kernel-module-8188gu-6.12-desktop-6.12.91-24> )lp 08f98a4616574d7b14335f90bfb5d3dd20b12fbc22368597580a437a92645493245d23054fb029f71abea7bced13129a43d24c2a+82bAC-D>B&?&yd$, / \     = @DINx|(8:9:::G#TH#XI#\X#`Y#p\#]#^#b#c$d$e$f$l$t$u$v$w%xx%|y%%%%%%%%%&4&8Ckernel-module-8188gu-6.12-desktop6.12.9124Binary module 8188gu for kernel-6.12-desktopBinary module 8188gu for kernel-6.12-desktopjlocalhostC,ROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64C,jl28c14b1bbffb84dfaea139f54e9f05aa407b7913322af17dadcac2340c5db525rootrootkernel-6.12-desktop-6.12.91-24.src.rpminstallonlypkg(kernel-module)kernel-module-8188gu-6.12-desktopkernel-module-8188gu-6.12-desktop(x86-64)kmod(8188gu)    kernel-6.12-desktop(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.12.91-243.0.4-14.6.0-14.0-15.2-14.17.0jujtw@jtw@jtw@jcSjcSj`jPjPjPjPjO@jN;jL@jHjHjE@jE@j?@j>ij=@j7@j+jjjjjj9j @j @j @j @j @j @j Pj Pj Pj j\@i@i~i~i~iiD@iD@iZ@iZ@ip@i@i@i@i@i@iX@i8@i8@Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-21Mikhail Novosyolov 6.12.91-20Mikhail Novosyolov 6.12.91-19Mikhail Novosyolov 6.12.91-18Mikhail Novosyolov 6.12.91-16Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-14Mikhail Novosyolov 6.12.91-13Mikhail Novosyolov 6.12.91-11Mikhail Novosyolov 6.12.91-10Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-6Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov BiteDasher 6.12.91-3Mikhail Novosyolov Mikhail Novosyolov 6.12.91-1Mikhail Novosyolov Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-13Mikhail Novosyolov 6.12.74-12Mikhail Novosyolov 6.12.74-11repo bot repo bot Mikhail Novosyolov 6.12.74-9Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-6Mikhail Novosyolov 6.12.74-5Mikhail Novosyolov Mikhail Novosyolov 6.12.74-3Mikhail Novosyolov Mikhail Novosyolov 6.12.74-2Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov - Fix "Zapscape" (CVE-2026-64561)- Fix CVE-2026-64531- Fix CVE-2026-64560- Support Baikal-M Graviton Angara board- Avoid QXL hangs on an unresponsive SPICE host (okdesk#4023)- Fix "RefluXFS" (CVE-2026-64600)- Fix CVE-2026-53362 and CVE-2026-5336 ("Frag Gap")- Try to fix booting without monitor even at UEFI stage- Try to fix booting Baikal without monitor and then connecting it- Tune descriptions of 2 last patches- Try to stabilize EDID reading on Baikal ET124- Fix monitor reconnecting on Baikal- Try to make sound work out of the box on Baikal ET124 board- Fix Baikal HDA codec configure failure due to built-in controller probing before module load- Try so support Baikal SDK 5.5 and fixes for Baikal HDA sound- Fix "Bad Epoll" (CVE-2026-46242)- Easify debugging Baikal sound- Fix sound on new Baikals- Fix "PEdit-CoW" (CVE-2026-46331)- Fix x86 build after Baikal patches- Fix bootable kernel copy in kernel.spec for cycle- Update Baikal support - Developed in kernel-6.12-bl2- More ROSA infosec patches- Fix CIFSwitch vulnerability- Build kernel-headers in rosa13 where they were in dropped kernel-6.6- Fix building perf- Fix issues found by statical analysis (Svace)- upd: 6.12.90 -> 6.12.91 - Changelog: - ACPI: AGDI: fix missing newline in error message - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek - fixed speaker no sound update - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix UART1 RTS/CTS muxing - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8qm-mek: switch Type-C connector power-role to dual - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: lx2160a: add sda gpio references for i2c bus recovery - arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit - arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes - arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration word - arm64: dts: lx2160a: remove duplicate pinmux nodes - arm64: dts: lx2160a: rename pinmux nodes for readability - arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3 controller's phy-names - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure syscon - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8650: Fix GIC_ITS range length - arm64: dts: qcom: sm8650: Fix xo clock supply of SD host controller - arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace - arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace - arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan Pi - arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up config - arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0 data pins - arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on data pins - arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: Reserve an extra page for early kernel mapping - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64/xor: fix conflicting attributes for xor_block_template - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ASoC: add symmetric_ prefix for dai->rate/channels/sample_bits - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED - ASoC: codecs: ab8500: Fix casting of private data - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: soc-compress: use function to clear symmetric params - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc3: Use standard dev_dbg API - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH commands - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: wait for blkcg cleanup before initializing new disk - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec - bpf: Allow instructions with arena source and non-arena dest registers - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf,arc_jit: Fix missing newline in pr_err messages - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: fix mm lifecycle in open-coded task_vma iterator - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix variable length stack write over spilled pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Relax scalar id equivalence for state pruning - bpf: return VMA snapshot from task_vma iterator - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Take state lock for af_unix iter - bpf: switch task_vma iterator from mmap_lock to per-VMA locks - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Validate node_id in arena_alloc_pages() - btrfs: do not mark inode incompressible after inline attempt fails - btrfs: fix deadlock between reflink and transaction commit when using flushoncommit - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: pass struct btrfs_inode to clone_copy_inline_extent() - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - bus: fsl-mc: use generic driver_override infrastructure - bus: rifsc: fix RIF configuration check for peripherals - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size - cgroup: Increment nr_dying_subsys_* from rmdir context - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON - clk: qoriq: avoid format string warning - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: ccp - copy IV using skcipher ivsize - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: qat - disable 420xx AE cluster when lead engine is fused off - crypto: qat - disable 4xxx AE cluster when lead engine is fused off - crypto: qat - fix type mismatch in RAS sysfs show functions - crypto: qat - introduce fuse array - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: tegra - Disable softirqs before finalizing request - crypto: tegra - finalize crypto req on error - crypto: tegra - Reserve keyslots to allocate dynamically - crypto: tegra - Transfer HASH init function to crypto engine - cxl/pci: Check memdev driver binding status in cxl_reset_done() - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - devres: fix missing node debug info in devm_krealloc() - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm init: ensure device probing has finished in dm-mod.waitfor= - dm log: fix out-of-bounds write due to region_count overflow - Documentation: fix a hugetlbfs reservation statement - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - drbd: Balance RCU calls in drbd_adm_dump_devices() - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amdgpu: add amdgpu_device reference in ip block - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: fix spelling typos - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx11: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring - drm/amdgpu: update the handle ptr in dump_ip_state - drm/amdgpu: update the handle ptr in early_init - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915: Relocate the SKL wm sanitation code - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wm: Verify the correct plane DDB entry - drm/imagination: Switch reset_reason fields from enum to u32 - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/loongson: Use managed KMS polling - drm/msm/a6xx: Fix dumping A650+ debugbus blocks - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: fix bits_per_pclk - drm/msm/dsi: fix hdisplay calculation for CMD mode panel - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm/shrinker: Fix can_block() logic - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/v3d: Handle error from drm_sched_entity_init() - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/xe/debugfs: Correct printing of register whitelist ranges - drm/xe/dma-buf: handle empty bo and UAF races - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - e1000e: Unroll PTP in probe error handling - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - erofs: add encoded extent on-disk definition - erofs: avoid infinite loops due to corrupted subpage compact indexes - erofs: do sanity check on m->type in z_erofs_load_compact_lcluster() - erofs: unify lcn as u64 for 32-bit platforms - eth: fbnic: Use wake instead of start - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - ext4: fix possible null-ptr-deref in mbt_kunit_exit() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: offb: fix PCI device reference leak on probe failure - fdget(), trivial conversions - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP - firmware: dmi: Correct an indexing error in dmi.h - fs/adfs: validate nzones in adfs_validate_bblk() - fs/mbcache: cancel shrink work before destroying the cache - fsnotify: fix inode reference leak in fsnotify_recalc_mask() - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: prevent NULL pointer dereference during unmount - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: usbhid: fix deadlock in hid_post_reset() - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hte: tegra194: remove Kconfig dependency on Tegra194 SoC - hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback - hwmon: Switch back to struct platform_driver::remove() - i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers() - i3c: master: dw-i3c: Fix missing reset assertion in remove() callback - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - ice: fix double-free of tx_buf skb - ice: fix ICE_AQ_LINK_SPEED_M for 200G - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix timestamp interrupt configuration for E825C - ice: Remove jumbo_remove step from TX path - ice: update PCS latency settings for E825 10G/25Gb modes - ima: check return value of crypto_shash_final() in boot aggregate - ima_fs: Correctly create securityfs files for unsupported hash algos - ima_fs: don't bother with removal of files in directory we'll be removing - ima_fs: get rid of lookup-by-dentry stuff - iommu/amd: Convert dev_data lock from spinlock to mutex - iommu/amd: Do not detach devices in domain free path - iommu/amd: Fix clone_alias() to use the original device's devid - iommu/amd: Introduce helper function get_dte256() - iommu/amd: Introduce helper function to update 256-bit DTE - iommu/amd: Put list_add/del(dev_data) back under the domain->lock - iommu/amd: Rearrange attach device code - iommu/amd: Reduce domain lock scope in attach device path - iommu/amd: Remove protection_domain.dev_cnt variable - iommu/amd: Reorder attach device code - iommu/amd: xarray to track protection_domain->iommu list - iommufd: Fix return value of iommufd_fault_fops_write() - iommufd: vfio compatibility extension check for noiommu mode - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - io_uring/kbuf: use mem_is_zero() - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipv4: udp: fix typos in comments - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: udp: fix typos in comments - ipvs: fix MTU check for GSO packets in tunnel mode - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining - kbuild: builddeb - avoid recompiles for non-cross-compiles - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: scope conn->binding slowpath to bound sessions only - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: x86: Fix Xen hypercall tracepoint argument assignment - leds: lgm-sso: Remove duplicate assignments for priv->mmap - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: handle rbtree insertion error in decode_choose_args() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - locking: Fix rwlock support in - LoongArch: KVM: Compile switch.S directly into the kernel - loop: fix partition scan race between udev and loop_reread_partitions() - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - mailbox: add sanity check for channel array - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: mtk-cmdq: Fix CURR and END addr for task insert case - md/raid1: fix the comparing region of interval tree - md: wake raid456 reshape waiters before suspend - media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe - media: i2c: og01a1b: Replace client->dev usage - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fix rx timestamp corruption on fastopen - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - neigh: let neigh_xmit take skb ownership - net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue() - net: airoha: Implement BQL support - net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - netconsole: allow selection of egress interface via MAC address - netconsole: propagate device name truncation in dev_name_store() - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: realtek: rtl8365mb: fix mode mask calculation - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: conntrack: remove sprintf usage - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_osf: restrict it to ipv4 - netfilter: skip recording stale or retransmitted INIT - netfilter: xtables: restrict several matches to inet family - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: mctp i2c: check length before marking flow active - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5: Fix HCA caps leak on notifier init failure - net: page_pool: create hooks for custom memory providers - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: fix a return path in get_phy_c45_ids() - net: phy: qcom: at803x: Use the correct bit to disable extended next page - netpoll: Extract carrier wait function - netpoll: extract IPv4 address retrieval into helper function - netpoll: Extract IPv6 address retrieval function - netpoll: fix IPv6 local-address corruption - netpoll: pass buffer size to egress_dev() to avoid MAC truncation - net/rds: Optimize rds_ib_laddr_check - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir - net/sched: cls_flower: revert unintended changes - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net/socket.c: switch to CLASS(fd) - net: tls: fix strparser anchor skb leak on offload RX setup failure - net, treewide: define and use MAC_ADDR_STR_LEN - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - ntfs: ->d_compare() must not block - nvme-pci: fix missed admin queue sq doorbell write - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - openvswitch: cap upcall PID array size and pre-size vport replies - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove cpu online check from cpu add and removal - page_pool: fix incorrect mp_ops error handling - page_pool: fix memory-provider leak in page_pool_create_percpu() error path - page_pool: Set `dma_sync` to false for devmem memory provider - params: Replace __modinit with __init_or_module - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix() - PCI: dwc: Invoke post_init in dw_pcie_resume_noirq() - PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq() - PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Align pci_epc_set_msix(), pci_epc_ops::set_msix() nr_irqs encoding - PCI: Initialize temporary device in new_id_store() - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports - PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Free up Endpoint resources during remove() - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: use generic driver_override infrastructure - PCMCIA: Fix garbled log messages for KERN_CONT - perf branch: Avoid incrementing NULL - perf cgroup: Update metric leader in evlist__expand_cgroup - perf evsel: Add alternate_hw_config and use in evsel__match - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf lock: Fix option value type in parse_max_stack - perf maps: Fix copy_from that can break sorted by name order - perf python: Add parse_events function - perf stat: Fix opt->value type for parse_cache_level - perf tool_pmu: Factor tool events into their own PMU - perf tool_pmu: Fix aggregation on duration_time - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf tools: Fix module symbol resolution for non-zero .text sh_addr - perf util: Kill die() prototype, dead for a long time - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: realtek: Fix function signature for config argument - pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/wmi: use generic driver_override infrastructure - platform/x86: asus-wmi: adjust screenpad power/brightness handling - platform/x86: asus-wmi: fix screenpad brightness range - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - PM: domains: De-constify fields in struct dev_pm_domain_attach_data - pmdomain: ti: omap_prm: Fix a reference leak on device node - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug - powerpc/warp: Fix error handling in pika_dtm_thread - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - pstore/ram: fix resource leak when ioremap() fails - pwm: atmel-tcb: Cache clock rates and mark chip as atomic - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - RDMA/core: Prefer NLA_NUL_STRING - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() - remoteproc: xlnx: Fix sram property parsing - reset: Add devres helpers to request pre-deasserted reset controls - reset: replace boolean parameters with flags parameter - Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" - rtc: abx80x: Disable alarm feature if no interrupt attached - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: use generic driver_override infrastructure - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched/fair: Clear rel_deadline when initializing forked entities - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: target: core: Fix integer overflow in UNMAP bounds check - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: fix __jited_unpriv tag name - selftests/mm: skip migration tests if NUMA is unavailable - selftests: netfilter: nft_tproxy.sh: adjust to socat changes - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selftests/sched_ext: Add missing error check for exit__load() - sfc: fix error code in efx_devlink_info_running_versions() - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: fix OOB reads parsing symlink error response - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: Use FullSessionKey for AES-256 encryption key derivation - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc/tegra: cbb: Set ERD on resume for err interrupt - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: debugfs: initialize firmware_file to empty string - sparc64: vdso: Link with -z noexecstack - sparc/vdso: Always reject undefined references during linking - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: nxp-fspi: Use reinit_completion() for repeated operations - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: spi-nxp-fspi: enable runtime pm for fspi - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init(). - tcp: make probe0 timer handle expired user timeout - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - tipc: fix double-free in tipc_buf_append() - tracing: branch: Fix inverted check on stat tracer registration - tracing: Rebuild full_name on each hist_field_name() call - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: ip22zilog: Fix section mispatch warning - udp: Force compute_score to always inline - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtio_net: Fix endian with virtio_net_ctrl_rss - virtio_net: Split struct virtio_net_rss_config - virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET - virtio_net: Use new RSS config structs - vrf: Fix a potential NPD when removing a port from a VRF - wifi: ath10k: fix station lookup failure during disconnect - wifi: brcmfmac: Fix error pointer dereference - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix 6GHz regulatory update on connection - wifi: mt76: mt7921: Place upper limit on station AID - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - x86/um: fix vDSO installation - x86/um/vdso: Drop VDSO64-y from Makefile - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- FIX GPO Frag vulnerability- Fixed building with bpftool on aarch64 (regenerated config with pahole package installed)- Fix issue in AUFS found by fuzzing- Remove no more used patches- Fix issues found by fuzzing- upd: 6.12.74 -> 6.12.90 - Removed no more needed Patch0512. - These patches fixed a vulnerability where in-place decryption could - corrupt shared skb frags (e.g. from splice) and a subsequent skb - memory leak in the unshare path. - Between v6.12.74 and v6.12.90, upstream refactored the rxrpc receive - path and incorporated equivalent fixes: - * bf20f46d94f1 ("rxrpc: Fix potential UAF after skb_unshare() failure") - * 016725807ce3 ("rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets") - * 3711382a7734 ("rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present") - The unshare gate was moved from io_thread.c to call_event.c, and - the check was extended to skb_has_frag_list() || skb_has_shared_frag(), - which covers the original splice-loopback vector. The skb leak fixed - by 0512.2 is also gone because the caller (rxrpc_io_thread()) now - always frees the original skb after rxrpc_input_packet() returns. - Changelog: - 9p/xen: protect xen_9pfs_front_free against concurrent calls - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: APEI: GHES: Disable KASAN instrumentation when compile testing with clang < 18 - ACPI: battery: fix incorrect charging status when current is zero - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) - af_key: validate families in pfkey_send_migrate() - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - alarmtimer: Fix argument order in alarm_timer_forward() - alpha: fix user-space corruption during memory compaction - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aloop: Fix peer runtime UAF during format-change stop - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for ASUS UM6702RC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx - ALSA: hda/realtek: fix LG Gram Style 14 speakers - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter - ALSA: hda/senary: Ensure EAPD is enabled during init - ALSA: misc: Use guard() for spin locks - ALSA: mixer: oss: Add card disconnect checkpoints - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger - ALSA: pcm: Relax __free() variable declarations - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: pcm: use new array-copying-wrapper - ALSA: scarlett2: Fix DSP filter control array handling - ALSA: scarlett2: Fix redeclaration of loop variable - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - ALSA: vmaster: Relax __free() variable declarations - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ARM processor Error: don't go past allocated memory - APEI/GHES: ensure that won't go past CPER allocated record - AppArmor: Allow apparmor to handle unaligned dfa tables - apparmor: avoid per-cpu hold underflow in aa_get_buffer - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: Fix & Optimize table creation from possibly unaligned memory - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: make label_match return a consistent value - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use target task's context in apparmor_getprocattr() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: c3: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: amlogic: s4: assign mmc b clock to 24MHz - arm64: dts: amlogic: s4: fix mmc clock assignment - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD - arm64: dts: imx93-tqma9352: improve eMMC pad configuration - arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - arm64: dts: marvell: uDPU: add ethernet aliases - arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node - arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: hamoa/x1: fix idle exit latency - arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147 - arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs - arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks - arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models) - arm64: dts: renesas: r9a09g057: Add RTC node - arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes - arm64: dts: renesas: white-hawk-cpu-common: Add pin control for DSI-eDP IRQ - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: rockchip: Fix rk3588 PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4 - arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order - arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: hugetlbpage: avoid unused-but-set-parameter warning (gcc-16) - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: poe: fix stale POR_EL0 values for ptrace - arm64/scs: Fix handling of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - ARM: 9467/1: mm: Don't use %pK through printk - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: boards: fix unmet dependency on PINCTRL - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata: cancel pending work after clearing deferred_qc - ata: libata-core: Add BRIDGE_OK quirk for QEMU drives - ata: libata-core: disable LPM on ADATA SU680 SSD - ata: libata-core: Disable LPM on ST1000DM010-2EP102 - ata: libata-core: fix cancellation of a port deferred qc work - ata: libata-eh: correctly handle deferred qc timeouts - ata: libata-eh: Fix detection of deferred qc timeouts - ata: libata: Introduce ata_port_eh_scheduled() - ata: libata: Remove ATA_DFLAG_ZAC device flag - ata: libata-scsi: avoid Non-NCQ command starvation - ata: libata-scsi: Document all VPD page inquiry