kernel-module-88x2bu-6.6-desktop-6.6.148-1> )lp 6bea80b7e1ef83ace02fe17ccf6755ba5c13eca7de79f26dd7e5bf936e1a3a732d0ba229acd562e1e931f2c362d4a1ab284d083b ~kshZ>Bq?ad#+ - Y     9 <@EJpt~(89:G@HDIHXLY\\]^bcdefltuvw`xdyhx Ckernel-module-88x2bu-6.6-desktop6.6.1481Binary module 88x2bu for kernel-6.6-desktopBinary module 88x2bu for kernel-6.6-desktopjlocalhostYgROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64Ygj#54490bd8e895e5a00e50607f4bad277721c2f0fa921abd2f5817e292c4fa4e086rootrootkernel-6.6-desktop-6.6.148-1.src.rpminstallonlypkg(kernel-module)kernel-module-88x2bu-6.6-desktopkernel-module-88x2bu-6.6-desktop(x86-64)kmod(88x2bu)    kernel-6.6-desktop(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.6.148-13.0.4-14.6.0-14.0-15.2-14.17.0jtw@jgH@jL@jL@jj9j Pj Pj Pj Pi@iD@iii@h/Mikhail Novosyolov BiteDasher BiteDasher 6.6.144-1BiteDasher BiteDasher 6.6.126-8BiteDasher 6.6.126-7Mikhail Novosyolov 6.6.126-6Mikhail Novosyolov 6.6.126-5Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.6.126-3Mikhail Novosyolov 6.6.126-2Mikhail Novosyolov 6.6.126-1Mikhail Novosyolov Mikhail Novosyolov 6.6.106-3Mikhail Novosyolov - [bot] upd: 6.6.145 -> 6.6.148 - Changelog: - accel/ivpu: Reject firmware log with size smaller than header - afs: Annotate struct afs_addr_list with __counted_by - afs: Turn the afs_addr_list address array into an array of structs - ALSA: hda: conexant: Remove mic bias threshold override - ALSA: hda: Fix cached processing coefficient verbs - ALSA: seq: close a re-opened queue timer in the destructor - ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC - amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN - amt: make the head writable before rewriting the L2 header - amt: re-read skb header pointers after every pull - arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates - arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 - ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() - ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI - ASoC: cs35l56: Don't use devres to unregister component - ASoC: cs35l56: Fix potential probe() deadlock - ASoC: cs35l56: Use complete_all() to signal init_completion - ASoC: cs42l43: Correct report for forced microphone jack - ASoC: mediatek: mt8183: Check runtime resume during probe - ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable() - ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable - ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe() - ASoC: mediatek: mt8192: Check runtime resume during probe - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link - ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() - ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb - ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop - ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup - ASoC: tas2781: bound firmware description string parsing - ata: libata-core: Reject an invalid concurrent positioning ranges count - ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered - ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts - ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning - ata: sata_dwc_460ex: use platform_get_irq() - audit: fix recursive locking deadlock in audit_dupe_exe() - audit: use 'unsigned int' instead of 'unsigned' - audit: widen ino fields to u64 - binfmt_elf_fdpic: only honour the first PT_INTERP - binfmt_misc: set have_execfd only once the interpreter is opened - Bluetooth: btusb: validate Realtek vendor event length - Bluetooth: hci_qca: Clear memdump state on invalid dump size - Bluetooth: hci_sync: Protect UUID list traversal - Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds - Bluetooth: qca: fix NVM tag length underflow in TLV parser - Bluetooth: RFCOMM: Fix session UAF in set_termios - bonding: fix devconf_all NULL dereference when IPv6 is disabled - bootconfig: do not put quotes on cmdline items unless necessary - bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() - bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c - bpf: drop bpf_lsm_getselfattr from hook list - bpf: Fix ld_{abs,ind} failure path analysis in subprogs - bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized - bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() - bpf, sockmap: Reject unhashed UDP sockets on sockmap update - btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 - btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() - btrfs: free mapping node on duplicate reloc root insert - btrfs: reject free space cache with more entries than pages - can: bcm: add locking when updating filter and timer values - can: bcm: add missing device refcount for CAN filter removal - can: bcm: extend bcm_tx_lock usage for data and timer updates - can: bcm: fix CAN frame rx/tx statistics - can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() - can: bcm: fix stale rx/tx ops after device removal - can: bcm: track a single source interface for ANYDEV timeout/throttle ops - can: bcm: validate frame length in bcm_rx_setup() for RTR replies - can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER - can: isotp: serialize TX state transitions under so->rx_lock - can: j1939: fix lockless local-destination check - cdrom: fix stack out-of-bounds read in CDROMVOLCTRL - ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() - comedi: comedi_parport: deal with premature interrupt - coredump: fix pidfs file refcount leak in umh_coredump_setup - crypto: rsa-pkcs1pad: Don't WARN on an empty digest - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning - dma: dw-edma: Fix build warning in dw_edma_pcie_probe() - dmaengine: dw-edma: Fix confusing cleanup.h syntax - dmaengine: dw-edma-pcie: Reject devices without driver data - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up - dm-verity: avoid double increment of &use_bh_wq_enabled - dm-verity: make error counter atomic - dpaa2-eth: put MAC endpoint device on disconnect - dpaa2-switch: put MAC endpoint device on disconnect - drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference - drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources - drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips - drm/amd/display: set new_stream to NULL after release - drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT - drm/amdgpu: fix aperture mapping leak - drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved - drm/amdgpu: fix division by zero with invalid uvd dimensions - drm/amdgpu: Fix VFCT bus number matching with soft filter - drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx8: drop unecessary BUG_ON() - drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() - drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() - drm/amdgpu: invoke pm_genpd_remove() before freeing genpd - drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() - drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() - drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) - drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older - drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 - drm/amdgpu/vce: fix integer overflow in image size - drm/amdgpu/vcn4: avoid rereading IB param length - drm/amdkfd: Check bounds in allocate_event_notification_slot - drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) - drm/amd/pm: make pp_features read-only when scpm is enabled - drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() - drm/dp/mst: fix buffer overflows in sideband chunk accumulation - drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers - drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers - drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() - drm/i915/gem: Add missing nospec on parallel submit slot - drm/i915/gem: Do not leak siblings[] on proto context error - drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU - drm/i915/gt: use correct selftest config symbol - drm/i915: Return NULL on error in active_instance - drm/i915/selftests: Fix GT PM sort comparators - drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() - drm/nouveau: fix reversed error cleanup order in ucopy functions - drm/radeon: fix r100_copy_blit for large BOs - drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() - drm/vc4: Prevent shader BO mappings from becoming writable - drm/virtio: bound EDID block reads to the response buffer - drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker - drm/vmwgfx: Validate vmw_surface_metadata::array_size - exec: fix unsigned loop counter wrap in transfer_args_to_stack() - exfat: validate cluster allocation bits of the allocation bitmap - fbcon: Rename struct fbcon_ops to struct fbcon_par - fbcon: Use correct type for vc_resize() return value - fbdev: efifb: fix memory leak in efifb_probe() - fbdev/efifb: Replace references to global screen_info by local pointer - firewire: net: Fix fragmented datagram reassembly - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() - firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context - firmware_loader: introduce __free() cleanup hanler - fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() - fscrypt: Add missing superblock check in find_or_insert_direct_key() - fscrypt: Avoid dynamic allocation in fscrypt_get_devices() - fs: preserve ACL_DONT_CACHE state in forget_cached_acl() - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list - ftrace: Add global mutex to serialize trace_parser access - geneve: require CAP_NET_ADMIN in the device netns for changelink - gpio: mt7621: avoid corruption of shared interrupt trigger state - gpio: tegra: do not call pinctrl for GPIO direction - gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings - gtp: check skb_pull_data() return in gtp1u_send_echo_resp() - hinic: remove unused ethtool RSS user configuration buffers - hwmon: (asus-ec-sensors) add missed handle for ENOMEM - hwmon: (asus-ec-sensors) fix EC read intervals - hwmon: (asus-ec-sensors) fix looping over banks while reading from EC - hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop - hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop - hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop - hwmon: occ: validate poll response sensor blocks - i2c: davinci: Unregister cpufreq notifier on probe failure - i2c: i801: fix hardware state machine corruption in error path - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) - i2c: imx: separate atomic, dma and non-dma use case - i40e: remove read access to debugfs files - IB/mad: Drop unmatched RMPP responses before reassembly - ice: fix LAG recipe to profile association - ice: use READ_ONCE() to access cached PHC time - ila: reload IPv6 header after pskb_may_pull in checksum adjust - Input: ims-pcu - fix firmware leak in async update - Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() - Input: ims-pcu - fix logic error in packet reset - intel_th: fix MSC output device reference leak - iomap: correct the range of a partial dirty clear - iommu/amd: Bound the early ACPI HID map - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() - iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() - iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() - iommu/vt-d: Disallow SVA if page walk is not coherent - io_uring/rw: fix missing ERESTARTSYS conversion in read paths - ipmi: fix refcount leak in i_ipmi_request() - ipv4: fib: free fib_alias with kfree_rcu() on insert error path - ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup - ipv6: ndisc: fix NULL deref in accept_untracked_na() - ksmbd: bound DACL dedup walk to copied ACEs - ksmbd: defer destroy_previous_session() until after NTLM authentication - ksmbd: pin conn during async oplock break notification - ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL - ksmbd: validate ACE size against SID sub-authorities - ksmbd: validate compound request size before reading StructureSize2 - ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl - KVM: Introduce vcpu->wants_to_run - KVM: nVMX: Hide shadow VMCS right after VMCLEAR - KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available - KVM: x86/mmu: Fix use-after-free on vendor module reload - KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN - libceph: bound get_version reply decode to front len - libceph: Fix multiplication overflow in decode_new_up_state_weight() - libceph: guard missing CRUSH type name lookup - libceph: refresh auth->authorizer_buf{,_len} after authorizer update - libceph: Reject monmaps advertising zero monitors - libceph: reject zero bucket types in crush_decode - libceph: remove debugfs files before client teardown - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() - LoongArch: Fix oops during single-step debugging - lsm: infrastructure management of the sock security - mac802154: hold an interface reference across the scan worker - mac802154: llsec: reject frames shorter than the authentication tag - mctp: serial: handle zero-length frames to prevent rx buffer overflow - media: airspy: Return queued buffers on start_streaming() failure - media: aspeed: fix missing of_reserved_mem_device_release() on probe failure - media: cec: seco: unregister adapter on IR probe failure - media: cedrus: clean up media device on probe failure - media: cedrus: Fix missing cleanup in error path - media: cedrus: skip invalid H.264 reference list entries - media: cx231xx: fix devres lifetime - media: cx23885: add ioremap return check and cleanup - media: marvell-cam: fix missing pci_disable_device() on remove - media: meson: vdec: Fix memory leak in error path of vdec_open - media: msi2500: Return queued buffers on start_streaming() failure - media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe - media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure - media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path - media: nxp: imx8-isi: Fix potential out-of-bounds issues - media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding - media: pci: dm1105: Free allocated workqueue - media: pwc: Drain fill_buf on start_streaming() failure - media: pwc: Return queued buffers on start_streaming() failure - media: radio-si476x: Unregister v4l2_device on probe failure - media: rtl2832: fix use-after-free in rtl2832_remove() - media: rtl2832_sdr: Return queued buffers on start_streaming() failure - media: saa7134: Fix a possible memory leak in saa7134_video_init1 - media: stm32: dcmi: unregister notifier on probe failure - media: sun4i-csi: Return queued buffers on start_streaming() failure - media: tegra-video: vi: fix invalid u32 return value in format lookup - media: ti: vpe: unwind v4l2 device registration on probe error - media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() - media: v4l2-ctrls: validate HEVC active reference counts - media: vb2: use ssize_t for vb2_read/vb2_write - media: vidtv: fix reference leak on failed device registration - media: vimc: fix reference leak on failed device registration - media: vivid: add vivid_update_reduced_fps() - media: vivid: check for vb2_is_busy() when toggling caps - media: vpif_capture: fix OF node reference imbalance - mei: bus: access mei_device under device_lock on cleanup - mm/damon/core: disallow overlapping input ranges for damon_set_regions() - mm/damon/core: validate ranges in damon_set_regions() - mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages - mm: refactor mm_access() to not return NULL - mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n - mptcp: decrement subflows counter on failed passive join - mptcp: only set DATA_FIN when a mapping is present - mtd: fix double free and WARN_ON in add_mtd_device() error paths - mtd: mtdswap: remove debugfs stats file on teardown - mtd: nand: mtk-ecc: stop on ECC idle timeouts - mtd: rawnand: Add a helper for calculating a page index - mtd: rawnand: Ensure all continuous terms are always in sync - mtd: rawnand: Pause continuous reads at block boundaries - net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() - net: bridge: vlan: fix vlan range dumps starting with pvid - net: dpaa: fix mode setting - netfilter: nf_conntrack_sip: remove net variable shadowing - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it - netfilter: nf_tables: remove register tracking infrastructure - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() - netfilter: nft_fib: reject fib expression on the netdev egress hook - netfilter: nft_set_pipapo: don't leak bad clone into future transaction - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL - netfilter: nft_set_pipapo: merge deactivate helper into caller - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path - netfilter: nft_set_pipapo: move prove_locking helper around - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone - netfilter: nft_set_pipapo: prepare walk function for on-demand clone - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions - net: hip04: fix RX buffer leak on build_skb failure - net: hsr: fix memory leak on slave unregistration by removing synced VLANs - net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink - net: ipa: fix SMEM state handle leaks in SMP2P init - net: ipv6: fix dif and sdif mismatch in raw6_icmp_error - net/iucv: fix use-after-free of a severed iucv_path - net/iucv: take a reference on the socket found in afiucv_hs_rcv() - net: macb: drop in-flight Tx SKBs on close - net: mana: Validate the packet length reported by the NIC - net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation - net/mlx5e: Report zero bandwidth for non-ETS traffic classes - net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule - net/packet: avoid fanout hook re-registration after unregister - net: pcs: xpcs: fix SGMII state reading - net: qrtr: ns: Raise node count limit to 512 - net: qrtr: restrict socket creation to the initial network namespace - net/sched: act_tunnel_key: Defer dst_release to RCU callback - net: slip: serialize receive against buffer reallocation - net: stmmac: enable the MAC on link up for all supported speeds - net: stmmac: fix l3l4 filter rejecting unsupported offload requests - net: stmmac: reset residual action in L3L4 filters on delete - net/x25: fix use-after-free in x25_kill_by_neigh() - nexthop: initialize extack in nh_res_bucket_migrate() - nfp: Check resource mutex allocation - NFS: Charge unstable writes by request size, not folio size - NFSD: pass nfsd_file to nfsd_iter_read() - nfs: remove dead code for the old swap over NFS implementation - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF - octeontx2: Annotate mmio regions as __iomem - octeontx2-pf: clear stale mailbox IRQ state before request_irq() - octeontx2-pf: fix SQB pointer leak on init failure - octeontx2-vf: clear stale mailbox IRQ state before request_irq() - octeontx2-vf: set TC flower flag on MCAM entry allocation - openvswitch: fix GSO userspace truncation underflow - ovl: use linked upper dentry in copy-up tmpfile - pds_core: check for workqueue allocation failure - pds_core: fix auxiliary device add/del races - pds_core: order completion reads after the ownership check - pds_core: reject component parameter in legacy firmware update - pds_core: yield the CPU while waiting for the adminq to drain - phonet: pep: fix use-after-free in pep_get_sb() - pinctrl: remove pinctrl_gpio_direction_output() - platform/loongarch: laptop: Explicitly reset bl_powered state when suspend - platform/x86/amd/pmc: Avoid logging "(null)" for DMI values - platform/x86/amd/pmc: Don't log during intermediate wakeups - platform/x86: dell-laptop: fix missing cleanups in init error path - platform/x86: dell-smbios: Move request functions for reuse - platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug - posix-cpu-timers: Prevent UAF caused by non-leader exec() race - powerpc/time: Prepare to stop elapsing in dynticks-idle - powerpc/vtime: Initialize starttime at boot for native accounting - ppp: annotate data races in ppp_generic - ppp: convert to percpu netstats - ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF - ppp: enable TX scatter-gather - pppoe: reload header pointer after dev_hard_header() - ppp: use IFF_NO_QUEUE in virtual interfaces - proc: Fix broken error paths for namespace links - rbd: Reset positive result codes to zero in object map update path - RDMA/cma: Fix hardware address comparison length in netevent callback - RDMA/erdma: initialize ret for empty receive WR lists - RDMA/hns: Fix potential integer overflow in mhop hem cleanup - RDMA/irdma: Prevent overflows in memory contiguity checks - RDMA/irdma: Prevent rereg_mr for non-mem regions - RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp - RDMA/siw: publish QP after initialization - RDMA/umem: Add helpers for umem dmabuf revoke lock - RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper - RDMA/umem: Add pinned revocable dmabuf import interface - RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device - RDMA/umem: Introduce an option to revoke DMABUF umem - RDMA/umem: Move umem dmabuf revoke logic into helper function - rds: drop incoming messages that cross network namespace boundaries - Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" - Revert "drm/amd/display: Add missing kdoc for ALLM parameters" - RISC-V: KVM: Serialize virtual interrupt pending state updates - rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack - rxrpc: Fix notification vs call-release vs recvmsg - rxrpc: Fix socket notification race - rxrpc: Pull out certain app callback funcs into an ops table - rxrpc: serialize kernel accept preallocation with socket teardown - rxrpc: Use irq-disabling spinlocks between app and I/O thread - sched/vtime: Get rid of generic vtime_task_switch() implementation - sctp: auth: verify auth requirement when auth_chunk is NULL - sctp: don't free the ASCONF's own transport in DEL-IP processing - sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid - sctp: fix auth_hmacs array size in struct sctp_cookie - sctp: validate stream count in sctp_process_strreset_inreq() - selftest: af_unix: Add Kconfig file. - selftests: af_unix: add USER_NS config - selftests/alsa: Fix memory leak in find_controls error path - selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs - selftests: openvswitch: add config file - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() - seqlock: Allow KASAN to fail optimizing - seqlock: Allow UBSAN_ALIGNMENT to fail optimizing - seqlock: Cure some more scoped_seqlock() optimization fails - serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms - serial: max310x: implement gpio_chip::get_direction() - serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch) - serial: sc16is7xx: implement gpio get_direction() callback - smb/client: handle overlapping allocated ranges in fallocate - smb: client: validate DFS referral PathConsumed - staging: rtl8723bs: fix inverted HT40 secondary channel offset - staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() - SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists - sunrpc: allocate a separate bvec array for socket sends - SUNRPC: Return an error from xdr_buf_to_bvec() on overflow - taskstats: fill_stats_for_tgid: use for_each_thread() - taskstats: retain dead thread stats in TGID queries - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() - tipc: fix infinite loop in __tipc_nl_compat_dumpit - tipc: fix u16 MTU truncation in media and bearer MTU validation - tipc: restrict socket queue dumps in enqueue tracepoints - tls: device: push pending open record on splice EOF - tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() - tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev - tracing: Fix resource leak on mmiotrace trace_pipe close - tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() - tracing/probes: Fix potential underflow in LEN_OR_ZERO macro - tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() - tracing/user_events: Fix use-after-free in user_event_mm_dup() - udmabuf: Do not create malformed scatterlists - udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() - usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect - usb: chipidea: fix usage_count leak when autosuspend_delay is negative - usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback - usb: gadget: f_midi: cancel pending IN work before freeing the midi object - usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() - USB: gadget: fsl-udc: fix device name leak on probe failure - usb: gadget: printer: fix infinite loop in printer_read() - USB: gadget: snps-udc: fix device name leak on probe failure - usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown - usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer - USB: serial: ftdi_sio: add support for E+H FXA291 - USB: serial: io_edgeport: cap received transmit credits - USB: serial: keyspan_pda: fix data loss on receive throttling - USB: serial: option: add TDTECH MT5710-CN - USB: storage: add NO_ATA_1X quirk for Longmai USB Key - usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits - VDUSE: avoid leaking information to userspace - vduse: remove unused vaddr parameter of vduse_domain_free_coherent - vduse: take out allocations from vduse_dev_alloc_coherent - vduse: Use fixed 4KB bounce pages for non-4KB page size - VFS/audit: introduce kern_path_parent() for audit - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets - vxlan: mdb: Fix source list corruption on a failed replace - vxlan: require CAP_NET_ADMIN in the device netns for changelink - wan: wanxl: Only reset hardware after BAR mapping - watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() - wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() - wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin - wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() - wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET - wifi: ath6kl: fix OOB access from firmware ADDBA window size - wifi: ath6kl: fix OOB read from firmware IE lengths in connect event - wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request - wifi: brcmfmac: fix 802.1X-SHA256 call trace warning - wifi: brcmfmac: initialize SDIO data work before cleanup - wifi: brcmfmac: make release_scratchbuffers idempotent - wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read - wifi: carl9170: fix buffer overflow in rx_stream failover path - wifi: carl9170: fix OOB read from off-by-two in TX status handler - wifi: cfg80211: bound element ID read when checking non-inheritance - wifi: cfg80211: cancel sched scan results work on unregister - wifi: cfg80211: reject unsupported PMSR FTM location requests - wifi: cfg80211: validate PMSR FTM preamble range - wifi: cfg80211: validate PMSR measurement type data - wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() - wifi: iwlwifi: mvm: fix read in wake packet notification handler - wifi: iwlwifi: mvm: validate SAR GEO response payload size - wifi: libertas: fix memory leak in helper_firmware_cb() - wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() - wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock - wifi: mac80211_hwsim: clamp virtio RX length before skb_put - wifi: mac80211: recalculate TIM when a station enters power save - wifi: mac80211: tear down new links on vif update error path - wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() - wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7915: guard HE capability lookups - wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses - wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() - wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() - wifi: mwifiex: bound uAP association event IEs to the event buffer - wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper - wifi: nl80211: free RNR data on MBSSID mismatch - wifi: nl80211: validate nested MBSSID IE blobs - wifi: p54: validate RX frame length in p54_rx_eeprom_readback() - wifi: wilc1000: validate assoc response length before subtracting header - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out init_cpu_worker_pool() - x86/boot/compressed: Disable jump tables - xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() - xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert - xprtrdma: Clear receive-side ownership pointers on release - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- [bot] upd: 6.6.144 -> 6.6.145 - Changelog: - 6lowpan: fix NHC entry use-after-free on error path - 9p: skip nlink update in cacheless mode to fix WARN_ON - ACPI: bus: Introduce devm_acpi_install_notify_handler() - ACPI: CPPC: Suppress UBSAN warning caused by field misuse - ACPI: driver: Check ACPI_COMPANION() against NULL during probe - ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() - ACPI: IPMI: Fix message kref handling on dead device - ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup - ACPI: NFIT: core: Fix possible deadlock and missing notifications - ACPI: NFIT: core: Fix possible NULL pointer dereference - ACPI: NFIT: core: Use devm_acpi_install_notify_handler() - ACPI: resource: Amend kernel-doc style - afs: Fix callback service message parsers to pass through -EAGAIN - afs: Fix error code in afs_extract_vl_addrs() - afs: Fix further netns teardown to cancel the preallocation charger - afs: Fix netns teardown to cancel the preallocation charger - afs: fix NULL pointer dereference in afs_get_tree() - afs: Fix the volume AFS_VOLUME_RM_TREE is set on - afs: Fix unchecked-length string display in debug statement - afs: Fix vllist leak - afs: use kvfree() to free memory allocated by kvcalloc() - alpha/PCI: Add security_locked_down() check to pci_mmap_resource() - alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs - ALSA: aoa: check snd_ctl_new1() return value - ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser - ALSA: cmipci: check snd_ctl_new1() return value - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() - ALSA: es1938: check snd_ctl_new1() return value - ALSA: firewire: isight: bound the sample count to the packet payload - ALSA: gus: check snd_ctl_new1() return value - ALSA: ice1712: check snd_ctl_new1() return value - ALSA: seq: Clear variable event pointer on read - ALSA: seq: Fix partial userptr event expansion - ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() - ALSA: seq: midi: Serialize output teardown with event_input - ALSA: usb-audio: avoid kobject path lookup in DualSense match - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks - ALSA: usb-audio: Roll back quirk control caches on write errors - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes - ALSA: virtio: Add missing 384 kHz PCM rate mapping - ALSA: ymfpci: check snd_ctl_new1() return value - amt: fix size calculation in amt_get_size() - apparmor: aa_getprocattr free procattr leak on format failure - apparmor: aa_label_alloc use aa_label_free on alloc failure - apparmor: advertise the tcp fast open fix is applied - apparmor: check label build before no_new_privs test - apparmor: fix label can not be immediately before a declaration - apparmor: fix potential UAF in aa_replace_profiles - apparmor: fix rawdata_f_data implicit flex array - apparmor: grab ns lock and refresh when looking up changehat child profiles - apparmor: put secmark label after secid lookup - arm64: dts: imx8x-colibri: Correct SODIMM PAD settings - arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host - arm64: dts: qcom: sdm630: describe adsp_mem region properly - arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning - arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node - arm64: dts: qcom: sm8450: Fix ICE reg size - arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S - arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc - arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well - arm64: Fix early handling of FEAT_E2H0 not being implemented - arm64: fpsimd: Fix type mismatch in sme_{save,load}_state() - arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() - arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS - arm64/mm: convert ptep_clear() to ptep_get_and_clear() - arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep) - arm64/mm: convert set_pte_at() to set_ptes(..., 1) - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: sysreg: Add layout for ID_AA64MMFR4_EL1 - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: tegra: Fix Tegra234 MGBE PTP clock - arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative - ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint - ARM: imx31: Fix IIM mapping leak in revision check - ARM: imx3: Fix CCM node reference leak - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO - ASoC: codecs: aw88261: fix incorrect masks for boost regs - ASoC: codecs: hdac_hdmi: Validate written enum value - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails - ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count - ASoC: fsl: fsl_audmix: Validate written enum values - ASoC: mediatek: mt8183: Release reserved memory on cleanup - ASoC: mediatek: mt8192: Release reserved memory on cleanup - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put - ASoC: SOF: topology: validate vendor array size before parsing - ASoC: tegra: tegra210_ahub: Validate written enum value - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode - ata: libata: Fix ata_exec_internal() - ata: pata_pxa: Fix DMA channel leak on probe error - ata: sata_gemini: unwind clocks on IDE pinctrl errors - audit: add audit_log_nf_skb helper function - audit: Fix data races of skb_queue_len() readers on audit_queue - audit: fix potential integer overflow in audit_log_n_hex() - batman-adv: access unicast_ttvn skb->data only after skb realloc - batman-adv: bla: reacquire gw address after skb realloc - batman-adv: clean untagged VLAN on netdev registration failure - batman-adv: dat: acquire ARP hw source only after skb realloc - batman-adv: dat: ensure accessible eth_hdr proto field - batman-adv: dat: fix tie-break for candidate selection - batman-adv: ensure minimal ethernet header on TX - batman-adv: fix VLAN priority offset - batman-adv: frag: fix primary_if leak on failed linearization - batman-adv: frag: free unfragmentable packet - batman-adv: gw: acquire ethernet header only after skb realloc - batman-adv: retrieve ethhdr after potential skb realloc on RX - batman-adv: tt: avoid request storms during pending request - batman-adv: tt: prevent TVLV OOB check overflow - binder: fix UAF in binder_free_transaction() - binder: fix UAF in binder_thread_release() - bitops: make BYTES_TO_BITS() treewide-available - bitops: use common function parameter names - block: Avoid mounting the bdev pseudo-filesystem in userspace - block: skip sync_blockdev() on surprise removal in bdev_mark_dead() - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister - Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev - Bluetooth: 6lowpan: hold L2CAP conn across debugfs control - Bluetooth: bnep: pin L2CAP connection during netdev registration - Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() - Bluetooth: btmtk: apply the common btmtk_fw_get_filename - Bluetooth: btmtk: Fix btmtk.c undefined reference build error - Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown - Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c - Bluetooth: btmtk: remove #ifdef around declarations - Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() - Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() - Bluetooth: btrtl: validate firmware patch bounds - Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB - Bluetooth: btusb: fix use-after-free on marvell probe failure - Bluetooth: btusb: fix use-after-free on registration failure - Bluetooth: btusb: fix wakeup source leak on probe failure - Bluetooth: btusb: mediatek: add MT7922 subsystem reset - Bluetooth: btusb: mediatek: remove the unnecessary goto tag - Bluetooth: btusb: mediatek: reset the controller before downloading the fw - Bluetooth: btusb: mediatek: return error for failed reg access - Bluetooth: fix UAF in bt_accept_dequeue() - Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() - Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO - Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state - Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle - Bluetooth: hci: validate codec capability element length - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID - Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length - Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock - Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: validate option length before reading conf opt value - Bluetooth: MGMT: Fix adv monitor add failure cleanup - Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete - Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready - Bluetooth: SCO: hold sk properly in sco_conn_ready - Bluetooth: separate CIS_LINK and BIS_LINK link types - Bluetooth: vhci: validate devcoredump state before side effects - bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() - bonding: 3ad: fix mux port state on oper down - bonding: add ESP offload features when slaves support - bonding: Correctly support GSO ESP offload - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix xfrm offload feature setup on active-backup mode - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add missing access_ok call to copy_user_syms - bpf: Allow LPM map access from sleepable BPF programs - bpf, arm64: Reject out-of-range B.cond targets - bpf: Check tail zero of bpf_prog_info - bpf: Consistently use bpf_rcu_lock_held() everywhere - bpf: Disable xfrm_decode_session hook attachment - bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket - bpf: Fix effective prog array index with BPF_F_PREORDER - bpf: Fix stack slot index in nospec checks - bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs - bpf,fork: wipe ->bpf_storage before bailouts that access it - bpf, lsm: Add disabled BPF LSM hook list - bpf: Prefer dirty packs for eBPF allocations - bpf: Prefer packs that won't trigger an IBPB flush on allocation - bpf: Reject fragmented frames in devmap - bpf: Restore sysctl new-value from 1 to 0 - bpf: Restrict JIT predictor flush to cBPF - bpf: Run generic devmap egress prog on private skb - bpf: Skip redundant IBPB in pack allocator - bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check - bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() - bpf: Support for hardening against JIT spraying - bpf: Tighten cgroup storage cookie checks for prog arrays - bpftool: Use libbpf error code for flow dissector query - bpf: Update transport_header when encapsulating UDP tunnel in lwt - bpf: zero-initialize the fib lookup flow struct - bridge: cfm: reject invalid CCM interval at configuration time - bridge: stp: Fix a potential use-after-free when deleting a bridge - btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC - btrfs: do not trim a device which is not writeable - btrfs: fix false IO failure after falling back to buffered write - btrfs: fix incorrect buffered IO fallback for append direct writes - btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() - btrfs: zoned: don't account data relocation space-info in statfs free space - bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() - bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path - bus: sunxi-rsb: Always check register address validity - can: bcm: add missing rcu list annotations and operations - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF - can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure - can: esd_usb: kill anchored URBs before freeing netdevs - can: isotp: use unconditional synchronize_rcu() in isotp_release() - cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed - char: tlclk: fix use-after-free in tlclk_cleanup() - cifs: invalidate cfid on unlink/rename/rmdir - cifs: remove all cifs files before kill super - cifs: validate DFS referral string offsets - clk: at91: keep securam node alive while mapping it - clk: qcom: a53: Corrected frequency multiplier for 1152MHz - clk: scmi: Fix clock rate rounding - clk: scpi: Unregister child clock providers on remove - clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() - clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances - configfs: fix lockless traversals of ->s_children - configfs_lookup(): don't leave ->s_dentry dangling on failure - coresight: cti: Fix DT filter signals silently ignored - coresight: etb10: restore atomic_t for shared reading state - coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore - coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() - cpufreq: conservative: Simplify frequency limit handling - cpufreq: Documentation: fix conservative governor freq_step description - cpufreq: Documentation: fix sampling_down_factor range - cpufreq: Fix hotplug-suspend race during reboot - cpufreq: intel_pstate: Sync policy->cur during CPU offline - cpufreq: pcc: fix use-after-free and double free in _OSC evaluation - cpu: hotplug: Bound hotplug states sysfs output - cpu: hotplug: Preserve per instance callback errors - crypto: af_alg - Remove zero-copy support from skcipher and aead - crypto: algif_skcipher - force synchronous processing on trees without ctx->state - crypto: amlogic - avoid double cleanup in meson_crypto_probe() - crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents - crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 - crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A - crypto: atmel-sha204a - fix blocking and non-blocking rng logic - crypto: caam - use print_hex_dump_devel to guard key hex dumps - crypto: caam - use print_hex_dump_devel to guard key hex dumps again - crypto: cavium/cpt - fix DMA cleanup using wrong loop index - crypto: ccp - Treat zero-length cert chain as query for blob lengths - crypto: crypto4xx - Remove ahash-related code - crypto: crypto4xx - Remove insecure and unused rng_alg - crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels - crypto: drbg - Fix returning success on failure in CTR_DRBG - crypto: drbg - Fix the fips_enabled priority boost - crypto: ecc - Fix carry overflow in vli multiplication - crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve - crypto: hisilicon/qm - disable error report before flr - crypto: hisi-trng - Remove crypto_rng interface - crypto: marvell/octeontx - fix DMA cleanup using wrong loop index - crypto: pcrypt - restore callback for non-parallel fallback - crypto: qat - fix restarting state leak on allocation failure - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() - crypto: qat - validate RSA CRT component lengths - crypto: rng - Free default RNG on module exit - crypto: sun4i-ss - Remove insecure and unused rng_alg - crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos/hash - drop workqueue mechanism for SEC1 - crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation - crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor - crypto: talitos/hash - remove useless wrapper - crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request - crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue - crypto: talitos - move code in current_desc_hdr() into a standalone function - crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function - crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function - crypto: talitos - rename first/last to first_desc/last_desc - crypto: talitos - stop using crypto_ahash::init - crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header - cxgb4: Fix decode strings dump for T6 adapters - cxl/test: Add check after kzalloc() memory in alloc_mock_res() - cxl/test: Fix integer overflow in mock LSA bounds checks - cxl/test: Zero out LSA backing memory to avoid leaking to user - dax/kmem: account for partial discontiguous resource upon removal - debugobjects: Plug race against a concurrent OOM disable - device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() - device property: initialize the remaining fields of fwnode_handle in fwnode_init() - devlink: Fix parent ref leak in devl_rate_node_create() - dlm: fix add msg handle in send_queue ordered - dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK - dmaengine: Fix possible use after free - dmaengine: imx-sdma: Refine spba bus searching in probe - dmaengine: qcom: gpi: set DMA_PRIVATE capability - dmaengine: tegra: Fix burst size calculation - dm-bufio: fix wrong count calculation in dm_bufio_issue_discard - dm_early_create: fix freeing used table on dm_resume failure - dm era: fix NULL pointer dereference in metadata_open() - dm era: fix out-of-bounds memory access for non-zero start sector - dm-integrity: don't increment hash_offset twice - dm-ioctl: fix a possible overflow in list_version_get_info - dm-ioctl: report an error if a device has no table - dm-log: fix a bitset_size overflow on 32bit machines - dm-stats: fix dm_jiffies_to_msec64 - dm-stats: fix merge accounting - dm thin metadata: fix metadata snapshot consistency on commit failure - dm thin metadata: fix superblock refcount leak on snapshot shadow failure - dm-verity: fix a possible NULL pointer dereference - dm-verity: increase sprintf buffer size - Documentation: proc: fix section numbering in table of contents - dpaa2-switch: fix VLAN upper check not rejecting bridge join - drbd: reject data replies with an out-of-range payload size - driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() - driver core: Guard deferred probe timeout extension with delayed_work_pending() - driver core: Use mod_delayed_work to prevent lost deferred probe work - driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() - drm/amd/display: Add missing kdoc for ALLM parameters - drm/amd: Fix set but not used warnings - drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() - drm/amdgpu: initialize irq.lock spinlock earlier - drm/amdgpu: set sub_block_index for mca ras sub-blocks - drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free - drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm - drm/amdkfd: Validate CRIU-restored IDs before idr_alloc - drm/edid: fix OOB read in drm_parse_tiled_block() - drm/hisilicon/hibmc: move display contrl config to hibmc_probe() - drm/hisilicon/hibmc: use clock to look up the PLL value - drm/msm/dp: fix HPD state status bit shift value - drm/msm/dp: Fix the ISR_* enum values - drm/nouveau/bios: specify correct display fuse register for Ampere and Ada - drm/radeon: fix integer overflow in radeon_align_pitch() - drm/radeon: fix memory leak in radeon_ring_restore() on lock failure - drm/rockchip: Test for imported buffers with drm_gem_is_imported() - drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() - drm/tegra: Fix iommu_map_sgtable() return value check - drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered - drm/tidss: Drop extra drm_mode_config_reset() call - dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties - dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback - dt-bindings: pinctrl: nvidia,tegra234: Add missing required block - dt-bindings: power: imx93: Add MIPI PHY power domain - EDAC/i10nm: Don't fail probing if ADXL is missing - EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info - espintcp: use sk_msg_free_partial to fix partial send - evm: terminate and bound the evm_xattrs read buffer - exfat: add exfat_get_dentry_set_by_ei() helper - exfat: bound uniname advance in exfat_find_dir_entry() - exfat: move exfat_chain_set() out of __exfat_resolve_path() - exfat: move free cluster out of exfat_init_ext_entry() - exfat: preserve benign secondary entries during rename and move - exfat: remove unnecessary read entry in __exfat_rename() - exfat: rename argument name for exfat_move_file and exfat_rename_file - ext2: fix ignored return value of generic_write_sync() - ext4: fix kernel BUG in ext4_write_inline_data_end - ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback - ext4: get rid of ppath in get_ext_path() - f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode - f2fs: bound i_inline_xattr_size for non-inline-xattr inodes - f2fs: fix listxattr handling of corrupted xattr entries - f2fs: fix potential deadlock in f2fs_balance_fs() - f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() - f2fs: validate orphan inode entry count - fbcon: fix NULL pointer dereference for a console without vc_data - fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() - fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() - fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() - fbdev: hecubafb: fix potential memory leak in hecubafb_probe() - fbdev: i740fb: fix potential memory leak in i740fb_probe() - fbdev: metronomefb: fix potential memory leak in metronomefb_probe() - fbdev: nvidia: fix potential memory leak in nvidiafb_probe() - fbdev: radeon: fix potential memory leak in radeonfb_pci_register() - fbdev: s3fb: fix potential memory leak in s3_pci_probe() - fbdev: sm501fb: Fix buffer errors in OF binding code - fbdev: sm712: Fix operator precedence in big_swap macro - fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() - fbdev: tridentfb: fix potential memory leak in trident_pci_probe() - fbdev: uvesafb: fix potential memory leak in uvesafb_probe() - fbdev: vesafb: fix memory leak in vesafb_probe() - firmware: arm_scmi: Fix OOB in scmi_power_name_get() - firmware: arm_scmi: Read sensor config as 32-bit value - firmware_loader: fix device reference leak in firmware_upload_register() - firmware_loader: Fix recursive lock in device_cache_fw_images() - flow_dissector: check device type before reading ETH_ADDRS - fpga: dfl: add bounds check in dfh_get_param_size() - fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() - fs: efs: remove unneeded debug prints - fsl/fman: Free init resources on KeyGen failure in fman_init() - fs/ntfs3: add bounds check to run_get_highest_vcn() - fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow - fs/ntfs3: bound attr_off in UpdateResidentValue against data_off - fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass - fs/ntfs3: bound DeleteIndexEntryAllocation memmove length - fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} - fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() - fs/ntfs3: fix mount failure on 64K page-size kernels - fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename - fs/ntfs3: fsync files by syncing parent inodes - fs/ntfs3: handle attr_set_size() errors when truncating files - fs/ntfs3: resize log->one_page_buf when adopting on-disk page size - fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns - fs/ntfs3: validate lcns_follow in log_replay conversion - fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio() - fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid - fuse: fix device node leak in cuse_process_init_reply() - fuse: re-lock request before returning from fuse_ref_folio() - gpio: eic-sprd: use raw_spinlock_t in the irq startup path - gpio-f7188x: Add support for NCT6126D version B - gpio: htc-egpio: use managed gpiochip registration - gpio: mlxbf3: fail probe if gpiochip registration fails - gpio: mvebu: fail probe if gpiochip registration fails - gpio: sch: use raw_spinlock_t in the irq startup path - gpios: palmas: add .get_direction() op - gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe - gpu: host1x: Allow entries in BO caches to be freed - gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path - gpu: host1x: Fix iommu_map_sgtable() return value check - gue: validate REMCSUM private option length - handshake: Require admin permission for DONE command - hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length - hfs/hfsplus: prevent getting negative values of offset/length - hfs/hfsplus: zero-initialize buffer in hfs_bnode_read - HID: add haptics page defines - HID: appleir: fix UAF on pending key_up_timer in remove() - HID: core: Fix OOB read in hid_get_report for numbered reports - HID: letsketch: fix UAF on inrange_timer at driver unbind - HID: lg-g15: cancel pending work on remove to fix a use-after-free - HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter - HID: multitouch: fix out-of-bounds bit access on mt_io_flags - HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() - HID: playstation: validate num_touch_reports in DualShock 4 reports - HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads - HID: wacom: stop hardware after post-start probe failures - HID: wiimote: Fix table layout and whitespace errors - hwmon: adm1275: Prevent reading uninitialized stack - hwmon: (asus_atk0110) Check package count before accessing element - hwmon: (it87) Clamp negative values to zero in set_fan() - hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig - hwmon: (occ) unregister sysfs devices outside occ lock - hwmon: (pmbus) Fix passing events to regulator core - hwmon: (w83627hf) remove VID sysfs files on error and remove - hwmon: (w83793) remove vrm sysfs file on probe failure - hwrng: jh7110 - fix refcount leak in starfive_trng_read() - hwrng: virtio: clamp device-reported used.len at copy_data() - hwspinlock: qcom: avoid uninitialized struct members - i2c: core: fix adapter debugfs creation - i2c: core: fix adapter deregistration race - i2c: core: fix adapter registration race - i2c: core: fix hang on adapter registration failure - i2c: core: fix irq domain leak on adapter registration failure - i2c: core: fix NULL-deref on adapter registration failure - i2c: mediatek: fix WRRD for SoCs without auto_restart option - i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() - i2c: mpc: Fix timeout calculations - i2c: stm32f7: truncate clock period instead of rounding it - i3c: master: Prevent reuse of dynamic address on device add failure - i40e: Fix i40e_debug() to use struct i40e_hw argument - ia64: Make acpi_cpufreq_cpu_exit return void - IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() - IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified - IB/mlx4: Fix refcount leak in add_port() error path - IB/mlx5: Don't take the rereg_mr fallback without a new translation - IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier - IB/mlx5: Properly support implicit ODP rereg_mr - ice: fix AQ error code comparison in ice_set_pauseparam() - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() - ice: fix ice_init_link() error return preventing probe - ieee802154: admin-gate legacy LLSEC dump operations - ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation - ieee802154: ca8210: fix cas_ctl leak on spi_async failure - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit - ieee802154: fix kernel-infoleak in dgram_recvmsg() - ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() - iio: accel: bmc150: clamp the device-reported FIFO frame count - iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error - iio: accel: mma8452: handle I2C read error(s) in mma8452_read() - iio: adc: lpc32xx: Initialize completion before requesting IRQ - iio: adc: spear: Initialize completion before requesting IRQ - iio: adc: ti-ads124s08: Return reset GPIO lookup errors - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling - iio: chemical: scd30: Cleanup initializations and fix sign-extension bug - iio: common: st_sensors: honour channel endianness in read_axis_data - iio: event: Fix event FIFO reset race - iio: gyro: bmg160: bail out when bandwidth/filter is not in table - iio: gyro: bmg160: wait full startup time after mode change at probe - iio: hid-sensor-rotation: Fix stale or zero output when reading raw values - iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ - iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ - iio: imu: inv_icm42600: fix timestamp clock period by using lower value - iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading - iio: imu: inv_icm42600: stabilized timestamp in interrupt - iio: imu: st_lsm6dsx: deselect shub page before reading whoami - iio: invensense: fix timestamp glitches when switching frequency - iio: invensense: remove redundant initialization of variable period - iio: light: al3010: fix incorrect scale for the highest gain range - iio: light: gp2ap002: fix runtime PM leak on read error - iio: light: opt3001: fix missing state reset on timeout - iio: light: si1133: prevent race condition on timeout - iio: light: si1133: reset counter to prevent race condition - iio: light: tsl2591: return actual error from probe IRQ failure - iio: light: veml6030: fix channel type when pushing events - iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call - iio: magnetometer: ak8975: fix potential kernel stack memory leak - iio: pressure: mpl115: fix runtime PM leak on read error - iio: tcs3472: power down chip on probe failure - iio: temperature: ltc2983: Fix n_wires default bypassing rotation check - iio: temperature: ltc2983: Fix reinit_completion() called after conversion start - Input: elan_i2c - prevent division by zero and arithmetic underflow - Input: goodix - clamp the device-reported contact count - Input: iforce - bound the device-reported force-feedback effect index - Input: ims-pcu - add response length checks - Input: ims-pcu - fix DMA mapping violation in line setup - Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging - Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing - Input: ims-pcu - fix race condition in reset_device sysfs callback - Input: ims-pcu - fix type confusion in CDC union descriptor parsing - Input: ims-pcu - fix use-after-free and double-free in disconnect - Input: ims-pcu - release data interface on disconnect - Input: ims-pcu - validate control endpoint type - Input: maplecontrol - set driver data before registering input device - Input: maple_keyb - set driver data before registering input device - Input: maplemouse - fix NULL pointer dereference in open() - Input: maplemouse - set driver data before registering input device - Input: mms114 - fix multi-touch slot corruption - Input: mms114 - fix touch indexing for MMS134S and MMS136 - Input: mms114 - reject an oversized device packet size - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count - Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure - Input: touchwin - reset the packet index on every complete packet - iommu/amd: Fix a stale comment about which legacy mode is user visible - ionic: Fix check in ionic_get_link_ext_stats - io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item - ipv4: fib: Don't ignore error route in local/main tables. - ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() - ipv4: igmp: remove multicast group from hash table on device destruction - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD - ipv6: fix error handling in disable_ipv6 sysctl - ipv6: fix error handling in disable_policy sysctl - ipv6: fix error handling in forwarding sysctl - ipv6: fix error handling in ignore_routes_with_linkdown sysctl - ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). - ipv6: guard against possible NULL deref in __in6_dev_stats_get() - ipv6: mcast: Fix potential UAF in MLD delayed work - ipv6: mcast: Replace locking comments with lockdep annotations. - ipvs: ensure inner headers in ICMP errors are in headroom - ipvs: fix more places with wrong ipv6 transport offsets - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors - ipvs: pass parsed transport offset to state handlers - ipvs: reload ip header after head reallocation - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new - ipvs: use parsed transport offset in SCTP state lookup - ipvs: use parsed transport offset in TCP state lookup - irqchip/crossbar: Fix parent domain resource leak - irqchip/crossbar: Use correct index in crossbar_domain_free() - irqchip/gic-v3-its: Fix OF node reference leak - irqchip/ts4800: Fix missing chained handler cleanup on remove - isofs: bound Rock Ridge symlink components to the SL record - jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() - jiffies: Cast to unsigned long in secs_to_jiffies() conversion - jiffies: Define secs_to_jiffies() - kcm: use WRITE_ONCE() when changing lower socket callbacks - kconfig: fix potential NULL pointer dereference in conf_askvalue - KEYS: Use acquire when reading state in keyring search - ksmbd: add a permission check for FSCTL_SET_ZERO_DATA - ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY - ksmbd: add per-handle permission check to FILE_LINK_INFORMATION - ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE - ksmbd: centralize ksmbd_conn final release to plug transport leak - ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION - ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd - ksmbd: fix integer overflow in set_file_allocation_info() - ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation - ksmbd: fix use-after-free in same_client_has_lease() - ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL - ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE - ksmbd: fix use-after-free of fp->owner.name in durable handle owner check - ksmbd: reject undersized DACLs before parsing ACEs - ksmbd: require source read access for duplicate extents - ksmbd: run set info with opener credentials - ksmbd: serialize QUERY_DIRECTORY requests per file - ksmbd: track the connection owning a byte-range lock - ksmbd: use opener credentials for delete-on-close - ksmbd: use opener credentials for FSCTL mutations - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: vgic: Check the interrupt is still ours before migrating it - KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers - KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() - KVM: s390: pci: Fix GISC refcount leak on AIF enable failure - KVM: s390: pci: Fix handling of AIF enable without AISB - KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode - KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs - leds: uleds: Fix potential buffer overread - libbpf: Fix UAF in strset__add_str() - libbpf: Harden parse_vma_segs() path parsing - libbpf: Report error when a negative kprobe offset is specified - lib/test_meminit: use && for bools - llc: fix SAP refcount leak in llc_ui_autobind() - llc: fix SAP refcount leak when creating incoming sockets - lockd: Plug nlm_file leak when nlm_do_fopen() fails - lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure - LoongArch: Add PIO for early access before ACPI PCI root register - LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() - LoongArch: Report dying CPU to RCU in stop_this_cpu() - mac802154: remove interfaces with RCU list deletion - macsec: don't read an unset MAC header in macsec_encrypt() - macsec: fix promiscuity refcount leak in macsec_dev_open() - mailbox: mtk-adsp: fix UAF during device teardown - md/raid10: reset read_slot when reusing r10bio for discard - md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry - media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() - media: cedrus: Fix failure to clean up hardware on probe failure - media: mtk-jpeg: cancel workqueue on release for supported platforms only - media: nxp: imx8-isi: Convert to platform remove callback returning void - media: nxp: imx8-isi: Fix use-after-free on remove - media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code - media: qcom: venus: drop extra padding in NV12 raw size calculation - media: qcom: venus: relax encoder frame/blur dimension steps on v4 - media: qcom: venus: relax encoder frame/blur step size on v6 - media: rockchip: rga: fix too small buffer size - media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe - media: uvcvideo: Avoid partial metadata buffers - media: uvcvideo: Fix buffer sequence in frame gaps - media: uvcvideo: Fix sequence number when no EOF - media: v4l2-common: Add YUV24 format info - memstick: ms_block: reject a card that reports too many blocks - mfd: cros_ec: Delay dev_set_drvdata() until probe success - mfd: cs42l43: Sanity check firmware size - mfd: sm501: Fix reference leak on failed device registration - mfd: tps6586x: Fix OF node refcount - minix: avoid overflow in bitmap block count calculation - MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() - MIPS: DEC: Ensure RTC platform device deregistration upon failure - MIPS: DEC: Remove do_IRQ() call indirection - MIPS: Fix big-endian stack argument fetching in o32 wrapper - MIPS: ip22-gio: fix device reference leak in probe - MIPS: ip22-gio: fix gio device memory leak - MIPS: ip22-gio: fix kfree() of static object - MIPS: mm: Fix out-of-bounds write in maar_res_walk() - mips: n64: add __iomem for writel call - mips: ralink: mt7621: add missing __iomem - mips: sched: Fix CPUMASK_OFFSTACK memory corruption - MIPS: smp: report dying CPU to RCU in stop_this_cpu() - mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() - mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() - mmc: vub300: defer reset until cmd_mutex is unlocked - mm/damon/core: make charge_addr_from aware of end-address exclusivity - mm/damon/ops-common: handle extreme intervals in damon_hot_score() - mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() - mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error - mm: do file ownership checks with the proper mount idmap - mm/fake-numa: fix under-allocation detection in uniform split - mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE - mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() - mm: shrinker: fix NULL pointer dereference in debugfs - mm: shrinker: remove redundant shrinker_rwsem in debugfs operations - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled - mm/vmscan: flush deferred TLB before freeing large folios - module: decompress: check return value of module_extend_max_pages() - mtd: maps: vmu-flash: fix NULL pointer dereference in initialization - mtd: mchp23k256: use SPI match data for chip caps - mtd: onenand: samsung: report DMA completion timeouts - mtd: rawnand: fix condition in 'nand_select_target()' - mtd: rawnand: fsl_ifc: return errors for failed page reads - mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout - mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout - mtd: rawnand: pl353: fix probe resource allocation - mtd: slram: remove failed entries from the device list - mtd: spi-nor: Drop duplicate Kconfig dependency - mtd: spi-nor: swp: Improve locking user experience - net/9p: fix infinite loop in p9_client_rpc on fatal signal - net/9p: fix race condition on rdma->state in trans_rdma.c - net: add a common function to compute features for upper devices - net: af_key: initialize alg_key_len for IPComp states - net: atm: reject out-of-range traffic classes in QoS validation - net: bcmgenet: Use weighted round-robin TX DMA arbitration - net, bpf: check master for NULL in xdp_master_redirect() - net: Drop the lock in skb_may_tx_timestamp() - net: dsa: sja1105: round up PTP perout pin duration - net: ena: clean up XDP TX queues when regular TX setup fails - net: enetc: check the number of BDs needed for xdp_frame - net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths - net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove - net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp - netfilter: conntrack: revert ct extension genid infrastructure - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump - netfilter: ebtables: module names must be null-terminated - netfilter: ebtables: terminate table name before find_table_lock() - netfilter: ebtables: Use vmalloc_array() to improve code - netfilter: ebtables: zero chainstack array - netfilter: ecache: fix inverted time_after() check - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop - netfilter: ipset: annotate "pos" for concurrent readers/writers - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types - netfilter: ipset: Fix data race between add and dump in all hash types - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() - netfilter: ipset: fix race between dump and ip_set_list resize - netfilter: nf_conncount: callers must hold rcu read lock - netfilter: nf_conncount: fix zone comparison in tuple dedup - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() - netfilter: nf_nat_sip: reload possible stale data pointer - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures - netfilter: nfnl_cthelper: apply per-class values when updating policies - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst - netfilter: nf_reject: skip iphdr options when looking for icmp header - netfilter: nft_compat: ebtables emulation must reject non-bridge targets - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak - netfilter: nft_synproxy: stop bypassing the priv->info snapshot - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock - netfilter: xt_cluster: reject template conntracks in hash match - netfilter: xt_connmark: reject invalid shift parameters - netfilter: xt_nat: reject unsupported target families - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() - netfilter: xt_u32: reject invalid shift counts - net: gianfar: dispose irq mappings on probe failure and device removal - net: ife: require ETH_HLEN to be pullable in ife_decode() - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink - net: ipip: require CAP_NET_ADMIN in the device netns for changelink - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes - net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink - net: ixp4xx_hss: fix duplicate HDLC netdev allocation - net: lan743x: Initialize eth_syslock spinlock before use - net: liquidio: fix BAR resource leak on PF number failure - net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check - net: mana: initialize gdma queue id to INVALID_QUEUE_ID - net: marvell: prestera: initialize err in prestera_port_sfp_bind - net: microchip: vcap: fix races on the shared Super VCAP block - net/mlx5: Check max_macs devlink param value against max capability - net/mlx5e: Fix HV VHCA stats agent registration race - net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete - net/mlx5: Fix L3 tunnel entropy refcount leak - net: mvneta: re-enable percpu interrupt on resume - net: openvswitch: reject oversized nested action attrs - net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy - net: psample: fix info leak in PSAMPLE_ATTR_DATA - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() - net: qualcomm: rmnet: validate MAP frame length before ingress parsing - net/sched: act_bpf: use rcu_dereference_bh() to read the filter - net/sched: act_ct: preserve tc_skb_cb across defragmentation - net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload - net/sched: cake: reject overhead values that underflow length - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle - net/sched: cls_bpf: prevent unbounded recursion in offload rollback - net/sched: cls_flow: Dont expose folded kernel pointers - net/sched: hhf: clear heavy-hitter state on reset - net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_drr: annotate data-races around cl->deficit - net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen - net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() - net/sched: sch_hfsc: Don't make class passive twice - net/sched: sch_htb: annotate data-races (I) - net/sched: sch_htb: do not change sch->flags in htb_dump() - net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants - net: sit: require CAP_NET_ADMIN in the device netns for changelink - net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket - net: sparx5: unregister blocking notifier on init failure - net: sungem: fix probe error cleanup - net, team, bonding: Add netdev_base_features helper - net: team: rename team to team_core for linking - net: thunderbolt: Fix frags[] overflow by bounding frame_count - net/tls: Consume empty data records in tls_sw_read_sock() - net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() - net: usb: lan78xx: disable VLAN filter in promiscuous mode - net: usb: lan78xx: move functions to avoid forward definitions - net: usb: net1080: validate packet_len before pad-byte access in rx_fixup - net: wwan: iosm: bound device offsets in the MUX downlink decoder - net: wwan: t7xx: check skb_clone in control TX - net: wwan: t7xx: destroy DMA pool on CLDMA late init failure - nfsd: change nfs4_client_to_reclaim() to allocate data - nfsd: Don't reset the write verifier on a commit EAGAIN - nfsd: move name lookup out of nfsd4_list_rec_dir() - nfsd: release layout stid on setlease failure - nfsd: reset write verifier on deferred writeback errors - nfs: keep PG_UPTODATE clear after read errors in page groups - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write - NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors - NFSv4/flexfiles: reject zero filehandle version count - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC - NFSv4/pnfs: defer return_range callbacks until after inode unlock - nilfs2: fix backing_dev_info reference leak - nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers - NTB: epf: Avoid calling pci_irq_vector() from hardirq context - NTB: epf: Fix doorbell bitmask and IRQ vector handling - NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() - NTB: epf: Make db_valid_mask cover only real doorbell bits - NTB: epf: Report 0-based doorbell vector via ntb_db_event() - ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head - ntfs3: cap RESTART_TABLE free-chain walker at rt->used - ntfs3: fix out-of-bounds read in decompress_lznt - ntfs3: validate split-point offset in indx_insert_into_buffer - nvdimm/btt: Free arenas on btt_init() error paths - nvdimm/btt: Free arena sub-allocations on discover_arenas() error path - nvdimm/btt: Handle preemption in BTT lane acquisition - nvme-multipath: fix flex array size in struct nvme_ns_head - nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks - nvmet-auth: validate reply message payload bounds against transfer length - nvmet-rdma: handle inline data with a nonzero offset - nvmet: remove superfluous initialization - nvmet: return DHCHAP status codes from nvmet_setup_auth() - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path - nvmet-tcp: Fix potential UAF when ddgst mismatch - ocfs2: add journal NULL check in ocfs2_checkpoint_inode() - ocfs2: avoid moving extents to occupied clusters - ocfs2/dlm: require a ref for locking_state debugfs open - ocfs2: don't BUG_ON an invalid journal dinode - ocfs2: fix buffer head management in ocfs2_read_blocks() - ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write - ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits - ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() - ocfs2: kill osb->system_file_mutex lock - ocfs2: rebase copied fsdlm LVB pointers in locking_state - ocfs2: reject dinodes whose i_rdev disagrees with the file type - ocfs2: reject dinodes with non-canonical i_mode type - ocfs2: reject FITRIM ranges shorter than a cluster - ocfs2: reject non-inline dinodes with i_size and zero i_clusters - ocfs2: use kzalloc for quota recovery bitmap allocation - octeontx2-af: fix VF bringup affecting PF promiscuous state - octeontx2-af: mcs: Fix unsupported secy stats read - octeontx2-pf: check DMAC extraction support before filtering - octeontx2-pf: Clear stats of all resources when freeing resources - octeontx2-pf: Fix leak of SQ timestamp buffer on teardown - octeontx2-pf: mcs: Fix mcs resources free on PF shutdown - of: cpu: add check in __of_find_n_match_cpu_property() - OPP: of: Fix potential memory leak in opp_parse_supplies() - orangefs: keep the readdir entry size 64-bit in fill_from_part() - partitions: aix: bound the pp_count scan to the ppe array - PCI: Add kerneldoc for pci_resize_resource() - PCI: altera: Do not dispose parent IRQ mapping - PCI: altera: Fix resource leaks on probe failure - PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining - PCI/ASPM: Don't reconfigure ASPM entering low-power state - PCI: Check ROM header and data structure addr before accessing - PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() - PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 - PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 - PCI: Fix restoring BARs on BAR resize rollback path - PCI: Free saved list without holding pci_bus_sem - PCI: host-common: Request bus reassignment when not probe-only - PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling - PCI: Introduce named defines for PCI ROM - PCI: iproc: Restore .map_irq() for the platform bus driver - PCI: loongson: Do not ignore downstream devices on external bridges - PCI: mediatek: Convert bool to single quirks entry and bitmap - PCI: mediatek: Fix IRQ domain leak when port fails to enable - PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro - PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() - PCI: mediatek: Use actual physical address instead of virt_to_phys() - PCI: mediatek: Use generic MACRO for TPVPERL delay - PCI: meson: Propagate devm_add_action_or_reset() failure - PCI: Move Resizable BAR code to rebar.c - PCI: Prevent resource tree corruption when BAR resize fails - PCI: rcar-host: Remove unused LIST_HEAD(res) - PCI: Skip Resizable BAR restore on read error - perf/core: Detach event groups during remove_on_exec - perf: Fix dangling cgroup pointer in cpuctx backport - perf: Fix off-by-one stack buffer overflow in kallsyms__parse() - perf trace beauty fcntl: Fix build with older kernel headers - perf/x86/amd/brs: Fix kernel address leakage - perf/x86/amd/core: Always use the NMI latency mitigation - perf/x86/amd/lbr: Fix kernel address leakage - perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() - phy: phy-can-transceiver: Check driver match and driver data against NULL - pinctrl: cs42l43: Fix polarity on debounce - pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 - pinctrl: meson: restore non-sleeping GPIO access - pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path - platform/x86/amd/pmc: Add delay_suspend module parameter - platform/x86/amd/pmc: Check for intermediate wakeup in function - platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops - platform/x86: xo15-ebook: Fix wakeup source and GPE handling - pmdomain: imx: Fix i.MX8MP power notifier - pmdomain: imx: Fix i.MX8MP VC8000E power up sequence - PM: sleep: Use complete() in device_pm_sleep_init() - pNFS/filelayout: fix cheking if a layout is striped - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path - posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() - powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus - powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del - powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down - powerpc/pseries: fix memory leak on krealloc failure in papr_init - powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() - power: supply: charger-manager: fix refcount leak in is_full_charged() - power: supply: core: fix supplied_from allocations - power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak - proc: only bump parent nlink when registering directories - proc: protect ptrace_may_access() with exec_update_lock (FD links) - proc: protect ptrace_may_access() with exec_update_lock (part 1) - proc: rename proc_setattr to proc_nochmod_setattr - pwm: imx27: Fix variable truncation in .apply() - qede: fix off-by-one in BD ring consumption on build_skb failure - qede: fix out-of-bounds check for cqe->len_list[] - rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() - RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup - RDMA/hns: Fix arithmetic overflow in calc_hem_config() - RDMA/hns: Fix warning in poll cq direct mode - RDMA/irdma: Fix OOB read during CQ MR registration - RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs - RDMA/irdma: Initialize iwmr->access during MR registration - RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference - RDMA/mlx5: Fix undefined shift of user RQ WQE size - RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one - RDMA/mlx5: Remove raw RSS QP restrack tracking - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path - RDMA/rxe: Fix a use-after-free problem in rxe_mmap - RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe - RDMA/siw: bound Read Response placement to the RREAD length - RDMA/srpt: fix integer overflow in immediate data length check - regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK - regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions - regulator: ltc3676: Fix incorrect IRQSTAT bit offsets - regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() - regulator: scmi: Simplify with scoped for each OF child loop - remoteproc: qcom: Fix leak when custom dump_segments addition fails - reset: sunxi: fix memory region leak on ioremap failure - Revert "crypto: talitos - fix SEC1 32k ahash request limitation" - Revert "crypto: talitos - rename first/last to first_desc/last_desc" - Revert "PCI/MSI: Unmap MSI-X region on error" - Revert "treewide: Fix probing of devices in DT overlays" - ring-buffer: Fix event length with forced 8-byte alignment - riscv: cacheinfo: Fix node reference leak in populate_cache_leaves - riscv: Prevent NULL pointer dereference in machine_kexec_prepare() - riscv: probes: save original sp in rethook trampoline - riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe - rpmsg: use generic driver_override infrastructure - rtc: abx80x: fix the RTC_VL_CLR clearing all status flags - rtc: cmos: unregister HPET IRQ handler on probe failure - rtc: ds1307: Fix off-by-one issue with wday for rx8130 - rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 - rtc: mpfs: fix counter upload completion condition - rtc: msc313: fix NULL deref in shared IRQ handler at probe - rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc - s390/monwriter: Reject buffer reuse with different data length - s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() - s390/process: Fix kernel thread function pointer type - s390/zcrypt: Remove the empty file - sched/fair: Fix cpu_util runnable_avg arithmetic - sched/fair: Only update stats for allowed CPUs when looking for dst group - sched: restore timer_slack_ns when resetting RT policy on fork - sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT - scsi: elx: efct: Fix I/O leak on unsupported additional CDB - scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() - scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path - scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() - scsi: pm8001: Fix error code in non_fatal_log_show() - scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" - scsi: sas: Skip opt_sectors when DMA reports no real optimization hint - scsi: sg: Report request-table problems when any status is set - scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() - scsi: target: Bound PR-OUT TransportID parsing to the received buffer - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE - scsi: target: Fix hexadecimal CHAP_I handling - scsi: target: Remove tcm_loop target reset handling - scsi: ufs: Fix wrong value printed in unexpected UPIU response case - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path - scsi: xen: scsiback: Free unsubmitted command instead of double-putting it - sctp: fix SCTP_RESET_STREAMS stream list length limit - sctp: hold socket lock when dumping endpoints in sctp_diag - sctp: validate embedded address parameter length - sctp: validate STALE_COOKIE cause length before reading staleness - security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() - seg6: validate SRH length before reading fixed fields - selftests/bpf: Add simple strscpy() implementation - selftests/bpf: Fix bpf_iter/task_vma test - selftests/bpf: Initialize operation name before use - selftests/hid: convert the hid_bpf selftests with struct_ops - selftests/hid: Cover hid_bpf_get_data() size overflow - selftests/hid: do not manually call headers_install - selftests/hid: ensure CKI can compile our new tests on old kernels - selftests/hid: ensure we can compile the tests on kernels pre-6.3 - selftests/hid: force using our compiled libbpf headers - selftests/mm: allow PUD-level entries in compound testcase of hmm tests - selftests/mm: clarify alternate unmapping in compaction_test - selftests/mm: fix exclusive_cow test fork() handling - selftests/net: fix EVP_MD_CTX leak in tcp_mmap - selinux: check connect-related permissions on TCP Fast Open - selinux: fix incorrect execmem checks on overlayfs - seqlock: Change do_task_stat() to use scoped_seqlock_read() - seqlock: fix scoped_seqlock_read kernel-doc - seqlock: Introduce scoped_seqlock_read() - serial: 8250_mid: Disable DMA for selected platforms - serial: 8250_mid: Remove 8250_pci usage - serial: 8250_omap: clear rx_running on zero-length DMA completes - serial: msm: Disable DMA for kernel console UART - slimbus: Convert to platform remove callback returning void - slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership - slimbus: qcom-ngd-ctrl: Fix probe error path ordering - slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd - smb/client: always return a value for FS_IOC_GETFLAGS - smb: client: fix change notify replay double-free - smb: client: fix double-free in SMB2_close() replay - smb: client: fix double-free in SMB2_flush() replay - smb: client: fix double-free in SMB2_ioctl() replay - smb: client: fix double-free in SMB2_open() replay - smb/client: Fix error code in smb2_aead_req_alloc() - smb: client: Fix next buffer leak in receive_encrypted_standard() - smb: client: fix overflow in passthrough ioctl bounds check - smb: client: fix query directory replay double-free - smb: client: fix query_info() replay double-free - smb: client: harden POSIX SID length parsing - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() - smb: client: mask server-provided mode to 07777 in modefromsid - smb/client: preserve errors from smb2_set_sparse() - smb: client: reject overlapping data areas in SMB2 responses - smb: client: resolve SWN tcon from live registrations - smb: client: restrict implied bcc[0] exemption to responses without data area - smb: client: use kvzalloc() for megabyte buffer in simple fallocate - smb: client: use unaligned reads in parse_posix_ctxt() - smb: move some duplicate definitions to common/cifsglob.h - smb/server: do not require delete access for non-replacing links - soc: fsl: qe: panic on ioremap() failure in qe_reset() - soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy - sparc: led: avoid trimming a newline from empty writes - spi: dw: fix wrong BAUDR setting after resume - spi: ep93xx: fix double-free of zeropage on DMA setup failure - spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() - spi: fsl-lpspi: terminate the RX channel on TX prepare failure path - spi: hisi-kunpeng: Use dev_err_probe() for host registration failure - spi: meson-spifc: fix runtime PM leak on remove - spi: rpc-if: Use correct device for hardware reinitialization on resume - spi: sh-msiof: abort transfers when reset times out - spi: uniphier: Fix completion initialization order before devm_request_irq() - spi: xilinx: use FIFO occupancy register to determine buffer size - staging: media: atomisp: reduce load_primary_binaries() stack usage - staging: most: video: avoid double free on video register failure - staging: nvec: fix use-after-free in nvec_rx_completed() - staging: rtl8723bs: core: move constants to right side in comparison - staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() - staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop - staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop - staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() - staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop - staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() - staging: rtl8723bs: fix OOB write in HT_caps_handler() - staging: rtl8723bs: fix spaces around binary operators - staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() - staging: vme_user: bound slave read/write to the kern_buf size - staging: vme_user: fix location monitor leak in fake bridge - staging: vme_user: fix location monitor leak in tsi148 bridge - SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing - sunrpc: pin svc_xprt across the asynchronous TLS handshake callback - SUNRPC: pin upper rpc_clnt across the TLS connect_worker - SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED - sunrpc: wait for in-flight TLS handshake callback when cancel loses race - sysfs: clamp show() return value in sysfs_kf_read() - tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) - team: fix header_ops type confusion with non-Ethernet ports - thermal: hwmon: Fix critical temperature attribute removal - thermal: intel: Fix dangling resources on thermal_throttle_online() failure - time: Fix off-by-one in compat settimeofday() usec validation - tipc: fix out-of-bounds read in broadcast Gap ACK blocks - tipc: fix UAF in tipc_l2_send_msg() - tipc: fix use-after-free of the discoverer in tipc_disc_rcv() - tipc: prevent snt_unacked underflow on CONN_ACK - tipc: reject inverted service ranges from peer bindings - tipc: require net admin for TIPCv2 netlink mutators - tools lib api: Fix filename__write_int() writing uninitialized stack data - tools lib api: Fix missing null termination in filename__read_int/ull() - tools lib api: Fix mount_overload() snprintf truncation and toupper range - tools/mm/slabinfo: fix total_objects attribute name - tools/mm/slabinfo: Fix trace disable logic inversion - tools/power/x86/intel-speed-select: Harden daemon pidfile open - tools/testing: add linux/args.h header and fix radix, VMA tests - tools/virtio: check mmap return value in vringh_test - tpm: fix event_size output in tpm1_binary_bios_measurements_show - tpm: Make the TPM character devices non-seekable - tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() - tracing: Bound synthetic-field strings with seq_buf - tracing: eprobe: read the complete FILTER_PTR_STRING pointer - tracing/events: Fix to check the simple_tsk_fn creation - tracing/osnoise: Call synchronize_rcu() when unregistering - tracing: Prevent out-of-bounds read in glob matching - tracing/probes: Fix double addition of offset for @+FOFFSET - tracing: probes: fix typo in a log message - treewide: Switch/rename to timer_delete[_sync]() - udf: validate free block extents against the partition length - udf: validate sparing table length as an entry count, not a byte count - udf: validate VAT header length against the VAT inode size - udmabuf: fix DMA direction mismatch in release_udmabuf() - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() - usb: cdc_acm: Add quirk for Uniden BC125AT scanner - usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() - USB: chaoskey: Fix slab-use-after-free in chaoskey_release() - USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub - usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() - usb: dwc3: run gadget disconnect from sleepable suspend context - usb: free iso schedules on failed submit - usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler - usb: gadget: f_fs: initialize reset_work at allocation time - usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile - usb: gadget: f_printer: take kref only for successful open - usb: gadget: function: rndis: add length check for header - usb: gadget: function: rndis: add length check to response query - usb: gadget: udc: Fix use-after-free in gadget_match_driver - usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() - usb: host: max3421: Reject hub port requests for non-existent ports - USB: idmouse: fix use-after-free on disconnect race - USB: iowarrior: fix use-after-free on disconnect - usb: iowarrior: remove inherent race with minor number - usbip: tools: support SuperSpeedPlus devices - usbip: vudc: fix NULL deref in vep_dequeue() - USB: ldusb: fix use-after-free on disconnect race - USB: legousbtower: fix use-after-free on disconnect race - USB: misc: uss720: unregister parport on probe failure - usb: mtu3: unmap request DMA on queue failure - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() - USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD - USB: serial: digi_acceleport: fix broken rx after throttle - USB: serial: digi_acceleport: fix hard lockup on disconnect - USB: serial: digi_acceleport: fix write buffer corruption - USB: serial: keyspan_pda: fix information leak - USB: serial: option: add Telit Cinterion FE990D50 compositions - usb: sl811-hcd: disable controller wakeup on remove - USB: storage: include US_FL_NO_SAME in quirks mask - usb: typec: anx7411: use devm_pm_runtime_enable() - usb: typec: class: drop PD lookup reference - usb: typec: tcpci_rt1711h: unregister TCPCI port with devres - usb: typec: tcpm: Fix VDM type for Enter Mode commands - usb: typec: tcpm: Validate SVID index in svdm_consume_modes() - usb: typec: ucsi: cancel pending work on system suspend - usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove - usb: typec: ucsi: Invert DisplayPort role assignment - usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode - USB: ulpi: fix memory leak on registration failure - USB: usb-storage: ene_ub6250: restore media-ready check - usb: xhci: Fix sleep in atomic context in xhci_free_streams() - userfaultfd: gate must_wait writability check on pte_present() - vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter - vduse: hold vduse_lock across IDR lookup in open path - vduse: Requeue failed read to send_list head - veth: fix NAPI leak in XDP enable error path - vfio/mlx5: Fix racy bitfields and tighten struct layout - vfio/pci: Fix racy bitfields and tighten struct layout - vfio/pci: Latch disable_idle_d3 per device - vfio/pci: Release the VGA arbiter client on register_device() failure - vfio/pci: Use a private flag to prevent power state change with VFs - vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc - vhost/net: complete zerocopy ubufs only once - vhost/vdpa: validate virtqueue index in mmap and fault paths - virtio-mmio: fix device release warning on module unload - virtio_net: disable cb when NAPI is busy-polled - virtio-net: fix len check in receive_big() - virtio_net: Support dynamic rss indirection table size - vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() - vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). - watchdog: apple: Add "apple,t8103-wdt" compatible - watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 - watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH - watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure - watchdog: unregister PM notifier on watchdog unregister - wifi: ath9k: fix OOB access from firmware tx status queue ID - wifi: cfg80211: fix grammar in MLO group key error message - wifi: mac80211: fix memory leak in ieee80211_register_hw() - wifi: mac80211: free ack status frame on TX header build failure - wifi: mt76: fix argument to ieee80211_is_first_frag() - wifi: mt76: mt7915: fix potential tx_retries underflow - wifi: mt76: mt7921: fix potential tx_retries underflow - wifi: mwifiex: fix permanently busy scans after multiple roam iterations - wifi: rt2x00: avoid full teardown before work setup in probe - wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer - wifi: rtw89: Correct data type for scan index to avoid infinite loop - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response - wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication - wifi: wcn36xx: fix OOB read from short trigger BA firmware response - workqueue: drop spurious '*' from print_worker_info() fn declaration - writeback: Avoid contention on wb->list_lock when switching inodes - writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() - writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() - writeback: Fix use after free in inode_switch_wbs_work_fn() - X.509: Fix validation of ASN.1 certificate header - x86/boot: Reject too long acpi_rsdp= values - x86/boot: Validate console=uart8250 baud rate to fix early boot hang - x86/bugs: Enable IBPB flush on BPF JIT allocation - x86/mm: Fix check/use ordering in switch_mm_irqs_off() - x86/platform/olpc: xo15: Drop wakeup source on driver removal - xen/gntdev: fix error handling in ioctl - xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] - xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path - xfrm: use compat translator only for u64 alignment mismatch - xfrm: Use the XFRM_GRO to indicate a GRO call on input - xfrm: validate selector family and prefixlen during match - xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink - xfs: dump the recovered xattri log item if corruption happens - xfs: fail recovery on a committed log item with no regions - xfs: fix stupid compiler warning - xfs: fix unreachable BIGTIME check in dquot flush validation - xfs: move ->iop_recover to xfs_defer_op_type - xfs: recreate work items when recovering intent items - xfs: resample the data fork mapping after cycling ILOCK - xfs: use null daddr for unset first bad log block - xfs: use xfs_defer_finish_one to finish recovered work items - xprtrdma: Avoid 250 ms delay on backlog wakeup - xprtrdma: Check frwr_wp_create() during connect - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot - xprtrdma: Decouple req recycling from RPC completion - xprtrdma: Document and assert reply-handler invariants - xprtrdma: Fix bcall rep leak and unbounded peek - xprtrdma: Post receive buffers after RPC completion - xprtrdma: Remove temp allocation of rpcrdma_rep objects - xprtrdma: Repost Receive buffers for malformed replies - xprtrdma: Resize reply buffers before reposting receives - xprtrdma: Return sendctx slot after Send preparation failure - xprtrdma: Sanitize the reply credit grant after parsing - xprtrdma: Use sendctx DMA state for Send signaling - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Remove rudiment CVE patches- [bot] upd: 6.6.126 -> 6.6.144 - Changelog: - 6lowpan: fix off-by-one in multicast context address compression - 6pack: propagage new tty types - 9p: avoid putting oldfid in p9_client_walk() error path - accel/qaic: Add overflow check to remap_pfn_range during mmap - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: AGDI: fix missing newline in error message - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - af_key: validate families in pfkey_send_migrate() - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() - af_unix: Give up GC if MSG_PEEK intervened. - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - af_unix: Set gc_in_progress to true in unix_gc(). - agp/amd64: Fix broken error propagation in agp_amd64_probe() - alarmtimer: Fix argument order in alarm_timer_forward() - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: asihpi: Fix potential OOB array access at reading cache - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-motu: Protect register DSP event queue positions - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: fix some typos - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda: cs35l56: Put ACPI device after setting companion - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: misc: Use guard() for spin locks - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: Don't setup bogus iov_iter for silencing - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: sc6000: Use standard print API - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: seq: Serialize UMP output teardown with event_input - ALSA: seq: ump: Use guard() for locking - ALSA: timer: Fix UAF at snd_timer_user_params() - ALSA: ua101: Reject too-short USB descriptors - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ensure that won't go past CPER allocated record - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: fix use-after-free in rawdata dedup loop - apparmor: make label_match return a consistent value - apparmor: mediate the implicit connect of TCP fast open sendmsg - apparmor: provide separate audit messages for file and policy checks - apparmor: refcount the pdb - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use passed in gfp flags in aa_alloc_null() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: cputype: Add C1-Premium definitions - arm64: cputype: Add C1-Ultra definitions - arm64: cputype: Add NVIDIA Olympus definitions - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU - arm64: errata: Mitigate TLBI errata on various Arm CPUs - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: io: Extract user memory type in ioremap_prot() - arm64: io: Rename ioremap_prot() to __ioremap_prot() - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64: mm: Batch dsb and isb when populating pgtables - arm64: mm: Don't remap pgtables for allocate vs populate - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: probes: Handle probes on hinted conditional branch instructions - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 - arm64/scs: Fix handling of advance_loc4 - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - arm64: tlb: Allow XZR argument to TLBI ops - arm64: tlb: Flush walk cache when unsharing PMD tables - arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI - arm64/xor: fix conflicting attributes for xor_block_template - ARM: 9467/1: mm: Don't use %pK through printk - ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O - ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow - ARM: allow __do_kernel_fault() to report execution of memory faults - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: fix branch predictor hardening - ARM: fix hash_name() fault - ARM: group is_permission_fault() with is_translation_fault() - ARM: integrator: Fix early initialization - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: socfpga: Fix OF node refcount leak in SMP setup - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: codecs: ab8500: Fix casting of private data - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: codecs: simple-mux: Fix enum control bounds check - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: q6asm-dai: close stream only when running - ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks - ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio - ASoC: SOF: Intel: hda-dai: remove dspless special case - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata-scsi: refactor ata_scsi_translate() - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - auxdisplay: line-display: fix OOB read on zero-length message_store() - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE - batman-adv: bla: avoid double decrement of bla.num_requests - batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface - batman-adv: bla: fix report_work leak on backbone_gw purge - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: clear current gateway during teardown - batman-adv: dat: handle forward allocation error - batman-adv: dat: prevent false sharing between VLANs - batman-adv: ensure bcast is writable before modifying TTL - batman-adv: fix fragment reassembly length accounting - batman-adv: fix integer overflow on buff_pos - batman-adv: fix (m|b)cast csum after decrementing TTL - batman-adv: fix tp_meter counter underflow during shutdown - batman-adv: frag: avoid underflow of TTL - batman-adv: frag: disallow unicast fragment in fragment - batman-adv: frag: ensure fragment is writable before modifying TTL - batman-adv: hold claim backbone gateways by reference - batman-adv: iv: recover OGM scheduling after forward packet error - batman-adv: mcast: fix use-after-free in orig_node RCU release - batman-adv: prevent ELP transmission interval underflow - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: add only finished tp_vars to lists - batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE - batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd - batman-adv: tp_meter: avoid role confusion in tp_list - batman-adv: tp_meter: avoid use of uninit sender vars - batman-adv: tp_meter: avoid window underflow - batman-adv: tp_meter: directly shut down timer on cleanup - batman-adv: tp_meter: fix fast recovery precondition - batman-adv: tp_meter: fix race condition in send error reporting - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown - batman-adv: tp_meter: handle overlapping packets - batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection - batman-adv: tp_meter: initialize dec_cwnd explicitly - batman-adv: tp_meter: initialize dup_acks explicitly - batman-adv: tp_meter: initialize last_recv_time during init - batman-adv: tp_meter: keep unacked list in ascending ordered - batman-adv: tp_meter: prevent parallel modifications of last_recv - batman-adv: tp_meter: restrict number of unacked list entries - batman-adv: tt: avoid empty VLAN responses - batman-adv: tt: don't merge change entries with different VIDs - batman-adv: tt: fix negative last_changeset_len - batman-adv: tt: fix negative tt_buff_len - batman-adv: tt: fix TOCTOU race for reported vlans - batman-adv: tt: prevent TVLV entry number overflow - batman-adv: tt: reject oversized local TVLV buffers - batman-adv: tt: track roam count per VID - batman-adv: tvlv: abort OGM send on tvlv append failure - batman-adv: tvlv: avoid race of cifsnotfound handler state - batman-adv: tvlv: enforce 2-byte alignment - batman-adv: tvlv: reject oversized TVLV packets - batman-adv: v: prevent OGM aggregation on disabled hardif - batman-adv: v: stop OGMv2 on disabled interface - bcache: fix cached_dev.sb_bio use-after-free and crash - bcache: fix uninitialized closure object - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: fix UAF in __blkcg_rstat_flush() - blk-cgroup: wait for blkcg cleanup before initializing new disk - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blktrace: fix __this_cpu_read/write in preemptible context - block: add pgmap check to biovec_phys_mergeable - block: relax pgmap check in bio_add_page for compatible zone device pages - Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() - Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling - Bluetooth: bnep: Fix UAF read of dev->name - Bluetooth: bnep: reject short frames before parsing - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: btmtk: add the function to get the fw name - Bluetooth: btmtk: fix urb->setup_packet leak in error paths - Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c - Bluetooth: btmtk: rename btmediatek_data - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Allow firmware re-download when version matches - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: fix memory leak in error path of hci_alloc_dev() - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_qca: Convert timeout from jiffies to ms - Bluetooth: hci_qca: Migrate to serdev specific shutdown function - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend - Bluetooth: hci_sync: Remove remaining dependencies of hci_request - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths - Bluetooth: HIDP: fix missing length checks in hidp_input_report() - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: drop ISO_END frames received without prior ISO_START - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: ISO: fix UAF in iso_recv_frame - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix backward compatibility with userspace - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: MGMT: validate Add Extended Advertising Data length - Bluetooth: MGMT: validate advertising TLV before type checks - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: Remove 3 repeated macro definitions - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() - Bluetooth: RFCOMM: validate skb length in MCC handlers - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: serialize accept_q access - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Fix NULL pointer dereference - bonding: 3ad: implement proper RCU rules for port->aggregator - bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner - bonding: add support for per-port LACP actor priority - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: fix NULL pointer dereference in actor_port_prio setting - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: print churn state via netlink - bonding: refuse to enslave CAN devices - bpf: Add CHECKSUM_COMPLETE to bpf test progs - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf, devmap: Remove unnecessary if check in for loop - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: export bpf_link_inc_not_zero. - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Forget ranges when refining tnum after JSET - bpf: Free reuseport cBPF prog after RCU grace period. - bpf: handle fake register spill to stack with BPF_ST_MEM instruction - bpf: preserve constant zero when doing partial register restore - bpf: preserve STACK_ZERO slots on partial reg spills - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Reject sleepable kprobe_multi programs at attach time - bpf: Release module BTF IDR before module unload - bpf: Remove mark_precise_scalar_ids() - bpf, skmsg: fix verdict sk_data_ready racing with ktls rx - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: fix tail fragment offset in bpf_msg_push_data - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpf, sockmap: Take state lock for af_unix iter - bpf: support non-r10 register spill/fill to/from stack in precision tracking - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpftool: Fix truncated netlink dumps - bpf: track aligned STACK_ZERO cases as imprecise spilled registers - bpf: Track equal scalars history on per-instruction level - bpf: use kvfree() for replaced sysctl write buffer - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: mcast: Fix a possible use-after-free when removing a bridge port - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: add raid stripe tree definitions - btrfs: add support for inserting raid stripe extents - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() - btrfs: move btrfs_crc32c_final into free-space-cache.c - btrfs: move btrfs_extref_hash into inode-item.h - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: read raid stripe tree from disk - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove btrfs_crc32c wrapper - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: omap-ocp2scp: Convert to platform remove callback returning void - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more) - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: enforce cache groups - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Reset DL migration state on can_attach() failure - cgroup: fix race between task migration and iteration - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix busy dentry used after unmounting - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: qoriq: avoid format string warning - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() - comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: Fix refcount leak in counter_alloc() error path - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: menu: Cleanup after loadavg removal - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - cpuset: Fix missing adaptation for cpuset_is_populated - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel - Remove cfb and ofb - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-tdes - fix DMA sync direction - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - copy IV using skcipher ivsize - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - Move direct access to some PSP registers out of TEE - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - modifying the order of header files - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: hisilicon/zip - remove zlib and gzip - crypto: hisilicon/zip - support deflate algorithm - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: nx - Avoid -Wflex-array-member-not-at-end warning - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - fix context leak in nx842_crypto_free_ctx - crypto: nx - Migrate to scomp API - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: qat - remove unused character device and IOCTLs - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() - crypto: qat - Return pointer directly in adf_ctl_alloc_resources - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: scatterwalk - Backport memcpy_sglist() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: testmgr - Hide ENOENT errors - crypto: testmgr - Hide ENOENT errors better - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - dcache: Limit the minimal number of bucket to two - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING - debugobjects: Do not fill_pool() if pi_blocked_on - debugobjects: Dont call fill_pool() in early boot hardirq context - debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - device property: set fwnode->secondary to NULL in fwnode_init() - dev_printk: add new dev_err_probe() helpers - devres: fix missing node debug info in devm_krealloc() - Disable -Wattribute-alias for clang-23 and newer - dlm: prevent NPD when writing a positive value to event_done - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate() - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: fsl-edma-main: Convert to platform remove callback returning void - dmaengine: idxd: Fix crash when the event log is disabled - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add missing `inline` for `dma_free_attrs` - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: check allocation under invalidate lock - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm init: ensure device probing has finished in dm-mod.waitfor= - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm log: fix out-of-bounds write due to region_count overflow - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: fix a hugetlbfs reservation statement - Documentation: ioctl-number: Extend "Include File" column width - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - Documentation: tracing: Add ring-buffer mapping - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - dpaa2-switch: do not clear any interrupts automatically - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: Balance RCU calls in drbd_adm_dump_devices() - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - driver core: reject devices with unregistered buses - drivers/base/memory: fix memory block reference leak in poison accounting - drivers/base/memory: set mem->altmap after successful device registration - Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: Bound VBIOS record-chain walk loops - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix integer overflow in bios_get_image() - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use krealloc_array() in dal_vector_reserve() - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Validate GPIO pin LUT table size before iterating - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop special case for yellow carp without discovery - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix spelling typos - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu: restart the CS if some parts of the VM are still invalidated - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Check for pdd drm file first in CRIU restore path - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 - drm/amdkfd: fix debug watchpoints for logical devices - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: fix NULL dereference in get_queue_ids() - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/si: Disregard vblank time when no displays are connected - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe - drm/bridge: it66121: acquire reset GPIO in probe - drm/bridge: megachips: remove bridge when irq request fails - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/display/dp_mst: Add protection against 0 vcpi - drm/dp: Add eDP 1.5 bit definition - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/hyperv: validate resolution_count and fix WIN8 fallback - drm/hyperv: validate VMBus packet size in receive callback - drm/i915/acpi: free _DSM package when no connectors - drm/i915: Constify watermark state checker - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update() - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915: Fix potential UAF in TTM object purge - drm/i915/gem: Fix phys BO pread/pwrite with offset - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915: Loop over all active pipes in intel_mbus_dbox_update - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Read Intel DPCD workaround register - drm/i915: Simplify watermark state checker calling convention - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/i915/wm: Verify the correct plane DDB entry - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations - drm/msm/dsi: don't dump registers past the mapped region - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm: Fix dma_free_attrs() buffer size - drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN - drm/msm/shrinker: Fix can_block() logic - drm/msm/snapshot: fix dumping of the unaligned regions - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm: Remove plane hsub/vsub alignment requirement for core helpers - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/ssd130x: Replace .page_height field in device info with a constant - drm/ssd130x: Store the HW buffer in the driver-private CRTC state - drm/ssd130x: Use bool for ssd130x_deviceinfo flags - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/tegra: dsi: fix device leak on probe - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/v3d: Set DMA segment size to avoid debug warnings - drm/v3d: Skip CSD when it has zeroed workgroups - drm/v3d: Store the active job inside the queue's state - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: fix krealloc() memory leak - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() - drm/virtio: Fix driver removal with disabled KMS - drm/virtio: use uninterruptible resv lock for plane updates - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - dt-bindings: net: Fix Tegra234 MGBE PTP clock - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - e1000e: Unroll PTP in probe error handling - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - efi: Allocate runtime workqueue before ACPI init - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix "BUG: Bad page state in z_erofs_do_read_page" - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - err.h: use __always_inline on all error pointer helpers - esp: fix skb leak with espintcp and async crypto - eth: bnxt: always recalculate features after XDP clearing, fix null-deref - ethtool: eeprom: add missing ethnl_ops_begin() / _complete() during fallback - ethtool: eeprom: add more safeties to EEPROM Netlink fallback - ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() - eventpoll: fix ep_remove struct eventpoll / struct file UAF - eventpoll: Fix integer overflow in ep_loop_check_proc() - eventpoll: kill __ep_remove() - eventpoll: move epi_fget() up - eventpoll: rename ep_remove_safe() back to ep_remove() - eventpoll: split __ep_remove() - eventpoll: use hlist_is_singular_node() in __ep_remove() - exfat: fix potential use-after-free in exfat_find_dir_entry() - exit: prevent preemption of oopsing TASK_DEAD task - exit: Sleep at TASK_IDLE when waiting for application core dump - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert bd_bitmap_page to bd_bitmap_folio - ext4: convert bd_buddy_page to bd_buddy_folio - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() - ext4: get rid of ppath in ext4_ext_convert_to_initialized() - ext4: get rid of ppath in ext4_ext_create_new_leaf() - ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() - ext4: get rid of ppath in ext4_ext_insert_extent() - ext4: get rid of ppath in ext4_find_extent() - ext4: get rid of ppath in ext4_split_convert_extents() - ext4: get rid of ppath in ext4_split_extent() - ext4: get rid of ppath in ext4_split_extent_at() - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: publish jinode after initialization - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix to round down start offset of fallocate for pin file - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - f2fs: fix zoned block device information initialization - f2fs: keep atomic write retry from zeroing original data - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - f2fs: Use sysfs_emit_at() to simplify code - f2fs: validate ACL entry sizes in f2fs_acl_from_disk() - f2fs: validate compress cache inode only when enabled - f2fs: zone: fix to avoid inconsistence in between SIT and SSA - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var - fbdev: fix use-after-free in store_modes() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: modedb: fix a possible UAF in fb_find_mode() - fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: offb: fix PCI device reference leak on probe failure - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros - file: add fput() cleanup helper - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: dmi: Correct an indexing error in dmi.h - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fork: defer linking file vma until vma is fully initialized - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fpga: region: fix use-after-free in child_regions_with_firmware() - fs: add for 'init_fs' - fs/adfs: validate nzones in adfs_validate_bblk() - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/ntfs3: validate rec->used in journal-replay file record check - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - ftrace: Check against is_kernel_text() instead of kaslr_offset() - ftrace: Do not over-allocate ftrace memory - ftrace: Have ftrace pages output reflect freed pages - ftrace: Test mcount_loc addr before calling ftrace_call_addr() - ftrace: Update the mcount_loc check of skipped entries - fuse: Check for large folio with SPLICE_F_MOVE - fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject fuse_notify() pagecache ops on directories - fuse: reject oversized dirents in page cache - fuse: re-lock request before replacing page cache folio - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - genetlink: Use internal flags for multicast groups - gfs2: Add metapath_dibh helper - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: fiemap page fault fix - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: fix use-after-free in gfs2_qd_dealloc - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Improve gfs2_consist_inode() usage - gfs2: prevent NULL pointer dereference during unmount - gfs2: Retries missing in gfs2_{rename,exchange} - gfs2: Validate i_depth for exhash directories - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpio: cdev: check if uAPI v2 config attributes are correctly zeroed - gpiolib: acpi: Fix gpio count with string references - gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) - gpio: mvebu: fix NULL pointer dereference in suspend/resume - gpio: mxc: fix irq_high handling - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: rockchip: convert bank->clk to devm_clk_get_enabled() - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: tegra: fix irq_release_resources calling enable instead of disable - gro: change the BUG_ON() in gro_pull_from_frag0() - gve: defer interrupt enabling until NAPI registration - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hdlc_ppp: sync per-proto timers before freeing hdlc state - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: core: Add printk_ratelimited variants to hid_warn() etc - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: core: Fix size_t specifier in hid_report_raw_event() - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: Check to ensure report responses match the request - HID: pass the buffer size to hid_report_raw_event - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: quirks: really enable the intended work around for appledisplay - HID: roccat: fix use-after-free in roccat_report_event - HID: uclogic: Fix regression of input name assignment - HID: usbhid: fix deadlock in hid_post_reset() - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hpfs: fix a crash if hpfs_map_dnode_bitmap fails - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Fix trace oddity - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hsr: Remove WARN_ONCE() in hsr_addr_is_self(). - hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf - hv_sock: fix ARM64 support - hv: utils: handle and propagate errors in kvp_register - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: (axi-fan-control) Make use of dev_err_probe() - hwmon: (axi-fan-control) Use device firmware agnostic API - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer - hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR - hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple - hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer - hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() - hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() - hwmon: (pmbus/adm1266) reject implausible blackbox record_count - hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors - hwmon: (pmbus/adm1266) seed timestamp from the real-time clock - hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with pmbus_lock - hwmon: (pmbus/adm1266) serialize NVMEM blackbox read with pmbus_lock - hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX - hwmon: (pmbus/core) Protect regulator operations with mutex - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: cp2615: replace deprecated strncpy with strscpy - i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: stm32f7: fix timing computation ignoring i2c-analog-filter - i2c: stub: Reject I2C block transfers with invalid length - i2c: tegra: Don't mark devices with pins as IRQ safe - i2c: tegra: Fix NOIRQ suspend/resume - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: fix VLAN filter lost on add/delete race - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix double-free of tx_buf skb - ice: fix locking in ice_dcb_rebuild() - ice: Fix memory leak in ice_set_ringparam() - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix retry for AQ command 0x06EE - ice: fix setting promisc mode while adding VID filter - ice: fix VF queue configuration with low MTU values - ice: reintroduce retry mechanism for indirect AQ - ice: Remove jumbo_remove step from TX path - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: icmp_msgs_per_sec and icmp_msgs_burst sysctls become per netns - icmp: move icmp_global.credit and icmp_global.stamp to per netns storage - icmp: prevent possible overflow in icmp_global_allow() - ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() - igc: fix missing update of skb->tail in igc_xmit_frame() - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: npcm: Convert to platform remove callback returning void - iio: adc: npcm: fix unbalanced clk_disable_unprepare() - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw - iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux - iio: buffer: Fix wait_queue not being removed - iio: buffer: hw-consumer: fix use-after-free in error path - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: scd30: fix division by zero in write_raw - iio: chemical: scd30: Use guard(mutex) to allow early returns - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: common: st_sensors: Fix use of uninitialize device structs - iio: dac: ad5686: acquire lock when doing powerdown control - iio: dac: ad5686: fix input raw value check - iio: dac: ad5686: fix ref bit initialization for single-channel parts - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: dac: max5821: fix return value check in powerdown sync - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: gyro: adis16260: fix division by zero in write_raw - iio: gyro: itg3200: fix i2c read into the wrong stack location - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: bh1780: fix PM runtime leak on error path - iio: light: cm3323: fix reg_conf not being initialized correctly - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix scan_type struct - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: ssp_sensors: cancel delayed work_refresh on remove - iio: temperature: tsys01: fix broken PROM checksum validation - iio: Use IRQF_NO_THREAD - ima: check return value of crypto_shash_final() in boot aggregate - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: add indirect call wrapper for getfrag() calls - inet: frags: add inet_frag_queue_flush() - inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush - inet: frags: flush pending skbs in fqdir_pre_exit() - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) - Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard - Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem - Input: elan_i2c - validate firmware size before use - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() - Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size - Input: xpad - add "Nova 2 Lite" from GameSir - Input: xpad - add support for ASUS ROG RAIKIRI II - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - Input: xpad - fix out-of-bounds access for Share button - iomap: allocate s_dio_done_wq for async reads as well - iomap: don't revert iov_iter on partially completed buffered writes - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommu, debugobjects: avoid gcc-16.1 section mismatch warnings - iommufd: Fix a race with concurrent allocation and unmap - iommufd: vfio compatibility extension check for noiommu mode - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() - ip6_vti: set netns_immutable on the fallback device. - ip6: vti: Use ip6_tnl.net in vti6_changelink(). - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). - ipc: don't audit capability check in ipc_permissions() - ipc: limit next_id allocation to the valid ID range - ipc/shm: serialize orphan cleanup with shm_nattch updates - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipmi:ssif: Clean up kthread on errors - ipmi:ssif: Fix a shutdown race - ipmi:ssif: NULL thread on error - ipmi:ssif: Remove unnecessary indention - ipv4: account for fraggap on the paged allocation path - ipv4: add new arguments to udp_tunnel_dst_lookup() - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 - ipv4: remove "proto" argument from udp_tunnel_dst_lookup() - ipv4: rename and move ip_route_output_tunnel() - ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options - ipv6: account for fraggap on the paged allocation path - ipv6: add NULL checks for idev