgmf}<$`-.1m'<4joLF=d2Jl1O\Gof/)i_Wr4)É,}XߖȺ dzn1g̥T-W8/*7 S@7A-0sx;ھ Ƚ=,3$Ύauj`|mmq=eA${A/X"VZJ,KGxK=ೄ,JM"[`ʋRQBxLOw M2IqX3䬶EobϋC#!4n92Q P ei=fek J%A{85wKo*71, foOF,`n5n6kj0IEb ǐYWrz1]S%Xn;TcHXGDLxK=Q1aE;s as ͙ -oo](kt,j[`"Q43ڗŔhdCckF\nX:p=wGX/Qht{AEe@&COT#+-zH[m F~Q\l (޸]Sw، v).ߛd9ӷ;{la]p]3Z-̏uՕn~.< ĜJZMT*:Y9Ў]&RhS fF6S5C \JwY1-Rsr?n0Clyz) >|5 6Uzr,ϘaA%A\5tb裏HP mb Ĥ+*,>wS6j2&%łea)8É!*O&lV3|Pt%/qَ\CwjoTnn#b@=9k-7=A6 "n;M55{Y `*`M^g@ϛqCQ5ΦE$+n"ny,5,U.[fR t\?ܼhSe*Aޞޖ>9`ϊDbkUiH,zO+#շ槲L$XZl:O#cNt)0ɸϏ͉ .Ɵeq+9WkkeYb' B==8%MfϺWaH,]"T%Sm,?;r~},Nw+?;$~lhnG7>!sdiN#4eGȓo[ ,ҝt>snv b+iw蔁v;,15ν OFZ)0k' QɩKD{ h@cqG׏ ӑt8Df^4B̭S"$yCqlf@enARWz4O\HM HO7zXehnl&RvS@KKue#p%AP'uyL)'lSl:f`4|Kp hIk}_q?u@wL}5&mzMZg\?׮bQ&Mʓ̴4Zk_n9`TΝ',Wm-R R-sV9 6Cc\FK_M745'-k幥V,fSSV0?y\>MP7DY2'p!μ=C엃*O6](X$D^75 ! *GxnkR%. b|vFέM{.JwY}ӂ|7, lH:ShL[矤nqϻ V2aʙk'P2Ǧ~[#c~8Dе〛& s*1IDKpX&M\XN߮\zQquс},4<'Ǝ0OwO6pwNxa]臘c 4jMQtWzŠ>n]S؛R2wt'%JO͎i/2Sv4s+} k/7EAb ]ʙZ|[6O1g&xF ۱>K ܀Ѣ@.'wu;l&A  唪I1A)(Hi^Z\ _v.f>kjHrr. kt>м^TsEěΡF{gUvVR?|`g֐xj@ߛn"q~$: a&K`Z|͐D=pܥpA=ĀZdž 1{w/V0%VpA(ɹ7ۇ@*zbjQ}#J)i/џ~ ] `w)#k .~ʿcP0&28rX35ΌhVMaWF[0K,L1jJ=W(=^ؖ-. Ad_ *5F{/}>mrتzTgAx+o;uѹ+$V $R y|x|Tu࿘4{qS$cVYvp42o{Hzu : &ty[+ ɴES.lNL9P|{ lÒg'eS4%Eg7w槯noKqn& 9v 0\d]famjaz: :G/N%E৵`[IPS  )OTR_BMY{`_<؈UCi OTBXr K?x3>*1pAy1/°PQCe[r!M-UK~4&;]"*R_Hl`b*j=WWēv7[;EMa΁,DgzK⬬4'QuHb++fg2[硳涷3Hk3OP.%ŷ,Ab)eOImrK.Fz#0brvuR 1 F+ht yJp5)o-"ĄZ?Hx`PiOZ!`.;b~Lu9, &$,)d>lKu7sE+ b]~k.Ҁ L8 ] # oZ{tvZRA[fBP$yajoF\jfX =:l6 ΰ E᳌6{R' D1("q;l!͓~||mw< /$f.CT/8*U+&*ؤq od;3ge䎏gcmv## VV_k*an[َҫz?ޥa·QTf;ig(G2 a   @!O`#Ee坴JU'v[]/+puCqlMn+?d3%}sr"d@|em?RD[Fi#`lk !sV{YN@`tdTx ||m A'nCS2 !xFO梜tDͳЍDo>IO9CF(b4W~/Tۿu 0=llndL7ڂc^d+(H:{;+&y?cyTK6ؾ,̑5Z aHv&2Cό|JuC=L:TtO2@޴臭.'txSƄHg9ᝋMԺzmqNNJC& zRi~pHړ4uLA$65G܆`bY0`7J@tݵ1"7O[@&AN/ƉUS0e4w5Y2Beٚ@`C h8:rG!%>wd7_vLȬS ,yKUpbAܣs-mi/ }}0JG%Fǩ# (Jm9 [ !E<vg'' Xsb uaYsp dX1FZL: KѕczYDn_]dL) ]g#:<@7Vx"k}r Sq s s=(FI [f.* E>ųŠ(6œIVq{pn`J"}#Q5Gb+>+[cE ~nG_uûF3Gz8 f'ŚSK R#SHs@lXUMp$%ِn6~FCSqXH6~`n ?0*4=PN*KB8=}2D.:V}Rďw&eV›([,YFˬEiP6&9+d?чLoMBaI>fU҄uqt}K+U?|.u%+K]uYܗ۹C;)oʡ?mxow'|RlrF5w3jEY#³]_p ]@XYH84|=-[m+;G"~\цAp! VFlh/%͏w.d(Rgs:o ; RM93=9<ǎILJAZUr~U:y rL'4_k88DxB߫`WlL}G(l%Vp)po\zgǔ"yp )?U<>|0S iG aP%Ĺ>dv:Ha;q 4{A2[djH`uA_ ^u]t=NE^¬ϱLF={,Ln>~'i"O!ZԘㆢC~6!`P.EKBjˈ}: D'lVHb /Ͳ[Nr7y]N^Fx^@Iv4iY[#BAW5w^36"9[]ShBM+O~Ucd[dR.9}sƟvg7"-+ slh<89ƼF: i1>%ǜJP5Oh2#2eka _A3c3X\ xaRrM ^&m֒S|9b5qfT_ 邭gw z~z}F:y%&Ήqi,4ߡŗ+?\^~Ʃ'e#TwDn3F?L8o?n610 ӭ:\9;I! " +8Jg;YK LSv'2AF$kKVft ui;cuSo4$E&p}X@I @;`CmmK _/O+s8zu ĹWynopUtH>Vpœ[)݁0dQ w^ Rq dݔGny_в E}BLKJn)&Zw#cv,R]aר96"dJ( ǝOf",:WdPh;#IY˚ڙ2n]O Y_\oID 51ASoFkV_U?|qh9_ Zڄsk™Ʌ`I0{&;2Cy(p9YP$+@Қ&Jvc*P(:K;OrpgEJ'ƄG>'& պ'%Υ(dkkT>tXp C/"+?˛ޮq]#rS7H T2E odpw~|.煮ea&z&N?hgfFOǯj,{'!wQһoK  R4dLȫ-\gWD JGݴ{W t̠NML9[B4ŗͼn`̵ozw uE)y~5Xiޘ7>#KPxhmHX"#Q`%Hd n<5GxuCE~+cD!vK> zPl{A1of^d4˚kWKKoE!9ub|MLW؅֛l/uoE ba4cj)(_TuR=\Y1FTw82O  W]$M欘rYI͜,u/9`ݷי_mnT+pI'`|&M6OJ| 7|$;xcy! peHRmV;DdBY떳oƎ[7m>"; IK{h㇐r"{e#5[ \F?i.\"G2Gm7;|0 /a4x\-“ ++ܾ-7ixr:iy80H1mۗyR*6y@PD]c#-[L&IuS5* k27לA Zg$7llrXo+^ Cc.M'x[SbK/Ky!1 xQk1֏m 41S>genl'Kmpw{eY&x?zᘾ)ކVmŀLYFp<tI.}Yf yh%w䑈f%\5RΜff E&*Is*P.o)OE?ȥF ߴy6624liXAʮ259mlp(ހK=8d`%˯gX}+ 8Z28E>k24DD M^6X{$_?d| #n<#D~b.eg!C2‘6 =>~ 8M׹wD엯q^3O{Ē ck,̯(Ϻ ቙e9Os;zgeSm+^ C8#0G|}%֐Z| "ʼƕ8SrꆏCGxg)H+j62&Lg@V5q͐ؤ?]稸B)j2R,z@*]Vj/znV,w|Y)RF}*3S?k֪H}ƴ3?3z&w=23s.ΚrY:P+B5͕\`H(LZ䔲Yb*`)]./rhM"I`COޔĸN9aH@Tŵߨ"/ f5H0K\ amVӄӯ nz XaSY{E [,㣖>Ug"|H%q6/IuV᳦=MNΒZ(Fv >JPXDQ$$~ Qs鐆 5a9FmFYJ'dBg 8;#_Yy|N GkۅӥT6JoaG w齫,ӽ?&CAgDli- /"GE𜝐 E$u8 I bPF~jy,H݆}@ˆk O[?=6[[+ {)DV:Nb%5ӿI[@;&9΍yl0wo2I  x6e["A+>;:N?{0&ARm!*X|3Jip M <@by5Ĕ)%*an]!޿>%Mv^/36mrq4đCE[-r_q"Ozcq4SzO"R,&7i484HEgm>TKyF4% 3DNOD/'\Ǯ²;0NK.O_1N5"£&0\ &#:''|tAznUlfE$!--+F3PwiG@(yX ͺfOġ?Xߺu8b4ӽfr "jBR Y)؍[jNٵI*tx %?5쪙áqJnn-R@OR8 ~mNQ|?k} Qˣz`oxk5޵Ll+C{j{\)q/],Xj2͸ca~R^-ahޠ}&AoGC~H&б/$㶚L!mHF9 27ąx`ng<8f* @q5s0*jic_Oyv_ {Ft3L`"4:$\+(<ߌ*8Tɭ6lhܛwfRٚתy.5=d Wiu\k]d/{ =Kژќ(soؠ~Ϯ[d8I]?q'Zk-kdiM:p"iJ5 6o폄*L%H+U59+@֎5?#}4%!2FfG-`YRtr@vZtZ@&=cÈ}~?+}YD;q8G_Xi+4"Veuz-NB.vo'F#۪xDϣ ^z%MNȾ~]exԣbŅn Ei'f`;& ^軩W c=G+XgC$34wCЎ?"Q/B쬲O“]XgKi(A $H|}"Dwsr3΃_WSc;Rr=V i"01EGkI4ryIRu-6}40Y6Ke $jA<Vr0닡rCMޕ.!!y&ڪ1_TXxr|r_\-C'ޣ5^a5X!oh RS>&J>'UKFx 0̘_4E'F.лpJFHx@5V}+)Rɴ>eE]3eLof}|y {ij y-XYc(,s =@ .i]M#Oa)8?UfeƲE@%Q>ǜ0jOxM'1(X>M>z(UdIpOXo0u#ºUfӓ&7kH=(RPu[h(Vu뎛t6+Mj Nv.f)/_BFL5.Y*QO8?mjJҗ&2:ޢoVx#W(@ ,?w|Wpm_;` ;jP^˒mmZ}PMWP II"/"tVYJu">7Qϯ;Q)QS♁btk֮J"BS8WMRC q54`=GD[30€.VF0SP!mݖjV{v.Yf?BP Uh ވqP2»vƤ;P9b/D;f0#T8SVDku ?0•A@xz--:j?_ =(17=i"J:hYȋW@,Yq.&!cS\ Ze8p&F a,q]&L$UMaӿTl 'vS,:(_DpdNcK8mKV8ԗONMzp q>0u)䦬3qzA*G(vOX'# O~z%qX(Cn j6! &>R%[b ȱ >2ӿsE 4\_6eLnVuGh@?QCx7@q x]/ |E_;K}^O `k|4kN_>vM:~E Nkjh#FCpAܢQfl\:}%qL$[6Eq9+ ԑ^Z*(-O]`XʭĶZc=E[c,Yt6#}.-#x_N2{p(AΡ,E)ejzü =Ѿ 0Ă6 "tTya]jS-ĝ?:r$"["BSx&m# mk5#ֻ<Ą:_e& ʵ|M*fUIp?Ȳ wEWߎu7XMm+r5Ңi┆WSuY^x᧘hJjhKǮUa1_pRZߑz'O+rM1lpԮ3Gl%.BotAk-i Es/Ɛnv-Ɯ;9/ZxLZ(Q-o= [$eO'ÿHr^P I> X|͢ZAH){uxN}inO%mZq r K/Q Jp?`rd~fQPtPY賓ffje iO:!U<ˌ٨'">rԶGBۢ*% _*Sxzνڡ6PS*-:g;ӹoXGYl/m[ +z- 2Pʲ~)!R(zX6 NP߱Db+[)>y3rsq%&! 'kWI 3fZfOsvNk @&Uɰ4@qKdWzDe%[P87AoJ9BiUmxH͗k:s"@iFziI# ਤZH\u% ݊O*5DSdM 榧ItLEή3@Y?q5;ƣc6K57TvMAne /a/3.{BZKUS3<=2I0U?N&ՆKc`^TM xz50'l5~>p"1"܂6YGZŻmcgԫQv cgޥ#J+rT>yW+$ST Ua"?h,3kQ4E~Qe6p8 4y1.UB{߁MSءܿm {ݷ}[eR$L ~|23C7O4JB'(5)GA/=~:'mFp>1Lz%ky>^#?'ILTqmצ ?> 8(D2Z*'94t[aprX؆phHl =Ud}3j$Xpivq(U%[ rԥ$B"5WHM8+$'laVt䪬{G >*wJ0s1x|L8N9i+e6!} o< V֧)>1uFdhF(} L3jIw6ga+F DX(rvk{Lګm5.ǽsBoWJ>k]tߊ2UV.,#ĢyV d: נ.:vote=ݗt<fƯc2M-1bY858ZNpr@t2 o9i%/"ڌVdp/嶺OW.R2%kk? nXD>a'DsKòc~sG%puS &Ez_{$lQ/[+JQRF!Z>TyIpoA s" ^$d$䯻:zxcmQg[ Ԑ jXM%ҭ%1Fݼ A1[p>-ثa(l0[Jτr a&䘦{qڦX>@; Y{GcÅ'^lWRCZu7)A`^qD矄Yc"qċG,-K2!̕OJEg u}AALS_VpoX)ĺG%uk^a;kČD- C=ߌ3~LO=L1 p3Εpp_a|mI!jup)qT_CvpXhv>Xu@c!վ1~z9]tbQbĨkՖV 3ë-+^ÙRުuN ݈ ( 2"S tKIhmgJbϴT]$sjR\weCVu`  3©" - j4btߥwK.PgH͙»:R (?B U~,D[ "J3g1W+؍rOǫ+D$vBKkٹJYCa\ |,/3oJnW{?P)8 \w?(EIo#iC"΋`y7b uO(\\YJAF^@129sV}%qpI>bwnvQ$u9 T>2>99tTPagƲF6= yoF8.܍#p}iߟU @vq'/LAܣa'6ausA6Jo]ȼlCT'Nc>aI4az"ܨo!7isF۹J껆 UALqoϖ8y8u3glFaj{ޑyvpEE~I40KS3jǰ2 <ǎu+WV~^^b_26,r(*ݝijTnFEY3Ĥ5OQ$9T nSotu-;RX]ؗxvXKSO_F4x`W! PB1 ^avJf[(=G"Vt)Ϛb.ܥXY;%<x2Ó-9mbeVOtH HHWX/[$xLIZ|X͖Q*B}zZ=[Gv1I ؼ\2zC7(D=t-c6wa`k>h35y^y@>-|s deWx7?rb=HId 9?xE9&51&2- cpsv%zD1?g0Zn/|Xœ;R0 Z^Mml5?h^2xՀND{ vVSϫ3_CpL~37I) sls'X#4 vF5@i έ)TcBK߀#<`z+ZNJG@9s_<7f#ܱuXo`/u.=kZ bP ʎ+>YۊDJ^ #ŜjsRD$QxU0[]9Ji;X>v 8 7Ⱦ$ 'b'UpȂOX~x #{ks;r)X9(?`˛a6gTA>I┢ۭQ&7q<q*~RԢ]7Y}eAdL>FA%@jy-#/򩯑M|gxWz"5OxЅtg⛝Oͤ-j.c_+?@[b+GIy _!7հ0Go=n~A+7v^:wXSyᅋؔZ0t+NFSW+- GВ-",NEe@΃˵KV{T[˧$~9u5cS9ؙ|K}]l%w'/|:l_.fDH%I ұ/=4!t⵴M\w(ib_.EC1\qJ)g_<\/'74:"(ה!Ԥ'JrruBW0.S*JukӋRyjcweWLSψ$H?a4e`߮3a Q :Iq&}2(V+ǚ?y@,S`OkSs}Im9v>{g!x5S%̭bkr"Y˶*mE`ybo#L*;}z$bڳk? __C +I`Kh{N6QsNH1K48ri1^2lR=L oְ;8`7Z Z!{],[1d^>ٻ; .G6lazBJƀzk^/q|yHI>R˂T$Z4.]:*A QLր+,'yE+Ըhn`CHT[axo<ߢ7j3 " C;A~-e /-<_H|=t_zscaS|;ђjӚ &#_P*f_v\Ko"U"S{5A%(tYo"9DR3{d}>S I!hrgO,Aӱ'XD,`7VoXzo,MݖTci 5 zÝ_{ҫW cBXqo3=HNx&u5 cUX?/WT=ʨnӌ2'.&;4AP)8;uU 2#씇y=B^#52^dH_@ 0-{5jے.(/<<<90'^V~)edݰ^er[y󅫵DŽL㉁8J], h#i/6j]}k}M  WOr",ziauy?cFeA,cÙK!97)Թ8nhR,'b|7#ғgRr֩a]LCh@g\>Ȟ ڙ0B4An.Xn@P2L$Yh`SPxf6!*l'LQ?9 wнazk SYj= Zihyrm5ͪ~AC'mPCs)_q6e 0چqT'ª%J#?գG.W.y@<~q`㒴j}eUAťCK;^P6hL;B9㢦^f2`!*pP-;n}p(J_daܿϫ:+y_[}UpSjخX8zצ=7?&)SyJbX-Ödk2wT~hI+#;@-ӯ2euf2ܠ0<dd1#MVzPP>P;D 8t-L &a?k)bEzg6sR0+~ =tklѩ~It׬A$(lX`G"OEnL羸ӿDl/>yPhp``J:fݑ25Ye !sYt$ ߨ~m~߉&6&ppȓ=5XmYJ*'*Pfs!fr:QSqy`b# :ޣO{-&3IkI6/h2*ڂk"DNb~J J +a "{~F_at̴e KIn3}I1+Ug"Xn&  Ba"4۬)tZ`a~@?5?lnI}ZBoq}c[*non ¯XK~y{߾tI |!?z3QX7H<*i.+r qA҄8VA6ã>() nDگ~67ipqmKD/?eQ%XvDLY T*8D R11l˪ tҩWh"!a $I$Vf|f#| SSքۛfZ+v $.9n ܆$B61:;PL}8&QrQ)?sM_-5k!؍ԩ/mE0PlYl,m9 Y+8x9dBo&~Oj߹erB 1Sd{р,< {+3qT"\: 95=֊3OD冑gzSÉ }Yei ZOp&Ƒx}f.cQ,0 !'K9uza 0oi0}-dy'YnBiyH+D_3<㶡 ]=nP_^a~ܤ6ZһMMlINx LXHM*y3 }Jn5ùy$=Uw/ʡ+g#]qzg'Rn:̑ 3h$_ٕoih\#B$2Q<$!]ثR]E-I#ٛ!,cՖɔ$ {c;**1ٟ8+bOE)N[p9wlHzklOl3~N*n݋ƴ)8*2Ihik Wq$ )S\rY(L>SY(a^\J2 rjYOZn1W\ $! 'YA*rK8^w h&Mk%ao]?9 I8]6o %1">c5}|rx%QWU՚6SjQ-ꪁD:}1T{ ՝ub!=:66E8rp[>A9!'h2ɂJ ?]x)w#{TJ{]|KM$xp 6/~ޕS_C1yd]m~&)I] uU*'z:XN\VpD pR<Z\S'_PMc?Gq>qރ`d}N*إRWȚ(mGUZ&"BlHx;9?/ǜ)+@lr¹7EH1]c5k_dm)&اzʢ>d/<0$0gexޟGD܇K yYM>kfptXy+m.C9C.\I:9ÜTpyMWׂLwȯ!H=UMswĒ8NqO+UwLxU),Vf=俘.IT@ /H=f5V{֒֏r @,,'؛@ {`n\OhłhX(@!<ѩFU8,&uqRFŻgs4!?u„}:y[05j!`t倕5>lC;G1>Q vL^̗goY\/yTX(;2F:.![ӳqwi2himt Zǯ&$F{l>NŐ y >ga@*(XAtox\= @I& QR]/xֹ+SQRf3 :c{u8YbSeI"-lKr4b¶v^' Irwu^ݧHZ2 r(+ ,tf:{ەo(AAV\,&GoGoSB_5Ti>3ɣo9Y |j@2,Q6 h6 hF`D#ϐB[6+Bwρ~ )(^CMϩ>ϲrYN\2h2SOdȦ3chK/f%4^q7%=*T\>iPIK`JaKS/~TK7}W>=(I; koE-ډ,WpGg /OFG'Ӯ=ƾ $o V\*]f6$VR[}[=؉dd⢷`ƚγM|@`a*Au#l_Q~EHk%~ߏ$?8MyQy0g3 `tq ~Pa%.[!gIv˃Vpfpy+ދg] ~=Nlp iMP7ZTf_ oa0Q1iȵ%: %}aJ:{8bUQ=za.ܯ|چrM.mX7ZV' 嵡n{=C wjG^`jx 7I /GAVv"=xg B~T["w?SG%#vUVYkdA$@0cU7"7 4@w *XE/}];._&+XNŦBNI:l%NUHƅ,h߅YO`dlC$S_buտO,,ˆ1N%oBqI1l]aۅZ{3A+^!q$ަ]&٫erP^:ɵ(%%b"]X.WN)a'>Lny%rGTy-{]H23 oAaEw/7Ƒa urΏ v!}Ml&ߵA7>Oxe'Μ֞țl/b| uomBrFe#;WݔJ?s߿- wkՈwr ID?)B+絚'~ xwQ;E1.H١T9M+'xI_0K3I\pFcK nۚX>2c({欖?J1 8'%ag*8ڬNY 쵃Ga p(WGՠ1ЏHrF> J}E엇2x5i-s\xs=B c\khp5xNNL*RH5SwjG3MէtHqMi619 BՌJ%s" ͐!kW[z'E;CN82g@1=/ΜmL<-j0YMՂzEqRK#B lt\siC@b9Oz@xӓ!TQҥ`E#SZґ8qy8>!;s?|^DFqTW٦֢ǧODSdbK\<THIOYjV:UsvLp|1o<0AB#SPG΄ 9ۊAma/)y8(i5&y2c$Vy~=I xf(z^K MlJRTl 4D GKx~^TdwJ9cC-l|.A&uT|w C>X]꤃J[s/1N-z2Y%F*Ц7co3C,z%;CTkk"[nDa?LZ'g6Ų`SM譩,[awӍD=ü =sX00`\|HohmY^am˅ E2ۂ`֧|r@/ڕd {%̤4~n%.etD0ε;ŕ+[l%|nʄu0м}ĎnwY|z+n$s:\ #TXpLue[OQDupT*g4Yt1rÜij z:6m3 vE~R0vi0R Y<2HW&n"{,p7gLH$n%'z+ʡ9Pr%#< k& C(Ϫ5H!K/Ǽ64S2qp8tI!Or92;&"ckܗȌ7 _fim9ǥXm:gSEm; ҝAVxZRnh4lrǃz<LOq@o} Cz៓r6/b5u .d??H T!I0JcIC&G 3S{(h}j0>w*.c!u d}91˼1f UҞkN" C8nގz 6p+Xu55&q璠IJU@ TyҨC[OC}nxgs&*ð}bD]`@WD_*r7R NlWћAv~X4ήDxn5~Z-Jw_f/2q&;Hxg[%>$*G&G48m,V14'mZt+oTcWx<0B,Fn! AGq [tO2FQĖ' *Iw`  hryEo07yAح &gjFzET^:D@u-l`W`Q{HV6q? ~7Q`"}E`[%5), ZSɪQ$ۑڙEc\WX+OȯXj1J8cQڨ h=~# 6Xj2[x)BY%Ҁ{ NwHTτ5s Uu *>rL]k?QZ2R=`jÔI Yj4&+nMnt7F dŔA =ƺ8&Su!Ar1SJ|4)ysF`S WH"fO{k0od֖ߦk*G矫6=&ӌaŏdf"+>舠fUm3\Cȕ7tX'C㺘\(( Dĥ'37!mp8 nc7EXQ% ʈ9k_:_uxvM@xDJB.l VEVH'g>``a"R/YPXvkKK#6]yJ Œ  {6}I#3sf(iMJU(e'-YH[ 1L 8#X63S-t1D~R/rIz*^-rzfoZYbG&=BŭA䙃q5F!VM+ԕS |A$ǹCpqcq3TaƯU40:sԾB1sE~O;(#%$r@xτ+P_%Z8;\4k&zsUӾƲb{ۙ55i(a%8 !ĚC1F? @wb^$6( J|laݓk8ӥjЄs "=S}K)mHPHG}MZ0;gŀ^/-bKSaNyUcV`~N ;׺6'a4B9 -, 5;kEacH 89^Eq ~㸩fϓ}PKB>pG= ыy{Hp&Ź L_bN\ fMSg]$; %"JdaI10Nɢ2ڋLgb*>{䐳I;aBYAs>';ﲴ$hP{qTmWu}$-#;/WP^sޠ.kҩ@Bm|ޕ;ݐ&/%u|R||VaN"~f[%P.&Ȧo&?;HdtGBIs<`Npll(42W5 gԹ^x AR:ANdCQĠѩd1QTgD̢>D=*ܿ0DK'믕ߜy)6")o{)ax H&nT|ZT_Vף2QQc/QrΩЂMrJ$0}I2;HOWOU| ´)Ac;߭qc\n.ܾ?E4Z f_ձq:NXAch ga.&`j:xnIWռK#E{P԰r$˂:S`S~Ź/YCN cz, U!.kV 6qzl^?n>՟}<sɷ!Ij`* /1:<"vg'pG[{#]b3bgPl2)9+Hbq,VH 0haq&NcKN*^|xG˷R82y'}ho#w8 UA\3<&rGaodA:61U &ƂゾTb~pBhLML.Q3C\I/pYU AySL> }/@pŅa,@#(R|a73L6ۙ; ZU跴1M]눰 ꑹ[kMÒy-xD6%pUk8!GJڬO3i~e@:j-okHa<+*)cuѥ8`}z&*& N55| MpSJgҢI+V,ٴ+bY) 64Rd-Hldv@]Fo"j٭IAЇu->JaUM۽BM/HH#d|,%y۷~TT,Se2ܭ]&v1j5+(⺩#hj7A2MAf2mk 12?'EuTf*-~bUoS;ȸ늋Ц@Ix#QّO*OoI  ̿;&S *ǫ] z͟' )U$m"m c?2B}!H6Yۯ 1sb·5DCG?[f}YkݹmhҖ C/xw n8TH:-)+1b,ܧƃ&RlG0rVg[')O^FuW;l]ڰdYM#.tñ1ov3Gp|>!^"#X_m N,L Q'5fk] A;>iFfR$vؤh 8 Higt\Q Xh]C_7a^c,c-e_ SJ$Z3 ֯Ɨ3Oyȓʀ 1zql8i$ţ5O]g}'^k8xݰ]mG :_tU~&<[UJ03)oM?/y~(Wi6>aɀaPe}L+/SMw:te@( 7flM\BR`w]Iw`)t,PR&c[/S e*s_dn*PV RG9DzU/4q1;5{|_hI1W;Q;Vxʇލ$7{F+GBlIw!~gځS+w9Q"j'ZB7BN$*Ğڿ%V k=LUn$rlG#Dw)0)c =ig߃ ۔P'EWԜ{FFx/ H?t4 s*W2:%"u4M.@h)gVhg?}ٝa>7v%4i+ҍA!2s%k iZ}Li=C6hOkUZ˦$7fo}̀el)낊<ٙTDdW9tV&:vS zO$dV u;a_"tV9z`g{baGb f.\׮`o.N[䍘lDƱA"|?&f= >/LdHqUi*bekJ 0W>| :}Q#zn&nt$3HSԣ|tV(@8I *ekRO*{XtRեbBR:2&f][F Z`7RKfx+:d6..G%Fk^,j]mٻ*,Q ]*y7PE prc3GqsjЅ6P}aE3\ "Yh*H$(n`"91GG %ć+v4&DEWC*B4iq(8k(*z9Vh@16:~㡝(clgaQ.B4 6y[PrTӕ@ߨ]],8˲ *Z,h'{xQep<\䕱HŽ M k!ڝzʟ5HC޵|T0 9aޚ:i=GT=AQ4ոp,y%S7mk,_տ1yy/jAϷ(#mx˭?3kثD=FOu.+8p`#FiD4"u=.9.2b$;1Qa[@M&߁M,UH9 k fL|bDğtx5 ͭ̊p.eVL.%F4LL^ G㑃T-zC]KzLb}\@8RR$zv^?)(DkAbX Ƞf$  :b_'`tց [:mM}q!yW$UJƪN*;Ҿ jK^ӇMnp LLdjci&W/ d߱qR!ۑ-`)jt^ގeBf`:NׄDNZT.=|5Pə TZUo-\efZݷڀe"Qk˟/}k ΢yܡbdr}܌{}ι'\ߞ8]0pGK#ouˇ/pvWDRſckwQ/ywT6zI#-plmyWjd0a߳Qodh.*WJas29N*SaL훻BSCL.z@7$Ӽ7̀扮2*[ t, '_IHj͸J@}-,DzQqCA;+03g QSQ>c?uӓQsS}#T$r`;_Գ5D3R^4o΂Z{~?qA?(dr. L:3 d/2:k},Rh0濂ū3[7 'n- j&ފ1[2 |Z^XXڞ9CzJL C֥rlhT wsdKIS䗙/1-Ds,C1It2$ SR(9VoTu!Ol_e@0eJW}mV[/04ѸO<g++ئ?<ʜ[@9q=;qzc9rHZ(/jcRBm:;VA%T4(h䬊NNw{Iz#FJ'ezi>0" +k+WGWfă ͷU[+KRh=>B\(?x~B s-,1=JC;|xZ)oKʠH-)r쁃vXdKGɬɋ0Xz_zZXf@XO& 3 O(&hִ1pe=/rǨ3(=&~+}zk=CvU֬T@ L`{鳙Yٻ$U,˛0s=SQl xBte(Rp҇رG&|'-K~[r_fWdwP>(˜[Gl>W]sߓ0)PmdҔ-cŁo8 ft$,P ot%ս\Ɔʡw|^4d> Y#{ԕp^*tˆͽNOL77˿ckAo;lygf+v{'mB 1a[a9>1.`4f?b^Si' "gzۆ, t`fs%?2[_8_A[9b+pcǣ.Įm2kzw'\b8#8r?sJ|=|7jԖt_X?CJ* e* P/ A~@^㝠֑'p%T0VEkwbIJo̻^Gfc!Zo&E4Hn[G.SA{ui 82} 孪!2_HN)t0"mSFjQ\whMtHkxH\rB& c62m)_dit,DfWZ Y6fDX^CUSrC+9ap[ YqDx^rC3;o 6E3+]~I!j}8mL^YFb|㉄l(A,?gQtp. G$_*PḬJi5F,LD%?Ӝq(c`;.,2>yEF™=";z_e9wNL,9 ϟς<1ͼmCXB~?AEH3:u=)4z2k/kAZ"bZՔEhj`RwemY:pVyu;^ 4׌yc%ѝߑ*GoO\/j9aGHb#@ۗ0"Vz>̔A;Hl^‹L:,IL8(²vf"(h5Tb;e], uL׫JЊ,տ}-Ivnu ւޒҁB7m\t$P] @{[Ө3-r&g|Ncz|xݙ{0 3Z?=Ғ5@40[$|LgĬA=IP"ĎX@,񸸲hJSLx˾bś!C m~OkJ Hwme%C=1,&eT^G\wViwnf~k2_$7 ú6*|Bmq)sSaJ1 k+jc$4 _VB qbѯaa\ KCsޫeb"(f)hBnڜKe]M(Qy:cČEhw:;k7"I8oRyh@`m#Gi3#~yٓ>4/_jxӇɷ-i;­a1G1NrbAO)?}&"SN7nj#g<$ѐ_޵A7TZhx@\l/.ۅmT8w#܈ hz*1!ɫ@HӬoY|r'T}Rq]-,eUMuU訁*. :34:z v];و56=W/#3[&,z5Ɇ8#n*D8i/l"dfE>hC.۬]OeS4ls;WUB*sP8}\]صITour~-3 *.v-E2h`Kt*ʊ%/ZzH) :=6x]$O+!&Ғ  b&@sL6%E3lܢ|&S§%}sSgJ^]9j%,-vfߓck Q?g"yMޜ djykCO3Z mNz6VxJp _4bӬٽfݵ;feFB1:?]jZQuGNl*s7ߑ2نnF5шu{*C0z; GK,z?^lnDL,cV몈ݼ6lec9t0~ 6&S[S:!49ET=D" ?c8!6ܢIq>O-\_ :h:V3P.av ~(CX#0A'G=iNn*/Z,'LꎒU8uFpCΐ^ǥy1>u£!+ {0"t+4_Vͳ(#>RpgZ˒Ey skAWDscsII_=fJ 4ㅮnOߋ+_Ǯ)gp}~Rax2 FN"2S n۵gִ/I(SkDF)2 UFn4!yӹ/Y} mEOeE(~[ޱ+܌TcbhqYS< 56VP,CuըKso]6fԧcBHŃܜB zٓ2Z bݬlYλ'l}ѱ0h;PzDidl>(.slPJFKqXxxy~e:&5]`ң0!YP01'Se47Jt| #dV~ʝ3 7-MM*Uh}8q,Zdvw% XNZ= x~P2aK k?/\ܞinpd_5mZW\YW 'MIwj]SXi(!r9[ǚq;jG,>} tã8H33'ѦW`~{.EjIwsA9s-]BPH, EZnkZ#٥3y%S*!c U&Vhq*9H= S,+9qmM;IМ&%pA$Qm޺c=G4ܓ*Vky`` hzKe,lʜy3jjMqgK%UύkS=O^m4+u"Kgc&Ce6\SbMx2@~Ϣ,#Zy"/žbe88yDnDI 1)zJ9ah%W&!䅀1W$! ˢdg#Pp_5^{y+@S3kn|kEb>@۪bw4ui+sM]kd\,vRoLYOCo7ö 7{}4sԏ"]Չ)&21DqLJ|曲y*CNj8S:9"8g'@1va=sgAd@jdD`a^'@ ^O&h$Ո6Y58 mpo^ u {7lTu(>ql۞C`t+/.Hp_${2u)ݧ>[~4S) 14rFoP  W^zH=ƣ{;CjS Χ_oWkQ@ؾػF>%2J q#],hAJY\(w#73)_YǠ'ߘ$;}>j̪GxcR /d<Pҹ?vP 'F;;^vz)*y#"_Yn =3U}gK>N@%kXb37)|фfˑW5ԤVL hZ}=~Stqo69IBY +ib߂Kj) ܿ_=kHgJ44OR]U!:n}9kdraR'ZJT\hVG^4g?hVWtJc_,sjו l:R2>ݸxiJ߆ Kq(Pz9i$?]e Qz]Iz|\Uaôނ7[O@uƙN2uؕ^ 'pzMM{un|9 DS,UޅVT4C) Zi 4~  ;<qS];]ڝiTz<>:l:0 n5˭UdbnJkawql,r>/Վ% <<EGBc`b!n pUWϦT.Ѧ} /{H"\s)extREK4Y*2MdT./Bb?@ [녷DIM:Ҍ-OD]8Di&0+:;gjz=PAkYS;6 |3!jiL& %++G'Ll'C5kQjBn 6/nЉ &Pt]սSH=tў|{>{#lAQO n-q-N"@73X+%[TQ.sp}~}ǚ L9r,4V;qIg褦Dq[ۣ]ZIÄZ7LCAG< WPM8nA}'.=?0riv[Y%t &ꄤs_8p{ =]t騳\[[A=R[!&z۴*_( $.JYě4~lY$eۛ1(nt#3Y#~/*#ښZ:VLг`t7_50I)Z!Nh1ک{ $C<\=B 5'k@Q%G:j6ZL<>? g0s^4bIvNÝV("a\Y)| 7ʻ59&R7ˊ#N, ^h.~ 7Ё}z|*%{=~c!@ɨ?XE'TuCUGromò# >QMW-N;1nEe R"1Mvalpd:^9`/-=x~y|r{?Y_ )]!u2[3H!\^z s&x>c us,bseQ9a|i&ldX*$AU{]x`bdjB^'<\j?”r -F9|?ڒ<3))Nč u{֜^t)'hNG_GoGs=6!lhl^pVR.pޚVs`b:Z5{ "V) ͤu3z[[}PD}z3 / Y3[ neh4Fc~EHq/KoGk#[MF|Wdz.behF4ForG[ %)feA]cTJ(Oo%։ڿbG3@XRa=_{Xʾ` ?lbYnea67kal_A;jh7G'al>FKZQ=AL0j*q ;s,gbԏʏPRb])Fhw KAQC_ < eFPD$B%̷z5pCyXocKCύKCib+8ՀiM0Lop;>m0M2`5Up/PtYr;J.äpv~Q|%Nmc]e0۶.7'H"t:ЋXDi3l1OюiEϩcζUCp˵9p\ IIjL+ICA;m]XzKʁ ZnKD}p7+Aw1~/ QNEu!KQHDͼ ~}T"`IAO~zƾ})ip>1U]C}NZ~A&5V:_یY(w:/N,kgu#^ TSQ|WOh/nEo1:Sq>9Y(G._U`ܗT:~2ad IJR"UVG`W;a;bt4a{=c'v2c3m ju6}]=@TCGk)˦C9NZb+9~5|]?@dd[]no-;dEĬdV{6fYʆ:Am͑WaK[/giNxxryJs,Y\|sp.(Vz֚v ,38\O@-}iʽCu☶!@?/]XV7m$As r w6p6UN-ya'p6ew^wG:=bMyz5iWoPZUXoY2 ưL"gP~.lfe^ˤ-,r69֛$q3ρe# 3x246Io@j\}R7xi4,@lp崕]n E^= >}U7)Ō챁n2}jyn3liі$.GRjҐ95.'bQѰ)0!FN89)H>3B^P%$W˫A%-3 6YMy*-%JLDaֺ0'vdi)$[[p("G]E;p_Z/8tnߊJ9W3M+MF2.~Q7(PiYYb[F:jDDAh=(>GqpE"OFSwU Bn-& N0 TG SHK+tgf7puWv=˨;C:Kb )s!D#q[RnI qbj2#q\"e㪮ajvr=B;$Ρ # uG^^Q3֋]xsuӧo^LZvT_02y S;B]aDc1m`S=Ca@,2 @i!+o? tgG(l!pbd]csx4pהw!ǢN5á&t~ڛR%M &hRVet 2b\0͘$cTBx tlB1]ɪ¿a[d[T fAexz@dI:3r&RȨU '(x@|ن/ٰ<0~Rd'5(i1rTJe;Uto"4^t֞E1.WOE|n [aENtWvš5sNjP7$ج=un{I 8$ђ!v[">}7\g>Daps =b8&ކZkNyYx4ܐ|Ȇ.Wd@bھb9+M xIGi)AWR;6B1pA?ԃۮz33^Jz ifc{JOCI*; ZU*NI[=DOAaө:saWO@jΆ* HrE۫WЋ α+Qj &p+Iy|P^Ul_<;tZ.\4`l?=W$lYGTohAPiO!wnF}Sv 岉&c[]aHQP(A]'6z%k{⇃h6Y(1Ej^}R qz<#g'P8^?>\)Uz "9)7)gWu.NaY"E&Zl%#kJE*{]z+詹zy?iFSw%ʦDQ-ԛ4t@vRX[Qo)hx&h$!C@T(mʃlHj̈wͧҏA)BODj!gV 5äG4oe?nB-\S&۟Y֟Mͽh,@nAO ~{s- ҃Ў@T{C} @IĕBɦ! ^`_*SYQ7N%on`X>" 3MB2 H͖fRL<`32ˏŨC N9;Z]s#q!"PdAېyR6`h8ap))G2x3z0 4^$K,qG^v@`&ZQAPq,ı\E `%kpp[/~uv":n"`9c9>\Q0bRUNKSv0UB+g"#I1akrw;OwݳA#Yw@_:}i.eRvY汫zBɂ`xf)Bs_-z+FhR)€<.9t rhu?~:3Vk x/m<@-8zC[r4;[XYi‚+(LH=H$<'/q(Tp4یa5.:bT36:C'>YTE(*r,ͤ"16k/"0t1#d6<8Qgmۭf)iwnx+ЎPĐsPg'>"&_v0YI 컆S %lwP{7t*o^&=`&p})ף_Cr&vE챣kF3;AWvuTnMif:,E)SW`A8;vi˽ Nԣ.5n;]\sM5E`ّL[˷:dmഏ 89a?Cl ĩ h6qZ.5P?+ԵTQU"s\<ō&M{0nL ^Fq,h4bXFI X;@3j쩁kγ7VӞ#׶3h}Oӌ9 | Ѥ]Dj 1P63GS΁' _fjL|S;`i4r:3bJS4zBB%eg?~"a`^/K}&M&u<1;7 }K 4ॿTj{g-/ԿL:EЅB׳  _[E?i )=ۢ?Ry}rn PRŪ*;T/AG6FGCJmгU-CRTgt7*&t"-G)\U~NUt"ug%f};i-5vJ@HQCҒ@NpDzfFEfv 9$MaO~^/[.bԮW:ڱk54˛ۥ=C!Y %1:Fpy}ݜNugVY6z+ș̸;k)T"%ی.`cr|Lg*qezVc^ޭݭ| v av|yH{Rp97Nʦ,Nicԏ[ L8T%#㖇pݜ3@pLD>*F-TZy+xE'rjx09):D$E`GKxߖ S4rYe%z!򁕁q~g\[s#^4$ hwsׄ`n qm߮ĚL!C?)kڋe_ \J2mX.1v:mӐrUƋj(C|}/ :VP TGKé׎'2.{$sވ3HC2RKyϒjmsc;vIXpM4$=!/)mO9n=2,*:`ڋ1ZdEVBV-7t)>H/r6y }쨥0Se#V:P P( ū4nu>h ci`vuv g! 5Ҥ/< I6{ó܋@tIWj_p'旟^ EY]g#ʹ37zD$>zD\F@HIHcɳSQ[WFg|cL2ذT4O\'}!m~v19].-Ӏ"fspjf aC4,ل{S 3Hz &0O2!) @G6^ w Ҡӛ` G¨ͅ MqҎ X>~`5= t+>x^&U+S.Jn0+.gO)ZIY\51)V w4:&6?}7#ǚQ~s. )n5pq_j'wCvbZA3IH?oG1>_P93\+&" |u\lF̶}FZ#ҧ:-]MVq)ȿ[j u ڎaqHr?[] zCޟdMK^ G,un_ Ol!>iVFeV˳1^G}-RUd-kkQ '-;TI_2śz\401O Rv#_mIj}^E1\K1$ǵtѴTTvWC*l~p Uyi|%2:ne*k5bWEJH( 0P Ps`ٗo[W0CϦFPů78d_C|V޼3ͯ$kje*8UN 3=$pͤJc<ŲgNHM>wvݮ'SX-Cq!?YTyЎ?Vςr:["~21 d܉ };cX8;HVa@^xz46iH:5 T!,r 1|YGTNZJiD!f4P`7ɣ:|8"@sevBϫ-zмO^70utkh{y=`k" p?Mgהfſ.qC[Oq@^SWɑlgC&U2[cTb,;ǒ4`ж:g,y9aoLv-O#;8{bi S O,U9SMPBePŇڊSf t1k[ 'R*MP_g5Б3$d ފsޭХw\n* *Ŕէ~u\ς;Lj%p Vw /ҹw*OQm*Oh鑵;Esևwx4#v/qћӾ-ZBhXx F%n}i6J=bWM/p %5G)Ha4 o?Uy˲ƂgIkȾZxuofžX ~ ~^GV0h>~K*"n*%pgui❅.cjyn[- wRrtaPˁ{p#=noM6yMW Fc/.0SEϾc.sK<(rgmeVґ?Qc귓fbzr]>V[: a(thѶɔn /,}c ɋ#%wt4da(kP1q{MB+ɻ#3RHjAukIFΟ-W-ER ĩzk$6vr++nkVMVY a0W 0wM13  Bt2OgB`吧aM4L?t34R dEyWDR\##:g]vt.Y6*Ө!%q@aP݄TXl3!1:hAջ!&ʬ{DUlI;5hGu_S71)<OY XoMqCChVi{pAh:Ie-ttZ~.ڭ:R9='K$xve+ C[Xq#Brs2 =ɕ8!1!seQaT`^F} 5F#OНy*lvx;]`W\ș/@MSQ!ٌZ1 Lx J*DZ>xX1T'u-)ghc-[2l;I~? WVVh# G䟈pwsa[w3)D㍍ A;`>.J`3^$mT?qj#=l6TiKX94 W(6+{8ʆ+< .\jS_FO9AfH6_G]@4Ę~̎f?tXr{^M s8 VMU>Aߧofі.HH 8T''fk4[f4wl(\bk4BL%V| ~:B9.36F4vV?wLL@G8Kd`ļ N+~~v>rJKу2Y!`͎š*"Ap!uȑ_$7e(^jkä`-GJq&~aSE giha \{?m «n)N[ X ksFL:灅y*U&줲\i6](߯IKFÞ{'JP˲D(13Ҫ6,ځHPRI\ueuL!X6pܢṫFЋ[ u[l8Tf?rfŇ `TNkx7`TPD9nFo n3֥ϵd45 -bIUM b=v}(#d2N*#}tfԩcJr@^*zE, o}#P|w5jNm7h7ҠZU)=i-9_FNJNRuF nƲMZuQ VDC%F~gAFcQ$PP2H*eO >~P}X|k7uvN6>&n9@/D;-\) bB~^4El\sXrTJv:8 Q9F@G􍮺`Er4 %p3\&BPn|3mln ZT?Lيd)oM,6<NѴ[v(:qݳWG>ifVj%zۏ!#irF$h69r0ۻdzЏs8n:jvEtD,zoy#T.~l[uL7ϱbXڷ"g7^Y1ۣRt$ĝ&6sQ *n߷aԻٜ}CcwM8>Kҙ)'V$po [E!1\9—EaR@m88/^$Lk~2EA> "L*1I %Jg[sTBӥ)5 hXǒ7d_c&&(klb^'´FAp DEC*܃ dp@\IAWihh6i@s8f1K#M:Tp4>Zdc{Dbk]g--?텳nvAzb W[MK&:C6((*N_iH3N_yq\5b vYTƤs9@@讆#0I{$fGll-#I2$f$;n%`wt]3pM;f2D"/(1%AkUkaZ9' AI);Ñ{S: {wIx{uG_-z[8+]+ȗ7/v]sU8:zJTfJ,rH&Ѹݫ\}HM1\)R[&%Bpм^r^12ctlf`N9s|ul-׹q3k]%5]<ZnWr^\%3^EnJ`m Gq5FNOQ}L&c06a _F#^ea38:QG^hʢߔnԹz:0ҀpHf'5'R^:O;(Efk7 ԩ>^aKgщŒjw8!JYh`vB}G^n,J |}U{yNF}|?}) t<_$el#  z2Y||N.yceש$8H =|2̩G`0* ?)|QO/ ,08WYT bԑUP6#%Ȱ T\uO.ULRo2?zQҰldrcbf.lXH-1"旽n; lnuUWlF i{9I7l>n q'g@f('93pΣYi@|^wTG횩c>%|!㔔* Mgs3עϮ))ax|5ٹ&wp(tÓ`}'=A1fl@Ci8>fU0͋ K>PO_7%N1צʃB៪ʾƋ W>Q.!Yq T];$=[^Opqx^{LS6b7sY,۶64v_{6K2^y5 DZ7;!37K! B6Ы-cPc+>Oz5 *xW,mMnztdT,'IAGɀAt)B?_[^"[yRA``&)G+W Q^EfekbMeM%g1h6'> D"{s<ȊSA)R.2LjS9ecɆ>=uGnY5v3c8R Zq HOb)wM]x'MŒ0p/u:替Frx(?hW+z+|?+Tl=ٓJ)2K sDIWb4hF1l=Cl ={d,K9dFM@:K_7ib;/IAΜI벣P0rlvd+T]J׃އ”^f. ʛOO8BWؑqR81Hm:e1 Glg샙I o\Q(jsge4r[/ ^ڿYJ^_'K430̗$y AC flLr&.B vO/u}ʁY[Q't+ [3Xlw= 57w(v \}H `@.r=6Pҭ:i~()᝖ xL*b+VS>;I?f5H;Ogc8U5hں t{) G>Dr06A^R㱌 $~tR/Q|(rѣزFanyyKQ,XYlRL4AFW9<T|f޴Iu%ml$2]j-B%vjنN&Xl:laImWwH,6ϝX(|i pI3sOQO oi݆Gяp$ozqvS>qD=._l18(o?Gه;W70K\ꋋ,୛c[q0 Pj %D_S qS{5q2mL|"X|xEX ې;n7%f@cOc x6gXTI(Qߋ4NL"{S! 9V|tc<ɞ(#_|[wbpwG#D߳F.'oP}s4::Y58δ,bC#{Jsu8C<-kN +a"PujfHLע[=x+]'L 2gN'y<3gg-=~*ܹz>0K^]+Rs!Fsסf N Q=q T٬G wRM+\}w$jDW$cf8.jt 6fU5/K\nչ]iLv^ФoB`2vp#l[ ` Get,W ]gzVmD!-+Ѱ ӛ$Qg;X0'zh;8'vS&(gV I:7pngcD$M\\Q 2~  oѫ 5EFNl8jDjv.?,2gtO!޼'renn3ZC8'`q J!(U+> ~{iY\j$4} *ځU}B=󲌸g;?lG$+ z$}^w1uCܶAEP-#x먯ن?Cw"ĹM{pK E`yQђw #PgBTqBj9!\4ǭ1rp)Ya+Mċ33,ޞi1 q_F(_*G9/JȞ6a=bosf: Lڤ/I/wjKưWm]䷣mkK8nY>ѾUM^՝sR|HTgC-&C󱲃]tSk2dfsy  U^R7h!3:( qP2ڼ, Q앆Ѧޢ]11oOljLJck^,5Yo|&1!@^eZ}KkcUsl/Ь0*N)l.@ ՟T3:N&4jEBDF |Xt ̂nG㖏\V P:Y&goҀZayVs&X'А:gb1gM(7 Kٔ#L8fᣛygB8zHv-0*jW|sWT@,K +WpC!U+Itzhen7gNAɿ?MeE+v.׬6bqup#^Xe*&p 2IYYKvѢD[^1;\SlmEiYi[|#p~,HO9Qٓ="E?(9x I Pi¢-=c,JE81m`,1aKPD#"˴:HBj/;kE_|5R5LK+Etš۾ނۿUUmq^ U y9wV#r ?2OYDEڤêLz.RN…ǭN.R@N{8Bb;9ރ'xDLSHgR~C} =X*t6Jh!sRf&>Nd y˾&`bgBn{E85?}DiKWnq1U[6W(&$d]um Lbܫn3gW%2lnPM,YQUd/A];qb[J=ma`A ō+(ާL8Hxexh JAs0,Q![ |q@P>N|\u6}%CϧvjzA!rCo2l5va`іw 5#mZV\a~O4/z;[qne{W@Et-@LM; Bːn\lnQ tAbFK֞;UmEBze&y7KӴ"\{氵;>yy(ev* ziR4cbuo<d!f{n`uy>&_|I0ߠcǞqj- Ϭ-w fQqxf[A.w$@- jbV-Uzj`ϟ^g* ,p+kjm )LX+XlCJzp6RRyǬ;gk$VORnѱf2qp sqIzo@?-e? qcdc'Me nE:"Oj"riV3> Y>|{qdaee=~[kzFuU2A>,}ƾmMʐS`kt ~xz^BPk[;N&Mp7*_M57SY7#Е.(lu5-r2-\Gn$00oJ=>ϯ]b4gOFju 6Xu@:r´c}ĥ5^! $=kթS;=}Wlٯge`0$=^wc ~tjy'M<;c. 3 )*]t7/]`pߤ&/N\y\ q_CC?f"}sbz7ٓC*ٯa͖dIN!ȓ@S)P^ [%"DhP|'FJ%F'XΣ;/A -.*J E;딽d\HH3`:#*q]pUM#@ҾUIcj %@4$Y1))A]L#ˋZ'ap'BE:IUqYaUFyx4x-(EɈ%#y(h9-9cTUx"]x)2FH'Ӄs%?:Ҕn"CCH ]\~n'A f- 7*2"2vqOvvO]InLL䵙SDZU&쇠##yjA"1BHFPt*zAoPmqQ #g3//ӯ Vӹd桶.}QLJPTc(Wǰ"ͨkȼYB[}+knm5h5~}isA;a}0 1Eox*g]I<s_UZ&=*#ǎU{:؜3C{@%_(`۹)Lz5)2XJ=J )5K ~z/ur$cw>C<>wwUEOa{ȽmwBpA( o`껛 [)0 Z|DUp SÚA`@ ~ܘ\Mo370$I<>6NqMHrOGjeN?4K+8ނ^t(Y7*:-\b24 iT8P{}J;(pc׷M",Q rM\xd:zIZYv![9\ɓNB][<E3!pz\b֖ -t*>#omK0>QAP*1Td%pb;ܰCO.7(: 8g@gmΜrF6y߅@Yq~m"ީ( H8NtkWRH^ s&X-묽jCc:]AvwixLt%p4=f_Z]@VK.AuӕGgn#EYRRx)vDlc-nh\>rZ3q:B}RqvntVuo4 *vKCgOw Wſ_ϾǼPeشER&W߫Yg5/{ɵ{o؜ȠԔ[G1||KT@8qS{M>VV<=M? :;u=qq1$*Bgvę ,B jGw!۱", v39,bpz})%9'/WVRD lD;lYAeID t6fߔ>|]TzM7?qZt @/}E D&8g]:3NmԊx?>. i tw('י\3o \iHȽ'[G0k% Z;ѧEm@Cy*v 13i1I)!,#XMp'BkNFhZY&;df&'Z?Ox6>dڪ)HqXY6 Ag!NO@wq?2 {fl٤8hz)9P Kj! +$fw6r#-qҔpM(=b}!\IA@<R#3sbI:!9E~ƻxʀ$CKV->T@ 8yvT὜v|,·$'.a% p QT2(7Xrsţ0UA%MDaQXDհ)@p A7]lky"SĞ3<r~$!ʌܧ VA~X)p+8+{u">Fy zX|EѮ;ZX/.m/ҁ:fb/iQ93w\xs04> vv/@d |TZgr:"!&!H)sHJR ל?lESvAҙ5DK8>y[&4(p@cZjPr-]v6 #G! [*xO]=X;[S:Z߫hGɇN&!mi|~IV3 kiEk)vD_L~4G."pӣ- [ zsnEU~46fvkngq:;"5 ËX S^g2ςs; O `Ҵ^{Գ ̚ pyIvh/ gf† x@ԓ^s.O{9ylzVeu=!$`➫ę\2 cBGwcqc6caתe;2$+< Dw͞NƑtg J "8xuy>U5޾[bV ^!9UT /R>f%btFm<8L@8[VhnY' A_+Qo9zjth5b^6[̼\( `&zj툮NoI7EPЂȘ̀< 'v rX܎oBYT W/!g>AHEHNDHK:g]Bff[^S>6_ո,z`"o>&1wwW!ߨ}x?J/D[,$ag9jXO2%դڗ=\O@SS<#o47p)(ǙOUQ{ԃ+W=,Ax~0nKPHL%*e k8"rv4߮{g?jح3?Ѕ ֩eȮ/`ifmFF[D+ϝ˻r7ƹȭ`*xGoLZԄUk:펗3OX˔]~v(ecۉ!hM#̩"oKbS &X=QusVF?W -aDTO(]wϲbJPeT). 7#Ó>FD{+sHd뗫si[#^,_S_ERTגK25f,ͻÓQ%#nx- ̊nMer!ܽ@lXwJr»vNP?}"Sz^g;F4,mAx  @&P u HMɔ`^1 W).A8doوV"  =+(Z9 >Ema|tq%kz;$E5:bL:&B$^!?YAT44!~w[;Sz  58kNo08> wU2v L(ʹŇ Y.Q᥍JḸZ]9\_R~u+\ʃfV]nzHo8ptw);H݌t= cO*Ř+IΝ)c=lB}5$}Pՠ ʢ.ޣ 8.9(:x^!fllü0Pf,@(~_$H7QRϋw=r=|ga8NsNήKirhDsU*cqә{8$5r(40ܶ<HH -OQ>\؆# úY6q J jݫf(9a?+QA8e7cg19 ЃcA>i}ޤMغWrSA9 ⩅X_xqfJ{WDӏ 6qТy'bmɪ_.1}!uBOZ4o$;|M1Úl cD-ZGM:!T-5Lx+ ) W1}TՃ\ذ(Qo`u}h|& GJ# HGKP_pzҀ")7\1BޤN S]"+ad#fLf4&aK?ikQ>>eѣ C~Q٘ Y r14|vndffg/,&iޯ2N hǺE]-cQ *ROn??II}a>=Hw;gRcR-i f9 T=hR}g'1I' #~8`lK k|sޖ c(`+0c7yu6$7>*zL凛\\ɘH\m+U/9\-) o%׮}Tk:!i>0eެ( 2n\ uHooTq֠py=` ƿuI!מ 8jˇ+'Qt)k$?EyvI^U<ŸFo~Ƕ$G1QpĊBSD&qAb>~~{1)1iclz!y_;'] U?k'_0]\> \E.}ji1N a +;K _:դnG`:.U G#FBO; H&mN~ΖL/ݽsٽ|@.,".ȘJ\2Ages}陋,m3дTj= /(}GtasVCXœlb q\CN~J7,C%#ɷB .˻7Yh{um5YK7.q[J-\v]Ƙ,orM9EН(uki3KX鋁Unjj`juex4wk~|ث(ѐ# TѡSʢL2Xug,ǿP ׌:?7Zxx.#lZ&F5]j'0{lĠʨh쵥o)d2GlL y70UH>@lvFB4;0'jƋlet`QS1o빛F6TV^FfuEE UIVƂrXns w$"@heQV--A V.0:$5܄Zx\ lwu*64W>~#1  ucRKJDV [E"eGGz3 ȧ>.''avaŊs@1H/c%4 0"_`ב:򤥪nu@B|͜>lܺ$]0*}~Y GFzuXo :]ۘl2}ˬBM"ځYJzh&!J|,h^"++evCv6ߣ.|Zl0=h [ `=OCi;t\LU'K'իqA7|=vX&;twYf!-co+*H-4Z|*ԙ>X|*oE{'Q4Ad*4;źQ~01z+( 86ӂ6 D&g_4֗[ي5U1#~[`{@{IO?v$HA TInu{!%:ωINJe[.>qS@s@QzRjh$,+(=1B85pNa;::hJE=pT>q&x ]k5rp̷nmR$H%rV "~sKܔՄfgo_}?]QȧV?5e_2X3>{G1Jxuq"qȌкkO- cW-yΚlx#j'ע UQƢ yځ}W5FJѵkAwnzϪ{"7- ^)|`Ϳ$d}>?.٘m' [/t2m1bPq1] Ֆ}nP=t>dEb8S/0,ѯ^+ JÒ{Q-3zaÿIkүW5 J,`2,w轀0 ťD .bk-I 11pCuщ\GQzЏYJ<7Wi#% HPݙfIC%\-ǏLec\sA!߭E!dĪS77k&Zd xLlVhl"Rqn?dN(j(}-R}^6)VY[Y~N&t1!}E׺awR)1.8c6 QsXQC>F5R(Dr* elS/s!Oats5g ǺsB&Q!+* F#3/[2^'9$vfe QZK߮]p~I״Ss3%{3' P轁)TԫRfAFgr/!L4mwpkTСzC'&} ,g ^T|#W}x)]6)Usu|lI ~xfCJ= KVKo7f::6(Qd+?񌜮8˦L5XpWJsBu} z.vx:< OJYZ!Vv)uYk e=sc$SHn=zdpHvOM>%"ydx!Ͻ1Y͓%!~` *v'@ÎlH^n/>k#wr^N@6fBm- b/ׅɸZx5Ze}#/)TNl\xc+#^V#xTQZd &<4hNٓ -Z|r̩v?8QlŦ=%~DxȎ4Lo~ zg( DYٰX@Y|yŘ#: bƽpjzry ζt._+Pϳ߽R[~b FbUJ=&]Sq64mRh#Tc t2jo A +$e>b^ff" ( ӤVT+ nclY!_,U66D@C鉜bb Ӻj G-Nw;k@.j"Gg&$+Z|?6Bq4ƙ6GC6/tuR"N)ts)\ +rrB2{OǭCvknpx'*0 KsKY6MoYlH; m_lF !9&(gy(_ Rlφ۶3b!D2бA'ޘqP3;PH/#XA%.khl ,VIaz ҉'a$e [^J lMQگ5p>ډ|{)X[¨3`(wӞFX -La*I[7/!IU+ymlQ -x()i l`3E.?o <_|H;'E$F*FIYgO0FÌ(t=͏ډ_$v mJn;w{T\T\v~u;HՆ (a_"ɎVOfZ=Zji J]G~n1OzmI:~"0_~,f&ƁtɉbG M/jQ:ՌݢBMMi`i09Ts do5Ӥsa[M{r --݆^/!j$g|G6M:a;%= Fe0Gu?0t0߁гx+*[J&Ӡ <9os־Xn ( k-g!:c1L1e\\vm1soLbĨ;%#؏hjM#Ce<  "^4%xo}nZX^xo׆V6n\lI}3/1IqB:i﷒7iU(@fr ,`ߗ}:II2UPg}LU<|̃b//Q:-vT[_< z2[c% }sXQOXOruXfQn8 am&TR4 @@.gάg|8G`nB#@TXN-ip%8:Dv.:N|;24ɗ!~ 4ϿLy劆``3KH%d c*3 3TocX%6kBo \ dsie갬MŞ|nZ-k [m (+99謲GXυycL1ҁd'WŦ68: ,dG?U<*^,"t)W{YKpl!e4Ht` [5@VN_f ą#ZG>]:n@{Ҹ*R^Mvh;3s]nЕ4J~;ɻeO5Ovz]4ӡ z71O%%T#r5wEIF>ַw?