actors - ata: libata-scsi: Refactor ata_scsiop_maint_in() - ata: libata-scsi: Refactor ata_scsiop_read_cap() - ata: libata-scsi: Refactor ata_scsi_simulate() - ata: libata-scsi: refactor ata_scsi_translate() - ata: libata-scsi: Remove struct ata_scsi_args - ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() - ata: libata-scsi: Return residual for emulated SCSI commands - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: fix integer overflow on buff_pos - batman-adv: hold claim backbone gateways by reference - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - bcache: fix cached_dev.sb_bio use-after-free and crash - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blk-throttle: fix access race during throttle policy activation - blktrace: fix __this_cpu_read/write in preemptible context - block: add a bio_add_virt_nofail helper - block: add pgmap check to biovec_phys_mergeable - block: cleanup blkdev_report_zones() - block: decouple secure erase size limit from discard size limit - block: fix zone write plug removal - block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() - block: relax pgmap check in bio_add_page for compatible zone device pages - block: reorganize struct blk_zone_wplug - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Allow ntuple filters for drops - bnxt_en: Fix deleting of Ntuple filters - bnxt_en: Fix RSS context delete logic - bnxt_en: Fix RSS table size check when changing ethtool channels - bnxt_en: Restore default stat ctxs for ULP when resource is available - bonding: add ESP offload features when slaves support - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: Correctly support GSO ESP offload - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add third round of bounds deduction - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf: crypto: Use the correct destructor kfunc type - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: Fix constant blinding for PROBE_MEM32 stores - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix u32/s32 bounds when ranges cross min/max boundary - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR - bpf: Fix use-after-free in arena_vm_close on fork - bpf: Improve bounds when s64 crosses sign boundary - bpf: Preserve id of register in sync_linked_regs() - bpf: Recognize special arithmetic shift in the verifier - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Release module BTF IDR before module unload - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpftool: Fix truncated netlink dumps - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: cfm: Fix race condition in peer_mep deletion - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: drop unused parameter fs_info from do_reclaim_sweep() - btrfs: fallback to buffered IO if the data profile has duplication - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix periodic reclaim condition - btrfs: fix reclaimed bytes accounting after automatic block group reclaim - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: hold space_info->lock when clearing periodic reclaim ready - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: make wait_on_extent_buffer_writeback() static inline - btrfs: print correct subvol num if active swapfile prevents deletion - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: remove pointless out labels from extent-tree.c - btrfs: remove unused define WAIT_PAGE_LOCK for extent io - btrfs: remove unused flag EXTENT_BUFFER_CORRUPT - btrfs: remove unused flag EXTENT_BUFFER_READAHEAD - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: reserve enough transaction items for qgroup ioctls - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: split waiting from read_extent_buffer_pages(), drop parameter wait - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use the correct type to initialize block reserve for delayed refs - btrfs: zoned: fix alloc_offset calculation for partly conventional block groups - btrfs: zoned: fix stripe width calculation - btrfs: zoned: fixup last alloc pointer after extent removal for DUP - btrfs: zoned: fixup last alloc pointer after extent removal for RAID0/10 - btrfs: zoned: fixup last alloc pointer after extent removal for RAID1 - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: starfive: fix device node leak in starlink_cache_init() - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - ceph: add a bunch of missing ceph_path_info initializers - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() - cgroup: fix race between task migration and iteration - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - check-uapi: link into shared objects - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - cleanup: Provide retain_and_null_ptr() - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs - clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: af_alg - limit RX SG extraction by receive buffer budget - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel-sha204a - Fix error codes in OTP reads - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix OTP sysfs read and error handling - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-sha204a - Fix uninitialized data access on OTP read error - crypto: atmel-tdes - fix DMA sync direction - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix netdev memory leak in dpaa2_caam_probe - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - narrow scope of snp_range_list - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - Fix packed layout in struct nx842_crypto_header - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: scatterwalk - Backport memcpy_sglist() - crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: tegra - Add missing CRYPTO_ALG_ASYNC - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - cxl/port: Fix use after free of parent_port in cxl_detach_ep() - dcache: Limit the minimal number of bucket to two - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - dlm: validate length in dlm_search_rsb_tree - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-dma3: use module_platform_driver - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add __dma_from_device_group_begin()/end() - dma-mapping: add missing `inline` for `dma_free_attrs` - dma-mapping: drop unneeded includes from dma-mapping.h - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm: fix unlocked test for dm_suspended_md - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm: use READ_ONCE in dm_blk_report_zones - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: always set BLK_FEAT_STABLE_WRITES - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/amdgpu: decouple ASPM with pcie dpm - drm/amd/amdgpu: disable ASPM in some situations - drm/amd: Disable ASPM on SI - drm/amd: Disable MES LR compute W/A - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src - drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 - drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% - drm/amd/display: avoid dig reg access timeout on usb4 link training fail - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: bypass post csc for additional color spaces in dal - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/amd/display: Correct logic check error for fastboot - drm/amd/display: Disable fastboot on DCE 6 too - drm/amd/display: Disable FEC when powering down encoders - drm/amd/display: Disable scaling on DCE6 for now - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fallback to boot snapshot for dispclk - drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix dsc eDP issue - drm/amd/display: Fix GFX12 family constant checks - drm/amd/display: Fix out-of-bounds stream encoder index v3 - drm/amd/display: Fix system resume lag issue - drm/amd/display: Fix writeback on DCN 3.2+ - drm/amd/display: Increase DCN35 SR enter/exit latency - drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 - drm/amd/display: only power down dig on phy endpoints - drm/amd/display: Reject cursor plane on DCE when scaled differently than primary - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop "amdgpu kernel modesetting enabled" message - drm/amd: fix dcn 2.01 check - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: fix gpu idle power consumption issue for gfx v12 - drm/amdgpu: Fix locking bugs in error paths - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix NULL pointer issue buffer funcs - drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify - drm/amdgpu: fix the idr allocation flags - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu: Handle GPU page faults correctly on non-4K page systems - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/mmhub4.1.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu/pm: drop SMU driver if version not matched messages - drm/amdgpu: prevent immediate PASID reuse case - drm/amdgpu: Replace kzalloc + copy_from_user with memdup_user - drm/amdgpu: replace PASID IDR with XArray - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Skip loading SDMA_RS64 in VF - drm/amdgpu: Unlock a mutex before destroying it - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn5: Add SMU dpm interface type - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix signal_eviction_fence() bool return value - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: Handle GPU reset and drain retry fault race - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdkfd: Relax size checking during queue buffer get - drm/amdkfd: Unreserve bo if queue update failed - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 - drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: anx7625: Fix invalid EDID size - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/buddy: Prevent BUG_ON by validating rounded allocation - drm/buddy: release free_trees array on buddy mm teardown - drm/display/dp_mst: Add protection against 0 vcpi - drm/exynos: remove bridge when component_add fails - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos/vidi: Remove redundant error handling in vidi_get_modes() - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/i915/acpi: free _DSM package when no connectors - drm/i915/alpm: ALPM disable fixes - drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters - drm/i915/dsc: Add Selective Update register definitions - drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/i915/psr: Repeat Selective Update area alignment - drm/i915/psr: Write DSC parameters on Selective Update in ET mode - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/imagination: Fix deadlock in soft reset sequence - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/disp: set num_planes to 1 for interleaved YUV formats - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix WD timer handling on DPU 8.x - drm/msm/dpu: Set vsync source irrespective of mdp top support - drm/msm/dsi: fix hdisplay calculation when programming dsi registers - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm: Fix dma_free_attrs() buffer size - drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - drm/nouveau: fix nvkm_device leak on aperture removal failure - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/panel: sw43408: Remove manual invocation of unprepare at remove - drm/panthor: Evict groups before VM termination - drm/panthor: Fix immediate ticking on a disabled tick - drm/panthor: Fix the full_tick check - drm/panthor: Fix the group priority rotation logic - drm/panthor: Fix the logic that decides when to stop ticking - drm/panthor: Make sure we resume the tick when new jobs are submitted - drm/panthor: Recover from panthor_gpu_flush_caches() failures - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/sitronix/st7586: fix bad pixel data due to byte swap - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/tegra: dsi: fix device leak on probe - drm/tests: shmem: Swap names of export tests - drm/ttm/tests: Fix build failure on PREEMPT_RT - drm/v3d: Set DMA segment size to avoid debug warnings - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - drm/xe: Add xe_tile backpointer to xe_mmio - drm/xe: Adjust mmio code to pass VF substructure to SRIOV code - drm/xe: always keep track of remap prev/next - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/xe: Clarify size of MMIO region - drm/xe: Create dedicated xe_mmio structure - drm/xe: Do not preempt fence signaling CS instructions - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/mmio: Avoid double-adjust in 64-bit reads - drm/xe: Move forcewake to 'gt.pm' substructure - drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' - drm/xe/oa: Allow reading after disabling OA stream - drm/xe: Only toggle scheduling in TDR if GuC is running - drm/xe: Open-code GGTT MMIO access protection - drm/xe: Populate GT's mmio iomap from tile during init - drm/xe/ptl: Apply Wa_13011645652 - drm/xe/reg_sr: Fix leak on xa_store failure - drm/xe: Switch mmio_ext to use 'struct xe_mmio' - drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt - drm/xe/sync: Cleanup partially initialized sync on parse failure - drm/xe: Unregister drm device on probe error - drm/xe/xe2_hpg: Add set of workarounds - drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138 - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: net: Fix Tegra234 MGBE PTP clock - dt-bindings: phy: qcom-edp: Add missing clock for X Elite - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix inline data read failure for ztailpacking pclusters - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - erofs: get rid of raw bi_end_io() usage - erofs: handle end of filesystem properly for file-backed mounts - erofs: move {in,out}pages into struct z_erofs_decompress_req - erofs: set fileio bio failed in short read case - erofs: tidy up z_erofs_lz4_handle_overlap() - esp: fix skb leak with espintcp and async crypto - espintcp: Fix race condition in espintcp_close() - eth: fbnic: Account for page fragments when updating BDQ tail - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: Fix integer overflow in ep_loop_check_proc() - evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac() - exit: prevent preemption of oopsing TASK_DEAD task - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: add ext4_try_lock_group() to skip busy groups - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert free groups order lists to xarrays - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: factor out ext4_mb_might_prefetch() - ext4: factor out __ext4_mb_scan_group() - ext4: factor out ext4_mb_scan_group() - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix potential null deref in ext4_mb_init() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: implement linear-like traversal across order xarrays - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: propagate flags to convert_initialized_extent() - ext4: publish jinode after initialization - ext4: refactor choose group to scan group - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: use reserved metadata blocks when splitting extent on endio - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix uninitialized kobject put in f2fs_init_sysfs() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fgraph: Do not call handlers direct when not using ftrace_ops - fgraph: Fix thresh_return clear per-task notrace - fgraph: Replace fgraph_ret_regs with ftrace_regs - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - firmware: microchip: fail auto-update probe if no flash found - Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fs: add for 'init_fs' - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: Initialize new folios before use - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: validate rec->used in journal-replay file record check - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - fs/tests: exec: drop duplicate bprm_stack_limits test vectors - fs/tests: exec: Remove bad test vector - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs - ftrace: Make ftrace_regs abstract from direct use - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros - function_graph: Restore direct mode when callbacks drop to one - fuse: Check for large folio with SPLICE_F_MOVE - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject oversized dirents in page cache - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Require sys_futex_requeue() to have identical flags - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). - gfs2: fiemap page fault fix - gfs2: Fix slab-use-after-free in qd_put - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Retries missing in gfs2_{rename,exchange} - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpiolib: fix race condition for gdev->srcu - gpiolib: unify two loops initializing GPIO descriptors - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: tegra: fix irq_release_resources calling enable instead of disable - gpu/panel-edp: add AUO panel entry for B140HAN06.4 - greybus: gb-beagleplay: bound bootloader receive buffering - greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() - gro: change the BUG_ON() in gro_pull_from_frag0() - gtp: disable BH before calling udp_tunnel_xmit_skb() - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: apple: ensure the keyboard backlight is off if suspending - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: bpf: prevent buffer overflow in hid_hw_request - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: i2c-hid: Add FocalTech FT8112 - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients - HID: logitech-hidpp: Add support for Logitech K980 - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: logitech-hidpp: Enable MX Master 4 over bluetooth - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: add quirks for Lenovo Yoga Book 9i - HID: multitouch: Check to ensure report responses match the request - HID: multitouch: new class MT_CLS_EGALAX_P80H84 - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: roccat: fix use-after-free in roccat_report_event - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hrtimer: Fix trace oddity - hv_sock: fix ARM64 support - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (dell-smm) Add support for Dell OptiPlex 7080 - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (max6639) : Configure based on DT property - hwmon: (max6639) fix inverted polarity - hwmon: (max6639) Fix pulses-per-revolution implementation - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/core) Fix various coding style issues - hwmon: (pmbus) Introduce the concept of "write-only" attributes - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: pmbus: mpq8785: Add support for MPM82504 - hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during identification - hwmon: pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration - hwmon: pmbus: mpq8785: Prepare driver for multiple device support - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (powerz) Avoid cacheline sharing for DMA buffer - hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt - hwmon: (powerz) Fix use-after-free on USB disconnect - hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hwrng: core - Allow runtime disabling of the HW RNG - hwrng: core - use RCU and work_struct to fix race condition - hwspinlock: omap: Handle devm_pm_runtime_enable() errors - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: tegra: Don't mark devices with pins as IRQ safe - i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: fix netdev->max_mtu to respect actual hardware limit - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - iavf: fix VLAN filter lost on add/delete race - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mlx5: Fix port speed query for representors - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix devlink reload call trace - ice: fix double free in ice_sf_eth_activate() error path - ice: fix inverted ready check for VF representors - ice: Fix memory leak in ice_set_ringparam() - ice: Fix PTP NULL pointer dereference during VSI rebuild - ice: fix retry for AQ command 0x06EE - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() - ice: reintroduce retry mechanism for indirect AQ - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: prevent possible overflow in icmp_global_allow() - idpf: change IRQ naming to match netdev and ethtool queue numbering - idpf: check error for register_netdev() on init - idpf: detach and close netdevs while handling a reset - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling - idpf: Fix RSS LUT NULL pointer crash on early ethtool operations - idpf: Fix RSS LUT NULL ptr issue after soft reset - idpf: improve locking around idpf_vc_xn_push_free() - idpf: nullify pointers after they are freed - idpf: set the payload size before calling the async handler - igc: fix missing update of skb->tail in igc_xmit_frame() - igc: fix page fault in XDP TX timestamps handling - iio: accel: adxl380: Avoid reading more entries than present in FIFO - iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: aspeed: clear reference voltage bits before configuring vref - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() - iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() - iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: buffer: Fix wait_queue not being removed - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: frequency: admv1013: add dev variable - iio: frequency: admv1013: fix NULL pointer dereference on str - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: inv-mpu9150: fix irq ack preventing irq storms - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix interrupt flag - iio: pressure: mprls0025pa: fix pressure calculation - iio: pressure: mprls0025pa: fix scan_type struct - iio: pressure: mprls0025pa: fix SPI CS delay violation - iio: pressure: mprls0025pa: fix spi_transfer struct initialisation - iio: proximity: hx9023s: Protect against division by zero in set_samp_freq - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: test: drop dangling symbol in gain-time-scale helpers - iio: Use IRQF_NO_THREAD - ima: define and call ima_alloc_kexec_file_buf() - ima: do not copy measurement list to kdump kernel - ima: kexec: define functions to copy IMA log at soft boot - ima: kexec: silence RCU list traversal warning - ima: rename variable the seq_file "file" to "ima_kexec_file" - ima: verify if the segment size has changed - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: bcm5974 - recover from failed mode switch - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: synaptics_i2c - guard polling restart in resume - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - interconnect: mediatek: Aggregate bandwidth with saturating add - interconnect: mediatek: Don't hijack parent device - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommufd: Fix a race with concurrent allocation and unmap - iommu/vt-d: Avoid draining PRQ in sva mm release path - iommu/vt-d: Clear Present bit before tearing down PASID entry - iommu/vt-d: Drain PRQs when domain removed from RID - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - iommu/vt-d: Separate page request queue from SVM - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments - io_uring/kbuf: enable bundles for incrementally consumed buffers - io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF - io_uring/kbuf: introduce io_kbuf_drop_legacy() - io_uring/kbuf: introduce struct io_br_sel - io_uring/kbuf: open code __io_put_kbuf() - io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers - io_uring/kbuf: propagate BUF_MORE through early buffer commit path - io_uring/kbuf: remove legacy kbuf bulk allocation - io_uring/kbuf: remove legacy kbuf caching - io_uring/kbuf: remove legacy kbuf kmem cache - io_uring/kbuf: simplify __io_put_kbuf - io_uring/kbuf: support min length left for incremental buffers - io_uring/kbuf: switch to storing struct io_buffer_list locally - io_uring/kbuf: uninline __io_put_kbufs - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory - io_uring/kbuf: use struct io_br_sel for multiple buffers picking - io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields - io_uring/net: clarify io_recv_buf_select() return value - io_uring/net: correct type for min_not_zero() cast - io_uring/net: don't continue send bundle if poll was required for retry - io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() - io_uring/net: use struct io_br_sel->val as the recv finish value - io_uring/net: use struct io_br_sel->val as the send finish value - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring: remove async/poll related provided buffer recycles - io_uring/rw: check for NULL io_br_sel when putting a buffer - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io_uring/uring_cmd: fix too strict requirement on ioctl - io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ipc: don't audit capability check in ipc_permissions() - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump - ipv6: add NULL checks for idev in SRv6 paths - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: annotate data-races over sysctl.flowlabel_reflect - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: use RCU in ip6_xmit() - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: do not keep dest_dst if dev is going down - ipvs: fix NULL deref in ip_vs_add_service error path - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - jbd2: fix deadlock in jbd2_journal_cancel_revoke() - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 - kbuild: install-extmod-build: Package resolve_btfids if necessary - kbuild: Leave objtool binary around with 'make clean' - kbuild: rust: allow `clippy::uninlined_format_args` - kcm: fix zero-frag skb in frag_list on partial sendmsg error - kcsan, compiler_types: avoid duplicate type issues in BPF Type Format - kernel: be more careful about dup_mmap() failures and uprobe registering - kexec: Consolidate machine_kexec_mask_interrupts() implementation - kexec: define functions to map and unmap segments - kexec: derive purgatory entry from symbol - kexec: Include kernel-end even without crashkernel - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kselftest/harness: Use helper to avoid zero-size memset warning - ksmbd: add chann_lock to protect ksmbd_chann_list xarray - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: check return value of xa_store() in krb5_authenticate - ksmbd: Compare MACs in constant time - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: rewrite stop_sessions() with restartable iteration - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Fix the month in the name of the failure directory - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter - KVM: arm64: Hide S1POE from guests when not supported