in SRv6 paths - ipv6/addrconf: annotate data-races around devconf fields (II) - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: exthdrs: refresh nh after handling HAO option - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() - ipv6: Fix a potential NPD in cleanup_prefix_route() - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: fix possible infinite loop in fib6_select_path() - ipv6: fix possible infinite loop in rt6_fill_node() - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: mcast: Fix use-after-free when processing MLD queries - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rename and move ip6_dst_lookup_tunnel() - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: sit: reload inner IPv6 header after GSO offloads - ipv6: use RCU in ip6_xmit() - ipv6: validate extension header length before copying to cmsg - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: clear the svc scheduler ptr early on edit - ipvs: fix MTU check for GSO packets in tunnel mode - ipvs: fix NULL deref in ip_vs_add_service error path - ipvs: skip ipv6 extension headers for csum checks - irqchip/ath79-cpu: Remove unused function - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - ixgbevf: fix use-after-free in VEPA multicast source pruning - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Leave objtool binary around with 'make clean' - kexec: derive purgatory entry from symbol - KEYS: fix overflow in keyctl_pkey_params_get_2() - keys: Pin request_key_auth payload in instantiate paths - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() - ksmbd: add durable scavenger timer - ksmbd: add support for supplementary groups - ksmbd: avoid reclaiming expired durable opens by the client - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: close durable scavenger races against m_fp_list lookups - ksmbd: Compare MACs in constant time - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers - ksmbd: fix null pointer dereference in compare_guid_key() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds read in smb_check_perm_dacl() - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops - ksmbd: reject non-VALID session in compound request branch - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: scope conn->binding slowpath to bound sessions only - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate owner of durable handle on reconnect - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Fix the month in the name of the failure directory - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - kunit: config: Enable KUNIT_DEBUGFS by default - kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: PMU: Preserve AArch32 counter low bits - KVM: arm64: Remove VPIPT I-cache handling - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Fold requested virtual interrupt check into has_nested_events() - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path - KVM: SVM: Flush the current TLB when transitioning from xAVIC => x2AVIC - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: VMX: Update SVI during runtime APICv activation - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: Fix KVM_GET_MSRS stack info leak - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Fix shadow paging use-after-free due to unexpected role - KVM: x86: Fix Xen hypercall tracepoint argument assignment - KVM: x86: hyper-v: Bound the bank index when querying sparse banks - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject - l2tp: do not use sock_hold() in pppol2tp_session_get_sock() - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - leds: lgm-sso: Remove duplicate assignments for priv->mmap - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libbpf: Fix -Wdiscarded-qualifiers under C23 - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: handle rbtree insertion error in decode_choose_args() - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - locking: Fix rwlock support in - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Add WriteCombine shadow mapping in KASAN - LoongArch: Add writecombine support for DMW-based ioremap() - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: kprobes: Fix handling of fatal unrecoverable recursions - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove unused code to avoid build warning - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - loop: fix partition scan race between udev and loop_reread_partitions() - lsm: add backing_file LSM hooks - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac802154: llsec: add skb_cow_data() before in-place crypto - macsec: fix replay protection at XPN lower-PN wrap - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: add sanity check for channel array - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mailbox: Use of_property_match_string() instead of open-coding - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix data lost for writemostly rdev - md/raid1,raid10: don't ignore IO flags - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: fix race between unregister and urb/irq callbacks - media: rc: igorplugusb: fix control request setup packet - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: fix inverted error logic - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: tegra-video: Use accessors for pad config 'try_*' fields - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si - media: vidtv: fix pass-by-value structs causing MSAN warnings - memfd: deny writeable mappings when implying SEAL_WRITE - memory: mtk-smi: Convert to platform remove callback returning void - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - mfd: omap-usb-host: Convert to platform remove callback returning void - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Convert to platform remove callback returning void - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: DEC: Prevent initial console buffer from landing in XKPHYS - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: fix DMA address corruption due to find_vma misuse - misc: fastrpc: Fix NULL pointer dereference in rpmsg callback - misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context - misc: fastrpc: fix use-after-free race in fastrpc_map_create - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Fix host controller programming for fixed driver type - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: litex_mmc: Set mandatory idle clocks before CMD0 - mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: add signal voltage switch in sdhci_resume_host - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/ops-common: call folio_test_lru() after folio_get() - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() - mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/huge_memory: update file PMD counter before folio_put() - mm/hugetlb: avoid false positive lockdep assertion - mm/hugetlb_cma: round up per_node before logging it - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm/hugetlb: rename folio_putback_active_hugetlb() to folio_putback_hugetlb() - mm/hugetlb: rename isolate_hugetlb() to folio_isolate_hugetlb() - mm/hugetlb: restore reservation on error in hugetlb folio copy paths - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory: fix spurious warning when unmapping device-private/exclusive pages - mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node() - mm/migrate: don't call folio_putback_active_hugetlb() on dst hugetlb folio - mm/page_alloc: clear page->private in free_pages_prepare() - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/tracing: rss_stat: ensure curr is false from kthread context - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - module: Fix kernel panic when a symbol st_shndx is out of bounds - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: add-addr: always drop other suboptions - mptcp: allow subflow rcv wnd to shrink - mptcp: cleanup fallback dummy mapping generation - mptcp: close TOCTOU race while computing rcv_wnd - mptcp: do not drop partial packets - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix missing wakeups in edge scenarios - mptcp: fix receive space timestamp initialization - mptcp: fix retransmission loop when csum is enabled - mptcp: fix rx timestamp corruption on fastopen - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: handle first subflow closing consistently - mptcp: introduce the mptcp_init_skb helper - mptcp: pm: ADD_ADDR rtx: allow ID 0 - mptcp: pm: ADD_ADDR rtx: always decrease sk refcount - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: free sk if last - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient - mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mptcp: reset rcv wnd on disconnect - mptcp: sockopt: check timestamping ret value - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: sync the msk->sndbuf at accept() time - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mptcp: use plain bool instead of custom binary enum - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: Convert to platform remove callback returning void - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spinand: Fix kernel doc - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()` - mtd: spi-nor: sst: Fix SST write failure - mtd: spi-nor: sst: Fix write enable before AAI sequence - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - myri10ge: avoid uninitialized variable use - neighbour: add RCU protection to neigh_tables[] - neigh: let neigh_xmit take skb ownership - net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add support for segmenting TCP fraglist GSO packets - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: ag71xx: check error for platform_get_irq - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: Annotate sk->sk_write_space() for UDP SOCKMAP. - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: increase WoL poll timeout - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: keep RBUF EEE/PM disabled - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: Remove custom ndo_poll_controller() - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net: bonding: add broadcast_neighbor option for 802.3ad - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix NULL pointer dereference in bond_do_ioctl() - net: bonding: fix use-after-free in bond_xmit_broadcast() - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: Flush multicast groups when snooping is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - netconsole: propagate device name truncation in dev_name_store() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix potential unregister of netdev that has not been registered yet - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: mt7530: fix FDB entries not aging out with short timeout - net: dsa: mt7530: preserve VLAN tags on trapped link-local frames - net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw - net: dsa: properly keep track of conduit reference - net: dsa: realtek: rtl8365mb: fix mode mask calculation - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: cortina: Carry over frag counter - net: ethernet: cortina: Drop half-assembled SKB - net: ethernet: cortina: Make RX SKB per-port - net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix pinctrl default state restore order on resume - net: fec: fix the PTP periodic output sysfs interface - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: bitwise: add support for doing AND, OR and XOR directly - netfilter: bitwise: rename some boolean operation functions - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: bridge: make ebt_snat ARP rewrite writable - netfilter: conntrack: add missing netlink policy validations - netfilter: conntrack_irc: fix possible out-of-bounds read - netfilter: conntrack: remove sprintf usage - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check - netfilter: ctnetlink: ensure safe access to master conntrack - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: ebtables: fix OOB read in compat_mtw_from_user - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_hbh: reject oversized option lists - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: stop hash:* range iteration at end - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nf_log: validate MAC header was set before dumping it - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nf_queue: hold bridge skb->dev while queued - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix dst corruption in same register operation - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_ct: bail out on template ct in get eval - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag - netfilter: nft_fib: fix stale stack leak via the OIFNAME register - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_inner: Fix IPv6 inner_thoff desync - netfilter: nft_osf: restrict it to ipv4 - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_tunnel: fix use-after-free on object destroy - netfilter: reject zero shift in nft_bitwise - netfilter: require Ethernet MAC header before using eth_hdr() - netfilter: skip recording stale or retransmitted INIT - netfilter: synproxy: add mutex to guard hook reference counting - netfilter: synproxy: refresh tcphdr after skb_ensure_writable - netfilter: x_tables: avoid leaking percpu counter pointers - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: xtables: restrict several matches to inet family - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: x_tables: unregister the templates first - netfilter: xt_cpu: prefer raw_smp_processor_id - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - net: Fix icmp host relookup triggering ip_rt_bug - net: fix segmentation of forwarding fraglist GRO - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix overrun check in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: ftgmac100: fix ring allocation unwind on open failure - net: garp: fix unsigned integer underflow in garp_pdu_parse_attr - net: gro: don't merge zcopy skbs - net: gso: fix tcp fraglist segmentation after pull from frag_list - net: guard timestamp cmsgs to real error queue skbs - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: defer node table free until after RCU readers - net: hsr: fix potential OOB access in supervision frame handling - net: hsr: fix VLAN add unwind on slave errors - net: ifb: report ethtool stats over num_tx_queues - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: ipv4: stop checking crypto_ahash_alignmask - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ipv6: stop checking crypto_ahash_alignmask - net/iucv: fix locking in .getsockopt - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - netlabel: validate unlabeled address and mask attribute lengths - net: lan743x: permit VLAN-tagged packets up to configured MTU - net: lan966x: avoid unregistering netdev on register failure - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: queue tie-off or disable during WOL suspend - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: Add NULL guards in teardown path to prevent panic on attach failure - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mana: validate rx_req_idx to prevent out-of-bounds array access - net: mctp: ensure our nlmsg responses are initialised - net: mctp: fix don't require received header reserved bits to be zero - net: mctp i2c: check length before marking flow active - net: mctp-i2c: fix duplicate reception of old data - net/mlx4: avoid GCC 10 __bad_copy_from() false positive - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: Do not restore destination-less TC rules - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Reorder completion before putting command entry in cmd_work_handler - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mv643xx: fix OF node refcount - net: mvpp2: Add metadata support for xdp mode - net: mvpp2: build skb from XDP-adjusted data on XDP_PASS - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: mvpp2: limit XDP frame size to the RX buffer - net: mvpp2: refill RX buffers before XDP or skb use - net: mvpp2: sync RX data at the hardware packet offset - net: ncsi: fix skb leak in error paths - net: netconsole: move newline trimming to function - net: netlink: don't set nsid on local notifications - net: netlink: fix sending unassigned nsid after assigned one - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - netns-ipv4: reorganize netns_ipv4 fast path variables - net: openvswitch: Avoid releasing netdev before teardown completes - net: openvswitch: fix possible kfree_skb of ERR_PTR - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phonet: free phonet_device after RCU grace period - net: phy: add Rust Asix PHY driver - net: phy: aquantia: move to separate directory - net: phy: c45: add genphy_c45_pma_read_ext_abilities() function - net: phy: clean the sfp upstream if phy probing fails - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: DP83TC811: add reading of abilities - net: phy: move at803x PHY driver to dedicated directory - net: phy: qcom: at803x: Use the correct bit to disable extended next page - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() - net: rds: clear i_sends on setup unwind - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: Optimize rds_ib_laddr_check - net/rds: rds_sendmsg should not discard payload_len - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net/sched: act_api: use RCU with deferred freeing for action lifecycle - net: sched: act_csum: validate nested VLAN headers - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flower: revert unintended changes - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL dereference of "old" filters before change() - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net/sched: fix pedit partial COW leading to page cache corruption - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: sfp: improve Nokia GPON sfp fixup - net: sfp: re-implement ignoring the hardware TX_FAULT signal - net: skb: fix cross-cache free of KFENCE-allocated skb head - net: skbuff: fix missing zerocopy reference in pskb_carve helpers - net: skbuff: fix pskb_carve leaking zcopy pages - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skmsg: preserve sg.copy across SG transforms - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint - net/smc: Do not re-initialize smc hashtables - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net: tcp: accept old ack during closing - net/tcp-md5: Fix MAC comparison to be constant-time - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring - net: tls: fix strparser anchor skb leak on offload RX setup failure - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: tls: prevent chain-after-chain in plain text SG - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: iosm: fix potential memory leaks in ipc_imem_init() - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: fix out-of-bounds read in HCP header parsing - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: llcp: Fix use-after-free in llcp_sock_release() - nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfnetlink_osf: validate individual option lengths in fingerprints - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nfsd: check get_user() return when reading princhashlen - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix posix_acl leak on SETACL decode failure - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Fix SECINFO_NO_NAME decode error cleanup - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - NFS: Fix a deadlock involving nfs_release_folio() - nfs: pass explicit offset/count to trace events - NFS: Prevent resource leak in nfs_alloc_server() - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - ntfs3: reject direct userspace writes to reserved $LX* xattrs - ntfs: ->d_compare() must not block - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: layouts: onie-tlv: fix hang on unknown types - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: fix missed admin queue sq doorbell write - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet-tcp: fix race between ICReq handling and queue teardown - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - objtool: Remove max symbol name length limitation - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: reject oversized group bitmap descriptors - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep: restructured interrupt handlers - octeon_ep: set backpressure watermark for RX queues - octeon_ep: support Octeon CN10K devices - octeon_ep: support to fetch firmware info - octeontx2-af: CGX: add bounds check to cgx_speed_mbps index - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: devlink health: use retained error fmsg API - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: fix memory leak in rvu_setup_hw_resources() - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: npc: Fix CPT channel mask in npc_install_flow - octeontx2-af: replace deprecated strncpy with strscpy - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: avoid double free of pool->stack on AQ init failure - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: cap upcall PID array size and pre-size vport replies - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - ovl: Fix uninit-value in ovl_fill_real - padata: Fix pd UAF once and for all - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove comment for reorder_work - padata: Remove cpu online check from cpu add and removal - params: Replace __modinit with __init_or_module - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - parport: Fix race between port and client registration - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Stop ruling out unbound devices as error source - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: endpoint: Remove unused field in struct pci_epf_group - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Log bridge info when first enumerating bridge - PCI: Log bridge windows conditionally - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI: Move pci_read_bridge_windows() below individual window accessors - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: Supply bridge device, not secondary bus, to read window details - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: Update BAR # and window messages - PCI: Use resource names in PCI log messages - PCI: Use resource_set_range() that correctly sets ->end - PCMCIA: Fix garbled log messages for KERN_CONT - pcnet32: stop holding device spin lock during napi_complete_done - pds_core: add an error code check in pdsc_dl_info_get - pds_core: ensure null-termination for firmware version strings - pds_core: fix debugfs_lookup dentry leak and error handling - pds_core: fix error handling in pdsc_devcmd_wait - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf branch: Avoid incrementing NULL - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf: Extract a few helpers - perf: Fix dangling cgroup pointer in cpuctx - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf lock: Fix option value type in parse_max_stack - perf: Make sure to use pmu_ctx->pmu for groups - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf unwind-libdw: Fix invalid reference counts - perf util: Kill die() prototype, dead for a long time - perf/x86/intel/uncore: Skip discovery table for offline dies - phonet: Pass ifindex to fill_addr(). - phonet: Pass net and ifindex to phonet_address_notify(). - phonet/pep: disable BH around forwarded sk_receive_skb() - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access - phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: tegra: xusb: Fix per-pad high-speed termination calibration - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - pidfd: refuse access to tasks that have started exiting harder - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp_accel: Check ACPI_COMPANION() against NULL - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL - platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe error recovery - platform/x86: ISST: Correct locked bit width - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - pmdomain: ti: omap_prm: Fix a reference leak on device node - PM: hibernate: Don't ignore return from set_memory_ro() - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: Fix a deadlock when returning a delegation during open() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - pNFS: Fix use-after-free in pnfs_update_layout() - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - powerpc/warp: Fix error handling in pika_dtm_thread - power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - pstore/ram: fix resource leak when ioremap() fails - ptp: vclock: Switch from RCU to SRCU - ptrace: Convert ptrace_attach() to use lock guards - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qed: fix double free in qed_cxt_tables_alloc() - quota: fix livelock between quotactl and freeze_super - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - r8152: handle the return value of usb_reset_device() - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu() - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - rcu: s/boost_kthread_mutex/kthread_mutex - RDMA/bnxt_re: zero shared page before exposing to userspace - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix a couple of obvious typos in comments - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/core: Prefer NLA_NUL_STRING - RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA: Move DMA block iterator logic into dedicated files - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: Fix use-after-free in path file creation cleanup - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/siw: Reject MPA FPDU length underflow before signed receive math - RDMA/srp: bound SRP_RSP sense copy by the received length - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/umem: fix kernel-doc warnings - RDMA/umem: Fix truncation for block sizes >= 4G - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - rds: mark snapshot pages dirty in rds_info_getsockopt() - regmap: Synchronize cache for the page selector - regset: use kvzalloc() for regset_get_alloc() - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: fix locking in regulator_resolve_supply() error path - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: pca9450: Make IRQ optional - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - resource: Add resource set range and size helpers - Revert "af_unix: Reject SIOCATMARK on non-stream sockets" - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx" - Revert "crypto: nx - fix context leak in nx842_crypto_free_ctx" - Revert "crypto: nx - Migrate to scomp API" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "ice: fix double-free of tx_buf skb" - Revert "ice: Remove jumbo_remove step from TX path" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "perf unwind-libdw: Fix invalid reference counts" - Revert "ptp: add testptp mask test" - Revert "rust: pin-init: add references to previously initialized fields" - Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors" - Revert "s390/cio: Update purge function to unregister the unused subchannels" - Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" - Revert "wireguard: device: enable threaded NAPI" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - Revert "x86/vdso: Fix output operand size of RDPID" - Revert "xattr: switch to CLASS(fd)" - ring-buffer: Fix reporting of missed events in iterator - ring-buffer: Remove ring_buffer_read_prepare_sync() - riscv: kgdb: fix several debug register assignment bugs - riscv: Sanitize syscall table indexing under speculation - rnbd-srv: Zero the rsp buffer before using it - romfs: check sb_set_blocksize() return value - rpmsg: char: Fix use-after-free on probe error path - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: abx80x: Disable alarm feature if no interrupt attached - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: internal: init: document load-bearing fact of field accessors - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg - rxrpc: Fix data-race warning and potential load/store tearing - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: Fix the ACK parser to extract the SACK table for parsing - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: convert sprintf()/snprintf() to sysfs_emit() - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cio: make sch->lock spinlock pointer a member - s390/cio: use generic driver_override infrastructure - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input before trimming a newline - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf: Disable register readout on sampling events - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/fair: Fix pelt clock sync when entering idle - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scripts/sorttable: Add helper functions for Elf_Ehdr - scripts/sorttable: Add helper functions for Elf_Shdr - scripts/sorttable: Add helper functions for Elf_Sym - scripts/sorttable: Allow matches to functions before function entry - scripts/sorttable: Always use an array for the mcount_loc sorting - scripts/sorttable: Convert Elf_Ehdr to union - scripts/sorttable: Convert Elf_Sym MACRO over to a union - scripts/sorttable: Fix endianness handling in build-time mcount sort - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly - scripts/sorttable: Have mcount rela sort use direct values - scripts/sorttable: Have the ORC code use the _r() functions to read - scripts/sorttable: Make compare_extable() into two functions - scripts/sorttable: Move code from sorttable.h into sorttable.c - scripts/sorttable: Remove unneeded Elf_Rel - scripts/sorttable: Remove unused macro defines - scripts/sorttable: Remove unused write functions - scripts/sorttable: Replace Elf_Shdr Macro with a union - scripts/sorttable: Use a structure of function pointers for elf helpers - scripts/sorttable: Use normal sort if theres no relocs in the mcount section - scripts/sorttable: Use uint64_t for mcount sorting - scripts/sorttable: Zero out weak functions in mcount_loc table - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues - scsi: csiostor: Fix dereference of null pointer rn - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: isci: Fix use-after-free in device removal path - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Make sg_sysfs_class constant - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: core: Fix integer overflow in UNMAP bounds check - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() - scsi: target: iscsi: Validate CHAP_R length before base64 decode - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Fix use-after free in init error and remove paths - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - sctp: diag: reject stale associations in dump_one path - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - sctp: fix race between sctp_wait_for_connect and peeloff - sctp: fix uninit-value in __sctp_rcv_asconf_lookup() - sctp: purge outqueue on stale COOKIE-ECHO handling - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - sctp: stream: fully roll back denied add-stream state - security/keys: fix missed RCU read section on lookup - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: add stack access precision test - selftests/bpf: Add test to ensure kprobe_multi is not sleepable - selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs - selftests/bpf: validate fake register spill/fill precision backtracking logic - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros - selftests/bpf: validate STACK_ZERO is preserved on subreg spill - selftests/bpf: validate zero preservation for sub-slot loads - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/memfd: delete unused declarations - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: skip migration tests if NUMA is unavailable - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: add test for extra_subflows underflow on userspace PM - selftests: mptcp: drop nanoseconds width specifier - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selftests/powerpc: Re-order *FLAGS to follow lib.mk - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selinux: don't reserve xattr slot when we won't fill it - selinux: fix overlayfs mmap() and mprotect() access checks - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serdev: make serdev_bus_type const - serdev: Provide a bustype shutdown function - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: altera_jtaguart: handle uart_add_one_port() failures - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: dz: Convert to use a platform device - serial: dz: Fix bootconsole handover lockup - serial: dz: Fix bootconsole message clobbering at chip reset - serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ - serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero - serial: qcom-geni: fix UART_RX_PAR_EN bit position - serial: samsung_tty: Use port lock wrappers - serial: sh-sci: fix memory region release in error path - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - serial: zs: Convert to use a platform device - serial: zs: Fix bootconsole handover lockup - serial: zs: Fix swapped RI/DSR modem line transition counting - serial: zs: Switch to using channel reset - sfc: fix error code in efx_devlink_info_running_versions() - sh: platform_early: remove pdev->driver_override check - signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() - slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock - slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD - slimbus: qcom-ngd-ctrl: fix OF node refcount - slimbus: qcom-ngd-ctrl: Fix up platform_driver registration - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb: client: fix OOB reads parsing symlink error response - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() - smb: client: reject userspace cifs.spnego descriptions - smb: client: require a full NFS mode SID before reading mode bits - smb: client: require net admin for CIFS SWN netlink - smb: client: Use FullSessionKey for AES-256 encryption key derivation - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: common: change the data type of num_aces to le16 - smb: move some duplicate definitions to common/smbacl.h - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get() - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc: qcom: ocmem: use scoped device node handling to simplify error paths - soc: qcom: smem: handle ENOMEM error during probe - soc/tegra: cbb: Set ERD on resume for err interrupt - soc/tegra: pmc: Fix unsafe generic_handle_irq() call - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: geni-qcom: Check DMA interrupts early in ISR - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: microchip-core-qspi: Use helper function devm_clk_get_enabled() - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix runtime pm leak on unbind - spi: qup: fix controller deregistration - spi: qup: fix error pointer deref after DMA setup failure - spi: rockchip: fix controller deregistration - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: spi-ti-qspi: Convert to platform remove callback returning void - spi: spi-ti-qspi: switch to use modern name - spi: sprd: fix controller deregistration - spi: sprd: fix error pointer deref after DMA setup failure - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: st-ssc4: switch to use modern name - spi: sun4i: fix controller deregistration - spi: sun4i: switch to use modern name - spi: sun6i: fix controller deregistration - spi: sun6i: switch to use modern name - spi: syncuacer: fix controller deregistration - spi: synquacer: switch to use modern name - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: ti-qspi: fix controller deregistration - spi: ti-qspi: fix use-after-free after DMA setup failure - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: uniphier: switch to use modern name - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: wpcm-fiu: Fix uninitialized res - spi: wpcm-fiu: Simplify with dev_err_probe() - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - spi: zynq-qspi: switch to use modern name - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - string: add mem_is_zero() helper to check if memory area is all zeros - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - svcrdma: Clean up comment in svc_rdma_accept() - svcrdma: Increase the per-transport rw_ctx count - svcrdma: Reduce the number of rdma_rw contexts per-QP - svcrdma: Remove queue-shortening warnings - sysctl: fix uninitialized variable in proc_do_large_bitmap - sysfs: don't remove existing directory on update failure - tap: free page on error paths in tap_get_user_xdp() - taskstats: set version in TGID exit notifications - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: call sk_data_ready() after listener migration - tcp: defer regular ACK while processing socket backlog - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses. - tcp: Fix imbalanced icsk_accept_queue count. - tcp: optimize inet_use_bhash2_on_bind() - tcp: Rearrange tests in inet_csk_bind_conflict(). - tcp: restrict SO_ATTACH_FILTER to priv users - tcp: Set pingpong threshold via sysctl - tcp: tcp_tx_timestamp() must look at the rtx queue - tcp: Use bhash2 for v4-mapped-v6 non-wildcard address. - tee: optee: prevent use-after-free when the client exits before the supplicant - test_kprobes: clear kprobes between test runs - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thunderbolt: Bound root directory content to block size - thunderbolt: Clamp XDomain response data copy to allocation size - thunderbolt: Fix property read in nhi_wake_supported() - thunderbolt: Limit XDomain response copy to actual frame size - thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() - thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow - thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() - thunderbolt: Reject zero-length property entries in validator - thunderbolt: Validate XDomain request packet size before type cast - time: Fix off-by-one in settimeofday() usec validation - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix double-free in tipc_buf_append() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done - tls: Preserve sk_err across recvmsg() when data has been copied - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tools/rv: Fix cleanup after failed trace setup - tpm: avoid -Wunused-but-set-variable - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Avoid NULL return from hist_field_name() on truncation - tracing: branch: Fix inverted check on stat tracer registration - tracing: Do not call map->ops->elt_free() if elt_alloc() fails - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing/probes: Point the error offset correctly for eprobe argument error - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Rebuild full_name on each hist_field_name() call - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: pch_uart: add check for dma_alloc_coherent() - tty: serial: samsung: Remove redundant port lock acquisition in rx helpers - tty: serial: samsung: use u32 for register interactions - tun: free page on build_skb failure in tun_xdp_one() - tun: free page on short-frame rejection in tun_xdp_one() - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: clear skb->dev before running a sockmap verdict - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - unshare: fix unshare_fs() handling - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - USB: cdc-acm: Fix bit overlap and move quirk definitions to header - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix request skipping after clearing halt - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure - usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: core: convert ci_role_switch to local variable - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - usb: core: Fix SuperSpeed root hub wMaxPacketSize - usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: Fix use after free in debug code - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: dwc3: xilinx: fix error handling in zynqmp init error paths - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports - usb: gadget: f_fs: copy only received bytes on short ep0 read - usb: gadget: f_hid: fix device reference leak in hidg_alloc() - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: net2280: Fix double free in probe error path - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usbip: vudc: Fix use after free bug in vudc_remove due to race condition - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - usb: musb: omap2430: Fix use-after-free in omap2430_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: belkin_sa: validate interrupt status length - USB: serial: cypress_m8: fix memory corruption with small endpoint - USB: serial: cypress_m8: validate interrupt packet headers - USB: serial: digi_acceleport: fix memory corruption with small endpoints - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() - USB: serial: io_ti: fix heap overflow in get_manuf_info() - USB: serial: keyspan: fix missing indat transfer sanity check - USB: serial: kl5kusb105: fix bulk-out buffer overflow - USB: serial: mct_u232: fix memory corruption with small endpoint - USB: serial: mct_u232: fix missing interrupt-in transfer sanity check - USB: serial: mxuport: fix memory corruption with small endpoint - USB: serial: omninet: fix memory corruption with small endpoint - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add MeiG SRM813Q - USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add usb-id for Dell Wireless DW5826e-m - USB: serial: safe_serial: fix memory corruption with small endpoint - usb: storage: Add quirks for PNY Elite Portable SSD - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmodes/displayport: validate count before reading Status Update VDO - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT - usb: typec: ucsi: ccg: reject firmware images without a ':' record header - usb: typec: ucsi: Check if power role change actually happened before handling - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO - usb: typec: ucsi: Don't update power_supply on power role change if not connected - usb: typec: ucsi: Move unregister out of atomic section - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: validate connector number in ucsi_connector_change() - usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: check URB actual_length for interrupt-IN notifications - usb: usbtmc: Flush anchored URBs in usbtmc_release - usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write - vfio: Create vfio_fs_type with inode per device - vfio/pci: Insert full vma on mmap'd MMIO fault - vfio/pci: Use unmap_mapping_range() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtiofs: fix UAF on submount umount - virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vrf: Fix a potential NPD when removing a port from a VRF - vsock: fix buffer size clamping order - vsock: keep poll shutdown state consistent - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: reset connection on receiving queue overflow - vsock/vmci: fix sk_ack_backlog leak on failed handshake - vsock/vmci: fix UAF when peer resets connection during handshake - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() - vxlan: validate ND option lengths in vxlan_na_create - vxlan: vnifilter: fix spurious notification on VNI update - vxlan: vnifilter: send notification on VNI add - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: clear shared SRNG pointer state on restart - wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() - wifi: ath11k: fix error path leaks in some WMI WOW calls - wifi: ath11k: fix peer resolution on rx path when peer_id=0 - wifi: ath11k: fix warning when unbinding - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath11k: skip status ring entry processing - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix error pointer dereference - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: iwlwifi: mvm: fix race condition in PTP removal - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mt76: connac: introduce helper for mt7925 chipset - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: nl80211: reject oversized EMA RNR lists - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: increase TX report timeout to fix race condition - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: usb: fix memory leaks on USB write failures - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - wireguard: send: append trailer after expanding head - workqueue: Factor out assign_rescuer_work() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - X.509: Fix out-of-bounds access when parsing extensions - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/kexec: Disable KCOV instrumentation after load_segments() - x86/platform/uv: Handle deconfigured sockets - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler - x86/sev: Harden #VC instruction emulation somewhat - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen: Fix xen_e820_swap_entry_with_ram() - x86/xen: make some functions static - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: produce a warning when calculated tailroom is negative - xdp: use modulo operation to calculate XDP frag tailroom - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: ah: account for ESN high bits in async callbacks - xfrm: ah: use skb_to_full_sk in async output callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: Check for underflow in xfrm_state_mtu - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: espintcp: do not reuse an in-progress partial send - xfrm: esp: restore combined single-frag length gate - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: Fix the usage of skb->sk - xfrm: input: hold netns during deferred transport reinjection - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: route MIGRATE notifications to caller's netns - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: delete attr leaf freemap entries when empty - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix undersized l_iclog_roundoff values - xfs: mark data structures corrupt on EIO and ENODATA - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: stop reclaim before pushing AIL during unmount - xhci: tegra: Fix ghost USB device on dual-role port unplug - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zonefs: handle integer overflow in zonefs_fname_to_fno - zram: do not forget to endio for partial discard requests - zram: fix use-after-free in zram_bvec_write_partial() - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Fix CIFSwitch vulnerability- FIX GPO Frag vulnerability- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- Remove dead, not used patches- Fix Dirtyfrag- Fix CVE-2026-31431 (Copyfail)- Fix regression with touchpad on notebook Positron Proxima 15 and probably others (bz#19950) - https://bugzilla.rosa.ru/show_bug.cgi?id=19950- [bot] upd: 6.6.106 -> 6.6.126 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - acpi: Break out nesting for hmat_parse_locality() - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - acpi, hmat: calculate abstract distance with HMAT - acpi/hmat: Fix lockdep warning for hmem_register_resource() - acpi, hmat: refactor hmat_register_target_initiators() - ACPI: HMAT: Remove register of memory node for generic target - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - acpi: numa: Add genport target allocation to the HMAT parsing - acpi: numa: Add setting of generic port system locality attributes - acpi: numa: Create enum for memory_target access coordinates indexing - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Initialise scc_index in unix_add_edge(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - ALSA: wavefront: Use standard print API - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64/fpsimd: signal: Consistently read FPSIMD context - arm64/fpsimd: signal: Fix restoration of SVE context - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state - arm64: kprobes: call set_memory_rox() for kprobe page - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: Set __nocfi on swsusp_arch_resume() - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wsa881x: Drop unused version readout - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates' - base/node / ACPI: Enumerate node access class for 'struct access_coordinate' - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-mq: Abort suspend when wakeup events are pending - blk-mq: add helper for checking if one CPU is mapped to specified hctx - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: don't schedule block kworker on isolated CPUs - blk-mq: setup queue ->tag_set before initializing hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: fix race between set_blocksize and read paths - block: make REQ_OP_ZONE_OPEN a write operation - block: rate-limit capacity change info log - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Improve program stats run-time calculation - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() - btrfs: ref-verify: handle damaged extent root tree - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: store fs_info in space_info - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - cachestat: do not flush stats in recency check - caif: fix integer underflow in cffrml_receive() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: refactor wake_up_bit() pattern of calling - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: fix pagecache leak when do writepages - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: Fix uncached read into ITER_KVEC iterator - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - cifs: stop writeback extension when change of size is detected - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: rzg2l: Remove critical area - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable() - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R() - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - cnic: Fix use-after-free bugs in cnic_delete_task - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Treat cpusets in attaching as populated - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed-acry - Convert to platform remove callback returning void - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd: Avoid evicting resources at S5 - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: Check dce_hwseq before dereferencing it - drm/amd/display: Check NULL before accessing - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix null pointer deref in dcn20_resource.c - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: Remove redundant semicolons - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu: csa unmap use uninterruptible lock - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amdkfd: Don't use sw fault filter if retry cam enabled - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/ast: Use msleep instead of mdelay for edid read - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imx/tve: fix probe device leak - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/adreno: De-spaghettify the use of memory barriers - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/pl111: Fix error handling in pl111_amba_probe - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/tilcdc: Fix removal actions in case of failed probe - drm/tilcdc: request and mapp iomem with devres - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: Add SM7150 - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215 - dt-bindings: power: rpmpd: Update part number to X1E80100 - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - epoll: Remove ep_scan_ready_list() in comments - espintcp: fix skb leaks - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - Expand the type of nfs_fattr->valid - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: filesystems without casefold feature cannot be mounted with siphash - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix error message when rejecting the default hash - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: refresh inline data size before write operations - ext4: remove unused return value of __mb_check_buddy - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: drop inode from the donation list when the last file is closed - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix wrong block mapping for multi-devices - f2fs: fix zero-sized extent for precache extents - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: remove unused GC_FAILURE_PIN - f2fs: use f2fs_err_ratelimited() to avoid redundant logs - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - filelock: add FL_RECLAIM to show_fl_flags() macro - filemap: cap PTE range to be created to allowed zero fill in folio_map_range() - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Fix unused notifier-block in unregister - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware: meson_sm: fix device leak at probe - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix memory leak in posix_clock_open() - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: allocate ff->release_args only if release is needed - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genirq/irq_sim: Initialize work context pointers properly - gfs2: fix freeze error handling - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix use of bio_chain - gpio: 104-idio-16: Define maximum valid register address offset - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpio: ljca: Fix duplicated IRQ mapping - gpio: ljca: Initialize num before accessing item in ljca_gpio_config - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: fix wrong error probe return value - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pca953x: Utilise dev_err_probe() where it makes sense - gpio: pca953x: Utilise temporary variable for struct device - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: update Intel LJCA USB GPIO driver - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - gue: Fix skb memleak with inner IP protocol 0. - gve: Correct ethtool rx_dropped calculation - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: core: Harden s32ton() against conversion to 0 bits - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: playstation: Center initial joystick axes to prevent spurious events - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimer: Remove unused function - hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active() - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Add support for Dell OptiPlex 7040 - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: Inherit DMA masks and parameters from parent device - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: increase max descriptors for XL710 - i40e: remove redundant memory barrier when cleaning Tx descs - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: fix race condition in TX timestamp read for register 0 - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - ima: limit the number of ToMToU integrity violations - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring: move local task_work in exit cancel loop - io_uring/poll: correctly handle io_poll_add() return value on update - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: add exception routes to GC list in rt6_insert_exception - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: avoid possible NULL deref in modify_prefix_route() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: fix GCC mem-intrinsic prefix with sw tags - kasan: refactor pcpu kasan vmalloc unpoison - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel.h: Move ARRAY_SIZE() to a separate header - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: fix null pointer dereference in alloc_preauth_hash() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_session_rpc_open - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: fix use-after-free in session logoff - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Fix softirq masking in FPSIMD register saving sequence - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set synthesized TSA CPUID flags - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: spi-byte: Use devm_led_classdev_register_ext() - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add more instruction opcodes and emit_* helpers - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init() - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - loop: Avoid updating block size under exclusive owner - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md/raid5: fix IO hang when array is broken with IO inflight - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx214: Fix link frequency validation - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: tunner: xc5000: Refactor firmware load - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: verisilicon: Store chroma and motion vectors offset - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memcg: fix data-race KCSAN bug in rstats - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memory tiering: add abstract distance calculation algorithms management - memory tiers: use default_dram_perf_ref_source in log message - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax: add a few more MIN_T/MAX_T users - minmax: avoid overly complicated constant expressions in VM code - minmax: don't use max() in situations that want a C constant expression - minmax: fix up min3() and max3() too - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - minmax: improve macro expansion and type checking - minmax: make generic MIN() and MAX() macros available everywhere - minmax: simplify and clarify min_t()/max_t() implementation - minmax: simplify min()/max()/clamp() implementation - MIPS: Fix a reference leak bug in ip22_check_gio() - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Add missing dev_err newlines - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: SPI mode remove cmd7 - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: fix arithmetic for bdi min_ratio - mm: fix arithmetic for max_prop_frac when setting max_ratio - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix folio is still mapped when deleted - mm: introduce and use {pgd,p4d}_populate_kernel() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm: memcg: add per-memcg zswap writeback stat - mm: memcg: add THP swap out info for anonymous reclaim - mm: memcg: change flush_next_time to flush_last_time - mm: memcg: make stats flushing threshold per-memcg - mm: memcg: move vmstats structs definition above flushing code - mm: memcg: optimize parent iteration in memcg_rstat_updated() - mm: memcg: restore subtree stats flushing - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-tier: fix abstract distance calculation overflow - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mempool: replace kmap_atomic() with kmap_local_page() - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() - mm: migrate_device: use more folio in migrate_device_finalize() - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm, percpu: do not consider sleepable allocations atomic - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm: simplify folio_expected_ref_count() - mm/truncate: unmap large folio on split failure - mm: workingset: move the stats flush into workingset_test_recent() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: nand: raw: atmel: Fix comment in timings preparation - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: allow small head cache usage with large MAX_SKB_FRAGS values - net: Allow to use SMP threads for backlog NAPI. - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: add Makefile for selftests - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: improve shutdown sequence - net: dsa: lantiq_gswip: do also enable or disable cpu port - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: allow loads only when register is initialized - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: drop unused 3rd argument from validate callback ops - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: missing objects with no memcg accounting - netfilter: nf_tables: pass context structure to nft_parse_register_load - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix NULL pointer dereference in l3mdev_l3_rcv - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add support for MC filtering at the slave device - net: hsr: Add VLAN CTAG filter support - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv6: fix field-spanning memcpy warning in AH output - net/ipv6: Remove expired routes with a separated list of routes. - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: fix unregister_netdev call order in macb_remove() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Account for netdev stats in ndo_get_stats64 - net/mlx5e: Consider aggregated port speed during rate configuration - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Report rx_discards_phy via rx_dropped - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5e: Use extack in get module eeprom by page callback - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Skip HotPlug check on sync reset using hot reset - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: adin1100: Fix software power-down ready condition - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY - net: phy: clear link parameters on admin link down - net: phy: dp83867: Disable EEE support as not implemented - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: fix phy_uses_state_machine() - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - netpoll: remove netpoll_srcu - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove conditional threaded-NAPI wakeup based on task state. - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix mismatch between CLC header and proposal - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: Fix accessing freed irq affinity_hint - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: stmmac: make sure that ptp_rate is not 0 before configuring EST - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: wait for async completion on last message - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: vlan: sync VLAN features with lower device - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfs_common: factor out nfs_errtbl and nfs_stat_to_errno - NFSD/blocklayout: Fix minlength check in proc_layoutget - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: convert to new timestamp accessors - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't ignore the return code of svc_proc_register() - nfsd: Drop the client reference in client_states_open() - nfsd: Fix a regression in nfsd_setattr() - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - NFSD: Fix last write offset handling in layoutcommit - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() - NFSD: Fix permission check for read access to executable-only files - NFSD: fix race between nfsd registration and exports_proc - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - NFSD: Remove NFSERR_EAGAIN - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Rework encoding and decoding of nfsd4_deviceid - nfsd: set security label during create operations - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: enable nconnect for RDMA - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFS: trace: show TIMEDOUT instead of 0x6e - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: rename free_ctrl callback to match name pattern - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: do not directly handle subsys reset fallout - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvmet-tcp: remove boilerplate code - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix use-after-free in page_pool_recycle_in_ring - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Fix uevent on failure to recover - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI/sysfs: Ensure devices are powered for config reads (part 2) - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf lock contention: Load kernel map before lookup - perf maps: Add maps__load_first() - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test stat: Avoid hybrid assumption when virtualized - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel: Do not enable BTS for guests - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - phy: Use device_get_match_data() - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx-gpc: Convert to platform remove callback returning void - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - pmdomain: Use device_get_match_data() - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: introduce posix_clock_context concept - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/radix/kfence: map __kfence_pool at page granularity - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/addnote: Fix overflow on 32-bit builds - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix type confusion in pde_set_flags() - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: add testptp mask test - ptp: Limit time setting of PTP clocks - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: stm32: Always program polarity - pwm: tiehrpwm: Fix corner case in clock divisor calculation - qed: Don't collect too many protection override GRC elements - quota: remove unneeded return value of register_quota_format - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks - rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks - rcu-tasks: Maintain real-time response in rcu_tasks_postscan() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: Add support to re-register a memory region - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests - RDMA/rxe: Remove the direct link to net_device - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - resource: Reuse for_each_resource() macro - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "loop: Avoid updating block size under exclusive owner" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "net: Allow to use SMP threads for backlog NAPI." - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: Remove conditional threaded-NAPI wakeup based on task state." - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf dso: Add missed dso__put to dso__load_kcore" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: Improve exception and system call latency - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: mm: Do not restrict mmap address based on hint - riscv: mm: Use hint address in mmap if available - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Replace function-like macro by static inline function - riscv: stacktrace: Disable KASAN checks for non-current tasks - riscv: stacktrace: fix backtracing through exceptions - riscv: uprobes: Add missing fence.i after building the XOL buffer - rocker: fix memory leak in rocker_world_port_post_fini() - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/bpf: Centralize frame offset calculations - s390/bpf: Change seen_reg to a mask - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b - s390/ctcm: Fix double-kfree - s390/dasd: Fix gendisk parent after copy pair swap - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix __ptep_rdp() inline assembly - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/balancing: Rename newidle_balance() => sched_balance_newidle() - sched/deadline: Fix race in push_dl_task() - sched/deadline: only set free_cpus for online runqueues - sched/fair: Fix pelt lost idle time detection - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched/fair: Use all little CPUs for CPU-bound workloads - sched/pelt: Avoid underestimation of task utilization - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add fill_crypto_prdt variant op - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests: bonding: add missing build configs - selftests: bonding: Add more missing config options - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests/ftrace: traceonoff_triggers: strip off names - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace - selftests/net: convert sctp_vrf.sh to run it in unique namespace - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests: netdevsim: set test timeout to 10 minutes - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix GRO coalesce test and add ext header coalesce tests - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: openvswitch: Fix escape chars in regexp. - selftests: Replace sleep with slowwait - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: refactor EFR lock - serial: sc16is7xx: remove unused to_sc16is7xx_port macro - serial: sc16is7xx: remove useless enable of enhanced features - serial: sc16is7xx: reorder code to remove prototype declarations - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix tmpfs reconfiguration (remount) when noswap is set - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-sprd-adi: Fix double free in probe error path - spi: sprd-adi: switch to use spi_alloc_host() - spi: sprd: adi: Use devm_register_restart_handler() - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0 - staging: most: remove broken i2c driver - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm: Cap the number of PCR banks - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - tracefs: fix a leak in eventfs_create_events_dir() - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: complete command synchronously on error - ublk: fix deadlock when reading partition table - ublk: make sure io cmd handled in submitter task context - ublk: prevent invalid access with DEBUG - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - usb: ohci-nxp: Use helper function devm_clk_get_enabled() - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: Apply the link chain quirk on NEC isoc endpoints - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci: move link chain bit quirk checks into one helper function. - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - vdpa/pds: use %pe for ERR_PTR() in event handler registration - veth: fix data race in veth_get_ethtool_stats - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: move TDLS work to wiphy work - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: remove RX_DROP_UNUSABLE - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: Report correct retbleed mitigation status - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86/vdso: Fix output operand size of RDPID - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: state: fix out-of-bounds read during lookup - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix log CRC mismatches between i386 and other architectures - xfs: rename the old_crc variable in xlog_recover_process - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: Allow users to modify DbC poll interval via sysfs - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbc: Improve performance by removing delay in transfer event polling. - xhci: dbc: poll at different rate depending on data transfer activity - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xsk: Fix race condition in AF_XDP generic RX path - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Patch from Hans to fix SYNA3602 touchpads- Update initrd size (kb#456)6.6.148-1.module.88x2bu6.6.148-16.6.148-15.13.1_20_gbd788x2bu.ko/lib/modules/6.6.148-desktop-1rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-strong --param=ssp-buffer-size=4 -m64 -mtune=generichttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=39b0486c4c2e00c5062309a2ece50317056682b6, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-86fe28d3251313d985c2102096da078c3885f4ae9569c3fadcbbe3f8c3dc422612fb8159c90ba65ff9e991a55b8cc9efa18a6fd07b65f629a6087a7a635b841d4?7zXZ A! 6>] crv(vX0bRb)!