@k2 aSGGˉxm|4z}:*7"ZY`R(0ϴ[ N|c;Eu+E=N]Wv &|6"\3 (tf VRgv+4=]SԳ$4G 鏩ŗ S+GAs-U ޸<-j#]mxOvXf6EB M3YwKVp\/^i Οs ef•mVFo /<zepNQm<@&UG_ׁ%fu ) WDթL%^ DΘal|z +g7l31Ax):('ئ|-3ST/0}8O%R7DVUog;L AӐ>9d Ry$nOUseݨ&ch=mA' pF TdCyY$P D]}I^8k`׶LR?X3!9W80rO[^ѵWmB] 4k3|-Ҹ7S]'kT))G5m:hd .QynƉQY7u[Xk"' dsXM#픶Ѣ]k7^nu7L{-y%.5 McR8Bji) BȤPe,nmފ O(9q~Cգ5LHh'()TEvx $bz|JW(Κg-W围vUVdJ{V b\Rm,`$1<=ϡ$t`{fip);F+4k϶#+x^;Y NSk9ĎM^j>6~?R%F *ΗwtH!!d틞`(<4$Pݣ^<`oNU$Qg'ʳg^opGAN™<ݠl*qSEΪ 패@},:VgīIPN|AAiNYQ/w-ḃ÷Z YbF#K2#If+{5v:ڟ6m4VdU^ZLeT%oҽkP|Wc45  YML $Zll L_zךr,@Ʈ;͔Jv?h?uϸ<~~ 6X->[ȮZ{U&0.Rs>4‹S%OL AZM?ZOjo`+^Uףy3zT4è! =ȚQT@qߣۡacЫm 9^nt+P-FJx-y}?Ӕx.}ӥ<ڃAl ~is)-`D@G%SȤPi W3$#y . ujxe@0Y IJ#k1i l c{͋AwɃ#%֎R1@e*Q{N7RaIlͻOk)T4~kਊ28 ŀqqbK Ldzm27/2];vDq ^GLM29) |D+)|"| >@|4(nm,fC &Gl+L`@#482kȞ?4& 1!ayEM.=."4â=/ЬF`K\uYZ`>Ehy0Ai)lH\thtC`%1m/̘( ")KoT-M% UxH%PakNO7E3"A8YtF泯&KT8ﺺc7tUASl9K<( JAD<.O~ Praϳ9自ܰ&DEKk:`NA S  Jh;!\|1qGZuct<`xQ#mϳfOͰ"&QSEfƵ (at#ҟ,pL /D1t۷c鸛PY1lPA]N@}ٖmpB(fտ:BΉ\gF~Ux+($pak*Ҍ'ߡOvi#Q ,8P p⡊x,i_!zWc+} i9c aF}! \g(_]$Q?oZ#9qzvt'2㨠1Dܭ4_rJg@]cgQO-+j;ֶshCFpfr-Nzc(3@GŶFsLJ"d#Ui]Ycq7\s9;6vRr[5ǯy:@DI5Cާ..N2, q/)1,9km1`=nu`R?k3\RW.Nddzcպܾ^x^g+rPfOkE;M.:'dE+T򛂆-6xJj pJ7O_?Gq ŢWġB6@+XOzheGδusT" N)E+z`.eS<81Bu[ 4X@/TL>|HH"z7ˡUj2a$A1 nA1qV0SWfd)ށA$ i+ eY2pޒNf۵88"nR<)t_y)i"ݻ|/Kr^o/ftKq'Itknhajԃ gs/-" y%mhȐ0<gEI_B"*dA<Zԇ_ڒdŗ+GdJWZǟ[ P$nԝ:^ܬ(08g 6?Hhp#2'샤%F^e 4uED$; E훕j=4 Y>T]Ϭ}p Qni[ "am׌F$dhl峰+n- Dn7^Vq3ytL#RWP,BGq3.K{@:GA;kGTYF:}AT_eM)uD:'!7 k¹;6.ָ a{BDL3|V)do%C?*d _rURqF&asp34Rw8yOBz\``'~8=HD;`T,@brl#M Bj.,)Sj3ӖƳ)ځM ]e}_ ?L7+̓|M~FL{LGti~Uךv&fza,:浸X %("~xK.DDw "T@B,y {}Hl?hmc,yQڗ]Yj7LTb99$$-6YcB(lRƜ'D‚ ĉ T=OŝZ2 i&j[ R@5Is/&wDNPMs{SSDksչJX+ q+q.1ȇ kf^ `XE,\]$= TIF^O8IH0IF3msȉГ.u}{8ى7tQh3 +ɀ@t( 8b"&k^L)E@UBȔ,+xV˼Q=7p_jFDB{"0Hz5Y!\aQVPj19d7CJ^ϱ_ "Ǫ?a>sā=2KYaUL>ʐ/I}@|:-\( :~1Gr1JhYӗJVL iZ^}a9ſ:Z>heѐ~5 lx&|`~g=<<KZ4(j-ajCy1MI f%<)/)Hi ?6CquF7εM2)&͠!3۪T}c"76 Μ?HimWZ,xЌ{c ‹,3j$S%,ɔ7$6_? 5p<ÂC}8e)hCsGt@Ftb؊ wAi3ͭP NYL1SxO ^6YId']+y=|-W0<=??,x>З>)&UVڛw>ž3'YcԸW[q4?,݅s  ? L59BFɨF7PR &ʢd3Z|x7Ҥ؊ a;EZj(BsJeK"AdV'iT&=\ =0: D^+plVb} i26:l`s$1뛶.D$IqDa@Tcѥh| rslK)> SPk":ʻG7!CrS*Jp܏m(t݈,Yk/cu絙aJ]-c= Ua'@Sui:"2lVudhC*R-4IJ=:O߄\%W,7[p4(m U6}L@+ぱ%2@* qtzݔx?.̈z^!z5fp /8gcLM a|h'Nʙ QϪ&Wv_ 1 O6y5B{ExLo2+jqf-  SAy _7Uej]8R,gXL2z b7>>ٸXUr.^ %>ɲ "$3֜{S?c{3|͆v>&aOCWi[J>#ኙڒyZtj@aokEWь1 h |_{'JeP-1+DWM꾫͊j\g}E3Ʋ' 'Ž>TN򪖝|QyC$pl:2`.uG2`=wq+(}G{efx?FvW+lː,7N&c^!lfNOs#]?ڠa\c}'̠ EiǷ𿺡'>s`3Og+޲a@V'GW9%'!SKcq5OVW9kip݄0T3ؗ>Y/*8z1\m2tY>p5dBs:,S"%&Cˍ#T Wݶ( < @:v/x4 lNv/ڙOrUkEb;{H+ۯR܉o*&0BILnG. G#B_"AN_QKj<* 42x"B 8f:bsb(Bދ"O'Yw(NJWlj l#@E Tܵ_!XLgs:oe_h2xv.ne#[ETpN\Y_(_駘 n_\4vKUf7&OXa"|]v}BÉ3q- p>etGQlV>Eh+F?a̋=3/$W}WzRM(->9=y8e.G`\CB2Xp;zOY06C^k*⥆||cB46(&4pL;㌼[T v6A*H]a9.j*WAy4|y'w} !g5ʺs: mUr;0ƮDGcӚ GG` HhWI6.JԿi~,ʛRTEXR>_5, 2spB"3opG!/PA߫~7Wk®&Ա?ӫ N{S ^Hws`,sRGT A >(ǡJXF[oҺ}:fE@`5Nh!Fĉ2ó"fLեQ1}N@P )!by*Q8lI]KH_4}ȭ ~;E+H]" ?Bh*Ӳ$J y枾b"y:~{8%bw9 ݛN.K/ܼK&^CО|>Xs-u(!kv iO71MdG#N$N=\k_DMUwWYVluV ye 8[X{5%< 5Q1!Ē;$ݿ[¥7$T99J\}TUtI&>Bi+Wtjz%^z"uP&Qh'apeFu(=lÅJ%Lӛ}ȿB!'p Ō(RH9OMEp4p|MSls'=~$@\{ ?>/}W9T'a!4!^E*BxP}^EK2wO7v% +kC Uy?S"jv}3H㐶Dk3;RϩK@ %;7ʎ|ξq)wb_\s0.E Qfh",܈!?)N)8-P?s 8?〞P9a l(\,ݬ\#ۏrQ\yFxvwd7(/b|6Ks^|z}Oɹ[Iu o iEǜܚ&VήT=g-dJٻ k6f +'Ժ;U'+>ѭ+Uxp"*6碯^.6v UacRdywΊ@'Jsw /Ƴof64KZ T&Fil =j;l'.mۇqMI >MDNF\tJG2wV 8fߟ9{s"aJ<@rzmƒݙ Z1\CQ=E &1̀w!e &{Ih꧁S'鍌7v@j,#k M|Ǻ4HP~e+n-xe87UR+(5vvZaؠHTbqyta來]a*B;"ɝA t槑p <>8YfԃoI=Ж BEeAͪs=ժʬ u‹v 2/"*אBn2SD@MErB GR.4Zp[E%ֿ:N\2*i$*vU.r-ae; 5&:m`ILȊ6 Νn~Ԉ^?Ӡ@+IqLaPڞjJ] ^C4'5!]oB#R5r8{I&qEP9GX$lfH=ƛBWvbM)To/aEF{N9 s^\728l0֦kuy\_>ô4̦b:13(>̷uA4vd[[<*e=!8ᇥTrItEzbА| q^!0#sǺi]v2UgB]b^ ]*JߵB{LGG9fe$@ףohrv(;kãr+^j;嬮5KVc | >ܿl):wk>9ܩZ㮦4c. BXAre,pϽtcF^p 'Ó )To8|4y;ܦHv igVO:Lq+<" V*Vm0'}CICX<#cV,phtXzW}sGPω) fǪg,kFþ, Y9`hyda+n 97z d4Q4'˱28+Y2-ZJ2Fl];K $Gi] \w")^jr j# D'ĥܢG@+#y /}ɔ4șJ+u1c>(y_\SfHn$Hr/s"\&\Rnd4G~œ[] a!UףpNܩj4q 0־DQ RK4i9-@SޅMHDYCLNQ*j+`Z먧"'tƈ 9|iy0d͗Ɛ{9K֏[@)a]VRmj>0}D(BEQx=5ؕKJH<.k]d~t_c9Vnxc5`+LCC@5yU2~9ޥT0N5-0Q/q;[fA,6@9| suX |R!v:cQr ?|)LZ&ax)uKF~7\ۦ_Kv.+a GQ PЌFa-,*nqxuEYD#R3[~7]{*:Є.WLV(;Gx}jVFu|:XM݆yY >6$#ϘnyyjV*(SW5wsK-R&I`wOw2s zcEgț;II(=gm"VAY_Bp-Y _P F+]VU>_#ݪү-@R;lێj󀀸W~s3q<1dscJ}@Y6I5=hU(otA3Uy.4aw)AۊiG~:w#PV4ꙙmGΫo!vI0 if9^x=$F3ӺUnVmO /+}ӘrS\Wl@#|Q l BvB#ljnZV]Kh2hܯ &b/ӉOÈ6ҷԆ-uk8"^ܪ=M:Om%alpbY.'F=:giar ܛXDaf9Mm"o.) 7Q&[J'o@Ζk"i#2WtKi6Tf\^ fMoTMUҶG#a6 q ;<(!ٖ1i>!;ջ4:MǡEY6ucjzs\*F޿*6k: D By"2۩# >b%]2?32gj@6.TMEbXTM]zF KBb=5Jra]M4v̘5X/!Bu].v6AWЇ:Gκ-ȰߔP>kn~b^ ~d.nX4Q/6+!%rV3颱؂ܯRͮ`wWt Ԓ,OW5RV!1FH3w|whҷښ{^e?slrR9dI:{ew;1PAĖ\*0y/e;~UU}v, L\#QKh$ߗ̓)ECˬiX(E,ccTy󱤽]*^2&OcPd0Xkdzo9 ~o2θU塦,Te7QЁw*Eg5K~ӘUujt<bT|;&{}qrv$plEy֍jxMipaT )1_K:.DRu$n}Qd @+KaĒrsQS;Hye/ Ə4ri cʣK z]<*` 6&6Wdy% 2ۤ ANfDy Ҳ'[{ؖfoBd veat،}d/KH}FXV|+S/\YtAf E[LGR. /V&xﻩUN -PM`#חr.Bj6!Cc߀TsDYoed޾@ݎ qzơ)*q48y Nz65)]9 a46OS/QW̝4U͑q={jLl =iR/WT `OQAEge[FMWJ=U'SU Ptp^!.}/3#tl+}aG+V6yoY84b`7UAi3_MON6(e"Cީ:9FЙr)Xw? /vsKSah\n|_A[z)WE:1Oi8}…юJ+ `Knw\eskV,IFh:I?϶MbyVeJ4 y\<}I:^G֌}pgͫ6X倕eW ƹ`f+Prf+{<~qGy.v<9 GErc3^G_鱘Ei 郝[|C$`C1Ѩ1|< "u,|5~c=sw't"w\Ctr2y9ܤ9i߻7~j%Š|GJ]ƹ4gxRXL&Yy]bbE29u|}$~2,*VM`2gHq{뜙}H^rj]$.NnՉ=hn(LL* YZk?xAx 0ubj `Q6iw* ņ'1`!*Ct oT~HF,ɵXaڦ /=_1%hC45Nb * &/nItd̾Vz)dK~CN]trhSVcJ-iK Sd>ӆ ֯Esvaۖ ˂yyͪ[NyBD=L[BgyL3Pϯtةyлk|uy_4D)TLELi)˂Xq;bKصOͯޫӱW)rECTC&T%[3}:وEHKBA9Q /T݁Au[y*ƨ<7Yi^-R/Hl sB]ҙKc,nަ1;4Gj(GOEM-cM|#N`f3^|'{:^ ~ҋyDu&?1"荑2X@LlG>"]I^T(IU n אo5/^^C[CYʸ웪ΐ`TC`&OBfU~b, x0 km#jsJm~o`#$WB (h@c]l ̰;3)29RGG2+:Ft_G;/QZn z' /:OPBT g%`r s-T6}jޭ]pӵ U&H-:hՃIxEF# A_$&]N"n/Yjw=|L8\Pلw8(pRbȼ{ޭnz oؕ/[y33DU,DU٬)ߜ"oXtaLc'.3)7A'_IT NE(Y16ŕ*=V٤Y&$RKrێjuڥcGMVx{?mQK_%vNo:Fs-11ie:II"O4ڜ2/AY $_QSi>Q{=T:OPƪ<[@DbԬF̧`̚pU/b.% ,}jGpT#Ff\Op{*<$*@EJ;v7CJ$V[ vI+-Qrxk>.ߌ~f)K.{}z}ibͻD7wԓc6͠Tʍ*n}BAl#H9ĩkI႕ю̕wԗ6aT-6b\֘TMB}-gQ&9)gQ z2 }b TWL%=E0gh_ݸ;Q/gD j`PџM:nbU6c95tGa5 J9ï|X6}إrl 7qYׇ W\9snOsT}VB]sm ꭩvE7qB3FrStWLE>N >w 7jqiqR74Ak cVΞxv:=mAg]T1឴kp +Ʒ#1:o#^D B)TH16X+N& (9.m/WZ1uXQRSc̼l`q,g/.lƭ3sFCjX,!LdOfb@ .$HYqRR ",O?pog͛N{Z7%4VU hs E;FaPq}?p۳44%K-L.xv>)Nm(>w'_ϯEz٬Hdr{B= H4L^r#cZfh|ׁtcicQc)~;{.pOahģ^}ޝnU$cDgUNX@?,żat:2ǪnI yf^V+9"'2K;5H7pgd*%QS.QG:& {\ٲ_MhPn%`&cyr$},*.JTѢL ?s Rvtk"LJu&`|&QƵ=s7Y+''Cқw*͢]33{d-o@YT$KVCVw OY4̄x2 ?|>&+`UA^I-3~E/oWL1bJzeh3O#f& /˝ -p4{&0O>/~Sb0\V ގ0ݲ1Mσg"%'V! vJ&R)RP!->+~&+$0m \o&JDT K*l82w3fqfSA~j*!04+ߜMdvXFpayFb_Ҷ/ 1ax1[rb9*J+ޤ>4/+܃k&>z& 翈E(VAp3$?KpuLS^hJc$ٰI vzRXb~?C!Gcp ?{vD^v+D׿*؁AS7_>UYϙ )'O~vճgC~诎nJ3غ5M&;#$Wv+ jxSYBPԢzXPjQӑ]Xti}\bϔܝPY(Jr ϓ,|:1 ͤK]qi4զq3f\D)m8c(*ז'fMa-um|7AZ7ͨ# _g %e1hӱ?^VDL@f-N+HT.^aJ - jH=بF3yz숔RMĈǤ7m_'*e 8Z7sM*u!c}Ij_`vߗS`wx_Ño2gk=zsE=SHHx&]TO ; #Orc`4}%PJHEg>b!73LYrXL/nޘ5] 4~d܌}bS<۵NvGOt:As|)g쐾Kr@ޤHVvc8#`. B ܾAhB?9s>֕[pqV3NP\FҬn*zr E:H ^hEsz-/^(+/l^jrӼأM0Vx1.̼ Y5k VG^. [Np#ݝ}Wߔo-!J$ F\'8A b |. }]Q7]H/-[!wð1ǂ)YGy7޽]mHwZ催=1?%7u0h%%98!!ciب<' x[Jns&1%,ZaX->VUzW5;,^Ÿ e^Z4ڈu,!ˁ Z$9"x0 RwPD[Dɏ _jdzG-kΐ\ќc6Ldx9W(a^ؓȖܑE'i }t|wPB7z5Spb[YS_ű&`\Y.1 c1ɪoX7ޓ#`]c[Vsqe~il)͔M0`[moDA" G̓$Fۗ+' RsQMJk)=˗&0LؽͲ S# [ϔ@>S<\|} ,ޚ܄0cUV,?EKr-B`xi9dlLEΉF,lBEY@faK"uQo|s-|b8!g`Mt#'[tv{F۟CPA& ."F^ҝE,m)ȧ#6@~i{8$aJBznm˭sؓ0v몴жxbi#"met.k^n|dESii@`U!1"y?%1*r6L)Qygu5d`qC $}$kПKGX⋧E|!T$[FfEvo H4af0t;/A{Yw-aPs q4A}S7=Y/KGHj3w=~W/J^6BR>TTb (]q6EO{|qVqM=2ǰ  EE1o&D]BVMjP֦ª DPh//p~hVY|1 /@2l*_}sHvY?.Ŷl9F=?^S% Ŷi^!K \mS:fWb[J3U0Ry4tosÑ"mCZ̥Cw{x7fB{DE">w3JCu7$+}L>(z/E_N&^ Xݾ~O#[M&$iֵo5,.8 l+V}Xz˷e(۔=Z&4#kd8&^/. Z/lWb""~E>l6 dWܜ, UΉ'R58l`A򵱨eQ2X/ʌ9@mGѶ=! 6 3; Fjm ܽcHlf<`,;ޙKvt?=hZl{~ZlyTpxů@i[׾Yo[++.a:dNSB3)X p+ K_w!mTP!BNJ &ȣ.0㈚@*w2x4Nd!trMa4PSgSK&3W`,PT)h)o) qLkXp>7y%No>#]C0c%ݏȔ{%MDhiK/brtps0MWH'm55UdC~5]O_1>zFGTKMrV5`S9 98nae{ F@1]Aۻ5v:M+@a8|r[i-ޝdpU) X`>lJ9NTkPbdbL-#] ߩ hdT(]bov}e$Gg,_n*f U;(lXߟ# 65`bYe|sTi} ^|!(h^#(+A(?}>S3]y^zO XBXznA-|t*tb+I8ɘ{|1 sy"ثJpI1$eU~P'j&9B亶XX$$]D+v,S+#T ,ϯCQ@n7bjáų[ޏԥeS/hG*9y{/cڂےtskZ{p(Vֹ6`w FHchk`@'k6mGaOLJ,6_$S6 \@3F6ڭWVPm@ASRt& 2dl{?e,ڡLg-SF-:).K5'l?A˓0~1'L~3$LA?ң-ʰޯv#Zh@+ˤժZsK-piXeD\0l,fR?U8,`:s3\zQԎ ũ;02 Ba hjA-K@Z<$i k XeJP[Zy"W>si(h]UZ[Q1e!q9 4>2ɤkF7ѦNM_^6`Qb(n6| [4;VZosԽ 诲R fG&/&ou(mABD&Un$<}Zx pc@M2#~diO6;X~XsufEʦt8⧞Nium+ݟy,"6br4ƅz56):T ,cб`#  R[`-{lMDj4g-Kt]pGȆH;}⍜VqTO } 9wR7#KN߯EĪFa,lgN>⯖4T[ʾ--r&v(H; RT}ȝ~F3-H:|]('_acشni:K?4%4Cp+nBqsabn<~"-~=`חq;gz7u̺C} E^蟭NV_%ysX>θ.KV( - gZKsjI(?לwHW'uH=䙐lr0m\|U O[Uy7fp_{ S孫WV7t+Qg[pHEA';vBA9[8%D$URp0!B$yhT2 ި ("vJU'Od>d6㓯l:؄hM+Cp2/#i 5*3J۱W1{տ|!`.ix%{#?w(8y纐-O53d0l>e=dIT^`zoYlT v,wR6anj2pP68 \tBR^!Xjޱ+ ,U4옒5 Ӑ+6 LXgĈ#߳c s|O^m-9ܟ#9 GM HSȍ%g5 6mi~M}a0[ 0e}];x۴{p_$CX~;O%KEQA3^589k`sY~rk~p$n-+a*0]bxMT2c=RVc%QY7 OW2ϥ/h`0pPRS !Kcig- U ZiE0W>.@OfzSC;SxD})tU{dTޗ)=?/wԮMbqwTQ֐Ȇ֠!Ӆ0߆*jZlW#ϟ.P!ᕫ\;ܤd-%BSyX:BMl5}G|`[آN( &8uD_y-9^+odĶbzN| j8gMi ~^1Sq9gǘgq%9?]nPbJsq}L\u/G ^w>f-4?6R=i:֌8M4.ɥo7=ݰfUz<>D<x9A:-E{6#\AoQsɳP:{MնVH5Lݬɩ'[5ȍ~YJ'$iӯb]Iȩυ'F3 u4 KQ]kq`gd$ԆFW-h*~8X=lKT+ MI 4$˯cq}=lz@XFRyo:-߷B\jtMxzyGV²?[1 dpJۦסAqåVʴnlVD+2]>p`ҙ. >&1kK&[9tNxWAs<M2!vPֳM3Ͷ?S bᑧD(gv]Q. DF; dTnN'c{/gr|H:!{ B2\i|ƛ}G>tpJw(nXl'*sѪ'C|l.dߕZ&ObDU&;3a0b.f^Zi/d1.vËű;ZB cF5_Y2K{Neh*\ޥBn#U*؎cÀ2VSwnUt؅rN}"CD0^]9;+^3ŠM)#H%;T4Lc'ie6i7_KjOE} Hq_ V&_uhoэ\C(?kqWIG <HZURNIv]R%g a[('jFʩʕ<@HA@6!WωMRG!I_͞dpG<\ZSs;Ldh&dwZWPmMy#W([ŷ_YORG-Tne$9;&1%XZ=k-WWdG#u0> 8FHmt!03D#E1Xm_ʀ/1]tjM P^u$<BNF2P vu2EY9s8! ݞsQbCD_cSު,ٌ^Is5U?}Rf7.%c]1 Y3}$4fN/@EfT-T}olMT( V摣$͵}ܹgՅo_|؂| NTȘ{:d8:ӕDʆas|MFѧ[|<х(YDqf]C81ZjOotꩫWTx^L HK|9qvh.b!t+nb[(%V9'!rSQy8%R#9g^" zBwI3hf-j{Fり +S68^ljMoə5PFA9,;,v\%=FCOFg@* #lL7}B5 y;<3'xX,ht[HHQ2fsy_6MCBP8 #"=fX+u+#>JM8RF6sٵ|T7"ΉlI/|X%i:xkq)AE)|qT,ٛpv843jL" u`?R86?r]:30d)2ȀGOFcvB({(y:[CӇu:s •FDU3S)1.sp͟ecKdm`^NiŢ!2#)j:"69\y<˧ ɺg0=%@dEE&YP7 (3'{ܦ+ Dn h&Ku ,-}A+iSC>'#Pdf a$ng"r`g^QVvPi6VG#jG0|zܤx cnn΄tB] SV7~(<-DT$?ADz{U*06N̍ X 5?+m8_γDP/6 b7 "ߴy}:s|D͆Y!B }Ա}Зzv%ث11id? ĝ矏x ] #؈)XrڕommuK2; 940#6z9R2NnkyC M )-J:{#=IG)ġJ2ɀԯ;|f3gLôzdL2`b9].T8y4lf/ż%gji ;bV1-`8}ٜ5* 5 ˎ%_x]I]WX|˅ 'r~)zsR{&`EW|Q5K2Vr江2`䯊rv>=E^ "ž<!b!aʡlT?SX0= HI`_ À{{.rI!]n#Zӕv8v8[t|vֺ)XY-BuDݢ뽢 @ldj ٰd붬ĝQFH%BT=x9{;U OjF8ͧ 4/30ĂsP9iyrt"g{_οRZox%9r(hGF? -o@,e<tQƄ՟ZjXy7\@ 6Jթ>k.H_miw9-Le`xB4nF[q~sHЗ>lTZЫEV ((<IףE QK{R,4D7Cn0/g1.{;n8Ahn-0E4p_ 0kr6תE#PF\]N5?/  k=61mL% v vi &( ,Ӻxq1(ֹؓX3%P6-z l ]7c_A vdFGz&c[D˜Fyy3q\#\1dK#SoWk*fk,r夫GˉOp!Ľ]3L7`PP0K'QY}Ri%fy>$uZԮ@|pPäD_x7(Kh _[퓛0Dz*Mq`&LX y -V$vu$;d" v5"xf|x0,2beӀ Uu5ގo&,1{^5VzdBD'cB0lT:?ʿ^@;;Ĩ.h⎂F^j,؇lѿI.pj9IXBẼz;r:;J;zb  xY>vӢϫ+eș3|2 K^`oGn,rO?4 JX>مg((awYVCQBJed jER8G |W qQ.٤O<ɛ _c337%ʤT藵9 G8<nҎ!d@)%mS CqaR`uw9 Pf @J\9=Q%I0#>82qMv=Е=$kaQ`Y㼷/_F38AOED9KRbM2]{74 ]|I'x !cъ DUC F i  r>E|t@|CL!z+'$|=9=SMc8mSi Z<5mTBi><ͼɥ<$ȓ6dEH*yǭeZRf>Y^̅ɤ|˽G{& R(R٬*e}l&i_=]KH#:*#I C;w8q '7Vަ"Gh6j HdUBjGP6tg%XpҔ0zI_9¨p,l"mM{NWIH}-z @( 0]j{kҕ6%4FÛaq|J`ƛ|_ |O1E88^lC׃YDdӁHd,-*npt Q0cP-Hs!cg_,;Ea8*UIl=􉊿؆-8%h𦣦A#F+h;Um{Z` 鼠KtȥJr$w%||8EG}әQu|\zĚJ~MZP9λzE2Gmo TVϾHebQr{BC"!s!_ {9V`)5ꊀ6ޫjx>~pMzX4*^Րi5t(!*UEQLfnwp{U{'|@眐[[ֆNʹr :HsTIq#vMVe^`Djl)yTyulDu6z$֟u >&k)Ή8HykK.s^J!C%|X4s@goT,wcAoA"H7A-̒SEMDenf͎/3״Ve93dh]}Kx/t74cg X*F~^"DαJW|< ~0 ON/]y2GW0~"ؑ Ԗhw 4~wdz k7 H}t$'M,M\cnb>a W><s' wRb9fӤzy|9cxoa0J݇W2eCw:MAJH=n N1@BqeQh Z_'N?J8Mt_L0mS#4kiv Vc8wx™%R\y9A %kb˞BQkZrL~pcC\/yVu3Сۙs!^)J2 tGgd%3 hʕC$U9Ŏ:b>٫8Oiך})Nm{.;-{?۪]a#i9Z;Y@ݼzՋxp`t=b'w:;ZNW&+Cz-k1-jq7o~S58V740DA|JЅ\4"TCWJ(μh4!.@cӶ\VY')_t|@5oJ1t`}vz/XhiōZ7Y.wvDh(֒\$t>8!w:͇)4EG@"q glg/3͵q< 3Ȕ ;VW "7iބT߿THdN\]~$-{02I<7tn/! Ea|X~[E*V5R ac_^S(@Yåcj4Nu.w{-i0z ،!-_4=;T+=t;gG)!^bN͆&}uNXtHe>ן;W@0e>}b?##cJeyL5ne0|&tSɝ'0$?L]ۑd:d׹ISPhn ȤB%GW|V? gM @`IJDj`VI?Yɼ2Vj63aӺ )+;${WEHF;R;/H ۀ= ܋RxdǗG ͸2D 8OTFO/Bh`)ePHX:-t;nTcDN*PXusZ mcB<f$\ KV~p(|9 Fkפtg0ǁ1e{ng1&?^nHc݌Swh^ZU5zx͚,),\O@D$jN+2?E(؏\^<\ɘ8th(. ,%_Nas-8؊?[47?0-HQ5+ܒbV,bQ-_~G传>aTZ78CQl1{>߃iLng#w(B1.H{S1]EBI5C0 T'ѮA맪6Q#{8 ~+]roVWN4]%ـ18hT+*@W#$mՄ;l@ĉ;$hE:YA;NmQ1CFHLvH)wnd-)AzTˣ:J} ]jFn Ґ=]6M6ZkFGUv)aJY|}x"qB'';SRҬ0pDknp1͚,t.e ޗK qGm {,;s.E^*/|HWVquIL%ltr-q{ ?Uۀ8( l ,F F sh.@&IĮ2L/!-{GH>T_u:bwTARbrjfU&PTT5[[TN c?XFeO.YsI29u|/d 8o~QIfпȾ8h'Mw[f6Tv\'XyV 1p !#ڃNq{9CPLܮ^rn K3+ *3wҒBhOR2߳H²m~{AB 5V`͎yW&W r(q51YtTxL) =%t ƪ*a17uI]F2HEƈcB6'LcrߜU(k B[ĮPprMԬ!lɶD=ִ܆UGyTp{%A2He<^`y,:|ֻ؞d"h)xl3$Zc)MHE}OߒLC\3TlkDq\zYEӻ}A=la ;32$=kw'b†w^9Sz!P|#;W%0}YaM'6P1ۣtL0(Q'5Z9DGIz"?39cιQɭLcB'0iA|;;/-!1 ZK93 !ET>ٓgwmHea4h3tSC6 i;ٞ$4**$UQx(Үd~Þc$s3%oKr2߹^PU4絬}-JPXmYRB-@ cc)) CrRC~%ѭ\^4A ٿ;|uMkZ(t HN{(/}rs aR<@@B' +qi=M& ~SJz>0a!|t]ZKq4`ܸ՚Usdr?8Ӻ"35#e.K"!<7JW?sle>&p =#fT7dBN{yQ[?~*:Eidz--1aHFf ץ/)ZNS7Qsqro'6FOfO^v/t ZwxW{Qn1,nS.a\N cRY$+&pA)b+"qǝ:tG|sQvɬ3 V-q. 2e'O g#u»GO!y H/'NMاY(1l [P"/p<94 b#Xg M9 LpPY  N;K~aNˡ[F壣aÒ[i26{wKcd 8vqWI9)KwI7::Df 槮Noŋ{B;k>Ƌf u)rqqu\zUy=oRߙ\N@GfIYK;&L4Uy7% Jifu~ |P:ޯǐ g۹;;fZ3F~(#94rxZ>?xqmUV|W? ?75eR? x5!![~r;f[t"Zj8fm>Ũ(.<kcB)j* u< i)h|\*߽:;҇I)>Y(5/SX/0IC.'FCR|0p)Dk6q-9 Bs8gבG@ɚ ?K݋ hͦgܨ&T)鏅ymfbXzЧ<:m5OG^ayaV}̈́/ H>%:v-ni{~½^}n#C6/'J&λxb:m]9'K? {G슭~v7ޯfNL3 zy I>q)UjV.:-:Zr^Q. *EnfFJJ=]fOUc:u} ۶ ǞRɂ& 4pkPR=ZiKL#sI( `jOrc=AтZX7d:I޷W]z^_vOR[tX .qczPq]*wL/2G9O '3u5h !ҏC_1wbNQ>3: P\%5}nT*h–[x_K~\DQg.mMB5:b3't_/2E4}2I_20o/;6:*3aLmü+>0$6 p AcHDiXfٶ |RyKIQKZnF̜@0ɮ&*;w;gt99e=?<!KqFZ AJ$A%c"d\?aa%M!{x5x/oSip5`ۈw]3\E)`4U %d'-= u U`26cà mt֍}g:0O UbF3=ō74.7Ǝŝz@`U]-k'S<}9<֎:$)EVDL^;T˫p9ZiR@e[b[M:1.eG[vK^ >OM}!3grJt+M{j|(,,JpJAy3af*ѥ&|?뷙ʊh2Vx:dU_aܨF`\H|A=>&%;m[:Nsk}ɻGKؿeESv鐓Puz+0՚mԍ'#  l.٩ Z۪dɒn#q ?Y]dS#%9Ba/uT= y@r/ˊC)v `@%32/T[_uB.$lw̟Ζm]wQWC K@weɄVW'HA'!r+Zgтs _aXm[oMy~,Fs_0Lj{ QAUdgx e&uPPBѡr7ȁ?ǦE2;'.DYHsd@7,<&iH|r~ ulgoC+4 >VT^<Ƀ@j}\Јe-Tf_ۯ$hmE/ӓqa+\w8LBUTEA w8Y4g\zlg&e3lh\nHpenqk:5@(]% *ZEx@KB0 {a$ĒœO4ۑ 3vL^{<` ƒ3V)v鸘hRaKjwoxn(d-ggөA ;SPNmXMF:gq=Mx)p*P*qECnDJ;)M zaIָ eIn[-yPm0Tvh}cLⰍAZ #Z$H&"]r疻5O~ #A{JxOe OU` '@_քJAG$"oL6Ys Ʊ'z?4n/);IlYUkݍmGb=;5&$* J-Up=rXJxquYPIQ/iڲ%ĺLy`7h?o<&>qw]2 >gDz޸aLjgf 1HU謎MjwCPj*1}-iq |=@6 O'6 7 f:څe#|Iڝ!~LZAv?VYr Y!0>SEӤU^WÄAnk$y…rSͿ;|3K4@Fv>CreU&.ymʰv{O1[;FX3G S㊩_Q;ȶVMO6/Z).QiGĂɉL N  PMZ⯷˛@G2yxNxGƣ_@H<1zkZ*5be臢Ӣ5bZ\ӌRLs<1Nz J *vDŽkUEx#,%@SnbO6۾k1DsAMZ^;4)6u3BW~\m=bWM/J>\yvzwDN#g̀(蒑%4 nod?. Tx,0(0Ԣ3Jaܷj :qL`ቃ >Dkl +6)>=~3m +ֱejG6|t޷ }g*Sw j.l`@$L؅eM%54Eӝk ~?6OksveEӭ2լ@mL(z#g{?R"f=ބ6+7VcL {Q|9O4ÿIl iPk-lu*ׁIrtel[ނ+;(w%)GdQh?Kѡ:x%_#ɤMJٞ r=0vqUGtx1Ϫ؞1D}Õ\̹C)Lby ڢx9f=+H2X+)r7%T.Ìeǝy*Zɧֻ;6`p ʅrXJ ha . N*KOӞef#;Y~=1? ߧk7"O @b>Ip9%),;~U<˱vx򻜣N3fT[pO̤!{?3 GV^ j^-[IPN{Ȱ(t7ydNd ,cH筼[nrL CbKa s &Nue #/r,$1(ȫ"]xe7 7H;7jmLO1->iӡ=J0j*w`xiyRLtz#רt=0ޟE[f)`Fqc$v ya97p"1Xym9@L }Yl7 eSJ'9JO[p$̝Ka-!vw (+G )]@xA;M>+F>T):tM}"T@jt@m *:E~H)!eO˅pUpD_fv.D)<}kݔ+(J3Tyz\ث D(eŽ5ʾI3b' xӾ+ >_ N>E>Y:>Y+i,%Ġ+MWE`g-{bUĂ8ri5$Wuf" LٱqTJ夋ʢP<m' ɭzMFJ~0 +)hXQsG(*aNLFD ~*qurjE{?fFm8˰^kD2We;J9hyE~9=o6᐀eak}ۼ;Pū)+"0 hOz߰6N^:wWF*X.0ͭex.zARY3f!5ޔD}[n(L^DeeaP= 8oXo:Aj$^s5m^š̲PN{su z)h%syk)q5ZVEaػ'y# D'VSQ\M&ޑ/ Y`h͖r?00ZFY@Tyy̎5,2P,Xx萎7gКL1*_Ozٱse$A%~2ܝk5u&+͟ny)BJ0['^X᫤Dy^ S ި&ࠧb:I|*:d%r3JOE )>-3 l3icb=Wy"9t 2p^sM)~M7EE$F"7|j 3y"bd#yYH>!X2/7oÇ7!HjZ)!Ez$aMH$wJQXWAuٱڎ1˿h+}v42]AtJ/ <5.ɼ(| ZB5,Dӱ1`l0+"^/v*n qB W>'1T->X 3 A)\- K89) 1<}J OJy4:RÖ)4u~B+_>zp~ o31kyjK3Y.4{uez5pvQ.3UyedDɖXg\-DO%xytFUqÓ4=r3h Eu^)ϦLدʹzD |\sṘ'[ ^O0Ё˟V|=8­vBt1^J-Cc" 3;XD:k~sAhǭZ v{w5+ ΟQHPyZtʦ\lh t Mta`j7k]cPਃMRᏵXc7t\-yPn_|N4xl3354/qxPpaCa-S3xE__FP<.%Xw`58+#x\;;̷OzVǺ|q(fUˌԈU Xlع:zc8X%`t@ 2z`f 2qX[15m[8L3 bꌥ`( r+Żv.\ 8IzZ겦>@$lkH~JH($1He'W uNj C Dqz.WOml-ʀ뼆a>b $ >8ߋh56,-J*l3h!m^`!]gۃo&kb]z9FJϷf@Y@Q-pgi; 3hp]"ORЅ jkb]4m4tOgvNUW{!=:."Kj}\scM[֊ӦM{y/ [j&-g ^rTR5c''4BGH ('cmo` @>Fբ.G[6pMU yk_Qq=ɐ(R o.pkH%gbZF\8"CX>2a|xx-Qq\k Q]Pm홳}KTN`⡽lZSVx>*gsY1`n:DLI W.w0݈G;j&$tdX)8IpL^"viAS_|}3$ ^)b/]5Me}0l9/5e#';:"ujVS(΃$rrv%NWܤ @YhlQ@'O\miMR̳EQ]͝cFCynma.)Z /]OZ2/a2O4`d3$?TWTSNSMA3^֮qe[&h>{Zh̀?T 3wSo;*12W)J{˹%}n:;}) -֕#m߃@lft:>6,~u C"CTJ{nClؖad'Gȉs_1"&#t$l{ ڊK^JFa۶:xQjB$&Zmh),4l!4hBWR+}5K.| P1 E-nҦy(g{Qϑ!&֫z9eN,;E!S(p| hd*WC ,Hbdo,qZdaVYGszw-+W<WG85ܸld{4P/{дrBGBx(Z0A`1*$rߋ+Q;'3<1@吓~jXV~)[p\lKh>RKg!q\SPL< !4 ;d!BI+dINXz{ ':~N"nT8vX XCs4q딐?=۬AmMr1sy*aF޼the[g3}`3Is7e͒%B6=xӔdH)mH%%AY9P&0LB^UD~zhb(y~5e>I_/ E=T=!% ]^ *o#:bG#Y XWaaL#0rgs;|OCJ,T+$ѕ2^PLNx`W!C5ޡ|6 ks)v%U7к~У0Nd9`#F|im{-ŒfAyLٹO) 2 ž8Y^AZ0F:_M9h_*a]Iˁ 4e䠅AuHvFqTMKXBf=g)~ EudC/I"جƵvgs@pZ Fn𗎖pĎu\3ܻ%5,b13 x@g@92E,=#t zW!X]{%Rk 5~_gsl w`ln(A="yCW\ h֡ ۶j-gc7cU-=MҦh6D)@*+dDz7~}y7jYIkA^iyYTAGZ#89)Av*˶ô-=?cːkhr^ UK B bu֐V&|沈FBO29qжZۥѠa`* eaicXHl1e.2Y@#7 uX.?M`u;J%zIe誡vvZ7Rb*V BrVaDp;_ǃ IwsD[U˜",Q*;?iAtv ^qm =@'$ d'^pzW c;yʟX|< [sP/ ^#K8^x0uJΪQ 5[2ħP[+9O(4NO{&c"MXP wA 8pZmylb42҉6KI(fp5]RĦ1Q<1uv'n͐.b-}kI R*[8O$'!f;|_N7iXE୰An6 Vt2^5<;L7PPϺGၚ!9QYcv(^qa(٣DgpqZ^9>qdհ/VS⣦8BU7Sќ0C33 OhX}lȮ;\؃M}Őրţb5pW jN/sY\F^NMИH2% 2;cוate^Mh1 4Hk"kchUuDzfO`aylО]I^[sU/蚞!˲ANKƛ)Nk?+9$n7Q0#]΍jFvy7/1"K7 Ftv\k<^oQn aᥫ~ۧ |wsѬ|a(:J,oҡ7w%Pƙn[<=**'; GԺ4* G$ =.z}p:+$[\ -VNअaeW7(O*,]ء &:B96UN;Ó!…%BTfy(YVRln9M{Skق38p RRwT{ۗuU&!r94V{s ]eࠧhlsYf@O:dhp֘M:-QLgn=*r/,.绳ΔH”MPh7w2f/ U7=wd +p^v qF5)4-l(G@lfxms p·i7`$BS<1ϱVKE`9@?t+B8RK"KEĔHEb!#1b.Q~$cْbeOR,'z1eV]#)h:I#!}~jkBjc|^Ku'j |kǠr)W7Cۍ/uC kŠ,&>jl.eSIbw5!}zER;G oGX @gƲkPSF*^&y G:XUx"Eުu`N#Mƾ/{ D#?muHLIp^x fa5MRMݭ *"IeI)*OTrC`a-rF3oЊ?wX"pk ZFd1X}9\$ی=Mx3WN" 셴f>\_! R*oCdܮepِJ'*rK0_S }c{4k@dKoi+㺥zǖRx!x^7a2wy1_~^7@7h0Q)q35%TD"[?aQ p%n Ć5\l2K˦nN(t2.%B|1@1K8?~׾Ğwq@}؊ۣ.ZI1(DgHoBLyD0kNF+؆q dZMg8Ŏ"u .AYt,0Y+u7irQ:/ʶ< U~jTn:ѤJ567ȉgk#-TZ _lxթ*2{/. ?n-NM 30]n :VQ0T$V0Fȴ\pV AԘո@m#3#VମB[z)JSs=mi /K9:i%$ {%Xk4i;'XI_x>>Ԯ&?gۍNnS[\8.T0?8TcAxE,xNtSJpr4c.8NCɠ1@K=[Wt?uŲG{BDOW&"wvtQ7T? r>jʒ%Xz}2K>6]fd{zڠ0PF`X*ne$ Xz[V1U0I\m-.z3A9hͽJCTbJc4G:Y{Xc g8vGB-o03ܨ<a} FHcVW 9 V s:mw 8 #&빋\ lPZ :(A% Gjh31aqdoEƢ*ZV^2|{SXo ō6 :*ybTMS⠎KjioZ{`gxo~NW / 3Mv};Z~4yD=ѐΨ#ސb63~U0IPY:Z26Aw?@ vn,bF{WۋƏ^N%(蒁e.t4ynbZ]󪜗!ЩT #"}bb1V-`unF-'K)`m eB8JS. ep`JvS%X?~k]Vy4^<5vV[>8J*YcKトRNZ"}hI?MW,kIϧ1ņD2^ ŎƉJ$9Dž1S.4>f>{d$&QaccaAN"X8mxNU >fp]=kx\c\)ģPΥ$Ꝓjڸ9}`%z 0{d=?~voB%P(7:c*INr@SG+(^n<w|ۣԾ;Na| OCe(38ºIM5-_%q'CTLU]"i$ wMG0Hv/O*a/}#PDCM~e;rU^ Mg̹`}RݏP(2j]J,YO} nJ+u6؃c(nPXc(uM~BRR"2t Yx1`HB^HfAV\b߫E+pzh(<θL0qfWP9xH"~̝)Ϲ=.cuNvAO$[N/e'pݎZ5~%bB=gԍ@j? g;c+ºHPg|1L/uWr[MmLbXJ[G֔!L0Np(SHۆ!  ČTa, .$MxfMK6Bt|Clxw⌈&5N;$8J@ E2:K8ɑ cZltFy4I]X۪#yI~v \>cG wӆE 60K*f#vwy?,h\{&aM@>K? xN:I3G0t1ZcU&鵎 4oq+Byc ܩR<*`dȘ] :x<_pj6nӗH6Ob"V#8ˋ3IN,c  ) |>9hYB"k/k+6/!jEBrhHexXdeR0?aEBFQ| "}dgypkX |2#T.{),ھ3Ȕ7'-y>^Ii0K \)-YQmKv\VYK}]R+OWw՝9c(݊͡ AW6%?ޓ R`?-fGt6z懲V%4R=iUsܔM[nnm1͎E(u A'6-+z `NPv+LN?b(j]Gkˊ1aQ q]TԸ&F)>o1G%|3q T0\5zJ}v[k^Ə14f[+;B{=%y5B:ud`#N4pC kuNSshcZuVO.y~ @[ϸWfbtca cD{&)!hBE? 0q[l ~DW}]էگ<5t y;뺲3lER YuWܙ$8 V/o .ΥH"U] e^F4>s[JӮ,=yŴl8r\NYQ[-F|!օu 0Mgp> } Q9k)Fi&mtD\v?oc5^ux H6N'CǗdVՍJ㌯qȬ,czj lAsTPU%'yw %םP⵮JZBk%NFZ DħWK~ Q}c*ϗy)͸t2ƫ&Y #RbCX`w1'glVMɲc&JC  "2_D +?Bu4fL8 ^Ehsn.X%*~>сSb?u5ܯar7ryYAyНo҈Y$6Zj:'NӤZo1]p\ЩQ` JS懶q݉= ڻ *(TwE I ^C+ZfuS83KAf#Q|L9%z#aOC3=;rC\xg7_>E9 (+ͣjхSzsf5^1oB7zˣWz18u~"Snh*iv12}݈Ea ' y/fNX, "95ᾴLZ!7 G `%{9B*]aj y-@U."T [,@RЭ X>>%vʌC9e F|W1WDQ*iBhkԘ B8%9c^jW. Pr?gZ)]Fs5V*ŻILB)_' ͩj[DDfЯd:wf;^n(8P^Fz Ե^h,-*Pқ?iyI1Dc0˓"Yz"ZhGگ 4ELŵ^CbIЂ{yt>O Q~ܹ8Z-=\ޠd -1c6i`&|1;YQ7l"m%PFnZx|)"Mgъi$ ;Nau_9o!II6<(%.` EԚ> ˁԬ7Ag7/1XmׄhSBIB?4fT:YM'L {(` / E_f7c1N3i6uDȊ/qsaF"qz~}TO<Ɔ9(=6#]W65䟇ILaṃVyRJfRoMA/mv!/i 8by.  Ng,5Ay, mrBzkn!]VlCWWtؗ$3}΋^ 3[oތnܛmPZwp@7vN@a/ W+ Lv( iٽ.%,>\T}vتODY  N{V3N?ʱɈ{=[1@[SxDǴǶ 4JJ82fsJ#q/A;!E~\&ӊ&w ۵kZ-5('R3d66Rj(HQKE''3F][ڐ 4CH&x&?{CQ&:N;`~r(%`/}"LjV!ʂ9Ŝ*ӯ.VA܎U\1\٧̢3ϘhG,s?x=NҴpTd -`v]Z4 ꨜ*6ti_7Ҷ¤Nn7N CwBMf+Y%e\& gfٻ `u$>>H:6e,:?VSYLW?>vo+e$ *M=)MU ]<_KH][RB!|RBr7o) t32Xyv-UY xJ`I^o-,\)Wt!^\.%֘lNHۊQȢU)ZZ oRy q}jz`(ϳrN!M(QɤBP+|0 PY #+uKC'Å !ɸgT|(ǦCvɄ +CxFkıGIc]eyOL^/w1[uRJY0e%}D@>Dj-QWbzl)ZhZKʣA| nT;?&S׷~oy2[҃튝I};is &Q^2\Q_-^C<ܠ SyP~FZ[ o:#f do4ّq֬0ak[. Kq>E8斨ouC3Z 20W>umªA,ti~UK8TfBnsH,y lY(soN'w^x<6 ~oS/f|6}[gM\5s:uZΖKs@_t>w>u祭Q0=e;IIOmxS_;(9',a24TQ"x@z1Ğcx# K+Frx6I`lVԬŕsȻa?udه2AbSKgZhBQޱ83sa=%lZȾ]^2U tR(Um::ZM{'XwvRBy_Ww,4Nm2ـo[ziҨ`ij?lGej6;M-ХZ|sdv"z?x;n E'4lB tT9NNr_ЅXE^\خ%]a PP=Կ`nK x:+Nc<8:6m?~@lе<[n=T7#AHa[㘡l?iDXt( XM!q޴ur~y#s?Cs݁@4C$?=;.%,N2nv69qjӆdn":=:nQLq.T(xs|?geFto.}dtQBjc^cT,Py~=Z-oI-9~}ƕC I?dJa%>;EA_>Z*Ȑ7 t왯Na^轉GߍiG=ZfICmN㨨O:dBqC{f$܀ʫJ-fZ!NoS`2ov"a!.HGIB:`&91pyd ܎4}ˌ!_wq(@ڒqS):7'*j($Wq܄ dHt_ۜvO[ $;p ϳ AN+.VJzq܇ ",|_q4km9vNH3Bn,\=~xbdz>ă ~i1F-PڞgzwliiWH#o&[g'$xEk@x,t8BoR{/3 {O"HD;&\dz4 k*Fp&yle()vpRpWSnYs*{h. ›M'IWH[ wz=T>\ç _ӖV}J:>n@o4`W^87b+'@釒ioz8O܏ɦ(؞BDt닯ƇzE\27S;I?g[  =j|S_4}_, -,nhL7*|uaD) Go0Fg _Km')>EmnHPRPzT8?{wL`ÔD=o#2GG.RHaOջ(tXf AqU`bL:˼edziL 6⚸;+glm%%r8[7\xW֘ep3E.΀%:J()U+K^.cez $XycoUErh{\mzDVv^.7]PMkPx)Wwi O8k1 U&n#* vCZzp+VY< 4Gi?B" dV1Zy:suJV\u]pǪDm7dG r2L4WI8<+EK\ `BHV66\Io`F =PiAMcROo^ BX7C -ѢBP)^zf75Cҟdhe4 i+ѵ .9nH^'LPp08ʁccYP+9XU 3@ݰSaҥPZ3[KAVbӑ+rF¸ޑu8޵=LqI $ =;f`PG '12V-hXOoxOIg HY[uסeۥsK(eYS q,oS<;1U+8tI|݈1FmD­Y7~$k04c~dzϥv H0 MEge$vE8DO٭S˱H[!d/oF~4_z g]as#÷Z71,pڷ/(tvġ0x5Biσ'44/r+]yy5w햏xVJuF.:`!^9zX>4HV] ͥ%Ÿ( Dz*#.tX8"U_v!jۨwtI gGGy_{fȄPEĘR^-JkxP,@+'d`t4E65 J A/GքJ5o"|wSYhYS$>Mg3RN7{a E'j/dWH74=̰<.TڕI9+n㷞j9L(QBM[)DY)Y8GlNWƊ= {d݇=/_TPCC jpo8:֛ 䴂+dʮo+Uc㱸D{9O8Fm 3~< 0?dL23-tW  537=^sQk &%Wz,8SD77'rD{HI`hK\wZU_!0)Bg+[TS7β9O:]ؿN,ZE]7KE:5ݠn0*B8- 0aUcq>x3y\jTx^(R_~fgcx xSyhŋW-EbFꑯ"we9U<&Lë+q(LF-DE0?˱mj;jiJj/ÿe 43q[R&<5`CL/uI$R`o`>Gfbk05j~܋oUPx& 8ƭL0ƏRtb]6X%vǹNK,H)803uq bYKk&#'/,'X Wnsz]I0ڧԴ-YY_N&珊gnrc_5?9>MyhNc%!Ln),ܚµRBZ4r~ff(@# g]ͪlHUH Du+ ॊՑ苊V *1ʾ9Tݖ(ja(/ oy#:=ɲ~2ܽ=bAgg&\Qw5GDqZHV5wDNi _a^nhxǵp}s {;:Ġ:PJn@@߶ ԣ%y'z߶RfL.N<"~(+իirt=/=ga d OUfNt)F;5Papr@|#D0UW߇& R#M]!wsso#$!=FKBsUYvDwhoZMn8lqCݧ|w]b0(9T͆ѩ+bC7W0 aķl:Q_죪̼:JO%tt'ڈ}#:[[!?#q<+ၨ `) >"{ 0IO?jl+OwʜEoK#@[]#B%QpEU|T?^H}Wyh=){{`Ǹi@p^GP6kbyv[XG.D,$ BaɃVO&G1W)F31,4佥9{_QҢn=H9s5cN#GR1 (UJYi!8o/X8'? tmud tC@/z[i.^ر]~lVQgmٷ\mY/ԯq<G#o!N܇N.t7k(܄$9 )R ݉Qn=^[_-;8?Q+5.N7i?*U oA/}f-$[`mӘV]}Ssk(6Hl%-_~]+et=tgE糖9W L:X!u9q*!Vd4T_jX+//:inPJ> VFA遰Q/1AE2Ukh2E%y_/Nge_=یǨw9!S_>R{;GS%{l(nV!Er`U8ǙTHNl|=i.:U`Q3%UjF[y| IFQ2, 1vodv ~]n0{e|%Cm%j{g_{bz…T45z2W=ne1O2ƭ>kTr{ jfKLQqfSbLo`1[ ]05)SA u?@1"Zm5vh br7Pg+o ،m3RLϟb8+ͅ^xQE⡃4ЛPj\)B`;}Ȉ@TQ#Wq3#ᘰZ;:q?t'B,m= kp qPߵ!͵l]QWl+@kr%y- Ωf)M BY E1[bI5B}C[쇌=U EБ^qR >ᤐHq~\vca3`|(!Y"wT:ߚM 'L+'EI2CSct0 ȁ3>{ܥ.ׅ_/9PZbC告} x΅ BoHo^E{.Jvo9jz1 Ȩ[߱hnJ5g.WOl)G+-`ڴW .Kq&8^ j_V 4xMWN#Q=.\'Ma[ (p!)U*|A T>DZD}0R4\ab$3j- HS.ֈGMxH}Qd*m2a53ab(9ql_>(;)-7͙>!H 4B$^!bRwd# ƉRj}nFurfk4jQu'Y#ɉǐLtԏ|d2p!chƉLd.NvX(XȪŋ+s)5pF5;9IۆS[cxpTʋϜ\/E~ƍk1%vC,Ʀ <dހ&b YcoO)fɊ}+TRX,,lf G)zM[h'\Q X'X<[x3:٣}#㰸C< ZĴ0tÿ?JLb' Y?_a!o ]Y$h/_PJcِ0Zۢ0s|.iҮ^̮ۂjk2Sn&7mj_XtWNlggQ-?'pSBˏ̒=w ʷܺlQ L5rIlK{9$'}.U7 ևfXzE  `c`$ *ܱ-~V3C Ӱ7Ж[ dNo"!y-iӮ#m`9c2ɿ +; 5On@ݯf1r)f,6v g9Z6t9oCzEESdB1]= x`݁c dci 14D[XzNJLȡ;B %֫oRt<vU͍GnTLֹJ/OX1[*Re_x#EaF叁yNϤg|:3a`nS*ˍbJwIC PJY 2w&ch |b؞]CǑy$C:EU_'%vTJBJF3WһAX_'rb7W,\:`;"Os CB{zA3.Υ~.9-!/_ĝ!Xp,}-dHDR 3C-i1vk &cO,9̸y"3 }%՜Ǽ0voVUjJlIG7>Yzv:F#GIh ghVN<ʓGV!"sr766vu78&5h 97sTY-قc~Y.xo[pTlOBmW[dM${'E0df4iT:]Iҫ O{IԨRyh2x74S+1CdPSqDz;?3M0Ee2\:3@w"fFu+vk 8s@]NSI?Ψ߽:Plx9kސ[/`;d/f8o#_lדdi¾]DֺSRaB Tu۴52sSVw鍷3gb+)7Tݞ|qg<⽲HdR #{"3‡C_:lˇW>A< B1-fA22TٳLc_Vp-i“Ax/w]nAp'77k=B]qW>VJAɘ&8"qJ@O wT94ZL/_[v@Q78h0^ >In4ų55yVdڦeMH9= nyϕ)2tHځNCP"N /!u>_:M{pKhxqnCuY|ݙ+jAB&/uh3h,^R$4xf&jnT%Xc0[}q_ xǃ yrad"6yjDN@O1w#n8e' g|W9/}̸bF4AXuKu}S3Y0Qtwcx0[lٱVu#vY,t)%=$so`s&Ou?p (*HmX]?}peڱ hgvՈa/NXD9&&kwORw IA4{PKF.[[9a"P8T}TRAOB쯖r&,^y&6t|av؇do{͡as -}cDZ\w#vkqmڢ2lլ`ʛEU[\}e^^GuF$_)t+joX"s1,*(l~&722FpOE?IaW2n6ZCmЧ.ܬ}-`yVEBYUnsJC I>2#~:wmi|=լK6:+CּhLi.]'Zo מ"ohV)OW'[bL,uw$sB#Nspp6+j@ >o-[T88@Ma#z%f΀A.ݔp#袽|ѳ9^7SG8H[>! K4iA?e"{zCPVV'gߊ$U-Nm!@B[w9f6I0̱%AT!B#q518Dy]IT]y#_AM@'ݴei*(N2mi/4,<ʝSU$qݖ#D}lWjP߾p:JH'ЀAsJ%ebfD&m6VluRБ1ëw` .!%R1q~Y;߄щP4Q]澷vA͛Vpf>Uʈy-\*W W(shM,EUZa|@ExsW^0_,G2Nv@}y&q1Q}lS ظH`/v1aҬa$ObXJT]!I*=i 2 m QҐ&$32&ouJT5& }!7H~]-Q^G(p{~0bO3HᘋQ%' #!ɵI7drvq8cٹ!Y^9ۭ.n.]6* e,وVFn[ԧ% Z%EΓlP^ſ2Vgm,[: V#ggŦ1#1Cih9ЖQ׾IXtnSUQjц?q?;7;KSpw7IQup<Rڤ%X{b~؞'loϤԀkew=" ()vC՗m><4BaU4 c.~h:>aN1i5VnW.4C:0IcB2K`e&Ac@= <:8{[5eOWY̥g+:5™=R5tŶ$7"@ot l>:RdQSKr5YmP h+lm׬)-k˻ PnN~8`U}"{%Ʀ*c$:;;2HcxC5IW1uWp2kI:< RMT-@sHŧ!`'kzu]4 sNFLziϹqRݵL8 L 73M v\Vӱ睄 1>o qe| !A_kL0fHo ,KΌLZ NIJ֎ٙ22ʏxxfXo*8bљ}b !vFNRBRd3{)p T7"/#\@ۼRZbxJdKbYhl+;O{x|/-؍@l~A`)R_x߆KEAV}?nHEۇ+{x%AZOLFGoc/73'3bǨv7πs f3z1߰ hWn@Meɮ U 6h9fQ^c8㡑vi/\=Ğ8zW\(8:gU8`7$)~DN荈WKD60cB͆1S%<k/6-=,ΧI݉gƹg ZdPJZ/zzc61[(1//xH: HQ$2pԦA(ȫN՗~h4#N;nlg_%c?ôâm*Bkخ澺ZPhk@qW oC\rZl@)l:rT(S[kfǁRR]"$+7CN/$gX#8x75 щJϤ0ĕ&AXjd\:T;#>;P:fh̎|+n(/En=U5CmAiZ7&tryx&Gh?y g8\< mTݎ1՟6wZ5y]>y:Jug*%}]Du!%(4 QE>z߼y{f(x47 or8e :_-|@i63 RdF|Ɲ R~ əSI_Bڬ$5p-wMv(-Pb@AGv-ߨLrZo&s^{\ߠ1v\륐 [" H Ck=؛no[zK°D#֟֕GEekLZ& W|ʩ6pLNSUF/Yi8F_OKxK40j fݲCige>b%$6h;IVYC*;Q|{pmޜ`dmkTǬ!N) WsÀjL_[=& ir3uT@XO3""6t0StCDO.؊:1)ӊls¨Ô[V!Kѐl mAjHfUԖK+çD_umeg˲gԼ?PI7 Zlac{9c3s*t)B_2.l };= eQ/d/[FNLwȄ9W?^+oQ{CTeC"aԘ3gհ# ofve`+_kHw|ւ['n&)rb*{͠M"[K\;z|g\vGCQa,kOtnϪvJӔ8WsM#MǩPFKK03N4"]&Alk gyrPy 6*״dDݒ~(4Ě|\IYȡ\ 4XbGvĞK E`dBd޳ClJ:\ͮ""4 Í]Na_>7izr{d :V`yoϜTbv'K6 3?O?ٴhbBK@=ҙO\,=E5MH +[Bl-Fu?U=qj/4|m>oy&#ryvXvcXko7h>}᠂_! RV<;dn@,hqp5WS*j/Ț`81Jg`ؓak g%Zvo z\u2J񡛌|% V>6a@%rr-KO@PSw XƏ]5Ư_9k0- .nIfw4ZfU@[!K79H<_=/2#aJeF徝ˇ hYr|(Aʫm@ƣZU2B X'w q1E=KJ EgA^أCy 7||U]KϮgI[gh QvJq jѧ%KxFH تVjY;=$ʿΙ}YQ /x&}HS%߃3>VYXK{hY݊\caL}˔Aq#LX_fmy+}!l[W80>U`J;\ I#~*cJ{-GN]~RbpXhQ^b,J' i[,T_ؔv^?ӕ3;Hr'M 5ep𲺻I&r 5[8 q cYy/rޑޝo0Jm vk%9\)}OG qi;OL 9-X=љ I[ǾVW |Rr6w=\Ƹ#97[Pڌ¨0&kSFWiAz՚ _$\`A@˄<Hզt j2*ӻ؃ӧ Ȇvyf<aӶaqпgN[ h{PR.{"qcv/2++%hQ^*p78V;,[ݕ3B휥;ÃDFݚ\{OWVAqI̪,=D[0,E!F% iް$ ^~#9qR/a=_fs~F,T} }6y(k "tS w%˟:K:}D}FKTFIjf*A=%e3A7| {A y<5j=ORoC}jNdlyí1BuazɟXK P6 o+\ڢFE1O _LNr(nQΌ[@65E~K(ʕa4Ҿ9E14)IOe0kxNFp7ȩd\"?)2`Ճt0wH:؟rýT+ѹ/a=숄9͊n%g X%撘4w+j79]g~=cQoA,p%8/f!E{=BmBʼe-馼9gOury ]L-O8tL&}-Ă*+&LСJ<DDLb@𬯕@ŜxRoڼ\AN]+IeҀsR!ڊ=a%q2Zj-1[1",!f-&5sz|d(E*t_- _o2=\(^b[8 ?x%L1`*Z^C+EM;u&=^'NiF &|Is2 +D vƉk_f0 Eр;Uq]Ӕ5_OۦCElLT\IwYf'/#*F{/S땕KI/`/`kdϏGD;O Nu! I7ZfKDfWωC.