by the host - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always intercept VMMCALL when L2 is active - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay - KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Allow vendor code to disable quirks - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: do not allow re-enabling quirks - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM - KVM: x86: Introduce supported_quirks to block disabling quirks - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - landlock: Optimize file path walks and prepare for audit support - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix missing NULL checks for kstrdup() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: Handle percpu handler address for ORC unwinder - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch/orc: Use RCU in all users of __module_address(). - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove some extern variables in source files - LoongArch: Remove unnecessary checks for ORC unwinder - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: Use %px to print unmodified unwinding address - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix memory leak in raid1_run() - md/raid1: fix memory leak in raid1_run() if no active rdev - md/raid5: fix raid5_run() to return error when log_init() fails - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Drop min_queued_buffers assignment - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: ccs: Fix setting initial sub-device state - media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() - media: chips-media: wave5: add missing spinlock protection for send_eos_event() - media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() - media: chips-media: wave5: Fix conditional in start_streaming - media: chips-media: wave5: Fix device cleanup order to prevent kernel panic - media: chips-media: wave5: Fix kthread worker destruction in polling mode - media: chips-media: wave5: Fix memory leak on codec_info allocation failure - media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: dw9714: add support for powerdown pin - media: dw9714: Fix powerup sequence - media: dw9714: move power sequences to dedicated functions - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx283: Enter full standby when stopping streaming - media: i2c: imx283: Fix hang when going from large to small resolution - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: intel/ipu6: fix error pointer dereference - media: ipu6: Always close firmware stream - media: ipu6: Close firmware streams on streaming enable failure - media: ipu6: Ensure stream_mutex is acquired when dealing with node list - media: ipu6: Fix RPM reference leak in probe error paths - media: ipu6: Fix typo and wrong constant in ipu6-mmu.c - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mt9m114: Avoid a reset low spike during probe() - media: mt9m114: Return -EPROBE_DEFER if no endpoint is found - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Fix streaming cleanup on release - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: mg4b: Use IRQF_NO_THREAD - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix pass-by-value structs causing MSAN warnings - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: core: Preserve OF node when ACPI handle is present - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: SiByte: Bring back cache initialisation - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: dw_mmc-rockchip: Add memory clock auto-gating support - mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support - mmc: dw_mmc-rockchip: use modern PM macros - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mm: convert mm_lock_seq to a proper seqcount - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/hugetlb_cma: round up per_node before logging it - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory: fix PMD/PUD checks in follow_pfnmap_start() - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() - mm/migrate: move movable_ops page handling out of move_to_new_folio() - mm: migrate: requeue destination folio on deferred split queue - mm: numa_memblks: Identify the accurate NUMA ID of CFMW - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() - mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/pagewalk: fix race between concurrent split and refault - mm: prevent droppable mappings from being locked - mm: replace READ_ONCE() with standard page table accessors - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() - mm: shmem: fix potential data corruption during shmem swapin - mm/shmem, swap: avoid redundant Xarray lookup during swapin - mm/shmem, swap: improve cached mTHP handling and fix potential hang - mm/slab: use unsigned long for orig_size to ensure proper metadata align - mm: thp: deny THP for files on anonymous inodes - mm/tracing: rss_stat: ensure curr is false from kthread context - mm/userfaultfd: fix hugetlb fault mutex hash calculation - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node - mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix kernel panic when a symbol st_shndx is out of bounds - most: core: fix leak on early registration failure - most: core: fix resource leak in most_register_interface error paths - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix receive space timestamp initialization - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: spinand: Disable continuous read during probe - mtd: spinand: Fix kernel doc - mtd: spinand: winbond: Declare the QE bit on W25NxxJW - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sst: Fix write enable before AAI sequence - myri10ge: avoid uninitialized variable use - namespace: fix proc mount iteration - net: add a common function to compute features for upper devices - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add xmit recursion limit to tunnel xmit functions - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() - net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() - net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() - net: airoha: read default PSE reserved pages value before updating - net: airoha: Remove airoha_dev_stop() in airoha_remove() - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcm: asp2: convert to phylib managed EEE - net: bcm: asp2: fix LPI timer handling - net: bcm: asp2: remove tx_lpi_enabled - net: bcmasp: Add support for asp-v3.0 - net: bcmasp: fix double disable of clk - net: bcmasp: fix double free of WoL irq - net: bcmasp: Fix network filter wake for asp-3.0 - net: bcmasp: Remove support for asp-v2.0 - net: bcmasp: Restore programming of TX map vector register - net: bcmasp: streamline early exit in probe - net: bcmgenet: fix broken EEE by converting to phylib-managed state - net: bcmgenet: increase WoL poll timeout - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix use-after-free in bond_xmit_broadcast() - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: properly keep track of conduit reference - net: dsa: realtek: Fix LED group port bit for non-zero LED group - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: check whether the RSS algorithm is Toeplitz - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix the PTP periodic output sysfs interface - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: conntrack: add missing netlink policy validations - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nfnetlink_queue: make hash table per queue - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation - netfilter: nfnetlink_queue: optimize verdict lookup with hash table - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval - netfilter: reject zero shift in nft_bitwise - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators - net: ftgmac100: fix ring allocation unwind on open failure - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: fix VLAN add unwind on slave errors - net: increase IP_TUNNEL_RECURSION_LIMIT to 5 - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: introduce mangleid_features - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipv4: fix ARM64 alignment fault in multipath hash seed - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - net: lan743x: fix duplex configuration in mac_link_up - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lan966x: fix page pool leak in error paths - net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: Protect access to net_device::ip_ptr with RCU lock - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mctp: fix don't require received header reserved bits to be zero - net: mctp-i2c: fix duplicate reception of old data - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5e: Separate address related variables to be in struct - net/mlx5e: Support routed networks during IPsec MACs initialization - net/mlx5: E-switch, Clear legacy flag when moving to switchdev - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels - net/mlx5: Fix crash when moving to switchdev mode - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix switchdev mode rollback in case of failure - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: ncsi: fix skb leak in error paths - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - net: openvswitch: Avoid releasing netdev before teardown completes - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: prevent NULL deref in ip[6]tunnel_xmit() - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: rds_sendmsg should not discard payload_len - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net: sched: act_csum: validate nested VLAN headers - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Lantech 8330-265D - net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: skb: fix cross-cache free of KFENCE-allocated skb head - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net/tcp-ao: Fix MAC comparison to be constant-time - net/tcp-md5: Fix MAC comparison to be constant-time - net: ti: icssg-prueth: Add optional dependency on HSR - net: ti: icssg-prueth: Fix ping failure after offload mode setup when link speed is not 1G - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: use skb_header_pointer() for TCPv4 GSO frag_off check - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: mhi: Add network support for Foxconn T99W760 - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - nfnetlink_osf: validate individual option lengths in fingerprints - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit - NFS: NFSERR_INVAL is not defined by NFSv2 - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - nsfs: tighten permission checks for ns iteration ioctls - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet: move async event work off nvmet-wq - nvmet-tcp: fix race between ICReq handling and queue teardown - objpool: fix the overestimation of object pooling metadata size - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep_vf: add NULL check for napi_build_skb() - octeon_ep_vf: avoid compiler and IQ/OQ reordering - octeon_ep_vf: ensure dbell BADDR updation - octeon_ep_vf: Relocate counter updates before NAPI - Octeontx2-af: Add proper checks for fwdata - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in of_unittest_changeset() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - OPP: Return correct value in dev_pm_opp_get_level - ovl: Fix uninit-value in ovl_fill_real - ovl: fix wrong detection of 32bit inode numbers - ovl: make fsync after metadata copy-up opt-in mount option - ovl: Use str_on_off() helper in ovl_show_options() - padata: Fix pd UAF once and for all - padata: Remove comment for reorder_work - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add Intel Nova Lake audio Device ID - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Clear stale errors on reporting agents upon probe - PCI/AER: Stop ruling out unbound devices as error source - PCI/ASPM: Fix pci_clear_and_set_config_dword() usage - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: endpoint: Implement the pci_epc_ops::align_addr() operation - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry - PCI: dwc: ep: Use align addr function for dw_pcie_ep_raise_{msi,msix}_irq() - PCI: dwc: Fix msg_atu_index assignment - PCI: dw-rockchip: Don't wait for link since we can detect Link Up - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: Introduce pci_epc_function_is_valid() - PCI: endpoint: Introduce pci_epc_mem_map()/unmap() - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: Fix placement of pci_save_state() in pci_bus_add_device() - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: qcom: Don't wait for link if we can detect Link Up - PCI: Revert "Enable ACS after configuring IOMMU for OF platforms" - PCI: Update saved_config_space upon resource assignment - PCI: Use resource_set_range() that correctly sets ->end - perf annotate: Fix hashmap__new() error checking - perf annotate: Fix memcpy size in arch__grow_instructions() - perf annotate: Use jump__delete when freeing LoongArch jumps - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf disasm: Fix off-by-one bug in outside check - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf ftrace: Fix hashmap__new() error checking - perf: Make sure to use pmu_ctx->pmu for groups - perf maps: Fix reference count leak in maps__find_ams() - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf unwind-libdw: Fix invalid reference counts - perf vendor events amd: Fix Zen 5 MAB allocation events - perf/x86/core: Do not set bit width for unavailable counters - perf/x86/cstate: Add Airmont NP - perf/x86/intel: Add missing branch counters constraint apply - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - perf/x86/intel/uncore: Skip discovery table for offline dies - perf/x86/intel/uncore: Support more units on Granite Rapids - perf/x86/msr: Add Airmont NP - phy: cadence-torrent: restore parent clock for refclk during resume - phy: freescale: imx8qm-hsio: fix NULL pointer dereference - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: qcom: edp: Make the number of clocks flexible - phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - phy: ti: phy-j721e-wiz: restore mux selection during resume - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Add code name documentation - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86/amd/pmf: Prevent TEE errors after hibernate - platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: disable wakeup_mode during hibernation - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit - platform/x86: ISST: Add missing write block check - platform/x86: ISST: Correct locked bit width - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - powercap: intel_rapl: Add PL4 support for Ice Lake - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc64/bpf: fix kfunc call support - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: adjust the elfcorehdr size - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/kexec/core: use big-endian types for crash variables - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: sequencing: fix missing state_lock in pwrseq_power_on() error path - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() - power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler - power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - procfs: fix possible double mmput() in do_procmap_query() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - quota: fix livelock between quotactl and freeze_super - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix RoCEv1 failure due to DSCP - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/iwcm: Fix workqueue list corruption by removing work_list - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler - RDMA/mlx5: Fix UMR hang in LAG error state unload - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - regmap: Synchronize cache for the page selector - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - reset: gpio: suppress bind attributes in sysfs - resource: Add resource set range and size helpers - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" - Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "LoongArch: Add machine_kexec_mask_interrupts() implementation" - Revert "LoongArch: Handle percpu handler address for ORC unwinder" - Revert "LoongArch/orc: Use RCU in all users of __module_address()." - Revert "LoongArch: Remove unnecessary checks for ORC unwinder" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "PCI: qcom: Don't wait for link if we can detect Link Up" - Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - ring-buffer: Fix to update per-subbuf entries of persistent ring buffer - riscv: kgdb: fix several debug register assignment bugs - riscv: vector: init vector context with proper vlenb - rnbd-srv: Fix server side setting of bi_size for special IOs - rnbd-srv: use bio_add_virt_nofail - rnbd-srv: Zero the rsp buffer before using it - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: allow `clippy::collapsible_if` globally - rust: allow `clippy::collapsible_match` globally - rust: init: fix `clippy::undocumented_unsafe_blocks` warnings - rust: kbuild: allow `unused_features` - rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0 - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: fix incorrect accessor reference lifetime - rust: pin-init: internal: init: document load-bearing fact of field accessors - rust: warn on bindgen < 0.69.5 and libclang >= 19.1 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cpum_sf: Cap sampling rate to prevent lsctl exception - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/idle: Fix cpu idle exit cpu time accounting - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf_cpum_sf: Convert to use try_cmpxchg128() - s390/perf: Disable register readout on sampling events - s390/pfault: Fix virtual vs physical address confusion - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/vtime: Fix virtual timer forwarding - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/deadline: Clear the defer params - sched/deadline: Use revised wakeup rule for dl_server - sched/debug: Fix updating of ppos on server write ops - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Remove redundant css_put() in scx_cgroup_init() - sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update - sched/fair: Fix zero_vruntime tracking - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Use protect_slice() instead of direct comparison - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: csiostor: Fix dereference of null pointer rn - scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftests/bpf: Fix resource leak in serial_test_wq on attach failure - selftests/bpf: Test cross-sign 64bits range refinement - selftests/bpf: Test invariants on JSLT crossing sign - selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/harness: order TEST_F and XFAIL_ADD constructors - selftests/hid: fix compilation when bpf_wq and hid_device are not exported - selftests/landlock: Fix format warning for __u64 in net_test - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: convert page_size to unsigned long - selftests/mm: pagemap_ioctl: Fix types mismatches shown by compiler options - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: check output: catch cmd errors - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selinux: don't reserve xattr slot when we won't fill it - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serial: 8250: 8250_omap.c: Add support for handling UART error conditions - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - sh: platform_early: remove pdev->driver_override check - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: require a full NFS mode SID before reading mode bits - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei - soc: qcom: smem: handle ENOMEM error during probe - soc: rockchip: grf: Add missing of_node_put() when returning - soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition - soc: rockchip: grf: Support multiple grf to be handled - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - soundwire: intel_ace2x: add SND_HDA_CORE dependency - soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: aspeed-smc: fix controller deregistration - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: cadence-qspi: Fix exec_mem_op error handling - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: ch341: fix memory leaks on probe failures - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: geni-qcom: Check DMA interrupts early in ISR - spi: geni-qcom: Fix abort sequence execution for serial engine errors - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: Group CS related fields in struct spi_device - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: mpc52xx: fix controller deregistration - spi: mpc52xx: fix use-after-free on registration failure - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mxic: fix controller deregistration - spi: mxs: fix controller deregistration - spi: npcm-pspi: fix controller deregistration - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix controller deregistration - spi: orion: fix runtime pm leak on unbind - spi: pic32: fix controller deregistration - spi: pic32-sqi: fix controller deregistration - spi: pl022: fix controller deregistration - spi: qup: fix controller deregistration - spi: rockchip: fix controller deregistration - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: sprd: fix controller deregistration - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: sun4i: fix controller deregistration - spi: sun6i: fix controller deregistration - spi: syncuacer: fix controller deregistration - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: tegra210-quad: Protect curr_xfer check in IRQ handler - spi: ti-qspi: fix controller deregistration - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix controller deregistration - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: use generic driver_override infrastructure - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - statmount: permission check should return EPERM - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - sysctl: fix uninitialized variable in proc_do_large_bitmap - taskstats: set version in TGID exit notifications - tcp: call sk_data_ready() after listener migration - tcp: optimize inet_use_bhash2_on_bind() - tcp: tcp_tx_timestamp() must look at the rtx queue - team: fix header_ops type confusion with non-Ethernet ports - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Address thermal zone removal races with resume - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal: core: Free thermal zone ID later during removal - thermal: core: Mark thermal zones as exiting before unregistration - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature - thermal/of: Fix reference leak in thermal_of_cm_lookup() - thunderbolt: Fix property read in nhi_wake_supported() - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tls: Fix race condition in tls_sw_cancel_work_tx() - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tpm: avoid -Wunused-but-set-variable - tpm: Fix auth session leak in tpm2_get_random() error path - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() - tracefs: Fix default permissions not being applied on initial mount - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add a comment about ftrace_regs definition - tracing: Add ftrace_fill_perf_regs() for perf event - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix enabling multiple events on the kernel command line and bootconfig - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing: Fix WARN_ON in tracing_buffers_mmap_close - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: ring-buffer: Fix to check event length before using - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix unshare_fs() handling - uprobes: Fix incorrect lockdep condition in filter_chain() - uprobes: switch to RCU Tasks Trace flavor for better performance - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb: core: phy: avoid double use of 'usb3-phy' - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: f_ecm: Fix net_device lifecycle with device_move - usb: gadget: f_eem: Fix net_device lifecycle with device_move - usb: gadget: f_fs: fix DMA-BUF OUT queues - usb: gadget: f_fs: Fix ioctl error handling - usb: gadget: f_hid: don't call cdev_init while cdev in use - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Fix net_device lifecycle with device_move - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix net_device lifecycle with device_move - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmode/displayport: set displayport signaling rate in configure message - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: Flush anchored URBs in usbtmc_release - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vfio/cdx: Fix NULL pointer dereference in interrupt trigger path - vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost: move vdpa group bound check to vhost_vdpa - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vsock: fix buffer size clamping order - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - vxlan: validate ND option lengths in vxlan_na_create - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: Fix failure to connect to a 6 GHz AP - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: allow only one NAN interface, also in multi radio - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: Fix use_for flag update on BSS refresh - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mac80211: use safe list iteration in radar detect work - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr - wifi: mt76: mt7925: fix incorrect length field in txpower command - wifi: mt76: mt7925: fix incorrect TLV length in CLC command - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() - wifi: rtw89: 8922a: add digital compensation for 2GHz - wifi: rtw89: 8922a: set random mac if efuse contains zeroes - wifi: rtw89: fix unable to receive probe responses under MLO connection - wifi: rtw89: mac: correct page number for CSI response - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: ser: enable error IMR after recovering from L1 - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out assign_rescuer_work() - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags - X.509: Fix out-of-bounds access when parsing extensions - x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache - x86-64: rename misleadingly named '__copy_user_nocache()' function - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Add additional fixed RDSEED microcode revisions - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/cpu: Disable FRED when PTI is forced on - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path - x86/fred: Correct speculative safety in fred_extint() - x86/fred: Fix early boot failures on SEV-ES/SNP guests - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/platform/uv: Handle deconfigured sockets - x86: rename and clean up __copy_from_user_inatomic_nocache() - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: allow attaching already registered memory model to xdp_rxq_info - xdp: produce a warning when calculated tailroom is negative - xdp: register system page pool as an XDP memory model - xdp: use modulo operation to calculate XDP frag tailroom - xdrgen: Fix struct prefix for typedef types in program wrappers - xdrgen: Initialize data pointer for zero-length items - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/privcmd: unregister xenstore notifier on module exit - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: account XFRMA_IF_ID in aevent size calculation - xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi - xfrm: ah: account for ESN high bits in async callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: fix refcount leak in xfrm_migrate_policy_find - xfrm: fix the condition on x->pcpu_num in xfrm_sa_len - xfrm: Fix the usage of skb->sk - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() - xfrm: prevent policy_hthresh.work from racing with netns teardown - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: check for deleted cursors when revalidating two btrees - xfs: check return value of xchk_scrub_create_subord - xfs: delete attr leaf freemap entries when empty - xfs: don't irele after failing to iget in xfs_attri_recover_work - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix copy-paste error in previous fix - xfs: Fix error pointer dereference - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix returned valued from xfs_defer_can_append - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix the xattr scrub to detect freemap/entries array collisions - xfs: fix undersized l_iclog_roundoff values - xfs: get rid of the xchk_xfile_*_descr calls - xfs: mark data structures corrupt on EIO and ENODATA - xfs: only call xf{array,blob}_destroy if we have a valid pointer - xfs: remove file_path tracepoint data - xfs: remove xfs_attr_leaf_hasname - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: scrub: unlock dquot before early return in quota scrub - xfs: stop reclaim before pushing AIL during unmount - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zram: do not forget to endio for partial discard requests - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Update LVC patches for 6.12.90 - Removed already not needed patches, adapted some of existing ones, added newly appeared patches- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- bump rel- CONFIG_NF_CONNTRACK_PROCFS=y sometime i need to obtain traffic stats- Fix Dirtyfrag- Add new module ec-touchpad-toggle - Also exclude nwfermi.ko, which was not excluded by mistake...