Ά̛wT& A:(S\{9' T'E(%)@M 1Hx!Q{Aiu`bapy\꧅^XC ![+zWKbk26έ[cFDJuYB Ɵ]Q9B2j$]%flII6f4"϶t*8W>QARC= r i+Rg0gŁ\Nwa:%y ø5\sL&:ʣ40`W4* L9 ƙ?BR㝲q,=)Ҁ3eI7 Z(EۈvZnt(@\YvĚ"G )QumB'- [`TNA[ +*b P1^TD nji<$K5"L}RT$e8YlDv-hĭK(h ڶ|Y6am3jC[әpuV'(Oam) @F=G/vKRϏ]TFu˜ht96ʤUhAh{oL'Edthr~j;>hW= {'IuڿcI]+"%oaa>%|!TF 8ϭOĘzcƑWm*O(CS|R7x&vφ+i约xS`s̆wtk'§N+Vmz(]BxQҰ[qh'q"-Z ߲9VhnI#b3@B2 %*HpkH%WL.[hVs<]FáF5&H> i_'R0w.>=:gKdQ /LXM +7 -nkvtwf‹1Qxl[ ^*aBƣg`#>o shlԄ7,4'v-#u\W+JC&Kd:d e4H?'")hC3Z}'%Os4ajt}6P=Xvd1H|8UzD V1 kbϪ$IH|M 0몹 `~RdƦS)>@NK}ҩ L*P,va[%y=?nMڡ1nir=K4?7:ŝB*NڪכL=1kt-ƫ0LzqE>=i[ dی]ZChw3V19ѺpR8k9fw|m,H?^1,33e jY cSP-@xOKj3'1v䥖Ple16o&Aw;vN鄓wY_DMVosDPm })ܾ~[eɑvG.9uPA7lrnd}{K]Ⱦ], 2"DNW#D"UNZׄsmݒƊvDv&wm =t>QƈeTU'i q({ XKs]b_bJZpՓ NU-V`m\.ձn # .K:2b >Cfڿ@E wD*2UspUY:M׏Bʜ=dyHP9-2 Ûy}[PXcC;"xgR 9haDށӥwkq[T-d wB+ޮCFZ1yā9ycxzZ20n b xP] zѶ0r*s«CBa[pXfCegsXlr|[j乳+< ەl.u^WcX!\#M7lM+!NNrG䯙=NWZN)ӇE0·xLzGe7S' S#dWҀn0=lʴA1trtkD 9B3;I" PSnf?5FF%ma>҄ۨ1i.UY80kY"Ue5|[ Q.Lg ٕiB~5dgm!hGe͛@7ǖo`w䴈2l\!N4^1N,ceD2Q3?.C0G|rbWaK.QǦ4 QχxȡI %ۑ)Bpݧ.m~*ACkyn`PEgm!-9ظn" U=_[𜧯\8*v-f@IU|_2e6gAZi}tOm[<r{(^^:ܾU'gWMǶaٸ3\`ax$Ӻ1us~&[wמ[Ł*Oo^-̑USC )w/; ƹ`;k-jG9[os{VXj :A |0MmŜ)\p| Cn:={*/+$aU0cXtVӰ !F~Fxap;c,5|a=yމ$:݈5[A=k1<,.q!hH"$cCg$&;⩌~o4]f = ;2ӇTQ=R1 t&Ak呙ڱ w+[3LpZ_x^cUdR~/J6㧑hf!24F>7GY-} DV2dpӁpWlI1)5F&$"0j2,>pp vF+3V_B xܰ#-9C^iyqNYu#Ю 9xSr(Ls̋h&"ls d~)?:?,wT ޮTנAWJ #zxܼDGFs(*k;:x:KueDrp0'N =|+E ci IWcDЌ,ʓȑFYK/m2:׏O 7,1B'0`ҒwPûM϶Oe Gl"U3䨩+ZGG`u[{#{.2S_v?t3 bJyč0oZڦEE '}8uJ2|xƗs_^8 h|s13|!k&\fYFeKn W@bg ,f-C립$Ohpֻ hջM6:8Z}M#IGڑzy?%cy-3&-&cz5*\\3ˑȹFRP#gj[ȫ9=hztg!ճ#+:0VvHQm/Id+QßVt/! ѻ>8E w] %X1TǾDMs]s8UhtŰ ۊ2/cw:O1TX'9D5ʼn4 QQ-Np+M;Y2"9ce F8D<1ݱ#Q\G C[άBpoC!Ћ o!Gp;Ս^ [Mp;uU]9;CvO,aw*CY7N[]ZXc,KJ'=ɇaR&`h>#b9?t» Z0zs.LpsOXwm&|eΔ mlITvS5Ǧ]C '?X oLWU l|$VU#Fc[PTX !k} o8)y_5R+FI ѨD0ȼSZ'/ÒmOUVC'PwP7 JZ!NFgvzК.*$F^j)Q{>2vǏ~_%H HhG"V >RE(tU7%88򚚍6 !]XXDnƭt:P$EkM;·`}=)tyi!)JG  0dH?<31noE3NnM]R*g3=1 3yfVMq>EvQϬh ݄pa5ef%N^(=O_ M1&j  D/FBxL_nGF| -Blq2)G~0ը(=^1Dgs)8S4gy  _xFﵿ_5'ܱFյwϼP9f?f>Mg;N*121Va˾h[+F*Y,B;'i`oyВ 9y䙞 bxobA&W8A8hd]zkz)'捾X՛/w5=ez9<#GT9?!lzd ",Ird":6<K0G?39"U~PcNly{{AK% lZn~(Ns ΜH8~K0=~S(3ј7d;&8tTBNm./r :g8FMI2Ƞ>Vq|3o83<II(jEE4AiH"+JlHW7 Iu.gS=F6KN9 X$Cj})d2]C-G#2u2aIh*(CRa1&U16t8="Z-Dԑ'ً+OW@ST ͓j&etJwr^'D]VMCu_# P R/Eݗ"N+| d"Ckv,fA;{KcS=źVټt[U~@0gݎpp7ig?]P\!­PT+.& 5[1O޼E_'Z髏 4q }&E+vawzJfu^tx&d Ґ_Ln=Jf 7V}vf2c ĩ%ge&0 X+`˝[&*&V[>wc^3iqqiQʿV{[o4zܿzHsAG',0\qBMyz4:-r%N_,7{I6r}>K#1ir,qu=[N"D*6y'Zo2"[aA<{jƟBV)UOC%wDcLbo3rq](0فENzHef0eBOAI4A(:i U;BSYXm:②FnDZ,E'A#Dz`5.ɵsJwK1SF` EwƷ=|a 8>2sa1SS_t2{W4?yroP|V(f?{S7ݚzu>(*Wɣ/ w}шbK%S{+/CgAFYSJ˄ (A.%e$ KgR fV뢚˄Y=XSآG9$$|;<򽕨bqAj{B٬ +Tu] Η#!e4ӹ4qV>xsԕp:IGGF?vNgw:eMU|,[} A5ԓ$}ﳱztoX +qD*By1BQ=8~Lv1іb Fz Xae}Y~V+Ya8Z\C .ȊUYÉqBQ60fV%"xY_sߧ[ a9A'wպ-vgħFJu,m#0Y b#&%j;dH\RPw޽ Jy3qc[7hYX?<P խb*?>$a)S7~T\b[* ^] >mij@Zr*$o~lvl7zh4}Q 6t޴+P!];-:;?1 x(&jgjݣ O>  ='P$Ct߅6N@)P]W'c%b\)C58{LОaX7圂m:x3hcݯY<> HԤ8MuTCT*o 3iDԴZ֓u7yc_'Zמa6C,ڱh+^X#(!s֞(1,db&zKF̴cp￣IfE R(GN"Xk Gɇ㖨7%g MukRQxuj4oGݡQEŚX>yWFN_(stYs{Qfd})YB|"Huݵ.k_rQAA@7 >Ʃr;:"p[edRn=q3׹)UP] @g5LD2Q<ړZ ^("sMekG@Hdrƍ>=[JƿTz\vWʴ6N;k>ٳW5: ymUIe.!j n%WY^$AoSfuK O)06![7aT5D%036@"+GcU\lxC֯H\|PfH{-LR`l2Du$eW(>~;TzSU("`."ܙPg^[I&pe>9$Bb+{:z:|>P*~}4+V/fJ£6ؓA7'R,{(G_`W%Jqaf-+7B 3v̪ך#Md v#PAŽ7 ՠ{]8фyA@&N+4nӷ4gCwk'{%#xږEHmWir&y͊|XzRV(!E5!-kt_ 3\QO7#:AxUqc }wHƋW,IN7h +xc=iq&ҵZӌ%Ȑ7VThZ_}fZ v<Б׭aXH$W=MԩG-/g@s8KO?~~/6(vJjaFk=,NrhSS/^sQ5sz܄HhG@ui$^ιW <[㈧o)Pyw!@W9ǨTJZAq(}=GZH/ 4V'鼈TDR:%b-㺫I _V~N{Z=tTAg##%,|sY `x9@&e6a:_s*FfjXW?J3q;'Qml2(^N ccA* pӷxUk/ӰN1vl˯M³Kp33O*tМ#*Ʈ.g|bQxUNƩ*Au 7m:DR/s ms}6s2w4g8DORJCՃmFAdnRтbW3B P%fg{G5Y퐻3e?xs]G]"ROi6% 'Hi<8قZtOqsqeF7y8]%G&O^Jp;ޭ߽ ՄHSw8w^!<I4e.,A"F qqSކisM݌YRJ3h "d3a ɦ Vize]J1Q7}i`l>F dVNYhbрm{)>$pLPP K9{(ώI9;}71"P+ -C'`?ص]ϒ0?eqXoux>l)+] xlJC/7jLGr(bעxZIk"L1Wav+# l^Kx !Dڤ!6rftCWvQ:dy?gg`)ιqL׸R!Ãq`>NQ}hpd's؏cO> =dfׯ.*33txEU&1~Ɲlm%P/q ENo!iz)uLE##HJ4.wgbkmX ^;kBVl`ս YaӅoJMyu' _`"hXv;K*wOTEl&Ԝ!hO۳*ۆqûn$$ʃ KT{vXgwoicUvHPGHWs3'®ު5}FpoH r[c[C6跋xm@]ݎᠶۭJu+S5QCQK)5 2>fNHFM6D8X], =1ē5yi@:Rysg^=گX^6qX->6ozN3"'8*:\ԝ޼.a2;Yգ{wZdzLqX|*3\].H cf:?7 WJ~a/sT#郞kED*2a3Jx5zZiqV7XmӊXҐ\Mi+3o^h)N'kM z6?Pܩ.Di?t?DF{RԲ^vq:`<1ZL g+ts;4sNرVDp@̝}# [XR̶,si`;ފ]0s.v(0rXkdozj!ypɐ/Ue<ݹT恭~ EeatUqy~[歁x:dz.0POk-$xx0j.<^E# Ѯf_=ӢEĺ;vb6NL(m{!ֈ6v4|X=f#,̚3N(^£OMQ/tU^^ I! 74l є;Vl6%Iݳ˫8]*ӗ5tr*J͹N+]f7\|.n+X̌ v-F+9syWlYwl٨h1u{8TnIe5{ط3ƂlNHت6Ҹ6 sX +ݾU-οIO B7 V{C9m}ȺLU{@w'wz`2Vt EzIhT)2lFF[G=aQQz󷦽^&=G6r ]7Ux cX1n㜓M`{ |&yTrI5uaf0B5m~KKIeՀr G6=UJ[ND-ѱ58 #ͮqkA?њ'<wצc;/3'Lq 6jQ:ETQmQ;@0I#XRN/j1KN?4cmNOPq2Þv~MSc!ll'sM"9B˗FU. 02`r݉>tL a&Uގ٢u/.ǡZ=Z0?Ŏo3ݥ|͑vn# A=E㊩AGqRIdX .$)Lw*] /:B\r#>L9+m)*6̾AS 9C7T!kԱRwy(g\F\2 Z| 6 $>xj*á@3Lߘ%=?GN$U(7*Ljy,0`S`vp,^ hCMܞ:{cyRsqtju7:^-`Zw.Yt _&Ei1CR܅d:ۛ>f%`F% d=mmlP`Șׁ,x` +QYZ6f~QћL!,&(Q!Ľ׫(r78##3g^(O/8<dC6"ޛ1RI{i~HՄ {"_-n29.LMKdj[eJ^m wh)닿m/}E- c?ArB*:_%47o<L٘S*Cb !1ii̞BʁVǬ瑼8 9.;騙;pLѮqlaQe1Q|4jC:cPSx-fLϋc<.XcX%A$ezTM4D*<9Cb~ngOt͆F?KaE K "}B-=t\8=B@ /3"^< zoKg^}3KS ˖eSF@Qcd1?*j=~b<DQH]O,( .Vhg!g4QHA>{i` QSrmO6jBmi`l}O+gn,3x|d mz֠ÈX]pvoS1# De xo*n{t`oCIbEJ.ROm֯녴fןI)¶,͏tyjH(A-\\AY@=$a~XB^%Ø̩1F\1 &d]O?MVT_ 6"UeO}&)%35xB)Ni& c9K4; O ꊵ++׍hЁï *jY6j8.Nښe\Z!v25b#n1HMͦPfVoI8R.!X =j`$=Jmw>͇`鈛"&"7( eoN&RZk7={Zg zle@XBj;nؘ3m׮ rAN R&/!U[$pwowE) R 9vM,"#V %!'kS_N눟FbȠXDWR+3b"}Vt^ۗqQjS9Eu"A;^mmNXNw &إY8\Bcjn]ιxN4\{*N DVee^ F8xB wT,pHUr[tvyS޵7_uw jΫ4wt@'@:߾2]C<<4JLHmw>#pwӊisn/UL]/ǡe9a|H4T:'k;6*74N#M9 M޶i^-ťZA 9"ÇPseew+tuĺ@*^Ipڭ_$5Խr-?)Otij c8ab0L)Tl7h++R;9,a+\MC`ɆT`-6dqLe/c}jH->GPU!!li>aUHdpkst[uu8RkKK; F{q1ֳ৤yuY8gc!]_6+x=%$)MD?;XI^jo!a ?!4WY@=8l<ܤ",qTmˊy VAhEYG8>tQp*{+yGT.o:u rZpV/a(~g1̃#i6!뜋A%r֍'Ño|bG<^s$  f{5;?Ϛ$ko/w3L;5FzH@#i}JYfokqKKOmajݼ ]$U'|N:ҶN B in++6eZ%0ט7}$KQ3ڿ'+5 0-͜NRA@6Hx^Xzp\c|vi 'v0uLQqVDh0 Q T5Ug~31wBw9ozar)!icMW7@Dx)쁴 4S/LqhͦuE!ގnfҁ!R"_w]=֋;r':߱F"xˌz«)-.l%Rm˦')u8$+U!Oܦ!HCd(+B~iC= 4ȂaAOKDX6/9dBm?G>f)`Hae-1Î=fۅ+{ NZg3[6M@ ]wZ*ra[ Y #ٿArhҔӺ᭪T=AOFP5  R;sc?YkC>/Gwxv*f2BGn+E*czu)7pݖ 5մHF ,=.0Iy {6;5?،WZ^n>KJoLԦR|DCLϹt>?YlX G i}F}qFw8mƅR-fM$hW;+ 1^CBD}x =@gfO0 @?>X(QqFM/p8quX4s]0U ;S_Y*l)fڈ! Ep]mՆ?0fS0h6x{BHTwRsu>9GD\؍B+)2o9?B*}γzR lH@o=/Sޡh2r>>'>lNA+rhLgTtXΡjB?"H1) 4|(dVDdٚ9`̪%hHPΝ!)\g$)zj)O,r H޷2sa:m$ui]5Cɀ;2A5Y:Ȗh,oh6*+;CVnBr!KN, Q8PRZ[50f$`3n[K\Br)M׭b}ZYDfA ߫c?ӭ(|ڔbd[ x3)kNO֩WQܧpV훽l%mEz{XpӤKx/$E4!|RP8"`"'#, <)at9ԶCB@'N|Wa[ ,{m({L:|LՑl VVJݫ&C";N^.oy,dV].`u9^=Dj42z=hJv-=lk. ؓcy7s/eјMhTG6{%81''PحDn\=EFItoeU GRw+DڼCLէfL,U5qׁI. lZ鷼Qb @ї^*7H 1mYH@iMP_*iMK$$o8J+߉#((LR<!mҋJ EZ%*;S zTwa&CbGw=9̍7OVtH}g(}Gc%7W~9 "3eOCdZkȴ8WTE J3|+ 4J@Yư4=lefTe,w?A҇0mx'DH.Y7mYV8nTX9z+:Q{#y4"Az}bL~kHm97?naǗe<հF%RzxGEA_zHnˍsCQṘtzJݛњP 'k`B{J 7h_YR<5E\Q"3m3R0oxl{'A(y}̵ xW0?<(6ĸ5*?Ի=y'`?D,*$SPÑ"x"4Uv FI%S4SLX_1TL򫁊; /NK'a'S|wdGN}Tm *P-P~6JJi⸳{5*'7 ߖ-lF!D"2jkSKX&^ 4 }on,lpс_zzam$khΪ%EQJIyowU>@{{ Z;TJ+~rR:`2Ju -{}x/|\s}nl2|’d!K;v-Na|%RlRKЀi4"Gg1mu@LMqG14#=_=@p"<H˒p?zꘕ9l<+ZSEݺmM끶I.?9B%ɗKrLJ'8T8ItathLIhW~&w\C-o\r%JmǕʒ5*bv݉Kjj GSW38vT2p;~\+8YK`f XKX+"g5% bXxJA,&Uϴ|-G]HtJk"W)i RA$ԝt4G} mD:/xy_(KƮlZ֣ ) Tp1|dmU%ahk :ݧĎaQTa I: ֩/ :"¼Rmw:\I*,6$q> 2И.BSfӶɬߧH XE%K L^8 2YJܥ PLlYn5mXg_I.bB^g2;Wb{+~pO5ed%/יl0%%A^($_X[6B:R삪 Lڻ!y}-al"9Q:$ϪT<5Qױ`f5C zb-sF Woka֧}R#j#YR;s]hlUe #6_Kj3Уfy¢s_6I=&\O9-oI׽\~.)Ma׵P0+y>/DtĊηZw,宂ZJ U<$Z}vW|{J}9nGG>=E8ߨtz;zQ",VR/-ၰFS#O[3A=Z,Ȏ{2~Ɯ6Vf%!%}< \ajKn POMzUJ4XFnooik'~P(iQ U|QNB0ۉ:t. ߉9n䒗Nټ\s" =bDAN>tڧպl^k0_)Lߵ*+|qYӖȢ8v͖LSΞ ;Aw= %6A~b PQFϫ:8ɛ  I]dFۈ$A)KѠN[fenkE}>011đڴHsM4Bf25CXSȏu m?D߉B 3^X NFVpd0 օA֜l*zD*kLzn=ARhjj+6;@U&!L"^Ls:r|xeQ-t୴L+⎩E4 ќ_&=>!qo% n Kko IJn0) +Y*6PO#rȎug_ԆLˢX:=}&Pfdb W)74\`X=2cXq%*^`r$MoۧWK]Rx_GŨ6-9)D Co6:+;|LkER+Mp_9,;w#8+|^k.DC>f(O փᤕY;\,Kcڷy- oDKcsm}qSs8d_p!TsqJUe^`X^c7}S iCP,1;F yh |GJýmB\T]R FVZ3Oy332gj˱P XEɬ-)gfx~/.Ki c՝NgG{C /R)~Eet$7O~5 E19ȕtLM Pp2W8|IIvOk+^RJsFn@}Iu)A{0&G%<vt!hq|V&MYjU7@0֧8BkO(e1×>|1 ㎋ ps xB uF̎B`p`&f"H<~pb𬸍ɎTQP[d3>&}JݕuMVρ;F,z7Ly$Y:MڴmajvΑc.KF3E`ݔvn1:@_:ZHT)?V(* `u&u}Z~0mNff6)65 mkCwj;yٕe M\*l-\74/5,B5#ա5I˟vESdtN\v]l_P\k_6n#1*,ҖF=5CT}qjԿ9&;ʧ:tM{Ԇ6r>)rXW<:\ "OX">U)+zVD~ Gz4ߏ 83Jm+0ZL[6% c\c.=nw pZN} i^4NN{HsACmj:+zyAAL9]*{|MSlU=RJ{#7D``\>2GC}>O_RLrr(m^aIs1 Y[JFI&^1YGA Fg27 kKI,g3_t)%Y {ۏ9xУj+t~5dUA2\:O$}ʖmb}ҽ4H XxWs1' 'B͒} nNi*!K>$HU{p-4躠@&C:[3H{ T g34Pq0^йe? 0CLsb$xk7x6Uq;9,ECBIyн兛Qpip9{"Vi̬U_5V0\ Ȧ/w^DxKHCB_S oŽ,7pk]\~&G.)2>t )|TK%f!eC_yYdf҉F:lǼCo~M| d|gڢ}9GC3!iϾG=R]q8l7K`O QzH Іdy wOReoTll{.HxU.d?[@$RO`B LJ'us."֞/ 5Vg𫦠&JiA)'뜨 nAҩ.BR=gx:}G,3d-鲃;^4-If}L4ўLP\U@)]"aR=(pG"IrX]> y;Ib1z L%Բ&!#LM|K-GbS R$Jw[_PޤB+l/&Ԃr7kTzg'}CN.'#FH>1ՠ22~ k,@w6EpءՌd}Xh9' /?ha8>H!DRqa3x2 z۔5._vj$g@Rb -酧5l[HfKo>M#mo@nl݇B-f?0{Wd5\=*pݮg^VZfϓv/i4݋ BkKxc}?zN51Hpszo+;8Zc+ywAA, ]Wm­*{( [_ZVf\9_Pq 쬚RW @iQ R\B¨"6WKG gؙ.JD3IP -ͥ\UqYd)ϱ܊rA,K-8MHޏ &̵u@S@п$`xO2 +t',l./\E) L2f Ryn<\m!8k!bz!j MS7*@&"f ޒ_-R&@WVcd ѹq򵺔oiPQsZMιe%5,C.v r_TRrCxdpD> t2}RFu=&*.Lq9N6 1VA48re>J]:}G!s btD8MERZe0E|\G75%dni0h5ϖ kg]h*|bCşc$%7;A>#cR_5 zQsY1݁Pˠ)mK1;1-. B͏>͙̚mFYPʹۍ&L&.w&6ڞeDp$_]h\ ݤ6'薁ƎKYF[ gs\eX-@<M}xdN&IQƶ>;XEJ 3rCՇlO币I'Z/ۆ+&cqd$$ So't})=,؍N}‹!v;*6AOZI"%əRH%@'< ɗ]Sl1Hv.'c/vUh#%hCd8RcECuĩ]֘Ƣ\}t#GXTdlu "+_&2j0y 8Fa j"/M#6` ?/RJl"30rIlXC=(_)F9zY1m~ĭ>xDTF TӇzOm5O:txf y_F5O%Z>I흫%Kdxt#(@pHd^ؕYE;Vۓ\wcxsC i6{)Qj,goZee*?H*T\5mC^(RP]gėVR*S).od4&b.\1¡&e.T$02 陋>dk]"|LQDY@Jd*; pAE0 ҞP \өN󗚞KC7,Th^גd |Ơ%mhՖ3V\++ R%o XÅALµ'wz %aA/-$!c"jM7*vT"UB47NLsȔlf1[PMW/ceXmq‰?(fBN[:;3I>y,+6|6!.#>)n^nT²qZ?Qha,SΟn#<T)cxZV'r0İO>81Tb^&͖h2!SQDybvTиNPl АBӹni/4F]Aꝑ&] Ԋ9Y\穡D*EnFe2boL9\"g I.bMӔv566ї@dd3 d3G8jo~29v hoXX@5zJ kI/%^Ds ,@߉r@n딤_%KÙlY0mh]H8dvs /MuMac=}kYlӲW\r JV Ti dEPmeXQ!6:>H3En6~D"Ր)Jw*dryA}eytն Omyhz.I %cb`[Vo6/~Ďag+q( 1$yL=~aB_!GOБܝ'$5Ͽ"w<< Q\p{$M~zI$"%t#| b* lHr%c3k\z=#t7q3KͧF3 %/ML0=&O (o!TQ o:R%/n.Ͱ.jĪ=S^inlיRl-kx9v2hqݨw%-8QsPܷ6F1n v;;/UKHol gр>N _,U-&$`n]@{3E 7:[,'pl=pGo ?,Fa((i?cgѨdǩ5t4\3-arϼ) #/k(M [Q&\vW~ak CƸN ǣn(c>7ΕAڼnD4DZ55LNNXLp՛/9*/mTS/tYR]E;M В>/p#*~'O O:*F] ￈ɓ@-^.؂\:9SB(}Eݩm$z(%;5 繛7d3˖u'ѡtSOQ7И";M+ʫ:jek8Ԯ뜸 Hv+3y4 L'sT3N.{]nqkMV2!G}]{|Ϡ@tۖ=Ū݇ 2`w2w/BK䎅4i9 ;1b$h2sˍ81Z.սGB<֔/")[]nq2u_Hi{:+X1 &9U(.717t+FϱK G3cZ[?ncw;`fB 2 8.w$=c=xt/xZ )mb/=wU[o*i멖Тei~@]ߝ/Zc"?׮CH*bT|aLn?O fl&*s-!ꕋ$urދPnD7QþJ3m35TMY90k֑ R2_*0$AEPu FZ:]6|iPMW3GS2cl|y~6۴t|0ROa.qyA(ÔHxn59Gχ$B~t._Wn BaDZө}^T-wD@k곯10$%BR{n4e^nDakGoy*q*[1/\c|?$UnKF벇N,q:iO(4&!IO簔g 9򄮚ɺUvZ*CH>G~9NQ2dRor[󅐶'H[s(k+Y~ oֱ .3yR(vqD9i9E=~\(<~O~g\]kLoTIȉӻYԇa%LOMM2q--ֶ=5c_d75ii3H{;: ;W<;aB7ѝ$Op+f~OcE 2 F1j ʒ6$ +`s;Cb)[,sgA%l?O1TDMٔGYqtОG#z0CU!lO˩WѼ>=㎫3 p/ $ջк4=*&/j8}`5D@%DHK- ;{EK#=G** %U8zׂLmjlAhg$od{ &^OKt֊s@WH\YiPlٗ}H;;~SX .5Scj[<+!=6o8Ү,?/@/\e"'?BQ#Po_:IB_-ⒾusH:]5y%gRل\ΒKTҐ+gv 2'x*>@23~,I$Ţ*M#acR3k' y?f~BkXWpql = PF e}e!c?Y/]ǮBoyX_vpN045&h m((DL_坽~PT% `v,kX)6͐U8bg rPW}{O` S)R%qkFՎŊKgXpH({&OL1Ӣ@frb)N7GZ5b2ד[`/hͩBc>G>g+ҡcڴ\~ǗG,Pj!dy٨6e?1%l|R(ZA3/R+H[Znoj^|d,Rqkp>_q^^Ap+HXwW- < &G8PwyC*^PAUhmppHj<&۪mnj{^Ӈ!9ƈ.UUjy^xVD+ͬαbڧDOOfͻ_48}jTLKmv9.t4+3r֮JeE%GzAPH)|Q]z [ʌ}m#wx:"-=11 g޻9+oMu#L$r0rvӈ}{`^O.'i^Y"EU^zP὜.k^X_Kyjz_-kXBH~B b:7gf$iؘ˝" PxCbsxrRx< SJfx3܇F-~U/؝~fJx͙ D71}|IA *4YcdjZxe蜆/چ%DHX "}2"ex t{=R?'ڭ3. AbBnd3fM/b $,N_W<^m%x?r7~OW~F d5gۃj]Ǯ'G@ghh"21WV_S0R\uV!-"XfAti`BI ɝs P1WOSI\gHc`Gf|+pa? `!)jDhC+.AQ(ԽgKQxѽ  2nrm'Z?piyL)82ɐ!?86P5cawr=MA#Z4$He`;^oh +|}cO?pVOq}k1,%k4/*ٙI'= 4zOVguQk>olI,ɽ L;[S%c/4٨'Zsw3GZ)KhHQWŒUe~'*1ȳ* Xj\yT$w~0Kr) ћZj̺sn!?7_: 8S溻(fGc>36e=ut;ݏgh5&yI+ >" 3$C6ll"xի '&`}ty^jU 84—"[>j^!% P_@`]g\6ǛltxC9hx.o.#BO -| hTVGV`r-&(UۮT30~R6'?sC+*V j2:7Ol?p\>541 eiBG2%r^g'>G瘲N\s@D+ 5F5H$_8Ɏg:OF3aLOQ5ŠX p"ɞ?@RXw@c_Ⲭ[y| NehW +#{ 6K@܃jeMmM5p /oZm\i3tE!{^3~mzf}` !͹90߰5j\%7-r^Ʌy?y9*}y}-zUkX͒,-&E~l~0ڄ?R%H" G.nQ3oI[T ( 14yHM)l:CMdI=اhm"(^[QAq8.92>kWM, 2d54v%_b_f+ nBzWXoyz2JQ;OQFoF0ƠHF+Eg"Cg!eI/ٓ&ʆ Eb&uxq\~LsFbw vmYwGnL-WڈwXoJ&SF:(1h7ELBƉ$<^b0ט(TRGRXa!ɈJ&Oї@`f̾2 ȯ 7d_lJs;-S& %fl#tA&b~ʂ i^M*ҁJi Xtޢ^loTPawAQKg`-K|T{af}P}6s53 $טIoaϺ)ӦneÖB,fXML?jbPL"[WŞ9*Brq|Tw79$O࠺;+Yp[0Ae6WT߾nJ$ lf5*}2[ B*6&$6^R H=K?`x2Tz|+ [T=Lu%f7Jyfҽ](kFcDwYpshzXZZ}W ×OѢHGv2N2 cuџ"ڠ4 rDNC$sME(Oj4}"krtAd!-d݊RPo}GXS =bӓeݾҥY0x>9[L)UJz/ݕy`=H*PlJS IKr8y:iА˪=G>aLX0FR.slq큱ܱ>~ 7F/P}̓,R%@:p/gXvRz^1G[}bTƩf WsEA\?2Z5J>smeO@J3N'hcmA[1xdavsZv]-2#t>P]3^`1MmUAz%0zwP2t|S`:% 76ms5JYzhoY幷@"8$0co]SҕNQ3ͱl,FAZK8dFQj,͵X `)}ixIUd)6)|1ZFtW[Kk*H/$L$Tƅoչ.w tGg GWdˢ/ޜ$ ïddQw0i2;z5u i4.NRꍣ"I'nGJp֡"ܖfSP?wfOl}G3dm6o 7[f^AE))-Ŧ|Rtˆ{mqhl;AvXRf<-9:|eہr Is#p'4p$mqf^r&HXK`m@vgab4K"ӘtXYTFY)DqOm+!E(T9(AZ09=73ӅFcYрS'Q:4 LHkJ0KvL48u]pTVr2e.8n!=D۝pd Mf *Lh!7iZ*<ˀî ԋJ^ ʙ2J_5_$Hr_;a7XNl)}r*ngnsItȒj2<6c%"_+t0&.ί$d`0>LshsW(grc&}'(T5NұԩJ+Km:nc&LV EToNviY|?=u8}N% +S u)6}䞔a' B-'c㡐,Fn+L/d|qjZMLfo2G/%D_d3’w;ɎJ9"CP3uVBWQv^|| l@(%s=w û?ǚ9*AƮ(ńgx"| _-̞ у3tO7'7sZW ?ON\/([UT:SX}Z@rsћ"iSVdqUxaҾ=U"HxdI]:ӈ+(;I?=iKM8Vn G40CPv҄DV}:73^2ڽ[6ˀ;N`&pSau>-L:4_oA+~9 0';u(hj=,g秷ԞLՃ6:7phMa;$z̯6jA(D*`I0jMdjP46NJoV S.M464_:ŽN\( M!Ndh'$Wƃz%g?L6/DF>>F u=Y.qqpAVP"jjy[Ub1I9HV g9Yp/0jV,zKV3{:+̎XOXnAe6(|7r$L,Gp贖oonWw+8Xii+Јw c砛?CMǝ)+qЦC0^ax e8!ZHlb S)h$Y*zqgg'UDt_&`*"CU߈e-̴ $f?T(&}/_8_F~`;IG*BGƓa&2UAodIia9p_>"sթLUq >ecd]kRNU~&Z!j. J_8iգڽɍRQ*%vu>R1f'^*/GfwkNrMŷ b $SR4k J zDhJrX̊eW8Q)_^2`170h>o:Tn:K(z\!٣,a ѹ6Y|ΉݟeFF.3d#U -1;l5Ꭱ\kn_tF*k[AVȏ֙rKi:*s%@Tg qS6Jd$XV~s\0O3GYqlw\+GN{r&d*pnLo]^bc c5y{Œ4/p'=YBYq7- ^? z`jzRr /|/g`i~nq>4nw3,N4[೴L95Tqg01+z9s( F- :O;UqT%}NA:4%]|,[On Qψ^$W|z*iD8z[oxZe?+ í^R_soiv6>6/1ǔuQ`ҁ\(yf&9l#[amfڗVؾy B,+uM$J;+K{/2x4^=qTWD(/M\Ycfrc<#e4ĨkMdy6ȿBCOVBam-G-x^y$?)Y\0Q8 ~^G;j-D+Yĭus=KW^8(!Hw|J of23u鵵B&Q 䜇` {Y:N;wN;V-bB#*űu~EĀ,m' ?hsN?Z!#è;"WζO@OUΚIT] 'Pd{ ;/MrW\J]Ζs묝ʁ+uԶ!Qm`Jbn(ӷ|>8B{uJ&Fmۿs'tiJ7^K6P茰|aKrrUSSNh9JG9B/4Fi.O"4woEpHX՛hN{<h0>7>׊Χ bE]́s}ϏmnJ},sIFmvsA >q 5L^W''*kLEd]uX؟q .8z^`,.v |}1&sfQ_S;k|bK=`až*Kp[}g@pa+h cqޱMM{*"Ϗcv#*ĆelޢӴ+/8|UڷHZ{Id,y'/MScO KL" S=szؑ0őUDt)&BpwN} ;sVԞLk_ 'Z)6f`2ktAYC.-Vx(!nR Nu3Ւ'5Z۪nøb9yk&]j< ci5uׇh^M]eM`<^"PnDM0 ^}k2a) ^|yF}xeYز(nUcdͪ~_cij ktJAaZ f 5Sh ܱ`7Mx=H|!$5^ry)FQrĉ*V *+I]}nm_"׍`, y :+os2-mAWN2n `9+e>Mqhݛv!T1/_7_mF2%(5U}8mjtXA"^ަL"z,9V (] Zߡ~hYdaVIbmMetuclڈZ;O1"(:У<Ӆ I鴃G0+fӞ\ 1yNT"s BO*6:B2 dhIlO\:m$1VRe5+LGy&c@6\b tiB^F5,s5=fZ1m˘<6;ϏMM^fׄۚ;AS@(3[~V(pzcLhW]}SZ_XdƗYcrzZ IK4OrV!n1 xF ä@O -!qйwg0)H_ $ ?2LJaN"G{{i;7v4۝S<|9 ck-quQܜ%AB "-wVi ZOei9P**9Bd7yBrT\P jZ29ڹA-bRC X?U2VU+zģzC Žy(.X0?={lw>ftg$ÔߋDY" *|RD?O ,iZ<S,@@7mRWU[( ^\lX'o@9zmt:Cdan/z;)8a "w@۟KX%`Q ;:ջZ^g0CWIR`!E8aPۻ j`ρ[Yrgz6x_G ozMXE^;~U&$ᾨb|Z0t|&4U6+u,y ]Eך_NeHeGRc]yMWQE͏piB<&0/&=;F -5+y钐IJfv?oɻCCb:y%s,.P gXK4E9.Rn}*5z>Μ{4m^( &)3H2߇ZCћ:z#u;Lf%TldBޢpQù_J"sgo9j. bE|s+IUH /u,=# _WQ}ڹoF~_Bwo^g&F&|mocuH06VrӶ[O՚ àOy|6?6LD?6%8c\nR#~ﳱ˖j CG(>R=4[AU}!٭|@o!ygU^'VNxE,"mkN[Ǽ o|H^l%z{-Kz"=IheRM]!dQCH֠Q}AC9~rC/tO]\ ph=pC(Gg΅: 7Yy^^=qwd# $ @p!:;$~EHLV7f-UZ{U"ۦ#{L.61BsjWCMAeWQJKd0/!{,lV¿ll8ӱ~ĺԲ[3}J* k 8Ů><F?9-~hYl!ѵ(K]yUìaw#rqՇ.n{żTX)L}L1/YrqTo%1WA/<*PN 0ۺ`ϳDE+mBMK-N < ߅yÚ'⼯wFdëӏYCA=$4A+1k,NCjg>]DhGj9W!HҀˆ+)ܶ:buҨ1ʮM5sQ7j!/Y̧%줴t!a>y%߹!hA!PS,̊J#ӧ"kzh1g~8U{4{(v9#M_LСPtl[Uu8ݸ(7T;}knI4s=LM2]&2@%?G!/'RD; 駔6'Sȇ(8PzZy^8Cve=e)OkVY])PoEoMȆ/-_F m}:8>G-6['Ah8&ScAP4݋7f;= wwwFPj2'4RSVNb3gǼ_5CTkOR`sm'^ȀSipb}ZE=sի f{! oY;k۩@kC dӯܢCVM[cj 7HΦ Q!i߶=~Yl\ylx1ocN( \?0O2|&7 [:yo"|C<υ^\9&Dq9׎aͰ!}PtNY%R ٳ֎wI9TfkEJG:k>fCB-?U}{x2͖`BðMEgS* `_=ɇ%;L\@aj*WՈR?³꒹>K>F-ָWj-Z?gkYmʍ!`},GtaSH5@Ѡ-2; Aa(n¯P*4i:4ڦ5# 4D9,$ymf)rwzZZvU.BjI# `j%1+~`GWNR<<ʲ(x-D"Z/ 31D)%ixHP۵Y-ֻ88+y)mGԃShkqi:cpUϡ 4fgtφx6qk]{6INic<-ZsZ;HVoXm+wHthRp]C{#ҕ|T~ߐBM1_M $Z< UXO,ےӨ$]8lj6b}啹}‡㢿W,_0 tm ~W'T\o^M(`nen5T fΥGF2R׆m,M1e%:QCk"TUJ!JZ蝀0S204@y]cX zo/B;Q˥VW#{%>-Ϥ="eMȇY?4No1we_5v@T5MctW bz~2ؗN >𡇭hWXד0/ S\97<@SiB8t sag'΁T  lKTKhEzM8 e|¿_8SȸӣKůlla;U&nsMn)R 1 *IkMm 5Q!N{n JiMK(2f3MD#-Vϸe5c3^0N9 wYU{S߄n|=8DD}X" `¡2A6Q6G~TzhE%_@% _gv(s-:qw ElFb1;w ^h Z-uvq02<=w4iWg-ۻy$6&IoqaZ:5j:kYa9 &ka]#GΛi6HcpE{I.OG$܂ZZ*[AW `+-y%m9qWmUlgF4seh&Ql;^E:Ω+Rw܂0"9KrD08=R}5~~oo% g֦'{ѱ{>4}t1$IDBѓK/\kIߛ ^Ne/OAl7;"+=cɥo? 27&;GKR𪁿b<:7AY #8#7чSCj:8K¼m PTJBPwI3\M;Tx\w!j.GVY ڱbV(\7Xv**A=5TDŽ`݁17 q4W * ̔?nȚY%k: a0aii"}g![v51uB7Яc>Bm'+SRilTώ;4_M]$< 07 .Xq'?L]|FQ9BINd>gXĮMaS wnj0I" qd}l`r'+/筣SeF^cx74_ ޙ eQU,̪7coM.OehD5Cӟ]xA [AG,9%%i+5 w|:> HAMZSr i(ZQG$x*|Y` Y' tP-&'k =3݌ ~lY nʨS2C.GlS& pPMrjbo-HB8\2 `@\3y< 8SG^hyc!` P}RȔ ݯ[j_f::?? $-,WO4C>Ξh;&WlŊÈzJ!'4Yp!;lJrP?d)XJW ㌉0y,cϗQ ~E;v!Xe_ސ݃O p~x/l ώm> 5_kK-#zj$n+*u'THd0*e0V 4_]@-/1Id ^>߀b˜EblH HXսgYF*eOnnpD/?lr ͦ,(wKiϵ`{zX(v3s^z$zQ:_?>byEEi^0;xW6%C4vOXov;$}]M{E[+ =2x)hd kީ'y|`tl:cj+W| lvV*#\1ܯE(>뻖U7.LY%szṘ :}E8a(9h_p4L#.]BD-TV7S!7ץvg=KɊ%*18Ai\guS&s}/a3uje7 Bh{fJI*okU>D)uu9}IӶ*9xE#]h&nIEl6sh+.P$E=. 6Kزrw '+,`x饖YmCWI TPi+1Pެwo%vSP~U! 1 Cv3-V=v8ynHF\3mA{$1>9jSO4 #łw54)jas/$y67cÓ1佌Q=#qU 26CG(7zdkttJxLѕ t>'jPw]?95e}6ƿ_B$ R V,Hi A}n惟tш_| uT"4;o!p<@Zjp07$7cCb$2_of + LaS=rx;нTt'?N?YcwE[C>$$, N>jOEDSV`  >9._%%ŀ (qR ]akċ=e9R|0aLJ+ t@17|1Ơz=nk LF?-/3+KP-hC4?w[;s2)ent_,d88} ij $ܳ?20^$5%LzR 0ד)ZWciMVNjE2Br^[,:#!oNU.S1 mb&u.&PS}7Έpa U{hŇZ{((s'l݂|f|jUåy0zB N^YmLjZ1R_(PM !E}}Ԅk&96eA&F& "r2FRv"yKO' `͐Z/+p9BQM\ ˹~܍|;y<W3]*٠br礵qͳ>fY: z26EV .hP)io9@DnOnwҺ u pŖ51VG+: (VWTAWGzԊ>bf~oc,Z[;耦H4ǠG,;j%fiIp'R Zk4sD5}ʁ`+x̳~"=)~X@}xy(qj(,lH2VUc=!`fU`Sb!K/ƢS熠tŲJ*Un+:w>L #`2>ra?0xi/[?Ϻ)4,c玽Brň)>-+ ^ϵErsٞq !%ºT@Az)#.=2*]KOKB3"7z1bJb"H %'-sI#:3-F%S-bME@+q 4v\G{vS(YW`,˝HSS`~m`s┳.v;a̻{AK.Ȩ9>dePZCGb%%سk*o>YK5`Ҿ))%@ fLZ,XQs垌8]E RUMOWp| l_cvؿ)FWs({|y0yTm!C7KtK~PkpJ3Qy'uQx/Ѣ;NV g0SV< &pD%b8^3ն] !Uq:Y9+ ( KΡ#lO; 5i:qϒd#J%.=+ݯ]5E2sKAAbG{XWƎúWcX= A᜾c5Y^5rHMޙ}x>XMV5HVҴNJj@j13Ǹ>+z, ͦGy$gTn%Ҵ]H}hnT(kU./ҫN^C(P?ooKo/ y@'ʍh "щ;%.o|t@$Ox+YZQX1u&(We>4CvZ8Co8!dԌ @,&V*n:$lA@>@h_#TXwFdB??B%["%\n*{-T#dtM%y׆ZhzOߏ@[謘<%Ol9՘3#O'L% R fe>e(2`L01cٓ5Q"ƧEn:>:ʹ4)5Ո6{]SpJ?D8)Ž%/`:XQU_g3y"T/TwYESj'MCE$Er$'5| S@Gw9K?@ :HWuL®d5VbajDN0I}aO)&kq]oc%2F2MaaD{!i^<專M5K^VV:ݷЊ57\vᆵ'H~tat[ Kr>G\zZ@lNπv'lP ASLE+)c0YCYmΓ@@*zv-u%;u> ,^Pp_8H:WCOEmm.8cdb '@䗽]XQe/2lc8)O) ܝ֥'PVT Z` o݃}*6 <ر[ yJ>AW>6}ܭqu.RO+ܐ5 vQIsRb(9BThCMDŽ,Qu\[z+HEe4N *|@dZ<+<*:H^pl?&rh0$Ir^F^AeUVY!%_ `>3m^l~!tP/V3yC'i7"h?GՕtYx?lHr=6^"BejU 縛siwo8B^v ^,=$+F@O%!Dh D9 -XuDo2WMBƈ'ă :Y~I] %GQXcp-trN:3 jUuy-613-൮>VqA7WՆDɈ:'tt+Ϳ w׌W A??ڥxm3*Ѣ7ց[*AP;C8.x$֌S>Ez|%Rb&uҞ77VJVlh g" 37J-_ mj=};JVۨ_MU9~ey8Cqi$DXbebG#ˀ&lBb <-F]0sR9 s]Z ]M=iL.a`,N/G@LJfAU󄩄-뎇i4C-o}2{`4AŭqI}!Wbf)%Ր>v*eh-VQ8!Ahht7Տ^5ċ#w=iPsNczv;9 l|$Gؘxko.ۗorkMT#iͬaO8s5ǰWU>ID؎ ȻW;f:߽:[#e=1+N$ZUc0#a5J[`IH{5 P;&JB|3~63Oq|C TPAAqa;*9:MD4dAp?9OYAY0ΰ}Aar Iˋ;ƮX4_drC#_6xkU62s=UG_i+?#cR;CvjL QV'\'ГW#&[bPp^5*bg$ĶF00e9x⑶@bBO7q>R$kaiơQ_TL-44$.LuY74W 0T6v͎jO$&)LKIw;g6a:qSoQ#ծ }T6F$æhFOxiL4F$`1)nib ^!:;xLFXך \?av[dZ-hpIPyȀ6m=ԔG (ӀI(책>0%h#܇F"z=>r3Q1O:6ʧ-J, ϠK{a߸<<:9-zs[j8 j/$=}Bې"m|sWIMǮE&ZH^L9*Se[̹E2X#(;2l{qE^ :zVkzo{$]xm+$J2׶ cӁᴪǫ\?9q{Xrn:"52:W©I)6ؗsR>@ga94j=Զ {-zg+9!n|%j${F#s%OH V(0U=A(A|Δ\8oɬjӜ%y7W4B6k_ mΩ jK*[( *PD:%`U H_'WU~QLMcb+)lh0\l[5N;N^pV8|=1Q@'H~*eչ;kG}_6Haw|2x鑛Tk%η4[kqzVZkyw*;WbVN̂ޕs H.6ix7su{";.뎝fjl;оO!Ixsh7㳀2z61+O-SQPnD- L=P4,6n]¦q%ʄClAIKhJlGu4P(2DmJךSݎ74U(sX(߯Ϧbd!xﱁ%ETiE)aH]m H{$Α[rpT8sfbSQ2} +M`NP [C_2x8#+A3 Rk1ODAF[of| 벓B7X(BpG'b_޿Ҵ8{j/m? #$ێ؈c'{))5`Klkm@r-*^Tv(**T Rάw2bIb@a.ًc|a+hSrU$&.mZDc+l'%mܡ_6e!sU`x2OVՠt=J "^/Ϥ6VJOZGL׼fԈ{z"{G1H{)ƣ:H8?9k䱄 ]~Su:h4dDx\_kב'_%cJz uo튷G-BX/ooO#d2>%K=2NR?EiU1+n t"v>cbŠԪuވŨ& QU@SvI.+uztp9Wi\mKuPo$5`(YQNM`$lNJz#%_.鹏Mp8XNwԭj^ǴucU]q$Y ;|q?fsZ/N2v$4oh1JW ;XLRFASUٲh;:|]Yv'KU/Ȭ:{w֛ZMFZ`LQC);Q`v] 7bB*O/ܓY9 '0. 5'* S U-`K.NM(39U**섇0tN@y vPA]tjUVV>Ͻҗ i%>ޚX/zM?BЬ5=7Cge#E;j6c(Ŏ{t SsVw[_fb5,]ښ^{DOK%_ q>sH1!7iպ(M+,zO.>y40sx!uH`WIYU/׎8 y8uXwvLp`i K]}gCH׿,ɩㆾ2GQA sU-.бP"pmm6̭ $凜+SCuk/z~0=&KUA~!s,H83bЊ1xή,׌Њ`T4[6^czzM}v`էrΛи3v̏)aPXM<#f5^+ajXcʒZ{>͝.lt#Am&uQ(1,LE$ߢp |zN݂q^M8J: _K2arO &ɛz!` Qw&L.մ[c݄DQHgϫ55%`<=[! 'UY'XۅL!\QTiTL@zp)V`ݔ+Q/&x")vL/X7MlO+r^iqVk9 |WLMʃ q*/[VU Q1\ɛ񙲛5 2"4'}1tK,@ ,- ,6s.CVQgzsy2 ",QjJ)WiM<&M$[3rGpWw3}a,t |y|!2bn%ZKgi4fjP{ߟp;\ˣ|ܭphajHLC6R*ͱ=Z4LceWNv'Ce wGc6!: \o\8t4a,^ؒ=-ӹJ`˰Ҹ7ySyQhP.^pskO" VjBtmԉ"%nJiZ#bEy) H(DQ *"]0{ %ƬO{Ŷٛ˛ÖNy)\ar[5ć,*V^dQUf4=-:dxжHLӏ 'XN Sbk~Kynp3YIte_&\p $mղse+ ڻ\ r^լݕ17?+R r,MT~О.)֛插eRY xyS$ر= |iQ-2[ (h>EltSޥIBhErYX=O倈އSQE IKylɈY XV@ecL[!|z5b\Ɨ1E?7= 쯌*\{! U`)bNۖqI9X}Gs+Qfh堢ܩp,oDddyxyzBQl'0kU? \dOSU6ǽHd#ͥ{jaJ[nmSTnh e\6yڢm`l)ѵf4˸oy?*:@R$W-t\7ڲ'\R4 Y"5'X-WwRj".Qӷ>~3Eʬ)T+){E=+5>PDc]%QV5Ue{zvY|_? lyR8 A~ώT"65;l4'E+RMs@iDE\:AeK.jꣵjSʺAU14SwtmB=sYDA7 .=f.dK!PO $abgP.?tZG45B0Fsk0h̦݃C $(oZD5C3 6^l? e tSC(Mz#` -f(ZY;9>J}$v,QwZ_x(HLp@{愫b]6=on]/᛽b,bPr:#＠M"5S=y5񁠷{!8-ot|NnYJɍ_-V8w*bu]>"Q5JUߋϑϒZS TaEsck~wƲȗR2`#bs7tV5IC$%i 6,C'67xZ;6NnkG΂& ɍz,S=jEHާ&sf.#{d<*ӿI G1 Qe})V[&^v`yO&6%YR2[r4B-_ le_Wk K;P<! UBߢw(ڞ[twxb(eBZAEItrX`^aOU[AQ̆${g7#^UBn_GxEFN<I֭_ړ<7g߈4,GשM:'+q:ǃ0Nȴ}U[6:$I&l*Sq ئ}z;VFkC_DVPu,gV^GHC#[tL;'~ kֺ!c&p풥8@^3 ; %殹"ڀo?3#7bׄhG7J2N"U DH^tu)-k;b |g_ `SHZW9:qܿWCA,-/{[eDcg#T0Ez1~pL MZQ3+d^,Ƀ"k|JOYa TJeJ+\J'"Pbsy(-tɇ 2JwΨx3z;HM{I;x,0_i0@7~ |V^FWԎMMA0aǒ9ey>ƒ G~hm JzGn_8ϳ4K~ 4jm{~ErJ"I4y 9)!tlG#pށ'@PɼY ̤6l]s(r1O)GډArKOݥ6 ꗰfTvL/,[¸zoL^e}R'a99Եu+ZQfFv$YՑX.1(C᳑C<`i5/O $#U.o 4Z8x" e@AҊ@3\Ѕ̗0dE^==0Cbe'jE&494v|DF)HfWLnߴSztJ䔍 ~"1V5~{ 8:$ȜE;oB!t FIwo4U<,rZOZfkN r=WOBMņ$ϴ9|@+븓| #-z #V z'5* {N>4FOysn ]3QpSI,2e6GMEy?&-c!HH AӼNwfaN,xƬ8*4Jr-l p}q.gf6̆+ y"[}'3mXY!ۓgƺWExŦ/\4*R bps[;tg%>{?>=k 0M%$^j&;@1 F_w{])V3M]F,@Ȃ~ :(DL~NQ<3Tb#Йl,NQA >cʦl(2$} FmU #{( ɀ+T[7̌*~{әWA&UUHH#sX/gTHcZoř_EF.dp&s|! To[X2%,]3@`1 wR 澡@i0baQ2yA+O:n/lt P5b 9lyx7.@18}5=T.DsW;HF"FןkukHTKi=B|4bF^j_x4F>Y?WbctzE&=~r?[5r˙aF/jhY8L{k~nϝ:GJf/j eF98]G;։70'i h~ϼ KY^'u©$.77=8-$Ue@, JmmIJ|# z;=rǮ;=f_+Vxž=ֈ1s%j9Y8ꝁIr4`B!ݱG=mc,JDr:8!^ 6Vf}|~_܉I11 |e5/WwwptP:?,F:h1h0Cimf,>{]XϾ)t;q)SnD]jL0NV2vNnN x֒a b]*@.am,:'8zhQa%!uD>  ܟz]A^R?0VRk,lե7yd- o[ ͙\)[hgC=#5δ)ؾJhvHGKgզy&Tã%B'ښKM[E2?%Z]2):/xLwxѨbY۳AۮP/1}8|h~͋ v~S8zi'~pAfvqEB0AS\riyE-P0Q>xsbZ&_g8*{Z9NƢf8Sܞmg>g%0')dd1*)+2 9'gǘ *Qe4R?bwMmY6Ecڒj݀Xb~hYQ0Rwkm`$_S KQ?f8dosT8 " Α#IgQ=toGN֗ sU7T$316% IJ(Z!DF Ɉogn+F@ž۳M l @:y*@#.9Ad}'|3tBL(%*ɟb[:]į t4;vo QާG{pOGx؀+$MP7Loo%R?==⟯\k6e+S@߿뮦88sg%jd1de.ΰ(7`ݏqv<1%ˣ`׳`'9ŵ')v⠽orr!n,ll Q*@2poxS^KĎM,IJe2FLb eW)sY@OD6lߩ{ѼtnݕXƖ/u*%)MW~RIҐJAEG[mgȖ 0L~.bls&VL[ݐcwt@YC]Hb1ج^..7g1yǭ>(iQs |e7)P>!-{ B6Iۜlav*%d ̼==G$Cmʶ/7{*!Zt͸kim+ظ}Ix0+$υ *]c6KڈQ$bu Z D=.V0z]!@][yGb.>u-7V?ٹDr؅MWTNw]aUL0<^H3\~zᇎAt nm$MPqJP1YQ#Ӽ##KJef Tt,@*eS=/rQ+|@z #<]U)F`l? ' &CiY?M0Rc# onH5BBl!dmͨ`&~V#p/IVsO@tfpMۓbu*Q/@O|9Yp-#tΘ3 /@uGb,y>{7R<7;I'WPtRnqʻ['Ѳ Ѷy.'ik'YƇ쎁f5ZkA3R &~u*t/tL֫w6>iwq&em FΉ""lϤA-|Ϳ֤Mwn.wHτM|ݰ6gM\pģT@hһ9~9@YaHx QC]cVu^MpSgͶ| u-Zպݑ+) x,%ݦvۮ2i!h;`7W,R fPl^o)=Q4SLGpt"qԜ[^Tff'a |9u v?h;%$ W`g8Ax0p^2~B=pb.DpFhj3(NOg(ZF[KL%(i9Gc:4F *ݜpO4CqEq=bD8vS>+!iCIg 91m=CKp<톰S3 dpp0A3TK0ԅ@$yq)V8Lh.VUgYĪ_]fb8{<[k`~iUHcU ~ aG` 87YqmIsʷf,cu8k m~ؿyֆUi1'5(hڸwvr۱p{H"2܃p*t4o;Zz_)bᏉ?3JkE 2`kqZ[) X){LNprjfhйX-W lWIxT}8PUܻ,@&-y"BZlP.g Cf.桟Pŏ$㳂ϸ]s٨*-)aaSKSBl iPC>Pxkp up󷫼A գZ))r%Ma Un˜}fF2=[ Oz> e/\ 3{F=\__\p~A&k\r#SFJ)+_QeHNi`OE/_S2YwarُUYRTp`Q߇T#ʳ"Xdx%- cǥ"cMɯC,e+D-%=Qķ_7GI $>*hlgbH@f3obdf?m2[hiGBXaec)(rMAtQo.b+2z 5}|[mCc{Y\w6׾[s_r/e! w}= u.}kQ69/lY}COnC`Ol4c,&jtv&zc=b_`UjrUQ3Z")ė)Ηx}#v=P:J/mx Xyn}>'W&"5Kz.ow3Y\itWXAWj͍#)gMux(E+tH<ԛ*m901g⪲]@Klt4leQ;;cX2 GN;hcQš@|t{s\.c (Tط%r2 Y&E>g0PDt@GZ&q{P4 e# Дlzo!WH772bUW @fJJ=l? q+CJڷz 56D(9Uksm~w}rJqZA* !(d.T3=vRmѲ)^Y9nɈ:LήfrJu}fuʠSR.#Fd;|]?% Ƥ3B~ap؋D٫DģPّ\lݍ7h\Ǝ7|) Įgu<4,q|kb2o_A$7ZhP: ҿi\̮}Ԩ6s0A]םrH[Q{󂸘Wm#@#d[1BC)Wեc'b3̌%Fb;,>W1DֲLU~4V/8g6h:_OQwʕ;sgB;60EHBWq{$![K2E-{n~wkAJdwJ>G2v,d>݇}IqQ4 LHQ+B8:D}҄C*fyes*qy%OPN G I(o KtY#d3K!c)GUdQTo)%UPb\w]D-ϊ\wGmǏsV(h6B^7 tuQa6Ӵ"ݰolW&$сK:x?>e뤏1NAk_3ʖP$CQ0eӕX{MtN¨Z,p||SpPd;⋖y#|<hki\X1d/đ'$yԯYA1#""amB#PWa⺪}G;WLWP%\7ͤ:eH A?{GDww歮7*h -Vzr9909l4=8X֤ۘ޳VЫL)*%VrD|^ ں!ܺЎnQބ;]N o% 8I z)C\`)Enp$?0'ЬؑX-wb0%T{qn !F6W0BbyuG mV?ӭ[p&79+wEF}Ơ0qͷXm73@.4H5oؾjMs%oKfv&kouzY:șW#0f7|T8\g,5O ՐY0 UvԚ)}̣Sk>;[eIDviE]b1[`!'e-Hv?4_@ki#ʫ^DȆCVk9 rNPڡAI0٢mt|.C7C!o$+)w+*e ¡K:&pZQ !YYtG M Rj%̲E{}:P;u!7Ը( kW@x#C{Er'˪>g>;lҽ^h{RfZ٧?%rl.@[Y4Qm~o_7+K oF8V3L̝mX 9tcN><"Ezvu(>=lqD*118>22aP=Ol )}4OB8vqqZ#& \a1(h?SY8䊽Ѽ国ϐg tD.KIL)MʍVg "`B{Qj R˿Wd䋨0b'& "2UqhϷ`\/_`cHȘa!I8"-?W(j,y8gNav+FxE,][4i7 )'.jZ^cpF?YE f_T'͸(BCڹk%'vw T^sؿR8"p&`˨nckzlC{+)T&aWV[c'ξu vܧ18lU~ '/w{sz6ZӴI)gKwVvLȘwYJ=Эs{ekP+U2x [2V.:{"܀IaX=3mgPC XiSt y k5Zц>`i1V@FrUܟMi1[Ik*i[ϝhk:"%o?hTX%ZXכS7~`$1ܧcbB!.V0ypnȻ 3uEÆAiUĉ`^Z0_1zwuaQo^O) *O'Eս Æ?[Dyc#c'hi%'/^A0@v`9$&@kxhո!q \~kK'qgZ0͏"Y=J$j%,+wCC x"l6KyG7 Ė@6?n6cϼޠbpdމB/6[7}"N@zYG4jq,LMbFF)mPT pfB.T,^|!({f8۴Hf 2SQ xy=+ ˄_bۺ@Hdg ȜPig{PKNR!ݗ01/S'bG7 w<~$W.Vc:+@U&M`1!zGl|ÖsMaE EPms &R ]ֺ=OB"%Nc+%deN eE`bCr~mX bNooȊDr Wi1a6>:Cj++H5~uMO()K`[XQ`T2 1~ZK , a[7 T2xr5/x"uٲDF=J"vc.!Jt~L?cm. KJ.q[έPNe<*n|HH: E#^* CsR oBx͍QNSq$Hm6fÓOgG)e>IM"|n Mn(|Mۃtg'pS7|omn-M7>{Ɍ"{cp_H6yuyg-AױU;f^ jK$.g> yJ'FbX _-N՝p b8 (i -D{`ay„X>fXSźCڰ[Gv1OTr%IWfքꕶZtnɧYh2:+em|deB Q 4:o󎛡fXJ݂ 7?P}Ce$w(Nü)U$]* zZUXΊz串pSD:>s=~ N?BcJ!^9k$m&.mu~ΚQ7 J<Ե+pel] j *g#ܴx LܟeR-A̚i+|t==*ɒپv-MvvkAthIa߻K x]9N^@ n&ӚYܸśt_ptheݰu8o3wem%۲7tBk (> LnobK*Qd@]?ZL˕Q4mW$+ߡUkʘZ%Ez:Ge 5ƺoLΖpڦ=wpIUTᮍQxgw04 J[&}'xgY\*POHV#kǐ],)I2PeֱtO**#qQևJsb+Ѥ&/9*&v]qC=XCQwLBk-])Sj!4"EmKWP#U 1, co8,?y `~ftEhYrVZ2v G Du-|.d_z2fe~0֧isnP~ ([[hgFPϪCg ΁fϝaK \xnIWj`M* M)㋕Wİw{@U: 5ĵh#'I G RM(ҏƍ}P4p.SJF[A[<~"?wFĵT _wx- DTO: W8%ޞK9by " K/Ov\{#/U T۾ %QɡaDGMbS.e&z dzVrY'~?F 3$X8-sV|'>|@[fh¡[6_HLzv\1c+K&{oA~O3àC#ιD5yad8A\:IcĽN xČxƲ6WM#HTayQ=ڔM׸0a4n~9&y5O3xW_юit$}1gʥ)wR#xu#N6]I.,rOk=5a5bi'R M1o> /m'\*~:!f+dboSlB#fIwZ}SFQ쀟&pu㱖Ί zw]60m"-5aPw-Zru!|W4Zg.lee , mx+EN'tZԴt|q;g6, M&zQYPֆUț'.ݝw$!_0ھH8d{S\ g!ʣn2})y2Qp(zJk?^g;A7^L354cZ8"н[k4[D+@H%5|e]/,{>ǘձ_1Z5r@m>eɗjBe4:lYݠ6..FuƢ0ۨd; w%bGK0KN$>Lŵ N_>=SVf?QރKwN^h c(ΘAB}>jg4dNMonZFCvk3Ab[2ؿԱV9b/~L2ϐ%OE*2v5t~8OiΚX8$|Oc-v"-T(2AS^24|1&dq FWoRF8w`+b -r7uHk%yl_Ogm@X~eYc"aSV}Pix#ABdQ ,RDB&by3^ܖ&?z֌ykP :E&Hh8n""~bstCn$ 6pӪĆX3ĦTGy_)qqOdX3ו4F_S9dhQcք$tC4)ύ >v͏i> :ǂ\86.t_*Tɥ;0{Luv-6ۢ7${$7ab^9.JgEwѿ-LՑ@߆b>$u(RYL]Oዳd}1x-{ÜSӫƻԼܺtB'wWL;6JXivۋ[ "?B% +qOXXutHxއeR졇Pc(Сro=e4iKLby}\]9 Sj%I3z}Ghb3Ș)/ϱF#}r2LS WlQ |B!D|1jzNٕVC_ұ2-9N͸FȄ6ߙY,#;¾֨4yjHmY{EYW݆?Ҥwew4$d ? J W Uk7DoP>2֏NXaĒ\QY,*]H=tQ,Gz=Ƌ?YdC* +.18 v]f2]6/I"l SÜ^+l&&s..l&8ȩqJ?/ y:f[ X,49 grZBP.BG_{Eލ6lVB,|^Oͭ!'3T;E8t_8J0t3 j r"*v0 0U\ƫ=w] LeF6@Xv2wv&Z4fjCb+[{\m,˪NǗU0 tRjNtKx?.b%K+)ctVJ+0#{zSSfjqdm<ٲ~ȡc692E,`ѣlɰ- 3~/fn ̾<W e>^;- V}ѵl 1OF -%+9hssJCÜSk&iк1L1>n2Z:X,m Cǀ7 |`WkjQ[TgʵnK{[W8hk^#a6Zc yh|OhQ'a΁X]6V!WA~׵bzxy/G؇X }@{$IYYn|:dCCkV?Q{^Y33sҙ$M)zvc3 ~&l79w .Legpl gX,z@%0~ÕZ&M*Ys *qz7Vu"4b4 Ni|u));kQ놫}hkm PLb.D% h(ʂ+࿇}Cս&_~Ytob%,i9(ڧ\{XN ?_B?a'+Pj <缈Зg/?Situ0@hBZ^H·2e=x۷trRo9&{΄VoLT43:m#vE2wh [ hqFt[ &K>8Sq>'4Ւ&v۴PG!zdd~OzFSPu-n& x)&:mߋ7-q1]HhԶF7Phj1ל^Gߛn Z>K~+.'c( ܏OV/*OOr⧹ΉijX hd2`Mf"BzЩæZjAuARCJ{I]AׂD< (uפbX%t $^̦4_[ys[( L92gM/X&:;!GAPa\coĎ8b;5Tl(X3y-e`[T3Y-^oSdf$lAkPYh࣎!Mn,jj3i/tz% -x0?7`%4t:D[ Y)ׂޡC~`:~طv+;(,Z0\ 2iGbFV}Փȱ8NsEm%8FF)ΕޱѪSNʨXdC?T|\a3C!?$rCpj3J^^/# y،0D&,HЌ$XԱRgtǁy;| \v#%vb>YE3.v| A4r 0oʘE 8͆<ӯax !w ;b/R. >g33;%Km̯.Ѯk B~ s9f1U_dNUZ1xUqط h67뢿Bz a 5HA1?ds/)!&I_ I |FϺy@u)B^.XΧG^ijF!os%!46V = IWw5$E:h;_]Y;=24Qqv[cGF淫&JI%24ޚ_swghq&MkMyD a5G; 5MO$[#Zբ'F&B6e70q f9"mvBz`?9[޼E~zY>S6]K"Jɾx0[JZHj Sv.<-L5reNFA I6/+D v<U3pϨwVG#wLF1F 6^t-Xܶv"ĩ{fk8W|6ZdB\)RL5TpҾ[)>-;b:A @ jVOJ<! YҰф~;kw ۞|O.RqSeԎ5{xM5XB$^ ~٨;DOjLkc]r,ZLq?,ؒ;LuytqPH{1nhQH$SHm: TJGx} v޿%wO/I^f m[A,L!puYB?,X ZqK$ bD3'EO9i5p or˳5 .;_rirX@ c8I~\alG}%CĨczS,J' -[%cCh$uZ}*+ˇޙә7 PQ:i0o7z:InBY%Ibw_Eȿ@_0d5=kkn@a$}>ő g?sLiEG:O_Dpm/'Wg%mE| %K]w~mw+Mj'!ŐM.1i&9+?(Q3G_w:Ɉ4DY2#Ǹ ]:Lg`i]zns?\ɠY;I,y X=w3VSߘ;tU:&xŠbY7%I%JѮ\i hi ;\ 놩SqUjfePgG 6\kA2Ӵt:q<~4"l١e^67xPuUC7O#tHVG0ʕ(Žqw68Y>2Qx_pP( ʂ%<N¿劸p" UيtPN6rhYoOJ]h v.m$oP@yNQ5b;K(C2C~-lVZ[S Aqhu2xZP8eB8sVEr'߸o飕DL|ʢ5'qfk"q7j9 SXA󚁧dɒ`?\6|O1X7Nl/[#hd0pZcː哝EyC+&)ֱfx& a5#wR L^'ad*W̆w*@uS48YS8&q9`$zt—c*3&p42-ɇF:׊ n~pհ:rpKLߢ`/k0|-J`V ²T! ~Bui# }+] zަ9u>AmgnB5+SrK+z=Ce|gwMya> T_ r4kdfs0kBT2D<^J}~Q nx9t uXoEqPd{^d~:E6> q.J~I}Ќsv} sy~ǯO K3Z-(^n3]#8W(]cy ӌ඿ KAԶNFb o?խ\)IoK5Y 97]2\Bѝjr'n͚E/Ž0z\惄RDv󍕡KuP^8T/H]/cW>q1N !&Q:+S(c*`?-Y]^h@Vㄤn_>HPlWZr(N:44) l͢Kń7n+G†Y|d60*gӤOOX #FT** B+M̥U1g)aY%iOGp*kɡN Σv݇61*StcIn@3Ut\ tiaPG<0UiXb>?3cMdhlֹwI5z.vĎCFVW hD,[0`gxlSHfSNؓe)uXFv(-ΐ`XDSAsOkH#J 70/&+^]Gpoп[)N$/-X4,4dϤP쉈7Q 8` KOu@9K*6e/74t)_/9x1fTY0z|Wfem),D>;Vd}yƱEXIX2S 6t8hdO#֍z]3 )ݞQ4OcSwn7@7x\x!n)|ojb>#:d](>f~3ZOn 4kZ߂~x< w @EC0ҦݒWW-Ed;\+]Ѽ$X$+a<kGq\7ZFv[ÿ-vȸ$dq_&QwxhM~泰ҀVC nM5uV8%]Ʃ`*&InB'hʕ&,h)lkc&9Y!9ON8Sj)"s) A캣 vap7Ҥ$orxU3E77/`sR0]j&>A5^3(]ۑ5[Y' @{bDh.}I^ʼnB_ Rr<ɛZf\I,ϙy%ٮр%ƅNPLߎߒwA<XeUTHT@%Sy`D+c<4^z1wp2kj NRH ]VH!JGMUCD4qAiCc;;]oM~8CrRf]qFNN)+MXe0B0;?5Z,o3 hn6 ̒0m &^pHqC K㜫z"z *<;>4G&E?SSBEdVƛC1 {\#س)L!Y|%"D'U]7O69{?[{6 B)1 P(lKMLA98 p#  ^`'5ޞG1ujz Y/Qok{^BڂFؐB:|cͅOUIt( 3WzNͻFyp־=V~c<aIXCy25]%QOàRrl*AX {OJcR)yɵAxA5I3zy ;^A-L!-ڇ^&S_ {ەVbgMGNԞLpX óT 4D wj1V.k6{R 2*0ǿB^Bq/ݨoqH yږIin]©dX3:v|hPy0yXJ1TyA="y;fs\!Mi[!rBN.T(6|Z*)N9##skm&Y(xTc航 %MB_9( 5>pYCFnÀkLvRw:gH)iq^Ml׵w>n.Y֋E+ @ U ;eU2PKyuOvW9{O?WcpH"mIMK?o,t/ Mūj% 7##JgJeisD0+)n ^EblBހH9n5GLS4dI170@>`g,NUV? !̩'q (\KRC>*Dv3 K_?C# ~oh0ո(?ծ]ac-`s EUjv3{@ٽ*@w f5GZJPX]ޝP`s#2p/k$ھ)#p;F߯=8^^w,{s$E8Gm  dy)I{s'>ϿSPĄ$0>*সռmf`=Yz=sa~&fdݺ )捖 i2&V@cKw)(TwςJ:c;0#f`hF;livuti,/f^̍Pԍ5+=R bv6L`$nxE{Py *o˽OnM9%a, ƉW8ExxuآΙF IS(ui24 =Sr':tJX\Bư4Ol%u馫xŠh 2V4с5 u}.[aov]c5km'Gs o0h/tv' "|a 脜" 18o): rd K?oȈ oû)QBNp_f;Ǒ6,8Ќ.H[y`dy_[ƒzx"RRp-T;ݞ\TcW؇ll'ҭ \*Gߺai}"V O >[lԺjB}Pjg6* !亅QHwx+Z)w\z%&Qd4%če2)*ln 3gh~~I%Gåi0uKhT 0xjXw8HAA&JebV>S$n Q o',tԧ99&|F`YH&8bB#3>XL5as 7i maXW@(3Y\~vrϗ^^ڦ`}GNg·cd]j&C^#0,Y`6ilj$=7TRd89? P髆A.l\,VpK H[fR4QU_o`8Tf=Ey+CUF] 67uo#ג|h lMC"+*Z9Moyng}B+#M2uPœo%j6#fM U( wC!QbXla^z(^ 9H.1,^G~EQQO捵ĠMF8LF},T׳ p)__cWIhSȹpmصz` Ǜ2EWhBo]`\=۫  m@}TH &w_mw[;lN3#wvzS`0% hz00Vo[$bV_d! 싴52Es%ĸlZȰo,T&~G7"5|RI-j5216w#h Lϑ Eڠ>:+Ǫ@%XX9%aA~&k=8rWҧC&ŋ@η&^M`khoLg)Mɧl_x3`Uone!"}mV0Xiۇ ,+%gY#Oj^ 0 կk"'cU\ !YVY]xݾ"J">Ijt8R<^ߝO*E\Ei֭dc{tT:,?RG|FM<}vR0흊{ Ҥ~V uxzv!D5 |7m1{t6%H8TS(4hf$yG# åO1&lr=Ȯ%jB*y.}BXs2AфEM2菶YR5oZ`&:`f?x;ejW1L.x * J:n SY:@g#AJku^O)! W Nb lץjqgش d@iW-[Wߺ2^AQ<:qWсxyBi(7cm@WI[ȁ+JƬՉFQ|:>xG -IA曺..Aay?^pȽD|4hYĸDy [[ LV!-tE6Q|B@ P|3$6 t}zd0Z:!&~Ֆ{@@ËDAF)o<,b\4oX`hӒtr#dEBWc楈LQog>0]<՟dW sׅP5g5Fu P\|5.!vIqQw9?].3KpB -r3LOW 8w[}ڈI[2MVRON E#D v$HAd&P7*[ m&bkiBR >YR,pxW]`,`dDž4%G,|v蔯^ 3]MXUHBwtFTht@gvؾ2TY\HŸD0Ea%"1R;#,n4Ԅ"ſ_#Y5Kɹ{$Vu\q֬,m8j2MVf 0]MipLSWV^(r^Xǧ;T !'wM9ckcUdGu4|x],- 9Jpcff0/N-A Oٻo@^ )0_*f LȦQ󋆱<,$B` 2o2Ƥ0P1>A2n\|\e~E y:TPuٗjfg-a1Y !2aG5:Δǀo(,3''M(X}13X&=5RD"m\Ke%1_GW]eP@(mZ:9ZdU^ܧ!,XpltOk! *QL+5*pj";Võm|_#:?.bM ?6t3BtpHRS6@\BP oNIi^ G veV nr54|j.J{ ȜB _Fً*%VWi<'YJҏSDd,6H'_`]7s6T<=Rh>ϕȲ#B"Dw8J0G74].7քn׺n^a iڊJc:ق-A}/OHF,eh KYÕdIGP=K 5/H3@c1h6E nOB#{qw+"sQhނyN!l%vTmJGAq;Uq!w2'g1KZTWIyVt .R/rhz |Q*!fNc2j`qI1%wF^N+A wkѡqاhjf S*g Y^/f_c ƿFfΰ"ڊVO-?trleoR.p$U䕾ħ2-Y. e'dP$O6ڷ)HGYE{|fr.C3~| Ul 4Pn[eo}t9&'"DW2[a=]*/ܻJ4J">c΃"ENŭkъ#"Np7 ;+IMa+Q#b]#2Ĩ @ "Χ2 k8I;ݿ&bLʻ0nq?@Ӟ[4 j |"`KnhOŬcULn-v+@tMR{#v8fr w*~Eۑ ƭiL;W?3 v)~Rf>.F)LfV]!yxR? =bbqrp 2fjvTs?:"E uŤJaEԟ;lJE#Da/t)?jҲ򫛱Oc*WIwLZ7?WBvN|jJ2ϔ:ьz36J^ +m=<~D%P&sio)GbjrJ@ >ȦgSA $s0p0 VlW; 2[6Zc:^%PNJ/,+D#ƆbS0kse^B ʻm֞}eQ6LoQhia=q >P3rZQK}y5z%:!pLoՏ/S=Qїu SC*=-LќcL~  Ծk%vZ *OXl)hhJgXZN [ekj=!R)83(3dEa<3LK]x/h]* 8<ػ `͒Ȍ\U&*ݯf6WV7U.2s OP R[a#R0 f],m MGzYFGwޔc*g7hn|i6;$i  JorF! \ՅY!P!)|c̺me w(@q `|!Bʙ._J5~gz)=]gޜ KVMLb3 P{@]Q_0o-E/Y} --D4#h C=ºJ`}#sMv+ʂEh "9V!3"sCӿ/H%Rc~ʠp$)r'0)΋ޫ4aC==wh.P+KoP<`:MW뀥#3Ȭ &^fqa{)xx?ESؿ/Q3C uv'cyfO+`Tš*q:JZGpf\O5:[[&_ݴ6pLĈ:ҺXa`B:c>qwk}w,լh~b?/""+'iƹȪ‰>w̖"o'H_dr@҆`"@^u T)spX`( 3ߧ]JJ7Ge`h0}x1 b_"U2Xʽr$e_^>pɟ'kQ |_1p}CWGs9?VoT ޭ- w wK?Q =H2ņ#~m յ63{9ya #cxEicZVvU$&)dڶʌOKw: S9~C =>7QY,KKH\ASkwRXFu>P(_1.?IGÑU}yPx j] {oȊ]GfKԏ/f;>:3VUHȶECUpN^NK$7CdWIX?ApQM9}٩/?mVdt'D mKٛhܵ<QSN VLJ\m="g&]egǕ7ڙjXuOBSׄ2'r;j(i0}2|MX8 _q8)nr1 @[ & أHI"s1Oe\5Ï0b,?"P;wM<ߟ3H-,lӛό"زi7^!mkk0a4/=jo_Jh$Gfϵ~kMX%8 ZoRIEK%}}2ཡ4֞C|H4zDeg2؃uDͳ={7p5Phl(ŨjT] \KE-DTQԓ#f*l@~1jh mw(t=H> fɯĦG }>Z0wLiM82VԿ mdʎC~=8p W0912DPE?Yy(q_Rzϒgթ383 ~_v+ڣf~TҪ3 nM+Cwva7m?Q7ݸ*'ڽ$v4}s~ ES\`3is&LGQYe_cerU(~b*6$E q%;Z([ՒOIn[r 'V/fUEHphh~g:lh ]+OmєKM{ǞkSCOOl38m<ە||Ч3)Џkns{5A2ꣁih=򡿯L@b~@mۮ`6Ŷ$f-a]04x0xTHsKEו~qS5 E~Md)gz䃀֪Y"܎"AX+rtdVדjl&4}S!9T+?IVcۀ#`FB>?̫0q;2Χ@/g6bz0e.ɛc^u]}6kέHX=E?s 4bvsQb4:7}S n/y0X)b56[~?dڛࠑTMHI$5HM&ӭ3.Eϒ" |ӂ@=Ʌ4Amq?XQ<ȱ/FFdcfcA"CxO>FMVmu psF䈕uyӈ[by,[#eޯjlQ} ײ0 H1Ъfmv %5aDMUj1ηB }'NK$2s4g$XjYe= }3>*ɊBV!yo+$w8f $$ʖnv)Y+?:pIRp4 5ceo}?=_Q~DZX7صQdRϯ.vV* "sSiR'%|"Wk<5 z\  g/mJlox }9 w,0\׬Lh /e-;L DI0?:hGʶVmS&9q&L̖1(m8+ڞzm,_gnφ?rDeZ%@0O;h5w)ͣ[\LT'r-daK#r ukfl_jL%L UmVcB N!sw>XNM1y>Xީ݀LeVνD"&l!kuP5}`W')sny7^MȘ>X^!/N1=zM+(׳~%9OA 5ʱ}HzܙdfR!@!Jy+S”2tMB;hВ薣)U }B OISkE c51SIg$۫+Dl8gkzN7o>Vj>–ZaE ̇ۏ|/m;lo8]  uJDiFvTGBoI|7EOJ[n]] ]z@ҽ^ڃ_{gLQl;=!`qr: ")}mݭF ue$5J ̀?F5tN4m$%5β is6_}Kkm]UjHs5ResL$:W/~o@k3yY:CkҦ_+GSk͗}*OlʼgU,=38rֈM> FXk_j5:[U>!a{6Kͯx]Y"Y;*8jQgC Y'xiw'џ>faCRXgw*~MXurN9L*8ixׯ#?,_궍 Y 4kLb0 0?" @M4 ΍:^u,Lmz)㐓-~tOUMAܒ^I{d-#- v F{J[`~+'..&cLwm[b}'@%QT)3X yD Qr'UpQ̅;J,d>rLOkYwF`58b_m p">xD$3^JqEICOOF $Iqq2Y>@CB;/PUlMtHGED=^a(/fQ'oصrYM,F .$xYϰX^0r`}| g!ޔ!:lʂZP5}T[6tf3?ّv<ų( MB]czq C!;W:IEx a; &NoaUUm~#&Eپ$"eXv@ ː3/wF >]힫Jn%E 9'5&2+vjL" VJhQ ibגh9瞵ypޤ; F&F3rkZC4Q9;ܦ$2W˟ Hݬa#Răo9Ȃl_I-EF]S !QF^L' 253rܰ/>k݉/]֞˔j 7n$)Փ?h`qrs > bs[#80 5"V!*9uֳ>GU40_;n;ьE Kt`w=;aٛ)|!u-Hu'Qg*0e8H__|u?_~5Saf;\NaiwZ_B<)B~-Jz?$hD`xN'r@x| ]F]S)_؞G(+Bdb춇6$jp)7,M6u4㒉 Cȱ|nHspe̐=\:?ss)T^#12-W3bȵ@Sb-qxqrFxq62z9V hf?I_u(}7q,@¡ m&.ؤ{y@Of^tk: 3uhpRhzRi_ PS=/z >7󮬈-.E Rb'AhzR4\Q/mTěO`MOa'nA8⬚R$ 覃HϯUQnf:~1N-Q߅ q]!8/~'y{~mC[h 7 0ˮ(`HGŽ|$׹QTHv~Cwf$cS-{ ٟi`lhr>-J44QL2-5J GFޖΧ l3wEktt_ǻ`䄽Dߊ, z6[Dū!(x;(c).LI5F?X(,Gv܇?)h*bvYܶ^*~*nwbA ўAJ[S6^d!BZ`P gե4f2ln*!Yv]s WWG:,YXtLUPS^pz\CxpmosL;C_9?1I,7gmW^\: od"]2qۋ؉S]L Aa?y7αNۺ|oB-Q9|T1qHii~0*z~":E|qPX]4Qo;ls:2CŝFCζ9xjiCAu΢l_[iDzENޘP6Nd&Aϝ5GMhGGoI6" Yoj9Y/8^Ov>Ӕn< T;5δ=q䫙` ^6? !83ߞ̇7^$Ci]!~@ko΋xuXeْ]ԡ.Mۏ}%'yG`}5 Ln9|]#7;X?^jA Ͽ~ WAbSdR/ORsmos8n)r JI@x#i[DXN ]l:qiW*@,2[Hzq 'D3[sb<Bݲ=]L_ȹW#QaET^YfU8;d-04(̀4&"ɳ$W J/Qk, &,pbgfŁ9S܈f`?t^Xwe,.x&)lxTj|2km659>zh5OiB1@hCi[q?=$#xJVݲ#^@Z,x?vӪяm୼: CBCP2@T~/B+`ƱY1K+jc_QMp7o j%<~´u* M$ozECu'I7cnr%(&['&\Q@y\ ͒Ef!%@D"NM\B6faec> (F1&B"z[HM3v[%F)ߛ( Z!M95> 3DWwc}+BVW9]iP!&wp wp}_e2F%MBRbƙ$w`>CAz$1w. |*hN!2Hgtf޻Uܼ"CY_L&n"w Nl ;YQTGI XҒDZhDd"i|ޤ8ar08u47B|N68jS1`٢p W;?_MM^Ԉ_4Wתot`(b(uH Hհ=,-s<=nEAzNnnfxOk0RlI}u$ў &BLK(=xzw(AqB!{u-,LO|fsV(###f~ Ȇ!QXZBZ6b3/.y$HX;1pgPBf="iSgW6KC{:z~.F+o$ٞe7TęXZljp$Np֑*]p9`,6 @7|A@*vv}7&b&P1} [1OaUXSƨ:Lr nr}jfk%= YMxy(;p֘mԨߘoi 5<ڛk2XPytG->o) i͛0^'Ҋ/9_>99FeBF]yֹH.d]y"` 5E`SXu/Oz!4yWC)gQ >GnӼ`!Xױ5A$6QbҬk%@qDd+^&|_a?ϫ2D 88LC3:1yi2LqrL97O]L)-\deq3N(kiL+ksDP੝@(:Xkf Rx# Ftc &^hw<E]\V Wѹy,,i-WIa5ǁ;lJcˏqf7O1 HSRwdrw>S)$|deSYr!Й Eny%qJƜ)ӹQ"/Mf̺\3җ8O7rHtZ˂! Z,녉.'GSI.ŰWfYy>D ſTaIYaTDjљ0U!b?0@I +Ѡ!@K)ZVJ(֕gَJ/kv!%׉?=2s[bcqX/[ekh=vsicVg(r䯉$@ $Ѩ^gkP G3`4J[yvl{L<6RQ6; gofQ:WCSUNWIr].l~u]~MB{Aca-jGjy ?HGuڀg&U>nr%)9DQ]W߉T;6}>zPjɐ$ s]g/fCUH$߶vh6%%%JH› VL5*IŃ9bTi-%J37kCoa=ߴ|~B>C^ FmugEi %C_>P<~}4WMD}[ͣ80j"I^8◀zhhw{$H NV{s#ofy&iCW`S vv1 <`nDF{~7 *Ժ*Et1ָ'd;g!B t'(e!2TB(jqmD8G>A<9IPf˞xˣbd_ <,) S6]W ~ \1ozz}4, ;a\jȧ`HP3hYuG3YSe`e:WAl&wfe*_ jYP7);([k 1vY@ݭu`k)<iWUDƼ {ߥKӚ:|vo:X$b#Ҩ*x`qZ.TUz%ٰGB;3Ś: \s(Qbn V% {&Gd!_i"Xw%7sjr4{tO]M҉~3@p ~K ]Yd{~٢\-;Y"pgwȉ_u뷔w%)M^!zzGUWZإϚ@ۭ&*w xV<"jUCB' b0dm&їѺoLoxqZ<^ Z'5Q1|F(z%~xqglߌ&d J{#9|= d7`PN.ÁȆjc. ;p!d>Y'<H/`ͽwkQϏ1FSl@alHGUoy,':~g2AHuz#!vY~Of# 5:VrS{{`-Q/'z]%$}gH̱F'z-szw -+zD*6cy^6W+DNn{s .;f 2$ˀyهwLCud:JuY;]P8 naIIM#^qHR9IVZA5} a + {Ft% `/O(Rw- 31] W!Zs{`Ion3ٝ؄LV擤HUkf=gfIDsŊ\׍dS62vS޻of@eiko2{PA bF`6ӵVRB!ZET & r҅ZG4ý 5Q>K9ltl+KZ-`S F&o w |V.H҆K>f )rk& qރDC9;Tmc= Z()f(oWvطV1E Wۻ@tXHY?8jtH03Λ<vJP<,jVL'ԪL9D{JrTA#|0iR-JC+t<9i-\guc&$0IAܟOrojU_vbAW:U'|U\B] աrif,̞X{ ?AiuNL{)Nq2'?6#zc`U;l.gX*e'zSKiɗURLn\霩+ȅgk-](sLE!z GlaPC2Iڇx^Ws>n0BZqVL+uQѷd k'NN<1,gOf{oŖ Yzsa0,2{ؐRƧZ NDL'QN[Ǫq9(@7LtBjD87Mw udo5{!XC!Ofi }W;<a/[鶧 iMu0_Q]ź̶X8s{~Ԩ4}a {Vo+7d,0ܗ2_öC+_%SeKyӨI=9O_HIIX3;/Z:$d<ѭg}Yźy#iZy8Hc7d05}F ϋlL" ԬFz m_W4+_bF`| !~X&qJ- xa7~D|vx)RХ j@xC8LX~֓ 0-B_5R]Ǭ&{s)lITyl}0D*"oZӕ#xk4D0Uo {3vE;};F*˺HCDZ[_ [. K+ >*kz1^C%,(" U,9y ATsZx YU;%7R>tŚꡕ Ԥ<=*\(h/燊?"<&'s -.9..hB ˡj(A&d ,PFl>B3ߌHzBbm9f?+K9kcic_KR3402=x&haADg;Kk Zr_(kO/!zMGv֞>A_u 4`mD9VF%~,2>sExO井pj}s{a.K ڻww(|6 s]Uy`eVS#SО&s!d6CUX+u4$`(JYXAۺ1ÅPT/5QFn> %FB}vkVpXLqphۓI-hăM]_{u>ve)&ݗxL%6(s|}.xem*La I0|~;6*龝x B2U.d"*gTM^\Rmmwi$c%S6EuFd ȥ|vELM1x{ax`KUV`'2d_?jխmQuZMa(cvLX RZmZ4p*>|H&>h.;:j6֙Kx|Q4vz~gM&nlA=+Цr]H-iA2:5ϓ `Kq̯uohk#bIC{+Xq}oμ׮^,7{R:r3sJMV$+ˈ(H+0g)wHA5ا69q< A :GˡxJ 9EmyPcmʩ?rYT~YZ ܍cBx:Ў2GwYˬ S;c*28k@`caPF;KX٤N7%]/ QpaԗajcJ,E[⛒%]&>EGbujȤg',CU. g A2n@}r,=|Ӌޞxxʟ>)|bWI{59)=!*?Whd`tq3ok9Pd[?h -R HS|_"% 8@Z7ߤdortʊ`+ba"|Nꌋ+=~ߟORRv+BQ\}X>*R"/^wq;ݯ3n_P2Ũd%]J4W7seq'_0M` ⾏*B3Gٖ^N~N&վpRk-ܰ'09xoSg@lvJ\o`Dae&B~zX5Eְ.dȥ)ivyl%DB51517K$?ޚ^m XB5]f[-RAu3aKcIFTXW`DE?SıT&9֞|GnV-DTEQa&@ѱw JoKl1rӁvCg2{1diE1QeM, U?4BsL^[$h0-?_/f+Wz-WA}]xrS󻴞Q (--cԓDぶ%&qsrvrQ?ƔpJ3@'d=P v(Z]&@XoptnQ ߄z t$,w@JR8 'P !BnQn\˓Զ/Χ ,^lD ^SHst#Sj?`Umxv,9Rg%av2"%S8T =9Z`ïY-.:qgX*pϯ jplc`H@P- MZnkgX@>Н?{F2a/o;GPp" 0[c$;u o69R JeGpU_kkp]Qyg^`/Ln{FF>%( v^&1]؃/gT=l)YЌ+m^unTWUg5{4I;X>57.Qg(ȺPb vf|bp 木l?1/5ȋ"} /p .{Ş(^*Ys g2((_+XӗDpxE!UQlENC|Lggnt\cQC1``6͍9|8K酭1G̊&WY /Ԗᛐy׵BDd˺xJ^$qn7X(3MW>8;ZK)&Q}m-6HZj~ ة٘쁡i1H&o{ϰGM\J>ȠPѷLBe+B_€(Dٙc'R~|̇.ntp }a:Qﭵ [<n9^МLtS,3e7--v=auunb`"S ˠؠ^=&$wR䤳uߩ򏍰aVEq|֊Rka~wBPZd-^@F|u_`,D|E|$P/Smbtb)|T a(;$ ן2C-{_.BI=,(#?_<+XG כ5$h⾱X)ᯰ1BٟnZ! @=8RGLX ke/Y >$f-,B>l' ׏;;AvRԴ %P5_6nr \b3gRŶ4&6~c=DŋӳNnTA[RVJ!.n,v?~_`͆Ds> Dk1IpK!+]iv3yWBBˣ@wz/U}6*1% yA`ͨziDL!-sݷLPڦxܻx5}Zi " e1Eha =8:)>pCZve39D/.ыYr\Jws-ôեoY%῰x!F@a6E ʞ"hI (teg+e'-ٝ]FfܮTu pWx}Z+phfN07\ޣġ*Э.x[x=eSZ֤lhq gkB,y|*!وQJ3 XnD ެucHA<( Y| gE~AԐ&a!W $}.(TDOf} HqĊXZDoEg$wT1@2h5OE()P!a:Ih;7Ú'4kX%:$M~աOQ L%f-h4CW{uDd>mKz_C=ا{qvnq?kY}G!rbNeɃxKބ6 &,0k k&wpik`gKȹhƸE+w. (mP d0;ߘSqkHF7q0$i(/ laf)#z+#"Zc>xa>|No`ZY`ٍxX,k>F'kB|g$p 1y=3 l|ѥR>6{V~LbmJY&~`!N}Л+m/lNG#g )!L.yRQÒϯA<.ŷlTWgpTzd4ke>7Ig+*ռ k;b碑Jtln; tAa*6Gü ucp9Zl}|gh6]ʎqH Lltpc}od XթU>wyȏ.󦱙RNy}:.a 0ݔFI^-dlu˚SOx{q'I+gR;#%Y0Y0' |!/sYB-((:5] @YUbي^z_>-&k`-?(-YYپ޵qOpeLHG0*\TŪ(|*8F?8wg-?Ώi*BzqJ͕hzrGтp?4;M8.DBfQM$/߹Z]`<h~y͒,o.~38n| A3".#A$d;o:ˍY]BnM< T%C< 6]n%\ҎL4΢BaY|<Iy.X^9FP?_7@j惩TTXZSй+F+k:1Ʋ Gr$/ r`8NvO U ҹ>O:t1 s9nK/ "}C; Q 2/@pCtQN,DyjIͅ5'AQM?!<璶D{&]. ,]SoM}u2$!0JRbQVx`V;m3ӑ>pv=rJ+ܼ}eb&"p]80-F\cI)9\;d2ୄ=C"ʚ6.qG7Q[ t0ިF0ϸ1:- )PlDi2bAs& 9L;!#dp?0<?44Vп 'cP-^ \'roX3dTdLj352ZZqV~G.db)lZ긜mXn9kWR6{0w°{f,805+GL\g"Oim '"Ǥvr *8"?wvT@yyQ((۠diohnf;ziw9EjH`17&^_ pRR\d^? X]*q[A`M]ruY |f{M1cAٞELD?(6=ݮ?x$)2Y7&Ӊ> MhNPT/&UȮumtG\,S۫!mZtsA#!eu0{>Q.5"+y0mJ/^h+ (e>qU =0w%+kgr|C﷭1?˴,$Tof,v戡0hJ3eKs^cá\R6=tྉd ج%*<t'fu8a I2Wɑ/]ۺ)oo|Fɢ:Cfdg|V: e l$JUJZۇh./0§ͧ:S=פ(n32w7 S`DXk{IigU\;:^-m{&jb-0ŀ䖡s>ڇ֩Pɞ˿8b-xqŵ 3m:WH2Dwh®iy&0<ˣFUjf ̵4QV;RjH~-u+yv QYp4C8I•Beoü6wt*ΔFP o1DhW^c2AFˌ<V*s 9bu !;ԂSPt$ z^JfpO "7d@2gQAmBH-\{>sm,r͟Ql %}|:VrB!dOԂFwuHg]\_M;7Ex$x92l+[xd"y u5uubLv 9x}k$(c+î_BYFw \ ﵃-s 1_=]]r -Yc>I}QQʴgԛ&kצwS_yZ6m7{^slBf3c1rF?L$s#"ʰH҈ھjO*%(z|hLfdȀMDy>u@SCYa'rߡv@p뉿pVXt=) i*ۆhA3'[.b4R<-+m*zoi@/oz "^Nnp7:\ؕ8Ⱦ/є] bM9C=gՔxx]ѡܟ[:)kDNL?&`/ v4BVܗ8@5x=OPo1fM\TP_C*AYWg:îUPcMc3&Nuh9 s\,3~Q[Q l ۞<1$x w4zwJYprqϹ{P}+-R;=-DgD2Y@` ؾmUڞw;XOdhHŠ0lʧ-ȦFf!;b%0ryjuH)ޕef"FPmFH,h`XA~ewَf5 %#HʹL[( <*Xe$'@f%:PLU IJ@yKu1ϳyJX7@+{!l+l.mz39Òew&ӟ{vd,)#_'G$&k32I۞Ns 9kgqb(D۵Xs2AĊ+!?R*1bý ~^M;aY|o$"#gѣo(*sS4{@ppH*;k@۸(3gh۞q xU]J(,+!>LiB]P6`O R^,#:/KxL'ۢh^Vx%z`UadΈ#K[C T:)X#!t#LwmV1мn{ R5AEx3W1BK|"Œ4&SBGS&v~CKh9yG;{M?L-^i7g$KҜ~hH(GBYdP=?v|RXj.86GIz&\$6PttkBץsil(ׅޭb_%DB+bH1<-^Öm6ԇQBYBRq; ;Sf>7s/;#4f7ԝzA[qhCSd{oV}u2O8$T֍츿A݈3XnYb9 mBTƴRŚkiUci,Uq<8+Y6Kz`̽Z +4l͉Ta=!bC^Z9$5|IxqJ9!9 9[vYZSmʫc{2.<'g8?/xve[;8t$Wtx!m o%ޏc/| ܡ d яL x(4o9 m̖0Lϯqlvנ5* [[Fv }K8RRvGԯ4kJ%)/֎:Bl%EFخ-ENӔ!g 槑~߭i٪ M}ZHU|XMwmce_2n}e̢EQLR5xtbz_ $Mg`RHPm%K;=;>CWMf&Ks}/O:q*u饞cw$ w1qxmGKY@fγϧAk?=X+"GgY`S㣃lX\I["={~K) < 핃dz֬O៶" jZ #Z|Ubem-_j%Мgcg4L)pWQrƒx\8>rX~o2?Dž76I{ hvCެ55_0 d]v*@*s8&2`p$>0sGc bq'EwQGn{5 9$@Űi/Ұ{zV7 R(YV_T 0w!Y:[6N.2%VbufLXDzw(V#"uZ2+unLǛd237D>#$J^xTE,t?GSwKcvmbyK: En"ƢśE#6?>Ř5V3.Tϳe{ʥ̓+<=:Џm"Juf tmU? ~js͟;/T88q+q0wev*{>c{4!H?@[n;n~|!]uL¿ ![ݣa6Q$ Z4x:E@ M}ܵ1.X>mݻk q=F̜`X STR5П>/*,Yh&~Y5lIȚ (oթAPݐb4T[ZuB9a!T#P>Y~vʫ໥L0N17ȭ=TupdrfAʂǒI//}/+M*U U,y ae4-Kzu>=}ZP~aOӭ?^}|r U:# o=Ռ7L.uDs6Ą (.B1JnzP+m3ۀXYw 6}ۄb1W`2L &qNiM@@P:K[{ȭy`4Vbf '`i/fcG\3eOJy% 35,j-"6:^CVrb5!e:<֯BSgb2Ml҈%~tݡ~O|=]&6l@ӭ"q95xpʀG${/Jc4Z+SՊǒT} Y\%C*My*îS;aQ[*w!,By |)ֻ)\:?Q5qLy`zRGU%>sm"Mh8WT(#`i.k79׉^!Y-`)zHB: u:˛..9'_ӧpQqɜMt?^?,ῆXN] Ĺkmkς!e)m8ZwY0¢8%Sh!4ˈn,c|R]_N(2 F6`aSyeU#0/6"?p<$FdIƓ]}USy߸Y u젢pT2彄C#%K7Ep$(P-E)AK\R Âdk1 ߲O`Z2xʭ|PtkLM% L&qjzA .2_V@C_3 tK4FXLί"& TBt˪QLo&$Z~+-Tb䌨- f@ǖ1ynrE"I嶎`Pf$XkjvD`WM@IV(pe#qBg6{$p]a<~+tqN+Se eKjulժHN.1[(g㊲i뮒?vLHϿ4-Qf1\tUP5<~@_dgl_COO (q`^KRsu̿:=Zۉp|TbKzEnnN3 v@}eR,]؁p!gET0#_ j/=Z{v*?t)P_us*3I|mA|L㱱-wͶЕÖZg)7HN d@6\By7$Qr.ktC~TCQG6þi,IV{!P mݟFSal/jn` L-Eehu~;7'?7/VX\Eٯ sv53'KO5U5W3I'"2څ7E}"nk(kӤm#q¡C@e:E1Ew(.SC*J;}Q>K9.kd^ -^_Ս_m@՟goޕ5UI-q~="yzك2Y{)xj}SPЅE"2&I; A#bd @$SIm%sĽ1`ߣW&Ε#SeB K?SxF0$O}bJNLI#?"gi8Q #1Pq@ S CfFڀ ‹i/] f {2[$a*ztjcX b6ONkyX 1wuWQs@Bk;ŠNYD+PCu`هlg# Ñi,0 e'[9&ހ Wݢ}27CIStHg{~@Vzz/$ \9I\|d nym`Uej&Y0y V:4spcGe )]RkӉn%r6sSMzr|}MVG3o_ÄF+~aCm?{Oaö;o4紒sIՕ1H1e!B"MbĮH~=+@vKtIE w5NWfk\cVP]E;$t-e6{'<$T?cV.vJoyGeΖ߲T-]gp@?@%d`[{ p~ 6Kᓲ.aa{/:hx0yA` !oOik{\7AFυa7Zf|MUH`yMGfG`8Zā),ZzNXF^U l~لJCאPle2|,8SeGWrD .^#; OXufr?˰T{F(6Ղ {g'k4Neh]^jownm]ʉY JƨUr0,*>X:[ʰڀ`h 6ejC%[T y[#xƌ}IpG5UY`!z䨭!1͊ҁ>!HMV؉&ט<RZ<-䡡M,W 2N@_;y5`jMȗl%Rr PV4;v?'ݩ 6¶"I5jeȦ%#rV2OvD.o*4TSAz,"&%IFl&;ɸ1o\9겳9`/x݇9WؼesgT50؈ Zƻ=z*w_v(ز|Q ›j p[Д_ۭuDM6{?7fo#O+'Iz2"ђ'(8kK0pbȽĿ~AaA|PPd,Tty/i60?*¯5'\F-: <\V߻\@9[0ݑ-a5im(QC2ͩ.ͨ82 r۪f5NkDqt=RiBX\q^HmmF#Etx,=N//TܒMR^F1ʂmRŴ O}co-6.42쐤y&d$pb Z>?B/n`”zS.}+`G>(HcjX[nK UKZ\7"34 cSmH5ٟE5˱Эe?vkqGw h-`vE=3z|^Hp<`(Z%P- *HT!\ 1p-~,YbmX.Lǂctކ2M 16]17jQ5uJQ@qF@ʟ8O^ H''8,-¼X: pR1ţ0Y%.7?ɐxBts1stRŹ^M !:TV]f\Smo2 :BJmnedۧa7;狀^G @+ފvL@!3ZkTHi?\pJbYd54Lݓȳ4u?m_r mO]nv`V0_w_ #U+Q-ӕK%78Sή(.q3٢ۅEa qb5oSŗpTJ8VREMv$/m@3B=V>0a݂+=%]Qܕy7z0't!b -i҄1LSRcgcvҜCh{$Tqb/{"A*MP?G~5C!0\g66^Př1Aw0{ht/_Gh3+ލ2M5!TScpQKkE Omgs_d+'s-$\/CrxX!5Du o LV&xہGuwZiaJ/~u]? \Q Sy?ceI=]Q[D:>>FJr,Ivξ%fTw*?$>0fYEz q%_a 1NkV^ɞ偓J1"~+.PKvKthW+L-+3wߵ`FI tz PJnFֻZ0>0 w:&ǵMm}U2A,A7a=0*}Pc4|2vR!1J)Q^gvHhոBApSkSO,÷j@b c|xhLnaiВ{VԱj0;L;&\\c̅Nڴ8!~Tgt[=ϙ`Ko0A TD duUq^y&qC|iYk ė; fȣ=EˁƸ e}>l7eOv;!M ffbv𹚭0T=2m w 2pREz#Cyw$ZR0m2u6;vV<6͗p[KFF *P_|jDƃՉmDUx۹|1!ۘi PR3xӎCj:t6OqM 8 bZ'dc6ڢye Hl2OL ĥOHI9Ex{I$"B+3x#Ie;7 d}4E&ne 99Vک3lڪf`&QW( _ŞY>;kć=Q$4Dw>f+ܻ(k`ANU;flL~ֹbXcH'Y[jH9)9+r}Q=okiB"x@Bzua?]̲0", :#T{zRpE z QF%rW0B~S쭣ҕɡe85,jAޡ{/cngA_wF<= &Dq]Bχa^vR _mjwx7JXd"ȶξ~`buu[]Kt'WtNC<W}*1[j|M-҆8A ]bag{: D!oe&BJXB_,7K6ƪz~[1R1|*lJMB7݃C氨 _{yN 1J:DaGzq;LZ0k{m;t pM\z9E~hV3C#& ^}7<Tm6>|QL2B|V%?Fќh/ Eב0Ea+If[{~|jkbRbR6&yW@fԗ9eL {]Pnf_y!5y >lvˢ+ ovJ,;X?Xk.JdO[ֳl7xPO.]@I=0~1:|Bgt3|`?d8 W7O+ N7RPFYÿ ]Tf/4NVCcyalm^] Q|{5X-g; ]9 .n2i]Lv΄L%V֗eקjrjEc$jc*>igJ)(,7U˂(^%_sM$k[pJHIں,:q::X~TJeqb'd*hyYLB@_ ssbj,|GF-5 oں_Hmd -kV ,UBgL 5CޟGj9_3)қ|I~,5SMX*dd0E#eH1 ř2uCڜwɜ~ȨT0ZT@ .͢Ga#|[ &(UZshD5 # g s&E0!n}Ew3It@F)0;.Җ̗>i}nBo$+G#ab}mm'HHoAorSY;k&{@Nt, 1*F?6ic& Kzb%$agwkYx'ͯQ3hCOٯTz]Mvy'# ; W-z=,$AJşV)uez@"(qU›i]9r&r9(,2{d=t8,XjS!!5QycRZ mE(鰢XiX{?2ө+Yo9m݁ dt)vyU:ۂ.CSg);%<]cwXO€"IxI7uSYI@Ѧy2sɻH'fqoGӥ|v,h#>Jƒ8&PB`dP4zJG\}8QF7-TO EFsffsu .ѿh22PM; ]y;SK3Yf/ygJgYuk QW| ?oþRqKh5c_惆uU PPkVxQlnK$\搚SBT2jLhpM㿆MaJM&| N4A/*=(*{Cp3I(< y)}C̚~BPVOX[]M-7ռ/˔d$,[U~<-'{O 򥦰rzD\؁J[>.cUہ7YmﶜJ3ѹD+T Q!m>d2OT8G('P)ɟT:(>J{_$ j W3OKQE@v K@;R+=o6Q>XFQS-7~0Ƀe?G=Ӏ!BGJcCgJB֔>n.;)!Px!鉒:6oIXrf EO7ipnOڂtqÁN@05°@@KB7 BMdn1_ ,==]$zVI:p1Z5{_8310$c baذSbiVr{?DB lb[mI3쐻BX:ԍ2/v:XWhBhnf }&K5F|>XXnK[w,H$\X%6d#FqݏM,_e:!B++.UXAJl#fё!{@ ٛc' :=)!bXѭhE[to.ʅ';<JJ)[$,lԝ}֔7sD@AHq+o[Q8+ӸQYD= Ch0 cNޒ?N0) [(Xg05&(B],?zkӫ UIi'cW퇆Q*D[ J ^|N ʊV9|!bKfH}\cCQUH({dm2#h6*/j*f,REkl 4@?m7 BVG!k 9ߚ/Vb~P ̡c0]U rɜC:"\\kQia NNY/d2qu6ǃ2 ߴgQ4-xƠ+ -Ex?dXl8YͽgF7 nGǤmKg"\,9 CW&l' ןih:ẨjUcB5qu[$<,&hnj []~(?Šˍ"8IlYXGX.eN~|7MEOGڔ(3 ܽ:ET`$2:.2|J d.u>_QeӋ5YxB yMU1:hnFiiݯ0>|:)=E?8Dx#?psҏFiNHI76 Ӽg2vjT)M0 }4)sXʅo[(h<1Tl4i4Bm2Љob[cS[8Sҋ 8OHE)\*rY`!}u.4aP}!me7)< ǃkzc儯=H:ͺ;AZ]ҎF.W:& RTXfO҃+cZMG9~Pd:9\b,^W.ʾhu20ab/WEFӯjщ.pQ|]MASNiQSoއ&/'Xw820jm`{?4,hplO9V:3cUjϳ[~IF# a2:jSLCx|P.~#% Qm0Ǎa+0#zuB!inN?7#۹@ wF!OWIPh2tw (PD i9pO§G> !e$<ڕ1K<9ָUNG]GRO(q,}wA8ڄ`]D(FTN]49͠H#MΉd77BXFlX`_3JMJ+`@@CFj-~T7pG5[].LY>,f6}3vrmI 3%Ԙ~iw"[ɰ)GkiFċ$L̡V1#O`SW4؍tdzW}W`4u4-3KNp#m]/[^'Np* l-eH*lX<LW7}1Y:l#h2iۃYƱ5߹Y->\iԉ4{j '1WH(e!h(?4D7( 1Z˘ 66K5YN=,I!w;kX?h ęT =zDWIK쓌w76KAVv|E_y:;v!9@=AF6>DTPFH#*21sEY?ALݗ4ͅ(L3Bٱʇ%*%[0[-"H0 vebqb*ZAþe`լs+~ mŀy d.SQB7ی]}=X)mXKҿjU}Dd `>(7(mclJ/PI%|~ҙg r2Km Γ eQ_W#h!V#mn(?:-l$׼I. jlwx$RM͂fG7F]\(Z)9th d_``3? \_|8/{υP(Lوru if2[, Odұ3f|$b+x8.Ap16LҬc6LD+G&JC6SCMt':O9_ pnj"=T,|Ⱥ&q7V`!DiGĔu<[S7Z05nx~A깾CK 5">?8w1Z+Xb08zw"YSv#vi~!CN46oJ&EʚN6DZpaNܤ3QM>q x_4u Z7- n)-'E݉),J=E%F*C`BC6ÉMg|ޟt"9s9`0+8w$##>)K+_t&HߘmЮܣ7O Aynb`'w=⮱PZoe >Uiq[ >-iؠoXHނ?tGknN` t[RWco،É.hjH|Z"//J!~Gw8,6Wb|au<oQq O4z^Z$e[R6TJj5Ve!=Q e $7wb>1f%^IiV6"0?ҦJܩ&'*EbzMK8}1HHZ'r#Z71;F׮gj`ѳKp+bIetEY}xǂE*lVs; q~6ߔU b(1S\_dNY@H璩=RsGxG1]Vp){,a;U}nY||F%籁Owa7}B9֍ߦҞXsmZ^`cCh7s{~*![le;PiM~pH)&*";{-3yCbh/)?FoDa lzkbpo5's4U6l ۆdwhnX!V7a]kB ^"\F'ep56dxULkkܴ(E|7Usu&Je8wKO  w%E| **DlVZX!_J,u{G+ >D_ei666X7#1/Yz5ePІYE|tQeu7JV?NqQ%ElvXL:Ny[ F'OXOF(0v8qgwX~&EKf $>)7~pj Sl,7߰T`s)ï*5+]*cajW#AYrWrvR?-)Q;IoJǨcDj~uN.{fhqDqEGA| Lkb@zL+vo jIC'ԅBb |s_-mFS %V :T%wp'Q8dTDoVo}vj17|<,e2acsQ6.ju}ڤdK }IuDw5k@_ Ip 'ԇ@:.GRayD*A̙I8X+#,CQdHMDcPa.i/Ekt"\@H3"Vh3]Xс>^FnG͛ž}sၟƫr t=Q״.g88r, wkΙ5")֔~`X.-1CMŎ*MnoD~l[P8unwFA# Y5‰YyHDT*%.j}k< a']3`Zs*)52,ӡy͟лiͦ~|Sz>:<,i jC5.5 _|^;< h @>+{JH}3$L$0R2[K92⊜$Rc6)@d$ T#ſ ~Q ,^"q ߄AT? M2Jh*]Кm0z=FG`4Yپ9\Yaߙ餴i$qN;A.v ät)~'>fR֠ bU |J5Y b4||ĊW~xnjRE]-ྶ<`Z[_U |1^[)wDq\aY]l㭰4`'v'6WZ$3b w 5Bd]߱xOB5'nѳs/? use5jVUfoK2~lbSyaP7XiI1)ɦ+YZk@dlY%DэuB#%<E b׫I ` E#9qԇяi KҮ!;!D*mCb4s+^MCQooTN=I"1'oJd79Fa%H:Z2/(we+%M}16ׯz͆٦y̟tr9؆l8JQr{q7#VXUv$L,!x9N. Y@.??ŮFLA襘q"+8z-ߗM :@iNƌ"͸d;)N׋E+}tڣҮO^Mw]ݹxYznnoz{!|3iQ]nIMFWָ kgЛʩ'nE$䃼tSXzz+p>Ty[e(Af^ceZZdތqa~Hr瑆@?M0g#O@ $6lHƽz}ʅ\rOHso0pJҎnH=-8O B NO{Gv]˰"e" TY;Nmc7EUp^Tmmz௭TyDM3穒t >نM"c{<-!S2d EUN c?_1$ZMB[s _xA _oXue 3?OsA3^y[iGai"TÎ/HjѢ FHW3Hn~Ibq*i1Z{;hι m\x&U\ {eY_%u؋(D&/@G`u"=w^I4nƎD: DaćWO1iYfGҚQbR7FO^d͝ߢۣA GL0O]ȃ*X;H1a+cblv^cnjA=rl ztI =K2z"Y5',;ɪh.ygo@ 5q-K&~w!4~TR]Z  T6x橔1g <<]O}$-֬_0ȘNnwOW1:J;<8cW|OҘYlzdN@Eh3uwxCG bk3c<{jD39rxtLyqu]쨴}oOwiWRmx5j}qN lWvFA]?pӋn)I>_|udiHH;6qi83zw%0qΛ- 2oC]0ZPJjVBle#L75]U )us ,vc'N` ppEp&s"\_煉ԍ]ZF w1Di%wv  %ֈ?4t^0eq# [Dy R/@J@7܏wGRHH>۫8W~nM.QvrIpy2IBG13G~>(,~~B[o,/h4 yiOXď=_bh8=߰ztV:guw%6)u~Q9ֶY (g {*ØC} k- bO ,tj8uS6o{Fۼ9g, u( NSiL"s/.=s፾/T̀Ib)w>3Zk }t;gpy-?.tU= /5@C.6]RnƂqM~_'nO0>EΰlbzO.k1(Oo1*ꢮ UM*'T P f a & P 1ydM xCK@\&%JWu1s6Б7Zs4:^\zϷ#>>5 ҇бՂH5dewDV[k\JYMnPm.x,7`L!ށr ֻqvѢ:y'Uahq,g#M:qt^fRu{SikR !M~ð`V4ۧ4.Z?şkV}X"p;[`)ufTe@癤j%o<\* ǚCSxbvg=Y*ck3gӃ^uMJ~[~ύZVWگq kڐ'}90u3L{`6.@idj'tלYp'Q l_>X\+BZyi.J};JqǨJXMtc)!WN Zpz 4V1Mqأm+1S^Rr=p_Ͻkҹ~h!fvl}'* F,{ ըlChPʴB1&怚1dly2$8#eP f`3a4fjz@q15XAQJ!mTtxMً5 0(OL0-S;f}u > "c գIұ_5_-4̀!E)d:Jd;ɘݮ K^0ڴӛ#e}ƕ(ǤH`OCp=[_Oöģ׾Y݈ ͼ qMeK%)83SY0߾[CKw?‚}oL^ZwIpԙ):˷Pb\IpN>)RYWorfB!@GgN gm7\g=GrPQwo'dgO@RR3kbV5@:$]f@\++=ȑڙ1FuP =JR|aZɱ("_ϝF4qUGIk+YMGCQP+C{@>%X-[Sla5ٳ^QqۖY 23ղnsCū; Ы >Q-|* }D!>ž>Rz4^{>1Ѿpp@H@@l,LA[A:\@_Iwi!AM&?$tҀPD e 4L :{.fҒoe(4 BOUJ-4_nUKwPCs5 ۹.?e^(215Wi#mheX58<y gRE!s$c_%Sfc;z]]Z)Q kJَ#=>A؎Ct8W;}^cl;{@ȵB}v9lJuGW;tuC!¬y*X4r!pHq*88.} >D?#*迴s"v0X#;$TBBr6> ]T3f+@!bCgUqX:G\6w9`dL`ĈN.,=pdE(ўop?~,8 PrМ2}<5sP\*`Y0}e5wq`A&ALyATkb}n l3,Hǔ*K[ò9i~^Pi(~pLc8.iX&8sK" xcEWQhK#Bcu8'q~Wڽd)X< 5c=51R3bUׅƣp%5<>ss\b]j8 iQЂOp- X\7L3xDi TCH=DYMd\VUZ m󿴗uౕtN21аlۺT`o|/5Dd}OGv5Ez\tvi톙`N }GW/נsY|]IN!1t4|MbQЍ41ffSL1釙pY}cQkD=ҭҤ#j"Z0/tcKst"VU0oʘЇ9 /rΡ}qUyYl8W 6~T?,QSҗVY>5SyXR(C-4sŬqрh_uܖ8"o5c[RNMk,Cvjم~:;0RXJ-ƃ+TnwKg ×UN MgY),=%6ߚzUDh_jAݯVvG]CWnfՏ5A?\fWKAޏ _c" ,rn3q% ׹VO' N'ө.Ăg%4P%_a% móݚq֡B۪x ǿgNXrwʽ F_ fiFmM¦) k(ޢ2ر\{,I =(J~|iͅ# B 8›S}]pț.ѕa`\\StX?( Rt5,3|U By~褦<[py4.%d/pVl_L'sR,]MxIxklå̶S0535%#dP ^LpvR`ke`uŜ`/ypY+W~%)k}y2s$ _*Xn %hL=l;i\aЌۇע={HZ6r~n;m/=$ Xd @[ܛV: nz5aU3n4z~јJO,˯_|T[ Z @X3bH;$|Wq4Fbznkؕ0Kc"4ga`|`oc1ہ:si}vI#MoPy麬V)73v&{80]b_-]f׸onԕ; H9W8yJSDҮ=cL?zye0BVIAѰ]缻1\-J_1-`hr d}UJUq|ʧҾ+qˢ-1Wy9첍f<6y|?_ 2?u۶a VUwUƀ9+اE*,$}+v=xQ8 R۴bAS#/O{(-g5 cZsN t-t˵Kj,ZxPw=:LD!5tUl$'d`tJbes7 /sVܨVic=X] Opa ˒xO9UѸ ^C=z]x,Qqat=6H\A[rIǂj^4vlղ{4WK=ҙ2At9jPR~;s 0qB̠ݨm=^:FOWj =^ǡhĖ]p?c84`&$jM HV (0~nDM-PQab5oM +QϚ*4x2 L_`yQPn}pjL~s__\TESGrOX14V?U"CmGnJRuV&sdwZ, Gz :|{ϫF,[]3mDO}iN[+#<6#M)цvrH tlq:IeT<02w[0LHM;oUS+kp.fiCwES^PE^gIY&|v+pw2:QB.1nxjghܓufC,b UQꍑp(e[#M+;N8M\v_լG6{XBg^J*Y3!Zjs7JfcHXٷ!m>т.lj~~vldҴ4)@ E?g^A=k:*3 {n'3vL$" pTr Y۷/6 ZP10Q)*\B8Xպ4^,)HDPWbJ,H+&_TuË/&W)<=@-'~lӓ5$B0wFeuuh|Q%sm` ),@-dDUʾk@J {NR 8_S@H ;IQ1EPP/mU-{\;&m_-~h͎_G] -~ux˝՛19QڷKQzr~0:揜v2M. NWIMmOh˖/v+Xqi%NCGx >dr >JO8VBT)MouB[Ij*O)dd?V{AW%$&J>ِmlYnƱPZB~Y,!(T5R`(HM쮈"I YW֚7uZlMh|';}(Fy)&O}7}&qtŸͥWWRf$SWucxA*vCj+.k Rd7H$hF ?b[܃&;h0_jx`\\|+ԛ+^2f2_.ѲUCg\l'n:}wə}B𚇎LBTa aOg9*@KeHV`YQg  &b(@v.{U •oNIx7k{-ܪ뺙ֹ6 `}](^yzq(Q9yIG)}l*/$K\>-JK0iy$Q-^LQf ĵӓj9ZEn2XV k5+9N]`n$҆]rGEMV)%z!i! oKqnyG5Dj=CaHlXBw7">]~ujT^߹( *NR4_}CtݱOD;D~ҍov %`}O6u%Z#{bY=CKpMFBx b!y?f%EC{nv"WWqF+S(#Uek{.`~x=d̄@9q^?"Fn{=j>[1EtaL2pmuF &_ik!2Ooe>|MtFS5/NƲ Z+E7̃2kHN IQ]뻾s.3p>Mk/NJ9 eH7yؗp_F Ub̩~/[kb1yw ] >0qGdqZ:_IS`S~LI(?\3W^۰"?Ay<9%NWeEO9]ԍp0Wԝ=V4gvvJ^.' !v ij\9 rqu^Pr>Muy*R%%ذyq0RgU"#9: F5k \ VqpC>֏HS| 8ҡmf7$y ZWk&f\/Q*r$d:Srx~5N#O}+?Z>դw34IozjbP.֜F/ЩBNW%EQӉUMrF1v˯iqC4OVe|d852<AnZjW^=k'C~j{c{f5wTt$4'B11di$Svb%S0v:ͥ\.l/eqR:IJ O.Fe<1+ 24׋Ž_\W :odM$}:vu1QSF"hdέ,LE*G@:̣IW䂓\#g`2onyFʹ"8'tfXɯ1 Y@fkDEa2FW˘!_ ? _)Oo(? |ժ*f$&R&\Uczvg=A1 n:NMO-z׿OB Khf(pl$PLO΄rm\RIJB dS4DKƇ Wz$I=SwHQex.B/ɜdCn A= {t/ P^MA lK,Yç02տ/jc舍{%R6,/Ы17S0$鐎A#q4vhzi;FKlt;0L rZ j mB>Z0=}^5W 7AH)Yoap$t"AIˏ)!r3%/a}ɐe- _Zp5eľ19kx-Pg$)I 4ӗ᫲x~?%$P!%Is6 Xl۫XܔP/3`R4-!h5oqfjk N)چ͐Lx)ɳqgR?Eg7`@ Nѿ94v)gܵ.9: fxTWmCA^Bu$fՖOfۗ֠H'ªl6ES)o܈䬿{;e2ẓ{Tp^CQD\VVovC[L)a}mFU뛕Brrz݂< v~HEu88=Kwz:09U]K1Q%@sO'[}8Y1c,)~hL\&S.j9=iծwqf:j/iIf?>o&O7Iג@llI٭f9 '|("3E2oӜ}5ń:@FҖ"ah>Jh&fʞ)I7ip[%k&7Mqp2^ݷ$i$vH\TM*^5q;-|{0@FT/94Mۦ!+K_pas"=;pcAo`zAWsE^n"+ Pdj2FVݥ e> yl;i%j}TUűuZ'w_xttVi78dE_ Wl}K*m|~Ybֶ7ʮeE ׽͍G3\G;r0sߤAevðW1/ C/.4SɀkOp]߄Vs7͘C>i[mtyy? JwzSwC˔ӳ*FGP"Q~ł"DΙՒG?'%Xy-Vd@W!PQҀC  ~)ʹ% 9ڕ0A߼7eB>?J#?̰R78wBu4tuoJ+vꩴ{Sy!&+Z;TDIG:,nwhuؘK&vjl{ᙠ!>#NFto hTDv[c2thf" S7t!%9Z<2`=oۑt~@`sONqPΙLδXȦ8"el^\4+O&v$*r\W¢/v-i 2U!>-߳.:[_%o.PƊv¡.i=LyK0^5t>7d3r=HI 0CRRbޯ4d[q?e+̖qo R"ոXzHG8p/q8݂˖A^]V$(ߧ)zK/*,|FQm70S=WMA#ӋYR˗Kg:-p;EW(=6-1Cs vl*1E6!Ys;-b6Ӳ}C*P| B"`dXښ# ny&ߙj1>%|^` }-ŽWn8O61m C%N\,vHF2(- V:iZsʂcAĦOЧL3_4~~OaPT^G86xj+DT;`@ђL\N H:5O*c% sr!Y!V%8a ZͱHgyv JJ.",uU Y [u$*ff,+SU}Gۣlĉ9ᴨN!|]4irSbD~50T:nyROU#-|_VG k>_|k7E_Fmה6bWf!(,.tu$H,zjpHBq&5.ԭVi@a dr~!>;ZA D9fJ Ѫw7S0JgKm}l8tƌJ#p" qָF}N+2ޠT^3*^7+I6;he4VSh/>A8TB@ ˵Hޜkx h̑G /quƯRZ0n%o~PJ}1zBt%ݵ^W8wS7ӄCܷ}n.74/># ChRBWs|`SVxD ?ePxn~`'&Y^_ҮAfv<<] m_ꈸQ g7u"3tdFYRv#QgAg&6:+GơKȋT E`ua2b σcgn~+,[={ʑbԫ)h64Eo\Ξi{D/2?x.5bh#ư)?ѣ$cSYcЀ,DOacd0p~MV5qjMs.KKrTgA Ġ5zU`4 ֥l8ZW"#tR-9VQ_U)7kzSc(Aꆪf8{Cxsr&n^i@tmm_>4*u~*sLPe#3d哦qmKh6#O\?ʭP> gYQL<m0ib h "-1zjxQ|tk5Jx3$YBF/Feş3UK,OVY.UCWfa@` `B"{?v8%:U>`Wͮ0uŎHH`PuRoDЩP^AbÊa﯇՞u¤,ʿuf!8!a5e;&]'}%O( vaT ܐGkqgyoQi 'h̨ ѣa4=ǰm~AL" \e\¹Y 3I)aiuWo/\2ZDve]&>+ң5ַ 0 1j>ʅM[ [fm H*07% CI+`KlZmF*[75#LŘfިròG'QY 0,c)p:QP 䏉z*`@%YZNF6_?%M7<؞aMߌvmhf`\@o|QҥLJMZй$*~9LDthx-˶xkCV{ҝu|SO`~$ꉄK|MF>B \DkcEY~$}ۃ9tf;ʫe$)pWR2xXKg^Vd- uFI4CO MM\|y,LQp_fofڔ K,S&MyErygi6v9>]f@Rez$%W.ȞI(0E~҆50ިUįYWMs~#m`"ocǘ ʟQ^ODfS Q2 Ui )Gm' R&+rrgOjU*WdlMxJUl`GsH6z]) c|)wh&ZXC&-0_A-6L_(XuO=ObNy-f4vH5}ϗ\ƵȁAuP6oX%(I":O$"IBmVuj6%gjjT>2ߝi(h!]A6z+b֫ӳo]/VM^Fmz48zVY,I@iђ~=.[T8d{ 7zڒ,ҮiMLnѿfk߈ xJT#鵂9 )_+XGP S'J*ӝ0gGt6S9r9<|#;L`]WU9|=/ؠ2YC bhbuHm jBĎxu0r|FHLNaLo;:BISc%@`3ܱݭʤԲf2٪YFPww@P+I tYf<]yc2:XZ٧8嫩" h{E=y$IAc#Y5ik] 7ޜ hGlU6waG6]Ԗ -gWN%=杭)OS3* j B/*I_SF Wm`m9J*AԊ?ݐY ?;h&zyD`Q=p6xԄ#n&_XW9.j*OvǡfC6ros6}"ob5fxѩՙm WVW'߈OHs)%.h$ CS^o5,RkQ!8%\xؕNf@cKEj!2K\aG%iOXڬ>j9FOMS[_d*Og74P 2.FPc`7W2W@kH"{_ QX~*^w g̫j}Pk4/ċ0lKՊSq[u@Ig觠!LTM%5`K=c@d>ؾ398fޮ>n=NalTMAܐJp}¹Pn!H5 BQM Dj?<%z hҌۙ7"Cu$HV!!(0#F)XL-ղ CpTO&>,̠ ^׾6EXn EJlwG3-&1`.SXUCx$QdGSbÄڙȕ=9N zږ{nNh{CbnHH2AеFoV]`llKft{U|z(E+g|m_wy_IBjncy0`]8!R湨~5 Aa A|"T_2uùmsZ|2|AP:b ֑.PĢ9R\%t.<-ph9IIeeկsKyW`I6)-EƧW[]-Z򄰮˜?n.P#Wu#4˯4v b}/ %E:m{N#% t.gxaCef,j)Q̧l90I`7/$|̡n- ŧr*֛~IN@H}<&tAH-yʉ 7Y `T,7N}6d ΃{$lH0R+@|:^kcOF;cҵ )SgYyoҲK"wPJŽ րjZB g¡.ZxǎqdXbUk&{~h_e644]-i  иg'rm#L׏$uA ?3Ɩ#\ނkB:{zt~d {"R5}_:xVA*4Bf-cgn:hJ62.OR٬3C| )XuIߢӅ&y]_lIRuL[T0ҊEra9$1'᪴A= R".ݰVݾWYҒ8qiby)GtTj$tTqšt>+M;y(`Gn(i2`_B UU|z_Xu6 pQ)SES3@Ybdc M4|Ka#÷DNRci>B|IC>KOH=gm%-;F]ŴCmpO2%]T`]6ǚq;icReӘC#ၚl&*^ R:?f5t#tĬ7C9&ǂ8]Ц/gdb11ƸPht:0l6ʷv}ӛ$hHND)򟫠ҔFt%:[@!/'w~`kk.فC].@=D^=Pol=&|WCyg̒T;f~-Zvq`?logG(epפM^Wf{Qr2V،uȜoo@2w@s*#rfй"oLeT9>4O{*;$pg\ՠ@ *#>!$U8 bo(:=dyO5,hQƳH *MU1pq̙\iP] r-lmU4 r]0Pϲ!X`=*N}5"hϙ }s=_9"7aᡜų#**s6ݽc6Ep+~0H(!:lFY;۞y~-@0*y=ysgu&נ1&;aV4D10ER-M5kԬ|xpe'2H8T;֛/sXE%zҼ\;_8I )؉ǎmA j+k砧ؿOA0ޭC*LI}y1* /2&Bbս͙S}O5&K9W𾮸 {-5)}>k5q0z\ow }[LUbxH !d>sw r9je_ }ϯPhq\>-zonm_ZȼR2KZ+9#6'GP|Cy{^8 wE(ߵGbAܾj܆4ΉOyDrW xT?-πx[*YQt7&䊦5ۛt&<*qőscf(CDs!,;p.'RzdbgqڈC!ɑ;7Γ%S@h? FSQsY=*vX!t() [09_Ax.bNm<&Jo"A;6.wid Cdl#D;ɮdh`Չ-%U#[FG*hY>3d +v9V|*yJjdVpG)_0-TytJ~?wy8R{&Ԙ3 p-f'ƗZ(2@ePޚYlyIEIdVg0k ^pjwP܇Ηe 7Csrg_JU&uGh%]e6 < 4=ڽy ll3uH-e,$J7lj:,JSM m _a``o\Z5{ڶ|7w7Ђ$ ms _[~vP{U9I O?פQ"I 8ׁC%l^Kr0B`%i]S\ pGz+3q‡@1wX3D}>j~dce |` pD\~F LETD $`cЯKXU{\7­D 9*nwöƩ;&t)IOs'll7q8!|C,g{s!p_6#FtLѽVR/XNilt*=gb_I23|@m+^;Bϑ;1EC ݴnQ?:/Prn)Oi6F'H%qx|ъ}"^ZikABne\W5'1=\ĊXhĽ\G:hsnu{JdYh:O; l9M,ܰ)*#YO(0b㤓kWDw&u 1yǫ̆<  Kv[:|okeI\s! {ٷ vӢ[Z#{eZh]j-x=։rj]|gڡ7k;xJmA&Ty /дw&3{F} q^.eGOQ= .o/(X٣2,)BP4![e^)$ ES僠7 ^_ZH̬¯ONSL&4[Z_yCFpzJmii`))"˻ϻKڟq CXVPy`ZIeɊhX0#~&8 U9@0h_JVṍՒ<[0u˃|q9d6-E:.~jOR>øtR7o&̻t]sJȦ[ނJw ]@AuR.4WS#=U*ؿy/eл Ou!2YOSwJёm %M`^㯗otn4OtkuZ p&_JhDU 軝̐5qQfĮ]ULXG)e 1ͼЍ"p#ZUr/{mjB+*8T /PjEeFғM٠6N%q^/:P5B J"\,w92< x,_2chKK!}[`7:޶=-xJ) W7v[? .³v'9l:se+mCVS)q sn}-%f4m=S:[E1$LUT:pwq+<$P;ׁ`?A93#<&k+? m ,nP%+vٞvH Os2,c.#ҁ==>6T`:TS|u-ŐP}M}N5uO:tE7J qBr"Lb.5i:5I_RІ` -T\g-'Eܶ5]tO= @=R-Մ)g |W?ʄlW 8@6xf N^ Ib+WZ@;Jߓ_h'bs+gnIjI87ѡKY@Qm_=(etV)r GM6_-4hu|}GAQōYϛ2A.Ix--@7Dp"LrT^Y-k3;w>XfMT|ȜsT7h0Lַz :_ c#&J=4ۥyeф S]$u}LH"`wsUrXƦ0Su='Wo7a* MEm(j:<.Oax6-y0*qPE 1gØ9Y:1AgoesΘuS`@kF[0%`jéf༧NHJTxoE1zZRjUlu.?X(X]+L-C>C{ӍZxji'xHnmo;Ks{n ƗĘW6FA j;sdmEM7Ov )g6d2BB/ YpAg[Mi͙+xwϤ8٨/;#@{v9ZUgQgW.Bu<:iE.n$~1 ;׸H!s<…nRYkAD,qJ7MsC%gnKt Wjk]9jw 6r-bF+3x(|+<@5B f\ZV.rAe<i5&j\JGl5,fC`mvFM1r) L2y T,ed{qFVHMFc,Rg5awJ*Qؒ"| R ʳz%Y"XB<R#lEzxzrN D,*¼/ 3چ#l=~ߩOWϢ3{_pOC,C:⵲?,O?*IpPnvܩU=)&sv8G!KvNN,VlalU?2 Lgl[р:­Sh. /K->7O8Q/:W-G2h̰an^)K<ug^UnmGȾ&BɯfiF*">Γ,Q8fbҋtVam_ nS6#g9XƜA/L^J5*C^v=8Xܗ"MHx=z^5 !""uEWC.GrR臯D[JRKH0z.M z2k ub\?,: vflĈK8A8%o8@bU`ޭo jxG1^;CW_cU&?O DWCVglZȲaHFg<} K[C٭F ܺ jT|sDSP=@K$ EpCTIKV.Pe6܅ɜƿlvtd #)oіM#y:f,σ_mjo9S(>"+H ]P?j>cJ0h~I =xK b޻<$W f % a u#Xlҍ٥fRLN#=ֹ%&a!sfO 56m]uS {DQ Q6Q7[c9G` -{A C=l<Y>p+3<u$mKN.#jRMŜ'T?Dž־&+vU17,Ng)6{l6F 9~\n Y~C򟙲ߵaHD5Zm! $Qqj$[u&W@&UDafMdj6s 7ޢ&4{稔Z7ZjDK/2!yb&_l*;ոd{"pqzݺC#2ЏZߔuV9k6v%xϘ⣖#ڭJ/N06ܡkKrf&FR2w MVf4qX%vHq?3-2c4[ު !M~+9sPWhPM0.q ^­$GCmX)jV{8R 2ӯZ8˽mZlN-\1T&FsBtiT-Ԅ%s(B<X"А `8&VfB[iRTEnjꊷ+Riz?#iCckM4פTqB՗m  dʸL;.~G@gXz2И8sG٥ )8t^/Q߹5 oO[@9m5e5.c7o7W"29:VhghB URj;B&u[(g,|/O0EϽltEs/!v\>?/ JٝJ`>VOd N/wdQxYj)erǫo=đRH?FPدb1oA}$s#l|R ſx(/(b/Qr‹.ńD,,yB׎db ,T˸F͑oï8廅CZe7+,nh(0^h/ ]LEx.\!%1VI4F& vP:2Do#/{z%Ȱ.%y]o},;[??;(smg&?LSlaS3%t}Q رhMS0l?1+V_}Kg]oi٧.I'|ZF? {{'}7pzCЍ`1¶ c_:VV9UDz4 (3,n;:ryci8,lK˙cw@E%&ޤs3_DŽcvW-){81ք"ۗGG5eVN5qUnA *RzOG19Xw!9NΗ cQz("dv-F8g]^F_1_ԆNk`i<:$M~`6W}3wa LKzG[s-<=@&y"≇0Yv~%'E=0 ˷ 1-0taLt8>=c"~Ú#.xKa1U>>+XIkF C]c(!<(DX_[A*Τ+KԌ_LhU-ħ\c15R=o@h+LLy 1f k>oʶaXP_F2]6.1W֭I;*NJJ8pZ<9/DӁvRgq% s:J+WLyr v}F =p5yN݃T$}<38חZk?;1&-bd!b⍧K:G$wbSj}IK~B  ]9Ƌe横B2J1 >ʢvhөtQD!ҝ 3z +-y"X95cfQ?d(9dWG圚/I*d]+1w8a-y ݈gqwC Lہn, (bAW7Kv pUrٺmA KE9Zv˰B/T)*%޵F|*(mrt vR~" vLC=i{JuC9k*Uٞ5'Z!f wfБ٫GM3Zxd¤Iw[tMcLgޑrYehׁQ.%RY:\;,nQӊ* F(!xr|MB0zZPXd"FSđ!aE8=m@/s g.J}<ވ/À,ϟ3^LcRIaƝ>%VxJHI5q8' Ӫ-*ҍF4Vtߣ OQ>x)<*IܫSIC2^N&voqUӸZy3` -g> ~T0Z5QR%/lc٦LG+q*β;!*4!oD|#ѓOI}fy#VN>NJGDمq?MJٌUoQ%\`i%_ZE Hd|X-Mݭۜؒ߸lEI vr@ZhPݽ^q 80fз]Ji}RԟР=4'q_{ͭTIփJpb#PXSRI32|@~ϻn]ñ*p8:F6gǵdKq <‚vS[z0P5r; .P[ǝ̯ oҴo܏:]PˮY& זS/w"~J!6~g{oZ, 3d u&"Gɑԩ(KrWJx:ң@g 4AQ rBB_#R["D.B}A9ݥJ2VEp. Jw]DKG{*]Zy%^O\%xNAZa]ZG(Z>$-)WjBq+j FzWijV#/⵲,/*p@v\'0jBL< )Xc+bQװƖ"?JX(^"nAs%]s̺pƋesvVoElwc#h=nH`ybB'P^&u 5`7zx[6O ջw]_T4*N>E,Qdkaw4O{^wH cKqQe;"5፵pCTK$:DI"O=[|ł+ϼ6Wɠ`NΐI=J(88?IH),WGDefw6^]mz hNSM2ޞjpO-! >Zoxw.f3L&Xb5PO'A`줿M χީ\b:;lyѷwC Twy~0l0pu-U7\ɖ Cw!a*.kjwpzH.YQ} (YF01Ġ=^٪xc?G%,8>z)m o#%#ze1plCK-eZpy\U9PR`kXz/5p&pV|_Pԃ~(j.s}HtP;yP"J ޝcz1`+n!ElzJ'z vJj.0|}ۍ9-ZX4PV{i$Ҁ"^" v*Z0@jN)7vϚ*A̢ }M뿲:DBwZZ#{"=OmI糟 ċ5(=GUxI\]@}? H#vL|.%S=K*[܄ZvB2i蚕Hg,!U`U]E_I\OOaENwz4Ho`MVh qݬ: k%'KN#E]A`\ A[:[RljFaiRƴ0 ,,t?F^9kz}QrJKLVPBV8Ɋ ȯZuTs7ӕda֒K>F =U܈n)XGjd逭 B?1'i/RPbD`?nR;=S#PL_d"PPۺ! WEіC%=̷L#K#+.Z8yT=E'B킶Bv;qΠ<,B?Q)V2F牶m]'MiYU\ Te'Ü2K-r:^}e@\\e.k3Y6-=D`Jkď\6DzwA¨ƥ0vވ~__EB0BMVJ슔17/D9{c7\~lݶ/B&;r8՗^ËqeZ;98®ye%4a{.cW749Cw1 ͖Y^ tqnn9,~$k[ +{5nļ@ZLbkҙ[h҈ī1On'e/~[&>Y(=_f2(Yady~%gTuȊ$l6Nk+Vբ(&-( ~azJ:Vak8nj|7c7Vgÿ Zb|"}Nֵ;3h9B ~.5mግVX6{$gxO8Z@z>7tro.j rdLAxZFwMF _4зQ!=vҸȑK,u,>uټ+I6*\!,-|+woYfk "I@l 'ۦĨL P(,Nq$Tq' Y( ڼH=Ik{} -Zy8v׿CԦP ;UYFEmi>&O=|B(]%F.WN3nuB8 ⾣?k0,H}Ea.|iL)۰_&lwBiru3c_soEy7൪?iz䅨ANw`Ydd&d0gaUڸ9SemJn'U7&Zb;JY|Z %\J#WHaAyHr+ذa9d]cȩAA dZaK`n>h7]ogLUS@oeJe'(pj0m" B6Y &` s CЮhV0T~-^2C+Xy |ߘ\ %Iv{rQˬɍs~1,qIWG% ZW^hićEA• aӎ e6n`$bY[2 _6[%Hfr 5{m0fX0GB :JbDB&}Rכa GOQYwO(/sg%K-K# Lcumv[ܸ7ÅܵvM]hwi&:wi=!!Z&_Tx4Iy3{A7[<oV:k~s}70IVPRM| XFM dggrm+tWTUB}^* Ew}@/& c/:9bYǤ? 0}jZ ג Y:Br{hY53DŽ}۠(&*[ MKHKp +(ٸ'RRmF[%Du+KY,)-~`0c-wX.2gRE 5Da+!!5U.w0,f'mH(;czaWSXXF'g`"B%͒5~\4׏j!3?^HKB37B;|MgKs8tJi~A. >á?1EMXw-~s[P/w/N.Pb+@1OLC($on6v(CHv!{[-wS>-`Ԕ<~ $3c oFьLq4qyʑo;ÆVX=Ǵ5)%4:^1,8.qo,`Bjө 6 z`TP_,ݺyJƹT#1(ӢBH-M=)XmKf<쨂ƽSdfXmz5Cǫp鄀:ܪx[;h $׌fBlUH[`:/u𜒗o_5-N 1ʔGv(w.BQ܆\׹M(#|qigYY]nPr͝[&zWyLtۉQ1/nqlǷ yg2WvpAWl'uSJr#|2P7d|@gY0!JǷ";vX[F;跊|u}żNr dx=, Z3 U$=I Gtx7-a%(ZU·?c|uX4QP-OKktSV8'C`պ݆Q,fYNKnE;x*m`:JxoO60x I\:Jo'V\ܳPdoѱ& NZZ [Xr4R=QNuNS{gDd$SCAs<=-p u0ָi**Ǒ8t,C=෷~_JS!!~QJ֊r$T_x__&҆:>!XMBzƺgr${ʏDIC2F-JwvD4[$$ts-<(UC HEhl~" $p =\a͖\';~q>y$ҰB N r_ʈV ( $mG Z3;cʋEs8'9sn[VWP(iYfMtqٯz\?JVreOZ--TNZx ~& e ZY8p ZEl[}@l"X5dS+Y !T&FUbHrYžTmlzڠČ/Ḅ[GlƲh9 JLzLTg- e^vkY)xyDKf`7Lϋm7h>\ki_n'~OT**-ŷU[dǂ!T=PˉBb֍}4 h@%͗{PQvB,ئEIhv̒M#ީrrA`FDf<0Jk2#z#H㎀l⸧0ҵ43Ҋ{S2Xs>FqCrJ4վɯaS_WZlpyoVVD퓜B(Ngh0ĴN\Q\.+-rf"9E_Å\j L gb ~ۄe3pl,R&dB䧫j)ѝSadi[/ x-~S.IX#~ qcC߸:?7>@9v20KhiO*/Vied~N듲iir2Ҏr=o(с$\1։9%e.Շ抛|,~k¶{Qk1{]8̈@;Nk&,^:.]W{a5stcE=bz,YOCe_M0˥SWGTC6<.<њog YӅ+S |OO0y ~8P? i9d"@e8=vlW큵jd*d]=j@4fNA<ﵡ/#" 'CI`lMfe3' X 6$#]6]&y_:l@L=!7rs `=#ն;* l <g!6oY`_Gȸi 0AC`J wy$+dA2p ^?z!avnF0%"42u53JKܛ⟐XѮ]cn`t0%6g$fkz^ 't-Hn@mYo\#0<-9]+Oue[MXZij 95g ai vCz;_nfG/z*o:-qj` &|2>]ݖi%~S+3nV|} ׉`䩆&ǾWYv`tAVCMo$N1w+,JVm-f>X俪#y\ L3[Eh&(UJzӰfh5種vgƗ}\T oCɅd`a3 -MqeOdS xFRȀ߂N73ά3Хk߫#>͊ؤg`رgBl};;7/'M~;N{7g5]?ڏ&g}~@CQB!Y.'dFg'8}Oy_SeyMӪֽaRhDz=>bQovTO5"cIM(_YzWZ: 0 %.hx-z 3|?G^$-ƀD1{;f;@͑.ljZX݉T4=*!jdPS_?4 06 ٟ޲t9DI`f'а/F$"K,/Da#x NÆ5-?l_ /RUHx-92AX ?;:o` H^8) _(x|;}Z8Lr! 0e6ԅ'Viv ?Cbxjdl칁ȎєZpܑ:1)Ou^O8O/F"{OH)N{'zVxB=#߶Jm3 LPYA1z]13ZHWdC 1N왥ˑ=gfˤ2>k'H d"ER96'g0`LVօJUO\k\Lv{paègmo.U& Jԍ&r4-JNpHp[vܩ8S:փce\#+7k՚'&zKk9fWñi:}:UW٨Xx|}}9R{U%ި" 1?W.vG{FmRCk2Buq Fr(D+]s(5)iKpʬ۝lQeＴ;̛]W54V]44եyTгUtqU> f_wCbC *fK|scƆãuTPʃᬝ(߃x'տo*-A!!J>p78z(<)$NȤ|~'(^ E\$忲 '3x N/\9qP{0jw0Xt|IX%M\b*8eT&mA殼@όe[vy(>I';e$GW*j}:[:O>5Dudx{A?| 7FQԪ8Lin/I=b׭"qܩc>nl0~N~ T߱YKЋMӍ% 4L+ۇBI00qhm^` BSQwB;Z/B.7]Iu"FOmF8seVo6T+j<7;`^7b?yJfhhLVR4G\gp5w mrɐ돾uH+o;n4BGF78g1܈dWb<+ ,㤭65n> eH^.!Vrt^5q<` +!ˤԆ&JU ^lYJQ$lM -AyxF=VbMiڝXgxHoDo>׾z3暙W'-D":Yk{Mn]lpϕ DɕE4_O_3>yK;ىݷOףH'/1 r.sO~S;L ֳ,d pmb@OUc' BEg Ϯ@~sU'US<Pl" B:?_z*Ƹ`HP*6R֜<# R,Q1]^CcsGN޵f.`<_>Fjq1U )u[x+Y3Z1i6|KG|>W2B:"[ݚ1ab8g%?.gr)I8A \ؗc*ۯPo K1Q?o+>Q/YEl7Z9nZ+9//N'ІĉxPh j̇. gɉhV8t5Nr ;x>`=!ac> Lj*k֜~Z \X_y2uNFR,gVT*hR¶28^4e,qJ\uDzHd}=<|E܋f>V ӆ/zG"N06tBK^GCu6<-@ ?Jz0cF@AZO864@fP9ɤ 3pSi?ap13ꭨ^ٕ4Ml _[jA`=C[Գ"4>Pw6mG[$܂q (T;`}%u3eF r{SwVw9vuOM㥉ĉZZFAz CLS QSRC0AIOL#ɿ9r ^9TBqa$VOU@O ] 1/k&-Bg;HY$gͲ<WC^gdknm{Q]>U=W,ώw>p);Ll 5l4+N8D7$U[mApv)58[Bqj|#sܤ%Qn>{o 34𺐔ſRϺTPx1ϼGT^eE Vs4(>J)jf8Wd%˗GM:qq_y5ԜrhK?rQTyc}&K,-ǵfV=ָ)jH`͹+ {^rDi3&3/JP=pCR'( Qe}ӣTkf^?AF9rjqC2=NL{蘥=Fm]uh\7K>7@ɞrEabxuaWuN2OsQx_{Ea-&z_>|6;A)&_\s2.g*5dLj?-IMhEh7"΋QZK+/XIKi|$Vڶv]zFO%Z<m~+C%T1р{?X\(<p9+!!aD8cȻL0mD%GUi}9zU`mzb̧%KXL (xY_@?ޱt SDL_s$O'B\&] ^y]̽hVp^Ϣc5נìݐԓkܒ36$IƵ,Ʋ`"J$%C)HAPjr}6lF сqAAQ]B. Hxz]my4o`Nm2I~eHV)3j:`h[Q Ϟ7i͠Xq 4{a۝}÷d ATL^߶%9mrDQJ]cf",UmL<;_l9b6 a,2mcjIMt#jacתb,^2 ~>a"C ɒ=^ ,8ī M7A}&>s+^c#D5GH*^f"E\;\ĮٯvG{!K4 0 `S)3y7ӉVgCO=D'/nL#//8)QEز(fv,˿W"~(](U: LLq #9GN=FTFh`CId̅~9n"+)2:Z+kl)bbQrGj5'8bV'D(]7_h:%aLA7m8Pc.! \ĕ?d ̹/ Bo~h֋j7\Ŧt#^<ߪXF9敮 R/"VqwavܳXmZ`TyhXry=|ˌj!1g`$(L:5N>v#r ȧT' ZWnPm kJKD=u,c$.s%p76*{r(jz S`3f310 xq%Iن}$U"0tٕtթ=awd4D&J'ź6yKo oι#村KGȶ;X2?"n5Y]Mo0wOlA,S~[l!(1̭-p]Fx16ܠ4GTkfhi <󶽯N}x6 'azm,sA$dy}m n+eێ>Y1I9.J$) :-_H!N1x=ړ,y:'0-~L=MK4YҾ5T)L3u tSmYOX 8*ÿL,2̌۽Ouy۔<,2v@$U{R_h$WK.5HSa:mW9δ4A$x4RsNn-ʨ8\oe#ٸHFR 5UZ[v@$s%jZœytd29<)F+|wM{73 ]߶P~pCgytwcHS#`e0|L5Uanvէ+빢?"o0K'[f&q#P ;>x u 1^ >z§yaOF )Uc_6A`Cj.@ag4KiXd*^⯔"ɰOb[/iV 8e5 sf>tc8詾zJw;HwBdeJ )L4-?w, CB` V@JwHJ t[gi(7_KH|$R*7WBvo7z>JW hҍWkZyw10=g-q)D-(tCÔw_kjxfVΝ8B*uf@g[o^VdKԿ'I'N3uɠק>,3~0O6jH>07iuEĻ09q;J`vZ=PEHh0dR R͛pdjR_¦@L "4^5'CbN?;TM {p T;Ĭ# G"ݟ))|Az'xz5M""FT%{QQaPH1!Ԅ}W+ DTYJhHftjul|\eѸ/-`k \ukR`uZBKmg-)ݡ h |ppF z6MCxA}RFA2n#Mc4`~YzbJ >XD~ VlBXqw>Y"3WK$PZ#X `[Y Zi'UkYEӄ% 1YeNK;em6y\vQ"`o:{\;e3m x.Kהt]Gdπ֬&HoWq"(39 Ac"upmD(6pT \q3KW|Tslce"j$Gz:]H[<(U ځokHFX&S'C0bry?oj#h-+4]:LrZ20>W?K1a6ZokVNJ\rX6,ټ܎a /B%y/e2'WTcAB\U1,V4'1مvqub0js?ʆ)c@  3ݦ[M '(W}=0Y'c$u6D z}%`JB2e#]O(b@R),|0{NCԄb1tdU$s?)1ٯv7`#yJk[8b=y|ʁ+Є\?-*(U'9 cL#DOG #宭vOC$\G/M*IS*ML(6fgUϜ1㣙z0%7G6T֩"| _9F}SH麆>CRpiKhZ N:{ī+-b >~h퇴BڵqW~: CŜ0>F>ku~^Lp̶`L0Ǟ]Yp=zTbZaj q-F݄BN&8օlK6_k8i;\(4B!d| -CQ̺R>޾XK!i I2YjR = r'mUHZj25̌Z{$LhuVG2-3Uz>u .>9V}$+wm,I6hqc㞒!#V 9 ,1a֎A%QBdf;Z  [\Lș X *3c,Ec6kA>܆v˕PhF'q 4! Fg6zk L\wVM}NYchY- ajoMl7xp~{ !a@7WC^5<.P) zAjd|,1 lJSh홁 䥄MzT(G0k8SKM88<:SitVoz\P~m "G+ŵ m>ո6~hzQw?{_p"/>#ط}}PcB96S?LV nYLH =XI[alÈ%]_l@t^p"V-eThJ(8A(,8ZQ)bs*Ai"?9-:~1im婵6;izr8%%e+K5]iyc t<̊fa4zaߑM~D@Š'#;\#),_es)KX9_-̡v)nG#(v5纶rlpfkPğ ƊRI6Ӿ&i7.h3AAщˍdkfu*+ YBt$ X8b6Yqs !O MSoeynt mU|tv[9W8ר"=)#u39poQWB*LFA~˦oVbr`: %ѱ5jm4 m V}Ac^X:WI(%g$^\oӧWHYn>)?u1܁Qh.P) њhZ&vȕt':<fV!K#N ]Fy[(35|WeM]pdm0os+Q]vYPF! P>G.$=F 0}eYjInE4^d ꔙӰNjdա1^]T!,]DGBw (bˌ0]YacR4#v!tܠ`h(_\ \┲|-xG}NXpIq"Հ:cuL(PaD#"Kc[C,&1E߀`W@=G-/<&O ToQQeђT3vA[AyraUSbHK?- ϔ4F0s|k\Q=j[Pa%³*B*7 <](W#$)`TҔ9`C3 %AH]QfVQ@ Gt%ÓW׀2l3fD,ZӎX5Yt $$o-5ҡ( 1Tӎ&# i%$3|t@۔/J&@j;ihKLJBjuSSCZNY('XDl%2yd1odNЪE:2VWIPZ&{,j$tgAy]̪kĜNd~/FP“qxRu};vDHUҬҀihddK#~ߙaIv6D鴟D7 5/s[] ngHe962]v$Dܹ&Hy}Xw]@ىߔ?n3Yɟ.Пo%9fdv+bhܐ 9`iҰzȹr0vPj2.F xUOz,ǴcsBt{tb+Hq.mʳ\=T|(щkr|xH$CWX- QAVCUa61UvFo'37e4):FuP7#((^؏` }X4[Ķ[~1d'uSy"f?ʹK~ˤ$߆zS?Ees-S&Vch&nZ."+^G l>d9B"3{3q]'ϩ~}Bz*F|DsAu^urH6{i<`xY+ \U&{!?G\Fd)ȧfrYsDOp HJ@mQ!dk`Xt|Cc'o쏨ُm-3ߖX\ٲu1X:[61#tDyE)>!ڸ$7'Ց_+ ooNC43ohJHafZ_/zaY JP8uTu|KO4NW!Cnʡʐՠ#y-6[NNڊ$~<{ˁ35KJǴz)2' W/clZҋ/q}C^UژK[3yo|a7"-4L$&c+f U]*Jj^+\b͒m;9KZg4#[i%0e?eP&. A_( v`|#[=5ڟcqu}4b\s!E<*Arc 2?9N`.a:FZ 0Tv04y 9a}HnɅ*Tyg9}?唟7Az/QmHwM#Q\y"ڥQh,G 5JQ:sB81\N!~ C7-9NK,0fZ:kvА|b', N.ǁMN6' Rgq[ENGf&+[UdӣvSM4$u[ N/꛵G&Y?xֺO[92X.l¶It{eG ZWӱj!-inm3;>v{ )j Aq񊥛ڒ˺Xz{$/G{G?|' -q#X$hq4N7I $ӽT^mM!Ԟ[0A|BE/_zQ7tfG_DoR ͸=gtVx`̹dg"LO{u9Klj09LͱUn0 b6a·h4ud}_yKjC1>M1_D[*RN@HFopW[ ŽgJ&njR~l>82;eˁK͸o&R3= ` 5&FYt D9u>odF֠3'َ{_*@BA}Ak8АӃbILl `FY%~*GIgP GC,J,ۄƍNP6,nM)g>W[;!x;%.IW~_G^Y'uMWV.~yR$ꋾL/bwBDZ :*߼p Xrm#i_v+KBD?Mtf lu5>Ѐ-q2,;f\vZ]La9| nZR9hV⽞mY}gʗ ?6%ýOZ9ad;%Œ?J{w2|a$`>HǕ{Y}LJSfcݛn$PY_'jӎTZ=[A<@Ava#vC{[P`QݐurZ'DCS)3h8=ge@<5zP[gUg03(2]4{;j"-̈́Aپ7t]~v1NY- ⩕siђa ?x eyu}M&=x9gh5¾F'  -;ώzdXXdO_wE&r>0r"*,{U1klaĉ?)e]:Ur g+EQ5J (d{x!>kN?)mJMIoY~{˜#rVEFȀIDf##{ĝxwESCMb{'] r<f ]!r<BOg*Iy C' ~)<aA+^bK\0!! zҮx`@ s ?*6*Et%jrJ$R=19*[<ǤIIV9wR!4 Gs%j`:mjk(>UjRg]քeZdw(&T/J0bY&s9FE>8cU-׸I|ݶIb̮p -Av$نXRX,9pQkޥKҜx(wr4<Վ{s-VÊ1U;cA%C^&a v\ɸR_|!yƦ՛N4F7W xIθĨ 6%V6-HH=tcel `SF֣uqTWxo_}NHxd VU~׊Cf%.ZM 1 C˰NlɨH~rӄ(NIћB-Hi8%U'䓡n';T=`w?mcrFԵ+RWw*s=| kS j-exftzF5w%_'+VY jek i% pF6pVSeęC,3"/{yz&g}u">oݳpl{$5?Vla^y2- |uCx.*p}?GZ֮C7NM& )gQcK/1.EbSz2,̔ 2\H֙@HZakVýbhX/)Zq"U]pDݩgTtwhc1z!]%N,W92RJD/ d'OsCoћ\䭜2itL jK$X3MNmL":wЩUG΁tsu.q`;8jFdz-oj6ji3q jDLiȆTDV0W\!ϪlܜSKe$ lTUGqĊG3;r=QMgcWL3# )k{7Q՗+]CsG;5\*dx@B? 'Ry-?Oox7"SMU=w2Cxb}%vӷ;f\xn4q)P>?R~:Y_M)i#uO(s9h\fp#JG"Pq; uD:m"^LAD_9N䅻#aQZސ*c\* h2},i}.9`)#tġ9L*K41L§0것W:OK^Ks#v1}ٝInؼɱQ%BoKy?C~uKD84pR1bBUrH1pbeH? p)/}ﴒ(͑ ry-SGeUZ@lN9t3d29arkROĮOP_Uw#QUo5汉|9g<X& [rEpẀ 3 Tꋔ}!"uncaPP(@sݱ JKH_H-z( xgIcJ>޺sʞgK܎,Tg0,O8]C.XGMy |wT;9"V7|-̒<Y|u;>)m\0PGއ>)ɶ_RUTJoj 2\AԂ.L3+<:eFJ4iGZ L0ޘ!^В,O"0;\F8d'u/> k@A.ԫ)iL GWFn#p| _Դ@::}ISs7Ņ+Q=9^tehPK])KBMGQ<.yu#ת tN>=Ch]jGXJ B~u;%Qkn +Oh#|IZqt [څVrR_o;Y/ML;+a Pş6٧+{IPrejy@ \|A$2*G0nriivb&`} H_IAˑx<z[և/ 2jͅv.Sȋ mV~in;ߎӸJCO,"RU lOJ{-=*|y4bq'T۟wt/ l?+E}˝1=ɡ^yg㱂"c&!y7e@CBmeA+pɱz7~@." U$3@E~`t^k4(RWD@ Z2޿(}I(u>|5-M&jC*CmhVUWXj' ٘e#P( S|)M߄٭YOfgFa {rQYqGk]3ѝ箼#ͫc[,G {y]C/Yrٌ GUN8pg_Mm=ɢ谪y傽 !>pihL\nPAK2)byƁb`S d.< fu3%9s|XzW ϱ_kdg脵)Y wcqi1/l9\yd$dsk$1 !)*j^Ƭd #y /knzL]yȘ7 "px{1[%:Fa= {:fȫ.WrQ!iߎU[eFKkظ-ЊPSd9DÁdr}v_,Ql0 riHt9xrC2u)\9M'98 e]c^kn|RYK=Ēb/0o:G 8NT\/i;h~N)VP`\H|g}Ey/ɜ14˜u$>w @@ՉG@nYX8QKl:~gĭ)LOz.;*>77kK%F'cuJΎ,X]C.n@*"9{ˣ}@1vݷMuJ#+4@4s-B؁v5P"ߥ d}m7Ϥ 9|%ް_jM{EOI[#g{% ӮƖ  ^].aO'Z+i|Gz wN}@VX.82+_n c#T.w&*SlpM[,Kːw/02D`ܧmPkG}BM b;xڜوX`U[GeթWۛ!s,a&Pmkc$~0zF9o_>J"ӚguCO.&< <,Fh-ėfy:wݵRj +dPK@3Z <̪xtoāQ=H2C,=̨7~)^{͊f\!E|?~ p{qIq$'D-ݢ͋9OT+ d55R )YJw+Ӓm~aOpN_= AT>X*v*b{>:JF`YEg)Ӕ&uPQ{*[[,w4'y+˼5 At<@m=jtHC97:9k+S)E*0nhS?3uJPDW< P J#TP$)G5m"zogS 8I ;;Vz%Q4:!tp j;~3zTaauR' 2%-RzJK_(Yۑe8JTb zܒ$,Ƥb ȠmvɞÝyG?;*[M)"+˝iIs1ӡ9 1}P6 _*ƹTBܮ~Cp2NPVÐ-_Ȁj8&8z"${NKO=_[tΌ_4'RKtWl%37$p! Zj/0%)b~q&W yNSQJU>߻6m!^m"Q02J]!ѶWx<8p{Ϲeu"Ͻ>e#a-+8 dܹ cQWju1SʺscCb0T8M琉F~?HcP3,{~WuugU'(NmOF(.vL?("[~beo?-_.Z ./]n0&2d&4̌eZ lS{x E9Q!T(.%beQKAGd =%|АX2D"!U0|5@ , d,]@(|.ޤ}y)D@UvF`2(Ru,7 !G储EU Ps,'$eXc)ͅQQ1Fg\7؜A%M{ o,baip~҄l):( ѓ_GBբqV6;OhE{SRa Jd20+R>n@L(GٿqLEc6,bQ?G[WH 4f hMf@PZSF0jQf:]=G(huǍXۈu(4O/}RK xߌwX՟OX?`Eڅ)q_) ><1utL44>W=,@ÅvHtWDihs 9 T@8LFl!+P{\9e% #MҶ(cDV,|I s^ܵ!wṚ^Q(˂9Ng5P߄{}zd \]@LqvN 'ƖmIx5C@̸Ĕm ™.Ej2}o_>;Ե7>SHtRȰ4!Y)sZaQrx-{v:.2p(`kCXI Y K]TH$NcU b!ٱn{ӝ)d}v xU TZ6*yw̧*TMvY,R,dkEфb)_|qԖp*8PwWи{,_Կ'Ɉ!3`kHmЇmrf"8&}lgb JN;ʅ\ZfIg|IJLyLViVJ9V #0IE#)\9u S=IUc~=;]Y7n[_n a ՋR!R^ Æ ې!Q&Vi-`81L7gzM].y덛ضXqgR"t֝XPP)ɝ#^CHf9$W5"c2Tdϖ>RtR/zɲi7Kxث E, uu\ݗ- xsœ^tHi5V0V9sLf]w1Gy6 =XwUgrl2pȈTm, 2򦜋>M~ f GX7w@ƨayH _