ݕ?k!hV.@Jkts+14r,uSxbNgjtRKAG0WIɜ,n Q]{۶U{0jYf)u}t,x }ԫ.'|8'|Oٯ!B{=JyI ,|`:~S42Q[hdWs՟_4eoJNIYYb83 3.@oV@{ɘoQXw\>,gE1&|@[%zP4w#1Q8SXqOwuLa IEU 6tV "_4 )brqBdCt! o,joDUj0%!"Umyb"^Ь+5Fz*wQz ;o;7uֵc)ʄwHSPc]RFXWd&"`^7R"ojVT\4Jr!|JMd4 T:_E֞2zGc]&v*+pb\ 5(+˶;qGgߐxZeß,oX>~qy@<"" -{(.NF6GԮfii^gcОO[ݐ"ƞ胎hQ$mB^0rfH[Iɑ)L6I;4+)s\ L2=~Indi)]Z: w up^:~+\R87ljՇFu1OiRVK`| t~lpæwLͤ)K$gk^ š֎3bn%6#!xyܩqh5ڷS>:~hu. R*:6UQv^>.֦4#6`W7nVqv 3mJ"#Rz*7` .w PH;q&FB 8#~jp \ZV%(!bZCy8s; Xڠ<5[PX.#)ޒJ<0( E!K{ b:GTtN;?jͧL_ePca1Jmo5f3\}܉WITZ7ZU忤o0^%g8Nmx`Y̅|__ ]Ћo$0QC fh 9U]ΔgSWQ>U0r05#Z\8A/5sPMCs@AMIZL<^uXWW6<ދ<*IJ&]=5h%j$ A1jԞ5%FcWMlBK0EWV?JAc2;=Ο)72q},G`sƿWJ~oO.kQHRUbPy8e3eL74;D373i4ds%2:?5%3{eފߞS1#4VEV@!N- ͬg@麸n:xH2 p iJ3ę42chq{i^EO$oGhI{iKjyީgÊڈb-Cn+W$u4:T^s޲~j d2hpү Tb!Co1]ƪH&\W,?gʧY7,P63|TV"lI\G[+j'LP6`x4밥y'S^LΟCP_bY QQE ޴74-rPn7.BD3cOP_<}K\z,wpMX&Sgxdބa]F ,}H,X*KV`nA !\9(C cW|^=J7p^kt2Fu&IsHײuRܟ<>e߈ U"~e"/}bŭvӂMg+ &CUq^dE)da_Iadx ѵkQb墟)VOU9)WQ'a憍Od w*CX K?Ihnb#F@jNg{^tǐK^VV;a6CܼRJh-$J-n2܇FQ/5Ga>?+ak]^`7@^"N0<^$;U[5|=k2O*|`Ge:ZHwU#g-+5YW3`C4.FRx4|A)J.A^ Ӳ1^n֟[Z'o?pz (9}sϳK 2dC_-$4ȉZj{-i~R&^ȢwrbOk<ŠvktT[D"!GĬ2Gwf;A˭r>8\qҀ@QVa,>$e LSC1Q[%LKT]!pη*؉l#3kI J,ۏ~ٱ:,`26Pf`yAS\MNdj<ϰGjS4G"39@GG]rL@08$#ƱPm sLf 쥰 &#ʾ^.p\>\v0pSXKVRJ/-d ro?7"э.ͷmpxޭ6'7g$;l^^ÐQCL@*jfU.=]Ht/%fR6 `A%џWfhOc1LDtF?մ(~q5ĦCax{^-N0aoߓK'Wjv5I]8B@ӣl^pQ6]R+&c,0F|I.7"}g-6I*Imqgw0bHZ%LЩ",_"Om1%7xƦmw iϛX =1ɻ/6gf#g>Ӷms0L _4T]jPz񇰮Ȫ.shV``&(%= cv}y`#3h1CZԀh44<<0ܕH>BSAp9@b6F|!̡A9w}%Er,͍pћ?_Y~ΛGaxe Ld]Yp:NW wp:W!m%#hyدvkhM󧲜g "+eyH%Z1#hes G5X0z_}&ޜs[yAl]>-MOǚ֘RUo3Ou'!a !O]0,P֪2b~Pa|13t qr}9xk^62ljT\X#ɰ#_/ N|ba"r4HN#曺YZv +V88>F}>-^Y>4SU238[6,Sh}dP0w(1ekf*65]B5a >c$E&y _-CmVO`֫?>'iilCB\kfsU|J`h#'K>J$b( . Z{}.+OH)578RCʍzQ'i^ m\i$ p¨XTdŹP^Hu>08˵+QP%˔;М3ri4ӰeI]*0u6hՄ,"<qJ*N+X) ?'d Pf˛7w zκAŻN{^;챈3]Pbg bjRFxl^_C ݥ+34بlYHu$VX=l䡱ǧíQ-5DW?jiխt 맖Clvt9n}!?keju(> qAPAp%yn?lPg{,ӝ4(R|R L"ҍ`Dy%lR״7KoI6x}e>'>;(Ǹ$qFM  6;<&bPmíC8-Ow&P6(z*/ K,bh]C/]]c\;q6ЃM,To,Ywl6kLOg0=6 "pFr$7H=A4X 缄Lh#J'^0- ,XyTaep+#i8ΨSAdvۢyaY]i&68 wMCC H6wMn,QGPE(qfĆ:RfYL1-I}3V6y0^ݹ3Z{ stm=lcͦ64`` q&` ϖ2 dXVm_RN,NocUG>XΣW 5U}^^ٸրpJ+"LkI[ @39ROme'tSAv/ U}E" ӥu(`FJ%9P]}J@4<&du S0Z];Z"GN7Ǒ_;sTc!/i.lo,V"vhk-\p} KgC`xp-42HiBq ^@p3V(S.rV#p5>(]XVH#b iA 2ͤMgɇ/ 2N,m'loZL54a[RZ63ͬ K>)L`6ǪJ;}rܺjkpJ y9Hk&5OyYkSK8RG%mk2C@IԀg&Eu-/"(c55$b5AM.Hh9-"naB1_i+|Ϧ e//o  s7dZ77#J uP <g]wRD@Od>8N>pp.~ 'qgft['4!HUU=ˌCϵp9F?~פz6\BfMB]UUz_u{:cm`Lr€OCC4 JnԪ`3J։*۩T& M6ёB\EH|Vr7.]Z"z4?;d#x:}_'{K.[|*̪܇ zaa,/US?G_SB9U,gY{|lfbZnȭ~,z,DCyd r}6;A<4*MxKjJH0r8a?rr 8\40XG zkX~wv! DO gobKxdڣsB_gJcd;$rOS?kߚ)!^\s$YVZ2B1dg"[LS+߀0IQ^A Jɞ `^k:eS`%]a] ڋA kxmW1QxOb'n#O)͡W96/92%۰ZT0rђȰۏhvS b%> Ӎvl}Yd`.fko.NQ"3 {6]ȅTQ'<GnAƈ_nL) e0 I &/۴Z_ucvI"DIPBaUٯAI\XIdow6H#[ jw1? \Tnj&{!gvLWCUԇ4kAqFS ςBM 尝{߃47½>poNszNa"kבсV PY3)^ 0M)~u\GLeѯP8|} ڂ̡[,pQse8(σsـpX{Jf{"tϑNmE|InCY7n #l䒺%+FK#J@4XJ#ep a,$;\aGی W~u |q<㸽w:8$;=)e}OsOݳfw&xgE 3Z7,0yv3v`)cnuЬOW`v. ҙ2HY;vrBq?LF`$;WO3z:ËCeesIzwznŬ J20u2uRRJ8H\rY7-'"|D51tYä&v*\\[ NHԐ `M d^)m"m Vv$W5G,+JB~%"u7#A (tNX]5hJvTb^k~|ljYt[TweJ/>܇'or [NZ6_sXou7v?xj#+qPL3I6^ jX `q/0P bCPg"d}ݓ+mՓ5?5|k&p Rߠ" 2/g)=.e^\m Y]c&re!t↏nEaj9 _۱$lRN񒕨X0U#Li~")N׽Ge%)rS|\C9F1uA-ľRf *jX"GlZ_aݳ։$vĢ?ĐG]Y?0{̶/`ͽm xz*pYWU❤@Gi":B9@Do(޸hG?_Q"4~&x(y%>& TֵE~u`4 n[sB+9V l+ìX(3?ה8tLC ³6#f'jcjXvMtSefH;7;%H56ix (ù_J h o$'Tc$zլgw5\kj~vS' -@<{J3- c Gi7>#5ٍR#$"nnДװe Hya+t.Hާ/> HdJn]Qdo'o'8~ XGɚ̤Җ?<`$UF " nEAW;|Ej"b ͭ*2(L5LoF7#p= ae6M=t$m`yr]Qԯ-8%>lx- T*Vvqy[=,>{$=U~P<&!?9o j^MݻvB"ꡗ"$p:wl*NtGbcմǚ^1Z[eY&(BVu6ϝκMgme42Zh^%P< j^K<3ţM>Z28J$xR#hxu^C&';|wAîuv(cL؍L}61žՕBMsb:")R &u`@KgT>ݯL}WKF(pX@9-!5CIJZR:՟4f!v4عFrhD;Ohn{ӌ.gMiB4|*@2G{E"6oaߎ#&-|.g!AK-qG4eOjU;M77cTg%i@Wīw~8AYAvLHy} cs^ӄ5WY4jkJVgIZIZ=D8K ,ݴY-n ~#nn[c%É) 5DqNsev@ѮخElOt$Iku53vppt&N퍓?Ra6!B8`2SAB\KE}C\Vt{{Di Ű7rJ"í8sW zj]cd1E2=YmqtuaWv:\xbnJ@OI8qvZG [] ϳea>F9Q=O)アOP AH]֏e:4a:[G;G357"-0= U#,̛p`ۖ~ҩ-#I"TlZ Ҧ u NmÃznCH4)LssTM 8EF}4/Th6)XR>BG^G"-ݲ i98>^xhAAoc4CI9A-NX67 cF$Ybmt X7ڌ\oBǖ_4x^GHbˑP_ުİ^8Dz))ץAyv'R9Y[ВDз*Xcxޅ@7<7M}Ec)svz~⤀@~7z{0e>EdaVnmECMF=&Jp{^U-e愲3GRXPLpԈ!aJvUmt٢~Zދ~L9>ОJDzN"ݟ">ʬ YǜK ݝPI,6$*%99ur|ފ+p0O UۗQyڠOMÄe |K!-Sѿ10YV#T' kwQFcD \D#xCǘCtcV='?"d61eBoP=cxua˳hƇ*6Ji$&rWot(cvXJ,N}mX?Ւcj[J2*mnyʰ8[Bjض;K`"k\( ҥwZTZbx7 'lK-)bf$#+RZ3JjM\v2S})dg(>fsIG8qo`1,/_H? дmL @y0zVSpr" m GK8ʜn*{}))o?i?ߩK[+bfzNk|Û|KufƑz LDrK+5|:]l֨0'G[TfvGaӿ"S!Jbrp] ~b gȒj3]|hC{lj3GUɌ(:׮+D*+Q={XB-j $wl4o ±[~#QBhqo!`0;}iQ9CG{<{TC|ы(w|='^#Gpe<}'L-m hΘO!@uɚ jB9)pRk$~.%8u &pyF8>1BypL"=ޚi3B"UQ q 8˿'oJȳxH[Oc8┅SdB`EZ~LC Ѻ/ op/?-[Yٞ]vw6[I ;v){l)\MVXvI-ۊPDJ42yF|8CnSf<\GI.ϋL !@gъ,s] *+iDmp:(uέ>+F$'T2!w4 |SȀPTFYP;EJn[T/eqW (O,T݂I)7P1w KafԐ7+LTq3 ӘD E{P-YJ'cfHϰ^[iZnkd0>S6nRL7M%d e4hһG\*5R/ YjJR$l3A_k0E' * '&bt.[k_8bTͼ{v !s!Y|ɱL.O%(q` )LvM\M(pN.KȘs!q/Ssm!1 {n1{zHA MAM;J&a3$c3>x%ho@C%Y. -*G)^JQn]E-@p="i~̔<+$qC/N1[J'5݋(/Jd@IQba jFZ4lEvXvwSz ,k)*:w6{ߚTV"%>#uu$`nLo,(8SEwo *.&t6#jEHU6M >Ë0gbW"w#\\B4жM^ǩV` e1riT!w1Ƶ^C!JnPkk#Glʧ$qa rxəS;f]DsG;a*~A =QuxR Y~i!0Qo(_eBR3lR蟰As.Q #ߖ;d%& O*mkN| |U{u b~-j (nT%$Pd8 nÿO}y#a?WVmDr35-^ˇ ^)ˏ #U埴{J"kNW&ŵ(stL'm{އ{m~"%Jw3E9kCa'52E xbQ7LPR5z\f؈l&U~nS'of) K~󣗌$e.9i}%~*:Ÿ*|U@,lo7'L`i1 {z?rDW6(UѦU7(CA?}Y$S ad >حLL>Zr!'LN~rlp|Jz =Wci*9y>&Bb[(^ZZUzuAn@[oo8WKz,d?$t|%x"" < G'khyB&6v}[+F(~>CWR3a _3wH Kfƌs"DQ5lÙ^ٕJq"XJ;ϋȺs dFHI[o*])T+aqvVA2&?̀r}]}''&fb;ԃ) ?E)R3 /j[(m|N|԰öXaWT{!ބuq{ B {$y;gַ6bKސ =-g\BjB}Q`Cm_-a͆!ĉmfwؚF$G[UNs(!h`PDP$%@xNCZI4ldKo?,J(6Z]ڴ|qn6_%l`OR'9O UJҔK4EyJ6}H w}>BboP|p[K)RqMCG~ܿȼ:CK'$VTwbz\udG1 +#4Ѻ94Y@p-h)2yBojLtY$%w4ܤ&BWis`&G֛+ mxC嶉E/W&嫎'KeJ(~8e4VźhRR, e(p2 yVϫ]{ J"#N&gET4thҫ6VUlQv]USKk(asJ{͋ .R >&2.ʟo4⾳;Yqs4,'?lDNݫ7V"=غbUԼ1Y"e+3n}QȐ.ͭd:HBU}IܯG&|մ$aje'U4R͑.21V^g\sZLWD|%&4g2Uohް"LF _?i EQH,Rx:/܏=nPk\Ho-hxV~eDx$zϜFrC μ8;! `S1V+sr>,ѠT| E &BBB?YirHSXREVw MMJgeR6^w44;I9dY0E+%6& ayM7:Y&&I1j{1?Vh>XJZ'[2HâN&=޷ˢVkYxh 1ݯVR/j"b Y94xM!x C&lpo?@h6MLK=w"e.MYQЦfdĆFH`5{[+ĎU3>%d3'wf9nQʓ3VWrr._~u/6Ù~ҞIԭu_@eu\FcҒ `VYl ~D䪈 ۄ,aj9FVY͑>UCt/a)s gǙ#e$wT@!rUQטov E+o-l] 4Т:{à E|#]mwLV|vuG{^,I)Z},s4f08wOn)z0\e../sQ O+ԱFDe)(J.rۼ^4]N/hᗺ/Ф'_Xۢ#DE4ծHZ޼u X^xh4?7"qf$ s 04Md9 6f*DcKn_n0}ׅM:Vaf*R^(%_4c~PvMJ`>Y+&s (ߑ̇D j it_}&̨ Y [5GF:3MlA0ݓWZO핺 JكG=Z%wtc(FQy:e>PX{̓YJm翫hQk ] +ɘ. Ð;il2Z ISF=k)CЍR * g;bA,5mpYE#|s.&$ÉFeC#n^(ѝ0o':o n 9ϨR3F^ Y,~hgAKf毢ɉ>_зԞ̼mX6ڵd|!L$h(+F腎 j97 eI3i/WsP3+RF"G]gBqknS ¤ M] aF4sxGKaW ]b C QAu#=?+;;dr@\\Ls&0LzGo=NoO:@ڱDo/cuc"\Oـ)Pz{16ƥ[ =R8*) ")oVS@avrcUfYKiJȃ, 1x/n\z$eMXOo&J-duuf`Qص aOHV#yβ g+,oHLmI4Z@ /5T(х~H1FP鎍 @R &EE^?F/=kF E0_Ƴ.d`|)rKjV\IWw)5=Di׵:sc.iKq3As6Rᯠ%6y$R1neMff~O"b˕R"dؓXt_|Ct2k.Ⱦ.US-G-FSE#?q #~ RV U՛([!&Uᗬ)!G;chRlC8^2I! \LpTnՕ!jQ#^c:?l->^y]4$]3UhximǤdtL4^eTflݪyJ`RX$!8F(P7I>,y,~*YDS>c ,kV6u ?us߮bicK/=wVw2²"2 .L|Q(ɡN9265!8rH"s'llϻD$V ro{Ǘ۞coVr~]?Ϻyͬ!{@f]19s6|Ƴ s&K!!wX!rN' >JB~/d=| )6g-鑓 n`0x0ɘ6b㾴:SD~n^b.,$jtھIU))<|´|b|m~"(N:M1bo/TlkrFf`~`GnZC 񂳾4D6pH]/sG\R*m<. szK5O{pG}ԓi1pUhMN4!T8{};.4qDlA^3-i*k^%b7J.~N>1x]!7>Z/:"J 3z1=Fa=LBWjѣm<t}ٛBXvٿ8jo#؆؅lWaѐvPcV|J9Sn Ao_ؽzT󟢕DK| 5,[leo6{bJ٠߱6/wȤW>w,kxG?!ZB  {ABDnhpwRq4$5Yp p08UëuMZۊQZS v̨jK1a|ҧ_h :}!.@G8Kq~7aX 1WF5d^` ,/'x]"۝u1t *S!C 3M4;mo#/j/R;%"+\)eB^CöhнA4T6;4< [\:g_D J-3w1Vz:p2FE" ǜ~YOBoAryHe! (C'XsCY4Q(mJ_'tdxv~SH33~%ge[Mۈ.}!) ƥ?^R,48(dȇWiMl5!'ljt΁j+5 {"JAM[3MVwaH^Mi_߬ 'n֐b)!l ,SiJm|2g_Бޡ9$a\Ӈi}p„ =6)yV3zL3S_ͳVZLXXrh _RԻҘi̬J Wʏ<{ZpA≗ ~j揿'KZElޜx?$szʍSWX6\tSql XBLƵ9&$: g~.+_'4sXE-XњꘛHշs_BxpgLC`Uy!S)pYc\p >b;IGJ?Csu1xu*U}K6<~*zIpjݎ!X;S@+^9iz%&֊yyyMc2w&Y7" g ]؊&H-Z@@a=?+@4y_*`O3nhB#{ Cvþ [޾'W> ȷ6yK ãtk"/|H3j[(Q(P%v^_s<Z_Ğep_?}X~/6g&r D@OE;i8ϻSZ2svK" w&GMYvBdQh8BlYpI'[zjCiW/bmفqZOfif#8'>}왤~l9< I2f~z*:thw"omD֜S,E&OJpw^c-)mS 9@M"kbJ+ Ԏx$YcA9iƈrat .{BQ'C<5SV6d?L22J3B37P+mok%CI`m|w蠂932^0`i7n cM'?SH^h,oRWbi}IR]%2W3txlWۼ(rD䬠N*uyّ]%Ah}obAN^Jy7_!!0j!6\I{"P+@0ȭ&FgFp ׄ0Pp4 yD 2H oݷ6-s(%iCYq)a7* & (:x n6Xe{/&)Z?1c 1Oy/[y3"y)}ySX128|낣X7ٰ:trB 1/Ư/CA%;l5o|yGֵXo*UƩ?B :𺍣mv==nkVQ .3%{"%| YV.TMs47;Yˈc/}a\K18YD6̙!G5ix^Œ(Rv/ZAu/>ǥj+#>f{ ԉ ^e<h`uUe 6gB_x GGjM j*5fl6R(6:Չ>ٗ~ufAq5Kw;e ͥDUD Re#mnP,^la@DC6_y]̺o XO柙e+l8K5rA"*"elњO$D>wmהbl@2~k;>om&@jфXP6jEݲX(}."`=~6l]KoZg6STp! eXL$G)l9HgT6lJL;_>7ޏuJbsbA|@{/)[u|%3[ ;ރLk>wŮ("S{8ҏ :U%aOQ-s~ ,6ҒHIN1vdl kt΅wzӝ(ju [!Ed㒦A4!LMVoȦ;/eWA`W=/`T>exMNq] ;QK)p%q-6)J <~{S Md\'_Ku”f%!W(jI4pi 9@ͽ`AEu3ϯ=J,/ب2#3"7uAME~G) bcJI=,=VJ>oQ`xhZ@F_2mՁOރƇUnQ$<b2 Vs8sTGUOXD:{d`0ߪw@n5.YsU%^Jv?STXGzqri2 ǂveD\>Pɡ aUH 77 nWUkBXJr<*/tGK+,QhSe7J; AWuG-˹];w`A3%'vzђ:)rT[f!bTgq,)_#j %.WͣJF#c\ ^  g4wŻxzҀ E:/%!t,l$^nsco&"+>c/gNߢ`sr&jq-@ŭω;ȲoMhu<%Ԧ8=>Ezճ4mzioRק?H,sp.ڏC'Wߢ"I^D%V= e*3glTlwcoPS5g>]\QX+2/K찖$ /t'463nn+BqP=V߂m+('D+笽!LW+7co/#jFQ{!M7{Å]:RÄxqS:ɦODz( )Rw Ӎ1P5<2.|(UZ(b,s"oU@6)fB~@ՂU=+r'j!nYפnXSVwdGP|YN~LUN(険>b>T(g$F%ex*X<[jcKPj|;*D%Dy# ,AcG3r3n+,GI ⢆3T,C$ۮE#3ۻSUk|^ ^c./f,GLFȐ z͆{_aw{:(HkMջa!"lAV#@).^` P[ndje,hoR 1:$UCA@^Sȑub# 8Pw|p[@V*q<DTƛ7> QUL JWOt'-)6i8%h`a._;#K ZL#sC3c6%uY"VgQ s2#|:|ҭu'1tښ NYcyWרV錉/V#7BR=xl܍'ƐBr;jxeƒBJu#M*1Bgh8tAtluv]@=b-:(oUS"muߦ+rл;ȸOBC|9ߒ`awjwfDB henBXĚ%MWޯ62^pse!LM3;_pH11i:{XݶF/(c /?pb-sn(%BYdz1n 0'{L{;T"&'m3 %a[?0aWb MNe˝7P+,c·97Iy Y8 #=7:FCL)~ inz>fݧ,cPhjiEzƕp$ZOWhrw4f]\ãY>E.;kַ:i#: @S'ǦegTŦ/>~hr bj(894 j UiW3-!՘Ҩm鹄8lW't3 G!on56XP.$ 3 >Q]ա}7Y/Ymņ\"UsL4Xd cnMn˦<c&Pr|ف]fi%eԫQ W#L Ajvfߣ{ *U8޸l;2&l)5v `ňHcuϸ(r){~<9\ɉ,H6?b\ݲ,0l#Oǩf=*P驹3p<14L4t0̔u%6&[*]`[$b#!Jng]nm9? }o"*V=bF~5 UTԋe%4G aM׍9 g֠Ek.yOj8񎚡)qTAō>t^1*u,/#T5Zq Y)N2Y q%5Eָsm,+zR (2(oc`#IF֛Q9Ȁ c腵Q荪I^ֱvx){XuXrdzĂROB]c3v4'z}۰௼MqV.*VJ->D  S)I< \36R }x)'= 1, 6oD+wYPrG9\B(pY iNV l>ML!gPc7Gsji;+966#x,5Ɲ/jmnZ`|dTewZ6MpM`Je@;,f۷Rkyњ ܷU&fg#G6oˊ2I; yg-95ݽQX텛-hF.m`McTXh &M", ʁolϡ  n%cݝ˭ⴙ#)6bap["첸~FN;ZV~#^w֧ "1IJ"Ƭ<*aX'))fUooʉ^=+pdοY'menj !NND'`}27 k ՇvHzn0"ey iWoSϸ9E6@+D9:3sMWD]Oj g+} X$M=ʙB#%"`Mkm)h1?}ClżU߾f ͣM֜{Ih۸p&\=)^}zQg;v"_R*# K));DŽb^ti^bCy1D8P%ٟ+-XLIW db:H{äŒ Bkh2v6] է~7m9Қml(3M8u/)Lַ2q~Լ@g>ƙ F|Ս aKVSEZe g{5JňeVȱprJٶ֩\L< $14/ҐXLb[NZ3Ryjɘ)r ]|¾B49_Oobɚb+=-SZ_qy:bУդ@x!ap|5s訜D7y][K 2x G$~uĜLp T.@1oȦs(_ !1Ij[Hƞ?s%3n?mm$W2Мi3}i,n~}2Mΐ 22#쉈u]U{P[;N9+})HϦ♙]6Mobd(Wμ;M;5 8'6M q*u*\,7ZYEzFD7:(:4r3"Jx K@%j>m0l5QBJ*1_d)as7#@KmqQ|3g #06UdK= 9Ù)n+Zˈ+2jϵeDžfe&[k^~$#,<[ɬ[w t#1PK r)LAs.isɢޏMT0gxU;ƈ;Ȍh+?L{~jo%/:h̍6 Ng8lf*b+ ijӋ$WGɦf?7 T9A##sg[.s8ݶIn4.W {~0&A#ፌR|A02wDhLA@BhrR(v0t  bYZ9/j /XYMwt@eVYYkbVo3w8=w:UGjx,O?UjkuCI7K,fpۡ9$ճcßKKG 2^0̎3fuE,,'G_D߬{`"X9>\y!4C/8ɴ0IȸcD9 3ZdOpզ_?_/!"Q$J5l{t!#cIz+>FDȟw H}=ub@[QU^UlcݞFu~j+ Y0}ِ%>_, P$dԭ;IF|la9,Q&R2=uUT_0܀^fqQ$.!\L"2O fюKkW)l9KA-¤{ywW c%*zGO> Ÿ|cj$i}lJ"g LkXwu0炰HB(T+{ȁ&#x:h$*_,IOt(] y(` '<3~hAb57RQBUm[ͅx\he-|!cC/Ax/ԈIkUBWS]#rLDM|eazl$mQw-dz<XWNڟ@H[ަnb#/i,M\ű\wC:|~Ui Nҳsá=VЗv{&xϿloj]((ٙXF$.tCV5 J]냟DWH Q#Rа/ ~L2GKlv{z+mR󉺢OH^X~[* ό#?nAi0㽃8^avn戢 0U1MrpgoV!Gœ3of&ocBtP'pJ_~ 5z? 6;`>@CϕyqǨ*& +^T,f2;Հq!-yb]p:&E<9S*&GI_t͉dp07Ό&<Z9зj)*fΓ=xWm&\o]wVp$MuWnl;V}FԾl,s(EŸlאcڍ{ڵ& (D9z͏ 8Ωy#2>HF|X,ᤸ3㙅 Ѿvd_f{̜;̚qz+F}4(Qj(-O}XaJ>`WܦхDMqzb#sFʇu4XDL2>cUODWm̴½ ɪ111)0r6_+2\O*Y-^u$4Ξ6}T~n.K{oxEA&aCiePM*01G<2txJ+-_E.]hćOmI2'#ye=vf> ݋uGx`. 6酂7O_g~j^JPM9Z`xpNh'ϞnVw=<"Of"|őE{.bYu/QGֹ!s|^Y4X Қ-7&ɍIy@;>h)٥;s_OYoY*J]0`Iq#LoX#cE'3[y53~/Jg;XFqSn yC 1NJڄ1#wWyP'sN"O!aHvF 4PsA[UwpNCS|PAU2sF5Uޯִ ?Z /)d%<kqN#Q/yQ%Gɟ[YvC@EZ LZ/qKQq|+DX`0]ŗ30d+e+ yI s ]+tv{'v І//yt+`iO(YH^>v*1T Y4ANjX çJci5cߊAcּI?CZWrX߉~__祲]GE]ubQDt1$&`@9_k"Z8rvk4 x] }G wT]qt+` E4>Q4o z]$-4y?X[@HjGg0ABElmˈ@ֹ`eoC|3|ikp';~V25N3l<-w mոz8*~qC62JΎ@#:[NA(/ ! rdV#O2 ma^%"d9Ic^g #5%^XNKzA6r"aGi<9mꐙ(r5BG37__$Uh6Ϻs;J( Yxw`3'atΝxO'`s"?-#4ǛTL#5< hBCH`m#Bm:qly(LGPi2!t ) g56S"ĸ}<=u=n]R<>z_|v#nҎem#)߸嗣t`qΨ &ca]֬dޚ//T_j3tV4\ v2Zmm˹g BJT/";YY: Q B IjDmF$)fSW3DQ=9#Ӏi* HPEi `f;@<]J8ljwRʠl("bŮO51z\OҨ9^}U^ :sW1k4&v:tzƉ\nY[cDqcB< Rqlݑ>84=$pJDz~j~FڌYgw@YCJ? t&@oV ܜC亜ɧ fMд.>|L  $UvDi-RYP,mI&xhw/ussuxCqW!rCGD~@TWv{(IƊ#,sUwh+.cNe{g{Ab7~pdK`!4@Ew/VSn-Q^C&| ~fT {@鋹(hF{,llBc0pDn?%Ǎar\ɝhc5'3b[iR*,] 2:AX΍g \UM < -OU= &87d!$ʗ`xr;У^$B}09VRǪTF!C2$q`v rws\L6@XsKz3Ԭ[#"> 92QDPUz'Z\&eI(Znc7v=C]Km~lUn5y gBQٖ  wly&]B,KsfT9fE #FaŰ|cvT?~xQ,TwX%[G,03v@ ރXm r.9!i[$p 2s[eD:odpJ#rw//cONoUNLlW'. %۹3t Gcrc_z4rYq 7pҩ:C+Oe>%['v"9NTL&IhFpW\Dv~эc2PuDŒPai͐@|Z 7ʮHIe=ekz/0yq)޺)=e:Hw;lqĩ 'K|@y)//m`[A:,TRݳ-Dy 앐i+! O{eЂg@ _e4s-`1[?:Y4%: CzIﭓs|MUJڌӵ/~f` 0v*xMF"ƹ# ?ͦ؞9[h0:/xWaL_S[EDΐkDD~>ݗ=b5Qu*ulӣY:vikE#ĉ*~^ܴ=Nsʵ>|:-|tDhlzգ(-b! !k67ˀе 2-ƽ !mCebJ~JQMc=L*zMoadzHX9zXI5.NAIW]XuZ䌊 "BʗϰJdQ*0Bbd VRrƜ/і[_/5']plqN6 t쒳]TР͍;ǥrܥ#;$g$'5lQȰ9K*o4CdMuշofTMϸvxAQԡ4EGlU VqnfBy\*T6R[G߭ɹS*W):3~N&h$Vg4e:ZQXNJɵC^2 3M/tSx`Mso 4& g>uŊU"G)%' ?sivm8c3nԁ1}$X]WYce/(zϺ||X&;5ؤ[x]:C)X.+6]}|\D Fxh`el)W$G~D#Ժ3"xVlr;|ibG3>וgUصU\,{DYaҔ 2gw7'q|3 ̹+UCbp~qa|^Egy05k[Y!u>n:A]qF_$g2Y~od3 g)M^N7aM<ׂr& Ye0bPuyu|=zC}ݕbeHԔd^N{xKR8`V4 çVQHUwH>輕 !M,#mjԿ I(ԩbDnr$ǿ_9dy,:" Z/GG1p `Vb"@?.=1@SE=WيMɉF#, zEAO-N&U "g-m`G(5B ,#0K% :yzE>4Mr;)Փz.xXm>七e >yjx#W06`?jz'CKV2 B#PЛ01j<)y|a!*ԋN\z p9?dSKD5*PKf侕ZIpD6$ :S,Cgt 0q=h1J7@N[PPywK[FV61i|s\+7Y{ƺ ̱3ad;#n.m~BSu8 \{T}5֬TCż.V0`Ӻc(3lXK:j7z=y5zOf.]6phem!J.LGUK&_JbL9z'T^ 9X:Rqi_֖V^zE3y /#v[)H1|?0/,m~11oKeŘo**ՏcFp /Y}z< W+:ўXCt^Nl. b*t{:б>J"B MFm70ZEY Û0:H`nڇ,<}`拑w;,IdL?<^uٻ<9 36ԇሌI@ X+)8y:)5UmhbcnArLݲBٚ"b=\_=^;bo[m=vݎC(/`g ^B~T a)[1AxOWK_cߘw<=WÂݵѤQ0?Z'і@rHbvY~7B,U\PhfMYWǓo#סB^)o|8&.X!{Bz,^ʦbJ7"I1ڢu`r*[D.uNkUq96ON3jgLjVl8w1Y3{24 Ŀ;V6q=%eV:i֫wº+ͱ]Q@b%%K򡚳jlQvW30=.tE>N_W kT^bJB,'Amo`Pl-&V]=SJ7q 1^iPU`IiSkX_9?4/ +(OklHk}0U~增6L2ݟ[{O2`meUX엕@M"(W'G  D.YK#J1T8# KkǺ%dqhH.2'`c+o0x䕤r1NKW|cHfœ5 ԋ˱XZcxdf f{ L+e_3}{f9F+1Qw<44!6$8'Ƿ,]Nzܭ& 6feIS>_N7Of-9cS˕lC8 q[OE}j8/sL?QkuDP)G6rR9}(8+8Jz&gw)<'D+UI7BsSֺ|VE4qpj`%'js;Tֈa\=‹@iX؋8yCEoKP'/%EH9<5!)G}f\97htܶcpQ&r2`?^ZʠKTm㭐[>H|؊Je eq*k uj}$&)M BӀ0݁G3όQq)N_kQl姬EX΂aPkK)itSW#Ir`fM1\6ˊMx$(W`B(<7O"HksdCf#ڷc{|[f]QCT1AUcT şzԱ OɁZa5Qݧ.a`<# =LdNW}\?oIcJ.^#}OFp`aSgT׎ M^Y[>l)bmX.+bȬM酧Tѓwdw p⩉œCb "gKrQ4|Gઃ;CV/ {bvbD`(еhghԹzZrIg Pˊt5s^T\ln_ߕ)rS"E{EƔbVT`08ZD}#쮧|vYϠ# fw]fP.Y)ScV-%i:jaS9 Ю 7^֊#ݦN Epᐅ}GxO 6rP<Zt Siѩ7apbgʏ(MɞʛpƉU`ʭJ#Ԭsq2,"7֍#S,I<g>pƒgc(H`"d!V$= +cuh%%Jud!)EgRcX6dCa'qw$'W/)f. r$@:M&ՠ&Z!ِ%5zQ.N9lpY!AG+Jo#+B"Dq*V@V…ݣ>SDf8}4GaKq}?W2﬷/ݢyľ) KU#o{'6gk}G2ˎZ WYO3\}d}"A~%Bo!0}suDO H/!"YsMih*872#ZFdkW궚iÙ+%`&9, 7snh?~-:'g$ۤ ZBˁ{i`cA 6X&7|i4`(g3iAop6Z}pӌに .~Y?lޡ%錹>M*g 99Ƽ¡_|\Ƒ\sO-=j zkC؅| dYk!WTy[()dtA{iroNն/&e^69/!&N.Y]-0,Nr֭NfM\siN>hcS^kh٥Ժg)US! ѸA/Q| IR{f?ܭ|TI}[x@F-%0BRZQ"a;ipg9z\5eGqfK/—=x;l rBI8 dz(ZJ#"!w8c8J~jln 71=S))T(If(XRXL s)E}ͤբcMS-]o7gԕ9M=1BQ'l| L18Hy#V / Dv929}0 舧|i'Tg}2b>Y@lOXnW3fdQ:1)D' , jW/~q\=ӬcAW'2Ś΄k,ХASnx`ɆF2%ڷWyZB, paKeqN(t*2C%SH*>UGh7w9ɧ{fvVdHMo}Cpё I&^ݿ0ܚָXFAPskoQ՚B.|оDŽ93@Œ8SYoL?lT/|>KEeIa<m%"+pU1bDNn崗$h:᭘o·s/QBXu"j(Plݯrܣ:'? 1z"]tw"с뎨=}Ӆ-zES7n^ ilG6+GKt\_3POX@(x9iXIVXigvGlZXբ`}ܨ7iE Q. !tvGmiV|^إ}Nt^ LyQ!.'~ҜK59[ }xP޻=3Qeȁr{qԼmn9`~uZJquOM4ɲڝ{V~3=XBz˞*z^DԱ~B=5!JqDm[gSE!xf Sr˳W5 ӄw,#Sq){fC9˽˺32D/P~OV6VMA>?|eWB\b g=e9B쪭Eyף%ݓ"$l"YT^''ssaQL2My\(E5T<߽4r] ΘU]$F:?\̏Z DNdR<^9~ y3Яmo)hV Hk$`P:VP$솸)G_fBn_}(wַDuK G(f24GR(6Y箐dlGrmMFg8n֒]g'q54A;c*h,m|엙z;[ϨNRh*~L[T֬373Z-109=翤c?ɯs6ĪȜT&KNN4e ,Q# 'o\KGj^r!)N0\GM,+iKSDp6xN"%Qh$H2*/w)Cq@D2Aj ﯶ-Tʌ3vq8ikՙ-٠(} 1SR%n^L3y#ҧ{rêSSM;J j^M<00Y#Hw_xH#ќ" ݈0X< ` j/84Nӑ.4 Nȅc@o7.F$ \*7}(O Ā}ul؉1|"SNH-,!=?L-ؕW~st|:rj dT0;̲ĨH 񤥹[b,;dJnhJ_eտWb4vb ><,~(a@XæxRX|6SWBIO\؆GnsgRળ+)3^Bմ`B "gQvC*LʛҶβtv;|"OɼԡR-9*i&|*K`_7Axİ _ 5n*p|kԺh )ۑG@|4$[ҕNXLsaQ2vvw dvݮ֭MCxparMsrBޯ̵Kۑ^(O#f{ ,fDjg;'Pk "o `Xz6N췜~Y@^mb3ua0eY$[j7QZiHK>=O"(eCԬwr}rL&҅:EY%P6\1u&uۖ]+jG`X >T. ǹ)+k0UQWƬgI&ajj ,Ӣ&  e[ g95Ww4euF.;ۢڃ0pt4}#X jqY2_[:b&To8Iojr TaM)3%e}a/67m:Uv]z-Qt08zQpEվ~FŃWq5eK* ?F<%SC:VHb(): wXCpfNm[!ydGޟ'neL6[3՟)9YWE]rc]Ɛ(4<;.HrGr$,S8L嵦w:.õv⸣`.l F STL"h+z8\VQbO)asƎ&Ղݙn?ݏpk̝R@S4/grnӷi5cBV Y_1e9]v1.?JSt)o{]6Y _b͖w8ã&"nMQm:{3ֺپlVi};W ;aEY w)O1B4]g->}Mb՚xv3ےC.#„s@uM`YЍ#V7@W ϪN=i̩a)1%dZ \ء1;TdدG^'ވ h_STD7P:&|\Մ6(wTP 5JܳIgk7z)6q< O ۰gm ּC{GHlܞskaepnH>k]xFJ a9Q4rt'u`8(m9c(IfT gp4My;?>fɃmV՘\NiRMnGh xS 岷4SjxՋ̊Pw#yȜB6vAI&GiUOdM( Ȱ p1HcF_l*S;5]u*i:$eҜ;x8h!w`ohv۲1jJLu(ɽn^a=ddj y`Nu܁E)Ll y V0rBM7uF+"ؤJjj79D9pWQdat 4%kP(Q>*-=63AZwa7w/ɕ_!F!a ҡ)#i`+· Kjɉh Vɲ؊=1`KCޥwȹdsJ⻾YjRT'%sMwtD@1GfV#{f(WnxԽiڵZ)Cfagş&N<\a~ 1´>DM乲33}A;-L|̙էi0l{<]QߞUl_p<K@hj/;hfW/e˿5%m"?lcǛm~!1{.X,\m4'?fgg9Gb"(+)u[]V, ijGgD2N{bI&/ىx:1RVbR2"m:Sa`ОqX rZد"aYW9<̪oAQ?/NCku4[3`ϧW㭰oOVPK)mk+B=N js7YX`a:mlWÊTy瞆0O:R:QF&0;גqsSM$qCzXV=)4"ɲ;ژ)kcˍoGWS\nUQ9O?sJI7Ȣ2wG]Qڤ$$2!xȀR6jl-P=]^KA7.W_aUʝ[-@ϔZg7 ݩ4;p|RԝvwB52Z_/|Jޅb1+3L_I ь5-('[8&_p1Q x*4ܯR= ?Qh KӒ¯c}ە?䓥N2*IFz> J"u0(0l]/Rm[3@id|+⮷H@t$+QJg6l aCAKi6" + SU KC-w$4٪#/au|!c\wcqA|.}ޯU7S b[*k7󮣋i; L7*JjDω8@ٙM"$ FLd:TɥWzucr$d/(.bC3{s=Lb`4I5RC*Ȏ9Lʇ}kc&rjE,JIG41\C[dDF-?93(}UE&0i^-\Yİ6!BSXη!mCJLzkfW;G_b*uz\‚uA4yǰ@nU.TL-o4EQ|7N$7CQ@v- {Yfy҉ɩ!zK)G赔14u Y$] G+`KL eEƧCI/zJaP(>3lIDOE覫yg?&ΆTg:MXƗ+7>wˆρC43Nջ%Z\ n")h_:V ˜dT20k<<C&m#? )h;^ dࣈ)Cf]o9cGM@MA)oA&{aJEH5c,a=u;vnB7J5k !mxCܓs%UiUE`G6O![z,e!P2ErjK ^_Uo{elQsGV(,j7=61@1fj&G4.-_{pSxLb@ \GU(JruM@[`G ?VJbn.ܶT&9jCT#%YSf vGMY|p<m\ipc{m~,YKNAҷ٧~Q%RIo-3`\D ns+I?r Z  y W P$?W4=Y\tPR"bο (T(ʼn"S6<JUd'4BeU>͆9l.GaZuL*vVƮ$Ӽ8JjS"v6ˊkQz7RGZrѿ2D&3\dMy-Ip &μV;}mRx;da~HYh ]̧uiYr!W5&iĠ.]Iq3W#+_cg@H-$lvL`CJSm/a䅰F6J;''@!1TW}gS\hFY'?&sNKn "@d5{ZM RތW Na1#-F#pțqNcPeHm 5zCXRd'h贗y ZųqD~P7–'\i 푈^ ITXr̎W| Ѭ'fkBűN2QA4DwzK6;&v>ܾ{O>@+" Hm)(o3Efݪ#>UozA:09c-E'Kޢe!0_C;CcĂM"ZrFl@mхp+qel=>d=IbJ&_QUIhI2jysR`m<]IGf#,ANuwWp"ʩ}r9 O Է6>ݶq=z{wvLfN!RZ҉1JSpVʷp@0~IuNfb@_<-'5d[j:;@CJ;' F+/2VZԂO3 V^G.~-2C>r Bơj p>orsf=;aR f#*Bf+Ǭ6(_~LB\ y`8ݡݎ:$%2]d" fkOx B#6wgGF(q 0Ttsog )(>wYD#QY: S?=oUjG]CUS(%'.{|==9m츽Kv|0Zpi]W#I;wcZutn܄ƨ!@XD;!!$X !*b}H)d8 S\mƆ>r (dwUO'v'7 bX/j+ĒޯG%xN{WT0+HsC/{qD6>Zα:V\WɆNT) N@7nLvTMI ?G(WxA 3z#yrzCA[@]S5@  M 8n/)iTO v(⼤t!ag>WuP yY(pg-5˂?1OP缎zZ螙yl)9MP6J?h}#lh OQ?O, ݚ: O.)ٸݐ}tXᮙ]̀y8trGdp2[L>&җ˂,AYp9Lj 'tkr"~y=dlFd5d*4ڵmG'1^<.l#c94 ]7Z0CB>zt(FgPD3~aٖ1K|:تFXH6gGUN'2QY^zFuLD~%k`FǗ;v>ddY~(L%\rWs;C@;cZ9DݧgsQ ?&Rڨ-i/Q1Ӌ5;p5qF2q_5,B,HI!_iyttJU?6 /˕|0ˀAs2,e2_a2;p_gdO۳8YZ.9( V{/;@jK(!_4{~^_s(>ņ[^E2gVX p,PATkk<]{lgDv mfYASk'Uw -%F wVx >|? &!VQ((P.ɖ+CY A(1u('!ǎ0Д 6rx#6_ 9ڒ},_Y8O5Tɒn0Mi1Ӓ#$^hy@3ec-%nu6Ɲzz`ɯZe$p@pmφJ6C2|,j)aʳd5=:goFD([dd~ pRA/.G>l afm#3J ט7!#uyIVy$MŦ#J 7NxM<8@`|rw rNXMl 'U&O_LyX!FDuuɇƚlOvfaQq'y8^˨*|0TDUJ̦IJy\asw_<WX3$]O_/L K.JñUjkb @=hM~(PAOD*_Ah[ ~O >UE/°ߜ#|Gř#G_&#h<x|'!.ZFOBXȵ$BOe#0NLR= |lG񘔶AR-'Ed\5ypbLr9]7`M,*p\.XH&c&.JEYi&y*`g}ޜc #qceIkDzNrTi}=LmˢHsIJ̓4lJIiH(^HU)$`gĻo H@qÏך-jV خ6_UpD3 bpga2TB!ViPM$ eƅ>Aw7<)W^=m (ap-P\խ;Eۃ|fDpK?$O$Ke6 ]qYj>QxdqAdH4y曬Wb9^4ߍA(/%;=C #( û6m6fSsX~_{fXW/_|C8W\=G0NhFK!u˫HU`l@%*hVcmG35AGu4ȧ2_}2xps2um?-<0S&^ʔX=JHnl"I '{) UE7 o,¼ba1~[si{1P5|P;H"'QX0ΐPq沽XV}"İnB1tH{C\>_PߛaMx|iQ9IvIj٥ަusMcTK4%9o1ڑջ9Z]iFD#sd֛켵?85Hh~*!zq˽ PNJqELE&fP~!2TD WS&_\b̑=`b̒*7@(lF^(q-vㇶyv[#Ɯ `8ùzτ*-ZH` '`;-Y/ݽP'_mˆws|d~avD＇EmN^vC]YkM+ w^ܱԱk00MN n;GH}(2ΠP`3Tw+LJdAB\9ka{ }C[sKiRՌ^i%&^[5rv&vYڍH)ۿvˊRbѮu^GZ3 Fb!6xd`9?b7HdD(vnMHmC}4[(Q`'܏j GT>FxF*6 =y/61A~a씣9ד=@&;9Ghc[>"~Aiv֖P>ӒJV1yu>aSs>JY&+;b"'&0fbkN%&r`ı7d(U/% .!TM%z[nt\B*N=}y5.]࿥ ?6ݯY3wޘYz&?3<2˫4ix1!x \ J8j͘U2n/ |0pNkQlB aje,H{ [o,E3KR9SJ.;tkLP,K8jyc\u=(ښNZ~_s馐ipgSҜ."00 Hv+R2rѪ#} ,J GN'(&HnCZv?$?vX s-awh*C)HgBMi<>m"%(Ѝtl]R# {̌UD׆M C~?ST BL|pC{%'ˏ.o7WQ{j4x' MچUze?79!^fBը]p8X=KghѴ0s2FEZ*g?6L0e64iM-|LUԢsXh0+ļK>976|L8BiSN4nyh"ͩ{ݜw x -T ߒ4zi +|U{q"qdAL ]=1P\@%YrB,w;ܩvzN2ZԮyLTbCu%})D$][u{zFD.E[5F='1ֺ'ˆM/{6 Ԟxc"%FQ0ά˓2?BՍ0kDd'1rL$i\Xri,˺"dwkF (-;-”:yu) (L>_L6,A%qDَX`ݫoh|Rv6;d'c6p3qĸ5[˚٤ | Ƙ8Q!22{FgU\㦓|(JD^Ą G? oXI"ϾX%㮿J)O:1ɯ~~U@^k$AݸZ'[ɪBe2DJ*9X?`vpוVc]4€*W/x9{[mKx\y#pJϒ4e)Y%W[B0K|@pCl45NF:Hs+d(zHt_ZWh( .\F nIq,M`BPΛUj&^|æS;mY`?(AO!|. ꅄuadP>, 1;t¶^  bv "0oEդ\I̒iUh6O*lp)/L;Q7M-03Gp =#7:ISXb[{|`ES ka5AkV`ɪZ09Y9r"\_ˢQ=o):عZod =2-! _ĽeE E-S9 WGb+Ph-CЯ~Oi(YPJ]A˥mWT|]taaNʨ<)X-e5Jck+KSZ lzGP+G-{e[UD3k[w"c{GF\i@)z''& ll/NGd%ÐIx i-\\(N:4=nA>!D4*ep%TL ??G7نh'`⹄ji哾߰\ZI }7k\܊4lRB; ,(kk .#vXƂ~Emu܎6*i~-3=³"ݴbR#lXR(cc_ *+(on͔%>rBcgHLjbDhú}&xKm`OU K02|4dz@;;3shDLtX$~-lDsa-!idS >f(LVR3M :mLwL`õ]lÈ^ڴknqB>Z O;~i 9_?2ys~ceQ{ |0#A7c\X]k}%uRYwn^#Ji/Ă:AT3}Suou3?0¨X!(XLKzwD͵AW( 1r@ NOh?O1EJA<\- k@<8"i5EdAC~lԻAV1)ٰw3ZSHB66=+15dPNONSuK W`UUҁ|<)cҏj3:@Mp[Rv?5 3d| <5%F&#Y^,MSK"9V÷a΀)Dֶaך; $yr jىPȫwakףp#1&ÃJ5krkBF"XQn+էT ͯ$DSFѐӣ X@]'MvfuvS%%,Hj@]fhP VHF}5}ݸx½?ޘ!j2rDv$'@{߷5^ v^fzՠͧA,fxW-CpEn/ϭ߷.#fO>1{Һ2Ó^߳00Kza}츷|#W-:e]By9L0b&Xa6)Н<+G x 5ŤR%P^o[pfԔʖEIrƓf=_}'E:%;߉e #מ8^V!̿=B&C]cC~bET&kvDM,&kek&I 2K{~ [QHs@D)P9]Q#"d& Qt)D.{zWHn_Dej;p& ăp\ގ"}%@?w8X>-BdO!1pKE["i6B]!p18?SNlj0`"؛Lu(I;d( a8*?e#bs8öO g+p I`K>$pV^o8jI0!IMWHv(=N AK]TaAx4w(bֵujPMha#.;;1ŏɔ\/Iqgj>xve8QJ)Gv%53 }P2bKPGd Bt%#жv)Q6 P%&&[{dc-i,@b2IˡP Czs3340pto' 4&T` 6"M B: 甝M)vDž4oX yrz,tI: QUeER0+QhCǣIGAcoUh uvwh0҂g֌Q@U&H߫ܡ%>žD1F-1]I5-S6d'H2!w3d NcBnK"7 >L g0Ϩt>r&Feu1gmqcӈXPY p?SG1_#Rt]2h>o_)Ԁrڰ1s76oElU! .4C@yŖsmsΚ $tL!Aϋ ʇCoXغ!Vls9/93 AX:HqY܋C.:3p +ïC܀T۱A_UBd ͒>IBS y`;"vdf Rg+/vIq`P8XԖop]L! FO ٓ<ՄX2@E Ɔb_Ys+z>Cܢ ~b7L@#fc╎Y#N.U|39$:8紂5+ǵ0,3!Q9jH)Sltq~,"zTHќ!4myz$tt8^lE{GZ8{ՔS@A'Z>d\.H}r`-mԙWGdoA468k!x`lf[N+0+6BTq Zkf/ͱoUF,)Mz]CY/)"˞]yRO<)x |ﻫnWX4?]p΢5M d_>ta3};zKM^BWYw,U SY-L3 & >q~ QT( >͝1UoGt[fRTN0NZV4-_em3/s8Ѧ7S4D,(ً-ӋF]p#6-Ia^ 7De4 ?H.0 Y>0g ?:?CUY8X[#r˺^1 V,Ernްcވ$ȘiX"~VF/jքI4Ɲ3vn*)Re}ͷzg/|T3*јva/4+O ĘyןV%0u+ q=6'C,rg4W(`P g" r-d& {YUf >9!nGu8780=$M/|lƗ\+L@ݦ_膮7Vߙ-y؁q뒆J?b6 NH&rS] l'ob+5VFl6oܵ5P»nF~7a"՞=K%{Ehs@ %ţswA+ٌo~CڤyY_r>׭@mc"',S!ְH,Ha΁ET"u.lwv/[k6~3~0 ,(25[8`TU1j71T8"xU-ѲiW)oK#;ʫP;*k:/-xBiNb&o[2h)c;B&5V[tX`Bm`—'$_C̟hfAwYZ[ƴ>_cAB,G7Em  ~2'R-Ӑ|؀q~~~>Ee%93i.Xu1ފl/H᩻q| w֌+BN~(كKZBn YUe=_(tb"~բT,͜3oIô"s#hإ%DrfHÙHH /h]6!1vc~n 0sE#uIH\.-w9uY#*_Peⷝ,M)aP(>#f~ yAE |5T:Z-*C rsGY$Il* PEx|_H6Ϫ }Ssk'~/+e*9Ň҅f n1 N\5m#9ƈ©'pC0' sux/^_ոDQ)8(e`r]Pmt5&VY4JwMT Е}KEж7_:=ӲҔE LBnN,1 c݊ߙ[i- ro~d6P6u!]4ޯӝȻϗbv DTZ3x#X C$2oǨw|:y\ k12kM<8_[*u 0i'x;`Cs5B?ϱ1ЇI&[#.du[1ʭcd$=[h% [^NN|W<:يu~E 󶳺2MkՆyj@m"|/hw:"X>!\G%2+fUb1@66zZ"~ak]SH_'^j7Bp~LJΝ!JhRp7.~Hv13W41CK`Bn:| ֚B-QYòF"Gekbp|Y_g t LekҤb&U-Swg\¢f^yluryһivtu8#Q:ZNg QQ4Dx MnGshq(ʮVʇs6 yLVt`=*hNxrmu,r;_t}o ҽX0g`YE\ѼF|D-t`="L(Jdb͍W2x C죔'wX5AiQgǝR/]b:FkθdC-K94uVAzb4fgvMMz{0y Ѱ }essz4$^)PZg5ky[_.A$7bڳX㽄ZGԾ6 `u5ʲ@#K>+]m4̯sn194xMGlVL~SN0AAo1|Jvk yl)e Կ2S# ǗUukRh $~1FrZg2Vi<"pm(T~~ZA/U,RD4^J^yUȳʔd2#KQj_kϡ8 _Gr0œt[;j .qL4id'0<nZԚܴ^H8>0 Ƭ̀K"DX7LNE_䆆4MA:Qet^1J|N\VFpQKgCS(ݧf yCqޚ2%[[୦u G㐂TՂ{cW}*XԄPbШ)2 X5B5cx_#F&#n~| COÊdR=Xw<AeۋVĊMĹQ;y+ 6֨O1{p#CQaflкס!Ia$\@Ɗj EEZ cN3qBMGj, **xvrJL淛p]aP|#DK؜Lu%kV#|y; E'ߪ_4-=D^In_b3)* g\~ @hqU#{q^uvۛMe<@N5kZ6=iWA&' ȼQ{KC|)>}3@~ˬ䶠yj:xdիƸaHm}p µ)L?WUmeB*T8`&w73Af̑$|:fv@)mbp{PFg BY;MMM9jg#2ut0D=Dtu_P ny^Repؓ^>L1 dKU4[r'6P]z6Y~0>eL`:6,%dV` KRSa>UdۀE0w#'*:6>W{j8m[44A9Kv'pkEo@Sr.v{&t/l&{ɯX=x*~1W4 fg0)5uk/ת򸖖[č`EBkAlϷ ȱ'$Bٙe oOJhO"kŋ1:mT*+K@+_S#`fy9V?jRYpvnS-ky\<;ss$$صOQ=w?[4] 8ª)k:N10ڬ|oeOJiV/m#uTd>\UW"0| !ȇY(W6~IoPay[ˍUFD\ nDenV|ٗ!ՎJ"DwBWn`Wʚai)遙?PbgH o6)3y rV|豣g\sAޤߠu0AIaVa+hSN@r{8 c Ng~%K,΢݁`+AI 'ʶj ]' ~M}ujStq~OBƃt`} 3x?m4b.s9*W-|IDP;4>kj(CZ ;~%lқɏZZpYdnC`WEp~zre^GNՖI@K0:c 6< ńsMQ1SmA!=-IPӯJH)"FY #s"Z@rRhLR=f|Asg;3! puU)4X!T+:)>-0ll1MF O0/ZPuWJ)*ǚp# 0V<>E#?lTBĻ˖J^Ϩ %ZP^T^z4þ=gVO02؊[Ɲ؞8P.[2| &`J EW7T.'rp=5)U, a F0ضdy^z\``Ϲ\KEvGOaЌhLY cGD/^w\/o72O@Baޔɪ8Q_:GLձ~v1p38-+!aF]Ql9ie0^޼TF}JhߠB:t9 E_l.%oQvJP?mMXkH_E;0A):F ^C7lQW&N{Zu{(ܯ:x&yMJ|l*~2Cld,fgf^9'2=zyBى6u2P,%?er*cazKelqrz[0Ǔ(lМ068_K7`3[˞z Sسj|{\KQӡh J⬌EzuhyY gVY~zqO>VUғd_D`S ]\ݩH>Y1LDr+rRѦē-XM}j0OgdxV ӔG/|"} F\&o˫gŃ5QUeHPiɐ/Rί GBYv 1“ckMc/Iߩ |Yd%n z Gip؛%_b~iKD :%jRAs>-2sfsOJ3FL@mx 2S~K74~e{ŝm+x:wӴِ09Tve=~GZR:0[yLѳxM$LEZҠͱ{T7'm~>BUeG.?".fnK~-u}aKgǽh ge>I.U;iWQՇ..C :a(^Å hǁ(8|[=ؕ 9q[b)I ̦͟:.ZOُ1f2t'O^Xx4NwF d{Uy(!s2˗ŒvkSiI  {^!]qWz(*.TaōVO"oyzKߦlG\bGZvjKMɉa:J=Z*,B .۟z%n'kዪ\ |>,;.h!wտue2H'-|/YX %SN<_[J6c`*$zӠ{%|C p~*xp,A"Dm'k B⧒ۓVר؟fះ87tprL6bg_o阿]o ѿ|dX'qV_RH8L~^|~Bb7,9rxڠ-Ɲ ^ S7%T 4zme^CnX#J(8&ȒAOb[^wp 7DÛm2|Nw]ZKڎ0{׊yhAHά̭slQq)Fǵ3GIQZN H\&n=BDhBI: ÇVj4'i]حޓ w* <ږxi< ϑ[!7A:zR^@Ń{2L VEBb}PeF_I> @ߏa m!F#`7*OnKΎ(kX%+̸iJ.J:7Tq9cJ{x&R8DD} kp_ķh}Б NCn:\W/^'Yxl&u+,W Nor{?:2-w6VD3N)S U$~o i"ń!̹+^'g7*BA׉o=V=y=FGEHoW[@ *ixVκM GEonkl oU. /$ًk;E[ 6M 2D 6t 蕲Y8~a Nl7ZD7= 1N$d'(QT~UYLO6D# بdc.9j f5t/`%jh۷BK{jxt39m p{I! =>b%FDf3٠k%R~It8I6?c#;/fay*~җp*Bsx[1 .'_-W0l2`Pk5Hlۨn >fc6C+K_HP~H;ZŤb+;%c"Ȇpb1דkXe]. JxL2 ݺ2r}k'ҋ$=vXou) L*fn3BH0 CQK5l! t c6St棚z}QAW2=TE†q!Kx, C%e%B6Ym e+=gKo$Y39 ΜL\GH )3c 8ɔWZ99:1 GaL߄ǐ ^VIS(!6zh_o%7BZ6DJ%=;|ilIPovt(,usX^ <ֺ;Y%yњ>ޫp$rK3Ô(z'ԣ'Db'e`e yF]OQ&=WD=gqQo8,"(7O`Ht{U۳AE(dz=NA*Fg;U8)Ol;sƪ!9.q9cI]?vi 8>{78^s/7e*{ÌЭAWXr 6ij٫=?:'hDc:~pF (wNe ɱ gX v`5%,9ͮo5\B%s~A^ c 9D/{: pmuZU|t}" 0gnTg\͗}-+3,ɑGXRٱ?ɣIG|`q{"a Pcߺ=b@(n]~@WY#RK2v~F ?]Kq|.uW:(8 惋T]=JIHFnF0|BfMH}/glJbq YWVE%"=%'2cCc #myh& vٝhbBº0sLTokRqk/@E¤] aYv5)d+3lPWA$Az^c3hUN'1 5Mcׁ"."dsKNo9:P̳"GWUAR0x}nBvv+ЭK&v~Tg4{wNS.HRO$5Lf B =i}Mdp6a:shϷe% ʵQvSiT@ 5!wfk䗛f[/뒒+Vxl5T\^ؑY_zvx~T6b@3IeHK5ʞ"!R 8D 3BE `CJ#iEu &i܈PLqCsaX}iCJ me-&Oc3|ڙ:'1`JQ5[YI(^(JJv33KM,Z?>Zp*>ۿ6̴c Э ЎrHOͶ!^ [RwhH>ق߿3Ξ"(*_'EmtB-i1uJ$>YVjb$ ZDi nO"6OF$nI58ġ57S2o j.|%QٹxUBNހx@$ew)cofgܓ+]-+L]An#Awf籒a3y[WC:T#W]:H[ -:Ֆ⌨)HQI3ne %_$ S| 2] x6k?ρ!v@= OL.lTdkBLX> UP亭m`sI6Qv|9⎀ZƋUn a¡T+D&{arT(xLyN[*U (BWPD-`N} "\p*ћ迿ۢo71!^IUS` s#~8%qci*u_iҟ>Hy̿hItj9Tީ2SI+vME*̸0lAC? m[8!F=p/%)5I-O"a-3Z{[J4V5?>vᙪdKHQ 81tQѾ\2ِFT+_.~ "@qg}hNO$y$4x?Imof6|A[*|5%c/wr 绷P=L.$Nŀ#bjd0-ӮtkJ4 OZy>yZ Ē֞g(Fag@OGVLW>}]Wb"zÊ_w>K\U#I#抨+NH jwBV8zu:Q)J@!FzzlZrϻV#;K*xRwD2'"8O/OPL双s=t{F6֙zKNpBp!Oz>i$?+C6/fuXi)--_ J/)p$ 9OmZ?An^@%Ll&5}93 (+ tO[*:u%ajaK4t*8t^ҹlQ)KO5O/֙x&" Hf$!GV m+gTr it9m^PKa! Z[Wudz/q=RAv, &p20B6綬b&@@oUؘ3l0nDNYiF*Vz^Ifčʪz tgWRݞ}e*׉"m~|T纼=*f_yD9̙jPyZEm_ns\7]PhMMq [,5EQ5} ߀ [ X<4͛R}%pPC= Z]W&<}jܖ'w?\*?C$Gh oJ[uqfQQeF6bh;p=' tT:{ ]r%9a~H 2[X O6~h{8䭋](.Zbǔ荩Ǎ"I <¥{)µsl-HU/N!tm S4JSur}-CV>Zz>fu%&Jd-?jz]t=Z xA[T.28qRۆ"J>?