- Update BR for perf - ``` - DEBUG: make FIXDEP=1 -f Makefile.perf install-man - DEBUG: Makefile.config:1127: No libcapstone found, disables disasm engine support for 'perf script', please install libcapstone-dev/capstone-devel - DEBUG: Makefile.config:1189: libpfm4 not found, disables libpfm4 support. Please install libpfm4-dev - DEBUG: Makefile.config:1223: libtracefs is missing. Please install libtracefs-dev/libtracefs-devel - DEBUG: Auto-detecting system features: - DEBUG: ... dwarf: [ on ] - DEBUG: ... dwarf_getlocations: [ on ] - DEBUG: ... glibc: [ on ] - DEBUG: ... libbfd: [ on ] - DEBUG: ... libbfd-buildid: [ on ] - DEBUG: ... libcap: [ on ] - DEBUG: ... libelf: [ on ] - DEBUG: ... libnuma: [ on ] - DEBUG: ... numa_num_possible_cpus: [ on ] - DEBUG: ... libperl: [ on ] - DEBUG: ... libpython: [ on ] - DEBUG: ... libcrypto: [ on ] - DEBUG: ... libunwind: [ on ] - DEBUG: ... libdw-dwarf-unwind: [ on ] - DEBUG: ... libcapstone: [ OFF ] - DEBUG: ... llvm-perf: [ on ] - DEBUG: ... zlib: [ on ] - DEBUG: ... lzma: [ on ] - DEBUG: ... get_cpuid: [ on ] - DEBUG: ... bpf: [ on ] - DEBUG: ... libaio: [ on ] - DEBUG: ... libzstd: [ on ] - ```- Fix work on older Macs- Revert accidently merged disablement of kmod() provides - Repository is getting prepared for removal of kmod(), see kb#63. - For now - revert this change.- AMDGPU coherency hacks are not needed on x86- Fix CVE-2026-31431 ("Copyfail")- set cma=256M by default for Baikal - Merge: c9153a4 66a6ff7- Merge remote-tracking branch 'baikal/rosa2023.1' into rosa2023.1- Update LVC patches (bz#19983) - Talk with AI debugging https://bugzilla.rosa.ru/show_bug.cgi?id=19983: - https://file-store.rosa.ru/download/94a69475631e57cda3466a98efef1f76740bc34e- llvm for perf - DEBUG: Makefile.config:706: Warning: Disabled BPF skeletons as clang (clang) is missing - DEBUG: Makefile.config:997: No libllvm 13+ found, slower source file resolution, please install llvm-devel/llvm-dev- Hans's patch has been upstreamized- Remove upstreamized LVC patches- New LVC patches- [bot] upd: 6.12.47 -> 6.12.74 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail - accel/ivpu: Fix DCT active percent format - accel/ivpu: Fix race condition when unbinding BOs - accel/ivpu: Make function parameter names consistent - accel/ivpu: Prevent runtime suspend during context abort work - accel/qaic: Fix bootlog initialization ordering - accel/qaic: Synchronize access to DBC request queue head & tail pointer - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Detect preferred core availability on online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - ACPI: fan: Add fan speed reporting for fans with only _FST - ACPI: fan: Use ACPI handle when retrieving _FST - ACPI: fan: Use platform device for devres-related actions - ACPI: fan: Workaround for 64-bit firmware bug - acpi/hmat: Fix lockdep warning for hmem_register_resource() - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - ACPI: scan: Update honor list for RPMI System MSI - ACPI: SPCR: Check for table version when using precise baudrate - ACPI: SPCR: Support Precise Baud Rate field - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - ACPI: video: force native for Lenovo 82K8 - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Initialise scc_index in unix_add_edge(). - af_unix: Read sk_peek_offset() again after sleeping in unix_stream_read_generic(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: aloop: Fix racy access at PCM trigger - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda: Fix missing pointer check in hda_component_manager_init function - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Enable headset mic for Acer Nitro 5 - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA - ALSA: hda/realtek - fixed speaker no sound - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: Fix code alignment in mixer_quirks - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: broadcom: bcm2712: Add default GIC address cells - arm64: dts: broadcom: bcm2712: Define VGIC interrupt - arm64: dts: exynos: gs101: fix sysreg_apm reg property - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart - arm64: dts: imx93-kontron: Fix GPIO for panel regulator - arm64: dts: imx93-kontron: Fix USB port assignment - arm64: dts: imx95: Correct the lpuart7 and lpuart8 srcid - arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes - arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports - arm64: dts: mba8mx: Fix Ethernet PHY IRQ support - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8186-tentacruel: Fix touchscreen model - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8395-kontron-i1200: Fix MT6360 regulator nodes - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: qcom: sm8650: set ufs as dma coherent - arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller - arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller - arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: disable HS400 on RK3588 Tiger - arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5 - arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2 - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1 - arm64: dts: rockchip: Make RK3588 GPU OPP table naming less generic - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder - arm64: kprobes: call set_memory_rox() for kprobe page - arm64: kprobes: check the return value of set_memory_rox() - arm64: map [_text, _stext) virtual address range non-executable+read-only - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: mte: Do not warn if the page is already tagged in copy_highpage() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: Set __nocfi on swsusp_arch_resume() - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: zynqmp: Disable coresight by default - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on reset) - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: p880: set correct touchscreen clipping - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak4458: remove the reset operation in probe and remove - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: lpass-tx-macro: fix SM6115 support - ASoC: codecs: nau8325: Silence uninitialized variables warnings - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wcd937x: make stub functions inline - ASoC: codecs: wcd937x: set the comp soundwire port correctly - ASoC: codecs: wcd939x: fix regmap leak on probe failure - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs-amp-lib-test: Fix missing include of kunit/test-bug.h - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_sai: Fix sync error in consumer mode - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Expose correct bit depth to userspace - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8325: add missing build config - ASoC: nau8325: use simple i2c probe function - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again) - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type - ASoC: simple-card-utils: Check device node before overwrite direction - ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-pcm: Add fixup for channels - ASoC: SOF: ipc4-pcm: Enable delay reporting for ChainDMA streams - ASoC: SOF: ipc4-pcm: fix delay calculation when DSP resamples - ASoC: SOF: ipc4-pcm: fix start offset calculation for chain DMA - ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: correct the wrong period - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: ahci: Do not read the per port area for unimplemented ports - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Disable LPM on ST2000DM008-2FR102 - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-sata: Improve link_power_management_supported sysfs attribute - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - bcache: fix improper use of bi_end_io - bcache: fix I/O accounting leak in detached_dev_do_request - bcache: use bio cloning for detached device requests - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binder: fix double-free in dbitmap - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-crypto: use BLK_STS_INVAL for alignment errors - blk-mq: Abort suspend when wakeup events are pending - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block/blk-throttle: Fix throttle slice time for SSDs - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix memory leak in __blkdev_issue_zero_pages - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: freeze queue when updating zone resources - block: handle zone management operations completions - block: make REQ_OP_ZONE_OPEN a write operation - block/mq-deadline: Introduce dd_start_request() - block/mq-deadline: Switch back to a single dispatch list - block: rate-limit capacity change info log - block: return unsigned int from queue_dma_alignment - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix BIS connection dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: ISO: free rx_skb if not consumed - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() - bnxt_en: Add Hyper-V VF ID - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type - bnxt_en: Change FW message timeout warning - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bnxt_en: Fix XDP_TX path - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code - bnxt_en: Refactor bnxt_free_ctx_mem() - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf: Allow fall back to interpreter for programs with stack size <= 512 - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Check the helper function is valid in get_helper_proto - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Find eligible subprogs for private stack support - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Fix stackmap overflow check in __bpf_get_stackid() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Mark kfuncs as __noclone - bpf: Refactor stack map trace depth calculation into helper function - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject narrower access to pointer ctx fields - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bpf: Use tnums for JEQ/JNE is_branch_taken logic - bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: abort transaction if we fail to update inode in log replay dir fixup - btrfs: abort transaction in the process_one_buffer() log tree walk callback - btrfs: abort transaction on specific error places when walking log tree - btrfs: add extra error messages for delalloc range related errors - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't allow adding block device of less than 1 MB - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix beyond-EOF write handling - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix error handling of submit_uncompressed_range() - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation - btrfs: fix memory leak on duplicated memory in the qgroup assign ioctl - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix qgroup_snapshot_quick_inherit() squota bug - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix squota compressed stats leak - btrfs: fix subvolume deletion lockup caused by inodes xarray race - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: only enforce free space tree if v1 cache is required for bs < ps cases - btrfs: prevent use-after-free on folio private data in btrfs_subpage_clear_uptodate() - btrfs: qgroup: update all parent qgroups when doing quick inherit - btrfs: ref-verify: handle damaged extent root tree - btrfs: reject new transactions if the fs is fully read-only - btrfs: release root after error in data_reloc_print_warning_inode() - btrfs: remove btrfs_fs_info::sectors_per_page - btrfs: return any hit error from extent_writepage_io() - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: subpage: dump the involved bitmap when ASSERT() failed - btrfs: tracepoints: use btrfs_root_id() to get the id of a root - btrfs: tree-checker: add inode extref checks - btrfs: tree-checker: fix bounds check in check_inode_extref() - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: truncate ordered extent when skipping writeback past i_size - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: use variable for end offset in extent_writepage_io() - btrfs: zoned: fix conventional zone capacity calculation - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - bus: mhi: host: pci_generic: Add Telit FN920C04 modem support - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support - caif: fix integer underflow in cffrml_receive() - can: at91_can: Fix memory leak in at91_can_probe() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd: acc_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: add deinit callback - can: m_can: call deinit/init callback when going into suspend/resume - can: m_can: fix CAN state in system PM - can: m_can: m_can_chip_config(): bring up interface in correct state - can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error Active - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: rockchip-canfd: rkcanfd_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - cdx: Fix device node reference leak in cdx_msi_domain_init - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: fix multifs mds auth caps issue - ceph: fix NULL pointer dereference in ceph_mds_auth_match() - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - ceph: fix potential race condition in ceph_ioctl_lazyio() - ceph: fix race condition validating r_parent before applying state - ceph: fix race condition where r_parent becomes stale before sending message - ceph: refactor wake_up_bit() pattern of calling - cgroup: Fix kernfs_node UAF in css_free_rwork_fn - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix copy_to_iter return value check - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: at91: sam9x7: Add peripheral clock id for pmecc - clk: clocking-wizard: Fix output clock register offset for Versal platforms - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: qcom: camcc-sm7150: Fix PLL config of PLL2 - clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other - clk: qcom: common: Fix NULL vs IS_ERR() check in qcom_cc_icc_register() - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src - clk: qcom: gcc-ipq6018: rework nss_port5 clock to multiple conf - clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets - clk: qcom: tcsrcc-x1e80100: Set the bi_tcxo as parent to eDP refclk - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Fix memory leak in cpg_mssr_reserved_init() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: scmi: Add duty cycle ops only when duty cycle is supported - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/timer-rtl-otto: Do not interfere with interrupts - clocksource/drivers/timer-rtl-otto: Work around dying timers - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - clocksource: Reduce watchdog readout delay limit to prevent false positives - cnic: Fix use-after-free bugs in cnic_delete_task - codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_file_range: limit size if in compat mode - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: catu: Support atclk - coresight: Change device mode to atomic type - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Fix incorrect handling for return value of devm_kzalloc - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: tmc: Support atclk - coresight: tpda: fix the logic to setup the element size - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: ondemand: Update the efficient idle check for Intel extended Families - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpufreq: ti: Add support for AM62D2 - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Fix missing adaptation for cpuset_is_populated - cpuset: Treat cpusets in attaching as populated - cpuset: Use new excpus for nocpu error check when enabling root partition - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() - crypto: ccp: Skip SEV and SNP INIT for kdump boot - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - clear all VF configurations in the hardware - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - invalidate queues in use - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: iaa - Fix incorrect return value in save_iaa_wq() - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx2 - Call strscpy() with correct size argument - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - fix duplicate restarting msg during AER error - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't enforce dma mapping check on noncoherent allocations - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dma-debug: fix physical address calculation for struct dma_debug_entry - dma-debug: store a phys_addr_t in struct dma_debug_entry - dmaengine: Add missing cleanup on module unload - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: lpc32xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma-mapping: fix direction in dma_alloc direction traces - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err - dma-mapping: trace dma_alloc/free direction - dma-mapping: trace more error paths - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm error: mark as DM_TARGET_PASSES_INTEGRITY - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: don't set io_min and io_opt for raid1 - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-stripe: fix a possible integer overflow - dm vdo: return error on corrupted metadata in start_restoring_volume functions - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: hwmon: fix link to g762 devicetree binding - docs: kdoc: handle the obsolescensce of docutils.ErrorString() - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - dpll: Prevent duplicate registrations - dpll: spec: add missing module-name and clock-id to pin-get reply - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd/amdgpu: Release xcp drm memory after unplug - drm/amd/amdgpu: reserve vm invalidation engine for uni_mes - drm/amd: Avoid evicting resources at S5 - drm/amd: Check that VPE has reached DPM0 in idle handler - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add fallback path for YCBCR422 - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put - drm/amd/display: Apply e4479aecf658 to dml - drm/amd/display: avoid reset DTBCLK at clock init - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: change dc stream color settings only in atomic commit - drm/amd/display: Check NULL before accessing - drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5 - drm/amd/display: disable DPP RCG before DPP CLK enable - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display/dml2: Guard dml21_map_dc_state_into_dml_display_cfg with DC_FP_START - drm/amd/display: Don't change brightness for disabled connectors - drm/amd/display: Enable Dynamic DTBCLK Switch - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: extend delta clamping logic to CM3 LUT helper - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: fix condition for setting timing_adjust_pending - drm/amd/display: fix dml ms order of operations - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed - drm/amd/display: Fix for test crash due to power gating - drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix NULL deref in debugfs odm_combine_segments - drm/amd/display: Fix pbn_div Calculation Error - drm/amd/display: Fix pbn to kbps Conversion - drm/amd/display: Fix scratch registers offsets for DCN35 - drm/amd/display: Fix scratch registers offsets for DCN351 - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - drm/amd/display: incorrect conditions for failing dto calculations - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: increase max link count and fix link->enc NULL pointer access - drm/amd/display: Increase minimum clock for TMDS 420 with pipe splitting - drm/amd/display: Init dispclk from bootup clock for DCN314 - drm/amd/display: Insert dccg log for easy debug - drm/amd/display: mark static functions noinline_for_stack - drm/amd/display: Move setup_stream_attribute - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: remove assert around dpp_base replacement - drm/amd/display: Remove redundant semicolons - drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off - drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files - drm/amd/display: Set up pixel encoding for YCBCR422 - drm/amd/display: shrink struct members - drm/amd/display: Support HW cursor 180 rot for any number of pipe splits - drm/amd/display: update color on atomic commit time - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd/display: Wait until OTG enable state is cleared - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: Add back JPEG to video caps for carrizo and newer - drm/amdgpu: add ip offset support for cyan skillfish - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add range check for RAS bad page address - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: add support for cyan skillfish without IP discovery - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - drm/amdgpu: Avoid rma causes GPU duplicate reset - drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest - drm/amdgpu: Check vcn sram load return value - drm/amdgpu: Correct the counts of nr_banks and nr_errors - drm/amdgpu: disable peer-to-peer access for DCC-enabled GC12 VRAM surfaces - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: Enable MES lr_compute_wa by default - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule() - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix gfx12 mes packet status return check - drm/amdgpu: fix gpu page fault after hibernation on PF passthrough - drm/amdgpu: fix handling of harvesting for ip_discovery firmware - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: fix nullptr err of vm_handle_moved - drm/amdgpu: Fix query for VPE block_type and ip_count - drm/amdgpu: Fix unintended error log in VCN5_0_0 - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: adjust KGQ reset sequence - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx12: fix wptr reset in KGQ init - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: remove frame cntl for gfx v12 - drm/amdgpu: remove two invalid BUG_ON()s - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu: Skip poison aca bank from UE channel - drm/amdgpu/smu: Handle S0ix for vangogh - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amd/include : MES v11 and v12 API header update - drm/amd/include : Update MES v12 API for fence update - drm/amdkfd: bump minimum vgpr size for gfx1151 - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: Fix GPU mappings for APU after prefetch - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string - drm/amdkfd: Fix mmap write lock not release - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: relax checks for over allocation of save area - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amdkfd: Trap handler support for expert scheduling mode - drm/amdkfd: Use huge page size to check split svm range alignment - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2 - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/amd: Skip power ungate during suspend for VPE - drm/amd : Update MES API header file for v11 & v12 - drm/ast: Clear preserved bits from register output value - drm/ast: Use msleep instead of mdelay for edid read - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/buddy: Optimize free block management with RB tree - drm/buddy: Separate clear and dirty free block trees - drm/displayid: add quirk to ignore DisplayID checksum errors - drm/displayid: pass iter to drm_find_displayid_extension() - drm/draw: fix color truncation in drm_draw_fill24 - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915/dp: Initialize the source OUI write timestamp always - drm/i915/dp_mst: Disable Panel Replay - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915: Fix format string truncation warning - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/pmu: Fix zero delta busyness issue - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imagination: Disallow exporting of PM/FW protected objects - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() - drm/imagination: Wait for FW trace update command completion - drm/imx/tve: fix probe device leak - drm/mediatek: Add pm_runtime support for GCE power control - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe device leaks - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/me/gsc: mei interrupt top half should be in irq disabled context - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/a6xx: Fix the gemnoc workaround - drm/msm/a6xx: Flush LRZ cache before PT switch - drm/msm/a6xx: Improve MX rail fallback in RPMH vote init - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/msm/registers: Generate _HI/LO builders for reg64 - drm/nouveau: add missing DCB connector types - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit) - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: Fix race in nouveau_sched_fini() - drm/nouveau: implement missing DCB connector types; gracefully handle unknown connectors - drm/nouveau: refactor deprecated strcpy - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm: panel-backlight-quirks: Make EDID match optional - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/panic: Fix drawing the logo on a small narrow screen - drm/panic: Fix qr_code, ensure vmargin is positive - drm/panthor: Avoid adding of kernel BOs to extobj list - drm/panthor: check bo offset alignment in vm bind - drm/panthor: Defer scheduler entitiy destruction to queue release - drm/panthor: Ensure MCU is disabled on suspend - drm/panthor: Fix group_free_queue() for partially initialized queues - drm/panthor: Fix kernel panic on partial unmap of a GPU VA region - drm/panthor: Fix memory leak in panthor_ioctl_group_create() - drm/panthor: Fix potential memleak of vma structure - drm/panthor: Fix race with suspend during unplug - drm/panthor: Fix UAF on kernel BO VA nodes - drm/panthor: Fix UAF race between device unplug and FW event processing - drm/panthor: Flush shmem writes before mapping buffers CPU-uncached - drm/panthor: Handle errors returned by drm_sched_entity_init() - drm/panthor: Serialize GPU cache flush operations - drm/panthor: validate group queue count - drm/pl111: Fix error handling in pl111_amba_probe - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon: Do not kfree() devres managed rdev - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove calls to drm_put_dev() - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: avoid killing parent entity on child SIGKILL - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm/sched: Optimise drm_sched_entity_push_job - drm/sched: Re-group and rename the entity run-queue lock - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - drm/xe: Adjust long-running workload timeslices to reasonable values - drm/xe: Attempt to bring bos back to VRAM after eviction - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table - drm/xe: Do clean shutdown also when using flr - drm/xe: Do not wake device during a GT reset - drm/xe: Drop preempt-fences when destroying imported dma-bufs. - drm/xe: Ensure GT is in C0 during resumes - drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue() - drm/xe: Fix conversion from clock ticks to milliseconds - drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. - drm/xe/guc: Add more GuC load error status codes - drm/xe/guc: Check GuC running state before deregistering exec queue - drm/xe/guc: Increase GuC crash dump buffer size - drm/xe/guc: Return an error code if the GuC load fails - drm/xe/guc: Set upper limit of H2G retries over CTB - drm/xe/guc: Synchronize Dead CT worker with unbind - drm/xe/hw_engine_group: Fix double write lock release in error path - drm/xe: Limit num_syncs to prevent oversized allocations - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally - drm/xe: Move declarations under conditional branch - drm/xe/oa: Disallow 0 OA property values - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() - drm/xe/oa: Limit num_syncs to prevent oversized allocations - drm/xe/pm: Also avoid missing outer rpm warning on system suspend - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - drm/xe: Prevent BIT() overflow when handling invalid prefetch region - drm/xe/query: Fix topology query pointer advance - drm/xe: Restore engine registers before restarting schedulers after GT reset - drm/xe/tile: Release kobject for the failure path - drm/xe/uapi: loosen used tracking restriction - drm/xe: Use usleep_range for accurate long-running workload timeslicing - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets - dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - erofs: avoid infinite loop due to incomplete zstd-compressed data - erofs: don't bother with s_stack_depth increasing for now - erofs: fix file-backed mounts no longer working on EROFS partitions - erofs: fix UAF issue for file-backed mounts w/ directio option - erofs: fix unexpected EIO under memory pressure - erofs: limit the level of fs stacking for file-backed mounts - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - eth: fbnic: Fix counter roll-over issue - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix improper check of dentry.stream.valid_size - exfat: fix refcount leak in exfat_find - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - exfat: validate cluster allocation bits of the allocation bitmap - exfat: zero out post-EOF page cache on file extension - Expand the type of nfs_fattr->valid - ext4: add ext4_sb_bread_nofail() helper function for ext4_free_branches() - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: introduce linear search for dentries - ext4: refresh inline data size before write operations - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages - f2fs: add carve_out sysfs node - f2fs: add gc_boost_gc_greedy sysfs node - f2fs: add gc_boost_gc_multiple sysfs node - f2fs: add timeout in f2fs_enable_checkpoint() - f2fs: clear SBI_POR_DOING before initing inmem curseg - f2fs: drop inode from the donation list when the last file is closed - f2fs: dump more information for f2fs_{enable,disable}_checkpoint() - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid panic once fallocation fails for pinfile - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid running out of free segments - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to check sysfs filename w/ gc_pin_file_thresh correctly - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix uninitialized one_time_gc in victim_sel_policy - f2fs: fix wrong block mapping for multi-devices - f2fs: fix wrong layout information on 16KB page - f2fs: fix zero-sized extent for precache extents - f2fs: introduce reserved_pin_section sysfs entry - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: maintain one time GC mode is enabled during whole zoned GC cycle - f2fs: sysfs: add encoding_flags entry - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - fgraph: Check ftrace_pids_enabled on registration for early filtering - fgraph: Initialize ftrace_ops->private for function graph ops - fhandle: use more consistent rules for decoding file handle from userns - filelock: add FL_RECLAIM to show_fl_flags() macro - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firewire: ohci: move self_id_complete tracepoint after validating register - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: Add stub functions for SCMI MISC API - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER - firmware: meson_sm: fix device leak at probe - firmware: qcom: scm: preserve assign_mem() error return value - firmware: qcom: tzmem: disable sc7180 platform - firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix access to video_is_primary_device() when compiled without CONFIG_VIDEO - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/namespace: correctly handle errors returned by grab_requested_mnt_ns - fs/namespace: fix reference leak in grab_requested_mnt_ns - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: check for shutdown in fsync - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs/proc/task_mmu: check p->vec_buf for NULL - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: do not allow mapping a non-regular backing file - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genetlink: fix genl_bind() invoking bind() after -EPERM - gfs2: fix freeze error handling - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: Fix use of bio_chain - gfs2: Prevent recursive memory reclaim - gpio: 104-idio-16: Define maximum valid register address offset - gpio: cdev: Correct return code on memory allocation failure - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter - gpiolib: acpi: Add a quirk for Acer Nitro V15 - gpiolib: acpi: Add quirk for ASUS ProArt PX13 - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: Fix gpio count with string references - gpiolib: acpi: Fix potential out-of-boundary left shift - gpiolib: acpi: Handle deferred list via new API - gpiolib: acpi: Move quirks to a separate file - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list() - gpiolib-acpi: Update file references in the Documentation and MAINTAINERS - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpiolib: fix invalid pointer access in debugfs - gpio: ljca: Fix duplicated IRQ mapping - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: swnode: don't use the swnode's name as the key for GPIO lookup - gpio: virtuser: fix UAF in configfs release path - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - greybus: gb-beagleplay: Fix timeout handling in bootloader functions - gue: Fix skb memleak with inner IP protocol 0. - gup: optimize longterm pin_user_pages() for large folio - gve: Correct ethtool rx_dropped calculation - gve: defer interrupt enabling until NAPI registration - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Add sync across amd sfh work functions - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: hidraw: tighten ioctl command parsing - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: nintendo: Wait longer for initial probe - HID: pidff: PERMISSIVE_CONTROL quirk autodetection - HID: pidff: Use direction fix only for conditional effects - HID: playstation: Center initial joystick axes to prevent spurious events - HID: playstation: Fix memory leak in dualshock4_get_calibration_data() - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hostfs: Fix only passing host root in boot stage with new mount - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimers: Introduce hrtimer_update_function() - hrtimers: Make hrtimer_update_function() less expensive - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: hold rcu and dev lock for hsr_get_port_ndev - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Limit fan multiplier to avoid overflow - hwmon: (dell-smm) Remove Dell Precision 490 custom config data - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (lenovo-ec-sensors) Update P8 supprt - hwmon: (ltc4282): Fix reset_history file permissions - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (max6697) fix regmap leak on probe failure - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i2c: riic: Move suspend handling to NOIRQ phase - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: remove redundant memory barrier when cleaning Tx descs - i40e: validate ring_len parameter against hardware-specific values - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/ipoib: Ignore L3 master device - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: Fix incorrect timeout ice_release_res() - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues - ice: Fix persistent failure in ice_get_rxfh - ice: fix PTP cleanup on driver removal in error path - ice: fix Rx page leak on multi-buffer frames - ice: ice_adapter: release xa entry on adapter allocation failure - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - ice: store max_frame and rx_buf_len only in ice_rx_ring - idpf: add support for SW triggered interrupts - idpf: add support for Tx refillqs in flow scheduling mode - idpf: cap maximum Rx buffer size - idpf: do not linearize big TSO packets - idpf: fix memory leak in idpf_vport_rel() - idpf: fix mismatched free function for dma_alloc_coherent - idpf: fix possible vport_config NULL pointer deref in remove - idpf: fix Rx descriptor ready check barrier in splitq - idpf: improve when to set RE bit logic - idpf: keep the netdev when a reset fails - idpf: reduce mbx_task schedule delay to 300us - idpf: remove obsolete stashing code - idpf: replace flow scheduling buffer ring with buffer pool - idpf: simplify and fix splitq Tx packet rollback error path - idpf: stop Tx if there are insufficient buffer resources - idpf: trigger SW interrupt when exiting wb_on_itr mode - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: don't fail igc_probe() on LED setup error - igc: fix race condition in TX timestamp read for register 0 - igc: Restore default Qbv schedule when changing channels - iio: accel: adxl380: fix handling of unavailable "INT1" interrupt - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio/adc/pac1934: fix channel disable configuration - iio: adc: pac1934: Fix clamped value in pac1934_reg_snapshot - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: buffer-dmaengine: enable .get_dma_dev() - iio: buffer-dma: support getting the DMA channel - iio: buffer: support getting dma channel from the buffer - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: core: Replace lockdep_set_class() + mutex_init() by combined call - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: humditiy: hdc3020: fix units for temperature and humidity measurement - iio: humditiy: hdc3020: fix units for thresholds and hysteresis - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() - inet_diag: annotate data-races in inet_diag_bc_sk() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: alps - fix use-after-free bugs caused by dev3_register_work - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: lkkbd - disable pending work before freeing device - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: allocate s_dio_done_wq for async reads as well - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: do not register driver in probe() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Fix race during abort for file descriptors - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds - iommufd/selftest: Update hw_info coverage for an input data_type - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE - iommu/vt-d: debugfs: Fix legacy mode page table dump logic - iommu/vt-d: Disallow dirty tracking if incoherent page walk - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring/cmd: let cmds to know about dying task - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: fix incorrect io_kiocb reference in io_link_skb - io_uring: fix min_wait wakeups for SQPOLL - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check - io_uring: move local task_work in exit cancel loop - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations - io_uring/napi: fix io_napi_entry RCU accesses - io_uring/poll: correctly handle io_poll_add() return value on update - io_uring/rw: recycle buffers manually for non-mshot reads - io_uring/sqpoll: be smarter on when to update the stime usage - io_uring/sqpoll: switch away from getrusage() for CPU accounting - io_uring/waitid: always prune wait queue entry in io_waitid_wait() - io_uring/zctx: check chained notif contexts - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: adopt dst_dev() helper - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/renesas-rzg2l: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - irqchip/starfive-jh8100: Fix section mismatch - irqdomain: cdx: Switch to of_fwnode_handle() - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - isofs: check the return value of sb_min_blocksize() in isofs_fill_super - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: refactor pcpu kasan vmalloc unpoison - kasan: unpoison vms[area] addresses with a common tag - kbuild: fix compilation of dtb specified on command-line without make rule - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - kunit: test_dev_action: Correctly cast 'priv' pointer to long* - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: Make all 32bit ID registers fully writable - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: VMX: Fix check for valid GVA on an EPT violation - KVM: VMX: Split out guts of EPT violation to common/exposed function - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - l2tp: Fix memleak in l2tp_udp_encap_recv(). - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-cros_ec: Skip LEDs without color components - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp55xx: Use correct address for memory programming - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM - libbpf: Fix error when st-prefix_ops and ops from differ btf - libbpf: Fix parsing of multi-split BTF - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libbpf: Fix USDT SIB argument handling causing unrecognized register error - libbpf: Fix -Wdiscarded-qualifiers under C23 - lib/buildid: use __kernel_read() for sleepable context - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: riscv/chacha: Avoid s0/fp register - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - listmount: don't call path_put() under namespace semaphore - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - locktorture: Fix memory leak in param_set_cpumask() - LoongArch: Add cflag -fno-isolate-erroneous-paths-dereference - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names - LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Fix unreliable stack for live patching - LoongArch: Handle new atomic instructions for probes - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - LoongArch: vDSO: Check kcalloc() result in init_vdso() - loop: fix backing file reference leak on validation error - lsm: CONFIG_LSM can depend on CONFIG_SECURITY - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend() - mailbox: mtk-cmdq: Refine DMA address handling for the command buffer - mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data() - mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend() - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop - mailbox: zynqmp-ipi: Fix SGI cleanup on unbind - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md: fix mssing blktrace bio split events - md: fix rcu protection in md_wakeup_thread - md: Fix static checker warning in analyze_sbs - md/raid0: Handle bio_split() errors - md/raid10: Handle bio_split() errors - md/raid10: wait barrier before returning discard request with REQ_NOWAIT - md/raid1: Handle bio_split() errors - md/raid5: fix IO hang when array is broken with IO inflight - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() - md: suspend array while updating raid_disks via sysfs - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: extron-da-hd-4k-plus: drop external-module make commands - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: ipu6: isys: Set embedded data type correctly for metadata formats - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pci: mg4b: fix uninitialized iio scan data - media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS - media: platform: mtk-mdp3: fix device leaks at probe - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: s5p-mfc: remove an unused/uninitialized variable - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: ti: j721e-csi2rx: Fix source subdev link creation - media: ti: j721e-csi2rx: Use devm_of_platform_populate - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: videobuf2: forbid remove_bufs when legacy fileio is active - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vivid: fix disappearing messages - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: gsc: add dependency on Xe driver - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: core: Increment of_node's refcount before linking it to the platform device - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: kempld: Switch back to earlier ->init() behavior - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - microchip: lan865x: add ndo_eth_ioctl handler to enable PHY ioctl support - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - MIPS: Fix a reference leak bug in ip22_check_gio() - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: Fix variable shadowing in mmc_route_rpmb_frames() - mmc: core: SPI mode remove cmd7 - mmc: dw_mmc-rockchip: Fix wrong internal phase calculate - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mmc_spi: multiple block read remove read crc ack - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/lru_sort: use param_ctx for damon_attrs staging - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: describe @flags parameter in memalloc_flags_save() - mm/fake-numa: allow later numa node hotplug - mm/fake-numa: handle cases with no SRAT info - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/huge_memory: do not change split_huge_page*() target order silently - mm/huge_memory: fix NULL pointer deference when splitting folio - mm/huge_memory: preserve PG_has_hwpoisoned if a folio is split to >0 order - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix folio is still mapped when deleted - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm: introduce and use {pgd,p4d}_populate_kernel() - mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN - mm/kasan: fix KASAN poisoning in vrealloc() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm/memfd: fix information leak in hugetlb folios - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory-failure: fix redundant updates for already poisoned pages - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm: numa,memblock: include for 'numa_nodes_parsed' - mm/page_alloc: batch page freeing in decay_pcp_high - mm/page_alloc: change all pageblocks migrate type on coalescing - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection - mm/page_owner: fix memory leak in page_owner_stack_fops->release() - mm, percpu: do not consider sleepable allocations atomic - mm: prevent poison consumption when splitting THP - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" - mm: revert "mm: vmscan.c: fix OOM on swap stress test" - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm/shmem: fix THP allocation and fallback loop - mm, shmem: prevent infinite loop on truncate race - mm/shmem, swap: fix race of truncate and swap entry split - mm: simplify folio_expected_ref_count() - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - mm: swap: check for stable address space before operating on the VMA - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages - mm/truncate: unmap large folio on split failure - mm/zswap: fix error pointer free in zswap_cpu_comp_prepare() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mount: handle NULL values in mnt_ns_release() - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: Call dst_release() in mptcp_active_enable(). - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: reset blackhole on success with non-loopback ifaces - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - mtd: spinand: winbond: Fix oob_layout for W25N01JW - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: override creds to kernel when calling sock_{send,recv}msg() - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: Fix buffer overflow in USB transport layer - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - net: devmem: expose tcp_recvmsg_locked errors - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - netdevsim: set the carrier when the device goes up - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix bcm63xx RGMII port link adjustment - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: felix: support phy-mode = "10g-qxgmii" - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Do not execute PTP driver code for unsupported switches - net: dsa: microchip: Don't free uninitialized ksz_irq - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463 - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: dsa: tag_brcm: legacy: reorganize functions - net: dsa: xrs700x: reject unsupported HSR configurations - net: dst: add four helpers to annotate data-races around dst->dev - net: dst: introduce dst->dev_rcu - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout - net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism - net: ethernet: ti: am65-cpts: fix timestamp loss due to race conditions - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_nat: remove bogus direction check - netfilter: nfnetlink: reset nlh pointer during batch replay - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: make nft_set_do_lookup available unconditionally - netfilter: nf_tables: place base_seq in struct net - netfilter: nf_tables: Reintroduce shortened deletion notifications - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nf_tables: restart set lookup on base_seq change - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups - netfilter: nft_set_pipapo: don't return bogus extension pointer - netfilter: nft_set_pipapo: fix null deref for empty set - netfilter: nft_set_pipapo: fix range overlap detection - netfilter: nft_set_pipapo: merge pipapo_get/lookup - netfilter: nft_set_pipapo: remove unused arguments - netfilter: nft_set_rbtree: continue traversal if element is inactive - netfilter: nft_set: remove one argument from lookup and update functions - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix segmentation of forwarding fraglist GRO - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - netfs: Prevent duplicate unlocking - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add VLAN CTAG filter support - net: hsr: create an API to get hsr port type - net: hsr: Create and export hsr_get_port_ndev() - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hsr: remove one synchronize_rcu() from hsr_del_port() - net: hsr: remove synchronize_rcu() from hsr_add_port() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net: Introduce skb_copy_datagram_from_iter_full() - net: ionic: add dma_wmb() before ringing TX doorbell - net: ionic: map SKB after pseudo-header checksum prep - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv4: allow directed broadcast routes to use dst hint - net: ipv6: fix field-spanning memcpy warning in AH output - net: ipv6: ioam6: use consistent dst names - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - netlink: specs: mptcp: add missing 'server-side' attr - netlink: specs: mptcp: clearly mention attributes - netlink: specs: mptcp: fix if-idx attribute type - netlink: specs: mptcp: replace underscores with dashes in names - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: mana: Change the function signature of mana_get_primary_netdev_rcu - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv - net/mlx5e: Fix crash on profile change rollback failure - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5: Fix IPsec cleanup over MPV device - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: Fix vhca_id access call trace use before alloc - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: HWS, change error flow on matcher disconnect - net/mlx5: Initialize events outside devlink lock - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netdevsim: fix inconsistent carrier state after link/unlink - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: add phy_interface_copy() - net: phy: add phy_interface_weight() - net: phy: adin1100: Fix software power-down ready condition - net: phy: aquantia: check for NVMEM deferral - net: phy: clear link parameters on admin link down - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: micrel: always set shared->phydev for LAN8814 - net: phy: micrel: fix clk warning when removing the driver - net: phy: micrel: Fix lan8814_config_init - net: phy: micrel: Introduce lanphy_modify_page_reg - net: phy: micrel: lan8814 fix reset of the QSGMII interface - net: phy: micrel: Replace hardcoded pages with defines - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net: sched: generalize check for no-queue qdisc on TX queue - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick - net: sfp: add quirk for FLYPRO copper SFP+ module - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: convert sfp quirks to modify struct sfp_module_support - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sfp: pre-parse the module support - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix general protection fault in __smc_diag_dump - net/smc: fix mismatch between CLC header and proposal - net/smc: fix warning in smc_rx_splice() when calling get_page() - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: est: Drop frames causing HLBS error - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR - net: ti: icssg-prueth: Fix fdb hash size configuration - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: Change async resync helpers argument - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: tun: Update napi->skb after XDP process - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: r8152: fix resume reset deadlock - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: use dst_dev_rcu() in sk_setup_caps() - net: vlan: sync VLAN features with lower device - net: wan: framer: pef2256: Switch to devm_mfd_add_devices() - net: wangxun: limit tx_max_coalesced_frames_irq - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: mhi: Keep modem name match with Foxconn T99W640 - net: wwan: t7xx: add support for HP DRMR-H01 - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Apply delay_retrans to async operations - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes - NFSD/blocklayout: Fix minlength check in proc_layoutget - nfsd: check that server is running in unlock_filesystem - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't use sv_nrthreads in connection limiting calculations. - nfsd: Drop dprintk in blocklayout xdr functions - nfsd: Drop the client reference in client_states_open() - nfsd: fix access checking for NLM under XPRTSEC policies - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - nfsd: fix __fh_verify for localio - NFSD: Fix last write offset handling in layoutcommit - nfsd: fix memory leak in nfsd_create_serv error paths - nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT - NFSD: Fix permission check for read access to executable-only files - nfsd: fix refcount leak in nfsd_set_fh_dentry() - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - NFSD: Implement large extent array support in pNFS - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: net ref data still needs to be freed even if net hasn't startup - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - nfsd: refine and rename NFSD_MAY_LOCK - NFSD: Remove NFSERR_EAGAIN - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() - NFSD: Rework encoding and decoding of nfsd4_deviceid - NFSD: Skip close replay processing if XDR encoding fails - nfsd: unregister with rpcbind when deleting a transport - nfsd: update percpu_ref to manage references on nfsd_net - nfsd: Use correct error code when decoding extents - nfsd: use correct loop termination in nfsd4_revoke_states() - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: Fix a deadlock involving nfs_release_folio() - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix LTP test failures when timestamps are delegated - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - nfs/localio: add direct IO enablement with sync and async IO support - nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter - nfs/localio: restore creds before releasing pageio data - NFS: nfs_invalidate_folio() must observe the offset and size arguments - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nfs/vfs: discard d_exact_alias() - nilfs2: avoid having an active sc_timer before freeing sci - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme: fix PI insert on write - nvmem: layouts: fix automatic module loading - nvmem: layouts: fix nvmem_layout_bus_uevent - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: skip nvme_write_sq_db on empty rqlist - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvme/tcp: handle tls partially sent records in write_space() - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type - objtool/LoongArch: Mark types based on break immediate code - objtool/rust: add one more `noreturn` Rust function - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeon_ep: fix VF MAC address lifecycle handling - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - openrisc: Add R_OR1K_32_PCREL relocation type module support - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches - parisc: Avoid crash due to unaligned access in unwinder - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: brcmstb: Reuse pcie_cfg_data structure - PCI: brcmstb: Set MLW based on "num-lanes" DT property if present - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Ensure error recoverability at all times - PCI/ERR: Fix uevent on failure to recover - PCI/ERR: Update device error_state already after reset - PCI: imx6: Enable the Vaux supply if available - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Fix incorrect error message in probe() - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion - PCI: rcar-gen4: Assure reset occurs before DBI access - PCI: rcar-gen4: Fix inverted break condition in PHY initialization - PCI: rcar-gen4: Fix PHY initialization - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - PCI: Test for bit underflow in pcie_set_readrq() - PCI: xilinx-nwl: Fix ECAM programming - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf annotate: Check return value of evsel__get_arch() properly - perf/arm-cmn: Fix CMN S3 DTM offset - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf/core: Fix address filter match with backing files - perf/core: Fix MMAP2 event device with backing files - perf/core: Fix MMAP event path names with backing files - perf disasm: Avoid undefined behavior in incrementing NULL - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf hist: In init, ensure mem_info is put on error paths - perf lock contention: Load kernel map before lookup - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: Remove get_perf_callchain() init_nr argument - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Simplify get_perf_callchain() user logic - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test shell lbr: Avoid failures with perf event paranoia - perf test stat: Avoid hybrid assumption when virtualized - perf test trace_btf_enum: Skip if permissions are insufficient - perf test: Update sysfs path for core PMU caps - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf tools: Mark split kallsyms DSOs as loaded - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel/cstate: Remove PC3 support from LunarLake - perf/x86/intel: Do not enable BTS for guests - perf/x86/intel: Fix crash in icl_update_topdown_event() - perf/x86/intel: Fix KASAN global-out-of-bounds warning - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: freescale: Initialize priv->lock - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits - phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors - phy: ti: gmii-sel: fix regmap leak on probe failure - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: realtek: Select REGMAP_MMIO for RTD driver - pinctrl: renesas: rzg2l: Fix invalid unsigned return in rzg3s_oen_read() - pinctrl: renesas: rzg2l: Fix ISEL restore on resume - pinctrl: renesas: rzg2l: Fix PMC restore - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86/amd/pmf: Support new ACPI ID AMDI0108 - platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13 - platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86/intel/tpmi/plr: Make the file domain/status writeable - platform/x86/intel-uncore-freq: Fix warning in partitioned system - platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: msi-wmi-platform: Fix typo in WMI GUID - platform/x86: msi-wmi-platform: Only load on MSI devices - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - PM / devfreq: rockchip-dfi: double count on RK3588 - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - PM: EM: Drop unused parameter from em_adjust_new_capacity() - PM: EM: Fix incorrect description of the cost field in struct em_perf_state - PM: EM: Fix late boot with holes in CPU topology - PM: EM: Move CPU capacity check to em_adjust_new_capacity() - PM: EM: Slightly reduce em_check_capacity_update() overhead - PM: hibernate: Emit an error when image writing fails - PM: hibernate: Use atomic64_t for compressed_size variable - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() - pNFS: Fix a deadlock when returning a delegation during open() - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/603: Really copy kernel PGD entries into all PGDIRs - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/8xx: Remove left-over instruction and comments in DataStoreTLBMiss handler - powerpc/addnote: Fix overflow on 32-bit builds - powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kdump: Fix size calculation for hot-removed memory ranges - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max17040: Check iio_read_channel_processed() return code - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt5033_charger: Fix device node reference leaks - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix the issue of proc_mem_open returning NULL - proc: fix type confusion in pde_set_flags() - procfs: avoid fetching build ID while holding VMA lock - proc: proc_maps_open allow proc_mem_open to return NULL - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add a upper bound on max_vclocks - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: Limit time setting of PTP clocks - ptp: ocp: Fix typo using index 1 instead of i in SMA initialization loop - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: pca9685: Use bulk write to atomicially update registers - pwm: stm32: Always program polarity - pwm: tiehrpwm: Don't drop runtime PM reference in .free() - pwm: tiehrpwm: Fix corner case in clock divisor calculation - pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation - pwm: tiehrpwm: Make code comment in .free() more useful - qed: Don't collect too many protection override GRC elements - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - RAS: Report all ARM processor CPER information to userspace - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Pass correct flag for dma mr creation - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix recv CQ and QP cache affinity - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/irdma: Update Kconfig - RDMA/mana_ib: Handle net event for pointing to the current netdev - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: fixed: Rely on the core freeing the enable GPIO - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/amd/display: Fix pbn to kbps Conversion" - Revert "drm/amd/display: Move setup_stream_attribute" - Revert "drm/amd/display: Optimize cursor position updates" - Revert "drm/amd: Skip power ungate during suspend for VPE" - Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "netfilter: nf_tables: Reintroduce shortened deletion notifications" - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "RDMA/irdma: Update Kconfig" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "udmabuf: fix vmap_udmabuf error page set" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "wireguard: device: enable threaded NAPI" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - riscv, bpf: Sign extend struct ops return values properly - riscv: Build loader.bin exclusively for Canaan K210 - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: pgtable: Cleanup useless VA_USER_XXX definitions - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Sanitize syscall table indexing under speculation - riscv: stacktrace: Disable KASAN checks for non-current tasks - rocker: fix memory leak in rocker_world_port_post_fini() - romfs: check sb_set_blocksize() return value - rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: Add -fno-isolate-erroneous-paths-dereference to bindgen_skip_c_flags - rust: block: fix `srctree/` links - rust: cfi: only 64-bit arm and x86 support CFI_CLANG - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0 - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects - rust: kbuild: workaround `rustdoc` doctests modifier bug - rust: rbtree: fix documentation typo in CursorMut peek_next method - rxrpc: Fix data-race warning and potential load/store tearing - s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/ap: Fix wrong APQN fill calculation - s390/bpf: Centralize frame offset calculations - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/ctcm: Fix double-kfree - s390/dasd: enforce dma_alignment to ensure proper buffer validation - s390/dasd: Fix gendisk parent after copy pair swap - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix memory leak in add_marker() when kvrealloc() fails - s390/mm: Fix __ptep_rdp() inline assembly - s390/mm: Use __GFP_ACCOUNT for user page table allocations - s390/pai: Deny all events not handled by this PMU - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - s390/vmlinux.lds.S: Move .vmlinux.info to end of allocatable sections - s390: vmlinux.lds.S: Reorder sections - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/deadline: Document dl_server - sched/deadline: Fix race in push_dl_task() - sched/deadline: Fix 'stuck' dl_server - sched/deadline: only set free_cpus for online runqueues - sched/eevdf: Fix min_vruntime vs avg_vruntime - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Fix possible deadlock in the deferred_irq_workfn() - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Make qmap dump operation non-destructive - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched/fair: Block delayed tasks on throttled hierarchy during dequeue - sched/fair: Fix pelt clock sync when entering idle - sched/fair: Fix pelt lost idle time detection - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts/faddr2line: Fix "Argument list too long" error - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scripts: generate_rust_analyzer: compile sysroot with correct edition - scripts: generate_rust_analyzer: remove sysroot assertion - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: imm: Fix use-after-free bug caused by unfinished delayed work - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpi3mr: Fix I/O failures during controller reset - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: scsi_debug: Fix atomic write enable module param description - scsi: sd: Fix build warning in sd_revalidate_disk() - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Add support for Hurray Data new controller PCI device - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on suspend - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Correct system PM flow - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: host: mediatek: Fix PWM mode switch issue - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition - scsi: ufs: host: mediatek: Fix unbalanced IRQ enable issue - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - seccomp: passthrough uprobe systemcall without filtering - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Fix flaky bpf_cookie selftest - selftests/bpf: Fix selftest verifier_arena_large failure - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Test invalid narrower ctx load - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: drv-net: rss_ctx: fix the queue count check - selftests: drv-net: rss_ctx: make the test pass with few queues - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt - selftests/ftrace: traceonoff_triggers: strip off names - selftests/landlock: Fix TCP bind(AF_UNSPEC) test case - selftests/landlock: Properly close a file descriptor - selftests/landlock: Remove invalid unix socket bind() - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: allow more time to send ADD_ADDR - selftests: mptcp: join: endpoints: longer timeout - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: userspace: longer timeout - selftests: mptcp: join: userspace: longer transfer - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel - selftests: netfilter: query conntrack state to check for port clash resolution - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: lib: Do not overwrite error messages - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: Replace sleep with slowwait - selftests: traceroute: Return correct value on failure - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: vDSO: Fix -Wunitialized in powerpc VDSO_CALL() wrapper - selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing vDSO - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: core: fix OF node leak - serial: core: Fix serial device initialization - serial: core: Restore sysfs fwnode information - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: remove useless enable of enhanced features - serial: sh-sci: Check that the DMA cookie is valid - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - serial: xilinx_uartps: fix rs485 delay_rts_after_send - serial: xilinx_uartps: Use helper function hrtimer_update_function() - sfc: fix NULL dereferences in ef100_process_design_param() - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix recovery on rename failures - shmem: fix tmpfs reconfiguration (remount) when noswap is set - simplify nfs_atomic_open_v23() - slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts - slab: Fix obj_ext mistakenly considered NULL due to race condition - slab: mark slab->obj_exts allocation failures unconditionally - slab: prevent warnings when slab obj_exts vector allocation fails - slab: reset slab->obj_ext when freeing and it is OBJEXTS_ALLOC_FAIL - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: always "instantiate" inode in smack_inode_init_security() - smack: deduplicate "does access rule request transmutation" - smack: deduplicate xattr setting in smack_inode_init_security() - smack: fix bug: invalid label of unix socket file - smack: fix bug: setting task label silently ignores input garbage - smack: fix bug: SMACK64TRANSMUTE set on non-directory - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix filename matching of deferred files - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smb: server: use disable_work_sync in transport_rdma.c - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: apple: mailbox: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure - soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure - soc: qcom: gsbi: fix double disable caused by devm - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: pbs: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc: samsung: exynos-pmu: fix device leak on regmap lookup - soc: Switch back to struct platform_driver::remove() - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - soc/tegra: fuse: Do not register SoC device on ACPI boot - soc: ti: pruss: don't use %pK through printk - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: airoha: add support of dual/quad wires spi modes to exec_op() handler - spi: airoha: do not keep {tx,rx} dma buffer always mapped - spi: airoha: fix reading/writing of flashes with more than one plane per lun - spi: airoha: return an error for continuous mode dirmap creation cases - spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND - spi: airoha: switch back to non-dma mode in the case of error - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Fix cqspi_setup_flash() - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Prevent lost complete() call during indirect read - spi: ch341: fix out-of-bounds memory access in ch341_transfer_one - spi: fix return code when spi device has too many chipselects - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-nxp-fspi: Add OCT-DTR mode support - spi: spi-nxp-fspi: Check return value of devm_mutex_init() - spi: spi-nxp-fspi: remove the goto in probe - spi: spi-sprd-adi: Fix double free in probe error path - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - statmount: don't call path_put() under namespace semaphore - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - svcrdma: use rc_pageoff for memcpy byte offset - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: cache RTAX_QUICKACK metric in a hot cache line - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: convert to dev_net_rcu() - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcp_metrics: use dst_dev_net_rcu() - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - tee: fix register_shm_helper() - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thermal: gov_step_wise: Allow cooling level to be reduced earlier - thermal: intel: selftests: workload_hint: Mask unsupported types - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power turbostat: fix GCC9 build regression - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools: riscv: Fixed misalignment of CSR related definitions - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: fix string attribute length to include null terminator - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm2-sessions: Fix out of range indexing in name_size - tpm2-sessions: Fix tpm2_read_public range checks - tpm: Cap the number of PCR banks - tpm: Compare HMAC values in constant time - tpm: Disable TPM2_TCG_HMAC by default - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - trace/fgraph: Fix error handling - tracefs: fix a leak in eventfs_create_events_dir() - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tty: serial: ip22zilog: Use platform device for probing - tty: serial: Modify the use of dev_err_probe() - tty/vt: Add missing return value for VT_RESIZE in vt_ioctl() - tty/vt: fix up incorrect backport to stable releases - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: fix deadlock when reading partition table - ublk: prevent invalid access with DEBUG - udmabuf: fix a buf size overflow issue during udmabuf creation - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Don't rename vmap to kernel_vmap - um: Fix FD copy size in os_rcv_fd_msg() - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - uprobes: uprobe_warn should use passed task - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() - usb: typec: tcpm: properly deliver cable vdms to altmode drivers - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: introduce macro for ring segment list iteration - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci-pci: add support for hosts with zero USB3 ports - usb: xhci-pci: Fix USB2-only root hub registration - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - usb: xhci: remove option to change a default ring's TRB cycle bit - vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues - vdpa/pds: use %pe for ERR_PTR() in event handler registration - vdso: Add struct __kernel_old_timeval forward declaration to gettime.h - veth: apply qdisc backpressure on full ptr_ring to reduce TX drops - veth: fix data race in veth_get_ethtool_stats - veth: more robust handing of race to avoid txq getting stuck - veth: prevent NULL pointer dereference in veth_xdp_rcv - veth: reduce XDP no_direct return section to fix race - vfio/pci: Disable qword access to the PCI ROM bar - vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices - vfio/pci: Use RCU for error/request triggers to avoid circular locking - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Fix kthread worker cgroup failure handling - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: Allocate nonlinear SKBs for handling large receive buffers - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix grammar in virtio_queue_info docs - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-fs: fix incorrect check for fsvq->kobj - virtio-net: drop the multi-buffer XDP packet in zerocopy - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - virtio: vdpa: Fix reference count leak in octep_sriov_enable() - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock: Make accept()ed sockets use custom setsockopt() - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: Allocate nonlinear SKBs for handling large transmit buffers - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: Coalesce only linear skb - vsock/virtio: Fix message iterator handling on transmit path - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - vsock/virtio: Move length check to callers of virtio_vsock_skb_rx_put() - vsock/virtio: Move SKB allocation lower-bound check to callers - vsock/virtio: Rename virtio_vsock_alloc_skb() - vsock/virtio: Rename virtio_vsock_skb_rx_put() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: Add missing include of export.h - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Avoid vdev delete timeout