e9E<=*_,[3ǿv_VY8)$SW^BsJP2"dje$$wrW:V,SΑַ?5&Ay&ٛ#`ЫY]u՚q JWG&6݉1{T UG嚠H;wZd,5oCbN x>ϣ(ĆO!A9,S\P J!2cXwNv:} gjbdXyib=Wa(N7uUy\k&ެ߿#a[b4kUϼw,\+`2z!2ðiš!wg4[*69u)7N=B B?9ldTLTzy=& &X$f^gB4GzאlN9.ǶEZ+=/(&/ޟ[&uѪ_xi7ҕUddzôϑ\wOO XuF- F1ŖP[Ͱd(Wf%6J SKbsp _]h#EN +8^:$,D8<ѽFo0?0(~?{\]0?MN]!e6 [t$ ֧ٓt%0v ura̽4rf-́ߑշ,F!)2ր\m oi8ގGFFKfʃ:JYm>YjHkMA1%M$UfOAQ86z(dx;8C2;_KE,[4]J}mqM%w)6gb#Mk@ߝ%<.+[fN*2x ؟Я ԓݩ7r7nK|H螚8;:*jaQ+7K H`z?EӪ|]j?7akX5W'3ոQrx{o|٧%+x25k7u2KZ)v9kӃdݹ36B1GðcSqmbGo@ѣȼ/+?mUT|ZJ^O$f^W̔)-U3obO un]gȒ pZaȨ.-H*$"9SK \5.Z5쑼RcS lQ|qJ;I6A<zp*1)wXZ|P~GOg*S*|F 6]m[֋#sv+dO]!\"eX@_LI(J=*I[fD=@v#nzO ن{][Z3*`L$詼"sR@y2ĘAo(Jubj\ X"W0`{az: 洘|m(m~ܛk nnBC=Iܡ)IєOx"8P7Ro`> ;>jfZ7uDwFŲ(<~ ;:&'m|A >'x`DS R=iQQOr6A@Hwc4Z WjArZk prGcO"czZ3d6 };g [Zj!$x =nt `|[-cJf|eF7 2wVRzGQ AHEu3kC,̩ų <"SkN4fBȯuS6Ho@ EHwj8#B:0_ۆ^=VٴW,"#E0f*zjHlk"Q*T#hmpC0aLh١׮"7SLƓ3 &ېxCleTm׵r`/i,5MiBޮuK{ A+3prITȔ13(]H  FV4Bq!6 dR˿M60m2ȭtF۞񂅾pޕ'-aͿ+8zQewUҒbF3M5[A W{M\5+C+%E- 恽$v 1(#țCee,F(g~5v֡f2g)ñ-YA MW3h,)7FZMk&eq5ZώwJ#betۣV_}jq@uRXte`[7,@OUxѧ{xNઙe ʚFߟ+U`SpLϺ{;:2EF] iPT!cu2y.!qdjFsK+CPd8V1;gpD`rw)`tuɭouڇ]3?;wLS1P*0⌟V{K!1AOo#Ѿl3 Vw?ٿ:i'v[RCkq曃&Ei"HnYG#|2.ƒ GJqrT N=lʢ4Qߵ)r\ )] P(v:-R _{b0ZSnӪwVؕsWQ;Fts! 2gj䠁T1L;.o[?Ox oh&X3-C[ cd)/鈬[%lB1L؀Q +vL Owj鶳q 2/ v1eZ )1ݕFl@?zwtg͆ލ+x"3~`ܳ: iLJ`5Vd)}⯠t^p)rRcS\U20e%s27͓{œn )iC}T[UxG5 ޳bl 4st#]imt*B}-j~% ѕھݩS F+D6:l炔1q/YQ ʧM sфX)_N@]-aFqnёʭ[QFaXzG*ϧ1"EёxHvhAas71/GSJ)DgpJ!ε!AQ ״S0,v7ط>F*j]ZP r[ia@S w>Z )8_ePшTQGErܝŤy5Objٶcby$>"rmH+rF UJV ulMSCHG([ JYt u^:Oŝ!C;1#ٵեk'_Dddk1:cjϨIEOE'H7a 5{S:b:gu$WXNj5Up k)ҌN DR\wR+i A RlmE[{32.y; (W?ń+D) )aYmx9Dt}MWD*3g5=1 ܅ХԽ'hĆ XLC, c=ąn'h8L8%;8ZєdLG0/&@!D`a#5Pn;mq+㦔QlEi v VS]fARrxV͞g2E#̥{˖_CV6`>H5no|ݭl.Ac>,teImuҬ}07]@"`#gL0MniB)Ct]:ker>l2z}YXy ](2;2:!\E~×,֧pJdOez*v,SVCDvyy02JD]4'%pS{46Iݠ_S?Dulɸ\BIr;"IYsKu6TC3ڸ6Tp"긝HOi)'k~`nŴfa{&@)rp{%$qaI x{o&XwgFVkC䭧K|D?:tŢvt/`n."ri$䤥^ղ^S&K\Bt|+>S,:KU" K"ߑ9~=5F&\keqtLk& \~)@UOd=ٱ()e" ´{3M9$cI@9G>FLE U﫸7 I?~pHEkf{L,50gIM 8I \B^s}J =v)1ɔ`)#`cOXPHH"]YuW* (zՎo[XukBt)U m,6eq"Ur)_/϶ f[- J.IIC1?K96 ;޹(oDE>ZoiUE,T_4a&nj:UUO Γ^1OI3bMA:N Ұ->{hn0dIȎJs;9ғa5 :s G Ӥ1oʹ0G#3$AcCaj3G8z˯UzK6"`UsWZg\&7u{tq{^}d(&iqLXիC-S G$'~'2)³`Zk)^&7PLN!９pM3iee٠VO^{d vZ|O\^?^~Z"ڶ^ lKT(bDt,0ܩ_D,5LLF_kZm<9qn>okBjdeا cay6Xy:n WG+ g'ca֤cou @o.VJװI(捃HK6om|h2Ü$Ԋ,nkh?GQFXj0C߉ lgM)/^9 q s6{jz%4, m\>+?=jT=Vy7o3i.4ـc4>:^H0&HMW-N%GXXVCoeԯɡكvtvnrh&1QgtjtUHv,kЧSFR1O^&6Ũ`mAsD>:$ĕv@eCHr "5q&ǍF4Q/SH#:>r( @{uR^Mp+7)hZWlLvfu{],rGd՗#Vs^N~GN cx2 ?: "0r[gJ>~&Pcu|c֊׏)lAiW n\()z4>?R^DCxn &NʼAp@lU&XNm~,Ð]yR9'wIz&kp?%{ pPR;2:` f>;j[[,/7ݓH:Gz Dd>{^ⓦe+jơ{$]U}UY I0^(bｓPVvg%(LУhUVd#>߷ҌJTxYb;'J{mY-#C$Cf~uŇZ!כ]Z]vuO녷,_]mݕUGDPJF bZPp,%!qbl{&h١H׌j i`/0N@f^})~0Fd [XӒ>Dv,C%mD!z7_I}ة"ۙ:#W /#g()rECxmO"'1g mc:Tץ8FGf>z`\%y|ԙS]ʴn Kx.a`=n;tjj.H&F7(GkQ\jABrfkǎǷViӾXA I#,aexGvƥ~,_y*k.Q>_ojw%/aM}fPL'8+azp8!,lz2lLBtKj .fNu|vՀG~\=6&FCt9hw~J3qw/|^pv9 GKR\F9,2ֿAáA9;NjP@vb*cIiUOZ] ~f8eb MwZE k%*L|" ~Ha4%],o F=$Sު93TqR͋/c|*{a+dz (N%̾R`o#G cê#tzta!.u\v2HqBE "jU8:՘ͺ bPq38UcsV7M娏[XtVޞ, X P`iD>(a2hc%ݼ!@pLb7墹Ñ~JbcVqw0ˉ4Vߚ@qnFzlVEǹ<oZ?3\s'Ispl誤""EY6|@"5뺙CuДYUbiU6rZ)[hv2TqOL/1]jQXZL6cP6F{~#Z+aLt0?a‘&Y\Vع4PzJ?o_2%qWX=`D6װ \fW ~gvأoiFІ*؄!g,j|#޻U[)K7J0u$F[FN0mN4rѸ1*Lq'RL52t S-P+ !zJQdl1.'p_=;hiISZXРH49ȣVڔnł{ʴ%!_$L>]ƴ}*+>bpL2]x$Ώ5^U# 0-뼢:?H0P.imxv=8Qp9;(iVa:7/Kr&Q!ЎOǣTe7c~,o&Fۃ7q a:fCT$"r*Y+: b% AUL_꣮]c'k<\:wLY%9m`O`upX wp2~jÔn!9a, r<[: NZC&0rZ"LŰE uڨP" [͏P$Ӭ1S7U;;5!͵}S[\7} "c[ZJ\2xbH n5vuzwFܹ NćtZqY@`ş@Fhґɽ]RrgL'x}>^5RF]UognQ2x[*N5奼@ܼ+RӦբ$szw'Da>(eE$@h+DVsz0.z_okez@Js,s*Qk.) how'5ʽ6"OOG/Ny$pJ~{Myu"d YZww?ͩR3GJ\ QVuf+8ݗ?/#0f."G.d V{g%(xeF5±=> a@y 1i5zAZ4rdըH"} 7Yb؝~&HsF(~_2=Ou.¸5DE{ͅF*Xo'|TD]z.$"^!]=$#qyߌt"[lc5eC;2ǻӭs1hcGslVK_o_(R M1Ŧy΋ǽ *lm M'Md^."eR%cD~yyS(C|.P7rKZ+C{K5||j,͵xɾhz\|0jͰhRE1V<{&CɈ3SY41QdR8E谕:8/,d|-D"%]m`EfM7s^Wx /#"ა!FOZkYWC;S"I) L =)̺y:즇[9)Nn/98fO󙐡a$K,QXܒ6yX>Ķ h[?GG4[7r6rOmt\#@#Thsj@hluN24OR֩R'/,ϐRN[W(J=A9b9 7o횞NtC\\{[Q&hco) o$k}#OV#C%LavRqݾV1znX'Z-] %{H)N1oP L:)yRU]wſr 57I/86t,'H5(*X<䃡iƯoc/UA``4K\Z` Qgt8 zs—m ea!YpY! #g1AqxIdVƑB]Wfe7ngHrOvBԷu6%Huϕu)*!KAdJɾu (c2X9q}i (CeИ}Hkk,a1+Zӟ ]"cg䎞~_)cg}P*ɅYlA~-3Ɵ,g@zK]j\E:k*N% V^~Mv^qU2P 6|UxiڹœUPD+|?%q5iUa"ɯƕ~~&OD[\)"FZy܂ie?&}g'D*i0@!NUZp+vn,|]Yɩ`p%7?JAc/ ΃Yuɩ 6L؀| Zlsihj[MS"mH;1;Bl˶VԦL@&lұ T?TCxWlP/x#%FYఀhv׉uv({LM@/jt kl`_̤҅RL_޿C, :Vj3WI (|qLFk*XVdIܸKH7Q7 J>dD54ŢÃw&Si?Wg`x#d ݬJm|`OzĔQ=D2KS ֧L>xmTc~͢sS*⎄dy 7 ,ɘH8~ [ķ'Zʬä?4ٞun aFΒ0٤:#^+( c#vA=#)㕘j/QPwwMUOEʈs Us&\)ѡͬ89JQ*z:\cwK 99uW#SjT7Ȅlh.D0];(*<~0-}}w.Zo3,&<= wX7ulz?x "i` ۄ,4\)bkpXl'C6cCVBJ -FJe"ѧH\ˋϦzW +ON'\CA:n~Jˀpo&'#/WAj&e:JgHbB/IT5q OYM36dǼ,gqrVPTv |-}k;XHp#tCyX/`s4'"HbE_kdm~ i(3,X@E, s"[ T ڞ$<Я:'3w??lq1+A9( IQ wʄvf2R{]P'7[5: ]CZlxt g/@GK݃Aicq{k~=~(ҍÐgN6D?ct~{,ᕈO iD]%w(3l`I޹Fq8d,9oaLGx#FjXnW^ rd@Fe(H^1Lv z5lD.ݑVݱ*-OY `VC- M.cc_T:UL0x%Uۄ+v"XM{; Eum; M. )8=YrAʖj@ (|b>ɛ8?wˊզWA$] 78܂ԙkdzGC@+_M.ZW2PH:A[fCJYQv1,d6>v9M6GjϔPanƲ 6SoUO@_^KRs<[ZDWEa,C x*ȉFh93ۆ|<^W#k5$1w)sN0M(ݟ𾗆a;(kdTWmb@B{z;)hXM@ȟz\}6')V|l}>VFCn$309Tg k!g#O thtN!\b'eڛrUB/zN:C'fc0ɀ( vB@ւC[4h,4" r%5.\FȈ1p[_1ms6_cL87nڂE*DŽ G0~6ޑn/ Ê)kwHF` UFKDm0i*~~]>m@ c(Y-D#{/񹁣.zdTFJN%.}amYx Wry|HG=*uC^̈0 -o4UNCC%V|P~h{I=B')kTMhcdp2Q''ᕰ]kAn~}1>*4Wv )&-(«*BHJ0n\ THrėYY(,0/xQ"Ա!%қ/iʵ|JKM}" s> 4jMINu.VFd>(<6@Q- uX:2v?*cZN?f=KZ8Q`d|-F&R%?\d\/dhrW=W,_ ܃pWiM!\I!dYHkJR&2@?g`W?Z̼ӱ q`I+ Ռ{\nlӟp:jw-vq[bEI>Yڦ!E e]VGE"WaޢnGLğ"l " M_|Lɨljt_򪓳9CHDF+,VAju|@MFא,ssQ8eo(],2_̾LsE${?t-|^L|%ˁ18'vX7UXfP*Gipt O r1Q#,(eS /'qilSZ˽dL(q_sc1H|/Y86ĒNtoEhIaF|nUU =#RqRj%(Sݗ|Cw1b,%S I|\Z#_]V !/NKYbJqJ<ݻ5I}F,ƝLǻJPX~ulHLZVFa "V ԫd9ά<۹2t5峾I ]s&2ef@UPAw O_]e^gbAXlj!"N4 UY|8R!E=X2FfA~a*T9}n?Yʖ P4M@ @r Fcl Zjqx<*PHF?-,m.-jd)N}p x8bPn{B+ejt=,I Fӣ`Ek?YH%eoNGzͻ,Ed$ żH,7R&w¢-)4Ld߅!qBa%RR J .cMJ-H@(eȑW $P+b&n .|d/C\@ i>z;So-I0_hfbfcYFF;zx?A?RuÚl;?mꃥ%Lvhƻ[ζP ;<##BvOy+6lrv 5NgqO=A0$]^\Ϫ:橌eN׉-n*Cĝck+҄y`gфZ~@ѨgHރ*`Y-V^| ë8JcdН6 JW0zYQl]9^ ~6#⅏Ug0^8Tsb{7~}X+N gsALX0yMLA˳Rv_ W)s1fwF/"2#^䐄@%d9m''!S&'boN'^wL42/ w NI:z;_sZ xbZsf=U૒(6SvѺ[upbr3:b=^F@ihv=[V0ԝXgg*lΛƿe7 M772ݘỲc#`Ÿ g8aMs0;eĝU`…G"hW!mIoWHO?Ǿ!)ň5~D9]fݱ?IPK: _J}gP"4X^Kik*7Ag<cGC5PXP?%ljVNJ U-g@E9_IdipcëciYT ^#jB6mZtקZ [E:w hda~]Lowv<1d1V]t& t.ykt^{B>~!ʔxν,K7K?bbڝ+l!DAT?؆LsQ,DYsnv9FlP3dѾ%f%O(csr݉QC@xѬ}mRX/bK 1DP9}j"Sf8{?m;.sd(jd!3 I:ɯSt)d[զJqu{|x0q{k~5JQ$e򤜺=)gG\ l>)e+9s A>Q~Gǻ.zle.M_Xeje4oE_(q\͇RqD݈2,בTiEJTq{Axc>*1dͮ!0?bJy5@slC9n ~H e*W/LWIAZ'"ɝ=Ag6=-d-%f` ùѠ%j6I~ZXuZ>)UV./ͪ8c:hzZhXxe pA{XS84)K2, LrfW:)p|JBEm=Sj`cQ9?:JY$IXΎ`?0tmk7+BНygh5A<7(K-*o "BPȚ\ ~=0kT8a&}Nl/g+0Ɣt]| a%w{~F =~_:ljA!/D`}_ipÝh6Kmo$jx~vzʙkq#H`EcO@6R>3͕G]z[YfvkdJA6!T(Xl~-xs^Ҟ~JȚ8 B 8r8 i]4hGKCe\,2dI lo6C&0'؈ @f Gk6rAD,22H" /}6wVU F7DհuaLIJtޜv#:,@: CS?[@ڼ FrRhW~ ; Gq6THΔdC|`2慇ǃm'K*`cҢ2n (*G]J©o;YdfIjN9J&ʄs-Yߒk"&|$'nL%[ǛMQV1IO÷4}}O$$-iZ(ZZruR_|b.mH%Mw]Ҁ 7Fca4 k괣< 9[*v:k ,e_x⬭bYaVLЎ{O/ LknkWAƲt{vֵh!AlCM%Y+dZ>ЃR@k,d k4B]}^BJ gfG8? Ϲ@i]tOBeeUX*F(tN@1R8]|]y C$Ý#F.iMa'Db>Ud۴[(õTSXm* ߞklk=Oq{TcL'.w6WhkGW1gGI~&ov\N+cm-͒Vg#;d;աWjr[8$n,/E|$ڟܓkarem &UHPTaҮ 33N`^Tq}kf۰jB 5HgBŏ#>l@n'K샾ywk|¯1sIaskVWzW Y1Z B+.2 Tj)mezSa1xV-'5e6GȐ8nA`RsJ [mEOd8цLeB lAmO^_%Uvtķ$,Z;q53#pۉ~A̓|[*#MG]m,a Bg \)̫> w QIk h*M]? >GQcl8xmYjs% V3X:?*9YՒ_5/ C:@6MqԞʡ`"ȟC\ C/ uKk^c*Qj^Qq9; vEKaSq +k;9N2:/Z>pHq%guCwI?x~t+uN |W=Nd%:t\T#'Vl5lprrDBGRb? sq^*bf E܊v~ٌ=MNb% x̩6ȰOOV< X&:nR=GFf!U io{v5ܪ)#) 36TNFkKeJjJO::6Xʖq]3^@NtL*Qo^%J^]KbZ[7]]Tۻr94Ild$i hq/NO' 7 wk<3CWLz\1~/aH/43= ND˜.f,mxd%kMjTP4yˡTG"4j["q@S7V/ȯɲ Z(^pb`Gc0UH~ѵFPQ{ 3 S9 ˟ TsZ'qU6茜9T^t̖-LU)>?K@6 S꫍~לPUUN,g%x I̛643'k ,߷]_- NЬRh/J}$}A8lZZ.,pY][?-'_Cd>oy4S4]vFTi!Զʦ7rH`%(x20N:(Yk9B\oًzw#ePm8ջ4Z2KU_#MEϕV5 \Ɛ/C;`A-*5!j5 ؐ6BD`Ъ $0X{٭I\&42)Na?KT"tb7)VB4Z.?goVU8H Vt=jPhf4ֱ\9BG#QSZ2WL ͊#8NzR_~)nx#2cIk[꺂9抯 ʮU.3^ۯZdgh*$V'>6ڦ{@O߳;RsDzZ]sv ~'5&UDc8yпxA|x%I_lOI62& ­96s]Eqg^7tGiFTЈ-%<j~r-=}T;iaˢf|bh{drLEuJˋ8'icZu=;`dOnڲtHaDPDZĞq3FmeǦV{M$\f)CVo@!*KIk6$BSH}1 X洉9O.Td2B ߅wh_} CݙTZИJb EC7/m *1@봎xG($Ʌ׹ G7I QmIڍH;_^9aJԛ=#Dy]6$ h4'ZN^[ Lc{pDcX<3ɣɍz&PVq{ ܉544# E!Q± WkGx?]m|pk|$GYU Ӻ¿t:r/9m D gk~M0 ;GSn g`a}ӎ֣c7 pZy%zLz1McEFX_/ɒ6舺n&o!Ks6&V^Q8/eeN)Ӡ_|K#}&(CL t>@B3y-on`Al:I}jw~lSWSugE]*owo ƏrIv1r|;N)nA]ﶤZ~ĖO@7۰A"E~X?;?ӵfcfN7XUxׂS 0Veg/:F;pʿuMHyh5S }3ʂӭ`] z}T>(L5wAzKV Iiفm0QH7J^f֔#%[oV E j=Tݯ1d~}h9sS%M&@2,rSٌ 5- ]b F5FG{u`b UoF[ @ZV6-[@k9̂椱zg,Kmb_ƿP+PeǏS2*SD&~$h:dr6 nCua_.@:c k6t4$2J\Gch\Hsɴ޾.lalHtsXm^'@@CmC$ӫ6ԯoo] g<I}.eHw O{='Ve#5O^ESex_W.X1ʊxFx1Ne*yz&γ\}bMW5o۹U,1% V19Eʄc3s'DG}EX<}:**0v$yX]Ԓ Z,'An|]@UyμI(=c/IљS8FCiS;eaD%}MJ%ZDGz|C9n^;ej4N#LΈ)VM/V5 Y~HӲԦL UZJ#w_.`+S(|%CG uٙ+<HeuŋȅA/uɠ"!N%nlDZ/Ib_YXߎ5ʩBy}9 PZO^v=IkeJ2m]@'I11E)}Ǔee$,R(8Q eqif<Y@"qI ~S_Eīy?+Lu.`vσQ8I M>+`BOb{,*l]Œ*fpy`(sBVHؙ tӓ\]]A$o)މLNܠoiIl.HyC.G._֫K,X%ɥ#(2VP̠VկxdU[SIv&r [%Ϛ" N{2#c{]pׯR|QymlhK@Ruiy?e~"nhvU˛:U8g̦2~Mdם^trPBU9=&A6&YE v\l%gJ-ǂ@fܪ|.NEtld“@寋)bVjxW/D͟W2TCcvO쬙]e"njBY%rZ[qU}ggd( :a܇x,:խIf%Zm e[.1O.$3tK5+2Ej8/sLWxEجr]'=nP [Mb%TU^_l8f'b{wX.40wm;in]}'m)SiO^=B.M#zl$a-<Z\Nfzi-lk` sm&FFHH+A\U`BpKم&ĄC|6In)DIr/K=Qha޵Q֎LvSPa}g"Hj|nTqvtק(lJ+H!Y#+ ~J\+e~ޫ%C91}ZӄڎN~23i1zB+cU=Bzs4[yGP+D4*ۭ@j.cE ; t4?>'XOpwmҽG3t⁸ ,.0$a!Ȓ'?w+N:$-'a[Sɺ4.jk?3+p޾Vg˾xbT1gDc7-v ̯7lNaInKkV%OsHر]Z2CAX&vbSzGxEn&EZTK:/qV!zQ-6B s% nZMR{2cզaJKya3{z.Ԛ2T>E/.,xi՗-r.P9%Ep3bޏUaORb&'s5n:3CKl:b䭞BTߑ2ӡ>ՅQڸA*HrPN*鉱4&2xohȐlu )1o vAp==p9u4U*O~xY{qk6KZD-gܱznv9˴4:AcڥƎ,;5v#IU3Rߴxa~+>=twXzRc+Ui#9N^q|\\n*3W]0@.ANe64:Dg)):-rU(%#Bg: 'VFG_Ūjw?[eC kNMB&.k*[1Kо.w0Xwh @}]dtPXhg0j\JVJ>lad5۝Q sw Emeof&Ƨ般'n; K:vvܒH&ϓlS+$ )׊+g ܑG>N%*en i{eٹZu(/Ԝ *"79N.v2NS)>"u|#YguPkk8Vꚼfh%VxcR.P_vKsz-G5r ͅB4廬0~Ͳd. QJؠdR M}Z諉 y brGZC|38U^{+|E, 6Rx \t`* V!h^EoQ 3߀FFwN] Ze6…Lw g#;rQ$c€?h\aIⴂ\4;V[!J!U=Ռ9 V5uپaQY8A 28pxV#gwnֶͥ|df"Z{K .jH XG\rs0`H'z4= LD0w8.)rF @1{,BTd QIj%5!OTrjCU(`٭&@4[a(-hz:c}^Ndyfω"sXQ5; cL1?=niCk1v˗6p<6.xw 3Z^~J:LeK 1'- [C6&{g7zԭI" [e/[V+wit,FTq`LyH̦.tKۓ&ZPDWFQL.b$ ݪ\O=]jkIBQ!uEp^[!Ҹ$p@H5S1 '.]V+SS1gS>'KFLZWM,:rS?Ѱ>';(t8؁MI ywA\vڡ|~pKNJ,윩ⴘx6R{uh{zg#0ܼv-o )iwd_6O8>ʻX`q(@#c|,9K56ۨFAA^NLNW{x1᧸Xc/»~xHGݡ0lvЛL~>lJHŨH \D6^ 0m*pTW^z8R\ohIVo)+nXm'cf.a>tE{/BpHEDO-ffnzr@"//|7p{AqJRyɐ8HcX P6 &`?Fv`i"ub z;5Dy((ȺƻN&2>.$^OkzfϾ@[*Wݮ aT|"iy֑yspGIA'wn0K*Kb~;PjU&_MZh<{HR V1 B^x_y &|1YƬp gҐJ"gz11. X1}8b5k94wY^ F6E#A5ŃT#ZkXQRwМ7rlZ=VF hHyC2֊WRah ;񜠺ø[4p )oq45r ˫Ӱ=;LX e,&㍝<};nt$H}.;(7jO/%] %:>qS!lW} #,^*xY &y)τô@[ }X˻%j>n> g=aB;  vO–#f{QE}ctÉૉR[~^r'Kߗ"K\LF [xժ ن}0DAO\q//(~=_qtS'rkj%b}LbPfxzwxw_BfRp.O^*a/.6`O֒_ '{N0m =3pZK[H5ѹvਇH@ʗΕ,c.*;0txvȯmظw.!*S. kU!*ۨI]n5W]dq\*0 f(O../4pԝÅjV{*=lWH"UE|#a5m`?xϯD9![ 5W["|VțQ: =[_ùPU>~A捆?a/hL̲U@}Ju`D\(Pkǣ-\/vS[w6ay\ؖ$>!sw2FIYGQ .z;뱥$dTMBKaƗEOݛsFI،0@A93776<6Xzкn[t,C~z:+E}Z:iÎH.D׷xd)!{Dkb FNͧK=\;CD#<2[Kl-L1A$ýSErEFmrFH>y'EmJzܾsaj3d(~ZH}¤i>mt%@gM/Dt5/ [Uv)m`&kC8pǔ^\Bv"REZ(Nÿ*Qfj=P)2Qso0<'4HM0I.EV n1\|I q_f-nFLE;z)K!%c˻ p%U^o̗܉ c|XF]~m2)KaH?m?ؒv(P>tL]>wB7mgO2`!&6'=s)_#&kZC璨[j'ęAj,ѵhC)*Yd4QaT%6F -aUz(*SJ:f霞>ĸg\MPWV dづL˓T_L^GRqsM˼N[PnTEGuP)*aFs6wJ` IH ҹ j/kðWt7Y [qҘ?^=؇+uO'v*en*R:> $1,?J :rQnAG7}o[$%3 >1>,ΦR9T Ѯ\YLfteDhWBrg2e);c9{Nt>2 g]Nm^lϣqP4No!8)$ljogӕs2 iܰ9leHo)Nh{FDޘ :FV /y/еb?Dw"AԻbׇE1dL[d261ꯉZGp"{iSFm #RqsbTO4lqUF*0&tXrb{ȺC@.E:T'R ] (yV@Y j) g; P{L{UR2rs"FY&?Set>Aѐn$ ?մ]8y/<Ŏ Vl3)ZO%-Z&CeGW0]Ft!EvTsSத?Cb2܁͕Py#o8:|S5l$~yFT!|ɂ զF1YA$|?@ Pw|V D Y -M0Fj6YVS0*BWt|1t. Tck-|'`a;cpbXw+Ԋt&_0N҇I YzTVm4C֍PZ隃\l0ٹZ @VWPeuc~:!MS :=P`V7~:E>$}!y:?cűrb,1 :VW@5OW=b u/ Ҷ1\Z"|5?>O^a:h7/LFb8n'[ @,wo1J 1?N6g'Zr 5R!WHˉm^$"5NDRBu Kkѡ Qx/ɵKΡ}i%v4PqšlaS`X7,W|h{H ޓ1]]Iص\t<8&9]ÙwYK^wLb'b0DW6c) ($0&G*ֶOdD`7pP}8 [TÆ>A7괥iD[HD#9\lQqN"Sc<SM[dm 4ba/q2N|ثæ`^>) '@0n83`y˪5 !{DF seբiwqGTmLJQlڪ'h:X$$nh*ɒAk 6}kRUiW':SSyop|qʞDiz/Af-[uVyTpʉP E'y5EMTgxy֘c;A7ѥ&1G8;Q2uGGX0ȍ}^9s)6?|w;icyM؉~BOipGza__r1pA =5FbI9um)"ӭ2҆ _]lÌw kG+>5W@pviG]ObG.q~GWUR!r4Swb-ZN_ N@|scܖ=M[ED u@E[D)nkX|$i?4hI~4nAG.9)0^!:L ݛ*/`c{k5o"E{φRAjZTSLw]R)BS#[#[`*E-rٺŵZʼ#Y'_aanN >QY,T]3yOTk$2N ' QqS+ |5AޣsrniYA Q4!+`q7o@am5r (W2 ǼFTRAg ku\LZ.! PcI4.?Emaμ. m쟘OfX6MD(Ɏ|=yR }E/2-60w*S?ˍ) 'Q75E&B!l$1 X*stt"y-W /|i26zEPh !WǦdiߋb!)j'q^r3Nn}"!wę(ťmaH28M(vi@q=Ztgbw%K17}ȑbA*ۚuPWy>0'^7c0jo5AS"a;Er+P,I7 ɥՈzc~Xa ʰ1+$.t߬ZX2?6qso|Aaj漛ә%o1s=, QĴ'Si;K, ⠢+퀦i59 R[&}\B1ˇ0~W7Nc V0qyA+g b,Uz^TiܜB f MܓW20vȨlQpU$5W s0&83$9}7i=3 ްk k SL~/AߞEYzBE S+6Cih 4JAsB:>-W.s;:@8K ڶ-nR*Q+H?~5;(Qpldw^>8w[:GɄ+WeϷNK/x SHJ>d5ݜ:h_p%)n$ez&S2"HQ'4 3:ya޶[Y t^b5rvF(kuiP{;So僬odE50(HN5kwfQZ@'IHU;cPFJMa1O0Y{=K^2eA&z:#<ͯ&laeaI ׿8՟ H\F3B {-oSBrlj"4H2l;S`Z ?iquLFMIyE%i%,v#H'/Tm @UL,v3Nz*3"f.0'wt ؗ^͞S)q+Y?뼓nfuXa2qlȏG"֙S m($'3MC Gh?ɱc?hc4M"YIiԲ^SWbRp5 QRcܵ~,.en;ROK~Wb61}X,U!3%G 5sچIw^J\ZY? \R8{ҮDz q|0sl>ߒ}fSβF:HCpg5:=t|6*R=ҟp*: <$_2X)e|WzK;gkbB~;g;Q]+% <ӽlwuR럪zLS$=֏;qч*\ @8_51Vep۹zSh$l_n5P,\`[_ TQk )܎gt5a{e{`ͻMMs4O3/~ϵwd;<,=r_c_CIӹ?v7ov?EyT uV!?P`J} (csv&2Q(Co50c~GD^1vIa]|tEtq)߸#M8lK}i!*,*ӑ4;Xac`&\[nCw @|8 -KW&yaGsF8c_G衚 HE<׋v,f0R9 pXG6oaWYwE1GxD|@1XL29fP28 fo=}#_Ͻ]9A_sG]#1niu:$qQ)݁ jꇴ3ĒjJ9%,Pܹ21c+e%m.c*w+.Ef}uŗu@PB )C?H@:GSa/WMs!sadm5n.s<% EcilX*6q*#wBMH;g\oC+`v-u%`J5'2amB̧އ4_<ڸQ5=(s*CD \ZD7H 2ş<v7}٬f#&v ?ͳ94FU X5JS֫\EhLIHɪQQs?s[M*j ?Z4#)f09d< ]dsH:",-kZvȡ/SdD׾~|}2"u~ Cv)}t:bJl@1b3y/o~G2P6E4͹­rrYPxqYav~-]I MZl t<.{l[M:{{ \epLhG?sląb5{AH}?ځl@:5 q=3uE)L`8\55 > It4\pZo"Lݗ&Ey(Wb_  fCAv^N#4+G]Kq5ŸSX&У٤+'ʝ?6wiFVPMpCO3 ͇E " Fq*oܒ::5U,kw9>D+p].ڰl$ݠ>72Iq ΑinrT]|-h>C|mpzda*fVVqabf]I`!<+*e<T9ymϘ{07Lu=`r**j"!6Pu(W sy_e-y5kB"Լ_ַҁno- {0%,Yh d )L*{Pֳ<*,mDMdǺЙ #}dښH7'2շ"/Ɍr쯠;0=;TDxlTwgwU+5GuXkT?B/F^Y(᫞tťYTZi2Gs<0}Lx513Dc}ZIS|Naέb1^H)^É;<7Zt26[vSϘ%hZ0?(<1i0,<H7 gI2qaL1]wn3fVRёD/J#C5`LGJa?|<'w)m` GH'YxBtO|]?"5_t[:Fk |C]y&ky@ӫ'$zH>6>Y-S_A.~y"UdσI8g,q ]ME etL&S"WXS(Fs:ftؑ7Z#..ɋ:=6t%o9b eAʕO!ur(G>r$NcBA"}=k*wAZ~ CUӮ/[V %>5-d~nh2Ȟv~aq:1*& ҦA֙o л*_+X%, -F?0fZ@9{mZvH|ToyAD^ix ̵)6]~Swݙr (v5h+ia >%1-`OW9we  h*G:@E)ʮ)?Sj{tu0#G4I[Joߐݶkoc^zs|`HAyܓ[eybTm-oL"\7ՙ%#Cp̞:js3ag}91k4$U N<(\k= A?ULxE1 eHf TRH¿p3 ɝVqdoN$x0̨(5W:1rZgMcGi@ ^w܃xy1+v0/8wjnqq=8'hUҖȅ"h+^F.Js؇xAECRw(Va)HԚ-#8|B'&鿘ZViVVD$؜IF;%I u\kv[{0W\ Nߐ55}oGD`/n>/w9Y#bbZ6f "d2V9LViqޝܪV:|ĒK@̮y;5FbVѲWTMŗ[$ucYl*PO Ӱb Ekd^@:%>#(Djx Мj#&PY­H܊w[mjد=+Q)Gh:"wW UhqLžiݸE2{H~v.xBaJhXYm1 gN4:KM8^2mb^1vDOu7i8DUD ed4F:׸]4-9h=!qݥ, \783S#JIz@>63o&IKV//%,۬0+xHJG=5%Ta AS9d4z~FNWS_ ڍ65j#1$dgQðup~نHVhyrLJ2!٘b+w8s;yEC(KC!Ly]~1>65?F]< U%j[Kyh>O'ZQ oҴUA!xXwYUL؋[ڴȿt ?K-˫ tQ9_ 4x$@\=y#dDl arW o/}ys￮A~DFSmytTݦ1)ƒ StGq:N ipKQD~p\\ũwº[K_ibY2EQYm}ᕎ`\.hr-k#yCveYzDUaTՋ(;.]&_~8M؀iOSrDQٝ&~VUeI&b m7n'9=x!@xQ*e<,#=͈xIgKy nŸ5Oe-NZWŶ6?n(O+KՀ1ggf? (ZcɵB:vC3ꔯJ =p mJ&]*?A8(gH䂰$/AOq׻ 7j$.Δ& VuAcجϙnd-M "ն1BS|¬{6_bI+TR#jB:} 9IODc;Tkriz-|y+Zw7wg7k(4u5 ?-s1ԅ_GjǤ,&A 5Ƙë^"×,f$m ue6v M<` '" ΡDT׫Dr-$ IYى]J|NQ荪fI|'z w>YVd (yô+ŕUQNwWI W-,=[ʽ-C\*d!^8dp!df1, of>ًu"Ùw7D3> > WqQNF`I5Q NKۻ[; +^p6XfyE55pϚPZXh(Xig %")c+8o@D͂kW( D#I㸍 -F3dUg3E%Ҭ*3*(Ul&boLbNݥ!)cڗ{MidHvtիY!ޔ4L2 A {}Z>MXAؽ=1|2PVPMR@tO(Ea4/nUc澶15P #9kUeBl׵g=_yl>!fHydS F@+;UfE"J4'nsrvV:5e9ҽ$q]Gg/m&[@c"Y<ˑEŢ78 YO~ؐjdBTTr6CliAd *;(fuLmK,wږk S0mPj ~Ppƿe=Rhd8w̐]yY54P0Gė6)HWI]*tF͘@>[U}Q=hϴ_Mt"&ѷCpC);5B(Z2-EvZ>3픤%+'{ţ PFWsy9 U]ȅl1d}ӸwZވ~\@ 5i`8M/#k /o,dZ"Ǹ_oꭘ8;52Y_:"q3h򎼰!lmcнlJ <M~^;O\ul`VAteJGΉ>A8,ql!aʶD3,8ϻ=RdfrK_oɐ]5{d1 @ }S䘏L6(9d€fiJL& l}%jq{_Sy,BQ> a|T>ὣVhl%W%M`{RίB.z r@TH-U;[ }|Lk#+C<Q m#v2Se0 )?0#K-;E_qVړxKDgxn~IIvږo:*5ܥ~ v2'~Cf9GIS4,_߉b`$wxO/pN,[)7W9.6䋍*GKd(1%-ͼpoU) {,h m/)DoFtN+t#o7etV߁Pa $56ڹ-^8}Nf38=!L T[#W egQ7ϯF\]6_F䶭n(0o4n0x|Y5JCt&f  Ҳ4_@Hx'$`H :.7&{MR!q-F_T~8: <p޿ӫXUhA<+y1Vk|0x[u2 Z}ɏ:~y%S|ؾOMqSl[$k`AC~E>$&Oʙ Zs{(' eA /Yp^5ɘ6>\@H,h1{j/{AkH% z2yfޗ҅D/Lg F4'D kL v=J#\REÅp%eg֗d?:N1QfiM= H[WT) gL9s Ҏ>+qmD'» IdOۖ YlGN>Ɠ.oT5|Q 6 r#a ?ZAzL]`lb,^*D?9S<*-:8,%- !>&S{F 6O`"JJWfJFj<p.bZ>\!Ama?淝m(OUJ rͩb_H,&DvȲxY)̀4(_ȶ)Z<0Qz> !>[UD`rw+h IR--ˈLH5E5HiJ$J;xw1hܿG{#E0KK. iߦ#yHgemX(ѡMElw&{3Ʉ$ppŶX<:FJ G|$q,;=e/*y$R_nr+ Q@BSo~ l`j}OIH܃S5rGXbJ:% *"?@!5Ng)""NC֍T UbNA9 OCdMdpCziw*GKHfwm2w{{ a|IU0/,jLwK)n yG D͔:TJi/4En^ ڷn걑ihb4=qs#h{n 'Ju pt 05*Cֹ2ޜԘM啼voI z8KDж*̣-C=!4O1"fM,O&oh1lRI0FGMu!09AbRÜh\B-ZOI/kO0v>W6Aۄ*L7} Gw3|h;d#\ЈN}7%!`uñdpȜdm,rLa"2T~wk;+[{eqye0@w,^ 3gK$!_+* ӴȬp۹pߥ09We-N_HfwT\nk+u Y-(Ŧ\b?O^_@O7bpGW^X+%:xH/\s(Zc󸼿%J{!T}1A}2uU 8#j T{l$; Ŏ`|=f q=we%9e\9[qfO&Q󟝔7y976)K8zQq9j lc?㯊VjJrpŚbIW0UTݥ?M/3l^92X'z-\pҽȜuho8-g+,~@WS%V_?k;Djϣ zlqġQb 13.Z&R ]WhI}Pg +*`hvX[$=<3(O&'6 W"{I`ǐaލBPnҽK^v^Np>Uu:`@N=~ 5tBb$CENxV$ޖ j) $w^|}TV-r&)c,umS; IUR1b:`S%dv6IWb^;[X }#+*3t*4y9sڪv:Nqw;(`@g>wS̛k:D`E6ѣ=Z[?L՘(C߲ @VN0cYznG3̦>{q),2OeKh2m_s!~u&\Et8ZUj\y9 .—(* 6( .[.Ҫ\$ ٵŤKbj+{1F(68jp?a#ѵlOٗ㺒E'1r$JS6ۢ (e,bzoNDw,tv=s7x{\}FGMy&ӑͮ몶tAig CJs<0A$<޻B?o/i: b~M\Q7 A:me7jH|A2a~ꥹU{qI7pmbQNq| ƌu䎻2){[qsCE[#$f /MZCP,@6Y]ζr+#<&Y1rQo6oV]|=bhch!j_>rbD&Qofj`e(`2`6H*ÿv_ {n.˴旿f5{*2uxzf,҄3/J׭^aG\m >PP;4\7@ބ}jj2GQL/tY>T9oW(Dõf** {qtAJs`i J 01w-pD%fhVCg Ụ%PbM L M˅B[lUjR ^XqFuɢ5v/ fߺ rBtlѢ =.ZZ GGq4QHe5ɪIG)&3dD;3rtb*^W-YP Xcy0A'|n^h8j.h]!>-F^1Py (~~c`6 %}^`=xǟ+j(S> B0"t ʟ0QI>UYm,oւ62iwӰ?6VШOdn|LG  CλُiAn+;[Z09W-:c1r =^? o߰LCplb`hh g+1?=Gsa>)4@mmw2{@$aSVmNOyKpnmd^JbiX)6ݳ@&Җ,iDtboFA8Thal0k9YI]q-y4T%j9:0WdCaB2`lp!Z %Z6Zra?qw$u@PC\d Oeͨ~24 +fܑw]Kdҋa[ l+kQ >.Pzؚ.B}c}gF )wfe#pA2-P.PdcrLbpsrUʟ}:2v.VVlm9.pDArV4Sv+ĠV?Dxh@`ݸ(9ĭh V3aAOc~EC( Uu;TzX_KзY- +;~ aVUj{GXU,Y*:wEl.$ 4&sBrO=9XFz} /ݪ'9ae YjHVf`DEk6N=-_p9aqrY/ZRqs"zP|q@-H0 )6]]"2S\:e/bjJs98ke+ʹ딖w-3hn3Ӆ9A9و+A Ӊ4s3L3C2"X3q `uJkS̃Hҵd4v>grI\ۈ 2bvݸA޹E@":m]zPSS:Nvm<~ቊD |-'3T%4L^3t يjZϜjc;J]@h"ɰsgFd9*D.ᷔ^8>m tؠOlI_IĐHFdX൷%y>߯]Hni/ Xb9,*2z٭/ N`JdRE4 9LESoIk2~ oS_*){dv4/+QV`kPH7CTeK.vQ.E[%ԖWW68nj:[8,]Yw=Fe/].]n @NU 1[AcWG`b/Q'ܝ%[RKr.X>]ʘ̋W0`.l\%^n&0QNT_l]3^>ˊzVJ`3ztPW?*Ņi7 ms 93rY15 h_ u!/2ve>bal!50Iћ(]nHF:m"DȜX:bKP9<lJk#]2C/ ;V\am DyYy敇]d4Nr'׎i tzn@K:@&-j{ʁ`i+晁z{ c~Ss8MvZB%'/0/1o ע[9_HmY^^)Pw>?(1kgC;ό#ưKzG(_t@J2$J7„2fP ?T[@fT,_)#/eP,zOfѲ/v@4|Cq5m>; iGN$j|ZDM}ڌ)@X%v M¤;j"2hm}X(ƉsopÈ/gL{%WQrƌ ԩ68~Te4GEiޒH8NaTv]-u (:!D]|p`wTdxsjM_67&XP ;#2#jXFO \g%ݵ\POy{Ms%r!& j`:=4$Ik_hǷ.35{Q[7-$J&q\4py_{t 7X~66)8:oBsq{y˦/*%C%۞g}oub⁇NrO^#GMn1Vd%O#OPJL)YJfe/^Ͻ;"euܽ /z @E,F+HBjbo;8U$6O2F羺`t+;LR{AltGt3o-3+~SCjӿ+C4skR$T5Ѫ~q*?]L6gZg3K8>3g cbI^;S5fv)zg#4Qdn߂.[)%bq{o|={Ѯ"Mndo賅>FLGs;RXx] O In· R˨){<4~<5`\ e2KPXgMJ᏾*( Q[h`<2kQU彆KCm"N ~1 h;װO͹DT#.x;S'cԭO3.c~TE1HulKE&!yLfy8oJwe˒2]LRJW.I8nB~bK}egJE"E7Jw0]J{7@)\_}FKFE`W>"U;6gUI{w dqE,Jv6(.׼9 F̲=\s hh^.qJ]7~Ď7cx|;vC&n:M6YFhŭAU_7_k Gf|˝r1~ÇkkU.H=.ja+_ZN~ WxJcI,}ϏN{4zX S%,+Ό9:jKyEgc;Nan+xeh CϳbhE0E} 敛Ť_(T0g:۩ؑ:Sקl*tPi&!-=8ٳ`o>ȉ˝Ù?$eUt73ǵdL~@UT**v'*a?)@ZLd߰)Z =%D1.^>v1:r:Gˀ舳3C< >.yb?&&lu .Շ+? .Z{~9[DyhSLf.ߩ6@(6}{T }Sr؊,d϶n)fuc~*\C2aDܗQ}#,Vɇ(ȏEA8sz\1q>/5ܖoL1xsXj RTL947,cKh˒fn:*P'mfWO3YTxXF@üۣ.gp+ )& CI$_Ĝhv"ߦ!|QҜ'l_'韀f .?G?om)L̀I{j5zfwG*%~9li+`dŐ0avbDKHfݓRo_fЉP>aT|OC͙@Γ{P"c=A,KpYb )C Y ?T3|x{O.~lV/ mZN^|oy[pӃ"'$5iqF:T~ $g5{\ kiw m[:m= S&82Y9v%u7Gvuidz|8= ƜH$J&JX(, |dCI@*]֙FBN9[EC!˵+ƣɠK{fi+ۧzxy #O+&kqt,Zs9@ZQQئݧ }8Dj ]1i8/+F~uY/+Hwv>C-5cB>2[ 5gLT(L$yJ[i~Sϑu,=zm <׸nUӾ\Z+wsMd)0+0_CBoE>BMlpGf滟itpʲ卫ަc:榰iPP"@~VdQu8;&䪠QeG,2mbn|~,V,EY bSy}/qJށ2*d> )sD [de,XiRvgݪm2^VpGvś;DΜgMY2YIS$ztL)Y럿gb Ӕ~?CV4l6g "h=ܱӞ!TΔ!=Ew*zsx&OdVq|v9 Ulu7dd.lSsT2NJTŶ-+~BQ3zٯj(/^4\E ;".fJ?Gq#3Umga~鉌P<r Fx0R8|=YsvM݋ez#R`-2'*4暃lx챛 vsM酳L]JC_H^{\)-][T['1Rp[Ѐ5\YَT#<#u:&OS6Afq sO;Ja ') +sx*sѳmDEJ7li`Jo!KWAkm x -2*DQSL/Ḕ@o952)yxll1"s${.bR{gR pV| |cz 2V /8oj@wyFx pE=Ɩf"-٨C**vV0˃Q2TbRڞ-5'+|o{ň@rdӔv-; 1,5d;HS)ʹ)H&4Od4^Xe+2+L,s9ύ~ Kw5G!l$Pg نo(T^a`P|f%su!FQkS Fm!O´tPL>Ը Q2:]KbesJP ,Qe,4R)^1F+E\IVx-;8u&{v +y躔QU\P|jIܒ_]qp ٱxZ[3Oɬǣ֨] ȵj恁ds;"%pm;u<3 {DkZ#ꟕ@"d'N@szheF}Bǵz|X6 f|zjHؠJ8Vʈ ;]SZ "#"憣.`:7syrî_蝂Iͺ|}N֙/0ƙ.V9Ǔ|}= ڡr9>5|mhU2WplUtx8%VUŹޕ:#˺t> !VDh \]{P)d6*s@ T0Fݛ|ƛ=[ mX 1vųq;`2Q^Mx~xai=ңvژ#!z>.qO] PjXS_EgFѶX-hw쀉6+RxRyUtS9buĢc9 YxޝjoMg[hڎ߻!vpi-E%J{tuV#xzdunJvJO[,^is(rJOig'9siQ]9l 5, z%%G 2:5\$%\BBhN,KfeΫMb raX筯^/2~t|h@9w k5JҹIa툇^MP? A&>{g'«mBx>&6X bv j+o ԶDBUQc.zCE >DdT1e3&0G<( Tր#fH@A PhzGl6=,#]-C`H7k٨? CMPJYLC~*W/oMPg FcG ^k@?MwhI8@GDUC8BGzlbX#W4 '@$@#9Uu*OwY R˧p]f26ymQt_ؚ$Mt_"ah6콶 l㱛d39vvND/' j8 G,bD03OVAlę)aNn`CSRr}E@ cBʇZlږ)Ks$yo5YXYHJ D4S_@z6M( rT5x|5vQ"Ruг hs28R)G+,4sam1['g1b"X &dF~ xN *Zlp2%J3љp4BI@R~8Ua6[QA>V)ECtya ܸ]%&C`{Dc׺NW[>-(A!xۢ%pTG&ϫ;Oe0R"2 m)sWHF!e<]jxdK2!2H-TOɇg>L\DOWy.љ6$WϦ|`}?N%?Z aڍZK򑽾}G@n3T<{wHlF/y3O`+G"H\T[7O:׮e6F·Ƨ{&lXH &uq;L{“1FBwFɇXH`.j(Y^ءK>)s2`xlGK1+/s-Z\tE׭Ix47߾P'OtVzSF L[j9deT|7g^Yn[iHv5 ?6𤹰[, x<"0UN,KhZJ_6#} {{ʲ/z ' `"^g-?m\x Y u'Q!GAxP2~4r%f]/nI׻#ʋ; DLH5 deCEk^|5BW>zS^4iDKLw(cPZYwHܿH-rzܱ/X$÷[lqӹD[`7w5s}>`29c.lV6 Ȁ* K]- IuMukh.Ry TS2&w:b` ,f{ qڴj3D*ړK8 I9Ar@*ΡHa|jEHoQ"0]L?"ʡ/_Fu\D1X p n' p,KDu+.<s(Ppߩ_تǪ?x `Nmp|IgI*?Iub٥$ÇHZ/u,a~_L_+yWnL@ &f۵sۦ;[Mv5%_:k33%7W%2wg?][MA\7DIP9@x/4ڳ2. v@92,N>5(XcP#0xgM)!L耒I``5r}1~J`:> #g΅fB:l> Xgqv֨S~Bnۮ "kx#1cn3&KOuA y|Zw`DhI%tH<s6r"nyc٭GdL& Д uEmX D=5?et,`e30< t+8(l3'LN*+dOF]dz1R;P2"l(5?|d܄Dkp@É#!a{ ^ r FKכĩ|&l 3QL:sKyt׬7OghpUAmdqs4tt$HͰutz1繅Kax yK}:c?'إbf egd'j툥F׸#GBt7iEm* :!BynaNk|y ~p$ڥMj. گA`aO| E]sR" υF?z^[1WDcY8Q*aFUPي>`HI-@aQ(4Rsty?UQFfmW+;,8Ӗ~.#~#|]x@l|*TpE^;W\Z)-A y© ?[3i:Jz@UO`[K%{)]CZ`u;z[chk/3UѠLDJJHӚ̠`l-fϹO#~ɇ InxG(AU_Z)4v}N3<^phᷯbĔcY#tNe{J p[Qn['v!bdlV_RِBXq}8 |;pU7!Z\1p1K [9I^3t)T`k<7UׯɔI>+L詆ZXsr.z.r)I^a8PQmXV ̄vxYߙ{p=:TʨX6R 0a#-Ur m]WII`hv,™\/ D|;"0B ށdϞZ23Y+m+s{=g $Ǖ@mCd@k4(= Q!'(%I(Ke>+[s'TWq2>sЋtH^dn-Xzqivan@ª0S- `XWV!^|"Dۇ GH5'-־%%ޣq)p$\H4l*hg>H}P{8X,94 Hizg.n4Y"ZE qgqGCjf1K\HX C?]]mc}H\a4&2C3}Tؘ)YQ(688FGA~`CvN?IwN^$aC>⾦b"_Q<Vg'B%l[+zP}WHHƷ8ۂ7ָ<7'@ae n`LVX\I ~xy̺nv\OsxŽ(IsiB]=%(ag/KS`qx 7fu,4YF;Su?kם v/+FC9 }*kW`˹Gk>OTv-3+Bw7\!:y@7nhf5t>xZ'xtO(ELc< ~oKx\<^R\Ca,t2e꥓H 5{G} RW0 _hhW{atrXU䱚gDHv÷U{ G&:E!/N!{ȱ; ʽnOwPtC␹jGA'h_/=Mj1=ڏrS0J[eoQ1vN 'xp2}g5>ѭ o-4q3'q%וl~k25\9|~gux"K ӢBKXv%nCY#Z|[&˛||:y -[7`g|$3%d&VǷTIJ ]G℣N.AՈ"lLN0pssӘ6T%`< l3Ub23.|swRl·RHUVz9wʠ߳6g[U~wW h"ȞxQW)e'.mc*;9w;Zo!{*?jh&<ioeAr_R(q])nXO)UYF\˚ʺ16;>qD\8ιM!V~ QPL&+2)Мyf;L2l?pF7Jcue'XY.v]6݀mD~.Yᗮ.aF "7Vs~hc $wB֔dl("攞#|@".}RdK |9'%./㟾j; X&-%KpAB7N|B- Ct\]GҤhX<sʀ@"~|bg`G&>,ɡ)U^7lHhA2\nbX_6w":{@, (o,@g٤Aۨ𛺬+en*i$1dSU]tsy@fW8c9N[4E@J˃G./íU1>^"֭>ï9!"{+iS_mMj= %.?AMVcڿݷ#uZa4r|'a Yr~VJkgnt,;$:v`5 i]ӡyR ^Q8Ѡ c羾5 "*S#4gqrI֝7 [5M27;|~,][J@hC~_&_)[,>[gM0ԀM<x=j*.ֲ茳8PE`SG2XHOh\fI*u]y;t#Uг3I7mv%J˵.x`:Sa|VeZc4ιNk0>p\ʞ81DG)0rsY^ݨѭ:YPlVKIlnOKOf&o>zx\!bJP紒PG:x>JDRU'fwb{np#t۝c8/3j']lށa*IkjǕH2?”:hYˇQyaYbBܾC[c ? nD~ݣswL[K s(G{ X?JCKgt)2̾͆^d!ַsF85@fO7CĽ$N4 QgU M^ZoX&r g+}G?`@-8` .ߺ``~i_9B*_ץ(:۵=ISNQ 2G:P+ Rx4-1s5}.eY Hꊄ^EABNHf?,20-P#!ߌS4v >7ج;#zDW7/pGn\z02/|:DcS0_Ahn8M=hRb9P{׮_ΥC<d Db=&U&Di5bQ\}d O Y}m*%k~֡ rjBڷեʫbU6T9+  C)34lk<3A͉u;flI:b">!Q̟JC"C(\P |C]#:=C67AG*d&(սUZH=P>/=x%CF>8y=#ݱhЊg)jz ;8՜L;: })ApXZ|hºIϹK хqf Os.}c-4֜+Y KEJ$&܊/J63? [1t/ n.Ce(ݦY_Թ sJ֡o?z)ty끼FrQ 儱()z7iAF6ɀ{,!z"e#y"S |A0#d56H wTϏ_A ͞xhOlFw+VPk'(l_:W.-p3m Qw Όf괢Zn<jP~#D_٭kL$cQU.epMi#I¾FN;Ϙh|(Q =׌IJX(ۅ5|-X|3rN2'0)9z<;z'H 7e l$B&Ykh|)8c0Cʭv Ĝ[-_ʠI#贚!дbSAi TC }cPbbdHz +<ٮNF 2!آ 6 ډ$X4 GN I@fU 73FqR΁qlƤmf'9'<'|n9%Voڂ{NƦ~!bjmkѫDQ/-UAG٩egυiz""(m:΄׺ rW K^~^~' SJp v/n"G]@hT3PG(]~La"D,Dӣad KL~scKYu;lĕZ)N$pohmw,x4yinx\A !Fv?Q ek@g%`;s&JQlB,1m}ꖡ k>P.vY,&ےr# dИ[gd mue2םv; t[@*wD:x&IN&F-5^[ 0Nɗ7H.u}sr"T! ?ñ"ũPɡhi+i_ӱ=h+NF9gS.Uz U{W6PԑvnSamj]{͆=~HŶ‹3ͅ01I a<)H58*ˣ.e/PJp@#Pd!/?I|]v|* ƜHvg9Ф`ؿ5W''=F<5 ~[Ҏ/sҟ "o_vJHѴ {:1$>G.t`Uw%Owi٫$ӯK7 B!s-L;Wu{x $ |UnsF읿oU N ?feQҩK$|t-$߽X)"M4O^)lR"u9]\2rsspC #kd &ۈ TMO=sM qc(ڳ;M7!eN@QFY޴ Z;4կT:&Ty}O~he G @YY!ꭡcGXUr.rkE걗y͇(q r5hqH倭[]x8Bj!ѮF_6 XC$+AZwPf@ۂ&=ƀȈ^ę>tCu䇍ڧ:_%ń[&u\r> R:΅l0o}+8iMj?{A֣esw@&D+!nr. U]s}c`׋熱 I<gJL嘭}K e3qJŅ.up>c?36 =fQNcyC`1EڬqF2U2[ԻG^iKc8Xĺ)r*j=,]^PѮ H'y>/vð᳈_Mn շītt3e>g3,: (H1KR|Q??q‹PdDGVG}aFe>#&…#%֛γ J?putIas](u8S1s+nnrQ?m4xl̎bC rm@v"@@4uS蕕OٟVuxSF4:v- |gdLV{x CDd_mBUDma5+k$͆ zdk{+#=bުIV^nˑr-Ala'_VHUcӘF>[X`_NT|)YJ<59zG5U꺖}wʜǫ!+MpTϗ#DTl)Ќh7FxP7Bl#Uj6 @(0`^_2 :T :O 0K8&8DӾ\%14ĵ[# F+$16gGdbO&|rVS8vp'+P)`ɬ7PXFVaC)>[`45zq̰gUܼn~^zݸ)L1 e: wDH&J&b#iåXоp-4ͫTɇ{oRAd 7j /h&A` l7Am/ڨ-mS@z)Wzw2u-ԣptzY0O 3N\[Q>­^?4ov)[Up: vVJ\O˱ʼn{}M>-!JL/3k?s~i#6uP\sӿslJ {m r$yVKկmǬIk6R{#1=~<IYPL˖pjM_:a3 ʺMeƜ|yOJ ޱG&D[SSa8̘E5'a D9=|N&Mإ3G/Q ___qrAVY;*F̊'xtiڕܗX?oPH!)$6I\W4 lL/gD3S: TzD~Px@[vzA@j F'ݠD.5Y}[z'mt?RaHJ~6+{&[lkWNJb* Cf i"t-h!``Bs3?#ElF WbH1oVf|Exi%DdE-b#RH4z:c;b@|&/];.:LI9l!p@ *T' hc9el1cqt50%ih{O1 qMȣ_{4a~"Zd$9ƍT?BjQ<-kEҤYB>|U(G">zJb] Nk\ tc)5bXk܀]%bV9#.jC@iFMVWD>S#F6NcIc[1.O8UIOk蚜'4±'Xf=9| ْ`Wݦ4t~|vDDĜJ\1oK-Ƅ&hF-z8lH)J"gZ%,пV5m"S[ڡR Æ {Uu0⸄w=f4tO<,[k h98"NK?i:9IgS`5|(03DH$ L,.p~㒗Z XHd) 0 ҕ_U%ɴ2O|C1ɐ]k~$JL@[BSY0>4a=ĭ^[I{ 31 "2{7pU9E$=O T bSOQ μ]u Gh_T%jJZ \jS4u[)ZRys]4jaEƓYyRgDb LhJL["JvZʧiJ咫DfK'}͚cZ4:`L `Ċ*(2Rv`Ν^ ; 6m;TEBlU8k_#vӌAOZ]fyL_%RBÞ' g^~l&FQOK+C1}$* JOȮpJ@bU+^Z1`$!ʪs59utmNgE.iځ,YN6<(Spv\3N&C }%Q/mCG <AW28.Z-Qn )]G*f4G8j0^1O[_0 {D{J% >'W7PXdRXf8wxW6D^lkOyh`A.co%UZ#CJdVÕ{s׃sd&fcVd5~2驌k~w 29 ֮'{xL@YY4Ni/~ .D: 3P1nqt֔z?;K2;b4%#fx迷y(i[>9XY\G 94}`ț %=M=*la}[n}귥F%}žٻroܟY=t v*?g\GCQB/r14ÎH_8C,dD詓S(* ۽v__OVc팢[as+h욽Ha 13&Yp;ӍЇlb_mL#]g נRDd+ӬĚjֈſl-ZiUCc؅ (߿IVt]awf>eD!έNZ+<'.Ihu ͞F)#Š(%;wL_Fr%>`M{/Ӄ4W/0@?zPXw<2Ceik*CsX'HRۙ0,\2bNg԰;}Ro@K!a/Q4Nb2\SĹҾ}H ЙkGƮyᶘl H AzyڿH!\Hx3@כeuD¥6œQvF:ॻխB z/d.Y3n{8qU1 ɀa6 dGMs,v 3@GtbZp|EdW݅vaR P ԑhYh"&䀾O}٣,BܶCqL&{"Lwh _9LGX6tuj/Ry|+G\&熐n=3d w`EITWe@]5Mh}&&ˁf>/ 'ꄶqST`>{p<wAн-GD 6,\%dU:qWy UX@eV nd9sTy:,C[ty5BsS<XRINmځWoH$ Q%|ig۴MM veʃcNL])`}bn?ܷhYBrA`JĐ$YEu)6xC?@Mxsf^E%5F  e Q<躹2Hz֑Dq>9aڶ?Z5=230a$g?ݵL; 4lnAx$m#gCQuӒ|Ytpt*hWaYl-09PI /I m9,`qC tQcZ#q/WR*cOYޡwH0|*ь-T6뼕6Ժq!RSs=uhUF/": Z*e}pgAGD^ M$^R](;*bt<+h'u%^ <<1g欹D&u&I;C1]F k y؍q41酢A Xe5e-&gGN.hZѦ]74h˛{`= S3Ɣwe^tD2~{8V)aklLۍq2+`⽐UCHm't?:t@uMViXY;⇏(6ʠYQ(וK)hߜtFm}ulU䪭h!t.%Q^ȾSgb} \_+ ӭQ]2HwsVt!٩y)xp/7PIP2 ' B-"s FКGr D V Bt\I__,K첲9=ڿu|ؓ Dɫw sկo lېCi _Dוl{L-h[{d?Q TB"<\oQ)hoBA/۷zPəlܑ̲c ҍΪ7X+dAu ѧkW(RZ;PLW]3ZXEN_|^pP[ qG0(%zx)~u![kﲙ7fMNj8rA^3~` Xhs{xBImd"kCdM#x3HZfYJe\sA6L KW}u[Ds*t£^Է`͛ n&N_ pfcq $⵱߫]}k;xC6Ē25%!(.Ȅh LsuO ߺZɤP *׀'2|:Tsw.I3RΜn{i^c$0Aڰimu rH`ztsM+Lk-`=w>jͮQc{9 zs,bӻTk|l-ܐTG=U"!+mB<[('2"cS5XxVHpP?>Ũb٥O,~IHeQ[ TVw^+xG}DniGBX3D񙧹=,hw]'_Si^#˾<⮚0̎<Jd@Cz[# ڍ`,YR |%P( *Xd5hbؘ()+-5^P$_sAU%lKBt_syO^Gl3 jJ=ԬDM7./ѐ$s6r_Rd`UxK<ϐ+16!\$(:5aU JYPIiW h|J8߁3 }B^7zV??z9!4u>Ǽ>Kׁ{Wu#bE~!]xersMH%`K԰[, .FYE#sF&rbBnV/bD&4b(UQۘFk/A%ty KW@:g=IӿHLRIs0uB=rќkb6  9b^>r&+戩  {QFʤ!(2ԽAvc"uQK$8?ѯwy,0E}d'&f' w5^ADUxsglqmԣ<@U uIE\eHq=F3ڰMbpb VI KKrCmct 57&| 1^wOMZ)0O\&\NTp7({VQy8ɾ?X9.zmU\1!94,YR].[59,@P Ɇ|h d s d{ߞH([s]L)iΪ [^PqYL5e( ]x9'{ R[P hVD2y2 *SWV,.``NZzoz#fNvu)ąc_]傈V]1jx d M͞,$JLibKH fL:d؊5? YEɫW%3xwx<+h $r0 :8eۖ6M1DQU#Q*^fY*9N d(MJKiJE?d=:'Fo.f=<0j!ډC } fM`"cBjWt*a2t`:.n]S!ffLiBF)^:7;\Y`9{I?+ 4hY7OA,}Z" A5Mt"`#1R,P ק6ԣeb!yc4Uq=95p s~jI4UhOCQ9yàr^M85M>ayT͈2N[-CѹN}b9i\k]*c HeHH  U)碡J:ڇ &+b1:۰9E3<@?_{0Ep Tmz6mKOb+ H[̜4vΨ3"]Ï22d&q{[{2Tw]).C)A/ͅ%sEh<f <R7O =% :(Lc>3ewjXt/cDj?vI΋xsbBߖSsC5^.s I)>Dr 2)\ycڎU`@4e .-V>CdTeIqLkj {MCkyn(.<_IN^,@s"w̥4ۦR?=ZP9&W7F:%'-"k>zxS@ǎ@o=kSnxφJ:CmއJMZY/^R$r`؞h@sJ|Hw,EmÀ F f&ku[EmA+FՄxU7#kj:M QP9Z7Wxɰ^B-<GEI4[8(YT]\)I2V# T ' 1R)Gf$dž*i2:QK8:_!|.ԯ&jSqQl1~V: 0`g<&we mu^o f}O\q]_^-&qG#'(Y ;fW.Vq (:Q = }bD6Kx` |MyQ3䝄f)XwTQ1`9`fa AqKTRJ,$GnG-,]*S;R?ݹ5e8ɹ: 7;=MJIg pe*&id2B^]:#>;$kS'%ָyNݿ;*bpBhLA5Y*)98y(dwpu=S[~$CDMÌz?|qܸrć+Jv=cuMRt;UWѡVVcll\ '/^&1c:Ur_Qu]F tH)ȿ}˦:W񝈥k/W\t&K5P,#!(nXJ(&TwoR t ܔW0{^T(6+H%hTtkGzhl3"P[ IvzҢeqq;|.Hݭ^v,XpT$N WX04ڸ*q<})*ԎnQ;B=Řn1L.eOe%=f'ɺ9P/`׸;ޔFjI" m{˓ N=upx)A`_6}LGenU{nw*DG{D.Ê=OcTc-G bF ! /z/AWTO!vs~lI3reKbQx=~C9p'jM*Sj$Eq16^o]Ŵn> tԡq9&3úrHuqoļcbQzcef|.J?̊.:ojM'ޤԪj\4dUanx3IWnX{A Vm4薃'2֨< uC&YZ~`hfKsZ'} ]1Kx ]F #1t 38y]rڋ6: r:-M$NjE?!av6u] Ph3h}݌yz֖?V6 WN\|P=:Y4BRLT3͘F ?h!Kb lz:l$?>ޑep 0SkYX؍J 8u$#z;0j™\i$ wvB?ĭ_9ܙNj̡}-πBcԛ8#xn3B@TpmMab8)Ā gۙ)ٟOJ!ƽNBU`б -){!x81WVH#k &¦:H];qo?wqG[N@2矘,`,I+Zt츅U#}=>$%bD)r< @p3)wLF[oPc1gb忲XDeb7 tH*ȳ&D`|YX:ǎS#9&_i,/&oɅX(Yj!NQ6[O/ VF xܯ?t]Y7/.M<ȺA=Gc5zA&1Z{&@Gg"|yIQ|6tWAPl^~6!"&LCvaV[P,|DǦ 0~hAAoɵ Ȧ?q{LGq$VgnKtlGz ]F T4'FD ȖL *V+JnR1@%>}X\ZJ ^zk!YҴLAbL8# *5}71,~#P@F]n m%n+x@x~@x!seM:Q%7JܘynS^y UͶ(Ej}",CwصRn|1q-l  4ZB&|ǒHZQOXϯ {cuVOdXk c2:M>DCQf;7!tzW`R{ۛ5P]6@Prb] %|toE?]#:o]#ܕ)i ;/RדS_痥_{ J{/7]=gSP ;Uw5(BMLI2!sy㹃Rg_8E,1lG@Q;xv:!c Obb([ _i޹| ‚W%B~j/k3蠃WW)$6R 3X_biOvn0_Y0jsF KOywsW8z#$`9@ϬP8-fy0ˎy@7"a,R=}T;б;ycT!oK,1ş+7 ey[^6[ ,Y\FMuW/g% P[tJJ8eeW\ ":݅n}{ctspr|/iF!W#$k@NuRa>i&bui/nl44ʊJ5¿8CwW1݌r1'aNyz6Rnx`ՙpL\<RhvX*_I;cSѶsm벗@GhQ\ 5lU{\$1=\C0 vMT>ůg~i#:l8]xM6X^/,>0|0C /MuRo*@z<N;}F@`&2m=W։sHײKdMBT? f/.koAޭc/DCY"}"Lד1\+ F}e,!JACs9?D椑VuL?g L3i{` {09^|o>ka3 {WօrWG=:ܿK% rUnuH=MJ*8Wb8Hu ׷i9_ m-X?J`iSoQRl`U>|UڥiBk8NVlQ.І^צx~]KwO8;i<6%1`{.`3 n!SM[BCTWm?./9HI! Ha`Bܙ3!ӓ:Ew_`y> ptOaI ftHt 1C&K\ب*u,,֙C@؁#mܖ1¾VK RB x&n@^)չCHB5# Ork"8B.T7Z?:}OpC度F3fN:/'S;*'ߡu|w&gJ[NmnadƏ%:e+/a\>[1O-py G:0! |&;d<-淰_bP조{E`>莁>^IS)mPwStA&2̒ Q7Q֍ n*:^:rj 7e:,/ MaSYs9v zȗU cm{˷s?74_D ~?#,w ;܄+[G $w}+8>'ؓ{p6WYHe}G)DBϘ޿l7~-\Km 4G&yeWV(jImܷyET |;]bqkvӮw'@><8;c]OWV49Eb~{\,%9[}mT -9BUG|LZ G[怠f88A%l/pHRaEwJ~g1ի 7qGKKu]b)wt]8V2~ #${۟ ;hۢat =E`+yu:tW\e 2mꪙygfVTP *zZ,K%S Ǔ4;trx"PY(?-G!lz\;LF{2F@sFzJ,T4Ptq)1w o}osq6=Pg^t w$|R yA_d$4XH&RZ4StB' $8a> Hu{ S@Y٪GFMmE!h(۞ujv 0%!)KTɸnQ{{3׎ܓw!in$ 4Βԗ3SXvZ4jROd;(%6I4~T¢E"SH̃h?wu+3PN<Y5e|I9k$Ʌ@u.J'usMGWIl`2fJ K>~$(1/* kah S fE5j$}:VDe)2)py JsM( JqÎ7zTg3$|V~as'g][KS|)\@ydglwzܼ)3 #]`gz2==0O(.D('P^ς ]B#_4`Oa0_^z7v xV HO{-Qr}ϹK0E]R]y=d˓ikQ*s։XuܶJmb*rSxUő{dWǣHT_;rhDyik9ݬZmyNr`3BE`YZDa#gE^+`rV+ ⴅ4b/܇bo1Mv)k_H<)O?^19\kȧgdKMeP\u) TauJjסCTy!+f \6-RԶe9X{qmg!hnó]׺78DH( R֢\˞ꅾF@;FYgf6 D>S4~`ؽp|kٿ6/9)kGp=٤͌^L^rzO9lWu x{:k fW=-[R5$uTㅅWt$^Qm6 !ҵ6.v{j\Bf~鏲N eO7yodȱ~.]DP CRdт e/#>e# #7: )&2N8*C^:ec#iGr4%  *U 꺂cw[ul2QϬ_N}tb%x]44κ!Eh%244X7ZH^J@֌T%Izo58WSf]M|,ՑRBG &2l@7+i1Z=YuJ+!`*nƯw=CpǹPLXa  aXh!Gf6_ f`קP.GhR@.1"'aX!Ʃ[) ֔CjZ2JƲ Z[>q5a* ޢcAQ5u.5+ 8K-:G,zT{V;6>l(CB8E?唇* jNO\@hJ{SեVKݒoOH_F'M 7;2jf-].z`3JS,u.Ku}Ћ8u#zesWWْoQ oD}k'<_m} {N1W]ACJD_P1mvo`Q6UI9 ^pN 1klq%O_D+bQ =%[5{1E4).'+8nC+(%L[wl`v578Z)"apn񈎱S`>"=)L>lꥂȦ`&##ې*ۥک^v8oҐ!ai \$nJ- +֒ţE EEE($*tQ"Gp.! ~T練ChH@׃x`ףV̮@w)]jʊ?o!\\ΤQD"q5`ő.YG;E^gL,`J cd!L1&En]uY2&3ߣ44C*l&;2#N=]q@qy3{m(FJQ<*,++v^a;hv8 R':Eoj7mB_w3&KjYCCIE5H_7NwZdq>'3._*80ۖ|1oDt=s]F?StoZgMT{}hu:Sˁd1Qt ^ BKIrnN7P| b.Hs[b25chțQ CV)!_$I+hzu<"@uǐѢ:"qhn=~]v+ CRɕ#aVy R5Po໲SMzۈ:}(a^EFU欗UGyb$M`q2:+B}м?"}WMA<$G;O%i6 NFD 2O Уur$+^XR5 bٵE |P;ZPm1YfiY'chp 8#Η/ 'vPj,A&\#0JvLSGCyFd5TZd1d)B>3RG {&}8UMMs&2'.?j$;享I9Rb`bՙntW /a/Uv hЊjW%1pcw,Y+Qw'1]Z'Ӧ2'Q˪~$#vUڼ 8fVѹ)(ЛfbM¾=b 3oύv"PuA޷3d_|!ը#mh&c{׾$;JnSȾT[v:t]6%l.fEv)ijXȲcg *Ƃ]UNSsWnPe}^1'7U2ƧR{[*Ui,tPO]C[ȗBey֮KUru3@[Ć@LG6Ury`ܾ(Zdk )`ޓ dSqpANp)6ڢxÁqYI)"\}֓]Y5WgVnТm^?10HV$ R.8LU;G Bݝ, P(n9?pET1NP ٱ4?C9dS{(f2GIRsPv}ւ<:KݖӊsP=9@&4i;?KU s-M& .끪xe<ɏ!"8@7BY9ImCJmvK]|}=+m@IVʂBb5Kj>2*;n* ZҒڬ;oYÔ)M$ܳmbةVc3OZÉʝkn;S1,-bv4\o \s7+v΅nZZ5G'x?=,Zt  3O}|)ִJ'5?Rضtrέ(mcɏO6vk H P/@mހvIF\{EBK?NAJ&nHa~;@EA} ,rE>oVkmlL?\./yiu+0K2&0u1#n^QjU0<[C[˻31L&Ӯag`X2] nIꡯ-tEׯ`BըkP/ (b@a㒮=zdG힣82c:QbѺL3<.k^<ـ^0~L; {l;bRd(lAl9ŗ*-V81YDNahG.,~&`go:[CA[f2 gԿIq&N5|YEh;{1YsPy'8Z!paEx{?o m w'- $I@4n.Ne9ޟ(\9׮K5'^!4kY?*l(mk%Bq| 1d>Z4  ;K cʒ Ygp= *Re *$M"ȉ$S1Ku&3 Ľ*A[224 cH÷ч@|Y,BUA"¤xrRME ϠYٚ$au+AyP[Agnhr"\. C$?+kJ? g##mϗ֪~Gً4ـ1G MuJ8٫g=IP>R܏ðӊ 8DFk \bĩ{SfK *ȆnNF6?-0s..W(*%/t\ w`/~K[D@bL"UMsy.gHPx~beGBVA?9f +\=يgD!4:٩p34=“lNKmϼwO.1Ek}QO T 'MHr?@UiJ:N/%)[PS{ +q-;6 b4蛒 *FmWqX#[cP89 1_fXmvxTWZOQ]E6(#PUuugq\{K1Q祰C-$sLBb̀eHAcEa#%\Vdf)N., p߷eTْ[ooE}_Cdyل ^8F9.1lYOEe'-'뤟]8*X<}+ *ǁ81Vciց%lޟ(5$Z3FǗc'O_7 #㘗!}ڟ q9BQZ=#;f6v)pb_}g0nalAt 1UKr$1] y_!E?|Q^)DzDrDmKHB?d zr6Ǘ=JCY,TƂ7C40/¦ocQaTot|/@@ tI];^ Cf6ve] .Jk6MS"7̊l#wJWS6&#{m-G#2HM*wiV^=srάa)8T̑xS+Ͻ aD7JW{sxTSS8d0::L~y8zyt꠺alz&|ezuO"7 4ҾM]3t:A2a'@e{:bHC+7]4[֥ 5`U@":#"aa 4wIie29Q4I#:9`~_&FwӃ9;ZͧYGg8]&] B7]~\s'NG3w]#n4B8 z fd [,:gd! ;  &7ydn75r5Գ83/VJDDhDANum)Jo%  >\ÀEW ;4Winjz(pLi7 l^4K]Z[#=N aiЯck<7i"r,I7ֶqS i 0vO#[n o]+Lcn٩VBߘ(([HoGbS2E\mz`/ )@VV~FH/97jPmykgĪ1#&_Ny-! a7OBA{ jt3E2_Z?;첳?Ao ,0{W4쬛 Jcj8?YoA$ɕ)d^z}gd|; @9ɉKbv 1Dq8\ FDtNǑ=@@?*d"o2fmUj*G2FWoOv"Z`{8Ř7T"`ToKsoLƦtt.b7Hǜ` ZKUڄ3ݍlq40[ޢT,3N'mG_`\XuPC_]Dտ@ \%/v#da^ Ƭl90Ib_2wXSg"a6$E.9HΒO@M.n:5.-BտďnqꋮaeKiASpOWj&BVi괌d ;҆4f#$t@.e|q UIuG*ъ:CkHj N4CT}Of ˶T0 X Ԥ&i5El0ZLM@Nq9 (xy'r;Yp=1JV̒w-B%ɺ몃2A ^(V|loUٌMܼ4B:.nX~XfНiP}tc ȫBꏨi;v聧sSr;/\ Y!PKo؄1ar}qMW7YS"`H܀j|;H8FymסOqTO8|)+0cXk⭧JpP89?FOSߞS7޽Kjt6ĕ&n绕BފeerĔ&bV0MxقA' 5`t*'qW++pV:ETmk1\IYڇHAK*EQa܆};PۓV?K>U> }i"F^?^<]hQ"H3D^҇3C:DTtGor%7ju{(= ݘ,#ڄL>'R>(kFZ@^K:iՌ|?4窤,9?e͌]ņmu 'D2UC*Q|XRhl`r>43rh5C)+M4 ʴ}Z;@b/ƂܡgK.W+NaK?H?3V}3`fx0CFc@D{VE*xR7~r/Rx`^Dm.jl=4\ՠs+RvFH;2^L6Ηl0`&Ia;٣p5YA͉_2ڵxUmʿyCҳݦ0%r0)0X@{8ҷFč;GF@*>3kə۲[W}M|z2I$6=EmzA Ԃ}C dLӟu[7)IU~-$q.::. Ay.mʞϝO5#>C3෸ u\FZIͦK= zYRӪ50^ , y)mJ?բ<@Ky9$lG7xƺ#b >ARj横lV!{RA 8E,$ [m>F\1bH(`$`Rӄ#0-(snTCRIUp\xw)dH."jD|~Jnž=]fUěˌ%3QSi!Rﲾ:^Э0ikl; N6QF8ު^?W<̖_."-Y~|RsfTn.TNv橔〪{fy5<"|((=s>[V: ~v.YW#h֑M9to7o b8)B7:\Ck8KK@DC}ƨuӧ֖Юu}A{Y&u5~I6go$[m20_@R}jȬV+2K,Anф`̃Ŵgs' nE) kϚ)G ~cs5, 8Gr}T$306e\\VJU-}9pwy:&kG6!ـđS)W ,& aiĽƌ ,欥ZP3Y'D L'g"u2ӄ*ގS߽[A'Պ܅]߃l-( ˁj] v]rnޟ+L*G(rt'>Zq{!_JtC<'\G fVa"-+Xj2Ӝ{\!h:>_7vgch Zь\[?9URvΡ6٢D =d/;2f_2VvFfчh}c-!! 7>(Ta 69k -o6Zɖ)ԇJW)pRo\fщ3IlȻV/R76&%ޫ?%6<`,W\C=JIlQdc3ne=!  ƃݖ,L$ hAeQ ]ogmDŽ+k6?D!~B54bK<?j w:Zczt}]Ss6z浼fx&mJ'~Z#>DT|69W&ަޒybR$3m<̻v+v[@fg[&WSGm`Z+D".2JkbQ|\ञYq[՘FJmdv *L )˜O4z$OL)TRA>&+l|S,.{wl9^2zQSfngB̺fG,0Wo[P.kepFɚ ۫U\Q~Y(rDX!ޗAHG9^ #^C,ׇ2*H#]:JOCw|QWd4`p0sΦ8'?:L'iU\mE(uuFH |,_l$8|)g,2>U8A} beq0!Pnj^)"=n7#B$5" ;i>C"uL/ mHt,P@p9U\*G3(ɶ3J!_ W̵0l' ! n*7zQ aA0vJyC'M;.Vtbx9Zj6a!=a p%VV@%L"pomg H%)dcH*qMLr]M⹄ A!5Ϯۏq17&.2iTf8(%yiq#,'IU!L.nQG.}ez0޶`pQ2LFsg_omPW7]T FTQFqr z7.e 4]fߡ=M cz?rZN]|.ݫmg*aVrP bfĵ]6g5Օ6ĈvkBrrrtXuo I$xi#@BeiHć9MCRh @GA-߫uD(YpatG_8aZHaria}wA _&zbi-Z{r-)U&a {A7"\pV5*c‚UZ!0j5ƌ_uVZ6ukjs .5I(Ul9us|k$u8^'AYV,ȅ$o&fhe9GP¥DRMKҠRSFIΩ" 5$xʷpDj׌=ȋ-ogQ1n9 X" ݛty]F]`A"‡3XԸ Pԣgg&]XLI!Lo"v['S6t#ÿ4mVCE2ےі.g_լ{s Cֺ+{ T'nh&-6xWK&bԘq-y`ǟR'FL;5z^P +ERH*8N~4P@F0ve۬Wol~mvG&9W>6ę4DGmِ3 4\C&Bo H='a %Eu!`Բ;ޟEq+"{MΓM@c5{M9c;Z3EŔIU;&va\a5^bn8 XUJ!e9Ζ"BQJBd?ĊXǯؠ1dji8뺖ߡm:HDBCٕvu`셽vJӄ(P3Y~F1LwN< /=ϞBy=ӌ5>+9jBu,h>E%"Z3\v1/22WI.!f2WW w1PΥG2ж52B( gw*c OQh4^Bvc`uϷl8-mŕ@ƋA3O͈^&8+H`!,HkSľRTl0Z{8( -_/8x>bjC;| (QX7J^Kbq[tΞ|7wůS픫0k YVYasnڨm?6IԜSFlv,BB &I<2N}iD|Dk +N ?x!!]j_mJ\| Y>~D~izSXZ`3)obM##1-+ɀOHr?Lp4~g(Z=Ӹq:_F#z T69N+'cf,4(5:p:IX|I-i\q3P#%k%px8s5gj4&/yy|XmCR;.}&kwdf%:=$OUb/D|ˑH+ۚt)3&QD[''_Ϳ'1Hf)aW#~F+Cv"x*Cv&O➴g81A0 R/ Zqvrj"=QV JHBK3csx)s՟j uى kZ?C8jA?op^0OgU/}B24lS=p&H &pRHQ$:bpHv6E{D\&:C&>' Պd:ٶVR5i0qNJoX01hn\kX?#XI(W{IcjK#^–ZB*ZM3Y  ?3g7) YQ|"JćW5w_H6c}q:_28 S, &g#\0:So1ʮ:^$?,Xq}Ul Jz FXB EM`}_ vqn0:մ UN>};J1}ٶV>;̗;^;]/&n 7ZWo X*DXF?[!McC"(#77fQAsrh/ ϸB?U*)$NOۧa%w9ӱAЈK6lh/'iDcuc1@zBb)>#1h1BO"H#iF5~km: M u@Z=]< Qay( 9fIKVc2uXȼy1l>+<;WFE3o[}'`@B}zW1J9w8[*_0g1pz gGiDfřܳ3Kz$pZR﹁Wq(C²Θpt r2)oICkN YDa @zƽBrUC`VYI!^_+zG3Fnr?vޓ#\ʵV$M~]YD+$ֱᄠ"/eoRb~kjD2r-NRV8L ֧E njyK̈́-fѩwM)@{HrY+3lPNGA@Ow|? E_f~~c~^?ԁ/xVߋq:@7%@NDtqc5ک7T4zst]Q<`A@$0.6ty6-Xu:eR@fJoD7'ْ+5x#M*_OÿJn&iWn}tKy@Jrop 8B?` gEʈx kmd#${>WI_͎S+sq o! .u+9\)|6S~dA xeU1㼛KZF3J}0̕.`K5y?5G#~$p"+ m,Lr$âϺ[V_˄/O(Wi?D>C E8; C =.l&+}%`2}!" >1f3~XMyQ ިkН׭j'Ѐ c1otxnʧ@eR`t)蛼H3!&73Rol1Zcm^/Q2xq 7ɄG , -iQ+xM.^s8E*A~׫OiMҵ1{l$׫>AHe8\ R*HhKbOMy;cAHM1@y3ͤa {81 +]:|%I7mBH9''층'=;Iߊ[ 8zV ,5?e5U!! QwU8܄m%;)߂'dҌ|M({4Z,Pgp[$Ȇk]#2 p9 ax&9ZelmPvHnu:]:1bs~3wwmYU lP۴HtZcD#k!GK JM 'UO?J V0.83HTţ¹j$'? z&FN1W0BڊYܘq Y{N0bdD_(g!7l}>MǥI@#GOQ2$ePOv'8 k"ܲT-WJ,[R͵9\{1u ElB%r!kn3D)#4PYvh[&e28hp.??u~v#pP'a4Tڬj}%dHd!/ҭ7oJ7 ;4hfa$9dObbq*6-+ɚږj$Ů5^%} 8v3Am}/2U͚#ԣ sGta.V06[(C_&ȧi}q [*(R֣2y]R@+s^U,vb<bp#m!LF Z7ԃ$o6vp:rШw[hSaԝFYxմ4M_Uj[` {Ix$;m6cRz> m+(f]KcRuPxsCvנ/4 "+̎.!Nޅ {+qV'Q:+iFO!\{%kJg unLjV_CTK@Ujɡb 0vK,u    )m= kޞڱMPD-˚4y%vVCP?\Z5Z^)@g:Y_Y)t R7}4X'_!y٫'l9Fᅾ rLyyLfd{N~If.z_7E.i`P{.1!t}bujM7-it*ޕ>>5yWޮ\ E{qk‹kS-oÛQN)VyQo-k e_Vqxψ)8o (ar(,h`.\ɒjR>,gv3^%$YNA}M\7wk9ߝڅU+⚗T v5b$8\"bZ` w'6_wnjYyݖPmCP[gZkUjvXyjI׸D,Dk>zsUƏ33ٝ8FbE^`!e[us ;,̼w"Pi>anyYKj?e#08{ D)NT<?I@z%zÁ$` ),;.C!3!I.2ˆ&+Y&S߽`>=lOt+Z>*hܠ>1)ێ'g4weO/`m3?")Q6[T_=P@*Is&#W-w|NM?j#;-Ƕ͊0nbX1 yE|rYC+x/mYXao/a׮1ȟ[b}L<ތXR?=*Uök>+eY"u5  8h1hm x'E7_#y+ gW:nU4b|x':ecWT7B 2DֈTDNTsO?"Q`~8$TvT؅)6RtqUK V[M(WiwRaKr߿~WpBi }MLrXf(׮!|eE!HLbhTD#\+-ÈyEMYW-'>1^qbO Ζ~BBs v%!r)+ҩ tnc%ۣG=/Zj7W K9mm{68u]*#,AJcjH <$ ﴩUT_7#:{'af~SlCT" 3*4$v9Dz[3<%?[?tA]6g͝C@UqRG2hA(vqrH\nQҩ\D Gf@Q+ /θP$]?Ӱ;K9n7;j.]|8]YrrqBѡ,6|%rgBk(Zf#Kyb\PnnQj9pd=^Uͪ &dպgssDuRr!1,(- 3< Al&ROW˯s(wos7´AmW'C:a7qvZy^sav;'gU:2r-ٳAL ۈ64Zjl҄}j ,jTN#p<[tV^r'-:LQ:N@XJ(lNMfzaKUAכS#֗Ȫn/u^n8G%P(&+OKʜ;:懤jFe j4yv_!}#l8tNo;#Kf$\!cRrN MMD@=OnUl^&#t82Bu2U_)UY7df?\{VLHqFc[o49`;G_bzG9&wi6)Q[}8d<ݗ4x=l=L}E<:]Sx- 0> K@9uB.Z|X`>k=R۶LP[3UOLHj)/mjJ"۱bH(~_RgRذ'4s;㪌# Xv:l6ӤV {Pk/HI >ty Xʁy!yZ{7!i(YcO8:׮uj7<h05~Mknu yRL#1[~#8sWAlI؎d6n͖8aDG(L@c ABɎsU-7v>a#>}FrSî"O*ý090<ԔYl䬜ɡRsŤ.aD{"ܠlzV3wl{O-m~Δ?m-VU@z` t|Ӥ٢M'/^.Ec;j Kd9U`2Ƥk R>" K~𐷢q-eAdk%{aOw P@u1E_SκF6m2,)=ba1m.%-]EH iUpin@.YXHԉIKM.]=oStD.cV"Wɭ~*?G„Y) !N1ŭ җdP`sby?pX Q177Lh3G:A Ƙ8 twQD~Ij'3w[%1N˄""!U/f1&LOCE0T)dd/J?;PIVp-ouǩ=eAxDD.eɅ WK ~ 3&2 Tפ-g7XtQ-'za y;}`Y#4 WTV#"8Ak;H\t >HV=A&Ӷz:P⺼jFC@j H˳J`x*afCE*oZ_ll߹C9Y2[Y @~RknLjb:mP OVkYm*p2Ip @.E,1*t %LYNK#p%]{N;D0ULG |Xtnm7D/|qsjJӢ皔jz2v B7)íV"([Į>= o'upTAe2y(4R'04 fhHL=.np,9&!\Τ*wYgKyg+)e?~Ù rxsMc+;1A1tF=,3}axqiڔw -ņԑb>cV@<;H J[ľۗ<:|wA"~ [c~D2.CTIՊrʨq'(*D$p-h^Zf{9g7bb2W(<[gaIJFZ„x(}5MΟeժcم~ @#0r M=7F% sM(,"{McE]A];M|p䐻.znvsh%+Ku genֳ>StFJ2ŷp^A^u^3>ǞlفеԼȶm(6:xHYK(V?ϝ 59Q,^b(zO4Lp If?.JiF݆4l`"s]D'iupg>+5'r*:+0oHr_p0 (Eވ`o%Tƥ}ђ"J\"OsxD^pk`Q)ghTFr |EV ]G n 8 g_fAjAN|XbEv^#: zW8dh[n/@u$igJJxEb(RC3 p-[ DA5myN*V U- גigCu5M [N8Z>{Kj>ƍ!̅0i$HJ;ڤŠm[@K5詚J\e pFCY^A'x[gA USߐ/Sh2^iY8GEZϳLSuQ`qzaz%b~iH cr{b보G搌|6.3 OAzTwtBrV:J%Pו*'9di_N Bxt>!G2{]Nymm0k벘iv,` FvΨ g&lB)T^u~ δ UÞЇڣGX!{Km]],EMwC:yNx<̫AqsCoVz_Fn3WidN]!u:FBlJ3Ajr_9s9,Hĉj~s%sg"IX\ɚ86o>)ÒKfߝ7 nTYw^M0Le <- ]dn8 < UI2_?=S]7(,DuT~D2!K;'JU ڲH`1s20?J~3u'HW[3̮Z<|b?+6o =>!bnd4 K(xߏf)R82t𚶃DșBLWng 6zGh)3lASħ6)~%\5{xeKb=Kbۚa/z(դ'S'}iT=%N#לs?LX5_-F'}%جMϙ=䡥nXFl'do]WAv&կȓjjHR;rzQMFd>C<51MWfX|6!n\UTxꬬ&6],m(~-7 $ct`כ9Ih@s?u:݋$ΨO|BvHS0i%B-lKH'o/Ɲ>v\ kz|q~RgRu:M0=H&a. ]X*w1h iU'ƉO:HZ}>KAA%;\A ?9:wA۝)mG.T{m IJ/0]ws1W4iVj~9c|S痬|= &ɽvT焪fAS84Bk Jca?>M]S|@G~IPQR*j/c{0aUFx }fhFf]Ti? 0i_Qq$;-gڨkv<WiGT)+1i;l+W34iy| >iͩ$4:KMmG["zb!4hc aQ=O?!^{B.؝,d d'j`VoΨ!~ H)rtіZ5&'ҁzE|i8`dǚTQ{}g7KNov3܎BgеTҞ vAU* ӂ%e5<6u7 3. eP!^cs|Xu23bc  X5l(Xܗk%~hd}oLOtEZf+ZBGBbAԫUuxD󴍝$,:8=fP+Z܈o֌>$Y:ځUH >IvZ'ԋK5Vm ?QK?B>Sl𳔞KE>J]|d Brc^4[2=.vdU4 ܚX|d8T3DBxna[0?13ڰ<%K] 7L "3)oQ~+ߏp}9$*`a԰=fa27cILCMĒƄ9b;X$S]Ƚ"R_X}ke7})/VC/xhXfy*_K_ԕ)4Æ IH B"{h13 0`GB[cY&hc贞&%u59ׁ w)\~K l]-WeDcVDyۣ 3[x;F}(۳>Ѧ\Ҍ^N1Vq&,eGuȧ\Qt?=B{CmTR/%E PI,#N\q8@x/g,9nx EcT.֒M5qvOJ+-{l^T[0"vQƱ߸ \I~Fx˭ ݁d 2Btn:|#//Pk̫X?oǼڢ 6}}t3(J j7đǝcMNt+ťi%ˤ)6Z5!zhw/۩/N+cxȈ@h%17Jܘh?K ܶlyw!6|uE^]3U1\̈s$Mnn י kFv>5Z/ ߖՄfjH <#]aR`Q|A:;"D9Gi#0qLe8 ?ܬO%}V[*LJ#BhuDJmעtTސkY~Hiob^dP X*-40N k bɓvO:d 7EFqH2 Ψ kKCUM֏4آƟS)ގͰ;GKȃ[Մff3]o<(l"9{_|ɳitogS`,!5(!zrY}Q`__Y8? ?rS#E|m uS3y33 (q=Y>bU?m w$R"=]<ݚ+)$r-:@O{enQ5+-|@r4d/=>Lk|w-jt,hę\Fmw3ujC7p}XN|FX3Qn2PD(\ɒzFs gLlJ:,7棇WF>! 5Շt_`0ӏ/}$a8!y9TSn²$ˢ@zd^@@b(jV/HWQ-bx#Ev`{S&]&@uֶ]L b( 9hu+kg̡&> Y]iXUؿ`t{z4 +l >8M\+_\ZT?E|͹<[EY +_P/X]ޤpiAf 4m=ۇThýkum;Ds5oġ׵roQ /C$tee}b R,ѡHg@`sس[Ѿd+RP"sr:ZófartxMW΄|:n*O2n } TLj\BAR#0;p-dPغҲL<[Td,_mꟽ D$JGz*Ъ.(Rcg5" T++5Yu}ҧީ2KMM6 UҞN£ߦTK?>|1!5#qWiRYA~5E~>ƋUIPĊ& -{ksS,7:Q3 +^?yrU䩳S;Q [ۑc׿i Z l%V_ iqqG| b]9XyHN~Yw+ F͢n=o*+ ΫZ}9h匧P~w+z 4c1PUxsֳ'DQ=wsܡuq9缺dIN2=;W|^qU\igԋsPMpc8ƦJս.2 6Mp^* f ON4jAqJUuKs,Eʯ&k/J`bSTo\ 䍍N_.v py^;&tvAbyNj*FAhb L>R|u[)PĶ!a#^7꾨2uAWpvE[e2)5s?}BKEuud \MS҆.!N@bWGHx=٥!#vcf^#Io D@B D_kμo@h~3vz@!C#%X#R 1גDS$F˺b-Mc1٪Ψ/B8OogtV*JT)6p tY0e_fP'Q mt2յ v#̙޹?a#[y0g'tg3O&3`+rUc9 o-!]AΎ>g;>5uyQɌHyt*d_I9$ &|ʼn-%"BLYU&#!iDdX*MkV245̻{Ovi z\4pu|E4qhdD[) 8[:'M`r*H+ӷ)~i';=-v'O $ͬu $4aAyV$a4ۢ5)vJOds|! /C 螩W]>P>ק\DCʫ{% 4O&(emӌ=kkmڎ4ǒ5@ /d _f%[Ga3S;fOBQ8mnvC2K#Ш7A÷6fќ/@Z|4nV".h=[HtƂE+;EX֓Myh% .+aKKDmVA.~:agWu~?~)N Tf?_@W tկ: 8?=!.?^̼ڢ*MVZ_#^bm +#M zW |HFbA޺M#2|^H7 km"<k8*{!-oIOXFFʧBڣ_`g@rֳi¤#q3Dxf[9q_ܰOj@ء?\Y)$ z_2RI`j$rڃIRGxa,'BQps&~ Tuٶ GSˁn΂8d]lsHs*!(6`Lg_lVmyLTH< o ؽ.Hy9 y I"]1 ~eW(s)X ݃u1/#]硄C+҅ 1iЉ^DCLϪ:qhN5f@~qLL(&H&>x\ɁuW\RGp,(q  O56Kr|C$o#@ߍ`7[Q,X5>4c[DfB0)Kݼmv ! |^͕*~7_*KpI/Jtܣwvz-Ơc(:9m6IbQ'< OXa?sۗ3T;c'V,{> RU${쇬2K^MჵB hxwF˛N ̊v*jz3RbgqDm_L ޞhcrVf+\&/7Š"+c⊰@`QȹI 9JqTНXڃ#0 ܚ5rn6Lģq+g8>= f}CU`tt? /K6D&KB# %tي|AǻZ": y~sw_?jm};\Ԟh))TbY2OS]ui=SD@mࠄ)diWljzRGl[Z425i eg%q>$&q)e ֧)Lh]QR.2 KWfu Qtb#lr|`*;#&``Uy@9˃lYlnIV?q+D!ⴎ#t[ vLZ-$I#µ!^-X,KaW8Džબp~\+>odx&fkf,|qCfE,RRH{ԊLlEX J FG m\=.ɜ67ooPT~HkAJco~*P>D|bjlCۗM)hɭ4|s!Z$rh H@II#{ i:dT tۦ#J0q]& ΨJ:&$_jOC}:(0~_و>  X4+tisl - گ`mPycu+hZg]sO ]̝s'ŽE"է-,IJ;ޅ9` .Fװ1֢;f#%֕Fԯes4lP"Z?p JΌh[vuݷY0aڦnKbݴ·Qsz& ʼnAIeҔ0 TF$Aӝ*ZCwAX"le NH` UzoQy6s2Z\ g$':řJUs< b[3_7Q8]i+D%i,ÔxW d`6~տA"iORj_ oԗzMBRHUZUzzbc/hILOI#JZe[x9bzOY #5Nʎ4괤#dQqp-ND-QA 1egN9hl5aTT$;Ȟh]Y>ROўD,NbQ2 {+5|& Xi)D"Av2:fzP%8zVf)hoN]G҆fW\>Q6(~hIȡb۫|I_y h漸9RZoFZVݮ!ΦWqkۻRA =Ȁ2Db]dK*uPIӨ)\4tOLz[vr=f%A=چdLӣZ\FҗƓD"~zSXQ#X~?7bIPFYi wfs9*u9'8]J}|YCciBh˱ &)=G]|E&sm)གE 5"Ady+%V@vǑ>TK?D-%/FO,yR/b!kV+ M>ZƮӗh4޵.k2PSs߶Hr\ u415DϦ'Ӂ]K oZgf(R?3 GK,SQCC;!pkpȝ(uD;7tLK1m]wr/Bޤ`"j{μFj2~; _FI_|K]&X%zOMDtϊ@ -aݸ=zHLE4Cn:r&ą .믑J&{m u4o깔%+r~k܍wXXsUuBI}\MORL9k!bVqOa%` 4_q/,̾zֆ,O2D[[q+N'h;: 'C,R.B`76@9Mg+zj{ܨ!A PeҚ}0드YV8J }D'}^i$J9PܷON㩦aoq\d" lA1Ә> Cy:u;j0: Q d$ͷGqHw)m >_$jG qlqUa|ĝ{~>יRN@6kT Q]DжF=uw=e: Z} jn >1i'snw;KAh( LCaYI0H3'S@1˷±{nú֦{=|Z)ǮTEjb'P >2=BnfgoN^(|: u?1ꞔ22%KG5\ }}pz eNv(aG uD@,_'|?%!H|UkFQhmըZli3r쫥0Vbϔ qb ֶ7|e:~ٻn0nM+4s*],P BޤnLcbT 0@۳FsWuo6's(IpXV*H LK찟o_C4wwotakJRl{ 6ix>T<{{`g˸*b!LմwGObä'(ݨ"cmd([&8(kE$ž }zn%y!}\ *vc # /~Nʐw#A 8A \5n7b&S~9~[ SV523]9vmp*uKWfl)#ܓLBGkGDAhpmljKRaaeT Mw$nHԣYowY =df͓^^2M 8uI\1a/z.Lpi蕔V44ڶ6e+5ɩ0^gҕ?b)H"Vh aK[q\*&fx@7{;%_mʓz^Jy >C$:l'dED!:͑e,W#tǔj'uk^%@<@bښ ;j zBGnZfԭ=W3l%U;:+L+{h!KhbD-_ikOkyfaWx;ewQsn7'Y60ocjqjQ] MAgAdj|Fa aG7g!x:$c"<)nAcMѝ BQ)aKQ0{A.'uLcG;@( ;Y}ũӰSMn6~;>4D~q}zj"b@11xg_dyu: mIٰ^(u/+t[$i2z˱TB#H P^AZVf`Ta;_#yYnQ?j6w2m9v6RdxlDFq8&ͨ0yWޔ3<y6ۑ!*|1 esZ`Ն=v@sM 8>9j: hqwG"~/sH#Vd:HRٝǤ3sOm;ƭHۗV!Ystʯ!y݄>΅ % Z< 8lLg$<,{IBRِڡ|wλޯ6~qpUn$Q&ӴC-F=r̟ˑ# X8ZӡjAWk92*52[<#->z'ܚ+8F*8_g9y͞t溧}kO?ED\ȓ i9AaҶ悤=%?l 朂~O-l>1rxJKp; /͏.PS:%Hfs\1]Yˈ7p&Aiw$biϔk X1"<6+2|,Ǵ =)t-ځ򥿼4G>WAL{ Od"PWu*|5'ؚ"EN͌\\p":Rg3LƾN:;^ ˊDx ե#=^ ϕ.8Y\O-Zs9(eX:WJUàa^W)CbM@aݓ]V`BVl5=+D -L%ɴ_&>%H}¹FLn V`FO 2L»`NHcàxbZ?YD,,*x싸\N ileew{J!yVOۀ!M;WNHd[Fކߴ%@e;7Nz?hՖIAC8<4)&a^WΡIt d%OcxH7'9JVΛ0c6Mtb1 (KƤ>LU+*g]l0V߿"ƀCl` WN ~Orl)N3>Q,I kY t>Qf#JĈijWC9=K;;$m "v[hxsH?zƎ&?V1l`Ԯ:c5;i_pEX^dIEⳃUԫ% PD } \yċ*X|A4&+i݃kl恖2ORsY"fo=t)Wc#>5e%X&YxSUOvUZV XEzUOԢ1(@ h丼oDĭmyMl:cz-`-*Y_=t$ k#P۲:r|by4/<2X27%=ZjSԽ_`?gFw?FsjyU//(XD`n~  Ic5տ>Fb"tBC.{cU1_5/zYZA3`rʍA#,VaìRDFwA''CՇ-.Ff1BbvXL,DRb(vOmohnmyi𗐵t 3DPaN 'L )Vf1ny .$t)}:ZTsUH !,u Rn/EEqT`V>>GQIVuu2襠m,}q^898s1/M%ez)dĜ.U;cdmp (Fbl8@B}ٹQ#!_w-Gz4J2?tF+~EUƖ``gO\ZykIJ]3* MeK26;'b4HO𿫷7%a\b40v7̘)P#`{OhB䱍WG)Hd>0{{N[j'rwZL`?37WPRɤj&gZ@JJq9ұ}˔/ D+#IwoT,0Zx{/X p]:dj^N~xi>fOШ)e˦S, ٝ ݦ *&*#So]CQN31gE _8>p[w6jC|vigg2Pê0evh\N+2~a}3vZ]xUIGA_Nݠ0p 2$!*)G=NߓDŽ-Xܲgsyq  88ؼǾ|#&2y// =Vb`LQ(‡#F[&S C9>:p`G{ܞOlچ\DmS+ػTD'$/&<]5FޢVP<>1gs}*ؕ=hhHʇtEpT=Q5Dh4Yc;_ Jl>z!l̤nD~Ұ,;`5`¥~8Bd֗gnhe։RQPạQ柽OAn:M|Ku)0U`ԕm'{?*Ν./ '[u!{g:*k"X^8!JW\m _+Ե9]PU6C8J0m]~qeU/E$ͥW(0ٲɨh&aYe[1!454gF<}}= ӤEQ\P&C-:^> x`R+ WzreL?V e*XzkO{@fzj>%Ta6.ʘ[1DA;FzEQwZ֭蜌Շ]^P; a\`R 2 [g+ :]-lϵ1'=T.A>/)I>jh Q%*c`uq]o8lHMr"`vڌɥ{މa z>l-5}-`;vݰ@Ergx7Y :U]Rmȫ-]8Zc;Aw?qXxƲpGۇ:~q7y.,s<(,2y94R(J f Xdۄg৻,Q>=pQ<3œQ_UMSRJ/#HoR1~&'K;3Vx.ytaξkda'u> P#O40|:s߱KfR7@$@_AFB@T`Sq./&v!rmXVT_O[^|kj l}E d`MEKdMƉF~ įuO /Z0a\DB3xA0n&?D:BxfCyEr!C<$щ" 1k!`7)ƌgM{ZUGaE] l]L3 ɟYAk^ b QWy\ =d 'AK1̿1Id 59GC5fn*Ϲ0|h۫u˝ xVNd}0d0{Y$-%BC >v vn~$ݘ!Mr4:?c7xX/L0OKR 6^EAi$}+aO ]YQq5iasJuCϲreTYH,YYxpQ3/#W条f3/AQR&頹_:lYs4o^w85A~Yux IKIX[_wb'(+G=T+'b4˥Ri ҏ^إBBkE[DqM?[O'; >r@e`Ǡ]#|<nv:醈'`ͦz: M[WTTIJ:+/a\"vҀ/BpS 2 -#uCRIt9Zu-I=Q_<{^JR`d۶ ,3PhPkF̂D$+#y^{z mI$/#KГBu~K_D<CN ;[ BaT=.roڿC^y#/'MuޘR5XEIp"t x"K>C C2ܰ䖞pa^ uYln8S_0fTeҧ+?d%$ҏNf1ZդHJ Ro|G)e\מ|~oC/-:K$vi [b)z%`{ƥLT+"tu% $4E33 (14sR|AQTL15w7ؙnx^IN,Z$uќS*uDgY}M_& . g" d@J2hqiyf.q2vP dl(>{͵iBS~%ޞԱq[['a&"N =0S^ɉ8 1?TU15 X!k6 S\!}EزD|4\+l,! _G!L@xʖƲ=5x)i;Y(ߨnѮ_G 0ziy^hMvR6DDu1vBɽ4Q_f[Q1x;LvTJMIB6ŏsmf"%_,qI]h쀧,ݮ?8!4cf[AY6V c~=m],F?U gl^з^JX(Qo'u :Rp%zP=&iVe grEYH$M- 9M-9%9[.\$N R;DJ?~q3K1F>tZIISCXL7~mn|;k V )gڋ0MkF#`g~vBPvIy!CY=?.;q,L'VEvo','u@Kch\,TAc31bvًԇ38_J[|֥i-O" V,G>Zr ++B֋[lؠ@<p"wQ7lP?O` S,P dEh8Ym %š6(G.9ti.f7 Sx- So#4[4KdhD_僯F}\k$bzs+ %Ugp,&P#b[K ^?fL#`ح%`Z!&~ _^aq#|c< ;E2FBF[m`9{`dm;k״e{mIÛwK{$_|6oSV&yU7fL26n1)<έw@_O"7 @wt<l/MИj=KVDkj ,|_!B%J‚\Mƅ $'דCՃu a(:M^bG8 ]mJS8Ցw 2B{w-yrbm},1vu:+qzE4^aj$ly{p0?Te]NQ MNR$OrU`+1E:ĠϛZ'Uާlkuu˹{D)?s7hCNi?>ph6{>FS=-pyJyo~̟*G<ߊW$ȪG5hD}j=:1AO _PBc[3jK/ᖺ%2 VLJWl>"8R?Ǭ+RdL66—H8~Npi&΍a% (#䰼v&Ւ`_zHI^oZ=V9V˟|nW9PKD!bpp)@Q@ڶNwO]?{}L(/WG0Ux>D]$kJ{#B?." Qlעve;My92.2kx3ZUmw+'\T7w_A:@u~,ϐ8w}cSy֗LHc84pMbeS<ܻBlL&=A 5}}vPlAeƤE+,B8%wo:KʳLvdWP10rቈx vr3R^˱;:.ډs=:|)6H O)<9@n"&&S;,ARq٤~ ȦE}]@rZVA\ޙ@$][|Sx2LHRDn)pF ^si(5Ϣzc_6"yοAz˅Mvy g>~//tjSwio'ؐ@(Pj*,jtWJBacifz1<{q>;C#xϴ٦y7Ä/).uvcz)Sb~VN:V._vy  !-HwN{ _K»㊷>oD_8`~˯&,`"I=y_`C}zjj2㑬NL_yޞPu \ k$%i oZQ* 6ݺ&T , $8̝ 0H3X:S?NJ, B;! BbF+&BSaSG+dg- Ty>!C;)1WGQ6sI8O.2-UT3YI@Ho a52DlTȤ k%7f 8 qHiD`U "_HpSÔ-@cck>\|k-D;'[%P&1;ZBuX:['kn;|U.<%Jgg# kUH?&l"viX{1M{EDۤEJ i`^syC~&WC F_w?lOϷRYpdr8,GKXjJXOZa'\K2>ñ/6Pt, `Dyɯ%.ؙhJEq?u}W!Kuj.;vhu^@ߝoFjDŐpXtC/_XUmƪCqPHͣ)L>k@8G[f-gU^4֢'<U*`'$ k/Q,z м#NL>knak4Eং!0`b,tyZ֙ťkZ '/7dO42+oGyG71Gz~}{j*BYOtH`&_ #+r Ơ S,^U!ٶcf??b\1u–:UfD#RiX(\e:jɴ [}zVR؛3ɔ<ib}xk tϢb_Y|<{~/lO"c+uzw<<*evW`MUJ}?c8qEׇ&3?P=OHdftUI5|fvWsmAV#0(6ܥ @Vǁjz-0 Dj>aT л3ԤpKj-7&@^XUm(iT>#I~1kq#Fȱ>63u9`L_@G\22ZO5XһWE#~T9tob@/ҋuʷ|bXB%J )/YY\=` .FDBLU9~ kͮ ,ag}Pp]އX‡V `*,OfBat⮘ܴ$gM{i D]"M').2odHAzT|A'/{K=HF8R E<15۞,"iYM (47C΋19wUmL|4}@>Mx81w(!?пБMm/S??c$N|C d0~ ]m!KҘY Wƨy//jsM"@ N/xNy+ZaI>{>b=As!փ,mnpXL CnDfHǗ AVn(R,~*-:FG/JB<᥉m̏q>ņ2wU &cjNz4PNOjmDZ4@7]dv访T qfrh3k6̕.S}\3b$&0_n:[c>$ !.19^K#<3/Ty:8r 3-( + )UM̃*_ ?DzѺ;k\],yճ̱XI:Xa\Idm1๕.ပd%iK -.c^p*2CʦpA7mՅ{`5! i7ЛavzG0cY:S;k~*YjpaROph\S$h;oɆNôEjEl(0+nKc7؍iH쪸]t:wWGzhVIǗ%_f+{ei9 Wm룻oNLt:+|ehQ? ?Î]@wMWOK,Ht)S.~dž  lIL L_:_H1>I?frM氧e1Plqn: 0n+f06;4Bkd{?s  LN7js)(Pٓγ<.Bޙ z^Z12nO)ts/}`7ΏMt/|,Dh=W>S!8E c%ӥ[4`fk9iRAuZ'KϹuVp8{l?+9>c [x9rn^BʏV}-1lڴSvwSPKX9?^y߿l49Et U#i%:FS_yAݨRR|3p& +N3rx%s w,J\B5;O4 ^X!x< 1jUɲ"6ԧDO̹\@5M=Dݰ毌&QRaoؙBr̔:QXҴ(5I$_ ,/]#O)˒ :QU|eO9hBz}GIf&+Mr,%F,7svT|)Ót jȚ7ĦqUFWK$]"ޑ9B7]K}v-SbΣ!P/X3.aյҖCv"F-A!iX՘ًt؈q.[H]-@xS ZyyhKqydVL2Jyed$ᬃ&6Ư?&#}YT8 !A=B fT/X& qvVOq͚c;E ]~*z1`ѡ}73va;@(xV6B|f) ݏ,7n|QHRb>(;&3 /hB d+ϙ\WgLZ9T5CL9c+;9R8|1bH)6|yLlAG2v zօ\9jqq'Vy&K@[7W2vs>CD) CpulŅGm#/Gy4hce+[`qψu\Fit/^o z ;j4"PHSVQY0ɿSe7PE넔P}7.20 {&#.

Q+gPq*s4'CCf4LxAZ9*H17(081pg]Uv72꩔:QdpU7Pڗזf[Ԉ=0c .~%|7|;r!cf:7]e9 $<]%nugqqD9ig!$'I̧a]Y&~]xU즦!}q&kXd@f4[R%i*NG̠Ljqsc#F+#ik<8!sZ=[ {igJ`q0=|!ώ/Aē'ZI+@‹#j>HǷij(% kd3%(?2ǥjby93 :?+^сJ`NPzxv.y^ ޛ58ivL^tϹeV2zb b%3n-\f"rL4J&Ji2o?1)P|FiC1ܫCEo>,!k掫ΐzA\;2[d;=U_Ǣf_ a5LWOWjbB+SfdXy@M,.SN8ۋ*4ѢsPdjhK[ /W7ԛ,1Jj{EԖa*x~OA+KJ#̐-qFLCL x:T>Z\53hi^Z.~aKEiEP.LM$PZWꋣ2u#]H6e6Y,T6A[U9.?|2(zgRuKHk*@ՂW,&_bEm$-f'N x{t.mxSpX~H efQ#RY}*K*>j3MAE̔Qm*eZ vK') s>h@9nyO0L;wY c&9$3bP2ns?SW3w i(*a1tuh#7x9`#adr%x'|b'тQ70vyy;OO]4usAzs`&NVUz{IJ lͶit[2/L:b$1w"+ҹ2hOϿ,ѓ;ze`v$,PRãzBG!('NZ$tC1A*q4b> 4ּyAN)Ҽ9U Suoj*DރÇdZb\>qg(Qv>J!2g4z M[ea%X <~5p8k\#tzqfzA{81B)&؂hk_tsϦ{qV9UޠA":*|f 5G/*ܖc^?^ KYg_>=YK~Hde *!lET/SNڊD_g, =.d]>g6cn{,m :$WUKv*s^\^0ah6?< oTd(KT+"C(]#6,N;u4ZW};i^~>nyBt5j^r[!ڔH7r2(z~RK9CHҝg>1>4d;oYY,ugQ8uá ܄x|@;5ZTTGr@9Bg8"kVD/fPxsKny侭O ?ڑdw _+͢сP,1wA7S֬:2K<WƥavbKAyd 4jIRRbCZ'*.I6(I8uA>V֢V?5/鉺AY2lQ|,*uz6ftB-2]mƊ@;{N~6m!xeOP䤨JBA"{(*sۥD]VuqvHV5WV2,YIK$@.;Մ&Jയ.4?"WL6:PO=m+>ewٚjCe<˃VJk !6ư%/ 9'GNYV9kw%S>;d,y%]FGqyTY>nT3WP Ch!~W_9J?{͘%O{͜&OK7Q>tnG16¯_&C)ykoF'س_e63,;mR "P+th8JSʒ xE ]uFVc_j'tpyp`MkI5{{yӭr%PM.zuCؽ_![G-眥WmGN;RPuOWT8%T%$Bl.S(~RVB ~PI:ܜAM y^:)RIs;ДB)ʌkC&wrcyM`;\/J$1H'ǚL>G{CƪRFW[PxCʍ1r)uW}eڨ&'118}C@E+GAJwdA0*'CrO{g6'ſ0`JA4FSU3U?M'nDABMH }e4&h#T'`=pC@SƓ?R[Q  L¦ZR_+܌V3? $l~kxp]Zo^Peqt7m\!alDn]h"WAp|ohQ O@QL޵OV{C XZLSBPVbъ6 t:nwN[R_aܩ;+CW`Ҝwo4 $%z-Xw>*J{$Vy6z(Ǥ5G956>_o~aE63rNO}"6!(*^Аi;w>[W0EpUF4@rPr܎ EkbEQLGc׋eu>H7(^$ŁTn1yM:A)($ID?5Cټ鑁cI4Hμ3:^C=0L̋/Z7ɴ|TcӃexmھN\YRmvX6^i#PށKa5T z>Vo :>D~ ˗RL$͉0boݔP'T"eFTv' 5q 5MseP!U rdy# :,3+V豤\@׿lqG=1K0'> jTI)KWQ;usIbvq!7QJw˱瓰f7J7+Q{V_hݓ{ۙjQ;RI%/aZg}QS (A ]9!Hml^VICEY1$J d0\>'Wf :u|6ll_n{ꌔ"dv`~}h: jY߇dރ6 JB %v?M Kq:&d^ѥ`QN 12 Bw*$ ī%3B G:æ)/Q!ʔ*{Ib4VQEGxb]y-G}`Դ*<4-?]}e.ػ+@X#b~p`>0:v4X1oe#)dƛAe[85g otAr=btjQB$^ܾ˜ d 3H2' 1:\HigFgu l%>G H%s?qnEJRnPvE.$P pʕa<-_3 Gu/J7k +*!jJYJ,%E|i=-8)!sҳj_~6ķdDҺ;b뵰aIG"3 s'`/16 7*G&c@H&|CètZ~wʈW(E4'Bjʇoԣ[t \dg EPB'bwֶ]4Ld'p /}‘϶NLl"̰\hRmM7H )T(z*1Lb6<"2ܲb\̦Tv%}PwNg Ďfv:n'C)Q>-7=hd|QiΆ+,|4Ta(`_Ba:zsw?;]Ck 'c[:޵Om5]>˛]Ty{fe >@&/;P&xS"蒋|3 mLj Jh,x> ڥ;O"&Q`۞ \^X*1fWf/mn~Oo_re4mx)}Ge;,1)F \Z҇x;v+_& Q&1$7a*+hӞJ*,tItƦ:˖Es.\ԧes=J js%ցؖZSi@+'f/ #7x p۬M g(xJu{^Ouw%c)Ӕ:X>L'u0\).m!Kq/Hҡ: fIE _ҽ梙eW6w YB@\Gu'ђ[AVoRlWX?7i$6=/$<( 1#Y@LJ(Pψzd?VS&(y^}`*HsiqanT]wMOI|mwMd蝸p^|m7m-DBc_oq e wQOq̱D91ׂdg:1Ԓ̏gfr#/.ыh#uJ71-SW(G}kv 4R&*?R>7y9ORZ lU!%Ʉ&H~L{ZjpKL%D}UT]( 6jwN4"  !$ʜ_D`ՠǟ 0^Vt 3eb6bˎQs6u'576` '#Rwȯ0[2Nͦa=<6%}Z\c-,ɰ^IlO"Z 3: &kӥ21kb X׏_)c> pq+؉߸aSMl^4 o t>}mN)/6;<Bwb8ƥ}\]e 3T?WNTmMOq)M7PСC"b3/FfZqtC6lb .GTEO5;2x~MhU; NFr+&fD/3 eV/m -Cf ZVeVfAwvAڱIjZ~v-OV`&Zw m$znN`df̸U1{Zvo&1)/",j}#CL\퀆O&.VڇRSq2ꅢqc|rS4R.Al}"eFp jy.d_W=yirWG /OB6#qI=xi JҬQ5~y?Je㆔vS9Ih֞mzo#||Xp 휣Y:?Ew cݕI.g'ÅVzIAp5L6Ra0.c"r0`xjyb J/zl_=dwF[r7$HIͶLU jwsm5BFK$jDuRmbIl& I9-V\'YylڛJc@RN|m-O9T|B%>b~3J~)148/5RDrGwtI ʣy$A _DtO} ]1`6o"#fߞ!Xd9L JG)5z'{hh*XG x_dvK~|Gƭ$H.X64(3( L_Jp3?<~M q2Ƌj]9ʈhOx wF넴,iq~fY}mt1SʳjM'c H G̖&5I'/&CF/ibnNX _ ٱpC|H RcE`w%˜rkLy4N(qPSnE}1/v/q~TkQHY?U[ܥ?\H+3L9g& ["A_G搫4(.c9_jb߫Z;rO>F%918Y-XP [% K<:IO_ ҍr*A [ L6bl[PkȖX ~ Fը%SFfuɵ;SN;UZJӣ2>w{o# ;E=ZpE\\<(K.O¨NSW>sՏ[Y 7LW`d=,Q,62q_2Gm2yu0 ܆7^ qJ g6 Kv|ZкOR@I1+4mOc>Z"8qM9}Jeco 2 V: y 3b 新)M}Qɮ/1v $]s*}NhO "qYm',Ѳ7'j0-ffZ>R_of T 3^Vb o eeEiƜPJaV.޿ m0jiu~hrA _NAR/<1Ι#Ue+l& > ^ASZ:&^2mms\(*e'4LH!ZJ<=p@e0ȍlwE&;.–N%jܳl!dMr7M-4(Ѯs%L{fX[[^Q_ߦ̀NG3?}"$6Q-jvzި ~Cv)=yC 4 wMҡD=k TӞ1$T]/H/C0/l3+3Bu lF `x=61_zU Qյi4#A'[+qsNidΧ\1=B9DT!ZɓI),]vi~™QUsޠS TJmcXhuD~w 0&= koXqwY%ukP'A~ /-AŢ<a5l6J*7L=I̎und]ڂ۞A+#ؒR&=R97gE_@ך}g-VnH2Qt͵0X߳Pv PKAo9g-E4L xx\oB.ݴ&ZUu8U 2ghc{K*Q%X=ABjnC ,;3ZG?$YrҔ7R */)OwH<nQ 6LT>*|S#OWh]д rMfB!Wy)ӶOGOL}[p-X"m4C>L`r{>vqFQgVIo/"Ez1U&y;$ 8muy bR5~"bm#E_NtB[k?wXYt=Ԡ]4Cz7?Zv aY/ $n]zW^ذ|PhY0ڗPDxFNt$/0b.r[mTgnYVҦ;Q?FȈ\mq̪D:AFlv8!(BsNmQ'*CCô,Twl5gZ:?9 >3J2(2))p>=+*&!Fn:<قt{nXmTQ2VR6T>S"2˩{Yi}tVhcT[ DTOS2CVۭh2Ch)My˚ّ)dv h`o٘ KdD @)Sk}, 3 f/a},oV?&yee$݃*MlW 6ωؼoLjƚ //񘮠1nY^ܡO;ѪS΃^B'!(tlSW<.#ܢeTId.7䰡]y1;@Jѳ^=[K8"kbAY5Ue!~GfpXQJA%@XҺ!4ðf1îXW;!ZJUk󉆕ڇȭ˵*4X$vp0gq؁wW&ò jp6-%WL:s | v]Ol*#u鎠AGEΝIa,at C݇MsF"44Țnf pGQ:FsWU D6JB$ӈ{ ,W{C=YDj*7S.KI |mYhmUze 5(]gzdd&3Aꤳ3eD~WxMM}2$엽"kzh0I|x#`$ukC" < rX>'zIC:<:7u(l4D5z2Ljb6ՖQ) 5^ 2&O|մ wjHu r%O}ժqtնpYfL;X!9,a*gtYdPG3%ؘT̬ƘQkr8ˊvP )Pz鑭8dQGD5žBbi8a][za@i?,LdZ 붭#;Pk6wʣ0"nE~ˋ>DF .Y Q挓aě`@˄*V}]&]|jFZ۩ U?lۻ5k7s- %ƤG]XW I'#6fj$z?@4fFn mwMoG$[W=lƔ SIm$T2ux=kLЫ>hȕlLFQm V7Wh"ChpGҞItj0]xؘ"Cji)N/¿' ny0},P_ D#ͧlvQ}m 0I <Ncfsx`vZ^;`,-y:MY:fҼ2ZrҚŗ,hN:8GuTKؘ˶c?Tp^>]4ܬSu&%*+ۦpK K*˻te?oхmT>8?6n[=M@Ⱦkhf2I#Lvm!D>Z^a=$_Va!E2mJ8VJrb`+%=j!ګ=t J8o>bւ-]n؎@Bٺ|:zS^X`#( ՙ]|p\b}`8([~*5؈zR=q6RxRK[@螞lIsDL9} z6+cCkF}|)؁›W j1RY c  *ڿ>#-uVCR/<؞$\~ ҃Ԑ'[8hfWZX,DA"`z.^O-7J""];݉^G O;'zɺTkS l=审*sdµ#V,R4*`<6O~IXSCHX@`wc~Ñb2[a'u$(fN[ Xt=Wcp`4X%TK'qzуWi?C4}< `%u$aYϭei6q,됊aXwz{:7ebjO׷09|]pW9;죳vbzBQ Ű)U6/X#-es1Qo+HKx]`؍짱?-S%_a*`k>sᄻ f;s1@{XȖ \D:sRQ~Eٮt_vmB{WlAmJ-X`њP !1F&2\UAT,ɉŨ䕄U4\Gyhs Zy{ζeH%h<Ņ nX6>_mC~ eY P*l{~imsZw&c%D%wNXG{J<s nDj s`*e,p+# k7)IkDI~ϏP՝U$wd}#Yg!AӚ+YiPqf#k}tb%qii"_]A^}&Pregj ԤA)"`6^DpM*ѫ 4ݠ+ `  X{4(ǚ7Z``sLXLC/5Z:+r?%lgP޲B~Mfat_"T4P}d^,&rҋ[5(MyS#!\A#MEʮIO$Nn[|ރ:@[ZךP[h$ %"z݆Y,+,{^nHf>+a΃$TwAP&z(7z}f8G)Ue{YnnRpn._۾!FO scIvſd==CUsB d"WST?կLWjOvloK01@"eyw^ J7oysH0y]ogm# =߃Q -J4 5WV K2ɩz%߿g׼KJ ZdgzW >\o๮\LV(Fo;~o֜pZj(Yub;BŁ$szN&fk'l HE8bg@9[8j6? LrS4|bmj9b&DusflWT/}3烨? S܂ߊa|Zf4#M@;/5^L+r˳F-etYHe@V/:!QC[[D 8˵DJɿϽ]J-<,M $ߛTNte WAd3T'hf;ȁJL{:780 AO-- c0[nVǺ 6zs(5R!Cjбf$s&9pkL B6z਌*8Q6Z4w$T @0rft>j8AX Yo/{$9olEժZežQBM[i{B>+*M{^^׆v9KOP,aF|0:$5j(kob4sz"E۲]nkaDbzfG{NVXk\QiވIC# Vkthhc#Ka+sSΟw9ﰠhXQ%Y5-3WsZ+ɒ߸m|}hU>ͤ%)#VLJW'Nޣby6WRVgu!84`!T"=^֛uƾ *#`a5<8ަŮw|xyXO dݸ-"/,}֜# qBez8kw z*)U)"bL*R(>}s'bt$ HΥ*̫H9!,/$V^;Bj嶶%5k_ ƒcZV"k|qu!ES4n;@[tkYM<1CpA &,7ĩ-yX$hƈXy#;QÓ "c!n6$2]A؉ 3jz *'.|N_'݆Yu-}ی1N>:ŔO]T;,x[ -= t";`ݭg|zSpt7iE50]\ @ğ#?}WlJT@%~ UA9bhKbq)^we9hJ :E;rh"szTHBXd!mHK#]ƚWTxk+@y?̖kQ'{錻7: $ > lO#ya{DXX*٫̀/+闸FQ, z?D颔$'gi &쪿;cwp)" n Q3oj jA{Ax5ޑwp~a\$(yiFYDw.ׁGk ge @ʤL^^(tF1uIuܚ09&~[tFcxHI/w2_s]kZj=lʤLr]0'RGtvHZ[,w(}W`ÈuKΟ(s;fnz{N6qApih CK=,gܭ $]sPoMî/e ~^g>FxnP HC0iL$'r`f7Uld&F.{C3}8Ki86tGXLTdGp5@?ژ\&,&#:W?ߛ^}bxx /,F术 ͜ VK;-ؘg ӥ~t]p;gX)x;e52-Yx- sºS9d.Yo㋧筥E~36sLjásFIT7U !rS}{PY;viIjӵZ?#'&Y:W8][&L@IV#]t6ױmng~״}B'<1M[ Zy;~ko"SA}?:;w|1.:a'+fP#gJÀU㘵tGza"9{k?%,6HJB)'17iOmATl\|!8%a 0Y[bjDX;l6: mB7`8u4Ù$$NF Rg|Tja~kfތ2@p`T1nYeE (M8)C]۹@?ufgpKٺ/; xMLs2lSkq?mOx|;vh*04xɈz^1_,6U~+'Ә q2qeG3]pQ5;m[g}%:L8c)Lʕܕ\Y6U"p>eIe]|ZHl崂uVO]3-I2ɰ1[ӟ;M"~V[&-Y (wV.8nl?%-!Gܙi"$YB5AasP/Gcwܡ=P #bG08-H_6"\F/ݵt|=6u\hmUeW,b0 Ջ/SUyg>A;QZDLSVoil{؄qԛE/l8}>޶O[@G:(N :TZy[!gD\#]ڀ7jj~fgXAgKr1|ryT{~rʄ Uea̔{0lYuⰹa5, C[ʛIP֙Z(p%j _RVY#P!rMc>,?L1##%ۈwH0LB*9.ka =D?+bI !բ0vBp'q|[]BwhHNTVvkofT̳7ȍdglpo^裿S+g:Q'Ay:ͼY3_>,,?1v/SO4.D{ܹ<ԍ"3{C1tMUh@2Ӗ ? *yk:Tvj2-;(PRQc6H@_ %(9 %\u[1O)MqѦ~kPS͈oA\Hɔ"Dz Nd㈙x r1g N/;K\CX4LaBM/9 <&9*+aK@)Ae7Z徯n^x|}6|;nb! / V/ o`۽$mrCr;e`+b6eڇ96k_0\x&41&很S>*fAM*!oSVb`6=ph*/O&3CK~#H#vGrfO: <T^FƉ2qj,W/_2B!^akX}, 8=RmR $43YX^"ظ1%f|~i)Λd ЪoY2n3]/Lv@(^ 0ѻCew! Ԁ>59 ܏qd/P tEuU.3@>Z[_Q^guP\+4Fi(b]55YOO­E*Mb;YCʕs`֜?39翱UHVj˓Ýl6)gur>FǎgxG6/gV%z<ܪ^bf`XO"N O*D4g! CO ti6.Ϛ5VDݚ`9:h?F^ꑂDhK jq܁bkR''UrdES{.zR@Fpc7ş~LH)4`37Z* "kǸD1@ Q8(TĔZز>ƍ:eMM1Y]Y8?QQLqtŏN&nB@ $QRtX 7j>i]IhF\ODFpBԂޅKxoDM*M"q#ORB!hti b\L ʻEB; j LJm7[}Ы15fjX}UQڸ!2{D'#JW^G \7z!ð.(q<&!C<[FoD[a} ?03?,Q:ʦ~r ȼN=7~-Nh0{$u5JTZ]4E6L5i-ZSU!-֩3@s5]B"N@JT&1g ^9I P-[F尴Ӏ-5AH=3Ћ2<訾qEpz"V;E+0N#r 7Wj sGCanBD5_ߝf @J_Vii҆/z(6[qVUIqs8y9OWA~)2OiOmIQPP/iX4򌔡ّPصKkc:e֑V@;5cb jpUa S*Y@HfÁlɠEa1!\OUj(aK NzHf| .o{Ik kjs&NGY{IU+"'0$idy(d'buANnP‭#];1 [:+壢]80fNJ, .XU9nbL2Qgۡiiث#څǻiA3Wb[NMě_.+jmv8)˹`*#}֥YPY(`I)3l%K+{6'Qۄh\%?VB]Ɏ#s`x#b,* r}O@robi>g`BzB8'eeT ʠ,@kf' { K>q=ZS*QOt'!!}gJeH@6k|ޕ.oR=[$`aDG~POܠ=[c" 姪es-A{'<;1z=A{N)կNJH>E3›X Ʃ(gqs"UD6AU6_e#<'ɧc~4bBb=@- Քcw%K; (pOVy\Tl߃d qLiy7Qu&)~\2-~T= Ɨ+ "C/@#L"AYxm02u V`VRN阳 䍔U3\_}B՜cSk*7TMGQ(̎KŖd,+޻b+Dk~襫6T3Bj,+VK@N,hJf[|~)_T~wv׉<[S70.fܿra΢N9uz0Us|o;7yK]fp%; 9as򇧄>? vdH3_LA 6'3/*fw"QНY6T9xJNv%6F0G.d6x5[e}E6iOU;}V~-"gDE,q W\~Df)G NzvuK]&>i7Z{%nAVJEԪ6UDQ_uq:aqa-a/گJ8 ri2Ъfe5Y5 e`0> =?gK7vf#|ic#E8R]9$Zy%;Ư6_AX O#F%[;v&v0$,a $E`Qqڅ Ioe_^ib Mlc4kf+qٚ:< )8}S9+ES9Dwz/ӸsZͯ!=\P{GX@1q? Gjb 5ݚ OIV v\4{M%W3k63܄AĞJ0(V.qߗ`q sjUtaf 8ΙrzaPETO.uX{':HO-K6TLسy%wJؔp$TZ,Gp'F}j Xde`X?5oleJUz~%_Sp^3xT(oDD '2U{!@`y+=\ ɫlZbpB^nGFDcbDZN'{!5x皤LjNLj<+6C[pl&gOXl?0u GuHI2Mxu\!)ƽfWVf7~Q5f$wS&^Re#ԋx精 &䝹 _2_%eX>1$ m0f qǹ}8m3M .fϪRCrK}~X4 >DV0*hb%f;fJN^8; 5cFXk#} ^P[+M.q1{ Xy NtAb 0JƏ,_Fg=+w;ϱQ5oF-X#_w=p:[hP6633fbcnj;H*j;Y$٪ԯ,硛źum v+wHcoW-B 6YDAcK`&sv4Pﺭbwm&&f+`Fߑ8I~ӥ9LLA\ ;?F3:X`[2,|)E sb۰6,8$4*Al +)bNL iExB65\8mvdEaʐ$03Uu2]\bì9 Oy=Y8݃_'|/l!/-h5LgR+PX9ÓTw~0"8k5xf:LHFUmDܚߪ].|Ub߀nv`ׂ01gg!Gp~֬̍t pg-Z %-FYR0RӲ-|IY!G2b6bȃ2--DSC>7,3 ''g]m)Qg' P-`K$Nv8tc3ӛ p,iW{Bjx2#aJ/(Hn^%bw0OUp(F9&xQͲIzOMFl 0ݐ=S:Qino4MP,5.(eSywsdysDÓ:20ƟNfa4bx |9i18h܄!$5=g,R@0ˉV^el xfN~?TREAtWX='Hמ3hQ@uXiiy/֥äbZ @'!YBNA`l7 fmd[6@3#::D wcI6-^2O»fP0zIS:$O@_*;aH.Λ5s2ن0?>ʠjY7 TĚM3'!kr|A/n7 -;;U4(m'P4"*%2Ԗ5?IG/ۀQ~3~QX)5$~^!ap]nj.@X&)~{ m H~V=M3 9Ku,͜b@l> ]'TCURd.j9Jlp[q@ ̥ 3,@^jH^UWv𼜵,y?-K:bl* a,p~]v@47T>cв}Pp{A$"fagW>M:!x!m'[2s悉1 ($c*G]u{]C#Zmd|b|Z+rݢ0X L>,(0{5G=v ҆:U9 zJWobAM#J2Ht~}($`f5}ym&!%S{e&Nd'0?;g:W^4a25j'?{TkC!%|&sc.7D{F̴/W,]T{K6i3` M)9a]O \j½V٬(:vrݽV@e9< YCj+t_X3咘[ʟ•n8g,dCР2Bi/}Kl8$ި,~=4AV燇4ZHfoa@dS+ Lٌħ4wq &+Z "3n+cXQLs$_1 (<1Ku\ڝ2ojJi,{5amPNLen_߻k`N&k,XJ gGKaE/2kޱ6(4xm$f'-Y\.Zq#nOaf} ņ v-[حQj׀ȸ#g!/|v ^| ^v-pŅ$Rp#ZFڕIwg+̧\b1=f0*!3-*滻g1w~ы8PIr\ՕLlHގ*}t#f ʲOL vٹ>tיT`h'G!{&yW4P,;DMI=0|) yJY(|PKOFɲe X{18XJ|fe)jmƑH \]d8|9L~Wd85L|N#Xqx[Mw k0p 4l`$~$5U7K}FtἅnEcOݣͳqr|ЀZ˜ Grtm3m1\O)h͎v!6莚>BsfV:[oc)M꼐NbڭIc6\'`-=WSRԱ,4&&yǮwpIOY5 =VO?)MH`V !4J"E7Ft.oӐ:1<4X@jd+o hcP~ N9x"]㹂A(ە.2NQ[W["¦.T&$1S5% ֨u&q~(șS(&ˮHB´}{٦1CĤ͜=~70i 6,޾%Pճ|H.׃ zoA)|)=J't?D,O12U)I@{!oP cC.+]&\u_(_;5ݒҶNސq]ꙵjG9fj?c,ќF*2)?qLoZc$q|ZfЫ9]WiauڠBRXڸ UaH[ʐS -8m^FKA!&3lw|A*Sp(8mF\[.͙PtW-,U$J)p&[)s5O"@ީcHҚIP+;K7+S}^?6<%h5SlɈ/b2 ۈo?MU5_6'}{ @Oێ |RLFehhƒ_Ғ8 t(߭67?>H2x>P['Qx]CJ9a4`H?fd&ThlcRRzewL8{ <{w3Lԕ5bg.%`dP'g ?i/fլ%x5Y)5FP, 6o^Օcl1g} DHGd:tYn>- !).n 5cZW˝ք)Ua|hN["kpn`l %_mR 5H/>ڞ"iߊ~~m! 2,Y|WFpQHƷiU󁪗YtgdV1ms<67*\ G:[Do_p Yo,AX6 S 7G4"%y kd/QKʃnoVNCѷdk/TS=VBYw_D=$Ene8=P Ђ{aACeǭMs[F7CevQZB{c (aM9lDͣmDϯS%;J@ g;.hL]"5c;p` eZ`iylk*(~14* R΄$`&&bÙN*]v%9$p0g )b/-f֚2Ԏoo"7Z8l+/5㤯7&/UdYqVkH hΰ,*fEG1'srDGLF IUILT҉Org/ #Sq$J[ϟu"žD"Bq5c4-_wH0+!Oj&{a`IJ?o夋6Eݰlnw!)nPa5=>@f)Eh#76Ady.sŴI7!#RCʣ:nk(ҙE_ N |{z dyO[0ǹ=P)oF҃$?QϕɲiP Y:^Y.g`؁xE靡DFZM&ר .Ӈ /gar 5cxYMb B!iEE`Byef., dlDp0t8xXj\ۚP.bhƬ>{B_'Bi̱c9dyE!\6 ^peĪΔ[Gg,y.NR8U$ꁄM?BK{4ozQ!%YYSS@ǖ+&Ҙ"eZmOOiZ1mb,< 5e ]?E53ai1VsmC! ϵͷsqY~F ct>ۮ߷@2T>Ib *Q>^jLҧjKn )o=|nW()Iw`۽m23"ȜuDrvD}-(z|jfMQ1ʝv(4USo %d=1jQ"w wʙ3SvԒwgO2@{[9I=d8{&rgW`|f*AruLd@W2YAv-g[\<%7)G@8}gv]F1U7I~p4 \@j\5H_6+D] ]Sw:*lw` 4qZn(::6=x*H)ABuf-hr Ic$.CiOلUvZ72H½c;9Xxߚ}"NLv_ /Y+Ӳ4s6#8Q-x:>lSԥ˙ 4B놠g:[)|HvGIEbl0vy. 1vdL/Ux M9bl@vw <z|ktDd/ >. fupeQ r$ Vjww72G1j*-ӨE,G  ܖS= E9#4jvӽZJ_kr Ðte^~4Z`v҃t6afM23oV!yY] ~U ÌmcgM,#*,.`PuL[óת:! 4*>DG #(`|=5݇,%=dzRظrBλjgmGٿeqhBj{& nc,ڹ-.@IG\&``,1?Ʌ/m ܛ "I2z'V; C#V f#`C=g:#>#ŗ~mrHUHf["XvT^к#Xg[8;`7}.q6lY#ro i`nV"ZVQ^Og@)^dVv 붜ږO ϒanyL۬<=)QŎߋGewD6~Pw @hbGjH@rSs;(0.i̕ 1Go]T4ڑ,Z_3&T&wqGā:b\ϡd5͍uJktPw2^{9Xg(#}}3 _,,G$|YwQg+ix},A S:kMjYDy`e=aJ1wX >k' ~'ZX H,tE nҙ1!dM2vI:|ܷ ݀ŔCss3n)ybQ1h}u>_^Q6A>^VhbQ)J\G,dc' y bs&D !|˅l &2I8*ĞCt`mB' ^@(!J WZVSzxPbC\PaW_!uWh RP19P9D /v^kp:a Ot< pψOt8) qUkTbӺ9OWF0S,fN1-%eA{8QqSJ:ֹ͆u /0N#p gu ҘÎ/1@yǛhIݙBl8~MXq+kzcReW~|pivX(/ })=nv;e1)Jl͘+#=$? w εEFZ7qĤ(Ī5r;hČ;`N>vNTQ~Q_Q*pX͑p?>pZ !_XaPT%t.? =I |b#/co o<'"pU#@9#T`LL;joX6Nܣ nF\~A3,)^:$!i LU^EX=]a᭴dm N%B.<pZQVې?.ob܊3 Vamd^ok&a*@e$_= fqT@W T5L r *tVqB;@K/3uKy^r>ufŠ%} 5>Cі+yC$i:CҠVBrEeǵ^⠀kD4 e ZN=.`qVP#A_U}f9{CFf}+?4 7s|/N9d L˷;"_#|&sb_vF+kW?L(ω2B4ʑ`ɟJ<ݙU UӺ]٘ks".#s*"?ud5YSQ]Zo'QזX9#_I}޳>@J@ӄY2Ե ]][v OBqX`^ {q/Zg qe "r 2`ܮPO%n? McW2_o5uY&⩱uA2z? ֟ZUjQT$jW!jlf+hL Օ>PW B;0v'?wϾh!D,tPn~vBj{ZX9>;9]yHrrp:zӄ6e=0a>V6ݦdE 7L!YѠC#d9TD[G"n 3ߕ\$ (~Mml ^m {_#`Z%)S #ىV!5x#. ]N 9k]PS:#BcEF.6+ӚzFG񎺴hPC"Od+u*}ly;Ӻ$B2v wYXʦ9`b[ݰrVL3 ~4[o @I9Qb]Uʼsu{5LJS`s;^ VۏBb  dpWOEQU`PAu5>I"AQcˍ~T{E~{Rl(߿>vIF}w=ɱ$vLD{Jd\J<*\ }Rf@Oq8sn#{\Tf=esdRASHMQy^{л5VFML/W9NAiv7ks/x[׌ &گ-4 r!ܱ(c vkC'G?LؾԳ89I^}~iE tq$d^$+h5}eM'?mx4 N̺ eK p/pYa+fYR6Jձ5h6d_AF)RdE .9;Q,xsw5vTmĈ !"/SL'e&0 ؑsnˈ·bb]w=`+'Ʈ`>F22S:LSNRkߔ.YXD$G'ͤn=oe8‚b7hY١>o5,j0uMAHiԴh߈AtJJ֋YzCKA1;bL8$|~:f1{X"X]nCi&<:>_G'|=TE+|merUkJFly&[@g@;?(MZuaܿL'_+ʔio7iW {Q݄0I+7*E pKX5 ;: unKW,tL)?غ]5&cYOGCW=˄ۿ5 x[A9R]a㾍5hGP[=U25<+00$nL<*9uB}".Eށ'5 t+8?psT\WHGpͯrH_vk#zcM6V9z#w:M0¸^.YA~%I'ɺ}`u&j')$!0]~[wwv6i (#w3GvD!xŞWcs.-2Д]B腡J-^)Iau`h ]F}b.b`ZE`w([h_3 r[{TmjF{/=܂o,-zk.sʋ1'k(&`cXiW.Eߔ,ӓ5 wx4?yfB82cA*i)06:UN+ˈE@ g*ݢasx֓DǴM#-Up¸㬥I4ރ+TW7—>f]](#_OQ@zwj -zO%pO444Y&c" cl8b.y)DC,~Tț|%D+U5G?i4X#S2WkZ{DtMN.<=PvToi7m Q(_g]pPчY!SC! 042J.i"t8KN]n; 񄅱[*'섴Zۉ]jAQZRTj(ILj4/!/1oO x] 3fzLDKD^/ܝײ 0D wmW7Vbg8ܾ`tnxkL *YjQe=̏ Wr?dWU3([JP,3-)ucr?QŷGcKMWcԫOn}:~ =A8&+%zJ} ~`y-&Zvwq393ԩ] jau6lLHp{)p6'H"/rb\ sWD᤭dӛo9.eemY#亃w^E1ڹv/,eqLY{q=9q}ҜܪI6aƙalrG$H k@.J‚WMt9[Ȕt;N!9A\bzi^Ì/4+c'1[CTJE&YwM?O sxAÃnmDŽ*mXk@Ӑ!žWg5M 3 ?jW}ԣ ׇfm2žF2:|D) 芐Y6.pwVgLboyl❖ݼc{x8 QmYhi nO̡:dH3o'E]4L"W6m1ԊKa <9mC]@v3 WYf;ͨ1r;4R IbIi*] q[y@nf⁘:逮>F>a$sܴAH]!yW= 0MJ/AD"YLAͷ9ʳ (8N"v^.?`~%=Xo#?Տ8WIH̄`*< Ngl~9&VZ`l<މ~*gJ#7YsCx}g<)/Z]3 3MtI(Z˧$ux"[8oԆOE`í ޾`y|ʴRc=p!3Gt䭲N2v]6YiV,`xR>W{d2;s_$ nx՝K 6s=^A I灓vȋ*FTZ/LyP ()/YeZguSɟ!TtjV{6 gKyb:FqS%Mb=`Dh(wT 6N `6+`ż0#I-}j4`74&e/4tvV[z|v091nsA5]zHTXLY=,x8Z=iO;yHT#:T,66*߿k+ ĢBZ}OZh˙X3S]2Dho.2}Kf~qK t?x9;˟~έ<1|Xw QT0b<wێnhSg4ybpԖċV% [Em6Um(Dm2!9)yS!Fz |N,>9pНixמ6&M<9z)qX0+fU(.s/z8'h 1`kM"{4]|F0y7;7jΠB f %Y]&0 W"rjU ;r"0+9شYͬ cٵ&E2Qֽ{h9/B Q6N*pt@* ֐Z2QEB]'N9,"sѯ0Xk+%pN~<~vڰ}=}nDd0ڢNe>}\bB&^2ɐ=D\e۲j J@8*ap WB`"Doc{ %6hlNֱok:8ڱƹn>t_-}yd4:_ZOY֐OTQLS2ᮋy2# I\19vTN"gq~ߴ(GD=C~%v?p pA:UC5/\u6?nR8қCߐCc`3]X~yx,Xi6\3ц.St[Jl-xC~@ˤRoN+wUl)݂\A|?z[Lc~9Ҳ ݷlwe|6;tޏ "6zy,7=܆`/ nAA8j[a⅕u6ƨa4ڜFzR/51aJZOtŚ$D=RT{baQ1 B;PcS &އdW {6-#[1R#&f tzzGS?!ܻŊm?fhvdibSMċc&kJO#:r7N""9_~Ib _5^u*Y0p\;= g˭Pw)bW/vǛSR'ՖU,4"8~oIp& m(_m\ӄ{z0v7b&+[t:G d%"x[}jSMۛ,.Zi$E{\C]WE{؝ …DN.b|%'K}4U΁z9Fοi ^~hdwc(POp9#֯CLdV2H]B`O;Vcu]Q3і!>X؍h%-\S?X0[kW{j(5 ]c,r.sid,I,f!Г_OZB6 &ڏi*[7VC> 3:@w{qʒ Lױ"Jd?]]Zx9*i{"0\fd]?霾kl\Q̳ }Nm\L [)p&pcš$@A5y ④ŏY[b1w,ǼNZ$.WWTR-ȻP (e`89LFi:5MN^_ԏWy#!B>R ^iW vĒDZ}`Ԙ*Y-!W)\;w3Br5$qB inY p/H^+j(!'}{mnz0sRii^̸yY Ⲻ@nc;y5 Hh-̕-'٭hZѦKW`iՄ6^Ey XcZ 6jJwքQKRֱ5dVi:4AuZjH8$oS~^bWij)K<ܲF G(UK!q'>h qpAK1=Fw+Q+ G@A9\f9vP5mzf@qKSrBgc.^ᢼT$z\ ?rgl,ZJ?Ev~#_i X°6uAC-rr$ *hN`'%$n8̇3tnxJT R0d{ڲ3:zK2۪^pʊObET 61~oHEC/td$XlɵZw+4љ:YBQ0GF<܇vNـ6H6))15E"4zG 4&`t7a*nW֥ۺ_ɔV)Jco"aG5X[1i_7{7$?VLGȎ zc$ՉW:UG^{w]XN*|v0DF x2ġ-Rt Zb *g5~`S 5@$yuVit܅8QFs ( Y#{k1BOz5StyJ?6 )]~#g7ٱK/h(J,z@68=)E&:FFyr L'hv\Ɋu>۱nb M6z.ޢ%d3me=FsD%~\>i6QCd"[ yS>c\lÕA 95`Uth+=S@i_+Y%d0SDi8-ޓzJA*̚S~x9Rwˀ l|y;pW.Fibdke/D\oDRTxcWOt=>2Qf*Aﺮcse\~<,gdM4΁q̊@hz+KShhfx0:ZɫiA>Cs@9Ȱy㤣Gnxǃߞ 4Ԃ z!\CNoAaTO^*NQ粔=\NJF&!Ͱ׽D'G8\o6ЕF `a,ѭU[ z!5',Uߨ [/h~<h~.!8W~<(=,S#mߏ wT@= VZVcq Ľ*>QDf C)B6@i|#SvӯxM>Iؘn3gZN$SB3MɈwEp('yE?LPCvjydD(bzXO IUOc]Z;,M3.g,{~aΙ'N*0}Bwy`DQl^d7Ky; Y,WPM: KJ)maGeF450G go4^hj =@ޕKM & oEZFTdXؚ&"@Aoכr@œLUi&(w)V?\IJ4Zi0-_3sITO/Jd|nd ţ#scİvdv l7!y`a=C6M7 n?1w9hef04n@)`zTm&r%>BO\1Fg7e J]jrm[hMɍD'iֹz̝z$ol)3Q?"XV 6^1&X@~^s+{/Bb&6$00CWTt\n^S^}_h'yydK2UVޕ|Z%oBw %&ʅ,n0izTRQrL{ <q #Jڅ#,Yļwk"ߐ~q8SVbq1OaͿɦ`<iD; hV+$bZN Vl *DY^/~:sۈI' :#$Sˍ#577MIH8"v4mpZC9(]5A&{V6;`7{D`>:0pa.A #4y]=KwŽQ-Gig&6,w΅ \< gҪ)t~Z3#-0CA>BnSh5xz Hb IX=(]?c6E/yZb%-nsb:NDl$z`}i5VAMH{15[SٴCg_8߾ :4X_`Ɇ2"JW+Zc*jyiZ ,X[y`w=#ӍF^.^G׻aOT#ZRY(̥(/d]1ǸZǀB$IV8bu;b\}]YUErn˒r<ϟ/~131fIwU}8z|h#CUxhAEҭeB߶eè^v/lpb%~+,&#P ؂֬HF=Eu[gjC ] Le{r ͈>UW8;bZ~>7 =$ Gx}+Jl Ԅ0r;Pon;=ԒP+%J\c>Iyo A& 2ߠxQϵjj\:)j3p\Gtdg1u4g1Ȩ$etx0a?~Pl}crrZIkh*DI9= ?,$:g]:x)#j 1t4ay+δ PK&DӠx9rX4LIM+>;P]t0`)Ouz@>b~qhS;Ugw%^{+me)`nhB™}71 33jfŭJskaE|-0as;] JDM6~4D3B ~>kyWai]ǗZOE;$΋2M ZlmRֻLf'ҰEl1~i娃Ⱦ!nMnH=\^2"avQ QQ@w{jST#CRT'H6zdtcЬiw KeҴT_pom~R0mIv,,ݕ .{uxr!U:S^z"|BB4AE+͍Sl[Vt.jhͷ,qB.4 CxXPaTTgF0GeN<,ez">OVcP mBK&kAD=#<#1tc5V|עwKSsd xW?瀨"8:U|RZ$d0GU6p?> 5tip0Y/-&#8aVtNPyLF>"9\'WÌQ)FyEf,CKT(iNZ3r 0Ċb+>*[LQgQ[3Ж2?%~f>\\'}`oTȜJQuW yqQS5uG'"LѨz&H՝^s&e͐9P\Wd)G'ټrݙo*c()$+f&2tSK^J:.uVДWT /P#vIa%]*²H4}XD\rB^8 zQKȎ1QT>ͤ-zW nfŝw~/ԧg=#>#le K`5"h9|61CcOl[$u_+hvbH5$B~HFpO:ӛi2T=tcpr+mn,enfۊ׬y\٩u P|)Z؏jכ2LkڌJ業/>bRojgAK"ZcT7S1ܭ >_7}Uk(xMF,p,ӻo@dg:Nii@bcjǘ\Uv͏9*ٹa yetVDǔ]/d@ 2$Q 􋁆.°eb0G?8a^\yq3O: Mgt!fhO[WkiۨJl!UY|^zgFP=6فȑ U"qG}!HMD\C W(Hg شR5aľ9iΛI:YAf0¼Qz Oe&?0D"77/YMmabh_NþrC|}7Q TuyCܑ!E%DA ɎIB4~"w[13[3#KOk-dbW(0PaEx"a3zq{wmB,/]tXdT`TjbO'L߈4E6O#ϻ޵ʮ"[l-4ØmrG;6nX,b" +=IGjIt S^dQ7 +z #cAD$⛷&5;jex!tB4T}|uɕh'QJ%9@Mw4ĬDy:Bu&խ#- .ra[jSl"JJJ2 Ck߃Ʋ ]/ ^>yL ޫ>CPVLWW<м~0'}3Ju_i-0!E4|*z޹Ǣ?D׃p\*?LQonZ!LIYpezk_y{F#:kzOl"]6-‡dd rNNv$J4flc_}Mi'{5)Oi`U=Y@_͒GU}V0Gz! b@VFAO^l6}ix6MV,-,;092M_hI[:o512 @B^3UȚ?9lkL R%Na8ZmRI+y*Eت3;ߚ?. x~X<cĴ #B<ܣRl?EqGi))Y=L~nmF!@ɰIAALYRDIMRtz[ȏy|:c& u#%ys+GkwFkƞЇQ[ݵ_Ȧc$w.Fc@RS?U[Iqt;]݋$>Z|YW;Sj_I.$/Κ*䠂`+:ٺA/!R/?I<$s2~@/xPt& cthi),;z1a}WL 3M7Lrʄ#K"G_uEPڛzd+'9UT)-x/dƼM嵅.?{U,>5[YJY4}{1B*?#e&&^3*`cu(@ͼnNN/6;@~K >{YF=g[ ,)B" H.jϷN+_"g$<]#:v^v5u9qPg#*BDΚ3'7/;d;S9(;a;`7I'Ҷn:wT7#^ ";1'7KdRʬ@_5vE+yGLc9if74>נYO)$VDq;nq/df =e|(j:3,nI Ve<:`J5`9gᘓO)m̈́x/~`ֺZ7IT4&KzuL#/ic?[a1:A| Fdz/h'#q M&+8]f*> l_dȥ|o᫇)_EƸ=kuU9-Ѱ|21[} |%wUS|xTvr1qg 9`d#&,G>v%G@Pk%is6LՐqM V1I)[JCu|Ӈkyyiazc[! MADZj0B<aGqi]W+J syjLHahn2I9Kثz:A~4{|-dkuE#_sA ہn3'JH3 i-"[>ӱccCI#ځ) ]Lpݘ^I(V=NMU@kX-/m&]5i!{6dg} b/7CS[X^ҢC08d[(dѯHZV(uJRCiG3;QAhpEI ag3:l ϓkdeB!?4('Xȱ/5M7Zy3k"7 t9|NS}dNott)4 Nd޸~4R@48κ7Qa7Ql6upWIQLm¢cĖQ:l8@$!ic?wS[nk~Sa#fqʼnb|EA{\%h'!!QvԿNS3ssIaN3*=(azgǪJhl:`rLQp޾À1\-+1B@b'iʁ/_<5o 2qڮ.