֞mxCCv3a|ϳ1ɦ.BYsu(#t%sQ|N4& 슈΅d_\Vi@ `jZ: TP^7iqѬ]t\%YFH!WoX rq_Ts^!a![kT6*F nO4f^&|IE*w=o$_,F;Z5'[XHYOW\!ãApʢ\T,EM}[fX6 1{iTsЧ.e}0I.lj8pcM嬱*B.Wv@>R+}>]fY)s7 sxt7n@ίIUz^a/ _wo ZDE 2@ڗ0 ]V_Qۑ`U 6ScA$XH 6R< ./l˙9;[88p:Y%|{pU(}I% rb1{Ո?h {[Kh8W=ihDBv @\/I7hۆ$:ύL ߲/>o;e5eQv10Uٸ"ti #[e53Rgj]R3E+@iڒG53nNK r>aW̶ 1*B|q;T]-K'񡡰#j:I/(5@Iİh4O! orix6 יa#OE4.*~Qb}P ;q]ԁX2/r':SH{g²gp p~ewHt K|Ϩ$5mZ.()A?À,j%bы̠ux9i5|54[N)  &, uoPÐ, m' IS89q.,o9g3SxUO[c(w@˟Df)vմ~w%L?%PtGI`o[s_Wagl/0BL{ ]f_rpc՗7+[uOBۓd=t -:qQ2˔tk77Bm)qsoқNڋPS0"ͱS D4 ,_ϧ,ܘKs=a )r-d3(#GA;׷d@4Y$XEm5+2iΐ_,t*" @k^U."Ԗ$^$3Yo4SɃq`>..9}fOaI>jWyc3{2[?fD5 ޗ.ہ[P8Q#l"w8,ॏߔ\R`|eH1þX9ie <$_ELVF|H`:N (vyS/hvϘ4 JR6Xx^5.h^0 c P%|ZulEϚ# {rcbMd"[^"knNrXͲ:R?/+-i}lXu8ҹM=Wi(1A禓SGS PdaVS^2W R8ݿ }tLhU}̖2P?ӶS"̈́ua$s? ק6e&0Q6BN|r`d?h}dnYr'!Įi| f$)cFQ>8@au|@4qMn8*7ZpĂLԭժ=zl Qu䝦, pQpm:}T8FGmg42 <#Aגk4 Ⱦ~.TLA-[ ʜNg fW\;V+)0C2/`V= @1<ݔ[ I` Q}lKʛ kb.‡_g֤/[8P~jar7ǎZpmae7P1(uUױz!8/ dFo835z6F-(}rHLzVDۊ1>U](\ ^cQZg FM`?L=HUZvpD>ƙI3mn/MHYj =c$Ё0VGIYzkDr~!DW*~(R%qBQхVqs"{o3l6\(Ss?^ pweXi~bL%50-qDto2)-( R'O1ˠ3J]AMd+Э6s, =f8wA3ojKPwa!-Ő{5z,>' 41c\-_-| gGx$URbW)$FN~APmRqarH\6^n'-N>/VKm(}QF߹_1?^GIwtY1A~؈jr2gaЫ;ݜfqSSYʻ;/*x-ynѿ^rL]2rE)6ܠëlV\BHvg$/>c#T.`ggBD WU[˗;y&cn^#I`]a+^m`m'cQk^t`=M8}h'35P y9 /堔LYHS<;iŁzť}j9츤YƜSxYZ$-O,Dk6F'(Е9/B9 +3j:j婉r5zd Vn~uNΠWa8qMKʣ=)"F*'ˀ20km~@=>GGmX[ FHCAgBTܧ쬧Wi{0B[- i>LYx/˶?9Nn/E /o;zǭQ>e~`ubJ D IH3vŦXU]Ƨ%A~yJr0} }F&e|W(Ǣ蚃eXZnHo6-rm߻ޖŅ2"z@ڸoc pw%Jt-ZVwa e"vX6r$_4%P2翴WVzc![MGzx x}fo~FYE+>;EG#.F z!fT\W\pݵ=N'$ŐnJyэ4}4Җ;-yrr2w3G爘(kWʮIMeSb #Ќ߈u8ڿ)գ"YmP㺖AO G׿?3tʎ7a}dur] `gBړ=o&.ޱ I5Zb3.+QDrHI(?m7 4ׂԳ$ "f UP=&O 8Z, \#>nbއ]-#nQͷo:owk)7ٲZ-jEls`k]%[7*_-c6rv𯒙jX kJV% g$$>,%T8MmA% jB` `3RI%'Bk-67;) $ # ?Y {5NpwZm|!A`:o~6,`/p-amh+i 8gTnXVsƝj?~`A3ȭ:;:S]"%=3 P1!?aI9ƠNߦC^n,Zf%26#i !tEI_]omr(̫ O2_t1:>_Bn EDwпլWTxHMmoL%ј#vites+Lo/Wߵ~ZHۯ4}X5K*`qY͚H)[T8*WF'uuh{?#hb ec ӷ5C_cKTP*| p(~0,Zt4FJ6ea4ޢMAB:[Q GWs?1,6.l /fTNk|(ަ IbOT \ Q= /*r_|v+Ij/3 suA[pe~IvsA>Ջjc, szH]A|DAnEA  #|d̲߳wbf$ Aph #/M7XMF4ak2UO b^?[PU^R#as K-Pf!Bf#:T!y|jaz O>-9@ 'c RH;&5wMq!.+ [Cto'̬Ī3SEOm{V+1z`B$$A&֖{%~PjXԶdO @Y4q([<5خMɴFׯTcK-^  exunMg"AW!eZDm0xRo3EMٚĖs eUBh5u`Q[Pt>A5̷$|u ?`6ʮ p'zu\99>vy.82CX!|BeaA{ f0Jq0NvP|8-^P%-}`H,N? &3F:oTF`5HW(jx̤$v+ҔmͿfp=" *:¥o q(@+[~P M &dTJa34UşK `-WQE9Nf{뗇պƈjJ:~8rS'SSeV7J/sϾ6cECvb SҶ :mwy3ŏ@ŝ_>MW  mtdHA7g?%2l7WG q5C.BE+ϦBZrJ?8/?f8pubFg)qPH|]ĮIc!`[!4#5/dyaYx-Vx%p?)w.aOQsƝ|jFsʹDG=72FJn\93`Zhc>Ⲏ,2wpfTל &yM*'@\HnO#M^(ў1Âϖ^RI?i|^1ѣAYs,|F~? fK2/%<|IܶQSv%рAA]TOl3?eZtī Ufvo>JyI7YüJ_QX4 "uDZn,M*ШG8TY|V+zumb#'q$CHX!ATP\:i1.ЛJx6Y} `PT[Nxm!`up ;mS29 M2}s[C*Oxu']$D8<]P0=1󓩯!F1ن* i>_[]Cu~D`\;HPQ)S%`7[gLIkeid{'Bab|6~eI۰л@rRxš=v#9IW qA!ƖT3!ie+F{)i"T5"2&uq {+|Z^)0$$hYg^^fHssEl-Bmա h[8at|!K/V@ $˾ٞ-cw|uUht2; cv'm'^qb OXxpAf)ɱOP[CrM.f6;IN Ҕ `+bnp{I/Y=gTke 5L掽Z+^}R lyMè:#3EfBUd8h|`\aɧ@53f->\d'-v6MXI6{I|ѕ8;|8)? ]Fk9Rt{Q~zC}q '7lٰ~՛G3u芳$$ P- -VY(ҁ+gXjʓѯڪeu\KtcXiJTاV= ah;G~8M+q,Se:Cygۢ4IR !ן{}L>fC**ԯgoǩl--+,ؕ=~ҝ:,R711JI'f\.$N+R< j5G"E>W'LhLuZe!+'lw(_M/[65 f(G w.:N-WA+I#}Sp:O)!$ϯp͵(8ͻt㉾B=fGкg MSQλ84/ZF„A2*wŊ{@*~U$sgW~ӒQ; FͳbgEYZY VO.D)Lb{:ݫCGq9K}=G{U¸yx= dY?|#b O^qAO. 0N&|FF1"8Tc7܍ɖHmD5w|tPs+ Zu`?D? L: RB>J<=0vN U/0:68Hs|:LZ+c43d cYW ~0jˑ2O\Ҥw?ex:bצ}i>ϔ!W`8ϟ-:DR3T z{)yVmٍw Y8αAkc%6)Ќ9Uz. }GwSI7#'ȝܛN!m.&Uc#r){LM8Fiĩc7p-4v}N :9QrӲ+94eM>rQ4auLzfhdUj%Ps-e3?Z.ɛME첻,  |w{,B8hf6{<2ՃjaD.*8nuTJ$OaXw].  yy9d'D ]Ihs;MG꛶L|vc?*ҽ%XQQGƌhU;J/ˑwuu7JU$?l{c`w|`kNJiteormTs1GA0<9:3dcYV _;)Qu YlՓFy(`0 /d|ngqqFمPֿkBh[\@γ_ >/2:̍K)[o(Aq6)z6lnԵZM)TȚVO#jM&\nr8'+X񪣻P{vb́CϴHSW]6Hmpbo7k) g?a\kxqL6MBhuXBRslt'~c\tL0peKI!reư= j+\:+/X?S]{dT 6'~If[<Q}*&OΑ~mGgxz~yO'3t<3eaf` K  8z ^̢m%\ M9ZDf.{+Kbg,&%t,&#J 1E(P 3]>~(cя0'./SRPesLeğnKɄ}=b`gsƔAb;4b# ɥsy)0Jy87L:[QX;KN"PwT+&aĪGLWx@2Z uC 6^4-gf^C(h;2CrH#^F$Cj@'Asj6ɭFkot{F8֮7Q摅CPGB#P2"&Ha&gW\<S yk.Ǜo2%zj pvalI 囱\)^KF!$%I\[Iم폲cDOQuM1<| z#1:Z-5PXs.<M7yJa]>:ƌONE_NJm97MRR'S'!a$Ǥၬ^l>9͐Ҁ8`#LF2DůO L]gTv/p $8qZ&ٲ>YFL7ǘ^Չ&y^ Xr#s 4!;u@Kɖ J y0r>cRj# dN #Um^ds#|GHO5hn=C]͡zk5O`ER汲]߬3]3e.A7 Ld{)&#y^nUN)o1p.N7Qi?n7c뵸)eDc#Y5~cC;aŎ J˃}UQHFxhho^ioh=D#T!Гe_7ibTmfk* M"*_ ]5گ[ ^`ljga=5c%j*4K2jkZIҷכ>ΟD< ?PNsV8t-4#U3M!V?}z.46 \b[y 2Kſ})EP] 8g^ެk_'jy^}1|O:cbu56U{yb\~uN}҇ $N;)UG,Bei:e3 YߊċbT,; M0xP6"`\gzHnαRhA`ɔ@"\οXaچA<0 \a$!֬9 ~nQP;CˍI2 &m%ό[/p&yvk֋81Vp43TcoAw(iݐOe.ʩ=^@F@zifHBjCbq6=-w5@Cᅈ;;]W@;_"~8[oi?Pm.8= r6E;'l5vZM{w*j=ʚb2'8[]ڕ.c )(ﳭ`,,7A/jvIJ{Bp I%=vHȬ=h;¬<\*']$ӑ&? ֔jPy7ZEH@ ]PP{I'A~Ttpt_iGUBYP_?too4y5$K:XX~Qc&gv E0úiժܔC[8~*T4%fQF6eTsƦH@ɇ '5v $"]}H5!MXPx'}&Xm0TNLlp['CDj7iL pB FuMWt։;Lf } p'5AWŝ~LKdž_rOFصާ!j"gX=A`p0Gt<0d4 ;V"r<b]bSN"A3#si@y}4n̂p){dz/P{{~gC`lp5]T* o-Qd{vDnԑӡJ؉@#u2qր_v;-?~ b` G,WdޅXm2Dы2 gEGqLX*J}BGP'yY0e>&ma N2~iQfT~ځu 0JH~{Z9;Nz*:qwA8 UAJ**p+(+-:]uFI5FڴΜ8ARZ4018_6șJ5%jNC CKRuL/jQR0nYdRȏ'ʳQ gG9: 墁ceI3 sƗ Ort,T|&&;y#ŵ_Uw_pπz PU.ִsHDlTo"F "+ʼnEGA` -_,\xh#r /\=lXիrf( vfҼU Փ hGTXQ^?Ji "\a$ +:E Ze5rt((-9nL jV [@4}*}8Y3Im_H`#,q7qu{4F^j́6 /J`Cv։.ѥveo5>ERw5L})N2Q(YA/~aIeXj])9[[9$9n~Kg(FS^ IyG_/w=6/M;8hyE^jWT _޺Ts'?0C 6džsG[H:Bg P4 \ivtm93Y rD Llق@nr-D{O$G{dNgpn8q-ۺ !@`t&sVz *Nsu il ~ťuP\xBZ'^.J ݗJ\}[ bsa@^̜ ą%)sED2$\Rz<4[fbVɗk`h @7>o. fjEK%X3)dls -a!p5V[@2 ",HEN.ןUx~ngLgjOA 7,bɟ,Egdkz u7.㙅f㦆3G"\%5:*YZpDG"d>Hs+̹ JNx:c+"mA=9rlXۙI;{$+2>'.Q3؛zA60$>p& fޥ#s%٢ڿ?ڳIVPXV$R^2Dv!䇠fG-vGr̬tӾ (3Ş:0.c%^~Ӵ{75N4f?Tqi+ hv8jxpT^\.{*<ƶ틇`$b?Gz*thO5_cVe5w9/^F-6 O9J?}]ҠT=U]rr=6OnHC;ĆG nyv^Td'43m+\)aLI;[Gy]_҅YL"&T[G,$[(h 9u; $gvH}rx(_\>`F4B!`t;2y.Í gljӝ2i_ײqBUgb:"CޜG4g %X6)GF;ߵԋt3^VBgRlչy ̖j#E O؍~)Ȍ 숻Zh'cOdSdވ[xF(U3zIS@-*|{fURK92Kzn{pE4l:ԝ>n( raXe@bm/텒5i'AK8575] DRa#ppA0g)v:ʄŲ++'^Øle6Zt}SicRS*һ/qŶnOEQNuq>,6(-zM.nhWC>0Ϸ6?AK4Xk׀6JHnb{~Ǘr8 ʀa1lms"xca0{"88X&"̛c]'V߬s Y)3 Zا ~ )RVC%׌_8oF8aeOHI%+z%B|0yMLZX{[w7=.B֞ ai90PM3S_~h8 _c>PU'1?=z: 6FC[*w>a&umDOC`x Ae"9A(:mbѫ) NEdC ?+oeq :zA BB^㏜qq#ݢ\G$Z9LΫZS|hf+NvJ#.te/\ }܍:!+T~wp=BJ9 $'taq æIcOu9D哽[Pök372זJ`CX9NtI-9L%˰dM~TS esXgl})pCI$'#>_7뜒a{hdw'. ֍.ې"+?]xk0.,^ s5QV7OA[(.`ЛFq(&֣k%UǠ~W8?umA8F\j΋#o)`1P>* td>YYui^H8S$7q|+>FBBWV H+ uS $=HCϪcGY԰v$> zKgiSfsyUNs, kZh9lGHNؙ`9[k"j58L79`])Ky#}WC>1 ;̱£ YrLs<,${co$[8>X0H0u q=0H[#ThNҠ΁ vR[:n~316ZJrX!(ED5M} ]6j_su,6M =RLтșf*չ%v5>VpE˚oɦh s3S OT8cSnӘ 2X/N< y2nSgj ': kXǹ!ScUz?DPxX3E< ȣ?ą9qrv=_- wg&ѿ`75#ڰv4w›n^ƕ\~"Eq }pR$3-SXz2G%3iOMfm D;sԐh2R GFe8H a#}+?BGwWZD鰅i G^;P9@-T+)q,eSXHN"РZa*Ƙdd%p,͂i (6}z ;w9}*3漛EWQ OD;O4F e,fq՛RQc!')oTܿ5_I診F :y,&4Tu==rm._ra1\3z1O.QJEq߄W|kރ|VKIOdxeޏ -3t]i9b~OmP{lKoPbk9 Վiw4zGh ~UFxk40+aPD$ڗhFH4EuayR"Nmv|rZ ӘoԄ_򟾾hSvQ8g 6PֹZJsE86"]gIӾz$1Ii) [^x!`Grev5Ы ȪKt٭di6UR{FFsDǜuE^9HN ڑ֟|\؀&M`3@ʢ01 ­$0٣k M٨He$X-jq܋ .\µOU#59C'æׅL%:h=¼D?c(@^>T:,894Ŝ./a} q F0zecCxU: t I @ԣc*7>qA \;xVS3F~C?* PX(<+Cھ;){{<VזJpP!׈tsgܥ  W$yJYOCo yvm( $$!*!뤼V{~f6;4Xs~D`9E_09Q"CXomJ|$CKQh债1!a}a}$Ѱ"C- ,AH /޺ۆbHUm9x/1c0 ]"F(!n)(909>m^]t{$n+]3ρWE-๔F(brq/W~.qd/GSYLrM|{{Z]׍k#"G*"U1[,|sc6 n ?bFk" O{傀xP{\!Rf P%: um5m"oOre`'WmHH1aA\eA`dG#"oc YzÊQNS` uҹ/5$#Wii6v!_ݫ ovG/|yhq(X*7|) h._LМ[b|$T.3mt!V!KpqF}RU=R rq[t*9"bnݞ7pB+! 6Gkp(3Z݂<='Z|N|#4cG`mơ=(z"8ȯ=j@՚p!hBcG],]q4p>QdM Ts`ܫ=[:@f.K hP mB?GJu2$ƊU7`PhΏS.REfKߒH'KbxE;ժԬ<[ ծn\l0SZϊ)(t2 Hr$h 'tڨi Ut{IL#^ǻll_IN9$؞t_4V?NǏjLIC,U~}iK7K#(~vq`Xn/-N 1:Z؆AZV0Ґ`sv'OXUzLaVz65-i@bP]4*A/ JCA++c3R8jwc]Ӽ]7o)5+Ңɝb̿6TUZ@'h:MtגiزYC@.QI5Y.+Sfz0xF?v/;%p-\o.R<1N+[CҕHH1hPׇl3!*pajL;g s+?(,2@,v kG-P2 0*c0K!fn//}ZtЌQİiFTpaAo} 6yμici[ 5R6έ%qtf8ʶW-N`ꖵjÒii2& v$m`Gk95!|O֙Q=$|EV9!=DTkF6t)QVL-'J*wM5!q<M8$+Oezc߷U-v"/*llD1S4 ` Mْ4 11.W2AY'`4 1**aݜZR2zG!0<)*Z-7z]h[R'歖⃽XCEyV\P .v.Pf)Y\q+=?:9!Q,W?r5׺>Jjk۟hR+A i*dw@asvCXha, L9]ˇ?q~Sz9;N3̨'ׇ@깊^pmbc!t%c |1zY+KU7}*Kpe7J߅LEÎ%o1ѓWyX9*|s؄ĢqV+v`[|"n.:e}xqowUTH 4DjЧӌ`,9i^~3r\ V̾׆[7C񛱑ڋQP0_ IY1 >%#i7kGί@>L[uH$cr:y'WQ+]JU[L 9"E[%,YOa`{ݙ ˘`ȼ- ^8a@.k;nو  *49Z(JKY`gkKV]Xid;I?1tحv!2` L`L5lSZ찂3EEZHo92S) 'ళXqV61y8 }<|_0ki%aငNPM #wf geұ F+!y֡A1jxHxE"lrt.|#4#,b!op`כQEoVD-Sګfdᰄ[0j$(c1\2]LSη\bV-"Rɮ4ҳ⋉#5GGrwZ(a&2'|2u DEA:t Nia?S[>l?~R&a5ăeÿSk+R'߂׍ w߂@ Xk3m$rgHtYXa$R^J4I+i-_h=OA|G'S~,Xߚ=6>sgH'`uOǎsjtR)TT5{C[ya.5`WaW EFʚ]4gΟ?&b'N mDJ]v"bX yΝ&1]']}J9x)ۏxb6[M"T7uy$EU6OEy@**)uCe>:ǥsV? /v)G*sXTn("3|ZUJя6-FM ވz_^@Ւ`y"-^GBAot(L) M* kxy!Oϳ_yؓ8V),y! js"{Ӡ1=gB[݋UMը#KXN`0]L5/XzZMC)WAްDB)\k|*J,OGY2|XR6FT7|O}sZ[0I0 )y\Goᑠh|POM#\|:FlqWj-*zCj%ӽ]py܍a=8G1O>j?_(GSavu6u`2YҐ%&}H$Z4Tgd\g.1P[ˍuMJZ $>7Ij!Xe@Ҝv^nItKw'Oz)eNskڠs#3 ٭$"98D K_I]><i!qejs[;y>PgTw|#r?ߔ1"}D)V)6e`Q;&[Rn$jܸ i PL<_ou5 ^OS%/%߮J!a\Cfu,QZ yp(@YҨ<'jĝ4C vApoܶ5)-Tj6c^ˈhOÁ;c}o 6d߮?rGs!Ufws/9Ύ! GkčQ3g[|,yu\.~&z{{x| &OO'nۮˍpZH+\;[l|amX.S񃦿ڨz 8_w99% TuYk^x9B.x%.q}4AGABh(@ k%$M?PcN~ƈ&WĄpLi;5JsY4Ԍ.V621U ZOOĀt<8Y쪬tÝr/2@l&-ZMF`UafdrTD:|ht@(}NFsC WգPo(Qaw }VrJ`} B]4QF4w7)f >C%Ӫ~tH5AYD/;km(-e !wLrPaVs|4UQWsW#}^R Đ6X xL]$Vґq aA#']k*'lj(@؋i0q\*$K瓗UuyIE7hùM81[4y?>nf?UFˀՐgIՑee/[4?y8?W=u7j$!B_{:S3%͞p}Vع8bU{[ M%N:747CߟCky(Nѱ۠B]{z1*ę񙈚SBU ưQ5E y.ZA_nD~y4ɂbyn2wzBH&iNjHgsg҅Y`amoi7 ͚4! kf݉Xl*R.u+|v(" g]:c;͕ [Phy۠½uQ ;[nx]w٢]"īT}P@-r|ʨKڸ!NwEd,V&YRoO a@&-%}SжyyRGkp`^ƂKң"J y~ui_`8=<Nތ9h|z- #o}Y8f$smtѕlk)ͥ*†ƑV7MWBBB)S\E`$8ŝv|Q*Px4v6HTj7 SSW7}dwNC6աU狁Zt⯓J^I-qBO#%[ϛa6)+}(2ȼD@ dJfT$d6j+z,`%"q@??C>r[y  H%$:-kӃ7T+Pk q]€8:OTg8V'; '8E~@H]KPW7p\RX2+I{?n>\iDBDpM4YvƏ:Uلsl?V ӞYw; ,9>ǖ*cXY"v޶}}~)tG^W4E  @Jœ46#|t}Bx-%#`+Xg}!+˸47Deo14lMNT %"1_x<h !2@*6@qq;w&B_OHl#VHvx<(<;` 1_̹W\ \/Rwе!ZAÆ~ GwK(d]XGlQl{rB(PΛL @c_Imyr9ꖶΡB"Sk]B#R϶ AR| PGQ T>ؿ-n#F4?aTAFAR!.XD-uy 7Gs 8nN0,$XwrO8#(ul!^9| 0b?xISm"'Cc$ðlG<ǁWI.1%{5H{-ܘW/O`f[%SnšvePݨc(w2t%c+zOz+/֥J яfkO!ΞD(`d#7q'*YVh p>vڼdAC%oT_(pǡ"V?hp,_bn/.$Eww;H92}3Αa7vXؘA.WOVZThYg>[}bG[@*ЇUR}k\ghε>> An .TmʺH:5xG$@Yۤ90RTnTHL)#Dia/sI舍 /N-%듚a '2p :m@,p e + ج ]Gj NdR\M2(No֩?}(#Jf컓ġK'^T3_3fj-Rۇ¦o3M 7m;kMy"9Y`7Fv̶!e1?fqO.u}e2t\6I՘[˪Che?0W}/hЁ(8ıIMZA~ `땙3ngꛝ6BĐ6L=ٱ&TOՖ_/(|*1%Zy}]>f%F{пd)ʁut>=IMēaǷN;[v+R+"X"0nr );ܮq֘G=]̛7pI/om.Sr5ԨJI垱5eQkne34c`,:\_Ȟ*ؔ RX! 5X_ۦg**y'CqƧ 1M d(U~xg:D]yfl<Ζ&!:B`DtEE;11hEK~@C8b 2BpE-uuvUyغ.aJy+>< pUIϤ5VA 86+/ҿJ8fM>tNvPoS; m)F#-W2v wdɁgyR.r'C38" *=O1qjoˡ13c)+*6nxpӛ)O  Wխ[map,h*KXe_īDX{)`Wm-)si(kz6a\!KNTn!Ds+m"PGa\lKKyDWi{98ҚfT_~A"`6띶.J)7NkRW# 3582@XԬIl 4!b{GQa%' HWk79TdBtq 3JŪּg--{-t?nѩ?O8R▘gfq+XC@fyƦV@l@BV 6]A,êk#.hZ E,-{gm/L.r'KVڨ&g% ПF~*xg#C2ԶEx0L) *ezrB،5n+:ܽx3j]g0KTd.n-mܼstGt}L3jpN M%26 gf+C!\sh]8ljckoB{kԢ}eEŞfjT2T[ jɪmaĥ7;Cg;}g0ױo:`k_(6NrXR' Ĩց9Z6FŸAo!41^vTWTՍOЈSH0uV>fr73UfV9;% dzf+kp$. f2& kFls@QQ 3~!<h pEvtL`a Mc̋T^seBz( R>eRRLp]T+bijS}N= o~㸯ݧ7KQxw!M:4DY7 |ki\(1zW2-13< %P盍ؓp+yPoiaeJ͡xuy8*&u Uy0G~s9q @RI_JB֌f/EpXDW)/TDٱ pO|_4F{AGǠު ȁR:Dlԋ#~ X83/ (! Ew{wy|xC)bcK!!85ĸv=%Lvtξ#vGwdxËg-ܽT^'W`x E NSQ38y٬Mi64bϚrV[OػK mk) -%<[pxzLZ} 0H풒ʰ'3>Zs=OA6- y<ᅝCB)?DfuGnYHǖz{;Ft$-[ж!!xԀ~04UZ3 ;j9HJ\=sKBOh8{ƈKʕem-D]0jOrȶ x[qC <$si"C<1ie tIO}a>y+x&Ė2] C(uzabYɕĞU=$`XVzf&aܛGۮwDtAv[6/kY!bU'X"B$؅p=6h84[x["*JMkpfS pme7EcۮόNAZR,jDG~92C7c TqVr;4G2zCwqUhCeH{tJ!v n) Pd:&0&TQP;x#-88,^ @g *7(׽YeƍQ>Py+BTb{76qʄ{je7yp4S% 3 ˸C?3ã]Qް7[E<@.βb~jb]9<ӽ6 ;\ x]N SЉȪx ¼f0 =xg:nup,K LF]ˀtq@~L{7"C71M ><{ }j'bIq,ưL?B.9yRug -5ME;ͺm)3&8&v\!Nv]xGI{[82qURpe/t@sN|7@I3*} ''dYl[H.`(Cgmꔃ%ͽQd-ТbBZ_ڢ0&p|*|?fB wc@mUݞrCy*\\/kF6߈{@& 륽``67+êȏ騅\[zSս4ghX q+cE 9Kj%Ɨ3jgSŭ/3Fj&m(V%Z2ζj5_7>z.oqE̍Z;2=+z~ENۇ3!4"8lK|>3Tv_31!4%4]8$:er cMKY$m½+k4Xr|ŜVW =J2KX*Ixr7c41O/dO=vR$WjJץu C~oLÄ%LSb<6ע%3H/3?-(ktu9la~Ej\&WETC7]جu+[ôWFK@LIg ))Oa@B [)sN3jOs{=`j+C~VCF&n T}V oL 09oóq4uc6],|łhP^_74eT3jзPP~ʸA]7~t''' {Za;yL/&*,ok|d\wږA(MUj6lv=P`"#= .G.jY\yhmbʳ~JՑOQ@ \̲ aL Ǖ7wQD !JdV44UTe஝v찍iTc7 rĉoU;dP"P7ې/Pݜ~D%g o+'CBz/B:/(Wu|X?_wmfSvfQ Ut5p9\-Ն)vhMej7+3Gcīu# G(A|n?-y=Lp`lV֊P7LئS1$u[LYdEk-.Cn;@qݥXA JvCԊ&I{&8Np-Uxƕ*e7 Q6M)&m$&Bi^i4K.h-3+o^7 j 19u;Mdu,CQY^AHj']ĈEU1O_Qt J~[[ێ7/vi5S!HYD oPu G:+`Z"\ꉪU#+b/8,5X;!*g%q:LSͩƓ /LAԸ%'ͼxe0X9XL5t8g=ֹ=59}iUY.J)訲蒴[i91o<̑RaGP4VeϺ͛uHOs NaP:Y>ē8h:f$)IR/LiPX >)hpB}f`|<[<%A w}.O D` \\kԨ:PG|GU=#1qE3Y[kY<`\!:HR_DpaDK&Pqόj/*ѳ3˺m>1MDUt>\GO6dӴG@Ho6vƷ{t1k#65UuxV8+@z@jutTV.[O}-Ps TBr_)KpffFATf& ׮9Ҏ%V|F=fV٭t)-ũnWF9+2Ya#^y0zش=SiȰ·»Xuofg^t3\WtgjAr8uG X%h!eng?KaBFQî6ΖRwX|0,?ʕF'Z|X@F,Pb&`3,s] t{~IEJӺ n&Ai G n?;E*>uQknYVE`1}(T9 3>:4G+(SB+ <w W n y* ^4"XWFo)bL|v*2$0 4+\R" mIF*.F%9: }^4V%KS"vFU'%*Մ@K2ݰ.lZ_z!u.'oܺG/D"u33 +w'!dCeeg'jvOUGX31}َkUr[i28q9*W "[3s:Ѡ 7kN I Yfm,&gfB=!a0 gJ!u8'`Jv:+|!; 1ZAL6,>.fˀDTŖ?ztv.S=Ce߷gZwCP!jX6"$H)U9{ iѶ1Gt5W;M&F~_o7 S ̦Ek0$c<9G1?l ._##k1z6u=R(jH:~Aop h,<RFdbˤ^ cL<#b: FmBfl,+y7E#@w)XޙjJ2x a7Iimo ޛ'/&.k6]ڇJ{T״*>cS|&YYI2َ;BH-+V@{fPA`n h.mHlk_v -%",)ZSs,Rܲ=Nf<} r~]wNMX3 q|.% Ɇ)Bfdӏ}[JSp(!e hIJRT +hTiHKn<ԑi};ߩ%i(P:E: ঩u>0r\&;.';{- ˵P54z9b{tρ"+ u4;P:,dQX{c90Iq|.Ɍ*Pӛ*{o{Y{Ggi*2Q C"' P*Z'1Ž̻< Ap$sN >w\貙*Hґp2r !C0I]axg:޴XQ.6f@6 *Yf/x$Vjەܵsg]p8I)yㆣm2aғ_N {Y^WTX;zʘxihxս'qO Ws"Mg~BHVg6G4=vFL V~y ۈQ~(,ُ7U,#ӓI>xTz5#𢡊&E wlPAϜdDU#l/./̭LFȻoAmē$A J8rxKSw,`.6lO[Xy "_!%nZOwa51ho7DNîa!)jxnЮ~fS+|FaRuu\= #J3 ay;={ `?d0šsDSsxw,ιŇ0u]ń2'P3L$#p57C@MuDkbJh@n`|BYEqCBgC4taJrыCDmgb_V.p B 9};f)Z_mڋ) U y:̭c] 7#wx1?Y.`tR,{HݸWAk%k֬(B);1גȍ JGZ'XȰ#]\iM%k]F%QIvf?ک$_.VZrq$TU*TOJ*!~d5$"y+8+v1ǎånwJJk:׹%02PS 7  *@"I,@"~s1+k7+whn>KIYRl $I DF\:)iRCMO_w6`B6$;spq O^TfR"ۻ35W0~4չ)6Cʺt5Ó aL]ܥcãquƜv E!VЯs1*3p^PUWy.Е18eDt^#MX\",FC^yֽxD1t]w_;AAopB|;';=U#ֱ3Êj&]zX ۇSm40z%K|'+9![w.gD?Rk~- 6_Lr_"[6//a1G9Q4Q`?f/m`RCJ\o 3M%ӲV3ZG'}zIj{5.ʳ`%=(7^B҄#t9I 6˂2$h2!v7÷y& KS6 @YuNeSi 7g-Mmc阓T99|3)t7[ ;~AK k};$ӵpQf'k~Dk[a?7ClCmӢo ?7T]W=[u.-g.'zĬ~(ׄ'Ϲ+ٔiA8`+!fT DN:V#z-LP @ !Gϭʝ YA.\p>`ڧn ]ayX[́>~q&Yˁu$aHp6ȑqcOuJ氋uklI:XqVbl,{ْ]V(+A:1|)*l#LsY,p~/ q6zX=R7 %Uy-'* 'v!2["Nl5Hu,Aux@Jh5u9ugfE3U!V2muo>L#,FdzjUΎ%-p&r:#i\CM:`u#db"WR SYno=Mf[PJL:](~TuCM+hlPRyp s[9%Ҧh2j8޵M)F>o oP(3p"gf| >ig1T q$bKM̹Z1%Ծ_&EɃ?|a|2J C{3q⾌_D7?5+G!ؖ2thbGU ',ݫTk|^cPһ}R<usIy~) Tא{ `!|S[g>@ #ߠٵЏ8|hi@bSc+GKG߷v~afx{o74 hZvGKJZ9R$C1KÊf(CeF2R~MHcbfOJw hfΥl1ۅψ0xhY%߶ˤ0L1ˆD !*K3 XBy.I79`涹*BGCBԜ4['M%G%_L3z0;?,LRCa:ȹm HߠO0TV=Z^"@Fƃ2d\ lfrܘ*Iو|nxb&?&c0[_ZXV;BLI.U԰z Q;8ZreHcs+uC&)^`:#܉!wIĶɋeӏ7I-ALلغhII$HG0 |;AߍLTЦm> R7cQuь GxΎP儱HGW Io\,i,AʌLULgD!00 11PJ/Wj/-!x^(" iZWK}#<)8!ϘS>d4`^rnǓ%bRMI%;+M#L)%_c"kJAry^U꼇,f!2^ΆU~93 K K8\(¤9y`\dI Fq#6EwiT+#K[ Mo ?L 0 *Ҥ zӪ=4pZ=1uVWLQevM eWhFX,iUX'jrUnYkC V2y Ӝ?q|s?eP[UuN\[䎗ߏm<&%kFm&~E([;n'oCXK {Ց,r4Q=qձ RAdu#]76wt1 t͏nȯR]SF5Q6)i4.Ҹ8|m47z2E5}>cb khxb84|\AaMQpzHIb۫rma B;xitwoǷtINHF-NA9yU|ޯY'?$"yDK%dl}a/:3;זEC4YB }T=w 3ɔr䕋VhP?P*4 QK*ْ'SG*z }Ѡ; &߇'[Y&(㾢ֽwRl%g- "Mojkaɚ)1C˞D~ߓ.lĭHV[>"cQ 9W_B{*֖YҞAVf;~KʌqCRpO/&PFr&Xޤq1V޸8x:q#ܦu9sI{e@.JT?)EoL̸2=ill'Vm1$Vj]1ϡvړ!4e*6u?w;[$p 9Y3ʄ;#Q7&yt.U7]aQhzt#kb؞X. )ݎAc#z@! .\WO҃3˶zu&FA vW%'ff?Zmf>L|K{$ VzY# Y^2%9tće8],k`c.F2 #Ʃ\:œN@ 42ͦQa2Wau$dw6Ua#OoC=tb`~#T}N݋W i47=:n69ᘏI3Z|"JWi? E϶I4`\XHQ8:6*_ڛ~af+5a(HT'Zk;hU;Ps1O>&ciU>m!I"!kjen.W;B'ybY8m<|"01́  KI9NBgE IB1ct}7^>xkb:n-I$"U,AJ%JjK Pf*b:ѓKc̵D[<!ť!Q/n-lzjz\^EmIMf2W%xj]t7[r 5d:|ۯOVu~P_!~xM( `+qԂLlJĬL 7;}7nQ $VE- >3ӓ1YQA ɀ{ * 2c){ 4=lGu:x`.A@R ȼ/aNivLڧ%JtY0=W,ػ[(QOq7*Kyt= ]]FTwF0GMȆQ{w :7a-%G5;(#9;}Ɉk7 M}r ٯ2Hx0!%D. I=o8i; ₅2[[Wqn6i$ kB>5l~\fi,T'j2S.~,IAoS u$'I(^xMĻ7/gk[!a48JAE Yt{[rWfF@z GsI.l!wAI$0~I=/l2SBYN+!IF'@)fv#{Kq ][E6Ɗ$$<&wLu1 ='g&6ub-שrm5y*MdttDƩtV]Dvy <#inЍ{Xv A>_NKUWuY|m@ކ!ҾCӧX_65Dā*|-J֞fMHzv6FǵKcfeU,VZ8p7͏p xwX{syh9 'JXxj[ x >K:xvsSw%Gec1XyԦڙ#8it͏$1EF0-!@2$)%H ju9!ixA&ot)8X_zr Irٚeؤ5bT'Ԇ% l5t(_VmhHjjnYgj$:fU! ViJɛ~hpSBG~F^` dB^RM,t:4n{&\yC ;L6*0 P%8T^>!{+ >k]#ojɀOW !OJ/M,~֧G^( W< ډ5r3!&,ƺ4ˉ%}_}zO,pSQݚ2kr|  b=H0|QgGV@ ? xT:Ue!mni?#1-?z敖L!Gt`& E؏MuD0of+twׅ3m6j\(q.E'+A>?,%k uD;OFU$ϲ0/Kpg2ςT`R~+ rbuēKs4TmnrKU`?ҳu%%kgT60M[4s@# ,i5|75a=(DjnExKɽy8 t9TE^_9ܤ Z-z ^aeuXyT Vx=W N2nǁ蚈R2ݷ\2z]/ͥ`E5״7/F8V%@' ?ۜ[?>0?@'lcP 3 Q8ygQY FC#׻|E!BtQ1qݳ($W`,wGL~/k ^T~Vcaxat ?}7hKn8ŐD3*iAW:"*qXam9ʪv-5Vn+$,R*Ij6SRZ{̢ǧz%t7+^[n v7kRۘA;rAov-M4?$Q8kϬJi ؛+ XHA^1?EZamٸe6RNrPG*a@G$$f + g+ceNu_QyQb`PZ5JP76M [3$GfOkz֛Tqp5awL )D&H~VGS$&=8ژd(d!tƐr"lմ.T6cd&]a\-}pV)L__ci~<5N{)lDxG!͞ԶsL˙A#'Kj-]/y9I9[D%_o㺲q]'ݙNFBB%-fQ>2PZ`ph@9WZxPifps^`d7^dTahuat w=򄇁X}U!%RYDAVH.v FMf|Ҧm`PbiIiD+m={ԍR 8X봭~HrB b?0 ksm XI{6:oâ+998yZbw|rap8>?nم-K0 _[׍ D9*Zgp庹O:WaG6ݧ>ЪJ6=o ּhDUz.ڈ#CPHJ4NPF/m+b<7,%^_" CU:"؁z hj1D&rc/"7aqQay7 %&aTc_d^/ YF[cz)ׇP,sFdxɒ2:}n[(AO7pЋ%ZW-=w&uit8uJ%xc Q|Ex:5Eq[ 3RN%؂q>9SȴY>=hݿhNNGՙ$*Tø(AŌ !ȦF4`(W>]0~Du }X82QYI[4Dbަ*ȓ a%O.cWcAKg ;Pb*rZL!!IOF7nHlE^!E8o< eqmI6|WT69υ$*8=n?M|6FjƩ9R/0 0z ģnoKhDv"EwEmm82:Cv \sӕl;bGtb =)' *^š3v"e&;R4\epIeAYS\r?;Cth`ӟvTީ<.0?;Kϴ∞v,[Fz oHnTczY9@.q/,nԫ֞_'7`?!E#0fNoۙҬhB%Nm[okdL/oRRj?[Iճ[yZ; C.Rsr[vS(-o Oա 0s[u)_vB[iE5JocO::`he6BZSpv]XS)-u;0n ȕT`CasHr\q=.\]o?rxyViZGr_5#H$g3xk5@|6}hOj̟Sdv0Xv2}h 9;'P066O敭rʔ<{MfH (ل|ޣR:pd9꥟gmT䝭sw#Yع1 .u0"- vaw|uBjӥ7KP7@Y71)E0M$zp4!naIG Eu0;2ia 6K &ry;#.{{=% GYegscZfMfwET>iJ6nBQ  R :}*?Z=?e'fHg꠬@_چ<iA\r; >ٟOSGDMFEPj0Qbn j0>Z]gWܼ5q|)ʳ P]0"y#,mK r".?TJd7?\/kGF\rjV4?"J(@.od\" |=xzYWK׋*F~j;3/9~ޣت̪PcB:#S5 OYロaiJeH+fk$/3+gȀFZgDB^P'N }Qކ K<S3߭3n x"[۔PuJ\] 2U}yw#?M?bMbE齱z j\Q--4mGXf^GUMxZ'?`J1,8 Qp:1 D0WB`g}To_Å `:z!di.G94`Yh[QEO`q-IT'%(U^Fq8G:uV=9W^賙=)vm ЌMoыlcc&t-#ЛQ!{{BtbN~a $ k1z#Ⱥu[p\6ϣ3Diʸ 'kb.a(g^ٕRn"qe&XzSeֹȜ-z>$VN55Hݘk H,gfaVf* a?|O:5 K2)ڒ[@ Q͔q *AgDK؝&Q41I.?Ku\R)Z9¨f5{Ij-Mπ+GUq?]=rzan!L[٫\YTW 9QD]3[`Ŧ%MEp0jOhz6Sy0} fH)R2hJWcui\OoeZFTdhP|~GJu`7 'I.,=PYqΆZ4JNX4^GVK؀(Sca clo:TD歯ڙ"U!Aϸwߏ%&8LWP<.ݰ(%z&uҁ '縛Oct.!@ 3w!D^x0:}H{$iO U~2s 'oO&<\! n{w1q\EР30SyB! ͕y r-\| ^(8ikyow{aʇA }O:k#7O1h=}?}r;HZGVe E>A$JqrVŁrt-Fox.))uED:ϡt,-xcQd/=A(L'2gsH=V~Sw BU2CFO#QнuʼS ;*kW%iٖsLJzŕϓmPEY ˚ir-F50H^ZnX==l3BM%dz#.w'dl=THK%P#hp- /ZuFI8<|7+鳣~P‘)k~j>fIK<[+!s?R5_L{,`h*Iw7T:B%2Tx䫽񺮯IY xDeBg$ m ,kmzfe WNJ Ff.cSΊ%P$f6[98Rz"9IUifeZ'q o !, *Rňpc7P6Y1L͜XeMfZKճ{>60I4Ӏz=#Xj )-B[ONS/^1QcVEj)H`\h%8B{ 7H+Y- ([xE.PbqJ{cª~d}DPa=:o㬋ɖ5bGn-b},EջdJRiaDnFZv;߼ :UHFJG?4:F8(}r GzN%OX>5CFsf<;Q/pK1XyI~۠%e,|ɶ[."5흉LUe6r< U_t8q;`J]Ki<pATD&fgR{aƨ5a9s\nkDK}{ۤ_e|svaD#`O+UfRvk*+5n2zuE8rg_ /!1z}6[SьB'۞zN3@pE1Cce?xL+&'>}~bt7 Oa_glV˵oq+pO  O Sc,\٘:|#irmR67錾..&@ ːeY F- ܘK ",J4A)2RXMAtbIWNlw)* `]y2 Uwjj3 LB6Y`VYŖBl2W“ >W>pr%{^v5qʄFVn#s]DFvdǩܥd'n |cK>tn/K: _OY3_%lfys~]`Z(Uw. >Tг`Y:$պֲwES)SdO[]2cVdUf`V5\`[Ջ% 3 _g*iF). ذM)gg*YS}@k:Ř K)B'-r)#8kžqv?5r Ѫ.…Ț9r/MvN<9(;tpD.RevNJVyN`W5jNrrAoF!?Fu ʽ W:`ƍ,ۨx׸GpK\XhVŬBI} >XӵU1`mUx"3qz%K(hz01&ϋql S,M^p!ÒⴍtVm1 ?c Ky8QNo'd}Kd5@y\ 38J:NC6L^fh体EMMvV?dSL ps*\+cTbu8&s*ZDZs0 ֪׼W5B)ő;32!Ѣb{@f4w'"{W#wVo Y23F㽚Q.<˾y(*Qb4Eb_`*:o ;`/Z)?-5^">OF=:QHd㨜ņu49K?yF)rOW7J&̂J*0FjXkgs4%JR?, &m6 VƏnޭPxG >KYSw~1''ٰ-q)]yڸ eM-nE{al# 1 ];P| RfjgrO#Q=nIIKzo+L#*'ʔuT_}?briOGiyQ0h)d[gQJ0B/}녟6"uXv06~{*D &bOF_`ѥ 8;u>A+#TsKxգ("=Խ*e 3(I;\ıٕ9ҥHjh- " ,8Di p2bX[xՔM1DN0#|AUUqJT%PlWlK;C!}{6UMo#PL?rQѱ(Kǁ =%a@` GN"+ u[͆AH:`&kj@ ~}0[hVR9N[`Q0QR0Hzٹ<|?l.kWRa(`!XBJCh5xjL>BEe{ iH[Kx,m# wQjF͏.枲\lG\C"Z8' ܙӆAtƪ> *W g]~RĉR" ?Nɍp[o!7oZH #bkPPݷơ~TL 1ѝQJՠȟqnCjmm.)簂&!I-NMMڒGPѕeū[bsCUuJfلjJZD3J8kXԧ6#5{RD&epRc-d2a_@KP즖YFcfΆ{;ׇ8BjuO'SdJYjՏC M>AĬU]oIGdxQX$4,@a'ghqz[aɈ) E-\M!t {d;V# wifB0-f=kϺB3wdqv2n Kprj 0׊2;ۭEL/*xn$J0C10T {^ 5_4[Nx$˝! YSET\M_|bC'сxvx%"SS["G(gcqj9Q/}x@k7{P: ̓fʥaA7VֆObnMkh沓}q808&;x!{'F*/{nl#U>m}/9儖ˤRǍJwz>L_ "y<\_Oқ5u*϶{#vM^Ӥ37P#o/2~Ɣ/`dǜ9ʿPhy&Y#vj(,J8..;XTOҠPN"Iiv|FPEq})n[ Kd#5Rwzz`'6\N/]RJ<0& :uvu!0E&y͏2//}̽XX(>J$wjB`NPr\~TUƹO*QZD3j xAu(X Vb i#ʿXg߰Xkhrϛ =WJK~J6Xxgx4XHH 09Apkpk. -Y$".:nI9/4hG 9?{*)3~} ^n'K e,wpw^Bn5t݄!3nj'hJ5^)G<ɄՁ7Gp*,Yq?;J&8A[ru&'osFhg;Hz'D% r(Q4a*ꊗj$bx* M TϮb{TwKNi&kkPiEdt7O|K+-U4W;Pq\8=^Կ]Lsr968U챋i\ a.G=,s&Z[.DFCf?06b JE7\$D'44xQG:V 7F&2>x^52Kl߸L #o S#ƗE㤜'D?@T}G\{%~;Fxqw%gHS0=׏j?2Y%w[ux2/=D<\7o:(tD\B5Tj#Iww^*˿2VB;!|A6<TЬO|cY$q()WasH@< "w)󮅎 I @eCs|Y冘%R|ry˄V<3Md~ThPFsu*1{bjŬ_lI>3NtQmV^E+Ev Xun!. E*mxc٧}qbMz` ЫU/IVUC#Qcף0t0ɼb /e=*G*F|k r& ȢP}LVϫ\7LNIE Htմ2 fE+Nh 023ǀ?|e԰udՏx g#xTl>_(GiHR&yigݞv\:2N|Z}Eŗ!\:Hp hyTtќU(^- I'c!oWsP5<2e | 0VE\Ѕ3[};Aܨ]N٧ٍnɓ6qgX#FRrPcp61#zR|Am80S_ Q[Y^|2Bu:+WQb͗Vwy|,6xtbR_d$!lZJwBg[K +~KYj(Gnu71_U[:X0,7p+~V:( w@RΟr)pxSPɵz ٛ<krUEb.iSQ kGpcKh*6"K(qkJo=lBx͓lFߘn_2w< \">y7[@*ibwj|:cvժ/*K5 60wFtٙ(SI|fX)I"_a=wYssO$9*Nis[ $ :_k1s7$슠9YPqFҎAsRWMDq]FZ\ʄ5ײ{-J+gWN=[Mb֣CaWPcor3g8ܶS!zJ*wF9% c.k~)R'md_-/-7O%HoW)[XzWh^~%Ch㦊GB! K{$h<1){W} M\'GX$͈h^Ӳ_BHHխON1(+q{:J`M:G/*vHSL@tkuKx9L_pp5Nܿoб)q ݉o1v:8V0vN ]у0\_Iq^OlZf% d?> 87Ff_]kvOI\ғ愷$ q#F5.\Z3=ah΄Q cU͏6p#aZZ\NB _~s{g[kk..0%I U)Xn ncSR̵Ǘ_zvU4_E{9B|yf| 7A)K8l@W/$s eQ Hq\U Mn>9IF*wEmheKHYDQɛЉ.ҿOٵȞ)Ӵ`j/>OJ\mM?wpF!#nfY;x7eM tvZ5y  TznY;R F>:_I],[4թ :$ E8 1ȁu4+ǾrPSw9ÉKݐgӈٯʋ"C/]ECC,?v(')Q bB&3 U`؂Bɑ b,>1GO8+VJvQo)AU4ݨ V8rML= E+RX#;&;,Rx̲NRudC)Kaת4Zu Baw.O\6ʥbHo6NhO&B1gy͉ɘ7KKv_y"ߎ^:q~e ZXVW2U?UʏNj27(ufV"Ng1m AkiX} ֡AF^46*8;eꀥ%$L~lDb2ܓt:4[M%k79W7xs+6f ÕÅOKBQYNBG墠j6`}3r!lTOFx ƓOL-i-hիѠjǧ!ˈXF:73^EMup7Haηb_B`,qmhrթwga/`FB)n<ϑ6{8r$)xQb& PӄĄ3TAɦK* U飐ʞ{Hԧ=P+<@߅~I0SFLˍǣnj֠!sc1qdL|d.,?v?c5_YKTXcM;+ lIhItn b;4A/Y+>?x6g5ZԖ$n  %hL)ՖjNd J~Y AͶ\/ImH j;peĶ@a1j2wf>7DkhGGަЩmgN(' q CkU_y"JBNb_fdAC6 B|̶ihNzN'״9ȭ}9X&)- R!9('L}%VrOI-GW(Gs@|k|Bưϓyq䕄}lЩǭHXﺅBwʵ;yET+- ]Wlw!oOX S\ed6wLĦg4sGW2=H)iJ %?J=vFJ zcN^Ѧ4{, lMS{Y1χI~r(Vl!k=x]a.y(EIdH,uya #%援 fVkgÞF=cFtǎγR?LM;,M-,#V]gQ jqfiKj&oָ:6D^7I 8Gh_oGM 7^jS_!7+$o7POK !yk*C;o|Ψ|zi)m=[\'MsTPgi#ҕʨrºsZKe1j9+B;[rD2HT"}Hxˮ CwBťe6pcU=I.mm㞱j݁|F([q߾idv?Jxp(9R|KV`e)& 4i%j k`޻hRDx !D,= 1SSKlڧl8~aJOFه6T+u7u/݆OmirȅScpR07KNN-}?ɃCĢ=ʛzu /[WtT;=.[Qqt-MS (\^ H'.f|um-P6ږCӾHS ݤez\eiKCZE-fYh)I*.]i t:V,JGЧ[iKCsSi|$OaWwYW]1s0*9"M- #ul7cs; Y`f9[Y-;&G=sV^'xq_~XbCC[)t|(4In4WǸЪg$I93t;w>qX_Z_*H!W2y_]#洱ڥ߄| Q$ɼRzKt4'kKyvJҘ|5!OH|jj%P(h}:Do@$PUr~ڭN۵[ya A5?D!-IjYG)E|r 9N9!Jc8ޢs,"#\y3s$WDD5hc spbF4eG3mS:}^ݸP"g^uXL%8j !GmyEw4Zbi҅г9>Ág@[6pP'h7[ܺsQ$ƏߨJSP-oBjN0On[;kCܗSfA|>g"ѷ{G-n]~akh& j`m :MQC)&Վd45􃎐;`|aw\0S(^Tre>bHs]XAl\Z GI] oe(/oOo9=LlěC+l;h&Kp- c0|3J*=U oa{nv"_B+%mWAViѰaZ4qEnv6:5VT1UpdoO%.x?IZN̳USf|ǣWZDW3w'CL_Ԑ8 MIii)mʣ_iSD7Dya{f2Lϒj͹8Oے׏8jtXff?=v%E`< ʍfI. Wz][wkI6|#HqhQ482 xDT6# er WU %غqIpZ!oSweҦ|nn9_q< l}+ܱQV^hnY$F NJg*6M]0l#Oa}^4\py'R¹nANUp"m ћc9ӡx̰%hH4. 9 3BsVOjZ.?sop$O?x?VȕF [6hLuDcZhs!^KE^#F;r?ƐpKZ8GǁV }z*?a@F:B'5}Vll|mӗpɨקSyT4Q\G+ Lp{ico}5Ȗ;tIzV; :lG1ԫ]ĻZLF˔ r=yX>l(S5\?bR[L<\-PϮq-_bC҉Ol/>}Nm8e8G;o}4&Fʦu4G%j/JmgӌC[@A ,7fjf]#'瀷S+RBEaNBp$ZR(P|پvxˆT9ȱbDcR,oeox5tP湽^va7r7`GN$EnɞKUH77qsOé g…#{e!'ƭ+je_C1`¢eWN9](?$ZP8Mח oٷ':˙dg8𣢑̵[2-LiZ;{ SlPSu>f.XR>=s ֞q\O΄ׂ2?OŜ362A:RL-|| dmZ ";\ٮ$b +f3C P1Y<௔f̏{ K2~$q6~MP(>(mߴQ9h_Q" Nn_ɘݷs#?Nj4'/f#E5豤fyy*}*:Er$.2cU#b{z"d@?o05w\GBι̿,$f8kk3iP6|"Da<.iGBAg3v:ybmVFMu=s!dSFՖH\}5x\]  ͜;,|ƴRYzCJpޛZ9e|v"`~4t*lEU{FTs~ c9-F Hz.EW2|͡bAsꬄmLgTkM {<.T!Zvn{Nx(3_.?` ni@"tv)c_6 >pp#aC9K~4bU4ZU3+_+Qp6CSJ}K;9*;+nl@3_S(DGN#(+<QDI)3Mc&*asUiĤ0FF# GЂM' Gۍ5*h%=A tv*<Mcu.Z3g@{N {0+3nþD>9c,,P^.)kBoP{*2Pm J˲4ĠbŐJ2@6󖳇i90 /xR9R}";5#;6F># m1@7!Wچ7I96rj9 jL"+މgᷠ߁BaKCQ|UǵABTYg.?dA˜G7h\$&7w^tc>+B-X,)nhKߜQTvM$4U#Eٌ&gUl\O㘳 n1\r2).^Ϟ([5[ph  WRQYQ=TfXOo-{::N^ dٸ7@̕x7`D]ߚ8o}Etq)ce۸U07\-~PISUSy< :/5g&|_BX˱UmvfDGc'plSkrx@T9p F7pIz(ȻDA*v&7S7ϛ!^½ǁb@ &WM LyhJD^-@#X#4hrJ`jG _9^K(CT\8wVfWoo;="c2DR25CgC7^.X jI=3V5d?Vd+iNL827ӴI0h"bTPǏ!Ȅ~l0*FiӢ>8it)P9] +В^wے*f\B?APT:$oe$"0sXRuɒ ^V7( +͠zcU |X¤!! kn*\;94ީסv)\i5Ob9ҚTIӾZʆ缄4.qӅE]^[)GC7M F=J9k4eC@ˣGi:A6UYL8zj*xzZ Qw|*w)97iK? yJpXtWA̪}? X![ BXO}2QW4I&\n[M3D] {ABHSERSt(,dV=9TF!seStBoO+N#tqʣI)ߒ0Ry`]9𢠁!Wx{p5[m{uq y IB݇$àTs7&SK,BI^9 T#od<v8m|)_݅a',*P ph9B- :L('^ 8ȡs%#9p4X).؅X9e~4-uNwAiKP4I3xVCq ){;e ƿT\Lk=0|tDk#~Gy+EOk@<@$ foAގ䭭 _\,NGiX@] JKˣV6b<~{ #E+f ԟqV3Ld13𝆱`6jss-s S`+Zy*UfA=W\.sVB-$M<,AQvXU-aKPIG(>^'rƤ%1BYCzgU٨42)g:ǐ $|Сcğ5M/j)=aBm_'E1Ka#d2,gSz.S`l9 3r5Ci8Rzl};C1Ɍ44=U.َSa`NEbY,c H yI6 LݸQSLYM5Rhg[r? ' 2BA/26 ͬ葳 'Z%>Ʀ]3DܝX+kBg>)/ M#!{;Ϊm淸e$=.Ts*d9h<&ݔw8-mȻQj<1BǮcdQg;N;څ\Q.hk_ McV{%-$=2q]D1 4ߜi.,<E`>QB_g"ks/{@pj.awoV ƈr&| UKcڷ3Fa9R `$Mܧf},P; &9d.f'Op*Gz7j8W/z: 2'tzW6ȴ8==n&42v—7dO(R7;:Bc ⶣ(iX*鱊T9wiY,`<f"FV7R15= gCD,fsQ7^d=mZRrЂx~ZtZ' -לvl&4P2O-yz%i>qۈ>Orݕ/K(&89*8~{虧էåG7ݯY^ :aBe6ZXUj r#c0C l["d"+Ѱ߾T[܊þֱXLXRع>YOgӸ?.F1r6q!6ccıPG"$vO<&9E%, JI" CN#$d2^H+oR>|. rp2H^~d"mqgס˶*AmTeWKY%0063pމ[R0$9ojC_98#܃x{$~29D` M ?9 30w6;"z"P/Ս>R"+iỉc`6?L7ǧ# hm"x2lBx(u7XXcxO-p!{@!;ʯ®b@Th8.ufB|@;*R~37XG5]=vZm;AaVmB}8-wE-@z74ɘXa5x{KzcH H: J;C ?p e Lc}øu]hH%~Q3 $n;~&N<71*, ^ y幝SjNdZDzd(rɚ TSN 9?L۱-"jB;.N|h8`UM{=$MYwnGP̃`rو jgM35Q5Uv( B󢼅'Cj͘KsgROB`rcZbeg>ˈf̊:P^{&@9:;((j&[6x?Ƭ"Ŧ&z%= _m^Tc}x ~zkk\'ɁWy64;ݐOsΠ]l@UW. R  ;Z (k$2p6$,; MiWsexЏXl-WЇ OVpszX%,i}Qs O)CL7b^7MY`FF\|2 _x(tf Kx @ C»J1b |l^1ߴ̈́R|" $|&eh^e\/b~ug18䍵ᒾ\kϯ mcj}u4}CϏg ^W|z"dS?g{z,~6<-=:8CY h= ?xRLK<81ϟr4w׎4KrmaD ZlܧRc(*PTGJ: ymD_{Xp , ԛyd-(S2]6|'q*DKʈVK=v Hc`4Ȫhp?h˥\gM#Y'ut{d msPCRPΐPQq3 dٜh&,4^S4H-9&ZzaVcdC[!h#R$ a__gUXfO$9[0>L`9*뎿UFR9r}bT Phx|R'*pIp,3}Ұ~J5qCzqy⠭hlOtr+sK`}Dm e) >|dnHH(HOYi)JNbJpJֳjZG81"&4a%UuǿW 3,W^]^kg$}Lo=ky$5CFE0+ɵRe8#tBQ%K߅X A>Z,~dM"):&4cef|>/U3%ѿxH/piӫYSë2FA8 C@Q:s&fPAVmZ|i|8V++uz2/G_oq;CFjڂJU*`h>Ϣ]D#L;Jm]L[R("w4 =vat,xhWļ?)C]ܶ34*#k` ߃xǁeA<ӗUNL0/o.U'iz/rH 7ѩGl颡x9$DȧE$mm՘+=ی\3SL˝LR|pZ e* )9)@0%Fx$']oˆZhJY6M;B1?W4fLHW+~4by9k_Q[W `}qak٤eL/oh A5& ym C擞?a9"f/?KW^ϸ&Ym;2dK|sv{X*v'Eο]7< BCf&?cg98x\pvȸWd3+^/qT+w5|xC _5'-.7 DyS5BYMh^Lh_%Oǡ$0=p c^* C?v6Ku ' nM .<&)W0oү-ݬm<8y@YdYI;+duzQivDD Z\-dX—;Hα'۴d|]Z?w;3'g s֙lpmŋ4Pn7enkGzp02 V}%3GYLtNXPTn&kQ>q 9/=O ݕ2ʔ"Kh&x-v=m>0O޼:@+tJIh}tYÚJ4D#H%䱍s<̚4(1T\j,μG¼("Vfr+\4mdi93z¡&qp+ ~1ȐC녲0[5s۩s6\PTE9BȤZ#G`cYC QN`xjXEM-M{KT &}5 gQA8xw8_Wz-^~ijIF8hO[MaiI-ڿ_g[j29$_ L8? NZ,D1ߊ y!<yM%N}=kfuH(pmB*"h. i"d$fT\V1U+kPyBg9v&]A+┊xȑQeAϱ ꮶH[fa'+:<'uh|?,jx\.TzXq0'Hݼ]T>7cog]\i+3=|ЌlulA/Rx܅n}ڳԃ? 7)P|&E?ڔF7:=xu4Q.Zd4Hޞˬ:0q2hi&ޥ$ =.!W֋[mIl6clj/$|ؾxP"[_VteO 7F)S\ǣwaYwV_D!;tWb)pL|nX7*,O꠵ ZșKOOEK.=~ql\6y2ϳ e0NS-gOO<{WBU@2Kd]Ao`ē%b [9@%""kyw"97wbY蛐{]v5ө8qMNO| .P " wa~J6(E Uk'fٍx+a"9jP}VD@pZ̉oaO EKU)xƛʌ]kvYIXoQ0,E]A1 ZypE_9v)*T28nЇ<0F<F0:]JmAs]טMLTi?C+?j򼃍$A4L$Ήݕ ~puo`6 TyW,^zqI?pr =(XLqs-PF,^y0:%4"B øsW"m\{9ƠRЮEXÂ4M١3so%(y±GK,f1–ܿ90@.KS5:ics,永߈f?