when firmware is already down - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath10k: move recovery check logic into a new work - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: add support for MU EDCA - wifi: ath11k: avoid bit operation on key flags - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: fix VHT MCS assignment - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: restore register window after global reset - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: correctly handle mcast packets for clients - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() - wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() - wifi: ath12k: fix wrong logging ID used for CE - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: add an hrtimer based delayed work item - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cfg80211: stop radar detection in cfg80211_leave() - wifi: cfg80211: use cfg80211_leave() in iftype change - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list - wifi: iwlwifi: Remove redundant header files - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: don't mark keys for inactive links as uploaded - wifi: mac80211: don't perform DA check on S1G beacon - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix key tailroom accounting leak - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: restore non-chanctx injection behaviour - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mac80211: Track NAN interface start/stop - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt76_eeprom_override to int - wifi: mt76: mt7915: fix mt7981 pre-calibration - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7925: add handler to hif suspend/resume event - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: rtw89: avoid possible TX wait initialization race - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() - wifi: rtw89: obtain RX path from ppdu status IE00 - wifi: rtw89: print just once for unknown C2H events - wifi: rtw89: renew a completion for each H2C command waiting C2H event - wifi: rtw89: wow: remove notify during WoWLAN net-detect - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Add SRSO_USER_KERNEL_NO support - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: KVM: Add support for SRSO_MSR_FIX - x86/bugs: Report correct retbleed mitigation status - x86/CPU/AMD: Add RDSEED fix for Zen5 - x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures - x86/fred: Remove ENDBR64 from FRED entry points - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/msi: Make irq_retrigger() functional for posted MSI - x86/mtrr: Rename mtrr_overwrite_state() to guest_force_mtrr_state() - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/resctrl: Refactor resctrl_arch_rmid_read() - x86/runtime-const: Add the RUNTIME_CONST_PTR assembly macro - x86: uaccess: don't use runtime-const rewriting in modules - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86: use cmov for user address masking - x86/vdso: Fix output operand size of RDPID - x86/vmware: Fix hypercall clobbers - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: drop SA reference in xfrm_state_update if dir doesn't match - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: set err and extack on failure to create pcpu SA - xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix a UAF problem in xattr repair - xfs: fix locking in xchk_nlinks_collect_dir - xfs: fix log CRC mismatches between i386 and other architectures - xfs: fix out of bounds memory read error in symlink repair - xfs: fix stupid compiler warning - xfs: Fix the return value of xfs_rtcopy_summary() - xfs: fix UAF in xchk_btree_check_block_owner - xfs: rename the old_crc variable in xlog_recover_process - xfs: Replace strncpy with memcpy - xfs: set max_agbno to allow sparse alloc of last full inode chunk - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xhci: fix stale flag preventig URBs after link state error is cleared - xsk: Harden userspace-supplied xdp_desc validation - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Bump release (build with LVC patches)- fix typo- Add LVC patches6.12.91-24.module.8188gu6.12.91-246.12.91-245.2.228188gu.ko/usr/lib/modules/6.12.91-desktop-24rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-all --param=ssp-buffer-size=4 -m64 -mtune=generic -fltohttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=383638ec16644faacf6d4bec33cedd0995b5ca19, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-859d3f23b7dc1d2d19ae1f4d0d3714f50b2c524d2d113ec6182b9538ac4e78af1dc2bfc08da83d338a12c4ee086fa460a18d1fdb8a1db5acd357197828296bf0d?7zXZ 'ڌ!h ] crv(vX0q(_HeO+Q蒊ў?cDN䂰Y<(\Gl:TfIkjfA<~=uad\2aQmA+yddܾOYQ?o]V]~T]y3o,uUrK=p{ czBrc5/B۽^HvY\rV7/\O[ZѩOBz<m DS"ZΉK^,ZbH" o'[HS[DbMoSDS!*]5zIÐYX$VL+3@1i(K7qL f &N5,&HJ|~TІP(%PxY3fQGQTSe (%S nz#+&V>l!fcre0;*w{ ǿrXVNDEP湽imp{Oz=XFoL +Qovu{_$5>=2Et?5.ovC/&-:fHyQb@܃mɰT,j dh90+.[>roCH#kbĘvcbfMC㟤VӭB 0=hhV HOqokg"G2ny4a)p!thqYna0X]F׻:xw("dl(pLwXB=6~L^;O*K@xv20NPהOnM띹v@y#cU =at@fZR^Q2`, ]^/pixr`ze./\bh1wW}‚v U 󘔨 9Ӎ l嚳%*9UŎF-Aj^V^j'2=i-'<#ґﮃ)*"S|RHҌD/’j~0+`?1C'3Y60ķlH"RgaaLo¤U0ON"S~Fԣi|6I#fAʢ%AVl>iqG-/UD$`5QxU䨼 .Oࢷy޾1^|"Ӹ$wLjx`JfqLĖvPF;W/>|W@^}a}rwe!v\Rzrypç崰K)?x^s 5TArd6hy^sc MQ3Dž~x.8SCȲ^1 qvނdOjczYVAxHiŤPMK>AaM~z7`F]}٫!C1irw4zXi>9čb_aS Fl/G(}lw*V&a3h9ޮ1GE[VGcvF#L( C_u ٫0'BL+R a/|d`>icda1C|䎚R~{ԅb| asi`djZzS7XH*6p3z۴Z4r( %ZʾGt9zkcw6}Hlƈ'{lCZ1@G B`_;w$5M[=vabuhU`8sZpA5V(Xݲ"EmW~4 })K՟5Q"MBVhWzh&(G؂ʐE2qĆ<` Ǔ+{˖=Q'Q^O͗S=@bPa4~:X>`Pu >$n7pmhдv8?~gO CM`Rdl/ -@!@t/$3n&PF}lIt)Sۄg؉OQ!{1WloQmg6ѝTeNRciїH蟽ڝ}qIpu#z j; &aG&6sobb\s -ةXbhEM(H;$xg|#H)a`- ڦFp f-hwJލ1%q7)TxgWZ7(>>aDhθx|eh1a{GfyK:gl1 BZUYXSQ#jmθn`R ѦI ]37 FS>$D8ߵʋf\jp+| $ ΥiC\+;&ޒBG?*>;c#SnL iFrLh5HɿcYݖ+FO(Y|vgzl u3 Ik1z5 DO8'f:||:% o`GTSvCe%{-~>-F|F\LޜFڌRȋ{Z/Br#kX%w ikQ0OUSbRc$3'r?aC7cm0^8>|`!$ eu=w#֠)t+X(K-֩2 B5{w^Xaz#̰ sSIf?YH:;Ş4d/ 0Dc!Dz}/}3jmQ$8q覽$z>3ܜF\-k!F%vVs뒗9HL3Ͷ>' χnK 34JTd>2]$/]OOm$0yUd5lI磟A{8\7{ [Xj2*>JF†o`ٺh9o(mvQ M?⓶R7n 4~Er}Gl}FVEҁpuuZq!. T%K9녢{WN{955Ĉz&eː|7*LVYf7L2bhG Cz)'RHbWW8kxa3vJ=GFZAAĆlQ2pPF]7p[o<-o7IIb01pr'Trou 410&C.[~ę|+۪heje/GR,$`x+C.Ŕg˰$O |~HAl|gmk⯝hY?]כ:M9}klZgZs(3f_IZ| 5 `ku)tAd-^uXΐ$K8yIcxB6Z]X܂_݄;&lY#d]B<F"dق+Z:~0Wb+'h-~DhRe"yp۷PBI'lb0LB)+KBC&}YǵP#QIRy?i ci 6O5|WYɋ}N6v.U(Z)!.?i#4ptXˊW{f+5FS5NI܉Eq|P.<ٴmۈ*g}Pfic;<<ަe-]Il"1/62E_ SowYMlnĨW'Qu5"(* -:wp"cRV2Z|:͟09>jrtĐ y[7|.a(׌]>Ib/"'$\''n˸AT~~7`E ?^d%J`TM$Y!Q7_tB!b5oG:ďn$"Nw}wK'U:,x ~0[rBW^خM-/H,2pk<ÿuBKD/4]ZX@| *ys*#WRjgBMcY횝]bV%.ˆn ]98˷yf85s;_@/Re`O#:T4b*p=!8; 4%~E|P^ p=X鲭'X0nI,@$j) <6@O yZ/#\hbڊ@ZǪųXeu?iP⹽M;;Amnwj}$tɡ{[(]h$e"+ݹnl7(DwB0b'd!"ae(|8OA w?;(@3N{%h]7,ݕ)ĩ|9lf~;üu { ybӮ}AܛJ/1pfu:mp].IQPwx4thd2{_<բV_꾹vCRҶ$˞)UkiyQZjQ\W.C`r&F,hhf[btzDl4ۺwG/k(0Tt7J2(35۶0 `r˂ ڛUU btB&9Op%v1N>Q El PN1Br~L62} >=;&f!ٽ|}!=ꮴ~ w>WHTֽygej_UWo~ETɪrb!|ix!՟O jM)%B wZ$x2v9/¾ϝźd?z@M0](N[RG}FҚR-|0ݳk!p+^AmU GFR퍛Y+D~Koq1wpxF/DWV7^JIU> ̎ h dEԖ(ľkN]4Ow]VUsrԁ~H%sM8%vkQ;>ܼ.ljR镤U#g'5(ImbAb{mrf@i=ܒY^/6+zBcuD_BkiJ̅TEGC7K9 62N45^3 ΀'F5hڔLHUejU($[ãXX,\7ං~u:<- 6N^bJ*y!V &3v O7#5]MXk}!^$Rڐ(0ż3dыLjw.UߣuKmOW>a<>aA="lXdM{k>-ֺ5S"Yfu633\KGh&h2y©hbt0[I8fnɟ ,v3g^–- x&|ɂ<% ąn^~GUրA_# /2ӻ-H .:>7֏ZJ!]Ǻl QUA@2.OQͽ'H^ַ&Iy "^&*4yl.a /&ݢP MG&K.&*Ai-DL[% n6${uC{o*0c ^034a%ȅ6L\Z Q7R11VPs`߰'Xy|X fO8,CY9ZTK4 jyq\^.^dܕuF=+O $"Zr9~ J_G4RA8N7H `.-CfH:h Я+Y86EC[V*,(> yqެ/v\гEG^ n51zԹjP7u2 AƉ Λ9o8"!@[қкTgQԦ7D送@iv$VP)6~3u%oR1,1}MMN߽.=Qw]URFʪJR#$Px rV֠64-rLWFZ^^jSc)[ V:+^qCۏiJin Lo"2a%8z6QkZMTWeZ/! C`4JVX1oIR9bi:)8b5Z %+;RVc8+Z=x6D4Z?ITIC^$4R!Hڛsm8p$qnSYLkIBѪ`olшJJ"J+%"D!:"(N*܋X#x_ЫoQ`&]+LO>Z5hl+3/V D]6?'f،wocL5{^7s84H|C0dwu)7E ԻS™)1)b/IpmSo~9=]S%*uoȺNiƃ!XWdMZBFvj-v᭓;: 0_j jw\#>g6lW=oᮦ!j)6Bx3S?du/,[W߆PRM-gjeXo\AcSVY¥FG3J@'3eWb&Эy|Ok:XSQ;x$1Wc~LDW];RCDy%0H wdChsUJs5!l[ !ǼK_Q o2҆.dʶl`CIh*K[mѐsePe롵2[/ !F-ѥ3k;)y!}f 9hl8Zm_HQn3!c|l(8Y2]x]?T|6%,G.I6?+k8}IL @<,2tX| xQSX[=-bE+>h;=H$ϟO/xՎWx$#GlȔoR:#p_2(^NXg>IxADPҍzbe5"v>$7h~|p;'OӐ#>݉Z~ˁ{`shwIizykIklݼǥw7z۠pQaiP=+* 3hFM 楰E I\oBXR^򿸔ȑ4NMrTsM[ۓ1rr5 `>ëܣdȹ&m&n.uo>PS!==_'ZujBr,{K,@N\jElA2B8: 7iG*̖*qfo +sbFwB-".ayMμ(r;~SEX r=z#!^Y.|pCC!~`\I9_5|ThԽ#{P`S[Qr%i/ɧU aFl0dDR`rWG(F$FPvp[ٱЬu f!\> T#IS3\IpAEgw?:U1r)_"_.yIV!j"rQ:d쵛tΧAWW5v=W$[m]ѡDωj JaXpْk'O) _(/a1+wh v]G*u&!LS]<dKyk e+HMEeI?wl9eTXT%h9V1\KmI>"=wn5/X$gj$F΢{՚t!ezaTHV%KUIY>9 )%Кɳ R5<ȭ]]r6zz!^*, ۑrkQZ827 y.$Yg9@(6>j:[aõ͜O7s.)܍P -kT9a1bv#o^djAb=lh54"T'("!VfGWbG}*i FŀdxS$kHC\ Ң(SFfacLB"fX6lZTxRrXZ&9H'o*NVP!OF.rl%ʾE}8C$mK_ s .\[9m!bK |H\nG7dRò S_;N @OɥBM!~A(QS%jTܤ%6l vFp<ȑ2Q *rjt<78<ӰY"P [;:3 㯠ge?]E 2Pq WZxaUZg{.SuŻʪ,3RC̦Azxõ.'L7o)t/F0(Ԍ/KnMPX΅ utYГ =\u?؝@@$4$f8"H|,vYBo{ =7*lyuժ*fiƕF\Aɫ#/P ݋7Sr:)Zl!G={R_м '^50_{?y uGڱWߓP2$stgAl!~ݣ-p~s$͊')>&iҞRJَm~v c y62[>mn*sS) seB-4yV&|'D3wڦL&oG 'f-Bk5UN7IS՘M}8Q4"skdM~%}Ci$p١ԟcJmB0Tc:^.0O!ga9iBughh};YWQǚSB1xrQ.0"0T=_HQw5zW^Z!sMx^UV;Asw\;ݵ;_D;f BspAdax ~JM:$C{e"윏5i^5G?t}|9X0cp4ynzxuu'Vg". `d5 I|<㍻1BV 7MpN o k٣ 8PL ݖ>\*/pY|P2ilZK@5. {RaE m A _)Ir45:UWgq};HgРBrv_IPOn^ |^A* /e5\#fU#dn3C\-64SQO'(h0o씩)`8\Dg\|l<>Y Wjrzk"Ϲ\DKVuS. XZq6ɎGg@;"S$Z%8h?(WfɱtQj(#ZXGԜx{/&h:U34#"^\pe'`)$[u1̨7w|cihIp>\iNU~ɚ\Z,">eQGbas>;ZK"T[!EJX˱y LQ[ܞ3~^:{C +_('=8HL : &{yUt%4#NaPd־2I^q(s $zlp!Fxe>$af&Ơ-K6|:36f2S.\VZJsa/_D}!/0!TM&cU+uBlG+hJ"yid=k~g!fI#幗MG& z[lj4%R 1}3OWK2;K|)hŔrܶ{j ,6T],&Ja0\ jsɻg6jɲd$#4uB;aq0I$zC[lډ֞( f  _)/M&ER}oZ k$Ä|SC6cޮȃV?:޲43rl@b\9\%KFIjݐm"'4b^VN6roKvv@m`rХ&(qx:adX7JGEH`Ju9^SԖ+nTٚ 8JivsDCBY{w)B2xMa+u T3dS nViL@?"gY[vbt;!e+zAʛ t=3OZ|^qg,"a+!6Gm|#X__yx}`S:W2A{$sT™f~u8rf:A|Q f+cII$@F5[uN·|\WɴM)P˖"w<-(B'@-H9k {7{X4KgM’DϿaogWWϣ% HQD^eEeE4%4ڶ"=|;uӌW']4R"CjCtB\)*`WFVZ4*96Bs*q?d ·rE#=VCKxHH#0@Κ{oNrQ&6Po`Oƫf1Hh+Fq8jˍ (_jOGxfהV=W`+ɗoOrʐ#~6_)e]UHhrx(?*Lem(%Jd_nZJ u6m$ '!&ښ7xYSҲ}pL6orF_{I 5.b@&kxgzW)aҽ9Hևw!VUGlq9&#dl~{NJ\spsYu5;EG]M媰%-Kb^XR[kT"^w"t<Uf`[FVߡsXH(8- }tyjs@+opx[3oza+7|ЂyUZ/@᱐R6ɉXs_Hx$bz7x`H!?#E/?|_$glBEF&dҥ\5(3YL1"ڜ>QK٪c^ yKzokhuMѸZ#-5 P @=KTǍ.jD8qϿofuI5~.EV洆nEpIl˯K P, 9BWC;Hn{. TiZort VT޶UTuycM;5_(Ah!@\N9(*fEb@֍}vjg}/߰#=JcD:x]n-nkPM!iϑ ߎ2u47~=8Ѧ/$k<p˻s5'l-I;pV! H6-'D0!).BWJVYrf¯ |SXgqYFv Tsdg*W}5\djݕ\Ly%l(df$M'`jѱ˞=ͪbMK8I5 ^-{6bYJå6=jPX}R 1?tp=Hcw!D0+嶅}n>65.~g+ag!B0= iՎ|ШF\BUؙ9Ĉy]9;B c8I6m찯DfyIT2X.T[IEhIsa8[Kk6>5/9>ptdYy 9q`T"Ew𭵥-G)g S{dӢ=}{AQ-㶮yhb|ȝ֫4Xlc/)`gdl=wV]?ĕZdBŲ_M?d\+gKxa]phbo9x ^|ǿE*!}H/HG3ё%w>W~eo$ ˎ@gаi]eUoЍ1ޔd!:bW8mxI)$1ILelg^ ł9d|ր+0:F<񴵓9,$MDyVOn)EAAz,ц儘u)e"Pm2, RGTQ+01!Q2y?OlNӄctw/3l)XD:+be1sDl꾓(786ѿ iAsdxǃACkqm# j| ftmɡԩ~mqۭPD F( Z0LXz$}L7C] hg+A7A p#1ڒ6&ŌgY;W(a8s -Vx Y>8kW7ʜxB`߉~J]1P|I#Vtq$@,1ȬԽѥ 2%TS:]e[r0' zrGNc]1'P@yb 䰖& &,vVI$O!sgN> gJu4)=;d6@D7UӆޟLCn: qyܞFr  Ɗ&9yp*)A-o*(0[ 4ݏKܙ|($~2@Y{w;\r& (ϥI};iOA^5y1Bk7@⣓Y_9cW+ N=:ND?\mL4GI8HIh (~z!?8hqVqxTmp"M[sie<;i=WR"mTsձ9Z~fa 4sWz+TO=jsR& wD[xRmf Q4<Ԧ)`4b ~$vo[bq,$BN)d엊yOlLY@$x7cCx YlCVuЫw vh8) cI$2:\@|wC~W!=&0}*y+$!X,μ@?] PB%sSxWG7 tD<r)egc{`ܙiWeiqPĥ3> A >M鉹X2b͔o?H@8\{N,Q2>ʺ B{7odRF;^G7p ٿ[PRwdK[ ¶&<]I~lig chſ".Jfl֢4Wœcw[|\>j"ЂvӚIQOnon6tY]$t&_F^91`)p tU `J PӀungkߏG[V0Ҷ1KbXeY/k*lq||H=R_x>& t 5ذ>*.8(CfuTM-bњ5}amb޴'|V5*'B^Eh aS>#~K>JcY"Rk`f;%-[Sh_^  a"ƪ+wF2or"@R e<}IS*-Yb 2U歉Ha{g6&&ށ"]7} 4{a)ܾW< 5&?Rn']ѱx! y!B}f$gQʒ\5*nMMu7rP] Mf)L!b B%920ٍ9JF)p %ș-1󧆔kӿW\}[񅖯J J\+,! |E[gi 5b†*G^)Atnk0omMU_]Go<)̈́`@BP\P(F#m;`x)ș9ҪN i;I1W'P{$m 0 c@BdCM̲c yÈj!nqT_':5y{FcFE^swKfFF@ NpIpG\󠥁'~Inl V8dFM7Ah}X{u\7lԆVH/DQ#&YLGR8+m;ΙZ2V"AIT_~28 'XeoH-& Ԏ890mG2W_{|\D=ä &i\?9B bE!deN-/, O5b֤)"IT +5(zdl5G 6]OeC°f l9`ϓT?8dy=pYlj _4Sc[? on(-Fdc4C)޷X"z#MDS!at51PK>qM9]@:ΘK&I btI埱(ysSY^[Bș)Ա5->-丝HrkPOQZ #'w H׬.K%={hq9L{Ncd)󲵯qv3燐g h<A+fG|m mt+Kj3'x`e;\UgJ[sB+s!%^ପpΕ9k?.>-2 w>F(XP"f|U#IOHj\ Rdrʶ)H4-Bf)rZ_=Eraw?V[ž WD?`*zF*U_1gPR!ќ*,A>& ore) !*kWlm,EV{|R{+@6U~ē@1x Mi52 ž˿~c֧'.S;,#h)ge62<~%Z'!-|pqљ@7/YSUJkDBC޽475o7tœfdlER;@IsZeDbȫ$tT(Ngܕd}G| U\䏃j!>;?bdDNyYvF}s(t ?%ѭ"CUL슚<(F֎]@P h%Lz(N\zI&t9 ][a 䒜[}y>^H_[58 l[AN_bCZ^? Ei9&lH3OfcF+>Zt'Zccd%I[]@1+i !gbbci_y-.7G'#L`A1md}\l?j9vDK9;o:2|La1>:cLQ .7]3)PV)Y fլVXMq1;c~q+@Ȧ:Ctқ%wm2P3Btz'O>'. $f~uz'męP!Պ{b p e m䱛HX]]ͱN\;ȇ3;0$G6~is)_&MX_hxNו~6 ]zmD$Z4 ت].B$]ƚ0uZRg`eTk?5z&> ȀґJ.!GO k]UNqS dAAd`-"X̠?! =7n&{P%&yt Z%$dfpd _W&SOBPPєk![S.X[/6˵%D-E?.|KB)]Cwp\HQHa/Wnbm ]?x@2gCI^[XoA%Z^FS:9@ԳʥYzq  ]=(B2eržjEPPRumҼ.9#cJM`i*)f@J;QoF|R%ɾ"CbaW]$MldXA!Ju[UNd.pw]ڥ'o=RFZWqTAfZOMYmSoT%خfx܁>} ~2<ӫ b\sک9jx &rU:DdpѤgƟlEMt;(\q}fgTL৯*dqsݫphIWV= U5][Tw5Fdqzw@mNo/ɊB7HuR%V~V:2S)iWo؇M."23 M9Oe&*5gs`RKQxvʺ^qdc_޿li,m+ZGnX-ǫЫg߿ Xq^]:ߏ^Hm~sYuq8n#H t WfKPRr7M }ńz7wA XPjΌQ@wLl,# 9=X?@Z&⸡Hy|hVFPӝcܤlLq91´ zU89lrKl 9H~4IPKk5'fÎWn@JP գ9A7N=<]^Z@ [=V;^BkJdà'FcéB Ųi V5:112C8U9EF/p$-ζe 9]̴869L.|Ul%с>AF^G8? }q,7-X`uJ7VcD O13R"NS#ʋdf9I9o:r8xD ְ矰[>%)WE٤@b~*Gadbx(?ַivIbG+>՝^GZLz9ٻ> X>[]EqQ<6s3d 6 HHLV}Y+z3"VT=8s?LtHwɘ2OKp;A5|b*KF#,G ӊ50QټՎmW(c#bVJ׆.|8[,,C75KwSZN\J=rM <'n >O\v%`AٍbND;w~k{ w֨Od7gMIk<>3s%~xL)rE<ɭ0.ɒ:cpSz׸*9ăhWtH0#p$%-Z?pF "cI@~|%sw+ gQ$ /iT]9'I4ɇ$B[AiIʣT "H2lђ;6s\ i}6qMf)WiJZ qJS{ɬڱVs{ \Ϝ¨i֮Xp#Դr%9^! S3=uؖ!C5h|=BfvJn|M`V5`NHR8>ve'D[&QM0J{]vgIwWhVrT™pyǸYґNYe> eXކjj>7 "nJyp\Wဣn< pd1#t iFGET\%% "]75w9Cezgjo rWQf$^ux!ܳ>Uy1k\$m&`_srU|u2F\Zwqg we8셄 Uŀx?tYsp!}Ļ*u5ݧfc]ɘ7AT x_oxOE$?EeT)q|.|l+M>ʐ0usWZm},k Wms~'1:]ȑB3c&#R[x]'i3&鱒=n%a$ MA1yL2/Q^JޖJ}"% syCsF7yY0AmgGOb}&y}fmw7C[=Υ"ibġr9VQØ2l-6`HiGԫ#| >` `^7F* pvI[> nF׍u2Oi7Ō^Yj<2ˇ{3z1޼p2#ITƢ%"I`-8SwV}l*-yWFҋQ]Gޝ65)Hvk"g=. L;e ABQ382"ofby9}F&#Pe6M+Ȗf}wC 2Vml- lmA7k lj9jRmdI.1epAwlV o>*tWʗ_S4]/%t2>b`1(xH]p|ʕwHZYw n]e("K_?]ti"aL? 9–m$@IB&RD|6 v¨T!gNl/*sN@NILY78'ᮉ? ٩S YYv|&3)tbI\&`6>XL3rwQ'hF[c}!{ǎc =Rm?i_OHq‹w!*ø oBB2Ƒa}QIy^D^$z<{pMV٧RCFhrtu6hv +D卐OEPDKk]3 p)y׼@Ga 4qq uA_`(8zʅՅmHW~C2z҇iJYz4;XN|I>W^@277RfP$HGz >Y`ttHͫ{\FgvGI`?\p;!~ l6ǗNC{wU"oou1ҮVio өFׇ$Yf^rTd"O4Imkd/[Ľ*]1{y,t˒.L%k p̙O}O9B=TMw7j@5zn"M5tƚJ >y^׍g`FqV?򱾕 +(MW䋯,P(Ў ~1^}E+ۉ0:`:iۘ2i=R@_߳~">5[YoJ3؁e<ʿ;1=VDVt z ԐaW 'r6=4^ZuP58$_ZOfr?; ~^gw>{ ط,y4ej^77QdݐSQ15`D0¶$J؍MXf2+p:ҳ.iQ̙붷Н uc[!Ys ~l¥BN}íHZנ􇑣ip^…6Qz&`+#s668)inU]Ӈaز3]"Y'6Pe ci"PHVFo^Ծ}/GSQQ\m6l0 N(2D8& _JSi>GQ1 }lr2"L-rƢ#|JJr$3(a_\%"GFPK[N .P)4PO2kp?^X/Vɘ9p>|PN-Ck&jl!Deb;;3.3~r߮?% -DL1cj}߄Ȇy^T693򾆄4Kv>IVar %R z)G{>qѧ. HzLZRux޲EZ4dz&퐓8|/&4YF,>v$4"czru`zyq$(7' L1P8p62 }$)T vrhG`zd6E69 |^/=(gsQF(_8[elܡG50;uDsv8*?Dw3 oacN.n% bbb{~7wGHUKle:#mkXlcM"c[4Njs:NdA|%S$HUEO(a{rGTwT0흾(gzQ$9gfFԓ>8 ԝl%m!;Hg1;px~p`[II}~H!nPxDY27łR 3u} :bpyC0ג$ڍ:UEؾzs-UY`vF=P~MEn *jRSSmEE_)XJG%6vrN7RH +%FSk=Gcnf=9C20nL_$gN_$g\[.!/O]_"MxKIH;8/ZpJ{6+1CBGJDF+7@"Q.sߵV,WR+!&*cj8UU~RCteM2?c$8+8A{UGk2廽i_a[Y,r6Iqؘ2-f^&15+ZTxcR|=3nߊc)hB4Un_:»k M0expBAxwƵn>Ԙ8?F/Oh2kkh~gMEżJ" .9[WD'o ҰIeR\SH9"u;.JN!MZ➏ْa6o. S͗'  rhTMadbi-;ƌ79i Ժt=]"F'f/ 8+IIkeTEP )הN٤ԲJ`LEh𜞄cy;x/fڞ=Ze*XvϬ3*O6ⓩn4$IیOEԈ 7\zba\ plL@G5d`l@2|Y쎶\ D5i7R FfZu3 Ro0JsvˡEMS*\XYٳ-ÛL!wTȈ9'{~NS84X,>e;jRH?hft`l>ABԳ:̩˱^XXM{γ -Ázj BK=3KSuπ7CP2Xf͚ gN )#|WfN7+FiBc&4Ew>hi]YJ^vv;+dt*07,"Ye2k[A-/[ᬷ̘|d&۝5AȰ56y{,~&n/+!zH᥶Y_: L<Obhfi{!)ǼAeT.Oʩnd'ŐU!਋w+mlyc.r XlbD.E9CeU@C~~d4 Yj(T%cV ".V0ʘЏ=؍L›*qonIpm*8^` E}tф{ڡ=7s&6 =#u Z1;naq^cjRy 6WeG3ƕmII# VПzLD80 Ӑ6/ ͿdH4{C%ka" "%Nk-VK_ P-aUs vka&oIw~cifIpi3x-\jlP;Z=J@𸄷\hA?T-u4Df`HQ{S< :( "TI6>p ?EΩ.UC\ =%|8 52"~wnZ 2pb:> ! LoOr7I7@$Kl+G`v P@*L*sш*AaU))s 0oҐ6tZ oY# TwڅFx%rBI-|Jח%F0WyH̟Wbfmnmvs5]\snW@&_ɦ˜jwMM{(O}rfer dS:(jPIo|ke7yz/{*6S,q;ʷ]3t'ٟ F3VY5Hm6GR`e^ +jǔx۫?1]Aa: /*]ИwvWۋ 88i{ Gׁ5=pLK_?䩡1α GwY̺g{ґ—VV:Kʪ ȣ7w/_}E@:"R@0eؘｌC+,(I@J@L55Y"CD cdvN0vݴ 2\O( UrQySv$ڑj7.m0N#frfנSyQa7Z} lqbNA]K BM5Q~O9}=T]}Q(Bk("hq {]Т b"M4= J\ZfTZ%-u~ve>% CE53tVzJalX4u rK$`bEmpp<+`je(.UTo >^F\T.L&SU؏&僒3SKYZ~ ڧe4wM˔jl@e4Oq p,fVN,:KT;imzOw6biEۣD %eԘк $Y~yd,zdZ~vtvl ;z'X;?Ҋh!5Vcĺ#,  pҝV6u$r,wr0Kb5q!SǕm?t-P& w~_4@F!RL&n>Y$g=_ jǺPL$Wzu˂D`*BiC$KpjN3b5ΡP0F]"q{ |֌*V[ rR)5@ }'6De y~ݣcɻ"pc%j+*Y+s[|: Y3 YO]q(Sl|~He˘L|df}F<8 ԃ$]T h2*H#2[ vcK~ު5z ;Npt3~-pA-&u*IjBI~lQ +z83 {~(bd1$95~DVufG#L~N sres3J N{7G . f#T>דKBB1ʚfb *!b *o!HaXf=ޱ:9{'I@_?֧^#iVA2;] lw+17>Ms0&ia~#/ġH͌֐&%O'Ũ UVr>󰩁wڽX銾dde5d$j<6Ea{$"?[a]<1Y)/p!(ntY31ɰX-3q49=@͈4V7SK\$MZ,d\\]t*'Sd]C"R0iRYWpaE-_u);&ڵR̢5U6zp xL&o* hK7dG!8QaܫbFqTZJg!%a+9VQ"‰gi4D U1`lӟ{"tCj/Xwjgގ1kA11[;>F}ad66BjQlP٠s.=g]E$;@1c,L0Hg;IK3UJt[ ()h/bePSZ@e2b!dؚلއ:i q-ׇ XЦ <hu/Iu6ڿGa GϿ0uM S-|IX.WGUe)","؅ؤ?tZ/{3wF䊦NRKhύn-v O W;o 8=d,|7x~F5A*yL#v /XVF.%1#q6S ZI}+dqs/=GFSXVӋYC"^@ ?u60)r>Spm}Veg]j:X0BQ?w>q HOVa`'PԾBޚ\CC f vTxc?)HKY=͜bren e]Bӧ?9¢uL:yj|;HA wlNsR2f (K6N$Ҕ$3d)nZQ],~R&k9;{+p~b)JKkT'MD~B?(iޒ0OM #kjhh>n #gYIP'3z-JAfJEU>nuG@'5h׶IdK%$LU᫕ j'h_N" Nw(zXܕY4﬙qQ'{;_VGy>{&]z;.ԧ =!+nzGc 8ʟcmH?vdжV}dfp?Parh;= 0;|`<AMilaw,%H.?AA =SDv ||`Dw[&֨9+n{DNd5hS斦%exs9Vgif >1P= RS!t"¤Y"j9 3fFg1w^~:'SƓ] 7wG'),E8i$|Y3;fY*ym[復`|<ݪZ Rtv(w⿡YD%h'(5ڏԗ&4Kl5/;D+{nXzD%aj_,=ԯ 4)%6R7gg?q&* ;z1PgqݴpF'ՖJ tp|r;Ga_Vi0i t]]ЌlϢwlb ջ(b 9)ьa8wu8'$΀)Cq s"|V&b8@gP3؛Yq>X`'l}wWqG.I\7N2\b˧+|oK1$FGl|w| 8]F+YQBRD1 {O`=j,uusbGo|Z(Mj{POz9S4CkkٌbdFT %ؖA& iyH!w˭6z}?iXym{)k1Зf*^uRY_׾$3[W$U5++kUs~@r)D3kmUj_ McR.M޺f+&o2j/WZ>gcwz3KAd-+= X6r+#a 6e5}M <TZActOGoS9S.0CѦ8 a@o1hOp+͙IaTi_u@Hd?+DZ_lt-R&Ӛ1i RA+4`*dkq0o}{Zw3>)) 95 ڠ&Ou4:M]UlꮝO-)r{K 9k{{+pF;z^nsq/}ږ 1:csbR[y4 wm3(&si1m.Frw2Kl/u972͈ JyQX^AYOCl #R$vtilr3'8}t Rv)L`7'5LC2K E3[Za/_-1ݨ'uΐr9Zr̢0w~fԎ^M' ˉP)K\Sqs9Fg58JS5rϰIMiѡT=%Y.;pȍگRXy o |Kn=IfpmWt  NiƩd,u>bm{hs:n  U§ b̄D??Bh7 ̂JHWRڎ:1 UF_'oju03:N;FI(}/-xz<4[Y_'Nkk"ߓ&M4FS]$ZDr z 5GߛRֈ˩Iue?:慁[6l4͇ccA㈥Y#q52B?kmx9Rی=ƀEq I^GSE- z4y$ &Q^>.1U |`\,9ؾ /ɮݚ U?MN coSXUb])OD_͗B*?ϙsJYśu/=x5ү 0p-"Af/-LEŶɟ6u~)~ Q&/%QbS$&.q*JSX$J/>3H] i+nI-KտU)@I]R-Ȟ˲7'0.=n a AC 7TAJd$b)tx3B2Ltd=G:r-{5( %lXln7ue Ky+rFTD]NRT,E .lbf+l/ i:co*VtIԅN]?$ AÔQeTMw|]EDZQ` $.1d|֡7j"YuU!a Dfx6qRu79rBY,%߭h I`s&/;4'ɑ2jŷksRZX>{`T$ț\ٲ;bWKAeM!oxqyH\5u7tkKΆ^!IS t)FmՅs&hD 8`C/~כp"ᡏ8ˎf;jA"$o:Yϑ,Xٓ%3= oulAv|_`>p}:BxutO+6~j!}~!t:2ĹT#:ۿM;HLW툦赀 gjs'vN}Xȧ=t?K 1M oX-X;i1+1otbir8oO->.764ϘGtVFɪ K`|DʫZ>6I¡} !ƋwˊRՃ.~[.,YR"6Do -Qґ/P[ǂ*{uRbJvFW(a!e廅ST(Jq,2u 0?j JfO英0~WY@H^m//um%hh؞'x |b=T8Mܔ9qve|`Q>j)|VW0i݂G$ies9>“'L*<37!Pe nYWP~,$dQDL"} 0\Jl4$phVLw'ymc)kn9!PP#WPy6kGO]Bfvo!+T*?KV"EsIA٨?B$NX=?W `iqr N}#`i6@?0:njea ;fXp`!%3>JwFnڱͼ; 'IqK9D$\"1n.a~Ϝ!t7]+R| c,x;'NL+η[c|{-87g/? Biftdkȭ 5 ijs~@ ҩP<#XOi[G4R>+=|6vրǃ_듒%=r >p)j<{mʖ`È~]4p@U`Wʡ#cVx9DfZ굟70jM8v@ڮ!d|8ԠRz`afkQ%!Ӗ5&3CU2!S"hʿw 4rԫXce-,MaޖV<ؼT>':%:{HeLߘ}cBnu^-V']i\E˜,PSfoE|ddID--`c,+%OMHF'Xܲ*\M0:| $ !"Tװey"18E v=K1g%p M6Sj{ LuCmn%=C55:5c܉kc%),R8Q\E0'Y_ YKstW3f)Fel-`BcNt- Lfk:Z5ڒo%QT'6XBX\YT T6 9#uf2 cii _8\B+9tmI:4x_1LIQoMFTf)}Icǀ'6ٓ\E\jǸ ^i܅H.'W2hFoX2ѭdž=Wv4$J*hM7- ˲)^cUa'%~핏H@$գ C?&Fρ " C1MN-æpj?x^W4Y'↴yob^{nk&!bV]ي*g˶8ʐ no-ro^e&J Pߣ#LS&89/H">)RNvhz_x!qRbt^%619N@;*lSkqS=P;_{.us,"glC\ ?-c9V oD4[qU"wj9zgWf{>Xb^w-K=ٻnѥ|ێ)ޓUSn| 6uHM9CYBϙv;apPʓHzVZĂY|~0Ơ մʼ0<97Hg%1]2r*X[IO/:l7p̀Դvц5 ¹5Z& ԠZ W>luZ?:A{ sq-kwOˠTe8tX6lC΁IE ^W.'Q1Tl :"44$#)R~ XRO-,,T8J$rP=M]RWoQ5(I; AsǬΔmAzˆ{>gRoGyI|>ₑ P:1A@04C}gzzx>rŹx[VXy?cD{2zØn^c7dғq4`WT H`sWQW˅|fCs70WQ1"k(HC {k+Gl)q)Bѷ Ԡ78zd~]oŞb8<~6#7'\Li=ֿX&5J jLJ&jt_SJ vw=JƔB 8l3^6!fo!P"So k\bwr>6ǜ8.33|BG/{۩(h1]!H N"T-̺@3PPh$ \aʀjKmOXQpO}O;Fq 5KRC.Gbw`ōaqωZ\7$wiҠ' bB!/LB tx'͈X.ݎaК+IxsxUo91OMp&~I4?=BQ|F  B~Jsg1WW-v2Uz][>_Ezvwc]~_|đab5}Pk%CȭƯYFwI+`b+Ϝnx7> { xQ_۬1.Xu~.#!WұCj&~5=>9Ԇ Q$WE[ƵhO7 6QCE>٥ oPi Ԇw!d=LIV3(C or*^R#:`.sخ2hLȒ3d\ :t AIVL![<Hjך9pc;L܂L"Q ӉCJ]se7$g뤿a7tv(.nS TRFQ`  qdAa>bP: ^ZB\HO$YP ߎ,VFAjD ^+k(ֈfʝ!wH|ڡ˕MK](AeTә&5,i!WhmJJptXLOu`qth\H?9"ϓ رZ ^tǐ˿:SD9Jص>xE^^wҡdkcd})@רnAj @i9&@J-?V8i޴{Ra.>쾑 8Beߛ.[Oi㐨FRʛo,fʒ̮N?T{jR[ޱKKȥQ*,L|%\N̢W$?Svs-nLNa]F(b82w}RijZZNRfQM^eE߉mu0g:F]/F4<®;cHK$o;14)iAޛJEzSZBYpEVSi,gM.7A c]ނ~Sc|`[$>9='!( W %Uw5<:AR+e$Bjr5X/[o[-!u@HPdqTWmY] t 6̏kBtojʮz u|H <_mF$*UEϪ1m;zR}msG{s$: w1t~w6GV,d,#x`J<']lت( 9%^k: ſ37`Hf݆ny`2Vl+BhnƯZi+O q̝rҔj{iabd}x T VA]|, 0-暫}{cB3`ڸNC藟$FtP3)ېyUh]MÙlCu;WV `zNwHٸOSH2)匿_ A{<;XO'Ig[CFȘZ3@ ,yr 1wLyU͕hkk_KP-Ȱ$R,DpZBys#8b#`RK)w{\_+0=ܸexjskr] }GMAyxx!|') f eroȋ˲)!=J<%0wUt {ϐUg6G;$7q\x LMoI (3fɊH΃_e딮<)>/ ƧR(C&^‡q`Կ,'GކV4l\ @q _zXJr%>%No-/vʠ]&vӉ6ˀ}Rpv\p(U6 em7b#\K_+@/G }@DNHjWY~,/u9y-֍cТߞZIKeYC7tB P_A-tmVTde.|dFmzfuU8h  u(>f >) s)ã4@ 1QpDXi@M;wbStJ*\HR}@Paw'ʒ!%I@D:pա l.8Ş|i8~2Jkܔ^ Iu5Co?oPXtjǪZWvC&i) @H9򺙤.tvfܥݒ2؆mz&lsuh8 O]-%0 P2k|&?6ȱz237H(t}+?DߕI0=1 k0$aXn4u!|(' } |eճS4.h"*YkXuP [Uhf@\:հX= 3-죅P65lAjHU+3Gt7HXQ0 FY'n}}jӚo[)zZraNT@Iz*k !o"Ba_i ɦlbnEPLP썽iW-݋0s8#j#~ڿjm ,JCu>zJ(mq /3p,9~}Nf{Z9=?8f{@="ns&o$!7>D65~D2 i-͓{2֧h(sec܇'jxTbwށz!&dy,3Mmp9!ER;kd |m'OjtNRD9xy,2y. ހ.a|vCaLwEܨ%10,<_N 0JJB_1[H9Y(FI-1L  =1ʌދ'%ue.QwDHM]emGZ>¾C[ѵ.(Jju> ,?5$Lʳ5lcVx,߿}1;z@j-xilxp `[;`5._NiV]@2G!(ںA~0!~[C=_kG ;7pѪw,oܢ.#Ew\lb` ;i"bA6

e[+y %IB6{[l_^pRQ-{{6ŁY9գ$$譱(i08Ní*[:F?> *9_4Vtt _6ep5쵁:ϟE޻~usB+(`ذQ}iMavb|]W^ŷ:j=Q*/%P`"oAl/(W`T{=X+'ʲB,!7GJ=\Lm2Ge/؄Nx} թP$=㦉A['Ԃ ~o|?T]5oVByUuR#iIR@w`LH(*c/Bs:#ܬxm4Rr%ĝO/iaޚ~v*UKJ BVռlذwp-p Xa EJ 6y +Nҕ$ _=F4 y%DxPsQ"FLkGeaAsFmPPo:Xܥ=h->-P^ kڙ*4Crr5O!Dg4(.)+YR %ChOAK925S<,L5f*.Fxl=T#s`Siv\KK,Bd!ߐe i Zҏ.!-u^})G` a(:BgS!?`>pmc;^S-UԻ{x8^ aAׄ-:ś|Hgj}+-O|0x7zT>y!Uެ]!TzlTre[(d)M8Bt$޴EzxE`ybZ^ `ܑ_xF˴jLJG`3~?RZ 1Xї.3 t\n EZmVe2|WAugOwpה٬-x./%/UdD0-Â4SSDʽf tIq_[{w_.=#V Y19= \|P'}4GArj+WS$o1J.CIV| \! &Z.Rq:$%~Pf.UV늁 FW3?P+"57{ne0T^[_U3vyv&:,VH4|fιL.k2a l}yW4{Q$֪ 4'; w6n9.݀tՃ8KAs,󷁤~[ S@x;ML7-#?F_| WIf-{iBb۝/*,gOhb 8̙XU _Y//\ <>O | - XAM ԁS,,40XUb`nNN}2z!]bWV߯-=l*Sq-4 6<}Qj}+KIlEC XmcH4jˏ[pR cpLyն'M`195"Jz@ka h}A5QY6k .`i 1zhh:XgrNb* UCUry~d `HBH/n&LM"Eb[Ʒvl3ij%N-{_ $V3׃O`5U.tXG1S`ղwvsӌפ/ ↃTJ8o5#uGK Ll9;*2`L rỈ#h,xVJ܊tSYpL^NCIr19x,+ϼ3h#"ؙ= aytJSс=D "R|څFJNېYPu]H8ug!y94{MB5Lu9*+$W3~Kdk 9!kw1 N:^Ґu_Ɲ`=KT}{DKz^$j[E6 0,^fPtA7DO"KօDi \o-$#u~f) h<_<$Ro+g/uD:Z-8o5Th5ȵ):zXfdRN3;^ yU8KDT90_l=]ZDe] E!ck%6hzypm}y XOD{"| aCM`Vn}Y| rzq& vl] SeW ˣ{S}3h&Qs.; =d/m,\DI*}2tt2/5O".= < \Ӳx(j&XCC`BeZ%g5 z  ;m ub_)#5b:-$QvNZ@2t)tc.\N@p 0T#|;A*Ivv ~cv()f7L4,nJU8%ٽN#RukLO46:$K'$x9OȎ{]qQ5yÅ]O}9îHuv(S,=œ{}'c_w9N{'4cBINssYer3Zc(s$ ^%5Ձ#u3i*rAnD,- 0s Z(뿑Xkhž2W8 AW!{9Kw2e`<.Ij2noevv˫@M*E)By, l +GzߙߊEwj nXunKB( 5_999Nf{'ݸQWi՟ۛ{oǀ6_I7TbP#5a7n`iPo[NIg_%4,3N ڱtlr(#\C z*AD-51akR6uDKT`5:aӺ\@5iWN2 J;ֈ?.qxU RQ)@5-56rZyn]QElNj t8( >3K^C;lNbIuOuIݬY㺿H:>Dm+B/ߕV#b}ƃFiȦzjEhuk鈀Jf%e4.xm9^<4ۗ _0~شeu˝qMU| >UMv1%j*\3 mrPUKmbmagVKyPYw1.+ejNz(ƅd6$%5+wٟ(=+?=Zl\A`]3oԄ4C%1* ^3Ѓ9P`'d{=GjE^W@q#R7wJ;gc~冣} kpȣ :{xBa!wj?!04v9U5BW\}:S7P`g䱧TZ"ZWӑj?;h:RIī4H>|?GG#TޙyʶqnADؑ|ǪO!ei, dƕd Qh#\)r&` ٓN.fOR66;1Ԟ~1MjpG#j E$`1H Ovt ,jM:ƥ*UeH)U6$n8QP"I N\ȹg0FcIz-7΃h:^CF,_/U6QTpE'Zu[ NVr%>69:ɬ:#pڈHD"+VqOsS83N~-7 f/mW^9 ru_Oޡ5a(?ֿ?`>@RDuK{+ O ' A䪮г&SӨUx#IiA| &Qw.~Ţ5wrbBIvtMzJvO4y^< b (9@Sc 4DeCVYYjX?3[6]LFRʕtj>~4ґy=ΫQ=tb"ˢ$q}ォj-ն|SxW(8O HSV{XXnKIǻWr`$ u?W-G@:94(C!!2.G}jb/lιM˨UPiߞVBw#)+U{”k~e\E[z "a){-ǘVV_^v|1$ZmU6<>B^`KZTZ'P=_rѹr,WZu~x-.v-D u}6e:]#\򬋎.Jjʯuyr06W @l$6֫KKD_}- IFFr!eZ|\}2M\ﷳb@9{.H3TP[Xd^@5̐3g_]Br3)W \ C@fT j*ZYsQdH@&,BT$:ױ,C:zݿ'(sC  n$^>_- $ f{;9pxЖ7HGńRh&J6`=ob-dw= x*7U-Wrݻuȇ MdjQ^$fhr>"OS:Pq憇*i7>]7t~e :Dq8Ӹtf˾rJCwEEʓXї!_eɺ)/#EBӠ`EItWL%+ ʢ}l@N7^1LbԼ)]V|T}odžmĺOphKiJ~eY*~V~z$[Ϥ?&983ѤT%S#M[]{f}S0x*l; [ s"B#b  Bb~3Q{W;{Zm|A>DoAQz"I][O0pg|h]`=x ݲܥѿYk.ܤ"i;YNcpL~kh/\rbXTI6b(!*T,F*dk)Yi3W酻]c@ؖf{vfW q~wm9/6Q`3wSE;glqAi?_kb-Hڎ!> N0_ɑf8xg@.3 =bFNLr:r3] BPAQyI.u@ Xv3жsF#;+]NH`~'zv=4L?\\[lh UNm"~}L-5&T荐%Wtq{h`(l )m!B]i:Y[tF|ӍCIw\<߲!/EXacka `VUISY+dQWNUÎU0ik Z%6G|! 9q[.6v~Q#>Xj{M{rIS Dve~4T Bs^1]v K[̸ ^vlw2y3Dex3PR9,Ad}Q!q,ʗ:VH{1; Ѫ7[Z邭tL_yNap%YI墒fa>QLk('gtOK6ċ?Bw@&O" !!'I6SO{XHm 5%} Åk0o3/o9"v"Gۧa|Pcۖr c > BeQjT ?D^kL?2/ƵxQD@G 9 l,b!t{2޼;=OO(0o;9np)VZ%ത#4ƫeV:-20U-_yI*vjy3ggbACoǘ<# Hw]'_I|o>cx}NùcPPZl $TIk4[?2xgV {]7?S&gxca}H}Zגa*_RP r6O]Zg_ةX'tyHUZuruI9rx1oPΏ,L<F1%Fp7MCBf #0ٕ(5#6;o0=Qt5ȉ+TTM|HOg@f6ًzo`12!HטEH@?ȷ\L3hϥ=暜ZmF! 7L.XokX=8"!Ԛdc~Bˌ\&5.G}? az wٟW4ቲ^%KbpN ֓yب|,ʫOW7\LVP-^މeavmqMgc}NZ4#*-# iZe?riXJyG3yR@4&܈[.<'¿`]Z K8"UےđAA\\]Shzn:#BhZ/*nvs 0oU%c43WX$WkK2Jdt+v6=KagL f{yOx2M?cYCص$KLm6RR;sQZYr "k+`:HۜB'U*O 'rn(b)g&Е-Vе-K,bm^̘"n4l$^dg[Ѻa%a2Զ[zm;M;j3yz97 M>y /O>Q[R`bfj^M< U"miY{Ĩs }佳JA;&R̷( (Z<ƭZ@Xhw!ċͰFq re򞦂[J>"NFG|}t_!doK08q 5FG-{; w,',Om=e!E9O׵4{pß?뚗.<;rAsd<j2I扆6U)j]2 M׏l O1DnsiNK͙*P^șQ?g}I'V7%`=S;oh}kpmط= 3p -;p#~}-zI-Aepы |!V%.``5833SK8;Es~sdڧj侲1]Qw+z!Mw/4pI]ZFtmf"U"?eboL|yp }q)){C֭Ӡ0!^TP:4.Hx{3YY H_bS>`Зf}xu\Ϋ'fD}!WKa}}ٌ+Ԃ[SPT >XڄUz[׋ىu͚Z22I>k75 Yq)fb_6X8qadڃa UGܽi"B=?F9R.},bwq~TUKB%;-×LcCvjtD v]o@Kק[5ZlsݭM@BbmAndL'ᕒ.PLS~"N2d@QeĝcN9k>S꩚h^O4 4>.BOG*yBrD(Ui{W]˟abU3 bav2'NeγeZ 1vς(\zQc-T!01])X<`:"I !ax4bZC3% !]]uAp/h>^ZB؈F$[0A4JjZfyѻgDѤ‹9n ;՛N;~X|t Ql<`?@&zPv}8Q0MS,Or#/{xzA#}D :*PCݴ0a^7426:(Ż%YL['<VG4RSğK#rqF[8 ۿ O7 ^ H9; gݩކw8ةH]c+vѻcSR$M%Q"%ی@2K Baˡmʠ^D7@AkZR/cleõ0Uf[pj0`0^KTܶao s+#31&Exw1]8ۓ }rӺ6jw>rAr , U( yk"/Q-wy՝w`@[v"ǁPϮni|KE̶D݉쬚B:62] $*Wq1v=IS+VXaaI=9g>j#2ŹZRi<4I͋U 􀓛3BDV|_8Er 7q[]?c 鶭:-J sw-pPJї묒Ő@h' ~z^>L>#P۽&F|hzBz.׶4 baPlg#/WeˌRZt]%rJ[Gb_lXC|p+brO]Yen21uo$ª# kZIl$E,f@oW}4GuZDh1EG*?HF&Aϔ#J[wbӄ?Ej[=GI9/ƾDOC_L79oe"{oKU F] G%"քq0 2&\Z  UrޙeiPhti%>$ېT /3ڂOu Ҳb\55-_L>/>h,75"n޸h7_j{㱩FK  O%jҼZ`);rѧ:° [t 5Q ʊ lhwDm⑄Fǖ=RlmX#4&$oi?q2L-Tr)p$ T_t!-ַֿscȃDk^け=qs^  %~K\rSy&%Lx7)P~elżQIzg^VW'B4RY zd8+Q^]2SpsŒLvyA&'H\5\,}v ;'1*+:5~e1,M&3KGv3&}A5km4#"kwb ;~f;7,˅&Y'r:.o]=qRh֊ uK-qLFfz |@͒[E*6!Hed%EX$rIN@5ؼkidR}4Ӯn/[85Δ:>7bq_{z[ ,Kj,^C^1Hޮb o|Y?mqD7H6>Y5``>""ٳ2lD%E#dtC&a:I'bl>!۵4}_+#S\w_,eƉHol΁5ۖE I82(-LGkg؜ϰm||xa:ďB/4 jpl|Ph&-o6 VnyrB1))Q2bc\Ȩ2<ߨF-ZYEÖ |wIl"`g>2q60qj:𻾪> TU_ Ͱa!Y+ FhSr k)'[jj*V jtrjy^7C4CTcu9 D@}u.)BuJ qHk(9L*s]_D*Q|7\D+]E-re- .2۬ T6?&ApLPHD-vI=&o!uGQ{hKt &ў YbЁhMm/5icЄ-1n" $]_ ]tu /6~h ^Uii4OA"kƙ Nؙ͉l I/ߍF"ZmƬ]6z8< ~eE?-(j/wAH LGIQG,_@2son/0pyAG KC#m|멆e=-(Kec@DS$&c1_EZzw:(h;\yΈ ||uO?ej,¼۳-t*'m2FMR(IYdCyY++˫f0QbyS}n:֤B`[&@c}Mgb,ǓWYݚ0'_l h*,bceg6Z8ZϪ7aial.o+L<4C8 L΀ 1~ݷ_ibP0cB>=>#˭+rT$7H-",܊XB)`MUXJ]]Şe. Dœ3׼Dy_tMmTRjեLF.`k-9Q L鋹}t(^ ; pIbIH"aHRGci+iMoy{=L""KcBnF_񘍸|.oȺ7eUUX1c^2JZ8;G6EgjD؎؟ڄq .Ycs2>b3p_߫duRʺ"Y4) 9tE;Q{3[1 py0x֣ƺS8|)'dOGݴ*L3cȐrfv镤t#>lǜ!l –v<8%~PLqn׀A 9r( ?A&"w4GjU'3tj, !CP;b``˄ז `0^?Yנ{յ!"O:I8hv?z䎉Q8GcR6SݨR:?2i cukr'e``!O9Jm YZM%2dVv~PGx2 Wk z"9&YlP Iu=`7o}艹a 2*i_i{(j(bg̉ɸAGB87J)iT&u(v}FQc7amiU7 ȹ\Mɡ\?E:[:|#E&"]ʥ>d MZT!1#$V"lX\ćLa$~IJ<D֠g4^9=#xtz7&//"-ʝrh01>s8NIRY/lιz*a)YS!wgII,<[{FB]5D<֠E˼ͳG1ݯ"IQm) 6t2wXn)Kk>l!5s pRL/}2foÐƁ2dzV7ԎW\vڬ#'H0C-RMm=n}P:}5~0,x) i Us$~nyPDK{T:hCszk, jh뎺@S= 3ڤ V<280&X!v9jDr AegJ3ukΝ"ھ0lP|"ѝm[XA1.:0;HEV8URѧUST@s\"#j%P‡#xՃ/`$0 acv3fXauI ėMA\O<7pxo'sxuL6cyh+=vӚAmiݟ+Po>d:NtṢ2i>FfwjP/瓱%讶%$?<\Bձx4VM/NG$z Dxl)x[["4]V,B{wm *L)15  ~ذV iJE%KmzCPh47S)=zBqL cC,R)ђKKaH>h@LD#wd .׈[O{.̀3^3C+Ew= _pN÷)XEGRN}pw[tnxg1rĀfWiZ˞ߴ`*իrH T56y :`F}Bϣԙ9MtjP]g=t'!k㊶]D:Kkx5ݨ6$c1΋hr/>fÌCqq|m>Iz@ 7BMY\.K׳:' U]{d9z1:ʴ&ӷ]=jX M$kɔ>jκ@,68#LrT53W<#BIu4zBkl+1 GÂ؎C & r 3`y7&{m5bߋ-LExHvuyuZgf^k3-Q! ƗSJQιY82ȧm6ժgﶠi\Hm_fpݑ%Biys̞㕛4ZIZkm ~enwK Zze>1P )^}f#o,mKCj*9cpOtO9Lza:z߱|9>_p&-߿wl$ݱP|Z[j}'w/:06oK3@Sa|?Oh\R/"yq"Kؾt3yEZJP}]>,ipRCZpTUt?M:nGy!jMGuު|ʰHO8)X(Zȯ+&*V3$j**Jfglg/R׎t̋xj,݈1ܨ`B9R_},{ NB3,nN}\h͘_"D=A7l_b>pHWCCĄZ7ECv_<)Pab0Ch@obό\aN&xM *c^acGZ=&z Wf-qq-b{@oa4yx%43>PB+{q-l`7<ٮML@lc6fgצ|V$p|1<Rխ("NEoكb̂4O̡iRvOcW ,^.J33ln!;kZ02>HokL˯=L6EX\ex2] 5_i]֒BqtkdD]$(&P3B!NLK+e6pqL$WCӻ!d1g$֟ :AzZQ-z'i5l7wNңdL[哓 7H3n=6i"}UJݗlcq; XR"Tm|.ͅm!9Ue_Y6n8"zƮtit`US|_tl+5I;vvQkE[`dq%O"{8p!ռ JaBO1536fzgbiy ) fSB;.U~TKKC?r *1U+j7fJYt)="tzH hc`!_Fh+3/+ dfWt*E 4kK!́RUrwf1hv'XPP50ܡ[ݎ~E$^Tr B2N0Y]ۺT6WPɺɔ}R9Ix~-I.ӨDu@>A!Ճ=ʥ>ĔĽɨW[F.>y,d/if܌e5bȿt}a uҬJ T DQApw'vTEQ {F:i2Ek'5ג!́E(VM)4kSUx{PQlz5hScϸZUu[XG{\X Sen?qODT ^A_# i+r p-CA -y$Uq-AR잸/Y"Ẉzy3KtkLXAE4/v?Y0QNNzcw~FնhqucW]l,$'K@"SF'7 S5-+<  g4`cB=Z*'%!(O$yv`mn(\\vFs]CEC[g,< A琍lQd(W$m=}G 0<#U`hnxV0+u7Noe@̏ƫ֌#z1ߌ`A0A8bOT 5)5EX h!%ғkH䏋2e NCu|ȝ6%XWGHp{e]Yok/2m`ʁsV5'&U2pOx3LU#5iXL:3Byޢ@%ƁPOMӨG O ƫӥP<4Xm /O{(LTԵi=HᨰaJ߀y/YTV+c}o>'k'7_)lCk!՝Tj횼ٙRl,^*?n m M0.11_v܈ op;wy׭I` 5}FE<;pZHU6,jRrT}`SN9NY|/qvMS#_Dvc o% ǯ+8 sWNf: tF3S2@{guj. ,cҺl}(b3Q\UcKQ;)kZbwKIl-rvk%˼pCf]14Zբ>$f4# ٣iw\Dn}Y] : pNx};xQհp`׾R AۦZ]G͓ZK $JhLcT_h'Swj%lPAZ"M]oZ*R6A ]4&!f]3 3%RmomI䂋&XAU, WFE|kSmF'#wXW_pbr w}kt02E|SIq*2R }/׎ &N˝m>E޿ӻX|D-EK: t̸}"fe&c^`H$ZWȡd 2<&i'-Ͳ{{I HA)Qr}]6w5BZ zVjh, ̚yBύ-;}Vlb;-1v\ EգR@>Qԥ"y";LrE""7VfFBݒcX6-(@$; ޝv ݑ)U]Pqlҕ hJ`hw-эzkfs9)%vx!F#9f7JFp7N-4}eu%WqCd$ h:(MEUsAH!eBDJzs| 0ա*tLU@nr: q@0_:)QlN7k Yu=MdE*4ZoB8L;CuHۍ~VvCܒipw3V#[U]t@κK΋"E2rHI.