ދ@>oXvJ͞Ɩq0y<-p2c2:0Eݙ"sY^OQ+Ba30#j; rtRC,&}<[x.S%b ,:dRxIb Z`a{ ѹbmyTf1T_DuL; HGc쯵UADMbv \;/i Z_; &Bj8ݛD}^_~{N:(ďGz"4"= NFYЅDC` κxu^G#H3V-Q Ϙ U8ec AXBU.j'o!xc(y> 4qIl4rEIJ|l3h[_Wz%RDJ6Apf,- e)4X<@aui>Y^Eك lP LgToEj7D;=a3lorU K=AİHX! wYkɼm3C<HޅJ}~D<1pܹW\FukM%ЗY2TFC={3gyYPg=!H'H$U%ҼN[E/|)ESjYq4Oج"=⸔يd=h$j[4q_D]3l깢bVt-?*uJ(U*f+qogta|bS2.Ogj'EѐjcT=C[I4gw/Gglkt~/aA~ri-7[^-/8ЗZDYuu*IQn1;R 2Zx6wؖM+>VU9G,o0LCZM.pUs*p,S}v-,Fgɭa6OyuQכ s 6]I^ymAVj6U封C 4ԑ0'/@7nzU𸤶 . NK4(`/Nq roe:Cb>ts}muHPͨ1^%%u'oKe'r{'LM82zHx^漱4EZFlsOvg4L/W'YpdfT(foģ)~d kFhK/fuYa14j/oۄk$e{'/3AW60a&t1-s篟yg~}k\.d,(P'-zvEt i@9жoO^z#价ޖy^.7Uc3@i&XA.:wH$yߝi 7qJOgRzÆ8B0=ߵu_1C͵<~Tvh+Lca˄}]ۊ@nnŋԢ;ei!H[A!9_pCy3עѻ8@Q\%Z <ʝ?󐄄Yr·)Ngz<Ѥ|ZDuP1t)W`.IŦӠ҅c0J1E/ۜzG%n{\YRU2*CNcߙ$wxWuVQ,[=n:8^A#NO\U\F>H*uRϔV$cA"; ۶,v.i^²n ӌ/=?N +!ה%j vIZ"d#=6f"x/nFA 7hЀΩ*3mqf*Åf'ȧ不Z<Uk%r%p1)HxU/:_xl]ɝībTw_{iW/lU: ਣ fo}o9}QBMA}ZK$c"&gixϕ"1cŘߚauD ǥA+w|ϛR)0y zsEBv@泦LoT PZ>qJ|;:кnfS(Moӻ̔}ks+h ^iD QJ=6YC+cSq}Uv=p.)P5xǺ+ML+1e:5en`bj@ȍ>R=tuM(vXUFO͂L9WNfnt?A/]u{4c"`5ժ?\N-cm B: j5{&Mu$ +u%fzw69Zx4/{Ztb Ux*( (xɓs9Q]O&g #Z[̔ %ll_ !JPʸ%8v4E}) ךpl1bWhB&rk`;:[:/Cm@|ծr uDz)JYgGLiJp=;W/5|j(}y^Z 6+֙,&=3ۭff%H۫=3uqz!.4"_:LF?*C宋<^ve֬~udE` Csz$|:* 9"ʥn;5ciY^:0q;ikw@Li먣sV zm( x&}N Kl>WC@?[ KEr ~j%#.'UFBM?Q=>t(WYhn` h kLmXu #T;9HWycx" E.*i.~'.^,/!*ݰrH#(K؆qQ0_/yiB~>ON(D*Nf[(RW/& RIGp2f'ܗ|xc:g3c@ &^]4ZWw@d՞?2; n…cKHe>+s{P4d vWJ>}[,i*3WcrNumӋ?),rޕ#MIAj.3o%VsÅf#Fo[Sxa$VÏC~0RRU1]L1oQK]-52P's^0Zn `\z[j@g֤BP G|gpC:#uo`TdH2a^9ӮEVz;Pq[5+b,8|@FJ On M3󨮒 ɻۥ #$6AA|3 Ry0knqą% aN< DԅoRm5?]*iI5Mt57 Mc֕Mrx^ S xyy̨5MYBF'AilWo?7 Ϊ ej%5u$G7vtel@&#^M4ܑL/`o2^I!l|kXlӱcosmkȘ /r}뀤D" -<} F S_|_`L!J5D/h3xNȳb\[Lf@Ȋq/1X3Yb 1k'abĶyj;m3aMV '2+xL]Y#N9V[yr44[7zرQ; 0Mu2YZ4:5L: ֩&CL#^U0S5=viFDדAhH;U?ݖHO7"N9O`n_"70+3E50$1TNJ+'OrsK5cuwv1ŋy{~3܂}C`9e7ZW#3QjPX"!\}Vټ+:"[ǣB$9^ZgZ1-M`ϷL6u< 0)vѩ;jxve-#DĮ}P\Wa?\!L'2dS*Œpb\?16;p.]!סx&M&ԼΚ K20( R=! \+bv Fm s8I9D0<2Y3ȚDIc,FUXmOx,f`3CY qL-ɨ-j#CgC+0~S m ~g> mE0P{q4mhW+h9!Lj#n I N$I0xDp˸cC&~fԉ·n͍S6՟$"CYۙH"=\dOC"0Ԓ16-~~LK >7 OK`OZ~WƫU:XP.5 +1}ppoE6o`3Dtm}zh,Yb10Nwhg#j=Ef\OH;K' x#QGJڏλ' 5Qu}u8pZjő**H0zaߨFZvvO2o ]Y$'jV_@r8yMn*zO2JUKb7 dȄq裇7SAY/33ApnŢ.iM%a"w'B^鲧|;O?F2Z%3ȧvT}2fBԭIu^$l *ʊ d10kD' D+;EIb|$(WڟB@'2&,=݈jN$_B!)rB! V扊wOr}bj6 cH _dwU.?K2! lhq1/a&vL<\:%<)ofkA g6^hJɰh/=L;6w06^r 6y]͍ k!3.#O۩miٛ, ӼWdq<%a#|s6'wy+s[r@#Jħ'!8rXQAbjU.07AF37?r|NM؀~EuWE[mfC{a.96Ӣt2qI=M搢ȷR~(u.ePY7%G k$a"$ƍ?%PٺkSWxGP633[ lwAN3u'#>,0Wng6(7>x S5=:9py Moz $7sʓKs\jc[ *+tݛɡ^$Mm#~dZ\}*هJˆF8/&c$tMI.xKKzgdkE[BJ$^JΌeawVt0G|&L!QYz6 vH;wOmQ %E`"J :[JA1P]g.,L 8@.WѸPGB|Z&V{| y}e^R\)1[.ߛ{s(kn%]hEO < 8Mi[Ǿ1S:AðH ǍN: Bl,c?CMx{gJj) % \3ҸO ?ήC @)7VKlHQKK!t\yazxx_yؒ-SK=`m׈rwn^=r,`jjOhwp[vU ffU |r;#?;%)XO,mY'/$*s$Fl> dP =AOӁcCH J.Ž#9XW*c>ſv`wUۮ%ۍP TRㅥPs! f?B~vʵLX{aqk{36(kc`i1$pUWbCEB.)=[Rt?@ 5ZW @Z@Iai}XE_ _#^@B&<uA"rm_SH{\B( bV]^k10y`WTq4ֽ<o[ϨzӗX%Zq 1Ǚ&2]?TYFmOѳ\蜿S(vhic+q𛹅somŁt7Ŷ Iw}V SOix}mP;"35xAjˮC'>4ﷶV5PW飞"<'7 P;ǓgIk͈Y%qi]? #-fpSwpG(?P 8|̢4uEw{NR]bk D ;Z9ӻReOnK8ueR_ +4*>"W ↗{< Be9$4j<}4h@&klNۮ7i Sq͍RUQ #j-JHm5~,S^R*}}~,K.ц1V2gp8.仩b`=j+a_ JxѬ1B(R&(\Q|Bnⶂ 'O\x+$_Q?ݦ2Vn.o]}[M2Ic]_~4vj.(GCx}Pa)R/uWҺb 1mdqł(z_51cjjOT>K")/Чe ,qpn ~pUN$ 2>,ݥsIO\1W _feQn t)X|sg`z "cHzf5;hS_ ݘGFkIF3P6L]}\,yHMUws~_p-50sc![VFs,g0%~IU/(D7@ 4p%k* CH 0Y9BRKDZL05c[06+7]4<yɓ?(F$TD'Bix^K$ !:/2& ~-s*i#fZVlh W-0 oD6X'[RLiY(bž  qTFs(-!jH$Fk+o005a?;ЫW==_ZQFsW-ڧ]r_?}6mђZ$=zFi禲~Y7a;HN.=5Yp{/\ lno}<ĀxbhSg0L)UM#$>*{O!vMxziC#ZG>[[gs6N0 7Vc3s3Q5l NU4ҍRI3ڄKѶ஁$~!Y43lѸxOJ,H2f.Ar_4˲\HI/]*#x8.f7{ORœe!d:s7AC%_TbAXf.l߫7K \Va@X-\mW|2G}N \#BI=Ӫw$&CsIG>k l,7T<~dϥ75GTGӆnNAmK}2t%EHh_ĭȻ)M&&a! ,s൩lgJ]EDC+[l*_(d !K->jֻ WK VF|7LFhݡ=*\/c:tQǁz+JV1!0Tm\|/ "Ld5"xj〿Bс}koK?Eȯrv-ebH<3qf!rф]ݻ!UFE*_/P̘Yf؍"4ύ;9l)7 W-!=rVf;פ6Μ<)N(mKT+j}cZ*b?xIl KN,-q8>'թU_ &!LQ|{Kq+qc y^!W? :P\pM}OOR}w'0zG*̤n^FXE}x:ú K, `x`y<s h%C?9Ά"QzpqcsK):놨M"n]/9؛ͫtH*BЇˡPr%#CnWk|Z 3u8#](x苋R\makX??t+Usqzm-fd]פUęlf)D䌬 *8"hEp UN_߬Pv ;ACICPt?`U-@u+Vlw 403$uD8TlQSQbmVMm(lw1 KM3mČWGS^Q]X:=S ۛFȅno`@x$(K 2J׎0R?9{yVP diК'ï!5_8v^_Pyesdr4lj doKy$Z!c/JVqZK8-9QQ^>wYnSGAaˆn'{{e2P|8F]π&Xޓ(^xȉw:7(lIm5[%9\(ُmKv4dyg)=[P]b?z%UX ҥN!-?wjk xpOl mX/u8 4VஒWxep vx3.#G0K"z9h44ZJAz*fs~a t&V\+g_=\@8锎R񊜙&@a95y7wvjh&e({RL"+#;%Yt@o N?t3p MRA A-O"sRa_7gc7ulւl.WN _;W0,Zewt$Oi sЫ{pyh:"s ۫Ӎwop!i/HVpas;nT@">Wq׳管ZB՗ ŗo5~Fө$J5VhC a`c@% lnh8qskKL-l3ڕmKZ3)qTbV!TXp*r|! 8K`V#΅ww!5p܊̵zQfl!@%|,C[y=x́,LU0;a=f_4?uVd 6"U\>ܻD>L}Yb*qzEhUYEm;5d?>i/;l 4{_EE V4/rz{snSq2F0F3on 6 g P Sf* Y~UyG@dfq b3i4 6zQ5NQ36 Q[ri?(X$4 Dt1ƛ[TvѴD&W"e7y=sb48HA~SlVsD!+RDF?2H(Ȳ}XI>DE&[* iYjq0ê3oj9: >xv;FGc.iP̀ a9+K*-Gk/'lYg3B̤gqӂ/hJf?C:_Kqv4WrsLBбx֍?kB†_݊qڨUNhޯ"P3_f/?Bެęo.gFL4.q q%Le.0Ẍ́Ӛ/=B_RT58D W:JaOG(L_'<}TR. ]V];ÉD nuSm51V(H#K~AQ]Bs@#|yM^mKW|J@8v(8Qs$7e JfSԤ>i>(von❤AԳq߮~+e>iӣ1[/|zԺꨠeqΒ<]MhH|5P^Jh˦;os eNhisHݨ4>m/c c:.׿g>Rtb$?. RM¢kI3nZ?]/ϼ.͉($OX|E/ĎSN,wԆ5c^|(m*K`-rwvr+aiO)g 2i1ga 5&HuajjmЖ30)}t%1MnyN4C"yl4I(g}kM$~TE˹,|1v٥85zl,JP. iӦP Zx#\*n["_yidɋZxV_3woئy۴uO T,eêp>2ģwJybhd")I񀸡)xLpt:: eUhZ W5X :I9A:@0D62;+7 r웊(ިjݕG!`lq;h 5r A'3>:OpH9wa) do^ q}oIŮh})*bV)T<Ҹg x~g!օOr~>Yא8"@wV]t3 l#h)9b_浫h)[4[ITfQlU 2/C\l_uÞg?:bn<&;@v7qgzX3΅Q6ZeՠBN)v>*yw%|}ǼluCz+XrG΢oֺЋ^Cely`-D.Jt VsLJ02*B#+$jz̗K; C1 BԎ \̯vNw^k9)`=CWpqb|pQ{$$oR솮m#*PɾR D.bßɹSФPe"eŪ~* <jߍ篔:Y#>Xm,':d0<b:2#-f(D#p#da^DsE]ރ<1q2g>to{u$rWڵ-,5}8+5#E_A_O=EA.!' S߈_x G0i#Fnc}վvbf ֘e,aaDF*IL<-&IH{TcSވ5ZfϤc Mj n a.=) ӓX|=)i R׬AC' #hb|2GN+ jGyz qd4Mm#cn.Y^zu,)fe8tJnFG݆.''+"V^L0)4NAq?o ] z]2Lnً~LXet2#y8|N:dGhoR>]r}AjHIAC;&i L8fF[VvZ5QTN聙 v_i@0,!AUhe#ru|ϒbv{"(n\*]QoDw>EЧ.J]$/pGh9bc0w-<NXنfO=Qѯ8nJi Zc|G^6QiKyn[Y[0\ ,G|?Ͼ?*j"CƣE,0yaL5W)o[. ${Q#D) X%)h,R(֏Rj6+ōMKښS vL10K._{O5-;_0E1W"BD[GcZ_}%]T^A(Έ_'4ͥ9/_ 8S#" viȆ~&8]g'I{ K"B`c.9 VR()/OFVc`]}啕ڔ,#N{iwI3- -g M^/VѨ!S6u g8^#NBKڐĎ^]6HJ3MQ:\Dpbw;YJs?\aTDԂ/aMF Ѩf..@kp^Fܟ`^κP[\jdhq/Bdž0KFJrZ|X5/O$9t<=_+ XLjw e QD5UCܜLL(Hf[Yg[sR2_{:jמl"X"jPv^sn])g#I<ÜŠ-yf{5ڸVd ztfiIV2BBgF܃-%D,P&nJDyizJ&h9ŕOs罰1LGꟵ5"jr/Hk^;{6߂sFө_2<AZ?Or7 =Ti?:L_**-82&wnwwr,Z*:L!Z&V%7"V5>RsR >6B&g'A\di]{ %d %M1;]}8LsJGajXa-c*ppw_+{Ad"%O-1K"tZ"$snC-:3OGwEG9s y2oԕ^a:@C"nm?jP?"ip `hxyҺ{_*9O]e,@m d&=KFmMѷNq4mGN40@떩3W^__`e$YU9&\^۔SWt֙+Vc(j&8vwW'bZV6omvT9wa0WYA!U'y|4_Brˣ(G[,Ț`9\QjN1SU~v+K݆_b2Q\6Tpu,DN&DXDjEJi-F lRK'3VY&qF.c!Q[ )yZEUj|4.NR X3R-* ,r٧ssAJ,gVPTq>eEpk\l2{'Vl6q.S[UfQ*SEe(i_&N(uc v$ᅕ#bV-<`n_5QOp~ bN2xx|x k0G/7BV]$C0S@1MeDߟ:NIk{so-45߀bE0kYMnaA`+N0DL%7G1D ].qcqJb1Ij3ʟi֔6t(&?b*gn)onF+x ,N`ݝ:p :8X.[d&7݉pӰ}'EBOfZ#]/q#mܱA\^\>>ۉ0e%$(Io5+7":Ȧ!v/&u6a+j47+ 鹬coUWU`hj mQ(k=VLC&|sm`KG^(."4yz?܆p,'s}K>KFk%SSh7AB঳Ӷ7]"UYik_thY]C~n- 9T Ӣ3Б#!U=^RX?P<;;di\.g1:Ak{'M^knMxGa2%X痧Hnw`4^okeᦢ!~2: :SFN 0kxK[A418 F4d[\5$L#aP|`8 4%6 %4i:$0GKj=j ggy5Jiߟ8S%]M&GM}E ^9oN+usx%(Ԫb@ǯ? ߪQm<Xi a&D"mBTn"EW@"HM D/ s$<d )X 2[c9 T+5;rR*yB.>~破,7TVdQ}ĞT2+ ?O_m OM7 M> ?qcՐz5p4N&z:!wA<[5ܚU=\ىYJb.SaV}9?DEɋOQ)KN( ]=`8 % x奱H IUqgg7"E$ͽ(KEu҈UmRA ZUySwuewvhj̠q4CYb2;]9p,)(7Jc`K5+o:ʞ2q }n{/e0,s6~=^9 Rq÷;}8.\$y)5Y%cٳmlsQ=hz2foƮ*7QX88jɌ A3* \o9q iSI.L=aSW8ggVBFBUdOD0d]Pr̤9ɶZkUJ CIy`taY ҺI{%}QX6Lɺ|B nڍQ8֎%nz.`zv.$JW+IbDd,~‡&%h~,$I(f/R{FҺ X="i)ύJR%;WV,-5 ESYuzT=2#(ӵ8Gcԉg%G:&"[§BG*%gAjKOe(;p4PtS ɹ<@?I;fEnIyR?i +Td0IVjϲѓ&BJyy~WeZ$y,xkj4P6jz e^m_iΟR܊T܇I5,'<\nHWOYb=6J MD.lt??jH.mh}!“g_ *kg؁[Ƕw={X[Zz[%V/Mz#a<ೌ+ԓ⫭8)oc/;N 2B7'5.M?,T퍗 Е+t5Pw|T1JX/BI"UL>RۿlaÊPlc&&ԽG [w DzsZ-J+J/1 !\2f;ߔ# < xH*kcma0ϡ[PS**8.23 S4;:Nm:Hm(5k~n %\!MDf9"/ S(?`TGWPuu5o9ozFT/\)耎49&TVu櫴Eg?~ǒ-vb:֩i{nNq/L|5wFh*QqnӘT95DВd&<DiwS:ͫQo.m3xwu{8j7""<^X#lQ&{"GDk aLL-} QayGU z,A@K(\,ED[j %`_ xU{v;BE5B>BםGӏ!N<1?R㊻w5j(idF]FWq]"V$JBRK tDF;L[zuq)"w>p(,U4/8%WhوOB mz PA<\Ɛ?`ꋿe`{f„x`POaxB {kDH OZQMqi1/T?|"GVTO,miV#~zbqԃ^MqGHc[4JꅣZOKmǍ~|ݢRpT,89{HO- ƃ.ӕ佂pWw \uʌfO;B{ hi T0튪NV#r ޓ{n3rE3< ]2]@P >hk`N^J`f>I)rqևY QwX#:`Z]sӿWZW15:@kO=w#?s 3h%3ANI1O-k.օINX?ɸYDrJ2V)We8J=aiȲ*{>? rteIp7q;z>Wjoņ1oIMwݔ/jaME= FSq @@Èbsb=nvR9c6bdM*& *͙lO#ȕG@ڠq=E4>sK+]jPv[5kw-60ڒ3':w }' K[` GqaSD%_ښIоV C~jg=zs,[K0;ͫ-F < 6& ;P]b4PWm W_GC8 <>ltn_]F/T v1zS3gVah5eG,1R: k4QOB\sP"Oq*RUa,8a FT+B^ToƩvXJg/( $s*N8׽8MqV !Ϊzy[9DDHh@`P n;88R>tBoEci wL[%*j>(z<>~>lTe}y(€,[Jx] :zev~ДY3q=r۹>ԋLT'/FaG)ѰUo&&L3&$ P >wN?A`DZQ-GJⲞ*hBNs`NF K[/gV{C:lm6a:bB݅ e>*e9ǔ'*Ԍ=TY!sMS%Уsl:AӗpA&Ҿv +.]MI҂SB1:z>VL#e^m5+GH̯yhzޒv?3d.+hGB`OܶmۗzGEI#=4qhrTqc}jțQ5%\ԴeU,bNNv8 5USJRp$_'k2 /s/{!y*[ <~uQrQ((ƹY ؾ]$!㛱!$/ WB9NrÚF #pI5;}9؄<5!֢w4]'M*wSv}Z[xLNc{b%0̄;jtIebt.NK.9RnL\$y6;gm[8iq[eUrKL=T'7WL -\2by4Ȣa2y($*c$B\NC( (t~| Ef-4fp%ʫSܶ?fj;ۖp;OMc̾@CoR@B֥ek :yXAJA0ob/TlXkC/+FG>0Ԭ.SvT?7 h~;=A(IR$=Hg8*M \1Zl/'~ge0Dbx[*O#-aKA ODaB3ܠ8Ddq(ZQkFƽ7Wr[.c;\t\^N ;% |HfJ`mEzl .T!,ZN%=(A/'0Hk|3˗@v2tAB-_An?Q9t߷X& :ԥ._`3D;77}ì>9=뿴'3Tqyf126޼ńo!q//.*'WwBߌ[Ȗ^.w\=SvG{*?vB[ݜTqn6g3OelںB{a)tT,hOO^C-ǐo'͞e_RX#33ש iNn"~w3ѱ"k +Mg' ?gC=Z"CŋtaڂG7&X GlXϴ+SS|끃I?{K%xߵ#K>ӆHZ,[9RWNj[]kdżVkYD"S\z>_4T i^R~,XEɳrˀaħ?#&]ʶʠ%3ƇqؤZjm`$Y5!~"WBl_o4( cx_њ;gPa^x.mi9xM$+3Іţw"Ul$y`Tfh;'|с!)®ܕ|6Yy>hѬY9UV &;6Yb 荞 ~23 /'0WDܲ54 zHV׉f Ny`UDKq(m۰(D3du+QIy*F]ȣA3z,D2)u/6˜i8 lactCpd2l%>ou=wݮ[*(U  R`;W_`Dۧ"X $Sx4Vtr8L!녡ȷc]{Z֧֒_GB0IX Wq'!ٓps?,ΫV2*$#\k_L0^!ev_%WEcpyny?Iv~M,|!VsjC Ws:mffy|)4TD+ 6ՕCN ;>;8e.}"t]W1r#~PIhțNfZ>bZVt>3R) G|S ^-]1gL*'_: {ѻ% L;Ժy3;ݣx{-΅ nk@:^\d9phI k)hlEr5(JTo,WόxdhU|X8aj9G0L3{fréx$u0{kW3w;1qOP6kH/ g}b3h P{u#ӬDPkm~3<)_vиf6R={󃉡Euh11a%#at*KTj(aØn ?9O><Q5K͐($f60چ| De_(= ُNfTB¤d(fi%'S'YzN_67ȑ :,`0:g%=_mT9h@7'NSl5O!A{gf.WE'͌qI`USo-kz.F+Y wX |g2,@ܼgtp\a:s,- !#(֣+ u5jDNs޲Y[rV .A+r(k:/N`M)*C A.%:s:p65cuvZdgbl0Qv*>@ >˿dĠgwL 3mX/G,nگt3ȍ}ti㼂4^>n vF]x8Ck#9yT%byBݏpcѲn\شij%U5QԶ6 u;P)k~}RKu1#"j A/TU&)grf~*Q=RK]0(9Ck:J2'+`ϲ{1& ("R5 8#ʝd&s@Lz9ԲN:ߞ[YSJ-<p o%nh!n_wA>[$-}ܡq|Kaw]c߼=lN67lt|*$P}٭ 4yuZqc⽚.c?QA^q?a1Li:*$VM0y6O{NkG7R=h^ ZڰH4 Bcfֿj(`#6Vnǩ(8R>VƱk% /\SLr^.fuY `ziwu d%x~9hQ#acOxf__kTǞcaG8Pg.9;?8_YG60l#e{HvlM iZJI,Z|$@ػ$ZEᥨH5eV 4>ky8|Ig.]A*ي\Z>(VY'JJ~[7a{(jiТ*AiV4Z1x_H*m@BW]=m7|*@o)}G0<̛8If^ш/Qt7ы< 1 ў:^(9I]փ1UGŠQ~?o-$naf5%3$3 U:3钐>D>iRyiOa`@8hU3ƿn۫ Cm0 9Q(kAF?Ԛ8Kko)4c7mEKz~Յ֨n|Ki`hFUN.4?y vǤ8ޜH#D}p2mJ¹?8H77UK 9)Ans=<|9t]=xUo:e ']&W!徰o̿Hft80k;wsr IWж-A8P ˷4Ko+sYZ۽pD] jv%E ax{J' ℂ%d[90KA_h|n; Uw@Sy6X@&L2a 7+S$ ID%q3}7> }I349HӉ Ѷ|,۔? {k]j:kXx{,?5 i"{ooqΜ;K-ֹĝ=R bfY>Q9!ih̿- u>@͏Mh+`yqCGΠfmGc:j ! lh8#N)͚aMߚ"P&B0z#O{ey8C6{}p} m Pj^a.!wablQb )Hǿlr3X $RXnQJb/W-@Hi146̀MVq?pҬQ SL,D#=Hb4)7'~`ߤ ) sܑD(޿sq%(76|2\PZʥ{WršXfFb<V1x}I)Ԕmo,dbJ):R|r* fŠChzC5gHɼ\ı}}q Ma(lHך=Gs:QN/(2y:X Dzb!5c)0{fπ=z2.h1l-#kMZZc^n);>'dF{f"?3%MRM]*k GxDW s eWeZYTBKM_xZ\owvU|P/XsA(>FJVb@3Mc?o@fq?CꈾHlgU׳6qOMLP, CU+i LaA2./a)>)}!wMe1CeC [+zy1_e[<.!B/5HĽPn&VMF9k4-V,=6<6^-O{xYF<$XEqIW ,b,LښV@ m\)ߡ[fG.7"WG59\ %h4 h]|VX E8rl2|qf{VDIDؠjquTunsM$C-5O +L*$_MpimK{Xgh)a$:0b,ݽSFiӒ82`pe${V%kyS@VhP4aϒ7%ACf%]LB #SvkWE:s̍~ 9Su&% fUV3D?`*%@qyY@y+f+n%)_SH4k#y[]s@`쑶ɜ>;&}g4"(fXqT4R̽'7`R@?*L?99ooW 9E_6 T`A򂨩ukUŦvڢ8i4 oS]`.J„g"H#hmSy=fj3-K]6VڼVgGGZ6w9+7g? \1=紼ZrC}Ş0QqDv[ WJͤ kQ|]$iUgx< R+98:|Q X3B)ρ 8gɨaf8H$#"U55´%5U 5E0f>}ͪ_:|VYI! SoWȺ+g0ӭ,t?@h3?L,:]ZDM `&ڈ-6-})"40ШxF2B[F^>X h`Zu/挖BXao)[>$:-ba ^)Ow)Vm(~}rXpm'#Oe-B=ǝg*WжwW\.3LXE7:}b _4+-&Iy%s՘3(<7}^"O`X5kdC-Ck`Q9߽ lm^fELn:|o;o5m9%-{Ԇd n?~=pB1̇0D=Q"9\Gƾ4Mv4#2K:t|gB!H;pG"YpE ?> mAZis#_"^^=#=ذ+ԛ;!M\, +y:su\87'ٺR39Я.CM3zXٚ^v{,鉮YR&{K%;Zn)@ ~Zӟ^ɋr7rcvNf#;mlIRGW ,I٠ަfG*RKX7Yy(A4[W ΚnnuZ;4A-q:9zؘc!(Gے* ;iǒEy`_@lM$[M4]'EIp:+붞 ]W6Hp)>24 u$D" po%^/♡oE/&O'O%0xfe#r|"˾V=FBg ^$|?B{$[f(M^j q8)S ?o,n/S4zem&g xwZ#y5@PxiOBkD;{4 B=&Ђ19rEt,`T@K~|^Yh&6tKipf-g+x# N*E .X%2_@YpPH*Ɇ|C{qp(/gc( UY5>1-]!6V$&w0$ga%sцS>ʹ?l8&avꚃ3bv(C: n+`kOaM8mA E# {:߮ <($Uȧ3n f.wS1g?w]֩ɠzTdNbٿ*M52]x>$\e2o@H J~("X4@Yb&`\sT.b=)[[2n"+V!Mi[ٮS%T0:=P}?"5v ׶F]\/\zxP̵S:=bo \ *'$eA^mlH9԰Cܮy-r1Rtiɇ4yM,J33x8 ={=vWՁt>YځPd:N҄];MJ/ܗ/j~xOԡp0w3rO5nem2g~ os30VVej>64le:{'r՝„‰S-4yS;{_@Qlw }1Ꮤhv- 9{1X3Jb~Kܜ瞺~U& "Aظc"{m[IK𩎵 Kn<Q'+ߣCL @9(z9 &XKt"rR ³ݖw &@\^Yؿ603u^_L2i e*~cI$Gݒ֧փաeO\ `}VC_0۽I!\,n<:*Rԩ}kK*Lĭyɺ zqVևUh֘XwcE]֊0TR!!7vuC{i!cU U)gШa c3\ek>#n>Rw՚K:ޥKX4Dz%{U6Ѡj `!8Ý(_q.6&"I|Qrkp4j{Qdo`1?Y]ywϤ K+oM>v݊/%IJXzĭg г{XD=ho_:ŕm?;gw !Sjѷ7V `Yڪ)wDW@B o1ow1\>lb#GXJ+Q4{k+rtmudKB*~]Hf"hW`l_Lܹ9/0#.qX4zpάn̍9v)DQ foJNO";eXuBcr׮ّXۯ\Bz;hVmvG 2@qIC0Z)fsз.LAHy"lbAAب\POn B8D+QG$vu߀_hRЫWaa!vɋ v%m4iIy*ڜ}( oXlFN*l1{_,|rZ`idh)Cvfw+k  u ='NPٳ>hgz|}yeM:c0c N'L@~'$c{XVJ["ݛ2[W8w -4Y7Kd`4 Ǹ[iqMJ_k2_jYgQ\/E6I~] e@eu &-STVg84-DA=>D}}X- Ԁ9$<AN jh0d-)\ R$-Wc.Q6Z0j]hqL(S~0_/,&ۊȤa\:=G9!BSk>*r2XKKN+̼wVy[hg:XH5d~O%8Ħw楩3sI3`X7u:1;G> Qr6޴>*tylw?i:cDԂlev%7Lb^yMxGtiwZ׻\Hs]H_ׅ"C" ] m=-=38,e Av4o!CaY).'DDG |ٌqk⸃L|nEF%@T S,.^'HG6 ULNg-a)qt;HY|Y\~NCuzջ7_;`*HAN 4apWʜ|Yv"[IO*t4h1Ψ -hcQOX sna~l. J:{8H{zEUc_I~tMMU1TxmTsNfx1֌E=jbn^l'f3U>͚tJ 'a`'-IAOKEE=P(US )^  o nG{jࢤٵ-TDߥyZ?(V=C:\78BK,4Jn"V~Dy2 y< fo֠/S,ƙGUH"}c"0ଢd brk"}vr,0\)ma Kv1d ɴU8nAҤ"'x;e`4r~-NIR_gx!Bz|gLN#eR6UZxmC/bb~]{J'3 H!䯁8m3F7hzǡ-$#j!2j÷ܜAK`T(#=UENZMS VQ)*)hQtA&M4kk)rԍo)枤$X2C q0ȩ^ -F`*7uAV͹38x2p 97WuSBϢ.qL* buA͕%ǵ{mIЋbpLo -{Nho9IKI%.INUJ۪IN"Kކhb,IQoGL;5pȰo3Oe4KaO}yX"xc() \0`&4@ 'I\V߻V=Mni\]`;^:atp0}UvŷEBkl)4kCk|.1p_fc/M57EFfbyEE@*JLz`ґs~ILV-/bޯ_Yn!0.jSO%&bCE>[zxAbKMb`b|tJGu مT3Q4l(fTEBOzR!BӏvW|J*a)n8+-+"2";+-Qw3x Q,,8gb5ãrHwXc/Z>#@ݖ:m`!`م*+(<0J4~/7P4pq$߾=ϽڵpI-inz Z%8_S(/0"MPk`v4F/>ؕo;?DħMIⶮh9 >R5q {{~1|d2K?tۚEdVs3k0m\h#Lb#"#~YυY݂UXWu/Pp,ը26N*s٥Xy3XW4p[;0zvwC Wc |V8хz'Axv6k}O%r\ne_Uj Ċ qN -#fqŢyna2B L#%z"^ }@D7^ UM )G.YE&Ӽp y(aRgF`(@Xn%v?XUGېrq笈XZZ.d\*ںxfr߰(lBUa!hPR&2Xxlm+;oE̍])eĜ W <̿ /řA҇ WǴ-H돚R BӄtMya˄Yeע\'ujozwû3Ku3ȄU2O`GR+. ΁PoAH [&Y;Ruo JK^~װ@t2 $!0<37 VC&sg.qY }nOoK(+]1ՓDȘ2ǥ¸}@ 67x+ mGzQD2v0wn'З8Ag(!hu%mCi=F#ȃjծ܋b+v 8˔̐tyx! t.{>:u!i//Nқ+ʓ O3%GC7Jg$՘ j*<%Ctiu\s6ƲBGd̥ܫ?$+ۧ=PJ|EoWrȌupnQG&BK,B? ŎkI C|c Sƺ&a3ї,"S+ǔ2MNZy0>Rùl-Ra|t;k:n+4-ECc8 sr.X}z/+'y< lX h(^ KYQA{6R~ShE 6%Z~-8%В(I JSj\8N_2q"Oyt'ѐ51eq^yM7fVOK{:Lan#dF}|%|{S**_`aި.u\dSӱJfG0#o6jXvZC i"UUȏ&_dݴ]:AI!@`;5K&isU?Ay5D]Űj26s"$Oi55|]v 80@rBnJ-'2b&ꥌ 4^L768,m_>lky:G ӑ(Ri 66,M֭T!Z/jlOwq%`3c$ᴉ}6`[cDŽ, &n>gCfg_V- Jwi: LK+EqvG%s՛k]bc_KBrэeROW-DlV8"BM]>o۾mR;jd`?uJ$t~73 Ɯf{^:yu:^*]X~`2E ʇ){f;z011F CuYu-D4,I1(=H2$EH^dDWWEìܝE^s .nϨS3ĕ)$Cʣ'Ʋ eH)`5%I w#֎+DGL &.˴sΚ g~"zHS ΋Qesl-DќrQmA6;Gr RCxٰQb{dݭo+^.xbI]ACgXQ?}|[ Zp@4S}>Ova 20u&cZYknW|R,<V.I.h@"(^B ãe /Ud,lWܟЀl:p{GHR(KZ] l{a Ǜ j7M3޴KwnƀPz2!Y4 *Ym}3LOlcPuX(܁!]f:"ةn<(ŧ*ʖ0=N`=|,V> iK;P*Se4+cC"!e*r@US\T,X9Ja] :̡6?#7&%?p+5>|ɮHf,)B A G-Xs*'=̷)}Œ1Y;ـmubGS[x c =":^:MtTi=>!JR̐]rI۵`pOG6ꚦ8vH9Ԁ]UmP-xlġpv%.Y}Esig5l$|>E ȓ̳ņ8ܼIi*i]akxEO7sYIX! :ؾ;iچQ$>3idmЗ7OϴTJ&TSP^.lEsç Yq:Cdfv6?.X_rW!R])'Kf: 5|%uN[R%jQ T֕T_;!>m_nnK&s)% w8΍d`4t Dž^˪D^Zw6Y k x+7|(, 5 b%2n7bz@/j7F01RSm#¥\ QB>:B|l4?+J(@Mδ{pMԫ dKd9w]AHy#A p'kU#N|VOlhe3-؆ Ux LT uN+:Bch25WC3fK*S44 x^BnFKE~Uj˵3dC} qƴr/s< ^Eo`RBK8䬣P׶E͟H"[wC s%Ef(x"F[E2L=e-;C@>\VQ+*f C0+frz3 /v_o>L&qTKބ xIc+v7Dn;XY: t&nF!3s]/b,RĔ}Y(:[*h8IŊ-6Z{ "^/Q 7!iPr>0% h nq)5h!x8e?`'\F-&c6/IHi؆2񬥷j ZBMpo5U_ny~Z>5?Ԏ uDZw#n6\֢"ٽ;| ;*ބCƺ#A XC#0j.ՙ2 PĠKN}1[X411_kwMԻjL~f$HZsj^KL;ؤV5S}Ds@ qе >4%ӑkS zpC~BEℛm ߃3L '+8QzO*]^,8 *gܪܖ:^1",Cy3(h'X-t[`sc a'uιމtyhy<)v5y#Y/-u)CJj۶NYLHIlYtH\Bax]7l A@x>O 팅]/(R)H*^&f$mK3\֡Y! *Cc(Ɗ`F/V/oDɺ53rjD`}B+B}ܦrhhџqպ4LZ c=fa柡Ul xDۡb*7|ќoS-(Pdg&%t{;L;t:?;mH#KuTUGg–U4u?8D ,s='ԁ=u9F@5TviZ e8MYoŔ< a#uхP 2h_ \IlbaGW^-@0(ӎj8 Pg4qR+U+G5OoWuP54Q؛0iiW w^n#qOǑzvנ**= f[G&v#DẹG׋S;W-f{>/( B)驑&yOQ]͒miBC7D`UeT( 6֏k]Ffnһ疴rj],0/))II "y'p#4ktd5R^} 49kW$aٻ}E =Zus]B;E ^DžNPf!Kgqu;lZJ\kz};4i8!N{N9]km޽V++C+U1RoW稗hd2TKֽ⾥?P\ȟQRtvqs2$p:Zq4;fE V548턔woo-k0 uQ]5|:ex~?6FCR $/8PlQ2!E6Vvw)?ts}0}C{,Ɓԙ'FRJڬ5ֵ'΅(׎ 5=7T_79sҩ9fzfks3. Im$ 76pH/]1wF{] bݮ>M_G?\0qdhgT>#{ aa~@#ݥtp2r`j"c^P0bJ:# +U3L)#ENVEly{N?m?^4 /)2/ߨ*vm+s9` 11ߨ7Zh;# JGVA=F6j2)Ol5H$ѷ_ Psפ* xɶl?ɧD?=NNo,jhtj&LOҍoXl XA&E% <'{G퍻H>`|a> &=!a[z{>JxdmȔ !-C;PٗvKڗ!]lpUi>ʦY_~͹g5L#*Jl6fgq'`>CR3LPZ~L3O ˈgWl2ʼn)"@@%鳥n‡lSk 1wP{a[SEPB88ޒt`_h?UB3u1٫isMӂS-("#脇[5B'O&AGtE|qKdL8kt\_~>*;_},k >Rѱ/ͅw3t>A`s>H[PB{Q8P$6 -J8h F.!*eugaW[Է8',ٔsN ՃK g1S` "I4vBo-(a֤i1bR%<wo fr\O@K5m-=uji0%cb"2tɯsE!K{7^d'uv9DOB:W,3Egh k1f3},͕6Ay.Ba!f:ǏiJAK=߶Fb;~3dp`g!Sl`NΰeEҠn?fq< (w3?f:e*SfdOFIrai f)3 /o> Ӗ&EA H>e`U>d; K|VUZ[|T,rr:xIQ@06 ݛr,i{ɚA eZ Ue F$͋Ug .etH ݇((5lE+%I6AfhҽR*BlC igߣP_;ܔ/|ȨQT҅\KRD!7Jjv,_-g +RHiP8/g-3qC8ӝnܵJT^s+3Z8J>S=Bmx?}RD)ygrDɕ{ρW_xjYYw9Z`v{ ?"F8a7ŷ&!A+λħ`8|ؤ!kafwD;v0)Iw.@vt jߺ"AS!-4zaJZrD-7S/?.#w-$6oΦ{=G((6#{ny3,|:R!ꩮT?#;dHa]SbO #ra )XE)5ME=[|I=MmL|w"FaIlk5 F?&$ӛ&U|6q}Zcoda&іRaT8y? ?fhYM3 o/u\^m!tQ @aca1?%eK2،e>F=$T990 O.=ɣTUBΫ[ckbne. S!CMng#<~[#$>S~gE p=&S<3"GIYr]o2fZ"xc%=۩I'])%1 8MwVsFр=(¥j#ؒߴ9]#o홞뼰5 y4/s3a ! 6)0Elv݃#` З8Doto>Ä}Wmit<Ϟ> ړ}\J6f{gZ5v`y:.R.%7 b0vq%XΏ i )zxv8.!/^aTb4Wk?'jn 6;sPX;,G&g9u"HV94/ <>QɉS`IJǷ J: d4$_]頜WZg8 ڊș,tn"ksN]{;Úv*_>LPÈ҈P<.+X `*IȸCԏ#_SO~H|dќ5#9T6"P5Lkl“ T%+ͬl,*?d8mOoŠc~? 9~ LqؤԏwrhQ1T6 *wTH|eE{:)n-lƵYw(W?ʓ(3_kzŪ*>Js&ס9HZhXؓ[oj&p1\#ivHW}9-Eg離kz)NR=NJCs0 }>TNe<%_WIƇQִq8czo"#e<5ĊP#x=VCeڣ6L'[hQ/"0eթhӇjYlM+ošI(^cRY \6BQ:I3ТT :MU`;m"9^Վ9:s2׏ߔӯy L&)IXDq؄kXGn]ktхX0/e{,:&Y94Qe]6;**)!ti+qNpL.H.,%L=Z-!}V+L*d $.GO,abz!^ yutp,qܷFK T|G"Obcnܫ<0+I;g&Ss H'Ѡ5$ݲ7h_cG U*˪k’A5+Ejǡ*fMF `0vZ8gV4a$́hҿGWW A>t̄X8C0ij&|L,$]&e;-ܛVk#azBtY <-q5`Arh T'~!2՗N5 -KDwL=oRptUxc\Qb(’=RieWQվ»Z'gGOP/5: ֢T] wU"W? SK:I eW$jUy>Ƕ-1f/XxQ."}'.uʑuF6 bݿ?gm^[wUiuR' `:Dh~x4+z,B|ğ[)թ"_ z7CL,Wt+ͦtNi9!\ sp]ICڗ~1J]o=< =:C^(܅1jYagq\#$+Fj\dXG'Xu(EU̴ X g]7π> O.噺õgmdVwDXr6.zRw }{ JXj<6mp jVjlS,ԡ&qW;{= Vr -Dm/audS ۼRcy_(k^1}'halaQlX*6~#>u% # t`wz2s"M^FxV"?_kv.F銌մ_R(Z*葻By + >**.:@ISi֚~]<;$X5}}X) W (ﵰheN-TsmHGuԦ:Ů̂yc  u~%`/^&;Y5.ِLM7x' zu])oN6^{frd,t66ϭ$:gүJ÷~DE 9Rax(Lu5tK(-; 37濵ظ[l1Gn7rRG M)9 @;C嬳*\ zPYq u \0j./*} Jrw,|G,IB@jN(` 1Hat_(9!M|w0mq L*fSQ%g]dx)"IHw8 u5D0?e|JqĒ%U8WrUTMQ/#,^ %GA뱣3{4x|>]tLIO'Q~G&KԞQ%C^}GfOLmߋ̀H[.X @1JAQp`be? (&Kþ8Y8 u<`$zG;w[xBD(j޸9A^gQ_0x-{\4{ޥ#"yYEAܗэ چ] iG^ss46*= o?mbk#?=S eFjSɇCG JfZf 1[ᾃ")Upo%~:鹗{{'5 *:ɾiG)m ӂU'h#ga@?'N]ԉUs[K|!1P*/cSTa0}Svxd:^/ -W.m25K\4+,?u[W(sf[ (~d RV|"A44\Y m݁Nwl#/?] 3{٣Of1x}N UIArݴ+էPeNFyc(7yɸi9chʟ Ce9z Yd8jȨ0\/m@ނX4x(t# Q^RgziX=t@<-\JY )/G \+/~ ]\rPrl` &7D>cerdNW1TQ ì/htfbld;^ჽB<6CƂ?w SJ.~C/pE`ɓVm֤Cё( u& U1pwGih T`7qƉ=I iq\$ްߩRP`F,2-uH1 |)"| L;{R}x,P ʁj􁜪yyg^0l+[(2h3zmkl{';i@։/[E#ӱ.a2m~dDxV/ x"_i/AV+*{҂o9\W ?D.3boWɪCJۑ@ f `T0}ȼmiz5= GJDw&㴼`V I2ݼJxo94U}جְ_4 ?NF@V *=+b ms8b9{fnE vtzו *4';qK1)"JĪorĀ=-G3]yl]f}xLCݽMu" =8 o\a!yLFGGi'+ϳ#X!AMq?(h.>xon@dYZ~Cz#AD@wؾ~TUvh~5ֺ̿ gc2hnЕ,z&^ Ywu/|aYd1Zں/xthg2pUX[R͝GIӱQrH oCd GW4XlhbTZb5NG3ivkA$]FHhopco7<]ݸĔt]{iSb]< L`Cܬ)#WCUp+v;HSQ!ڳ'8OD_μ-yD<`_ J*m#z:dpjIVn`@q"76)?tLcnak;{# ZF%>"f*[uW68H%Y@f2+uzY|u`bQ/V7rqi9֤勤)(z3D~ws*݋fc,qd>*K2 x`Oc.NË;돳.~ZeRVWvlo _9pIܓ,Tp ## |]9r'*2t.w / &0F,=Eߤ6}mJ*2|H(EKSq@4WaR"Y˦(H&S&fqXDQ+;IOltJb5; 36+T{0ǻ_o~ʰZUra<\miNrGk6l(![V7_ye'`.|1$d9 (|WO*9N[5n <8..7%T.֙}Ъu!ʽcfr+V8B']{ծr)$TniL|3NJ'C!Q*#R&9eMtq2z꼊Cw%92[uT''ub⠺२vo|9$ǧAS{D4 ;G1fC"r*D0좡dі .J\U^^xr0)Q#Z.C6x[UZ5}$Х:;ߎd*s\c{"DF0N#qrF) j1١gF'5@NȒ} v!#Nċ.֛UPz2ٴeX@/c̞}OlD ,q%H"fi(@weEH%W M H)kW8)9Cm*)1IzYB/w3'WӿB7\Y'ga<'c7FTwr/D,U R"N؊&),Jw4z )o$erIQqؤNE)iO?h/y%Vjs+<-u7NTe pXb]ޗyA%M4E:hIz}d4 $ģk RNOeպx.&G2Í̓Ժ;#ŷJ\qϳ.>C:O7ENJAIZ} i:Ӽ2%A^ ٤NAUЊBW7tKX&Eƌ(s;ZuFd%X @i.a(Wpò#O Yҥ I!*U$&mXX (&F爢r[ˍe$RaG6·к ۈPX'*e!Uy?R+Xτ%P4rpFoF5Jv` z϶TMY<$.@v苕A &I[}k{N?*<7>BJ*4J'L jw9voYZ515ex1 IGdP2K~$/M^0،b'06-s^*q$['3>^ӜR]~W8OaCt@o p] KϨLԢnSw"׻l3{XbלC<̹vl-譼t[9jz!^拢%@b:@e|%zyC]ޑx#vlYp#0?e]-iM88`iH hF'31/%OspRFD ?HTDHD?){ceri^dn{Gנ_ T Xѳ%zPC@wಧc?׉Ro?0~3S_N/7R iX $K2d\]3-_,55O> ChYG (u{(ܕ H$e ?F=y- dyKf-*ohߋ4vs[&l49/a4!\K:G;J~Ԑ@j~򡞐7}ހIM5޻: iޮc%,M'{炭.Y3ĵ9Sjo'1Z>x ,|@G;5'h ߉YuL/1$+?[,w qCp+#ZvWp7+&3Ch߼`r$ mH6i'|9iT+ŷsVOV`􅯛:[y4(˲>P.z"#a:#I3x3e@Q)DDmpW 9)±Lw(!s'*/PGb}'9)9S3Y|y4 ߗ1( qHi?^53iAddF4\fO=xW=q Fn/@&7uAʮd!  ֮-d@*O=|0IFg59ĺ^Uco-p4D&v:Kli_越2[=QaHfT L`kKq:\px_q Sv\U|mA{^կP+rxD}̳>ܘ%+)09TԊڟ # lWۀI͉I9둑<-Vtz  \7wXheY2(ou>QI>g lbX<ܧn&L[@OTxoi?X(whyQHpb>aDA?2a}3̃$ _"Wtm?aڔgU 6$Di: RYظLŪ "$sh^Yɹ\i4=!Z <:gc_5b]L3_䬱f.L'~)ǠhK44کrXZK pF΁v3s8EfPJZ8J z^?L#ƕݶ?%ܐ+Q̅7BK%oL.e0!kxtnʝ[(3!IEߴhy.jx'*M9 Ndסn:ly dg6ottvp;Lґ*`0yPC}G:թūuZ@3AMf"x;XH}RXwPVQCʑ[vB$p #axjJw]Ob\ב(:jTu Hs!ĪXKP<~ʏ H=}T&LzˊiGX,|<8?/ɡ|WH gYY:+$UnV,]%cħ0%BJ*(]Rа3"RIO,d%D+)xmb"t:襚Γ_!h&uքKsY@oȄ(F .[RvYP 2(S&%ʹ`h5̴ CatPw$zer#abݦfTJCO uҳNy I{$a^<6-? m?)>=g&-c!rѾKNj.I*#7Z21/ۦ8Zro%Z!'ۺ-2OsBl ŕݨ8N߾oLcygOOx*uE%UP`pF r*DfG0\ Y&dnj_cPzآgPK;oAN+=:=Ӣ؝΁/?JApn\( .hN7 ʧT皞uɶs+ʟPiyW^$*G+^bnIctӎ}C!?Tf÷"tOhO "˚;/WWŘY w%(ߋ$0ۋddaW'—uA(XP?h-\\:3Lْ6ظFpzTdZ[r{aBm.R!驘d|+%sn؃c 0$>Ͼ#xhaȱdKE)Y1y4Ѷl65FN3}2kV1RVp0&MU+CƦ44|(q[|.z,~11*lۣr1Y4﷉0My߂]vu E@F%_OȐ!gŸ]xfрH"Dkõ~N %?H8b5t A>Vydt0f;4&~v6Q`;Vó=0u#7ݱVPdMJp˜;v5xF*Q쁹ϝ/٥@K]?K׻)*jp_ʅ*jFaotT `ug/6*1zsݢ1%mJ쿉:yŦTAA~f_'LleBb/P oS!B"5Fswfν[b{x+>mRWoUD `L&%9DA54ϳ7ǡy*`7~ X3\=YߦN6 ئaA2{wT+ɓg`*FXf;5zg+# l[R3~75_iR]`fWȢLM9w~L%"P)Up_?!_׊D^|f/c 6`ɽbs.O`t#,M ^4:G)E:4|H;aB"q.G6C8"lu4eU dJ*L .N7gtZeGГUxwD޼LK0zUMnOe+ovI6*q^?_֢gA#˾Թ~=hLZAT͆@kzw6H0U ųYۺ iGt;2`N]$B¼DLuirY&R4$hEԲz`8Oy " v@?ncnҨ~ퟌ_ Y ,\+IiA:&7 qʗ8{xӃR^NnS.UJȜ pB63}&:Ӵ?PyrRtr۝٘7ZxJ]m8Z4N>vrލiАkS^i}Zk +Mh|S@D62N dFcsXx4҆JC5Z@W(wҔ)N-?̎wK[<2n|d&&,YS/1:bbyu XudkM,Н|;Jzb{V!r?ԖqYD34 |$d eN90ǦWAS}o(=ebh.Ý=yD}w/}TN*5(I?aހ=r qIY˺rWzC\' 'L8,0½w)Od8[{mnZs]eDQ8sĊn߃qLuwq%4U2XSKD[M+c<ʄhodC&O26)4Tvei.̐9F@%_٨])H9uaM)TE7Ki]2T'#KlTaaGpV2=Ihž92cLPނݺfo϶szb!RU"Qdzj!Bw =e0r_3I۫J0'^<,hC tԌr\7mHMt$ۋ߰UOaU֘it+8I r7BZJ^}s}:s6*b~KE/$hU+?r,-z[l0co+2*,G oD5Ճ}6kf9Ͽ_6"X5 P5FaCw X*Wܨm&9^AqԀoN>LPy~1l4W=L{4=`8'QyPlk^G̟W^yLKpA DCT7ye ܻ# l5#ն⚋blǟ}L(Yb)hg ]&>nv`aY/;OMXIš5wov&Ƨp@WzP p0ی,Sru0`aMؓоC Z8]E⠶V-)VN=9@A@?G@6"v5+7O {|Y!$.RlZ[$eojLe_$- <=9n܎h>)c:$˖ƒj8J_N Z-i1沧Jt+!{ 3ρGه]Y>JkA"!$7&lc۽C`5R5Vfw<-;Sޱ>ٌ*p_g3 ҆+P,(R)Ctn O aȰԘ^9ѿ9#: xv \[IDyY|@rI'' 4t vZրSrzac pns yZ-r~cq(T鿑@_HF'W[u2Z u \p#,G X;x)[a ǜ-ٕ#]&,^c^Rt_QkK/$JJ?JAb4&k:_6xߒٟMssԣYv]Nn;e#X0cd0J>4CBuCBSB,}C%%%ƒˁ-(Z 4IAZR }sWt#xntALS];dcvN`3C8Է~Hqa7NLdZ2E ?,9K=P)[Y3IkFՐ 2a}*XJߣ,so^a`‰CW~Tg!:J3-q{Z dQ_0@BoAJMׇa@:pRs7/FV2#C3ZuSĥ\#8';YHSڗO0W j+:L-q08e `R׀;^˝RQ)5&ۧIܗ/6bBt_D"G1ۻ}چj!jg;ǿd~7X{D̢ %gLQ~^gҕb*nx-As3@n*7t$"A4Gzm\ vN lI iKy_7<`βbV A0/gW(ybw o&jbߛ#-M Tuh2% ? Kv5h D'}^& :_lv"O#gzw|M[;V˙c`VD<7G}\ S>jY 3iɭ(HI繼>Ujх` ^$%mâa!fk]BEo@_ƮT3D5pZr&9Mo |LKD, /lʰ!BJ籙g鏓&mJ6YX^kdlBюCw"u?32[O ,Y\jjK,H B쁓 2PtC&S-UI9<%+IHΧlJa+ΰMW ۨ +]Y' >_/Qrƃ͋%Glf!f9fo-u1t$~=ˬ3mxHSYDK%bڕkJToqt&E%I&_%܃V5Q͠db'& U^+M8alnK[twc @!XBH_@ L_hnfbHɖF< vu) f:! @eJS0%/j7>0nᬬNbxQ`zdר6K!.4L ܖg0=FkZ\*Dꔮ[6gݯnk*w2^:Ӑ } D|3_=0:M@*hAռUgZ=_4f \S^dPZƗ͋_} 5q6Hg.ei&s# 2&uL5#As%xLD-PFd[$fuCPL씳8[HU6CzmҜGf$IXkOg84owS{_Y6'F*]9ۈBzsgi/^m(נal kӢڍыsuKO]Ο=4mnlxn,ccI3NfXaAkc:QTfLzhā8fv> eDO^ RLb@mg%я B` &7|SJV&n˃Z,0.~|:UܕX,`e =$3ϼ;X/PpJ?$TRMʘ dd6#QHO3@4"‰nfMΦ-t t 帍'3 5U{_0|d]iQ2J-}鉯ΠVe ޱXZww5:W54G3yëzqacbaEE.ȫ}&D>Š>i۰vAZ/R &(:"8ueGgdpfs&t)N0ۢNIY%k#vbj,{ڿLb*hai!A-4I}`-8##f/td<1bԹM4)߅37ÂAJ{kéD 7Wʉ8tGdYt a G }9*1債z,sXOxw|$/Ƕdx %uQ\M Ӵ7_GF>z.~6U2Kd%hww*xEC N+}r iyAPA\I,ID >/9@By3+[@/A/U[ ;e!%r?;Dqq7a14INl >gVACTg}^3_t; G߶txPTn Su=Z;I[1<(Ocg)*q9pw4F\sf=>֥JӮ 4Epkߘ$-'|z^}#o֝mc|%jOEA;uCf_7Xq<`nC#cG(,Sqz/έDJ~iqDe?agnn܆Q`{Ͷ }o/7G*@J̃83"{I%ĶS / :-_U_`CI՟B-m\ 8-kTY% /6 Q6)W޿.N,B2.U?u4)8< i}9 7vbV4_r'zPM! ݬkldh(8/fp{ h.YZ2P|^j1nT}K"-|ɾSsq"S_ķz'vy\5!dO[7X0J_Ebr:ֻ݋ VZ֌p<[hwR8{`^mRbh Ng\NC9z?.tr7C|Ȯ#%qWm)8ĵI2@^4 ٌw0 G.v=^:g1rm]eW$Rb^xExJ; m]ȑwsSzٴ>6v !SJ?Ogu$SnH !yS== f}CYE.>ONr?P 4%H@eѠ0Iq}\@(?KBaa- M[MŐkpY0 \\$cN~%_Y^>u~M^7=7]6BZ &Xo?N'pZ&u.XuH{S1yuvի)$I30X%rAEsSbC[.YSr.tn߯-8rB!:8&d:>+SȡqI*fZC]B ˙I*6A6Ac]!TpG5ꖜ5 e,;OK3Yk;h@ݍu1NPwd^,%xH S-{y1De97&8oX?jTn=O*MIF%m$v8HQ>7ĐXP֮;`G&8}IJv3%3JQb?qᏁZ"۰#*D)@bOcBHU{ ,/.cG5Ǭ֮4j" cM1 q; g3[WB%#<#IP/zAS􄗴SlD-OZH6fVRڑ]FK"KXߣXICpًu8H,2FW 8k,jXtodC+ NsMn TNtt?RQɋҋ|?mO3,<_&d>PGhgUj0~0]/|N9zp ϹL\ni_2n!:͟cD/"KJÇ( #wCzetʵ,I+ #!ɒLQ? 8"ԕRq6ѶO{3!<,]v:&=K{]ܧtppb$T4wȾʑY Bnh,Oi$MU*$^I@D @ V)Juo|DoǎP8d/f"qr]~AlI"v Etw6*Ȼ*au 3l[_!UkZŘ F2cI_X)wF3(>d361h\mdaLt6R)̀ɂ­G̽?k~!(2V$ZDJ-+M^kkҌ #/J5/뼍"@fPT/\Z$w1ఈn.f2ȑ!9P|) KLKyƷ[X6I)H'b[Gp\p =ڐ4dS?#?Stʓ< [)-ɾZZNGH%ΧPmCI-NQzkV5g,}0w9(sf̐ J {TAT9rg0h~Cm4~zJLf<da1|ct(==nZq#c3v6q'%cۯZVYZ(07;|\4H\?nW8(EX+%g)o?L ]ϿT~Ql>(V)sTp^WC>wLZq)/Ⱛ.y*e-;(2<2QfxgXP[컹~6׀lrC^5#Jn^h/e Jo͌Mhb:̔%W$F p|_j V7Uz:tUݳ٨Q|*ӅVf%'zcRHS~fW"? pҿ@ m6TgRږكAPv,'_{ֳcu^4AKM5b,jP1L0U8ȕ+>\2Q;e:;sg:v ^'r`H8P\=cCu:с0KA5%JA8etÃܢ*pIk얢յf,#e[9!ubjM#pP6F0 ="G%2Zkp(_k-eH{ʴS.8]PZv[l32~MM~( +wd:k+%0B^ƅ^5MΒ] ^; i}PYѼi*DSc`zEM< %x b,{*6K.cG9(œ5.<=lU1^=ߤ]#zfbIjmHhS՚%muq?-G]7/{nΊi~aM$K'jyGp8'mEj9!ڠPHA&ckkq>%%hhe@q>F|l{5IO '(}9kioa'I.E7oբd@eP )H{u_Y}N HNXZO/{k݅g#wp6u%>W&Rgy@u-27em|i#rK_ld` RB!"7]-32!ӌ! VT5K(":9w(^>pՕcUO͸1.J*b *4 F1NWe~k/?GK>O3]5tXW??%"5wX+HI1kUdO))zLK4k9+˿7RP u3 1. 2tO13$2@0&^rvWoiL@c>(l1 J#&C@ z;L*V<lXK|w-HW Db#v!QD^)(ZgB'{ŏԍ ɧ?c~@0A6HkݍJ$z{ i\aKh0/H4u)f۲qpBiǤܬ1w?OU4_zT\t 8Ո}HRB3a&Ћt\-8 bѦ5uL/,F<{V67]7JsYCVQ-(`/B9祹@= JT| 37ץ{s'Xdl4:407pO *i'dNIHIfk@J.q}OZ1- Mte&k|;|絏P_[ R^l֪ 3nsaN޺4󜉄?%5tje?'f00[ٌ x#zd\ ,n!:?/X:'@F#gr୼,DK&Y-F}t:.x̳#iPkY1MZnu CyZMQHJ HB2*Fv`;-!yXPT*6fR’! q!Aw63Ofs`SKAOږb4#qcQ3p.pZgȆOdI9uÿLc{U{gXc`6;(Bތ-dl#,36F_FHL_)S;|>2; $|q+&ԢF RB*pATP^gcgJ-#H>PQ!]?ihý]^<}qsb1|bDzœ4<׵{5ҩ e&[ Pڑ5l?!&JtvūpO/̴?rM`ސ^)WE2*Q\5?,Uf¥7w~Cs0}G1D|&oŢ$OYAH#v_I8["<6hOk瓫}۟.P!|`j#Sb*s@n$4n:v`Cz{]e'3ߪ/߀t[7\kokB7dH|5iDi W,Nٯl< gJ̊]8SJV{H h3nJ"b,/V; NqVR$@nmkۯ3G3@8Txn۩YXaঁ)~ܨ 3- ZWI/WCľ΅aw΂+N*jUJ~./#i)P\ViE.L@yJ1HPNבZ4eyB R6ԝ|YFoG\VeƁO#ީ( e ϱm6ʷ"kY;狲3cSd[>JŴ kXYA n+ n*fLli4xߝߗK5k?#S(U =hy(4Z5U\/2;7BSϷ.1y4-3InY=0aG+3_ /ӂDx+khZXm%.1v}R'pLłBw>;]CFžd".EQgĵoh tЧ> C7O,|xN=0^{J]xI2%}jw\;xժSV׍ V<ƫ._ s=4G`kL|hvT Fg ĉ$!Ҳe8;0CP7Ho'X-KIP}4R,rn8 *W uk( /D/>/p+wS2ۍ& mMGvPs`vʨ  80m7tzP>]y;ʳV??6c1B` \6nJ_c@~!bI:kk.&ndzzz[`)>QHxR؛4Ə5eUqO3L ,θ4b{}TtS=} nwӹmR^H^&& lBll8OZ ^0Ÿmɂ:Wr.1ׄu\8&Hq2GX}M,U8}Խ>B:xTs(IF' yZ`pfKi[0F=Su$>v2|s̹=[# 117j(qa) P.95qe 5;al+qx0l<,ov?8"P@jhh~mT=BzTCxr=!.U Wh ^?A@L?j2^h}+0ٴ?-cx2MTN{4g=6P"3f#xm6A++j& XC \Y¦M+A,эΏ)gw6[fKa[qxzqy^x ޏre؀% /FNT% eGHs"G-q,3%AqXS7GawRXVK],EgнT%e#~6v1_O$@}߾ ؁F*WL`."da%0Y@^ nҗ@IWUmh ݀hޯD>Gq]/6(DLj,F2g0-<-.!"pl& HvQ k5-rSF $a=2{CJ/t;K$I)"]*}0;ՆK/f ̟61c7_䥂P1:P`5FJhjfO>avM~;`{n 5<&"~]͇pv3F_B;[nX>lQ)|_hR3y ߦaP@Р1=fdKY­3Ȗ(FcmC"_̇SExSx5&BUJ*V៊'"Ѯ͋4.OH4-rmА+ɠJwJJ8 d~!qr]8 z3|UTfyIDMXRg=ns0i_$Y/Mρn41k€]zj4 ͨe„9m ^G0M ZS+zTyͪIACRA׈< һEIö}f NϣWnS 6瀈MճhoSP9۳m >J2Uko'fV¦|[Fb\Rh*xOL%4+~幁5WJ +v*qGU{ RC _4pZpF]>rrm8QSH*%US ʡPYgD9S/Ƒvb'FLgK /:s&" 5y#NG_͒&bj1p[UU۱Vh*/A)ݓG]wZqROPY<]0K N{r (r Ǎ=F]B P3 #ȝRyuggQrXrV鰸rOE )X5s)|^Uܝy}\B4:TxUsW]iJ'(mh/jb] \lE[5\qtw:ۚ۶g|d+gOatn'oSBƢo+1eׂS we7ktezkuW {VI@5x/5)(f\1u ΂+B\5lrqy4qတ"k~|%S;w~ c˗([t ڂ7p璆|y)6k!!?~ N-܉*9MiGl&i@l8?.`\58n" ̘P`q9eSm,׆QV[qHA;RgeEd;j? 롂M\RA>wNkI*)o>6H"4'l$#?'\c8 } O7ލ)& $POvtz׽Ck|0%rA-,׉uyʓx}uv+L3P` Cx3m!XEp8m% 8$jE--,yFN7w5Wr!OpgI,stv/M<)*m?b6HNQȠiw09:H~4{VkeJ~WL%h~1+^?OL2 w!HiKͳШs+ڳ}r`tokW; ]!t|Wck4bX$\J0r%WJ!).tMB1g8G.m"5m_FE? dNvL Tʽ!'%VBm$x`IZs}3=ԿjeƉ+ԄT{-n)Ɠ4 . $JO€Ʒ$1#< ծhQDıg\PB :C෩>nH.RlՑkal1@@FVg[fnI3::0eYݞ> Cг,jIY ɀ-HP<\&Bo@VE Z[F]M;KDB+;#UG]g$,+H"7ۓjԥNًd,+r'{I&$R \wWDJ812'oN4W)Z$a֝FvL7INcl | tHM՘zٳ">|ˢxj7BXX r ~K9?P& JiȮ7Y7#H.!)nF[/KX6W /fIWWu/ mT3)w %Uz@LRJL݉5"_U,*t?. YL6X4aJg<,RHWOֲQEF)e8mdɷ-13ה%cQnS4a>-5PY0=~\tP4'YsFAJgROۂ>BUY=P-jYi wL0{%cP[bVX  x& \|l:\c׼9u"МRhV>ecaFԢh ॑[> J`tkܺyA~rrIX,G:[tpу2g;HjY|_A7Qu %G֨ aw!vŰ:Bԝ' AMA21[ 31PQA.ݿ,,C!EEsxYcaf51s?޲a] lywU7dA|yHkae48ɞFE϶)"hnB4tHdAӧIo _?=ce}=}uf_Ux1zG"h哣 { c/_uXqv2z1>*F`aާ Ve֦N0I>,cs FՋڋ+ Yڲ❋WU2=3b Fno@Bh+ـ ׃h~˕^+5 U‡Y l5 }gWgB!$ )rvIs;!AO[gahYfLYxWyKe :lx@E{"13@Լ(io~_շH)hT + p:%V]E, q_>tg_]y6.k h;q#|$*uȟGyiUY۰'uƏdYoj5?C7`us[(m txcҔ#RH_&G]٩G⏎4EܖϥB:'-) &BDP\Mj`ڝ ǫ0Y\8RyA^}F~}:O:ĚT:tm^R 3&.1*P:LVjsFpՒ58w(YKL:j? j'YYR¬&)-y$-gqȄ Pp" ϙjGD P`6:9u#IjǬx[NWF5^z Oe3CWbMg%qep0|~M|b@=ۤ{9oYo@IKoh>'QTP9лXdM3C^/n|4D -ᘔ7{hjMŅ#c\q;7r=|6bx<X),S6o~-Of[}b3pVEI݅6D,x~gzdtK5CG;Uv E]Į=ն^ԏn{X&B؆lS" y>lLE^hńToIĖ©f훤|W֊v$O^"EZC4'N!3U3%/{jZSLQQbYtj}ȋ2(v}ه8-Ҭm"p썋Qv}֓y)?GǪaTd6=jihDیw8B4 ?.:# diVyL rULD|vZ6 LPBSCUZ MO~N$))$K dw|Y]&Lx2uEcq+do Shc/BU xP5P8Ӄ\|(ϱhG̞>u}&&QN&>\XS&P&N.IP!~ZW̓j-O1R֧2֣>ű^ok͆y Nm;a%^O$:o7_ OaRƨQ\/k]1+Z^L`4(:FJ3a F<+ADd0=W9ڍB۝6/Lz ~clY٣912M)lZQg]jGaѓp>\wPOd5'G -#ť :<^;QOqp @\R,hKHx%ٜs}5T%B]G];)  C'FNJyu1$}]1CرNIU;OԆ&,6'YQ^ƀei̓~AjX7r|çcx?_㍿ljь GD]%gܜ"``Y,J+yp"={Ő uU=|< t܍;Dc;6Quy];WZQͳS7W}x mG0.*`vNaqfة=ʷ>Z?KDW#GI,RFG r#MOX'qܑ߯3>f}Y@uN~(Acg;ЮlVs<_͖k_yf71+~6m%h6-rv7))Fa2g-`״7n5Kɛ] _Ր ZFArۄbYabL!D4)Z sʑ~{:l%G~qAdL9B~RiϺIma#{kqgQ y/> rm8.ux>cw!RʌB`ՓJ ,`Ǭ*g=d-8xJr G| E>L]}4ޑ+;RW?HƬ^s Xhb2]X|C<`_|fD2J!ݏܧKp41ԙ7q3*\HTI W}WV R25nrY`}@u_1}$샔pގJ(p: =f!K+>~$gf{?XB?a1YA\q0E$|m+‚G*33ugm6\W%0GK?bRoc>$l] ]] 3 _W8Tw*'^=,OS"A!3HM"P*Ӎ ֓{]a]"@XAcfKVQ)GR%c"8oA@U?B~RN>Zt0ښy˜ 0O 1:`ݭG $2v"J\,,)ZZRlYd5GU>yh*ҧeSt Sm~瓫TgreJgflUYk ; Ede? yw6oUxwUY)2,&ͳvQq T8%l#Z9pKZa|Kx-{n٥Ό$`$vzubokI"T%/H ̦r l7Wۈw&A1;YHn?=-2\K!n5 \M.΁֖\) OD?5E5 C`w NnP.=28I Lu~з) ]QE :gE S-gD7cXx&I>dx56lV`M[!O+  crBI̸U]X& &ݮbJv1,. 1mCEcazR{uRTVjfDy%!^ɴ1$Gg?&!{q0RXH3οZ" mnmJW@<P1dn6݂"@b{2 F}!R00v ak=͋ ~6D(!**l Y ;sYT fut2t>a,M4$R+&9T'a'nc쑯{>Y,[ АBA!P#;ZP2j|HI' ͂h.'/V/ǂ,׉R'3)i hW)Zasf]ے7{tw';SI&*T|NvAa6kYĕq3`:YN,gzN*rdqKX0Wƨl+%n΢m}΃ [_RAF4(판Em@"WĜt ϣqaZ&6a<&XQWY$Izw믔}ͻ3VPqXT$*՝mC+FEYRx&-;*y,FBj8`9ڋ Qob Pql#UR_eGB:ķҥEAZ=pas/uN_q<;ίwIrxh %GL/W 1#Mg?Ĩ}4炒rfV={07[Q.F#tMil7!-%16?EP.@fqUq-*VU%Zvբ ss:IIYu" #`jiC* E.NF"sl-I o鿝P}i(vm1oc6ːڛ2.^01MqG!9@qshZ,9OY_'h#7Ԋ:jn.zrB샊-ݩ+ol|+"RB t9*K8y)="Թ-lKqǬV*vע}Kx:ຎ`q bpMFbH QobC"aV9sJ--Spe8y_5,.:͝BJCU8gi~ـ6p7͓4t'4cW^B,L jͮ)pJ\Tz⿹"l{h>']j0:6;`Fs} x@T>NSz7zlN n=U _ZlrȆ,z&wzbus75FBٶc|vB$;hxR,8vL&1 H^VʸsQ ņ7&_kއ59^Q 8}].ĕHp[x|kmvHY{f%r-R*$#zt3' #(S^1`wiK;Ktq#nҨ4J lv1À}uI< dY /ưPZ98JI=NS|83[{HN c}8CY浹 *SXU~[LْF3d,yJS -qca;uȈ3Es9eՏV<(N;d8O^/$%KpOL6MH[ ͟"%*E>S$)8Q2iBӴΟm\N?@֢*OB Fw]1C~Xj"υE#ڻQ[.dʹBDc\?Bpl'>GmayS- 1 ]ܐ#^pg9c8r*ԇ3ma ب嘲~*0^p<3 `OL$fg"И*(e%_)a0G2RpxZ޷#*oSd`m Qk|C9yttvtLG =Vt6/"Jj~fG_n7`Irt:{>j򅤽ɠiPO` Dc4f[#6hB;zBl`d]7\D)-P-C 1$[J8d3F>r1 u˜@X~#{M:^O/._s}}VbֹC7*/#Lmｈ֞7))ႱZ,HTNh2sP1|)֢@z~|Q#{Fu?bp/_H,<aܒw e-'[*r͜>e_fB h?m!R1Szf#3KW'4:=H"nJpL$'ܜ@1 WҬN/5~ڥčuvSt3-QCFʕǾ%bYfymk صc3,F/ͳCǗ‚BM@J=P&e-`UW_~35_ au+VO4«zV*##Kcχ12)$ǀقӁ9 moi<X>scKz_.@e73K%fڇ >QIT`t_SJykRTӈXKvD+!95i|sD9]ߛw(CUrs?R[oC9qSBK0k.a/wDұJORH:N|90$6SEwyx:`6)QՂM8Y" Q%dfO&Ykf|.e 婶cmjO*=>-X|<. `5 >K ;kPGgTc$]UL  %  |V?!>YGcUۓ]g*$$R#EiXlY6hWh>ˋm#Kml8#Q+6x"xWT,O?onf2ɐ<#Ҧ/&zٲ:${~h˴ތm\wy^0ӥy-L0wC<U24,L|J?6FUHv1e\[@ vƙ p(ıˠ|0ڙAHertsk[XRJ-ru&!WhWN:%<5 V1Ѽ8lxS3)?=bK $iPX@ RI܇$y,(oԘ%> d-V MT,ep 7MS6Nq=U{)́(owLh.ȟк9CA0Pα-BN8w;f$ 픑sH< lkfW\-e[!㼠ܴ?nE0i S8 O4 hn$FV"aIV㦻'ccF/`\M}6mr^}u~藉2#M`7C="tƦ=&ûnB56^)k(O(/*;RR=\\MC({z]~k`.؟gGXx\jDX+ +U^!ȓΥ`gr6NcGBEe%5͛n ŭ/ÎC&+n_F*}~XQm6È ^%[9S2zN9{{ 'u'ܟ}؉R0 =;39v L=oz"c{+ P0j<\KpxAJ&?Kq:BWUW ),갮i>~/=gPaRpI}`[TȲp;-e6,Y+8INH3ǑZ1 SJ(u,yµ~(J貘0z`ñ@ECc5#ƵFȜD<{T(=$0 yY >Iw- 8c%rX0W lN=6 JfZ+; Wnj: !OyI\]yrH wO e_ X?h.FŲNKڒv7/6$Vw : 1C*`i`6"W5/WQMQKa\: t Ѵh= pn$E=¼?5wt!3r&ӄgY*Z[AOj~`n8!AFA٭5h9@#ri+z20?eO+̦0rE-~xa*aޖGE$Hq;D\ll JRDyX*qYAIcYfv$g^߮iגNdž02Β8 Ah?%wMgf . Om[C4w:B1LbB&ckXrT,3Yqf`co3H|5WC1mj t UZ4|@5Ţ=$0hڷwyw*$UTg\gj{ij\q1jpzlSo7M(1"25-=GboLP[sW݅)qX9b :8@uRuRVK:!6%`2R%g3ƕbkhT˕{ME8ܷ`FDSq9#v"޿l5y d!K+$.=yi~kKR׹p?⶜U$Z.q]JZ#7#4H['{Bzhwv1,C0HJ !q܏ ]=XRL^h8t'OD|Ts- h1Oݤ /F~xGRm;[rI?Z!rD( fpԟ~;r}zF豅>'F髼ЁptCs_7Y`^ %ٺeÌ[ ф)]%]sR~or:}_\8B|5QEڰx7pصe۩8]Q8`Tbkq46RϹ\D7H߶Dj;o5439>T 37-N$Z % AvxrCVSН L!Z?RŤRsH(2m:F w=Zр%R/[@c݀ V9ͣN% kc5-)JQ-4-'W0miUX(Z. P/M>L+~LQly6$jw!]#`^T2z (/jېEG`IV\+6dI?M%N>R"x 2 Š۟>Rh%JE2uLWQhX*2_q@n8 _A оPRFDtc P!քʏjqν@ gL̑~{SPaPeΡk<F_ygH{Q\]i $X FB;wI&:_+qny`c/ͷ 6NPe~G#,dh|Lʎ7UtY(Z7M@z\7ɔmB3f5pDžZr~⩺8XÈ<uRnɡ\Mo>u(@% S6/ .-WY#5!YȆQ{EsehЬ&$S4Wi}6MA Gڡ;hw0eKB+y'PNr[4-F!jxUiƘPu4q#…_1\ <ߤ!/Yq/R坞*ɹ՟i2,>GT+"HSv˛W<Q[ 5|crvӄhv5CQ)</,g:7`3;ehbR,:39'6_Iwd(`NꍵdhM`ߞqb,g=b?'&Gx@( S,{I2ևG  PKO%O@Le7ҹPdc_r\5@Aeu0廠LR ^}M ꡻ onWgg$`}v1+v*[b8/IiҨfQUW QWƴ&}lN2!Jo,ލ,PuG^7i ߉OWt1 5+AH[(DYb;h*Ffhë+wEە8erh<+O%[1h.uӋoG<?LTPtX8UcoH?Y:Gڌ\k5&V4l[AԈ:}&ο;8g٠J~o#12gזʿ0˟CDk+!:xFwcJzjPž5D/ =yT*LH:!/4$ЃN}9Cݭi"-6rKM;^d1w.{ZT(SZ;Q 5 E ЄU\4_0}*1fCNq>Zh#auIzUR0*w}WFܻ0)G6_:DХWb?9ǰ kD(y|>۔Ԩ]02TT~R5qnU4qDT_P`sw>+R6A#zxܣNߺ7Aw֗s֌Zk5.F IꑄSNhQmw?K D-8q4:ok{t:oѫ~8/m٨>KY,C~_ -cWEAbt|՗rD<,ʟ&#: ^bDBBVm _BFJYENZptbO{ZEBA OK9̭ D 8U,!:+&b TZV%^Bs_a6ª dA[t4dQ̧iLȒQTI=\MN BVrpM;(D<,ǁPSlOznPl߾God6މ{?e]8+Og=F  O`2DRg8媍vHR!<gl-ӡG7·IO1np+zW q ڶjJOU[&?C`BOŔG"ǚhFjOI2D%p LmaKx(WgLcB|\=ғv4kϹ݈qe_C/T[Z]cnXNߺ4?S6u;i=|A\_;shz,y%Ѭ A#\gg^;LNh!h@"F @QGSu_trԮ#oMWj _]|Dc)UX7ǥY;#KJ4S6bh4PH:vC5=TwO< s)<L}t_ۅVߛ s)Y<{y[Qf έ1g0o3X B$, t3Hh`&MdtA,Kx^(nDlX?;~YlIc}?3Y,9Lc 6A-vqB8nx0!iPkgƠƉ `?a#L4NcymmV,-Ψ`er3-=lpP\$F(ͰGOՖ!lA `Vl7 8nNODgKXm"M}RbG$ ʄHGa7*&ՑC"xaDC*6 \NMɾ.{wwe+7pwe90$x[zסT!"0v};֤^s(PN܂Z֐H17OKSq^66gh2qO[2W%xMog[&F8; >w.&PM4V&=fh~M#}/(hߪ~ vGRMQNfAQym;=ÃMxNqK:ywPO(F}1.y*4@Sy>"=Na^/}8m,@aڑyʎGR"-dDΞO? x*knFd,Ɍ7m0)|6I1ExI[wVi:>VB#j%~ 22̓i4iB]L<ݙ;DRU%{X훷 QV)7U*xlg*0{@VlZ}.BY< O3l(c!9H"H//u U-C>]'Â:>,c.t8YuZky&!bYӛ'9+g*^D(}W5$7qvG{=YB/' M1OkBjPi$r<؇|L *y`#1"頪zE# %\߿!/=MbTudžPQ>.L06މـQ?m]3Yʮ&YkgN- 5p>DLҿ7~?!n/BmvMX5ui!!RiԐhviءs脄"a.%=ؙ#S1"]asLQZ\h,ʑ`0(\w#8.C"^4G U@KtFoòt7{\p +0LwH9Fnfp詙te?L)P$:Hb`[ z6 ~:*3X;Əzz[ -'e'A|gP3WZչ’~m4?lʨB;oPxD$rq48`ml1O-sJ‰A`D_9=d=&/#q1"Z~,n >c a9 A b}?ah)?Vh75W *+6d|:ta*>)s.[V/}ܩ2F 4s\D  Y!d#ёd{3^M#ӄ#hɐmv ܂@ 9YsF!;$pl P?_^IOl[[V<=uЂ{ΩZWǤ83vG;R{ΖyZzY⯥NUfCs,>3^|Х )K /@2TQioU@]$@ۓEAr@O~0cXq;YzHPź - >jO fa¹@Y/p*9ToྲྀS ImKW~!m3,T%5!O @#J*L@\f{q X^f'xf0Ƶ3&<~(;c!srJIUHv) ǿQؐ `8W?ʁnJcip>kz3 2e}T5oL Hb3H<Lډ"vx~ГzyY-S9SSfN]T&b%KM[W:ӿӣ``jԀTCs=E1:>i) +?w,.0HґnrMy 0& >GSޔ0}JOBVW=kׅd3Y6Yv0osW;ܺ}:_=Y $e~&Xd=x$ <:Hpw.YϨ5#'9Rk_D(Z9u܌v;fJO'ބiu-TOmMfՖᆢ$!Ȝl^;DΨ"X`NneѺJSQ'傟s"_ǶOrϼ9-s-~ K5$ \*`}Q~n27ma&___fl-l ]𛳠X3ȯMozpPV/~99 zweFY#?P`MPfaJJ$S. -)uqzoG"ump0g|T &{n> zX5 jE/Wnzt!o&u 'ɴSK/o 01H@Wz@w5YUpN:"rl:b^: F, Iu #,? ^C].ŏ=lyz;#;4{驶u])OđPzf5mJ*ugb|,+pȨ:,F!$A"Eag0"yQЯ7|\;U!FJNPyԇ0{M>cG %ޛ!H&j/5uLAaVjڕUXB?_@Foxn'~ޱdY#w"G=fYω>Uv6^c8QBs3i,^O(ޔjmȊ!7 o|IZFLq)"Ζ>urC" tOݎ^Nqw8AtۜC2\r>gT6 JsUr>)qrv%KҎ?Jp'_G (9 osZRD%^L_m !=,8cdlᵲg`0"/RrZQ>*|O{Vvhb}})8,:O-Knc{YD 6ph1jM^6pDն:Gow"6{٠Vh)zձ  Z%f'pC&16<Y *G={<~)/Mmx* ߬Y r*HXmA@Aur-Z ^W6ASvA,jFϷz(vWordDYso+;Qw^.z RөZ#@*b-|Y>9ugޛIȍ^"JcC zPmF?5=x_G@& K"hDW$?ǭ_J*ϳliJJogҴDoG69-(R&7U*$#Z/i5WP/J|Wr&f: r/w\ON9 v= lQdn .YFC2`a :s,a|TwmT kjz'9nS5wC|;$ =$wCYe|OXP@S^c oaC.Z`ޛ.b ( ^(^-zJ lځ/t zUF&vbԾ 2=. n(㔻T[4q[{n.{מ0yCWpކ%~<^$sE LxbRKqS n$s2Ғ{݉> 3o6D2xquNGk;C=^/N ڸh_wwpKc1Ir~8v`6 lԄGd')ȳJmc \IcWb{+v5Gp?dS*T=]cqpZSjK=>:>$d"XdL/BWcFH}Jct W~#T8(,w^s?RN Ĩ &>zYѻ }#NRw(_x^sgB"㢹ʩ>Uc BDf %`w|wR7>Q;=UGLRVѮq& ;pSnb hل⥂b`vidf2ULc>Ul񣵎@2a|,KD*p^\&PL𷖦̾59 9BxV3>v;W~ Do# )k8{w:)PU-푀/NEmnYIQi*<$DxDFt5[ZPMqmf.֤ kȷ$ո5ꅢ;&SS˴ ֮FRS@~D54[>B%D^B`ʥ%@Js &<Ko[^y.\(a,$>!6 䬍s{ Jȩװwv|'_Tsȍ۔fKkXl%Mf0O!pe %Bc&2!(|/L3:۝Z^ۖbCNieDfY; MlXW[aG/d@Q}{L1mbAC%Jcw)F'.BLJ7uDJh7_"ey"s&+R!6lD,;|ZF)QdB(.w)jONךJ^b&4JuJvz6+#} 2TBW3LFy-ASMhhΘn{k0H=`QU^Z(&PҨW"5_ݜG˺Hha^hPvh-SfGJ-$rEǟWҟ0gkapXs;}W D`z*BHiḥUx+W: v?͋w)%6d,*7|=i+C`"7+\bGcśKK&9?!I ?7%j}6KEE6}ڶc9ZgQ T9'5r{\zPzBPk}C~6#!|R-u H QxW6pH(QVY'd7#Hl7Qh, iɜ<=v"n;bL&glC4sqټgvIw Aq=0?9̢+ऑ~X ;۠s,ȴ-[(~dxRKkI,|F=TbKtG54tiE:O};x̼=dXJbQ NJ$vM~1*+1CmsBFoͪ>L7\]&3hDlĎOp<=Zɷmw7sR ga| 9&v`nZפQAjrgEEw$P*MTQbۙ.mFc>51Py <-U'hq~1q= ߇+Sk̦WxrNAaT\P{fSeWt%0 ?k7j1{i==G:?4uEdbqcE#c#dc60o84j*x?/-V.vi|5앋U{;j3P" `VyUսE/V GelWGI8q$=n3KMYg#˦'gբs˳96-uP.3R.}cjk%ܽ?)x 3gkib!v%PkFGgBֽ:̳2wc3U4{竖c-(!~}c-Ih<f$75~ng/ADd뾨%I*Ƅ_gՃ{i.֖* $e@"ع{߫vPMrGåLLNb n!m# SYG~̥MMJ*Ѿf'.z[&=&C`Z'3!Ss/[pfVRDE"_}==vAKiGjG%]^۰;s3x9b4Vz aiGujrο/ozp(s&sj\|n!;m0mn\^.닉2%X@y$}Gl ށ LBptAzRhFwxVU2oTU AF7g)*PDQBsOH˨vQ}i)JOMҼB v0~,ʫ{ּڗ=?;/T)ŕ 1KevmFC?gb)Vͅσ[DG&LLmz~RO^7U!nZ3vĻl$t4lC[hu#h]59a|Q}#3񧙏UR8eY`/fKN[ 9;Y(]bE/+QeH8nvfrc렔=P2_ |(nC)Ps[DXjh0]2⾕ul< IP/W:[޷˜yrB`g"sDnjqU!!ʄtchyR*#ԔumH;= xW&讄W>-KJ^%~f\Uۙ^ku =ȦqW _t%Q"4tOsX,M^$.˙~몣a2bZ!yɗXۭ#KT+3}ds qhqgd!!/D&; ٔv* ᗸl##;.`z[C)+HۘaF noՂ eݦ1)(%9&R<B;KF╺Vx.6#Xb)謎̾Z|_p֟3^?/{̓LÂ@1w21%z`u:Ss-H]LrrhbaRP_/ytqx<(h$=\.h>;ۙҖRDKʘQ٣dA< nC]IuvwDg1`jq^m*AF_+*ce}O#a8MKwRc^y0},s~(ky^E"`!9i{RB֞Lվ'Nth`\g*ɮ>тCtHJ@ > F]&#rN@K^w& K%U8eR#]@ï3hժ}( *k. ~]8|LUbDvG"&_SpY3%ɎP'WJ $+yYqe).?AlCTF6cU/UJ}+0p_Ŭ[[kɘ{CbK.ݒ{z?.>Í6ìTK֏AIA{CM;Lt85$錹FT?1|hjVyt,kɦ*4K\m|V±h> ~&6&yŌ5w{5o c<D~y w?Mg@/uՑ:0iǤPңF`2P%񣬣UB)ÒTτ~ˈZ! n+?[sֺlՃb;`L^HsjIjӶV;^q3++ʾkdyQ5 @8+.2%fC̴g'Og>$>~sj36B)+u9Tk#Wd>]ӎO%b?b|uG%MTjH#1:%5-8) nvcQc #DH;L= J2޻bTyg_ jB!M^ve/y4s'Fd]/c4r3(w^1x},m6oĴ) 31S\uJ  [=zpp4.Pt1,s?  OjUCN8am,\2lxV^ֿaU{o 1Ui%~ Lv!Ve8*jx7A,_S▁, A޿wӹ~y[ánX[LMϗJTwLN|ݺf"%-u3U)n|_blhFgo4۸ф!rDЬhHюڃC Ţ$ry#131+ t\]h$%3?Ac@6ե[f1@(;lJxkY;n?҆@̄mZ`G7Rp`⇷j@K/ -j=![Tif%"0αwq݆ ;t{fnjP(pX"NK'fk%}Z"/ K Ƭ V$ C:4խBbXtœ.Hf4Ԡԑ(M@Xq!7ʪ7*H&ypk>"a؀vf]Li%KXe!$`Wf/P jH;6fȎv.4ЙUg뼵sbȔB>G*S%vOսK42Wq/fq{+:%N8LUjGEAN]@w{ϓmlMSۖ&i*h1#[@m[=?Gw >kb C̥TnkP]X[ :lSB\uŅ%F?Rz$tLt\O@σ.²jפ,.7`YCE[v XQp~M4J͘tf!DWRMNF?!gWm:H:d^Zs$/0HeoT[.uй\h z {b-DK+'~W?@Ş3px*?ޟnGtipe >?#B3HiaQdsm CUib1 8nהISS'd-߈e hM`$&%^*;q017[at )82DK ԉ@ʠՎ)o;<#XDP 憇sm%W8E:a76_]9\[\g PYN9iC'7q3$-?:yB 4VԘkiF>!Vp _[ovsRȅNi -=)p5{g6 Wycg_4-W3',ȉLeK/CGG?(xs uj@- (羈_-_@7o$B=XkT)Nl /I\@ԫKFu.Sr215lw;5qd)'kZAoJra^rC I*=Lydzɗ|4p\6R UHL`ďqb}҈"AR? 7 vjotgu7LSUSZWw{c6D߹l)~)+`CKib%gɣ~y ">MHaS sH |?;-̔RM7zbiRg~m) ~!dN~ ;_֦ v@8ULJ]'V#}Ɛtf,8G'[iVy|׸Z;xwΐLM~ݛo6Hpk!+h*=d/(.saӺkbqܣ*Xay} EK E0-U?eo ZDSeS%?>|w`A'lVӣSWn %A類!3dGkv/fd}vLH]8Yּ&%4wg4.&/-^،/CzZJSN陾Pt%9N̖W v_K;X[k Q{n Wv\:Xc@Y&\$W^t0Z?yTCQ6suh "pV'#\VߙbIa mݪ9,DhojēxߙH6;5lIu[\@^rMZ n;Sg[j>am(u:n954J"/b&Ld&v!2^b.ĭ`D%Jg7d Y(/:D~9™ې@!YqDQ`"bw!p(r[~$c[f6NreRqz.c/=1Y$/D$Xgb&&ZrDb*"CR|%sN % }Բ1b9UA\:~ܳy]Ym5L&qrM%sxs:X4u@6Z$Q&;i0̔<[-&2 "/0r-s䃻v8#'l4!ucC"qԕbnZSBvMS}LڼUMeΧ~c?A)U\Cx]6,x4q2ň E@DРPR&* u W--!+=\SSh5lpLDػ>ͺ[ I0]'3yƬ!,_0MLYmZrB G`VH%Sz_',NNKՉ˩ XPv.@cHpEoP6T3U 0#0E8qk6`B7,a16oS.mzG5d:w^^mMRwv+PUJfguP&yCbU7_hUiy#\j0 mTHTvGڟQ#zL*1(I)>L<8&(F,d'stCeAP_#z\-N(#X#$A`"dPg3۬q";G(נ&f-A6E21@bɄ*Bjp kx,U8 -4߽?N#`& ӊpCRC%0DpD,DGR`>7$G"S$ JIotAKi J x@JVcY x{>sX6pA QU{\s'hS*h /UtaؤS(o;DzF Ml}fr՟Bx[Y[Tw.|`.jPd{p;L)xxWaG-SD'sP} m(cI`Ft^t[Yd&o2H⹙BhgUq%ņ'L G To) 8ރfԓx8yJ>6dFH -GmT\vsRYrIFViJ 3 IĒ SPe]24ŊE$mbzFJk&Z=kJPu22QR'4}de9Tb᏿_7T}iѦ#[wss@rDϑ]fqvJf6ԩiCEB_*>T8QݒbPc%,Z s6KysXql#9n.d(ǩr]͵R*/} Ǭ|XRRʈߍD &ˎ\f`gkd_n6,^IV܁.4HbvI㤯CM^=vEAA n0g ͼk` oԯ-I1#D`6<&]IN *BarQt s7HɰEgŘRb4uz$4#*(673^ż0h">J3W! ĩ)enb. ц=Ioϖ%V.Skw7Ilޣv4kV̅~SR2d[ܠLV ֲFRՙRej:_Hh*"M{0tA:U%9}> gsIK Wmt)`b:# `S8ڕ$S"\{D38V܎>#Hat htBC,$=>q&\9+֊v+#on3kR-4C,~A 2!;-5WHSdqwXH՛BCRK[<&FJ%NZdum=2T;NOFgP'a$4vpD PL ASe|"<> xJ,\v"п&Wez<z:Tr*}X^x^50 I[C=\0Ò^0UҟjFCG J\gQ塑9`%;DT[^ssվj@X&IͶkJSm`dm Hpc AҥlIQE= Ǟ9kE-#&+v}yCL *_vb/k7؀B+ J@Refa{#)%7?>Lgr%PS7TGҔZ00.g@*IO :^)h&ZCKČ%saqTd"->wStŔNCG%,WCTDB=)]Cukӊeu5 OR;9 X? 1^S*d(7S`8d̯KLztbtLLzd3BюC8=%hUv-_4-S%*5hۼ/Q+? ݉!@j~2JFrh]iҮw3 FehND]!QJLiʬqt=\nDh s͡:7GQtd4+cia1pA.(P\~\4ko<BN|,LCv/i?#Z.;Axņ 5cBI!0WƟ,_jIG8i]VbӸ YV٤3;KY7]GNXOl :+ Z}"y%dݑ7 tϫ*9 .f̲|; DZ(@&.=5lc@"T#<ڃfӺdIe硑dlyH:WSɊp}!&@^`ȾSP0,jAj ]!2òć@B&R AC6Lx 3C"u$]ާ)waZ^< d\"svM SB5=YU[R*0lDj% dB tiP\ eB%Ǯ@l$Қ٩+Bu WtT@*p {L/0PA E#؂ҝvy7t a +o&D%!!ulK~=.CJt&b &emmP:iNzeIE`_h K9ejA?")56td6~ӯ$qN29$!+Zn)v)^"%'Kcab{E~3 J\[\,oc%F/8ꗺ&Rk%0wF1:=j|ĩv v1+A@P4PFKݾplԎru[N*9zA}?opuaXf W|Ee~Ѻ\X8b/5@=1b#HqfYx&y~e 8@*%a)]ö - JyLl717qmz]ran㽚Hn},t2wq?˰>\(M'PTAv {c?\uҏN&ƥ|>BSje6 wH qSl|zQ`o~X޺˱ +A!{f LB]퀎%ӛvi1@Ac(c8vjҏ r9}kb*6[a޺ѺC6 1?3;bqQ[M3h:0<&%h&EP8R'_C헨bÏ2`VWu^yF(NFҥļ NgJcDS3Dr7b9K{?IUdx u ~(1IET#Mw |9j:.=E&_mA,ܙ} ^JeB^Pdffa\T۔A<=u@\쟆^Tt6g3;mEJ_LbyQpNqC1cդfC!\I—k;KE&Q nq+G/ybZcOlKipRD!$'O{?sqRCTEYޑ^ә^Ūh6C "7&,%*4|~z ry'grT̷mU<1we4x|ZӉB+qmN%0yA,H1A'feglK?+Z^ ,!E7;ۇR{!fŔLN~C]kliZIA2SU17ۏnY8;,rLnH]wՖW63NNptb[FLײAД&}_tiCĬ ӥNڞZ A)ʊ#KH280wYV&h)_ |e V d9 7!#Bxc֧jR,1[,R~O*{ѻ8tU!ف2H)km9s~YK{@Cgip ~e"wX0?ߺH&o |q6 }ڡd$~_ZvSj|nVBXS !uk饣_S(p^"jRm$A= I񺬤!8?l73ĘpZG%GF17a=8rao! I6#VtSS$ 2R=鵣[W] X=@>y5'K\Jh3uΧOAa9]W S}k#  U'8 (||Nw^2e>X b}w fĬD'*ĻpX1*od9!xG[޿I7#=FxT w1J>M& {|0vTC(*~sz܋zy,+EI&1i ^Alq"[^5[, ΐJzٕ}$lJfL,Au %@ C5",DZqɧX)HayE ^290V(waԕ9*BSE1kH 74GE`XP%`чr6 =)Sn;ٰ Mƥ7ht:}۸ xFPذ/W= xV)m: Qpts"`q‘mR=:#a(ní*aґE1qQKM>ђ:ri38~Ӆ߶I[ТfS'zqNbd.͚jtYJ2 gxHWO,0%LJЛgӷ5@w{g]#6uP25۴ s@ m{%[Y;=BKgrg gZɾݡ Ի$G3\wk. ~S3FȆ/̢8qH|x6^Yl*`c<ppݱ5,bLΓ J,XRyRL{!ǯRٗJLפ/" H  {7nXWCeiIϿH3RyvKMS0OvQxDi\DP|V!gDpɺr86~S ;Rޓ²rcw`C1쭘;~R\dD_4׫7a/d%i)q ,UǁY-:=y*IDxwNXu*c̔j$S81Jwʉ ?n@I4gYJ+|_]/]1\ X苽zzWގ8x[NE? q ݭ&=5. (tۍLS)\ŦUjW@1Fh*)f99J`0|$bJf*k[ͅ$ &SGIҥ<uVm: 7>Q6mx :?$/Y6/Ji` Lnek붛ZУG9긤!fvfeW1?'Uݼ{} =Y Z+m%fH_P-\P樷[E5.,EǕ{ ARgBV\9aʿrngGEݔcܭN VWyr.E{.ysO}OLkF}0sG C r(Nm9]Ͷ 6]&rr&Yr"jclnbViRaEGIA}O0O P\ ]6$c:Y`U+6Fo1q++!na25vVhJAUe"X\F:~[]Zw+s#3h\9fj[7"gl#ᐰ&؎5~+Z[X3T#`CZ iTs][h7[mŵ&^ 8zfp3kZVBfWxJ奠uVWLh1WswZʚ D.oNMrØ5cqԋ"j"qll;bAqb0BLxoxAihic/gDit+wf@XZYMLSM$mqV 7qz Fs&` `y1J 1b{{jF gih`2ɑDT88\~ڇpl9C t:7@n$%@w:;wjR"Q5IqOܱx%hn6[cM#I3:tû9s VAxҜ`B{k 1S'څ>-=鄺2:BOZ4})gg@$V%r3iŪ+fWUIQdl{%!Ŀqol{.G+Iǖwa?YFy~0+>NqG2i1a#3PYGky&cFWe4lMAż~DeoĎL|#10:ئJ96T=95L .:j`Vam|ei7kbU޸َ-=9'H}3$G!j͏Aojͼ{#ΆMQzlkbbL˧&Y svy_uU$k,ݓ]jؐM6LZiu#`S#bc}ٹ6R w򒣍d69d,hw3Ri p9B,WR8PR1'{LFx2f99H~WyR)jJz:|i!Y_a2 [m d18j`$ 98(\@M^W&9V ,`B] tKߪ3U!YimIu/xP@d2T{0bP |u3nD6څ hVڄ( B) xjI`]Rs/5٠9mPMd2hy$U85Hكq5)(.||폖edFWz$L[ /PjvUxP Au '`h[Z[W{cr3f/ssD؜XދSXrum]`8;؛TTˠw;fꎆ;, sJ=Q2wjv3O rr"N&=(DUAаPHp Aܞai"ec8t 7Q0?.n0uFe&&p0pdN2/K?;;} ȏzL|oW5Y6_YCF: L@}KeF]Px\GW=w\UT#cAgEU%'=Mq%:Vs7~5G7%R`?l˃)Ĺ"ƳI3bUfEf&Z&#θScpvEd3O67~i(]+0gEY[e󜲄'Xb'@=s;[+D<* U% P٥ˆqfgȋ,G.ڀ(=~F qUf dMэuiXEus@xϽ^F:|`q*u^}2.Wd-GN9=?ofGTz3BYH/6dhDnFYGg2DGt{mN&%?OqEnXݸ vK%%7ѴZ!` 9IdRxMXq QxH蝘\(}4a29aƹl-PK{i~0 OePCJ~ON@lD=,M&/u$sZ|ax6}Y,D1 ^엸Ę㉊/mHҳQM^AsCkDuVr*wȪt뻜 ycM.:r(#6av+we|-͡ _?'"կ qwԴ~|'+]0AZ!$eg%4 ]vE; `Z`ڧ+A}.ó Ҏ6Wt+:IaWe-$(Mo__N4 ۾em*~KM!,o3U]>/~SQ^ϋTI5ͱdLd S_U`i׍L >WO-/KW]f\Z0 fqÏ4R=M06w6RI4޳ZzcFbf5l zT)Mr /!`Ulobx-T}bX ʭI%дau>dqԹzaJ+vҺxq>0 V;}T_VۀC'&j j=U)l26D"AѥVeYOiO網Ѷt]ԭ)߬No))A`6:o۠(FŦ `(lOfHUY̯J;pH{ …:Rř00ip y\{d=(*ߊEEAnx6iQn_x9G1uCJRʖ 1!w}哆oɟ mahZԠ!49嬆In;gVj-ݏ|OZGĥW%X~X~pof$Dd1Lު5/9/u{1V&Wե3rKLv3V_KI0. 7)?>H饏vzڔ9 6Dxx' /o(w'⑃[yE?[ԬlJNy96RE)Rq>f˩ 00˴$Khǐ̍zJiXH~[ӫCak ao1\.jɂ {O@ןgeT?F>xQƊIYʽuUz~j_aLy-Ft'O`@oHhb{˯t0B]%(Beil` Q=nSYuˢ$)?BoVȾ=煕"B~n\L%l$g{"}On%\evJI ,} =6{J%x`5>l9YmSiZT鮃ڏg$[Ie( sg^ͿމE>"X}j(O'pS* \,qy y]M(c$5*ۆ=;Nv~PPnt@U|T8HejZb_V{V$"j$3l'sq2{Sб,EEH_vҧ7DH: e W4 j{g-7yt˰l8uَ!+C0*0Id3pkkH"˩|ԵV-U7 &-(rg?>}X"4ǀTm.rb@DCãltaQ yv1sÛŝ=0[곔A$7 ̒V1x"П5մóFOHsQAEE$̒dE\? "ܣ˪B4X >YWnoo[U ^wsF⫺k{n@QOν`TT[Nem,/$6HO@!ØA~Yb#hC–Y4aUN˃x`ėP%\w_XFeXVu ʃWBͮw>?Z7|o"llHJ$9e'ITiz>~8d,|B\SVڎMm^pxrrv?4E߱&X~F}]+99ENB$Z :FW5`8X3 }讟-6ZSބѪp$ o@fTU澻z@x=2ێE¢^W\}愔)m6$:JB&W$Vm6F%%XCrⷪB9BRN1,"Sk6~䐍|hڻ Ee"܃tmCģw@u:~BWᎍ:5iiE qz`ɉ_(gs[Y,H!DZȰS]z)iቔ*uZCFD"=4{ssr'¬Q߹*jP_[T>sFb '4gU@D9~3.Q:r,կc%詣?|"jޕ k'![eCd θ4К0 N #&qOfܦ-TKx 6?=鑟u‹gqyȑސ3xN`6Y=Y%3~clgQm݄|`M׎|1#/0>bY0y36Dz{SAIjĖ*X.M:lP>G-b5O>:eqV!p%`\HJ<  ll,=.fzp%QgyO'̺D/RDP|N?HG &>ϐJ<8 $uWt& z}ogV=\__K6PY@Bx GIQ^!mRި 66UܘY>:o:;Ǒ6,}tG܇4?zjzH8/+[Ӷk{&3Tگ7ON CTҤP n}hjhXZWf׈][:JA1:1+"% 9IRnwŧh~`5{b)#PbA?I1'H=a{ZZg**  @ r|wj{vt8&0Ќ쇺 ;E"5]3²K}2SMRHՅN$J\9ęIN P7RS/y=5=jpyqȢw\V=:%EY96Z=.1z5o ?(q[fB6 ⚛FP^Js#J) s~_cI@{֖Md;<#K{~Kch&B 6:KTloXd ʰg._W*1v{y5tRse5+*3?㘽;PǾ`z6)|b'99UNBk]'M̽^&4 _m :RcvBO&>;LƐ:ܟpQBqdNj[:PjkDb&rTMKvUclk2,IIi VT< >\|]¡y\~gd&m0_N2m3 Yz3+_D? O;.~P;YF.GIU}ywmі*tD[&2`}{d) X[毩1eeB)'(_Onב/=~8Ll[[81<x䘑w5fi/Asds\r\ c2x_?+IkS"9xkjc5MƅE!JĿa!2Xº5btS}9=3xΞ- KzwE77!Z=or+ L %^f>9M.1B_ -e*c1n8tw4n+׉O{V Ӻ&?I@uWJCv+%Jn ]h@6Xs jDի14$w8lMz()9E4Ш&)G`^0E Lf=JǩRVŅ&[:+ʀcB6$꺽 M|1kG˕ )c2<51HM ab ;h2 aN*ٔʚM~ϯn 5UÅ =\_a\ dL&韧Jp)me:"W^}MlCVUb +fdÆjbRN;e\:7fx"ER9eGS~ʱNȜODo%S6c%2~2B9`cXc3WG1 ˲I?|O 9iULhi:pSD1>$ aTl8]c1|lcqE|r9g![r3Xgg:&6I;4d0~"Y!J돾~  paDfbtO08NjſKBr+ՌcAA&~bn`(2Ӽ\1%Gȵȁ?o9H9LJD(?^bp{mu^FISep+8t#]^̞ulU(E[#Y?y.%c'??mnm ]:N\gP0GE+Ra&ϭJe4^oH/Jdwccjee3n|DުkdPrjzy&S[J*'9Ğb#-ͥJU2Zz%':B G@ 0`HjMQU&y\,|?m[H(eR,O\rHTW%fmdAGCf%rw cxnVL-!ScGB{}[˧!M%tXBͰ|o3BT;f8,4`*=w;oӉ)`ގܗ{#2L u!I=_,D?V >lS`\+/GrԂ_يhˡRYxPm5Mtk`v;j@X.: ,آ&[p7MMNNSVp V p;ܸ:'P#{O<:!<`ӵz{tȸCsP%ķc%ǓuWlH! ^w~ >eâl-TDYV f<"GڴdWό( 5qrq'PjEV'o 9ʺc`KC5B,!NfewE}S4T2U~x7űeDySpj$}W icYkTf nWF,Lݧb"DB,%B809S-AEწkh1Tb-i$G&bM.A/ &ݽ8aI.6/yфS㺑h $y8x W|tM462ٗgl.ETzAcp$ e<`n l)\aY8Ś 3CzSsRV|`-DBlMTp4К6_8~av7ʎ_Ӧ/&O,夼(%!Y%ED"0>| "͘3sO_j֚ws8$4 `ڱl=D12> /}.QG{u[^iR|nXLXi{)ahĂ'TG37&pVB߈9 jjĔV,U:O`G|:0:xkEX4u!0M% lOhj|.u+*t[%H$.=(s L |)D})[2_X Rk&Qe-B%"B.ʼnV"PMgQT}c%W(f[.yo|}JfE+7N5|L} 2e'>qw*<"ĉ{ؓuuF)B SRl:Ig9$Ti'ؿ n6q%RQBL_,eL]]4釦 x5D_H~aTï;£u=FeS18vξPjM|Ӷ\ћHS52i]"8odRI4 ף(#zPtݧrT\)I[Ee,[JG^=>%9oKơ'<5R js۠$MҠ;lEHg':DL~W2U.x@-{z#&aJ%=ֵ@ҤTW]g`A JzvJdC={Z@ֽ=1PT:i`lZ{:gDZ*;IE ~չg>p˲JXO5w@.fv!v1ʈEro-p Jl4s%nW NZpy,>i)WLyrp6s8TA>6;{ۺ]):4EUٮt)~s.Gc?vE_(eǗ\;5Hb:fL>׳ϧ&kZ~faiG]kl2RJETC mΚFqC WԘfvj]5aLIEC§K~ T07@bLcp=SAPǽpk& O8+ :u9HHk[9ٰ4m.>G jP1^Sމ#2hbH/Y'犨pT/5 ~c1Ks 6i?,tB\6r_3JȐĨ"r["P%j:AYHQ2 XOOGP%ci؃l,Z4c|'sDt/CQ`^Ұ+zӜ#gG74l v|_r^PuVLka ,Of ؍^ kj ܈n֑o-l,89"(FcP-r~QB7aKKH1HuWc€Vј^m]Ǐou|H5L#Y@w[JI"즄FaɬnU[n꨸MZ̒=L+A[/yw&CrYl0%D.9VtK`gTlH6"$tzgCȺ褻8rǰb<Ɗ';cJASoRx-{L [-糥(oW&HHhNDdB񖣤y`s#TB9s6Au9bQY]ql-c7k/z1 z," eۼ}ݥmH21:?̩t|hڽS-h9.WEI@˹a#p6F:#hK>nv^.o0U-X^\!(#X̞RiCpYa>0N(ɬ~\xӜm|J. {hꖘӸlR*t, RXf.o.*˴r|ԛ= Y3uo`ALy'BdJPQkHuwӤdIk@GF?'u 8m5+xxFH שdh!@A:c$n /aפbw2cx`F/rtm/j\UO kŊ>a7gDrazC+Wzd+er-f[}X@H%ׯ$50͞oWesn9DdSfb1S@O>p”K`p oCfᛲnA_t0ץcYT FRXc21\@CZɢ1Nz !Nw>;j7 ҂"2c.ʔB%Fҗ]ݒ[5g78A'@@ظBM ޺mD!XVI?| CA:*ɗ'\}ܰ9rSv, #]S,O'0H-2K8kz4CBVs,]*VDW{&Z ]vݲ8m XzК3ֹ&cNNdd23n,][s)6HК=l:$4QS>qJ[lYbsPR'#sSS9Yڏw~[ūV3?Qn-$`T -4.-x~bk a|CU{/R(sڞ7Zg*UcUQaA%9}(*X&.muuDm5Qo j=')0~jj*$ciA;Ipe;B:uJWQqu12Ed i=V5WPr97g؈$>WAUpA[XeFNԱtω-3$b,=?xp-Z6 Du~4OJ3/G&>͒Cz58Zg}2S hn{|i, YmRp4Flx6a{gadgxOrscqHdNMw[R F L!ckx^ l.*7VJb319[!PK#ݮ4:J4(a}sQn8 Y {iA,V;ȶ']>o/3AL2fϓ9 3bڇ+q.ͻe۬W?Y VD֯z(KB=xyfȞ˝%> 'q EosV^)fruN֯8-y/>AD{U§5p3 t9bzwyoI.C3Seʦ^2Z֥.`8^&"zZ'Fw KN/' gko]]F]R K&7pn;,O'Ffv<ҷS:ȔyaWd2IC{{,e2U27*ٚxkv=%#1޴^vLvV|k)j׿Yk I\2`L3 eBxсX:T.[/Jǔ%τ\lA$\>0zB 6~fѩoGjakU^wc,@[8fHU. ֊s5U Ub+sA/*mi¼d_،\ >%ZIxA aӈiD7y'M>=vb@/d<|(Qʜݾ' Rۦ{$I 6ΛG{`vɀ+ u3a.4)%7$h)`-Jp&yo.LUkZwQ"h`^go;9OT*^=|6XĮtÏ$3%sãztxHEgm $f D+=S?-͙C-H%,~Sp\8rְ꿣$[?],t1vd25rCbEKND؞w5NME]cTY_e+jϺU;XAQ{T"/܅Itd ]hT~y*0.E Dmb;qKf;JTqexnun̻"5{Yss)FP d\i ލ[C8( T`TuL|%hR.ĬS,F ! <2̱42*mAsߓb/&,NB/6x@#^[WNN:Ӱ`L/NCZϚTue>sx5-毑 R7jsimNJ6Hd޵10%/7e ;.5xKлc){FZךrgP}!$-SyUI= 3А.iWuE~O1~eGoSŖZ:'_Jr/'*i9LcnH1 5oڼzG[QSK[J%ayt6 |'I"{AyċuthGps;&m%!u>nT`0I\6.‘(g{?t?| ͼ6~zg/$ tzsmbC7Tr7~@]բ/ vɨR)EdvPQnEqz"A%.k;Ȫ s6s,P[2I"s!feh½vGY|p`4 qX""P; }K3(`Kzͣ j)G ryߋVD𥯱+XF2(:y[j4C\l㎕>x QJ6L٢Nc^*6OX::e%+sȊjY7n[cP" iA8!|SEeD]z0mHc{3Oq^jМ`"4,e~;@ xW H`OvXUJ3o?TfvYG#ؑ%dy㫤Kd<@$r/#AWM?u<*&"MDmO@hs;:ˢcݜ+ܛ87Z۳8Oqt]D~jZ!~Ak[}Ȩ _g4[4nb^C$ x9gok#~@Ŋ}.i0aec@+:ʲ1/ON]PysI(']M';HQ, ҙcQb??b;%1BEMkI^2slT-Zd$UP"(Pw,*K`:8Z\bXu%(gF#ߨyMuu-Af*-({fsD/iyѧ"$Fxeft;ɭ{B*5[^JGhٛ׌ǨvP@I4be~w c¶ p4];:n5*p\PQʉ њ xo5U8 :uRzk&ȗK7 Ê*L6Բ&I`#Otf'VS!-L˱7Jҗ|U<ҝ2E8hNڐZ8꒛yNݼ.T@BݲM8yc3zfHntiN#kMMgzчKJ:X̲cIWKHU('a΋'j*oPBZM muD3fg>8Wq UӕzM*G;klF9 c~ ٣B5Z~ nXfCv_WsgcOE]5ۈj f.7SY3]Ͷ`f嗜9Dݷm1,_ ~Vh 妓&=Snm]<Bc̛'e WI0ceFV5] t|Z $%f H]p^eX%1 nɕn2Sa*xM.I500k/-M87 #= JTPU.'+sHI!c ݢr9J%+#^q&|n é!`85Ҿ~tLG?Q1?&\˶z!rcsz7" ~QP %B|zZm^&#tK|0`%(;sg7m%4p6kIU;) Vⅱm,R:-2hZ07=S5ss}7oOᦤC՘pL]mrfpjg)5vK"qZՊ>]^q.飤t.9ghݾk5N9(̾3>l3d*7{2g`PSPS)֑ h: <%&A" )0eȚPf%FM@(s<_cª#[& nPcLL<#]=9@ .6FUS$by-oCS}hyep 0,&acλ,QѕlCM ,-j]jMO3&n}MYP ojb*{FUf%| V\py7D7 {߬ƥ?,M5e{r^Xh" s)=k̪ej.nڰȈ`i^t@Cz'W ߔ뀢S0 aA&ίe]J$%,߶(])QFddn$h#Mܴw1fڣ SO(Q$ <[mx65W>| kOkDH2LQ+ˇ:dZT^XJgwE3`k4{V4o,ړf5s[j+ uJb}HnGˎG)C)V>5⍗M^ ̄V LO//aؖAG`7ݯ?:"@Juz)׺8%bVusmD1(1k `tF%SS:A+hEz"Xr,M~$7p <TpyͧԤYX2kYupǝxdު\zG+D,=s :]*UI1[6)FtMop>x;ݛjJwG(y=JB6hFqj8[}ha)F̴n0@gښ{^ gfĢW<1tmBeZ'QY|Z#˛}M/-6 n$! 3ZzˁKU8!BU2)!:o\3M7,#'be3X4]_noCoN@jã q8z#˽m]~Yk#oyuA5q!#:aҬrV7>;VM2RKe4>@VꆨRtIF'I8n^*׵1~^|rB6&CL6zHuwm R?P]ʕ~F Ui|ܾ*uCA6PܯbNiX>B_ern|y&V>B\LuC#YM|]c?/ 3KdbJ`F)M M*p2t+sD9fVotU_+`8d%gDuϬ kr|v\uM̋_ccZ&\)i _TS$ Bx$]9܂Jnl9!nϥ^"?u= Z0JM!lrP8t%sҿcc5EҊ˒Q`F!8+PL%&w= @7А>lA\@#lGwa6@n[&A9(*U@[w 5gnivHIF@@c4D@#n, '3NgLcX5Gu0Yf/fStη--?DgXh뒀oF^U&v|=hn 9]!]։=k_F %eZ?LRVTAdTF'vJh'ʣQ@NcSP$4Tv{$K,3;w\'",ٳSaǫ nTfO&TfnMjǍI{- [Se,|6@UbW%8-_/4S 5:pv{lGkg'5J#3c9wx<Ѯ˺R~}L"0ix+V1I-Ƅy@ dl0BdM8guB!xa^uAD}+g4(Ym{*t[ϡnɲ6 jr[Y|:7@]2`lEb"yeO=+bE2&/pW鹺@a%l,U DM")sa:HxtT~VQ]D~c GGt i1x 8Ėvcq@#Qp@~=08r'Ls>tIp9Ԇ P7Aݞ=kU&%sZ[2|@-$:4\~.Z,U&Lʗ L ;Z|%}m'ߓu=wS8p㹜 wZql\LT3bwaOSa]&NǛ݇q>ql]$S#fǏ)Up,S0xzj[=Zw AIQ,\oc{CÆXoW<)^Gt<z3YC+'``(4[L:vN=g!O`c|M?Eɂg)գJxm":nҿxCA/X'<ѝ=9YenBP~':$; RܷF]D<}rD3gC>Wg9g {;it`TNP~_UgN}pY(r)MmЖ_H! K%!w^*.=r^@*eC)_l|%ve,=gdcȸ(}OC|_˰G-&.W{.;w~dK/8yA?tE ճjs$@-ĕ;T_GQxc[xyʂGyx޷)Ed-߇)" bf,D03027ٰDaɦ՞)|7+iE<цN<;2TG­HZۮ(CM,.M3G)~h;KoQmJhY&TQ4au raU6M ﳍ<3jA )R~=Z$2BW$|Fp{g쀤pKoggI!fGPR0[ԿWr%ap1*qBHS[ 1ˠ& *nץywVS,bĠ;1* P_5Kݛb[Q i"ֈa۲M 郯{1b=3(/ʹ.l̻ CQ#2MCoPEE0ӂD9`&[=iT&ÞRMKX5љ4 cf O^ظ&dG[1Kg.T-6 Z4P suAImk9XUN"p0)t_h f<(E/iq@ &Q+2H_Qyq.͜ջXE1b3i0qSoBI l% wN$ЖFĩӮb`'i40Lb\8+ 豂3ΉVte*}.qn54d8hO\SxȉM`OQa"^4ҢvmT̄iOH^c7"\ڿ]4&'-3^ \~#BS ^qG;{TsR)la11txyN6e_MI}]1DEe0*`u<\n:f؉/{'J(  40LED"c2O Z|3un&{u.1""KlӖ;(6uCGpA9sXȋ wMNn(Q8WuM >'G8zJ.!n(`o0/7E+C:UfSr<9=P/`k? }#$k(NPMWJ܇gc~w@8Z` Y&pn 5dStZFnۨ"a?rݎښj-Nt} }<o/blv( شE,:}gOo9o?q3oL7с i})\T ѻV\qxZb>h˛ºZ ?:dž(;5pob7U'݅xDLcuhC?@ աS8J&)J"+=/0N*Jϩja[tN!7ɜDDJ-6yv$EK?iݜ`} O٥eim`Ⱦt1 sX ՃZPe:sTr.D2NW4nS<P&nlPBkǟ$i.@n;k'MM#*_dXD(=!it\ÁUaNkߊt1g*f JA\!$kh0S=`? 3&Vul*$Z!k9oz0؃SnMd:26uxbӍogpʠrG<&)k_}5=5q`C34t:n% \/p/%-~~z0.ZXן>ijoP}!ebY53d81^TbC@C8NmNltX-IY?lq mDӔII8c0r( O J?șύB\m{-N,;=6ZG,ʓYƢ+bnp;b7*(#Uȫ)b q[R[%l=*aO=HűrpYwݪ恁_"9F&-G2_OK4lH̞e(b0(T 0gnWYT .\|9L9ZOPKIJnN'ܹoeΪQkK8:C.iYL#Ͱxůa 4_3}\[Kӓ. g:RQ㓅KQe>¬0e/TG:6!f A䀊` 쭇\7gwO[W=:>)'8 Ҭ@'zġx1:6irCyCh@5<Ͳ>Tw#1fs;ԇlP)8j?dUBKMtQXC]ZO.?s#ц^ 7bQv`}޹ٵl^Z=k3:+_RkAŏj^85اGCkhֽ_1 Ƚsj yj> 9A$G/WTbE Q^dUuAD{nY}ZH+<LG\=}و_L)L4za3u, > GZ6΄6wT3|.t(5Ê*S }!NBAɄ rֳ.KqQݿ4q;r`~#&yϤ'/|}P_ybsw$#t//SF27Hw"P'ȿ}=W+B:JPš?,\U^,&1U=XmNzH72^&z:GGtv)X8KkJu=(C%:8v; z]Rܐ_d9yHAa^ՃCZ6낈}{~]<swl'c[^Ɂ'3B^בbLͷ>eK.5Wu˨ԫQ*ŅXxAWE RKe:P!ek-d4]o6ޏ ~uYY6ӺUR~S!NgSr\|twmUsNQI l;7jiHfy.@7~Bghr#@O>]FP{sFFtE-+1<. 2z((Wi k*M,l_[QpDQc`|cdHԿ*w>0'Sʎ&6BenfvoCDJڦWq>RU:oeFz(̳w2 Ѽ{ѨTS[2k5*zG`cz-ń))ixfͶj-R&AHjZygwDt0BݾSF+yqqX@4.R^a':ex1'*y/62Ы1HW"T' a]6*՟_MѶT,dR(6+QsW?LBt:5(EiFN{L}M>Ά/RUA>-~]I5P.0ъW8s?& Z"589B'3_x wi#cVI')֞koq &ZPRV|D|AQPxXepKߗXflz0 P\jUP._8G=aĶQ@xW4B+N N]&fO>#JH稊Yp#fwa]vsTI(MJ/)!,w Sx묳gbU?{Ѝc#vxetvX84)GHqT4gGMP "r-Z.--#4W`6Y/+r?c/SK]%ߤ~t)Zb֩c-P1Ive%G < l1ȓ1Pb8SLl38 Yd]d0^=)<(IClyX*zy8b+ཬT-v5_EOm 7@W7zom^&v:oInԅBtg"F*kDIJ[P V{M 8soRLfLZX􄉪!;*_5ޑD;o9G-gOChċmIи$ >Hӏ7;yX>˺uH •|iSUQPC4ن8 VrkhQP +,?r {Zv[Y;TNSSE~UKAysJ#nsjm^b`5CmzGWbӣjE82zy7 D(,1XUb2~,-hƢ5ظg#~_CĤG˞<ŀsbtD:3^Be*7FaM$aA5æZFi[33,~Z?ݔo+tZ{m jlx6뫷J%G8HMQ̡J'y$\E>phIJK|h&U;gʇFJ&dubZ|N U#CB :-|4#L}XT5W *}? Tg`Y#Z >Wz@ʄ(>Ib>`\7wvpʐ Qvb/c?=3ki?}\8Íݮ4s7Bhm"~o4~d*x!˺9ŁCP3SQTv-Hnsg0-%Rp7Ǿ7$RȔs<9~3׾V߫g-#e~I5'G~ [˙=te?ڨi,[1p^: U| w24JV܁"=oRM赏8BO~6xNcƜB~~'p{!^<s#%Ot?%l}:6dA8awxǮK.f&GP@dTr */X5dZDekѴ^n\>L)7;P5e}͓/)%Sg F7r{5X mRvGq]cKR[?G= .̚La!SqݲITbǶN4stfM34?$~֑c`~ඟJR0ncOB.)d",.[^v^=KuתJS˖6+a/o J1ֺFq ޚz fƾY( >0]4I֣x **%(9.{mȉj.2QQ"oH^mH6.t|wԁÕf͝0S|J 4PNz*\<נ pr`cS*փ)Xc키x~Y d Fگ;|xA|(jZ}kGn)~ˉeCw m鸤OSqb9q03wK{ZmÍ`ۦ6k㕏pYowB*P~gXi=;RF݇RaL~3ws 4tYox[R./6ul=c8OK.ؚCLQ"6U<( ShQmyra ٍkl=L&P~bsuvB%p6J{2пuIl!ƍxDDHo5 %ia؏:*=*&9JjD B? =N9@K/jꞚ/[s76`h9VxrKE/k, e\ ~'v~C4dZwS|=@K;{l‹'swȋmdXrCQ]qUp-׈,~V>Mzw"OҁX=^4pHEZDa,4/ݳP:NnIqqb=hJM8C̓f:TՄ&nD*@@4@h݁ްO)7C[4M!70R-Gv{5+0Rb =QMVy=J@):+ٗOՖbA4'݂snDVEˍ t#۪URD_ D$:.ϦwHpcut_& <}R{Lse,JAN -q(CQEXOs="^LkscooR0VTZK&d'SN0gv>h l6ZW0BV<-i`T1? v_w1QQa, ;D+T5{E7>Jx< G ʤjŶŵha3%Eqy\LnvOXpTQlU^}ր3. KCo2Lc^O[K j”5=&6zڒeU<>Cm!S-wϹڍRN' liU \i5{c(޶%,5 'қbBQU zpTzf]\7 嶬#Ձc x GCfB-FJ$ąB5LGO\~4j"2Tx7s@aϵH}:s9ciN|ꪓ|ۭZ%SuFX7v/Ӈ(|;čbDu#fY;1ݜ']|2:*2Tc*I 6U Ug:Bޗk7I(+cpt~~ [L =,>@S?^͛qSz@Iig_CA2nxp ѽKa]&)AH~y5i{ͅtgxͳ+n~$IH7!ٽ!_:T $. ߗAB]\\gu}foŤLG} y8JuLE6Q]wߩp,fs;sK/hǴ ) 9^:;LvIk:+y8ܼ \'!ۯlEėnG feE8#ABMOv O݂3p׹)&gyK)w;kjW|y mƕ5A%y*-Ag -{7 -v%-t3ĔIfN+\4qB5n]A_CZ:ӑޒ#ǔ +ȏ].0] ]B#Z&UjVgf(JLɱk8^^37\#_)5ipn8ک)<혵opR}!O2(A˞SUV k9q̊+ĀI"T_VeT?Ǟ> 8P!"55GgY!'M$*"z1ߒFԋ=1z,&37ÛV9VN63D!xvXoM]7 q3hU2H|\:80Lg eLyhѲ7 :hH_̸:meq{ B#*8gFvO4kS%tTn)6g)B^F~RmQ S1sV V\N}5y>kQ c%N A߀fngEo@ē$< U\sID?M_AU-.z0ф-lns,@pX'D*Yf8ۺgYgXKC<-:)N<,V5~" Qe }׌]5}%@}-:1ǿ~7TP*yv3057rEeIZHfL;TY|'ǯ# mBd8~ Vږ@0;IYDʺ?!!|&VN$+ԂwY[{%T8 $z(3x0\_jNnB.] 2:^9 ֍BYF,~)myvlj`-Vw29'E$SNfhv%pU:.5 Z_ݽLFנ YsX3@>E$ڽ L9.B, 1iCqA!XL4!ѕcKFؖO2јU M}l~f1WnO8rm\C~:{(PՔNmt]EMcKaV^! h, +XuUƋ'q&_$ey'8fn=1M;O')!]Gն9r0xs!\OC3.&_fvN#<3`dv}'ܘ3K)?Hv1;b܁=4,q L˃YΑ1y6/|P^f%i I%[:h3kUtnS*wوkH \Chto&K"WE~zM?Mg1?y@FC P)qIb*_fcg ڌOSCi_zq:]}rfzQE-:=Ʀxs,/< #)ltv5lQ(d/ZjG[J;sdI&t'  }jb-uTk l5[vS00Njp>3cbE/ݩ1R~IY#ɬ"D>ƃhI*ĖF߶ \x(H+29J}~[Usxr_OCޝy'V3 )۷wJpJBӵaf[,mM/S vѰ`<,~{9;2R+v <1h 2q|ЛG'ߔ]6my6&p!x|HyIt-L$j YxПrx NsF${MJZk=麺h=UTK]+XVdi`m/={TVD"^20L& ::o5ޯCej &bOF1'%XFv<*x H |vnG{K 0ʀ.'u[dc_PDѣoDqRfs5X+<9BvzMI32v=,NxjS5̤:nhc3J__Y_o+YK/d![M[ up<>:mD:La2΃;ET|9Jr/_ܙ45AkwTu_S ~K}jQ~0:D<4GCr!>Qv7iZI79fT iE@x͝u+xClEswB%hnE"`(`}X!ॶ6&T:cGxz^fABI|#E"l`1>r!@b pk\_ 0bOvև3L.4(I&4F׭SoiN;im)~=}{<[ }{4 Kx?,/vip[MoKj(N\=h&+)K/uA UO-h0o<`+푵F$<3cV ԬNܛUkQ-I-eޔJ~6kţ:E#ZN=@нE?NQQ,`/%It@ :IhWC>ց "4;A-'4l+RT-vlzD9tH𤋮 Dǧ`ȡVs"qצOei`|é9 :WoXN9: k1}cKѣ6k~oԲJ *"W֓w"80v%f5pWW>0fr?rYLbRLօg ^ H)ݪ03#6uB듯qVrL30~htZ0vPJ: cv0|PCB\8l7_XirTgQX'i9>H]k[ݑ\W@F2Y›y>zN42" *ΟHQ࢐W]lqPJΕj}Hg''̷|Z@ك/@g :7uV˧$j Vs=a*x"j>t }g!&Ee<hW·HH(QØPA׊w75wjW8spRf$Su˔WBacw^,HJpQP!v f2SF׹ {xrye}Gy<>)\PcX ZxG~CS/GnR 4O,&ŭ]HQ$0Re0Wr3̭O9pz`gְ``-W){ZxyssO@MVE"IܘO?1IQ$4@6t*BK0E(eU E'=1w`aBqO؏ yl0 d{t[oo6 @a{=iV6X2Pޱkt~)€%ׄhq\[hhE" 2wsJK۶FY4#n{. *NJ&bto&I(MNԩ)0I |oar36e膽Vh;Āt>@7b!M{B m_m +o9*M4V J t|}94$<"q)2(S)pfRܨJ-1]G drg_R ~`H]! wLc=wؗޣr"}s.D6TxjŹ!0c;`1]w#oAO\ bc,uO)c~L6|ē<9VFapꚱFסԚ f*jO uy- ztԸ'\ꕮY+^R; ' jMzJ-<7 2 1Yy!tX? ,QAIu@%?z& K3|S4Qw:NB6}Z@ t:2 н>գc/CRQ,NPN4s]#Bt1؎5A)v ]o'"SM"lT\dFWmT8&^+t/L'"r:W"o:!K݋vI`OYSqpWvZ ػWɂ dHiڒtu9k {D6n/U'{͎3k@Ѭ7ĝ[vc 2+D?K(CF֩@s]M  Xy"a+ŸG<5fTG.7$'>0 U EnbR^d~:, h0cЋOWI<2y̐HӍ--Ztdh{] ň:D)ۋzk|YFW_/՞zu{_(A j4F#-ZK`3`ܮ|D &̉.F9i49#j ;G}k`ap !Hy/FJ'>9\S? o 0)mXr Ӽ-V]rEZFhK20T87z59%;\ C L?ꙝ?o/|{ˑP 1<Aj䓹/UE3yT 3C;?icdUbMZ)@[#3يe, BuG }m@19l*[xCe6{,|!툀7[dhrƳv351ޜ`dNHi%7p%Tk"G{q{TzbJ w7-.}E%ͱ|46`Tigˁh@w~0h㈢c9AtYIȯVmP7KLőw۹9/W + -ɤ/f'ƺT-8Ҍ+e72b9MG_.bC17f:¹I[9gl%'vF_òDv7ţ`ME@"j2H>wL1uo^dlD,>g]hW@I >[u`h|"PmI)$$e$E+鍈kvnGel +, `-9C{)|%8<:)OژJJ͗z,l^Bhmڝ q1W} ,j mQ=a 璦'Z~H4:]^ͣ"㴉]/ o~DN!\N#\OgZs=7~kXhgp}_xe HKsf 0CFĭ,#55,9@*p ɗ. D ѵ PuV Ø7> ֖H 0}Ub6%,_` 564pAմpÍ_wuաyʿdd2ێ?QԣA&X۱WF[D`KV;*op50jxyK ZFNV/ݥ7!I+Nt\SE(*L$Oszu+\ XХAOB?S3Oz~4%ir2a=ib x4(p\uu?}@UOxWMՄl $(1 4eUv_cNtAP ڸp]݃*0G484C}\̆:5.-׎f<,vӮ !s?RTȻelt a IXrm9,?-GYyHSGMg8;$a3Bj jaAvb?!{% j-Z V3cL0N)-4~'夳7͘ F5 pvMY jNxEקOٚhq|ЙOAw#0WTRf씾'_ w &<)`Cݫް$ \HYőBIЇ!!Ƒ(>a%( >0Zʪ̡y ޓlhA[r,/\_a#RMDx:ᔆ-[k rakW"gǻxsT©n[.*om>\~^sS^ȇۮskםh+A=٣P؝ 1U+ # +x| |܇,$>,ĀQ !)Dv}5FjQh_&dG6´!TM}9^0x|SZs!?yd!KpwcrV5j{ RiNLiQ>Oي(E} uڄfgK577.P1[BŚq.PWw>JRCM+ae9,}&;w` XsI]csJ]ݕ( ]@gr)[GFb+l.Oj[Q}j^S:fI1 X n cnByr% VBMcNfT4d8K}:bЀݹ@ Ȅ Lui@){%ߩgͯf202# Mw4THȡCx( KEo XN>]3RSRbcnxR pm]$З#a^&$+9#K^uI\LJޥ6E@B Eo+/Gީ3j (.p(](+HisLD87=5q`hBr1Շ+b2ԱUh=Ԫ>Na+H!)N%}^BtTFRXmb1)%'xaN_6n?P&@NI\HiF/nQ m &\uG Zt<&*޸RnDOŶ5yH}hF;߇P>>B%o.6Mb {)i} =B_ˇ23^a]2&c9Ql] '+@_tR'Rܟ|P^[G*0vLqt~>R8ƐfФ0T~Πc`^ŠSmu Y#^V6}M֑/ );3(yu %+Di-:qԺ=×}<ăaB!RPML nI5d1^5_왣[MBªRVI+hu%&CFFg>KC2C0jJ. /񱚀<䇠LJi_tIUL+Hg9Q8@0oLJý>o5)G#n=KemJj_ۜjPoX@$E|;IYB.ؕqQ:߯6eEF\XS~h|mMA%ϕCbkt$-EHyV{sx-p a: Tm#[6ϟC' CGt ;gsd7ʬ蹋P`[@C-Uwu26kA(>B MNW.L!5D8h{OuÞMWJ nÅ3e?t~D1Ҿ57;Bw71>92E*SX-b~1)}վK!`&~QU#;쥢" *II:!$DZݻT"!ndޘ站33og$̀+4FE19SKGQkPC.ƛxM#-;`\挐# b;u*ly)lpY `^d}ygJmRoUF95ϑ0>Ra-΄ O}5xB{&foIu]7]wÅ3hMkR7NeK跋f}T9l[Q:/g]qϚ\W4E&[) <<9oMxh[B?%IhV]â0VG+#i\Ӡssșkc00!j=̍xE,wz)rBvHwkeGb_IU|S~FyRH/ݓ-ٳZΑp;"yl3&;_=ۖ #qoHfN>R$1.H bY1VjOL D0|CrZt9]<q I{_(B*:w11[iS k'r+itPxICShe(,p *'Dߎ< 82ޕ6Ǭ>rClGVa73ҫ #2x@_IxqY<ayJUMSSzimoKS-V!m/4$5bw2yk~񭖸)Ҟv7> E n5J\$i+cߐ*$]HSx[q |tRNroC? W jTBPv.<V>F+wĵtoR}ΛY,2,xXYZ1+^]ic]k^/r't5/U59(;haϵ^aOd"EN># AqD'+\ıͭ==$axYo@|g?| }j -NE4hj6;:Z㍟>_Qu1aiQ7O`sЃՉt(?guN`$u$r Ŋ{HiJQ>0uKP֢os"D:#~%~Za%FGPU>i5>Ӯ~eш1@xn).E;Uh/{ub]+$ٷ߬7vzm@ ,`P)Ɣ9 Tdeu GvM읓Ţ9q1d^E%z+$kɫؕ4(0*8aD\8*|1сzaB\`@B4m!(t( lܝԿ^,!>wLL1t$*RyEcWC~6_@8dR~Ѝ3NZ⑭wA#NU0I~)"ka宙 XK`&F'\g-:m]y5,bd.2䙿f ^~hn⏥)״ch K -#D?S_R[gK8^JPU ȝK%j cLu٣Bl'NAt0A&aI=&^nރL1B6Ѭ-Pq!usVFC-nY4ȁ[rFq /ﺭqK ek趰|UyH[$⡅kl^SVF]4cfGSrUpT\Vp>"cFeUέaR0#Oˆa,? fA8%SKиk7 ND:d{@q/f'A9QƺqrS Ral5B&)*,_~b`ܯvђ&f6糐ѳH(TBR5ou*#|kZiYjgԣRh ;^8}8J#WuG}z>ӄ\7-nRZγMɋ2*R!/OOAja߅6`VCQ[[Ɛw;omu70ywΝ_Fma`c=a{^ch=ANc6Ew뛙B]rn%H9MFyJeFjЦ>щxl?wǐ۸K+A8vrLbJkL\1:6 aFJcmPiVi~Qy_+ _ĝO!@FTGvF6u'1e*@XTto΢^]#d Y QRg2hv|jׇ{ M>ssGVs:=lgVp̭+=X=08i>bgW:vV|s)0L>3WԛA-(D AR:^1Zh$rIIZN1[cr+IlZ6Grsa lJ)+]#T4K_9C9¾ӷilT+J7]ǮS{Yrհ@jjMiecV6.) PS>J/.8%H7:RHU/m`TP]piR^Kebd nmJ=S-Bx$v&(-YK%\Ԉ 6v6/fٗd^5xDx5dۤ+ZX`{}]J 7XkVٯGFfl J\NpN);w]"cc.xt"vy`|[(s|,%1pxɷEֵS; +: (ƒ:]':u8ˑ$w;Ӳ^EE[T̳xm5=4b/^7o/9U\ lᛵF,0c +OD q.-zpzؼ ґ?1d[t^38j2idWhBTJ4k_9oht"E7?yϱDng(K?a_Z.SPuE o!-OͲ6x5ʬ.G9Ю[܂J~?&{ yoei7ǝVN"uiu*t 1KkH=U.io-wbChY}_qL#䡼@Yc;hv%t,!L)?œF0qk)STMoϐBkW7`bצ8=}-Ěh,Y3>#1z!6akܸ2~LL fZ]ʥ'Rri0Ħ'&-]UOB֮'&1D&X,=.{l:C[vUV!XxܔR׸K#>9S/@Yos\UK)i<3jdC016Ra`0(}*JS;Mg5u,=g[(Dɀ7{],+ Xґt{N)\ͯrzW-qv# @㔰:8tp|UDnЮt1<Ĥ{_ l@UAv1Vl()ے1"5.Y8u8D$XK<D?MtȲ?T5 aoGeC.nv7qږ5EPK3 &~G*'؊늺^Gط $RwҐm6`'ipl~Y ,LSr;01 6y\b[xTo Vc`n|MfN" (%Uzq(IFҘ :^"[k|A\rKC=SSNMi51(FЇ"›3;lZ@ eP-E!@߂gLߜOk]8?2OttHPna U>Zv+x2B$0=ew4aZP_*' 9C޺$Kn49)ҡTa| =7!2ωvz<qI/=U4C?p3.T4[1vN⍻z3I706khWT "2>BREEU~#[5MM :Vq':Ϙ8UBBJ3%,[{"'A3N!D_i:jJ+ςy|!:QK޻Zi#h=HO> jXo'EP5yY=?:]/F {z?Y=6p86ZGʥ`+  Üא\bzLixge%VjT_Z.\ kμЏyweJwhӉ ǝp-\p(Wcݮ3)W̘۞dDb F=e,P>*4%€簿uk0GrnOBāJ 26#7Dsh"V^\u =<K#[a]zM#9l +?|1z/M&~_hxMfÉ JxBu#t8`H⣐wW(S-b%eհ<5=E gXajbvpt4-VSfy,u7,%ar\uz=xzutGG)ގ^,Ĭ \ lקqϿ7ISsڡr$jy>+0IS̝|kw2._OtE[2d<2.zv~0>LCSt!eQ34Op\(nVYЪb_"M]Sծc =}DC',~NHSvWOz{v t0<3y:cZ=q8 }|7Td`2~"(#_9%&=07I:"IכRzBxx`~43{-O+Q®0Lt9h\TJebЎ_~:AP+܏l/sGI 4WweRpkus(! lWt?, .MTԺHCӑ<7Ǵ˾ C"Xldpx&{ [Rc )F/ts + 1 5+-F X/>F槽b1^JBsρ@AswAڐsd_g{>CB)v]nmԖvR;QoBm/3IC:ףr%iT&>I¶F"jǴ94 ?TDІ}}gɻ=i}+&7mL@8ɣ~\V%4Mּf]0Tf-k>z"]S/Euc\JLMk}FbSEQ//m7I2oP78LCDοيnU3>{tp:t#L$؅a]Ild!x:;V f7 6*y෼赟\zl6()pB4gj];Opqx0m[ߡ' zɝLӿջc2Žng0|r>?J| fNl(-Q]QA[GK6mPIb$coq`a F{`mdԭU|q'V)N/uѮ>S6'#ػ)+ ><Fs9*SWmTzpZlK_Wg]7Bt, a(8^B["~CAim&gtY}-nq?fL>ZRtao9GLȒQ;!n.sl/^NQc149{rb-*_>@imK.ZWlEME-PwMo}uv'bҘb揜˚EL^Q= *g?B48⓱XoJ' 5\+ ͦ#ϡGmu8Z=(wOޡ.dPS3S.H#+ @8U"a ^ܹCg2#DgYi9H}~_k71Hg1^ p>YQ~מf!)5tw7-Xmu3M5#H}S2QNQ}mj_,acWpU Jva\IJ#8,GiW0HyhPsYuߑMA|Tc@[\M6S-қr' } ɧ Uy1'N;>۸[mS[0!9,<r,teŪ˻@/{RTЄZPT Ź~Doxc^y.56`]~?W k0_?Z=@ȜGտ6"q,=r^8"tv]$^ st?zLH 99q{Slj U"# Hyu\8ҼYJ?ollϵYpEtT>)qh OlӪͮec7 =ʼnqF1vЈb?XD%RTye#[.<)5⩓ tm"{YlNLo.lR|;嫃f[4csZ;n(v,5;"\_3Vq~my d٤/hە&L/vb++dMJ8!Di̺BˎxS ֺ:&ɁZHw]*ԍ(rUiW&\y.}G3.B}N?/jQm CJ>xd,i/HWf65c3R+CarYX EZQ />%HϲH 8C3oyl$empX]M}I|C[JEﱇZ PxwQP ݢβJ4kߚ(Kp4T?}.\ЇkEt[RN%YRH|ߢy4VT_0bMBF"#z**ñ=>$C?·-c3v8b{uhCT&fn0y!+_\`6F$Npk ޭ e,9r6D`pN^w( Tn׋ʈ?_1QA?Ś]Fa:+ he.ps.TV5{['kGuyh {Eu^cLPҡty C/;|֎Wr-ع":l5Ħ5IR6Wf7$xy[Ku'%R]6y؏vy-tFf@DC͢1g'm0e.ǜ |e_n\h:j5;'Oh!@ Q-*A`LE"j7˝l)<m_0 ~I`M< _8k[тKƱ]Bٶd97nRk? 36|wV8g~OC^}uef8*ϫ=:x?)Ee~$jZf42gtp2?Hl4(svY䎌,ie] >V9p]Zv&<`0ٺȈn $%QП!8mA/}K4_h AA|MQޑwM(c{*ܘW Lx:O맩U/[M' a,=o(thXtq& j:i k Y!^.5Yq{C.x& )'ۃＨeQ5oWI?\6C4'rD{ zB9+N%EklȫC6Fdx.36XC6rz `z'0{IY/uU|r6K#'n~d<ēkNg%~/Q3,!'Z MiDwOnm#П颠Thu& @pQvkdƼ셰8Hlmٿ~c@HWN:ְPڎ6X}^v4r@@ 0%BҠ%2l%̘Д鳙>'{{lnCG&^,oP zǔl-OrJ{ů45Cz2Ge!ղ):x7(.&C'd%s1<ըYpnٸL,?28**BPuΟwB}_>KÛNY S-ҵ$m4Cg:l䪹딆as81QAy{2 !"cQu o ;-rV$%: zpt#sP-gT8g܅BRl9zֺQ~|˻NX'w.aSNܹWlY3OO0?RbBpQoFCx}8fJM9סޢ:7`$q~1`lH2<м&?/ {̅S͕M OT%oo;74F=9"t,=k SҷfiivUl&jD ng0T\u,]ݮZep3?KCwfG8F$uM3\-GxJRWC Bs~ =Ygi ,_ h?e@wGLZXL}(n3NDKCK 9k}{{WJ$Qxszy.SǝiuzWls~\AsrG0:iDBg/a#hy 0Nq0ڐ7c(?T/*/4䶎BDٚgGMdhzjVԦaC]^/Y26<Mg{ut~U7nddGyO/f3~ _osbz>uy> Jeclxg{6[2ͰN,&~gali4ӺK2HƜz ~CN`A -:b醙M*7k09nP J'zQ8_z!V$W{ÏM0,qǒ&= .?AiTpU-3TTv4X[h P.ZadY&[p$馔:u&t89{Q޾}QZDm, BO0QapFVbKKm_(B>FTBc a}F\mH^ł),Qǡv6ܢrܗgjicIbMz 've>)ҏm?͘>Y(`$P}:m:˫Nwobq1~v^ oDֿ]#|΅oP:E (Um@QLkBEl:*K*g~BĆ jJj٬YIr4y IVS/+beٱ5ZN@Z'sr:>^YHf bφ1] }peN܁̹\$i?o0kvz]tOˌ V5RWS5;a:J9ݹ˵X03W<~0YE3>` Hh8)!ݖrBHLKY;tGbߣJjSQR!LEOr1[. I8T=F3j g~ ?[jhQL!Ȑ`a#!(WQB?[L1 >L~O'7 ~5Ƅoh8!m>L'8N1Mд!D^˾_e]nqΜtڳrϕI(dߨ Z´TK< me|Ҥhp, MJfi[B($zsLqzPTaS` hALh¼q tʴ#P!H諑/[3[Y&kKZۼ?7X gy~βPyf~w"ۻu @-dfv<-/%\~ Sj06<Ҡ!޸<"D \MY[’鱛D@TY7;ă4̧f*з&!2[+>y{acX̝?`~Ȣ5Ӹ&`%,#8~jy~^.n(*|q z?&$A'CmS\Jy\*lʡ2?M5: J%\_޷y5f7_JQڨfHEO+ pj"D Ti@\C&| > 3#Tw3W-QΩ@U!~yH懒/l$2yTt9uv(,GgKع0!l7F }?{- ,kt/; <0~Zr+Ҍ#2G~w\VPv12ch\zow9RS"ę#|CU-ZwpLA`-T0= ҽzH!pL``"s-r ) ѓm/11AKC k%ۧ2i3M7 #%snsߡr+6Nُ7]0z=NKc@f'Z PVz46˴#/N*+fox" l蓓mVƿ&7CB=9*"VHdjꞒTT&Z΄]wPgGkrIX%l'{)Іȓ*y91# -$yBG^l<_pҀfR%QAh-Jݪuh𗭅 f;$}t"]s8I ؟CIp 'Vx6o1v]af9DSuz_'uTOX Gc;^{. q Js]C0juWhVX#U]BzB1|b7tXl-8pS=i aEVy@q'ts-0M*錪9˞$4čn׷GઔJ{FHeg-Bl2= I-cG,9C(h>XJt|/FwzSBx`MbdJ[r%9q ۴Uװ.[ĵOTOe[ڕ~ȁݏN`˽,©Uuܚ$2ݾh .gՑ|<1ieP DWhgvwkLj.Эܞ=./~PQ lbP5 68ۗ|%/nK"J\*!F(I)Nbpe^CZ,O2T]M5AV& )Ý,T>nKwz@oaQ+l.i8TF3fxLQ&ѓYX9*`?c7[xNOo|ru9a3$E.%L\f$RFc˼jcR*vI避<(\HpzM7H;!? ٵyK.2WC@AoUoG:^#*ٌfi>f,9N;W`+HmT(\Q@ pgV[HS]ekk WS6Tbqք{lkyUO'[Gk(Z5 PY=vݣKʛ`rq D)ZDykm2 #bIH 2c htNqJ6AaMOĴ]LbT-"KPn} 9 䛖GsWA1Gh]GK _NrT1buAvfv4LđRR63^?ԁ2V'LGFs 80JfӚ;IJFZqڼV v@I.lZ!s@ |w7)1ĊDˆue41OB9}v6Iaj"\i>efJ(8S%Ȅk %Bp˓)n<]<$l$7Y?r !kI1һ4nm.;L[v+U7x>lgq3\-gHB;1L!6e: )..?!=@bP N?C!lJ2,i/_[mklkXn u ;ثF%ە' uc>.W ½dCbS`@>~\MgU煾c U{дcȼk\S:ObO0jKtnʔ{.g+wXwh` 1$AWD%3<M؝8+S"g 97ZKWbݽ'io;6u=? yZ&I9N;9~إx(K=}J*&Zz-j5:H~=`uC֬1j0~Dʶۄ{Z}G^е 3׋^2K埝떓]Abihd1gp:I'QU%|zek?A!˧fQ[~i;1ߨywLȷ8&m66elP XoNEu5i?B 8krV%jm&&^]'/%xp- ]d{ë#[?2V #ÓRjctW <:&&@ AS_Xx:P , R<6a z2Gv}?o WK<;״ |Oݣ~+Zrg mYӁCe`po F_ܘ @3}COOuk$b9×階ёvײmAG1+%5%&g.YQWԦܾ 6%>W'MD 8<>|a']6HGU#8L˹P_Odۋ_(cL.OHkf= ڔ5~a] l߉xfu_B+ۜp1Q~ze4Cdi0vU@xҜQ(XN Js Xh!J+z%y:#څPgsmb!\i v)A+<{K"!.8K.A.:]{tyE9 @D`(gtU:$ܛ51:l|a2}p)>nBӟL$4a[ڳDQpTr#4(oJ,HjMjg72v6l)=/7f4B!Ppq7kzw'8Lxr=Ʉ;2WMIc1V8 Htcr@~+.K̀4pXa3s),oMoT0{;'0i/vGa[!wM+_IPs*ދU/<()BIk,oA@zVHn&}ﰟEMNbG$ҥtŬz`yC*}Lhe bLٌl7yw0ـu%5^V+**b2VXŮċ :vM.uG࿂jhڴ~4 {U zZblQ/ua$ QA9,ךW6"le2۴.. }ߕcc1 U C^jx߿@a }F+uqiCd7"(\,bVif E#\1 1v5c'}$ P?QVBy(E)c 72mR!u]Cy^ í;LTh|@ @cͭFBH-g7G<:P1C#<^;"jeZ&MCԘАCՠyaꞼ0s]\ Dt00nzR]ZoSL|`-z^f>Mw'920M{"35q k׿In- -coXVߗw@Oxgpi$}`'tGQy&|-&S214^yEILcW왺#fOe}E1ZS풗UVwl9iSzEr'ךiG޻b*ܚs+a#νe&? xҲ֜xcxd>|,6n߿, x$FPCNKT1\V) PI&L HpʖXq|f {m'o]䒌L\܄y~rŊyX˫о5 }:Vi \Լ7r-e%wcr'Dy LAyl fs_s8 ͊.eCJ'Of L3' {7 7l3o P .T.ɡ=הUp F̠pO偾I'A% JZLnQ ,$1Q<%ULZ4/ah \P̬AI*#tD^M=>!g&:˸Z[!jVއYH c{?&35߅wҏ tbs'{Zl'( w+Yk8„pcDN HKGG&]nt6g{c񕢓us}R Rw4d'q{U`gYTu=NhLfnxmfngJPƒTh.93A PuȡYo~>s!<[`ֱ'GAA7{+&ͮdժ%+}D!p>ꉊXA4 l~}Վpe,lxǭ3#q;Ŕp| 6ӣejLD6b-nE8M, _gN_}8U/lȵ M Lf4Y! W d_Zܜ1Výl@%r>sF N8#~V8Qj39Bz7S;R>qf80@m36GhE?;p> 3~;JZN])Ҏb!tUDYJiBu,2h\4 r>/Etf}ga$r`wr0.Zl77›Ö#m1 J#V[?)zX` 25i]`~2o^M<`GQ|01:j};,k6 Piߐ`C}dIBRz"M|̻3Z[-ߟI1Kby``lᎨ"áĒT^Uف8 ථ؝+ Ż.YS6<}nJYʸ.40(Ob~"oYyhi(:oTs*E 212}mN3b9.fkiI%>+ ɪ/i&? yF+߻oˆF;*1f}(D5"Pd=3Ê^"p[HAr5oQ }@fjld)-$NDÛ e@j $P c`Yp? k h%wac9(\'2,Pj9ti~@VNJ <1J ELWsV2;xoX!0Ʈ]-yi;(oG#x9aRoS4&lE#l?.8 fk/WXʙ7(9K8~GOQ[ r|qznO p2WKq݁4-XLζRqS-wK{$;?:3 NqB!OKeelM?r"1O̐&s&ġ:53"-ksW#_ё@h*1ų47GK|Ja?3d ;KQ-p~2YjnbKe||v}\=Dp O&BH 6*ngҘ:AC)#.}M=|\deyGh}ܞ.k. j <Nz'j3g& %7?ziz 9HIA>/Jȥ*l~EXF&sHKJ˚ ræ'y[8+Y0i''lh#|n|j^/p&DZ6tS?[:7BE~b~»UtFHf>"GxR i2mҹﶏB@qTd֥ҪzY)8΃5E[Y$ECR |bf;m mC rHT혇6Z(q$ʥXm/D_JT{Ҿp Z|B(aVpuB$*GPLҗ v³-~ʥ"</} ' J:L7KLfޗDCreJBaoWr)I̲*W9.RC•DBstiTS[(xo9NQ旅^_~o/!o*wѷ4o3rQ;c0&U$$Tod 2xTe<+ G -;&@^o_갹 yjg.Fv]?wܽg~uyM'^'7(=ĩs_L5[4V [~#N $uFmQ DRRi<p?Xv` X9{f<EK>Hݏ9wCF?sDLݪ,z)aZX~ӅѡBۭsҺP#iK_g (Kp^񳳉UW%gVɈyw)ѩߔ;'"<| r껎3aV2.7ewoK簰T} 6T8 G=jyOd*KvmUdtdo1:#PȖ;G<|Zt䞱 /?gtuc w3}Z`[Bo!{,ԠxJdE%ZZܓT =fK~ B; 3NvbB8N8cx1:8?Zowz&4 K=Dc~ijM0 \CW/O1ZlT9H6|ς{Tbv<ґOod#<ӐkJXwaNH)g#L(`HVAl+t](PYX [i8z3PU0B٠RW7gAPX0pռEMpqmG| |6c˽fY%6iw?ڲ^dA<.-b/EB}Q@0kFX ;^2.&/\ G :[9ksbzJ O>B 3a`nHBڥ2}x]ԎzoQ(4 8+nwn6xA-Z&Y}(M(Y?3j@Jfb0(3o{sF멞|f}џPƨ3l$ܣ M%dž%+xE%Š¶ne^XdɆ~'؃E5s@לKQ]#vQi<)2D3*HaEy.AJFx'7G!I<2|[ܙT4$4tT#'{wX='ݝ4{/'YMjEΰ YW]dLV₅WD%g*X@oYYǭUUL5mccR]mT?1lBv_)'I}넒|B y Jd)PnBkyɽ xL!2xCzHTb} q+HU.Wp\:߳TEia9/K7a[i1E@.4TGS Xw e$\eo- QCasSTlpIk hQ|R(itt䭅jY~O xhp`ǤOe*39찬KðSB|g<R1YQڪ)FkO`wӨm?:Vh~sL%3LhӍ #1fm#*_VeR &N?\WcW%WЯArLG"JZ8ٷP dčߧ f 'c6@2P>?&,KwE_9hB뿙hl$\$ +-xЅהv*݌ȿ>U2y =FA1]:p6L\GluU;BF,ڒ(9n<1[h4et4F8$&!52JȘ KR$y%[2S `J-Xc歶{}'~Ax#S5A'ʇ* VjIv8|AbsƜH??jpjf gh%D]-\#_ׯdDEME886Y\cD"l8Xǒ` F^B 7in:Đ2u;W|@Ka'$aL-nywLy.eJ*/X`kRߞ;Ɩ }kz=*_R !phޠ~P6^86{1t{4d,dUSM?I ץcP[%Ƨ< 4JBqdV4 kdS/]L$Y zǘsaTz +iD u."Zmވ՗Ek 1ΉĤǮaζ hSRĩ] gdUS-j W%4E{F8HCZ 1,a@K_MdK*xx.jÚOF;G/B T 'Ǥ7In[I$GЄhqC0Ƀ9ص:ų?l׽F? ,)U_}tkd~3H1s,rėDHwpﵗm+yɿ2'n'pYk%wdTYr䮾cHgsnvNǨ*AK6#m.2Nm+t G=2쁏Bd݅%>mkƢz&7$.$^ak 8W`g- G3U`2[nęR!p-w!+7UW0o2[|l9]C} HyA2 %PW#.!Ij_lgڦi/?=+/0.5hxW]B5"[Xؓt.W$GWR[$<<u* vd5ArDl$Լ̗%IM,4v h*\;yڒb␓0. JݡDYϰ~yFW &',R֩טn F$`v]_FPeWn@0ds#Bܚ "yr'2#XQ@tӣ+#hWѷ39ʀƈF,r5Ȫ/t\VxMDO f dsw]?[f9?sͻfY3eTM1YE\nv7 |qeNWf y951h, p=%M_C@VىrzY:tg<<;HƊ%X.kaZ [}+1Wi9?4ks0^>,xdQ&LDC1?]Vok- ?4R65Mܱіm.W 窔W"gɜj:d9Q_d` yH͹q}, YѺEvZBOZ/;2QH\&Zʲq 3 Zez(ik"xneIúl'q->: Ȥ%FZ>N0`N/NGM;^6oə)y][Y KsK ꚣhpZrm ˖T-ͱJpa_euF_T&X0^LƻEvm'0'q9Z&6{1b $o Y=>Y햮X 0+L63j[s*yq ZΜzԃUSRd`S0 (a[@R ;u[:YƛSH_s3pP梨|I*osS?m=E}J<@ah, vkj quJLTdu)5 Y.aVDaz #1+蹣Cl&rQ*q ߋ!;h\+YXجkڇN'i '.p|gw$-2w٣jlzE$4⍑6O(3d+z?(ǘV(.NewRI@q@y( yw|2TRxu 尉Ncȹ0iC.4yهAXisfg+ a]\^i5P|Jw cg C,16H\m2? d5_҅$%,=׆w2r(r-_vfgƫ7QCO{4 kbɣ ]4Ь[wΝA= PG kT(4@Tv?  StX4+rՠ?08$cn߬exdY}(|t}- k\KΧ{_++4PHS2?KUģ~}_*_D {'4M ,!*=LUxرٝ2oX`lo==s<b8"/ZF/JsZn(ǞK)97ʅѵ4 7D:? 1SPUx@hpkLi80ۙ5Ğzi7^4f{~N =89?npR-4>iԊY }qG27 1EmLFtcBqcFfaZ/4^[hz\#뮰TG΍fW.DMKAٙS/PS%>S%E*-ˠSwTq"NBJg9> vm)g@#:i9Szn5"q_"oq{w0TnWA(,"{L՝y &&l8W%v@n'n@]]|v&ru ; }IUkjΠ5W(/"L4JtyG]i(VJeN%⪇ЕDf,@Cwnb,owV9trmMv|X.wGIͪGEgCG2P+J)'O4,a/25K!Í2,\XDZ`X{F|ga.A 0Ū?C<"q;V/!<[@d:=CN4 aȤp{_N>hOiy NGfYI| i!߱o@H[snS.g 0d1T:W0֐}=Zcj@w jBp4?,  WKfmLm?kk9ފz:lf}ڻU)V { y>T>R$1Ծq'DiXE,(sΟ <4_onr8>r[bplpfu$Q"h"ӹƠ@*!ApSP x確`-`T8j?2pHaYNe?`%.\8S*0m:%frUVCj~+X MĬ!9Ȳ`> "M d%q>֏!҅k6*{ ouI~)U,g'yDk$p0 f;2TFѠŒcE>Pu `iaț(ׄ b;((Dc }Jpb~߉ @{88_ `ٿCC:3ЩX97_'KG! "Qv&lQdHs{#d@wЊ$YSgE L,Y$wӵȳX5 п>Ozv'VRo)k 'ZS#N:ѝum/qølw!g(`pB&0AiWnwǯKQAH p)2x堹EяWM)g7pAǬzٍy)Z Z</fֳ"dsݪ~=T3zmaX;.kZ)LoOE~umw$lbT>dŐe=zxu06 ?? $Ro#W 3z3G>)5.[N- p8l̥zEͣ2.&mOҡ7n3C]zMO)cmKWwmb`T'*NLJ ;׫C]T.z=x #>Фj:w,яFݎe$$<\`>16*7 iXoM.Nt.&\A hK @vSKBu_F3^)I{N!FƜ9HfL+l]c2gf|Cdmvأfmream"Ԇo ? NY w\Ñ}Tо9'˴ u] hhy;Ϯ3 "}$ F*f|?y>xH-ey)FYf4BD- H&},1 \H4+76=f b]Q7@M#9Coc) $"ub.+I*Ob"tz[I J4p󴿢W9=;:FFFJb2Yr"H INyc0 ݈n:}=% nX`80Ӟ١\gWri [̗-!ÙM\@P] "9 h"!4'^|`f,̜}ƴ_|>o0Տh#jAY E^[ݭ-cV} 7mIQ`7<ӡ{B XC%6WT`-\@| GOz>{NOD(faR 5Ϗ?na(7EdWs1h1OɄ;hV5>?wvh6Z Wp?"B,ܿHe4 &ի+ ,yhGm#=6T2M 1;خ^d}!&#T & gRjҸ7Jpb\Ḧ́C6U‹lgl%@ޖy/ &@==bt2>åo8v-M%7/p5Vr4wva9+4_7<~+jАȁֵU'EPB|DR='-!o1/GT+Naʥ7p9a J[fW5P\f = ZY0Yan]LIRn)\|S,A7,_lEkZ &J p MjxXź8=pKxgXZjcDJKushſo3,;9 CwR"aN/ophpm ט`!Vsbȯ6[p<\xd|&Pm@/!ސ`IFRtz6o?]#.p'#8"J\|:rYb/&s%! eq:wKU {r/S(Ⱥު<4E\W N%U}q4h'Z6~M֑-#b jb ( )EMd"3%pC2;zr> edi In9icљ"⯪܄.0@bt^B Rm:$hqٵ]5? x ls] s JR"AEߨ a1(|Y6Nv+Xß [t-j [Sn;$Xt`VY.drjթP~Tv?; j@\bRݣ4f'#_UGѭH2'P99ꠅa)wsz[MG>?>~2C NvlacNq_d.x(7Zoӹn%7M` lR sA]zÚ76z酅W >c Kԁt-}j`T9oB@ $z$Tl*oczcsǰBkC'IZ2q?Ciw:Ӏ/ؒFZ wrM c'~OW-D&GF/F`Xi釤 }iyP 5vd9OV'"뒂KdīO}COe8m;g[k뵜ڒ$y}np"@^\Ӝoh{? Hr(Tq\s)[;S9$0'ړTGe)-3=QJIX璬hk&7pC깓!fpJV+](|H2>=_|[L;4qmk;g2H6@H!~xC{֪7GG:ڵO?I}?Swt X[v%e?+5?}@O ɱ|i9uU|s{KAŷ&s y*˫ELP$ n'dvd[;h$1M%~J~iy0t%z5CD b3ʉ2࡟%z:Q!`~e|ܙՉu>m^wNhݍ tՑAcppIgA"0WʁA:0 +JAI,~eSv:3Qmb9 3" "}!m$h\/Uюo[CEDшPsgz 63aСYimf=D!b1$hpދsk'˱re (d[ݰm%NЋwd%u{iit.}dpOU$Ӗl](/'9/JE!Q f "2 k^`oI9{nL@gi%_1l<ޫ $P]w 8VV?eT^} á_p]V+jBeWNf*3 6({`@KU(2U)[;ϙ# @_f#H<̲tCq#m֔ 䚎}Â"gcD[d|ɽ1t T&WE,Vц+//Y];FsK7a~x (&U9.4xQ| $knA~}~5չ fnuI ݾiTQE53iC~QĂ"xei[QhO/7!t3( [9}gʵǰEyk' ŞzU?nU~ԣXD6*V31ɉm3yG\#@ů.(>=)uoCM>y> ;/**ӶCZ ﬷z 0fݮ׸ƚ#vTّ}O[KiNZf|?Qy[B#5lVa*,?j*u#y16͸FCD/<;bW> $ gѷ:3kJ|{OqC" KAg$y$e쫺*!#:k!XLpzLҽP:M;-.w.ԏHZ$2.nXdߟ!-,c@@뤡 |H  ` '̯9/f2<>5Ncrl(EB;d _{H cm^LBSgR+KU7mdCm5wf^I%a[L.Ug3 \1@Ú ^:yݜXsLvvHu7?8+,Z2ȒgG1S3c9x[HL,2}fĀ {i&hO~j?Ə ZSwb(xG [u:@W/9SW3Ċۡ$ FzEJKsCg5]+GsаSuA(sդ%G\Y4PJ`)uf` ﻓ+T=䑵_0X}L?PRIJdfCrkSD "H2#AE:2/ͭ8O{jn4#&L%mN;I:r һ>'VJUbtPjC`c}Wp]qL7+쭭hp#qf'놤8Ǣ py7Vg/imD) keK(3CB(M}Sb#٠&`o/(;yu}fyC|q@/IԈ$S<&jwR@5{Zq`)skWoNNA=jf.)ZAnKaB6 $1yhQ^"<ِ*S7DwLDV-\lmqWת$Vӊe_i4 '&r+8].;`ebZo"2@d{KUի1ʴ7צUқE$2ܒAΥ7v/։a1j`}Q+ "tΉ; uYmԡ:,#h5) ҕȣJr f\}jS6`%RJv:vf'Pk^kk:n F5￀{7sBИͦE[=K$9٤C}/zxj9R6c1Ip 4qwB@pG_4{O7,"?t-`(!73@ z>Uv{]:Dr: SEZ۪#Y{쭐hYV^ 맮#9*b#Nn./oӾڪ` =Y|l+rW산#ͥ[0RAWc偌Y'/Ka@}g]Ryp a0+rƒB{g|,>)Js&iOFD~H5D105@Pf1W CZ`C5zzk\d9b?Jd`;3Ϲ0$r(sA0)JTkUҮc[vp ۭZFo~=,5~jNHf(]o3SH)?\zolJXPWW]q!yȣ)^-xTHQ7:0/f5otj:C|g4GZ~#O/A'9T)՜Q>Է\nz)YܩJ_ 8:H|2KxD+71"n+l~tY-8ٳq ix v|oꁩVV5%_z- jdJIfS囵2цۗe+C9}ͷ&MHr8Q81I )JXr~nｪt+\a% @xcjTOY7+ 蠺.0RUX=}Im@ Q撾i@[BU;'o}n#*~P\²v&(L33Ƒ'(sg!lBrmAweYPf ݭ$7 J;{Jq1YA6Oޗ ZbQ7_fAr:]x a.[Q Q:M^_,z[\$'ZĀzC}V9xŽ d@z ||@^oUZWZNKRP.ѮGsKS"gYJ+2E@Aids}7ųX`}B6@dY׬@\-3nmc> qjc5zy{|Q#*S<@nՉHW62ܿ%4 "MxoYTS!~#=ҩ&@r$mr JHzPЮ8oNF,]OĈPxx8(0͑jo s k]Adm8]s+wFCZDD7?Bx74w BY.nF3}:wd mvH s}oǖ_Bww?bGLE/L9Sh.a^LR&-fE'-"ӈk6+R+Lׁ.x5\='G7?ns8t\^n6;I%z&߶0'J4\U*P@%{˩`nK-hh{׊dt1HgY-DW^z{&|WMnuڞ{%HՀ YdųE\}ES~4xS><1m $5XnI/f 8NM,8X@d/3*1AXe^c&`B7)/Z?`wrf#r , ';5LŲ{.O dl1j̼ 8L5>ۦ>*Ea; aߍDR誐e5-iP+9>c=_iClтutH6ͶagX /U!5&L66`B"fcͤԘh|N#22 <MtrQѵz55Y 4`t4m4m0xx$T~;׍)||&]CY tN&Fl̰ JJ *EX#5]Z\H$J$ H.^o"2h8  cYE(jOo=0s8~) dݞz`uنfWD?SSdž[t/ sO̲N0tl*0K?