_W*@.ʖCCCĶFF.,6ÐwtS!Q&e3.&8*j`zhG`,0/mr"4Tכ|x?W2y-2{ֻ߲{",j 2q[N{' U&_{)47 w-ＦTL[t@h}þfʹܒ 4 \76*Dq{jR 1xcy\-Tz9(ɭ~DQ-څ"X=؟15 _ TgSKqۡ~MҌZĺddsCo&)Y*5zw١ }X cv\-#D X]/NDlTf!5;?4\jp2 z Pg LPF,Svvu{r))HvluGxHy~|Ϝ!8 &'5UzLG-2Fl T1E'_9Z84|$ hA(I- 2<)^|d ߊ}^n|-Q1O\MgSkCl]y ] }/I p{dS`ZvW떡 Tj2(/%5T \_@~wUEE `Ӊ[8$5y7HJ-\vwBDov-5NUw{p>e"u.%~i*鈸Tqk|x![<ޠAG32Zkݱ1 i|GvkğSq&;MRА 跩 7p( ݧE =#TP  +r7tD(fls{ G2ſ7<wS ^{eN|Fỉn"!ph.VE,EHg^Q"]\}(=Y}f`B  KKvʇ:W}9;j۲<[e\!|ădG"]<~QI} ӈ& TwJ !BɷV~+0K63Щ~hT QH1P{\Q'm`9dsp\T&xtUdLo di6-&$Zx6|C7 KBOi@?'gqYݛM8G[y7lʥdշ12,Y|F!V՟#yZ]bi'x n`-zu,dscsSsaO5 ocиe)qǙ7 =Nc7Gh8n` Rmʗǘ!sEʭd@f0qym_ߕEYdY-f"'Kd%եX8|#J7*~P91`lY5e[V$쾉G͹tRvO )Hw3mZQym~r?]wjZY@)93 -p}ĆC#h9_S6ϿKCr[c30/꧒uvC˿J:)'0aE({ӈ˫u?݋Y 6gݽ\aY7yZgkⱤ`:bпUHƛ"/ !,cxܬ~6& uqom5"VSB_SUD9hkռqYT <%7<]}{i}$6?ch &%_:+\BO_0)zKPl[rBV,SPa b|aO?a ! ʷyp`[r3qe;,N"Q³5f 5X&B$(j1ra2Z*6'J sLS^z+WWQflLg>I@ 1>E4?B*Ig`^#1b#ZP1@mu爳Zƪ?zcc/4.OˋJ$ђ|T*Bo4q\&J n(2(9s en*A7VEB0Cg(}$eK+p2y]I/u@/h@kb MB~px_؀yIVKp4m.?#u){xM*b()[Amr=Mph!$]d]0m|$ UkK -eIm IB6#Nj^m?hHm᷉7ӱ'pTY↥$ew$$E=Z&?WX(ݺT%MT@$Rr@(GūI*Ke{xvIJbI g2cGwlE3W~ioX $5-6&٘Z/p,;NJsoXA=š'赛Ja xN/ގح./#p Prnʬq070 PIt|Q?@S kb=jm>Jh.թR#իb;j2OqkC7!}ʤ4{_VrGـgzş'1lRCyoIyĘ;wTf:BҠBO]N ʥC51:.HܚXj0wغX*B$, ˠ(gg|l yw|zHqmQG|\tᒒm(( l93;Ϻ{ݷp3 ԍau ̆0 +fIhp]3`ki˙^&Tph&w$*Dpl*bn`Xxno8\nu`|~FEP'Hݪt!r: (Z;U`8 H '}K_L vTBHai403d+WTŻ?@}VGw%r@2-suw`oL>EYމeCt98_O%NPOCN=yӬ`sujگ}i='F,P_I޵e+5x"}{(S9QN!GTACi*N3F1~urCg7F6"l? lMp`6Ym0LւoC,~ٱeٓ* \堊WVTkI 4@8;vyo wG;_ ?7n,a |qL M: NI|0C~AS̆ܖNS/?t:qZͱ-}0n?̴7CPMg ny'f$R={ oZ_5S҆RѸʝ,"kVyo&-K2?e1-rC NDWvսw_z o4EF[q: Nڷ`w,"rU#Cq?P%6fVR֭ IFFcI%JdN~)wywA:+]ƝH}NvYF@U|^?RD 0<C4{a6"ͬ_ˇY02ϖ(ۨ%_"?uv]s(>>s,:V.}-} ^$" *1];XwH'bh)ҋ4&_Λfe)sG_l!prdۈ%8NQt{2jƳ ]z]FDiY6T75i*V$~v^3o6'NX 1fъvާ-AA^&b,ف]/yOxp#B"9<_KCR p hq5\gPnLj#gN3g 89]"d;xc77ͣ =l}][WיּJ{']n 9lx&' Q<^ hrjG!BC~:$QLE Lc Q!߄6^:RXVb+ Q3v]dj`x_lX&kB>D.8_+QUqp>s5?@J"ޜ/.]Դ_6(yH%1/Ƀs{E>K _"{źR2)HGr;SvHb8ô tO@]k^Jn#^N)TTm,d)f9+8 T]anIR(f 9{gxnVKK4u WY`k|o$ %|7m=Z՘yҥߜ#hy,ڞ[ј?ox5A"I‘QzU*ǰoJVmǠw(.@S6XOX$N;W]AۛT"Cdo>9y9dՑՇ 8z[h80rǴQعIZGZg1f%Zs{9$U6(PR#9+8Y"kaߨW$ T+ɋX\Jluu#$@s {%Q@ܠ>K1@0罪:8^asB˒t[22|̡ճر[aw!J*nzc@(w⨀5Ǟ_ASy 3(@.Ǧl4& yj_OJw ]I8 Z>hBm hDsogKh>Sxa娄țoG-sJbCxe^">v5hGd0Ph\McX䋎@Kh,#F/8 efi Jt6tMkNIn!m7"[ErQJ2HS[l2T(DݠקR3DW_ɧ{{KFrl͍BL%Вbx=j px.2"D+JHM%WJ7Ie; ;FKџ_*^MD, ڤWynXEn/ޮ;3t1~Im:/!OZ4 wZ3E;=:X[ Kz) SV{L)j;_F):~J fvB ǑtW#G:DQM4+sC <_ņs@ʙx*xT%5KIn` ħr{461E o]Jq5 5Bnj5[eqo(-6CoL g=Vd/; 3TO NcL)A8&t*#=))||8 ٿ=j۽Ξn}ҝr*i6c_X6TJEs(Bަ?@2]8dVj)1J'fa>Ird9@}%`dQ0ъCX-wPsdi|<" Kcl6* ; uD~p`uNg_b7h@ˉ8:$!luS6,mVUkt$ v$7 5')F!S<}_8zQ |G'F6?E3Y0B=wlJ)UtųQ:1PW"}>𓰍P&0Vfulm81@Q[Gu[F&-7=ί @L&p<338E[BJ3󚈳3Hz9Z̽/h~k|Fq4Q\ Q©mld\]2SHlC6;֝o$z1P0ٓ1םPjvP#% y4֗%A˜dȌ^HV$fB)S4%#-PegH‚\>IG gL]}ၟ/ɵ:i1WooNwɨWSlwֶݯ''bg*C؈>_qv2G"0diHŘ^֞Wv{!RaYxtj hgsMnBN3390!2w'9X=Sg[5ן!4lEuSZ}eao,4VJ2n%kS-)7Fyt>j+ =S.O9n#O!x%mTYNR{S +r~ Fȶ>7H<,fKn/z~止>-ugmנQ''TAϽQYakÇ& T =WA%OFZ`\ܾVt%Xg6_[V])U2Cʌ"}]vvHpM!$>A:2k%8(>IȆ7VׁUyoic:۷>tN9Xî($bwdAu9@'3*q]&{خd(Ʒ3E "'lW")F~NP,M9f 6F/ᛑVfΧn0U]M;\Pq axq&*A? MܼKW{HrQMцMc`Ww+tn_T"mgd)S_jz<m'>g}>ȧjףcm\*ӑ5 ԧvsln9Ux?ZgpQ625)ֹai?.Rtg+{z#‹ IrW^R"Đf%P*-}ȷXqdyKx^ɻHY#S4KH Uɛ2ZH^R qbJ2iJWG+wTwժ6n࿑ܾ="Nv-  XCmZ5KzP(1Y-mؓ+/K691|w")79I5oJ7v|LP ˼!|Di:q&Ee4Xr:t؀v3>A/Ppw>l ¢+XnzfDN@A% :KwV;otnO gADd)$*WFӜGFȇOٟЎS_EPN.frbѩɑVxoVQ',Gp,E)diTl[U/3*"I߳9קbT!HҊsƠ˧+j*]"gZ'tIѕY|!Տ+Ccz̮zBh@,CXxRm,eLoq_e *$vWpַj61APƔ,| øKe"VuTiR/FVݝx&b~{n?k}Fӫ~!4t4ֺeÍJ,WB@N2 #ElTQqf |vi') fᡩk[[eTex_ԁ6N #!! d}ERZKLr|_0PR`5LL9?Th l/x]X\ì-a5w1c5]/s6e<-g2PX6r4'"_u%籝no>~#VT kjµiCj\-]mi s$TCnLǃS\ֈ]xTm.y*ׁ[^NjA?RnY"6fUAk}rs5ݽp&@g5_Cgpʰ@46Ce<>Ҋ*-T"ї2x ' x(׌XmZvjQ n.4^>H})R;D|ǃbFA)I@xZBmY[P /+EH}g`62 #D05e5sB-c%Zɯ?9Oy܎ŕcN>=$Ա2bsm72&,Y6re%6}QE JFH_GOjTMRij$?ƨA6c1I=BO(Kz$rC==V<+3Ay_d:3>h5$e$얳|nۯ~hz±y=噭wNqҗ"lJ_a@cVF~\z'4jU e3%:S܂=3A)yF5B)lH[gW |@b릍\?ψ&=A ?[@p*Oj{ׅ^9h Hp&*GH!5\ L~Pp1%d =& 9>Au7 V F;_d-P.@Aq@sk7 7rɽG{d)*+~4NtER{Vj8JoUđu-ׂ=DX尐JM*śx%EnK 7 e*F W`acBK9|fE>m +M[ 7H-Mu Y1F`s3Q;]p NM^ec(7U()\U-N!iUj' Dd8/7"įqm:S8^r~_OBGvΥ|ݕJ6O2Gذ'aO8x/s(n_&t>~ #\R7 vE}͕|dWzȨhOЭCJFWaZ(_=Uy;ðqv}bi5[ZIۃ!YM'{>`VmU }xPF|P8wM 2VT\ĺ"z? Y~61t;nlӏE0܎U ^#n\^BSv<` SYfbw_^pRsO ȋXJw̍bF1UfomcF5k>H5Π\S?' DAׇ;j =;F=4=EL/:fj}Π}ʰoId\avYm=kˍ"Q޳I6x1Ӿw<}G6[+a&td?ċ$vd TA4a+]4Xm/ 4zݱN="kRi"Ϡ3#[M{PCxcoS}&`t@EgJ} 7_`ǟt=5imyྱÓQ@yܪ%{6]c6TKBN"au"fWd1fӋ- G~9-^c"Zf 14yKaUv}&:²arB.$3$6Fl.qe~&n^%)C,JC27QfRJ}_,$7}bKtjG 7OBXθ_ol2jz]T(9BJqZI@Z>S63;AH`_[Q.itqRS ) z8uk++b+|cuӃA9ZhEde~-e,:^Xd X:?Tj3iM8&`粬iC F74^ kUՀMNܦ'Yqc7IzdDzgC $MĀ+ ".{~C܏!wSV)nW핏l/[XWVnOan"2FgQEJC)f:?fok yL iؗZwC :}~ Y55ޡ1N!yߥRH5Bβ51koL7oMI"tA+f62@DWCශߐJD 4T{klp@^ڸ$8ElJT=mcu)ܿ7lI^鵮ed<` Σ>3GG8!/Hׯc& =n@?C2jGqŵ»H+= c<P^yFz`yK)bGHS7o9v5rH sJfCD"$V? ]J$aV-t$ϱHeݝQ=]L\KVQ-}Nnomr t4N~q7˱õn#!{Ih7:y0^U ,y4бɶl] x-b!PPu+OfC૕ \N&\Q%GB:{uC^>IA =Ooșb4Mr:_ͅQI'U!st(GGko ~CqH9p\.zzdDX$w UjrTB$>L?Z$7"s1?.^zDVL~!%<ΒAI8l`ڔ"tF%<7wG.EKNG ܦ*695}p)z)Q .Pۦ`aQ-1ӹsP.1_~+1ZUqLV BՠR6 C,'a['2jui(hSO|S[]ʙ3-p_N3v7Nb]]Ʊ.XΘA"v};JTOXpy>Ϋ%j)?LM^w#q! [JGQvո 6_V+Ffs 8VP߉RU;SV!Pr|.Ul #s͈lSd&y~dԝQ)L{ozQM=yJ -0]y8В!VSGgzLD)~A34~V. حByM~q?U.s/Qg_Qp5)7/1t1!k! W;KمX|fuPa/%=½8/Ϣ=)cqt—-ʽ;+ɂw½*ޡKmNhkj?l%DB/CB ,ɻn';o0h@ѯ/ r扸cӅ*S܂iC_>T!`HvC<{lsgg蜚e+]sE$ϴ K?XZSfzB`_:9|(~8狰Qb,ȷ{Zƺ$qpĥ 7"<ܶ:Yُ6WXJECVo/~NpW8aMYSذCTdBTy9n:Th&~ƴe]noj֚|lH0첗ʀ^)bd|`Ή͟,9ap4 D4вƟÎzB=YZ?WW&Ych@ a)Ѳ(k:;O艍 46Kn-ȒMi#g VgOwXwC-OL[yRvs,Z q ZzJh9ͭiror5zf'EؙofƸg1*sΙ~]VSq8L%HJțkhW/5Cmy{M&78X |QHN!!2Ѥ>X=f9z2[(++e.#iMtd4ds3o'܌-NqPT䙩sfΠr4A]Wk1FC0@賽ڳ ~yw?r&/MJדVSGw/7șS&ɽS!N,b:\v;!qRz9n>J({ϖg4*ˎVJ;6G̪/:AS#fGUF'F6t)RZu˩xi1Rl^IVai8H)} j@c>ZmnPR,}A vXcHgtB2yzHn-&sF!gZa}7DBP-n/2@Vce<+}~( F,-Q9 dke/%U#-$*KngH3wCOY43lxD8P!M}vHoIt {،\ƈndĄHJ8%JPq@fbUaGl, +bM+VwJ֧8O91ץWڅƬmw m?4tȕ?aۺ{HPd?ݧt[}@QoAH{wm){wDX ))G"8߈Py&H]~,`DVO񦨾3; q]P{,!j5G?AӣNiujo!gT*odo&Qy\SgqؖP;%zVОH\H1hGou麣fE _RgvhT{xLCD2] Dpzswu9X4YEVsٮBH3!0&*, >&/Cdpv$&l%Z5^ A/T؈5PZ7g7Q]O[XV]Hg1< 08jvqu>|*k.~ƳJ펒oOy>__7+0؋Ɛ ƌ%t]<ϝd5 æmAw*g>pU_1 B%@ru Lp,Yn^Yd >XbBoƲ}pwj*~&2dy_dՐs}@(z>^ )¾ãxٙ) ,S3 |dj+9K$t/OC8t.+ D)p`ߓ56- %ϥӼn]317L*-pc6ѬlIƉ>-᫷W%v޷q8nល; ꈟ1T"4l n$Tl#]H sZyg3e(XC OQUꨰwd=^+T S{xCIδlV=ȶ! Z9"wu}QMO}R 11Cqp*!f_"j)I!z;![QWY>~hϛcVfx'!#-H/8$Ƽm`LdHD]*r 4[X lsewL]9xIvtjGJ7 YH7#3z(s tMB#)nr6s D=MK?O3bͷzT:/lH@U2^3-H!|2mZDil8)\$3ө5VlnU@楀h$a8qt_5;OC5ܚS5"Ṿv ٿ0:/ A#y nѱ rL-#v;^8ul#./BڞtL/b+Pw=G9vhZx&CABc"10 g:wq؇IAC$^6Z'ذ*Pb9b@3 Hu_[ 8<@N 8)c,I:Tic3Z?!3y7)uLiËjT^(=;^lH>>1}u'=_#Mc~.> Vc@{a\\h'Eg Cxŭ 8S}ȁdRz1]~cZ9V|kPPzya"vd? &P$,f+ţD B1wFAK=\( hq7S\Uֵ+oa IԊA9 L4)HcVm6'IHCUcBn4 zbؿaU쥄nfV'퐡-ur2jftF_Ftmn"Kݢ5L1ǘC@9gz_le?#=NZ3a`7%c=O-6mT5/ vxѐB|C~wq|57/Mn)O?jxmT [Z141(}_tG|eGg5?i"YE0Sy'Tpl$ /wcЙJ1@Q}0ej& )J*@QX639q@sKBm53Q,"s-.-6wg1 I_X( ӟ;f#h8o`>] ̛бi֟u99^9$6{!=*Y]}ǘxV6_뷙fe%imktiBmM*r0/zPf;8ffCF"H ()S4aBa|a\hĮ|ʐ"e(TѸmr Fхamփ.i-aRQCĉWvڼpYe~%|ݑj&qL"1GGdN1ت(ńʦIM;C,Uuo)䫬3۷E 1ih# nKPƧrcVќD?DŽaP5C፣i`ϟi/@+S߽HTce1^#]Y+#/:,-pz"$$ƠHWXD~*jZ-;6EiuC01H=﯍=/hC (+{BLSF:ΤzNI:J;=ei@XyvɶOf3+LxaX,SGh{DLt%O"Ńsm3L#0,D7Fٕg_DQ:񘥝 #)1jcn4{$ 0s!K*f`5'ϴ 6<$q̩ރe 5)xy偠. dk8Xk6B!hcmљqK;e-&=xӑh(M(b+ᰑW g= {aĜ- d HY ދ+IdM^KloLHM[ӄ=EeVIR}.I@05YIoq8UlW"4='P,aα+wҗ h`uN I >Iv@:8,XA166H$1UxγxFeBYU=Η S߅FvBj3;H(ʢT"Cw=SmDjh m~ M-5 Ggr"99N9-w2㝹2cRQb1Vܜ륻)70] ~p_ y[^|tɩ|IUf42۳ͬVGl6m;?m%+V.q[GNM>M؆{u$WLϾ[&C(_ mHD;VJmÁ(#k9L3762gl1jT}Cݏ_ Jd" GaDNH,[\n&LǵZbA[a#BqIu"R9l'F`cB u@gp5wpn`1Vz)ķ507GԔ$znj!j0;3̀x,-!p T?> Ƀ$CK::זYhǘ|Jzۂ>dpjX)ģ򻦙2ptHlsu^d.}=rgB2;:!@ъ4 ҚQv Wt4ke!lla@6/k4f)+R/`iƈHoY#o?6yUE?s(STw,S \1cpsZ)nH:ZNk{Il={XަCȱb0ӐKteE[&-OY1,6߅A^ٜ*t>kc=.Ϣo&mkf-.@| c#-*?˦5Я]wEHŧtSt>q`Des0ڊvQC ab5?͌QtBuhwg ,r7RXwխ\h[,qo:L =px>[Ȇ.@j [rnӈGF@`*q,I3q3$G$uЮF\o @@Z}ДF1hނ=/y =`H-T^OMΈerN(kEz.yE-:c~ǐid]" ٳ?(۴}7VJ5<t7;%.>7.p\B9>)oqszpYI|2E?}@B|{S0IN)-`OVب,ڎ| GXpwØ ΡJ!պ2y춭n<7VU) {ӭoXVT펌tNBh :ƪË$Ӏ~p{V۽o LMKP_ I&#YZ6[Ku+,&b?+ҡRN`$ǚ ^2>c&BPA>K"ZbZm{Yд6lb~148X.3m9:; 8zm̹,9{ [E0޽`7wN=na):򴲳{pMF "n):]wJk7g9OTp=>]͛5 KRo \>lZ ;n+QUHu+Bռ dRjXy7e= )B&5Pqo7U hT*,$w])G'~:^@@s[6ɩ>'ϏB8Q8_hܦJX: Y>vd%,7gjK!q4(j99c$k$( ȅY^q='Y+7qo/D8Gropn[M< *\P۷ 5LQO%ou+7PN ƿ_\i\vy M4 7e0U`rZ]aR ,\aTmZrK.R $sAʚHk6汽z%G>M|W˵|5Dbj-xd+óIG} ݳ)(9ETs^Nflh) 7$|3KerZ8͇ܣc@? %.Æ+.5>3cbM,o}ugKLD8wwShŠ衲jInd ?m4W>l~[yJ3Q^" wԺAhKP/N8дɱ#b+3}Gqg&yk_?'Sp Gn`d4f;JC78(\BA5 R VmqLTJN5oS#%oUW4nV& %i("v !Ђ\ ,d[w9gu#7T8ӏ,X|C>.fKW LZޅe.zN{S!GS_輪]-I򣧪Kh"jH 01YՅCPX<&yprCFhEȾ^f11&f(yo_Xn-YSCӗt5j!$ rO'/=GCZo%KfXٝ1#^I32Uf7!R2ڭ]~%:{Y"CaO Ok=d&E+!~.kq@<羯3[4.O,Ly,>4-iPV:3L[[2Pm1=k#2*S3}?r1SJ"& O:yX//FWA ٘OL~HRy-D|Shͱ Yu n8<`,)d5ΗHU"IAWQ{Gs50ʠ?e%X[؉)OʾskiCjD!z ;f=)(\wԘc1" ֪?=\p3h{;J̗vpExK _`oǔ_%/f12tI.qg`|9Rb>7 l*afop92h% u΅Um%!ةԐ](ZC1ŎD[v76J/C)4:/K| LH ,il0Fg;KnFJ,M;Q^FC\ (0KeS$V%g|ܠ"I[}S1UH꣮<~ HF%0ϐ9*b2V`Y_o1iȝۻ qQm>B?S5& >ɣp ;iBIwgRv[lm}K/"LF]$U剭#,@ r 4RH L1Bƚ{{ÁjK7~*bZ!4ݷrTۓJvd-V)EQg)=nMkgv.av`FBHꣃgr=4}NK 6Z*O9rM6ٕ BGѬz!xzchar Lb<dBյjUrzDgAr9 􎵶l)EPAۣbX J3Bn8Sz*~H$H JryϹD#"ctM7e;>CW@gW[f_Ѐsħ*'UCqhq b.8>ixv%sƚ' 0* lltWŃN]|}UЂ죅_ [3TۇG[k[e ^ L=tc@ECb&Ư# "D"OY1 1ڌc%9xT3JDztUt| >,}{͒z$Q#e_5x>i*LEq 5^ R)9gzDDgrQj}uhB?ht}It垥ArջwITS-[w <~2[9=n]k˭&GPYn:>sF_<] 2?C6n;>uv5 g#KV3r=l69{S"-F+_{ӧ_;x4O]KDvVƽ|EkwdWF!.a)pJ}=Ho݈C/댞ܣȁpiΛƀd%Ү ,č*CX得)~|'kB.ڃd$X}1>fU!;.}/=˒D@/? 1Z ^eo0uW!ˮnCn͖OQȶdW4sՇd ,Dc9}w(#ʆp)+w+C.Y629"3ڣC`gq"CR^b\ihқ˟TqE"#,!zT |?BeR۶;//L;hV~Ǐ΢d7aV8!DjV|5z[We9~4 Q>(;lN:H4,a̅$D=Q+!U{l\*bS@CnMÞzUYX̅AΰeG~l=e-.0Ǚܐ7ڇQHf ~U/_L\!A 0\t~aXz2U4Hk2#zge 0 dx+݂D͞s;z\jĚhyZHd wpj J=:bԽxz]npŅq[dy8' 0_ؔQ3w"gNK #@Nƨ-!wY^+Zrs/-Qe*d0ędhl] V̏"?`V]UZ5G{xhKʤs`ݴ( GxTb$Utq8Ut/^&/~{c)ӤbE8*ٮhn!0]k?Eip;&)#~ {6ր r qc.o󾋩=0k͘>XD ʾXc&UcF`0Llpw\ylWJچ7('EP?9?2d.sArF_Vl=/҉^n66z#6@RqFڋ˥\?rz1w*NGrS3!] 08OnBJ _lP^֡`Z\$@8D^Z =N}'/}=o}'op2P{ZebTC H tΧlTudͱ!o Au*2+ۧ}NLDk tD-2[<\wW J*iO. 6.Ll"VMcK06S!]Ճ`"$NlN;^†DD*]фG OG-2̳u`N#Y'aa2Ģ]_6ն) [c!(׶UDnbىGX'I>1oڼѭ9%9GE[`2~{~!rBw$%}d1lD/Ҩ`GB3i*uwGÏ^( E??s~jx!Zn}m%"IXR2,ݷi@2)>Spx'1$OYr 0яI}4ny@gdkjd=Y'_G >aK?Ш}nnl2lyn nda%|5VKmJOm .CCXEA?M'8pSfa<)S/ "P8?SgDȌ N3]Vh}(V++!v'1]pT^Ufy&8]m'{gǹŞo45BiUV7o˶[Ķ>w7davuq6ĕ&j5R\Q>*UU H:@PLU`1c+vzW(S;oz0sd}`x€{{5-7wk YVZk#]ӥfd+dh鲝H򟷍b%l$C8D|2x:,ա;|Ä ZX%VO(]=I豎$$ehAO]* ŔMNUB)%2-C>l޻8؋Nb:P;H@ؐB8fk2\:T5ճ[3 <ٓD*s5(wN:`K<-@ D-Vhқ9ݣ`jVg܌{6杆S]?$XzV0dn1DA- !7SK|w*;5u?!HŊ)\;;$:ݿn=SRq B\xP'c7sYD>wǞy9pO1lCE3ʱKwQwGK Q-N`NLODhcP3 ΧYQIxPm(/hi,qVZ/v$#2ʮmr"M8 FbMKsWO0fyF7GcW4;F9w;AU իbd3ףPIzw2.yuKJ%2yJ^Bo8sfه;Nlی{b]mMք Ah3zB3´(z\fwkR8΋5:]ZRyc4Lq/%P15H缣dl ɷC0@H߼mN7/wmv=vi7vNH#CKve:)mVy)>T0O@m#Y1Q1` PS넂 ȓ{b-Ѫzl0__V' $f9Fdao'KtU^/S9V5\!HB!#}vZʱy Ɠm`~IJUlveCI %\e c@NFKy*Jh.:.4qy}%B~d&nh0/ &C@X}X%Ń\Ylrn}þȚ:XJ1&\g]&J ;CEd0#~ R~eX..M<-z6R2b ÊPA]H}Պ@{O=8J&?K=970&)vj; ./\h^3zfdxWӤS>)-ND<\{]IF-t*SQzwON!Ihu['7!>fXDw›uL\ĺ c4f&bDꑡi}̟ۘSsp)0d`D暴*H'T1p~2:5;#odzJKU3}g_-c&j~T/ n{Bq}/^9`yv_nz{\t}5HjĊȏ} b[emd5}_m,gn$$[$%Fh˴O`Dl<֊}nRc GDU/H2_/'dgP4/gPHGfwZJP\~n 0<UäLup92DċŬ"Yzk(!\Ih\]vjD̋p\7>>] _}y=|0?w7Db2y e p<ۚ3(HhUTS2/_L[g.`"TP1GxX4u ]|e@c=/y y(jX{w)XU g^[EcfR' :a v+^k3 M?ߒ_ZLY7Bkf9Jzt+9B Υ/jp&!cbdU"Y N,Cz95iiq VHMiL=Sh#`(8jKo6%xZAC!E+Flu+Z=L`I^3N hJHd N]TGڡ0q/q}J.+@GJl6_M!*~z<ʄ \l] h::/W鼚3>amˈB[!LnѸ8q ʊTvF\RIacXg@CKc9 /+a!F@< JH!ǵ1<ލʭw۟aphvqyn@9]6[)_u"_Ρk/3k Xd "w3 $"e'arpFtõ0Lպ"ڍ 7K #%\:j^lr7THdi_+[Y`ޤkYv)`3#r ncSƐdY.q|p< ni#Of1btJPP}X+t8P=\ZAG>'YGfG4l{oqF  #`ej+^N797ҳ5܌6GӨ"\3;fDBgUʟ?޳R7KM\PIs&*@#jEN'%buxL ˾F\К7@YtM䳔겟[.:0jGA,?3T0qpA_ױ|^5G:0icoӄBQr Ii6}DSSnSIAfāSB[Bl'@O[8eiuubTCL_"T+!=sA@C4z`7WKA [`VkOV(rН{`Yt&]Eiݐٯp4`K*>a&~vy' [0JJ'|!N=~d U'XW=LE!_}''(4}LJLGR$ `![sr(Mt#{I ܑ5%.\~3Џۛ)xeߥ@#Gϙ/uw=iÕ?u{LUQa§ѵ&؃h̖Kv$W%oV4wpDNyL7Y:pװ,RMt v>6[ɤ_*=ff: t` σVߛR@R͡pKPF-MG}D0MJf|1 gHvD"wqYK{Vܜe)J|pi7P쯘 +Rw;&PyXalNl@[Hb,^E "yt|],;\9_4e ;aΐ(f~sD\[+dt+qLEdP<<:&#ù&CO'pDgޮkPV~t֥aBuyIg.J4)d<+P`lYGa/mW uat:,wo*%xRb`@0ք,jVBA-!X_g+V^bVRd"{H_l²i+B݌qo{1HM͂+XJ@t{2b n>łEq7R;RX *W Ά|9еXEG@ڔJ8mn4&8SoԤ`.sUN3:HqH{ʟ[  c|5iTt_9΄F=DU}!Zޕd_0HFԫL ܈IO̲ŀQB$B|>\K_)~X9X&k~ ?2nt!Uci56Ie%S8oC)2z`.b}•Ð3 !B0p=iӄps{ w8hr~#=',NGzF( c u&jŝb#K$!.?CxKk(xF- iaEZ;KeV ԱNi\EZP&M 8i3:mq:eI=|`o6T}U0odߥz\az8u!F@`en KIу~z WfNE3g2eň QuW]jƎ0qN[2תQ$ӈoXD w&bg)Om2=40B̊ 7s{CbM Nzʛ6Wn(7e{ ]s~O`}BL{ҙ PiDֹ^:/5p\`ݏ˫/r 'pzF'f}bın2bs)8,?wo1iTC$FrVeg~4*޸&/K[c'ob~L$櫩 ,* ~{g..铊šNcowقR*.°ȏ3-%OFZzz=-F}s,:V2Den|^%v&ݲR~bfv0.7Qw-_]{VG}3L\ L"JUN +gҁbV2kW=R.dw<11DXG2ҝYHĴdo:ue-툏q>U\FYy*ݩ'MPD|WTIL1p+fy7rDB+ww,Ep;U/cwQa m0_翈h%M4g'lo6_l_){mvu\Đһ3;H$Jdt/l%Dv@ T8T%MD(/`(yw3 lKyV'UdQN\ܿέbJ֮y*ɶpF<7jݮNGYoFt2잪u &cDž/i_I40iQyChKWl4@_VNYفʉNN9 NaQ%h`+ XU8 FbF7(u@ `aQuq4O+ŹGœ2:Dyvz R+G')'V @aQ# 4+ 3r/GhR܎5 Zu&Kwū3ESTڔD:7o>U2a٪g;,X`97\Ca4]w:!ܓ*kw. 4rXgO(y|x"aEv:v&@Ai}G}֏8ϦdtZYa 5} Ô) ֯Pϱ %(Gn`ZIb ^cĊIBI3'-^.RmWS1Q~1\wSЏOдBJ7HLdj%0qS ǹJGd)% ?i=P*TiJ{kRtUXo5]N euj$ȪoDш#[H.'c|+A*Er&~4iJ!bVLk|ϓ>7$;ܴ>e{^Ls'F{s9u1E/jۃݷ)?d64 O(-O#3=Ʊ E˓\j wkzf茊nĂ۔*x0Vh{y9Y 9_Wd 2Ԙϝ-|*Ɓicԅ*=좪$3A:8`1>;ޤe]Ds4ImXh9-d;Dn9C먵S96X:?MUOQspgAj4@ OǞ*z@Fr16&2J'*i`EJŽ%`^m\_~L<lsI9s˜C^%wߦ όoT2Haf5ouXo"xVvWs֮IԾ+9c/>Ii3Z:P:?x:5F.|KUB]"$-9O0<%G#D-iDꬁ.%_'BOȳ)LPjjsFU^nr%Z\~`)Q^CH;&;Jdiph{9IIsėH bj5.<W6c5 MixFA.T¶>}ȩZ?u_hrWr1`]X}>%\myg$WD.#j=͌(Pp[Țw&(:DmP0; >[o@ yj9hEﳍ^ƪT$vU߸wKVP4EU/c [k bLėL zcW}75@WV=;uJpy,LI5`_Z߼#HKT$^a7"ʉ},, 6y t寤2G,)=^f׉.n!82'@}FQm~P+%q'im%:Ԭ-#BxH@OBH6e5sBhtu*qiKllq1מ"FMȲ=nZoa+fa3"⯩ɱG%: QUo=JyZ:N&cEs]Q CKeȑcB 7κeDs`kч_B8mg^/Gx0Bm)9dɷ (;t*uX1;Ӫ`хbҚOX+HIΞaш.y=-en}ӷX}|<'2 #ר=4lҞ C9a-lU%ht( ig]pim3x] )-ų@L%H2 psV>b4rZ"d_a53A+ߣjHgLL]*ړFz䙻ɸsnSAN ] 9lס|jb0A!}gPN7E&[X6w,%|´ nɞP*ʾOyTCS>e> -vG cGvkgyfnѨCUZ+q*NؖAO'INK$C?MF}?c ?bC'w+pWNS`%% }G\q߱<*h M-Z ׬*-1J vq' .2;EMjwy KrcQaoz(VSO 3ޫ߹ {"fSQedj jq[+ x㇘.xw/L33|Æ @s/NwGC0!;H_*Zݡ $ʖ QQ:+j+Hٮ Xl E'ZqW%V8S,тDЙXWIݓ>!3A#+P"€VxAh*i yRX5PCe#H/ЮU Q>yvXdh[3U+iwC{:&;^T4!ȁZZ/ q*Ej2U:N;@dtca0rի~awمt*P\$`T_nm.~#gx?$[q4d8}NڼA$ wmיiʝҩHPg,_0C,a2]9-B 81SRx~h6̚5^+g73ި]0Z+w@@̭)yڀQI u,gȤ8l+—{s SMR1|2tb:%ΞT`L5K;ۡZ\?? l!,Om>GÅ /Kk-4$ yjft ݗrbYfѨ{u/,SltJ3X7 } c ~#@MaxP5uYc>_ Z]GYG]2?}$*ZΞSLpeW rD7-!.k2 [MtLQ"GҊ@S+Pee)>) w== 7Wu_wÑsv׼/"@A5E\vGSEYoS.+0AkEA_ inSnğtQ _aƱ&^^sP)!VЅE_l\'?W'x,ʃmhx›=G9k&g>&#%J=_&,opcl. =Wi"UݷP4]gvMl9B*#Q(A3b1O{O|,Кd`F 竎r7(`F}M ^0?vxro3XFzp:5lWq&Yn?8oq$=(^^o~*TO.IqiƊ,Zi=^1VE:Kf>: kNJ[q!JeU2Nv^|7qN`!qOQdO}X'3d8Oc:\`+{pP]צG3}pҼ!߶ [ g(}IՓL@?geSPO,\݌XT}G*4.yIݶԬvԦ>DO 0aOxu*(VPh!dlzRA"bw`@]Rjkk=3 !=Nejl*B#4u O@^PgP\^ .1؉׉# 6"KMQ.x0E!&m*k4_{5x%88ϗ{xR A#wn7\j߫ Q\v;g~h1^͊텁 Xn*cL3~7 F+,f IXiYnQ2~HXj,UqtjV3ascflcż[g-fa?*!Q ! faTV]?Ĵ*ng\Fg gb(S=lbbkl] ;E͵9UĨC %@IWO׷Akzl.B|缑c(B;sp蛵w6-\PXh.`n_WrYY7'%̫!|ƞ9.?Z9JY)qgRbе!- $:~L7*>iQp섙`YJNe:ɟ,s}:hz?omF5l׃ jYK0Oo>k&Dt, ZENnZĨvkZGE/[D3ٰ'7~חvxYYW{jCn a*vu%@>VAHKCi @%D{%-=mxLN kus.1b`~}( O itmTQYJP:_"XJ gþpo8Jy[l0h8eG!(SIa "uvL$Y{+UUN^,)qȠt{n/ 7+ص fgsquIl{ W|0㳛JK ?ʕ&&~.k~#S{ HQHN8Rqxv0A7gv&I+"@ߡ' A1=uKP~3YbVHzLxۑzQa2NX8f'Ê@)ǁ3&P]R3" d:l]wmW&|$Z# iP,L%YA|XӗHO68@gE/o/*&{1f05f=pؔsf!cv3/Du30Y߶M:0sx$MNJ*w}Y+KK12( T@[2B)(WYqG0dDS؀iQZÇCĝ\JK jː;llE3Pu tP[2^a`;rz1fϩ5Ʃ*Tj=*.T7,貳Qe"0!@c2BzjJwQ;kt,GƈEpQPRXL"qUQJpbp,ORs!p>p/$9^Lbȱ/'"^GOoZ0ܙ{#} mO!>,t_S*"1ب ݈ABhAcalJUVP<׷^]WÝ;w#Uխf Lj˂p,P@|zAduit9SP3 QÞLpjqCbV2fmɈP{&\?X>9y8%,f<}yr1r8 p ҡ̙9f\/ Rt:p]5r_T,ת*o{] VAx>U R} j9f3p\T` @Os%Jh 3 eĐ:*IѼ<a_ %4--wyf`|kǨ8/hjR#կ"`@~]!3!28Sl]l\G^{-$ ]~U꽽up[1qv_n҅ѐ\% DO0 CR0T-Oz^͇|sZ(npYx1IOisb#u.1/DZYc+>tr`8 s:C mU.T_/l:&5Q|CJk|cFf}`hBAj_Ҵ9L;b[%tAc x0ie k%bHnA'̿yo"M A ~h9X2nDw#QBOr8B¾o+f{3|sEw˱2^qЋͶ./]V>}X=xzg:D_l[@,O`%.bc~|im;4NSM0lEW<߼9 }ǖQZSų,KR[/*J+#e-&BIAiBaU=(eUNgWę:fsxꚼЬ|9X(}v{lpL5ۚ;gh$nJfa]eFˆcA9GR(H,x˸94ӣb c ?10rat/ᮬUeƒQ =!Y 9>;V(+~h^hl#N7Wۙ.Yx,j.WÇٓh;çBZϡ?*qW^MG`k޿1˂yRc-"آoS*zmy1{F$RdIC;evj$pKgG-W7D2nU' %}bI+.JhP$s(A _1C W^;ZWwb| 30YMdUYaUXXKj9Ue#jrx']!bD&XmҕexǸE8Dn׹9|IL. M䄮^MC/&P\ pԔj nG.J <'ZeۡP?6ҡW Г,T8E=dDDM7/PezCY ģEF];-ޱgȱPteu>_smb0<$2X@[[[/k{l ,O񏭷Cՠ#)nXgH@*T4(r 9qE_T[@f䥕8o:M#Bf5w3By֫SX 鈪%W3SbDt?=nG/VMcѯcjw}.7UMsbC*XС #}n4c9whF>Ӂ h0(Ȝޓo UV`L-,1K'7*#n(c]XmB}M&*&T& T0}i$2 oSFc-">ܜ$䫆Zlb+> F7+shL®8P w"nwdB!*J٨ӌDT]cl* 0Իre\͕m!i:ꕬ Q~-hDH^RA8#_5d7u/Z):gF$"V(bPg7_[W@h] 0&H&)#3W8`ܐm2g.{oܦKQ&娱f) <:_wH(:K0긽6Iou51L%P MGB%VǑVNd=,,F(*\GZM}'MuyO`&i@\{o7+=NjRm+"Bsqwī1PLYuZV`|^=e4 dQ=3SܩljKyǓ?3W+݀YEtJSȺfƁ8tT );d>Fiݼ@a St2t Nqcuh]0> igy8AkVhư߷CXƚO0M{DHL=x>w||Eͺ0zpV2 zG?9!r^IQxk(^<-W2tPS/⊥IǗ Fw<һjǪGx~d6a p=6 `JMe*=j=E>4!AlWv7~1yTRT@2pBD-/]Qd~;-IfE4gUeyuaFRaX"i/ Sr,/N^St#CY:ᶫO}7_5cӨb܈z4U9ta [L=wҭ2VPŘVkm Hao[('g~A} 5a- -E(v*ZFU/J2;R}smp`趇hOC5յ!<~sˉr{m&GidscSvм|"aFj@rEe]O`~xKd7 Ay/x)У`W"xeH %nv\.J=C(:dkA &L2v}<3T)H]SЉ˶!l$*HVq~?[Ɉ!}p'ĹS"?Njv!=.CmQ@Bzo4%{[eAAW֢9=KǫÌerD{v:jL ,6z3'sm!4o7\g F3 YgH0EeJjuў zG3U 8}SZ~˒N͜#AḢ QyؽP쓌IP>ϰ{@'U%~~X_x4I s-Pï0ݼobH2ߛmO7c_噋`='_,-,hjM܀m{NoE''Y S01qp:pE @6I}ALJ4I񽀁 K7]tځ^9M&R Ԉ Kb~TCv Grn~#&*ێ LJ:)@ b-Us2~w/72B4 bTmjbřsFhRckpEEIBe(c aTi&T<@|v?/п@} &{4ƻ-*vMJrh@BWo EZX@-o=kX^Uفkڿ2!? cZ-N7pk`^K.҆!IaL\&eB`^bͽ;䢔AQ?d׊qo޶I{刾<+(WMku mP?ɽ0fshW =FKu5pA'bumL a~Zx5{n >%3}AdЫoS^?TҒ)C fy;+#<Եu0dU # 2K_]A5IsJ[ P 7{;ڧ:׀ҫiݫ6"0IHϻbփUgfQ!os%C/u]ieYE2 6ݺ]@0Ss~|5[QLlΑ՞`}RX78emRRKAtk6y: ^|˝?1htpqfBpF(v a?]sm#;A -{w?/C=.V"MYWm>ɚO6f{Zx.k6^WUG 7-&G iVX*8A<7:TaZB:h_x|w^(4akùq1hU57]6bt6'D҂2t|(-h5w B|xgWG kX Mb.RGx4K\lBIu(~3H- ۦ `ߺ\t* %HIƟ/ q%7l<,uw(g y`RBVO( Xq,F[Rڝ\j}GlЛ)瑁ɔ}Lj` ڬt v^-=okYUh[V h ޸_)IB-ĵ|ۛk'TsNޫ&NP G GSsg,QZ PbJOTn;| ʢ=rd! o-B=dƗ0 :ວQ{AoU_> ^ :.UXB8u AݐScqjd$:15^&ju.YUӮG ߻ӑ9 =,VM0 辫pLjcWVhM]Ac7v]oK $R0O vϒx؋D(ܘ,5\[kO1ဦ$DvSl g49;rGͻ c>!4pf롟5B9;6YCz":El$ut DR8dtٕȷ)0P/ni,\ow0uH p3TD}gba%o7o1KDFV)΃tOP8U^IgPnlBX҄Zpy=oDFC09l<.xQ~Q")>|BUz.|w0Mb< .^ 4J{C?>?:[<஻ uI~{?ϔ b|͗Ljle''ɕpS%(`b o=&`QIPG'$>A<۟ZHBLG>Uļp9ea3 Bߑ.`N#YxB+A%oaS'4wؙsB.b1%=>;5 >xU֢3i,MTN mL·FDFEoykpm2I%=pΠ (~EK[)u&~gToi?c*iX#!K24v ^5pc3@[Ke}㳢Tj~T_̟Sd fØVW@#[1S>|?F Nhd Zng`HUu%JyxUwSbk!ƒhpcLm${@TY%'oJZ:*RN?">śn;`Z4"4d>܄59SyD'[4h"aw(7R,enârapJn 1Y(Fp̤;y?A}`z@B3SI]%= yv,N {} kGl-XIJ0Ӏ'ƕ!胔7bU166Z}*}WBaA}Uys*]iZuӤ)GQ*f€qI.#dw2"pf56Әyۆe9Ժ브7j&X,X? &\49^w$Qs`Chrn YxM)P][?w_c<ܘo~ZE6^$ 1R47n^̤fFd b9w6OG(^8"gH"C r'Ct?k2=o,W[ v(1P,NRGS]eR)l1j @js|fO˩ -Vj;|Ș9 zp;.{<,ex&ӯFRWp7K(]75&320Y6 K +XOH&r˥j`}p*yaKh apE; Vϳ--_~^4"^9cʐ9w$09L_X&tRcsk`<ѬT"!_`Rf. .I!: 7ȱNάkwxֵ"$Ptr6 $OSiNGP1&5/ _꒛k}&r4~APpeOpd^|"dZlieD$j^\(z-S ,`oۓn}dWœ0࡜y e@NU y]HH?(^B XqBdQ=] t{}? 2\wҦw|uOȮ/F~6ŸJKC/ђPH)" MC_+J-h=Q]HFȫzfxԂl5י&Z'Ut;=$-*19d8Nߜ=HH;BY4{DqA|#u|'LǶըBU9He1,d}$HȉQUVd`ri;:Mtw6씤+9XG;&GN "mצ&c] t@ԟB) %lxR6 mg0,CiOiL:%B_AzN8;,3%4# 0o[׏LnSKGWh_]#g>YH TsYLFwQ31n~Lr"1EE[KfRq&7fSG&z.hd\"vpo%8 1'b6{XrܣQ"T emdNqްϼN(@ a)B0 KoonrtĉP<<(}<,s} W;04yi,%b.n/ADk.x;ލpGJrG8i|+/fDhgoB[t5B2OZ@g"҈5Vf΢+DEzpS)@׍E@~FYRy۟}WVpߍc+$1-}@+뒕 ΨE#_3Eb|g ගoRqlNs(Ͽ]ŠΣ1>/PVw" pܾgͶH=zkYm lMH<Zi3-)=؅~)ʀCxmȵC?*f)ӁnhJq)E zOꆕ)H!#+]M$V2 pU&qWK)V_Mm||gҥy?2룜x|#U Ӥ)u }VR4Jg_6m- _1S*/~%9% vKy8۹_J>.ݶ6^Kջe2 0 " {F&lQ/g[9oN9Bl*߯GԽY=mkXapơǶWrƏk͓e9;XRCʁgpIڊx8wp &,JoezC>4|ӂ<G2gIW>r.(E oY4[zJa޸FdEn&w:EՔL7}wN2V) k25+ N јS\r)jl_}8X;N-),h,ㅳ3_xr0UsLXt}0Z^yH#캤q'HR YWG*;p0-?rYQ 6yfϿ'Qby1#+'[*U&5VI@՜:V'+%dR "b 9ΛBVyP .!xgkȕ5[ 4ⱜ(3&$V&)oF>"sԱ0lK$"Ƌ`^O:)SDߎ~{+0=/X3bz]t⠝k&jP:\Q;6M(l{RudkU/FkT]/@ W-l_l-x~956џ_NmvLD5QdBwm8AҖᚿ.GhA|uދ*:BKC ^B=R#(8e%?_\oXg h?]1S_[ ʾfSt!4=)Sz+B 43L$.S,VUUD:u=)o@BI 2)|.P~gcAlY#p" 9ii=Ht2)\A@?NvB咾mVd r6r`]4:Nݍl؏x@]zr(dIzlA ݴEˈ ګJv[0aB͊8_O<IJ8lM pRτlG_?r6agE ,Ƙp&+Z[HCo(1;yat]ӄeH E2^qm(*HV/VLgʺ~>MA܅DiG="ү7.sP5aOT)!"3zZ\-c>BͧfEJ[/?n}N6'p0U l:fc@ V>:1 ( HB@Joh39*63 vc=Fi!RkZEtIwR>+zlq 94lp /7B yhaJfqFRL>;(; 䟦/%(Gn!QJ 1fGw@j.LرWD^GA D%}t}ȇظx h2T|N^2UX hk&&d.KvE ^;c7].یcͬ+{x\ ~qE.`P~7;GWm !mwQݻEvэ!zŦ@WsˁxϙGFy&{ manQ>,޸T$-n:fk|T8M iKeb2?l++!p{'D~HNlN7O *m_/GwP+(.$|5=zrM ~DS-gmM$il$.^(]LM#Ac/fIHeYXWY;] F9V˧()׮Lj+pP7PBU|hpx䨁$:Y06p1{"9=K:/qrS-FPZGc`F)0฾_-xk~ sFm%Ftg|ք!.dI"TV$0]YvNOƁ7le%ȡ`.;"l_}u2YSf4 霳A&oP|ЗiE͈y 79_czUי`5 "owEM'ӛϻ$ Q}ۏ8/p۩]=9j; -|U)$*b#?,flSX@)U*F sbQ-a?{gjn1%*P {shhBÿ`MA dD?/6hB ^2IʡJ׷Dhi׶yM#FPOTaK2cs\Q.BBT*E߿ӛ.`ũ=wK<`A:7Uíz:N-d4v.CwF(|]w_^Q.ƿ) $U5Y^rJ1Ue:gi P0?KAeomKM@6Os{pB( QeFWTc 澻VN@{x} +KFBuҷ16}Mx0_J{-;J'JX`Ӂ# s!ƻ 3+}?,ρЊ-{$7]3lZS3? |t.Q}hesX} #EvIN |@]oG3J=*M@їST'IY6.<1@r_ZP8i DW Y+IN0Yy 'H1bYS3`(+ækX?/GRtqcK0$N<քgIxkϦwze"0␣9?;G\PؼґImPyOŹ1Uºsa!Tm5o>Q]_~Ž,@"ՒΛsws/ w!0'5;t:ϔo;_tM23z/=SLFx^4Nj ~Gš4s_΀N]3ʀ$O֮D:*׸9$S1_l4Mps:\{qY TPcI%HeX'4h:f 'JLdfgX.P?1KasɝPL3`*EXi f 鍼9. %_=%H H3#N߹h27F|ƥe $+,,ⶽnˎCc#kԱ[p22#螑 Oʼ8'K,sn9!I;X"AG0 :>zA?tHҢCPxPl:~͏rw PǍ]ե,gF U PW~[m*ܗ5Odi[;w4:#^fHV. XsiG&e2E@rvn?{ (WxUthF-"#S7By ɏ>(RTnGy_kMع׬^;$+ :ک` aaG]8ĊyAN6-@H7ۣW'$X' Tq_+j ]g䩪D M[0Nm&mG!l?u }0m;S |ۖ( Roܿ8:M'ud⼭pN7D[kuv/h!*v'-RvƩ }WG t~ݺǢ< OMRc< kq'Bh/|"ʼ~Vn"gx1BV> < ZY/HD!Yb@0^3Re<"5?!X0a"Byj}3sʐث3v;% A#hxe?(Z98GA1. B)Fب'ơ0]d5σ"/(`?}~uE.-PGǼD?oYjK]2}nl޸!~FozU wW 6TsOlbwwH^7X#ks>w*[=߹}y; mIf~'x C*P% ;EWRP}K3B+pR ?c]ZB}+9qMGAϋ>@%<K1$ N"?Y4_<,],HZaMcGwK${J@cAjqz_i xcU_k&?5D6)IMimEֱA̺yւFlbp1o%y>=$ɞQ(;I:7Iɕq>t(k;+i#1:oԹ0FRKGV[?Vye*ot|d1fq/Yvb[7|"𴫺!ĦTйYz'-^  oV/OOMNKx#mb˱@CPv!FJe^{C Ձԋ Sci~;PU&{r&PZ;q>*s?Yb};tB>]ņ]Dj]3'aA t. ,#aw?u٪{AWeHH@Fug(3w)]:s4.TNxqpwמ&m1)[8 -:"~TS"n`D7AzY(^⓱p_G\鋨}t qe|&C#QbuM t}[)J)}I@O|`P;q60]WP Źys3N}A+fTC3Ȃ0OXR)LP&^4EOTs+ ]<8G`Nif[IM8q]7J0S9ZhRf%^ oqca֠h{Ҿ_}b7u$I3!WU+[+} ./=L|F'=bXbDUh[8nW3q@%_fxNԝw{Ά$8_0)?>CWS)'a9|!LQ!IM\C2*1gWtRO~d=P'jew%L_8>K^e8Ѭ {!Q.04#_]yXH :й*kmϕJw_~I˪QrsYjyVoEC8l'(ٕ,IT9%|դfm!"ЊZ":}9ɗpNR%Y Q¹(*0w e.^Z-Eȗr4RŖwɵ|_A"w\ƞjP7 FwJ߅{v`q{y 0Zr8ޒុ=ܻ@';rq?Z$_)2)',cM,^ɚ;!fzͻMr>}R3 *GPG;fK+x;.K0نKC`\B4.)(!xm|#@HA9%o63;y#zfwJ^v5@iI\Bĝ%Or鎬O;c&SC t}2ufT׏;_,i–[ -GC{XBSL!kXlGlULDٶ} i\ƺ4 8u-(o~II;#GYr"CcCA9.(Vt,,ds>&ҬG l&աkT3cn,ъ3zӘ7L=|u&rQ0 [ZϾqХb%/K?..scJpú|,(~OgL&bZoۧ_I<6SRDpR@&{WN@gٹž ;q^/*, j|D0{f pb!&{RAc&cO3]dhz\HqR+33o.;5nc yg9Խ=yyV;|dȤ,Շ5ӗNy2 4R-~3>|g3eM&QP[0Ҩ".{䑥|$jnq'$STOPYh;~4Z=̑CW$pK9zgo_{մ,k0xۻFSo+rYx%7s,%* %ݖ2O놑+}~"n<cx_ b h]׼g [ q#{)&/oNtXh1ߞ4xUvfd*Z\p|? .'FlDT$ dQT~]az&7dh9@ -Ev֎Q8P+ Ҧh#͊3F?`-Ҽ.ίt¾@;Ku?E֪׫YQ)M45hEDj{Q0 k4Uj. Ho\tà9Rɵyb9aZ4-A.$*C^yD~^VBamH6 H"< K*聦7wLŎ-fB t-Slj@8{*,D|tv=ğ|۔QΨ3RҮJw 3T蚉fJ>yA|nv3oVߝ b~ yC;J:h3 >[דcuڱ*> -lB3%vZ Jd裀{sҴ,lI'*涣Vor6fZp4!"T~?q?Ll5>cF-#; p5szu!tVngUorNy㬝|gfn6ѡؘ_h{ Zya`p/65c|SPq쁅E<,Un6<;KY>i p&I+1wTؙiti證8ZihܫHvX:\,%_x0ҽ׾C+v["L#Nۮ cޞ֕;GBkIgOCmWFQ@@rѫT0N";_+%Tvg p*&pDU8OwTa!0q2lT dUw…O]֎vOJ1sUf\Q_e)&ۯ#NLY*ֻgldzӆ(گHd=ע!4 m#Q j¥ -)3t4q4 o;"H"bBں;?yHyw^[,DOPiS~VZ1hk BY`B"*Jd}"+͵rfĜ#+2wq:KtH!AN`~zIK۰,p v# "I#Fdi]۰daŒrwJ G.{#fTRt>cuFmt T1HS:ԵU loI+c@[y. Dj{87U$Ӌ'][q$'rK U7;I =~؝Fͺǰa5|ru8rpSʏ:G;8<\G\)h>8 UzwOE8촗ZD :T[v8$Jzdu9QȉwRSOQ=5}V-jKAhN]`|--L\WC/ XRY{noLQ%[qtmV uDg:["h)IZ [:YMK< X"X"Pvt4zccՀ@(۫StʊlY1Jq =锾Y8Mu_(\BW$oq51|̛Fڔ: ZxG|=VJEH{ИIM#Z}XPGGeG;@ܐ ӕ0Rnܼ?jS=>Lp fZ|;1Ŏ407e(d4 +#dwL5%僐{H!T|+n'1ږǥ?U |k1&Ď~.[)! Ni%05JMǣHL{؊! U2kk,tN3bz`[<]^]!ǫ'^{UJ_(tnǽi_UGx{z^6xRvB F _3H&Rx??箅 k%ϵOvxhIuUky |@|zSU 2HrYXjC啊3"Gı'u \TZB'Uֺڒ2i|6~ei [w6ɚ^Pʻ!I F5ZﱉPl`Uv)3B. gI+i " 'A&&<ʂ&T`zNj/,^'Ts8bf/1† ^|tF ޥ1iGes?dyVf,ԭ0tޓ5 #aO>p"ۖ^_-Ca"N~4'p[(cٹS]dGvXwaGH(uCaGD1C4^:!˒Ɠgl '"2&^ 32=Z݇[]mF񚫽do"D̯ՃN1)GbJ:xRB cd?ܱ g![|9&9>Y:?iԏy3gi?qV 5I.V`gpV Emr)5k@x9U% RԗaoTҮ_RJJhaq8~NØ y6 r bCÀ?*' jkGl 9)"_2%u3/VxtRhpt6MQ Ua.=--:Cw?~ݬ>d5^YEpK_hXWt*<U|<ǰ!}Bݞ'Vwm&<{5$UQ]]rV IzJf\fI; Wt V+j#eӬvs.]q~ 3X85O-I8s ,S4IeRmrY.O )N޹ 34aP)N5.߼),ϵKaNL8pۊB4ӌĨ^t(uVKU ',;Uoأb(V İH9-ӓM/p Y+@=ٺf*? nCg[w z~fWܜ@Tg,p~V$̨R~vbH ;mL1<}k LO?_Aj/o_Y A_< 79;TgJW`AVB<=e&jDˤ(E>Ӓ_o܏p HqtS۝3'Ӷu4 bJK^٧ume $8I&dJt2o6/?I{m< _VYci1 G^6/[&[ZKɶ$m6%zDAC@+pS5ӒmiST0>>e vؗ.,BSD`mdG*Y^u0peg.B  z\&v9Ufϩ#uyӶN-ku.bCNibˆ/NwzǨ<鴵L jdxA?y /8͙QF3jmN;0CMVeg8K0[i qwA-Hva.xU_TQȿ٥hU}V% [VZ#SDRGs5ˉX̖b^"IԭǛ0*͙X4QvjTf=1R{#.5/"8fB `,ہjibѪ^ .[?EpֽTo֦o[ÛŇRgx^sg&pDoPv9EAUK:Z5E瑉L6F(mr+&T,JG<{?+QFP9;j[Xk) Xo:aC4f6Ӏmg5 {>e݄wߑ|t!xcQY,[itS>^>gh0oIHj!5o2CxMF+ǜ!1!j\̤dC'*; ]s2*VװKW hGYu"c3е` ~!.WT)g Sݎ,_?0D^1i>[Kqb]d};VdA'EH2 :ORYaKugtơ;Ǔ,#,VDO+|C=ڲ݄8<>B]̹%K% yvP/4=($r$TCzY@*:o] `R۳nuKz(-cso˔i:DFq 4X B!3e߅{orZPGۭShKe jQ_lN$w1&=G)L,ZL; g2CNY$bBJf\󺂻tSh{]zh |^% wS@֤#Q6`ԩ+6 etzhʋr'쎍K +Js3g@Rw<ļD_m-Qu{&MԸKQPEp,N2S~ RrR4lc7UZ!y<"&{]Nc2mM]!=}&bIAY%Jp)[ ]'!\5LAX?i4moײG qQr!GE%:  3 ?IJ`{S]qN@\1 y)F^?مкRЀaΐga?n2n +a*8kԺw Q(&szD_-;tp|~|V0}*oxv)E @!4&9/I,GJUZ>d&TRpqxVp&EеgDHXFKB&Q@v s&k)+_˖Ϙ㍨NM_JY,wG{}r{籹w+͡(~1ӥl9+Y OԒ{_t KThMWg-nEs kMF.v6w#SgyYNk01Rp:'X) +x~(1Fl zI՚zڛ1^zȧ0 I@v/lWRyqoXeC􇍍0-t6!YPpω G?:w OIb孃-Y& Ӫܺ3s ,`==7hЩJ=]a7)<56  yAct* v4mQFW@<%N~R)y&Φ>um3[# qcϽRF1\RuPG3]d('Dk%\}&~A5j~" R-c^fA='t_\\~[/q 2v^:  <U)fp}o0l#*uW" Nek'߶P$| U'RLSad-܀Bg0O0MC$8Rf s{'k?|&8br6pWB~y`dO!0ŝ#5Օ}SPoڀ:F) R6L}eS0=&XQM-.ÌM.#Fu`Y,𮐛C~L&(?2@ѕsFA nYE]]DnP;R]8߼x_I̋-ʴ{IG`|!y;le5zB7# \7~Ǚ')x(ZI%,c∏0Lԃ< pցPLެMШav=so/͋l/!J/J“ *TZ_AI*^d?5urvS.43fy "7s$, Or iG2g'|ێ9S2q詬;/hHQm Xw;tsy_-j?U.P'#V(7Obo F#z&I/ q uBXhx4ʡAiS>1#zfYaQ*v̕p*H&5FK MHZ?s&}HK^VknPЕZTGL*Y{AǡvόK QhIxmeYpN?3N^lܫ·x{dE^Svt@,k\7tdQP<\`,`ksU|ax}" |lv}ΡJ|ݟ.g,e)&}A%`yڊYS\  An$5Gt(g]6_ .l-v;$$EϻSzz u{j5?!N:zo!ًP5CjmۗOmamq(}GRx,@B,s.n%3ã5w0fǠ.mR=a]tښ5?`C& o7LAn=0yԀ[*%V]K$[B\_'UD)tZRnz%a Qv qr.pxcH&w g_XƫdF0 w5܅,SW'CG {˝}$% Ī";0bLL o߼5W<X:.)%I~ݟ?f>ጩ21PiᚯBp |rע^*>,X#l1H?BiyuRvrPu}Q9/ה1+g; "R.c0#EɧW)c)K%BNcgd~1aLjf }'sp gNRMc~oLBik1%h}lfvɸSèG;|vQT+ig &F.z1@\E1 8qq}}{xOÃXeaԯFoz (^C9:np[$Յ!`wsJ}S y‹O˱Xqo ?W>B^Lb{xOށχ,}&[fF32IU-#TPA6w5E2r#Ş-[srzȓy۫;ScKoNZC; b4(#S Kea]}ڳmR5WG(/9r\X(Inff`/hqtxՈ&;W۱ 0\Z+gޏbP:aJd妑H9XI4hV?/z^,C"{fz"]ۜoZ&",{& Ѵ5Rqz_> H1IyiLI$9,/F!:}Qҥ7_K鄪0m6~u(t 2(rFʈ&cd55Y ~C׹\tHjd;̹,G XX,󳤊mu{`v#|B؞MxN7A=ZB|:(E>zVf\n-` nٟ)X?b_%"\u=H/?giկ+1=0jz "IW{x`\$6 )_et+{_1VLg\ :mcAtC?q |h]NF6C^\؍Bf݃{Re R%wA}NI[Hk_ճχ=;eۙ7mq1JTN3jwod&KSqZƹD_4ޒ ꟷ6H.bc8DiGF#oO\i]6x[qYHTDzh9]NʘR/`$Zbo^Gozϧ)d޺-%V^D&Os7!