Ω0IKsu}I3%Ϲ7_ =L&d5ɇ|J42=rIl qcdRACYp^欲B~&vH|R#5 XKeՄ=t2i9 ĪxŢP:ƉIӟkGͣ=xn:5^s`Iͪ13>D\'ê@0U "$ws8(NƷ$XGd8g $Nת$\5ZWRU 7p]LRgW"OtbTp=ܻzm/BKfղ<.9vR68fKV6)}AYM {`flr]3JOq8\s#7|]O-,; -[\c6s&_bm(nj:0y~yXB;eqW!h.zwDDKE%Q]hug\H)x枓V-IY}Q*d2go4UC½2 `Ӊ_ae}Zr %1PF3ʽ߅.ZEU';&&")AMqH thH I1 :gdh(NZ4]$qa\PsF ՑWC9Řw?X1)0Kx}p5]Ylw6Φ ~Xff=2_tj}!}c#6٨EQJ&Iow܇WvZ$:ZA[ǭW.7 Lmbp=N)R ob< TFN&ڸٕRS+ +}4yhsJ\9Pgn<@ !RՙN=)șL1 F|7KdUv*Yile49Q|OD>&b3(2[=MK 6b+L&&v+ RfJГJiܥi2łb6SD4~0g/$*6=31[&:"z\M +\q9uQ(4]qfѕ3c~΄?AwᩴeQ|dtO+ RcX(4|?V2Lxz8nPK,>tUn͇b0w g6M;zU>0"r;`hUEUGXfL jKeCW<*Mݱp䏂Z4jgV.1!Ed,rbzPpy;f {ԃ -,mZaxF5>lYu̷*Y3l<aOͼɐ|O\y*9R큒KZў-=7\1~2x#}[&w/@[CiBL_gyh٤Me\z3wIT~ڜ-Yoɟ|'i{ٳٯQB!t{< x`Y|ոӿ?ѫEM kM|V]Mi G_]Y0y|r6?{ Щ/#Ѳ-c#֓YE3ՀB rG~ڦ6*S'Ȥ"0^Np #-&G;0 2ll&coθG0փe=QU$@Ɂܝ$;W\lDq־ch0ub>dǏ"V;xs/(Q^)^_oLQ6Qz{LtUS T L"*bϊm? pxmZ? FQ f3}෮hWq&?u!KE-3n|<%jA-R)p_w,羘iI ~,H#wd) $ɗQ;2A;j@e&{ /PAS<RivG_=5ۍB5aQ.aN8L?K#B)˝Β.w'+sV}Z@-vHǖ>ڔ3sFj D/A@I訞iVk~fCaMlvUuT#5."pV'5M?Ȁ Vܼ[5^2 {Yy p'd lAm̋DY>nEq郫7؂K͏'2ǀ _LL%挑9v[62~2Ecj? * X!(M<n:Dq+ dIE߬b?Q4>AjnCև6s *PSb;QV;qTĺFH!/k"Q%oR^쬜%HL[佪 + ?2&~˨7E,ۉ5IVbU0g w?Fqbc"nSc'u 5[M@K< B6)J-eIUrp? ͣy}Ja)asH y܎ϝcz3?H5؂Fnf95>QYeJ4>\ٵʧ/`&;DB/<-dzyi-\4WjY#,mgW|J6q޸_ t< b>GY"ɹQnAEH@S7/m1@veAv"i6aN7s7zȥmWߞLX?+VC=Y/}Ķv1<\? whH-ݛDܒZqy"|W#S/=v*ʮFYЀݟ[ 殳NҸNBS1g,E &WȑZ`c;I&wTF.Qּr#ӡeE"ag7G2?jTSDA0ȯ6& 9/},mM|JW;}`Cβ1-np`cΨN,(S S]8^CW/nʩy*M/B[Y:/PT('1!RM[)NŒ}7 .F5uɬ. 6ij2"Z$ܴ- ?Qq<O$az008G /u sa-a!wUy#3a;G3U5"O3&"kr`s n}'H \~5pNص_8cGU࠽/uRXQ臠=8GE4?1[=,wתzVr2 bg:D#e!"lf,P5}~\ʢ?'b)¿I(6@Oh,VoB9͕υ|eec4y #ۣz~qY|o,hjVKZ:MLr]V-_Z^*;ɪ2*H[SO!-N4{qĊ4|e1)+_= q+UVc*3AKɴ~hp1PܒMƶtb3;o?,3kڢⰈz^iG뼼Zv`f9>TPt/;GBkF[7$-/cV|q Pe߅@k n* Yo`]❱@PlXM'K>W`En,;<hLcNe\PFWeh&/ $N1Alh`.hwx lCxℿQJ(T>)hbḘ&-eY6j8jql'.Fa&o*}RUh0.Y$w.D0mdiG"9~P6mǘ´E~@R"0PRn{:SK9;C  6р^52gt$`Qd'݃QYNfuýIyq2ijo$sMhulj^Ҕes?!KC5JژaDe5sl50Bx~QSY?$:c5@yIQAWި ڞmV:Vzɀ!(z Ӻ 7Qau_ɼghsǷ\m)Dɥ:HV]BtwmBxMl򄮕Pih-!~, ;9'5ƜO܎z|#:Bd΍Hs1p:z8*Lˤ+fbP4h$q/yXPoo*g˝XaǽDY%MXFBk>qeaܚ8S/Sx PO "u@&ύon؋=*\ [c /ZH8%2 b{FUs,B!; pV%l)ZN43sy2MT/)8uָ]"[XXy͹rqOTeus{U&s$.M}F?(!e OJ%_xCj̺wiH%UGyJѲK̔{Z@2NĬFTsV']"2Qqc6I8w;`HyHh˅ܭPoNJ^9'G y6W Q7>c86 5u &r4bX y#+&z(bR\F|Bĩ]±ĪcTN,Ҭ>6IcD9l:8?gTt;Dgųaq) #B_@Ր9%b*\ѽ.q һ6omux]A6/(0q$Vs0+Tf; v<6g祂,ok&'Ri<F~3w?W-MĂy0wBj9xmò+yƋ;xJD&`vZclŠ=դ sPZI hdk@ir$-EýWܙru3JȬ=u7æ6P/ ,8?%>݇s~A/O+Lz,L ˼'EVj[?+tZ|78OBu}xȥ*PwMֻd{@\poL-}1Jr Þz]c)Y Չgo '$0x޵yU4Ct;A\*V.hԭu9,"I J+qOOw/ GcO*D0p6 b}Y7vHLc.)bc?mj?KםP0=sO-f!ͰfSA4C9x9xa*F /]<Ǫȥ9n:Q 7 >zPu}DQl$s0[e gψxEnǘ}+_wX#ڌbbiQUX5p>N9XIݻ+VVW- i*,TPO!(ѲfإK=FqO(Mtۇ`f.i&_?L`Pz<ıs˨Ahۑn>X0$cn9+.*1NcB6q,k`RKÀKE>֟VX#"<@CVpSښ1 3AJfcTB⨒րDER™ѲC ҭON;aAr`՝'Hx~_S,Ty 1œşɏB"g41Oԥ5Q J mE;Azd]JׯeO޶ .?Ռ /Su[ʌ?E=uwYb[RK!HRZoU@4bHs޴gL-x{a y}"vN[A/ ?l1~9ľ3 oW3ܳjjnל&:(j%y{Wsw?ydiIY5Hz>[Ad[ SD:f[xeaa9^1G!C-V<Ԁ0&KOG4'fr S^I_2p/~LGzTwNBt2F"i"3z4E4@hUjʸk,*sNIm=lsPw9թspvm.4݅~pYH:StL0 tx7 0*"g_-!1qME5=8mdn{K1&<ćpt|VE}sv#-䌋?2%}p PCq%}?S2kE34ܸZD:~RVAd;\reό58Vbr8gc>Жym@Adluujx<%.*RK_MdFZ=џ1pydQW怫uZZ1|~EX.߁9k @6/e Y0I-( z ˔H1J! @_:x8׷.#ۀh&H7! o5 v]V+ZRR -i*/5&Bo 7&4& HQ7KE^Gx,4'\_}_K4gH59nNEEok%z"̊[O朣]$bOlP|k΂;ٺE8lw?2>ZX&00h^D5\;eY{hW}X!/v vlggk%uh!B gpH|(p>]%FSn- A_(x& !i]B]lBD 9l5XJw enXG\LQ[9lo=˵Pe,trCFɕCϪZoD.X68ԈQ[l67Y![x+շQN̩c?a9f1e7psvvpM911:hE/k}bWdwV}qDo.pKYq'euτ_j]qlxqDEqL~3DN9طp"t8'C@ŵZcoéYRy~:Ua̓$jœ  lT[Ef >H.APIyn: @x&;#*{ D1r?:)|!C2م:ol }6 FoJ4 #]$9IDRI2Sz3`G2`.C% \AR0DY7fb‹LmSC `{ }5:,GGWJ߱5@bE<dpput>t{Z1W;Rm+p]$ZoKLqX/qi l ] }1OHFy8F3e\/IUz  n$yšO+* L:c5%a!\*OYń:4HD*^Mc^%-i|' ,hP\9 )dTO^f4S)0]4_/¢MtfG ?K덮wGyO:؄\ Vw*m DXcLݱ`FNj\>Ca? rN!LXv.ѣb,|0B®Sw)H\"ٳ/I>rXxTi#돑|B&w!(N|a9xx$Rޙ$ ? hGъZz:0ns;ʨ˚Κ*ӕٚkڐҒ`(u!Ie|(폓#&S9@J tőJ]v)dKDSj#hί/ [^5 |j8#(qb1ܒq83) K'ڲ["M#+{KQNC.~-IBG:'<2薜Zs=lYAR$J{,g+O3I8v~OYJ֤vLWf.nfC a0( ]H3Img#kṰ'iS<)W>we3WaZ54nJap/E4¤2tgnFշ;LйBIVo0 7g?&%kv=freĀ)9ae7'VspU3 D黦_29P/'CJ?:EpMtypPr1T %j}.e΁ N>uYPt); ױl EI޷67NtK 9tuE+Oձ#Q}UUVr_%8% ؟`'Ry)޾a +Ʒ\uH#2uXp6"Wp^⮡(D}A!g)OUz aqLV2JˣօY'mѱ3)4,Pp-;zgƽܙ|g~DW(2G;EW;ԃn˙ ']3e9wf(֪eQl]0$CKp{ 8uojR.nѿ557ΏgDI- ŋCJ90ڗyHcDNH8acFCqT U~cK4 ^L+=uߌd>kC}FnG<_nyـ2AV*kqWl9*U|?7-LAq1 eƚ ɿ)?4OMxP$7UWu#,rxIh2EQLz%(ZVύmՌKwCGbGMN&09.{mi4 Ajvss.>5y?5aQpGאǏ@;Bi92зr aq[}@f~w'e^0W@0ŧ.y(ѥt@R t#K۹!d8<9 Oj-̃\ 14'5Y(r¸.59Ӣp^%߭}=Q|='M_at{` ^σcCv&0 Ҋ^kQž 6”%G;DoҀ]FTއz%Z/bHMUȑt8Plkz䋺o( W) Xxi٠[!I #^Go 2]~`,B$@Aa.l)a>0 QU>{30͡sQtK^)Ds6E|HwQER"D-u3;"X7XЫ}w7qdX, h}w<ҤoNB0:cA̸@/]oo? O (WjnHID$E:Htcr̀J k{c-D2h WQ&;DR}i?wC~@=kS N`V3X'U}z`! dѷMk(QiHjR[Paΐ&MT ;UKC*2&o y=bD;9QZIm<73r73!/ 0R rqr1gk&"l7xrkʰe:|j;/bHFJs"EK*pbzM~}|O:0rmrBcsΠr6t=Ys%a:.e㊰P5 B)"SeM*SwF gOUlMMЭ{TEeD+khI/[:eVdkhzJϑMŻ_h/JtEiO<˞&vFV u8Wq!Qz4l͌?1A3{~ MƷ'9KVF3GrHQXZKVcoNn1\"xͯ^M\[p6Rl*tgѰGp5h@ɽbqePE_ FeOAtExz2$=v ֋&Č_(Yyup=^P#g%¸8 T:HƵo]hnFBvgwuFv7\{,hp4ĨMO@Id.1-U9gxij{2!VDs>&] mX 2;fCL{pTxqb30"v6> S8mrznue@0~ 5|| ){:ϩK`?RlsiOd=k%2Ő/w6g'Ʉۗ(Kͱ3d 3|eNDBvʦNKwLyHn ~kɱN݃ C=Hl04%QEi1k#t/LV+bcjq3ܷc3,# osoQŠYK5Ig8 rj cpt,Kw&! mWgA#j[- ߺjU. ͛Ln Wb2imaWJP쐢Etz?`ߏAwZjM @]\sK5ϮwظiCKD,̖Xğȏ |pgQi oB2P"%oySFB};igʾY9b"]?t,̀jNb߄GKMI.Syt笜$(ٱD,|(XLmL)AyNOG%e ׶E?HGurP05>̈.C~ X3*50[ŀ1Ԃ@ZbjsW_GʸSW Rn_dZQ\2,o{Vs0,i}Bq-;%|P)2e_bшk[*2(>9]c~qm{Ւ0D j -8bA~/'EӂPI`&g$\|ٖO"4yjq>NDJ_ɔFn Y*@ }(Dl~Wn|~ G%N q"?]9_# 8 7rm"WπpI?z /z׈#*Z:6 Q fýtaР{иy/j?Ô`*5ku78xL0w],!|N$K0]ʧY7(:{Vyb+c\\lŵzERH<@@9,WԞQ? oB{&Mĩy)lǼ1"#7'8+Vþ{^hHq T%)}bHV 7r13Y'*+2kL9f{Бğ(ѽ(csBzug Y /JٚfEF#؃JK|;ap˙aJYXI/~ȫ$N$ \1+[Eb^Hp_ؙh`;#gS[O[njHN5jW^9ʩ^22a($p5ud8į }8t\f,B6ȴ[VWVj=.ܼ#C0-ZBWT棪ЪLt4cM'2K'\Lh+x>`AO xSÓ\{r>~򚃩x_? ߧtd>o&a5PRTL0 KTgas]& BXA/jfFqx[҆q0!] %UVУ)x1[*T {s] eO;)..MˢNje6B2;tK%OFuuL|h& .]y'qQ6(& vEPg;>CV1a~_ 䏿Jb}TYOńݹ=K /p0}n d#8>OrN,W-8sLiW\1 %fS?36D{~]1g>ut"qe;f0&FSq"xq彩EaazS`~Gو OUi Շ#br&wÑ׮N$[eUe"рL,j{?s'vȲ4JCmUe+q ,+&׋zhxN|>gS9HGnqlkm‰#sN$@y&p3 ]`n2x5-%{8ieShx2a+D( lŬ# 4ҩÄA\eY`Dna9 &Gj£æS8W@jΔia 3*YڠK|ر;:V*ѐ,olS낓F|[D/M]טm)Y'4ӗ5Ci5IPsI%&|0u)_J07le,dK[x=^UGsսuX718޿lsMY×G}s3sЮX=R~HN퀴v ]|y:Kl/ß?D^j r 7;ό_,l~R>jS۫3yߣ<-eU/9dã|ڭ;AVwy7mj_GN` PP2pRNod8u.fPUxX*!^P`çA 8VHA[]q, `mPpqrט_8}ATPH*߷ƿe\h{OX[{ @2 n6FIjۃݧf:yP;w;ON8 RnU$ j&8h`^T1uJp}hɈuYY_;gB/Jk.q)Jp悑A\U9%?J޳̹(z̮]뎶TϤ(~D!Y ?ݧd: n&')hh+ 6w"8"寨ëh`? G({7Cgbw-yOmI> !I["lbCB++#0@Bws_j[ cc8a}07kFxj)K܄Җ83~?4]#Nws{{[<qkk< 6KEAcoșMg QK4#z-8k%R fԃPzG-}{׬ty*Qo/x,x"2 K?o.{4CCR츿ڳOnןY e^iwHc$'M}6Rhj:R6P|J&pwm$I1 C%jM"@Gz,cH$N9/D_@P7Xʜ>Q~޼| Nh891WVN ΘT*mT_Z÷;wj]s (pW:QWm+gS YC9ȑXb.L\ș6<] qȇL2gv\\G]D;u&g;ʓ50h(oRHAZ*3`^`3B«]#Ipjt\Q@'zh`괭<5Yy%4 }o`WC(+fL0"]hb^=x#$ dW toF^G cZߗ}`@ڬ?Q{y?ny}.ǐC4KENiE+~O٩l -A8͓U| 5ӊ:ENy!IJ ):꿕/,auiFi_T+T. ܑeR`{$*j|D{ !bpI`p C1&E74>PVdl׭YVTyAF5S%Js["ߠJܭWN1^9֡GN<!tL&/m_4K(pSϥ3ݦ\!\46 B>X> pȕր~TD[y:yD,T;H4Fz"O (lH 8e`7w0Ut:: %\u4^3I$1V8iC^j7yd-@WN&j:"fU-L_vdPJfcPY'9qOFJ>;qx*&2!^tKyO;ZeS9/@`d#؉M3~6!$,vF7RC.3紇uP 5p]'vkCD<fӓ[ #m]CoEM!}X7йrli$qW <w$ #ve9F Q)Oi.@ yp,m4 :5+U?Cr/ %5k '* >GҍA0^1{Oq (kGvmq}Z1D׺gHa5,^^"MDw{bB2RKNm*~ixLJH\m E4[d.ݻBT JJsU,]n35(hv2*Pq\ϺiA>f7]ܺgsSD\SЅ6ĉuС4ZS_G@` & WDplktuFgaI_w̢1JZKU 3ݷn=0ux98ai<'m( N4T<6QEǐ}s#y[j^ L$B{%6m}ۡS]rF\̿X2T&gF Jϖ>My|֔rC[sS=ua-?_j6I00X+M6˴ʫ"{; 煱E^SA9=+䍄Gye*45b&&Hz.$TQ [b&HXJs4(5_R#27ϊiV6_34Ѓ ʀjcH ꥗!aAO">a2[? ݇ՠ*rCD O:a xۮ^&/K<1ӳ$nձ̎ 0\q=f1'Y&MxZ߬w'AV^N%qPc\2ӞK)qA2x-9d0B+Ia 7,TBх( hjbO'?6~]_g]saD:KW["BԛȕTSvTΆ>z%.˿NDɠ RS:3%5$Zʊ$;O.gKoGVZiR hࢫT:7雊{%B.|8*xj‘o2 4UcMv9cM^Hg?[.nZ1,3%yGUؾ"vȶ\o,fEVM8&ɎH0Mc$"N%[ի;75Y~U㎐D v–.Kk,W 㶗E$ݦI~:fN2FhҝÄ僬# Ulͥ}驿{[Wj<~( ףZJ$mԄf5v\wwQn͠UMךL#j@{d0<+G,@]Z}>!bS?3G a̔Afop:}+ %8ЉV%e?"^ܮs k Z\"p҃LYզEvds &B(3'\2C͝q{#zr&mt ^Pc1vp 5۟klxF"ThqJT炪xى W/F7׺*Z8~[żSvqb6'BzCeBoKkp*E9S>Fōc#ށy<Ӊ͕/E~?5c!RV v(a}J{ *[{GrՊ5ZkB?7Քxb8|O7#)i3nk R6;-C"Ct@g*nIB٨`ME]p0Hh ^v+q$X3_^hB/l-CIoΚ"WLljdoڊWwmh4HZ!yvA:4縙 {]r\L᪣ [vC2H; [@4Z4} oq8JxTW&s#l0LP}bvz=PF9C;gK2N4cdu_خS7 tKGi!MGl59x_PL"njDQ_ RJ&^IsX;F_G!d&,;lJ;Sy1-E҈3dP*i 8%/=62WКprf_yNv?Yۖ 7n)??ƛIu]6He@Z$I O@/ '3ExVPSG(}G$2t܍}ŷz ?1&(肬3j\t*,.U{F9ylYHi0pv3W+q)0QG&`ʞ~X(gOA0QϮ~BH߼Q&JLؠ{Oa:-fu09;E#?#"$* WgijslwO(XS%+:X5gmȖowlSOҹ2L3i'm4=Ǡ<9[lp B84FN~[l+';MxPFZ%X5}ck!qH/~jEZCɩr5;AѠKj{͢j㼮 T&PJV7CX'0Y[b*!]}?aYǕXr_M@*CP|w7*Adq1naDA) 'PWg'w=_$Y ^]btVC:CG@eAH꾜@VOAG[G9bO0=QjM&H5,:f^=u܍$F!]_`$ }}Sg#(#>WEk7=5i #F[.=Lh>$'s&+8[O0aszH  t1ѨU_e{tRZv(B 4jGEn #J™dt*uSAp+qVn#U /@r Z)0r8y1F1Y9"T u,{^Lո"V-A}] wr&ƒ ;Ti 3&i&ƓA>݂g%^|#XR׍1]Gr$ ?{2q|QN_OK'o[<[{z1nD?c4 !&P#9gUN-e[Q}X?\uK68 `iu9e2{c RQ/ՌWk + @F:V^@~ J nf> LVXr=$8axyg98D ܁ȸHPlC8@Q0mŲt }ڪr5NO*O8|#_GtlgIw~=L(呾A .cߋUYI:Fu^l6 a7daN7)(m1q RXҐP\WoftLR 4!4<ٹ>Io @vszm,U %Q0ft|c$߳I3h0:OShF YmS%1KN^Qwch3+<'Ê+1 CG{IT)feynTLS`O^ 0poXmiA 5؄0> Y9'#]v\ܶEϝ#oשvɻ(]HWkZ *WdqOXE[=N2B ;sRdLbB:D 1؏K=#_uAc҃(^vA!(9wyÅ^;)MX\P9z4Pxn@~Tlާ:xWָ'Klp) 1/-9NpLJaWwrz|4QXp~Ԅ2 Ӭ ΋A$Ӻ=Vj @7c`E!Gvp<:{W+zb~ ׶X?SyƞCn$ M^]_nha,(?ጂB3:d 61?x YdGՌ/_&R1dy=b*v )>$Ԝm&*dOb=}rLka3f(zjjz*"H"d|Ί<6źg&-"|sՖ}AeS<${ .4w!( ex#|瑵9ՔI+S=ߌf`kQzCK*MNx:G!t&xJ(c`@>D<HIhS$0?=)(ZP'ޟn_kUmz=3,j\Xjeߵ<ؼƾ8}"J~.!KaLKnB.:P5ֶ*qx,ڍ1(WC~qKRc)%PAs!WWc fV˨lc^nw%5؜[=rM ~]-&dMڻOVsr7TJ, Oq]_96`H}{OF%Qqm%ÂvbaA i:''q?畯b2p`u=&>HX`m_YZF釹5+<R2a[Rzzf; z+|4 WgV_ I/P)*s 1ux Uuѩ-r>0fğ`*p ?-9)?1LTzCXxj/`̋Oe_rȟmŮ!XdL&Qi2 唖| #B.NvdǨf `_֥DӼnDtU4 V eFؚԾ^% GDc+@&ZފLs)vXΩȌ8?J0%z |ӬfB&iSTw6ZUݠnEV6ey5YMshxCm,d%^@E,3w]^v׌nz#JEeX,%>P;~6}Z]hE,B5:iS$<KjWe{'H!BH2sS8 髁Y))@iSx %9̡zM7tէ..*W\UZ2']w6/(Gފ|Te3<ҩ(Ԟ9uͭ=_pѧ*nz$j{bf}۶'~ys4n:kq7HcQ$-pؖnğ.#;/0`Ă$Jyzw X;:;՗8P -v4_AZV Qjc%ͧ 8PsNfn9 &U;? , )fz=g ^t) QTC,&[\Nc=AuᜬNYS]tx8/n r;-VS,.k?cvN Y +:` ndD}x!T*kun4>Kuʭ]XJiUe~FyJ\Ē5᛹96cʃ)v=,rdhg$U{:F { p' ~c80ORf$ggg]3"&o+Hi&zF! Nd{ثCq8&*QEmbr@(B.+Cµg`(PVlY1!7,Tpetj ,>ٖoҺ|dO `8ړO3KBoU`.p-YqNιg!2am {޿ZEsFұ߉Rɜe~$~PTV24/#f .;d^y]F[tXe.#pB.~19[jkk"ƈ al>{WԋdjisIWT'rd1!܍\6P] rrLNٟmWO4CqK=cFu sƀCf. Ou`KZ{l*@/=N=f{rʃƘm<0%7A)t:i=HQ KQp]Ce6Fs薄#7x'~yHJ3*qj8ee eb9 y^yT^.>h8ߍhTk-RW/I= LFh&#m#ܙ;Z҆c ĪIpa &.ŘuE+pB V7珁9ۿt}o^"gM8\k*T}ffZSI<*6ά`W7K(#se~V^ ˱7`:6b^$QK—?xV|F@g HpbŒqZfC r1,T;QCCAm͓>ogT[ZDŽJ;6[iInjՐW=n%&]V@l#0PO1bt8$6 XY.O4U >0*]PeUK0 3/x*FC!pJI{OLS>#<SDU:x9gOml͞mLS$X&٥/y ֤x&~ovGxQt@iFG#+~ҁNW)o٣@X 8ƭ"! Xb|A'S)$,mO[qs}J2JVdx_!{.cJtz=-``^xc S_|:ۯ˕UV:+u}HM )t;㧢TU1sxNzyID"%G>PC5}uL`,c)Unx!",!)1[ϯ!m1 Wfb<奴@ascungriK2AG,5TPd6pce ª1Agl"I5,@>Wxv6X,št~հ@N]@k}XZ㓉Ԏ">Tsrs5aSBὬSMn5. Xo]~.3G~'^W}q;suצ&B2,fƋVAьm3{xDC̓fRRv-Vհ|ҽ޾DŅUy;ĥmi".|+D5uiQ0V =wUN@D'jay}%H; t*+m,1i?k_<4&si!P32gx1j?: jӧe4ǢxҍD_x Pd<3'K 'R;=ph~M}"1z:?Մ=~Y2ju'*0[ABϞ@hFOB,FB5:~;xM[Td]36d ;WB?|T h'EeTj`Qg]K#gqa 8|zndCo_B2= ⡓ZnHz>k)6gI!> nu=.<3H^Tv,_TCO{y>VN7v$L7G@;0u{Q QFq'Be>ߟkHnFB@ $f 2RQmEW!Ebk:H$0{F-PL}% sQ!t7E%{Ȁã(zUdWx,еїj> m?T[3*r Uor҆@wzNĬkIFh6.&qRWP `6tEukL7?b&m$|@ ߕf/iK9m¦),/ X%r;sMpgzUC૽[𗰼V[:7ɷk$D|_4tRI)+vo*c %~YG Ȕ 2SS05h~lu x{\{E#"srGJT}o7F`YZsh_3"̏(G;ta;cj&Mb j`&Dh%zb>]4B\4upCG HʲeC+dF65gnmg,6 VEz'$nc,\9IPN& pAˋ?u#^7_G 攪mb<J6$#x؏vi$5Rf*"ԟǎH(.QjJAT=l%YV^NL}Fs0şD=#/&6C.f$8i܊7*ޕ/}&nTPWHLAx|N6OW3AmzvbQIPtUY"4Z|*_.E, (>46|֌t ~۸ڣ ,2AaBu q8h:)n Yᗂ3c)2.0s 0>KF!4ER/)EUGU~L>XSydP_^ه)=+˯Mz ƪ2k +}yCG+.YVgH YjLiHWǵQz)F,I@نT,~HhspȈvѮ{8.)cIZU\ ̳l+4XCrټh)TwBUS8`OOͮJsL!=T}sf nӘ^%/uެdz[{wpSq3o0{cHR *l/Ļ{Tg\=竵/+M'ԉ8dSS |K2 E"/ko&Xx̢Z'c?gE~ob"ZS/Ћ&o=z{ o)X)w*9]+l[3r3װ ˔f}.?;|"Yx͎RH(VչRjpZPM @uSȓ|FA l>WSV,2ѵswZy%HФ4F\)j1ňojc`~u#A0A[0jIT*rg}q> =odqsj% &QשA+Cb.4!*rNlн2 x YC(=v ؆z~5&C<DBAMfMXjڏ\Ug"IZ{f8ڬ8bCkTJ*/=߻J@$Ŀ^% צVt:8 !? fm4֐u:6tf0A1HE1&C~tFvAAW"XC]В|T|]Eyg%}j.pʒKk}/L4驼IW])^/> ;o%uUIrޕzb|{y^xbEB|[_)Ŷ+e"YPQEEAÓuЩ_d1oLNҮ'%׍ TT+6`]wcŦh2 qZI_;>wٳ>D+t `Y8oG fiЕ\ b;5R>Oj~>0ŽIK|^oڸ9Xp7I2s*WY%r QzR( ÷}Υr&k`MAK]u{)9)^1`l?~vc℠f0QgѫS!fPc7܏j.ǝXvw!З脭ܶ]˜sV>ȮoK}ֆJ/].<ˬBG7v_[|4kdcd e1װmWA{ã[ ]pb[򟳙JyP `> mPKw偪3$ac!mwg5n]<(lhi YH7Qoq+R"ՇaU[N"8'v9$Ա eS"n7{ +WCjBz~Nk'f :D3c$ٱ=g=|ݔ>Vuuɫu,c"@K_} +? Z(ㇸPt>/AeXӝJIlTJ20ThgyA,{]h[ c<Ѯ@ FF-4 )54" dvs$`KwEƀlbPG&mӃr\ͺ Ja")N대}3 /|W`EP}H ` Wv p˿)kNX[EE P Z`m~yp?ѳHƒ> 1"k^IY jvNY2Lb:+$Ql΢b4r hV 7,3,+Mt/.&]xV ҥXJ"=,"uH= O!jgsԇƬH8Y+ɇ[oե"|q1fkzR3햾䛠> PCSRF(5=z=%oǠfԗV_$m 1H@4 ր+ȯlKUXvk '3ъ)=hM:wF]\ch4쏦XqD46#XeeP\ncܻ!,3mğcx'Y,kU7-4*u%b,t. 2jW[i82Y !#48cf3%p8r,۩K:%AzLd+;gUqĭ9g釭ץf;_CX4|ЩK v $ꁅ+Y :?q%й;.#fyы7i}EQEBvdZ:,duHIG^TZU Mѩ[XdwyreE,7P-rс+JvRFbFJ0F`],{v)k /fue1GpXhn:"9~hc%VXuYo6#:Xܔ1Ï~axS^{=)u;SjVLhmKP]䈭+^m|rl'TLR"p\.k򈍆`;#7޼)yչL'SD?%ZMoԔ<afSdzx Ik$Bc.$x6k}sGZE[R߳ȶOjEBZ`k/ xWSX@En( 2 *4隭7z:O/\h $%* Ra_ qq3 1O=T9'Xf@ywt^F8:PwCkp{ < Bam`2Fv>}D.3d\6DE\sriw4Sf0 bGyQ&eȏs2}KJq^Lѳ-ikC2p%1\WP]]*9䴓~4&&L  ܜܪ{ ",,yTZiL6ҋM}A6S!9S šy=iAbwTD߳O3X疶U{T=Y_wjXЊFN >6]yT 7yrއokBSy(fe XEckǪۚ.6_eApH'1 0 plAmfb{ƙL~v9fC 3$ (Ҩ Pjz@vY.Bkg&!%0/6Ǔ<[pA12 cR|\8EP+ޑ:}KkhcCM|O隦))}oi X=n^{ɖqs鲊m7!(s-̓3P8fRbJrľ&*|#HvMԹH’UM3;͔sN]FI&C6qWRmخ`ǕyE<{2][RŁ1Et>O}yw``Ly1^nz$@xU>nߏE9z-A&panyZ(Xzr_\09DBLF'7qX7IoD@o#X{;_jISgS2?}D|OpqyUhRx\ޛqG2QqӅ.}W7$1.kL.jyWl ^5j}?yOX0D|B˴օP]DʮoTƋȪd?6;mtjjkUlTUjyg(y@diiZyF+&[,fTN\0N DCgeYO*oum>,@Unm8Gn.C;_1'_nӂ8=:510ߣ@)y|>[+%1P IǏbI2V?pMCYÌOt- tt2_- {ѼŌ,=64qb#1~%0HpeV2ٳz?Q`Sy x S) 2z||!W3ͧ>x{ [)>Su"O2 O7o@x/=|sP0Wa#$W$\Ik3]!!6Q3O֭UEڳmnK V9Gs +4<ΐIKH#0|\ SRAK*3w҃atcoYoZM8Z=dURbq_#p 'q|yX(\i7s5< ֲ^'}^O4Ex,"}D2w4͉I;\ߝ dLPZXh5'#A L]i1/J`=gbc# d+An3> LANtJ/p~sJn!E"t[փv.Kvl^Vl>V_p#le6˜Qd[̡s)G$ɕՕbI[.5*nY(A: dʺ sJ+,z!@Le2#pDj^^WxLg;pFV 4^>N=c&UT`WR _lqXS?-T{`Wv".em޺,}Vh !RP3EwF\ ,i}eT6AI1zDdӋ{^:?xGw`2P+ /kĚnNWT!(@7:Hꂱp'0z" ? ,azD/ ]<|O:б*[ EO3LlY -BYaKp Y\ vmJSh(` rADY yc2Ѭ)#(`};&PbV6Kw"\[ݟҁ88QiLG"abHiMHC`k5xNNjB^3SU .Zˌ|FR+s5O-+rZzΑEjqL4_&hOWqYr|YllUD"a^meeAZ}Hˆ/H_Jsrl'PPgzyv1"Hgy5o< c%qǘx4VZ|UN)lMT &LB!+RR$jg?@ gyi9Y%IС 2͍Ec2)1H8җ85U!0k1÷"k.oS%ҍP#4E eq]/S`2a7Dp1^"̒uMai4yOPre!t`]>퇙 CPӿee2a{"|ߘЕݫ=$AƦNOQC]6^![|U^Zըh%=[=8g-,\ 䩝_HحWSd-,ߞQN}>M'ԥMFq&υ+N}Nߍw1gT>l`#~f- +S ǐe%TL~CuٞRR6#eA~h2\ՏӚ(q[b쁦Qi !w+RtC?bU`h;D+*5 gZX!L-r9ه!dƀJ˜0:K8+9xTCӔe<^sͩY UJ}׭:c[ʫdAE68Ts(W6UnUqSZs]ʅVZ36aOfxZcG%c=G$?Lz`|ONzTUo>5H0!жUp5%׶.~QP.CXPw:pUDQ\5[wFGw齷 d"סkMM7)Z {b((Ca$| sI Ƌj9{h#7>@Mg8=1X3/ۘʈ' B~OQt>$@QL>6MD4EPxͼ{MW q!0oɰ?e> W*苸+q{\/?{'n0:尫i0b{?E\蠓`g^%!?#TEStDLr Z7/}X h?æ}xzWnI5)h<rM|ys@-gr26|bRZ7+6'#4:U o0fuA$5޼ ElJ$չu~ˈ$0+'0c,KN,Z부[A_M>h:ؤؗk9w  `~W; ш03D.Ե^pnOϦ@0-'$!/ÕZDwsҭ}N{7(/E-ɨw3-*M-ϥ&,D|aTBzh۶"XlJ9 | Ъ }W4WyBϑzx0:i<f+aaHJ fyy$eZ"1,\PT]> 2ƥp?|Ǟ?.;s 15Z& K쿢x](`Ze|Q JH;5{ȝS6?w̳!q^nŭc s<2ޝ;[eH{ Z]Dg֨TG\:ET ޞ= Ԅ.5P~VY5iKxFr F Mos7 +JQ%gBv.Dzz#'Q_ΔbFH76(#`[Jj:qUCMW5 ӔD%n6+OAVؑu$guGUV& $XR ^ڽj٩hae5WQ5jYU\# _ּ |pM`ZDuRS@%+"zʈ7 ۬dhyլ)2ZX$.v6/ BI3tKKD͡:xeSsL3~ЕcCZNq5ke a[P xzwU$e8Z[>_A m).؀: †< |"CK4WAVgVޖIfrCVds凶 ɑSuavycE2}:\ HS7ZMp%̤΍ou׷LL.Eӵ~&~x+3:8uY|؃CgV8}&*UЂ|`xzywr Z yX w6<ܟPM9fRg[_|`xe|4x8sȜSgf! -t#˶jL/m+j ΧA_50{FQq'sՕ0$laC~ώW|BoXpg@5?A;Š9M'QQ2 mO@N-HX$ a +ƟrX2a[e9r:UQJ07"B-L2I%ٗҮOխ "%07vpV H |w<'cp֦܅A+/Y::Eќsn/Lc] + Er͏ߍ{4:Hyfln`z% >1Zܾ9 vxWn_c>: o}_Lߎ74CoY E _zj gjCenH,v'(SY[%^ZR(N&`hO=rA|^8O>b@nvG sxR5X<"|RLӽ%5ǔǸ#mZNhM8̜ZT텡Idj:k5Ikj*%ʋpɝ;t ަuԮ\@ d 9xkߠ˟=!] 0C\ и)MYl2 ;p}Q{Rc$ ܋P ӠFkq@gl `h=2m 08rB 䊸܇~fm5熥|ޮ W;A+}:`?]ۑ8~,ZXذBvZ2Tihyz5ݸe/bntrILTI8tW0aJL`MYQ jFSӪNk[lRxaϓM#sX\r*6! }Ix|S/Բh62VJ\Wu76ԭ&"CLcРcnV?\. *!5;.b-X_Ul2\,u!4FOA?/Л@tU[s䀅#KH[3]ذJ@WSh)>['(GV'5Dl%nWQ9+^"@Sph| A$W`[0wpp8[6ޡ%BtG_qCdդډS,.FI綱;3^f0 Eokt,T28F44/:D;>]%D\!ŲCҧGmi>7yNDoN'Z+k*==S$OĮ!FNȀdn2Y`&^Q\x"Mܬ^"RnNC~wwl$oʑGwU-zQe~ Pc243]Ѷ_IH@$G Q ɗL=Ec`je$"Pu:sT0k=ϙBPVERd!ГD>'PHY9XsjmT^ ܺ5 !.l`z78VpQcq4t wZQAEkhYr-G:W%IU'eM| 7_'KGiWT|Й̱ qi۳ĩz}#DBPJ] l 42!BA!uM>XO'Ǵy>lm*$_\Ͻd+˗C #x:rYg5(!xa$s?;٫x,ŜδMڟ$@O-XiXh*2$ʕV?^Xb Qٺ>jW3!M׆O$OĻUj^.v:2ݯ?^L6[2 #@ *X5Y/{"иq RNEpC-t(ʟ{“HsCs 0OGOgJ2H !\Q5[O`ZJHF8Lrdm*6`ko"so7+K'#Hv _$PʹWw' ZQ9B~NuK{fl- .R򼻫iF]Ms^l.wj9ղ"2cC.t=uLxc+NAĖJD]wb^j}Łg3XHm?q??<aHnꘞTNRV-hyCYޝRk͂Vr`Qrw/7Ϗ|jnx$MqGNlK،h>`8F.l~]o2-c7 -tfFbbgk3V˔ E%Tye+`DCݦ"};[em=7bIs?>΁f_@>ˆFƘcg$;@X/~~]xMd@F2Ӈ(iW іY[ 6xKݖ[\'t6|`*Jd/f&+ [xxHf98g[?݀`0M~룾p`BldQO hRjG<#gwfBMi@g#̠aC%̋zQ TMvmx@'@?9#@0] 0(IdELYB67R+c*W/vA[+M&Pq1< 7݇ouw0")P澂6c5HHQ(b4\HS|آbafF0qH7S>2Věνn 67$Si=$Npp`k~|+R6[vby3 9ledau*a9Wڿ!R"'v$!L]x%z=pHG:~WCe("X-Ωw++]R BPkOPV`;!f 8yԤ ^uc(ZCń۰cxʭD9oRKln/T-1q% iP*mawמW+rɊ"i2\.,Pq1ܑdl) afxwtpG]t1UyQ,8Q˜kDV?RY{Ot7N?"*󱱒H _n(d5h0SDd%˾ӆFZܳ|xxx|H{hX ;r]wc]UV5M71a%wljKT?\Tz˨ ̼ #ia|T+-kDgy0G6^3<$~4:FOn^Cj=FPmC 2nm@.kG0y&U}"J BJ[Kw87KP1qf"!i\>ت L;40,u~j9"b/"&[ -;exf~΂H gUkCr;Ÿ[HG@Ц?-Q{Ʒ(˷ꎦ5t%}.a>Z y9?Y#&8/,xc.ВX_ԜOn{By!X֚Sg 6BΖ1+CswhV>'ݴ}Tst'n.s}ձLedL!ō$Gۂ ]YpMG n^{!̳2õjk#Ax/w"DsզqdzMx; Hj}{Ǩޅɕ{KP,QWsyk !{L`b6msƸO{kt<%M/\Ko蚑*M?ɱ<9%Bwc4C\;.+O5RaNk^>j_ XLcFcvee!X-DFJH`ҝ.(DpuaV0m((IGv= u S~)9fh?ޙ;@vD4LҪ#<1grrLj3MOQw-O 03 =bc:~+;  (h%<0]I]"h-׎GS>sA1h#R9~C ֪%\5krY/ݛh+LX-Տ:rd=[9^݊~˗6bTնʳ܀ߨ-r8 w'NUlX5@l^ݻx)!JC?&`++ ZL.fnm~` PӴw8Q ĥ։)A[:y@$ IP~_h +{eK;L{nm}I+T6NA)y5 *p48i?+c>PH\2'0#'M<>k I촳!RDCª6}tJ'&cs cDE-~>y`!0dTҟf S2F'JO3U;OˆPq~re j/#u ĵMk¦]F~ _C+h!3/5% 7]{a ˛^Nh!־|6^õ/w o&yM fx)JVEIJrȁ]kuwެthpm*:~*.G6 (_#?lűߠsU60_XD8=JJIDZyc'+D'q/;&Ӥr;0s=>Iv̯n L)f~.埢/>֫ҤvϜt!ZӓmAm{4*zyА)YuKOFY"KKgB@Lr?QꕵT<Ս7'^ߴ i2hM7&z6+8*uDm͇Ku $ٔ:=Z8^2[tɛ 7/ʣZ튥 nj P|^g{KކMlN,4?<p<+'`~^#S&ia)HV s6A bO7$%ϲs+о&'M)f-jVZ F_MPA"ÓzE>#ƩClw_#]/spw,!m%N:j"n0d2Wz+󁣶'!B;T_GF)/G 7*jSfW,ڕnIϒ| L;LkJKYRKWPVYK9f H4ChF,r|/VηŨ:yd>!.lbT9ZLqv FXwRbJaˇ OtcT5^n&w= cԪ? GĄ,N(h"n3jqv#'Gnl{9RJϪ^.M!F6s٘P]_uII@XjxTh,|bxx)^FDՆZ`Gn!&ť>o"~b Ue!Ww J k~h7Aic H.uSa!q?,UT!,Ոf4\4R-, 0)n&}!"(R> / }_?]=yBgԅcFe3BX:RyzMNmSH/tq" lVD##9BiZVF(&62LjdUޏifƠTbv \ bxH>T\[^G.h$OgmE0ퟡ^VSc iUt8 qSI `ϒn8N"cάki#d7,BqnY= /|Z&as]aV÷Ϗe @J1 m;j7\u" '#<ɮZ}F8ytiX)LSE S_";(`cm{Wng 91ͮ%p7MfPpCsё}&i8vfRf"xKlv? s-NBѴ](]aO;\f Zy8ef|{.qbF3`x5 +SL]MnwkLnPNG?:;oe#ZlgWs '̙04WIR< N~]Mt5 k6OQѓ23צrEfvM;>}NG{G'"o0e}֋q z"إfiE+=BygnxnyFԚ"a|2qST{K^|d K9uo~TiU^j@ZR"CP\K) g{4П)\҂R$ /1Rs^(c%u]Y@jRQV}q;P<(`WLw;LT4o9u."$PKRϜQyx-wo/`y-LBit0h65'3Bz){Ɗ'r#[ˀ =&7#$T+1MW<qBs@H#ᔖ]]$(KźgfL}Ro{yiR1YԆæbRֻ4M-B~]>/,ƙP}-iUfN7 X2 H|8iأΩ͋s0ѥLٳ_ u.k, rMS;V^ FrVco[X^}bc(y&e&r 4kIAl`l./Ō&.6~sڗх,_Ć/u{ TV5I-(z s'($MB8_YnVxrkc?yحH w4!ذm5djdzfJ9pk#by4?c<8B0FL2j9;%Cf-31d^п W q/|[ký|.>DDBm{* T|xi |&3ɶ1mzo"]6H ɹS68yH^=:O 0K©4Aw/\j C<TH#w؟^w= 3{R4܌wFs(4V1(:˥ {2^lFAIc8 Q2U`G ׬*EfkӕKOFǍ13`&rw<ͳ@ܮF|OzəhT1燁@@8l !'z6Irz:[t| ǯ/yÒ!ۊ\FaEyF#0uQc`@j=}PJ7J(]ZUۈ,, <I7kvZ؄90]ԑ^IL;*xYV8DmU"9T e 8.c걐];$Ÿxed ŒFq)}q·SaRa rہF3;_H^.e ˶7p(S.fCPnO9 B%?GUjBT @3zI~UaC#"G8mx{ &hӫCFo=Œ#3p|Z2+T.o|4{zˏ|;" 5KJw7f R(?c؄>BfK+rjqoIxY޾Iвϔ͒rRӫ;P/.hag6G2=tOSH'cgr BqD"~_8R:VSS"=y"WI<&şkˆfo3|tސZ&[h-JyR }Dl^Ȏ[KStu7uW,Z[[Q|>{&!0#=$WEUQNo[ JrMq+RK|=9Tpٜd#ַzdφ=Z[cQs\8'd/p ԝjV.^CVU+ .ל|mF HkP=0A1(VVrh%Ec"Fe͕RJ/nabV >֚>)C/ 3?DDm~>yQn-zPr2Pv{Ҁơq-o1$Aq~o _|qɭ|.bO PmMJpLq&})@fbT~+nV@:c,1XU|EƜ6#"n)*{35m)I|gpΌ]f$; j'JS`F*ߋ=_*[@"eX%[~e竴ʄ=c%ϾmeK?IXl,9Nm _ǑamZ Zy7 {,N.jeR&ъWk6 :#Oo@$EQ <p_&aᬌ Ƃ.en G9TkG꒜՟%> IIb _a<3i#{@a:8E,{E9f:b'-κrMա}}:&VQGS㇘C@2k`.d<`E6b 1/k0I֠As?DwLu8W&̵Lr N/E>ij C.8sf&+#0L 4$^s &=]\pjO]"\ا)` B`Y_2df*WRrʚ4#`r Sf!GpN!1qlE 'X\4aX{*ș=kuQ4Fޟ6_3RYgS,GKWG:ɋ| Jd{v!IRݝ#A1& jxxoLԞjŇAa ͧS(|V{G38 J;;!õ Yg7D.H e2Ǖ]Gh7=I$إ8^F%>  ל7ӱ Hoۙ2w|SÑ> !e$m!aM}n%y p-{<%NX^cj)#wr6&ǖG2 &PC8C5w[3]|T(ԞuQ8rHl3k 4?Q4yL@"tlM> ]NuZ s91%=d; X4FEl`//\Q4bQ= l}ܳGe،Lo4OoBC i* pٙ &5|liҖv`jmE?*`78&" alWhЈhhSm0]YXyo-pvkQGWXubg‵(!0Cu.qWM,sX _j;Znn5|&:GG3frCca 2H+Ɓ'ZZu 1A~]qܜ}= tܶ9@B U^ApY͠UQT. @u\fO|vd`iF" ݺ)_oRxҮp<LxmLe墍a?7*wi '& kt~|Yf-pvK&Xe*R Ξ:Ҟ%0{0%+v}<UԸ~'3!(l׺ ً[uOҥлb4)k Zdך}TSѺ E/ZH5:X5IqEF0GfX跁ԀsvUF3f5a,-ۻ|^Ssg ꩏Qw`>8ӝ'#Z~1 nǑ%LrրR':=F,)+OkF~T Vy|o7f#pWiW%TcYnzP8"pAUDcElR.31Wެ?Y3$s5^gS |7ҫVZY>N鴿U=13UD(BA) uaߠÊ0"\f!+l'ȢDD~j|u'|BTcKi+x)ˆdLu n'oRu^0]c1h\k;F+PU K-NF:+!oCUVH"G U %'Ewund~ĻYYށNP{8bN]3 s> TӛݗY;*eԿ}rb-D-`j1AݯtG.m*9bTȚ,rj;Lp1S3aA޲R#˓h{E[okj;J?N@Oxi7 Y4q"1DՎ-F׳nQyu{ Hbt!ŸaLU }C XȭY2Fm #GI(y.WzWRݢ{eç*<&&m|Rv^t8A .8Sz0  v,M3;=ba^ I0O=>03d'n̴k_n*.#vRHdW.ݔKH$<c֨޹&1P=O? p喨hadnߴq(ORK|1e6 3}jzvw^vvU4.vC~[B-ևO X*HvY0<Ф# I/J~#HoîҰ@8.k!@S̓6HD'p[/ ff(4[:x<8 *KAe{ox/?1h_lC"4y:">ߥiq[!< u- 1h2S=E!hv!nZ:᫅s[~= Jz-$qơc=^r0oz/ ]Yʢp(di;yٛBL}ɣG ;'Xֿ9R:IOksZ1@٢ϓ$$ Q`+]q*(.)󅋱;h'5Eb[:E$|@%ؠa7X)*QUqtō"צjX1@t 0~<qleBQѰ%-"ƫмwY h-ZÖ'd =Q[j7781UX%&L/zkWڲ>]D  fb+9"J\&xvăXy~rh[h0es4;C2 s2!ų\VnG*_*D]zI'P$sT߄/8ߟ幈&Yr2  ֟T?oϠqUn]W޽\WOըfyJtYkݮY\Xƣn P I yZ=n,rҼ#lPc5UwZBgC &%sA.6%v!9c `^Lܓ {&k,oR

霆uD`{TE%W[Ekf2C= f#eMwqwmI%oҜjd@hۘ{#]k<&ǠWV=02i2\3K_[R4:dsa;+@߫æ"%N~?.Z>`0lhlhJIERå9(DŠ hKó0X \S ^e1NϺm(ZY4,ca2zK?]B/Wj ]5 *^Px6 [L)+'՘<l7[ghiݷHҡ;shצ<GSU/-[LI\CP_5s gZ>ێ06O8us+XO˱@VJFxr t5Zz]fF feBF ЗWY3›B![ogRv4GN8sg}BEҫTR%<U5_^*EXfIFJ!eV=_S1,ksgZ3uz? }v:8iR̻ey^M&|!&!0JU>x5oOC$|ث 8iC' 745q(R:GL1$Egepw[c[& [pZ4s0Spˣ&YbC zYc *!"ssR4CZ&6lG ߑ1pqcL|rU~~L"-! 䶭s1ڞ&# T=[狂0uGL ݈w!0b١scRKXf[G6?lĒA 8Q78֖)qɲ(Ŀ' 23SlpWiVR{v:lz9.[ԺNW ]:lQ/^67d60dWIN&qL:U5ܺU SdJA"A4Mq({Dro$P$`!scl&Toژ;BCOIȐSZ{[c{4O6|+QuCXh wZ74qxWFA(X$2u%:7YZp>arQwSȼ!36[^JayKHπVN2j+Xp]ArL%ED&˖PNlwo׌>xqad^VFhb=z>AD\VXdP"櫤ҝ 67UG O X1Z̊Z mywNoò4hJ_gz9\ _Pnզm>6& GBTFAShs'wE@D@%s3TZq}Y ]-km,Ie¾ qHgNppX9jw;<cpakݽ0w7: ijySc"}Pg8Vn0Kٗ@5u eu{bIz,+>soS>VBI1Oj*~tcMS4Jp·`I:E_/KicSKN07mQi.+))~d{GvQygw~i\2ORRS",VVN8:ωcBKonK:A?QUw=hC\_+hDo Q.)Kw&!067X:gh2?+vYuA^eHyJxCoΑ,H {^LGpCŮ%WR,s9qGWCMZVI񔵍n#kͅqQG\"yXu ۜڜ2llbR~o|08I~#ŧ6T#P{쀕绻sdڞvRR:)l&@tnv$XƷj\= >J4`.KU^YBJVp nJ"6TڿR2 K(">9m>tvP|wQ[ݤg^.L9|X Xnȍ =úO)9Lnm0Guv˖)sHNƄ҆җS9]YUonu1f.3)r\v.-vSGK!~KEn1Žb! Iild2 Wbo,ɴՇ[xk3Jг|_vb38

}M9}t 7E@nsxIG?5]+/bJ^.^w54ķO<]Ҧc ֜65|%da!PTL`HSN40 \=zD{Ť:6 G.xmvR$0[esО;ë:#3j+S_B .K^!nВ/V ֟E Ypeu<3ҵPUuUj{C-@R`c garz[,CR{ o2'2K^rw|#ÿeIxj0`Fs-L 6G>#}ĔԚ~ aQ#v{3:PZ|19ЌK,9#UID2Ђ`QMb,a~">Tly)*!xȝ 9}K)OoBzH1x&R0Y/ qZ%#fPX b`gCLU_t"7?*Gx H984v3dG9`cL]HYch$x |EQ\dc[3&*OY⇾9^4Q8~t$;mU?C$fzeRx}nwV ( O&1`-n܀:-w1Z1\Gq-jWt\p3ƌ6/UӇ%olNe]$xآ6-Nӡz=;_<7 GA_=_KI+L P?aGWZ÷3Z'솎FJjSXOՈ uD'>Okd3$CQ *陠! f}ѳN60OsSֳK~b"̫OvCL365g "?ƺa g{-yﳧ(Ht`K}MDvcNHŗdoKEdn +2wfJ}.+2}g{ߧ&j_ydfQh'pʘ1,d`vV2@Ra2fHZȘ;nҽA]?3%h# '.aٯmUu%f\ ҉-}\apztKRQnyW7e:.7T}}7vk^,){M-^’|5yT)|BhP*ҔBG*Ϲxpwb!-urڲa9'^ NVFX@m=qһueɁ>,=uuSsվTHČk&ؒl!Lxӛtãy0{_ SM7x]c.fIڇ#Ÿ~^# yϡf;KA{P4wPʎ=3-kqcLXR-.ɟ>|)d`V@|\"ں)p%ǙEEi \xe)*'=elDZG#{5TvN5"}/3Dmh3HcHa?2a̝{(nR9,\dUdyZB§/kdwF0?AC>c(9³h#R 9g]O;+"ि63Gyc͗>HPY7\d'ڰPd% h_]ͮ-e/P5> i ,;ЂwC6^G#$">4K>hA$A!$|Fkbc{W5ѹq&e־}PqW2 ُ(,Ģ]kj cdPm:Pb1#88w[0!B؈bLJ ciCuuLV)YO2q˰f24ۑ+9M PY|9ƆC_FAK -^.Ȭ>Oɸ';yf>BgxF-%a)8?IZWiBB7 PLbۚ[yg8Dvc ļ5ŏ~^qB 4E4uɭy'^{&KD=wS9F+r?2# XMv(0)!ٵƿ\..hY:kaz">}F9[ώH#">xD7@D3aX, <ФؒCar_\i&ed'Q5O BWT<&0n]y33I ur%[ǞC\g]ժ'ecřqD] zMْ3V2%AH02}/ ) $jteϸV]|t?fwM8d#wcHoqtI1S| i8_X8骧'oqePO,p0Ʀ9O,%>d_ YX'tV$eo˚gВ=/w{@Ҽ_2{8 `ٿ2-䤙/32v@(̕Hl&-3%:W;tnƻ؇+^JS{͏B؞iU$d~ QhF9uY>1N(JgwiԚIxUg9|2=(/9# TU Rd`=D[h}]U_HRc|B{Vy0fc')xIؖP8D3@#3o'/(=c!b Z5q[xh}+y'yR=;Uʜ͐"x+Sn|y<K cLfOhRQ Qe #OCs$"dXh?W>pWOG yv:AÝm7Q^{ ^A׈`z@Z{݅YsjM*ɷ1hQo g!ʹMX8FUf_y+ICU*+v-2L-C[r87:^gx{dSp(V_G,uxhGU|'~dEI_W%b(fҚBsnjMe꺉衩t#l: lzz>D*Oaz/Cc8Kzv69.msLpb׽3 TSYOo-] ю@ӓ7+펏 Qa]/775.Z2$0bZj5)Gyyy#_[ rX e7;TEQ('&Z2ܕ^;i$h9,c~$W))jAjV`AmdJm";9+c,6kfI$1{-頁keܱ3aW tWKh(e3 \9]V7#flEjar{sY1=sHdt s!pLN8] F-l<;Ha\b'0ܦoהwFfMhԉqcHMx۪6"Kse2AU]$hgQK'W=bֽ:'x7sBPFnTh [:=5gF1e-%rxVKlU{קioh3؂aV4.+ڮ L!.e&hQ&)eAE-S[,j۸"9D^#V00KgK2~;ᖑҍ\ ݌K)T^6{}i3D詶waZ:Ģv;Oۘ2PHӂĞtFoPUT톂_`F5hRZ{dK&-ʱϠ۩i ]7Q*q" édިs-j k]7Y&MG0]r='R=A:6PT{1Q2P}hzԞ}?dcVP&#ǏiʹV9Ƕ&XKTx642yoTۼxH]:";-U &Z!,hMT%{ᜏC{P5(ݑ pI}{<|(C?VK){{Dp|`1ym ø2{3Nt[T~c>1`A{ "^\uO ~]nL*,0]SpM{; WbtOсOq3 S8;˧$K\;{q8 r $f96@^J D17|ZFhj ?+.QX[B=R[qT3tÖUzw= /v9ʹͨsLCOVacA3GȷqhK -'!"cXΟZ1UǐŅ rXx[D|[4Cpa$FW-r;ES6B"7 X frdKlocN]7ٴ{*/$R,y;s3܊xo^؟\7HBd$϶C"IraiQ0z^qXVS&yY9I ;#/pU+|%*hKf.//B<{5o.j{U׏J8;ZR\>K,~tz`Q݇ն^4ټB1eǻ U4뛺=OUMl-#bn-`"[$"g屦"X8 l͝Qe$`Jn'x"+2e5#>,L vd%չc0F[$OA`Z{'f/IC֧<)sP5 AG1(wQB][ $ffrD=GƏ:qB6:@ w߰W}%7$# 8yT"!ZDv DRf  l=  `D{Q}|mqjF@g}Ξ'„K! Zd2qWτqW`w:ڼoe;EMaD߯H O&0]ǚ걝Z8 X[ḵؖja>_6Uc.an']M.: %eAJk8zIZ6F}R_K;֌GkBa W BK(U.UFn|uXu>oCZ_(C+ꀣ_e[ZOX($f!UZ[WQ=?Ҳ$7{QV#['%**S`O"'PNG_҉ݚ DER˞]IX*Ԟ)0ˇE;CC$^#H;P2-{RHk 7u 9Vy78o0Cxv m$etn#3n$?G*m߅$љ197jbi0Gjy[a>WZ2Z ,%e0QPcMXEoWt}}IH$ա%/z?H{Gyo&}C ;s؁^LGu0i?A/#cp N*J8O5+-|g C [Y^: h@IJ&H iπ~H ~P.:C"|ey]S zp:JI'M{¬ͫD?&K:5cUV8Cѕ)dA%N`~U ED a,{:Iv[:(q-{xFc('ސVGeR{/߱2Mv>it="45wf,;]64q"Dt8W}y'|75Ͷ)9ʩU\ ̰ zɦºkJ5Ӓxl!Zmq!M;Zd_ycyMIbyZpg}F5iyRT}9;-/JԖ#&ȩZ6Ė( oX F|1M>p j(!"3ea#/8q "J ; t!8R*N8 /Zѿ:9Z"ޫUNY'զ $ E&n#X <x$@]z26LzW^pu(+/IN}OS.2>&c{ ?RVqʶtzKIM$ꔠU8Ry݌ʉD&-_!"Cѕ;M64Kļu"(/ܬԵWkb&Qz#Σ2WnqDtGD$N>b@4VӻoP>'2|Qk;9CK|LW ͎D*D~Nv鴬׍2zYgIVPBfKH0+"g2Ik#4B/63g-#=hh* b([.g\KN›ڿ7varO4\%[3s>~; %yqD^`4vT>Ћ-ۢ3 Qv8b_O!c{&NvOrѦԳ&iAji1(T< !rlI pZ+Exc v_YL4Wpown4fHɖ>;Cg0*,nb&s3Sw6)V6пc=hQdhC!zDM+`MvĄtBN1>"G][+Y@ fkr@")EBAB vVRw_ys{:'/@MV>Kuڊ{`wβS ;0'TzJ$ Tykdx]d;Cec=+8?Vs5 99s_jjSJ)&vImqߚ X QTO'^7 0 h;[";t"[/hC]A1\ apP~*k7)t[ 6EBJ梴KW o"r."VYބp |F}@ yBM A'- "B9"I]T[O)MJNzhy0g`.sHxKA>P'st.mt"VqB.NJ/eg#+*Ӥ|XL:O(w 9OOIɃ1.i!w(X3Ge=\fL 8lJHl,s |(#mbˇ 5 ?bb[G5^PT&90q邌Σ1A oRC<^{7j9CO&3 \-ṷ~rG|5BE.ٗ-h6&u3, zx#; J4 ΦA-/=+GMm"t{9(Kݾ,D = 1)@^>si n,o'LK}} 0! k1YG >Uˇ& &ƱF>)ƏWO"n8rz~M f;ژ-zqsQ{I-_v1;j=&gZa ;EKcm!_qx*M5#>i z7*\ߴFLdm EAADtE1v-(ë7t9+(qn[;iPԔKl~^f(':]嵩c_6˳} 4!CWo&_=2^v!'5 Xf? 2^!W'Ă/I kl: Fl9)CGo:7fvx2zS0 bnoUl҇I26:jh0|[7O4]U'Wk~1Ǐ!&T~L]vAqyVoG嘧>\0ڨiۮ~_nRȘ9p'GXlt9Ynѧi'(t7 ł/2Rs83{Aq "]SviBVa}m>Bd^o k< (7Ceq}?NM;0(|!#`PKL_`2㗞+&F xͮV#ƎcU4Ttx|t?I˟EOE-=BOۣ㗊pg\4I㜣)#\F=T,ȺfH3G뭌C(]=mvܻ< )ϫs&ؑk7&$035uk&'lWʿ5#@Q?1- UtM16lI9x@f-m_~4YiLYyVլLƯ<*ڴ%_,Yj{:_RrE]Ky2 oq{`(*٢M.-F+OThQySGT,ѝ5l ìs}{㛲b!l~QL"8ܔ=!VO·r3Tn[9eSƌl<|u8$ HS U~KkĈ*[nNV ?H!ce`-Hn@ aJ4l] ɻUJΐKq!J\:~d8Z83n#@V^])4+skڑ`js1^ݞ O]ON.{q};?}Xq+,bQɁ'm]XrSYIG~zYA)] XWm^>K WJ É;-<,RD bg7 GC+\ڗs:FFTIa.j C>?G gf| nxO} p?;gW$i W$Kݿ}#Sm%U/\A ^uye11VudغG\?;Fs m/ŗWXL$I~w3 lIhlFPK{ɼ7kq~~!fI%8>Jr+D"qDmӠN{]}J@H!)/q$>AUl@^1 &Ң (#ߚ&rĀpNhEk-L!G o%}8D/VϹ:JδW̡F:t%[ܫodahK_0l}6ܿxxw BϺuHS3+pgYSvChP*n@)lp}dQ-ֶaDn>:x'ZhzpW d*Xg_DeN!9 cG39v cʜGt;#N!:$At4m7._=#|ɌѠƮuzRVIIj[deIuSQ{횬$m" S-x 3-\Vhv<`@i+TɊ>#Xzϕ_D+%z:\>~CJ}v&(ڱn`[,U)~21BşTu} [ _ҡwT$cCD xf` ́NuT{0 r$1-e˪$=4:J""rS<{V?١qX.p%93:/5r2 fq<ţڡc ]_j,<9ԑogVIO}P/Rү[vsȐ-k+"@2EM .a^n')S`J.O:M: ^qQM\pm1L[VZ.@BF 6Fg`FIq'vu寏ݍwa`ki💳k LΖ|D<ǏS!Bh;JkJw"ht5|ZdQF@zt$8@K]9a #'O<C9/էkr6sR[h^;3h˦GC…Ez<5|t|$3t1 8L0 +_(!y ҿ}'óvRSp k˲g$W"\#|t =*'a.!:Tsh{+ˀqQܚ{!.7-A5Q~* jMՉ0 2gL4= D[Hf+ ?S{I=, c۱.v^h׊';1?TT} #BW?8|qnO K6H,!#ZOw"jN0yqwwt+ X {GZ4U͘Xoڳ^SͶ>,f~7O +K؃;thJc).AzF#Rum"ԙWwY9G0A ѷnn.x4(&/DVâFF5K3O)PM&Kvndtȃe!bchx:h9*yFM}shl48 Y^@Q'_wkUW,p4w+pLK>ן ;ҟ$@xtK;,Dm-#G!53Fkv϶je@):.K5L)"$!nJleVqڙhNkWfYM)CP%6skac%E,0R~g6>C꿦t.j/&`ۆ%݄TQ)ױir_2 }C%/5C"2ջ ӢM)oQZ5JJ5b]S]Lk +CܙIrmWf1ج=*X2oT[&d[OpP^\q4_?4[HI^cƢτPSy!TO=͉tE1.&BsE% n v&;Z\,aA7]Hxd t iZnBt Dr[ f&^u=Q2pbYX|BKtRxhl };xZڠRlkc%q4PI %ҲD-Zq۠K`KJ Mwg4n*dٽ] lw;(PF/~ a`2(L>w=?֝^P]p/\;Na 4;S$9+}Gv'=: >m:j넶{a~eAVƍIGm[56i:KW0ϸylKrDMw@kܮlLeGW9)W=#`:mկɳH `4T8ߖE>mv ]XM<ґ(6=oo ez>b}B3%`y.9qiPZ" SV62d* onVlS0="tBnʲCa 5(4GLzah4|*>!HJ/imOD# d|2(>! 7U@?8uZC]#P66SQ>m4-ڣh :&uѠ8 cZ,)hQ~ X O@Z],]m\x{uyMl+Kϕ%.w/ H͉~,5q#hq/U뒯@ܝqSRc. MRK/)0Da}Ljj/⎸fePWIsu{m #!q/px(_D?}4en:4ћ/D@<+S:7m^ lj=#x_IxO{CO7>'}%FfwK\~P=FG7HbPyu,Z -1͎Lտɳ0rem֮ՌBGiG9JY/̈F $<֖figq%XK_ndt .w=BiM蛔o]%,~D)6XʝA[r2ĬREjV'\eG}fVc""3vZ5rgx]ʥ^-6i]vUB`PlL,K̃GPNIcV.숖1dTJjGnPD3o?*:iδrVHȫ~$PY{U;hq(?gsڵR݊3s Ãi9P77ƯyQq8yItS5i F<[dZI063a[r:fZ]`'}۝3GQ1G"TD}8D}~s py j,'TS=]o?>AYHAiD%LPHGȠ":'3dKv| bspۅusaX#Mb #aSQ޺ @su68(S&*~Hs+</FN`30`Wpz@JfVa < Kkof34D=ʀCE 1D1V0CR踪О<P g9mczue,XssE?hH!N( _q%q^H8{)8ɽn uW{*E:=e͡W>6ȨO *_p-p>G:wM%vFІw%*>H7 VD'#|#wxA"v2OHҽ վiWGD.%o\Dz9:2}|QThtzsm =~E\7-Re^{iiT1)/cmOҘvHꄘJ ՖBl@KMqmA{izokdrj±Up haImVl 68.}\03=-Q1 USiϷSڝN|_]kR6 Ē^ΓE56ۘl`oy8Gl:%#)3alO1 {*ޕ64cH1x'rו@"I>Qg Vj_fI"J)W:N۠hίD#H8nPPi腇UT"&s̽B)2ZSÎT% eln ]Bp*X_!ZViG>S,ymv֍޻;aW3Fp>qGwys,p-bu4R[PY=,V`jJDr=ÿ& 1ۄ#u.~h_Y; }mTo"ŻsABjxk{q,kNOhw;J,JmE^y~vMГ2b^ΑlpzKL˨pȒ(Gވ c4S0|^kX7W0"&ٽ9x̝1e~v`wAGgAۉrJGqnC9w|6[vy 7hAޱ0|2Q&Q֤WF`15-A ~4=q|C >gs-y=v!AG? o3wMFCW EOKؒ#u+7Ɓڀin c1ֺBJk|nBsJ:?Hp*<@6_yCd0o.V}׬NKs|r^G 2b1,۫xWu;b1eVza{$c?fqZd&QJmq943}5+|#4Œb:hUWs>4~H(9Ob}w.$1Pj_v.B>XB֮bG&|:v C[toE Dև2xlvΑ\*nx#N`([OpśOKzb/bU_*S;J2<:.1Z_+Pe)>6DKubY`8'Rqī=tdX4weG{C'fDB;Bo=;6l8|s#CxqQJꟿ^%4ӑg[9 ?)Y܋@' 5Ґ^y+rة_jJT|Y TʫM}Z~qh}HtξǡOF'+Cb/nF 0[~'<^49]2g]ȕl箐Z1=g?s2 kwn X,a/ m_,jT8~6OM G7'y GmGQqvqm#-BQAfq(xS+{m44*y];9 ;[HN~/s)Ӵj[P~i)(eCM 2G\ƒ5VG쉙%2m0vyzN0,dD AK,CQ1G"Ԏ2v[^~4B?_@(2!^.9Qff Hi􆢙fU (ZR{ƴ[QmESu xim]41(Bt&~ eѠ@X?Q謔m&2/ RT`,nRdaS[h$8ڻf3:[Hv)g l#6%"H^ ??+l~v48c;ɷ$d#V҇Jβ}CDH.Zdz):מVMhUD듻4 XiW/Li8j%MQ'?? AEys$!p¢ d~oIeSwyq0[na%2#)l.̅r\XMGWp&yϞ4/%9OI}`HŞ›5G't8{R;= 傍~tW5E 9 2[)w`K>6 &)C"GDƇ!xc {(±Рc ){94u*ZHvP7s"Ucm{Y z.u7% i8^HߐRԘǾg,>QK"zS\l’.a4X6x囵L(r±75G6DTQ_'F%i < B|&{7-! IP"I"6v$Đqs2\Fi=Ê &Uo()̫Ղ[6B3bxKL`f;OS{>b'rWlY}"x?_wXeF_e+s/+Ns=aT7Q؏ʀb1wb,uB돢ۇ79Hy>ab9[q$? ,"g7su~vx]R-Ƌj4p0b=<>j"`sesp[*3XwlM u) :-,٪(Ôe_6TyoTǗ-o<1+xװFrza~CC;lN9ٲ&j . =  \X2ul>*mmpO'PT؂U` YձKP2\ FM,?!F * Mz 횯:~F8)&v' ō-<`مX'2@h!cpSvmBC XDeŝ6+>GNk_? ESyCE^D5&k,-0C1꽮dgXoJgr= j(b #$I |Y5X˻yFc72|-ٲku&@HXy>1MVRDPΐY3Mcyi&ls&o_ x8NX\@< S &+t ud:QH('Ec@PId@M`[NҍmLuCsH q䒶8l = :ʼ۷!_!BsHfwх(3emt?XyeG6G]/o78zi9fEd鸺xӳH`K{$/}Lͺ#΋dnQzF&&]"u8xm42U֯qղi(H\&CDZ1m8 $_*sLLDѕ ˒!j NaO*5ʤd3CUkwI?; dQ{҃8:0@L$BUL$i6~thnvv?)uu1 } D /UHŸ!)K䙕]NpYy~`9*Ԃ).#\#iX$DX C8o _YܩE #cا&UKkHaO^|N3#$(PjA umᨫ)`"-I@g -G.29(Wʴm .>k#lqF 0k@ \Xmdjhgј,Ob"Ccxlvk:stBGY#$fTw"N%x+@rD.K G" q=r3)R~bQwN} HzAAJߺg_LJn Vg並Җx%[BWC+]Њ@M[&N2H-p~8y+._2%tY!UYm|sQڱ%9f`/K[¸J64"P]p2 )|4'Gbk*ҬWoX‡ެ,R|vu/_fU?(ބg+Of1xV^GF:/or+v>n1;: 3@8R{T<+nK j.~zV$ہ><EFY&.[́$e7^Wˠ ꦻsz92< ULq6GaOBe?`A;8?vNUBwW [S苝/ pFH$[q#ս]K9?sas\ב'DWieٓ4S0KϨY)H ߖ36Ma١fDѓ\zt 3;#UM/C w0hhKT.3A)!=(O'_k3:nx,u@c}$ RڗQU/IHzQS!Jo\VJĞ=gR2cFڃe1Cj,C ]ա~?*rRaR16Xuutk/(ቆA<'vuT:x~ƴ]v(xu WKށ云5xGeO"il"{n_@\(Q 1TQSM^CJ[!o {fbQx4;%p,ZlKy+R?M'fRU[.!wP>eMNX07[9Į/V{fwq@m,=0]kB`&IGK7a 8|I$9ǻ#)yx/hw"]\UD]Ds@ZrbRm9n_<>쎋GKcP2Fur#2]131HPa` #S_-|7* Wa0/OvVIIeaם3<'P߉TD^7LeeA|\[x[I U\9^23ଷ^6M]l$-e1JQ`To[M+O[5j4WtSyfќj $ڳXGt3Nj>Бs`ǩmTNd}͸;f&}>]ݿxA=L='"x{6dW8 شd'w֤,Aюf eh}\a vJ_^Ak˦>\t"A[>(TjHEw/bwp*-&U2d !tѻ&[){UN!%a@@[d2[!U o%}"S7lmX:$  ZC|<#d* l NM(vm{j q~)H2FpP!c3Zu!0Cȭ;jK^r7WsA?)sf”6?#s}Ë\^'*Fjhtz$ ڱxO.|ܞ_̗. p.!5N\Њ!搿{`dm3HUNB(nե9ѡ.8)94٣^C2)#_%xI>T2fx,'e 1N3S+a)_|!^uuJ:) |EMk5X @)l+ @1zwlgrvnA_ &@Z6)>\[YߏVz<(K/؄ Ϊ%I9!TfB21E=c3Vc +lS#Z$$v[7q{*ӥoU )2ZWpl BaJ5&%éVqiG^K?ӀSH6&i)(МtD^0X$.r`LO_ߡI,; QBNrP Sunx. Qgס`L>m X^Z٘5gRduzp`8iufg)v=@s@e X0_b]&!fڸ)GrD^K,3TʅTB 4W>|s 0 r-$Gߦ$b ad@:C6)g+3W <:<)g6Jͻ>3:y tg3٩EGڕ_y5"=]M ]SO }GzPn[sX4# o^9ҖE 'XG'u U˔`\Eæ4 +nvWD^% eEJ@g5#hXzsזOa[`kMid=f"t.7rе_ZX*mH>ՄZZn>x&2ݑGI!):_Ki!`.t]Rfa{9_wmhdz.FSLe&e"9s*,fU0 D} K0|dlg Qo-R!v'F[ɄCs_|HbCCe {Pέ :_EJŔ.?1ù51/řvbB3SqADٿ I95>Rםz[0p8/bYǛ ~ Fu*>:DZj%ɤNUk1D:9~ 7nЂ[sbqZtH.}dD\k'и%?)0ySq0B ~C)sv52w bk4&sƲ(f03g+gkJ} asVhM W:%4I[v1L/#a`8 ѕio~F Ęo`g2_JN)pAQTK6VT@ܤ/4?08ynbfi*4YF.5/[;Q:q_M=FI Q+G˝r#zRV#*+.VAY%΍ ?JAJ0rj%yJncv@#ȏUo\ C\sx#+l Bg' 1xDdkS8b(B dʯ/WBb e/ZPt6^y&$؍k"܎P`]FÑ՝KQb$p M _V܁Wta: t2I7q}Ճ%m0oL"#ƪ 836=RR97ȊGp"]Qx^ ].o0,ѽU 轃CP?¨U՜7k+J9Kk$k 4 1$6B^x7t/_"k~VuOя rQUS:\'`kC>buY^qi@d0 52tSt֥Vɭ R`[xh?NfL#Ym/. nL4Y=o$HڴUNJDA=djۧn34P/fZȮ1@R6-,Y FZǬdZ& ډoʖ6Wϼ,`cƽ 23|1M {cxWo =uD6ڣюF+{qwA7)ty+&~xN;ᾓw3}4P!hu;`an0ͼZg8Yt !xVA}v'#y< "ʘbW' )OE<[?f9s ujDe?kpЖ6'fO1qv4+dt,g'-]"쓁>rߟi ?p'\mhR-[2(ppVXQqHT1~ Yg/ :~խ 2ʜQsǍӔq T*l>UA;nHb1$3!-vg2yZbGc6+.Yx.v&r3@sV@|az~C(b,GqRVtn=n.TjY`N=Nc 3s&IktmwkﺎX*Tc^V[y n.KKkQd,2pIuda 1XMx \'ŽSo ;T7zQraS”(!3?dw4lDmCCg#W8[z-NǃtqבԊƼQDĒ54-IqTuG="~ʳ_6cq J{p̯ fm;nd)Gn%Y'.^ inxQk\;rĮboO8=5׽֦o09xMʻ kϓ>'U%q}D_K1fBp*FOy6)}vΧdSSӪIq ͰҢ$;hb듞'ꯩ6u^yBb;+RDo~h߯;wGS8= ։濩0_,6Ə׃Z[YGǺfDR9&ld'0;=ĸ@]!gjHz1i%Sf GqiwM.SÒnSLU. ')y455-^<#.6VԃCCv]8l/`0Z ӯ-K(ސaX;j1'H.`A"ۦM!DvX[C7BR,kt[XAE`s܍+-XyF`"Dd@)ouߴX=y";@`ŗNIB+vw{!}aМQ@ Эww_[i,$p]]10 O&r%yd?pc\ EhE04! eH4 ń8؅>o0D';wl$2r w/_AlȖ9I@:jOBE}^̌Ľ,kГn*N-v{2eq!p5ч Mbx4٤.*)I1g2$7;Gz# •aeM PxWy`;^ *P2?]ҕۛDf(ȣ-VZ 56~i1?K^ǣ&n>$7j+u|By y͏ nW(ʂnCt)rP2?"ɮ B38|yef74b`$bZ=Xn!Tߙ;p-tk[͆yF$j_i}rl*pb:si֥CS&K!SqoMjB ӽ N5gbbEЫ ӑ߫G3{ؚYئp?(qӊawT;jYFg*J3%+ܘG9)lwovʗS*u1MQ҆[*6ɜva% !>DlUk!Qg3kvfZ=C+y =p!ES K jp6;aZP*S3{G~mpJ~":1E[(s83:*&]G:52a v`U3Nh~-}%LU#p)PwW W"rn0ď)V0\6g8A A2 iS5cwZv~Ǣ^NN? ]06cP|AWiEB6y CJ}v̸a781F?|=`=6Sjˎ UȃȊ|r0vGTENu` nR~L !J!?廫bї<a`4y 늵"X7.+a;"gGAn=GWtP nkJ[JC5& FtƸ' M25kو<> J\6yͥԄY\̙ãrglgw0s3^=NY` d=Ѽc'5q.RwaغQ=yEX 9٧v?M-3~*5czY*T~ K".@\ )d}CHdi\T\5%:寻o;顆(rS $JA92ݙ =18wqswnEmRsvnNSX- b;[>kU`Xğt;Y* (ИkaHf7a=&*iRtk CWIot8y ` %r IMŠ41kИ><WH"Fׄ=6.6;-_Ki1:H2#/(l MkHf?ZWNEDdpSn~x LؤoXl 8O! و4 8(jz1?w?a'z!>>bUr}I(5 8îW zco }e'e o0)#FQIY͐`enkY]]_B\cHC',K '9nJ7 [0hrYŭݼ2[3}>hڐr2 gcxKfQSdS2nlPw3KϾFأy@|g)*0t0)溮|N ZϢsx*buw(u3ܤBͯ|7q Tlr%nPǠN ʔ*/pE5'benްS'?EV'sD,k6Xˤ/e$4ɑbp^kWhSi4, p~E_* {[ \A-=_ ,>lσd5g?EK~HJ@W>cb; 7̷k kd`pe0Ԃ嬸]-(pfW$Al+ͥ"7~yVF8LŇR6 L-2 x,+586G'gJ lC hסW5.%7c]%yu%}׾;g|d,v}FjC%50@*LV"܇O=9h&k5V}kvV| 7=!CpqE욛EP}L=D<]H+XVG?Og=բZ]z=6]DRRJSS<|;(B1mxD_Ѹ֍u@c> !:ag8! #-g>$"]&V?QڜT2t:,H)6Rϧށzx* --H.#JC4@>ȭҒm"~mb%&dXU<c+CO̕ZBĸSkF33~?a_~P \~:Y ߁?‰7 q, 1D&)$yr g~Frd :%Ja_%ԚfGB'fw}\O3oPMI_'ISmJyЏ]JB^s( 5!K1<Ρ7[ Mzb־SQK@i 4!E|%d?6Uvk<)Qبd ~fqCs|I> X=)Yf#zNns^[6+aFH HW~ Hp%LK 8bGtuՕ0DztXK\ɐH"x'':[j[R O4 ^9ma^ n_v%͑0ƉmX{5tƜN:#@j3J=Uap%['wkǷtlw Z sON ^Qt [Q͜1 Sit{qZ¢C3mR塪+=r?`|̤$Zyrn}IhKu=_ 9ӱ eGRy`Fְ٩j^62ZP]t׃]!]eNufࡠ X|@ƫH^[" « j[}E9m%QyRYt7?=9mztDibc>_.#mx˗W/C3Fnv[n2ۼ''V:9lR,  zpә(--D6` O.DGX7@OI0>B_Ö^&9䍌P]̅k:z' J*[ȽS=@ɏtzո &f#M ֱLfЎXrI6nDZ8> =V{L$|e[ %*7sJ*-9EF D_~=lm/F D {fVv1!3Vc\a'ž=k˺ҍ}7pC?4Ge`a?(=wRkKLqؔJ1925.G7z?|JxCrufױL;:Z$W%} ?-hȿ ]`C {f}gzϔ.ZPc7˘:LoϹ܌ PgJf4tZ)8fZD7D )AtZ@Ɯp;` ]շ6^3&.U$~s?Q:ax{S23Cm #5PZ1Xc] (s%͑l.'eo;Ԋj Y>^hUǦ*ɱ֯Bm-C~{XׅV8Y ) ٘J:3/1b(q";ƆcY1jޖt b$i[OUBە@dR 7ÇitgP˃լB?vq5WZJ &%?PSnI#lO-#$(<0=Rpxtä(U(]Y]+qK(?6&}c x웘g.`+o?{N?ޏ >A\P>*gZAl)FvC/h ۢOi*H>^mN ܆ `+zPǧE1L,Dݦ\D%ogCmD[DYw;-IVr3l3PXcό1*Iqr!Wj?:>tJ/%X¹S>1KO{;-~Ji'OhJITUNHX ?\Q#zb/h :CaUW-B+T&aTn<[/|W(=hJ-ƫkkAB=8ˣB pf\n4 jdKr~b˻wg"r^FX%j3.@)S/mPO"cMi _FsRg,xg;!fFxsc%8 [2e~]|o @lұNnDA21/(UX<UTxI1%Wx9gc\XJ4.+/8D>?`^̯ ,;SR=CZ@5__Mrn"8 @=+ΛJn= /߸*08a,XY7СRv%fK͂ g|̮ ~ZLXE,O-`xkڦ|0ɛYmۭVƿ,ߺ+<*e!HȂ>&EA,5s>\sӐ[5FU1 7d07F_[ޟ͔d0IbH'xROaj̉Y[Ky:k)IMۓC$Їh _nZ[hkjwǵ-ZrUj_H\Үe3g}PPfj 6'm{!7tF|OjoA4^SyBx湁'; ڏ}s{,-2(#懌Y7-H#; ^c4x,l@/?#r9}Ƽx(Omu0-C[tBhU`~za§(s0= SL8^K-r?Y+2r+XXs@gaq'Y@ ;5ϙC].gsn#>b71?wrUNUYlstᰰxpӢ-)B~܌.l1 :ۛ-IL>Qכ _PJ!QJg _v0P zoըQﱗDk>uW޿[Pݛ"u +]Gg {`h?#]ӡ6 ݪ?K0|wVkvdoK[4 ;~+PVOH[4x#L jy T2N*s]_a@V=_1Քz׭sM4ϖE!]?fZ[Ti[tK"QQ éVJ`;cݖE F <|,uEHp9WIZ!&3Zcqf*E~ H]ii׹\$%eQ&'*zE"5!箎c@ffʬrG;/ U:H*u%\{>t` R|:|_(&noFk%SrL/ض,+ ,&Z*އ2`. V ٕujO6{/3RAAǿĽp{4%.`]i@ .:흂CU*faR55º,yă@PмKS['";) $>LXRmʷ̽o1o_dᚠ7$+7=T~aw=jAօq+ꀁ%+`DŽ8*ZYjԘ#i=f>ulRDn.d .NrDNB\; {Џ~82 skc$> KۗU$=:OESo06w5Z1 T6,#Ƙ*=%CPb&9BZ0=%^-(NЂEz.h晳kI5k@-3/iJlMN9q_E銣DqM6vR'SOz; D6IDH:$wzIaeg\y*agA5<;*9X JI>|x5_o a6+sfDS2遚h?(so4άCoJWp"qM0XUOS(e6Yƽ\|2[ zTIo Tlu)1H7ι UiLcMxVF3ٱͪ \~).cהVPyaШ-Vv5=,6jEVwVuv֭LrzK 3Y|҄}'H#݊_-l9/%qj|\ID[Z] |2zlxY¬:BHx#"I]ğ7Y߾އgtK*r!I7@p]4rAW&vb9|cBO–(BJq渘JaՃ֬rL~[ǵ%( wR(յ3 nG:#^):f re h֞ߊpu橞pY*xtrG`/T)ff/G2)ƯgZa3xڜby"g"0$gg -MZ{fnRC̝2EJa!?6Th:ȳV ŕ0et H+ۨ+0 7ҝl' &$AXAz T>\jJP1v@Og$)bvD~>ql%43QHu" B  "^V5ݺbOQoOյU@\P)cZf( {/u4 yKNc@ \W P/o n徔DxUA"DTT: ?CLEԱc?KZTJ@f7 ZnV@ypl|R.7ARfV&|u5W1 Vx_Gy^u2,+++_bȐ~f Ws5PjA;ub4 ?+& a/'~oN8?-B&WUxmt > לj|L4>O Vi }"WcHID$1G !< \Exђ>i6ӓBh9R.ľ1k0؅DXY5bYc$u$߫kOH=˭ּG-Rܮ \P7[g ;#%=dJ-gA9jJHLBr(dzѧB7T@pYV7tu2`A67Nd8ʷҗ?jv^nfbGc LJe7N^kC?s}Qv8X=D W$ rز4R&SOf[PV{hpuItG}٪s m/P_<XׂmД h\f|ꏷ3і|TKXzkDX|NV+|1?y"/A´.WߞI0lɼ,ۃk(9dVa H`4OrŧT]&kˑ\l]$hKu,kQwX*] e~n{ Hfs%z0?-(6BC2(""6X nf6}l4_нGHkA{A\ L( 7Lcu/"Vɵ# ͇?ՄQ Ut8ƦBi- Y/}4z^2'X4Eᙎta}ĿX2m_j|{p0 I>`{0h}\wb;%H5ОJUap>p Jdit̰B+F+G{ZzF-DImJ/n+t5>aAʏ#.p޻oքAF?g?+mZ[ &H\]ܖg,hFRnPP\w`]g>絥La6`D4>-_˯#]Ʃ$ I1B6ŬQÈl=h:5p#͈eG=6J# `S(Q?Zˤ"J=U&}ds2Iڳh{  9|j_Dl5EkQWag[!Q4p=t=-p{Ty `,e+(B o@c+1_n 8; άp$SRɄݹ 8^^.\SeMgʢ޶ƲI CP Ar)$/'ƫī#y\aZPZ V8cwE9܋zAh I }ΡOmZ<^,E8e41d\a͡`/m"=>JY YKJ9ƝZQ E? rC~kQ w6X;8;_%>C1~D5 gb9dy34^1l0*K %=?o;?x= ڑIT uQ`ŭ#4ٙ T6$@X  `F7hAKC+~hPj>j*.2`,/$a9g7BάE1|x@CPIy| bZζ.){u s>N ^ƒRMHU>*z by-8ѓ&)C}N3FFZߛBΐ-_,jOik,LYwh?+M\q:"Ծ1 O _6rV٩=y]Yuw|<`X4UG?v嫝!/f. MR X]<Ϥ'Ǹ)*:;\sa$ m9dGRH{)dqS`[ȵ# aY +YNM6Qʙ((N9!vRRktXW`W+gF&Ĩ!@;>H_+ S fpH-_Y$]L?צ49.UrB!GI,_$$e0@kRbLSRl6OUj:ޜKfELUPeM++R[|DIW] *'=e01s_H9^qKS)S޺ǫDPVKֻ;fdi<^enzQ%EYۺe#sL̕gt%Dd8}#[L ns*5Z6MeiSZۘe?~Yn۝>n4yr,:4/ؙo` 'PQxhX/DS.©Y:M(cIs=h܃[揾.#~/-p / ĀJPMqM "*-h;-9tRKi,cة“JKf~U) uƭӵ/J]{&sy:ni_׼EJƉq_Ou/u5Y@3ے_Lel.*~FZ#ҨQv2h: F 7m<ٖ:OS)md"r*`Qd DF[.qϠgwbS_~fZPRr7ܴ㽏uj@km׊5sqɲ$RB^(0dNfVfd p PH}20ʮ.ZBc|ۓ"Yŝ!&ШGV1y (c0 μjȾ >AA~hP}:F4识k]<u T:d,grhy;ƞP# MZ ,8D aBb'RTcsױKPM qx?ugMerSf Oeq av׃q:b~]~-nBD(AA#OeܽvYNG=R2]5#2 Vөu iExDzT/q^ͽgHa8kGIAT*y,]@, St 0HI4ծOU&'$b^*}ML6E BrlNcK!8>p c!7D1˖cfKNyŶ(p'i 2t6x s`\%IYlutqekIU?"s;!b23P2b֨2#>I@Y?Eʀ~)7t7?'*w!?4Z墰?t>03M $lAw|{ISRZiK(LHuXAĨg6d5Qۄ4Hi*Wi/-߲0tw`FL{bS Q=R?\Y>;١û{9aoe)daq9^QթM ZɌ  Q0kf8ݸjj!CòPISF¼ ͉Dc. Tv-V,|:#_=k̍(-B) @ F h&3-:u,WX L;PO+ٸ%LQOZ!Qʓ4,+u V'B=0@n)?V4<TJgSnL%R{ N1sӺ XIM &mWNwqG)lFOzڭ :zw(*4\X60T\NisIVd]FNR,Dذ{վ6%P?<N*ULP/?Ć 5nw\ã!5u:8A{eԂ~4:|pmɬ|g]۲_4vܭtfT|t7|cb51 pMrk'MM)nUUT_mb~[y3V$WPi1 uèɆ9~6wM'- 5pU|Op(kz:(Bav 8#;Tz ONBLݠ"x?,kn~ CG`Wb֧U~ ^9ۄ~Ur +^ k{,JӟcV?w8M-1@WN3 $ =7XR_f'c!Z?"VovlhYCptW;WScZr7mBҖ(4%Q WF+@ BR^|WaЁƺQZfi/fO\ I?$1RJh ` l7MwA\>yDRcnR%v̶|a;vShA<[L30zݏ Cga|gfXkǵz#U C!2Kyb>"v8CUOY bj# _dyP*ˡ\%5Q6`v3#&ÓķLh&+S0},C _ y8!UŧBcwjEdE,@}T ljm[8a\~Mlz2@FN~94W2gf$e‰w&_ {.Y34^ ۚ=LJ3h;k\e~wjIǖɶW>.8 4F”\q؍FШ$;#OMX՝&&۰ERDFوIpDINrx{3@(AC͓g̀H9t3bNXU2!JY JT`e1tA$*&ɿFI/ .XJKal&ȳ/G ]SYm,k(gj=wefjB鱣fK*QdGa`KܧUmbGY@wsߣ]wDkGF)pXwL s Аkt3`14*\AN#t<مKM/b\ sMt tʁ8 {^zMjTʓx xNe<(v}?L,'<"TEmuM}'<^gɭe(A^ǍH)0> )5RXh-tɛŏ'ւp`H*0K˪A׫A䮕 S"v1"'dɏН%I4ڳ#-s#cJk~ի1.vlT6k $$#;;-řjJ܋Kߜ҅^Z0)ЅN[dt$d9N1ߗ1%-Y,߅|2n st'SJ=$[m"}N oFG@KV:lA.ajv >?@uŘ4-f$FGFWYxD&p"!o 1{g3fc~I6!ґԐc"}2̟W nIciTW!i^^x2ݔ MQ;͌z׺i1}y vZA@nf2-Բn ƪr˹x/< -BiܑZW ۱OZoPg$nLj Zx}dPXJ}Eک=AdQ>)ٕ ;)^ 7*,3X駌sʭ++GLUB{voQ{v&_ v4mh-Z`ϳj9 U%Klԓhhm,^WzAtz<6ɫ}CU@Dֲ3ސ52((8$ tit}3O Re4+&PCpȠﴚJuS=^w6> SA7E|ެx p*ALDLHgy-q,!\ZT)OYaIB8kfǶAcLLa墼-Jpۇkԓ}3cWwn ="bQf+[J^/ⶼ>/;@j~~_D-3TM)LB6< WLwp%Ŋ]cb_&Ys@tĩ49a7aI?#%,oE3Spsȼg1&5%ݨ9Цfҳ]%]Zs,qݧB Y0 `x4:-KSrh?aoԦ!= ߝjBp}O=d]d 9UcQWs X >{LH=0; P@no8}r^TL`ܤac/qw&Uʲ؉oQ7_H2wO;|!љacؼ 1{tViXE)b` ި=Q9#W^rjK, 훗|o5![\x1ƽvDY$Nfhk k6CUDĕ"+okm,rRF]H"A_z#&4܋joi[єjgIڔ_^LTzڻ5R 8Ɵ׿6|7ԧ!v;y*[a#hxߧֲHǯt4<]eUh""c5r}4=j*0:}WIa5~Nܵ"87x\ ZC-24S7` "FI+zcTQfK_m$p_PQx!α4Mɉ<)rFO:Uݾ^XL$zXW9]xjD\/ {0\g_F7΁hT8b*(t#ܐݘSf`᪆lM{SVjdOo>j7Ǽ({yKJ k~XTw<籰t(No r iG_; KCɼ_<ǐ;hvy1| +q^^6Wm6hτϷޏGqMaGS m" \H<3CNIKӆdF~ѱn*M֍ )׉$74mݔVЛ1(4u7Xq<)Lu넱40u\R~$:Ѭ IuMڧQ1o('  6AAtU"|CrF g Q>g ȼ0TB٣J]GjD:)Ut6\QbyzBQhrg7v{^^הq(XexWDJ$Zqݻ$y+_59'齘.n&waɟINո24ĮGREѦ3c%뼼p\6J']v贉ݧh/Y:thT2gx?3u9t4=Kꜩ* g/j|7hT WNG)ᩤEמugHЈ{hX;L۫㋠)l|Qy0^T,D.eg0j=\]A#ctl\2IoAZaZ9)}tehI 'oBz;B篝)f:)!a6*5#8[ ٹo~L&Ge /r ; <M6Oyޚ,m 1ml7o`rA'濧Uajc B$R<'*zv$+@`}kg}Wsk+FJ| mCAͷrxlJTc߳66uf2̦4 @6IǨG Ug^0I`%ӇM U(أw9a:Sk[TU/9`~̛$_B5)mig-Ff1T֮m.Sy=b\2 -bêJO@l>ǔZG@W&؀\)]./'Lۭ&¯Ϣ(9jE:>$l6)- hKo+I\eE:U.S2$b骭X#K"'t({zp<1dmJfGz?ZBCi Nx6f y 8y7H7,OӶuXZ(k ۏ:X5Iqyͩ[rg5s+D PF]l<&G4D(m ~̐>.Mm hVTtvyރeXG%ӼBOGΩznn"e#&m֓9 \݄otꈢ_0ES KY[5Nβd{¯]dF}0~h_emhkCB1+صtṃorg)do幜B(U_Ŋpwە *oG/1OQoW챋v9SMtPQ>%fLVPb99q~,ILe!בY؁nvsU4V&A!d%uD'yd`%"u˓ yٙVy"ao 5IvO٦Q[L tib Zp:<=@B*CVv]+߈!eR{Xa-_{ | Qa<[P; "fG*$9R;>X> ǺJviCl0:P>nWbAd~MXa=ұ,8k0CT׉!;s#H+ ?zy}l.Ԯ x*^ cf ɍ`?y{}K:o+P  #==_UhMK@!)Ep>kƥUյ !&x S!Hh!ie[['=\zna?ϖ~M'onqm^J:^}Zqb<6sVJHm,# W Ӿn+[[F)L\eYJ~ǐZzaWj%LO[:μ++*?1VL`G"+ic!=8ʠٽF/.֧$ })BwykF((p7K8dL\׍ky;($aV}kj| wu"RAM=e_͸kp\TS(tpԡ$Հ9W#>YpXukĹ$:| ,՘4w*& et׻ZO cV#2Ⱦ!N3mX0ۆ+o6ѱpzkx,IcUu6y<=ګ  BAt _t4Á +ۙo t[r/ vl翇H6:6/y%Eyy_g˃ c>AK?B5ߗx̛9a?EcM+4\,?srx6{ JS@Cchՙ=EOzB< ~ˉsګY+7=gW ?E{Ptw}DOzu6!)0ߟd eOY8Y%{&f}G,(5HJ&Z(CԮ2wf}uyP87w 2M^a!G@uavI&@`݈MN,.M@cj*՘Nxt-{BKZ3.,t?6D(Т D.`~Lu8Z2GEvLD_,~GoU`ƏQOY82t'qID7NFUJ/'3Z05}:H5#M7X&0oDZw2(qR0vAx5=~pxc;n*b|W |E- If*9i&&Z"X1VNh2󨖇 uLї*t释gT~Wԁ_B1L Ey^b=tX~Ju:u6iyghX V%$դOkUt6h{$[ &8J  D BS"41w,'b${MEK _x_1t[Ѿ(OPڝ]Ȼapͨ]/Ȇ 78]cZ HJh; LtkWzSI52g[9]GcW=\}}H1B]')Q"98a ݇CU !rʃ5 ktyRoKS>-w}e)G(8 Y"ӯJpBPXW=~Rܨ<=}O Y.}rv.;GrJk߇{m9{Zs:;u+k< s]Aj -tHQN8Ϗ\~V S`JY֝RnK_Yzݏ 35)v2#F&XSFѲ@D¹ 9d>oېcrkX#"38%Gyt\Em{XKĸsR.u.iyz]}8sVGc~N oFv`Psfdp9NŰ;W_l& N}ӝ%ScH&K Z^LbYޠ,c:d愪V'SslFZXn+n3{r Ѳ4maQl(B_?__qZ+Dp6š/6$ btu܎x\S2<O $~`0?!:WD9譁OA1&x_^ӵ[mIp8Pūfd'2"-@EuC/$(h  Ū+)IVD+6Cϧo? 4EiCk_ az;Vb) 6 %oF0za䧜݃D0,㡊_mVC!=B`+sy+$3S6yE䬹<ed)aq$bYaْ~ ,2Z~qX/S8b/nܞt"}%76BӸ 7u`}ڜ ءBӻ<xqIԙ9 A*7P]FR Y& $Ǹui8JH9m(/"H(?ʋX+\hV{s!mdֻSsFv8g+_-ܚwãS:܅>`{w.j<6SJDD2G(aGF#g e, cՕ_qo)ǔ D[ֻ<lf6 N p%-6K#BAz%Pe} ~vpv`H=uLWбS]3!A*nj;vxWb>mK;Nlz? 6=1-U3!k)&a(G rwZ#Jzq]cIp_y2ۺ QbG "nӆa1VO&2Y4#!5Ҿ^,'na.pv\0 aO_KKZBn s)QW@]=wp eT%LW)-\,Yk_7Kc1oD;ѱu We-~HG=?DF,Uԋqk'~g{S) bs`9t-_M]n؋豛&uke gf}݊k>OCx1 /ӐfU&<%"+a4gaͽZ{0WԶ[].E j Q<Y3I37fjvr{nU&dag@ u/o5rsj/@^XLhP?%蕡N2g1 SˏCq]kzC7ѾR}{0pS\h=y]Hs#I<igl6契gL/ dLrvpP+Dfώ6}6/< e :t;7/VyiFyCUЍKK|R>jA/חeb/Ď  xÄq:&z♁}l?ӴClfDzSS;1^pKg<18< F|!m݆?'C}*%0V}b$Z= uHq/x1&u]:R <6mwp^p<`d10H^KtqU O.Ttÿv9 2t}SȇKsW]'Z5!8)}lo3G0&}upL_@_}k{?+?N3?AP. i3p7 IɃ@0\ͥ "8@vYq|Q늮*+ZO~T#k(=z: pLk,]PJz)@RTogfe0x>֟fAaP sk$D6cO5J bsRn9cԁ{<'s&i{5FԇjDsV(.LcH$C v͜FT%xES2Q`& w `V/SE}.X`Fd~*u Δ$_& Z!}TWD&:2;BN4棙/^ohP@e; Cpj#uvg<$ѴЋӅ@{SFgKN0N?- 5%plJS&Q~!9]/ނGۥwrreVhTCZr? jc(A#J; C9hRņC1B6AUԛlFGF9Q$wEW"FġuY^0\]-T\;0wp~7| ] 4H\*c|zȢP[Ԇޅ^{!DJc;H.j^$BJS@`}fL#ΫNM-}kca^U_T1􋦦DDaϘ Nʠ_;>Woʱj;bQXVʬf35b.H= !@ns &0b^RC$-` af&J'ڻ!(j S1:UpfnbϯO,>9sW/3'P~N@B,^v\~2AiҾQ'XJ' J`b)ҿ8qCY1#!z+n 7` J\!#-Ss>r+;6J}*6uށPV&3PRnO7`QhC]ZҚK'JxvCF[ oˮk՚n'+ T~5#KK|T7?Zj5h4+EZX÷ZI.gh_U?Wd@Q^Hîu,v A&YsӺ5QXj7'kc"};<@OFo?uZ̧Tڠ Jf QK?.q0]C$_%+! a*\,ۅ`1nf刑0ėvB_Tɺ/3ѮbĪ134ʙӡy|aᷦ%` f GqC섇}@Mm.3 G|D9ߚm#O/@8;ϣo4]wڒYo7DfX^M~X7e̓WٴgHQ)0gΤiAآ6>F%vzƜ99Ots( IuKk"BD%_,mse~Kۖ Y3ps(YO? [U*>i8ZkDXXVƊ8MѮx{iy7g(K\zոPNz6raŒOk($:?S]4uQA_ӾSUeſM&(_g܌wVQX#Ý#bZrφfw#ejD޽`e=~2SXUNwIW ZY̢K_Y Zr?^D2ɇ뜦s,#)Yy2).Y>1 Ʉ!ܳ% w?=%͞8C^VgeE& Ymڈ`f$X C}lk]ă"зv6&IF ?nA-0I%O7>K`Tkr[P(SqE28|EXAXu9GՐ N`<M; j I4nO!5W]I_ܳJ.~Lxv=Rg|]- EU-&]1M3D nĬpBap2MD0cV 'e{Q6;^Vdl !y#B?ˏP\nk!%)$qT2L"F">}D -vN:P=^FV5Aŕk qu+Gx>TJyːpo{qMdziAPHvzk{QD0&ɬQ+6|))spRl7aTI]G,M} ʳ˃'';ՈMjKéjkc+1t |Huȱ\ >?g Dyx%Zr$4Y`(?Ly$m)ٞ$#`B\ymo]b \}N ԯwz/ 2#:ý+9=R; GcGdlYiRNǵy(;#\wGYH[U$qxcf-Ņm֭jxI\ "p})^lwy;oFe3 >}B軇fp*ELVɘ^ZQR78m_#fŤ CK g"n-la[r9Ap|{kU&sj8_?m3X%prJ?%'hr&ZzbswO$H60YEE֪b:qMVN^R8}0GOt4H T#\=L6* jGl(P@P]"Ngq1qX砺b5c}. !So[GB*X}|3Q6DK']j=QENa|$Mu.`}cB Š@Kd*લ)D#g<7 $hu/ifwn0iEg7wAZݱ*wҊ<Qt[vOlզ`tcVJ!s?6YQDX)Q2,.xxXMLxAњab$˜c m&bŋjBѺZojdNX n~$ 8GzF@OEa;pf ޵z4װɠxapA,d.g?s|S|®C3z"'X4,]ީ^ѯ"R4_eFp%"x 8u:" 'Qe/vHQ,$,-rHȫk,Ld3Vvu:cdeIHFIbl|_mAk8 `vH4ʢMԿr(b': lro[{T2w2K*-w(Bkj{NJp7Q5Jk^#!^I-o%@ATeq-8I3F䀴ZCb{qĆ]Pmg$%UX)o(܉iJysiQC $q܋nc;;SgY//` g\ZR ҁ曣bӌw[w_vr*ֈxfaQ#D<),`ѝ eOJdW,&돡ft-:?S4W |\LjֽhAQU$RҋmٽݢOGˍ']dԒ5JOHf}O37V֭Hb;Yzb'7x'Ku U3J/+؅ts #K%Mȗ@ V134WEmvInG Ap PvI^Hkq8m0VYY{D]9yX׸k8W3n֗g.w]X+ 7v= Qs8M!j 4)Q!cSl z@ -s$lz_|mvl%UQU`ӕ$w8bbǡ.% t!ȴM"oi9OI@=RV%117s~yl<:NAbp".2-wjF>_,YD##ƛ}Y]ǙkBmmx@=A53zztJܑzF@M͞v/0P1C w>2itBϑV]7K))Z[s̏I.2XImHJ[8WkW|L NwJe@`;h61r)N}(ddh 4M͛w~B[yDwhֵ٥tLZ*V>cqDL7m@^{TgKAN'R|cg1|X&}3;{9ޚE0*(8c#[ Ҡ{-ݱkv{;ǠB?T b|$4={*vV:AK[Pi_w^ڑ SS}l+&eQMC5N,MQh2pJ'MuR\ƴ M{DBN_w#(|`ʢD0qSbΆ) cU KuǟP7PPIiIױVT;%xmYEVʰ |Dl{CҌoHܨ|,M a`Yw&FeۧDd~Yj]=϶g6ǯr /ܴdȢiwH0g\)"[|x ̆~1wh1kcۊA[,+ݜF~&!Ff 5GhaPeC5xrSSdPVV Cv(^Xo,m~BKNp#%u{Xq패%( w2 1IgJMdN9WR6NTƲ?WFdh#`hX̼_bd1~Z*֦XP2{GGąuW7B2[G4'Bސ®N$&e ,ʣֹ$f~7ityUrɧlbޛLRSFHE~Ì{X 3J KѫzsZ-%n oVqIt~{%\3LfR 4+R\ fss̕l[1Vm֙秩5PCwз-d2N'W/x2\X~; +9ť}X9qԠ/2㖿$_4&jX- \ygP 79^誴Hrj6L0y?_-E7NXY;2drXJz)[6}ZLNfxȥJExT^ES/kop֝8 %#UցCB2C͎-kWPt22HTГ'x')~lKOVKT1T3I )br4W){Nc}l_Z"b/Wj--#j&w%~7L&*ln{dymP?*Mp㙍>#MoI4}|rY>xhMcP@: J +nF$ m 5"i*8،evv<,)M8Й_yo2[d: /?CtAJwެәL|?PÈQMdB#Q7`iC]:}?&`9g@f Nd|9=+?~ wq* }`ڛ` xj[NAPAAO<_.o%{h[|={ܩ4<d4%@1cyi'/J?{!:i|DQ{(PLSHf0HK:\y#]0> $k%p'K)^v8< XE=أQh*O? fU{Z:_$Z|"H+v7v$u=V͌ ¹cEUNވ~mSF1PiI>;A f3O )VTcڹGjr۞Eϐ(tA蚟/ )N 9%P-Ox4p! i7l(L~ܱcgz<P_t FZ&uTWIBc3{o}gtrM=p+l]!жcf.:J(P9>ũ1=!3rP%IڴsϞ=ORKy}T/h3M}Pו$cyь ƺ0"tD7ZW,oR7X 0Y{'@U~eOjy}l넅ݒ;͵a >q|_?`ITAqm(KrʋP$̸0a\+[Z`[Ap /9ӽa+FƱ;{uZj+lADM1A.&T \M>.l ΣLà&ǀv*ay<|l&75.PVWlmb -YT<y}~ G[X,7IMw]@P2PCvmM]\Sz`e)Cfqbq{|5.U02JBH#漃g蝹@@3;8*/8~jS[ʗZJ'BoVK$}R5LMK0ORfR5CD2^*}O:YmaV_~x,"D*='>}@G 2VRsðjXU> ?u&m8MDh[q)2Xx/"ϙzu4%Y! AϐolV*f1_}wͭLLF 2$d=.+iAg Zk̥z/'⍦`? 2ԒO<8 |C9=,-x,-p qYnlxF>V6n1uו s ~vɬ?7wL+2h}O K&^&LO%V`VmgN3g/SPR)e*whWFz ]3?IޕZ2dsVb]]x^J=ZP`_` MKD5@.bQASp."Y% G?.҆7wWKX\))>Yf m6N@Vs1Հu%ҦC?͎ayfO]Ǐ3˓7?d\f Å\?$ OH%ZK\=+yR* [cbѹC'i|07Y#k⢱im,XgA:(a|u0$9맞~v}iWꩋD϶; /_Uu*jWss7P w`wr*e\,b3N`B~Ɍ@KXɊƼ" +2T.As8)n03?>7@LS}e{MNWɗyJQz@f8T0ޮ€s1p@ʣ”ՉCub͉hXh߳r9RZ7 _M!<a??5cIj'p'搦 6jNQɔcR>%^6Š<@YQ#|hhAIrCiv[;SCdP mY܋>^4gn*JIxrȧidpCwMV(Qkj-}$4\{>`'WWtI}~& p!VQLDgDޠn^^ ;;n;Axoy}d~}y&AGFQ$uQOB9쥜NicJA.E4*dXR ۔rzf*w%u 2DoAT5ر(1gAXԳn1LeN3v(i7 A {SB܎AE "hr_eC=- f5Fn'V}5ʜ{w5Xn͐ 7U3alZyA!۔wT?+JrBQ-Ug7C &s9”ڿix f%TPjLE$EDsWLoUJm /sq/x1u#!H=i|ր9ApP/q'7jܛ֘^J_f˛̧%<u4)eoOϒb=Գ3}o񽸴0nb IE6͍(8QT@3l$%'ߔum썉eMZ(+IT0t%W6RF1խx𤷆]B#ylWS`Mp-$h\d6 Dpyݒ!R) $1G^ o;0buVr(DS_pݟ"x:ml ӰG"x[KUneF=R g"PhM;nXhP7(4n% !|yi={| Zu#Y|Rzfaf.`Wy߮5.qCJ<޴ߘL9n)lhupz'K`{ti\3QJ>Ol*nK+PBRMV_7EϟsUaD Ybo+qVIb\,dkDm(ιHC̹7``dC)4H@9{8QXj,z4&WQQ*FX<朒]ąG!r9mL3bBΈQҔ,5 --7tVt;84)Fy@cd_Ʀ17H;W`cbz4|)ڤY1s^.a,cA@i\4еtWO+j;a5f2їBi WCТ ?9ګnb- ǒ]B·j 7La4ڲgaI@A+J:QdSY=y'RopDTŹ菍Mw;@ '93W_~N=(G >Y`$ń?t0|$TB @0f$ҁ^3i5Q}Nb5+Ĕu`;tdgނ`g*#T%Dح9k집[/ːqaH4w$CX":8fi@aaύ6-4Ѭ"9gZv&oqпfH?jP&qbdnv5&O.dpq7b Mb;#{9ppNgFJ(HɄW**O>y光IYpm1qtQ!~ϴÚVa!n19o 46Zti1 xq֣[#3IO}H\c?W5N.) \l%ITztZ"E&om(.w$9?L֔v-=p*qcu{1Æ^sMoħ5d"!Hmo(p=ʢw%$֏7$; dE:oٲt~vzaud"3Kv}ֽL)]ԬےU}m]e!8#eq;ol^Mqd bƢ@wk;ӍȤ׋]#4m~ KAe}гXs .Ivw? nyvኸ9X`+MVpnqs +&4V?dU'sE^x/3M-6U>ڐ[j 637A]{nZ簑],LT"8N3PŰa](I潉2VVvVr:| *ZCu'?=?1)^<`U}/6 ⌠d+['WLYͧ ՋYi"ᜫz~+4=X+ט,y]xfEjPiPo):.r%[nܥʓAvUѳJA˥6lUdF8 (A* WoG6ltʩjI ̓X.a^̷*u^)r6׹lfzf~J7m[Zw fu޽^>Bw}8v ӻW1 &S lZȽ#pk@dQMh>\ IUkX Mm |(wiHKX)_%4.] '@N^ޡPKq6p评6ipgWY)juJ{͛NLaUG>:Xʘȵ1:SE|Z2`b&* U}_?}590EaNc{RR諽en|쪴nG?k)]Mpwb9Ii$`H L~X6j;=mNO "㉨.ō&~t*RG|ѿNPw>FcsO HG?]l$BLֱYgď]d  *I8v ^>OI8)6}W'22C|\jK O&21 Yf0,[H3k0 ޝ5Z2p ,P>HhhbI7E!Yˋ?d<1P3W{r? ^oi/iźFHUW`-;L*秭ivq_`*},+]isÖG5bRp0Z(OS~C\mjqnsdz.=rݹ釅c+/pϭ?u=75d3 Ĺ́,%1> w&\sv|k5/nrv*QF_cM >$o#Z%˗W7(Rgv~jQtw(͗b]E\sBydg*_(GoGWm,Ѓ~dtO  LI@l{U(])>5JB!;c/N_˺ƑKBߜIԃ&>39{!g) 0ZPS6^5[E*A'rFv'r>hӵÄu%%׋&$m`8,([Rx`4A]_]lwgSOFؾ-f8YViWfop~WPxf>ŝFS 4+r\7zuCuT(1|G}*ac }}c X%yP 7u)u;ܹw@5%|J8kfyn!m^Z^`*;Qd&eT&Ŝe@7Ε8`^\p[Cy)IubLn2hSq4mc,ɗaUUp@:Fec9شx@$ft){{Ji O"ڃBnviD$lLb'yO6  _bҨvm' $ }Ek)+U0ɏL0]=;پ,L |TJ(쵺)*:|,{@vB# ?_6+:%Y>o{מ^h4+R`Ũ.T,wK(=0"VaW3|cyd wtII/+];ݘn |v#4"| vOf d,t1,k T?nMqU^0 [ Q1sLNoz=äyC~\'pM# ;OtCjsQ;c)2L ؗA?+inN4b2ףaV.]d >riRčМ?wk'UqVhtBupBC&nCg^V*T쓻A=S3u\̢5A27D=~~^ 8eft5mJǷ9s:N,H.@0&sL[D2JQ`lUnFt5cO:$zX9f9xϠ9%.? 0<="CHO8Ëlz;>dB.o\n5κ8_kinϱSӬa=g bl@|`[njBƦi˖^CNq X\j׈ò~i Nn ք{rvnNr]at` 3F3a91sBmki mCD!Ֆ., %}c|Ɨm֋?!TE7-DpS\L0H2-#M_M3< 1RnT 4Tٲ ,F 󋣄vE-ݤ5G{ƹ Kv# 6)E'fGwڢ̀Osy!2 n!91+ -ʾ1 q4xO,*1h&Y¡Ǫ .uD k\I@EG#x3+ɺ.WkcD)nnk^N$ȓ5]PHq2aIr?gxC':dOO+ |$%$d6#V*AaFU^6G+.a9C(u$p#۸-3)uViԗnQrzC$u BՍ& h*@`pN8A*+w5':J}?)QO5 M(fYD$l I@w}2_Ng>};K?Ha|ꃔ=P j%ZC%-"$^5pƖfBBo`#kHB+GBRFj=dܘ2Wt<ӜϺtL^FLj+ U/=0S*6,g%9&Ȧp0@5>Rd; zti&u׻{^lNo n@rWYWзꏙ1$x#lvLfu._x禤 2QkjIuN8uv\<}$\m^nɸu$I>b[cpSn%:7n-yId R+2Kj]H:mp71 Qi|+/nУZ3fRSXE,z)]1dധ>wgř;SN4JjB̰垣وūDSh\k^+k`#gV϶3Z?1!S3ir|l4L3 DJ%B"S?]ҧ~q~=|ɻrܶ[P8^gv!\h4cSTŤ7T0KvCK1bx΁< f)mMdjS%,,*ܕ6Oh%hv0Vz8[D,MWF8>{q*pWp]v= U4WbHn!)ݷ%`l3dZƠ-,KFIsj] u٨/G!<󐋬y0 K H/X  ps+6읞NWk{m?X\6x>zͬA  zc!sIOFal!c7b$a8-yH`7cУΕL O1pI)ЫM6U:U+̐oܩV䬤rESM % H'RT4X=UKUg[?qdz%Bgh+T1Ew+ qg75Rhp^0V>ɇzB x.tbJv~[kBvD0F;l‘ JM k. W_8 ]{Ki Wr2e<,@O+I}y%ˁ95tizv+^xvFk6eݺ*-`2[Qf_5"y(sn]@82G(96la-Ho3C`~S[Kfqw /);ˏ(wX|)N )w`te'oiG, ENP6hHH:ogi%:0zjO#4w5mLTȱO| j/~;,GX&'py>$4k3'Y%EۂsPUp^@ƹ)fgnGZ|I_"Y>N+[HSGV>?Oj/o ; 9E% !W}}ˁ`QH8eV+uGs^3Q/nR7ϊUn-,vn o j;xLB/P;8=Y)N;꛲6ѾUjo&fvə0lسTQh;I1WΠ2̥#TWsc"F\N_F) q kڼ5g uT(,Oh- Qm(!I Z{M"^"]ԼLz{kǍRΌY^*HF{eG"|FOPxWp@LD`mOlh4Yp't ;ad[ՃVߔAV3 6o.޴EB68 HvTEىsy n̍;_x*0/H3cIy>v6B@%6lR{\PC_CnRO>F$Qv~_?`Z1;2u:i4E-H6,Ǔ1-':y4e|5<\̓Xnxa9DzU#MڷocWV*57DtڶYs9Mw:F@*ߒKTsL逭-S瞼 '׮ .^ Pe֑;'+N[J*e.͌IhB|4 +!rHP==IyĭaL/\0ޯy åFȕ߀-kj–n^: 5!t.RE+&]bLIUP [$,u9$ =ye5^ԇh5ϩ;230m=>7hP!S10 yF.%L!fD}+N?n(mUsTӬB v{ċi petgυݑ@'l3᪌tWH:_zS_ wZp,VZ4b&{VUMM |HWOG7!_D3Pg1<vt듭Vcx*~9Z5i_ 4O}c)ZKd:{1KiK MpEvzL廻j2`^aұ+i*h7j26cN LbiENY?i>Iv[jGo v4D@"Mqӹ7;m9v/^;It})J,Ai!g̕+qhň{91~3 Z\:d*^2&_F(P{ۊq ٘7a}(D:}M#>eJexnSҖ*cؾQ͔Ozz_*=/9 غc#S9T DH@0jhCq$snn|NGNX-Ck*n {i'E=#Q>H 4F(/ sַ$Jw/1Y-,2TS^uIIF- PmS(%t0mD 6Y}&3a\>']JU|ߕZhpha~T`n1NLfK1)~m`sv uR9C.e^g)}8tYP/&ctvXCȺjX>&S@/+ٕiٯAՈOuCv|5~^ @vk|+ܬ \d(QR ADVn:tPT@~u1$yOಕeۓM{ˌc.Tހ%~6K!RnGt^ ;On;a#y@!t O0um۞-7N0qm:n1 |=qҪ> u8dY-f(_Brߩz1 NJ\% O"m" hsX-^Md 1vb&=}8;Ʃeg;Xe6߶1@};}+e f˚Ov ,x .~TD0o욛+cr5 :o.]YfB>\uH3L[Er12\i,m45`@xh(X*O<LpN)P)ɣ"2X}"R]Cor5"\AW;d)5(?`*ql-&rFr4zC7_ܖtpHwGVOC[Xq~jL[n Q;7@p,G2'{Q;< ,jzUK%&PGG-1XPԏQ WAsGhN= *86\mSK&'SUFx@n^T <Bp--Sʶ-]h)o|&ʫyB+pS[cM7!RU Ť#:Bhp#*  ?T X;r0+"jś.+.b\ yQJ :%并;gdn!҈y͟JW!EeL y A"pt|%tj)#0%@GurGVs9Ah";Asg@ZZw#P`5T-a5wzdzIwNt z۞Q/'E/+_l(2뵏::Kٽ?FY7I=ʘ Qb3s<,rV#"} 1Ffsx|_mh{&8‚w< M=2Bt%}b^=B iW(,lUGdcC BGy}$an9 V9wSCXRa8ጘ -dg!F萻bd:ߤ$V^ :tN^QKڌ H0w=]raI}(P7v[?l[jw:Q$=Ck3:ibĭ{sBT<A6œȹi86&!Ş!La$dܥOM7t|S3QӴ"Fq!TkXǺ9b64bv2e l N(Hv&L$JsL9Ut%V1wHOx+F{ qnz#&lx$JHmwwR{l_ՖڟA*UC .u5VJ)F-SGw~bANb]wJ\)eNvOO >%[XajћZgM-;/ıy0<:HCgİe^z#Zץ&jϞ8Z c77^^Qȼq>;@~.6Jv5dvfDG\&N}N$g4Q~)I}n^˜1c^fo!աO0RA4r8)M}] * +|#ݔ_0|b1Q_qtv>h%Ks0q<gMq쪟8j;Ehtu"t7u\?v/{y~'cC 7=v\A2%`d^ +mm&|""^q'0\ гUNM؆8wl_($K)szoV|]DMK4Q*_WR(5LPMiOő'>\˅*=~jx[f[5›Kaq!},&c^ckQ҂rziO{hʲdh^4ȁ2X\D92Wj-yy;5{:`+Ba5(O[8\G#E{ƒa͢Bi 27b o-_15iyd3&©@sؑ)t˼'催\fS;8dt<>Ub5'xR9Wudc:brL\ͷj`{7J 45 b=< h-HRɱkHذ_T>Gn漧`h@_z|bpMBPSvoTNϊs6N3>4_B2oj9a^7<R|fĜ5Ү3LNτoCOW_BŸ>0T˚`51֘=}*)n9۱b)"Άg/ŧsy-ܘ<YDsA1kvˤZD73|i=Cdza#3('2oc4nnD,ٺۉWkT ar8]m{52<7̄L;'F-5}h.l|ɢD?$gDOA&)`C-FEcq?ׁA=.JAE-P5*iƍ:."uz},>/OڐSsn_#'330LXlD?اPXX!v5c6jc9s-i9o h﮵Ŕt =E p"BdKk[Ў y*Ɋ:tb'.n^uQ{2Lt> ]0zDJF流Ztҹ 9$ɤ&ץi#ELLr4xY@'GxhʥcrcanL* YS0GT5F}0Q?v6WGlv(IvɵJ;o]3I xaލ3>4n@p'ld916Zġ>DːC2%x򄷑q2S)f"gZ*z @ r)N."05iHE:,C A\jtÜ҄\A =#o rxN\+ 7ӗs_9<5rI׋o4rmVl?~ @(ɶT`'֗a@uaԟc3p\WqTa[hՕb',Sѳy4f0',5vxX<@;Xw%K~ H5ba-U?og؛n&<H.]0rpʾ4o;mWa%62@*1cN&ϬKV,Ҙ!P6n$hOt;A9<'K3ۓ \w-QCfdQHlA$cd,?ώ &+6!О ;uDfjx)\dߊ?wȴuá? /ԛ%XN?v{R/y$ 8:QxslSC\wP LJj&>w=gs_%njHYti7/?r9I(hJ̮J͔&r]8(~DdFW$,?>l,V`ėZcjdz %S~}wq:F]*PӘ|3\<YszݐQ}O/̋+6ѯ1fB @-ݶ.\˹g+ 1Wdu5*X|pnkV0JTcfm;"֠g\|$J@mV:\ik2R% ^j@k̹yzb@a@ ]7@Q8%;EY"bόƥ\Pv <-M88E/! o5aaWD/.A]QvW,EhAygbWq]Ye 5sgB4LVJ؅0!FXN܍*9ywJT(T]~b\!wrnfCF4\%9>f NKFC$yl ]Bm٧A1p*ʰt YP  ۓvHO.Jg;(fQd /_^?3 4֪R"[V44E0 Y,=9ÆGV"}pEt$Xl0j1 QD$ Yޱ 5DRȌ9|B;zz8ػgMGpS+IElCycllojyNu A*˴Z`mfڅmMK`@{grTb. `Lh*nZ|> 5fh|u>fq2x[rl%Of9I-(pldHH>ԭG~*67%TuL&)XiR՜ˈ&o~G+P_dz8X!93xgw`Ƚ$csNG{DF8A]\Gg@ߙՁD.orTUKiK R[t5+(emC^<:<L y|0a[n0)G3؆ 9q$V(p jg}~л"arBMˬbw[kD4ZOF=+#&-ƴTh*3*dD'*?O"ga4%B4*"l07 ZXݴmVK彌-kRi*_ `I]1 !-!A뎵{~e  M4#tZ+`=%'h]Q|.^Pp^f:sc [8B8d*8YQȩ~P+ APH~=p%SlC~3bd<. nOhuoQA~R0,1OUِ5& %R,3#*LTaa,1aB'լ8rszH!䁴h:D)HW嗧QY ´oGObgRU4?j!Ir B1Ae *ʂۍ':tz#vMy`||fd>/Up ،by8xK̃_GgJV8l߱rr~MtƖmIb^X 1]q=Fe^2 xA|= _kz,Q nw9d_L~(}(Ri'|?@;IzUL2$id5`\.KCIq%2$I8$f.8hJp%+&۽De2CMI2s(&dXnw鴐R]_8 Xؘ(FMQ֖5&{T% Q7N/(K߈ ĻӸ/xh+X 16DͅnLO$itg[±'aH},6ђAgvH;Ahw=*baI7]לh+=ܷ͡;y}%` |N4_P,=?ʔθߒ_\2" ˱{HpHhd LǐЄ_nuMJM*z3x=}ez8Oo,$Ѻp5Mc}I Xf2Xq?iHh/oFfi$,"rJh+$*U%zokv!\H^ P)( ":އ |Y"cN8v3-$ wZk_?M/ mC y%]uΗrUu3pcNŀKrģ=>ss<T҉ൂEAL63j>!8 H)"Ԏ@LRzuta"b^4K٬mG@4I:3$YY>WhSr y RX9Lln]/pPԽfv[&,T`8=®k;(&:ER+xBV"]U۫[JxE WV=xꧼ^¥iEC0P |`m~%]=M֤$6z;@q90~D1ݕ5ؔ7r=Rt]o1hBOWI/0}22rO/ fA <|cWBjIO3S.= a 9APLjV^"D[.%*uT@v4"ђ[RHњkPKbR'40N-U{$ jLHmb̄_pΪ5 J:(5:̀d $s JM޳:,{~IW]1_;6/QF%J&*ȅaTwVHU$h4~&XJ؉ݵ';iXPY8 uK=yE[]e0s>O#ӲqD |GrOoϸξ2yCvM;E8ۨբLu:Zy Zv7>/{Jo}IՁz'DS2yT %9/(>DMgqM _b'G?1+j]'DZ 4L5٩O 9"P?OZ<ʄaITXj`sڌA|iBynVSI7uR %|^3*@0Gba(gL Y7dp\ OU-9fzpjHR˚_P%,TXzB)uؓ?b7 `7`]#$U@ ~z֗bVczGW8@w["HNl@iv~bX^X,?2 X($s8!.-IeKQJ(Ň!$R%n*'fM[W{eү%r}}MWf/9E@Qv$q 'ԯ:Em)CiGDv&)澫+sU FFDuow@F➡SJB`&f@#-}$BW~!VKr1W=cz'ZO;q[u*Zpa!Yf-\QMpy1ᛚ`A^LQas=\}*b巭ZC Vj6ylT` fݞl9Xe@5?auI~|Qk*1UR޶6[A1gQIZ}?.x_I'D/C-Ղz-jfGL#m&4uƤU\CDM#)VO2<6ϣZS4#T)T'59ŪB| Ҫ/JkPSƨ;˞qꋚK py'/:>>z0)ŏ2iPC+ &MZk13c&\e' ~ K! ru!?wku|@62$`|@H"* Z۞[ԩ0>'lc2rwa|Xj}bJ I8kn ,14i&6WkzR}^=1RVmy>ݚMUЋ&1plXa i udWqHb_E}P(w<,Kp5Z8H`z~KQ GIMSð D.;0@D:#@(QZa!2FM{@9F<<;ho8_ 5iEoar;ltZJf>s3|kH L/$nXeB4HVkɫ^ȪrQաo#>z&H/ҧ[V$rP @C{=|9sXkNiLKJj.1^ &ޱtZ ٛTrB(< >ʪ/m>s)z%t@^Y״y}qjY3nś\r!ek6Fp2.╟a 7.(@0UJA$ɭHs5Z}(Pe1c_vL-RG?>/ۖ\vm-*IbY!H}UH{X; )6,Z';ޱq_sݝn_LߓrYA!YUmi1^ ipMcOu se!Rp7aZbDFYR vU hM3)H~٠-}ԅ&D1t=e_Lub!I9[D&_x=28D>#* LK-'>k֧߭.):;gĮ3~tZo9 s. CѧW8XrUXDїӂ[}:ܩmfjd,Fdgޘ-0Y\_2k0_tC_CkҌF`B*2[y2X> b@-ϙj79Tp+' :;ۼmv u䌨]X OY"Rt |tA1pg7:g8k~Wx˒= zuD`~}-Z ,(y䡳Ei»6zȲ ~Tw3$#<;lFSfJv!ЯiM> R‰ŒUK+Z]qʦұ`UNmJ+0р/wHX.1Z7T~O˹Z6 cL$Gd14Ԝ8Ҳc% w'}C3TQ "Y|1/nCpP[Mhd^zMϗI9x*N4&4GSCfa'/9fA75S>5"c$鮊@OV w7!jJ)W[_ ҃V8]hS/5*ؙ}+Mۘ}$'{%*&Wfp6v\')Nh(fDM,X[Ɠ I9c ?3,y͂%L 򟞾k;sr2QΈ3鼔O]P yf6ޞЛV'.)~~y3$LOU7@wO72pf1c,9}o\8Im`kB^ǀ=)Tz2xl 'lx8&XoǕpuq"TI_NOeN+3$WiQT0ExyG Pn3EPur.I8ڡ^l UKh`kO~  eOjJ {? n+G ^MS/7H|p li}Dʈ1pRy=mvYRlIH!U変+ꑯޔϢ (ܚKMi ¶ $}k2};dRĚwIvip{VVU:ޡ{MJ+QϭSȘՋ-^m68d+n@$β<V2Į{ hZB^U>oKQuwP`ñ NW_C p -Pʭ(Jh?v'm9:T5;zI:T4DX?;n$r&4ѩei᫐풎FJ@VF^F!HJA`"q_w Q0m̎~]a6q7|o#j)@ =6+d<$akH6 |4n`yNy=iLs6l7=\ &)hٳȼ4&X̃|'_1ݮY@a&m_O?@W1J-& [ R]ܭPh/a3:st-em&uf%I5xŘcEU6[Ga'W ݇tpʗ?Yw8m=;{}$G-X1rFxఔmKg t퀯ؾvuuY*_ʦ6RE ZNz;Nc'$1 o[Mhc"t֠JNIކdt3P,,r/[nDN&?Y)kWĞ[M<#d~3ٻMfm7(*dbE@KwI2_xan~dfJ3 2wDw x[h'֫Ӈ#fk:Xin4mI9K.X%9e4){vQ"f q  .~'JEx !ϱ~>1lŮ >jVMKm@ߗ0lR5ԸdI~Ƞ6dr.ˢXV[>>xx_` Cp&YE}]FA ю ӢmC+SM Ih48GDIVS ?L@lsPAfcz.l9P8Sn=A *\}fa&w4Yu<-s)y|;..7n صV ж ?JdWP Pmpoxf9k}6"*_AГQ]S\cI#׾Oxwyonxr`hQC_=,~=^mFf+ѳ \3i6m2g vw)z<#xc N.M1^e~ƅӥwA A{l=pU%Ɉi =s[vg'QFrlff-[ܨOW]c'Ir/>گT B6*$j4Huu=ЭO(#5>v c[FbCq(hNWԳб_`tzn*|`1*gzg|!Gp#cl4:]1C];DK]yf{uXadC}銤g@ 1u)],~JOBKŒ8oNBYԸ|~^ZU`d?ΡX,Ci.RK 2L%9pMӈЙҷ^Qǿ$ lY}wWbtTC=әRu*!ZK.w+p(shGH^eTv{+onN}/!".u)o{O aaKq!V4'+ν!OCb Y_۷x{> A/?ftS篶+TXfK)xbipGWc] 6E{N/`oFrڲ&A KUi˼## scudUJ o mOwF Mx1zNAҸ2Јb>*aGKցBL0҄&c ?_& LU$HWɋQ衇-E!F:gܚK(0JֱxENc4%n5R>yw!|Eqm%}- Fsw0㢆!:(*R ej)7̵F?lbwkROlo;7jiX*i<14o O //>LL60\~e1-(sC8Wz_RmEsȰ${=rᶏ3h+M3&шbl{5.jA1ʸ^[/)A>\mJ5{9}Q3N2:k{[+(yc$drʚ:v +Kz%4cN7~HGEk}榢I̴cV#tsVWw۶ zJ?3_dž(^W+6|/y!N71(-yGaA풫rZ?Z:,k75A? "0E.bZ5"H{R<:$ذoa?'tOG8gҙ LCODqn 7_?4l ?V|7ei\7^]UT0md[?49_n^p\5[3: ,K"nlYC+ӎz@=NI2~[ڬ_.-y oS˜_PkRr3֦ΐqtZ( 5{Xf*?hEޓb[H:S}Pj"*q! sHfl+DE?-!`ϡ?CPD 0L ֹ~_f=BTHp-L$n7v9.נKD0_F_W3# X{o8H@92~.\I|͎MdevAEDT4SyKt,W[E[>cuU[Jyۢt!% /-Ĵ=dAJE&a^^s'f.VausGE85zN< E?.yr$G@ 0/q|vrG[B%Ph6oצ$/Ѩw4,E[^eTt\Q=F&iY'9\c$b[sk{ 1ML#{ 6ƢkAwq+ Raf5>^Ni޵of^);K~G=2SR(?y*EIes](I0z̾I&8VݘQk֧u_`N)ϛmQ9׺o !`x'f: Wֽ׆>53 nǺ_bi\Ún/ Ao䊘Ka 7.ApSH>ed#h)^Iυ卛+ BБSmX|dKnoZz+Qoq` +7&IwDpEXL)9Z`mgS`#d9\#ށ7 \3v|cit'\g\tDclÇZXĊAm7T~'tSz3~ NW#p,uc'wfd$-|8t'Vꗗj )V bzu0uZ0F샗[CvRpd|EVowT?fOӎ[2>[ug]O0&qt+6>a ~Uz} ; zj[3QtT -He+ϠMxih:Q0Ilu䢴 *]K #ӈ6b+P(лW Sh\_VQm@a^Oc 2ߎ iuNdΦ-3\(l*쯥"(?6$76bݿ^i}k'F`6d^ޥg=(NH" (dB[bـ;Ah%Ө3"|&*s˼%#$-SDYn`oŷd'qxćSѰpގ fA^.}XiT  Ox.ݫc$THPG D mnB%ئG~56fFz4PԔӻPMvx~8؇j?'F[PȓZ% ܸV2Q3xm12!O5Ih{jwu4`Ƣ@SƯcڋjM@ xW̶<霥؊RMiGaOWף!z$6Uv͊r  TWyȋCSX QSo|%cp,eȕC^>ȍ6ykGB! PFVbd_]]Ȍicej_rDOt WLķ~9Ȋ1eI2yӆta ژ Pr|m70 X$O2z9FkYx YDw1X~tși#vCG둽+=t|qagŃuz?̡-]Z@ ͧ17&nΙ +2"[QdCR ƶj?upua}73[|Fy#Q&w0B%\rm j1rn*q @ς?aɈ&7Ti<)Ol&&Wfa g+@J "2[RC8]7>!orBj;hUwu8(<#UCŶ`{ ) &)(%0:1m'CʼnzIp1GÍV~#T;vK2A#gPPKeAiF843 F<׾@^GHDvC Q<6EDo!d_XRN{. 2 &"xOF5!cYFO;J)XV"ly/ Zc;[CʒP S8FٵҪ=g,.1y(_/Nڬ,ngW=oNש%tlT1]6Q:`3^+ĂaAnDg{? srg&sJ]gIǦQdw7Hw(á~_@"wc"s*Ksb=Kho^AžAgR8(5&;љ7\} ۜb)gK@uWqGWKmy]Dp]BͼV!:V VNUgҼ?0$L_kAeܦN&)9c L4yZ"v"{7Z[0sNi _^&YAa?߫j^ ĵ1 o㙉tYB*ܔT. 'hAy;l@5Mް>˵'' #~DwCHIs`bš(N=`ul^w1R2Șz>QׯJ-x~+tCI8I2^5^`${h#Ib$kCwޑV h-a{؋ϜfFnQwqo{767V r [W\Xx$wVY^h4'edޒ*FK3.IB9D >R˷ *+|Ϧʦ]HE|r-OE#}9f@zJ!S]kl1hڳH2zr*XNpKq4)|cn%~ ,٧-Z-4*SK!^yIPvu'? d2Jq:PI*Aٝf=h@7W t;1*pp<'.btrk~}wB` 4KuKҠBJ"yL [c>X2>r g>W.wXUl@{AQMʫ2 .v\E<#6-t4 ܜ[>NV} G܏",*]|8HfPĸ~5%CߠINK8 !0CEZ>}eiZmglkȉ- :_dܻ-w92Bai3HNؤ~NQ.G8mk:]8w9q0o16U ymXb׍{t?T@-)}#3ё?/3wAEӻ Xy:WP`;3Q[7Ѻ.Z\ZVi{wPjLjVp󰧟ٚ^H/^)y0 #VN@v3)s$F+V{Fs1]G5"p9E$q}p^m-+81~ ElZiVyCU7/;}֍/v R)ɔE*@̮5~8TCc}!f"NlJ9oCuʜ/gɻ˺-B jRoͩJZa>5_^y2izԫqn38lDɜt2,Mh"ʾIlyׄsPyO`OrT=׼´P4˜tgzy"m{ǵ#yW{13T#.1?<-"N%ߕ㛱G;`jT.Z#z5 $B0Hm5/ h^w^M\S9 2`\SL[I(#î la @aVD-˚ hi>|Q’'Q1@c/ֶ(!61i[N/Zyļxt5g @\cA\yj.!]?~3uY7GnCUl| C̵^!uu_Y8^_ *LtYxФvcI2>KM&w]*ɺN~!$㱋{fME/Nʂ=\l1H ەc ٚtRTOJvJ=.?K3V<(-^9Vq6[-WcLi) ,F (B$7Xf|ɗrS`tcv֌޾.~Z `;Blig@`k:al:s&O+kv ,qF! ?F[aň/>%?ٯ|3@e,yQJBr23Tf@ F&&O+ts>zx4~O#] ?0@)R Igg I9Q$1iAy~ ˂01/G">jItGrCt~<{ r7BOv徘_"{[N)漆7LmXvqte|Zk,aeC/(fdK;z75? Ӏ?)5T[] v?\]LkEMG)&nbMJP~:akuJ'_+uEZVA1¬Z ՚pNulQo>)CenR>@4$YANJy%zt OqAnk6-8>go$XʭYAK$2SZo ,YKߴ@| ?J Xߑ>{I!]a'yAѵBU(:6z#64}p4=qS=WKx.JN#ݔjxMBBe+ tJkeol`8WQQQ&ہlSCi[3EӾtR p)M0\(XbhJ!^漙P_#o`8C 9ƫSL x0xY۷@'Z̘jʓuA][$G@sA`;cBV6<%_Ts_ r`(:͐ i[׶ٽ|zLo*S6p|o=S-.݈ʙOD`M*!IHX.*qj9ge^v=X9wCۣ(# uj!QNgDSnHTJ{R!\@swش5Cm?fI6w |őDj!R`I#‘/6m?ŘA\3Y,л졌oVCc RYBPs5{}Ȕ01˰YSG m.Q d.~^`xER [Zme~qLYjpj(dϢCҒCkdŎ=T@5Dܜ+ ħLaD 61LЛ7ʭFo#E k֬Yz8֐[uNcRWa%\r/8L'F5Oa6so (DxPVKm225-$ Ĩ{6:NG lZO9 ę]1dUFZ~nIԻJYum?Ẃ>@w1,o/=o}gQ'! a{<4hzBXF֯ФkOy,?莲ʽ@זC`+KbDa-kIL9HP!U[:X3X\$ry~y <1d."{ {j5gCeU~.\]qd9)!7׺үo#c13| T$ĜkJhy#iX{h%sRS4~+ $WJRRm4q`47_(PD 8P8GrdiA1W>gh1BaENf*@g$Ge]*\7u$W S-<`Lђo}0 %Mڟj )_"z¢-hJ@)l Y ذK"UFϳ+%9{5/L oЗt\vpf'47k,w=⨰9ճ#tP jdrK$l0z 2aր-aiTӉ) (Vކ]zu}|o1:wa ޻)>\q8+յ=^7Ts9j@_ѺPWO{HN]%ED+] 6H_nbcAv^&S{oG6 8!$Tjr-!]y9Ln}Q\s3,m.4 k$ An7BKA @V grJ"dO A<^έBh2{H(j/w,gW6m} <(a^ ǽ HP( 嗶{o`-&cWb }ސVj4X'+ZrGB R[n&5a g\A-v;?d#H ?M C¡[l-<wY] h@R hJyǓ.l{q $iPiW Բ9jY !*)Nn r:իuJ8yÚs 0WS@Jyڲ!G.g"ۯ*g*.dZ@ sِwƯ_KW;_sΩ`qh9Q [\苏 0h&P(zc}a2Wƥ|!@FuخjZC:;vi#C; qZ ds=2Vf2F"{>/yOFS 50Ӄ4e`ɠC哟Iz`FCCk L/7G[ee U;:Ġ):Q9$Ӣ8CЬ" 0'kZ|9ϻp@i#"T?9ec@ A;PXC=pm_HcO&:4q}Ila"u LJ\bt$.,I&La,6Q6}bS.ʗ/B\%Krx--!OaWg]NHqeZBM=m97wmU'wu%09 ;~￟ GS۲3U̷:&=d(rs?x`?^u&MҪЧn qJE"dketm'x_Op04[յ$=:f5?mQȜ)HhSNXq{٬ZhyPahJy{tkdY`ͥ>=%# LrC=~`9 .TeTTpe`7 ݭan XꙖ ٯ 5ZEHes'nDhJ0^p+(ng;%$xPLҌ-(E#‰? 0 .ȚSa5Iy#gS5}AFy쩬Xץ=J 6鬲<4jXե.3:ik'dVrJ -P0/"=&:'޽xC9{k4q}uӷ#R`n :Jճ㫃HX[ +- "J o\@dDePÔ U[.g 1u Mj?F^7lxQ`nbbk,ʪ$ 3$jؾ)Tu^|KySݻH?w$CPSm*7WF2uBI.!^4eNTJ1}MxےKc~+~HC*&;>Cc; z+ &pͻHTz²][i;D}+(eM8@jw,[G5bU;ˏ2i?H6k> DR>$s%qX:]Hh,w(`:@Rۑ~QP@L_-X&q}W &P<{sO2{Gȥ8o`r_`F Ozҵ|~-t׷)sXG K nEcYFҥv GeMOF^Q>x߫*^u $U\gT0o <( L){b.]ܲa J+ 'w yr랟1尣%1'xj1d0 fZAMV r4u*PCSekn- R q̷숀f`H]k&h]J qoq5^ﹷm13|H<~O& dT_BDvHxX 1Pe/ "GeL.F1HL,ai7!kuFdlW Tu">;NCyW>fhiZ6d]#} g  ssRUg<  4 HXqQL"Tg`/9Tn樰5 8`'^t?Cjs>Ņs\(5C%1yڪ~WRn{v`[1_py7 KJ,aB Yԇt@O#|e%`T1B'Đ7JsK`SGe\}l 3K>@˙w} ~d"`71 bDլ64d'w;,(yP7~)X}`)[5>/`yeyC:y%.y_w'C-}~p;xfo*mP.f &;Hoq, b1RQF7OhQv|qM)!A6DTXu$>~X J{[P؞#=1@0r/@; 7"y`~JnS|p&b֡7s!ŭUd#_ Y{mf p:oS^-uyq|CNcf#,9Oҽ7_e45Պ6~do:+k&cN4UmeoGHvzAa#x|Кv EMˍ7Jlc>SdG L|c{%SΞSS)x3Մ;ߟR Ur@jvqa 2A;̺ܽV*'8Q&C/G0Q)2XL1W mH*\A-#AYSۉ“ˇ;?t"}ÂZ<) d7#+9 5 qW~\Ro:"ʓ\BHb>ש{̪߂|#*"lC4\Ggr88C{ {5bVAkZUg 4~URtx,+wHm|aOM'{ Xh5iֺuvbkC`ƙce=#UXmkSVZv_:Z fhEj heB?.UKi W FE`,ܡo2TmH3KY;j-k(+Aq-{)<|SaQdL&=;A.)0/ַ%1:;s$9/v6a>znCdMf(^Z2rk<\-,LB=kB 843'72'hV LS w ^wFS4w}mYO-J};f4_iP9:3P 0,cdl'g Huk^&‚[e"<XU[7h ̂br$_%$eI,L2Pm԰~LX oQ2~AKvvHcl|p*r]wt+nPUE"}WIDiy&_-;"dIsH-HmXƆ/ȥcB+h* |@rҶGH-bUr{ŢiS;9<2JM#bx1*~?>GfՋ3C *Zіr`U # C6G;K`:a),9YU vK5wTVF8Юk7*Q[})Z*߇g6>*Nl w=2kns o2] '9gZI|1*eWe{5 [xBc=,zn-تb t"^*:yU`vL-5s8Y}3I+rR/L#f5jV2m"P[A–bW^s |P=e9ӥo:0u2\pȈd SOJs.7:KIcQ[dCEkhvGzgxҗ#+Ew :-:tjti;^Uc6;b0^QJѝ;6oA5nyh,ŗ,F -fX6?ݒ΢ U<)Q8Zq)ϡ_Xgg}Ww#CND4] N{7/gVdW:S':H1M\wQ+9m>{'c#T٣\<ߖ&Ԗjo)XO!, ~Vu~&\TDi.h7Ol$nȲBCL 5DE0?5m I3kY2$%3N码~`rAw+挧gS?r%G@;IPчOĩhGGQ Y/W鏸#`H-qǭrѧϸW&6.Ÿf6j0 y[;g9Ҳ"RR ty%Y}>䎏a{ 䄵 }ĈLe`V )=E>iշ?GݲOGD!jZ];3;ʒ+/̥8w{.ްMS,`Qƿy4`-~j65h}{My,CAccMە^>\&;So WUic+/@'˫cA0pBJԁmpYN N;w,|Ұeϰ<7 -+VP^N&NQ*nY(>ݺyWbZ" nM)q . ؅P|]k4xC燈h=hd_,nܒɚag G=@1 \9!{_ٻ.%KN*U.zr^תJ6ODF\ۊ]̊&9*vؑ=ս \#m@C0u?]0և+ :fﬢR#+k ;Ci`}Yu'Cmu*os|hOЕUyó\RTf3L7#A.W1PS)Μ fj<0ђVNHTK+y;yE#POƭF-yaR 4>ޚXFk䷏ BGؖMd'FrIPS ΟR)=Lv\JxZM}F.ko?eVaT紪1B  UXʾ+V/3OgL&v9Ay+Zq\3|2x(@[Mh뿉Y˞(4$g64KGg?{fy ΃> Ѷb^H %k[h)hc޵(D&QxBU/րi8Nݎudn4Nn@fݜx>h с\Q4h]ݎV"= DnjGou3 ad EܺG(bQ7u%RFaV@-~;[y2"(qptQ_yՏ Hikz<]6ިihҪ$VpK㶓Qlqn9_UcƑW;s!j#W-dcʫ;yщzz $|@uqtgeJ\VJUtIA_V :=(f<.P-`l^LXoq?ƾ0"=坳,=vEYK_YZZiA&3VcÚD>z+NG.;R:D;4I!WfBG@MN~]`3[Uv/?s}0Af6'k|x9cϕܧF7Z. K{-/HR-Y=v XBw2>6G5 2~Zl=ͥ)QsLķRhB ^rrkMٵ|u\k,b:qӺ5xӓ\eTHI+G8fp{Տ\L]@ww͙|1[< +ǣS @#cYFE:duiEE/?^-m'种O:H`|cqmfC*i/oٶ!ȌYv|'nat諂 e.5`apaV1c4Qlr $Xu޹#6Vܹ4bL:Io0|or1J޼"4hPåJXX*F#PU1|@QZ`ۖ{f 7C#ٵ7'?M}vIcp8Օ.KӵfO')s.$ǔI'HŢVh,fU/Qiբ^۾?ͮmc֧cC Z2S:K&gx{Rhh4Eh% ]zKN6Rq$*b|.6K:czAb+Ëy{ kI ^Ĕ҈qc:oĭKf'A57H ^ǿ8ĵqR7{zϴيj?B3 x? mZTEUP7F^y0TM a;ob5nvz2{aGW˂pU>6z18^g:fre ]uɿjpآy t^BvKrQCQXx߉h!!y5.m~ʢt5=4 |:p/gn.u@7/ps/{ŗ'%M*WyÒ7nco1fґV$C]/Q!oo++j:8)X~f<4>Y>-=7Ps,B/7%C1 `@|AbC D. EUAgƨWv\wn#M6)RlU~IXOJN vHk E؂/.բWlqqGrM4JBƀg#m>Mw(Xc% 2ls"," _Vܔexi7BpID#8EυlDPr&|f9!y ̄wW`1:ڬ=u҂ %RJ`0wlgkx@ 'sie@r~FT/g՗JjJ(l1.!aApbY '@j0<CiRd@;6u. V4|p-[Tihz7 iA"Q ;,O~/ e1*i%G"@kkdeoo&E` OF(su98ltӯF.qn` E]Hu`: wVۨrj-lI&O50ZŬhba%2iP ߵ@}r5x?Bq KQQډS}#bMEx.%c**PQ4/cB|˰qp>tLz:}IT6ƹ ՌcJ\7FZ7CS&ALvזMp=pfꋠP6$],L(=z/sP.3?-W'K; $2*ޚ-v+\4 r(3wl K^ .|熉#ҽ?}{~ICu|\4064-zvP-B r۶6!fn<] M y柉2W{Scy+秬*"bIDڅNG=IR8Nrzd(s]I No)PwQimW%}]Q5,&ګz\ ~}68^'%n%QJ'Y *(}m]=1ّcy&P,+~ Ճ0&"POEDRc1 [c!s+77[xWD%NS&"`дU8Dx4!,#tDR<+|pCzI%Y6{m6_PWPΠkA?`>08V= a1: R#≴H6R@ugsIg=qJkEf.ex1 ةUMx`|U Ea◳EQLUWaCaYAЮq MY!qTTNSLjm&aeM<ܐ: .İ ^H29e^>4-9-Qn5 pn^`oA@MS~1#9`pT~&ˤjZrK cqH_P9IVV7w,,R%(>io-Ep(< k "1eģ w~K2H\#(a#t ʃ Z 筏EYJSA"#5iO Be eeZ)D>ucOs3` %~}@ĚGB9˳j; v ud ʰuLYy?s`+)m!"SeQSuZ=w+X z_sل0՗kK`UTQ7!4r4{)jRgu bl( >n5%yH):|ljHw20's5ZUZyX!jö mѯN8tŦVFٮnZ4Q@)1K,f9 8ɂu/MQtj\'Y` pB/Aoɸ8K\-QVH”B' ZTÁnGŃol1QK|kdҽZx>ߢ&8>M]9K/bGJ>$nZLleq+# T*.^ RdDe$g'o# H~9p+9ho"#ruBO߷rdnKkͧN/ d`B%1muЀ7B<$c}1V*e a7Z fz;ZMZ e3 BYьpkq1~ţ|?duF`n# Fc,/7{^n'T͎N@f3P<)G5'2c6pkj'K}7]R+tN[{0zS=XL73dsO=J/ʕ5ioC7p7lIc!hB(Uro%pxi2Ks\uxc@xK#]@/#(5icD(9qp܄*d{;ۅNdKVzw O u^s^bd#h<3EZ@4o9vGIؖδT͠mȕXiL=Y OU~Zd2$!M{w@Rhwm0`m+a;'}' {V\foRĦWvU:vmh86EsT̶{?#i霜zokPe)/!iC( * u>sݜww/+H1ze 9Z@$k7]maox˫+݋64 S5~rT9Q\.RY+'t^m̒dV3OH]6oQ1p¹}`-˒{@NfuU6 9Y7P3y9@XbFJЫ?H0VBq*oG{*걭+vtٌFE⋶B5 uCrL̋❐:dNZZbÎ1?Y:N;%^=v8$ -lK i$4 pHiAJd=EI}L V,/yѶ{mܷL10+*wR#QEOLPt?9qH$dێV< `RWJb= 5K/tɿ#hhSx[D@67܁GgFZUAŦA߈ p!cf"PVWX'o]I 92\{mP2!u6|7r{⅞ژLS$)Ȅ|Wi n9Tq>~Ѯ>\ҡRY%rA*w Ebzz6sA'@5);YP&+k>K:(KrƢR,jyn3E{jC6/*34;.qv*ڀ[$ٺKPN~q\=xȑ};;rȼk6b̲ҋ904}kߍH荲]@s^5Ð8%e-mGp,7z54hazʵ W-^lLg$ܦN<"hsq%EcM垞?qب8;6;|"ڍ)^a-{ՊF~4B2JIh`7Q4NUA.X,W ;nf V:H>P7D6 `%k7pY¥%j*6%0"PWڀkg+ܩGć%,L>^}tG e/h>ǘsX 6b-GFsEU@R)G*#"52?F~#!5SPެ G7MVMd ,bO.{|׊ 8vf5m&b{3>GHL_S@;F2 ^''(1XNxxmOi6l+ҩTK/68R)"my@SgicQ$1O$pbGo֬"H,bqnt,k'%6*`UVm|8Q3bXBY?`, ee hOFc@c,pDо8 0%h bͣ/?|Ʊ+~WjL8KNBյC3ՆJwFIQM}eBvp7JuujSZaCʁ9c_1WۯYX$@13fk@ej{ :ڬ0Cs}-%(CljmZ%ujh?0j\'DE*TJԧLHɹ5m$0ڎK3ݰEB))=OVb24F`@O;;5и Z竈pDxR>C Q<HiMm4U1?M5;L(.s QޯM^+I8_@}d +bݤCقJĒW2*(Z2Ezhߛߊ9댎f&Q"'q&}$3CQw:N4ݺhk@?lk.m ]j>4+) 7fj2Њ0^ݥ[9$!eZImdNȆAkYYQ._F>M_zp {TM40GW%W;A>*d!N*[Aʛ /|7%IYt'|۶~m7_,N̸I5)@Qх5ID:3O+'$} # Fz顴4zSu[x" pFxrq ]7 >U`?$m)@i3o ^gbC8@ dl htdVĊiQ\]6]b՛H]1Ud0 o=8곏ٟWE%NjP `Ԅ;ۗRdC+wDL gWjl~OY~ψq4Nta@=JP `+I1v{S1~#Vz2fNbE?zoK|HJmPF *ҒDz :Uy,:ep %Wơ5롺Dn&/O1_@@DM@#,*p]x ^}ii`%=VϺOvHW)FiUcSn9A5gD,[W(N"'ף3Ph?JOft1xޘO? ebA fTCݟ`\wkzBKGn굹u+'=-QÞބIiTHxpEf :̀"_\_hUi-x}AW/D+L% &ݳ4h:u茾g>}`0F\dU'ۀn:|q*''GID(v ,5:kP"6k`|RK#* 3GAγŷwvâ#"Z,N$Xj ?o3Lw Q}X$+U#AK&5n=ݺPi"E}x17|ł*Pޣ8;f%?'A{Twaa}ê3 9 ~JGp iV!0X͐5PR~`58:0'g6?.>͛K6/:|שИU8 *XẽMngfqWPɪ"#!@?(q6S:8c7B }KW_ynm1YuU{8tYp $c@iQEuA;+-r(r2U<5D[8yJNX$Y!T h ƿ_a~%L$C+ |/R\O6Z _[e@ GW{Nt_9-'' AG!(j(Y2%^37Ê=4+M#Az{]PLL(xK40.{w)dږ:JFvID5~>.]ɛ7Mm#P³~-SG0̈Llx4#O~4Ӧ:1謪t$*Vqh#g_Lu'7!)}3>Wtd ॥i!!͚Qb4,E3|w#(w# pD`{{%ˍNo w.;2yUfEVuy2nlk td?@Nk'Q/|^J_\TfVge*o SɅ/pS噷](NX#dʄ`QY.zYly5_LAǻZ*6&D? 4 q" c۰1Vmy~ޯI-՟?;+{i?52K(dpB.d w F zL=;{zU q9'!ҧd.~:cq~~jS-ח :<#~xj2ѶFԚ4xs=4JD=#t%qh#w'˪Ո=kamhd VG5*6a̽w\́ E;Hupwh_Lױ6Tkno )R:#"Jb7̰[!|rՉT7urͬd;ڴϸs_ʹ2%vXm?GE:ԝ!|#cbK]][9ޅNKrl5$j;A+ݬ_fI-ؗvH!L&}gË3YbMaxԸwI1Ql3"D3?}`Xr} bxXIB9'< ~"5!o2n<`U8kr7ͫy4zX *+]SpḭWF1؞J( RtZ$)lmtp]gY)4z@Fg!S@َ^v?`͎gnݵ)z98 A>ocm>G+!~"~1yF2=)c?`T8޴} GAt|9* E&&7(Ğ30̀&h9.`Ca1MsX$UG3y1Ӣ>DLZ^ 5ACiI*қAZ7:P$~͊{فɓ3i(CʄKF STo$Н!9ߧmVyA.hO[ԯK=]2[< ۈhεQ:x̗.`}Q>KBRl8a0p(S4]U8?%'k)7Q-qr Rl m:-{s>9Dw?*A#FFB|ḅ~ĹOċ)PK <! n`(H!|Pe367~\\.ɰ =.Q ى/|\#_̙^DeUI ʏ"!O%*f=eO.eYt*VNjg ؖt߇uGi=;{S 3oq# nDq2 գ4'fNX#X&>xHђ=y6O +kE UxMJ %^&=y&>af4W#{s #Y0[kϜI78CxqvĒb}}ެ SKOFFJ΄*L0" M"@pv}vܫЌi^Z^Vr&Fe''L@AQM.-*ni2Qf<}qW?u[[B|Ma0X?Vb9x 9ȓ[@)TC܇$2&G gݰ]ƺ{‡KYlOlwPNmv9 IEb m>'2agqNy[յҖ)kxy\BіSfH DO(W }?b;h|;4gL+-N7Θh{}~\>R~~cA~Uĥz„]El?/N4hpbz<|X/<؂%t-<1Y޼bh~L.8q<yL|G$W6 /0mXK ް *8lY=۫+y3qbJmży.Ї9Ol˭+'p5:T=}s:/4XG\ NұAW|C=a yӴΦBORt"w1ЃmM```ħ0E8* hcj~Jc{ҕ0bYw+:E[8R5~"$AQy" Zou^ͤ"@LT%hiܟdI+pD@`OgAzvh ՟QNeo#+8RbL5j3;^1M*YQvs Q ep=I:n Î3dۧGЇ0s ofټT>bĂ\lJLBxtyWbX=8gu]$PK_roz؎Iv8-B$+^d~!5Ji9ׄp Jm-$'Âi{g1$2f.r[iu./J&tgJ +ɻOSY/bsuҗ:@=E1 "H a #ȑ[C@0݀X,EtAQ!_#3CZC808v]`:ӈL 6enG3l\2tC£/!|}y)O(0}^KV%ѿ#؎!JFFovNσYBgwB gd7Q}J)rq$tC<$R:ߡHm-No [uJ!Zo/ U"nP?qUkm}rHyASg/I,tP/5-(;q˄i?Ty`H09ՀM{r7 T"ЋSz50KD/GOjcDZ=ݺ'ӕWGM4oin'JN<5oT -wy.$рCݱ}пI@?6(f! ̝9WTR?ߣ&=ёO\ sUئ)W[ͣE7g sۀz3ΆإS5sMDe<Œv|j=Q Ԑct,kI! Zt55/F~xۤY>W^ufCQ(3@m,$S%so\Qc2xD!DUDP PBqzWu 9# SPI6Q|{l &7 1lD^s1xa \>X4FfNaiҝlNr"$_%}@Y 9-o ť,镓'C\ߠ/i|QH˔.ZT7cW-^y>OoR֭ì({!V@G `am9MJ9"Ve7܊KV!UK24·΂WiĔI[6 y}lF\>cmpE XJuzJs=Uu|װz> 5% FqÉ6G|U-pK4ko2dN/iGg-EjtpFʞn|+ g{<ą+?sї$!ov p aqA6 :wZCx&˂Ec}NB=gҧ eQRD>o)vds">MOğwCL®g*־8~ 6%\?dߝIԻ\f>D8!ZP="i,mBwsrRD7R2L|8׿'7s<'2E X vDE} C`_هv~P|P|G/:ы 1bA-Otgmn?_̠dfO/`1 s3CPN2hBn(k,Uy瓑/5ޢc3mIWVO̐j:[՟g޵xPwuZ"$VD+ˍ0O(.u81 dY՝k[w Ce D3Ur( בߘEDfofs ?oiI)<81Gt:rd6V/_̈́mub-0~ kol[ΑڼtuR:(?M2"V)MǍʬX tzcsEY|&Wk2{X'Ԥ\ ,Zz:TLɔt3!GeV$i3₢gyAzkw5"Wo&}yPMźl# {b16ZSOg,^jb)OE-`.+[UϨzv8ҜPeA)Hh2A~>3%93D#TkQHB8S@+Ӊxmg D WF5 A ׄx=HG$x3f|^KH&XUeP/u|Mxڋ߂6L@ v[p%K~ NnN#yiJ`3r-,%m4?1"SY-B(&Ou=G {)+/D554(VfwN%< {/~):`G ,M#01euQtrxNE+(LOTuc1aB[(G3tRĮO9{N3(ۏf4Y[ҋ̤7 cn 9pBoDlBYL_* 9~ryQb\$&V",vއ7[ZV2+{KP(Kq#i7>]P't/S ^SJfsS]QTSU &(CAs~l:fԖ&P,0جht U'@onEkdϋ,⬨;TftWLkt.21Jh ?R}AyrIS'&~t g4oHHD^60zQuGw@ 5 Hdf>iKYV|(C'Dwڞ+Q$2iŤrG~Iԋw/cЃ;:Qoy]5VDn@GBasAoI'?$nh&NJA׌(Vǻ툞Xghڡ7@Bp%L&9 꽽qA3$\}"e{j@q3pj^Xh Hh{N.L@E][}R9kzg>1mat=#OKж v Q}|D vQ&Q3 t0/%@Z[4 <5+#l;A[]`9-qK_;QMdn-I&Bq.n/_NNjJ$&1j.`c44R%UmbxƩ;[JTFߑ7K"\\46Hr7YEH!$l' QJyR\δ)<~ŲN)2O!2R<ܻ_g9pܦZ=@@$̪OT]EO.!'5O=E K/~l4(Jş@egړS%p*dfQG?Ġ1%a}2Ǎ >A->E_f_)s yT~m@0Z<~XLEكuxk{rj_C`\Z!qIM@*nVůW#=p } T|4N?FxexJ>(Y;S`$(7R뀊F3SZ@Uz_(8'%BA4|/wESSVWB{ @lǀ ꈃUAOit?i7ak L^q|yr6gm/mC#: Z9-Ź2[d0B"Bwj|HX C9"2]ݗ7-O0zT3?= s+aI\)P(go=`/wv7w(]2&Q`#'>0;_$,?fRub5ʅSQFv{&ɐ1,$0|D S!R+দR}h:WHԝX^BNc\݆O >^7 Q"0BIK~Ac+ r*_ej+. 7HYEwi|n5=ϽN&NIO_HJHbBoCDO~'8ZmxDsQl ٺ8 [RPD{v?5,E8\C媳* UU~E[[&k}O3;1c"^ϼ|(ie)XS|TͧwioxE'&eK:=m z}=Y'us{!] iT*[s6R.ɧ#X=pzibV<3 v3G"tũ,S2j.U.&?_r=T0|wb,\_^3M\!5UU$;5E;o~2/j)=,=$Ed6 8I|JVj<҃D!81;k]`Zd"$u|)Cl#?ǒhƏaRuFBB垵4+UNxm?f 9sќ!^Epou'LbO'vUt;g2n5Tyt,;d q*hABdOHN-|=ve1rͩd"Hz&$ݰ@3ne-@ nr&ߙtyu*B oR-ZKWћGNY<&+O!ކ|/MA1rb[͎fJHÈ啨 hN[ KvV&aAOX'MI1+>z6 H鐛Q\ens*KlOm\?e5ZzW`*%~Gj~np2]b'FWu>JWYPW=J%wYnĕ-G:p>5`/4FnvO(G09XRB oONZDҢr\T*3\'Vc ($0aW u6n\P݂nUS]h/;Vt@T*>@I6%ЩӤU(, &h@iS.2jVMOB& `L,r"{9/W#P-:6uC3<ŲdXk3Y4k f[`?V yT.‡6"6i#~1Hc5yo 0dX.f)6+?լxkbf/*oʮ> r̄y{@ׇC-)k mˬWmy/w0r+Ҽ Gp2,+cGƷFs߉C Ed#@8lDoEqc8C"s+o6+anxqp zsxߚSgw$s/|)Vl{(u9 ک̿%8^rIېY`#e-}|dJ+*&)uS3#s]Ms";YFbv6$|Kz~OLvR}񐦶 Tt0_ p@ 2chJM!S4`m֭ RW!Թ %]Ǐ%g! `>6;hӑ|2oR| }+cG&ίw+FFV4/HjoU 4R}6RѹrlQܺ?UOT^:|ŭ,ܠ5BOr+T1V I[dDF1ؑ$t4ݱwed.Q,.l+8fr mB{^'U1o@d.'}DU$=5':i,шNSϙhb$̇gI w-«rZsHFYfh1ugQ}g'"_<{޻m)̹I21(6fs,2Rt M3ԓﯗp"\H+L8ȉ Y I+KXJƱU @cIxD AWmݵsoO$~?)+ٵPx*WOQ4nTJk-S@ [U~{*ԶIn $C}+PA½Ċ#8ΪbdmJ8il3:ƠYZZtG@0 k@Ɍw&A?Otz^b킅 AfIWc*ςZ.=9KZuŦJHƹ ݿajDebO٧IB%9i@6oDZ;fĒX1Tn;?Λz- a cBmu}TOul5EV h]&?xIS{FAi!x]5Ogp!RpJ>7:t0 pYe5Be([]\̆FtAs M3Ƶpޝɗ"&VC7yyӹTA(3> [i9wձV DWt<I%G˗c8V}|Vp/0$אDH~": y/{ʇ+Z@.PFЙe[OX%gfv;*Bui] +hq g,|zYX&Ȗ~h ĩ[!(쁚b HlIFlACn޶LWn*ERg1!cj+zRN|{-Q|2dX(M ;_F# Qڋʰv[ H"&l2ltI)#7j՞1Y+z5pL1tFGK_Rj={ҎN{L匛JM ge1y#pЎh%׵tr07Cdi;m5?*B̼NһQv{lo/}Ui2lWoa_D +L'J 3)AG. xad4WK6ew5tO^ #iuOt\JKk( 7h,"bL<Naҷa;p12ríȚ'WQ}[y5QJrw|,|:;Z\8& xs(&>p#(Bx/hfϪ{U|⿗jJn0T(Dz!r= u"cQzNx\r1wر2ev Fk 3b*es$1sWU2ч vDmRo;B-n1ww$K{McX&J&l)- Fҗj nk!\|gK~wt%4ғܻٳE~m PldP,@u$ u 0E 8-2MՎ}W=[c-!e'iףW%3y fQӄT^F&LGvsyQO *{DTe-A G,CK f/NV|RQ HM<-iu#2J>iݙ?|ŕSXлٚ]wAh_,-,"=1Y-G DEht 9gY ܉jDָ9Bzሊy5wQnײӲ&^KIG SvB˄3޾ҥh)3ax2oRk.] *$SCr_>*u5 1ǃ@ jȇ5x3q*bUh蹿9#a}ȋ/!}\YlWš {'3S"D?mgҲ&WsIqhڜ\5#v.{B%RӊT(3FBNo|y{1b< -h&ZIj Y ,ҮGԙb 02!&X|$Qb8.O?|4'Ls$qƹf މkH(k .}$ rlaܻ?Bߗ+r'xi{!?z׋l0bx>PlqT}*~o=|y"x$ $VF6Df<+Aϕ"m{aWjJy*9<E@D/#LBѩQԲr:ec%iiUp Ue/zTdCO=9nF1g{\bo^,̞u|d4 IcH d5zclP`Cc}/HFl9gO͙TTYܙ0]< POg5[ UM`*OCq*rqjZݾ h>xJSCWO.B&(}?S8dO 6>YBdAf/%~^wx0h܋7{f/3?W\FY|#\uvKڗ)!f(!3͗?\ O@`o&uw Pᅪ2-;S2d1j K[x 1sZC5*=9orHd鬁R?x#m 1~qϜ}$S+VF%h<4] .CD`+I"]/5#5fFi}!p?7)s7 = $ź?,)F;EM4gkl ݘC;&p 9wOZTn7z6qiw@/[ E|Cnxy;"Up xz%{-rTw*c+@LQS<9M)k:%6Sw⸾y6!B8D@& CbwU֤mNPvSc4Pt0L+Yy8J=_sm,& K^<ڲ^. N=v%4Hc-Յff<@oB@ڨwJħRzMڝ1j}7yڏඑ"8U6zE/8d5[G)CiGU:Or:Z^~ EQJ~鞅 ;5\踺R9;Y8^BQm>-z)T$۱mf4(A}:KjKBǣJd֤<2+.xz\o4~iGSP)nq:BTS8m "S -pͭ׃)"qcEclVCz:tYoۤnbJ+wb,=-+ {O+KR1G!aوMB^DZ\J46eDk$NC?!?.㩶novl4rG!