׏lM믄d-,+PĖ{VD6 . mա.d9A+ISRG"_b3;7-@8l͡d&vL/ꀄ}! Q2ŋ |Xk3{pej/::B.b̡kD˷̠;U]PAxԉ#ՙAN2-@1ސyňk"Va/wEXgp7KlLv࿜MQ!#,!0&C您2"OՈKf\)ۚ+PNtEwA)Ib%!iqOC`g0:>4#E cFؚ#>:؝>rf-O6nC/CRr: `Vga^o?6a+qo1Y{IZ=N!h\i/k]r.`Z\Y7r5޼>&rbyA.h@bxxІv{i$ΨU ioi)!()=e//pK|^㥑ұ)?cws cZk7՘yE(i,V1st_9xÜu `U?ڑ-C{?/hǐ$*U(_6 i^9uZqs켋OMlR/JWjcXnKfvGGYl'BENk { %[jϩ 4M:t]˄jVL,wU @z%#Er ̓'_3oW:We0QvIYKpi(4փ(_Q2{7O vlaJ6Kpf?l/%,0Y ppYd}ȏs\ԭo8EW)r'F_IcGkWq6Ky̅$DqPcL.Dn?!E鞵LJXJOUC~GVk,,2Ǚ=TSxc1#9u.c+ZC={n"JvX NHq(z*%]#95+R౞%V.122J~,^mmx(H EF`dWg}MLLhNx-5|3^ƫC9uu>tw: Z_Cr\qjGe4âxf&YXY(Jm.KStq$Pr_r"( h6I:\'4PÅxEsp'saoNF4w~\|̒TI41y_~gXOu* 4h&(Ӆ Pc]X%\`;O7AڍA)T:Z>7䝗db,3?[x4aƽ(^N8JSq}HsM yB}#MRgW.ZkKO첵k0f"aL B[*v`څ&A/ӊmn@K[:wϾRUOaRH#")em ;R߆\;:Z{-|?ey\@ 0rX&2Ɣ..!- hK_byU. omzB4n(7+:w<|Ϥw\%l)hW "f&ȓ[pw4ob&x)#NyTT&TF y;Ѥp3RQILKz6(EvWqӟ]B ڿ(t mv1r`-pRoUyYs5BELO5(5R=Q@8;ݷ|#wc4 Y+ TTx.U{}7EgA4LYC^[xr/p(z}thyM]eS^VBE>Bxf&a7:NhX :VZ%[$6AУj'b@Cr=6ˆ2F{,#:0 NJ!S7- ,/αbu;^퀂X)'cXZpE(/G\m=إ0«)bo#䟕EtҌ=BxCj KqtʊA#>2!o!თמl^io|!$-=<h/7q܊M3emEfܒX*he7$K(,A+G0z`;dPTmbŅQNN׸|&-P=LUzi;ٔ9O)l݉XD7+n4@HR%/zXeGK }Ev$GƍhWp89?{`c%-*C]ֈUdEB pGisTe]j$U Mĭô-9qK`vpw$FZ0x:N+3)c!/ȝ ۆ' j1er րh+_ad4c츓"=?~iS2MrG^`GncPTDM x( beZJ8{̝=}p*fqRlh2v[owo].f5lhG^*%NP>Z[lz+~O/8mK v@k.~~qSTA%xm#;և[Z>BsQeo0}1Qx8!Q-5%iK` ;vSˑuB}S=,_VQtl7݋K+b,ײUjEZ1.¥f3D^| ɔ+P]˭^^γ] ,Yp0^ ۍuVPYHֈ$NG婟lmhT7:\78S2zJ#7 Km{㭉4G;w/g( !k9| _A9=(/I#r F~o.:Ln(FR63i /j dgàa^zCP+H3T*@Km?0qIV?N 4VhcF>|7D .^@[Hq#H2_շ2cfB: }cVx;RHsG4 ٍ@TS5IE+d\O|`$F-5ftjPNKR3µW|:}LӢ Y0<6qv3d"vU JCeOȝ h{ .?LJ M@`|3`5mYħ%B!Mf ?="-H31^؊z^8 :^mbHZͪqT$ QQ^4 $Je QscĦsr@dV#J.rO@8[X(L9?jNO6Р.`~xE~!g06n8q!r*Op-l49˲n}E? tZ`\ +l3“Pd(+NhVFXP~ ׄhhqA64']uBQ\1M@K/"( 9>n 3_kE)0퉉U_IRZ*ꡍNh-.` ,Bl; kAr>?Lє!keRa˂ʈ2uzWs'Yrn/OƃvmRg3DNhb.a\ovBsI}P$#;r'[̖u}4NV=@M8Hb,}$;m+^$p23r< ڄooRWt)ؙ̊}uweXD,@.\@qQFO6܄qf2G:uu+C Tl,{7&K9LoelaE66"T-_nQCi\iC{[x?Eq[Ss6ťi -7kZ(; >.Ρ+K-|/&\7O>l)̍* _ ݢdߡ D$h{Me{&SXbzVȎJ5ti`G0?U4ciE#Jc?} NKi=U B򴟛YSt}Qs U{/]T }TB[+&+z[DNT"/%^t6m6C7VDk->8pۻ1#I'?dz&NQ !9w*).ThLKǻ"hg,q7k4HȐ|uP>T=̮u&|'0=EX__-~WU@^ߑׯb"t,Ev{,/qq9SzoYcTk:)b^{83n²)*[o:0[F<;KھhCw kY0 ঀ= Ge6yĈ$povdA^!&zm=UO l) +jnWH5hZ,D_PCDjuSVF$b z Kz?\Vbjpbc-(%vB 0=a2n,YQ6ͲL9ͣD͵ h=QĆhH XhGm]70&O5IkU8h8TTValzq?Nu-Ӡ0bYWA?&2ݖY aix pcBS,~\KvkjAش`>+)2Z#K|H_+}GLik18`/nG@\!dװ]sb&ܕW`plB0lenk.޵hyA07 Cx+n3NH^¬xq%7z[9 }Sė,5Ii͵k|<9*j9YSqYKv}HՍּB;L~+"z(KXNtchCz*A)@SiF9p'MȘ rϲn"cNiAԺPHñݳkV꛷ Y%U`=/kUqa 2\ō}vǟ~h1mt?(zCO 0{j+/a*3ەVMbPBʖ qHQq̷Q8f=X :KjF.wo+3|uayWkkBJpe2-cʂ<F(mV[- T.Ԅ`ּ-]9*K?נ,P=Y$@P()G.+g@RפԐKF>1Qǻz%fotK"-Ri{S/? 6z ?}Ca:Gu|,ۃYL0~UJp$jvJ٨!L6W2ljnT"io:r=`<NRGUT܌2H"D&c{t#}pՐ +/NmB+KڥHep& ]pvؤa &˒*^J>}հ[So_U]ҖGSsn%od0PmҠ~w}TԠxZZ%lG-CsqW0!lFyʵ`*R-S2U/30|7̓&wbP\]wGdFM;Ո4+L];\7!ISf rK,uխg2Tc|KD 3rύ7@]:K`jh,)aT*:wB&2Dmz9z D5'1%82!Y(7Oa4X<u0~\ŶEwf&9Ϟ),fr ƭ9*eSG߰ 㢾[k|uGS7 OFvq _տUr[Di++1VjVw?iglxX[ȼiB,bÞe8u;soٲj DE5=Roϒ<+7O t  A*y>#Ja[mQ{E&+A:]sgG7-%G]d2U[ #^> C%dݷs~%3<7鋡Gˈ⏌ ?Ű ?|nl&&A h)WY 4dPBRJ; =^ꂳ,cBeáEXl<_/ps,\eBtq(;SbpDJ :4(c;mE?;ٲ^8| #i媺}ADh o1JHw |9_1S&R|˿O1ctowY7U t΋ 6;>r/k;$u⾁o7,@%'-6[2M@/W&ȌYS }☲ًr>o}+37SI 'Ɋ"_yYaI/mO׊Ցd+#5,yk[z^Z͐tx e KI6apȸc:!NyBh'(B@sxnT㞐jfmj6 ҭ@'PcGnVXr=E6d A&*Y޵J8VQ703OESQGufaY[z<呯@p)83%CLyUkM!C3M&:1b lU&[oo`Hnߪ}?Rn!MeMgIkbD1;܃%eTtsE5] ~/0-AZ_"gu S"(IހoJsbH*~M,)&T͓DzMx23vRm ,И<-J4M_2V3П~ -D9[q_ l$^CLafeOmQWBMW~Ji1 4Xtst3$X3iPWꃋyg4~䂳=nypbL2Q/R t,sͿ+X2)*Xdo}G\ 3(gl59nڜFPSΣkuk_o"?&歠5x}jomɝ| Z5TZh~?#-J{)|*] _nuSq1ݠ-x;]a{[(-?5 <սS7Pn:fEkY ¿&8ɞJQ :_ß|x H@B2/S쯾QOrdܡH, 8!=I~edY |J r]wL]"Q|'vOx] {))k}mMC/::SEM߻19 *s~8񮇑B8 C@Ye&AXl" ۴Y^N g;C &p}ŕ瘦onrAUi hx6_`Rۨ1[Pyf7k{MjK 7ٺsnȲ7(Kʃak\P^-X)lE*'|תVT#W>e谪Tj};2l;e!ek4R2/1; %daJk1ɐ{Ih&5dKI{"e34]V|$4IU 9'w3\1N""Q,e{ ju;YToCV_b:j &J30d]6aʞ#WQ.PDzoi8!2Oq81q!'^yUPjjyt6 鿊%&߬+*p91X%2!+.oJk`nШA*W\9g{ij>e]z) EfxbxzXY皭K/o#wMzM-;6;b0,x&>>f6n9!$dgZSODgIv"nJ dNnb믵 o# ʾe/? L=f&T%;לwZd& ULF[}aDru8\ll5){rrQ#_deWngĺ%,'&fꪱrΤn1+e`zpBgn/ah!< !KHe 9&R؜ֈt5j̧ƙ8ak)UaK??o"qxv jvO=,f`"$o86xT#95<1-ETFo0 j"M?P0ۤ)5FsMO ^Zr 1n( $>x ٝH,ﰛ"fWNbMB&bV$#~L:B&` L+HR‡SһE$5 m|%ʤpDR/Ɲ WIN%xZ.7b#oJPI#jK4mXH/)1>_:Q|`H0c#Y}x+Nk α[JL]qJqvF-X|WL%|%ʛ"Սq9PIB\oMڬREj+UA^>Qީ0Ԡ M2hA[HFm)#`GnlHg411Ew1wlыTD|"<(ergŇ t㽠Ep\_mEٔI^uBP;5הC5JsU|ڱkBK4Q1 Qrƻy7Kp[]OQx4VTxsLN9-< wi o Bm:SmP02!-5O}z\4 aV|8-ݹNj/u3^Qظ| ꝏԿc%QGQMsDHuA{Nuei>hzf(Dģ}0.‰Vuy@uG]Q-$Wu\zƽA^Eϓݻ8X: 1pORK|@v"C~ZZ=/B"Y7J_} tJ|R+l  &&I n}ZSO[X%]^ >9Dn~S t$оҔHdkKX&e⨗؜ݮC]T0rM{ x`d,5ua]ߚ .Yc#7~C죣D  LĠ?d N^x)M >1 >حX:Y31 puM W~ޮWt!Z֙Sv3YgslŔgci:J^ȷG.H^yq%a_Ç(%-C#W)}VyPY^>SP4jۇ瀱dvu Ά&tWFmѶ {'[!w5#r@,,'b.F58\aØ T ʐ>8` G˄-}fEb9[ مDMFhe '.E1ˌGNsudB.?JPm{{r`wZ9E=H1@t> i%|Btii!)Dֱ~kh.wS[OQ!Q[Z"uӪ UzܛN=|Ξ|,\2n~w=L |^mrXZ\{SG>/ 'x) #63x" Rͷ=,[#sբO'蒍KW& X\Chba]R /ˇ;u݃YBfW*67P*Pz#nVHVJpוnXH~:yjA A5[ +5 .)EW Z\t* W䭱lvrDz4%e?馚 +~Qt^иKtVj;x^P}2GT  e_jAj,b *f!0ϡcA\]!`Q"Ly8+쬱xL-9Y̏2Q BKfT(YJVeK.d" `)hyP38BX&{ v2ƺ䷡v`N^4}ŅRc wX8F%js f)&Lbt9sV'ymX\A7 kV}%)vft| ǼtxԒo͞yɾFTr ~e,MneY=7 P9]e-+ ܐzQa/Y> fi'{&!GALAG:eIho п5@ h:I }fDR=m+b=/tc +o7#Huk4鹴1a' r teQr+QP2UpMx\w`nJ%QQDqOzӑ|IpP+sY=$Y'FY JG 0^#C}l4|5!N 1VȵHΟH]=Sd0^![Z-}+0S׃,!=u$F& ٶ= Ӥh|E:kg;2"dr39c[#_ep+/?@_+r $ćy'1B:hDUJG|&VF}sv|*g{VflDig`G>8eg]UH=2~"ȅj,\c!*$ڭ ,GŁso+GC0%n@'~.D-;Xnjhē%cc{֍$P YpKH Y6Ѷq"hFv I$(9L$b!Y+Oڴ4b&(袟$-7 LCe( yhkTr:Z,Ips²$*~b?S910nFMפLtAR]64r=6Pv I :D(IercOC$AhM/ L&r}  ;y`9wRs'&$tqa]$0O`i+-)ZH/Yd^HktHql C=HwػEL6nwژ>t8`0~lӉ Rƕ'ڬ6 O@C?Ʀ *tc9F=墶.{EC'N,-Ur"%MyqNc5fbQ1+ +Dz?JcR\!#1PMj_Zc"$dd,suiW,3-Q1cG ec`Kn;tTFF^|$`׌ m&\'گȐ nS*YҿuڳFߒemVh+M4ڣH1Xp4~M%MPCnhn=ӔE5 3̼ ^r`(ޠl - motK=Qo2P;xxJ:ջP]cicRZ|hApead~j fY;NIP/Q7I "Vz+Mzs99k#E|UCo|QkR^ ofy'@~TljKs[S T5¼iyp@ T%lu-&ySN XA3RPoQ- nHaW2*+_/1Q7*5˜ K L(E3tvYvTuAa{:A@[V1T*  iPD(ŽX[l Km>K N(д<Kyw,KȬևZ Z][f߽OqD`)k=GgJǷR.q,%_i>=Ϯ$wjHV)0wb/q$ڠڄtUʁD@ټWлc / Wqkܚskv"t%jҜ9=\G_sp3lG>_08tqČXwQg}ŲY~ nbR;e q5:_d dHerzHxv%}}x޹Ya[y0qH())Ko.c8 =`73Z2UEPǥ8VB(4f}먮fdYÞ$)( I"g _; Iu9=7g`"`9[{ʵ򪅩FQ]ܱr̚~N9L+͞}Tr,8N ;):%0qv] e*W7u_HkfUx!V=H9ړ`"e>BMzW ?J9S'Ѧu_ZMxrez61G#+tWX,^^-̄nl~vtZD_ s9m{t+s5I<[UnWNq_7.{$}9hR{i#(z`A!{UM\gi_%TÃc" iVUdP~Ya 2s62"N˼'`El;d- 6@w;v!Kݏ  =zP/najdŕiۆN\ǚ?_Ki(+эA@qHW\ȅU{/*Dğ`Eʁ]z&x/bȻ['I%}"wF,jSm~vmzmG6>arj'J,\Ws(we]0Su.BDTx3ѝF>#c+5 ~;my/ηh-'iUJ]2f I~.{/M̋b_v Iu)%^Y rG֔Dv4SN? {{A|G?xI ͉h01W-E@'GkGR Չz$@fNAkDqhN&mmVyj&3aU'2ԠHkvʓ;gX콹#ݧGvQkHKאb1}C:ʹԅv@(Q"Ol( :ADWqPT\js3D.UQ UTCCΖ]ï*3Ԥb3Unr椩h [}tO wso*1 ï]/ :S->7+_bf҄ I,t8x8i0rX?Uw<|tk'3KPv#lԾ9ƳUg G{vfM;&SWNR^$F>d] d Kr:/IKS;.īHu9u((Ya݁.X~!2VQywG!1|GV/Q$2VM}*;mj8BXD<ߎ7#Y:|8lAژ܃ Qyx:Mxr9K lF~T'%#xfK.`ht]U[{d7| 䵙LZ5`9BpAV!+`)~InL@!|0d?/_tLlBLQFٷ`t:P흗 Ͳ؝fK` MZM~dM{)1ޅfߙԊ})5CVFEʑxD %h-ա{4ⳬߛ(eޢ"Vo iU=-ٓ/ݔ:^L.=vmػR@{/%CpI\EC$~L T[yWUՋ F Itoi >+ͪ4I?ktr$]41`Lm#84E&ꇏ͙/*v8sYUBX$\w4}Q09W|1ZY%+ѳbv5UЇ5XxҢp]qRDCM(gOQ9c\gutGIS :mBYXF0kI>-CX QRԡEp?05l;`EVF7!WV *YiC+ހfH<~G`L4_h.)Ye=`V$IZLC -Eue#*ȧJ9b7 !T6{>wX҆>XqMېW83Jҡ^p #h9܇ɧv~kj(Pb{G{+͈ĪmN8zg=N?w y6i@r0}~-ugſS{+/lq*ˡB$lPԻqR`ϧ_Hg◲PhX§XgҼxA/LhZnOuJCsOpS(|E/u$.ͶSκЉv2[G :g[$ ,n k*6=gB%^ӴxʟƦ'.ueN$ I. x[WR.S5@MLہ# YdMj'J`,wH8ƻZƊTO_w 0RQ3nӯ[!9&r+k1fyA%"`ni\봅܊N Ԣe^G=v@ik w>#[TՎfj|jbDGnȇ? )GwfȍRK#p 6خ!vM~knK629SB# Ī(/5v ӗ1x,X8r]&ĞEJZ;}-*P4qt:e<|d;6ڿca3F=! +4ROÌlZ9(u]W@|jaoZSPSړd:Ǹ~/:?zRAQ[_Տs 6H=<۵XL&{E@b~ PrQV<1 +G=Z!x!uST~GT&_W!:)mՔSpG(Yuҍg~+./Un?: :3l[XOx:rO^b]c6b aFrfq3\jۖ%!=tb-~_vu K,s%Ifsgg[@]f3+sɠn_5ulu'Eh>Gr"-)[K BlpS%޶/tY^AϔJT̂fxz{<6Ei*2ِBq}WqX''FU]zB<3i[z"e*`clcoЊ12iC)Y MsyJE</1E=pHЉ&dcpuqR㷄>"Cn|gh~T.7Yb-gzr^uu-XWP=n82޷}wG`{xN3 6b رϬ[FF<_ǎvB$sq;М}IS{3 5u`C-P}6dDLCxxC пF~S04(X؟S|ęw [W#i Ҭye; "=C; J&@.8'RKa6c\XX/`? RDE+ϷA4lryHRtj"H,K 024PN\Et,^GXKvegMMH׆[-hAܝ: 6y1ĆP *~qڿEA8\/ٷ/ZMjޱCq?>` D>$ZT M-LWm.ɂ(\]{ Ph=N!ud0 &zUs8QfLyrVܯ~{LB%ȔsD."شD5M \G͎qY<'5rș&1<.ﳻJmRF}!EG}ی0486!/Q:0yTa||L ]|\Wv|M*6ׄrBgwJI5U?1=%l*[ش ÔDp@g pV\.UpO^'CfN?of2cD 1sE!N5@bLJ``#&d# $UMثna^zͲnq Khj* *%1T6. /U/ eɊfRQ|z shx' 2J|&YɟyEr}ze `.Ȇo1:".mzjEaj-iÅ<.l&qo|1&iޏtZ9-t֌[!1xG%[}-TM %}{G`-?-Z0lj<=҆WJI(}9Q (,/?ʊ@u`{]R|D&i謁u7eCFx"bIǖTVw^l<0fB&]bP6܅3彙˺39JKfO ,/+ d4\7QhcD Y?YpF'$UǼ=O6i$2r>}`mx֋|m13M'mE |x< E;ߜ–zT{( }iv'dSO 1BNd jW`|=y28E=ˬh)Ҫ%%C~Э1$Ipe2L- _zf8[|˹1((=zx"iCn?m2d6ӇG⯈| t$XmL~u)A<.⇔X9,t/;&nQ}ÌXJ)XG=D0j? ߗx'D䰜`Y!'IǢvϤbIr ӦQSn9p6Q=@H!-uiU}|F|+Je'ZY#TFFhۀlJPi͒RU$Gق&{(`19>0*D8iTϯ-ٓ]u]rV}1V}V!*tl)g W؎F&a&d'e865_ oG@ak)Fz7WGʢv[+d.hI32/Ц5)9g1#CNigBspHKY2 s7;5K-BA{ꏻ!{^ʢITL41+.aӡ?dq璥>ݹi8]^Z.U]pYT^> f Ԫvu@<#UDGyIJCzZt U^( aP9U(OEҀQd A {A^y "ͤU) SƠO<MI*>i1ڈ*4vRpi!-gB?G. `EL4vfG7^\)qJx<i 8&Jo 8tt0C(K΀a9M|,-E^T#+dV0{AsTuҕh Mm6xn:qj]('h.jSN.sHȢD|^NnNߡw0ܱ6V6˨6>g(Eh93l|٭?=*U!?IJśT&L/HtSOm#CVh%)YƊ $2ˬ"rX/`Ye{$bY _1YC/!Y 'ܷ3œiDzV)@`txBzO]s\;b92ʒ,kDg}о\wYrIk`AvFX[d1t'8&8.@qI8V@lNP!$©|t]Ԣl`_m(XR~]1W#*ɻ*8MjliZCK&ghT K0I%X P*ܧ2/UA~)P.OHL{@  :d/g&*H6vs% `6*ٟ:(Z:CvePcL`9mF. qrsc 9[ Xwb*\smN>!ifA~YḎQRCKМ (Bބ1p !=G5u_+&S0"r+nVtr̟M,KB7W;u>%NDKܐf";ܽ=\o*0@i*gYSÏ*yl`\nJ$ɉиɞ0^F!)?c}S6%s*c"m ۄ:)^6KGU=bK1&b\jHk'߇Jcnbat1>wя2rLX(WlB֝px OXIaLVb*O>ԢSϝXJmps2Mݲ+!c72rtɿ[A-AN,? kAcbOi-o[߁+SQw^(0#k6)F287 elVkLWKVj97ѳ6AC|yG7 ^{tn *%~P;8dKzvdm؇g&'Ez#%hմ%e3}dKm=ڽczb2-HSi}QY$z"3U5".FzyF"qD_b<ƅ&B0 -/wHA":'tcu=6ٷrOQEgzW68B=s;ߴ!1&Tǻbݞcot1$;WBF 0Qt”1r$.'#h{|ރؠBW:]W`V7(]..g3ePr`yEc676ܷ1O],> (ts oAr)V"^CvPLxr#˒s/J&ޔ cK Lg7:c=ELZ(/]g'Bw6u$uk$JwE][0ÀIAL̡>6Q0]~za pu`C4hމX6f0v Hr2XmnKu4e6Kg^ E~x,Y񮖅tr H3x:|$N[Tzo4^/iw|ڹ2LJN3!} k{^/guքBu6y\\aN7uRAy"xEI`/8t֝g뒐ͬs-0e z,KFơB, Dm6X2=P2{.E^oXs! liJ;an`A>;H;~|Yj',4p1k,~)JVPj|k$HC.A d+7ʯ*Y\D[8Mgh^?Hr!P)>7B-Fod*gJ[/0/1Z(;(+!"pU^j#2Eyo!l?R^sv71XA]dqSg<b6NGi KyaҙV%IEg C22GuS6?xp5}> 7K6-pFP#պ5.ʺdB Su\+%fP,~2\,<4u5U9L0G|~?ҪȲtw!ܿ%9Dy$rY$ +勺|,9R8СpQyf$ n :r7>BNXelm&ޘk*JPqfLiEe``,DbQU8a '> d)SOV暲 jctYᴍaGNWF)a\ԏ(F’>_QVnQ^1-5etz~p+PpknF .*Rb;+}#0\$KgN{mE!V%!~WEVy /{QݥWJYvz{VGO թCne@!͈5CF#I&10V[S$@SU@duQ)j(HTE=9•J|~7ѴbĠ5U+9 gmzS7u #~>=lDrmuaڎ:@ 1u|eLaE>@JJrFQO"{\2P;Nk˷aRN#))buPbb@E:pC)\y!Xpw4EA=J{6m?U)Wm'.&tHhDqFVH/ug1FȐA\/*\Y/IL`|XtQ~zXa1<3|҄koȤC~[4?F~ )ąœQg튳&i{V]&J*)XNtF|?O칓1lVPPYIhKj7nMx3 ,_[bxXmۏ籭wFK G;10_b홟 zng@8ɥ[t2?>6`Ȍɯojai)է#z2R ;áFH'gZ=)aO Rr=ؐ?ى2M)_W`MCFgK[mɐm}@V(+mPy٫XXЫG⢰.lyr [p1 <{! H#|w`5sP1vQ#)-e0nJH|rC.e^&zqE 0ǸфZO2nbHQ0#\o9tycT3] >PN 'ATyUgk/|@Ƒ:mrVOűo+ [9/&UO|{7Ĩ*TF/*XthJ2iLNce>F'lN2M([pzA\5#'*-kM[+7ZRO#}r GeZ j9(\4y":p8e}d۴LMƐ 3*HW`Wh+%<< ~%N5dY뫝:gޔ1z3XUT3U&rˬ)m@' uf}7INtB@1!}y4 3ckVy9-f[ue} lgitéfh'~[^YhN4}AU}=m 5i.@g-s>3uz=@>v2VL,.Oag[pՎWrm\]2)v6&!)F9ո@L%.kX'BѹcR 9|)Wbg@UmMyŐgmжjĔVx`ˡ?sh2%teYNcB7āϧ9q9+5q?SnԣS5rV>r6#g.BN&ݾ ^^_ Vs^f$>l%G"YCÒvWP4rHKm.`֞ݧQP*2 6f& PYY{TILޫ2$kRā2>ggkfcLEo,V3͚3UF0 }6nl˺|;Z[%6i9ҬUf+U #LDcW =-wE(ITUg7,}oJLyK+T(htt⭬‚ѱKp*n*9p(s|glR("@<#Q!Mh(&ws1%$[QX gZ>&L+cPDFbgHS n Oz*Mc xmCaԽݜT [Ck&qzzix7DQ7;{3cuE{IȾB}KA)r JB90l )-4?Vb O5A&Ù]BْK,/Kv.f* 5]"$` fp!KDN naʼn\ O ~wE& 2~xYR.jp,hs'y*Agl'1N3FHr,D#)OVU #C;93Nb-I󩁔o3Cln+-WDt!mn{b72;go1ָƧ%y^GA~&\HWA2~l< o;1cS8Wnz,QiȮ+,+ήd:w( Um](;Oᅡof4>cM v)YCN< /&uaa$*b59SI²!ǮHCtAQH۫^ERzݧٌe0IZW a 2 Zt.oߒnM*2NprCB{ǁ>'DlQ&rC$W[9FgȋMF_޸>PKv "`o&ʳPE}e)5b"9a)3čI$Lrz{@=-IL[ t"BD6srmm|cC 3H{ u>ryc_T#,OwNmoW~w3XAi 7_L@iA8('|q^N/Oj7Ы*9C3xyMJcG{gAoD*́InX4M6S$CEjʿĊ89St(؞6"tzº&{ Yb!vMbkZ O$61ƌn e0P3 _n!H8Gz"ҍs,B};JZo-wKczeF ϣ #yjXcf1i9e=C]8~U+Ыssfyӱؕ9 Pg@M:]<ݽC|}. QYRx>V/ˆ S WT[oK^2jP TW_F:ƴUٮ%l 'hsn[!'\+,z)W=&'+2h%(I1'"ERv1\HuL3uMc@ګvqujs4+fot.P>VuTV*i;0(fB^e0?M {זƠB4umll:@[?1iYF==ݯvkLZB:ZBx_ZPjG_~/_Xoj`pIxdLj:٦.BuKGD p Ԧg Y D- u6FC?UִڵKqf0Iq3*Q|p'H!—8޲o*'v@y;6<`;$)7h@۱XȒ*q7nÝ"C(HcK 1*ZL6]+e&aL*N"C{Ӽn}t{ա,@1)?RA9lTGpi wDpLn?Üx84.q$zt nV1;m LVĎ Uԡ`]''sV LimO,#vN:L366{QD&nu8ߞϦrF.hC`7ۇДѐq`C+(Y_+&e$)A>v!}aM&K>Aݒȭ[$Pt3QB勤_ P&Qm}طIzU=\7I!F~"Isڵ폼iM.坝TJAgpe3Eo^Z-T<'Y6nƸi?$ %3x2r4˪,D{iYn̪xquH#z|ְoмժc5 FD8bgv mE>{pLӫ \7b. i.띀 VIY{4uT/VCx'N.[ډI@rs{ F*&$p~&Ɂs°1_KZ6_Y;5iluŻL= 9.|֐C]Hk> B5Be"`=3rnR>0* W3<:&ѦQ+j=L9Dʢ c,⺭ Ö۱y$J03*!IŞ`95B5G }=gNp`zm(/ "K1 &)x W< p9\f06᚝_6[z.'zd!nP ]/UTdJ34r?=HiCM[-)!/]e`!۔;}" $|?A9KAZLSBQl!#yG […j CڃJJOӰׇDp`L OMB2*eK24aNzև(KJ Tk|H\q`̴Hy9_bp- YᲳUcX&s֔Xb p߃F1?Ii)hwss™]M8\>~ apTq`@?Kcg ԝjjwm0"vݐ#C~x?eL/+P[̇#`V,׹;Iᶖ ~j }Cx8FsL o:AX,=?Z5?CJ῅ᇑo,dG7HlcӑKU`ָ}GĽۮcrde엪hTP`+gQBYJ0jP`^"XߞR_K\jd1 G/8rDό]?^-ZnC_qhx=)o6;b~je@ѝok;\".z;_fܞ`5+Jʩ Q|㛘wf8N]h*QܹČKxH ᓡ9\m i=9Oȴ3]Ũ?#pftY`Pw3~5>hDiF\zG >{X$^I~VrxI2u"q>Ao,ڬq.x?F}<;Ug2Zͷ%.*8UrۙZ_&}8ƄY@L%iTM}#ɼ[4,=l1;V`B\ =$U0DM*}O BH1dIFKA|1*αmIt&4.}_ÛD6-~}ka Q\뮍nd(^,! ; C/ssl|K$= aCn6vdr2ma*CǕ[ܞYґNVܘ k?1 uPFd)ֽ{ӻƽBs @zC#>Y+,udqTEY}Zm"E[ H hlZ;ᅍ,1XFWtIac*@OK4:߸}S}ŏtxJB^tuX,Y,.q>1Jd5LT Σ@wK:YgйhZ|18;Oꉇkjқ,n-j|e $ II\4Ud: 0jjo;lk:b|#ఙ*Z#d ٱwlX9gu^nM[Vi 6݆` U`k ,W=Q@Ε*ݷxE ݈4$n]?otE4CP}T)hqkW_ԎZ%y:NA=&Zy|3Φ#!4Lq(+s(Ϗb1ml?ʪҫ\duM|def,VK.. em6WAy-ryzc(u>7gӒ6d}eӇ]mSQjG*$ P,wZg-] 6 ypwM>&('% ҡ5!wۤ")@YV~g9K7ب1 bO޳}z{6@&U:*:R̬`kى1aJH.W$ʲ@r?c=krWűtddISVe$];C':LO!O>?x@$$/T?0Ĥ3vTI4~9  Z;|S4.Op%/GLoYilwshdiٮYyxCF"M.ww~Rw?CÏ6^"?^+\nR6J+./ao7f~-Ҁs'mxdzB7WUm'lwz!VmlZ bNs;&SrwgvYѴ 4Xn.s5LX Icu۳ݥ'#xւ6\E!e9e]ᵏPc ԻTۃDciScu6J?Z؉"Wz|=~%r =XXό/!H! b1ux`R"_Oj |vTlz5 ]Cn>4n)"dAÎ)gW%N1y*ا9ك ;wJ(.QYfuX&Bn'T+٫YX뽓 5 w!0:CV}9)>TٵT*)]nL.Gsa|= [[.SB_Xōs>cQK@FZ`ϷyDEpϙ{r /^M%ŀiw6Rz+ɱ,ک;H{S)龙i5dgb(0 7iCjOny3ͮ|^&ԭل??M%o,B\64^O(C|N\`q9t~sҼ07CZ]SWNr- %0#\\rm0L콺twϳ=Zy($yGÑ=vUWaO[lA.dZSuZ竚?-]&IBq7%t&nC2x^sK52R l:<C,p ߪG*x ?ް=9kgb+C>VzɴȒ/z)sWh:5%&&&S*fW _جMRڗF,;E'%ґj_mF̫3~h?'ZkATOIJtL9վ@b3w }Nӟ[_ʪ6Fw89jYSZ{J#lΖ%r~!y 8E4РNA8Kia>FKx^9oi-TC t9HVpK`RDvjԁczqp$(h՝[qDPփmiK0wҢ,M-;/jb [̹Or1_߅ a:*yL)4D= 1<*/i͹@\R1i$Ɏm2Y;/xLV˰ߔ=Sa"rnO ( `)|;;`=z-0 BLIhl`ˠ rfUyY'yk ?ާnT/m Dꖌ3s2-OT5.$JT'aDwHKڂ7绿hr/M l=\3XYPXZh0ll`y &kd c؂jӰ58 |uLs)t=~#[xr"36c*"K1 YG_'wjq =C=wO I>th7ǰ6("\U3pc|:vdAE. ڿO``QпzE%4xg|NkVnPT Dt*^5#@z,_Ms_t˥^megukWTTi*__X+Ux!~+sga3n$c.j3Ӵgw|nuQC8e;Wy5*->}7Woܸ;{/?8ѷQ1}Tb᳉z5"3^3ϻHvJ: XKNѴg?b<b%/xFHLnxɓl{ޜ]#6kK y3z x"o.'O5Ua ꜄wV)G֦TPdch=: ?m 8. JvC.y@%ƨ2v [d۶tn ǥ\bYi?ιB<`oj{_M>, N'Ck6t3{%c>64)=C+ٺ0ۜSm^ҼTʌY@'oFkXvR1Б_:"ѶzRTPewM}+l|ࢹTz%#J2b'Jn2++pOelq"6w@K L8kz#X's?IFnG+3Kd <+ )B2TV݁D'.mEL]7"/<.n/D;!=NA|f] fN7P) k1i!L;0.|v5/>d5p򏘗;bl^sEhq:a~`.P7 3|˓C? yCI@ndñ)Y5"lv"Qg&%+~{l'[eWyodw]%^Njwkо ]iuaVAQ6oTûED']FAFZeizyԼiz %%ſ;&65ƇxsʽEޱWӜ*fjUDg 4 [e3\Y3)~PeגOθ-Teʱ:ZĦ~sw'3IUށ5Xϑ :,Vf1-f#Us-] gCU0iП,ԤX, ,DZ6pr1źTmDRߛQ_׌$1Yp煦jw鄭qM'`3ͪM/YN&-p$zР+ME^7bjqZ8 S_)@`e`"7ԱYY /*GSG#}- c6ЧMXjMI*[1hAZu }isՄGa/jVI47^x \R ]=_L-sGWJ$ v}%J2A*" i+.ִ1b3 "--t3e nQW(5gfrveOHپEV@~x#U 5|)(jt LB2F[yNv0AS@6m}G/kl? fV+(ꃠT=$Xa47dLK;jWS|CJ^Ė *گ+GETdƫ\XA~LGu&I,P@džh2^h$(p/3,-*@Iv@xKҡDS$Rܒ[J.bWi-^}Wb P5^ L jی )(. T3VVyҳl!N dȼKSLdmleFNwi[AL/[쓅~D[ؗ ,] rcwS Fe.'H[2T#_ÖLcRoӻ!'3d/>̱Ϧs-p&R~pq wHU2n>@@]ÉK]ez/:L{޼rwÝ5 B7[F(ˀo/V6׬[NT\g_[ǶٷJh5hj3=Teb? m*̰yJ H|U)|T]'/t&?*/=E>Pw~" }|k`6w3w/ =8Jc%4^S\l4S;m "2` "yq׹4%s ayd'^R *VhKQ旮1r7N B"m6|  234sV\#A`5IO> fRxJV(h>B݉9E`! 2@:Pw7 g]Ojm4%7kp.>BK_,(]Lv~3@R1OcOr*F쒛o\PFp5+p΂뛫+f4vԸM8Gba߯Z~cDgW'U}=lq'"d8Cކg!5eGmﲍs` G6k5c?rA'rG)l2t"A\i%pL3BV}xN6f TȒB((_]oS[q E2 tHFlaQl 1'**U9T{li!T\+h/C q:\Ԭk&aMׄG[WaJ9΃k>2S-x"m/.!=KQwbD@ sO~͐BfB ' .}~ͩ|1)$s ۑº;#5?[/-uLXc~gK +q_wxjp&;xm~5Z@ro.l4DʆR6Ŷ?ڞ̅,T70~@ qkr@Yi>a5GUGBagȜc&B7eK&SPsޢFSNF F@Dz&;enjůc'C"$,b"A3wGVam]k"V-F1Oj7WUEkV1Q1>0cB%ᶰ^CkVq|M/ ۉ+èkJ?aQb d*o^3XXpKmȋ:MNs%'Siט]RȑrGV.S%xA2!7C)/EzShm5FZь͞ȏ wr-+ !TR-+C1ȹGC@gl~g.[.3Uć=*0~Q^`W[&9",%躴mmʱ-&q2A+6uݯ5Vs؅橰rjysȯNgΰ9bc7=ozCE1U:X^o'> N \~VAC@$ ɘX 8<ރjN[c̉}ۙg즘 6k:|vcc,a.G %2'4N?gC4q^\Nt1  Flpo?'yhR\rcƿ!eCٳ!|PDXU#ٯ@+ խ݁,^Bz?L уLUf9N1 G$\LK1f s]Ңt5}YڦsԤ RJp1J¨Kv]MEnlӽ=C&"HF8 RmH;,U`SvleMy@g0y:SYcuڍy+i+\GaJUئa&y?FҰCY#~|')z"&dxąXkT.z)t}w³tm5 /=)(2%U +%HnE6 g╵> ك'}Lk;<|ᾏc2q&Z+s j,=P,ޘ5 TPNa@tS[\/@LPֿ-B42i0;P{tlx> ME/'U$_fۚ?ׅ(ZVM)בO)m[y;΃Ffg n{'bHi0_s=X"{Fr(j'Zӑr[ęejmB1m uE76& OREJ-ܴuXQS85LlF}*U3p -x2vnkw]Qv:ư`T/p%s*걝~ ^&\}?cCsc^:{L6) oqHQkD2ix8EC'>(\O }g II }>czğf|#'c̄eNF*qGɹ*f Y;ǿr=sسu@D]sY`g]oC%a TK#ZZ@z?oA8z8łiKOퟹ]E Fb%@fłT \WhVe{|y֩ Bzs⎵dRܶ$dofHCb<ΐq,R Ӗ@Ρ~ 1lj)u6LPhnǢLML ʢ %c[On@T86X2x7~~kgDlۅΈ=$InkntC=Q%&AvBw KvKɿejoxz XCc穼T;3HJ7YBe҇jsL1|ZQu=X;E[u̷7hP(Y*YL' lLgZH˹+9Tg*,-hs5OV|L/T ;Ut`Ei(ۋ:` $LxY=ѹSMl{fĻ۲Sn%Hz!EwT;@K#ΏTBW'\pK[ S$C(^MYSwqY& ZE.6ϙ,3{yK˭&;qF*.%6ӄ-;4Fzv_1Ms9hoO bq{&MuA+L|^Q^5D.X#ԣ@ Dz .d](xwNT5~CZIΪ" }ε8Td;da$}EK\k+V$<$5^®)8~:oUb·_WwL(,B>iQB\?hRO0LgVFV!jn(iejP槅 ecq]@25i|gpml2&*9ۏIznLw_I:֙7/Jq:uzlKt~!Xd"G1,$5%6d82U u JP;yPKh:Պ~楕yY*aƧEwM"K&R-/c;KOчT7Vw%޲R˛1+l>2QE 8-u A\:a4a >M ?<$=hxmU0Oq%:̲ޘ*u?k7v: EEwDU]A  B4۳Yg𴃯9׵U2C5ҵױvoqE6iiQ"%BD.[;eg^X-)1|&06&}=J {}>$7 Sf{xɟcb1.xTBzASpz͏/s:i/qf1)0:k"-oš݌0t6oLDvޗ+W lBz@ hR yŬ*5+g^ب)4v8ii1+̈́" bs+1 #0 ӗ(V?Jv\9o^?)"5ڼ1HܑU&Zx{*䀸\@m4cssPgW36fX!ZB?^z yuoأLa.r &KCucAqۡ:Y Xg*JjZ-zL"xpC;`僑҈EQ)P:y;44C<%E^~iu% nt"S~K@}a@ JZm6a<ڮ=|5{DOTgQm) М Ğ$#ZX.!΁M8UW&(-+%\cbqa\H`5p9 36g+#BBŁ4嵐miFD=]54~VMBa,J};S_Z^7w4k1$\QNVdL8v@dXvM@)m_^}d:q.RA-%CdSF~sޓnJuGн,k_1?&UvMJiք=T x9nV=t>6rTmp G l nAb$$+E疣T'CcQgă٭ X1Sg^o'j3+j삢g]zwM_z@Xf_-߲ڭ׬RV``Q1yRwwzMASsKA?og =b75fHŻD;$bR/(BO Z c_p etJlF-ʾ] <\Wp/ qln- zA(v E 7r6ÏPŰH*͟PЉQ l9m2*5h30|aZ 'lG&רh \׍ra%G0UF0K̍!NzVP>+I_ :B"7 7~~0 #'&FcO9RҠ3fz]$DCϿ%VZ^TY3g#+;nR;Ke++Ip

tp2E#rQ}! wP_'޴ /J|'uZ`j̧-m:RCȇohxdyԑzc]{Srpڏ) t{<ꦏ6(\c`vxV~s3a-K8yW߭z"{j;,|n!ř,&O0NzNC"_(0hmw\@z8 ʐ9L'9XRznL3U7JS)3 DoA߮B~0 8} R8M%LxXP0EުD e6d*Hc|շGdԜjjh KiaVSug,&x)1RLdʾ<, 4/,{ۅ+.Bul +3 le0?[;O=»kH6o= d8< ť ,(Ζ~7-8 f䇄9~Ui3K,p#Q4^UsA{fh+_4htr|} - DZJCPyBןOPlT>qOw|5\j_],Jl64W4Y4Gی̊WCdZM~>i݄dH[Ѡ`yirkDЙ_b}sfp~s)Ds2 37S4xsu+)&xR["NeЊYqbUє:^Ge01 Bɓ״/PpCm-+uJTVCp^#W5 x/VuaT¡ˊL>™| o8UiiS~Sʒj q͚ x=%; ,htD>~8P"z8E8.=DOeGl 1;ڕ!f EJ5˓GpLXv + y < @z)lK60(²a8 UVF?DZBHm ;G%ݻD @xKA86Mr %rxn`ȹ،s-xģqeڢM17D-tttޔJ9N<*l Z| VSC-Wk!JHὋtߍN/DZ_j0ր7;ݫH45䖻2ZvZ ¹(''h,?utix";a _ӈT {rbwvuLV32 3$pec GI"R݌:?9`;`TBčq2 K*B>ZA㛞'9z,ǐ"$WJt7 {Z?FF^Z 7~,i /oѭ+oٶ}B"QŢ!ϔA("ӭ+Bo89]Mp& tEYg{ HiVγ2{W_cSI8PNlEKxktW"R1Xk)}AN^UvbXn)^5%UK?,sy $_7ƚ'ǂؾ]khZk8w ںîU {6L$LH= ֌. e(RE0ْ=~$orڲ*ZzeuX (!ǶV/`.B$a\pJ,$; w{rsHy(nN3j<= n[4&kSAbT s77^? %--=ڝ]͜>=#CW *%XzQzsJ.l{[u tzPڡn&Ο{< G"c$T{:pIԊu{7CaY)8վ)}mNu;R mi,)2zrgȜQ]x2?<6P̥*"M ܮ }Tbi/RmF@b#&5:%(OŅs$T#KQy*4I;?0Hӵ {$ I| :.Y;e(AMD3$0=nZX2Ud[[u:nd,kKw2"9N6Š] owNMk)EÒ+RbQ7U#¦naj*{ u #{3W|C\mĂAt '\dvC-0Tf` 6,'AJ ""kuV*I\_$#;XhZ 9 2@yK.[U?(ڕoSb"X/7$ nlmY'LK[vܭtSI"$l<+SJeJ@Vrx/o!qAص-dr"ƻT6BzOμ= l ζafGɀ|bdkۘdThthĈQA"ΏĥgӜkp91UE÷O B' #Uᬦ@V<^SK0YO<Dr;"l4j>L֟hjWQzu^hc.3k(a-ǧ2|787?6&W %馰g"MW<\ -eC%#C.80|Xո[T ~:Di~yA3W2p^Gl-[ʮPm)_N1%w$TX` Fٛ\%X 'v;L3J['cϺz %$(~0ՑLK)rn s.8$\xXtF{]T7Uvþ%F{3JX\)/{-6X8^ 2a`ɐ{Da &ڄ9o^FK-uJl> B`ܾV%sb 4-h10j'_p%d$Nx|-zYSG$Jc[մO6'q,`ցYH[ơO+yk-xj4[kK2\ M`&":_\z *"=:j>JSdqJU(oG ?k̭=L**YZ⢊*UӛW(Կ'UJ&K3N?6 \!Q /TA1@<{cV$]PJ\뉦1/yQ C3XN:R$'Q({3yocRf &HRG^v 6rtxZai.L$"Zi'zbw酆i䓻NB?x•r,ggPfdU(l"@ۯţ5f;#N[%M!XdҬݞoG.(@lgX/[yL_̒ ^.JOބ iPzV\7– z[r[˚>Pmtg#BTe߈ƏT:)}pJ;*ra1BѨ3CT.|)zZq^,&clmUl9@[WXRMnoFg>y? !2܎M{~%МPx=nL+yF$KQlqhk t.nL:1L`BB-y详>De1rdnΈ' ))PHuȷ:k4[,ar|YȯT̯Z[+O(sFr P rWЯ 8tIoI'N"1;^JlI}\O*|{4.~9|wvlɩ=ky*h|S`9`7%t_Tʭ֜!;_ȻHZ?[u% H;pȧ Yoa$ŭ55ޛz{n-Y`jL&Av~[ !¨q{!ڿ<0st>L^bb!d߱r؋ya[>k6ݳi[A5ǡ2/#I0*ß)j[<l_SK;.lH?WG>F `!F=v`0 Xk9f N=i=Qn("H/sbU:Kafu9œqe,e3BkD @NfMgLLdՎiᢑYr[6љox?0g LryrBH |!bf^/iҪvaLcb M?MF-WVODԶ+xsk=C[0br*NjOU~ԝo+ɯlՑb/"T׻x%)q4܇-zaD۱}~K<M GP]{G^| >Iʼ4PMO=?:agM" 9ևѢiVďJD-fD.DY=q{(fg!;8Q H!{! {D7vfb)쟓WiH\Z&෭YC7` t7vMe$ #<2#2Inku#ZE+[KM>h<]{T 29F{N?K!?uô™[0XL{)k/R\n1Hxnb|7;>_lf?) OɘbKfmF( Hx!N?Ha 78ih9HGeMȔĻnLi5FCf}Mb{1ˉ^7б̠tBLvWߌPhD5wg0}+lϥ@Q=K"&{)h+.62 Ee,, Vy<3v 6\Ÿz:6A5S cUc*`BއLxQ ;8@Ge׼gkK#63aUmoJ6€}R6L.0g'H`Х3t2o]5<ϼ̱U'hLՇ+_4e}^)؅w'i꣉‰8 xL!谌1X{} ䷤VF4%2}\1jL Ш?$Uqu ټmdg i._Q'ڎ܀zCWnt{m bHvj4!e !d׭惻_ ZO֓,ק_q˼(zYQlD#1V cB?uz;?yR6$ ZjEJTӎ saeUSЯVlQN[3* {Wv'ryY;"$-奖 K8U? 'l4潂>#6}"vycrpr+oTYy' WDJT;At@8'6J Y!^=ഽqHu<{© OĚ&ۡa8tfsa?j(^!Dyp(|6;nt4Z旰xlgf֊ppXdvҾ> Xp6bAZn:D!,qf'gs@4L+<3XE ݾV/tYj.̈pm~wx|ԿѓP:rךnű}7^q)nFȎܧƤ %g8 y[}#UctP=֊`{`?nCMt > j4V̻MFLjV_>jj!\Z 9 XDgϫMFg0=nqRp@~NhbgO\NݙQӉۨ2ty; -C+'GiD+@ {!mfFNQqb]H *E)ynf/@Z j7x"6ņjы9uSi`E2?; [FsiP|' LޗMѫ5[ .ߟxOu}8a[([9Jc JOH_ y]9,'L&aD$e;m} b4+"*?XeK: #纚=VtP`2JڮU\ae}"v) CFV]⃼\ :Ř@Gf}+W\VB)ź]rIR@ e?Xڗ6T.kΕk h ]&qDj(aF[O, U~^69~1dl7){qO/TW&hT0bC蟤Z|فfyhk+,7t~'286w'$q]r3oT /ອVW%h"~UfQu8 /:Yt]V{ܾ1F60nY$,gc{vO]X3Sc%x8e vͥ#U4v&DCN?wPqυz0WrE Rqq&.SW/0ϼB?:q\Es tw1~sw^clm(.ݙ]KLD' 8#Mwykjm3o\ytOwO+ HNĊ'34#^<epiBnb=v8_'3S+SCB^MTd(]OL8 s/o95{BJY^ؙVn4W}(qqPm-7gw0 y(Zn}{n/ኯrH`|x콩m®N*8S`r<5^=c(Ӭk i5 Ęat "U.+kZN#T(m= үoiXnR($eC<O#EMtsbŠ pR!}N%s@M @e((_ƴ`Q߂Ь셿[ rӌMcTFM}\d.lCł4zefU`_QDyR*n/5SƘz Ҷ%RQ>4WMUVC27%8)s6 4&@-1`Ԗ.k^cG5:Oy}p}[srdGk܋8QBԝ+F,PB1k0[|iO1O 2f-[ʲh}f?i|G >SPا\S@^K }s~+C@PL\# e%{g2k2!쪸ZpO?R˝@X^`oB O ( k ;녏c^*{9LTT%Y#kTrћsgӞKgQRRibeuqGHQ,Q͜ &nmX%k9˭MU/+Jn(CKk;k_.6pz\X&]%FGq_{&\Ǜ} ~ z#D$4!Xa$Gn}6]ҟhB7#F>`N_|ٞIOP/n l':kd`Cd-|;0jk; ) +$lQX?+)#exVb+3I#n9 fQ5h oSpRS-Jn[Vvv8'4eV!;X/y_<(,nHxs{p@(QzӦ\V^h+OM\m t@k0V^הr@Bp=rH"5&-ĖfN"\W?plUzgJɵf_EMaNw#zdciXJdWޔN6ͳtxrnf1d ~;l mB}*B9-v%3s!t5³()~'468 x fEp;zjD[-zfԒpG+B.kd/y(~6W!g>/tJp8DlLf2Y޿7)3nkBKi$H ! 'vAmuy+5)52ǩH3җlOXR~I~\ZJDz"Kuc_/WtQ0{C1Mxd=0[Ff5J>aV{"C͐jGYnBӕgad+@xͩsŎ#l`YwXQ, z[.=?a TNL Ys.{^)$I"!x#@H+Qz81E >|`$BJK6^wRkG.(F/ڥ=2.UTygAHRkE[/=<a2֌žuRyrT:quQfHxF0BrT\sl-&"e!P3˥Y֬#.ȟuT'uu xmf #Z"0;۹V'ۇ-.E(9P 9 -)𼍃M]Ȳ,E y5dBW f)'oogBquQj.pOmؓ@=:MoJVaݟV_&c{ K!?4ybOsn\PjEL}o9D`rAxw9"/j(HT6q裨6@* 䄵MŐYm7JcJM4AꓴX#Y@NXڈ@pH\:i{Wfx˧7и'S(/OPSl-фkaN!gz5e4YQc ݀6Ng4ǔTD]LW$KNωX /( x@{\26V\w [(M`.!6%ޅ ,W_T7l۞@`hD2иzoE"Uh 5K@6\)"#ãYbq:UrG]ĻNxgyz;x$,7ݓQk;>ިvEIIөa/ȫpo;v]QQR[Ԭj积1v8v@"1T0g eZ%&S!Uwz|Xs__F-`ӬE WDW9&zXζWa5yմ'Ԟv9f,9[τ";92zTi }ҜDY\sJ31@0b uhLoPˎ6ߠ;hH,3am(ԏ_Nr{KV͕ҁ"^@.Q`$D˔.HbH#KoB `7G3`? UxoSQ'1\S֝o?Z`79f`E`u"?uZ7ig#1R&'N~*5%GX#fW=J!a@ּ:1]&G$f>v?}6hg"K-3+ʥ?pv0Z4!MيL_`uS* [,!Mϓ#h/{iH:.0`n`3'5-pz.^7׺ CZ4ÇV ۋԬKE?\b1Inf#-HOj5)nw!_}*ٔ DV_yC@BǠ%w/%Xd1L*c><+  xNWս}~&e>gm1m:$0GFa213T,z?t4߫CU0ƆFW,d߳ DMB1 u.jK 3r >ΌiܔAR_g1q FlaM ˋلEZR$Jh ?[,kT͒Su ,:U~^1^<<{<-[ݖ)F>_om;Û!nU2$}}Ҫ:() i+8H˵((zV~I޾-#לz"f(y(>orbנB&H#XחQO,n$ җ!jNXs].1`iy_/h™]W,PO#MW-x^#2 |o ~\K&c7_d)nFx.8Mh;W"29$ql%@ɿU_H_!A=$်s KvW|OVmn0M餀>[AT1 m֌`Q Esh *ts'2GnqYc~yw 9B $0CJzfjGOX:ʐm4@0[hTW`l^udS; !$Q>,5@~w&:=Gp!AsyӍ2Jn:`dTx|/>}saJXCaA)]BmY)b(6~UDbjg)zNmpQ 7O# ;~aїmHUt]{ P,j&Uf 90ڄׯ`ȭfpH~xT.Xk. uG.W `unwgt#ZԄm?L?)꘢^{Fo|nXYu&d`n H]3Y>[2iF/ y,JNy}"/C:}ȧyɒh{Z{ܥvh跹;\M)FAo) 6`lmSv.qTK<~6X.1Vg3 @ǯ_Pk[C讎1:4bFށHl2ՖAAa!0K7E↩d~" ؆=_n*c\}1ie(G%{F}0,Vık3*I~PkaQ]C>x'cXnǮV*֍٢5]hڪ; Đ21<܎]C|i$$c%| ~lKq:|(OkNrnw"Zw6A3&<.$6WӁ#ZXPk|uMr)c[-(ed֬6s u;H׶ ~ĎyQbDbtU6łWJćm."D8hv teN^X ȆO|:M'Y GT:v;MБ;f8g͆Vʶ%'TaB)(F #v8/&р> mwKoŴcPJJ!f^٤I؋}oc [ME)r)P &Qռh`q?F;J0JFr~6kVYȝƎhhA&6 E+2ѳݲ:L:@Ͼﻻ![0)p2ઁ@ral؏:*D^xk"[C c?dۇ7:ޒ1]k&y*rF!02EoTHs洫 7N7]|us(1) Hd ,XW\w$5:- tBr:3KK$XҞ3àgRc:V[ ōhB/ҎryaW+|W5lPUє}osKB~弛"% >_81NQt/Di]XĥuO&WXXyrF8z@YSlZMl SU E<zJ-w{Aj"zG$٬b;Jn۽|Hr,^}RCXKBy9k})2/4@HCyqv䀂s)CyEmY# o+O - f3B8KI@z(3<'*%I#0>,Q銔{JQCuJτD/iݾ\lSdjƨ-/ek$VwcȞ6FyN?{OQŐ<Eվyw~}{r;cGM 3ٟ%[cKweᜁ'Gkʈ@L3Of"dQٝ'u6Hܘ'&^Xt eek H}mN}.V?ks6\88EމJ3[EeO~:/u::&!d0f Gß[ujir D\f\L`$%{ͤqڕ&MNN} "M9Ks WC9%7cr1nt]1?y~_kǕ:TalRxܿ[:#ucmhK&g 7NrἕoB:nL7:nOAzգqbjݾoEp &eQp&ōLnlUղKYQ_CʩANA_ ?vX F\k֫J$-gH^Fc0lGRI܃o%"4 ?*  X>VWS^ MK/a]CR.2Ucv^s; GzzD ,7{ dVnUYR?ץX U 2ЉS{~o?x2Ww,D$*FnPj@EZֱGس3sEkS=snl[ݬB9.H'/xZ-#PtQo̘=Aw,Ӯz-=l*.)J}nv{`V𧸕xҗS孛<-4QͦLVt/Ad%"bgtC?K;-Ƌg KY5 >/ƥlkhL10~$wFzӬ !jYQP!ƭ3%Q>f\hҜ5}i˹UC;uaЍWǠ8Lo{OR)r#)Dܖc1=}S|lSxieffq 7YY mpPGER`Ytcq(' ;tc(Pn4K톓u v9ag|Ay/w/+'&=3Ls{L_E.<ޛ+f0?,)Rj[~r.5r@c!=}Wes,,Ƭ%2>~-;#'@cwu׮ؤ8 +DO #-4ty" N_6_# qg@՜#NNObhz!NCg(|^'"Iul1z U%IF{=k .U%ټLlC^,.5"Qi mVF PF/ӅK(A.xrM*#5 2dkij;P:XK+()3;vVeΰ܅0@#B3}bcޯ%RIrn.OŞ9I&=qRfc ffK@Q OLUAV)<i4 ̸-x10j^AZB7ib΍ G;If] zxG;{+},F\=G,ӌZПJS'lmz#wЫ Ex ZQIp7 ED :@|x;4z/yXmkx 8Oa;sFpOS)A>w 0Gǭlx )>bN|x/8:%S*هlStF3I>~Pi4,^ӄ\ ke)o뽾&,1UHOqJ#F_s3&Pc噣"ԱYc uxOsa7%觼suAi$r5u(,BU=DxAIӢ]!8jW 8'K|g5KF?br/[e/jyar͂NRe ( ۶:hW/'ePg@!S?̈i)JG.Q|&7d~rٺ55XN@Xe]| )T#MHX[H񒋬D/=QF)@>%w^f!{hb6 b׼|!7"_]1p7`kLMo%.򚸘<VVq\nCy2,8u.*2%D:5,%]|դVT}5N6 $T囝uVΰ/HJ;LNa (:E`#&|ç_'zכt"q> 346;|@"o7vFm͛|!biE9%Fy1oy{ ࠂ9BZ6#),_ yT:c9"Bz_v4ǧX9@GUO5[*ficKFKNrV D4&^ENJ \Ǫ'[^]lD2'ӑZTkƿx!v$u}fmRO 7g^w̆ING_ն-"`pۏپA[ {0{ACR#`1]E'ݑP#>l%?W!3P2Px1U͍ޓ|+ mޠ:ձU.Cq';fatZ. kV?8_p'40kUZhs&1G2{{ 7l̞cCSh+Ae^_i;I,6IMg\Z1X ;fȮn۬2WW㼥H8pyc~쵅R= "Un/Y]p\@LIw>x}FcV?빤Δ+mĸ91zJ`KnƟl*%j/(~mY2Nqp\m#@ٙY=k; ru,·^liǮ$"2Ҍ.( i}Q$?xسq=s(?#N?Hc(kCLg5!8{FG]4od]NݠK¯#k25[Q0Pr&Ff ҽ)A(&~A*&IHWixnǹ+dm{ֺA/u]~ UJ$jiu6zvT_x,^O1r&T{MAz,"ؾ|uH񭢮ΟO؃>~H؋E2z0RC;MUo0Zy L2cަ*X $:._ ڿnP40?0YL2[:q%xK+\d|Zkj#ڊ%6SҌ~jSo(u;}"F3sd2\ʜر3ae q`@Ywa vXfQD! =$?`"d[ '~2Ge>C @FtJyi}r52#)' 'Lt5{Uv*iaC.m4ߚj'\"TĞ"}uJ;wf3/3Ua1Tr5SPW~W@diZ1D"A:(R[s~+DL8n5zYn0i8MSgP؃ Ty 1[}r_USehS6e1mNM>< C^ؾ"=Aԝ`27և])]#&~h,XeCI O-SsTГ° UXOxٰ1 /HӼb*s' 5p ĽZ@ſ 9Mti\#qN4+A}Oɔ":׌r՘BOC,$sBFw/`ݞ&z)vSuN|zNϫ9A_Gu9<<.o֯.JTq:]dw$O8X:۲w1&L>}`SgN|g"C};Yuٝõ D5Ba^`HTvHsK<"v&X$!0.oHy~\ѥ7vŅk לyk RE^r1 z@}p,U%'\)]rAfwr}y{݉IP2VT<‘XX R{V,՞dh*C}d儍ӂMI%_ο Ja-5@#]KZl0[+s4W| {w:r1UyaVL)q E%i}̗9eXN3lwq%Wma!^e"AD! emZ?,clA,L9|0,,<].ҁշѱ.gSU2֦O-fݺ8`N'W.0FU,TОfPH2a\Ic$7ߕL#j;1Z`2|x:SΌӵbE"R`(@U?*F* ~kI 7Yu_^ }O5OY%)s@p NAD򖺡V#vR)hZPB=f,uY?ŝmUgT,?EHtz%fL_10umֲɗD6e8lar{2^Ʉ^9!gle]DbT+S,pSolu͐KyF Q#u(O* Qekmxc9GpYM<,{ !EB' 5Z1aIĺ_$5W$͝R_TVXՌ֣{>債a@G5{4\]dO7?2#؄εo|tQoyheI].rS ,P {#tP<5c,IS6lw9}/;-vxcJպ`_ATKPȫݘy4?q_uߤY5v?\)kFgKp|, Xj2./|B>kc}R (#0A1/^+AI>lD2'"WaXܤ'ol4|br5a8ywv<$ m@mXxe%٬2sqk8lT!exrBh~ .@JɃYEҬ?+ﻞ]eT-J>z;+>" H&nTJv2h R!z{!yY4n? rOQv9jmAY QFꃂC%lN#ł R. R˳tq-}lIr[CQ9~4a)I$4T/`|"oY> X')R5B鉔(fh-!:9iz!R@S&|5\ /3.w&)ueZ72*9µ(;7Fi;p3VDOҤ}CZ6 XjSXD-rU 7_+}?^= @8ZvCQ0oybF0ߚ-݃R Daan7quY"^1Cw|uiU^#*ϒ]_np0y'Y:.5$r5 z̍E^Kz>VF@47A /J0;hjՠL?O1C̤‘aRF_Gm[b]I}fVZ RCYB -)Hh'] +k(N0Q#a;N0wNemuzk"K&5z̭J!d(D( eeu>~ \V;9@#? ]~')`hɔNGTu8"nIԝ{@.wٛhMg]FC6tmn^ J:` nIro#W d>π…fv&:hJ~Qi/m. ټmrdf"~GxoN戈'!E^1CX{]!