&Tgv*UBģi/H^XkEzy8-`z 9et.MYGf ܎e{>f7(Mo^6cI?dl]w;P%U<1S oߺ06PVzm],Λ ͇zԢ 5mT#*\Td(D|NϗnD:`%%5ϓi#GҼoZq.Fz?䭊Y_x$Aw] H(4ΧV- *9V4˅70ܠP wp%pF<<+Xh.9ҩj?͌>[6UH\5bhW5Vdpl%r4GwK QpqsXG\ҰOF#% O0IwDJ\?[ㄿ"+H)C-6n=fl$]]Pg:Ì i>Iv (ŹjKFr=n *uZf!jAZ?R!!*2\t k 㝳 v*1H1iZ >u0y6\{8IXgGAXL>̟ R{pRH(nvP`vr";OFK $.]asR/[-f7P4LznV0Fy¹q+QyT4Bݵu|,ySp Q*d䠜JU|i :N* d4cܲb0R7s8q:r5ͦ$mSgh3TL~ |,ٖ ^C]C)G 6WFTіvFI4phYhhs2.@ YiɵYO/>zȏ7ƞVfЧpN3F8l!`N:Q6,׾]R?l_v|ݰʢh<{zJOUkXxjDq^fՉ:Pv='wtzPye%\ADi< ݁nk]2fgu9(y^6(ݾI*`ؙۼVYQBÿfl8nY;!s0ǻ_146%S6N l) -B_fx.#mc&X!LebM`ˍ=˻pȩC0lΡc6週Ѓ(,Yf x—N< C#'\$Q9BX;Z#WE#%"%QԦ3  þ_ebz1R ƄꄬzO/ߴMJIlu3煩4pI1Qa.Ut]C?Of=5'jxW2EW.u b%> CoƧ6g4zҏYbZFm)Aapm%jkMfQ\U<Ĥm -O $Nd"wZy!c!pa9&h Tlx*`۝DERB !?d+pKU$Ac K}&}έdRK& UzT9C@{J^lflPÊG"5V4U͎\ nI~]MQW)`T>3@a+'iƯ̒C8^M6Ty0W7dl< |yÔ63Nٞ=֘<'K 8-W =Ĺ3v=ԺpC2RƙX>V.X _,dv4 rY3[&(1)Œl԰-jE֠YI2E7)jdKpÖQQWz iX$Ak H֖h^.zTPsw R&O64g-Yt_.Z&auI,D?5?@\7ǂ=_Chg}䡫F[v.#E"_'{(fVwQ]Pͷ &@F|kwaYztg6+Q)!i SP\cn|ǎNXU?HͦPC33P.8pt"(ZO#7j`-`QR!'WgWzۆx,ǖ)xgͻ&>)y$@v.jY.T+?]$ԇhb&3aj;7S Z:،t|X_4ҝȮnejhӹVe3IOEYzq8g$ap-c< d=p{jդĈ8,"F9 /2::0m<lI,FG w=~$yOszO|aIy8a$eSC-<&#FbWG G]]SG{v!5Qw:_9y%pߢ|`xhDyJ !jj!m 5Q]j=},Bi"-W\ϸO@MǬ`l'y9ah6$ "|ߡ 1ݢ%j.gF]mN1حv=no`>ԥW}icT5'u.wy:*4; rwUqƁK$cwcoeElЃw0GzVW*4Fi*L~;u:)dRHeUޔPO}zH#!ۻ֐7jO2Ǯu zmoZZFYM *@3[NCaK6ߍ0lk6~w_?|2fE}A4bKeL$ 1NCyP ҉tr/_KY4ЖȷEzr,X*vT[L6XQ^qǤ #¥$]c;Q.q+eܔ9' Q]IEFqʀ5b-My=z Qn(Tauͪ Yk?k*God+ qR˰!Y/q 5́զ-W4,Pbv|)Nf-nDc{zhWiТ UU>N! YJ"-3^񸻰srsd:q"ʷې{)baBeO۩vrmhcɍ;ou|l͎3HPlUE/ԱL,FߎESkN]&{z}j2eNP*/=jĦ{?q%DDH%8v&u6N$M,w\~st?$̜7VE%*3R|*LsB^[c0u$04"έVaPt8ܱP >iՈ2DKjlJزfFq(Y' ܒVz:K~țWG+(cRu//Fȟ,=b+KIn1t7 0}H$n.n,P9Gկs<RcjKa~mTԛb}@=u"kz8ZJ.8ԍ1C3^8=m "5l-B ejGTt6X3|seXdg)Pe^tl3y,tN}Ā6r.!Nm:::Fx #+M$e]#eL]ܾX3k5MTmڰ!وU2O]+1 @@y$Hϐ0U&2^C,!:OCC˝`꒯V*{NmpƷ;1buJ0Pe3FB^\bN lQ <+ K幊-t_&B{\*(S}dE6ƌsY|V d&kߥt3.w! &ܽGkp> +ǿ&g$pOzL&# &)]<5lf^lgt,JLDO`b!z[nݽHBګmWۿ=rkN{/cA=~Tz5fxx sV?D1:?륝"ѷ= \j;|phȆS(E@o"~/ֳ`?㪃/WᵊR,PJ( 3]\Ju<}M|NXM>w)+"kU_.MpkY޾ 5h-:U8.Ri[\ͥT{|_bF<˭"/&: qhy\Ba$zwAvpʼnn-$t(X#{{E Pc~Ѧhqjf ֲ mЏb Ʌ7Q UVN*},a?==Bbi:yh˔qRŊM\4U, !ܐ "'l35l%XVf mҟEKYdCWx) ,ͤb1뻚HQ <~rƦxDBU67|JM0K:5΃5{W'_҈ dn^YN֥$8ޜlٱjNFuVCR )>XUeC2a4Erl7>lWF \W![vF(wΩk}ZK';V[_0n0C,uT3/J<pVpQ~Nli8ʲ;!SNdMdEG\CＷ8”qxf&-VNE>&RؖNzTE1/ &9Zp{{Qί -UIE<}6"u xNoz)2wf+-G :"3 ߥ Őn;/$߿4:uSڗxCŁ X "E7,_͹ yuXmTnf/'5"+߿Κ>"BxRXb ‰$h 2O >lUPdBK8cBQ^+)MH> |VKd|洋ysҰ/W6/#a*/ъڢΗy>]4i1ɲw WWTr9w=gŅ;$f?r\źQvܞ<,i`2Ihzn+fFRBi*/t˾AEE T0L!I ;̿e|Ǝf/y@b$b8`:.8Iy+J}5}ʉ&{wGh:x#BcUG,Z2kO#A>9 N2N*+P5# )-VШLZxH)n ꚅC_MX_?_S&E<|2 a|(ON EDIRNN-bz&VQUJ6, ccyTd⮞zn3MYiQV6Ŗf[W<bEط&Set9U3aKũuMGwnc«_Oe yHa/pR 5WoQ#ukySO TYt fNL/`tl рFHR` Z ТBŗ|P[AOI`K2fx7I&_hvA{ XLN!/ ]Y[QN&i[ˎ-6`(S:'s[\b' s.Â-8m%w^ȕ`m9tN&~rrq5wK.HZ!@ Rѱ  H4lIB|b`^F\Ft"~uTF0ӣ4liqϢ@cQUCt{E.]K1fO8 !1# YHF(%.D n (UUv-+mՖeiuT|9J! MuS4d+}мV>vf0Jv[8oיY=`qJSHXX~]O,uFpw0A1;X{0f&QN-@6[pt.遧w^;Wc)t8ژv;\7$5)@=QPxQz0v-?X\/s!48BQ|sNe,{}_xL)I2~ZÂ$"|#\pkLJԖ_:d xUD&Y.;8`<#& +Yq9Q\y'n,ZEb:wV.Pr )O{"u5'Y1NJNGoOsY`^[r!/ZXSx3@>QT(o|U+! *o`!LNݜyXv^ԡp$Hew\@m{V6yKRnyxDR`=}45Prw$5&YRhT)T>vݒխ\:G2ѺwП H7ש&~70;F@Nf~M^VT' 5p kU@ǤBpl3zp 6]ϸ<ddxaDb/ ct+ƷZ .ؿn)ӽćFCNꐈgfb^ѽf"Msh 9Ǜ 7Bm_ ,•-v 3D};0̙G /hI'$I"\t Jo =H.Oe&E?ZRŮ=cT0bJ[;HP P0"I&P\(I5v@2A6p2Asm}V+,">SNU F`vj%Igxٚ.] JIw`,xyoiB8U:h;ȷWW%Yi( Jj떕CEΞǟ|Jz ÝbŠY VK`0MSR,%V,p$sq䍋=2ʕy3=7OeRtb2mkj f>ƝʙTFZ΁;Jp]"5WuϷŰe+p鱊.9r-ocgh롬S 3-A~ D`v^%Zv3:Ε~o:Jʗ jO J/DOF0_W.ٲ m,R*Z֍pqlx2KA0A fķ$+jD!YK M%F`BVa՝̨_JqR>/88Ѥrt4@RX" ZН)9߳['amH unb,54b- K#B_[F7)S1a{= +x9 9V(χs5nvl5⎞)ӉB3fj{L-눆]ѹjhΰˈVyTy6_d5,ִRf# @JDΨ^Fk77>9WoNOX%^i!YU񻆁_7-'i 87Wo"o[WYkg508 ò{JBLX3XF2c>K9;m5J8~լ1c@Wf*raz=ƚlo^WUzdpjTlwb ݹ Ne%!%]y٫9k%rdW~!8x?+osxrjK bH+H2pk9Xf8OU/_>FhTb<_8?c;#9T3b7jaq@f@/$JG6YQ䧩=֏hQX3+KRn=̙ ]He}Sj: Q_tM/uj #'Ԩ"٠ ݐOؽEs}TS*v XC2PBJK⩂ 6Ed Ն'aU~f27{2\|0z@}$)qXq;TZRg6 Tp>#4j܌rxred,ț7iT(3k!2C):LS+E !oxw{#}V6r #z:oӂKyBx`Ad؄_!b*b A 0/*[fKa*W'kYS(WPyoZ-gxrYFt)2ą7 &2NW, k@٣_ȗ {Ij* Z\o<Ծ5 ͠:+6EggP鼄 ]?!yHe1hɄs0q%\=[[_ F>68-G]\W.a@d,ͭ$Ko)#PWGq9 gݻ;#~,+u@b~7taϿ>j]̝YJ^[L,WE_ݘ֍Z8| .QPe'yB4`ΚCO=LwO $K@pIx)ʎS?[?;Z ^ Mw)}s8l gk`o$Ɉו$Ca(hFcVDWV.ǨDZ5'{{HjxazvpBf 29 tLa mmKefd TaK>A,[.Qח6R~eB;~H9q hcyї$o&Fz+ nKWMy1c"y,?O<4;mtD Dk_Phos Y ۈ򯖵ƞHKZ7 5J@^t54Jo5V]Gn a:kKBplIw "f&\X3Q:\!01Ǽ#袞o0WY u h4ed1%~#LڣLCY+uN$or4G[$o[30*׶wUY&rB՘@SFK~Q6#ii{|mp8 rMɅą i?!n+:$(|h'.?a[i /kye>|52P-fd&i^B{*E2?<:=1F^zqމ5~/:3b؃,Z̔ӾIƘ+jfu/K%.)ln>Kj =p LC~Hq-qaR8"$!݃JՃɖXI0Uc%xОy}"&q\+/Zff`Zl dVa[вd7 :cjb(\T7hs0p1LMzӰu9sjDf%kafE<%S__\WnrI+5fĻe9I[tA}BMLd'\^=HHRχH?#6*%H9dEMoXysIpr'Tɰk:к} 7H׻bY4 t&Gznյc-Nld!{2^c@oɒKK@YTH6+N}B2tdv]M.3;OFfM0ϼ겙>9@l1GyN=;\ٽ0zMJ^x&;Yf1z6;[g> )PlN$PYLb zv+~Cไ`~Λ!x.BXyDfٸbnKYB-=P*@|zͷ!B\uV|/_Hߩ15 )ޜHAoZP 4 Rl/nVp=M2M61"$><%cd>,Hbb Uo)> kE /ry=Eff^ [2KTxmF5(7~KdCQbEqpS d:%7R߶myh OwXhdxJ}nGEJ`9`'xjsK+nW{ %+K_K2b`H݄)RbSީ35a+zz5mOqnz4g)-9KF.N;k>U.ʾ t_m>ʴV%b;ՊTp&(gE8qhP@!>;!ueOG=rP o Ԑ ܨnk0, %erۯ_khycʝLj0pW͸B砭e}/pAr~Q ɷ1Dym~6XFjQhG /Jf7%*iw7j9>838tȩ([GӬJP"lQؓ;ldS8P`d̾Z/rhv0THGUH|^چپ7(4fI%/е޵zLd%sȵr,rŁhH~)#-|_ Ik/PNY4.Jlhx' "JI߀e!X0 V!հQRui;]j3[o|%41l(wZ^ڠG#yxm(q $vog ߲_"~^9"՚T8@c7׍kM|>ڿgDuU gt NR! ܣ+όDL ]+"ƒX歭~(aT6QhV؁w[&B?ꐓHpT_MφTMFIvs9A4N v 7#xS$\f2Ά.:.JzoވqFnS\QU<n\f7;r*ꕣ֧ ]Cq!Ybs{&BvǏ[1r^a];jWjJn^Nr4B و?` HoOj:uF/Y&aY UQx7W'!9׉Y?Wab10`)I>HT Ѳ.GpXMRJuq/o=!ŌNsE8j&޻P]l$w#m|=_ˏe:MJo$-^5w]`H ş jN!eM* Upr?|dcͰŦxDB9M9+s;?*ğa( 45L_T5 lLN4GB-n"zC.]0)klIO΄2<#BefQ6 ʆDkL.PN Z TZ %zkѺ *l|f xї5 !5=hٻ* >u6n# :;Oլ5@zơ\-%|SV| lvau Umٚ !EB+(Uҳ  )5APq6(gnT` Y9z +/MfG[eav@Al--fi+y)@]U7"u6q=ϳ3#8b: Zgc se[#F&J+E@m*|ִ ldF͔HVZ6p)f)-}k7 ՚\u 3E<ǤjJzj> в{(e\w<E:cѦ 0@ky$JKTݵS_#2`C}zP\ΛY2J~oj]z4ʯk[5%{3@0ƀut`<'M=Cqg<0g 3&e@f+Tm+mR_z^]GBMPv KF5l֤[v,׳mXR&CU0>=ߏ9;^::jW93-Bj ۳.þ?6iiX@ViVMJjSܭUqХ=["y{f 4Mo0cʙ&̛%xt1[Ø*S".tHIyԴZ:ώRY+sw>Dq:Ԯ!w¾UŶT7/.hAݽS1̧}R>|*һeE6[[5V.tVul⃟ReHEԨ"ۅ(;Uȥ'wd;Ն{'v.M*<_OO\Qz-מjTUŠ˞*X\"$GsyZKE`ȿ"Mc[4QW=j+F^7^r]M5X28 va~&㨁 SݓI);RZ8I(W7sV8O TH]cLOxp>(ty&;O}hDg.I(=Ϫ%B:<^jo5)jva9X@WahB](zWh A{rE}EB̅A@;KW"Q >3; 0;-_c7A0JP#{4b̫}{'k-)NcRn=|8u"<317<}٧R D 6L`?.2AL,hd YOmvͿ B׷iTH[O?#%YUkcSdeSFȱZppn9<p ɭ<9+46(J|4hkx)R9[{Rˢh '|IL9fE%Ȁ9@JNPf&=i$4ox2v`(&mC:$ADBZo١ݭ @KL9ijtՔ CKŗ>YjIH~0lhD'bj.U=F5Ej$ 抆|tD|.ԩOtP<3;Ep]CjF k;jsxhv=F9CPt@ODmUC \éF& .:{=r|!ő`?`I$2J;8մ:~D/<73 dEkF$B5`f, Ƶڵ8 TvwTZc8{[)k'-{L챖{<&Do%mwje?zĤeTve(E?]`2YE biLOZ nece68EklnŴ_wɔ Jx3%(nL߀W }ZWRld `gKyRŕr+tTzr1xc1]0Cb@T_JlE:`[O"{۴ y^JWqKq#ԌwACl;3%34VcEp* >CtK"[rS2^W\gB]3!<P!'tC:lyy_]U {|<Դ;]&.WC0Ce|_BBwIl ZfQ6Ѫܻ~V.N{gf mkJkj-(qFuCWhf„Ag=EaO \l bJy <]7>'&9FIV5cJiӅ.>V32J~oRhR5u=NdGV7ەuF:\3 K*dar~;$h>P6~ Œ<(evJaÃ'A F5 P͓mR1}WAdCb`L]ÍMZ "E-OISK怌C'M9-qP nbno sʟQRqQ.J@Eتɢ\V0GT&Ujzj'[Ĕ= ڬ-Q+<=\_Z)cd \q,F`[p$@ $9|Jb\$yP<} ;!3z Yɉ;H4[cn,bD+c諥8Eҙ=-QF,U:bK6kXQ jG^`_G7#5WҌ'/~EeXOl)oFt!!jwX}~X2#{zk_ @4mjߞv|{.m7q!Cܽ"T4[r#l9LLLk0cFxT]H*6uFn8S|aJ$Z4a)rUU>q,,NS^=jy"X02/(N4Yn>8Ĺ;'Zd3M"I:xNP WCEШUae_>J)ԯ?Fiլ SQZ'=x7rP&,9b 8`m?q#M(YǗbzpw/^tDb2|T8=<? —Qy[?`*6 =V`m4f (;,yw@<%R`iyXU[A3#lāȴb[1S3!A:SȈ-z}!Cә`Gk4,Uj)]k^gPX*Fy 0n!^iCo*l<>s}Iw;@R\%f D38wu7ˊt&26*wqH^gΡhET?ʿZNܾݳ1_SC/>,vk^;Ywo;#IrfbKWyYpv":Ҩ^J[twzvbmxXf&f`߹e-8.Do7>dÒD`$`D4OY|Ci;G-߫eu.Jd-82֒zfAx7nT*['$K ^U|8{K i/H鼩. $+NcMyDL4V0RMrxޞeGKUU=D]"a^ǿQ}fU$ , f3!bR#W,aOt}Q%1DŽdU'TV .-HAIƔ)7ġ{ʬ%QLS|{S"Rdar~DЎ|>2:LԼqnYog܏+`r[BӦ c]g8еJ- (׵ZyփĈ9Y;Վ”sNyHip{4F?%e]0$9$ZVe"N?gR037ne; B8fȢFX}N)lqxTiCC!$nK}t:r/bˋtQlѦYoMIF^_ҿA/jE4E 䕟P{膒7w-w 2̂ZkATc!va9*v>H%x]aYxmSRυݺ;?"ͺI5݄T>>WCBU^\u,O@\(w/DS 5b$W$'GS@&TIS,*/۔Fc_z|"W5l\jizز@tmC뛲XQT:w%(kw##VHWءs'jU_:"3PG7F?Z:@~ -be@ƀz32#({y*^N槸01Zg؞=aBg4ػuA *GD4@Ƙhme\9xzH/4k9vB-XdI6&wKK#2`L/' ; hLwÄ U@5(<0يno&.YhF]9K?.֐\D#rVGiӗڦy,< Ak:ŒhKvڑ.-*1Vf2g*zg}X43`' : bb9iR(3 L@,z5Mocb |bahu6qx @tŮk3as_2Pd|7rGp Ju0٫ p [XG3Ĩ%VvϠO*JEUeԁx5筣30ki[^%H07F1LPrvOE2RIgv&tbDދ9@h qG.W2E+7]zUzd>Uzpw]E3+z v/H(+VO"4?*e \B. lj+G"v%d~jUoiw;j&E*e86/Bb,];oƠ4 p# 5nّjlU0'>H +^o7|W*[ >4yZzKgʂEn|T`vY#X#knEf nFWfeCNFŘD^:J!f!$z3F2bEaY9­FƴʑD]G::3a25[GqUNw5&""I5ozߍUO;Pt&e5b$Ͱ D%+3KGmfqpU!,V,]rW*} Jo\.>eC-eΟ4II4,efĨ#- 5 2%Mה/r6ukN82$79n@X0׵[C >@m,y8y4-Y_(F+QR?NT/'ܟXy FfqIQO:k%QSMΖ9'xgzz;)Cܿ;NB;z6[ă"?ȱ7 /lp"T()4з7=4"#8Myw^E(L z*5ʙ#91Iq1];X(G H x Q,h1mu) )et,}2 _D QwDE-:X^Ã-MJ|8 s]Xn >V4iKV**|HWlov{ot%P+|2 3%!^;jd1܎S& 4x!4]uZJR\HmQDT&axϩǴbCQD6فRCkl _5޳ "¸ܬ^V d,]q1o1bz8'0%/uJ`gmݶQEU<旹-,s?x"_v3=Ԩø[mcbưJ&s_Eb9)Ȫz\L"p"Gb 22)颦}Azt,+%jފ!շ pҠkK;yJG>Z`Fژw65SM^.W.7`EGA}ibV3I'۸ff l̅rg3|bܷ]Cr|rO/l ZuYTĤv>|ݮ МKHJQ`v&2M @GRT;FXU7H=7~Lˏ:{EP႑:) a(8ՎB.q1~o (HmϬ!tcAdk JhN'u-T6k^ЃSŐ fF_9^l 6~.ͻAZ*HiY譁UG/K{[, H#-Bfv,* wpM$oBIg#i^ma<njf\2.>m:F\o8ߑSwl9!l[oj1Wwj+NWCiG(KRkdS|QD$=78Vb}h;5"2d)y/"\O:5c-2r)nN >2k;ȵ ?T}soawv*C!Vb-#&?@2s&s*LK'f[cz]U޴.s4Q^V)e!luKF^wi!ؘ/M沧idcJ柀JOiͨEY|eWpUUa6u\h[Fku8fc8a/SǑ(~ʥuj(p‰]I{MZ\ܿ+ʧ4sΙ߿8#,syqV~]?zاnta#pM7U<-S3 {P5 ύ=~#oo[V7iKSD[re`M'xE_^BnBf ~Xix؁yRET b ȸ2o"_\ J$)^*ݰ ^,xOa[<nE\+OdZxty'g~緘Yhqn9Mg;B;YW\'˛>,x ࢎdN熖sPSKM[o.F͈C *f8sA y_"UIu*OZY>;oٔ0l٭-1Jbifs+bY{A4{\dHӹv1hH}?ULMLvnCe:1rPStsRը#`ːTjD8Z|5;KU5=m' d{c<&3@[84eVv}~"6>~6 q-Ix.귗 1Qwb{ޗ9$vm.`+aCl6Č 8}4Ǐ'Wo%W0íFpףUd2V,JAm3S'A|B*e%l%3+{ժY,Xj5;aRD¸S6gEQ%!_v2m'S~#""@J ,\9 +T:R)R~;4ӓZwfs~%Mt {7 QUCSu^`nagWEmWsDQ qĿZ'8#93mŐx5RGNIL['>%{pn"ILhc? >ϼv@릔mROKW6Λ[ihL{*nI17kQ7=a-[ȧNMOAHz.Xg(@K(oc0mg-%E;z%衻 Xޮ?֚!JNrlQoZۮqC[5Lڡ[Maq PWD>;z<%vNm\O#{T,r,MЁC?O|SWM[X:4ow+Й̻'pk aPE+ab%^>z'1X3>sɸ8CehQYō`v@v{C>1I ÉqٕPm6x=^F!z#,n'9նVRߊ%[ jxxOOҤV!u[&! b/؋ ע}ֆ/+c4a ]}TB#?)>JfRݺcOq|j^?ENvF0%QJjIcقUKؑ5Bg⬥h7&p&5c`a8P[&&VT3ˮuL4PAJPu@TuaA):wJK{|o(SxQǻO7 lhL/9t&Մ`1v.huɦOGu2PHyNNnvkp6&KH&V tpHpibj# Ҥ=ټKG Ȩ &}/Kyc4:yj #c8M]9;a'y#[J$`:yI w Q& O1{LrƑ8t?90 |[ px8]L&((M*ejlHxtXDy "Љ/ׅs W r)I1!h0-J|q'\?ĘܱMȟPZRX>ɂz=UByXr2S Zl# "P22,r -Ì}`T@pM$y& ,Ύ \ 6-5(+h Κ5f:PhE8C(:)5됔{@L\KT0U_Q81Y;Ďg};B\A,hɬy٢oc_v[ӪcZȟWmf5:¨|ꗛC};jex]}YYDWzY ]Tj^|驀*̡^JN UFg 0+ΘSxt ߘ?tc" Rcyəsʂm ?QЈ4=swlMP/cat=B2oF x(`;tTbll3WXRNxyxDP; c[IcWqml .ntBG:-2~h f,y?])*~HZ7},A8Vk/R67(q#ٷ+{3=c?̓M շfoURfh4.+:'e?M`P"m)Vۻf8%L=K [-Q Ztn/_ A5I \>E&~Kf/7F?ܭ[CN2S9h7a{rR <VS"w|̇\g E'Z\ 1R\]5D:& ZZ ^ą\90.eXpC[q櫡Se8l{N&T/ŰןO;9ԃ#DHip7 lڼ "Q Z!@ۼ0B5z0܁;̛맖iL{--QpH)i{_ApLFc!Fԣ dMc>t%_7~L |hВMC&NGlAАo^HBx?ݵ?RI€oGkpta'm9a_ hS)@C Pr,pŖ;UnU:E$74OZǺbF5J2' rX; 8AZHz\fcAOs+#LәۃK7/ 3Y.- 6$HA ˜-h/R;l&!0yb9պ*,mMq%% Xӵ #'GbliP'7Cz h!An)y۰{g0/)8#'M&|`,{bVNkLw]fsàr('ɲV8YlEA>m /&i,D[ nc9eFOIc0=h1"4סመQ=#W>/ (7&BZ?~(WeW;鸍&S]Aa6D8@X8]i; , '~/-LzA0f!P}%а{'ɗ&%z5r\QV<Ҭuo t$NKu+y+Nj h 4#(3 }ɧUʜ> ?Wod4˵*lK˗xv>;8tA06Kf%>!dxGF(dHMz \I?X4u'A $A~|Wa{LH:tp.Sg7LmA`NhC0~go7MO[Ֆƭ[b:[4T+^ QЏ}0JjodP̊n⃛T=ELaiojG99i\ME ttún! c/cԔ5}%⺮P귪_:xG04Ex`Gi6GS&ߺ K-cfsGR% NJsjK>W䊷+c*:K]HȶS|F`.7:,1LtgiʨB"UԠ$c[s[X;ć0k$?;ȲRyE062̈́c{R{1lR(:exZAԉFpGp2Hu+joP;^!B I iI7rk%3 7BY5+P%=f+n }w$o I |ū!!q)/F&Y0v7ZS*vX2f c: 1Q7A Xoș耳&BWWEdCW DEOh݅rd];6T n7tQ߂7ˡ7FHh}s$I 4qW N2]Єl.*K]j}&uɄu@oM X]Cc`z?ٰ\o+$16)vW#X@iVgM&rqr|6QzS~iŬ2!}r-G4ɍE(#e̮7k/ :*MGVz9'of'I$~NG`a*3y)wz-8VIhDضK'LJ3cHSPҡEx3Q (˱Xw?58*1Gn^,xQRV!HO2XUIlDWX- zotrik>ՌKԹ@&9 &'HKUnE-߂x ԇe6@/&I]㤨bٺ5ƉkVDߵh&+F*sA Έg`p,Ǻp1.brhSf[ZCxmsQ.L/Px-d l$6bJɹ@vrx$"Bu5k =b8Q֏ Y鐒0B8 w#cYɞ.oBC5|f`AҨOR09vB:6$9S mcRGnz;Ŭ ΂=5&Boah$Ndryǡq 0ՂsGG^_2ze+q;}s<&u0,}>V{6abT$Mbyڴ]9i7u4"zȢߕTm\oNBX#n~=Lކ;IgV}aHz_HFdI%A^ONcix>[LGr0/~SR^SY[27H,l:\ң Ƽ+ ~J(#VG>nhs[{C3r,_^a3ޅ b":a& KO̞l#G*̿rE1 ^5 ‘^=׹Gaק~G @t1mJs~dYGJbx-𵆱b) ;3 `{`q;X! m F? SƯ6aUOlJ URBC Xz0蚑+Tu7 ;ƟMkswǘ;]1o8HLz zJs\<%,Tq!}eԢ}3+‘=iT8z*ŶT,q {oKEyo8()@W%2ߗLNda'UJ$7N%DcyDQl8L ;Ғ?܏[;svQQ-j Mв5a֙]*W$&g(xzD?zq: 9!1\c 8Ѥ!а+*4I%6a`AncX9%%ظ3.|d'XG@rs>D/2St-:3Ǒo#t󸑭i Ri)7pZ^0ͫZ%uK8f`ÞNTJUsHrךkjkJ;6GCW8a=*<쇪)K.?FG*Da 6볃IHZɾlO-0KDA9_ .`X!җuPet9JA񯄀iX]M8=d祚f 0P NLqMfI'a!V2 ]<A^P$$WϬJt0G$8&OGЃ%bns.uf&ǟ2˜P?⧌#)W WE+x>R*#06c 0flG c=CI.@U 4"Fu z9rr24юs?D黏v:4T+ވkNozVW2 a$gQoA%s|̃1kAE{g{o]扤4aqe`sCZ-⥤ IE6}IzBjźEmíe+2I! !p9WŜ>&LJ%R}Ć;t嘰k@S 8JSwۥ/^Bە*2t?u%R*5Hr4sVNj~{N+٪ *vtF%.; t#e1JOO+j'eO:& :;ݤ;(~Hӑ Vo3bvlQfwwM`?P,(l𩭆{4Kh*"lapDmL1 H(K/bJ쭓+QENQG)f.fp6zC >(-v)U>K6QǤd'-]}w d /r(H eAbUNG)JB:;Jk/~ŁzNRq{ƃ]zyxWbD f{)@䎕u $֩yGZ,5ΐf@쟘zzo_d_b,/ Ӂ#0jÔZ 0iKj{wlQu3(KBcpETD%aZqVndlnFIG$¹{)hT,t]>L÷%QH㑹!pR-\3^yAc$ZL4䄤~pEq;mƴ+P%wTeՒW !w8d=6JR(Aǯ3['cn LlX9sD ŷR^jp"O[._ңxj:iL89i[P9݂Oc7jl5JNnz Tjylqu{s%9[S7AЄ[p@PH}"=W1 92 *7鍻ՓJ-CCo͂eiЀx'twjxO%/"!k_6Wi҅snӶ b;˺;2!3m\Zrwz>[v7O"Lf 0hX##(zblQE1,廔i;Է]vyY'W¡]!+JeYnfyW D1!ʨ t ItݕekV~TS> 8ME/ˬW &>ݤ%!S9>5(07s$Z/>AӘiAy|w̿"LPTZ3*Pa*-*r0<>OyY'!O~#ޤTmsRL1Aݦ[^ gNi>* > s&`g{24$mr4)ёJly<x,Ȫ_4j(;ֻXKm]qtyHX_u6cjqE/إօ[3áA뺟z7df(AHi#\oVx..mkXxoO Iŷ/[B^#HPtK#Lֲ;8 ZE\7u/{J3q~WXsۡyZ), . -c2ʏfEJErJX6F$}>='7| OĠZ/}dɐVIBS` Su`IWPX(Aseqe/W 3*NȪtϜKHoA[T em碿>3}inPbڨIlOsϬD.V/{?~X{S Li[j@ijw\ =q^jYn5k0AG{GMvm]46[sfR ~UU iS99dMi@Y% *o\%ӉOV\)N$qXvnJ4K25ڔrS P55 Ƽ(3F˛,~PTZjgQW{2Rؙ''0פV6mWqb>ś="3XrwhH(-#QOsyjۏ_ 8`"[::uLYB/^ýrc}#m[_(.yqؿPh!T N؂ZR?nj8<%tfyDu4/Zn{ 3"8V+4,؜i0GP?DOES(;(lҋY,IV՞`\؋4TBعk8=BQ/O8$a،,ZD2Ma%ŕT{[+mo  \0ī ,lRjc)SjGz͝jQB+ _pms´J 1:x$e~)IMVB =m% {7|s3)3е ay%\<_ڂxcnUdYJkĄ/+[X ܐo殮\wơ1i|Ɵ].h'8{ԇG]۵5ô!/ebJrwNvs)[C~ߗ{+<3KduS(/}# %Ĩ|qEOQmI6/Q ,WEMЭ:L zEхYfyfAPvdw~)6u|[42SNRDGq?;4H@M}䠪"HӃ~㈱Y5ݳZ5^|'e1΁uba8õD_.-Ue m⬟q;.* z?zӅ@#So[0d{gym9}PkOh6$[gz3ҢEGjX(k/||ǼɫN0<1#UYu̪0/mbk C`TC m8+=" $qg沣'˼ nD}d8m i0D%}{j RYuhΖ՞sgctq)L9ca+G&g/!t`,u֦."19pGxfdMcӲ֌+^ߦ*2\Tk9kBG,'d~^84 e-t\q">W0?/潧[1UV ${5D𓬵8aQX2pPsNM!a*<(lDpF7ii`s.JvɪRZGDv83 g uKymwIgV -p3皬WBv0 Z{cw-T \DNUSW]#vI_rPvh^c{FVN V#b+L|c_j^hHUG/D@~#|,\zCʨtY*/4zm'rqx0("@qUu 4$aD64oi7\M^G\c | )f֤DjxLOz,їx]W Mw1ܭ _&E>".MJ&נDk3uCFJwOxw)z/R2^BcL+rMyKchŬ1ⓟOw3ZLILxB%Oڠ;.+ Z~q ||kd:'Or_ƿE{qSp}<Ϫ-Hzr+G~谖G`4ZhqHUӵ;g`FdJ2/R-<{x>f>%tv*?!,[o:X#R٣9qL(zPm\:~ cyn=Kް;*?ZVe|T:Cl47G=%18 %P=qeAsq@ڰ(޼/Jp..Ed/Nh OR3vHM܏c_YfN+eWzFuԏw_{2,`;l`hn9۞]v`"WnEU!60 _vw!zҐS!Wֳ4PěR#X徺+ ,-bђ :c_`/[+d#NFER IPoo3~5HJxr{=^6;)CڳdYF`zߍjz羗H?VՎ"A ?ڙz CUoQ!˱5Dsm 3aPC 1 lS(FL/{=pĀ(GwLC+0DƊc5$$bt^ 򕒕'<@T8d{wx>5-uzFQNA,QŵnĮd f!,G7jI68{_|ʩN&KT R_p`;q0_=bk$f@Sp(}3-_(ӷ"1Uf2QVL{a;\akݤVkG!hv,gWrXNKhx)]Ivj?{¿a!_.X1mWUlN08[&foOI/3Xodž` EB(2Hٌ6<1VNAg?+Zj4 "_N^%~'w_s doT5jX\vH&M p )=UTn^=𭮐njz2FvRKfKjLM' uf3Th=,& B< 6P)dȝi,+^Ug?\hrVt^?j;>#+qX?JJJz&X;>;AÔj; SYHGXA{a+Jm3:Y~=2fZ!`?e))Sko+|J|L:jxC٭ tyǐ.͊Lu<qaEr#}GR fl-8,I_vUh>$m2'p5X |/sDŀeIDŽ}" e-O|fy(oi'S-ܱ!>VZ'P#L? \`8p$s? |3k Tv ]=@ 'RcC0W7:_rg-R{3 a\ջ!4 t)~~~/t9!1H9mě\Ww٨Z@t~,&ӭ8ዾƢ?iH(gfy[hb8@P"ÒT2P4MX kWtaFʼnf!3-$y'$ ?gONgK2dkt|f1QI;+d;B bjhˈ3> -aR= OȦtR%L Y蔇بPy7\aS.IV/߉:?,daT7!\1G4O?P2 ӣC<)f޲W{B5&spܔ `jyTU2mOF.[<t!e]F nBnhmÈYꡰd b_QuhQ3ns;dpdT>#6-W_?frYJۨUWSt3v^I&՟ҹ86Oи.PL4TG@,gTcT/{JanZɯl+.}qEŭ_\`Xd$\f8?h*OddsE08k=r_忿U/Zl]eݜ`5a覉ߴ^\ҧ*(O9pOʟg46 |c -06s] jgSk*ns53ct=hG@>Qȍ$-Y%? 2qCɔaN/FnDHĈX@G)<{# +w>uڹD|4]"@N` I %sSr\Ūr1/=eX!nB75:(E`ɗ5Aa^\$sHXK_ %;MVYc DNA %MK }ISx<9^&KsAG|hOϘV0ٽYt@i!\cxs0"6{/6<m16󩑋PJ1 tΈL?<ҵWY kb5峡C؝W\R5; 9.ʸ$}2/g! H6s .`R +Ow: P3P3Ɓ_L.э"U/jK?n{hYT放EkL&hùt|iˡW :{Qѽ>kTX /Rӄ8nZ>ws],$zd6=WY O惈&Gm;}Ja,W DIr&ik鼉t9*B\ԥ&ZʽܵUk8#TFنT *dJuF+ȣk90p` yuAY.T,'ZUa^MʫieNZ Mp]hpp315-kaQ l/.zO=n=l 6*@v 0S//nqŨs:h/Nw"]uT XӋ1=` h6M;\EFr%?2L&Gxv3pXQHDӲ3h 'wP[ѧ^7xc@߈lx&y^߄2=K5iHD[f4`JF96˝qh:9@$GWֺ: CVmu.iP2'aұP~D. 뷘0_>g/_xkyU<ͯ7^M|A g+h}sI{ޠbfI]$RcI˹wf ЙEt^BM!obꭒ"Ö컌ﲄknA6Ibl`A{뻳ήIaIvD&ݞ{ >{}t_2 ۾FEjJ%j6P _Ք@у 8)g;241Q3~`4dq~տ܅#x25֒=XM`d]rhxgN/N5.g5wϣ;Ӆ:s\*ۜlZۆ &^)]p&J~Xqҩ k.LWKFp^;h)de8 Tu/x4v@oR=n~h6>Jw6~SƳJqdS*.۝n&fì|䀮X@=pѲ )"˻^8}3X3vcW1x%ܕm*׸VNP^M %-UÜRD-89LxO]Ԍ.ohK1:eb WR*ҁYJxK?,mfqfV#Q>h{=p$㐡2ZNñnl[:l(Ҵ{N[l: R1Ъi}jQLX`4t['&I3;Eb [_R8C呃hM+̟ᦗ߻g-{L 9V ÁW!y 5ĞH>4WSL"|Cm\5饯1bI^qy(?!o ad0蚩R%՘<à0- zǟ@x!=-t AXu:: -/ >";C`ih Fj`)֎5Otn[HY-D|U޶K.[dg qdykq&0X):_ZEB8kϸ#1jAI.pNV Xkl}:4 )J<_!"_i,F3)SsC6s83rz~gA[B8ț1{e,ҬQ0TǏS۴..U:Osh*FlW`g죢kW%_2s軵IҡSwKrQXU:޻PS6œftܿbxv3|snsRRԒ+0Z!'уI_ \2CʱƪZ ;hu|N[`v =0g.+sF:dz~!HŁ:'_(K)ïjB|;-XxВ/l"hڨ4rRT|Tg)vx~ǫ!D)ǐJ[UWӃ"E7 q ƮVNl'ޜv}ǭ5YAMeG|r1="j5*sy+V5Rf],آXewmrnAq:ՄAdoVGwTy^)B+\4?CMiJ?2Zd H׬ Ws:/.}9E*m⛓r"+2-%1LTDӪ_h+*.?bNc&SB=!HQU1"7[iV]Q!SG7׋^fu{Ks;㻂.jBjz8tMs:sA|w ڮ l]h ƥ7H.GU2fxm}W_W]LJ'?RxW.kE*Hq ;j%)?Dul-uM!εjƑz*Db}RYr5yX`Cx )9z6!w J'YIZ\.+T6 95 ~rxN܈R![ 7WHs [ wF2P \/c E 47/_mz!pi13ĞZ{!l9g;mp!> ŭ5AǨӪ}ҳ>UnPhqyLjU_a\ԭ;&U{eT|G\ϠX$ڨ]]jVΤ%D muv}GÍfk=siG*?6.$%\'4hE؁i36`ֵ] ̞xz<v%u8Ӓ17;dpJY9Wy@Gfl@ Yb.k5vw$ h2Gc[ :9ǔxQ)dK;V XǐaiP|؈k/AKW0F]t 6fğU a1-8z "9$[/i: "聐j=H Q"y΋X#IGa_x۽b“^*#%,B`guGRf>k 7:& ;_ZDFa?l :0t-xL 28c>o=%V`{U0}cGmAa\S5Fj93*EM6 Å܊GnHȵL߸ޮxH(b.=u Ջ5⛍X&EX"v2(ܞֲ/SnHFON5o襞0{rTGĬ^T`bo#<-bO\gk GA?YN=\PΙ_BPNf!M޻A2Z;*>BDFA xb o㙳l>4>W_KR7[>(Hψ)1$juߘal G>zqzYd e87/I{c{8tXu>y.3$BR-YL'!P (W?-sn Y aMZsDk7!@xz`~_ȑ;̀I8;0эL%g5E[j᭴kvSE蛷_!0.H*wX+7)y31L5s$9Ιpb_޷c ޢCt;1IY0Hk@hA3I#@ i`OD+V 3Nhz6Rh4{2jIY'Ɯ\L>d[,6*XQaG'qK,"@ 뻏_rBݼ:j1L ɝ 96,^B9>~opG6y+R\Iع@ԠJdxg(1Zr"L^1>ҠzINt, 39Ӡڈ3d`>NbP8 m \gCz5{ISel'ImyRt7>6.nDz%b*ΑT(Ÿ 2%/E'+grfdvk_A7sbQln8Y[ cMJ&+v-Aꍏ'kA,\6~~< Vz."pğ[M+8/jY(t [T30_pr]p5y'e̓0 /V%zصiy$WS%;l}ۉ:mN +2,λ-Z@ XȻD  ""f0H ٦qπ,}XY2\Lg=a7MtcR ع4b ZOn ffm5Poq%ߥTQ6 D[q[+t@|M!ޔ{Y>ʺY= ?0NCzO0ro'uQozA[~$>y<[ٻu^QAJ$r -E$wBj35\丯钅FھࢱkoqD2{P@V. TCuY;쎗coe;2%dIM@-BkHUutO0Dm]LsC7Dz/R:aRTFEٌ]t|]sɎi=4k*ƊkfW&  (#0[YP7<,J|9E3Kdڵ.rn :CX١YIU)q(Qаb:1yg6T4cI~ǜ~tje rxə_ ta9c*$pfP`3M<AF>vn=\bcF hF:Q9]x> S?2QE <2-vP (ֱ[x{]1G-Hmy*< @JРSmW.81e'&ZZIk?d89/XNd+ ;knذ3 fDEx\Y)\DZ,͎,t/ȹ)oc*px1^vvSP]GfTh^'}΋MF@E=;em=@"82ߑoWtWU%ҰPǰ(9MLc?cosc-ZE͹Yz`eΉ"~,ڑLI!UG7~2tZ)bKPdA#a툶Zqm[۲{DQaKVP$?^K7 卐*es3|0ۥpH&W!v~Oؘ[|!Wyp\M אGӽq_b7xKiH" ͳpOō8 aNzO_nZ{AMIWXm .+:DӀDnPJpSz8 M`KqI,!ЊJՠU =h$ߣܠN#ץ&bijD6V'wпګ %p~0pI  +}]I k_igagު^Fـ6/$l`Utu&`&&"|Q(Is _BT(F<@<!m:`?IvEmfuJqPOX2\5Dd8|J4E[2i|uRB_6:H: Ru -\2SUG%^ocQwTȵ2{>9$st?t  j׍*0.prQ V/U^)mنS9S0mHb&-9[>,DJg@R9AjFWba !;VI 6p2(*Gj81zh4>)} aI}aݫN=-dzܱQ3B;׸A G}bD'luLPH>9*- A¡ޓP6ul&~mn*U:+z"/C*ԚPe&qǵP P%㡗[x2N /''^0djK{$MFH@&$<" 28fYZG0 DR2>P}J=\?EI<)Wq%{k|=-}5w_% JdUXpm *)aӑI)[coxQm3lŗ`wގ|/F@bO&Hbyq@ܷ8\̅>(iX;C-#d߯_kw<$w>Y}]#AC--3k[b V[bQ[/D:P Y7Ȣ/b\p:,ʳ5\_K OF.QHA?%u } {\ r25,XYݩCsdN^nq -Vnt[Mv:1zR-I wۓ;.&2=P^ЏglkB%-AmIvt^A5|W PuA,m mPd]`_90첞ez&@PWmmowf=ܜ# s Di'{zaBe!ZŻ{2b) , DW;:püe\XYe>!xj,mvdg#%FU/)VuQipr+ud `W$ lsI! gO-# 9SThm 4r6[B'BJG~ZoJ;w#FfmNrWptK(wTjXX,^zrhl Yʄ2Y~YbǾ:9P\i*UQ0Ρu>^A&|;yWp.,o ldT=Dv{/U =F˜VN?,~.ysD׮ol%׊Y 2|GL(p { 83e-Yi&is-sZKyVnҒrJƀOQF =B]˹DiдʮZ.8qm l9K787EU݀uKF:WFjuw,W OIuWoLuV y\Wm{83_Ej$>?=?HރSaTU"./jTSzampN͢$oXsb; vAy3o:+d/FR^,QnqST{5[7Ur+)͠Z(0D;NrmFg9TWaˎ,prT/2Qłl7rwOl)}%O{U\&vD MX8UF}Y%qp@pߒ0 TF*i.>L.L3xPu0hsq:}8WO0$+UAu?d{dh׃B;&;lbu1Yj(S=UQÑ>6sDcPU(sq T9 ¿n+жvxeV¦i. 6; 4+XmA@ۉ V =<u ĜńK.+ۂ&h3bb,~Θ԰s=2@#ȏNFB"(^C@rvu4<*H`>}ú/SYw2B)CE*$4 4,|GQ¥  Xi! =w-#,UVsdcQfϲ$[|XuFt45_%=T=Z't+b97{^ __Rf w79X!VEnFJKunwR!(8 4 zQ5+ "NBh\%=4묜*%mYSn2Eib䶖nxz-ć,){)mɷckIL,pDd]sr㑱E>NBqO"\^ei CtO*;2ͳTF&V§t+`$l{|%1hiS,tK)JYg@1~异t +ⱸp֜erJ e(Q^2.1fͿ`} >o:ba+Ukanup B﻾H *D0?d&CRFqAD ǭ 5-;xUh[2'/p9>_!ɕ {7 wyph~njڿ+kG@ iJļSy"AHxlZ$AhY[3ZEG%OկO|%,[p VPodXG-826n՘;]; R"#R6R*P}ecڛ'E7{I槵ߠKc< fiY _)Q0 pe`1K=UWCڟQ]s:RMK7GʊJ2KD RUGU%׵.,y$C(H6.޷Gv/: /uMOd 8*5"1ULCZyŎ N/VM׭ྲHQKySbdt9#S [!]h-t@!\^ JOJC{r*$7pCW'Uٞ=ÀFwjcAuxŨ1TMz N" ]od(`^`# XN0ݼ{}!Rozٸۉ-!FJstjN9e%Bx0o"I=^s׀pч>>·;X?Y7-p_]o{9JyYov)y9LH+[P-hhd^A)KPi'MT&|0.]tߊCb kV­3.BDyB9-Aԃ$hVtX`'$sn!$VkTx{vHZۄ'&Nsޖ-7[r6.q/2GZ`lvrf y<^&!mcSJL Q#QTnnw/9#@ni}[(Pn-yav $ie&a1FNtm,E;XI f0V+M [9}[#le ĥF-+vۑy ݅o H͠ho#O"qxzϠFAlg|e4q1 =5FmF]mb׍E=j UUĥɥ݂$b <󯳴Ņ0bx3XPIʰFQ ,ш"$Eؒ_$l7QrfZm_sdbrv|δoM2!3cxOl/씩^Vm#QNr('*`p4@E{e<1T;l00}a9^!+rh BzE?^DL \@=az0ю-a+۳~ 9S ♘'$1Xayfsul`9{G Ogg({Ԋe)af02[7 җk?ruck@JN4nc?楻@`٫2:sދ3 /+* 5y>od;؅χl[Ӷ3RX'7"3@\[l֩x)b Y=ҙEf8ΐ P4z8U ZoB2Β8&0l;^M#FV a;RgDtrbwEFrV uN;G 7Ɣl>g3?$[,gHڀ dK؎ +3T e@`E_NmHhQuT"U됭lt;]&xpYpToP&=:bB5c ͉#l;SdRVP;b~#2]g`&v-FGqdPv臃yn@?]6͔Gqfc4w(pT:;z''tmVsʢ}NL(}L0DモjSrJq 5ecvʣV 5+`.HŎmSoD4[{ry [Um>ʍ1yY;P'x+WvYed_zrG}" P* 2apCC/t,~c9cɶoD"#a',8@- ^4&'Rz.#FB?H_aGOv=J(<JStgR4ɘt!P!sgQS$Q)%&Gj}p9&QdV)3eť2L6Y-QeTxJ ^^IƃKPd aoN26(FҜʽpoߖO2 0O_Jm&zv=4/_m$q@(v>׺a*W[|/AwV4WBoEO~C@A ThTxBΨAsѷ'sUWuIL"7ۗmUM2AVF k퍐.&Qhń>Mִ xUL|, xnEQ-<n:9;YM.׾!Ʌ.;xGNOڻA_s n\=J\Yֲx# < *u&# i$Mmo':^m^ 3 Dfz|Qg:TMt;r ]]Nlq &*puLAW(:ZB[*aE70"A;`5x wTJ7-mb>i?Ċm@*~B8Rc=r_ [8Jbl),I [d ~{W}/}z+,CrS:Q S9ޭAD=/6f5Fh?2ZQC -p^: S5 'ɵ½&G K]7R!Q UUcZf[Qeg\Ic!4cѿH?*Io`./-d: B9 \ҝFr+Qg4IԹ6"~>P&0UHR+*k"2473[㔒؁GFO?W[ ) Ӈn PU"ȕ`mjdJ6-8=Cܪ*+D8$s\_%,!f}H!8cŸHN\ÁjCp|fty?<$4fѐԃ=IRq2ƟpAǕuQ)^/*ՂA zR#:Qy(89$.#dcmEjlT81ڻ˶0PRB/Ev7{ us@&TB2^q=bƖyZc2 ׌ҖT1=\e98qMec\Srù.a*2ȓPCvPzzh3xk=(U|f&wdI`?؀$(&'hAn/4b ?UP.." ܗ?v8sH0ɿ EbFqQz!0bYdWZa"ѡN7vbU\WGcr[d)KFL|Ugw#f}^bkxu BX~7V9ZE\w_ZGDGoNj?r\8ɶdY?5¹1`HZqe{e@YbNKw^Yﺔ C -yLpM23}X|HI 8 Lb 4rXCC~Cn&}%ﶿ?~E-ϘcGWRzy,ze>s,# //5RQBztN]:`9j1۳U!Z`*ޅo"3WטtkM5Kv؅.E7\ߚ͏?&@`Qg罒;d# 9R:TCɽDž>ƭ5 _!_vϠy kjxo.CJ 9ꓳ "lb׏#mb& d[Ut^z^(YD?r!: =t6 NzCoe> raA% fj.ځఓ7s#wv÷5F܌Mf7K1D,8 x~VGɅ:"1k+bH_-q+Ѳ^|ޢ_g0Jhh'sq9W3ϒFB( jJVͣaR5;k&ٖv 4wͣR9~bHnoT:fd=V#m, [>D(ݝ02M ѹ! E3Z(Ӫ:yV/ls"+<ȭ0Qg^˾RP:[>j(%u\Uo{C/Yl- c+uS̾~ rǾ/[ʛi+=BKvV9t =EÓ5ڷm̋n\44v6PN3\$D3I鼺{ na0J%UpHO9;!092 O< ;9[WP'؛>&b0ۖBzSLqQc9ce7t%.7xHgA8Ge9drYIqk N?Fׂ:}m*AV6g'mBO }mkZgd]0-[{LjsCݻv1, _^d w<Wd޳7NL-0~o]^GSU9 _JsoSiO|֕.~ͯJ*?_O\?YT](IH)G'|A[49O, yUUQlP31^ l0c;X`;LjAM[Un$  HYl.[+k+98wn7"4w,\-o)Rl' =o/PxZ@UBlWo\~zw1͕[ϟz^v#=Q^Ļ\64F\I\C#]/1ya9R WAn}1`6E[!Nȩz*w%?Q:X){wr^jtךWȽIAeQEZWq\^/,aTUIehWe8ΰ&Rn(ambw"[ud%ĔSGjYi,dϗrF]@KszӉ`N6՘}E2\UYgz(fTΜ("9rI8\(G'T1H4Z$1T}s|Ul!0\wvubKg#;Gy3X(PdVȶ-P~sjg",p)VtGrA҃4b^6g()1rV|K.PCsbD qKaU/wKJҝǿ~3uԝUtIswz<>~xI|J}Vևx'Chg-LRK9-df aopC.fQ}s(!\9 6w=s4&-26OIַ *ϫV, %)6qKm1_N.|=n]N-պ ]40:$7z 88Z_ 2b֭{HtT"@Yv$/Wrf@|LmϑEpRE `3w)QC۞سY+ϭ(27MgQ1-c~1JL4Myp#t^`)b,)NmͫIqmΘ~͕wh8J>Z$F3b1u+L!=JxOrr+w88j/ǾBAg\yB!;,R-n/_>;fB0j8~"+gC:LF>Kۭ)a=>7VgV^՟OΎnLܷ#C_|Otui EZEOۖf+>e^54Z}=2@Β0WT?l<&#*%eY%.=o\I"h zJhB800P\ `|LϽCp}4*8lPI~<^ib8$ aYCgY ћj |XhGb@ ZHIV\mP߇$k#u[D>tYU%4Gcƹ By B;‚DQ ˑfn_RN*lw3\<;u/7)5?8Uz ]L n$sΫU2o1mV?);tocN_55FQcnz:hjO7,3}* sv:UJY5 ɼ.Dxh/SJWgDz o8>(gݢF|`OF}u0+[;^?V N5S D2TCD'HՓkX[%TH%yznӭ0}&TJr#\b <2:GhHٻGڬ3V~ 0uӼ~8Ā)qǣ^Ȓf0ymxV pJ"4-!Yó}g.X|iIW9&N-f K頂Y ?||e9z}@.gӣH+#8jCVwz wYUIsnx`EUb wP$Huc`C,y+grXo/H4:3D}c"8EXnxx$5fڻ)t?b't}mcC\Н[21bMSȧ"6v,QT})p2DHOiIq7 ? r_TAۺw+L{H"8aw'#V;Ӡ|yuoz-@[X}Fx3yR+}VϦn.w$]F#iT1րȩIVڶCZ+M4k ghrtz`{_É a~!J]n_ಓG5:G_YÖ\ݤ"&N L{Ztqꚼgt IS`YE*}.ޱ,D\,= Lmv2w.^$/oyS,Q{r-w*yx^. -:)zmqQ(<{{;foMf}x)y< hA>*4*(n2݀=xIj՟qda.&䛂)hG +}'c!H6$5v8.Ql7S]חoEعz#/oȭƌo ] s(xQ6VV)2;v*5L3j%e7ۥ1zi$gSdOKg9 &T:OVT!#rB!6qdL(Vm?I{NyOޢ},ԇɅo[(9;lvIB'J!,߰fk\U ]C ^XRXIx Z7!!(T  >+J_=FT)L p^'NO{;1JI~iQ4&r,^^Bɿu6.:#{ʾrSn&|Jl+"F YM"JUQ19H&1z(rV]~zBrofxݬ;d}N̞_5ٴwHxǔm;1y[>r-.h|3h̟9xR ( USo1a.c)/=BGB~A!oPce_%uh7+'+'1ޫZ+SH%hlѤ8?MĤ?z}-ww&jRN#S\qj× ӬQ2Ӱ- n6{~+K֖GjrkCsj$AmDr1;N0/&>!sg [Tr-&Tr̹ KV?x`je1Kwfx6NNH@ 4ⰕN׀B JL KCDelGu xpBl- |N  L%aIH9|Pz6r)/%yxÃ)тP@@חWV1-[tc;VR4%rd|9i_aBs3pVWghuk޶J%p4 gaJ&{S Y MArD`2Fî/ z~SW1e{cu][b9]BFE!)wsljcIlrrP5n[8X6@qy""4AMKm _;v, oi^"u`Qs{ ܴ OEp?[-h4A!=e WZֈS%,Hz]sPgVNe,s TAˮp-=U$JH4W}L]3J6+ +6(AcLR|"nI6[,|_w8,sqLPK *CO Z! bC1z/Å ڋtd߼]8}^ԑŗNO }kvTbc`ܖhbO ~O7~Bxwq81TLVdC/@I//,-|#!nh+_(8p[]J9e$'pynʨ2]:`b2\1?^ *~J6^|zEB VBvAMOJvv-ǟf 0KBQ6QpDBύ|=CidɎčxkS2(rѤ:q,]jnn^4 .lyLY:FЪ\z}R*{KX ]i#$)=66e%RsUM㳦DCoKu hA7+*ڀ..@z!gcN up0|x=y[:K+9QX`Uޯɵd0׫9j}vqIn['n/ XAFs=%^ _e݁k~s}YDVjXsR,qDI`QƇ.)L(t)z1$`THj U]CN:#{X {ֈx'R*bxS_*`}q +=K^D*4+)(Ĵw:yj,sv\E]4: ﳘu%Gp dGk$}W'/I ۉ.{B Z!=I}=tYf`Ǫ@`,%XNddvi4Lcvϟ7 u8K0>eQ{AP$oó\)2& XDLW3f)>IBqNZck*s6^;mw]fܕy)0G hgη_۲d!Sыpa[ՙܽ?< Z[\OOHYZu`_^e42ȵ)ٽfVTWdduHbBP--I, qE 4݋ N) WHTBY.Ǜ2 uT `k:s*F3*MNWbrhd ؗ4aR)q gL9&X_1L<&:&%gң 4`SWu*\ t-ocQ;J!9ccC<g9JͽElqJ G4ݲ:Dհr%)E šdE4 eP=o-yf(mc{F.&\Ȣ6c - nGfQHoZW4< 0L]/``DL`ȇL5lfq8qAsd@M /{OCmkW*csGZ'i'E.sv.Sa" u"ER'Ytt{ЖH2n*&_=q; 1Y,z0t--=is%MH(B3À=6G޸G&䂯vVf!$EM!{t'B*7B \IѬBiTbeSd,TOlWex[s5W]+2D wK7ʃgx$nOB>__z, B`b?? ߓiZ AA1'igj?(]a,O!lދ-]LS 4LValIPEImBƉoRqߒԹ䥋ž}_06шnK Q p uppge]dwr erW]"3;ӝSx&lH ,mO5ՂFΎVz'ZF!MH4Ѭܐ:{bnahN‘4l0 y [ BfhIO,<|AO`-_~znhjd& b_:[ȥs42f^jwh$J1@ L5Z|'D8^nVn_uM/ݎJx*pz$ RY5s:t#~jk1 1'y4}1&Ɣ !Oӌ0Zv&b0ΖuMbm5+bUY6@5)zvľdqO⌳ٚ* 5ȡDz(6OEG,yy<Ŋ[2zh]&#^%܍#ΦlFᮭgخc[/9XRRM@=h(UNyq bϙqzQFkIzW(+;H=JZ"e? z;^u2DRvt`>|kH|Tj5.~1= #M=˷Fp;!SA; gj4>mۇqoL:m4#rrD0l="n|3o}2&_߰SW-ΓOx+ 6Ispo|Xzi<%_d ^ ۧ'"rޛwVfd bZ}<\hEVC^e3$uic<}d~Uf:3;e eIkrnX,x k|_ys?n4 'd~-\ =m42 *u`9r/F=QQ5O1оYɗl_t& Hcq_OzSe 8hپn61SWvd UY~Fb߳@;1aWMd -7`#En.T(`Ԕ?8m@RSJ׷cE;:ovͻ(zls}s#SM-o!G~B#M1`fH1_?s#0`$L76zZ v9K~Z u ~s{QĔ {pl]Sr)U YNJOJAL)C8P D FoU'Jjr  tlnMZFs9} U{( )]ߖ@@#wNT* MɧY|]v⊝։#AӴ*ke('\DﴖYD&80C{ ~Ё<AL: TJa'tU|/;4δ) H:4HY2-8 $ͅ>ʷ21=+@t_.1  V<3FsȔIHyNg$;ƊENp4eQՕӧ*aLP=@ r-fټNtˌb1:OԘ1/q$"a|ۍvc鶠V$柩O0AZSm?׎ \{ V5 ui3:." )^RiZT(x&K_3g\ViII/PD܆w; O(5#l:EeròؒPɰ H.9 ^-};tߩr5TTKw193ݬ+"TqV1+wt^GH9 Qg`s>ڂGJw[H0CF6XkN,I:>N3n.HJa%J+(Fx7Ό .^b\ &`C/oܖ0.`)H^fDEE`I?6ʁtJSWI6\[P(=?Y{pi7 ܵ?,-gzkfik>c8q6<S!Ibu""ܹ.)?b鯂pIYPHIp"@Fbd^ o"-̀:'m072 ]BuۘR:]cv֭lՆ C³(7NҺ׮^XrX'2%buDܦ&2`^hEgwpԻ9dy^DhzƬ765.bƭh;)SPgգ mme(TtY=t[,[aapOO[Y+?9'~߸f䳕,Kn(c{(X1pˠߙ&R(~;-fn55.H&1OĬJB_+@VE423F>'[ϸ,8d oʦG}~#0wVvO "&yQ Lٱ7K? x3㣄v挫;:7lme?COHa ~fAEM$H-} 'dXBQՃߑG@sG3kUW ݻ7 b3Q0G)A|qyjAɯFwzȏsa ,KyqYI! d=9vyf1AksgEu ;\+F~=);f9h3VTMM6AA>ӡ%ALZ!yB6g4@ɂAjG^ޙj]Yd YHKyV#MLUg$+8jCSv{l~bŞJ\f&0 ͭW«B 7 +[m(_"߮$C sUL_Ug^{y˦@dlSȝnI數ݫp$|m63x){G}"r>|7v9pZ^_űy%g1A'&8n/-q-qi #ˍ#UYd3OH8uy08_N]2 P7rRn@=`Bs {~5eq%![< I,p毱+{Ry[^ 7ފ0" ^pW*)`ͶV3,Q_#ISq5x|U'i^ Oy\ӺϏ]->i$A:NdЀuz9K/J4ʄ;8T 3a|pmM*S^s\vYo9 1/v;ôo _Kԏ%m{EN=ս W߬.>ӠzMޛu44a+[c `ɠxT`5$Tz~LXIJNڼ¢؅w>;V1 'K39`R-^~+Κ$庅O% 0`gכwŃ!?]Vlޞ"!5cDi |E> ~?e(f>2C^Ę Ӓ"qQ:%.>W C]?ҺSz &K3mZȉi! UT"\5 %Lr%W'HH]̻!.'?Q%8T%C?Dga_VXLjg tov;-q:B61Z;m?,"|Do鈨˜x+$@Ykc f9B!#) g 8!j͝g߬f;$4JZ"*?%zAϿ-kBc%I8tdWw]&lOB׿c28R ] $wH$d1>Ռٿ{2T6oRjŁCx,Ez4|Z"p nX\c(A^sc:6n:P :2@=ɾ j"}M`8| ,DBD3@ s^BH]n݃F)#BKp]\į<29 qư۬;j{5m0MA {YKG@.-7kEhZlC! ѸԖy޾;$uJUgK6!Pш}'q@ʯ=#L1@~acf8#J-ׅ_I2Nis`wΧ os}_8d29;9p[2Ÿq9%t9@h2NU*˱OϾb/*#>`pM\YyHD# ԳYMB6Kx\dUT#V޵Lh"v޻9Ŕ;F@Z BݥH&8||%2+Ew1_sVېӬ4Is+1S5_DR|-|[r(oBU1O gngA'6p38W`KrKiv̨ g4|uwT\\Ƚn m<2k^1t-'bd!REvbO  )@eڏՒa#8reBۿ?ƘsJ,)ǯ ]Z!,T$A4/ayȀؓ(qB:Q%@ b slˋ 8&YiJrJ!{r}d*n/1Db_?qejW4w@nj0&B$uۘdtPqOΧBHaBjC2zT?gBRMEMqdf@S~(Xboy`lZܲFsgpa"6^-oT+O @#G+J>Ӎ D"%${|}Z+Lv>&*cΙ rH'%_7'A %RH U+o U` D=W-$;:nLT{ o2&OF=pF0yh)؂vF9 &=]R YX71)k;31f ٩2;?7ahWK}&-o''(+Vl /f% mKo&P|꺀0F L'@~c$ ekxL\3ktQ,a׫,nM|D; }ø&ȱSmnA Ý9w. !jO.ӍCqNH4v\vEL`1 D] `#H\ooea2EQ+_NhboIL !?jpz`Yf7W [a -a13ˆq.%~,rRf77>wLj fQqB:Կ.A_`,uw#?OLZ 'u=9|fqg]k& ?T@BO/@hc`1LɱdsINzD;Dm,Kpճ 91d:|T'h(Xb|b9<)1j @A^lij֯FTS ɱ,`Lo)m57Y~$kv0<#,?,!l =PsVG˿In"LdQsո~7U$%9 ̟Cte6K:J.*(SU33.Yrmznds2LչO{CgTr//LA1 G%%Da>}_1[ύ܎b_-@,`$xteh)/%+]J X{{Zzd7B"M?iSS6B|L g O]%Z:e-X4 sXgZ2ytA[\Q@3aڈ;!&B7>}c`Fu]L zjD,]UY yGzoV+̕=]ei#ܗ٦qEa2uT_JF)cP=\Ii03?<i|*g6Ci~lA|!X$:U&G:/N[QTڠ ^L]:,s[Vcgj=$4"xf0rd4ީim>ܿjNdt}I2ޓ;AbɧhA'b w)nv/rMU%@1򴩢 .Ovßd#Z$%xc[$VF{ f Q/04/_3po,!e,J(3( :|y}:& e4:e/bC0Xx, ]"H[O P? fuf|oϺhAcT*) ߭b%q=7HHK ܟiF2ё7~bn¥;kj?0cj@s@heV&L0}'jp WSK!6m~瑳>ǯRi ƿM(-@E!ldY y: y"Q-:Ze_ %]M{j #g~:S<8*`FcwRLhԂr2+0 h9: 6 bkki!J`nd:.D*L iN%䯉T$rIE~1;  =r_\0Q)RQ(iTPGZOBTiD~\fxqYdgMcMi6B,8 [a>㩱ʈc3>r,?`G>t Y+Rsi Z|(t=),ȩ$]R*ffq%bo.v]*/0I z/Vj`5aܡQR*Be`a MrK7#PxR/]ݾq7F!i <+hDjuKS3L:ˉ pSUi+7 +ئ)7瞎t)"oM*Y2a^X5ON _7(o1!g|"-4b 9.5S- ^:v^vf/zɖg ݄3237ri r\[R-ZVXpTF,yGġ{>QcŲtj*^>be*9>__pϹV1hv@ FE .{ r< ۆxځ[+Xv$6^Bzϔ#^:s++kG[=LgNtgg/goT xC[|e*?˾ĘL wE(C#S{V}>BihA o;N=QhX``vn"S 93L A<^No 3TXҕSj4᲋-gT [Pb؇:iTݮj&S<$/Rl-eGjk`€"[Eof ˎkMR GFB1RWF騱++.`6]IN"D?_}+ۊ.sXh6(َq2~i(Z*'nfaO-3-A /:2taDd:/:5?8si^+>RF>8&v N|#{-\-6m~Nq*\}`7&:i[vp JKՃk4A|=ϥV@qOQx╔+JR;JG9L.x}ЌOK-YͣJ~lAk(JQ^ډf]t,5ӭq#knj+1*o!Bҭ}~d[b!\siI]Qb1#86xgAJ.&;ks@̴3w%# T\:ĄJ_G?r|xUfZݳ> iw'cg W GN޵ngʪYY&WU+%y$(}"aJ"ocDzdvP?jtN tҾEⷜxc4<*JOwŤ:#hKۧe"W~ǪoKՂ4: #Sc3ib: *˭m\S;,m8H6&}9& DZכR .DGdPf\#k/,6u[ ~`#Տ }sMnCisB,D]&!kS,bx΅6L*L V(rmln#"x~&}=JC&PO|p?lG:uP_ysLd0Nݐߦ1`U*["㭢ɧA;7 Cr-HP~^ϗ V )XPiʻYNտR!`\SѬ=_CYsTL!aifig=@23)\tNq0Y~mf6L B~9qp@6VyoD٦>_7Rvb!7kom}p6Rj`՚<?)F!i)@sB8]M[a9GpSuU 6 ODlѨ_"n*ipLx{wɊ'nj'dgFQX x9wZcyqF \cQE yS zԉf"}J4+zJ'Zgx~hg9c5:` Dx>~ &l`A/q: bhg]M [ ~(MNhiǞ+b c= i"CX*x]⃾]LQ0[蒆5Iv RRlkN2W 7XYi+D)◑?^3 VݻjW,X B_אPbkUkwV'#'|nU>e>x<`OiToB8 x]Y8[J 51sB&9hW=CC]NUZ(S5U,oօUVkxݐ-7wtP H@ j|~?KطJgIlP*:]ѲNARssjD|P"+;`+h9zlP%]P3w<;|94IF§a=(8t ~jdy̬#ק@ 4^6 RyIR@[-#d£+d)@HN3æ|Av(fáS$ǃUۿWԾK6 No[љN18h`EQT;UnIC 2憙 ްZ.ߍ"ٹMCxJU7'{MTH|x(ղk\䷪H-\ :'V>yN}R^+'K^4AXwy~_tG//k1ʣ7[F~[I8 nZ2H3N\O{lVj>] ozQNQtu4@AfGHb{FJ#۹퉇Z:pv[m#&i5pk T2QK J[dQ ]_pc8!G6hZTce0YLDpnTk=8|T\̾:θ0Kc ]G/u\+Wc@G]?a4(ˑx#&.iF `h "1O 8:P[^ߕkvXQɫ2>^=3%(vLg9tOtc .brV}ƺʾ]QDgԝrmG4ؤb z iۥ"G9'jZH,;0z\ zHۖ Da$kn e7i܌wKw/4D䚁%GǒP?jUHp:8C'mƵsnFhb"sXM7iz|⚿u)"ܝNe^w-6k?Jo!e\RթR>Yj0NTmbË7f* ,;$q'UnJs+ -&ODi 83Sb~5VSPng! &to])]+]% K|.PLq>z5uL'¢}r&Azm֨zGy~p˗Śom;ׄpPwV7V쾟?>4Ǡ;QuҎ(m@ɷx6xRH0CÈpgIkm GN`]L͈oTE9SCㄍZ 9'7N'Qۦ7gdY*8| uNh)D7ʼŷ!ɆyK@' !&[`*44H"V>S%,Wz@>6郕V#zG$]b{e(bvf#o11G`[ׄuZgMF#"3&2>6F(?Ckz NmZcO# IU PZ%:\em5Sh`Q*^H6-G~S,R!siS]CH>9J2Ưɪlb& <@#>١*H~x y;7 Tv貖#nR &Yƺ )5׈ rԣ%Rdeօ-(FWáv{1/h+wz6(?)=%ZpOTXmϢL^N,%qв5)94 83lNlB={:scSFH6~HU)wyf\ʧ& *}ipI7:dQZ)}LD fRk 0M%rtBbތ5r h±e;+6%YZfWm$Y ;y? ,䆚[+W?k@64N/zB8h)Zw+-JJģ?7TpLgNY+a,*LJ%p P5[2 ^4 ^N#D"M46o$~\eYiH@ٶU87d!4ETsM(Yȱ}훰?ǵ%o,NTrR@=Hكf&DT׌n 2pAmlAV}:;jGFYA;z;JY[MF3[ ㏿qn&mKh3euz9콳++A'P,1ӘŅ’SM=q+^2|P&d\!堨+Q-˴J8y9HQXXzOnxɂ9yjNBX!utnrꩄWN˰.Eв*:fD!=-臋zaCS0 Dvd *C78.ߵi~j"2z{'5|4SӂAA[^;&LP;qŹʘUKO4g|ȊD4Ԍ_{-3@cbj5ٮX r|t=yo<~ߍ-tG%6wzإT-V 1,9 0^ [ר$$>tiI\f5 0|쪨x͝+rz%epJ]#W{h.lݰ_>K!jtS;|2;kž98,+Jʨ{Xt)|5~ϥsz+AdU#GJҺcң?IvzX[Knu2O4dd7i0X%EKRLm`j&AED|wdzߨr0LawƄ1ȱz21(:yb 2:dfJL]k$bw,v\sⸯ@3FnSKk뀁X~/Q7 t,sw--fDilW'mX˗T~@:$jK3C$S'e/6!Ya]zTv*PPj538 iaQ+dv|-YʶQ!࣒z9vALL󳗺eu%YܥG]H@Qu uݻti1ắUTSu }xq^K]In bIrՇC!GEBU^}p=Mn2ֿ bZG<)&/Ź??K@yB1O4]ӫZN,_NN; yՐHϺVpEZ qPkC0ew- ^e>EI-|VwP4lDKrδlY[vPNd[v=-WbțODq] 1Uy 2ݓ']#ɦ R@,~DNyJ<煞؟8~ X4RQ(?|W)m@,zWStbڲuYғ#!ˡ.WH^6/X+H(yѨFxeHi;9ҪixB&t} =\%<;L2ƵJWr7Pnb*JL:B0wnFхAf.x2syLGDIW LFUe`6霫8BeqmTeo7c23$qѶQfIհ7c@+#,ڹּt&Cy@7TeR5-dэl9~tlM-D^/A[6zU!QO"Gl\ZÕ9eU쭄Vwg VϦWA`pYnn`6'گg1P:Uv ph5 ()! `$R̸(,64rMDј,ƲvO49+EyD{ aWXl/y*<T#vkX8O F%=Q_C;݊OHDq[Qݽ0Y4)oq ZcϪ0T6'DHh#if}؟nLկ|.Dje)?#n+>?({qu1_'8fC,QOO7yI e|pֈqZK%~U)Tڹww3eރqn~H3ww0#%?ۓ0ݎt6q Ce%ŵ&уˈWa@Ʃ9Sj27 _ˁ,!qEӪg!UnaA1&{!n;ݷOa%hP 1H@N %ok/gIo|xaEE5ah.)ENA~ڼWƾ??W%tqeyrmź~k*#\)p&Yg?$/.+t_]sځ?WGc}Ea,{xo:S$m~Rbt p "A_ZM ߧ&T½|2g*Rq(Bof'/%;쏊Uu_(׉uM8o%*ST6o]qS<eowΠҴ7 zګ6츼^ Ĩҋjls# ,QB6, k"oۉ,=:*|Ԣ@ְ\hp!28UY4.L΍!K5^_T^s枯&}NG"=1Pgۙ_YY`8 cU#a>1=t8+ZxTTp/7֨3s.K;UM̈TcNBiH=(P N%F D_XHXϛ)o/o"mmrElq0θ7%Tj3B9[jXA˸"^ј^ÎowNPZf1@PzT`Yؗ;t 9lEtì07eE0o}c֝Uc/w42b ~:Ĉ4Wӝv22YxTھ] {nѺlo[=>a?%6;E *|kkYUQ"Ig{k^?oG64jgH o3/jq8O@D 9)dB_VkKm"JQ+ r:V*\fuW ʜbkdrDJT:KqZ^!RP/ՇXl;!b$p 8K:,ꔠC<)pRӏگG#G!JecBW~}i\HmE}Jg1<GtVu:rsK[F::ߕ^Tj,} $Xq1B?a Ut=4e1( e5%YkYVtSTb\l"UTЪ"QQN$œσhT`/2uQ*;TO:GBp#KǒoQ(EgjN"дezT6[\_Jb`O00Ƿ0_ab'A3r$͛qJP5{"nI{nUƾ/P[7UYκy  k|Q#֫iHG'10A\)'Ln e(θ|V"U?L$/Xn78T*YDTo0 +'r1v)-z7^/ÛA i(sus:-~A2,@/r.F߆⌞)?_ M-}sdKaaY')70\m-,aYA8s %]زHk5%Zs @`IJ.}sڒ>):ϑS@^99tT+"_dEnAɖDܘqgsE9욿8OsP,ֱvR\c2h*=!z3J M[Nͳ":ۯI (i~kOg +x7_K5j#c&!}0$rNgG}ҤdU1 ߵ>w , kO7Q=xyС+,Dz;]2js@Jr;CaUSyb'7Vk4i,Y69}o͌mOQ3j2e}>_J!4yn!1V}ntSUrsIKާZqkhL< =hj#|n(eGgs3 OϾ?> gVT^v\jjJO(Bd7e4(Q6 ߜMG>!5t~xN]%jЈO^eF󋪛Q;^:^j cxd_}ohZ<jѹ|03_ZW493o@0YP+6t2N_k"*Ox,A9X@E/uҔYtbBJj{Y}CLT%wj&"zBa˕tA/tWҠuRpdeDf `G4WL&XW.|ѕ=+MЮr̫4U^ǝY_b5&f܆f^.iUvBy6j1ѦHٱ,m}y!!KRٚT |E 3 9ɱ2+>Rx>up6O5Hx}=1JMYJȪ~-w@Eɩwmgeh \qvgpFwQ(Nܞ_3!d8[Eс%J19uZH1*pGD'W*vB:d筐bֹ!V>H͋}491_P`iH#ab4F_ُؑ2'lj]X*fN ,z>@dL ߐ#bli|'`3 N Ɔ \^0k8Bhط%q .%98RЏ.t80iae,8~Q@*JŴ[2·a /s (U㛎VRׇ}V17O(= } ?A1i=XC.Q-镬-:<8%.s)Y>O/ eW͹赡_ .NjAŏՋ#'L DBLr u/F? ~a(hٳ^t ^ DN%ޠsW[HW/O@u BJL;xJ +pLYdx֊y"+Wpåx3:Gkhb/hkco`iZ79deZPm1Y[hj_"⃂݃*,me ߀~g~wgh[׋„ nfa.,s*x>w3b &Y?O4neQG|| 0FZX;YNhN`.ϕ#8sX (vG8Rg<+µҞx#9t6!҆Z˓d)ܿ]x27o&A}qЗ_5>y!Ou5&G[})}zb ܬtQ+op8iM [~a9g:$3Eo$.t<㈈kщ;xSWW' CGRsZgŜ5v $v(g#Oۏ?<#sW_I}y_Jz2c&M 6=d{>mf~"P%]<)QHy0-YBF!3nboVpGͥHPzj7C7U׆::}WY3[hpFc!gP i<:_nѥR-v<}KbĵrHǠGT XkjpZt#WbdZpeS^vhoi[RHң=֗Bư Embx'p76zEWrT䯏M**)īem= $-1GD6=p%Fr$:*Hc~ɟ>  0&7\bXc{MQYT4[T^s7:BI'GT ^5C)>bϪ)$#WS=ՆD D/jb he;{5=[?XEûeu7Y5K9xv*^E*:^>$]VHh_SRĕeyoy%^ڱ.brWֵ9DE?yu뜊oOO( Ht?֛d >J^!) 'w'D;Ћ-!*~Y]TiFSa}6qu }ZՏھp Yfkt_a\ta!hHټkXږߴ}D]Fi+lc!E*֏d<0jD_D）6+1yn+_[Jd[%Npjx{RTfdãS}R]O>@KwnۊIwRGEdXZmd@4՚u:k/͙Qm 7E>NN=j:K‘MߢU=.pyxObM:;\pP(f0yC`j|OOEqq0QV?3G2@b WjIrM#)m(}$&l ۄ\EwSV8[7-gH*s0 r(K>Zv8}Nc l !e)a>"b=M)Ǐ}e`iQ^BoS"8$Ȁ?#9+ y1H4=*nmf*ԑ~,Ζ:ND/ KxӥĬmލ@D WѻXZFqj)RPPpFN*lR \ [ F 1aM27܎e z.4HݸmQyznBxeHʺarA Bp:Eoq+zuH|29VU}A 0s ~hG2 a|Ҿ+tHO )bqpb؄[_78[˔46TQXJMQ>7h@ɒgڻ04)A4wyQ>_* 6ϓ[鏂x'`,,"9zV-N]ZhSnw5J4. -JMU)4.&%^ǔ  ͩ> LW"% akr֔e D&z!l6XTdq3IB8 yRv$kܐ834v\nGq1W?%!";FAހ6U`~ԝb7OEB=% Eݔz,esKx\N 唚kt!a|bk!4qi٦ (^UirlJ XbeS"jE~Yo>-1DGinpEc JK,:Ҕld;3akKΘm=z:E%*< x^IUS:$-kTK a}XI]DZ?9}Tba:f SGŷ#C\EٌL d:xȈF6 #̂q"5cH5yҊj+u\ְ tvP;/D4"Xj8:>woTФ^LNwh̔QVqzHZfQj 1hma? F)^#gWk+h|9&X#kz(YY10p?m3GoAf1+O"vf=5Z5`sUxuIj&gŬEpVX0|zIjE[ XTȂ:"j)BRXo]f7Rݬz J -IKt"/uѽ\y#uUInه]Vϡ4[HCV,c?63o +0I,I%tg!a@ʪ(Cz]v2̉]d]ecJSh.bYՂ+!DJYgI`۟B گ5%3%i7y)GAg&CYue/qrhkv˃- )yƮM ܌{,ՙ}yoř@ag Q3Z[:1 dHM7a@t=Ee.60O;ygC'@1RJAR [^bE =olr5[+@tYsw)=h Aroj=Tzv qR^a<5dI~ܩZ֣ &F(SBo52Uk ^qؒ+!\&IjQ25oN=fM.=gso2ߴ/W;vc}9muЦ"b8F!. dHXYKu@WKX~)8&S|>'17h E@)aM~5pDaR#Bs^K]\Swyfu`=m/uFZp&l|S3*Ayqz}Z1[Je%cJ6Zs >}H|)~BfVƑz=?il:[=VLZ6]gsAMm9\|ˬ}9E@-)\U+d{!̴v/\7{idFtK?Q#CRZHo$?I]-Us,Iĭe9+oWMhƷK=U#.8ԇ2P ^/`n^U?&K}}%7k4eU39Ag6rLo=J>߾{kt3 .NC_ TZYQȞDeKm"?J5 >- 1UУ'Tw3?^.:ߑ1Ux C 5YtkƳ7J6vsY9D*R-k>i@Iq'nVksfXF)-.+svS}Kr G_JHx>ŅIʜX!aDb<&dC$5v{.8$,AQ-SL!PNQ|=x)/Eq4,lo/6vpbfr >qM?x`D G־pwKhn3&M~<Y@,^,(7޹>|QPfI7`>k޳יm9#(3CL3A7,K<!5BOU,r&Dĸ?gkv :0G2hJ}Kʈx '3g})i1K 9%4| bIb3V+% s8n5ī){Y d#?# .Щz2ʅB3<*Oq넪z4^Fٽ: '$|n bgtÍI-7t; Eі 5R^usbMzOP&CI Po-%%J\U^6l.7=JE1%_1gH cEDZ]J`PJ(qV %OOlr3*:Ϥzeˎ:8LRl d%aJw*m,P_HʕXS3OR)hRK_iR؜1'l͈\ΌX+gd_o"ݽzuq՗sL6@`bT/M>hRӸSL{OL1`2D5M|茸[c2 vlLF$~-9NhF`md U: 2NFfhW i1ܟ>7(7[ʘ O(CQ?F,k˘k{7yu#I;O2O4'r~m Z4mN,禫$;12'J`1+^ XzDj(gp8'vݙ_U1Z¶'xU&+!M: 2" L:/wɂ,drPS ia|]*ba1B*hdC^4v%dq+CcC,KLë=lPGMXA䑽e\hM96e'ʛ!{ףlExva vόjBNIMsa [ng mJ")?Q·*$剌R#|-ISd!"mLʡN{?`>iFnO;4v\4#V³S\Jeem~ԻtnNp::,׵fIKiZ^qi.þVs+S٨C)o'WVp3Tn6:!EjK\'8+5U/ryҠ:# `ɖ97Ua(hv}UKHݶzX4۫S[R)B'@:U/@Fw#ODV(t>~Q{gTr߸KAiHzJ槌 q7ܖSBWf?Vojvs*qoOn 6.&_^B?ohAWDjf~fOQ0LL&C0cbV6-:yC:,8F(,z_:8N*<>޶h>BWs-᤻)v"b_Hm=աL^ oNmDAK0#=(HOE(> pe2Txpbtar>AnXO"~V arVҠ_qwT&`'645p+eѫF<#ׁ?MηRp9FܮMp~2@tG<3s7]7hCS0|h4~4Y/;WtՉWf\c^Ocb\x]OŔv#l+_b( Ǎ/& =' kEp}NjSpVUPU?rnh"[yz{/U7 [q5z9QFŰ!=-!?d*(#&Ea"-G'|D/Z&XZT(IFt $΢:n%{z u&QY ڠa1/ukLBVt/AW2%j9mMAN/k6&/HEqR-i/i%̤ȈI il(=#33r k`1/R̨)C< XtuP`KaJNxOF(%[SS/]xjץMKU.iB;yrHwtr."U=4$$i*^:@T٭>CMj6Qϝ &49$7_]"wďc0XyHk` 2+ٿ7"gRAn2.0?HåU?͡ti+Y@`5a,ɱN!>!7FB1MPy\9@~;AgƻV*}tVryM1F7vEnv/tq} RrRD$g|]΁Wӱ9TsQГ4=PSn 1icC׊kfwMlr/S>10XH5ΝHይ 3,,H=-%Aƈ7&€߄U\bk/V!mPjRYhƄP9t8Iȉ`ђB[SrXv"I \+^yo. #4%)Ȋ:qBfmH1QV7Z Zɰ_Je[]Kx`$hUJ^*NzoX8&#G!4AV3*4Ȗ )}d?fw!-`(:!:p+ٽD@; qP >I!LLO+9`pj]bgrkl3XaPB20‘ ڄ|oNL=OXZ6lpkYp3хFBwh1'[kZ,VgRFBkIw[##Kܯ#X=ۄ4XcE6~a'AY a/䴤M÷`}AUP!2PPݘ4U{+ɑћz6=.etnc-qitD(sInBLٔVWxk*9bap/"B WOw3oKa\!⽿c|QKdZÝ`Z+3DY챿IDO欋A2D|7F0-.1X hyAĠZcxuJV :V?C1u}i Ƿ\q\a ֧RH 2> ;>5u8`f7sA-Mn\E >d4i `P}}{c2: =aFB ]2KE4;DpgJBǗKu2.NvCeD2`(s~UDײwH,[ӷWNgM9#Pf7 c9y"}ǙuZ!Ũ*8y-.M"ًNI@,#gXU?L,tΒ[Es$}2DHR A̯0V+g!?3MOn9B~0Q(H<,@*kԙ,P6@1<2n{q:Ž[3d&j&-ԏeKJF]5"I% K|#H4)1%TuH^É )3%oIJjiy-!IO5&ba>Į+9;/]H~.Kơ_l{~ȫfpf<S +T'hm qlD3CW^бlMI^~ZU:PEo(4-6JXViQ+[pM;p n0˓aDy Oew֌jk m1-kl>KD>PT bK1`He 6dx SaTuWdZ3OgFV_ H "g7D&'k߆6 vwFd 5Bxp,QZ i䐃1- _Mo2h7+zT wяt}&}C=Ӵr| j|s۰ #[G?&)Z- ^~dg6?Uĭ!dʳdb2iE!n,WlP ˱ %M3"]\Z3t1JAJfzu /Ζ.sX{[8Oύ6h#`1 |ᚣ?NVlV1*/i(ZW̛(y HFv:Ǜqq{7j9 D'j ?IbgIݵQO xJ}ku7OhwErRPx횔rg:ni'ly#[QE!c 0 TF+5>fK$//U?Q{M]sk",zogR`lZ;f)`2~z*HLxAg|XTO yj0r`׀VP)|l) ]TtiѼSF]-,w;Fπ!9 gW҉Iv޴t'KԳ!Z׀ƶ C1FZMEo Z'KAoɼTN&mTrMSvnGa걙"J)|GUj>%~<|J5&*LU8"aYY2(T=UVƭP;Um^ZpWIhf5uvmHH_X\Ѣe~b `lZ~?|p[;2zLD-B> 0*;4xBPFObNKmm_VyKivõP2XAH?".H$AHHtjITW-5>l-6 }H] ci5w(&.Bɑ#07# !TEh*YmDοAMZ&(/_m%~4؁XH*iMۇ \UZ1p^hyQgdFll9%5'^3.I,]51HAP}A ʋYgn Wm\0A֟Fă30DKu.9}zs6uiNѯH._bd$R^!!(zfUOq|#14y^ݚCpD+K EJ_ULb~ Dc3f"+PVC}kVꕒW&0KTL$e%[N,Lx'O ;"dlrXy7eb'uQ q0ϼ=;8`ؾ]wVN'Z!q؛raJL$)h7kݧ6^7[Q4>/9ɯ`v~ \uJ95X.#h\ ufw|V%5 G<ǀkR:T#W#w 0e =[#WG'eXuO{e#ՃЯeXB^&rJIToIȴ˻=e6ASf-cK;w]d)^ȏՕOᓥ4.}Y굤'"LPޠ3 ?![*H>ǔQqs zi"[P-kɓ!' ˣ t%e"9ewE@^vj^0nN\16e|g8ii+r}ѥSR+}LZ8t8XX>*ҟ`~ժ{Oq`-.<q97C< tQ/Iخ&ǭ`GeYzQ`}w`^Mt`uxHu㸑#)͢lJ\1ZogN_yi{ɩ74 q#)AY8>y4cd+u#22Ι\UkM -1j7d3h$-VB=Ü 2k@XvymGOD" ?;7X!BE;β 0>xcM;AH#Lf0QKoOgirF4Rc-nR7m-K^]38)SIS Ek`eB_rj,RІk->G7[1b2g.}.?Yo8m /k ^ `o-΢?-%nB642Gr`%Z:PJh=YBq\ؙ&5UE <3*5{)@8Ќs!(D\y {5J] iqʌ3Q451P7vqb%(BJDӡO% *o' vI-iVń]$;FD(XE˅!!īzbVe[ȍ`/JaxuЮ}5 C"'RxP&5g:^ ?B)tsOiMgziK; 6bFN0 >=@Ee=!C/aL9Ŕb'LOĺxxڼUjƦd~Ȥ {6_jXHǡMowlc4؋ְ mךOmmb\]ygs7R0 !&C"MxCmF;0Q{&G R%5=huCN zL O_Ԧkᙞ#!$QMOC*1~7F0k݂賖o# hN$dhٽvZ+9m=Hi 品&4>SaJi 58oQ0EEW6Yj=F]UAc*$2QZsÝPNVDRKw5KI9ez"mg7<{(h)gKkaWjbY3%HĥԹ5> Zc4&n:7hNfVSsE^NYPaX/,ÎoQ\K:pg)ů5RsFPNrmd{xtia;1-m&EL o^ȃE7P?HU(AUޝ%3Ao6f7WTD;6#?d+"#_|½tGw*P&GHEÚnD o!%< 1/]}6R\6)@ $Zyg7D}s\6 $j_ATw.2E'bQ?R:io ߵlg)2z 0aoz!y`ط` ψw}3y3j*ܺ&lUkN$5~5}Q4pī* ?\?}Hr(JЄf&|+}=M `+Q,G՗-щڐ!! e31THg)YFtUr[! Q%8~<P7BE32.y aHyk1Ea7Q覮t̃95pnV,uKES%X;ljic=(('\@҃B0a_ |JE4t9?dS Rh 5i1G/(A;Mퟓ$+aX̝IK]K=JFO ğb[%X<Փk$GXixpKFn(#t!H鞛KUH뤄q y$v4wggw阍R!~[ELkQbP׬5ĐVOmGcƞ8J8= _"ARc\xM;Jsȓo:):0q* */WZ =(X卵 t7Re"h k2ӡH )b=z i7ZwJ*0#"DEEZ[wρtjp9֐,g_)?1Ӊjlke*Ł qFQ"!~U 2 P<@;k̴ `k#Z2\@WUO*_ʛcQЅl*@ewW+o% tz2,1|˃="qLUM7_F7*YѤWW{xQhˏ3$=dحzkg/"恅/obVEE-Q+//9SIq6($X;f1C40, ZOdScZp;gozIdI 0OO'\KHfެܮ~d x޹J$8!]aIoO;y޸ZTEzclb7q {Qz i~w pIiٚvA T]e"#Ra)R#;&ğ%yRܴ2OsCܩOID>a|"}j-K"mg .xς210@3A|d;rQ&0})_n`[i}tמ/#ٌ2k/ڶD-Vz 0Ȼ54\Q_ɆdL`HNٚ`-de!H, /ٵ"+8\!J$\Q/~%[6 h7_d]ƁJ \i='KNoF倨4cR 35GL2^p^~rp@;Acu2v%sӔkURt5*@uWGlkS0S :CqгUҾnvUoc^?ޔ8jr (BmK\/rcu-T5buSxE8ɫQE+'1 ȽYiy8PazE,/iLhW>~q2v>4DRY&WuWg?TunsPH|8ӎxڳ38$tǓuݛ@:ƛ7 jL#Wa9ٶ@qrMK*פֿ+b>i>9lcq~)8ѥβ ?IۖʣϦ߷u|/+B%,L}'J\3]gjh[񀫋WX5onWy,`7ɰyJ_:MM'4.kHGO$-fǞbBo7GTD ;دFmU<]`E;UXYoZ/]fehmg#xB ÈCЧaS F1K"3 $/-@G8s3&@ؒ`!+V@L2<뇊XM \E(S|\]ՂsPy]ܯ^ b6w;4Ov鈆N<ؒ|x%e<:%^ZޗH>[FZ^YRGIaP4",Ltj([w`_ۓS^j2UG Xvs{XɒJXea!d~7zJ$!gjSuM9EWPU/V/c:¢O[NEJ׌< ywDU4;e.)uJH *•}$43ny6Zͤckkr]v0$hvJ7N.4 ?QKfh%cPVrO3*VI kB裢 D@KO=ޕϐ6T;8I| |y/@dFUͪS@qLv]^G(-cZ Ɗ`߱|}4"ҟnN`Br5E p2kTyIE- 6hNِ'h]M6jd_ w%kj^$r8eޭ<* u@(*p8 FqZx.M7J>oCn 76͊lJ3|wP,:c3 7rKVր U21LeV1JC8Grcb#V^m'_X&‚Jtj~J skXQ1&K#fAqwU0ǒۇCFԲ2?asjr=(|q4'@/i49468;Kվ(.۝귏+`#{йm Nv]hN_|)g"O췬TqO_5|V0 Q!y'b5)^Iibُ+>@A ),>9,YSP(s{ |10-q}:bp3R~╹{YDI\Flݬd$VCr_Ɲ:$,ѳ$]sIoyBY~ràYLR)` a?I{7BԎW;% vxxE\Pn?kv[-~m|(JN88x z|ke_nɌ-(zR-bD{yn1E6F<En 5K>*r9{"BvNPK]Ȇ/j,&pcA,D!tOAt짨W=( neRYAڠk_4Qǿ.~.\rSζKՁCGĝtX9z_J2ACV(~8܏I\d23*Y?$:V J !֩C q'K9!j_$׋?Qw6/1EF3AoO%G#iB b4s|})HBטNLpOw-Ĕqd5X2)d ъxKu_ @Z#s- eGŪp }OA,tDt >"揽OhMP Ψo9/(9_K?T6Yo?;a:lc LCU3f{&3i?)zfQaN&6.@:0zMfqϢr=_ [Nc:*4L\idn%XCݔ1tׁS ǀ.B)azF̎efe#ˋ6̈2lr&2ЧRLK9'OmNC 580B'ckC ^_-:"ک+>;:Cq0x#Yufu'Q=]PJp+>.}v3eȩ%5U?#{SDA)}9fA N<,3b5c/U+N: 0RqMvk lMWxJq?4ֻ("j> Sg@Ov@#VtwiA^0AMQUJV7lu6$upj9x`0zDB+WOGmnE;5xeX~"f.vA'A~Ҿ#pb${χj3 v5yĮMyܶpu)q@W[#j(;݈7zNrWfFPX)*V~+V5p2/=sPnQuBK%x.l"s|h z٧1cQJ`ʡb+_S6ȫN>WGnum\))"~Q`\@N" Ũ0˕O\ Աd{ մHLz% m0 R<(veA %dzqMXMYPfT=Oqq5TXoZ WZaBx-H[8Z[>j=-i`v t Ǿj9I \}v.mK%WDC42Bׄ'x䒻^?WveofGNoM( NJ~MO,kF\ID6e4Mڐ~9[SgO# CrszǢ֫M2.gy@GN 9fE8؉7˝·ړ7Uǒ&c8sRNXưVB o[[BI2]E܌sm/ /3-S lTt]&XM/˾v5bfDӠUJ[6-F'~ lY1ϾsMix#P(I!#(&aFF(5*Rso"&!vmܬLA>_}!>X c4M}1CY5ALZgoH,)+PWH ]$2_{i0C IJQW ? /bnEraa=_2IG,T#Q;qMld%e3矪xfXئRB,UFlha"%*YIj_"Yu鰒;2Z:2G\*#g%)ras{%A RWL^=uT^6Hַ> pʳ#C`J^{.a*xw\>aRm;z9;@~Z42}/Y1;paܮ1TOf,\9ɰO9X gΓC8!>b-kzjE_dnc6;tuPy=HˠcVQTE68L5ʤ^$x ΐ1b+_ H4ձ4Pi4 )|6.*C9 $ )ܻ7TB1C{SpȈkOR C.:E|lAvZݕ7.nnp$IۯDWH w )c7pF~_Խ>\lX;NwGɐ6bo1f#}X"/僐r̜Όiv'xOgXE_w|tnbT~zAM$pA^)C3AҹQ^00J6+]fb_ JHb?sq< :Մt~1TbW\1Ei¨Kz$uU :K)af7VwT#=íb[QyKAkv.y4f-|aJ~D V:PQ+F~Es5+/.WIry=.=Z}rm;ќ)W^V $'VbDi!:N'(FH̝cY_ _[;]Pb.\${L{ ֕Vg Ld>R,qɄx?GNr 褝j8P g۝Mߺ+|YiQ\ef.oLN@h3SGR,F%ڵƁ[ۨKz?L&8P-3 x\O-;n=\7ҭɜs Հ_\6 _uPTC2Ҭr/|b|}.] #cvO63=πҒ<oԂ ^LZ2>2i]~{]侉NjH[}kKp~Rpnr 6l !o&gygrV $$كu0qc ژjhkW\>xn)69Kg,h$HOz>lύ?bbAƔ)eV,*XBiԇN:t8[d'J3 T ܸ/e:Fdb+y?4]aGu"/sdž^}v*q G3V)w]~7)u(!oG˼#,\!Z+v2WåL7i3k<&!Y sDz}9 v)bvS잤h݋:3\Cw`ݨiK )V!Z ~tҋA.B9i*ӗ˷C@&62j>\O)+ VU1@̿ˏ'xv:]YUgg3AId1xҺpv]&# :4$5֬T`4mY%ĸ]A P@-E^Hn)|z(#/,?c!jV@#cH O`n Rn^*#TO\SӪSu'"zy<8_eP Jr126gV!1'bWA0f>Ή)[{WR^hcpޕד?{CY"zR-%#|uuno.˩GPfw׾3dvq{,Uc<`TsQFep`8Uz_ʅL,qz4wf_PiW(ݾDGoc^vn2,/: 6X[w]uZ5"_xkogj=xJjfWmq͔]#V6Dא!9. *3EBBb2;?uupg|CZN "nDP>*bI8zx&n[ɮ̻N>D*4t@æV0veՔO Ko*(9* ٸW *߶k[iۻ~]wi6> 'Nۥ)iJN] 3pDф)&ӝ]&p1321r7Dh_bvdX|ɿ -@>mombk4p?0 6Y;izܧf6O) Hwm&j46"/Uj%pO$;v0rF$= fZ5(?71c7GߚXdr~1V8PuRITC7 _4x T#GWP.ir ϧ.B^yKBQk !Yלq X^tQ*D5ݦX-5=k;3WesbbGV ֍\"zDUdU^jSq􉑫V3פZ H?̺ؒbw9f>{iޖ1@/Rp6.@˹ .婦.IkShڶxPzV* 1&UJ/z2|}wuk3*4iJS*Uj/FrFL@"pөSrmn>{%`~gS<$"#̨Ty Z(b8XW.´ ]WA6"4k3H} &}G3m(p%^Şkaj[-| @1Ĝ~ 5NҺ*z&"OØ}\N6`InLG:vmF۪%,U8[з yk4)|9<=r^pHzF-[i`+ncޖHFWUlv({! n 3R1/NThʴf"&PdP39ٙG{!MҞ:m7P! 0Z5J,G  =Y~TxR2tmT* :^` A 3ŠS|{A~h*l;"J #2;D0=xx5yCͺu?m  JGk̈/DcI*swp\t4fiC!v44 8qpOWߘn--I u>.NfVlMbh/} uRYh ͦ@D,1"zeV*s̡ѸsaSErȥR#tX\<w,ư6bl_6 P}D|nP<LBZfp6HKKw!m< 1/He{ t;]jSNvv֐cHKy`٬hW‘)Es ?9|BdJ@8HՐį'Dt(-b#XA7LU9Z*X(ZUC[&T̡0 'G$~ZS@17/ص1)4쭕޾VѣVKZ-z^s|I;=_M825wπ $2LejN&X~On:t3yd #Tɑbvhr f C)sךo +,ԋp*gGJ mUubT0Ũ_ ]yƆ`h5R0Gl MJ{''M/nu.n)TwAJ(YԂ?%J(Q2#nZ$R5K #L{LJ/Xu ^rC?'M(fCƶi<ҵO 4=a1+ܞ5z~(rzcwt9x$r><'J/`ih b-iJؿg^\NӒI~'a@א$nN'Q` &;}؁?MF|x]?MZ*[pĪjG; ONCsCT[$:[ѧu.rW'P AEC+o#P> >6ioYxi &&yVJ1g`W^=4nE悗f1(:8AWKع%. 3g<,A[̭ dAJ~VYvbno9u9!1˫6s熑̕CYSwMIgoޞWX\دoa,\ Bckb2鐇}T+BtV1RT"nd3gxQI*,d&Zl^u*Pqp%4i^U</tqhY s~^fb0`LB.;x글L<_JDzp1`5 ՀN:)8c5@_ Kjg]eU~DhHII"?Ī.5XY;D Pp7u Y\޺ɘcګYX49nʐvaGrUDJ{&_ͮѶC_Cm /ݠm1 tO[AؕTUw@ x/P˜7?kK!C@iQPćC刢k"ta!hqL T[saOd@3)^A5,T躻鏠A d>o9|t%_ŘP2^בVY 2,  K8\y J).quJQSxQZs%m+rF|Ѩ 0*L72lQE%P)TtvC :i&o*RN TH扲}Q%'cNat%Cw>O^xf+2E&b۬`fyYw玾-DV34~Bd-zdUN/eE"b#A Y춖#K95KAZ2v7*{BPz˙F*ReZ^myYb`MAr,NH⩳T4*ܷbfFO3th/5540Moy۪ȊOf_ q{!U sڌ֑abp~& Od7T ָBG/|ToW&H] \;\4*ND0FF /=Ѕw LJ}b% R,'Ū{/drỌ0: 6Jzx*i2ǂ[ft8mC;e'E9\!w c09-or`X 'ſW2 Hح2ϑ]%ECXi{p&_. [x֬E}T0 ]t㄂ i^IˈW*1lk:X49.ROfN/1GE vke KuVx OCQ[dbt)*eiG)]ǭڇ=ܧEoi&(ya"}nA;@9Д`,c 見w j^G֏Ĩ6ZFl6( (椁~f4#aiR2:m1'jI_+-=)Xh)cU675Me#h(] ;|$ ïs&02'4#m1i%PDV[.0ivbk A~IE?Xxzk+j?W`/4}SV6na6tʘ\tK oo\z^A{3={K~ڌ|K/ 3”ҰY}7~6ƬbƵ09f-;[[ߛ% yVu,Dpj_5 ^ c/uIC<4Fm֩]FMj]}/0nB0EK-? ~}U5`RNwʐG:1x묡]4IJ7d|* ۴O.~:ԍ`R_򱓼;#D U$S*bu}LGvcSsz*%!~2oYq-:AfvJ9 %rm<1â\ʵ[,}(QؐN+PƓ:pDTw~1q/WDZ[r/]3^K*~)$6y!ț|mF& LzהU&hj|cT%&d4l۰2/g^8/<͵DLEJW|>†]Tl][c@w!/c~e"Q06)/6ZYd>kR;v+KV}"R^ȗHd?DI!  +F(oci0Q#~`[*O3*=TY82LvqW{9ߔF&>jZƌ~={2z!frޅ lzձmL G,xy{r;bR \#:u$}4 9g(ߏ֚vKcv4֗*4(޶b6ZF~65 vJ8Aߨ0&ug_YH6Zd7᧨:5q˒tRvw?eme*&I$1nf[uc[^_ePF{ rknϏ?Yh51J%ӗ_/0>c=14ԒVD6EY!Z 8BaXz~jl:աZmmFlr ˧qRXd?n7,S\l;3bu*?Rmc 荰4ZAo!uтc<2z*堅9 7 8ۗ gm;)V4"sϮ.=)\C4n5+ֆP*$V4sL8V0s>q@9@/uQYN|W^FuRm 6k?m3g]Lim~sSgH nb$xրE`1U^JoE"ySx|iL͵A Klrd߰Ȱ!^+9hnɍv"n-ITW߆.QO=\5E}էy w hQ2 k79NtDCSd g;sB_?>y⯀_ Aћw6Xѕj` 1>Kx7<@webҴr6`̟O YV:`d3ic3u_z#?Xm4'M k* q8ck*6pCH8>0x83ȭb3MHVE ʺjU{d@2Hyv816kg3,<Oxr¾v";hz)vTX5AJGHw}3 SωɦVb}i9{QّSV~ Z}='yPÐNmoFITM߂۷ $׌CG] iU%2zf6ENJ0qe5z']剉#Z|"4ϴ^L˷( ؔc# ɀWEj{$:^W.O |Ȯ{Nb}ř΂fYHs&hOPKFVc?FkdR =Ei/-I%] DWV?|c3b7fTg(yN CE&g6COE 92\!FjWfQ.a#8e5]> +(΅ [<+f.>ݴ%ڦntvF$;K!ra‘={Ys cQ8ޫ\h ԠCî0,l7*S|I<@6 O?TdC-}}1f)ne u$hj.Gw¿O lq+̛ 9ρeC`c64 0 w[hfwP ٳ*JEykh6WN{6$ds/FQԺ-rD#K!s|p&^bpӛ5©`lP Ʊ}Ծn?{S$|A flZgCN^֫z={0Ms99%؁4AA 4;`W鮳k}vSWJ7n/rR(84B?"{#s rsˬ wjʸ0bEU@*hg+J+޽.HȞHKq:@bj_{2mL#lET=Tnv5ye_Ҁ)r^[paݿtTxoPSggBLs L(ml K{Ó":aR-_gvrFȿɏBvD79kx*Us#&>'/^遏hHbZJIR& U!{>l~*R00W/LZ?6\#ZS[J(eM)* Cԧw{2!-+yq#X՗Yl\uE}@h$sw6{35eJ -swzeRS z ?@1 ϝYx(z^qCݯ0+8C&"EaR4KbwFyT~ބ:(67͏tW~ޯW9Tًf&3uO4H8(U _+-rnh@cP^l8? &Vni!B97?_y9x͡-i%EkTt|[_@"~e%;& ąDEAQ"2yty<'h?[ ^DTyEJ]FS\/ c {xE= dXGJRk?Dea|񷠉t`fAJStXN;v{XG5`%ѻX4f`O28&edqϰ@hԥrN)7E9Ǥe4- `gS7z0eo4 XseZNpzu㾄eW1L8n} :M~՘SC!r/@GKFA\gNہ֏~y3ߓu#5ֳLvEAq_d!KrV]379MŬK76zw*Ǟe.۫*T@l+Kܨs}+4u!P=F,`P9~\m N̽>zRd ⋊ Vg!1L|8p|f(3ǸՋ|^^^^wDl*,{>{1Ҷ?9ݳ0gxhܚ2+>RM4˾\^r{cM9qp&FT 9)Tہq+# D56]s!܋ь'9:Qw@lS㪾[; f]5puc2n{؟b%|BP]e]j~r齯 էowQ7-`[UQ]12a|.*g}ZwB 2D OR=&LSԠ *hgdئ"w/QMI@Yk=?W6jd@ WJT>z$q 0M8*g(I9&|-!PO~ng(HFL $^ 4ќkH-G D`>X,;AdN!t؍*Oy򏋓78» -~.}FGrЭ=GѢp)mTѣ17 fyZCn7;SOΥ %_N,J8Ct)k\-B]uaR Fp݇HZ4ӏ\TA"yv,eJ#VW ,EkDBm[eK %nO"2+c@R3&zht{ꑞ(1~:[jӆYTAa~:?bFD$Z'ù ]kQZ!w5ӀMMf}& }S\u׏ Ms:ZTdHdʇ!:H'mO9%W*Qw(sE;A+c979SnBGi/޽ʽ. M% BTwYo435U/5 - tsŪ rxtDNTfK_7cX@ԥ0Sj-mj+PE^V<9~ ħV9Zͣyy8+% AUBvY)ߊk#᫴tG@O: ukbiuPL寞t0Wdk 9|ҵzYAJGt{V AfJsvoQ@ i:\X#!fDO0t<SԒbvE pN>z;4KĉϳI5!9-cn'L1)ʄ?=P_b3\&c?ǻl JSڧnLJ.xf`}:.c ,Ѹ ϡQ~lKǙKpU/ ]/U㚠ڛBB>x z排;rOW\p˦-ۇuنW Kn  >Pqӳj# O=}j~ҤHlvP3ŲZ4QfYBIzU| c zf(t]. s;Nmi#(Gh$+dli ˓=Mqp+V&)f ߩGNٱI~i.oL [GH][j쩉IJL :..&;պT:@Hi:!c_`y"udDDޮFJM0sW5oY^q_< '8bHt5Nx&*퐼᳟h o-_TE4PT>k pg^*3lID]apD3cv4qB>E:'1iݾLi`rc>3+Ep|_}8vUe/迋,SKtޡRJlCqWE+ǽ.#Y F߼e?p#i)إld\T }>3OHk<"ԕ z4u& uLS"@y@ֱ%q(ַ4o3Km.rM*![UTDM5;O9o nF ='7ܨ5;"+5VzoTR#]B`ş"G-j74p&bZ/a|k O߈~H.N>3cs_I0Hk$B7<&L]fcJ_9drȟP#nK^>)iSHCq6 iTsǭrR= TSjz-DR6 # эh ˯|f2LuE6Ljcʄ7{V,_he})+2M&6 <b|x$5ٵ0)2fbҁ [ \gRhզU"3|=Sfڳ%vRsq<dxOوWb&'1 v,~Xj)&?v &2U/B-20=q3^{՗vHk]쟱(ϏF0].En{unүt=JѨ 2Q|šxIgr'SZ"xCt KM5ѲN&"hfC2_I9*SO60HÝuWY%6N/<0$d6P_{;vn:6r XRTo.ŋDa 61AVlNN[+2>n*[/&ᢆu/dO7j؃P~Ю n瑂QEMD;Y\<1v\| Z|w\ $r=}N{cs&P'wUMߵc9f\QKg} n~WN/ wU:3aRɽYjkq :usHjbj@kFu 9r" rތSc a᎝x o@H9qr1W֬ lfMϩ+]yEHve%bԅ Dkmqt ?n8"E6[ö# kNO@?w$W_#+0$w$`U7PFRbeiS:zci@tXRݒ~GA{CtMͪkYmͰ=ೌ3QEsbQ HZWnYW~@kN$8SNy8S$p"=nEb}4kH.& VX+ ft:W'3d{溱O$f&TtZ 8Y(KR3 M# }x"Kʷ; }?Lq= I5'ƀPR&\\%z6AhA!`X;,LKqKI(y2k/"b2zu:P]ui &34]0zU!BmBnE[zdSm-LOkV_7_CD{6sq2' #_E \\>:K#IZdXP'V?VcvVsoan݈Jt5x/yӝ }BSWa< V _# D dp;'o])XO%7_ϐӏ+nbƣ두$ȥG ކ$Q]l`ZX/#_aoxVr|mdg _@!Oae#MqoV/)mWN zdZz c]Bf}/wOɹŨb}`!E2WՎT%3vf҂/%D)6!mՉ &017, 5Üz  )U Jmd'nw:҃ Pnz"ОfG=YLn6#SU~vW1,9Q Wr2=So>T%1J2 II8 ^7+sntt3Ju76D@:l;&t=>-PQK\K3qT[Yz%7r['9.\V3[4ZDs-cB>tN+o]lmpg7[֧E!D1F-ib\SS&P4:8sCzz/3+U[ਸ਼R%\ls[_%.lȾ=v 2&[wxfyUD~n1:W!8;p~"qLu/}є Dtb}g_x4:S^-Pyh]MCN9բ^~ELl5R["Bɸocߎ8 /AN!ꀮc.@NLZ<( /ҜZ+t%<H}ϴugSmkvZ[oٴv}28E=YIy0^s"\? KB.`9Q&BC6,% Lv(IOV`|ԁdտ{Q 3oC @ݭ]T jgCٌF|S8^|3Frz1}tþ54!3xG87Re0 %NΧчBOOT=ժϗ*&8[i3?%>ܑBs UlŪ&2OvF7O! Ƨ!Ώ>hц)2#S2DN|<;TTQAٰt2Ⱦ\6+9c7s[:*/ԡRpG9A>O(#obPGLP}IǼxПvRՐYS.};,,YHrB9` h '^UN:HT祃v'x|j>+S:$}Qma"H=K@bެFQw/1{o}>_˼F8\ t+hP+vWL0ćbT|g2-JMMX0(ɻD_rwG<5j+b洳omW5v)cԕu'!IJq8Mg@84Gv顨sD۫w_>b ڕ%:V2;:9@FRBE~,9g7Jg^i*9M }3U=8ȸ#nڪ<_cPCga1W9qm&n8qEdGkmtSB,2y>kǜΑf,Ɍn2)O[#zCÆ]>!A Ir*4r$i} J//cN,&Y {˯u_L7i:O5Gh}1۠h`<ަIY\W.B+vC/5lA$+4H'w޲м>i;Ϝ<Ç哓mȎ|"N&餼6G'"uB@9AM`>_s8N ^+A:˅U:RG>sÑUHRD4uHb~T'w3M*v^d)~ZKm|!\Aa6I^9WB);{l#scү]X@B5H YFgtX%J.KNfa`2V=lB|i<.XN|cS +Z2MygHL yL[MH aJ`64@T\9 J9+ؿ{jR5c8)7Nnx:W#?4 /D$ F&g_op #r8t Xl`UU5F;{x'6@sqyNwsD<+]  1=zI'9;@H[>ts_$ U3x~r9 ]EZ;dTزx! B4/Kyz:˯(]6aq,*QR24~H 22֟y:BH*ܤckE^'_{\E5`ngK$6s;}OG6C뵤& !OԊ R%Ǜ SDcxB#?7بPx,[_A:`nxf?8jB(zg'',:lx9wӈ,+CezʅT+7Us-:;Jk'GJoьa=ӯh8pLsyv̤Ga2)06d 6߃w&C`K!̓.K[t8C[ %]Ϭ}\T yz\>(%>Sy' }j, h |E3F7cO(勫(œ)tD3T`j$ιKRe,@14N8HE4a)X1*sV֞@ Tbm`rg ,ʾ/?]UkOlXư?YUUY0F+#,gxaQ+n홽8HbV7E>g L,lu9d];ED9]A,&橋6lEldTgv:U6!Pe{=@j fϼ\q UX )cZ0~iձrdTykjZ/i*[\]Uafvj]PAWڣ/ WYMZH? Fŀ6xdbY(GwpCI'ˍDEY@U/v5bT2l%=:q/b NIIVwVwtQ(kȸ9Hoٟt=)<0\xF}}=8R4UϒUQ|嚎I01$<_IBQ1}WyUfN^kzi7Df^-9bpj(">B\ B @h]4l9G?69$C"Ы.GKُ==C"Yj%WϡwҬ](7Q? J4qW|:;Soc$ZUN$Q7ӝJ穘%?+"Y L)4;6 '*3A2Jia{g`ue$X|XJzHdH'Rl\?0%+y2_ 3lېΫfҹR[GV7/(Sj>NJQKOB˭Bk 'Q9^ohMVGc#ɷtv@Ȃˑ%Q !_KeH-:QQULÛ !􀃒󒵗L{QrD4c!3„Fm Oj"Pn"(Q><+BU<| <wį j爳ܘY-9F70K*{mPc5 ދN"I~a+ "$*aut, ȯ'թ^Vy+96Ѩ#y6@0P0[p,ˤ  5K=,uQ4ܿޤv 79>9XBI'%qVE]elA9dGw[LC?!=i\?뒺Z+<0qC oЃEfldB/ 0X߾rgş(n7SU?{HL%9"m;o$^[T` A[O$!yLjjz`Hv g~io'-Pjr"TBc17}#i`R^4`j6yᐌQsr D G,)3U7oHLڸ=%I܃ׂϮ'ԉ ő1"hIЙԕRYyJ57ib;-Y?N4y"!1`hrْ:\]ܮݳ5jTeF@ХJno9[ŋFܙ5hKԿ? .]wr뾪,uMm)BSn,ZQmTZ4>ش`'c& {{a#zsFf#hk4t ^-jY6L,tȼA.!ׅ>(EԯJ _P(U71Xٺ=ߦ( J$gL3O}{5RoÏ).v>2L :GAg2?rm?lT%w Xvđ)[}ZEwpa4}>ڕ %+L+,``f#8h/u[^ŞB$??-~Y/E-izG3pvnl Wy9zAO|8ܬ^ݷ ha"CSZM#iQ,1_Ƕ1R @s</L+vQo"BZ;苳fD:>Q(НdFUc/]+vd<|ygt8ٌ+զi5Tj/;8_`yK2 Wk -;mR;*A2eMDZHRfcH4ND חXbs=L>Dh[gz5 FL5J-^>pJ7XQ ʕ(3V=>pi2g ͆D>.KZlsa"ks("e+?׾YK1ڝ%{~p击,٤Ҥ+Z;ΜF`3u ƥz4uq~KQ1UB9ʖJmRA6IVJ?-҈7^Rnݪ0WX wAځQ6Vl™qI'lx]-_/pb} m܎FS#v-->c0ԦwIu)[sԺq,)1`ڴ1 k 2){nGDIcZl#  E=$]˗l-MP"KldE/UtYz`To/BXϦz):teL"7e?AxXpK墀,VM)8S*v"_R.QPtTб*"0q`y@GHiSG'tK0|dM|S؄?O\3Z\NI-hE .PDfoFUhgEUv8w:sorVtf1ET:T06u Ί1L[HzT tN<:t'dE9H0hL4/H{OLMڑOhPk(8 siGuUw>7Z2ޞ;cyQ!J8S{a@Ku2>LJU4R#]:Q%7 CgeSyܯ^&7$udc7?e m4ӗ &ɬ8Cob/Nn릠Cn )&W+(<[*Xf_7 /)nB}ºI7x (d-:>=F>lx,K朎;4:3+Fǫcaq4air=?(N+(vw=<;|x|x˰Xկo3 շ\윽mupX7>0Psab0*x'>1{[ LXPyo7g5HHSFB// uPiϲ<5+duw3 /LtPf ihBsEEZ!̥XfZ{/y5rꉩyJ' W\:<=Ǣ+ $ (=6x˗U|F\ow›KU- }G_1YflAfi'Sb^UPI4z yMjblQSSNy2R@1:$6p|Rna|?)HnǜlXKjh8nb.ݜ}k֐Y44$m6Ǣ B86w`DT! g I*1!ˣ#\}=Q=]*'f\CG-rCMG@ JUqI֣%}f)xGau ?xxEh:@l/.Z6ZnWdZC-'<)fn|>}9Kp(OreЁh4]{x۱$Fw^ˡx.d |]ZgP'Nb6^}.NQqxuXt9<2xZ: 1àAxѡkEm5 HhÍzqP; okJ>#nBfQ° "r.*D6}Vӹ{"K?9OVΉp93E<^ mB,I6(]1re>wTGw it +TQ+F.MYyY+pBVJef@y!(}4a%U+Ł# YvB$D"Inb+LыtGkk<Hl"Sn0!*=TT(h}E;]ic5>WpaSҁ+k#wZ8y뢠t(]YCK䰲)ە&T͇e ,A7dN%,=9׶n7$>30ca9"4 ~1`E7'.DJ oDe k+?ִ780גa~YG; =Iʜdn̯ ak(=Q,cg_5®VhW%i݄yU*τȁNcC]R./\hq P[ep>j ,avpa"Ӭn8 [{z%6 j} ޢ;u$}r$iB[${)UEChj-Yc"h؈qӬO  ΜpN8U}V>Abˉ*tYkT/e8fFg^b7=9PLU!%>c^Z rBa1x'ݮ!';U٢UkBWR LW""`.g|UG=e`h3@qg(+*Tɓ*_ H U3pSK]*XtԜ!9]#x(e9ݩĄ5k'%; >Z+F֑l.  H9xƿ$3射 '/\^]bS[HbZ&ǝې/uZfA5h<%-ܼ40Ahye6~W Iw?g8ϲ[&S ӊ.p58 ҕ=FQw/FdX2,&BfY8\V19 e[V8DƴMr W4 LΣexU0,.KKI|^*<]~X!8p F ܿw?,–k1ʤLϩ*.6]igcd{fs7Q,EIQ3rhs_]g9e|@-cn)>t"ůN[/yBE/w_u`eG[-&pI^?'*DQ-cc1~m;Jåh%x[d x5N20s͓wpҽ.]Eϥq&Η`fӽmS֖DEPuPP'Sc;F9 8ty9lП)3} ֜:5Ќ z| ^9OkZĪyљ?g&Q}h5?o^i8޸MjC8. C6㤥wxA ~TV}y.}&)?owZv4il5wDUDȃDi!qO#Ot<@3͆*4Sw8ġh&t\7Hr~"1yvBZ_ym7v,a$-EtFPյֆd19 75/H׽̟ʖ1mmsBB CqZU%D1L)r*!Sz{βӻFTY+fd,2Q٢h[]m_׋ v^˩d9L %cq*2:cd𻣨]# YݿL;pjH<9$"T5rKlbo=:!wIEze3&spECg;IUZwoSp:Qvp7DO'6pUmC2C.qZ*W0R S`.6f|-`w C¸woO#1ڸ@n }N\wCKa-HnWT׋ n.A|LQ*O*Jq} Y(2ǑX9}+4%Ɵ}tݖt!gG|wւL|+r a&4W]=",Uy,^[FEdȞ[2$z? Xho㝹kJNaۓ؟x4]F)0jmnz[uv D/kFLٜ\eU6ǒoQ`9|r%!>fR3>gWF)¡.4~qws=ϩ)pog"&~2E$T1sHKZUJӲI 7J;yV7a#pc [O\2+K @!zai0R?-7g˦MmX=&{$]عS!PV &8$nlhU8I%q lGHGupc+p$;9oN.`/dY51Ȅw@(r3XtBe> Xa26Ќ8SdOM-6!X(jDAabcJ8 x*uh&kiN18E m𤽭P {Ѵ Z˟̩֚2vbMFMS $8ڙm\!vV#TH\%v|CѱkCO%Xg[Aʙ0l%[aņ F_ ol-6D!V8fX@$Ρ#Ͽ攎Cp t "ɽ]!L'*%2Žs]NX%a{+3 M8\ǟGUՍ.>d/oJ$S`R!S}M#.lBVFxԎbVl.0In hyH rd]2@>7Un9=*ˢ7BE_Sgsq'Z{ĉag| a}f4ArD[s}c[X>;A/pFZ2[ּ<'ڰR˘pYQNn; 3쯒Z:jHIUYa^'I>O-Ufx*JQJb$iʐ'j^r~@P> \s<|H:G8m\4Nn73ԵYhesrGm̱o㥶Q PKG j5Z \B׌H{OM#~^[e2Dhw#YlocUmZ(^" d;t^'Sd=O`_K_B˹jhځ,}/Ldau-x? cS>v 1a0T&KV%O6"CQQ:u_U+|$=ƷøȸY_AP_O*^}W%1ףnb7 Ir>*~S5y"%Mz€ͽN_! Wk}?͡3X 6t!xz^WdAd[x) -|CIL a:4`l S $VT ~j]G zk48%1l_u Kv,H4C UN=( T@jw <`NpU441ǰ"\EZM{MuID7[a#CZ^pV 1,lZ1}'g{r` Es;3P6k8mCŬT"&sl!|bdXFF̜D[/蠙P˪LĠ%w(\rAP )5( Ėf/kǀ ‘ț< K/et0JT>Mz2ǭ2YX_zLL\V*C*70VA{@&nT7_{RA kY !:`g>B^96 FS9͔ &Q<dØ/{,^2:bm[УQan%=vO Mhg8>8ֳQS[K6EVQ4+#X&}Qi4[CTWAY]NC ϰ7y&Aت5|~;Ot=JJ?~C<%}} ws;3w1N i$\ؑ>t\XX5Ԣz0jXlI-dFӂP 'C\9C@]CbL$s}' j)=iЋU]-=ш+⣁M#XFыh2ǣ$^Imr;Sij~sfsngRLbRIid[^hZ, p)q~Po.pnek,gD^7ZHbj ^gyz,жQM9cU=t,yQh>"?:vbDig-P;"MM*\A/GQt9­+ _iJ̮s4o3Rڛ \ Y<$(P PZ{,֘w?;O $ntk }*Ymh,"ſZwˀ N6Pm^і&k@ImHCFX.vY;~jý/˟Gv5h-NFyʷg!0iوW+&pѱǘ峴i0:Zk{1.rKZoǴ| #ڮ!MuVM&ℜ>)eF~T7&xڶ|ӏ夔<nAgJģ!4pIs-MO¡E1+3 \ a7fְǢF{`57>֧^dO#)o}:O<قش{ɧۼ6t)3.18fԭzq]XFfu|8( hC]6b0Z% w4Sd)Dj k W_C` ca}u*Ҭ lY 9r_`QLUAzUSpMdA/9  Tc Ԏ5(;>w4&{,:o wOBEM`Wp$N>O7'Kaެ k:-}LP!TQ$ T~ S~h퓦,w ,{DBD{uqKRǺgVEgf1gA6KaC ςf@穲Eft8[4jx5Wz#I = [-W, 'RYhb7#B罥> |peoMU$!g c<)[% 6`GG^ҝSbqiK'8)ձ!p?*+!9ʀru_m"3+zto ׬`)(ɴj'\ֈNV;dK `y#-&ETli+1ح˔ G@H>cZ"L0bcwM̟*j6߱i0}"H ʃJC+2}˝ttSrSzJE>~q0dH%BZ2F `ŨWdz)(uh 0V6(|n`bj4F'0{pc8Ǿ;,Dt1v^&&7h5O'jMKكZ~\l=Sٟ˦`:]=_M-h_&D%Op5|IH>e&]Yvx6j`X mxj|4cmͿ:l;Z6 {L'y@wEzUC`uA0o#A7=UB5Es*SHLt;zqT:EPAcZ6ĠE#L{:jzOGxIHܱIuOdnvb9uvC?w-bK#@8,Py_+b"AB0dzCptĬ$^fb ųݣ{&kjq?Aʽ'oׅAӋOԫ$=Jk+e{G2-@tꅊh1¾/8 DФӞGL_h:10~c}+wR\ʌ3_1ON +B7#_bB0.gi} )W^]ęfsElVeT,B#H%;ۇhGT7p<ݪ%?/#(fC (֩%)ŜBelJڞK`]zQ7pa>i7t'7LOth7"N9  +oX+^h7־QN˄=/klG`bmiZ;X;ݡ&Ѽf)씏aI%]FM>_M/XK)8d?/բ6MlI>t؅B"y~+ԱPM+3,5}.<E&mj$DoXBzN9 jc4sB΅.#IP NaI0sqkL&Lq2=ik=a<'|i.% cYqXzRnw$7Zg?kVDw"[rCf+.[.FD4\N?tJ R#w:B5WzoM\~VxjBk]{xTh=& mm :{)];B k (0fMTJ'٠(_`TUbqs|׎lgQ Dvb*ԛYr*='rx9 (tv:T4.Ww7пy>ĴU]pco!闠d0n `1Vm:LF ֜.U/nan[[<0{\%?M9 ,hAF}[d68A'V?Uw:?Y.ĔD7 )];1:&Tm.y˄,W޿vv@u̷^wKxvxWO#^-+X^1x'ݲ<NJ+G|Wir{KV1f砚qOBuv?v:zGԥ5Pd>ZLG-cITC5R*\`hz]C*}5'qM@袠/~_s1Q~$ݰN,Way9DP׼}NV8ͧ-{IZR[1BP*i'Jkױ/w? [' #F` f*j?O{ӽ[қuXW[za(䴛LK"$;ґ-컦Lrv۸WNp]9zpt߄`.MŽd(̩ӂ܏d`> qʵ`p#X y(% =RRIOܴZdLbF@ 8Dƅ݃=+@_&ѓ% 5u~h0Le>'FyY;XgCvqlYPn@LG:*-?#YJ\-آ +~ AR#)GҜ#}J8MT?K41矠LYicP 6R q^''O~Ӂi)+y\=-^=tayy}}]uI4Ϋ m/s#gORNѫFQIWBE6@,R~M y7~Rқߎ i(!=N]0\g5u:yj` yxc(yTuKiAE "Z}%DyZBlޮyXUhT4a~sMoQJA-'=qM|g_]UfQJF]0fC\@Uҁ"k8a[K"hPֽd_PtY`Ʉ/Ac]pZs; Ÿw J_J*G"գD4ݥl;k(NOez{,*yϩukřU|T^?UGgr:Z Wcg4ШE'fǁ]tZ` *L%dW>?REZf,_2oᑇ'w(V>d/F A]us?eP zx g [қLߨĄq!5ILW.Dx2ԼL Eܨ/<:„#p\B4t~Hw. A@ѝDg'k-vuIR?r,ma#FA~.0H+eK<91r'=~: |t̂OHB( njJYL,g΋:ؒGam"GߌUꜜ$ƕxFУ?RFk}M`nL{SUqBmIXw00M1`5]LOq2-GqjjEFj.{=J 8AvO}b LUtQhvԯ&ɞXRwr<(TsytҺclq b3VP*$E{:Hxa^qHM%Rϙ@zǭwL쾰1Ml'Vm>>pXk̪ȄЍR!!&Dyn:m9B vbF Y T`JgYlkXbI!.P+ށxY{Q   и'ր,ķW5iEoBX ] Ne1+rMH۱V8VFoӉA`TwG m -- y^6"}ptiP17{Q\h]i7n_ w3TOfn>"( a;HB̊UVx+UK}5( ¦rb 2|>cGUs$H6lg38~7繙oqrz^#W@Jeh#FShȶHŞ/^k)vX;B'7,U*y&$CWDk,1Ϭo?J=.Z>miD DlhGxqX4@xصjP{wj`@D 8zVs$׏]1t n{:4_[X ^Ķv `-~}'+NR&f6:dZlXh>WÆo\Bƛ]kFʗ?eX0'4g0te'r1I`zU(MDe/2IJ4Nu&=>!G>C;$taCk@S5@ēÌ3պV'`Sw@AߚC/tN$˰"A,y1mȼNį&8hr!ԷHk"3Bf5š1|= Ԅ7oMZMtd6ЊnNꦻ4?~{cj:0"q_$anuh7 wL$|.aN$Z1w7A 픝$+>g_ Z;GbM'uMNUJ gկWd -)Nr P͈+C%_:b PZ|_*t}[܋m ٌs]ළa*6U~svtփzOWZu[zSÍ  E8&GhzC]W B^(C. dn!a]/c* J4g `y6{-xj_.$ʬ~y`L h[{>#M,2n;?qY5{.2jhW!;\;ԩ1,ü+TW m:]SO_uN\rCtQaq0`V~gCԉˈ$TB(>d:B:$ԗW dߞ.k  G_ hPaR a`hj Hƙшy O},hǕ{D,!󇂮)g_xI<9\$8ƂMjme JnSc=Lbtu;)[Wɡ2Q%9`Я  ]ݑ{;^$h'UuG80@i @}N^+ AC)BEoˑf }PQvD9-c,^8jr18 [*6hvn^2RpH<N9sh<#.:H<ֈJ6gkݳyݷ]YJmjGu -3`@Ud@L 6Ҽ`~K5O%HF!4\`izͭS? EHfx@Ml^3seؽtP3i>];Ia"e~'IOD)5Z:JQ" фN8;Is[cVnU80t`XSԢE{T/ӣMPOglI뤎 r~b_ zJ{HN;'%m8X&O|WxhڧLbR?{ @ <Ȑy׸sILL:ϛ)N^S##VIJ=)Vׯ1@?0R-;$P%AnQj(D~z?+$-1b4W7.%=6^ Lw7WƓUq-`eyjH> ,$Ay0`c^D"D+@9=k+k񇏚*R ~<\7bRiQش(a1k(;"1|sv`z*.E.eZUQ-T@_-VON7pꎂ3l~專 ͬ>Bds& d8,Ma^kA^DzCuǿB@$^( w`+S5QfF.pQ >F: St^~uhh-6[sd8) dDlo_lXL'ԼZo`C2 F'g FeyWUN`g .(WQ$r6W|MK> hNGQD-̨93lЖl 4!W^wz#Z)żINyC_ְcW0 ׅKm"8.Gxa ?3[̿5!. wYc1 L/o6r^h>`mk1%'GPgGbnr"݌9$CN)DP!bS@sEQB r;ܕ8?F(+G+Kh5by˴pʼW 7L%d_yh@;t"e2e4Wʣ}U*u4x0f0j-8Fn'xΪdS'ӏU XőS\T&gP9R2y5V[ET7ӄ|S}FI.(${@<S~klU`~ر@,zNZL}?_i}Ef`'\OQ=^X:|Su٩Wkj8Ok^ M9@R1^cWi$!fԀpƚ'[*(&S?+¯voXKl(OpS5e Nbg :TuPu8+IAO ~x}OCպ r/ "Ҫl+9{5㒊V <4̣[IӱhLè@Z'z#VE:9%PEFarSXA{5:BP9!۲t&:끁8(߫qJh +eK2beDoTe91cMsm8[\*+x!7*5VAA= Пfȅl[֓S c^ނL&[S7k4$-IeP!:;z6̉u(qٞl5AQ:&?v) k>@/"v9z[zg@ =}=Tr㣆E1\٧/gs*pHN\c3V.A;wp&ًm)*XXI\Hvs@}NUo\fT0Jj/8/}%-I#MJRåm!F{S?j.iP}Lke[H3Pk& ;goi{]\{P 0u>ًOFMkM杈Ay1& =1wq 1#4vi6 3S,Pk޺4;B}{R kYNKwXi -!FOk_7bw:`wMȗ43_R}Ox?G+!]Ijiۺd%͏u17>y $̨Rx7lJ܎XQ_0. +thC@ޮMId$+NZVo;V.+4g99MǪщB1D )H+#g8=?R. pc[0kZMoy{ O\"aoÎDj0m|"vǟ !7h?a̴n6^a984n|?@=/{ ,Ӣ&8[fLsX:ؓLR!sv9 JΏS npti :iLN+ޅ NjUJn$ /Pq XU|jYt6kj zm4$xX5Kq p^2jvf=# %(Ip<Pclc'|#_I^BXtzMGs-! Zee\qx sRD "^N}Yu"QI<\\wW*/le[)3е}dF&k'A"K(mi&u2Y؋8El^;-=`O$K8 T)h2BaD Ӵ&b'2伻g8yiΛL"]ωJʝ ś]֘컙iB) ug:̓2S͊wC+] ^xָDs 8] otd_KQ5 K?+H? RqsUhT :mN\[Eo@ٯE$zŸ8$'"[m hи`PpfjD FG%#<).KD*ߢZ.勍̝ k/tM5 F 7VbQ@_6Oi!ca:n])Sz3B@FT^yQepG܁d埆0'񄸺TYOdĹ[yO48:W(d=A5/K57?XpR#(_C%L@^_)Ϙ\c8./Zभms.sm*FOes:'a~ IbV+}3ttan "صsV>`2ʭH;RtJ"4&E%P҉KH G$b|ݛG0~Ԃ΄r+% ףi;ݐb2%uc_]x JԒ+aOAP}7dSʅňaE,m#_FzXA@Esޚn |)zҪv;nH s:8$ۘy0t@i^Ǿ7WFlyXz֎,,c7+cy|j+]sy+!89};a˫m ¾bvEWcDJVc(Hr4*2 0+47?C({B9vOdW]Q}tg#!嵮7AլٵJEkR*x7]rzǷBK$R4gI_N =[sEpyw>ɔٹ7}@CZ6^%b hMƒ⳱/a?2A5X;;g)\(_"JB `;)yq?k-K֭.0Gqc3W%6Q 1/o^m 0fWp.?B<+P_:hDg8B5JE3o *QE_{?Y[G>hf- ] {tRNVG`\wPj^u--܋P+j"aUT#i3/oXYgM|UEٟӺmߦBV`w\#opDO8edo_i,. # +59?` dQ+v_ EAmREVtr6Q[D,d6 x62;#/pRWH& ;krLJe]Ɩ>53Pq}UF R P*79a[Xw]:&55HJXh Z^29/հvj+Y; PְQS"EM!h̞A5Ьʕ\:ѷa%K!bJ']>ľdZ8cU{ ]^8͚}w)d0_d}t5F3B"EA`Qo 9xѿ+'b/լ)\2IG֝zXYBɫy"ٚ O$!/ORdQs$tNנNSig%!4DiIxkDUaav餅Uf̝Ntr,>"qdmhPZU|q@rHhXgfְ84,y;۔XEGZjϮ@_zY* D0]u5ft?tOݍmro0p$۫xL; 3"i٨5~AČcIڶ;j5-5Fu {<8EJb| j"ʹ"S(u+R ZоHhFlN8bq?JQѪ=Be(ATKlA[?^{ܴ6FdkɎgaa~ĥBnD'SJq,W2Semw%iA6NTP?w wo4gg]MGA<4h}B%LoW}d/BN "aKX Gb@넣)a7W|6SμC'WE8. _ .֦aV=^/ *=`wX%.c|헌F'&nhܱ.givp*lLK<40+BU0WB[3I>o0b1G{)a%mul(h!NJBA<Ѷ0UWMl_Gt#E붉6'QzMu@nB*F5E]h(2\@;t1P988WMZ!ڮأRݯlˁWbՂ_YIEu`L-D$kF̫JWb/|it4JBx|lqCd+s u'v0*Kɸ/Lb'ORա`)vM"-'0DuwX'!7O ﰆ'H#Zi%ecg"6[3Qi8mIn>O"bB{5!"SnwLQer!+_WofQ F'IZ%Sy!R3`Rt8{Usx jT'0;̒Nhb~zpI4^4[Mlw3m Pjb)&=uE@W>%ř=$LK2 $$rT҅Uv?Oͫ<Q$#ѱ85TA~LhR@Ιd:Qn4Qg:|g',_1ʒxoZ+ӈ#&X6>k‘%ؐ~YN:R,^ H,S@"rrS?ggsUȘ{Wtk~$ V&MۖRv.xL^AIpXUtFaHQsV sW?sL8HPIdUaף"5v^!=/_7;(5uLL,B"e::!r9I.1MMBs1#- a(Ә q>z08 =f# hC O/n5vG?4 %jNhG58nѲbS1zm+$rF(Vϒ?oq%(= רI}q[Qr1+B`2;D#̄0vL*ʓ)>s*-2\L^jy3O1zb\rACvDHH0޼gB<5Ю+)}K)taܑ`HE s>Mh=JMS%-/ܨ)%טG^fLf¢4L:sY=`B.O">:8CwӂqCPgoV[=H+ȥ /مU%oГ$6e>BrZ6c|e8԰V*H"Wc̳ xj0Oׂ=ϷF vS"ly gFal{ͪ6t5}NXngk#kR{2uZk:97ЭG_~BK/.38uEt ʞ@ji*+">SbŔҁ@pt6pXf=%]IlL ̟;ݴ[Ǣ 9J-R([ӣkIBA/a*- 3 CR`1̪Tdl?ňӉpk]ٛ{_Eq!ʝر>NIO6k X/sBKaz LxoYR3ӱD[T:oҮVR@ϒ2ː.Ȼ'C]Xe%/FbFњ`Rj !l,U>y2ľ,1XGX׃p;B%f?&P sfڮKg#an5)A'w<GǜU%ClibI͡ G 럝{1u[p"(i-JBTZd"k Z=x^YBrOZBHCݗz!9}zߴm3dqqh#e'*ht՗/HF]O}E=B7EK7KHB?_ԉ}̩6kr 6ᕝ 6Nʫ^+'U;H`w:("xC2t"ތ@x-8.Vo#?nyx w_$i v5^+& 7S ďr S&0DeP}!oP. к/nܔk,YY,*55q~m18E 3m (9KҒpiwYs~4'SSpjbu J!{63pmML\h߰ӑ>(^m*z(5Uܷ -WaDP)g^Ҏ=KB)@٩ ў7(@(WHvd/ 5{)>"k9ka0O ;.jкR#`q>ܱE"f)"\i-5A\"|Ǭ[E>m԰/N!9;&͔vm ka:34[_iK!t ,__#Q=oF~ʲJw>=~>g.B_ tbU71$HTyyEQo de=؏Q1!5`kK ћe۩d[Nyv(/G5U%_VX[]H9k~z8Mc i?~J{ ѭ\ X~M6T'|圸Q_ b//#Wp~$Y._xM¶ŶW)EVԋsxBć=&QrfWuH-s{V|s龱js[KbR#ڜsWw``mkS,x2g7)۪b8"!˜M13:\90")܉Ĥnqs;(&wpd }̍FIlw&OT",nz0ޘ»PEڧ=y2ډN- #JS*SKH:gE R.]UAo"-Z.:'u襦\{/nӨ^'uɂYfGJ.eҏjF3%7LYh 8UMvmM~3ydG?taMpFxؠ(7L+hVUED?4xلkiC+W[mSkJcUDϒq,kRBo{Gs2Ct0#qr7 l5N%;CGvbdZFBk+<+"fQ*?3JaFLhl/;|Zw?.|Pi9)ڶ!k:Ƈ4$śv\\v*u@TZ?1.0PΟlJL} t8M\yj;f8ٗeg 8fG>v Ηkun[(Pb`ʵ"q%tg סL0gS` %ִcA3sJя[n"\HЫ(bs>J4{ΌDAz(ݩx&X@Jr`aT࿇$l>?{MXD]r4TPyӚi%8%//y8 јf#%:”,luxwI,R޾;GC:譩߫:7qG8e8F濟@Q`WEtsb!6Wm$kK`1P 5 72 ۸G;45W_#Qn 8sJc*@`9=3XdDtc!e-*;Z&SeFu L].1Ѻ!_3qbrqۼaCfl^`"op# |(EZ0Ղ>o NWFBIhoFўM-H4b}v4mk[2ȾT*޿;:] Aq ]S9ř@K~fSzk:\ܭ_ʹx d3 Ne +Y i<KOWFs8& t@) vvco(!l]^͋gK޶Qk4?Ob#DWp v& HWa\"t)Y!Q:ohUM_@VwW>83'瘚@]sf ?1$x?Q(1adȑ>x߮c\FRw_b_g3@VpFU64t79(~aԥ4HߩI5ϣ(81ۺRiF=N GUǎg+c ѐƄR-o%#ʶ粼]{e<D?V~&Åw?J%&~\\2SN| & 4n&3u;{9]5mv ìf#p9/Xp%mB2(+u[}u,]L~yUYU; Fc,WP`u eM " Q=Ն{kDf$ )1]X+pznk1F5Tѣ4!G*+q֐ǍB""Jl-q8& T}FM4en6Y#2`K-Xӛ5Hy(~"o\-My}c͊n A哫snBR}ʷpQUE9=);(cz];A\呅Cp>Z1PPfY5O0^iA .TEο*m_B,EzxDւu#Y#m- ˂[v]}xvD=~/.ou/8eFgzЖ+//MoYjJLSX)/ ֝i&7\Qc #ކfH~ XT .i544uyB7JTLiU+o%99%N@s+RFi-Y8O f}3g ta9G<WV*uJʞG3ow:imfmEV2Ig;,XDE|pjoNMrur稜.{?N*_ 棡Z,^7Q\F[8Ce_/(UW3\|h q<)"i "o搲2`PdfSo']rj6L29J認?PJM, fٲΥIdD갫. AS=բ^HE4.oDDXe_`G(4?85GZdmS`/M;NA{GhЧisnZ{)r;]^tE.˗-m T?HÚBhVc&PM $+.k85Z쨔<;\*p'mpP쪵1.S:ljNhG2fyj/nav) $9C\x{99mGw>K[9̈s~vG&f*1E.f9Rq(u:kIm|Xް= :އ+\wg wdXjvHgлe+.ʬ;p^½Sz}@^4`rtihT/<5՝:`;&Z}#vO rA '+=~ JG`n v$vGC6t.Ψ蟘%=Hn45D!O@{=瓗(@?Y:P!]t,.U)Af~nI>Y=%t2\jEΡ"aAbZ7Q}6WԪiJ-=-({f06_SbsJSRV !|{3Ŗ F>#>^+SrSqI]݅Rhci~EEyI{DkMgt1Nb@aVC?~e#NߦAZfpgْ4n5R6Q7.f;V!.;3S;Uڗդ5Up^YMtgk?(.UxLC!dB3 77;D!7Qwfm.c?qZ0o;_qGlͮ NJ~MK-)QY]#F7-Fܰ-Ɨ{6Ju>_,wEKzo=ɢh#:-c '}~gg4л_dZņ BVYGTj4J+mQ!( xtxqT|_0A(?O ^|Zk}ez$ 4;KQ^[iܲ&l$ȿdIY4 DwO>hHB]`u Z;;Iۃ=@knGBGB:W\넉y0KUK&W oM&q)8TɾA'&^8Q*yAkeEf9nUR!7{}cх[8w ?R[[hnYhţ K$#]"Pa2y:R qԃYBz!3=i)zIɉ$rN;;4W qGLH+۝u'cQ i00tubPr!3}fM7XO;ÑP ") &촷&cȰUTsMİ:)L5K%v"ۤ8B2@΋H! jA'HW;C[R?)X@Ly1tc#_ϚEmx\Q\` l+svgn֫}N(ns=zn+;ؒl:QPNE򨞈n\Z xpLbT:J\(6h:34]".rٺ4sM=zoUDrcmE8/+\;lk?vj{jD R˾ vE|26Y};6Gn@S"[KmzWmax"W^hJ6vi=֜)FpC-כֿdrvڇ%9xuZO=a5R6F nA/*x+yӟ?PEZRhI`,Ɠ,V={y>/` x)ϛƫI Wwtw`ڶMXŲG/[b"ڲij` خW$H~脮'^qx؉}W̺qZQO\b8v7Egζ|Rje'PˇBo4efU(Q\Q@3.5Zt@>t/[4Im 0)E,–T~JÒbkؼ'n)B8`jlV4W3|wGA2i8Q2܏zwT& UMͷFq;Bɴ.+?4PFpD5505R&3Q `_oiH !=Veڶo%pbb+d;w2[3^(׍N(c{@R*xEl`#X۷C#0TG ,M뚻Q.;?~ mCZ5{+&f".&ZҨ5_ ?$@}dlbͭ\k#T5Xri Z ُϫ(`P-/Q >SgcNѴ=: 1: ;$?-DbmV 8]]Jc_/myP5?=zDzJZBo]95)< cTA|8^uG^/ f[^}Jf&Vcq[~;p!4+iXӡ1L?q4(Z `B'MoZg\E/Ē }Ⳡ~=}ЧjmM҄<%(,=$h|TmTnOv,+krWJB;wu^-p3`.z$,|4!Vh`c^jr_GSqVGq gB >*+LLS^p ?i)K`a̭E6$}!ݒ _8 Ü:r)[2Dl. ,}TFHW;zk-ǭ8aKwÒ;e&qd,4)Et34e|&W6Y^ }Ū;%T&zIM2ȤGd+Ħ-4)yroݤ&p@l9 $b> )oಉMv@ s߉pv-򉊄 ?Mq9iL(Q$/emۉUS\)S(2P+֐zSF*9qP!gAf%@" C"H{\{x !ǒ]_g*>_[YJ^g`E1 c1br76 z|SI{MV@?8?D}=. zzKD°P UY|4'Br.JW=hrMI}1G5j5C['7m(~p̥cPS$Ω^u0'ڄ| I*T3D )2?K \wGlj $bwTFT=l7?)656 &cƛkXIgkx-+hʭ$Eҝ3|ߦq"B. bQ0ۀiv8fajMgD0 wK]1޹a{wV];gGlXISW5^_iax利 >Uo)BTw\E,Dϱkx " PCW?} Ew,!E9ʓ:u ̾G͢P}_;3 $P|U-.8ֻ:K4A|ǒ?x;| hroι5kdN9ziI/qi?jzH?-؊mE7cg+.7zeΗKpL1aR4 ~σҰud!~]۾tod}Q)t1vK$U}W8XQ iMOVA`q~1Є*W=EnH2j+8t^ X<?g13؂m{/Xz66VM>HegA4 }[/0}VEhtZt BFUGG-фRL6"bm[h@WRqyOjǀ@,jNY¹?sN+cAzz.YAOޑ:!y@_5; rC<]p|;0Źs*J~pkB<6Vfe |o^9Nv /0^Ή胸 }ވcGۃQ ph=謫jfpQRrE 1(XS ʐE ݂ O:U /f.Uy7dA-; ;,M|=IԞ4 YTYVC|u` Fe˓N)0,)-  $P˿lcBނMIokjf*D#ݕ>Λ04ngY8 jy&G^RgQ2L!]Qf۳ ɉhS]80%fq5K(]BFzu]:Rϵ&,EBdgZuߍ2.3|aRqcf5ȃ[~]ٺr&Bmj -_QDZa*ث~d1)Qj幹'.9S _zWfQ&b j;9fHl+"e.qDISwB3xIw b=2O^5g MrҿC:ܪēY3pfVTFEP 5BvYoɰS 8N|nHŕ2ҤsƟa6S\C' л.U'(.0cQD]B{"/gTܜӥ׭;J>}ˎ~rMOpV;xy4q Z<_ ?l(upo_ YIl=c&Z u#oe\Lm9-ZM8o9+cUZ(n#+3g*zDx@~;>$5'gCᕹ69ibq9eT^AnޒNǏ8> 3,JsV*F 9ѹ^!%S1Rs== 6!k(X$d<ǡK+0 2x`\pߠׯ^2@kzU^`|fhxWPtx3$$c4[:jJ,-  gI+Vg7ŝjД/x6cTþH:;iF$LSV{<Pr/ d]t!$ =kކ5k-]u(Lxݙ^/%FSl5WqVt"O~Umg m=qqt$6&'XaS ދ8ny!u$A!g %^;/$\ 0P6Q&9obLp2YTy§&7X3LKX'|_~4-OEE9]ض7e,\ޮdXB%Tm<\PA P^S-8x?HPcxMt!oD]M.J2Ɩ;c+b|%IʣqK)w'C˲:Ezͩ4iR$tS & L8RQIv3Ie|8buaκڤ-dPj\C_>IG.|]T 3}B%2Bw݂FFv Ra2J_$Nozs<_|6!&!M틷Er\)q!0` h;]UWJ_u [ǻ uH;hӾʞnaэXyHO]&(ttJ1+F3GxY&IL䪍},bvKVo0HqGH?.az2$= Z-YuTYˡL-; JhAHq%m]vk̞`6z_}kߞo;E{W8epU&A8>.E+LqT ]a8G,S:G)s~)Xtl \j\M@"/x%t;{*Y⢜4m E1ap̵B2_[^lpXUR%D*N >`U QHtYlB[hQED5} _@LYZ1Z`,ftF3 (_: 28#_P~xV=Wz}XaO( ˴Q?;_vImQQζiP Zv OZRY|Jw3gDdG$Zx`]lڎhaŌUwFDE1a$QĹ#TMZ`$gC8Zd"jzlqGU\EO vF9"B"-|M[4ˆr~r$;DY!Z ŒLzҡ㥪(X%նuֈnMj_GJٮZ>إ ƍ86砱5ph򿊔 M*o17?16o[*LS,j`ca:v_x+z> 3c/J=+h@>&#Ln7*9t$:٬pqB0m@C |ѩYxw\Nq`|_Jt9k\HBOʺF(``pb;' =K>u9 V И*`\"̻Qb?60\',݁+HX2nUsZ^$8JR+mpaO"]O:z2,Q@xw+eq"tbɂch)1 G4 ߳Zndl{֕5;x2u)fKZ)ah<h͢)+ xݓo*sVd|ީU >y?+wFm@jHgщ#_*&зDh|<,F6yejtp(%7 kυgأ8'R| z(t{&W UJlQ>|f|_ʆBN]8MQNɺDZBU|D.EbJd>cR'~>X1eķA9#~AV\ R=~!{wVHS\ y\4=a4qnB2'D5BeW̼jB)>M4nhE 8̕^d11 ^ V,cUf}PϾ؍%bN^(\iB3;kr9JC, 2CgIʂKdXt=CE&ZnldbJ1w76|Y#} YB: )6F %`Yg`'$~cs +t]̪LUziO+rm3&C}Z:R75={&;qd]憩#T;X?E'Wɕ8~K ;V`͓0vFO2hUSW*ʁ{G#ԥ^Z Zza!gf03Lʨ^3 ?KOI{ioB9,{Gv>Vjv?.s Oк^p jA7E>;m%ߞT8A/<Szބ!D$˪#{KW,aCFli~>IO_id\sKK^Öx;Tr9G-a60^{ &Z} %&U`6/܏;K/kdkI3k$dΦM*Zkg A:&W)*^EҭvǕ5X+wAlGCǔL8֫0@ iH: Y2ߋ)9 2M)|E!J)<|r5o]X H?m~dƻeT]StEĘ88̾D/u1&-Fx RthuA?xmC|v4V#7cpk lQA4)w*G`7;?JCiWzXI-x&+~>jbڈo4R (R1Nn+ Jc ʚ]SLLՅc؂a}Z# e|MÈ rN} vQ~\RݹQ>]0c2gT!eD: x 8ƄRE8T^*WY[V#âe[ _JCd,X &?^Xۄ]28/72=Dƶn:fwr{j_mdJw@9c2GvA}pcO}!wX`h25QC[N[m|o( k6˓h~U{٩pZ 7  Y__lP3)9 _iwp̧.6d XKNMPl-u‚γ汗&~͍rYWTyA=ug_^U{VzpaS֙c ٩|2૟,qtnxaV1f9 պ2: bP~Ze뺽nAߐxisf[ftRX760f$W\1˪S^xE@? 6}{:30 1q"ÔafLdGe=ЁR;]Le{e}40\_vƁ&;fjm([4MVbVMlSNcT^QA>΋ o Fh:QD ou7>]?$HC+r9ԸpDa6'_:*SC; 䕾žq%+]}ckhb )f[br'¹u?k Q"b[A^a1m\=IpW)a9Ѱ4ס>UaI%wɳ~ĹK@'g@dUjR%E t |/։KgMTw;Jtl8TB#R:|˘q$QBzlFɶe%KImˏ"`QW dYj3ɯR[O@bnoL׈֮S|LrlA(.窿'n{"}>t[Dy'"S`[ȷ񿳪)M,i3 I;B{3"GEup+ ]'Iwws =fۋ-xA_ e|xNg>=1Ȓ93.sRAIEҷOLiH@-ȷ6T6_R'Ug `e;d;m-1TչQZHzui h2KAH;y}BKr;'f؆z5H($>ǩ2e7mUd 3aL娜"qTJm2aCOfk *U_K~"#p,H 30m1Tu䠛Gǩl5,@g&,gt)bit੽6dEUQĘ 2ͷE4 W@V|Yi$X+J;_F+cHm1UP;Bn/`^d25%_K te0Tg%,|фޥ%1DXƓV|C/; V]3d[SfX;j܉ se@3)Zȹ-h M+O2, ͊LNOP[.iBbRb`[E,tlr|iږXH'5GwE墩a>۳09$hҖ~3WFUΕ?4-ˌeyhl2#P t}ڏG7Nֲ[Y"ͷbft;AsDbC/S5}<3-}:@9vC_i9DqEe8=o= 1lH:k`aS~E'[f@nyP h>̄cjbffGE|/}=-|_|r8(NQn:6Ud쩝H<jPPP#'SZR k#c 4Ǧ0`,LoSTA$e_~ֶC,KGupg(PZg!;ɯNL)- n1Ԛv˟0{+s80vǙb)ɬԗ}+=rn*UO}F3r&i}Y<#a9>EιQI^>},y7BV7~圅k@T:2lPuӋPN<>ҼB>|M02o.8a 38ry.tsH##S;:F̓7eR6Օ(?tƉ|:!o,9vc Gu*|F'B{ij3yLj\D)e9Ɣ<\i1XQ~݂g5itJoCYR {7n汤[jjĚjcC~Etʂx+}kMɥP pbDcw$y}{OBWP 1Lb5˶EF!I@f@1!:U]YZ* rޘ*mS8$!Ks4Yt|2n #I O^6܈s,?j[n{1O㟯ޫgl&=7,1u$*\%}fҞPNnL8N?yY$g[ܥ˟]kuJJ%g)ka54sXUn54OIbz3fELU>:<E;TBIDKtۣfTm`LLbdt)Rp(-7 bw,1֨{fnN)|Bjw/ÏvtDLٜ`D׫?ghݵC?:OS1|?΂JE)mS.]ԝ1ʔ)p%&S7@{F+oUh,o6~`ɐRd̛1c$^Xqt8J>Q>s dPt- C-UԱAWT$Ѭ7!(V{}ƛ䛵s;Pf",MKN ԏ^_>ޣ$Nwp`wkv%duRaSO%L*4aiVOzThXH֡¤\;TEϼXX[99f[]l%`fR|Eξr`fo~8@ Ml2du=^̙'܀&YֱFБ`gI?frFwSFJH=L+Q-EY+ BKYgp-Ϝ#''V_pI. t f4YX9^kt$p)+"棏Oi]CB iT-u"F(g(~-[gw$=EOGdf4h\^jN&/WtnNi,Q” < z2]-Ϲ]R^N$ļK iÇhŭ|=_J?_֠te^f3[v~ [͉rv3ӡ/jo0w!@Iu&/VF:DĖωS)T#-(Y*cC7!:&=Ad6UPNsI9O;H.$ ǯh9YrA' U6(0{ëB@m^?A1IŢ-桎^FRd'ޢn (vV5 8֚*[Tߥ8S|%VgnVܶ/G(۾E@K<` _R6դB 8z$@{Fn y:WhB':@Xk&`*SqdcX8*}$fHl8&h-;G[2gZk|"٢.*mlu;,aFås0axU~m|0s j/ZgҒ5;;ܰ.89 (3&Uwq݆ Z@$A Ξ)K98Ԩs6Wʫ TrLO7B-hm`oXXͣ,U~qLUby=W[ 65֛Rg%bJ\3iZہjopsEaOi_qɘ<꿒Δ6fsI<:S'Ykqԝ%kR&/Ҏ-%Sf7+o4o}(ONDcf:s$=oX&{?l_j }?~0=pXTaWSwOY'r~۽>a0yY2t}GTBk/o'^ S9>b|^˙VQIZa(XWNTy2攨?4u>NVHd%'Hڋ /LlA*@,$FՃ7rt&ܓĻYli4XŎ1VgNONDٳ"ie qG9@qDe%#]aɥKtðRV*TLh [iy4/W&=˂s&Mh)%Fwl<]KY:j Nƚt%cct$(ʛJu.~:(LW D題T݇"HlHMNCge`6ƴ9/ 2 lx@r}#jWK:~ HJngo_)Q\-EQY2cg6CL._4_y۽^wKiT"ЮqmJ?6N(IJXU=R|F Ҝb"6J ; g9~!Lx?ëƮƏv.ʃmK)!nĩ~1jaBux(\hr8v:Gz!f * ܿ{D&)$|Ҽ|YԾr@@J8E=V 9q.)1iO%H9uK=N&mŷ1[f}>:e?/]*Q,΂bin"c[tN'Pk$bTA]=}#Ω?*y0,OG رB$d&fޜ:3++ؙdYj Ix*"JN."yitu]I%u䀉#OZ9a0P#H+GXXL&ͭj`onf̞VE8l`6DTy]#u1!g릓b஢ ع| GG`!Buջ$ܹ?¢26K>=L)ugӝ;eAჱX? ="пpzjwbfB.ICGߏ򕢽{$,nWޡ0 .OaSN/^r?9_$:BA& Cߩ1)_'d#%$A> Ί8ܠ;kyQًHk4cP5AwxS({ܚod_"H (HzP%K %^~j`b&zAs?,}՟NObd}S>KŢ '$=j5 7P%/@Ekj֌krۏIvZ_dCk5]`CjQ rGM^X5kAl_YI& 8GX`'V!iҰ .X_-,aO*$e78qA'7똝5O,V>G"2$m6wT_cS_I;)tdZlI\ݡeO/{~IEj*=9 R="e.?9*/'li\}e=f7CgRD&CHi>j (ӋZ-ȶ~쟉#3inP5w@hB% _2W\vuSd&|>?x!P<ru]^bAmeǕFe]>][;xH^Ca(.`CDچD%CdE(6v1!I^k- Q-_pBjVLײn ׎/ :¨G$QT٪=iJV2oWc38 $ȫTLa~>\$Ɛ(TpX -0GqX$ԧ"Uj[oKWc 3mbѳ)/y4#Oa%ms$v/Ý9“ d|1EÞln7.ocP*oY-C|sHQsۋyATob\N698J; ៪fwW9џcMskd@hOE3,l 狳.іwJBuO 9%L3|?''W-FTno6)R< V+ HB^Q~ k XP6MEM J6F!.rQ+:-I^s׾gX .'dڝtLäTV9紌 .xB!%U[O#?,l:u?ݧBrcj?zqq}:ъWS7.ӡE60Ex@F6*od;~jDRFϝFlR|L LI``T7cw%̨61HvQqOHAVMUϋx6[sŊ; v鷭dEc[\νJ IYLh;-?Q$˒]Ce6w K+(͔^ح٠aU9Of Jd Þ@xHA-\%`O^؀PR;qO,D~1ڦFBOnOKPH'KC5oa띂cyZ&sL>!/?oҔKQ{ɋBLO}n'UA?R9T? .+v`Lj` W$xstU.Hr/ku [ŵԢٸ+$Hۂ=t ,'s̖]vΗdnmv$ըm$ ½\]"zKy9ۘ!O}"lZb>7D"t]H0`Ϻ _s:脋 _6E wrfzHl5c~|h%Hiez4ό.'- k_*IBW5Gյr"JTCC# Í;(OτPE,b0|bVY9v FQRh) ]-et+zI81,y~`s>4;SJy߶-o+`99@7-4~c^vs^"cf+`jޕd]K̀&'G>ZQ1 1);р"Gi7U&ċlq3B̶Rq¾v5j67oA#XOnԖ^'Y7ʄ@s80U'?Ι5mے+4JD*~k`j/fl3@kPQc 5dؗ@ _ O |>wT~qXqu#oa˅ıP)fJuR,=B׷5']-@—)߭fIX 勺 K{Ҍ<*)g:X` PGCryEVz-8 |B(fLA %Yn?I"Ls \ÞI}|0-'b*&X#!q.\_ /$ҎK $7 l:n @ʬ4;HM'Wm6&Rc~P;/է0FW^{*9(  Y%ʂE"v~AE*Ck_C-af\>XQ vmUR4?XBҥXזwbf-r18) K&B| +9Љu4+ %sL{b>$eĈe kpr#|6-57I?L>' !Ut2ȐVN}o_c(2iC qbǒnZa9)ḑ_1*DrkiiW%DЪJ%iU$:B6-CN^pz]!z h6v1mF+3 h˥( lQ>1z r|O'Z k9I/2E~jd:9>yyDO7̈́&]Lm\ӌ8b$0_DՁP]H;"L[$ic_@V̍2E@0T>)v! q),I}HYCyRC"2KݦwzZ*DZ&VB'%:ʀH*C!ₓ&xw1н\@d2ץY@G+k{dR&{ ׀B9cR Ҟah9AzX( Џ#{,5^v, ) +/u]{oa jN񰽂5R" ؉SO-XT"aƿ2o^,x 9 Ë֏ۅ^LOX9Lׯ8v^S̀"99ԫW0RyR#Tf#vDٻ/NJobA 㨲"DI~#pXA^dI?E=G"iAG9o B#{=8 (J͞i΍0 ӹyͤIDm+ DB}:/?UE."%Z~8i3X aq}E o0 tFOPpec Ģ-2Bm$rգ˾lh C)`5%)*7Ha r8٫kb؉~/ձ5 p쨒u>Kƒ/ ׄ׷̧.A1|MlrS0Fg%fE6;oV Gm#Jn'GdYxoV-^Xn%d aQk2|5vsH/;XQ0``(CvCs|&Ilu>Kƒ1:T1va p邥O0RA3N57pzIˌsdZYSHw aۗ0o<'dH^󿺾 IjsBAWrgb6PɌҙӆ~L|Vv2gsf~0A(A^,ZH4DY,XQ / es 3X0j7NE؝"}͡5#ʡRhkǢa(>PŹL*+|gD^8E|2%Jryϋ $!#hx{}?^YO +sR3;\f]_V-ʁ4p2NN)P#<0SWxaq h˥( fAGic*sE>ݚw'&NcHc<}]g)0e)*~ڞRڑw%Jt++ ><˶ AiRP4;HM'WYXH,on1=ˑaw;43_Uoʤ91z6<&rU02)(tgza,j)3)C |r`;|5FL:]AdoDrw@/#^>P&暐.mn8!s  9EؼAg3ԓInHzm呒R0 OhD`^$xpT(zua, Dwa[Jw?(dB,4Ms%zIkfO 2ҺAd;c^;J'9}MdZYSH.',US8\" ڎZA㝕>b ˋU^S及A~ dCiFJO rv`=N\(#Su4O- 3C `uT3*u7tX:96m1v, O؞06F _ JZ9lw^p o[vgh %#[CyX㌕0*EZwW& Ҳ< 0J9X# CqC{<0{ e=Q12JO~Cy 7ʋ0X|޵%-O1%vMiQMW!&6wL*M_`+B0HP#eT#L9vc)b|]Kp9VQoUtFa7%SO|XwB%\ϛɜ(QuBUb[Won,XWX@W* IۗUɟ?n;8B}H6FϦJ='ޚfۥLƴ_nx ;UжcC$׵B.hg$}#ŭoN3IHϭA,;8ft~vzICQZm&<0J8 }hՓ)+,H^3/iE4daבJ@Sn[XW2 siT9_ Xns@ȍрυWɤRWhWଛ4S?PhI~԰fR8&b\M)Ŏb=vz}J' ?nBi"Nz7ؾc, ģLs L$rcqE{5OaT[;@ǯ;q윢&+ޛsKN[h >;ǫY]Әx1CX 2Ԅ5';`|dUs~H 撚IcW'i&Y 7q&RnzRW YzuxDTdN,% 쒻z. OK3vb2zox^h zg>Wx졩4FVחF wW2t[l0y:7kX)R^zSɰU`|yeCUP'{ˀ yP=-/''rRży5(z/c Eq{)lG|%:s0-b `V%뵤`PK~z) }ډGgjSuOd݃`:\njYfv0$(X"&wYR,nID`|&e f/ >'} ?]c!v诙??> |%Ok9xHtbgX~Ce#;ˠС.2q/ѭ!zG G!Ƹ. `Y3I|J6^k1nl`u)ɻσfI %øد ziB#3f{:h}#7t)oHM0G:a-6 ?YJLӄ7ң-qyYH@l7|'Mt5$BuU٦$x^?H #{mlL0)/0}<%İ}han|i9In^Y_8?A'̕O$Z=uWNYCl! ǁ{WKIJdw~,w0>SjZp4$;9i_](ϡg..oDu`SnS{ 5Dm-e{!7&qkf?I%4;C{:-gE׾?l/:т%@y ~1c[@]h\v,`F3 9ǵF׷m!be;^4R*$uWB>;yuo^3|(vAN⒧+K*5II\gi)/>/:i m7T?2SVBqY AJ?n,b]PG^eoZl^ԈIĻ.k+U25,k5 jfj-3ґrTկumWO]iѩ!e>, TƏ)Wv~*_d+dڸ^8qUԇ;ԔHë_lDm`,U~6CkO;L0$)87*PW#LԆq}]˒pCsQ-w[FG!!r;ȖۋEUdRɧ}9!הB|K5¦V5!8 ٙ|#2c)-C:Cr9i7=Be7vH‹/xugN`%qKz02%׺8KFwmcL>qw,/)/[于{ʢ#.5GTԅ+sy(_tO KzߔQfErwr_svƜ}7뒞!& ojd.׃77,j/+O,.upnlCv+!kEX*~PJYthUv7d'4рQO97} @&ݐ WRz'#]- hPwD%[eRn;Tj"J~ ִxXq nn6->%ϵQH:SKpb(% A?9{By83; B?p/,-T dBb(HtYu`ZM kGuNȚ9k7QqG(?X+B^R=:9LPCѴ R#yx$|ԓJ2-~;ܢ~7¸d9ƪӻp9 jo9Rň-~RFwp,Lp}N=DNy*7G0Ed#j*$Y/1OL})nS;)TqCV?Thg'rx ɕs PwWrckmY!&y~H=#ahq) .ʭmpv2fV^pS3:QXk֓MX 5i7,lsJ-;sVY$EuUp' 2Qbi/"YN',{o^3DHbZQ]11lpVhGݾh ׭%+zyՕ~$[>i00#P FL) RR4/ag]qS&,֚?RJhbóEn5hU~8%/LawyI !JO~Cy 7ʋ0X|޵Q-K"s.Y'ޯ@7̈́&S誙qTKZ1S> h[ӧ)ZUS cф9%l," @w) e8u dO8V0$iux|E??~r 81l͡])*U~&v}mRm{77-Π@ XU{";Ǩ(> Jӷ3?%,fldڱ>XH4yhǦ[q-v>wH'3-} 98=+Gif`Hw>V}qJWMC1!Zy'a ^5wj )j]}_ETHk_𝨉eEֵsoeAkEH2YH\5Eb|0OcxHtuCJ*d_1p\R9 ,kDi{E18Հ=G F,sަWِ*Цr% vrJ`&mib2_GIVܥ3oOVbXTv+FNK\' F+% *A8=knݓ dȏ԰-7"䫨\4qxWGpXtგPڋL ݫrXS#ն |\9̔wv#Xpm/zGK (!.jV S5Τֻܯt>gWuZ;+s!\dT0ק5b9zMݦQ6BЖ=t-/ffm.չ=8yqҕ\47 9!Qe`}h4ڍ q aZ)V-BXd6!N"9߶-Imϣ)ָLdwP] G$wdJ 5gC|/>Fh~P7ЛxXU.S~%fXܥLWk]ƽ4…gQ;/DܺdT-1H *9nH'W;%BɋR{ 0VKS