τo< p;H'RZ"5m[.D(/֯ŷyHT>JHSghF&uwIsG+؃9"NL+HZ 0k=Q|!_8h!ۥM5;L>''5? =Kj7 ٧|*\(t'naJOW?@?ۢ} FQ@0-L8kY$%AdI?og[ X1j,; kM~YX7 k')q5Z[vuFvH[n s&Y[Qcp[oce|B̰!:g_b7{jG]]?~sVas Gx >fektg[hy !WL R3nƁWg`DS"Yi6[9|He8Kr:e/ oX>ZoyHfe#tG %.$ٽE"J=CAqy]gN-QX9Ьauy"7r3;csM)U:\\ Xƴ>ۦw( c](|j)+SUҙUWP v_ʓTB0a9iy`%q;|ɷFn.1Is9-dr"YW]g/aolkS`B >E.! y-0z&_H*!*,:wJe*֍:\U ! Gv񔷱425^[QrQc);*J&cVżOX+\t;C X >EaIrv'G6pH*3ADrp!M#臺E]Xս9w,켠s@S!9b1'AGC@̌euwiz Ϧ%[ľ 6jl$jQ+qH,ȸmD'soJclM/?V]XtffG"b.2$9uQ?-'VY(4Á)}\I*ꦻrU G͘z ULC:5Hd k"d!RiJge | d坁G*Gm@iH$ *q>ޑ,Sd}EjaC~ F3 9휱Ylmq2| |r^#/ӵ&rL1sRdIAt%N݀J xhD)+CT/FAH8~p'XW0.NGv[)0p%|sN bYW@=r:C᳄:b/4ke],y)ߜW)<U[!TOAƆOS#O|W4u IUP%_a r]fs,_T΢ZZ1[qs FkV"5NK7V׀kD@DC/*$f]:PY!{TR,]mI@m-y-f9'oSc=@ &{ܵYNaod΋xtC@.?&pQj16R -h$LzYKczژcf;e.9<=ܞs [Ei5=f%D;.ڦ(+x$G_AXs%*^)v9e[' HԌ6^^٣QXn"wIWNF׮!g$W+ΏT-vXv3^M0i[jۼ0`yPXvI0((jM#p=~eOa$?'b$\΂r8@id%v$;$G@$mN`loжZ]5{0LEpܳn#YKMzOm1,2)fCHV)a󡃞LAZQI U=>#Y9}cӧ#_bY@!_X8\#$T볔:7OM/&dRl7Vv)]\<輨huH"oy>KU8N4. z2 eqlbO@_~/n5I=.52TiD nY,~cq=ײH4tH$ߟQicPwĮā^x%ip.J2V,lD`gApIAuͲwZwpa2F-U#MPY$2*b<ƷZkA 6'=U%y(II? ]毐g'Ԗ0V>ћ@̋ZPS & A&W-2AXU.B k0rS|_Iwƃƙ>YLb,!‹$ kVvCISj&>Lt[c!iq.ˢ,TN7ypw켹 YݕsHp "IDQ1S76)9`- Z v^͆*-у Al)d a'(~pbYL4ye[Eh-K˿.KGpnbVƜHWse*H)a0hKw@-{W PA@DEA5-5/_(/UKe7qŢ7:X9ܑPz+<XC:m#nCa<7],=[4E G{j;X  W{PũakW\ng Sӂ wB ď9ȉ͔_8q?G I.ܤ#`1;]o4OA9V\'.u6/}Iv%Zy gv9; R|*(r5H^x,eخγ=*-S(K8bܸ^ d/7F*`HJpAOU UC Fpa+"XT7 g"e){4Y<noF3OEowm]USt3+Fٜ.MInP~.kt劐Q+F M ?;U~79PtY@Od99-iUh [~63z%Lb2jY(qAw>c#k^=Վ8䔮` T=ށ a?K߀osM(q-0C2A; ɥ#-VAɁOrn ; ؜b%'D4/Rt\ڮm7G:s~`A7]͇g(a{4yw4_0\3)11q9 /7p͏!"5  |xRmb I$zEdyȝZhG}LnRƁmzo?UzDeKxiEôwʾۆCmPN­Lrl 8ujKOE/0Q(u9>-k)I4/I(wkD/%^v y24rE$m˭||%q99R (J_c$։u6)^jߚ\nL2P\m]vD{w} @medc\.!ttv)o[ e+(c=z ]*0L@hH0_e _bu1~׏ӎXe(x. P!'?B~t>sv! ER0;ʙ JJUɵlb2,\Ӽ0h2O =e s+8|aA -`kSnZEl?_<E*!Jz d =Ti(E[,1;7'aH*Xrĥ5m#\q[C!Jx(z49nό:茓2? Dt#`sgd? ,ogm6(%dݥQK z3-HqPO~7Cj)atNV*Jӄ,( wS"|[ Sԑ@?hL:2WNY׹աl#ӏbV#U(jJ '{I/AEj j)1EӮOыJgy=Yy Y,&LrLu*[:)EF4Gu[~2MӮbKLmCqJ[ Ɣ:x ]ғX}:ziA>b^9.OpLv(7܁7۩W{_-[>l\C8nB9=HqϽ'AZ/#{e>q ZηnGsqb# 㮃Rq3J s8+ES)Gs`{%&*Js8fX'8}腡 zt/\_s=|")Ar AUAT$Va4y* 3*TQ6q mSʸdqaHJq].WH7\ݳs +3i-Ѝֲ1Ǚb=f.Hl.ǸYzU1(%iS{>%LlaǬTԍ LW aʯE:w,F#oYnPN3XkUT92C{1o+R@o8ș`5:`L-[O nm.o~59s_;mL*[H*EСb֦K3x̔x 4b`Qb92"KEiow)ߕKkSkz; Niefe,97ِ/f T!&u;ૃ]fw„,{?2(Nvn‰M͠i PDk%ciZW3.jkz#P1s"SA&]7A@6D~_vhHZQ1QE|3<3ۣ}%6l~[(*+YV) LRQS8X@jlc9gFLQV$TJ֓; 3/ 6u"KɨsE !*1 }prStj O 8Q]&BZzm&*: 4e0x* (I˭2N0?y Z_YVsưSU[LEZ&aw0r.y5p˖dT|~IRM)0@{/RB釨Uelh"v@A|m7ji.D!{m1g _> fWd@ǭGBwJ8EXvٿɌj:p]٧ $d܇Z-,j{v˓Qaސj0>:r8[Tm %<&t~|,VDMp\.7掤^CW7PR51Ξ>TD͛N5z)1IrNjlN,aL5~DGcė?YlD|P]4g2C{?Fa1"b42u;#ǎAx (dM{ at9_ twjkE`ۥ]8ںz|}pq5pـg!o􅖕X6psL)weh&WSNڝpvfSG*)*0D8!<>OAWŽ.-|rŁ.$R>C3$ jZ=Wޅv7E1FI?~O}ޚJ\oﱂWCmZNis׊[ʣqg2&b(_"H R m:wtܣX2gG(w̗~hmwL{'yo'P0أM0Y`IJe\ tN+(㌧CZzZs0[YfL#TX1 >vK1x~!r 7#AQjț* Ut`&J$4W6IT+ Nv.-OC-~O+"Bݲ6=) 6kho9B(_~饶Lh|>kgB]fDR }-}=HݸR 8쬣:P@ YWT;by'@(ŬZ8ΧǴU.q| wX~6D9_Dv9cr&n ):`s祳 ەE陇7RFRI“aEil|a;묡fA|ίDi=V2̓G0m!3W02HJ6.{ʟ4Nw-TEVij2|KbؾVL"lGh\BwxM.G Q Cy >°AQ( Z *$ʻ S ȻnླྀipŦX5@#BwR"7;歮Ӧ,{9we:.ƃvKL$?33<#v<֓Zի&ǹc>\sKĽ1!Wvf{Uҫlxy+Tn.'oZbhrjB(KҰb %"D o2u;?@rּhUi"\oXwS e{ gd@[zSϵ0LݧSc{(yq*8|]JX;Rزv1&YetCA:ÿ\j~-¹3-%KJ 9{JfWhk-]pDji|Q,󜾰4^`͌+rk)(mEJ ,QfBcZiv۝ml0ux/ncƬڲ m7ЖBYvbŶ+{ȅ{8(AxNtO*~* -y:^ 5h>]Yht~Z 0cn,' ?XpqOƋNVsJZ+– Ytݺ 92'{^A9Ip)Yh.V 2!o8GPmX*QzZl 9Vv>T;7~C2k>cY9fU5VĴrť&GjRVSPdbcG$Ӓ;ɮz~RȀ'L`yn0ˌZzq).5I OW@%;90BIub0Xxh[t=r/NLk"(a~ hTvȟõ_[X37+mazH>bNB)ɌQ"rg :]~v=Nܧx"-|V1^{i}h 0t1Wf@پIϬQtSXEq&ؙQdwR8EU/3Ei0 {:^HF2ؒ'wg0[COLXʋJ+օ"d^JטHDr7ѐ_j݈c7&J69%c_l^ +LCaCݺ. 1ha`Lv}O7p!z8EP4O ,Ȭ֥ȋTYюz:p6c&pV$M)Lo%3szG2@D{8+2r L#+*̎ɞQ!fӌTH"o5a MhVIC1#c_?c>清65/q91)ܴ(FbgA6K&L"}@T4D1Q?Cu]_R@@-@:haUYo JbLt }:Gm|gE@nHAp'D 37/Wv習l~7cNTOkoCi+011gPW}mتrzzwjZe|y \KKw8<7:I6B"tnMC"OXz&v%W)@p(G[}U|o9 SG=J M_ͪ8ap&Ll>}0v"4j9+w-& vm\z4Kg|u.xfj`9CP/z36}53(U^g P|u#Q FY̻?; bmK?FH!94vqLi\\НCX1 j q3]¶`O5YxsDBWk}Qcǎ~TZz-s.HFw'RUq W<эFxe~G/-U뼒cIZwGAA3mp] >II}z V,` o5\OW30@_ zjH7y㛵T3Uù[= lTU>dP t ƣ^nM|Dܙٟ";Qw+XJYXqÖ,J VkB74nHm=eֳlDڌ|Iz*IiԇQmû;!~{5(~q(Y M1ch@gpaא_~[`U;_;wIU= Fȩ8XzmpeM 9wlkZ'' $ :_|c#A /d|}tm E~%VA|N[/V'}{ ԭ8N :0[oNDIG.Em3i]as7)ltH;8'IX?wQEQZ?¦0FviǮ HPyy9m ZS@٦IFZH9]Z<1e*o#zwW}VӢܺ=kB||/~FGܑ np |[By]KHzD+XL9j Pf_;q>4c:JALCdd=mh7jgi2Hو/^y\eC6"&'ь+hEѭtډUNz7WV!R:hZ?XQDߑK]V T ҵdE7" k-s w2䉖S[ɚJym-e5 5Gnރ=D*1.rxP' WnTw%I/NrU#X^YGeӒ8szKG~M -0c)ZVb^9p )Dë4 QQrXvСS( o'AvmjF3( MɏD C3VBxg)trĎ=c䬌 u%D9Pgf:b&!eAK'sm1lM}? cڋk\kE7}_M7R!&%DT55?nk#yZK$Ft 2tc&g~mږ0HVNmrԓWZnj<3.NVC16#A 2eQ9MA%T>RAF%vޭuy0<:Q!p}sgSZ4l SӦC5L]\ x0ypU>cL{)5 |cj.oW$I2߯f#0,@Ȫ+ N@slj9`Lx:".(ۙAs=+ W J"Lc΀TUuPA𥸼!ጋ+/^/4W8ER,wI6NrK{ <>B:͹ viqKuwGpP #Ezz3Ϻzr DLaFjѳYMYn2e bFrOErR+tD)+]o1jU頺13 ]Ge+*H>ȝ`YFs_1$yM|6\qZ?<՘x濋uWа}XF퉶SrHN ~Ǻuy`mOhY&ICz]M6ov/X3j^`55J.M.-U`(oU;ANqWkYW o;C2s{ OPߜF?_ⲷ"7sRB{uz9YTj^w~F(YBIIۇru> y&{>M kΪ{a'MC%./v2@7lGkE '5whB]-^ĉǜL5ZJ뀠IkZ*%Ghz ICV# ż;=dK @ {]+K!$uclwM#-j)m5*kmX:'5إq=긒O:Uk}`/7G󨟯La@Cuci{X0@:+ c'AaoE3vFe^~hn}`20ekkuadh!Mw4rvap;^DI﬷ (W\"FGIE;4Agflœsa؀QON$MtfSJ:f Ӓ!8֡^ e?,0[tlB|6E`w*)O/ ,-:8y`4b:<J#AClW &6 U/a6Ǹyqyj! XÓc]>F=I6Nix̂ӈV[T68Y\8+,K y^|wnKRRm\k`* 7kUk:6#d^}~lFōБKEJҕDmՍZ6fOֹaCvf4`Z%.0)Hh4)@Wm^"lX36G3g%qzkc>g(&w~ |;e@50q мGҥ'GtĚǢ{U U`>K5E}Z;7B(D'UjYnk L nu'_7\mӳ7B x真ހrw{C}_!o@ Me’#`_Gyb}Wf6\ƪɬNOE'J B^ṓf識6WYֶLH#^=˫5m%D#Txvgs oܻqFDp7_ςqjI48;X|IӚ(Hm$@d 5kFĀU֧.4 Ns +2trn9N gb,x{9S5aۤ[ |V=/ sVl'1^nUSe/|Ѻ̱X!b,siNkr/qH#'R48Ľ=㙽p߆X2<$<ط9'מB kN-_/+gd9mADo3 A7nA`j*~yL~ gHђ 쎚oBi@8Έ2e7jTP_2NgFG:E-"=T|!ɱXy.k!^WH$*G$6ah[~&|un)N٭7B3a6hM͡@(odW;KR@jJ7ƶI^\#itn8!OCCR4P9%i:72v i $K#" jE?Pl*NȌ/ Ʃ+L1St{gIwOgYl)~R׬)OUyc^`l"d<r\gԧyu|WcnH Qoo,0mo~[yZ#"?u c³g/u[U VzGuɸv[ɖg6oӱ}E\mmtznQ KBԘ.Mb^ف/EV.WwG񢷠OVKX98AA}7ttJ{HDG 5LM#A8 -{٨6_ =!AZB C~ zW; ?/Uř^oA]rl= D-ӾJ G ,Z8}(PeL>ڭ_OV9YԜ28t2Q{Fibp~ڽLN.CI&;s]w!:MPZ-b$4 0{3KB Iu+дIeRInM:iR^'V [bFC34\sZ #+x#!u?&y7UqLOq!} ̞~QsFj튻ü= }f}}O+M+)rʞK{Jk0Gfc -G ܯ]{+zmMgTTd%+=fqGʳ#f+} 4pX:MI_W&̮ k[a[S_[J0:U;0Ŋ-x Člo'HFc[M^cA #\.ʊw;k/#ߜe֒n}+"䮯-"n\L`'E/'aaޝ>f+a19Vmt^I+$Y+sfͯ?+En|Qv *"NlBPxM-gwB0#+>I^ 5|𿹠xqthA?3>1P[ۡ>!yX -Zv_&SCm(fO7"*A|ô+0ڳ89&)[6$/\J,15:YB^w%>I'۝n 'tQД&\rZB9m/זz 4>JF͹j Q<3ebFw_x0: +hG5955SErܖ!т{k0mM#Kgg]R\ bqN%S Xb ,;Y.iRr…ڼW6{6qˀ`3,br.PȿPzlyXl&#jL\A.N[(W97&56c*F tYy$x|m4,vj$%^jG dچ&:-}PwQH`Yxم^ *ʟ~yMw1N%QOmqF:V"AܒՀ6aԀeJr ߼a|G oūEH-ARPYvRw?A7o6 $s6@ȗӐޓ'mghp2"Pb@kz#R8 CJ[8a\?\|2`@C ~#y`J4w<l2N<-$'h|@vL]?˪_FP8ʥZIW$ .p:bL T8 wO;:m\߀:)j&>kwVޔf bE0w%d8uT6N%/KcuY LXm0{cYŤyE #ͻ=V`l'yOI*kRf4rtgY2vAL+q0Gk6lT8\$U'bQ@]G=.*n|:j,N]ՏK/r!Y5X'm8AU|/Jsa<]^3~kDf}E pm)%a'Qx S5*6.7}) ھ9pDǸdz?s->NQ3 Lwwia ;"Ú}YA+uMmZn"ŽCtSy92=5mC$>?S7g#Ib;&5@))e'm 1IrŘFrڣ|\cdDD uV\qۛKyH%NH 'Atѧʈ*AsKσ琛a3PDŁz$C%ir +“й·.~{f3{lν=va՜0!PLP#4QZˍ_!ݗ :ƿ(&,> k7awn .c3}(W#?aGdzJ_Ӿ̭Ԁ L[m8ACoP ;٤sR }5Z{ZɱǞ&o) Kʼr(#7 _%2(߽I$%(=Ip9N f 9/􊷣(^1F6#Cqe/,K) [Sf4JTGA'e]+? %Pp`1IfiDDU Ui:~g2}p1eQEVO+Ex~hIlD9'MMYc?~ҍLFMP?Rqx8p -3ܒ8z W-VK7uq^P6 4iOtͲְM:\Ȃ&OusT*_`i`38.H6 ѡ,z5,# ڔrkhI0gnIe1r <[%l?BbcվF!?Q43Va ~݈/1=MS羷sL[6E3;>E`}^{ך'ǡ%6 GcRw)rd^_5]~`o>ɛAGmʢɿOq 7r<+jDrSݛmf8p# bL{=p8a6((}%{-вyMje,~Ӓ:upKPq6vB]Y: CbcTE% \ [Z@! , K2E'q،t^HۭʅjQ /&q%UKN!.##w91uԤ, -v9R/ 6u_NUKo*@2vӢUYIҎ\+]3O>3 712 Jٸ[O=䀂U0<8qp3ځ㮆 .o]8č< :"$@ر_;ل̔$E`Ի50TaNH]{:7sf;SC̗Ͷ@/NU8/~d,'twom0l.{%iOwx)]S3ΓVZ ^fpFg:^oTo oKȲ{ ۨH,F ;{"X10 J{%r]cvQ!nhG{])ƳRP4۸ Uty54|[MUu\ sJۺlz;x`Rf_G~MӼ5\06 `_"c1")}HE>KKCv S6zANdeo8#?OûK9p ؘlUfT-/]KWU!o PZgB`Jybej]$P DR'Ŏ0Z +$wYhATa[? ]=PGI.c\Ǚ/{jc)*lIf˚%@eՉYX_\ƚJj[Ǖmp+ /ixpzЧ\s঳+Ǡ1^YUxX9&6Uظ]#|+j;+|X~C}X,y 45&i91ݮ`?Z!.?QZ\{Y#.q`><7*uG†%\o  >,-$Bc˝ g>#??b. ď586Ɵ S%MSM6SMa ր}hD+FUoC?`e a_D ´1`utCG$se EԂ}uhgh# C(S8awx6.l I ħH6Kkt_x̟*0s%3\Cť˚S6C ݣY`!MrC!} U@~i*%LTl0e>K1O(zuөD6"N+ ᑶ`JX=I\w+_@/8Wh hkJcq8iuMOj⧦V8Xŵތ^^x̏Xt!,PlW N AfƇ40r$so eh$cn^/se rKM`GS3$%|*&ukh^s.tMhi_|Qk%"}0.JJʤ K?&e.0ѭY~/av|:mƎX[*T}J*޾<=a0C8M8Eyj_A]blbWZÚh _Sѥ=}BfwI~krԖ@VTQ1,?Ӫ ±˅QfS'2[$sRdOE^xk_7krRJ5+a! *]XB>̠ *splgn 2T@s=uEXMqUk%.UИ J:Uk|@S]s,ds"j͇e;DA@mAMIw|n&2w#WV=`:ˈapr>{SbI}oDsqw.12h."bn[woc aM) u`jN1*C.+RVuD~7#}ikm+vnKR8] }I?qiJl "BQf1}^J$,?ΙwHhźd>u@֬uvE#Y/o&N+5UѻP{Jxv[v;I¶ dMimM5 b?uk6i7f4Qz%ʅ:qϱ.$(Ao1[DZj)&ЊMRagf?>ԧ9.`X'!P^AJzOe$E5t ~ɵ DU$ >9~C=I`o*U]70!4BkTmVGVb@\'UO#&$ѸED\ΰ4" \ MNr5^~93^znk@4RnXSANq#$)_-\z{w 6>\\ov 0me*^i{uUD~b$ֆunzC}&fKLd*%9ybnC`YZfG"-e`8$ŚjshE6]m{@,V}874-SWbԙ*_{w =Gkiה\tJi~H2Gpzvԫ&w-+ JWVnV5Xyc[ߛ") jm EFJ-em *&a &FH?etml#tnVmS mXO׬<7_՗Xٽ5ga{qZÌj ٪bОXB$Dk6WY嶿nφDZ= g0۝ve+iqp t@ZcXwf8}&UgS~8-rqTqUDP:{%#5Ӯ="L/!g@Kvv=DwR"/Őo`┨< f:|t6`zY$olWg1e@9їUjIחw };xBȺ‡Fo3vllÐN l w' ({$hST^(;2(4O/ ϑgx)[jwevBDyմ;0bӬ_}ɍWl{^!鯎"ZMLjvYv YU5_;a0e'b:@F%[`938=z5<*-ana-ta[RZ9kR s΃l[6UEyDۤx|1zM+W( Ng `>}C ^馯nxw-, sp={r2UkTSR4+ U,Z@R,O*a6N}Z3XheҸ9lJ7*&bQ0y7 ajOk|]OJm4Y:R/$$:vz'/hAPob[\9,Yg8U徭"'M%XL ræ?P=;4DZ^pR73·O&}J="Me6#p} _Cj$*fL )mSvXqզ:悈bI$yDS[.6,1oiֳXޢ=G"QZWξFNI6D_ɺ8,9=,0zjO0KhU8a*+XEмTǦ: :߭.<:Gy)w׿OԚ]E59#ƈAbuHsO Mm90lb Yfog D\$bg}3ܬ6)Fs5ްE!mkrd1oC WFpJiQ 5,DD} prf̱`ÏƷtCrc6տ:^< ȇЌ#X-P7vMro-T#n<9dCF (5~ Eϗ:_" 4O߶!X?8$ƅm /B j[-w/yWK/ v¹HUXG_JDaW 㸯4c.=B=-@ŮreLˆ͡ . + ]E"˧LIOϚ=& 4,dg>`Yd[9P?صfH-.99=J#^_אe8Mխy7gL"p1YkU=gn S;! *xFӑz >ގx!Yf!z5Z!h"\Z*ZĝP Al/nٷguf`:NQVJ?rRBm;H`Ø0LlфKTVIT*']F iADӘ9DsO\*!erO@oV*wdP< W*IM4evЇ_^| Rf3T*(B-[zBjA xVkGY/]z)kKu Vڜ3탖?S1,WD2! :+Ad0} nҊ_@Uuc||)Ү1{ !]A piEG?WIsu0ަ|B ,ITd&V6?oGJoޘ!Z;ɬ~ce;%PZ4VOi:^POT?4{3 ,\5dIۗF_Q;=tTx&̇ht9cp;+ohZq51Ug:U\UZuk1ve ?.oІkVE4AݤL*{8^]ܺA~we ԳXgPN{ν'_(x}:M s0};"o.>sD'HhSx'M_h.%'+0wHM ͷ8הb3h%[;ɓ'7=lcRrxfil'|/(I}=R{֔*2e,jC}!!& Z Ejo,j}xgy.:~4_׿w.z;9s"k2BXsvuչf4fdx8Vj"w2,bx ܘMz,$s@ SX])낦SsȽt闪<ʁ  NL‚<?'',i˰޻jB'^,G\c 7,O"nj5?B}>'!FӶ"bRW[xI*N?ӗlthL: >/%+dRSuUbI7 Pb s|hN1I=dy݇~t`]Elw+"Znz#r+RUCw!޲<K8"SI q>4&<"F7)]0$(_hdA(RN_<8N }vSdUd[o76+}-M &%Z.݅ XOZ`PtL$ Dn4P^{<()<8(v"?6PRQ ~B'z]'-]r$ia?Sx#}yCpQdz&m;?g/,{.g~ZҨg{:Fٕ5P4sZՆfϲJ|6PeM z0MTrbeozLk-1hXzѠC1+k 2A$9uQD+Ew8JxeXIϝ̀N\\ g@@\}5D55|&|TK`bAЦzIB^VQ:+P{rbLSx7 Yg&P6NҌ#4ZaϗmVX{s`vK?ƘpʶНZcZ 8~AЧ>Taٝxb-tXrGg>E`r4"0?XQM]FFoMuen͇&&U!DD`Y\ߎhWY"݀B+/*ՠUWbA_ 3QGDVN|@sr0rcP\Cahđ$i{>X@q99!7ND#X{BB>[npE 쪞.9tᡙ^,9+ͬa KB0&;pn32NJ;@$6m_YCQF=9 2@E~aO{g {??Jh%NmgV#Uhoy>oNNBq\Բ-P{3<;}*_nɼ3+ AT HVvh%_1}!o%XKgwqw^=bB]Cep2#qF.C1Jz7cbRTu?FQ"8M{x8f2v< Q`j3Vb/tG0v̤FaH~i +X&B"`1l8?J{)zE~T&~FP7꺹ӈuXM}eg/ߛI|b PN|u:/X@H+1(!"cl*6}뮅ƝG<~ΎJ]W1i9RQ\ɏ=P_d`POmLp5&|a~ .׊VNcSs;fjt+ ZiL_G9n40A&~RijR$u1@;@V T՗rćj\+k֯ WiBqC &/^8W m' vCT[R48E@8Ʈ^'L8Ǯmst8"WNQyafIWDU4B::ȷt%ݰ4Ng>W(2z8vPC\Z1ck%`:p >e>v_~̣NIM H`<p^g'v˔\X{x(L3vz0;*ަ"fP %Q ۏfbtdI˪lC"`^rڇ+Q&D B ?,!j1Ά:y)\(/XדK 774ذG-8"BuJ9$ԩl.QP >t+)N_?^4iGx`r ǂp7>pԎzL n(h8<1$tVVg-n;9:$0b 0Oi, ]&/WS/K6xp/a|fXmyRL&(R7Vy-{8z!`N?Kb ZO]AT`q3? f~&g*3ўgih9 h;Y>>6HH:a'i}m!` ;GV'EGLCy]v7'{1Ῥpw'/3XxQsMfK9G(j5@*ql_؄=vҝY>yf1|l<>oSTBF14:3 8R(\dLV9a>U, e%ZO5v2ToHLe}`y SEn*m1Glgu#͐P\ ̃Ya68!FvR%梖~I[G$b:)䚍LֱsEVHYwЌ~lⰴie&ya9FlW'Es'tq YMi4,sNJ=htu ~*ʀssAgfy3ΆU3WAq>Vewypp/pK>KeU7@7'PjZH"db8n@j9^ fY{PU0Aʠ4 4SZ8Na8%LroBd Oz= +Cljx=ZS6"ШbFU9BMWdx 6)Ή$Vq a>LU؍੘W*|ue: Q_j>J(yKEqT5gqlrM:RYvSez SZN]y(1woc'}Dz?+NZ&?rh 0hE9uت<(![mvNG'Q9.Ш+bVCyBG{pµQ4,reRZ Qfq^r3Drn`3ȡMLhu`T%D0Ŗ ]XM[/ ;cqmaB7YVܝO&?˘B `򫦕onE><:#nP)&O0 tQcVull( P<3Z̦z㼙5iym+ԋI7*يy yb9/Qe)Ȣp{|f(B!do\q" "2/r*Lla}ĪZaЋL0vL kt1>5tuw]*`\PD\ YS;2(;83!Y f?PhVnWx'k)^_Qi>p+}}+!J$VGZN#p[v`1y?B00Y NFjJOgA':;"{=/ޑ$0˷Qjvf9(d.lD-U1 6YUF-N_`kAԶh'oX[mxqt1@ .n,<ӈ.دp|dsGc(g뉾m R&<3 6E-K>;GL>8*NC*Dfj`AMZzQ~j~3Ӳ l1W߃(YV]`iK$mlXܕRAFj9 ʝnY:y`vf6DDVXCm "ozyͨIx@!Oir錭lslkE6Ad!(vfKS@Ӊq ),uEOʠ R|zzwv56&| ~o6x,p!ˣKs#oF4fŘ3֝+& NpAXTw0+E -ʇҐV/Ā!mߖvCٙaPEP=&}񸱴 , .EҦ!LQyvyɐg ߊ_cMC,\d(Viq( m˸|c򾘒$xKv6[W&JHbi/gD`5y!v݂]\̟I5A<4/ZGG10sLatHT-{ H (Aїx ƗT#l#{!$.Rmڨ]Sk#n}cÝG9>ă2bpO+rw!}"Jrr7ېd3@r+ɖwtoq^5DHN!x'7CGpm4M 1?iSDJ ʌ|i9v$iXߩn9w%,`jUmzQYTmZ~̨dFg5$Łֱ&&}Zdy2F.Р(H{92T,=FXm͓$_KPqB;lAN?JͳsZ36HF_rcI):@$<%z^85RRۃ'H( F3"TSgu,rm- H;Y#6 xVqc;}4/y5I khgj(4J䦿&nqj:zF n'Mrv#_)jSiDTOS(RO V< xRhsXi0QM̔wwnwk].?{1`V; M_Xsr#I(jA.-jF"}ewͮķy3g}rA J G⑇ s+$LS)M;õgĒrq>fNOSDJ/ALslW}`d [*ِBdZ'W{SݺwnĞQ9?nRy!L~z73jUaoCt9z55-e%-kL5lOu]W{ܺʧIѺVI H;!M QIk`Ta@O1U<+KݤJԩS"Z7.Yv* μK}ԭ/L&A<:Dy 3Ck޻hC J <? mJRQ(XM[HYIIbQԁf\> *K;Md𛔥 `.N( k*N2?T~ i U=.!U1BХù xW $XlX"`ǛA8B=)hj|zOqҹJۏQh3MaO2R* .IbP "2ʳQUPO}s9pVU3iq"~'Qjpuxx6j=k ZEzh :n@]CPչcH/`0wJ#Jo0gCYA:C' "CjNXe>5䞸eGWOv:K(_^`en;Z"b!i<]rQ 7"➎8ٚ$!8(M+Pe꞊"[9aٹʶ-x9!]x 6&%D ~<SiG9ZĹ NYZ3}7ȽZJ߀f In.}^)| ?!1CiO$oL8[pf*Ol!b r#㶛,}0L@DfkJ%Jnx3|~ u%?wx)+! M;fV-)c: \Ͻ1W=ҠQhgwŸ{f䄩ƫY4oхB;}Iy*ؒ &AH7L;Z͉h<y఺t^;b C7Nd8oǎw*LE KBS=<0Z\oY⡈۝w -l"E!6ٳq=&2,z5=Q=%]HCT\zX|Y |>r`SpoUvd2C\i',yҥtSeqL0ۿK sZ & ^ZO͵KSUXdR'"1 -gz,tJ=v҆N~F$8!Y /hiǼ3gM}^Kq)i~$n&((!ZZ'é<1(' h6 Oį[`E%hx:!~&KΫ2r!eedH6޼3Sl}\m"$ctf6#y~_<_z kbvIoZmԡ}XɇƊ F1N%jY~?A4!^:GoH3HYTP/VSCZ@fKe4a?(2vboJJJ7b&$F3CC9H7 T=_0|s*N!-R6jf` / .˰'d}%EYq mBx:r&@m F'nGsR"1C^xZS/_V*<ƶ9dh= ylTrJa]C}_pr*? TJch/_8B}Zy%xdN t'nZZJBySDvRm%)% h!*8troh,hkxاW GiEe2)i7zgV$ ?Pye~v} nFHNHVA"5K6GHeBFmm O`b78:&D׈wL8QӝҊuK9TV@fz}Қkįm+OIqBgGz|IX2fbrZOO-KQh$d9#ca c (VUS .RZjGhVoP ob%hM(;6Q4`pv;Џ"Z鳔f37mg=|#QNPN^=N{-cV~Ǵ$kzݣ 0י% ld[Kҭt(ڧ^ސӝӅ5Ŏj_M5keM>[b _( WD"$_k*_XZV9YЯ.w6R9,jKH:7=xoS kzc*w|zԩ%N qE1UTr $c^(H?d1СN6u"VGxW| p*!YU\& .W{c=6e r-g,fXnJ>14\QvRH RǑwmCzNI꘷q-YxcUFq>l9(5wRE+Ts̩561<8ŭ4ZYmhEH W}G6یM9zoC`tLI]6bj"lN:50C}Ldft<4+j5k)kw;ײK{?kbDyI#\{,}Վ]30nY^h;L"WJыIdGSyp\9vZ e:죀˘q%9h \4 &A×&qY-+\xB< g L&8m읶-'kzʩ`;O.42yO#dGQf0rwQw< bkZ&]Iv Bm)Xdz+rp$xڳMb P` Oݙii;xobvvQ> ˘z׽X[n]TArRKOsr`F;YB}p3uq ^Ge6#t{E- ߮hR /xTNbLkM>a4L u5ߎjk(bOs+cU%^*oeFޓ0@,j@\t#+0@1Ov5ZmxlHz!^$f&ǖ1t d;A4#2vw8g<ό*/7*3^s3><"@d^kPJ#)5_m+W̵~vµYZio2bc]4/kK]i[ _Kjʢ{$xVBh*ftRNCU@-}15؆r^A?o xѮSub G :rhn-Y>ICQŸag~JtW< zsrfˏ>DpȞכz[FedĔGR# •f滏̀!%TCNJͷ0)Kc~N~WSxpAk*ѭ7 R6$NnPWa2KSCO{PӖ*\K =~@q i-qNegjV)?*WNsټP؍L>FºQm>H. 9懱m) 6Q5TiAT$ĦE3 & %FS]&`dbd[4nWV6\̐J;d^]>2üt_1x,gscwT __[1.[rkDX2C Y F +A#=HVơ$uz16swm&I'Y&|8 {F!*yn?[C=(m>qujVȸ&k(齟qm>35I]On9$bÆ Hri>Y7M~}R^3^' }RDV=z ]|b(6F;0 vWeiv10?eO3Ȑ"q86,ZvKb-$sWN #rڕ7O YOndl m׽j\$A$ݤ81) ъTQԷ@XG{`).T |#P%Rh 4?+iP';2xUx1ZVk`þCBN{,2t8MOF긌fW ˫3f\d("h& {wHn>}*rxZyZyvU@` ?oL׏p-k9kNԕ&Z弌9/($k:z>,{xY/=8ާYJK [_[&޶1Pw`/z.΋ƒ@^0U|O&La۽PLL5lY) xޅP8B)mR>d&_Q$92QW9v%/8ɠu}V7O[ˀ+[ݶhT;kvc<}PȇGqЕx[Y>Kh7U68DEh 2IwO (iYffH} ;8@48H|5ז&`Q+?rO5ְ ZVz*Q4ω,O,77fJ1Iu[zߚ8|S,ȆF嗌,H Z130Yjx ?(-Aog-!*}>(R9`@& ҫ=>Pn;Ϟk^W9 ó!Aay/^q&UZ()feer 'U_7Fx\/hB^_+iw# =yV7aT>oD`Γg*&f'uMwlNfué}6HglGC'I6Zlg5 Sjg.,{:iE+Nm轡xW86$=qĀ09 Uq{>StYU`)D#? lZ"67*s.FD#bwhs&SJ`#jkJfDz8bc'KXeH/"n3g[hH2u/nf< SUB@!uHvZCa?A.*hNB[3X&Q2[s{Z,ݷ{mC@R˪t{n|%NPC2,5~MQ='ܔ$8ޜ|v5I.qψ/` |.D~m~cnnptNPo< ;\>pu\1SDFu]^R}/bZꈝhTOPM@kOEH;[s7h䓑4NvHlol`}^sՀO]h&q¸C]PJh95l(Xmg}ERWoFHzd."o#yL~Yd$ ėnv$,A%HCGv5|6s(E,]:*, Q""4"GdO>)hXZo%5%暇QQm;>7B=mn&BM*X4rU@lPMPؠ ra0c)chL@bBLD $V]y+z%.IQsh=f?IUX:9wM4-% ] Houg(z,,`UߥǹmS*:qG94wDMpE"h\L0.C4n|@ qBxCԊ}m^ޓGҵF}E44I Zj{[WRe?t9)=rul&g= M]]%w1mYDW|Wt5?~t"0"| 8(!Il[mvF{1bB'Ջ]YH>Yǂ߀ac冢pe\G(Ywvhk&9NZt/`?,^Y!`yBO5)zZ$ tk7N|_>{?))b2Q"!]5D gJz΢ux.yꪡ+lEnrXǓFz7476r%5{ .YO ,10%RUz.ۥ\膱/I6h_t}Q6C8]ebH%t$/vTu~%Q Фk2#-eMw.l$ ܕ YoG*QVNe7#@AQi27hh vʼn!}OY|8CՈ{u8d:,@bޟlЇ\# yd(,M:D8MΩyCOE>^TK̫3!vGeȫ˺H>oFTVN(9&Ù0k!>0%*`'yPzӝ{vlD| tҸ֟yKlNsRf th<%u7MwSl,IaCu[zuI[*a .*0Z}*ՎJS3[8zC,{Mg_L{xѩ:fT1WpvK62hӂbyY\ `n<#7p J޵1L`-]}a.AkIDy$RG 1O0hc?kFF3B*1G-H*$Pe*751 Ҷ ;9ALaeZRXKV8\LM4ڸ@ќIbo֐K,"ѳf{@(o%I`z;0?vP 76^áy|MƄ2NuE*j{!;;ؗ2>ŝCT"Gd ANpQUtÜ _3.ǔ~,KQcV?Ϡ{"Q tdՍD>RMH)ˣ :mQLhLcKgtrLZUubwl<W&* -|1DxȻ.(C(F2{KU8kM*smŰUF#'mԷ\jv+YW~tz6z ~,>`oVH hZq?lҥLKLVH׍Z '}y\@O$f"Djfq#W5 nQX/dzE@o9(bu\o[d\.RJbQOA+݀D>fF9Q;j~ FUgмF 7h!X/^ I237gl:&Tv8D΂b җ'c=xW&鳛Lo΁jYNGBj_3)J5ċt֦Dz*ZmfOVMI8(yb?!]u5Az_5Xo ³z l"l@ /gtEF.+<68ɾT})8'XHu.zo haIAf2򹯢%d_Lb+wg7(o'gۢvy,mʨ!*JV hnMu??5je*\a T8"BG5FzOl)0eXo3ljZ zW._hEO $e@Ƶw>YF.ҙ52Fr:#v82= , nj@؆[oKՎAZSN$~9ƎqCiql@0@ |IvrS=[݅JINUko.x߿} -p݈Du#@2X;Ee(\D2J98DuLfbYjw/2'z~!v2 5>p*LM荎U,R8To@@<95@F6 8Ýu}kpvj;/(" vZ(I@/0 &؄-e (;KN.>^ ƺk C%wٜ(+\_* r~4%W2cϣ0s~w?Jyw&}d>m`QA/@X.jD:UʜFCQvnC)ƢuOҙPSd_w&Bu$Zs =;襽9]AF5|L p) egGTgȥg̣MXtx/,K*Ո!So CwDJމxSopcϮp~\  [~;ܫ}H\e0R=O-pmn,zc^2bu:@ nu˪ma'mH+ =<|ȅϤ=r?t"vL`?Sr{ODeq:f}^YWDéjSaYo՚;lˊ*nAKP/9Ҫ5k2sB  c,={hcql2v< 7/f7u5zIʸZ +~='G:>yu[C[76tC[Mȅ;-(ӷ:e@_IEbL:K*ݏM_$Ck3q]Ł0;lM77$'*(64o<^d޿jh ISL@9##F)ۧ.CcV{aQ*[@!?*KmX+o3R5@gl'mCS<Y2B:nؕ {˿f(ZsX%A?"z Ep|'S*:cJ^)ΊxЁecfXR+F1hA6dcQuT|Ѵ=q:ǶY- =N ͛n%3im$Z-5:v&]Phrƥ2'>%Qȍcp/dh[M"=fԂB7m)EXALF-Ë?ȯuc.~!߿w!< 31\ͥđ4'lcmsE uzdw\:BnCŽX6:^5ZXq0v:؍VAv+LEkFCH'3!Z9YgfEuj⾦ʭSF&O=P:tJd]D~Bżf;b$4SF-9}_9 NjX5)ױap*HM5$'OhyS%ņj,DqQy.xCFQ>zN%##|Y4LtZuemFI2 H KIyh g#jZќ^/OfVFL=s1:r;E>טj;z|b@i#Ce6 ~= :_alF *a68Q}X#W.UՙL29}F&fjܙiA:}LoM{|5+udYS L$T%tF՚ tmn琎NKg`wze (͂  l5Pn7/ZZf:ӛid%FxBH{OyŮ'TQ]8v#.QvXQRӹ8 ݼ3 ,Lcϙ%uʂd\퉡UίHX6h}߶0I^7_n'Fs53w%efjE6 e'^ELZHDXkt"Z2#,dF y i[C ,5:WWg˱K4%1ڐELc,q4³3NZ? ␐S7?)^W.c taڂk:is 3keȖ RIh'WǖjUېl?z*iEcH rk#at]ћR&pQC-c<~U0^пyW/ν jƜ/7 I9΅[X$^Uk;G&~lliA:thV:^֙YJw{tC2#\Nz*:$^ e'zgG7crLwaC{>9CAWeϚz^_.5ᩃ9wiV7j U0 Q ,~m./eP9f?$godZh-JC Hvo<_wo38&nՕM ڪv|&F|LG1{J:Q(ymg}SA)ۍW#@;8p%9z=h8؛}/}۠ 1aDy:5IPv|$)wNvLm:(QٿJ 2*%-mrZ%:qvi,ŞiCt㎂WneقN,jgT0#gJS]$ʍ\cAR<"YNOr9NS:xvDƳTku>X /wm%`今!biQۇe: 8sGlN3-yB+`1bkPUb(3okIƾ<V6.'Kuy>3N)|ӾnS`1Pw e%)ݒ2K=MSVV6%xrAhh 7EYrŷB+r04;,vz pTb-2w |;29vd-][, ;=o=)e{ż[:`5ku$hR' h1zb_6<Ճۇe*5'XyM`5/5זJ#-ES6u\;뤒E4#K1ȘJAK.XdYW WD/ 9w:j̮AGR&f$I=].`CIJ02tp=TۚZ^e0ُT10אÓSce9<42 AuBRP|/YIv3 !|ϓ_#ʼn9!hߨV5RgN;]&J-c}:x8h+aWAEzg[c,$KOT8 hԦ[wX;wjZD L>+Da{7)%n%i[g o}R. 𙪔Zwb`dZM\3[o0`oFalĚ މ ;  PRsF2kտՅ"{Rdbqbs ۞moqr;(b"0qa3E1{F\kbyg?`k8˚G.IՐ_RQP9kՎWƹwdـox-b",oJbR/ keIί!R )|%28a5 '8\Ƥ7_>)/&|P&F~j7N"#yLE5#aXJCU])MlmZ%U s~=;(NGgEdTP4r>R#Yb{SÄM@ZcNxJ|`>`DP㼫NIMw.RFc#ƲQq2>7vsۄ-2&:oK(<'[?!sLNl1E2VVY9̛+;NCh[3U0][)N8=y B%47$96|Dw\[x6~c8sMGSDUM {zqA $F#$aSԆ q7A+'-;fcS^r٥ w H P9mzr@VO'@Z }nV }‡rPCNSI`d@C./v.1t'Xʠ6Dd;#|}"q ]\>1(ru1ӐBމSTW 4Pذ"e95a ق"w{1:0CXeGmRJ 0lGDziQvgJK:$  IdQ]׭ nwF>X)7n˴|8w9{}5#H/[fv:0hd/JV1֞> J$ ܿhT+h̼$J0y;Wvyꐔ'VK:7h+/:S)V>( eaB`Tlg! $daS©f h5+BVK\8e@`H~e9]nnkB "<}x1ÞWߥ Z(͏;Hk$ 앛Ǘp'uiڢOm; F{DX"8- ^ q 8 `p3JƂVHj%uޅxfG:\. >7M1pZ |c=s۸%=VJ0Rwb׵"ĭnشBCuam2􋾛]H4F% :j(9C˫qٕƯy\fw!3PkƓak)eHrzLeYaF W,@094㕚}@J"(TI#Be')f63;g>acFD;_`VYd?:  I9ͺ SU7z&oJ19\E=2uR%H fKDq$:^ZKI`+UT]W4 X7vWo2w=-D>=e]zǷ~3K?R5d[׽H2y%hdf 2 u z&&.8X MxHxАd0 ^-Bq[7{ڶ㭁Lz: T*<3_MٴB@w)h{Oà]Pӏ =?dzi( Lw\ӤX)HNq"9X:6ul)|ꕢ#œlkΠXNGJ= NNP9z/X >d jyo0V4,iY%+x W2:'MSJPW4acax.UcV21X4/͔G<()t^vh Xaa~ﵯcWY7\1wBBJ`u"n$\ aU~ȩ1WJO"8w4 !b;,+A~v+'_x9|i?)9BݶN!hbF!_OόR lOv=SzQ%>dW) ?_@ ǛaXq0u`m❌αgh'Q(,nb@+38 ztQ2<^5IUl*vDL g"w%QѹaǪ fxY* EBVL k0ڿרz%kKG[O~؛Z3ђ >b,])tj/#qdQb<׺~S6w$ݞMDPP.]e9Jo/w65_S=~l֥η@P[ wӉڝig<4B QptK54 iYS؋H)QX:NA; ^$+B:_UMwԲtKR[>4X_Je)vBcB,(yiluVgΫ\Zs~(K9I^&Zsѕ/-_  aWBL3LeeuNKG1H;waj5=GVl8UD^>)>&I`y"+;{v!Y)RMֹ@1l!vo Ā~dqHK =spo[:7̾Chod!+ީ@8-̦̈́+ğU giӅ?3hJVpnԆ4tfb .#:97*,;i0'SH0q^!7 rA_Caʒ LB8/nH" JlqJ<7y%T࿩h$M)M>nyKnq#؄z>qaؾ=)a3`; KJ@%cpuTU],ۂ;ƻ$30bER*( ^j~{])'em tV&rtr61YLZP]g'jx/n럶WO.Yv2l@̵faƙ3i^k"Ɏ[MKAO5GI ;Tg sVCNjH(4?H&dIRwN*6'2YH1'i(\4CTIbIJ ތL؞͵q3M@M%Ykrvʘl2]+7X> SY_/$C61ōgR~lf'ۺ֓:',tS4fDW-)N vbVua3xm_HaQќEq$J !^\W\I<<7I]w;"`Ŭ@&Db߫jz?~A3km~-^œ `5RFI011)U+8'/9ؙ779cDYDF!]$@8:R15JK s̶$j?k#⠳WL#6w5ɗ?ҹf'ԣ4 \lW`Dz[ I}8'@"we%Z1J ^|8RM+|?Yq i !,]}26NvF=Q 瓼gxe~C XҺ&#굎5QTq%qxHBɢ>B~p7Ҫe J)Dg'Szq;U7}2C)Ѥ>nH3& v8:8%!? W'ZlbU*`竆 Κ5m. 8:27Rj22+P5ߺ^fZo`LEhJD(aʝͩyl"e#  eS#ECEjK)h>q:]֌ f7/Q[G}bKs3 UI7Gلzd9|8)/#XK ;>88;П{"RrHyA(d,PaJV~d]XJoS4{&~M%MѝG7|&1\!4Fb ϗ8Χ74un"Jܗ&^eʑzW |*ΰ7!Θ,/4@/jsTCy8e4S" Hg3LTfLzK٨%P 6Aʹ\J[q_ŗ^s*d+RՐ!~&&C*ߦvƙ" *܁?'aGɸES3|x2s}n8$=bE=^m2كT2zcT~Bqzصu0r#LRaBcz-oݭYE1-q;9W+'GCuۑ'h4g1.^U? NƀDok.;K3.H8qMk2DQ]j=+>OڲGCA8Èy٭Vw"RdobyEvYu9Zg&iԏsT;~ϡ!*oU~׶5p];J'>5Ir1]'8/_m-QLWc罼+vU>Rn5z1飒a`IS2+XwsPoLԈ?;cȈ»}dQ,c.&ubQC"D[-F-Ri8ɯ, ȊQV~M CwWI
s9H%]廟dvƓ,=w$xar9mk2b ү3cپn E$䌭^ +e m&uf~pHJ-zimM*I8d^t{V RoYS»yp5ŒQZMw!͇XZ8&eWv  :T8ܽ澋,,ÒDžG-)#Or^o#{E,Q/ Y9֎7;R|l(oԎsn.fFO `Jȃ驝?\ sA&ɔ]~#S╽w#nxL=kb9݂iGM~Q BBFK4 H%O5~1ܑK$haR-ԷzjLx3D7Ζ+.`djBN\ҁ0/׫_o ɥ6W]qI>*/W_%~0Vרz=zM:d7Wrg OiA4^)(;(/˅v$E] Gp õkܕ\Àv(KԹo(qr@Wt>j=8q`0`#dʠiD4G Q Q̛5%17RkپFmo"QLj d<ҜْuӁʓep k&WDOI.SW:-)7ujf:IjIw_`3"%͂;};gtؐ[z f1fϫve1=;3~ v乂n>W7P $c>TSh RSTS&j00-g^ZFa]~tR=:a #0w`3#^i;pS%Z5't`GW07$;QkܘМ1c?u̓ A1ߪ%hۮ=I zi_R;XQmiS~1h62éucSaz]ľۖ"RN suE+2ԍB~6XpC߼^En}Z 2Նwhdl [s7ۡ唗{-L;bP&7;%oW5vWv6`2eQ/>!Ƴe@kzO!bX.B6ڨȹohrD}RvZ$׏>pm~a_ uk4tJGgdͯi`[_,@}5Js댗^ p m_u:oTDoO QLRg7<LQ0k7 i׵۷h|!*GPqyH?+"M:ݛ~c1Jimy7L'2Tu) x-m]hdd[W ‘4/߳o4uᅙL9%N)Йepƶ d"=*q-EF9'g /2$vA(F>))y܂.c$R#m>t* mxɂF8쯙lw<~e2t`ăvUMPPv6%֌)-mH6 !dT# g`YDNZYܓ7wTIl=W둦 k͜>9=ms f%*qѸ‚+cXv]_e1?FiJ| ZSη(b[k|1%r'8Vk0qi]~;u:b{|V{b':I_]2"*Ա{f< V~66ՊG-x`J$T/v-qĵ.HR0&L[!:zt4ٽ,+g5.(W MMLUt叄oT*pa3;)׶þyOé !ןbjdlA%PLzˊLNB,kHʺrjeCJi9*~iot,p. F€; Di#ߤmYnӴg,3ڂ$,vNg5!r>zb^-Dl3aɧAP}꫌MrWȊEEJ"c`ؓ=F:B%1ŸjQ5 uᓪ:`jnq];E-+c}}s4buoNJ˃n +#ל@jȉ;ď#^bveRV{э:-׵GU뿁"M*Rɭ3x!jHv8LGxH@cEO\2 lq\_:p$"(ѠO>((rhmi1 -:r A{T7W,֎Oљj/sR4ĝ ӥ2Eh2ׯkR3\6YSee6|OxU=|7DUg\ .G.x\2 o+m9쬹K ;7<1riG/H RiVs'~0Z+aܻǪ6ڡgj>qfRg +pPV-5qh:AP5ʽgP]" tKzSa@^$]~O@ϲDm_%=*k1~bbqڬprsдLfMVgz_w&.t"]hN0ۚ?΅ѣ@I~y7x#&AbUud샄]$FO~CuI /E.~ƍ}2@f~1 O$lXmbQv>zEOOڶ-e/g> q.#%K_rNh27B"3ՁNyGAPhI(0#sG[1aDt!aƃ`\00sloye`)EfC;n:v)׎H;kwP󫚅x5N:GEޙ&Rd5 oK I|sFͱĬHGʧ7,Rj s}RSkm=T ߓK󭕗㻗 5Q!)&3ݲ[903N4nkͲ&<3n(MN&CFK/k:ҳric:{`T^DObf<KeZ㎖h\TO{ߍɆTES['LP.+{/^WJV*= n~L,vZ]&1f SBǑG)+36 Zmb6cHcyRP=&bc՞V)EOǷUwnw@!+ @ Eefl>ٰ鑈?3-}/,иeG;&Nsq tAhNMLlbg/0>ՃxR" o&6:EÓ܇PHQNTt|SD > y3|S̷JSBX3_8/rgĴuVߜ}su bʱÝ ig0jkɓB[x}b%cDѷI)6OOn/c+ȼke9 iWKIaS.%aX>_UnY& ඹ[̽\0oG vcw84&؈>Fo:)R{>Su@! U&[QX'|W Ay-3ӕ51fa̷׆9~9R {PC׋q|p>Pi) L4لy{!tB6&lt h4x"h3IΛ6Yd=VJi+,ZxE>u\֣Yjm]&[)Amkߒn8t@n/H_F\O$XdJTqRXqd%>'NT{!v\?Z:KJ1e,eW}r:Y%t^4#i%,zaܲuNN&zr"hC+i5tw)ͣ4huij`bDŽ@DN%S?ǰRywo.ѭIw~šDtM帩=-B-B:)s| q,n}<2&𜪝Їj?dv7g> |z_ e$R$=Aڛ׽:fyfbi)$@O1!dqL*,y{]^A, dW%k>X|IBJ—$r&b퀠Zo:*ft&(bS$W : qXr 1/{zEM9T9>0 sxЂ$B)dœr*9rTv3P3A,84A]| nNؗ+~-Hj~Qj+}Ȇ Η]9wYsD5|% /?;)ڤfgX=~dmq'$qtറ]ܪiik$&x]^>f1;4ZT9W}L^0Gs.>e\kt?58Y:*&PLM@ѐ'\s#n<|\Չ|X+fTOt{#|Y E?Fa<Ÿ5e I9E qӍD=*u%䊢K`~ΟzjJss] ́ZɌeMP5vNy,y=}B ᙺϰ&D ׷n;u9IlE2Pn$%3U#T~ 6 cq }ESB]UEƚjtIRD42ooQeg ؋<պW/BG*x*XHѰȎt}ϽeY,c?\'-;5`jL^ޜj/=>HFWcC9t ;)TUPxde3Cp"#t3gpX}ҵQ[M2^>663P%/^(d$+g\2]b=}k&Ј 0:6!LzURHmmw7}}JeA%3"h+\JsaT9Bx}s $&rv|׵]]0 HՂ81[]/%ZiJ2gw"$kI!,%^'lx O7g6ؔ֏k|Ҷ\qQڶ(cFTSKAD5*# \/k-+hi HԔa V \pR(W7^G]9,~LW| g$P}J+b,C&xA#>_Di@q.dPG4{GM~ϖ/?+>R>m_:dJᘢxsoֻþqٶꉔ6O雨؋|jC!qޕ(ҁ[f-f&q9R:- , SV?6sP#':@ բ_-X ` շ׹M}.ɈY}SXwo`?H" Am7SR&LuhKq@S0׫ F~{%3o \)Son[)Ď`΃EQ,KQgׁ; KϡU~q7lKH#q'.<&{ṟ bxds [A8\4GdH\ħO);_,D()vW[3' Gr5!bl=KU-]w,/rӴXEQ )G eSm=UGn@^ρawAƃFt'v",q3to k=VPA@ a7]=,v|]&_,*J1iq" -Cd$9\Ӫ7es!pu$w7[<81mg"0`X B5%f:&[՞RWd(H'~Iolh|lYFYF鋛gp]Cu6)W*g=A70^ιM ͷMa$ZY#'dϫ3Ks |\MaCjv$I>#@&=77bNu\fK+ZJlD Dٜ'r=(} e ^WT# :Suk=pOLsk: S\TXӘlVk T4ܰݾ殹爦ĉS$=y" ؗ6>@mhYF2 ++3nXa+hsEu5& )gfU5qQj}GU!Rw0FH >+ɻvǑ'Jܟre~e ԯ7R{JKXD <ğ%zMB&]U 9 Ў 3y.[4cf Z $/iؤGlrxWX`H7({YLOOFw)a@,Pm)ZJޟXD/Qf828vۋ.̒ƁMVS_0tөB@R󮸒D!E'A;?XxˀnB ﻼОX &⥑sf0KEq9 J/gb: NªCaF/ XNI-wi.t [xXM2hiܳY}71f7Q'f'q)_)НZu'gFc{ @e-E@pasC+mǭ+6.٥pRBw̋rimSƪ_-cIvE }7CL kjKy{A|ONfS' j cҲ&y+H&1P WyT?º04N(u[F+' {F( )S=5t(`2hn`;ޤ؁g`q@?ilE)LTTȚv%]yS *ʍSWpPvk cqCcdhklA.t&x`Y,[9z,EZ߭@nICN>叕,3]%;9ԏgwOSomN^=&^BO&< -]ˣiF"GC uŌQ?-AVvzuxX'˷,0,wу7McUF6:9uK_;g;"ZBT[oQ|_#Q?sKQYН= ?#$*LBUFѨPskT^6 KZVUۂ Lsqê2˟,l yosK<"?Ne]op%#+Vu=}X:yJp]n#]g~O lQĄQk20oE%κ;"a$ԞeA]#@WTq`8GP7øÖj+_MRDX9@a܎h>Tk }4tDUFQHC;2}$,47P,ư ݜ)*mNcMUzqO c}Z'6UnvtKlkP) pbK5t'!CVH|lϐʭ*eGq$LDaP1F"@Z׳BaNş7/Cl@^Zr?Tx\CX 'H$(/Y-.45R8W >duLs2 Dٟz"D*86E=;^7FVwU۪ND5nڜ,Mjiû-ѣV͏ i__ZfjI:#f*M/,J"Re5LV abJ+L$iiU0"Zu3hTmjޫl >m9lrXݨħa}Є24;29MuܽI2m]WR:B)4& Ys*2t`s:xH;%k)@K;L=HB|'Ɵ?.ɫڶ2SVIڋ7RгGǜz. "hxV'PUn/Zp'f~|F_n+vyUK`vFek#K m Vj];޲+H8Uƍ)FPbn(2-q q]1' -8?uj?IeÙ`Ǘ"fI;%- 9!yH\05v:~O7k-M%x=݄ 9q*B6) CʏG 7 2ua░[rz`WNb|2&yurLm] 75Dէ3 P1љlER9.v<[my*8'z&mvu_'>3qin^ao^f $-D~,$ӠX&4h;d缉G6uHҒFyb/ a׾(H@lEۅ6r~7$@{fxBS%yro+P1~|Hћ^ɞWUMˊWyq\z+U83 i(u, @}5b-jeh~J(?2LCy2~[^N(G=uJ+H8pn.3fgC<(29 XbE׫d֯LڲGgChl aIr4xsL(YRe <_!e+D ٖYe /q,G3!W }r2̅.Թ:kKb @Ƣ/]7>XX3ʴIPpJ$XׁH$H-yL-~{ty`L-12ε}ꆐAfAnEQ`!.mt*v8mafxQd^]5y 93glp+"Pu$60v>%. w_bď9CHY۲t,H=޳[t;^l8Ѩ-rh,E3  Y!tPC@?*1Gai*DL,t2?5YN ?sKA&S'E0k5X& r hݔDUYn7oYYgT٩lgJ]El,y<}vg//߲D,.b; =)†*TIl!MSY#UP6WKzoR@ g\5}\wF UOT+K]b=efq Dz`v+òTT{ =dK U~_f, UZhͅ$v}-Qt-$%>ۜ\>AN젎K3AqQ[L Р.OB|qS@M*ʳϣr(->cU6]\Z_tу*NlO@)6Ǎ W;s}5,LS"dFc^8&z&MNlC:J$. Y;> 2zyNabw!n]GT&uey~vO IQksT*UNfҏ2  d{G̳V]͙]b)IrqM:>sW4R $bhPֳ.RVKe6/o}2XN6*;t%P,>8Kj:H!yi jvrID;t=ţƥ#Pa1e~x2&~4l?$xNq" i uઅsjNv֪Q᠛@d]YW[zj:|0 .|Zz#=]~nЃDy6T@%Z;}"^F1#k1P.73Y) VHެ f* |ZeͅQ#A|(=Hj;GExdrCo2Ua]QquF + $Jh$YPEi\L6P#cLvD(mȋ0)) hp$pZgSi6!gLR`}xKXBJw~B2I[mɂ묥*|}ȴ&zL +vzk=0W GuѸQѸSs oZ K;=}Fџ<1,Xc"/Hr&{pY,%6=w#23(JuIpY)2*@!? ?W."U$\•QiCVt铇9E7H &lӦQzYڷZFniS|FB2)sP3>Jxrn}ԉ;m&WM !ZGݽUf^x|Vi1=9oT*c Ɇe}]1k'BZ+5:7E G[Q:1--̿&]^pJ`I]je]۸PTuA!ԛ[춗r?۔0>ʾ' 6[S4(yWP<[4u#4&zWeҫg/ Չ Ks8>,|{gˬojtT[ #].Y+I4:n~#i\`"BuT:2j`ٕ_WzDS@~Ev'N=]*8+`Jɲ96pܖkE9'֦ܾf @HQn-et9!0EræMN` ,yR[bQĮ^\*ֹ;K#>U}$!raƾ+{ifWGB'! +^7ЎQ%˖9$֝2 D(LoK?SLC\Z?E:惦Tnl?kVx'Ёq+S"qNA=O{dqJj'ZJŏ_CD1S?<,+cU (^I$zI\oV Dzt 8hT1їoBms y2gH*RTa!dgt 4m|NN[7>пLZnbaVM6v!r O ^ȤBM ,F0RE}. 0CHi[8wy jI*6;rl[?O<ԓ6}5f8ꫮr"Eh \gf=mz{S[zKtytHq4C!,L N@d˿K2?@S A?"(xOf6mmonM7yOb~(DH!d upAƔ1ӆ|1C"F;U'uV̮X{yON\{-Ǯm+,:D}{"Ty郹ꒂp 0u<.aywo.Onܡ&_gZp!J; Q24mѩ95ǙMA+ytՓV];Fȴ*x1va PEj\PQ6.dlR@ ~LD?R!4G9_~tjX({A %d^S3%[J/>&"#q,{0Kt<#,_,QT}Z3F(=}rmj!Q{6_DxmGg<@zsSLf`b?ߑ^V!#]P1 (G{$DqVU%7]:d1C(9fb_."{"yMѺ[I{3= ={,viy<) ` N)u(c۝}G#?ԕ3fx_˜OG&2QH2%}Bz(SK$F>9 8ãI(\,NSlZf?QZ!Jb)TWZ]K R)Cd$[O9:+ؖbb2檇g\n)QˋH=x!e 'wNH~4}@&5tܾ9a"{A5bzYx pp^wbuGk+ gP.W )CDֱOD0"DWl?uOmnhRF9zrű'ꚣcl~q YO-I*`]5g̘pW\o 'PGO`}~@b^xو9+ t&`]ofkJ'<ݽ}I'TYI_w*8g+0D,W whGNs6gJW`hHC2Ea`M8_X{>k3s4> 'l(M(0>{HI 1@ 8{3+pPIipBgg]5mB'8ψw/װȿ /ILVvRruiӝt %Т0:f " #;LbjmSX)Hw ]wx#W}gx+ mq)4O<]8X: 3Ysf~>zfls5Zxb8,%4b$EBgW+ ɥo!o4C]. O^AHT,t%H Sx9gDuF?gS͛6BCU*F])tUzzɣV!w "NF/X"\_rs7 %cagw;2&z.isYb* O9jhBUl~3+/*\̊p-^5jdGb<(6xk(RPci-:KCYߖXh.M(ߋ#391,Y3 t,ȫ Zף|]- ~^~;'fʻc$-بm4ؑo +ClŪUy@ >tWwFzB}Ĺ,705g/e _ Onx(U[-er3`'W1v&ͧoS5#c\ MFY?h/j9>Bg1"_p% io,[LИlb1b7gU\Y] (UOэK#,ZΤS2!R[ p<'}V8Iutw uMO Q[Od_LCY:N2}j3 V6nzŻE>]6yTBvV*t֧xܼ 6I(w%{|y*n7@a8*ZOO.*%\p•@t;AZNĨ08EhK>îXK?=Ϝ.='JձbR)!n4WwmB2?}9CFL gqUNeSA*[пռ-kli]ֶJ(d|: joTǶ=Gn(Ḉ[@ Tߔ,Oٌ\ ]+1( >a:F=ch\UK3YCW .Špmv#&I΍z2(?EV1n+& :$X΋ҡ $N3Am;ؗn\x ?ޙo2ً+6j$O z }UWsEtAv * @p|vRU|_~T^bM.3 v"og05DS1Z]bc3[1OTxg.wQ,En0Lo8dA@>ؚ\$?^>)ZᑝV 6[E席،4B!e w&=h`0Pm\1Hud6=p2 ɒF͓R񠓄rlOR,yz$({}\і s/' 7rTyCobXsξ|I@,ۊ$2D I%Ml% ,G[  +JV]%;< 8f"|~4yv١Wl<}XOm! P)T{m/\ÛoCRy/9S(Օᱩ9>ɝ>3ٖHs!uEXxqSbH/ U&c9{ѵ OSzݫShuK@̝Q`,0M[O[r(r:n-7,qOECwHbv` ?0^BE7^L}N|i2M/ Mڥ#>[;+ߗh 59?qB%k,"B qO$ozfRNfYL憶*8E)Hۺ=s9o! li(Ϊ ^ޝVֱ[ w|L S{܉aeuMŌɿznh$*tC7"1?,12 ꡤǙ Pq X9\t/ G0j.-K,#,,)Y{n|ge^Rjllsϕ'>TgTQM!jƉdt+ ~( +Èc)\XR)ݪ ҐBBj}.]qu/ľh2#hI"*Wd+M&7xlAINxk_ r "ꚮfn*0VDa֠z,Rs7j) X5+ʐv @$լ砰?ܜa n2F%BNTx_8Ew'f8]bfsDa̰tDhpe>ҋϾvg0Qq!|Gœ`ɵM"@o0+uPVD@7"kƐ"jyO7ɴ&S}?0 DU!t Ir6&NA3cR(>yG~:^?O]8\.c;]ewH&:Y r13&x)GJi,#~ҐKC-)o5;kԛ23&8F`1O3Y.4&ݴ߰9աhK jH]\a/tie?#7pPĔ}G4OmN dspMR )qd:r(]XCOvGhkVL{q0Aԉ|/\ye\5JW\E^=5 ,wEW *8XL=IW;5l^z u!A+sc?t `/,93v&%V6eݕN= ?D =OyfU^72`[-F?,j}Uϣi4 ĽT+H:2>Y ےbWDxD꠼9%8!Dā Fx iţ2豟!\8&W&]0l%sm7#׳tcbvr!s`܀ ΁jƍ.guhA}F=džY>щVIϵ0U]*N6R6pe 4CH(E(3J,sK?އ8)x@( ~ "~9ذ+{x e}>{6:Hǽ   )Kϵ憏>`RT#f'J9F姽Ζ7;%slQgs˜Ȩ@pUr% =9-R!1pEVu&' 8db^oQ׏ eXj .k1:>̜0_J-~]3E`J (q!Ni[;`eLhK,[UHasW^=KE%d7\F.j0hO}I|"c4mo]q?}QۦgүM@A b{',VSmd~?I~5VI,/MkgwB6¼v[ԄlxߖKiN7nj+I9lbFP&CCWO< ձ:#k^ /i_*ֺJIA)TdHT?T*c`@>CG+J=gzz 3duéسЊj4 WjF'sնr4rZ>imtyIX  CC]Ct7#W7Jt8V6$oD]oL:%dY ZC22B02\ ׼ 0ud"˩gDEVZ 2oEU 'R]tH_ =H;VX(‹'[=Mv]f97R~AkAq':U'r0-@ s!t 4l]V E΂䠊Ny IݓɸDMl31ow^O#7.HW#0|2ʛ&Ń@Ll5\–f54" _ajM/RYif=e["u]*.1,XKbQh"^=::`ZT|G2T.&$(=6-Bk. -]j,^Drm_+Ƽ³˘c\S\|%|/ _u,4]\wa [{6o5,!AHLb~izKKu%h>%AVfc,s"2ɾ Q+(%4Ͼ*$r:HcOI`e \ɠiJ.~ВU0f6Hlsg]T. a*:R+sz9;jAlzk=1зůANs{ 2zkY'50BOy;Ʋ.UHQHZ ?W5NX?dZ)(C()ATS9f\tw,qle?o/8~tМK=/R&`#Ң-+m~ZnJ-LaZⷯz87wR "zqx1E->(׺&/2o^ IF2Yoɺrc/ТN@o ꉟÐ.7ny2? O@:Tg-)ױqfR믣\$[QĢ )dl\E3#A_'VspSϼLJHX(F"bMvL1h'9WO!>*IGW߷ 7k%k/$p͛1bl0n˻]%S?gÆg\$#DXIK[]G(!cR׿y*_QE∜s}Qv~`3g!aܴ潭ZSY]ɍ&ܵL m~ӹ{ܟ4ڪ4;Yc[ ï(:-9Ab 9ۮ7n/ӖT%FD^]j=e*֒,De(*(|>FIeY1b"??u!1Luxn׹.XZB0'Jgpri_z@O+39oҜ^d?tk2 ME ˌ|hMpKn-W?F!H|)8{5psiF J6?H4(B'H5  Y]c}-dq`Q i-]VL)8hűlp( ő<ϲPݺr%5dWq/=ml ]kL\6=|G!>]wX3`H)%/ܖe=U˟7CsbzZn~v-{ hCp'AqU3X 7Њ75cO n8nBumb\8iq SӒ'*T,ulBg95M?c;xO~f $_P狛kʷihS-k|Qƾ;`,FGCzA^hAJDa^stc*vQr-a/tN "CjpQaw?"%3Z|~2Kn+E9CˣEM/_5_&[ݍ)"e({~wL/N&$cDDy?[7JCt6yWINɭSqȲxWM+f, l%=?QHqpĐa*e(7 CaCa*`+kcm+=n[!ժ7pEYg`eƈO'QVܰ=a ". exڶb;NUHӥjE*]%7Vg$4.TjV:r`T?Qz lf1QP ߐt0d:(P! <.*,%^0ys g |TxFԷs.)4C@^,P_3F/N9e*X[@(rmf/c6k!x'lκ0Z]cik5\__[ۅ?At"orjP咔M6^eȚe{'nFU Uu9|_q"v SvzνR Mל&d1 Q/>YJ4<ʃz3 E]_G VJҏˆ5m`um]vk/)Vi@OTif_r~ /g'. <(] vGt0 {"ۇtMW=&ijh[i\TٚD+M_#,:tjC-u[GXZ2'r(5H`{<ߚ/[6k} '8#_0siu#H`\6)@ ﱴʱPXq{[ʐN2q L}41e AwΫfM/JB&2E pҺv-˂i"r)+3E|zKøcLw-D&ڈlN6 G"1 zcUtGjwzxDvkXBfQKPyK)υNƉ&wVٶ+',7Rs_LPH䉊g-EHJ˓W91DSOoq%7AS6[y( ^YDۓgSIgXـN^Qr% $%ZIȨk歲őiieJ5IQ3Lg.+µ#PW}{6t^u_Zl\RL{3*kT:-=Ɖ~8U>bܜ^-64-=kaƚ-CX3\rdGH}2|sK6Zk+-lsHtXLh8n/1qlDb]i·$g#bG~#; q蒎xZYײMf;4@8 ȳyX #wȿĺ=JВ0[Ag7xȖN)NhlR'qbs;؍z>5KeHrmx8DvyzW,Y3䲯w}3*6zV#րJ&X0>} j"i,qp<Miwaۃc%z\ˏOZPh5 20ZͬARRCOKf\ui;QLڽgM%.ݾLwLн);=9^tI gƌ[e Y&t"ݽ^g$S 9pKBIn }Jbi $:}ARH'yo#_J Y3pKƍMksL %AҢ9?sWQ%8-Zu,T %pD?t[oǻA\"܈$7F;N42/"Kn͸{Ы`L?sI' z?LsG%كǕdO:{4/WT7pمN8-<*ܭ$5J3psj9rD>lzwkkW 9).(Uq߸!Gp(ZLFCod1\B]<"_$| nyuˋ#Zg1rDu;< {DF8h5֣uQd0kD*0.R $Mr\09ǗZؾ'ɵ]C$*o<{l Ɵrf'&HDjGGeKY!:BUT7N/Tݛ=ؖsq X6QwϦT:&ܵIڑ=Ɓ s%4;OG.YUx3 YA yT>P=Dz(c!z7 -%v8!&|pa~vD@\:oiAA{UptMt`E߭r`F27&j*!"b[ >V9@QaѐPDW?ҔTV8-ǑU DE0Qu.%+U 똤uS;1lJwcFe2J*Z`E,VK=%^ޔlB9%0+BkUsi#|4}1tņr0l5r~ F"Vڣd( 2\--o7S>R&ICi:I'׿,`ӮͲCn/7P MN3Ba~~[VUknl.yE]6pl\'Z,7?nZq& I!=oWP!Wd<_ArhBtKAito}>T.ŹWɱ]6!Ǽ9|<[u._zo!1`N3cIL}(,0)GZZb!zu!YR-!mz|ބh̬0+ul;CVoc>픏ʔb`bAH1=-yE~(}_TZ,]H~c[_hd3TB֍&s!Brz|;x)6\f۸/E~|O +5մ>IYY#Y"#7 bK|30dc)L`0G3?&lE͗]u+#94Wj '^8?e~FR~.i|j眙OCL@Nc HLT'o72sl5G.?qy- RZnŗv 0O/(ZH]@tAvy/gL7%r;'|.d*R]ljeb%&WBxV?ĸâ˕ZS+}pa6S;䞋;6gf8B"OI{Ba"F`C{9W-mCxqtc%\[1 1Te>Y8p |gb͕h~_ug5QZm3PKjiMl\-Թqo!IDW晊R=iE<'5.&Āլ O+_B,`Rв$1ƂwP4o"[Y',ȩHr<}cO2?9D[24dm/X~\$KBq6TAAuP})yZ!e_j`مbcR7mT8h͚BVr ls֯~@@V4&2*=B;fF&pzb}V9Ì:ͱh2ҝ0lmS%V^~>>NmeQ?9a,uXq-%!/MQOѵPTFX8(,|L}zwXUxm~<}[Y F[!ЁxVܚy-o&=ɰ˾N+5Z5 n:*ahipHq "ؓ7cyypx0 KJL.[.q:MrQk3 N}8&ŝP5QӨ$-h> -D^铔-;{ĥbpk%f*髂bh) {=QV$Ԓ؇(g32C5SJlW0L%yjkPx)咽 reQEҊ7[`+IRnz=[W^M7}B_GXx}oL8e8Sd`FCl2/%nAt5W=ٞq8ptpiX`Q3Y> ЍrvoI|nA$dL#?RpS*Q- | uT״1Qː%s|iVxtS !kǀLp$XӕO$guJ|Y.{ Xj>x-~g(ǓMܙWh|c6GxZAN;:oZGe {X!sS(Qyc`Ic$(oVu,DŽ_v/"t~hGlt˗iltw  NhjKv@J:m5HK3S^SZV b?X`66'd5>[KM3دX̩-r^5s1Tp(a>"^(U\be.9zl0rQ++BZ<Yې6{c,,F}Uuc':Ď~2~ SsN,J^\Y=?\\JmE<߫i*h=<ăqJV0B+Zܢb\=ne^R0 )Cw!AĔ!.#{I~mcPvq /lms8b/{8_OqؐQ0rKEl dLad%U%ƒh-nr#SB5wrO\6Zk9AlZOO_U@>`˔`733U8V*d.M@W VmvAET?!s$voNP0d:t:ѥ"~Z*ncV!oZ͛!Xy.. w-{jCƽiX@xL 93."ƪEc+?@`W4M%LSlFGrgm񴀘.9^*>P[iEq^B['?.Jnq5ΟG# ]1kyo[k;2a"_jHQHXx[v66ıGwEp~1urbr7ڥ]ҹV&HHMOTf?r^rCcyXPZpJ K mҬ^SnV(b{ †0u%.g'lM Z|%C. *I@1Im$V?޾v5Mm?Ҏ`J?8=I8sW* Zs+LLږ"-Q^v3㔠G|2%rU+AAqe?\\r.2WZ STDq}`q6u S9xLMZ@25̤^qi4yzU܊"7Tѯ{RDRl`?Vk|{O5vC`e]'Sвh$[W 6p 9MBKif\Ҭ'.؆_oIB'= F6>\R˃Bg Fݧ >\mGAS^R:sqqw"hzH(% f Hp.g)]gu0ih2gl3_z.&e>z!UOP* ‚..ֳEUD: FN6 j3T2lFL~b1R )V>ilts fHTۯX (*ݲ<`A A..j OQ/X/g`Z9&F7NpH{6/mMG9_f=4㺠ܷsFfu[3QRK"`Hy]:W~",٭:x/&PF}.aÀB~A/"}fcZڐ-av4ÚQۘΜq H;en_HCQMA4Y0u؁vN* 0N|!vMkfrQY}8N͡4ŋg^E%F3=?3 Gط OC.W}.EVPI I<,#пz oȗ45SRBjCy/NC[Q;\{W!E"?rqAT _3<@]F,MO a~~a.<ڬt@B022ƎpTD8 +h_.tкc43=GA4t`>L0D+Y x\js"/*׻[v,5`wcZ\){6O%X{t-X 'c ?Hښ47^גVUur\HEhNxu5yq{)a<KZ gi``K[LL~֠f]gw;GaӾ2\mGwyħI{g?Bת}XU8K=U춹7a{b/y.郸#vooàR˦s|y^[@^&wz?̼F^> \5saL/(5k^nr%3](ѯ1Cn4>CҀ@{q0,^%Sy=e9?Tx9՘4#$t0\W' >%:d=izRL^1wo}2 zBOl훫eVO|˨*v+cGZB~9t58鴤V4fs4]Tc=N^ߪ[u=#JU$2YmSt t"Q"hfWps+aViNDA%@n'Mx1t)F_NWz^ Ͼ=cƊFЉP*0eMx蜵>%u> A֟T,[nz$%!\<7-\u4]0qx?(mPZb)[J [FB+:K?)ĵXSVA匙el5JV+g9ia#QQ'':@*%Q[p2~xh=NN/_!!9lRvwԳ)<#4W qX 5OG6HX!41a|hG,ӏ,l!y=C|Rt6|%\ ` .%M ߁jU;c6=L,R*p,]yIN_j|Q~zI6Lz \ӠGK%F@-x]Zwq`5,/eW6DNd& ww (j]1eY8sDC^RF1 @=7_w6*7/)gULstN6.(bw(ybua"Vn/cA%9!0F-kО';.[z95(k"} "V HxʱFaz;<> nV#_V"p|]=552l8/8 UyжA6 HC/?QcBӿR7!'y3f w/~]u5҈Az,Y$ۼYQw?4"igcB%&w07ň/&,uq^hJT~J:,{Q= ī<͆v{Z7|k9KyX̟ {T4s0%a}ZrFCwt!M/f>KˊKƲH yLB4~/{O6"2ONi߷6qAf(ˈȂR''vy;xj<ϽXۋrT a^l>kXo~qoy_#>N{K+‰Wt8|M?^l9It?UyQ^(-(X]5lI^b2dIqTorLLVI;(EB00͹pvdIuE~DQb~Oy 89hծOӤLVGKTVmYhU7A/ ;XW0OM[%e3?krX1D⁌-) ȼ%rc^Gٔᾱb5bڋGi.\^Ä5(Ǝ JbkzC&Onho?rDĽQ_PȇP؋ B? QWE}?Pch9, 4pᯰ"%: 0eD%uFE7ao(K؅ڻm%ќҥk˻[9r=!qEERW˙! m}dtK邡 'Z)@).;jeaD/S8OpBrQ/t9J:,<Ŵ!IJ߄azbUkG;Ϯo F\`! ._:x ~*i>UO5r{$kݳQi?# nC]lo5}c/X$$ "YX&;SSe(tZEkuHZB™Ff~sŶI'YG۔z@w!I /[5*q9EG!D, F=l1FW)[ل'#XEC`yt~Z6ѩb+^"@ |[W :Dzc] u>7>{į ]wY^TS>9'g 2c1l h[[Qn6iݰT=Aˠ\7aJ?vP&}kH^QN"nԶYeTřmfJ$c8X;M 0⮮FKCpVOJ$!.4q`=NT5xƫ 5,>|jVXt]$v(hxyP_HHaWjzw^Il!\Nf Of);Iֺcu7belKC,/xh9Qg# 6M(`'l7r} N/Z,-rzNZN0Q׽kW )JtOez3panDĻFrQ8t2VeKUcʵLeO5cpS=zݖ_TT#O]ee9 "T }1RNl'P'T1!=i Vڱ;>Q"R]0! Ӥ]4i\}YjhB㖥L#uPԖt".6iɢY mm5˼W-V<'>[K*0 *_Ip$$'?y`fT+/R5u o~.Zi-l;_ɇ)c8NRH6<%5Snx[k0ӿg6Kr=K˘ \t S`+vS]%Vӓ6aoVISuUnn<"s/ ;#@iH|K5@[۶ޱSKGֈY5x_kfmM z,zYg/:ACcJx&J@j Y|,ʌ:p=̥huC'7t&}쉻\gQӫ4=! a)l >tܰDD D7n&JDA~ 13&ϕW=qGy;vVKK3ʕgWh  0$FjhUz#;J0'Q:Nɞi,Y ]Wl^ŠiNf&V(|qVF KQ†'̬[ LDzysۢWLc+4iN#Rra;eR&>O+MTpTfZe2 YF$ v b/"iA }~|R9XK-P3I$]Qf%FKE-b; J}3݊ߙI- - M4*s?,C8፵5eWsAt" RQX 4sh3QH@p2h[8@Nϩ wGK VjM:ܴlm!Y(B 'id#@? Y!BX$N[$#yFuyZZMK (`'6p6f J'^yZf3nxH=M8.|77Q߬m{ˀfEFؚl@gP#;T-].kR߄eLw*jމ!!{[Vҧ~ҡ" Y 0S8kƁ1ay9Ĵ) ] ĖpOu)Dz)<}9Q*gU&й`WtbA3bh.ldvǬ%rϛJlP5nŽdun^M[vT2qo\Nw͟ca&z0u#~pD=I4]˭ ;%lߘ$coEKSVL r ?^G\TeCn (`JSS.GQ<{ 㖸4m.v2?y ŚRKwa:_{Tipq*}9N.kJ.BЃmCAz=x "$Ðt[6 ?&2F+ؖsTL/&Pԅ4vÌ;_%K9*aoY{`)+J9/=w/+T5 ܩqȑQEpYM9QB6ϺVxkMpz9H`N3ޖgX'F'{VHFDGmm!`NWNJs[٥v}Ͻ{q<9PrL S|t5/x Ÿ!IXGvtKmO~>;[Z_\N goӛ^WjlF^n٧WFL/"Gb_[1* @\&Ma䦥d"uODUIﱠo +􊲭'il%CeĪ?bխ-'\7oe"!z$< {=gw\RQs?ޣ} %6; YU:4dSH~u$PEَ|eE~0`=RU,7a(@׏ړ^R \CJ|X*tw2U|v zvb#P}yq!߷a #oɓO߹]j˖mhXέ[m][AˌCNZMTf={Ͱ?:kV30sBCc}|_Ά2jlf++IJY"t-7,dz**J60ܧ^x} IrkByi M,n0dc~Ő0Lb1߀#w|ᄢ:`[^/u@K^[)\Wyc BR0_Ro^3mia:n=\)U˻+%ֲ |+mt6rRX4(QBZ~5ʨl /aDl[?Rx(rٮ*Y"9]v{nVU7KcUG.uxaȍgA&'r+8(%uRػL݋N=O$ASw~D⬿Ensہ JB僵F~_澯uT;L(,IiSdT$iefz˷RoܐpPぁ88sF'9&#7lRr" >5X7H=Œ~Ng NR&j@:Vfέ/pŷ_ n]S̕vVe0DK}{rCjWPsa鲚z1PiQ(wzHs>sowP'/v ܩEk,Qe'.,Uچ56RŗI'LP{$:hV(k$0U~$/0(S8ڍA-b1&~^:mgcn%w_RT ao|F bV#S)t&5\7}ns^L_-OeNB~.l.fk!F \ڝr^қ&+A]P#j4.kHBPx0w_Ag! ~-&Vu@S6Z{GG:T! Z]Aɀ0؛֯GZ<0FW6V6xU %oUu\=MPՅiRC~X!r ٺsd5m Bh!˙B7ZO{H+Mv:aIPfVb`oE(=j}ƃLe#9gRDB)JT:b :3p+-uEl07иY|4Xk7.Z[A{:vq!@6OȃsbaLR>,55G: w%uwJh.#ϲȃ=?x -UP%D2HDC 4+q&V';~T fU,: =<ӠC+}*d'J?%MT)ɽM1QDjvIL@Lʻ(GGWgڳVLIodJp+չW^*.ɨ{Iæ8R^_A F>:w R8&'Z9T̸ը NeV^l#`q{/Vל,z@2SFHwp,E Ў._ < W:Jxb'nhf Oqz<ܰ~d&ϐWmw.ga>Iqs);5CR=9+**sYQ~:1O9"(w5v5P]T0RH!v~oR*u'x\b7P.c*;DRFwးpO+etGn-2"gp[zgVڜ@&F薧'0Du+ao,Rs 4%L܁Åɇ"̠.yZq"#Ȁbwla22nΞ [C+aٚQt.8D Fp/W눻4W7]zCvJ@'DR7K:\S|֊$}S)v3UNE@0[*!*7՚+R8pB ש" <ЖE)q<8+> Ռvn,4-"n3N1颹qf8&v$ƟW7^zC4=:!tGgQoAf_Tx䪶MoBa9VcUDsB~MV*Oܯ'\%< |#v-o8:%k|WdH_5LۊOH) (I WdkMZ J7#NP>7xo>ЎN3+&P"`5I,,&@ ńhht$ޢ_fS<>N# i4H `db3q um/ V}qt$4<:8>z+0mXl dPwgf"61h%&$`0/^ȥ Arfvޘ5|~ٸ:BۂEeUJ 17]u -Vm\_X.CYM<_"_dðw&N QlQHv\wͽ8ѕٴQ}n:)04l16]<6* Vq1MˇA*>8NEG ae;9*ب41%ݔoMwrI-ѐvQm(:C`,cu>[fG"c~InSJi[lT:BqoW& 4)99e8bAhظse)I>9+=f+ni5s20H̥9j ~ t`U srt=cTg0Mi- =hO: >$Um/2/2ctL"pmV G}F@S~@j @t7\˻iA(B#˼޻oZZ>axnl,~W^ָ4 2qQc51\*COy//G;N9&RSؒ 'U|bV$?x0PieU@UX/eI{UEΕzGz/ݜ 㸤]{y#?J tY,M<ΤJV>p@APȜ&Q^ g]Fk{Ttn![IR$ WT(73l? bV2Z^n\ @^Xdo툁ڀ-+A`KP"-3铂ӢW;#<{KgVJ0~tb[GJ=<(ѵx?Hڂ@N=)8Z:Q>}1U!0m_5Q +OP 3u3 vZ=ޱS$&&y%{*Iw`H{C(v"D}T %&W0WdviIc>6b!+S¸[t-o/pE7*K)]fC2/|k~k!Mr'<$,q%"e!Eq0Ȣ!+:J( MibWÒH豪+ovUI%Q]έCSBJp"E2~5ۺ4;6k'f0:033n5]2p\=հn'h fĊӅ"DUD"%})F'ԓLRq9Vr>lXx0eRtC;u@ GxhC Jn1}.4&DzuYڌ.ĕjlv"juJA i(h4{3I6.B.: f~58LbY*7Pױ Sh R㚊&^FNej`\J % \W ЕEUe^%3x틅>^;pKלYTID'SyY@"yֺghG{Mv;\Mq2w#~1_8O--\6Ak /p+6VK\9q(| xݢ;DB;DUNxcglO(B{ytu!ݴH}v+1@R&Z\oZwtbMR[m4%nP>E^S 'm!wOFyE_&8U\B5k-lOf]C*fh`e|]5G:"Yk\Uz_#=uPk 3 "Ҍ i6c)o2l+g^?aezHkPn7InS҇1ۣGdһ=2΍TO8`v^F*\\j8;gP2 LqL9+R*C.fI4?C%cOքyAoDh, ^@uXd?'Ci@7}eE $4o':rzCQNLZATa'5~"UL'`Yh,?{;E~lJ2xx {k#&*@՛@xBtÔy/N)b m y >DS!PJȬҌ3}; o D.x#=3烁^7?t@L9#ΡEO".Zы>m89Ќ{jj\^1($%T.%ψ A(f?zIbݝ#X$1"^6I] Z^-gK!եގVߕm1btKl]c%`Y}r~c>9A6rUvWp*E9t$b?&~ooy cpӯO.NOJ6;C~I#u{'$":VOÊ] m7UW0R*~VO-CB+$PLіiO>^Y.@uN`kF,0sh[YQ1iB2E BVI4Ny(A⾐}J AVٌr?}]; js%".v5F"X!ӿ^I;+L]=_X2IE7EG* ,x(X01CD56KNrsG7j%wh.ުeM 1.= !{#ҼdeOĢ/ՀF(6[ o\4 syB|N J:+N>;AwZ 臚_EO[b7K7~5:0d+oR9#V>$?TY=*&[SiiБjBČᕳncdNM$#@,Uji'")k̇6, ئcs]Ph y:qE^R@Zlȼ7БQ2*hT [|j fy؃#Y=Bv+CY:>F'hV{@M=˩ mvk#s!Yms+;vЫ#ӒuGASDuS ƙ bU|}7r'Q@(pb#xܞ UkXWS4`WW!@mъ<Ê~Vot;m~@X`Ath Sn; A\.)k2!b2bhy}kf&LF;Iyi8u 7Fp؈k.Z *x0C쵀9ǽg8RvūC[61r9s7龳0Rn9LN6.a;ӍNNj0s~C5#GzuX`'\DFb7̣%H2`ϝЌRD}滩w'urdS@i/lN͍f޽UFQi} DKq=$A]L G4/b" R豐l;҄r=jÅ| Qbc쒾3(43yI0]0V9cGw9R3d/WU 3FϽeEMzY0 \W \A: }Ud0 ksJ"~, 6`/4L]דy1d$:dv7fQq| I?CO(~"TFu BF^ د}(M}qW ++t? J)(嗳Z6|Ɣ; @_.N{͙I8x?B+$' VgXX[؍-}׽A \#iRfD2AeQS0eaaI4Qzoa]$$R~5*Xi A8b,-u>ZEAG,: F֨R)LrFy9J5ct 0?*zX!w3ƹГ{ qps;tySLdU:ZNsdr,?ojL[dfMWqOTq/ 767=KxK6n|*ڨ`UӱlGEsIs+\7Ifw)ZQЬDv}e423L xa+$̹`Kdq LQ"b>U i{'dgNno:$䩍rib!0]~N+}M\ڊ);mM__BJQhlJqT"m, l2„G \^^QA|b+Y71+glp$*4RExze#ʭK°[F}%rjYrI^&qT5ݦ8/giԨs>:a0ʸy^LEoSUd6֔rSmnGTwԘL$=[3\G cMZRn58|Z@ٷ @9C h5qxZi25Vyy i,Nkc2,zOcDU7\~Ѧ1'z:M)֤I w8%JO0͟a~bxV琁K0d ۍ̠3G`UHAބY%D5 8 3V|Hxb#tS 7KT/ }QE\\ A̺Mܝv̈́HwqeTHNW¤/YUbtFnG:KB;J?53V/eP!~ )**A\LZo!~ۀIgFuOra}K+ӊ\L"/Q_(ץa%^bsq'+| /C+oIf*>\B;қQj΅3DTpyҧzϭBzIOKׄ0P7FMB(Vr] ,Svk$,̓62.V+tnBfh4@˒UHf2wViͳc)r~aFv^ݛsWBp<J9;vj؎rAE~>q5u,w$wʬI.%[Wm5{ T#fT-Yg+SVê)m#q%" 9d+)_G0l3f=ޛAYC{*hzOj[^%BI~[pm/!uR4G-lGJ ; 2W~kMF ^f6L[ӌփpX#uUۚw&aE|S_#jv|aIg*yD!zr6Mvs!4S8vje WH{Oh,|DJ^gqi!s /65=ށQaB9"~|f(.tH1ɃS*Z8>Fp$ͷDشV֮&HEy\º;m1g)7/&čۡ hFO8rBȤ8^aHf9"FG3fnt*ʉ)Aq[ DoCg t‹!A"]Aj\f;QWMKh~Bpn|`P_47-7tTEyK_dS즡!n|S T@Spc'1KFkMI`ޏG;|0_/.;=#xr!S_M5"evt #A˩lU=N0nz_|{zcQy'F>͈i GRGPFGМ|eV{ _V!||dlguy٘ˍ2uq^xEOz鱿M->`R//tcULzT] ˒!|D\|3{s [,81?flR70"'E,=0\"4-B P4g13VA߶ (`ʈFmuC򜭯!btLḞ҂1)J "JgrX~wmaB>r@` x\EAjň,[k8f~ ,םXzrTWx`q?D?wv乏w>nrXzrǔV  &ں8B!%DTSë )J1ރ [;uZUx죚j\[mc6qstk}q)@̛ҥ#_v 9߂YYÓ6R3dj 6Hf8}Tơ54*ǪKYJ^& RĶ׆N:jxUX5"%uqf5WB.GJgb?a@~'C_j*2_g˸q+$:NmDVkֱn#&wxM  <AtW_x/e B~ՌW &D4jQ4`U<Hu16SO;ڸ7'PГdXaf;>TeD'o =#*bvJSf:Fꗰgwi7T(+t&,ϊY*u}SP(hmvA5̄ "&/=:5>OқAC Ai9( HvaҼ L@GSn9} $/`YNsG|W͙|Zl!xH;vIa3 i>rٰfCl֊FpMjߒglC6Y7(JڧDmL?T4e 6 6O xc!z5fi{%z=difM~;B^;|kHb Z+ȿ  9gO 5e'*1Wr?Ep% Iw pIK֬Iqjs$\v@H WIN#IO sc+KI,j;]5kivW@!-4Z+_<D%g}U3wO^A jPC NER| Dpq 16jxkhB~Q+|&dzq ŀѷ~S.d]=d;&|鬊!Α~CөѼuwTDO`oR p G378ZAR6TΉXp&BZ!60fċBNؽ݊-";tD*BR75~i"8c]z#T65YFcLYVkF2l(ш ;:cv%mXPr0=,HZ|jX >}2d  OcNXE4 ~jDV,8oyFXS󋁩}PM܌_ΕY|UR-ľjNu]l8?jaV У-Z03PךݾH$2ׯK.e)^".-n{U>l\vS0uW|Z&}&NL|~#WD@PaQ@ӄ%r*Q%qW+/Fq6Jc=p3E.'tm\( ~Ybe37gD_cbU ?À>,PZHas&E&]ҔSS0b/f3#9t WقR>*+uXTJWzAȑ0oꃛV7gᗎɳn=ݺ> Z~ SE&Tvj[$LBe0|7O,W+;[Ka+*G4YLAzȪ3 ϒ7FeO;2.pK |ؕb짂,˅wڪVLpDOponJnbxe)vR[Truvć)=VNތ70SAA@oDLJM(B%V3k5로C&r1}ST= ȇL_;)JyoO|[垝2hӵuѓ\ܙ)/u BJԱ5rJB(1]{!lD׏Lgh`a1 ~%PLea'DRKF89:ue 'qWj-ߌ8\" >$U~HL,(b C0Ic7g'ZiąOOrB}Q+~\BƸs.TE\tIK-J:S>te識mmO_/obi0=P=S9%J|V p\rP}#TAfAUCwc'{8g׿4Kqۇmov}M͘F/ XY1m}r\X8uP7V0LXiv|5s?kيaJgeWvfx !3\ "[,|:3i$cɺVAR чj(pC(KF $aG]H|(:'^:'xQ"rlٻW&xg–I_ՄCCr%m,}Rc>+&ХeŁ%0T]cn7ASQY,B݌  OkHUTrݹ9x\L+.V="E?ɷHإƝ3i T%Bd55 UpV]V7#_gZyc2t T'Q#$꿿B~rb8E=:_ @`MAMu&Ϧn`dDx[{;dDccO 19𒂩Nx/Gc>ANRqt|S5mw Ψw6ɭڈ@L0#ì1¿o^6nBВ֡Qj&xZlf'8GWo>`xm1\w?a p4opUhJlWE|Sj 3C@2>$]8d6KҨ&rpA!9?Z04"L0㓘L7̃a0"':D6ep=>GpT\lסRflr5;Ule]? )-d;@ Y@a8`@3_ru(z8ުZ^k`(zR_KÍ!GlxOH) vъcXІ͟c P7߷61'2䬏3Ir֙7c5:[B#%:zlũicW P}52)I RMšCƇÜr I;XYHj<-퍜xd&3nxI}g:_L=uz%YN/IMTa9vb+!nOz*J%(q@zZe8p!ujeowd1.L߳jRj1|q+ |Jn+ruWҢؤjU#CK)@A K侧b,W@*tP@O)lG!,(X30M.T<\:p@w@l."?8;izKY}Qs>u?_wo\?Hwg"Q4MF!q Gzk@]j_&R[޹]Q'!ӁhnMڍc-E<\5Wg:yp Ζ_܏$( Y?cMaʑeKl,|1OC?WwMGB9bz4%iʯ2I48sP;ށTU:5uLl V9plԴ[TvP`d ȹr,uH K*kSA9)jk lj䄏 `W?!,8>+Fpt730LMmcg2\{VP PGőX@Ҷgz#V:a pK ?&XC4+mtW+K"cQheGX e\cAP i\(1}$rHs5Kpu<SA9Ø{HZ2S ShINdaUdMM6iV+`aWgcڄHjd p ܊?sX^ۄ@F@{0KQ[ONi"ʘjtRQ*wZ.+ɤZǺ[( Zb<u0XqM R&HSBږ {MU`0a T.- W™,/7*(~i+QwWE=.g%d#bSϵ? !I -x?ܚd0~x5=ʾCAYPځʃ#bOY+1lQPs0>_ݖj˥ aF"8:L+Š[׎i 5ZE/#z39aَ2SNt-\j~gpy`EOJ:Gʸ[WOY1nZat͜Q0|V4`8hI;#.Dkfnn;3&'_(H6Ҷkkz::!a,6Jpˏ\R LM^XUQ%'}2acE:#hʍ=V~*JBآ[j K>q&Cӧ>2T>Etlyp| C[;Sh6܇"{cT7R_$B|Jh0~sy#B!ۊ&n|Tl 3|!%SYez1O,KϚB? ;pA/W0pTݍ]s35v>7vc_Z^c&Y7a=۶嶄猲މ|r4 #o۬ A$kM8dЄJ'["0KY̠y . d 5-|"_#Uv 3 `OwHf-w\7^g=gOr{{De̓f ˁa;>HW9}'h5/ ˻ uu+&v!'-r {ؤpqٜIߠ@j _Ҋ+^eFDZt?~J/·HFcAXz`Pº@Lw$qDFZ܆u/縯} *5t4(ˀ;B.6Sy|i]X|gOnwـpB4Vp}4?u?. `i@Fr2Q7E᥃ L~BmxtɫxHbnpBO$Im7F0ސ6Y ]۪*;C4ؗ3'CJƯ-AWA;'ּ_龘ڧj/|^Dɞ칃 :& t'z?.J&g9z+tayK~@bN`[ l瓠XRwQ"Ȏxќbc%!^~g„;sm*ZIkx=Z6fxh\owPxpe؏ "e&Ej~& eluR~`HaFǁe4fsKCωN v5ZhȂ5a1Q#D<%f;IUnҢe(CK#m'q"[H*^UM$T1U*FO)5j}uwd4Ͷ DST`M,͞- q^+$k=wpJ+^E+8oZ|'{SA ?a|'~nMBJD2vKw% W5/c&ʷıN"p|M1u/_y t2=\~*|*=LWݿ7ؚL<f۰cWPl ~/B}#%Gls;.&cm4ÍԈ*qo4~ i2ܣI:ߖWDt84f ="#k\*$_©pr$|e(_iWz~@)_ʮg:|Br]0xvXd-X:f͈ %OR.} LKM b2,=;.FD)<Φf0`́ƳN?c!'eY֡7`'$2 (;OKNG@|^|YL^@0JyPݕ7 4y"!R*݅iy2L/R,l-LjvD@h-?_:R]x M^*&kfԴhxq[2v촏]WGY)* Ê)tkс Roڑ(>ѶP.N?vi.Zi20y=i_lt6.?~Q;2zriKLo8ͳaH¥" :$|yC;DCZ?&({L문ana__Ȩ& hzަȞr-Nl07Kr~V(?8 h8|)p+s* ΨQ53߮#':Ǯ[38g;,b.^1NB;RRpY!VPp ׀D$8Ra2U4o.&KqFѐtXhhiK*%f>faXtW{5'`J_$pxr.ݖTQ Z $ i'ǥg g`oo2`WR\4:N9]8-(E Sg32@GU]:5oh[䕴Q&cBcT ƿ{uK?n `__ckzcȞnԏk6"?/ZfxTM[W>TÍ!ͯ6AvX 6H `1- nY⩀.%br[eP^0+_z"C9c6}37exScC]|U^=jhB GݨPD'h9穟J rRF26dkS@jH/ݙEa.4:8ɦМ >]վ6U# yfUt{|I}?ȉe1&;}b~20$ 9{Vst3"QƄ<~+!>q_Ce<=oat'Ӳ[㈞SxM {.ONuRh1SfX<\pQH e&=Zð涠ʹuʬK:j ې˜S޷O>vصP+`3IQ"gmZ[U_=j$G,7Q6޻F U[x!Y SP[v0<ƭ>,QŰFB7wڰCK&֩&5/@λ Utk/oϐC!Vq'V~䚭-= [x0a(4Qv ϵ=2d=Jer#/~\kd=8Xk2_mQb Qjȴ mԔ!ίdwtڙs-TZ ~.w#gO|4 nR)lS6=?@-Z 55˹}8q3 `GlBI(hzHM׌# 6?!WaZphbƆJ=u{ndf5Ekm2gR{p+2 !7> <ZŻ.ԟ2V;X2eU/0=PKl\NfX"x9=Ҙ0٨|,;![:_+h95f# e?7<g)!n'trQH`[\e[*{v_$ǒE>tzߣ*R~5ٺip-+0#6&mE<ɀ!~S(_Lף1 8!SX3A*+˕SM VyϚ@g)AieUA8T9+*UDj/΍UD&f‡dsE; @Ky66;Cy{sOT-(Krw]MfuG$PlCWqߟ%)$ ul #`NQƪYag(j,0*1%XO7YwdeiѰ STrԘ8)x.N-U9O(9JOBZȀt ZPu/?O˩&CQAO,0VB (%ut_)Y.&50&Q칷. QLᔤj!I*N&8;t2ni0r塿R =~}oQ‹s*]H) Fu2S! W{,fXf=s'&]!U3ML pJ:Y^ Ku FRZK +% 򗅿}~CWkO~*KkVN!kusl(0*'Jxzn1NX\u*Ԩn 1L־:sFP(qيdJH;~RxJyXzs\kTZ9dJr1T$u!@f|,sU713a#/fBzbڷXeW;]wB8#еfd&ő1{UD;\ .r|]BM@C7x RP| Mj-}!DO>1 圢˵"8-kޥ>OHr9  U;v8拠4Lke1r ci`1OUG*Ѿ3jOr,S7'(2jkäH=bfDuȠϦ<4 ,XZnꈓV0C[fGb'03!`+}ԘXXkmd3#GCE2 )-"[-.ETE/' &[ H7J=᜼hQtÉK)\LwS1?p]ݿpsSSSw'^ꎡSX,0k3֔\n$ae|j˟gJ`d@PyƩ'Kx's{zUJ6=3Pn)#ih2 R=MXůyy2i}W _A0=] X۸Xb7g*wb߄}@w:G"EުPAɯɴNV91fbv(n\9:O2]2|bUF]O\TڜU@ eaɡ`:%2W̕J^HT.G F@AG 6BễTjM hg '8|gHZz"slt[0/}cOe'ܸ&7Nv!2&QiRfkfТHfgAJiJvC 6 NA*~Vqrf!7'N9AVtsE#jMԙg[)EFΘ*mlԅÿPfXda]@%mQ8LO[Gѩ 0PIgJѧƂr5&6>:z,%=nk6[= R(+h5YIL(^Na0*AZ {/HO08.w]ns3o? z'RaXRAC5WOvH8~]0PР Bx8+X;P]j/Wz]'gߢULc^6Ľ`VK3C%{qt`rֽO-'Sܷw{~ZƈD̼B%4c_ߪKFMFV^|y:{Q(3ٯ|éC0Y֒,aA%orޑKe@{LX1`ޱi}/`Ǖͤ8 m,WeN薻4Ͱ'̤bdPeXk7G;9zbVZvNj,Qԗ$ 0TaH5F}큓S [Lh P*"eMh^ BRs' 2CQ 7[MF,/TD/Zj$$.Cʨj (u!=WJTEHj`^7.[y<'K /L=o63Q8[#ُ-n>@iFR tbV(D5-S.*dDOTJaH bbR+?376ꚯI>ru8w{^*2:AI]K#HF/saBs[hZpG cܝUV`_Պ.O,?|Mw!0|DeFQ<ۥ;!qQ'K׍BGt1Hfy.nyRV9  uEMz֬?b鶋%iN"tVh; :S4ѩ J!^Nn <:iQj!GX;Q҅j"r?ph3|QZNQ$Q)%>tdF3S HÂq&ɓJpO~Op!ӃB,}M2e u=LJqi%>1qq#w!?o8jx F56T߶ |0k hAhϼ?6s7A}5s*sw}"Y;B$ S`ڈg21{[O)*ԟj[54g U:LFEnS8x3)гX65kvV6O2@vV*I/c﷔BAmq#J-,Už)8MgO4mݰӤGx|WhCkU0uMp.1b)}ccjbkH: %@xuJ9] (Vu~ҭ-߻ozlw6=wˎYzcϚǗDӧ>T'IZ@V(>Pة1q.{^86QBzTXU2lD= j5ߙ5;u=]т;B;t6M9}ʹ̨aA?53V_;a 5Gtw^/ d1D3sn2jJfvՔf.(':^J1*醤˲rn1_@T r ~RbJϫ>I C-GCu"FRHMoNoW=2ޞnQe{dsĂκ4ϯ\46乾"d >}*z%=y2c ᏇM_`e_V P,zܙL>+ RlQb O;!~"@X2LBjA l ayٌ%,a`XkY:@d x00EB ̈sTegh䵎s.A=L]rXz;%)# bȦ5zp8ML_gh6ޑQXMae]wvylRn"&N̴ߏ倌~kLױ?'-W <, sڅBȇ";⧍uf\K8HR7㕿19ܰt=H;]ʴƔ[ ,>5Pb.^SCC7O8v>\3':zYؐScpſ|Mj%KQz(<5M8X\]1t=Æ=Q]wF P>K`AJ{ څP7NGjj^ɂ_r5}']b,n.a K&@sjnR0G7i9>Ms-^%;֪}` j\D''q~ :LIY{,01ХCp1xF!D#19m- ?*>GX"2LcKWQzPxZЁsF $|WYSupbOM,r@2΄;zjfLhm=AT*MnRpN@ Lhcv=δ:i"`|2?*6]"Ym'XVKFL]DئBOe̬֭-c*NpL]-ʧo!P50n > E>6| el7: Zl#BݍK?Lwަgc%6rk3&+-.ƚۉL>$z@S,x[C+! 2DT.Y\=?Ҹ lm5`>z`f5RWW tح|*o'o8:& 9;ƮXw)a3i;'}ܠ:$%goo-+SkFxTq}VZZ4 q U|c$ ՅQi-lJx(Jt )>v %ɑ7ڤ{Lv 6YdG QR"gL8cU^.Ipt_a-ҨBn*i?iQ{iS~$KsҢ* 9s6ɦ2bП!A|PE[D1k$`%Pn'=\HiK:y`0m:we k(*פ`hͷDld^XԝB1OtbϗCkU/ʼn~4/É&:|ڥEm-B)CMbaf6if54GAnVr N'Ncx6?l8B[n>Bش (/vD< ;܈`Z`}Yg8zFO_,/)ĺ $)C=`iͅ*8wiGLX+s)0nbk[(2D'S%Fŗ͏O"(QpR6E70,^9jW-cK©'^jSaANjU7!sೕ(f]?2]0mǛ0wDTP8G:qEy]ОFa2 b]X-K T8ֶB[Ks5QSFV>ˣm bLjl&X  AS˨KqBw C; *r񎽗93G%Y;1ֽwVOTe1̐ȧprQQ )djCav|5 8ӽ ;Ip<ucV|`'w袎ݣ d0sc~fAT},qV5ڂysBə1 oV&mp(7Xqއ+ᐡo9S`şHM.^ЗR.NwZGgǘ"0R?UߵNZ}*j'*7̴g#al)-TMictT_:LCaCnkF0RjT .E:?#iGQڤ.D0UfLQ>4Ն'L#i*TB6Ȅ(k`O4W`PY,1IK)k]@Q=6 j¹_KRyLj)],wrOIg[>o*cʀϸ& ! KSah\D%6Ie5i*R8 IjhWyB%bs'UQ`z~dxZa.U%Q2p&Mx~1jqa'M,u9wdlz w]x,v}yyv롂ǠAZشZ\r+92l`dmw`ٲ]vȤWO\jpI$k<.úxoa }N(7yW U^-.gE)lH;n X-ASjM$}1H/.k'$OrtTurEPDHe.ws?GQb8>B2+.JF< ve%rEŲd A h<6uYL}rҤ]$$nZKf 7J{v"5ߨA:̺>jeQ :L/&H ʏI@Ipqٖ]*Af>Q#h@_HKUƳ49= ڈ'md2L2]#$gh\aO6_pC3AV+8imQ+YuDv'γq6_9I s ĚrOɟpYq2(6Ե3Pr?Shw-jSLn}bflNJ]ECv =*awB'U.!B䠴`\g`)']yBȍл&M݌0Y& #mogg'd .cLS*([ /`!^]k !eoY~([ǝ0'TVb@fA.zpy; LQM{z^֟05&Ҙ|t p(TzŸit7ns ;qX>h{lT ߕ- +1Um ac'y_wE'A6av4 #i ]/ ̣@£\G^Z(|_;tq 8 /2?7!9fqa5LD;zb~,isvD<eZ e6\ʤYz1(l^)?jHI(N-6bp2IL-pXu z GhnNkOoTwOҚ='=[gx<Д2î2>6=mmn%myn1ahJ5m67oW7Q閱CSe2G̀ rN<϶< 6n,94ZɕBY'v m劵x˕Nkܓg 'xz8g;7S2p|g䜈_ $"?_mC25rFwNiG ZI|$:m@ÒfM\P7v[)=26B=k.Y)3?Вxܦ5~Վ-Q_?9DiƐR0?DM}ԂGYڭ/a7#ЦNgd HHG5(:}ڶbh46!!9bul*[Ox zv,AP<$SPݜ0jea4 8ŀ P"%9V&{Qf!- 'څN'oԢE&ؚst/se[% Cc~5 fؑDˑJ-{Hy{’FQcOtijK'N(syѦigZYnB^na6 5%uzpD-թYB=̼{H(-uMru5D7NiFoУ6^MϤM8|XBGY6̳ JOfh\ NS\x3 ZyliN k\0OM_Dl^.'i^?2bCXS|.tq;cH,C8~"EjCKpQpaL>o0|})3Q;6}S1mf! .ฆJvQư11>dBS1?8:8Ҷ89ǃ$O.`:]oU>Ld *죈iZQV4]o#({/wSVWڔ4MO0*lvb+-#E0"Id)r7yEm$ZDo/67aI>TULcP~Re LI6DAE[D&#td)6b"-tvh[_DS]ig p-AŲi36V) /$Kfl*Dq=GLu8 Ҧ% Ev @Orm#NeNt Ou %mq nL2'wUl`YwjgLB۩g7%=IHɐ/q8!kKI~jX %jG%/ yU.{ʛ]qvEn/*臙F}\8C4O UMI gGveENHJ_u^]2EeC`;?9HR8@Zl£;TW17_(zyX]PCW%}T0C / G%#}D×MGm{;zʅe4"04%`杼{ͥ<'< !x@AjŖZXA؏ƩEDjebUQ*֎Fb#֧fx[7 aɱZgs;~B&:I ) iW08iiBGUmTATñy/'av'y1E#4$ZLp ? wO..VA 9sd.H047< N+t)kȦZ-Ӯ oQkWA&:۸if[Cgc?*V\,E"$wΉ]4+la.?#qi7QnmUH/b l%pUm]*]Y 5I}>! #VعTWsg% Ϙ!Wفs3E[Bɿ[r0j+:IC@!]01f7 7_G)NL^m5{8ZV58]'jf\c/rJxF8OS{[>E_::v{( [@'cMsb!FziE hq / hV!W>|fQJaIVl:Y7[$ץn u6ŕ$tx[TPunԵ +um3]qNĜW>)aj6Z$?=7H|TF.!RsavwI͈*ͳ k`_{vFy\ԩzQ<,}25W\dU>8'`s;M)2hcذA 4@X(yMd_WٸЅ.t*|~fLeMo)TJvEe謟} g~2~%ao\+| < 'q;+=4/mؠ?, r(6-e|!fjh"OR2 (Ta!"$yh~Q2H#u,fod<,Mq>B@Ge&7>6h YwjpE]ɚ p|&ZGg)yrJXPBD}w ji}t~ބO;'"xY܀*odN0*2T6RJgozB̻`EW6d^~(+͏/%hS~9/kNΩZH ɀ٫Hbfm0ͽnĽvT6MP6Jä-XstEmܪ^Л6u|k!hg Q׺B+m~'2YgfSrCP f2":'}[*t;*I`Aĕyh;M:l1*c Nt G~ȶvcpW:Ε1*6L5FZNTǎЊ I`o2`M똷q+GjXiNjlSk,9O%j1bbSL=hYhq><{t'_ +ΑQpe^գmt] [uzgeOh3btZT6fyAH | yL_&A^>Bq<j&K@s hWcx(d_V:<;~=ÚJrjId`gPt)B){}9y|}4iv*,f3/e1ghaL3QCx'}xAc $O  Z msP#-FV*LbdeMXcn9ڔ-II<[kTЂ>y"_@1AxD (ٰ=z-zuhG{ЏHb:׋ô;W.22jv~c)69A/rC|@V-mW9 ?D &] D.8 5y\f*w*%ʾ[ H‚ DnQoH&rXmlϠx$$YJ!ׅnǂL bXKX =SQ^uCGoe.*ur-y.Aö3{|XIw@Yt:7|iW ?(I%bK99=մN:^em=ԷcT#EsKL&܃.=ŧ*8Xo[}hUay~ N0>2GR%EsW#HV$,v>5d ↙*S!z(tvkf)=ilĘoP n#HtlJbG_.cX=g#iu5V|vڀo7qM8*:5?aBE׬MBVEu4w.*<(!jNɇ? ǸSLQIb󅅹&V2K{. PmUA-6Ý[+笟58`Uu$O]ݾÁY^CDܛZQzV~_ɴ&4iew Ib3suDgċ_5Wy`xP/Ԗ"c%^Z{j|UJ吖0gH0r/ ^yTZB7$Ԃ^l֠ e>e d;g͌7$!}1 gɴN ׏Lhր[WF٭)6M r*!SĆR[ ,\#k䠳.|`GtuYf˥W }#D)ʠ`ui"*R> ^-cCxȳR̋t❖\ SDGyc'g^ 099M(3BvB:Jve MS,VsMX)>J^nsǜ̬㙘i͉pђy;6t.s{԰ 1/w*MWbiH;'yDvʙ$[`Y APw)i&i;:2ͅI{pn~cWqg2ܗO Ϙ'wU1p(Ò~ˇU'"*4/6Mnm*葽 RT=8WA# #+X/\TKA:񕏆X9xx2 Ʉ'KzO)K2'&hOuT.d_XEpYlTK͹Gq^6Oav]T/jb'a]^\hB1hE R[|bV?qV2 /s%מ2ce@?Ra>hKߠ$.u-Z-E\m[&05ΙkhHNg z 2-0 ~t/$OuGiWvyHۨƝl'Zj hf\<%ݔeʷRi.QZn}"$GlȲ5?ѐ! [:)eTy -O2lzZ0>TNWV \S-il+ݿ'jP AI +pi(OX˺A'kߗ#T5gµ܊bց);znDb0%뢹N{aC<k06qt|f|SOҩvs(%wɓ`>Tc |t<9!u&룰xkaN J$G^1r59!L%o.^~:HNj N͜Jus&?1TlVb Y]Ӻo4,X M!ZJك jQZ!/80>g 8}wN_]X ŸUv0dU/l~`eДuSMߕ)QC˚_M^ܠt{Zu \?YՑ.Jqu?cVQu D!7m60KXW@?1ݨjI@ 9!ζv+S"ehMKO/R^MG:$Wn3o f1U)7@ayK w?G61rYr?pE=/K!MErgFwQX4z"nL&+Jq3pw * jD@&U/r]C>Olcx.<4U,;v8sw:rT."|4fr J|?r:ȟ L?v ͙CW'[Ew Ɵ&6& IGM\c[b 8Nob |X] ~c$.ȫQ [RQRBC;)ϪpL;=m_QcjDWԎ\4M+^HZL.O@wzs=|u>SJZ4u|AE&_ܮyg`~"0Wcq[=-F8]n@PÉg٨3X8]pui |2 ҏ #dgqd<B7VCuz7aJEU} f4 G;mg-dWLl4׼2 "IWU[:W{F#iVbY# 2I/xf a@ءGBLmTU2edYxv:#'Z/i Bsj'Lu%^ah[r%ww/ƀ"61Z,P ?+Tg,qc~=[1~T\іVP(gBu5K Ǝ`#T!>d5}~M:*`(܀Pa솺olyMe3:֌ppe{VvVBV))~.sL >0;dIW0Cy2AuW"}0|L/c!6@ hO48}%o87B}SSY`΋Š`';:ɶ>:W85 zbg`˜ ȕ]0-~Fk)X5T]h]*^%%Y/aok{5kAR!O2uTAH>⚻W4_EĪ #uZЗs.McFZ|9AT^"E+(|.;:LuNp.gߘҖ#khX\YvJ7"6Y`R+$2pr^`((;?BQ1 حjBsҀg xl ؂;6r! )k r8*N+5!٫7"Md4g醔1qqRQq=%|GU*Tq cۼpI5zpqR^ijĹ9g:)sPK Jt7S-">'心@h\8FkpVr=&L6*ԇ!`N_`:>*W1a0}$#j\y#eա2.CN3J( HJNN%`DP*ۙsj =1 ]oeE*"4ielEmt"`g~(4Ѱ.]_X)uxAmZoJnnNt\guS4x q#i(ixa\5{3{7>F W™v1& ZKsbRb/%Z=p*=\x|bBǨ Od]0= nk\b=!za/55ԭK-?Dv?+s$D$ JKrd^!t 3 ﻅF/X.м>;LoHʚ}0{ʘ`%,&IӞ`_ҜJc#BAt?rY%X,zcwZqg (C4zL=-,zēPI'/.Lѷ3מ"OA1bˮJG &07S[T~saVE 9O:lS|;I KrgURq'ÀWA|8y+8É6`h8 1bkه! ETj B涺ui/YfK;ҍh]mO؍9v`Ӈ!tFLgw$~__q[fyk1!dn%jƩ_RR'1|FZtlo9 N+]KuiNMP]Θ99x"U 4f 4$Vyhd< (9V)nBŭp*AH}}k$Sz;&'{> ;,'+m/ R|hᐫ%kpf".`N\*\ |)]u?d=L|;U{ JZN:9,.5?iAfst=e6;qD%nGUB^Iwz } T]Xy%5xҙJ(t@/DC,Zf}%-'#Ya5|v{2P^yr%'>PUyDǵrKיY.ۮzAdYp6 VH^ Z瞍z=Jp?J_ 4$FfZ5/kDTŻ}iL<! k+rKl\2&. UST𐑍Z3~Oc!|PXw 8K7ʃ|\J>ݮ5]uctD5 D~|>xG१:AYX[1di&hҪ4.C4+0pR8WX~¿?c9nz.Nq|8{+Y{s+OЖy$HI˻7 .!YtN3~ن2Xp\&y'k+Bq z4*t`c{ %\w.7i{h oEcQ>>c/Q,,DϓO[Rڿp7nK#F*0;VR-I~EvP}ˡq$fgENc% `4mƄ/2d]  *ZMqJޮR0-˜ p^ 93Z̔3oiRy,,$hea*q Qs0}'njV [JBĈ^C#OՍ{,S1]=XFxdUsLy\A[VͿa[4Af.4{9 3?ψf{x<F0J+2YAZRr>19#ZଲEN}LKٖDcex Fe-*k{~@ 9^k^r#cS.UN?>=_ z8i 0% b"5Տ$"MA@E\-C[ X!90mo?fڏu;j.ύ633N^Lri`/ !ck㚸X$l ':AQ1pM7nhQȁ{ֽl jW1)ZjR*56)i5zXǗ1)Q!@Kʤ;@![^G~T%uƄ7@>ϝ OQ hz~*=?hd<"K(L%`K{Kj JlfY zU||7.!'X'1.d3{Q p{a BIi66=9 L(JPY_6 MFhUqϼ Q/rh 6Hn^sY.<>Hm7fA< -ݹBH%0)"^${+CL)aIm*dS:V>G?<{KՃHd|xA&oX& GG/&_QdkCv"erbt֑@[e9Xb"|]3WL2˘ ~yl>by/\(a7/T|D0~:ȭ^ _hc &ͷ#*5/s| `b?}:VI8xq#@ 3V:Y$m ǧy 5Hny$끠Ih$Vɋ{}3(&>:'|wPTiKv:KKN}ʥ8ϡLN— L' pxdb}E(-%㶉IB mg4W 0Bg$r2᜸7A|uJ 5~ڷ'nZ75 yo&Zr"u drFkGR8*Xi5|r0r{>'DpS2Cntf=qKw 0!*Sue*rݒ@4 ]t߈̕4R}Tw o)_w?$u:&άe.R٩miO?!^B-<'㌣gw{!bS|W[YH0H/ YrPQo#tlɲ~fRR̰)4DQE)acG&_cXʂ*a Aْ#U#QBq1W0h_&B",H|NN)#O՞]҃ s?Ck 'GaӸ3ȃ+2uŽ 9^bיٍh.\ՒkwΞyF[=PD ġ=FQЗ*U~ITX.,xB6Z3`30( TVTv8.vfj/4F#1'r/]th4oR˧cbMSXCI&ַV!5M!Xm1̿`$H)*!ᚑYT:hF3tG`Jl2ƨZBm(5LK+Q\&@-<" #WEZЫ0RJՓIZN,3E\ Ut<].hoWZj}Qx K"YoC ~uk%muXMX b|$sGE^ #%"q,yOp4 ]]%ny?S.72ݽ'cW#,"S"G^8߱4u-1@+ r/<IeLL;2I/{c=_t3]o\JOJ r{(@(d ʗ1~ 5F,-A)ިQ sd}2A臘WE\쩛<{b9PU ba$"= HaϮ>=2t'XZB%I| m HkpڋtbNi}7bqz1i~c C.ٮ*^6*4~ӵ|@:{CGLY/<šIzn$UY?g;]JQ?*Rz4zQ̺x"6 W:b~!wPk8sD4l Uʜ x2À/3ἴBDl+b-&Ҿ\HX߲v^[:7k))>qjKD6 Z Ռ| ()Rgq4ծSQcv3&c&6p<<8]-{?P(դ!oD m [O^GyVܞNگ o.Rʴp.wͣ-pzm$L)r  V$vZ 68I9oIxV2{Y[ ݋je:O{_sxUIR"8:V @nX#%uK0[h1mxOoiW80Uq%KZlWbDe]($!W+psl)p/ 7uvS.mE&e=+e7 \Of/9bzAfA>!/V PޒE9hZEk+qS)^=@){v5y#ȷ'?@؊ %lۜ{|-kSK.CeKڴ|$ q2HB CS4>@ 8o:;K+tKL`CX Ԕ/dBzVN?)94!Z, ͎bjNPm0B8bL՚= k*ΤQ4Hx e'jE(յz= iy::+S8ٹt!ZWoڡg".e.xmbfBkuTy}TLasT<2 8AErPd5MACrԘiꡭPeLoWO s>=.EĬ'n}dDnNΟun N2qTp*̓h#!O^Zōj_4҇/ QwG ݯsM/X#8zzv@+*2%:v`,Z`J}{F+GNа|dePsaEc^=U R*A%8߿.=ӱImo]R]^^p5.6X (~~OK3/SNV)F!om`k6_)!Xo(*3ܠ?w9yXQ$~J"#!V;6v3lB4ITeE8W-/3AG9*bûKw\*x=2Nm<EƁ YW~ 5 \6*{'-6[ i7gSA9뷋!J~AcAvY]*A⋄. OFKMk`ri@'Tqa%q=r4P]JO (2+<.# m$w,Q1qEKu#/\AdW Q2#!v^BgNoa- i/Zgy_y %8QegȅlaHvLri+B$=bؾ>lxY}H)H Wy{5pb K,*7قS- *wY6^"HtXRpHprPnz@̉qk+HlgMUezeCXpzTM1kO3{,RZ`E~wVDD@zkU< (E?b ^wrF$Giئ,W%}5aB#)OYp ) 2.JBU: YZ