(N}d·)( |۝gC8]6ۡF (3=GY* )B#n'ϽPǑ}øqСqGD(ʺ}?]N샙3[Wh!j8I 0~LE)+/E ~ 8(֞ep/ '}T7(vͤMc쯬(+lkB ^=ƻMgHNV[oV&A3K-/c}pY\buu9~"＝ `{Az0S/>\7Mҙ:~|[iY'8|4S1iQie(w J RЋ8*A {(ff*@SBHCu0`U-w,/ugT15|kRi#!FOe7Q,:™-E/2t9:?L&6:?Hex M&1"QGh })Iܡi>O(tБZFXU(?Xc:rLK6csJiz`^aFFy՜Z| OGlzĚ9 .8zykxK:xށd&&O.X@Ψ,)Y-#<[=kgָ $U'_Т-s CxrnXYZb⎿s[ĥ)OG$c`!d5a1i.4=ݝv K73?W%7yc{snڎ `$mt)p41͠8j-GVZȯBCeu.EZl'M&-S 3I+ɲ L9RBsv꒫ P ,95EMe*j=퓸^Jװ ܢ@-U9u2`! :w{VkuUX8l\GIO9ejgUuLl,g`ž W@ć_ܗ #KM[z+xL@6UGQE{%iAFjbƖ۞t7N0/&OOc>LD&a>hlx)~#0g >)NBcA3B!xj20j]3.Wٯ]o=6k;=HYfؤz/%^dfl8@\ߗojĢ@sv+-F!9- "1&[!omR 3H#IYlZ _(d%KBT681f>40E^vh~_VnK8A3~b+%_ P ֵj/͹m7DkDSI5d@5crUi̿x&vD* JSMj@oZ5CLqT63>:,-L'PP6BipZ'4)eyOr*B?$4 p@xɆ$B5!}R:9HԞΨΌdXDR,fۋjsy{kF.M/!G&P 9g盛wsF,yX )w zNq'> rp­i `s`$6&O-nҷP_ 3۬Z~)I}oQ1քݘԡg DSŒ#KUpILUN HОϋ5A8=\UmX?Ƒ@Pϖ(i*5:AĹ\kȗH ,އ/bԡGGN,s'YrnLrj7tAi"aE$@l58m{bvW/ǜW.)P7mT =ߌYMHDj2ngjT TS|!$_[; r^'F􄾦هX^5 *GDWL~TaMQP)*\Y{k8'G9R Bg<"؛`Y?au9Gn2(5"g ›H9:eXK!{PnB-v̚Or:wy U³yϚ >_ x2=ZLA v0&Z Ys^*HpIaw@H&a)-{@GD:)ld!.ֈcy4xn"B֩^?A9g o[[Hp :_n/B~bVEJ|mnᭋ6_}{ڜuC,z4gw9Йsw@Qm晟ܱT'.A`倮7d^CRM2GjQʶŊfK],q5.Cen3tߟ(cP7*X1{WL |&Y"4td;y5W}--_xӑ^ƈ.ǚ+~1p8gRUժ fF =ZzCa'/&܎AT0jS#X׉{"Bk% :!ɑȵ&eWe8#w_I̺n(dH"ԍ2 \"P` H=)R 0rbϜQ,CFg]`7]niGrKpI#-862Urh=Tz.jl$ C]RHM?Xyg)X$ξ@"K2>?1.r9zeVM`}ĹуK / dr ^ɑk^aә)n2UĆ$w|sw׶3QX- r_hCZg,ϲଧ5=CڈŔp*\fkIL2*R4^T dU;hѯ}TTMؐʺ^l[)RwP >e$uPf92{w\!u@,4("YDq. 7aJ!0܉Bb j%Gة" fiΐvk , tjbBP9qkΡ_="QɴBvەpe:r7D#QAD$*&)F5c@I?QiU~zhKObtig-ʌp :ӡl68%Őr=DD?(?ywц,ă)@B(SԶ^̲ Ij.Ŵ3tɢxw 23TM.=z QΈ04܅:Du~IxZR>+gl5 y.pn /L݊Ƭ[AgT& 8ql[l2TmA$&͆Hd.}ѓJq"Sc*H^Ҹ5*:s7pHA UjЋ50=69}%f[xc;@&AA uFd~ߏ_%;x/؞Kݦ Ov^sVQ"gpw De-)0/?F3a\Cw"M ubXӇQ%'~W<|r%Is2s>N]R]}=;s6-mY\5>sy8/cL:uW}YԿ:QaAN^bUb~ŃC__ď`Fkh*?i%\띎hx]gT{|<< hhQ9/` ;GyBO">z2=!qfJrƲGP/g[ bm腪od8;t}$dբ*uI1RoY;Y/Aj83e%?/?]jIsu C7H|YiR(f$bytSx;7 ͥcwD%#?((_ LWg믿93e^h}Ngm;y=wsq~f jEbC cz|OI} =ftflNR!&ǥ|Gn#pQɓ7!u[0mBA+{b=b:F˒3l˸aYmqYLè+0l-Rv<}MmųdίIRpobJnΒ |{]QeKl>/S&- m@{T+b4b{ϣL}>SaY[uh'cӍh{%dwH(Y3n]$)2E# WrsF-ڣ3{e;HB|>y0qi::z ^q-7$#(@tw΢OI(WWxr}q*B  M38m$sgf\T) a:6!3^䎠_! e~ZJऀ{)Z% b9qhkPFW쨰ųxQ]*juyc_)0C(m˜sVJZ-@69/кuGD8eXi}O!^"@O@ 7ꩨ_Wm,vUx~{Aua?O5y;:eLOU7佇ffP uf<VEk̶JҜO@=}jJ `eɃ>쪊2rBV1AɇnMoؾNP̛oib4ĝ(J"Nx$Qc4vA 'EI= I)|RqX,WmNYgo4:Dujp/D̙.o^- ۸"x}!"' Ҧ sAQ Ns;*կ~`{i[w?Ou^əQiK%{9O@&\H`"+}<̅=!#\&Fmi.ŀ0k?NJ*@\~R n< 5)ٗ hӗnXVpQ}:}@6WgRqPGvUBl J,6gK5 m9?RZƦ,uS{ _wD:s[ 60Ļ<C6ߕm*6VZMTS˱:®ZP6ZB[Qp`aM-B]7cW| 'qЪq-pɞ_Xh A =;,+(\FGO\ND$_H! ~*W:/6H/F]nMte!лL]}Di `:G G|֝g y׃?K*_:F`ŘICG.&bGZ¸U+ß6Zb %i0F#f.A }LRgvsBs7gy&@65͌6}{^ ' Q&i}K Dp|C.t֕A hJWqj28UL@oJ?Z5T9ZAp^pq9%41xI]r5fnc6*2p}X)n-"ؚ;ɓ5ɺ/oH~]Q!O L*pTkN'n,HK$T%B}OFƢtL⼷Y^ɼ[0޸[ `?3ARA Vx&хnmvwן<; 'dF`YcP^<0<<3/i`,PyzvU]A>N+m9\|tԷG͋g*{,υxFX@O9Ojvk3$&ib&MdѼ4+(Yj!u{_I{pE\ͼGiIIo ಴EDll%E6upw` & x+MHrWcQW9l".g}u 4:1R2ÇdI5ـڴOT.4Sxwm@3+:@8|`S4MD|gra~M;U)H7B5s޾PYlBT(+58OSQDi<,0*k@CΑsi "l8hKjc;~S5\'S9k4Đkj5m~{²͹@U2epppLaHƻYwN $7#i>܀FhH:fijRoU#4y$NWZ׶B!87 ={ʖg8Lv*wYs%1,HT( u[MfR7L_F*`3N*݅T(pi}9nyQa7 c-;5 }p,H'57 MnXT((:YpDfDtBƩ >I[)mhnymʁ Gd.G ]>,yGt":/@@\$[xAM-71y t`Z_@OL\t t"d6Պz~b}S !~KܥJ~ɧ蚲/yEYyTMye~^*s`/ͫLCдup#qp.]Q:o,LRޭ[('.+Yi~~#P9[C O)rC2#Ļx20U#f/ >@B2wXNE,j3z|%M8X9L< cy~|6g ԀD"2/ö0k(5xU[P'2:+}S4xLm;QJ#4ټP$t۩_:8nkNzArų0#6\*btynR8τjE%QE 0`szHj9>|(W\eֿ} ߽ $4eؚK 24k.cS{\o3"z/4( hBs 0FmNoXu`1考<$FP[Ie:Vd`?/Ծt-=SWVcdz`yCmR-.lCV5 =FEm>&#}Toj:JAVRE;)ڦ;Tp}OIF6" 9;ӗcfA'9w{gxڰL\&0KhA\/`ɿa(]MfKoNb ΀i<XDFӟSxT_ U'q$OxkD~@2U"/+gAg!-9DZƙ^~2Wxc `- E (>5R 8-Ɏ4b;{D%ߪ枟ߨwTK$agz$[B]~ aLb&r #kģuHvK<ʨ1ȩAk, o4ӫ*ǯcnġ&֔zlIz8Q“Ynl9 =j3@/#ͫ+w5V4 9ړK\va4cīY{&睓le}vo;&m-L<믹ҘLvI#kuv#w%rs&?U2}(%DBz‘Ͽ ךђzwZe|J5u =5[yX.; 蕭8%?\(c}k3#6gUs} SEYRL'ݱkJ l4aw06_q`|.HĒ' =L#VHה-Mh.p 1 M]YS5M0ф_̺=ocjef.~Hh'"j{7PJXLA⭚h Qv_į9G2<9V̫ &lett ]Y+sF F"zJՠnmh#|[Bh ~ytC+DT $BnXV}vCTDϗftpw`dԠ:DYce%& }F3B1%6{AV{ӽ) >I;R1E5r֣jCWDF8MquOK0O&]Hbnb6`$Rk}2g뗥n%oT1\+dz;3Ͽ\| ;0w3כHѠ}r8Gm<*d?HM%i5W$i2YKUhnF-dzv %ie;<걪{?Y N ӱu&R–"<ΌXm^ _Vr"lk5ҊՅm[MiɦvPb|lʞo"2'rjC.^$#6_/Wh[Z6zַ-bw Yŷ~F2!Y~H5LfH0~x`ݛ#~$v]5m2Sx9c/M'v6pV7lK0G^ ?xRTXy[)c/Lr*|iFP˝ڡ\`Pc]W8]EsyxWh"h6.֥d cȼ(3~(L?Cc UZ4#/d㭢W=z:Ü N:2}.G > ~QmJ iSks:/T a::^?ٌg=ݴ.p=54fۣlDc;h,4X F[pEHlSC>V ~Ƞ QeY8T< pmNh0,{;pO8܍ˑץ+*w,fvFb}O_px2-qkoDVc{ʅ6C.(ĵ;{7ikAbiv?$<-40BQ9i^ *Q"q9uՅM{cHƸ ) Y\Qc_}aKOFoc0ԠC\A\_M8CK,t\<i0Iŧ2YV!cjGp`!_`6Q X!< GhhцqHJ Ag&mϦg)v^ٲWp$ jiT]>nIM46E#ADp0]5#K:$ݐB"*{,'ZMBqt󍦗aU!TF(Ae%zc+Z#:̽qRb|tWUDJϠY]AqFЖRf~؛Ţ#o'b;W{iA n:EˡLed&]Tqʼnk">Qv̺AkmuCf3'yH_;]\ 0hko .'H15|]&_E ҂eq5-4zwe24LJlL!N Z,r&uk2y)U:GqO=D8K;ӕfGn췢gPS 6ӦXIzWC4]^4*y_gu%:*B 侄R)ܲ:\yb-A_XnmAgj:J`k7\{p(=xڥ\g%o(W36Q]t%Z9ȱږ(fUZ#$ח8l WVL!ۻLΟH)<>(\y\@xD`RuS Rpd8ޙ_"7jCI- NjmM:d.v=T:,;J7th!`&h O׮;~kH> P%H@6-ϸ X'N=.o 3-nrdsK#\ǭUGXADm7Q0 cGc u|:ALLٶx;C=3*eu'}Uq+ܚKXIjůp'TnI%@EKIPS/ :M#ˬ2?RDts2:O{ 0tgm6;Jv E+65 b=-6oQGܫGNi&.ҁV523CP}5J$::7us] :E0 qjIʯú Ah?=ť=oQwTi<&eҕ~7Ci4VuէX 7nT;Ɨ-t*c~}J*p )zo.R ri+ ľ[j%Cu;ng3[t?w #J8q$=Ljdns`23+r&ȷ9f9 NReo.c*:, ZUjv&29D<+N UK;݉cǼ` MMf8['}2|3#,,sdWE;Z.="6ڡۼ!V!3]l)׀Wٶi+H'(Zvx^3g,U{%IYdد[Ia"bs&*=}k !ްnnFmrl hX[(d<(7ѐ_Kޙ DfE8$j"^Ylmpyus-=huN/@d2;+B$9tͿ_3 ɐuOouUN2F]oHϰ6ZtQ01 vFʾ#QpܪAW-ѥS 3iN[$[Prg(BR~Qb&լDr|A2 i;蛠1vj`0 4r:|jsGyU)SO 8ׂ֖ >uv'0Y^)H-򩖯uT3>E2ӳ6.Dj['xDpM !er{Y, *\kƳZD_dOZ>8A-If(@m^P/@k{% ĨӥfRDssH ¬1a /p~׸ ,1Mϰ'mlz(xWJɴTj7&=4ii=FXK/#Y]cXJ#̳3|MiنjhI:n/2pEX~Fҿcnˌ |YhQg.` 3,NiIHYGhKm<`xn,w|R"< qWy\"/CD~[)?ҳnVk$fP"EqP>-^8\P$uy4y orT NU#?K]MV@[N/eWxqK^ jR|gKnj}h\=S/la!^A*jov]zp*DT+u«<&pLA|->؍{gʽ&2rG^9 Dt{.j$`g6e=Ϣ;wm}!匬d:gL``/B\Ea l Þ6'O2|Fڋbw`I* ΗY=B,.QzKf7c);]Yi> i$~H; X *1Ȑ`D8=$p:s:[m4> D.጑Y8-ê9@K6m1uC:Ov1HW@ ^ZO[3FM+&1Z *̋r[fkb7壤N޸ng)*b yX;'+X, 3f%_<`"܆41kiy2hˤ:>CEv鹎{K$8e/-2&Y[UW<ԄDW:DP8rB!P/Z\2ŀKAmW9,͗ ; y+3i0QoN(?L;6+F{kԠ5nȮ}DbZ,.W~D|رAi43ED IT3jڤ0B*i>km~>,W,}=+L·rwӚ~~tP\ 2nle~y8&*In%ƕu袪ܦ / NRBoIquze;AXCX/k±Hz@."ށpjpZ.feK`kU;y-5R>< 8{*13Ya5sMvr>(~DWW"h";Sw$H g`YkX$EDo_7~K7r n)QwlPdw jS8\Qlo3Ua|c_?[rUeZ#jQjӄaJYxRxQ;2NSq'鉧Pv1eJH2B;}n!@w&fv a"x-h>(;sF3Y7.`- 뻱z[ wz${Ӱs>ՊG8ހMeJJ©Oz=oA% , "Yޫ櫀tV7gY&f'd;sb/%7Ԁ‘&;;J>7q#dmKO0Se>C@3㰦6Z+uSGӓ>?n" rQ<򌗄w]GD`ceHK9ր1bE'9[i6;%\a7*@̅G6 h/9g[|q o$r\( fwTgnlߛ6͟ITXj ]"bsHyEJ 7fzHxU}~-AQZ @/[Bz[׵շ:"L(59ȟ!`|-#ld1) 쭰ۭD=UͳDbX4>g/ѱ)Uܙ\ݪ9VL=d:OE<;IKz=b6Ze&E`rxz0;#9 6-^LݐXa+G Cw,^؁rԧ'|W2,KwNL(o>asF(a0 `o$gC)A%rB!n,4pmBg'@sy2U(0%dž"y HU[X1͒]VK7TT[&,Ix;&0Frm*b*1:lz]4]UcXu0:A؂M jrzb7vbJeo 3 P߷=iwz3<6M5f_7aц\&Ga]9b$W͟WjSO3 t[q 8B_ѓk;f %-L|pX)# lt6aI5p0|2Cw̮#,muEYgtT2R@ ;f\Cq&{`ةI``rxʯ*Y44;!)`Js ,=vl@ bŨ\u {vG iw^^y,}/jN{Rqĥ٥W Q7.5ϺɼєBl/Sc PNrx߫a:z0j%rPf`#Lh3q⩾7W6Od+x'MՆg 'l-3k9P7x;/Wvdjn0eBz!M=D1Q"dO;"QHu##S,{&"ܚ43y'8([Ϻ^r'_0Y&Nv$~ |7JvδT~cJ2?zca$.w7G=eIʚ[82(AeFcrA}l;v CQ Ƭ:6bVzelW \VMfhJOVPѧ,n >m[=Uû65SRGEwy-0bkiVveOzNf bX !f~W+Ub.6X)Yc2Әot|cﵼ'Ƴ:-e~x##_p"k[ŏw߂P;okMV u t$7:Kd >{eGM=|$Ve/E6 t! kVCU_4׎[:vB?Ky''Ee &n')ݿBArJ ff_P~Lq@AH]+N$^,2Y{OFQ4S49QiS)r~moAQv#satsaI_ tַE_W0?TUYhЅF Nҙ>b6:xBl7kL9=A+l+s> _*v+t27'%Jҕ-hM@]-s$Qbtl3TcS0*aハj j:}!L6έogtҫClNW 0]+ PPKj56pfANjOק v)3õ%`*`wΪ<[i]1rv`:0]9+߭+h) #R%A];E+ SOk<ެҐ HGq8oLn{sbOqF0T `Btj?GZ| m`U:XG;\Pw\akv#7F[o#r8Ag~sbLPEAZN{nHB_`$&/R U57¡Hn#KNKFP0c('23K8 X/^ŏK#q~ \2`ӿC8Uv!+i.>C [c3,ՓAf/PP$n,(W{7aFbl9{S)d>'\U} kMܞ+_0'VWr#^*=m:ZICK6ƿ w¯*y /=wy&l\^08'L/f;z` V"eQyb@3اQ ֞K+^~tDj QO4VW 9RA#B}rFwSԭko]eV SL蝆~V0_*x_ IW/^AO7h)e3qsXɂ͊%.25kJ.&ܓ XѬ;7~V` ƽS+AAm*|AعFHКmguL9wZ;?9Q0;$]jg'd똊]҂Y %\=zm"r+!R %ӯ0Ό'CM#lW+F|jP& my! ,X8w >N~S3~ ]T5ko=tQ7ӆR6fU`Mx`dY9tͦaR ĒQбES M`wfAl[`R !aǼ NB߿1qB-bXT\N]Srar>")z"rML{nHݍ=œd 63|6Xu>H9]$*kdy='l 8o{xw 9~zX߈I!a(v2q+c3kU RIĥUb4c8&"\_MtN\xvg3#)2u3XuTFɄX BPQ 7.$sV1TOr VgCѯ>x*E9SSlTۆ%Q30jlI覆hN: l FF s.!0;iGh4|, x`2.ԧ8´gpWCIַm C G:bGr ĺ7l oaerN:cΏ>-Y:B-ܹuW QV[HZRNܢUb*3e ԇP-falu=DN-0s 2=!knkC{鸬'%5ȣ8{Vq8(kei=#bŻ"t/"=\w" /`PY;>A,x|uQMY[ZI!C"fHGKD.qLgP< WUaUen4OrP_R0w*n?8rn.NBʅIP!|<n"U/q#lrZ'؃; yuﮭ]{ -jMӣ>QO7,>ZB /#TwP.X.n \|_dNx> !m'%J hT.֮U<D];# ѻ=_)xFX{^W\鰾=34D^T,Ǭ# @ērqN|eyGg_v31nAЇZl6Hg{Z5-jRwYmI{T.ElsI,8 ![- +ß7mP0 :]oV' fУ=+j v.FM;oFugy1{Jǚ<QFkl/LV/[ 0jA8h4K}d(*R`, %jAh\ FԊ4ʥ+ރMU v ȵe2jփ|B8LjZgݱ}['s-Bc9B8h5k/>D2/7qI(킃-iF{xorO8~?ƬKpo$hW#Roq_Xakc{anx;b|W<& Nf Kē× "ɹ=#P%d<c 2BZ9ּgdJ7a%=r n(2dK_ʄzP\?PTh MZdɟ\B5ĘI r5D(/#?1Au |ژ^iacbn[^NxUvŻ}цRdfGihۙUR}2;}lh B>P *]x5PmqLU. 0jۢ@9s-~9l=>MW]1Zʦn[(#L:}vSIt~Gϋ'EoP1P Vc6l t@7ݺ"+EZkQQx6|S-ȕ;Ls,~28Tw{&X{'_'tdWR^OA%\y̰w<݄ecs}-IcFu>ݍ[ivlh+h-IY7>}`)tUmZDݬ猷ׯ!8v~`7q$l0FM1 h o2OF_QIM-=L+(ͶNb+5$hr?m1.du7 'r Ɏe z42P t(+smVbT@V% 9Ҋ48["rE~gͿJH"q6=/gou; LD\4;i5w4h-jx{`&t*WH!>bIw{+"@ Hp& l"v(J!R\e n]FiԴ~"k#} ?}|Saw^Lt|${<<㮐k[QHHyCE@qZo2NI5Tʦ@y%$OxDݽ-ر4xzCgǐ!|1xVEXK0fY7;|$i`!мR /F|bf2PM'gѠ[w\ dwDm$FcA/3Is)6, /ЯobdXAGxt'%qdS7PݓvDCgyɞE0"lvH Tk&z[Bm%{|mON@g{AP`w jח$ʈMJxb w/V7cS†A)" uv05̧"O:N&H`vA͵c+J`)`N)-RKq"Ku;H,\pe(K8Xf5STtj_UW+iEsB>v (ƤUaɎU$`Yg-jD/2]qDJ'[]p}tuo L$KO}P"֘l(-A>tj {3OUR|p^9u֌e5(\c·IJ@ q-|=6%^oU쮳HWWʌZ>M u%|tu5$ W ɈXs,?iɓ8/v`V ]]x'[Nj@V"nZ'Eyr8g+%( Cz[8Cmx\FX 1 =X'gY Ɛd4"Gfَ 8ſGR!y. @/IF9p61&Ԭt5H'%Vf(Ңa-L W&1ZkB;EBVA&geO\co*.-QJ2^hQ\(}voMېdu.~Ѕؤy>._T]2_IaϟiHVSOסb!o`0F'zy. я&T)@(4: _5h |G4ȯZ@n?3rRcLhjG߂59zs0RLy[Ql37^#JՍ]7O?:해v0s~ g hUduIƲ%Jٟaɇ5PR_fD$LKēI5n*IuB?Ig˼ isԖy^7 Te]K á2"B^mr}84'2 !K!Rf`pjq֚"sX H:~*hN>İț4I5`M-CVaSX$QuUdc.v"P ?[̡Oɵ:|qؚKrxD\-iՑaDU@o8bBY|uu|*ة'0Ԃ|s3Wh'" 2f3ͨ'W)EEGo";  5.- jRonQWAۮ,1dl*>ULa>&c#RCr@QyxVR>Yi{Z`VUF%yMP $c)`F.P4N6+_.d2l,1H-D5:8q U8&kڲ6 ]Yd;mk`jY4-挡g1!l׸-rs|O}n_ P&=L1 2bŭhv%O+U!ma,~_%*5o@R WY<'g6etp??9q/bȔf츂Dl!,f *d %wL?y.(75!/.ږg:OQ|v/Ҡ/Q63"Eueڍ)*?MjљJv Qn7h$=3wQB-3^1o,Vюy/2qB "*r&-llV`Ц_ei=3D+.MY8´֞U)ƥrFjMo|A6ՁӓsOcpɔ7Fob;k(6E릋Ўh Kp7 ̪ cam#bW*RMEljjg%(5_42B̯?+u-| 6)Pq~2Ձȟ}Qu󺙙k5sGf'͡ՄWx(d/(şNYkYL gI: ui>u065%]'@:UOrIwY:>"JNb`/SX6D?>}V9n{{ڥ' +OuPT]BT9ZpR3iTO =ʉ(x3px3%}:`#/eֈ:S$9?EQ7!$w#7pgT 1E\Gz * 4IF iY7eʯ, 3Z}0OisɤQG>hÛn^37dz"ɕk^O$TSxyMB;֌)TQ(Ċu/(B(QMe2X; pGX,w8PZe7$1 Xd3B]>M)c-r 06C%_ LZW=ޤՎ%>( ]g=ђtڋyדϕa#V[?s#xv0(! G2lG_rvDHZ3äqɮ+ ѐc^y~?]lm9$)R aEMq `[ʞ&XQ9'pg7?}|}Y)ច,tT䕀P :_dw=5BYMWʶn :G'ʊw9#!b6Apu+L妹uVSmI2P ZSlo/ȵ(Q!O:`LeyI9.J\q/D?qvWt.㤯mB4n}>LKkkN0iy.Ut2(P@b667Әlks:.;5l%`΅|1|+k;1$|䣔L,R{޿ЫYa]zgLLQqnЦVV{B!xjK4|"ws:`mƝ+~dӞp,ҲflJk;ڝkte^_ˏRTVd1IfQٍ?и : eߎ6!(cdT'pkb͡/P& Yރ+-KMߐ~z­A`ۺG7鉃N~OYuTLd U2̹Ǜoge2oh&6>;I2hSP=A/fH:UQrд*^p.Z-Gx5OԉWyfJ#$@觏'G{H=Ȗ0xu}Ձo沍%'aj MXC|Gxa`gb+s" 5A8}Ih(] Wڈ,0zetoViF"s7[vS* w`, ugKqLR S/GWY}fN*s*p{ygf)%W +sc R݈*$z6UJ2N #-> _hc[U9)tF"~yU`DQOCfW뛩AqgwV \4+-埯I#D0}4Y`j?ZHS G",.ϕ=Et ^=jQ oT7Tv fCZh ]sʘYsg;['MޭhhHm/q/a5Vl}%.o&LlRHw>ιLHK]{2)و.d +-ŝ9 7ZF.aGQu7k6U^k$E&nc fY*BG7WZs=%Þal1\{QC -ϝXF` 9 )"%_dW *1ǽpG0rP??d%5j"sHwg"]g,9zOm7'߮Ϻ"/ukGkA9laͯ#l/ۇys/'K̾F̌xN2 ܰEŏ ϰzaL{ϲ]NSYEY.Ղ6/%ʼhN :f\r<=>sS|Մcry=Jը˜4-%]#RG\ΨdKDQ[Vᡬf m PˍSfZ(X\$1ؑ_ީvkYq}ڷ,d E;KޅFJs͎΋|sFn&i])IhRs1F lM 'w2(Lk*_WJ!aϪ 1,^ !sA)Ӕw\4أ.G?N6pUkۥ׋s0H4-$̖P8K\Sqhٙ ]hmLU&%I=,Ϧ!x\H$[PI6$vt|sln OyZ"3l8-9 Z {kE/j؅ah2+ ,JɁA>Ow**k jym"ܾb':46p Īڧ<}e'PO=cž6i;SVbGGƣƯNG 2BN:: g*bd++DW ~LoRhFr}vE)ie/ɻAjt+.O7(vRi@E+<ﳡa8;[ԋ CW#U! Y34#I~vTЇl`3HMV83U.=upHoO ?QeYͰU7pꞍ[C p#FsC+#~izj 歓 ]ef!e rUC9vqG2@u(o:3N.*֪%c-H V U$[fLq"" D/h"(7T͚Fk| J]_m#a5#U6$e&2#gܧ[+}0N.[ pot8Ӟr.|*<*X< ?iTݢۑ( (ȑ:.# `%8ȣNNp)4֠$&z0JBѻ%+):X_s u Ksz+{A!yM)% $..i&1OMUejsqj˾' ߒK6ݹY#$Rd|Hm0w;*⣃ - ZIw LP )+mm`yŴMl\'>qS|bniiSqm}#k_w \Fc2k5BX޷τ ER"Sh$ J6/0rwm؝oK-lNFE[btfy;H"G ?A#[W%ST@y"tmg!%^ 4O'#?I-c_x*]VޒA1L\%"9a&2 ,**.-4k{p9Wlr8 . ],we!>w-O~J3(/c"PT3VT~+L '!JVݭ:TӰtFߠ7we eKL7?^Q(Mj2H+jCU)YM( 6#TF6_]wp#:R!65-2+-POpEJ'(讦s5yVę)x-Pld٪'M;`Oq}YnNJ(U,"/0ϺKSϊ}fA9]H3 =s"rPH+Q_W{Uuu-7az/כ<}iZa17?P];Wp7Q{4q@d|U5eT1EaFL Yܢ,B)im aލe1j3*!w%Ф rާk`g|h\H'Ю Cv]c'I -5\@_0sʇ]=W?DWыvЊ].LŮS<m@b(W$o^dYgqp͔L-#k&8X@> m d<,&@֬] ɪkm\ A"$նeg#7G 19*(R ]ZZA:v@k- fİVK 3DxDp'J*G=1B'uIPO<]I)dj}lYRIyH՚lJC"r*tvq zZfre-5#JG{ qL6LtLzȸ=tU 8n.Ʊb; Q%1SGb6WYjY"EC[1P-O )uq!Nl`moxЯ%yO|Ş}wV`6e;\oc{oTqh եɐkYbi1ULHN"h a57zw%~&V9Zig 7b"9W*W!KLmCxL+n5]t%&'qr 'o;YBCwpy@k ^6*"0ٷ[nĸ L43.p y(]BL6A?s| W-:2NG‘3{%"-(#!BWj=hB7Ȅ~yJUn%H{@d `+CQZX~f>^1ZDbwOcU^ԭs\,a~߯Yzȵޠ$.dUse-|;b" +~j+ A6mE򁨽l*,٬"g"jr}F?3/9@;YO?}5[CZkc;.6߶ 䤝,|؃Ev<5/㭃?K\?hה&t7+_DL!XEp CyVH6yް0L{|Y:;2e'1W 1Qun~kDŽ-vz:"!A;v0r. [C0R3^pf-OksUcg˸(wz[^ձHaweHKQsfȋVr $\?qEwq76g2e\"`RBN#nb6yHI[=2b5RS pɼjG1I*i0Ȯ}:%0{ϼ̀ze BCg$R!d SGxSq=mgK3 Fy?-4s%15C5߰X BeE_Ϥs/"4Yx͍qRhwG' w#´ h}6B Ue-NO;grc^=bezʇȏ|E 4ng";65ח ~偨]uO[]T AfHHRT;Ut']}kO+Y8@#Jo"LP_:er-nmb91|yKnJի LkFrFK[**[-P^LsE ۦܲm6ۍ!Ŵ} k-w6W4Y\-w x@mO! z}\]X--;BG zS09d?$]1!@Vm͛x[C-۞`v4fOԜ+WxL0e))^m()l; H| %_{9-okbR vYA@UhGpi66W9\Ӯ~d G }n$@QІI袊7֖ Aml0J[Qb7D9$e205iwf;Fc7*M7 ǩ; '] Q^[q݌D:O `ߝs#Կ PS_!?Cil[fSneJ{L36Ob2ï)pKzK(IW)m "=kn-ab1.Me('bIFiFP܆۟=Gh=_J-,l"01Mx?]w.1)q?U@5,^Y?;Awj"Q:툂^J/b@L41TVħ\Ȕ~v +zJ0Pc T1/DZ,z0/C G'dT? ]~AGKТDbZOJ'VO$֠ !۰]]SƐw tE?AMĝEB7έŹ^-Q_:1ع#v)a7H-&!`Apѩ>T2~%ƽ3r0 :_|maq7wp.!ӓUeݸjnJ+lu__DGAbRh&pp\j=eZ֗fh-Y 8t=2F urX5&(,hgyD״/`հX3v?)]cOdew@iRʣڿD1B^KܸzydVTBǭiZ˒6mN2?o5=Aܲ}%Sg@mg1[?!4ƿ_rjg¹+?nW\V;Ƥ}Sr@g_,"T6PW] }y ޠ;]oz}zծk?nG X\b\a\%z7~~ 'wIVoDž AE|=6u(H-{'k Md/¿\@vVy2`ip0sFb$X phv{) BSwR*n~ppV%ǯ_={a#wעRh?} oiz- ~"Uxh7';;q8mctck}jy8X( *Z_dDB,W Xl* 8>6)doyhHK_F @*z-2h_hU>KA@6^ $#x'AhalH>.@qpۛ7XlurԄ85$_!đyӚZobr/,QVXXeWpjLNRM'rz3䖪3pAz :Fph"pzrF| zG̓D/;ulĂ^( {i3L2?]sCZM)Bf( WC")*GreMJgT%26PwmUwGM+܈HrJ۩)aPY ˶Jyg1WTKJzg0Դp> Ll&Th+Oq7A]EU0P$hy D%D&\HJ.6зoїkE]:s)Ѳ7x3c-ySh \_۽:ҾS<|ɘ|1y\^X'SS PDt쨯ܣIz*R\ILp3ߡyoaoPs^ f Hl@8Hg5mi_C:zf=gGMmNtW}BsGGx&~yooϠGfUTHjOZnk{r3ia-"D-t⯇Ϊh-.dcAUDI+x/Bp}--fb W/z;?1jE笢[R³E(zNhgj؉xIYU0l>CΔ4M4&S%$[PܱX'< SE;2 yNu#jhB"#XB1FTNn!b;p|RqQFH*Vx$UBkȜA8s 6[صu\`cw71U;I]˫<$E`9m{ΕJ~$3L2wpίūr@$0I!>D D]~nDLZ8-_ LAJŨ^&-ڊStKǕ}3MIc7"!M/XUJ "ޤ4Oy)G;LC$p=ԦnM1 7-T>)J=z%% WbN3E6j`Ν6F(tHb6)Жyfʥ3S-[zǚ4>DPWr4hdBB$m`o֊Deҵ!cfHN˫1+ͼX;0Xc! fGQ?<_8!yNVh\_KxZ̆FԠ ZHnjm9sȔwT%b j~E}aVWZuu3I= nH ZsylRLeofֹ!.Q<KG[ٵҨhneܸR>DuW= 1k!S_m cBqo~ݼs5ސ*ЪjF!1EC}K{t]Z _E8S]:mfe1ZVX9?DHuȩ4&RO9yǴmxOŀ"Ր3M _[dom3&m%6ar%ܝ{?4t#9bT}X>BdZkMJ" z?Y lU&kq ]+f]U~ Rj] rs~k0G֝y`:Smwykpih[ l弯ZDgQ.ZlxPoM혝𚄳Mxȴܽ/]2a|*G [;5k~wdo-!]c(_7#eޚ H!5f_r:?sZdowץ= uH1U2w-df%7e-Yrap35HM*"D6Cp VlHd3i1NfPl\cHe.ƛFUۛ޳{zl?X 7ַ:砐f1lƍcl!_aH"Xj4Mܭm.ӄ;-!"20C'6*n"uʯ-M4"1n}O\'W쩝UzU{j<&nsi;@/8B{ZPrc]fsƼ @JnDWvzOvD?IӺ~it<#z:bG\E 9o;Gp02L9C>7 @  %lf"+*/J1V5|Ats`υ(qZgF$(qqٷAE+xĊ2{Hjcoò-AzX-eW0t1/"[ r1 zx~exlYƾ0~ZhhEt JYs⹍KXˏQ9PcOxQVvS$rGM[痑tЋ-eQSb7XrwVr(k2&#ba]˧ ҟMT߆}v^-9=0&k}Z0/Ɯ4W; *%DOSRo+4|^ <0:w\Du6 jߵHm ndY^=m@Z0Rڧn[a3Z^yrYv/y}v XWƾrM{sEVT`t =W4n*iW]z&XK6&J۟=  %E aY!KRΞ9vEf}4xߚb*TuN>F`C.ذ/|lTaV#7b l-Gib nV48K|Ξe^7|;vO>SdYL5w4GR\7`!1\{Ӳq`$C 0' ~{6 #a83"W? 2a(*br-?_ݎ<0TKLuH$-mf;@"Q8b/-guiI88~&nyQޫ1!B8ذ{QgRHΊ[ҒtwgԮ@e7~uа ,[2z*`Slԑa Prk?!,5P@ps.sv$BIfN{VI6X`(dxe_-)\slfl'ɮrp͵fhҜrblL=ꒄd&h@JJ]mrCTCFhf|}qW:fk5GI@n)k*jh p [s^wL7:zCe113jf@<GQUq ANnAp>˱sj!lZs#7W_KH 8ʇ tvs̮'j B/LlKwN6yM8$`Ñj볿Pނ>~eyD9euZ]fe=VG9_iKMi[DY[H}:@u){Q~ PeC?={6nݯr5#\*k}ER{Ǹ%mBX#\`j_SXU./4(ӤYR_K8quf$o.WQ NOXxN05X{ڈKZKQL&u8DWAcwZ{ ڱ'ӄvX^HWW-|G݄`g9]o;#LI<1s'-<SL D: gIeL6ѐO{@$"ɏKݽ <4ː/nG.߈ԟ:gD{+\psNvXTY#FW4$9Vw'I0 g-ΘC\`;|&iU۩Jo' )\zXXhu hX{J'hU%97:=hliwBсwRI p礡J ^mvm^W^XuEdi1Úܥicܓ(d]5|$RY|6ӄ#ȩf:aP,,DwHʩQ2a9^Ij{Ǵjgp1[o5KU uUDF+a>?ɭ7{QPDoN<,Pw]NIsf6^|u`|9LH|`@y- 34pEχ (ZL+ FQGcco>"奕9mFP!z։[sO/"F҂N @>'ޒ7a\)I.Ddg0Q%uTsyz8srfk0Vh] #q;-Ni`5+Q?, cFyjݘWVP̥aPj;Qe23<0 S$o^r h/FpW26jdɜapSN2̩E^?!o?{=Q(d`+U[4)U< leJl% ؅9'eW% j\A jEرiHӶXNidRizYk,H<*k8?1GUѨhf]"~D|.D Hvѫ[h [Vqky#zƀ&FA%sJ{;Jc:J'O53qB7kù&'~KNhګV:;I#kK$'q%:USm#?)\QA2@ 8$fE?F(wuV6if#uP ] .XkQ%.!Vcj'oVϩ&gi+N0rGlkL1ˁxY&ݎj/Zt jm'E P%QB qbE"mŘ1R05͍k%H5`8:E_C=v!O'%ޢ,&lY˘>0MXt3wH:w$eVݑtU/we^<+|PMĚ0 A͹K܀~,8`l}SLQUx[Gh!)V6汝!jfctGx LT{U+kxh/vzH 7*:բPa '+E:v01 4y!!k}ȫLpI}|Zj\gAv1}]0EMSU&R8ܴ6lm2paITs@N~|L>8{Ҽ.=F;R*)6U"$ko=g:g8nA\%rpR #HFU5WOCegA H=`*Kzi^&DQ$ejs9@09 yX}`| M|tr%ڼM"<9PuDNF4$IqdfK;BId2Q&턊p{Q>&pg"A:vJsƨy腞{\˩l!`~C8xD B1fN[6A!׀$/VoRAh=KTi{c$C8nqm,2 o/vRW/T|>bqVZqpu{@]9R-xN1u*`nW3XHF>Y׬C:aƁ+JIV$g&L5> VSBCwov(TNs6X.hBVOVc/BK+ +ϯqI M:ͪ`C37di}90GɷF,;VXG[%lP KWf\Py 4kNV` Zh FU HL"CtGZƤ)rdCes{54?1ĬKO(~y4Mi{_ft k[⼄WLwocpee189ca7H8c C3mO04I1o6|hlQ xM~DT,gUDzEn%OUBluQ?oY Uvrpu?hÐek m [ YT q?+e,q j:qr>l a1}T"ca,J鏗)cn1tݴ>I$nY]}P`o7yg{dq84j#-މ6.F!x~ =]̇P\> ^_R荺<߻_'"8PEi[0\|T&?e\0$hdd8p d-_Snсm!ܵgZ}jWOOmkŷ$ 4f:f2ˁod"oӱW$E~=tt̤ch&Y/AG ÀI'H#Ji% MDJMK4HΒۏPU 1KE϶֏,P{[P3&ކ7Z#lu܃3؂#W%p1lhH[V*CEeȃɊsBgNȽ5<&>\QsTte Ge9Aun7&Ic֥sNUG+>J9dN*6tfm!E՘O7i( D>;zX rur,a%>=Lfd, Q! !gRl!| .gEj4S R:h7(OEO~TS;Ȓ!^-i" /vNxY_|{LEhWLG1&']OEcf/?d{>0CgL`eӡV>I鼉xb#+O.2Jp?CvčJ ^rsKAk(r]I_̀@_Š웢%V,4BVsE(XHahE.XxWN`fwmƩZ5 _((RڳBȪma[؊SAB QŃ&o횰YQ:A8I.5'}D]b|ƛ0$@$,7odBL~7BԾVլߐo 6=pIj>H Y sXrǭ\ #\RcK &0BؿʻW*W J,s{fqܞ3bd"Dk9jf0}ڋGɻȁkމIOJ]O5p^R=+iuT*-=@@\5^ 91Y6~uWN(M%*}k0F|u⌣ :W[;$cIjxeB"ieXft@eb x# `qPu$Z2E}oZzgq^EdyGx|X.0a;z ts'F.bR%~,?Յd5#GgP1tPMTUe |Bl8+XĞ*/8UfkA(pd Rh*3:RZ^X. !'lA]w|i)e^^H;P]4*$JL(k 4 pN"cCwi2NiI̶r fH%|ze˚}  -8hS RC$=ףyDS9H\o7^=j^. ~/; |Z{ ?ӂ. ,q$4R[{H$yϣe/˳g +ΡN0gYi}@HnPFy_dphuar47 H"C;}kJIPC ҂-]tbyDQڤ"p態7+\Pf''21@r}*Άrd8=mZԘ_ -\KO>{08ʻFGbp 5wkS/J \yhpUH qB~"pwz%d: w{)$i0^ĺh|iYA2зFQythj7;QU%zfcgA05%#mg Duu9eFd8y)V1ɭN=z6RD=YB:L٣ 8Jܿ^Gh_]0w>A>h,#)I(w޺z!0|^V׮mipQg>`MفF 'Tӭ ܤc*(=bK )H Zi `<ۇ+5/29AsלsCUxͪ`'L6 b>}?!NXO7xp2|H$%f[vOV/k2 Yp __'NX:Ml詏R7[Rp~4. M͘׼J5XxO__XFHBX4a,#=trUlEHAp8_y}Q@dwGqJ6< 4*ϰc'`мJVkT')tL7J9PCN~2W0I2%]M+l8x&W3r?͍PD޺8uUiVֿu%o`6gHCI%M{w|t1ݩ񏣠:RFui׻uKqއwhdٴ>/G;-Lˍ!qlƲ'sjbǠz8 X/fZFÓ׎O ӅHeKR\ޫ$ IA//O ҡ(K@?yC!܉sv1w[cmA1Lly6]UF{$}dil䧌Mf-Ckd~{`e}*tR:]2̈́0kĨX<#NS,JK.|?PY u19!ަY+6Nb(BȖg+SZdFp MG#,5ɫ!] ,b}oI_jĻ"HI0G NԂia;€aT/U8> ptY7>XtZUPg5 MIva/D{~f{p7y狐V0aWE!K7}lNUp 6,XU f_4uxW'zbd$E&="(R iJC[eG|OBF (|}_>b06D =ZkqS A>.A4|tm\(Hn|2Ğ^I!M0}ob: U&N,I\p4">^ؠ4AuO{(^*+TӠ'l^dnUs0֖w~7Go P"}+>ȫ<-ךQr^Fvi56R()J ܗ{fmɡ8oNY>EHCWy 3j 4ہHWJ #{ݪrNRVkP(Nwg`k!8*8ϜP᭙g<$%`t)#%:FXE4ܪ֞#1A+ @p=]w"&3hCʎ`/x:2uL P$ῳS4ʿVdv`߾;+6J3̲|+"_6!?>>pNbGT0ae>/^2%+GTɪk2]0>e{EXְu'7 -l̘tu_WLWŊى^9nw_'2N癰*b¡^}Db^\$wKƫ줏sia^af@Jl9*?w(<!O پf,c3-{znqz^Dw)i]~Xh]ʳ~m3 Iˍڦ3eiOO"fM|Ŭ\jWwmy|_9# D .A^RkWoU@=c}d`x}%-F4۵*,:R=<ϴMYqœRvbT~ y!un)TP yKD1!tHa/=0k"cT2aN4Нo$ _TjLpK5;ackRpoeRPK~WM)(M_WT\ Uֆf11@N_,r"A\/h X~ #5X5j%TDNKo5uӻd:t0~䣕H|nl:ZEb }蹉gڈ:ŪW<vGux#5g)=]}*pdNk|kk>r@:g. 2֘D  mSOOӀP$i^fca; NmT)//Kg鎐2D`>ي6=k){X[5szI]-GID;QBrCqi KRO0a7alލ`wewK!5Gʻ*H/'tLf_!jgʍW"VVBLȆ둁W9PERa7ߔ -I郠& +ؼ 3&$o!F-jZ1c5h?]p~eё|˭*& |HTj%V灛^\{|^@dRW8;2f)dW~[O;MݶgއBҺ/@?deEt]|;PTĉ=p 6!gWiZ!mF;GNJaj5]ZO׽U ?9 H<xYDg8HIgF2[޺5M[7nVeN0+KUVgf/Ily+)Q"PuxM)LVic=+~cf3tn4LhB1$AVl~u핶K[j]y6VS'r:*wK="XkxoP`3oIgsF<^>9pv8YSsmcr撬wb(uD.o-̦#" HcoJHR5~դRqlh0m ~4Wg|N-xEEgT$e_P\b\ul+DSptI3,x}ϣ#^1/^xy)@OnH#Pq}%f^8+nGRF[+2n,\X)i Z`d8cW32J ð-yUhk^mRlAE\/ѩ5aݻשּׁSꇍQIt9+QckbXlZ^iA *k\]%^6ͻ#zjqͨ%.;Qe, +cR DkۦθJn@]hTΪꜼY"XO6Xm_BfE,RS#DП눋zo)+mBF&{kRx7&UNn85w\*,uF*AMc-x z~99|xilT=Ymp{CZiGٴyZ2uV(82'袏3oȎ9ٸ_E%W0vg鏬*҅\ˬ =l9b 7S3j߳Kr+Ā`Ԧj\VS2S @[EJgC]f !Y'n<5aغ1 v* M[f^co,V[y nk'&;PDۭ&!}O"=b5^vk Iei śYn۝ _ELdl͏ I"gp~ZM"P0ToyOmˌ8UtLFh!q(En.#R\B;MhVSLOwo6h?['ω3@vq'? _4۳@B6 BQ!hk;@1neLH?Kڶv&,`s "Yf.;@fż֣X $G~fOcJ\gXuz1VW騝(UPb cӵ"Ve[']1)U = {Z<+y2= T&4C3CVj0$˾`D]e%%h}Ǘ4"k&r~^o2,^]  lQ0ΠQVS4}_)6r撄exjjżA|l/u+Xnm~*qS$98.*kyݔ^}]Eб1Qq[b` ꣢#Ib"oXm$ Eˮ U P5ArN-s/LB|aO(lt8!}Gy(JPBJiK`wf&EcOP,t:b7{;?ryI3X!! 7v9P,nLGeC|3~xîC0Q6xx?Ԡ|u&^^ + 4{w_9w@Mێʫ&]%u1n8,h;5i.v `xm1oo@e} g|FTA9o,sEߎ-o/97KhWU]^D$ ;?_jJT *~#oW(M ZسbXmjJFQɫtqdBqs&ƌ?rƸ|7|R5AxF^Ոʦ|ea`)Az0 =I\7xbjF'\֢,柂 SbJg.%@!J&fy$ӖR36izjqA 豞y>]dmI4^ð*0X6߇؅Oi(~h;{Фخ@R_8YNRj$OWO^/#$wg3GQ6⸖._9K"d(=?"8Gu*N_apiYݜtI4_(OӥX?zb hpSky4"HW$>\RQL[pEKd|ճ@e_}{n9莮ÒɬJ ͘vcY,p ESE}ɋ{KT߾~فYTg8;S %7}$/DAOZ`#qfff^d-# 6|+^rΦ'CXV/0pᐿ13tD3RaǢB<+5lM[/s!q " uG҄ų7ĩ 7kn--3 ٌT{:Z̹ջD\76t7~wkoUU=0,4TetBqĕ`g~V' `G2G\S+Pgxt\#3òwe+PոmaѤٚdKN7㈒6-qO7yKJX |l|h :|x;!/Svk5£W7|Lk܄gvN&xIVPԿ}.8"1i;\ǽ@֣%X<~D~IAj zܼl 3cPx `c 9UjMu8oRp__xQzJN`duDzicaCpBz rR3K3vψ{/D!:c;f(궪`r1 >sǷI:  ]QL儷 EB4E[fP@ӌ1n oMl2bD^B1Z}9@hekW:<7F?V/ts@PjQg]gB&‰ fm pw_? ŲjBdYЕwt U6Qh%̀ݝiGg.5W4vjcY論eI,t(H7NM F7+#pa8jlf+ ΠOnHg! jFV|r0QK[-65W?FYH$OM)Mb,Mꟗ. $>uWgny~uҦJ7^{(frrQLJgY,nU>xJbQz?V:!WUw樬Hy ~CL}q>`kԥ.Z=۝VcmAXjjr $5PŦyׁkSe!Jet:Cژ&tsU@@.~+r7;=C@~`9X\u*]U&ՈA)okvYO%tYo;%7^t%oryve86nRf>&R߄<V_- M?J gR.q6Gf*zLO'V*y X pyϧ. IDPЉ}\1]h{RQDVEHDf'*7qO∼fG?/pP*HjgiT} )\ǟ\K~K^mBYJTρ={FMG$m.RFXX"#e_'/$=r_Rߡx~jsv_[}#-,{nnɛU։`6ҵ۷h׀C6pAX,ѿ7'9M%<^5״jlJ?l;MhatpkDzFy_VlYf5yseWeKZ:{S1ef̦(~N4v__4P:h{qBΎ5xaK>yE`IO,8kҤk# aEtr=¯ ,E O WS}_ۉܱ ؜f3?go<<  +@6ƼFuewp neu7CGDZ+ጼnamj>Vm&{%!;X_T "ˆ.nQ $,vn[(K^H? "f DnyGd3hEzUwՔ6W9O.}^ˊW @O@ ; ;WB?z <kNŒuXD;|`b%! Wuz\=P 4 /MtJCYy+n@HSD#pK)q .ZwE:EwObȚM>/u 8oֈB+&Fg"]vb 2Q& /F53dpBAmm`^@ל5u:ۤc_ch W˹ՇDy}Vl{ABS\棗bEXطS zy8CC_(f{'oiH&f|IyѹZ#t,}؇0RҼ>}Ia!WNy .4ұ}K jue%cZ|8bhA9yO<)]$7(?\%]3T~d|5}!WƠIg'ْ5hF8СuxsSn#|=s|jm-] x o!SLctmakArWx$WtZ<6F'o hn̈́ܥJ9pŵk7Z˪r_fS=l=5\;Nv=tTv$b "/Bh`pܾu$mN-❴)B_3jcOպՉ10o%'J3 ҆/б'~ eoJשRl͆&4i׀7wO)%;-XpۏE7p+VwhfxE S',lb~WyHTxJՒƍ% D oO)w9\+JOr^Ӽ0估 [J!i :Ef ֿ6_tai"T-x+#}X1-\{!pLc%F)IHM,W8h27^&dXRccUlNѼC̥&s1d6jr ځ3r~SFȥ "h~+@v){WҜI[#PUq|Y[jcmYU5L5!?E4+@c1[. yXY'ȬGl}}t_X7ހViy.IR;+ |$ 0Ӹ=s* Rf9A^ֻ±،3'H;Ad퍓=Dw!{WnYTƳ$G2_ bw+a&$cXWvi]7ܾ"VVhăSXzѵΒimf}=~7r`t y bhi6"2Wg`H2@t[y/9+ܕ#:xѨcB~kl2[tLjP9H9 ~@ h#${k'{I!sx8Wɟ,[ 56p DN)&i NA;WV-w/pic/Rox#`.rAۊLaILgU+H j8*6IAonNLZjǴqc,i?@ 9#շ% Mi?sLzM_IST랱JmGBItA:0d0 K|{>v7厎(6D<,!UϚZlFA@)b%ACg^}}Ԇ[2-,pSJ$b=dSK͎8}]2+.|FW3/h~P/%kWo-B *2}jЛ3G~?"pWu E /|xrnľ!P_*ۅt|tvaj?niLogu/rRWEσ*vp͈Lr4Yx.jw&\viއ[r{,#uLIb]-D4H9@5YZ`%,SJwM@S|%*16un#?'S Gl0sg[$"+lOX(]8*t\=^p\2Ԑ]9Ez+Q+$bG"f ) 2Br{LL$S'm]˴ o4& !ЄCePBZ HyvE5IadG"|j RAz9lٶ`v ֤1F$|qv͈#mOt(:}hTȮg.*``y0Ow pQ 3#_2G\;j2_9\Glj]&7bᾮD}` ?Sl2JMj(F}Ң*'M}.ߧa _,0@M0Y}cse?EH ft9vsU ] ƺB"kr{Ch )3ֵbG([LҠSWs #ƫr+s~$yȌgϡ,W\ 'c" df)5:$ފG";j 𹪋W֎Nz 3B|¶)xye}z44KҒݡQQ7>"Mm5RUo3)8T:$cL Ilg혱:s&P5m[t et`q_2w ,{^/≦Abd.NWJuW&tWGDmօm8f evMRF苰Ss*ܕ8 ɧg1}Xf ۉg7lmf!LEsv0}@|Af"Em01WݜS?R E.^yH* *i?3S2繇KH_N%6x++dOeazzy޴aV/[yD{@JD?Z,rʑ^';r GDҵ65bdHaCn΃$wpu-2n#~Z9FW5;uqIN$ttN9xk}sBm1Sm 9Ƅ7KԨ8+&QuqM!NlBy鎁e1x#Sݒ |(;gBweʼ`i0QfJH { ,(]6nl_[Uu5onC)df1S8=r[C%cGμH6k̂ӥa3\~Nߖ5"z ]-SOI})DVqޘ`iE_nf&zV+X2XeG(,'IA'OaC!#q8}k˄ma6~ %̙d(OI6W34w͔kt\--Z J,8n7Hi@ֆ:E(Sn[_5fkc@#' ,=|GDp8--鍮/Xv_ȚXʨl)~{"OA3|~{ σwq'ᐗ[e EдJ(<OHw4>Fc9`FTz xE9ޑӃV(8 V7/~3F]D GEJQtw:it/ԮŷU12OP295թA5\w4џ#o;ߥ)c>q]qU;ܫY HGM3h w!ƆE6IݚO0%mDѽ'3={k;ԅ/Ѽ ,`(y=ͬx)Yb}@A\Rq R6E0 I *D1 `xoJb9WW!G6fBpr^%u:f%/ j,H>Y5 aMaپokYMmGn?.#=z(H~۰+x1RU=#Đ5&*;LK^󀧒y9 =$j?x5۬㖬Y $Xʚm?=.{.>r҆ $ Tz]a>PYn#rWSNsx~n)V>'OڧUacͱ+lZ#)aD׵;FKk`a`UdeOSzZnag v;0Dcp$H|,z.]QX% /[`z I_pGc칼~GH#&5#ĹaAΨ^`JRsdn8b*Im0?[YYJc)_eqJy*#VmWD=? &KQ-)$+$LlpIof`{:,ޱ)3_9} I\&kV^ R*`lrL'}uKhlFy79uɇ0Eo9͍u.zm?. 㠓/` 6#ܬ}Xсr3#-ۗ6^M]j `w>aeg|fmc <6&iLt/i\o܇9=9I瞋ѐvOxOj#܇ơuO_K.~1νeƈ.qO`aSL!dQt-3&]ÜEYmVixcY_wWYu;U7'zvz#'(i S #h;kvֶKX/)ٞ p7v{EgV4O9cLڞ,V :ޑX3c%;f3}I$~ա ]J . Ȫ߀58ھbϨ-Ig5QS7s2TNMN'ęiץh?t1?NMNgA`Z[2 eoөe~Somϧ ݢ>R0ޔ [f$\a5Wn^(O7 ǡZ "0(ò᰷k. &y!t =FH+-[([gEK\44 J |_`j}m6/u:l>AA2{-ٷWHKLe뮑ڇԘf1^W0t|rH^/MiUZЦ[A󫼘0`ɑx~Nx=LꄑqJ3ۗL<@3I*?㕂Cj+1ai(˫vVt%:xQ";rE:Npm͵!We*W*d(|Ld~MSӅ.RWg+\̜: By1 ZZ`#Y]KL+D3FIcRm AF.t&,JU[*zդ {<0P'u%jchѐ\'B${m>:</n&3¾aYdY3tf 9&H!]nO \o/f-AVyc:7n/P!T!62t' zm-c"I&8+!he8nn/"[-V}lAIVz-ˏxRPYó Va 2gʂɄ8;-D{5{UTP,xrTj1@H{ΎωAsZ?P%a{ٕ6f\- Xt Q o-{s$tc͟oG ۧp잰;0?&EX`AN&D?ӫܢWN,:L6+Mn''~TGrTk2̞Fv,Cdh_Z;R, R#evnVuY.9c8JŠ7] qUBt ˔.Ap'66/7\_|vTJSH& Y`|0U[{ | uM6s,ouR?rV~|fJnX%5Q"#2֤ekY,jUODյBWw<ʹ[<Ne@|֨.9mdXfD[Kf$34Y'.|J0] f3SkgzejT2>͔2a{Z>w/F,itQy0TɄ`ܾ;J!'vly4(J˖l!ILji*kIldN\ $c H \fR 006p+76+jf*\2vSn .] #ƫLC4 :3$[YvjN|$ tQ sT10K@ Vh B:1.Wr+{ cv,+S}M8/kGl1#:F"CbͪъﺀWď6aDULM<@/048W̳򾔊{xT InIVfMQ< s";FWc Ġ .:6'2|Oxva~y\ d,dLcn{5bi% -Ɂt .l؊8Ba{1}&'[2Գ/^$p3Jp0bH_EvH 5waGwCi R*'cBdɊVCAFr'a049n\YNeHoa"w*8Y [HO z%{dBiPЖ`9"|HLC#!)1.g-id[J7{8꠭'H;-KJƃ:[FxAFƉG.#*0Q3'r5dHoKېD0so#7Z$Bԗ8v7Ʀá }Qf!2&r';_tgod}g#q4gNƙC䰵/pYˑ!dҮq9u:(E6 wxq#9UZ|Lw-;{sRo۾f(jh0$I;lXr)L+a[vFd&MHοx'#>7 [4mA2X[VNz=/&ķz Go,idjIlZorS{gV,LGĸ]rDQ*)/ >0k{^RE~w=(UqI<"DOYijlic:|eH86wn=g"g` *|[m^F,Z4zBMbsGGR#voP*7,Ήla0$l;m΍9̬kN6}Kz{|Kpﱄa{69 ,Obp$P''œ[,Rb9 u2i_Չt]Q^;0FEY•T,Z=ȼfC };B"PUVV.(W%O]㜝ZˆY筧wzJ=R/Irb/LzUi:H7 ̓UXo[l\?LL,Gi. 5:L IЛZpSS}G6) x&>$[ <&歫4 8O%tȑ?sFށ@?Oc[9m+D>n3hw|M:ot\ >u&" cP/O1QdU<)t}9ʑ !}\ Y'JE#ՙꟃ}NI< ,"Z* =lUظ|w@'FReDp/脉gR cl'ԭEuN?ch$#T މˋ66bP oJ_6{Xm;)IPB7 A8-RzYDmEoc p3]Nc1bO]܆o ɥG4Ʈ A4+r)^נTQ%M|PCi[Ty y%~GN2^>dǥۯRzfl#>'eZ'}r2}%ժXvy"6 )@g.nT8Z`x#tn0-.Nᬛ+;WqJ7MϙBjh-Rƣ2_qr1MeYc@ކUUO6$N`XZs+L@੽V%qJ٩ ;WEKbI슌Cb2[J n_⮖7P#lƮ.x%`g\Od3_Ulsg0XoKC"{ s";2 zjgs֑ŎV <+4s.C;h̪TPjGam\أ|v/ޜ5oX%*K|sM?qeN m;h.PjKa00@bȣ4~Tn tDhS gx_Jw.Z*i$m.`[#H0Ζ D!YlƠ{U J61 M\EXJ_K-Ԥ~ l\dqbYqBmd!5\,,^zV[JFuWB#e2RM]/a +wO A:gNJʼeWܠʬ 1iwAUr垏РZ;MZyCvp3|IFhԊ0S$'`CEupa(EM+ JeR'A3?WzG<6Al=bS.?|qDU,uW| LR=M)=fʂ<~* S2Pp2Z@%tm/Dӊ'6>FlsHduQy눥Uҁ;nV/I Pθ~'f壧= >8ǓaF-+C [Yz_jFזVAH?>Im$ zPVٹߡ¾ 1 ^}@/}qBÜչ;gXZ=:l<Rx@>0?5Xհ:"^郲, ]'jf3P9*;3t ̄_څchϝ$K?-4Zqac(/i9y}o :jX{O!$kq@B-b?ڡ /iSթ+ŔԆhDMldY默,zh%#{dլ|FޟNѕ!CON93ZGBy+ma?i)ż sOHZK -tg3_CצɉqK6h:gDy+ Ȫj\%zjoK5fK8Z'[';~B\̿,=CgqkE PAU|F5UoVʪ/KH=QcObPy:H :my˲-ĩr !A-:uhJ6CN_CaU-ꪀN3v\S/7do瑗`d!&oH5{J&YFqVtZ:in>v"zg>F阐R v聤ًPkp>OoU Re_)W>OuIew*Ʉ+p2\uvV܁bLP F~Krx|ye"¥ӣ6pTᚤ~׉Ķ{2*+S- i.WJ#o42ȱS.0dFs׉cM KBj[O{XL Lꓘ[n C.}P?QYRV(,*t*aj4ȟTԧlYqjL"u#A2ͥe':Ig|'!п76d$̮&':9k߬y{3Pݩ@@b ( -6G&@[~UՂzS%.(4E=OQ2MS'ܢZQ KI,Gmx8f%9)%JoOW5ٗ)Oxp]lȒ.>D²Y̭DG|p[j_Y$)@ qb ĜfY&w>:Sfn#^B-o=)Ih3>WOeTHtPI\t$+3)`Klw|~1,,Q%h"x4*#bjM(cK.p]43jL5H_NtَdI.VvՏ8NN¾oeUW9'Yd̡N7[ath+ w= eL \r?+)NJM:JLt4x52m@?i'7AaJXXOw(՜URv-UIzF=*^F=LO(Y[ӺGk|NF"Iķ.L\oh3Ĕ\444%p]0]g& P:.xOtl1)&/5e|3rwiGGcoĐ:;XK5$Kƴ?j1p*{G!s\V=!\t总aw|ѳ[鉂dDd'ʱn'鸱9j>ā琢oH>pB5lWr\9p> J+$w2֛Ɠh羌>h *58A@E7T2j>y :E-c O)=^IPX} !Z< scnVF0㲊HTo.j-@d')DggF/nw ,7ࢸל1"'nrNPoѡ`<@* sޯdJV@Yiqdr KBZMJZAreY[@grB>>ExB]Ut[Ar^wL$RUm4R< O ;X0ճ˗wW(w?*LTJrZյF%/ @X;&)Xώ6t-iBoz2hZ\xcڧ4y`d"`&0GX^u9{iJ{7 o(!æơʳʉQEr%LkY_Ɠ7A^ ď!JvpY(~'>c^E4Yov . l^-5NWI Wl:۫lPͤęUͲ6[._cIpHiPY}z &^F;32:x~hL]&N EI7h !E6 xK-/ \~\eCw.Hջn۹O2J,,WD8Wh޹6wAXN+:2m;ay=i嵡|/s7XS`2:v:`쮧C #:Z#m<Ti$r wy8O:vT4;}xڬz\)D~rI01L/+R\ @#GǐIszA$ϼҴceuuN؀@ +9THT2+w9lV$|[)׳)U"d"(ͪiIBYCk؜6RVO,fB@w6I,!M"X 0}q~ʁ37q}LHG9qy^lWA*+xu@h+;Sd Uu\nozdR%#] }<٧eD1dJO Eȉ*Ux/t_:̣z*9-5l 8^ VP[Ow^ ̴@>(t}<}7lԱm>q&ɝ *"u+̩=}1 tRY5z` [ΰ 1*hZVK% R2<.4.b|%PI99Xldt ؝D_I V _IxgCx~:ȇZNK3`?q bhŢlonE?Z۸K{9>D#Icwa|Y D6u<>,W<Ճ]0k.v7Y-`J>ps' eغ8)]𱳠Bj/*ިgoXa`]w~DNB3Xg/ܩb\#LI-Bp͏!F=z+89Y>"uCE1{ 6E6ܺ-)AxH O6fl>yh_u~c,]æm]F2N |a VŸy|Ea,A mhD.a)“38,c+J/ͩqS1grMUIK^ *)om+}fSF\9.vMmA4Eu=Iw@):IY5Gͬ>_w ldaievân~<fˢp-L׋ Fb-{@:A-!w~jcs5BSOOdl*%/ C[:LHuq3UL;ӡ70v2w xe X+6yMFB"/8g\V䙼ekVScFw _+dQT8)}Q/*YMٝFsPA͙.b8yǧD&FIJǹsEsKGLxwXjwXICO"Q`yq{u_ؼ=&+fGL>*{%؝X ժi FiMNWΞo֠(C/#FiC娴Cj !p RM/3^Z^cDELVV X%*O`9iFT Dl]U}k;g ^u2-HHbaժFlj-_݀-m{8v̢}E^W /9qhm*Z4Z0QUq[cK_gQ'^ӊBTX_2kt[sf4EOz8 w8*?eB!@YoLApac_cW샃U@ M(e{◯)ƇӈR-mn8:eL0 ?f)ȸ0nAͼ'a9^l$OvD] >0&P)o@|(KewX4rn` 6މ۫X]'t?DAp)ܯ֙%+  }o$I/bztΊײ,iZܷzgd,Ix+VټnJfܯ |NobJQ&LXG>$b9D`D[gv<r;x&pC!iS69w L683<РA͍Rkٗ"e(7"b-K=Z7 sQd/@ï&XUA .{.n9R].&']c ^ĄHn!-~:u{.+ثs2zF5ILy@yPDQM$;"ѻ0&S*˛C':ӏT0weg󔜕\k&|M@dfCn0=VD_Oq:5D&_4%=@E&l^dyr`Ia\@䮕 bD@dbuAlC Mc 7-V̑,UݺqJ~_Z~"/eQ,Dp}f5鉻BmUZh9YP'!%S[SܙuWG]W'V+-Qbd=5(|Qv*a$Wz XaC}5o4"w/”٬>(n8yQ^*ң#F,uo  lxq/=QH)rJ6ݞ{,^ylM[.<#JVI&2z6x*b1؆߸ ,Wf8CC@G`!S$;1}<'D$~f1d6.X v "\M2.7rw0 at$hG6b -(!2[8y ח.+O &g΋v oF_S uyeںLX)Grq*c;8qq,Tc<쑅g?ѼqRס`zH6iꏠFieLfܪ;n_*spx pA[!-/,9bqBU]ak?fD57ɣ#4n!CXیꥫÃ<;]b(hX&i?+K<. \nJl%씛Sl}6 0US:*wx~p}`Nή0IGV~8#0zx>gb `oIȭ?}y[Ae`@{MB r]|<߷r;IgLjN"::IjUG0[X1I^IIxoF$P\uz.48SxFKA6j'n Gg УT sd[ob)Njxy%{h-Mq^u]ƄUGeg9ՂC-ĥ2#uE#[X6%K_`,^^M/PV ϣj眧ENKhɍvoMyZW/!=Eٰh?|UOMa'mPsGd'*E/n4H~vuƂޘ,u* rCŨeH+" 4̋viDDjuv̒iP_m@T=˘%܀dw2s0]%e[SInz"(,Ÿȸh/SUN٥6eŌQ[0ۍ0mxF/fmcǛI/9N$ʦ+JbQi', qo).*ޭ&3RC"©_70 \A˄ Z:f~0*: `rݕ}IDuFPffrU9 $>/aA־ٝOh.lULO#@Q[U}=֬Q'Aqh"h{|0hC@av([M•Uq7ґ/;g#.96s>G0t5'Qo4*sY}z#vR+yAq^Nv[Aw!Bpst)!DiczF\ݽLv񖩾)# ;zr>t%E o"O2ClË:P1sGd Hhfm[Ek~bwR?[Zj~ ;*?өaҏp,l=DWt}y#bU+Dܬp94ho#$wZ(O@ ڄA"QN~y)U؝g""-kL~[ӱn>p+&ԟ R)*Qʱ/Ť+}h-aƞpQ麣rb8 TC0Gn L"\8=p~EF"w ~fmAԟGrq1Yb6Asfxѧ+`lƎ/LnmhJj )|5zSL&~;Fu ;`ߘ5⽺W{ȂOQt0 Xa]Gnԉ XST "Zo<+ո۴!SMZ%Gӥev"ܜgO0XPx99LܤP3n])J9rJY1Bj>8'Ԍ{n_+ȱU!ѕyMpJkabc55M' '0ts7kNCk]~_!FAbf2gEhBb3%| j 3@cC)A"h9t6MKyZ!WaBUc ߌxA5!麆nP7Pc3h|[ܭ6bQ9 {z"Iޮ/>ئ;0"XEf>)r$3O!"VSѳ-_(eܗn>%]K ٯa 3.`HUz,U2#F-H>]AFe%iL= eZӄT>,왵V_snρxxcDI]p#^2T5FF ~X^s*mgH=қ)n )^x0h8MWt%y 0 5M;T7]p @P \H_K!=ۋt(e zkAY}E"&x#:V,.L̫ 8xe?'^nNLK7'K$_/_!"c@Ѥꉛ ګ2CW17~NhA,WuTx蟕`VTd4dk@>6␑W􏼠;i%#J#z\ze; u 6s[w\d64>Gc]榃L'p/j.+BǙ] $T+Eȓ mua   lCɊ6ud/pv< d=4>{xwW9| plgc(÷Ijhghu`oB%Gb5ys$߻n)s9*[qD-%fж\(o1:/ȿóvA!^3n%hT>xsqsIpN +gwEyȋ9vMgNx Ol폢)-JLх>G ( 6O]d·xS- (sf} pΕ rgrq _Crp=[ Igcs 1ЀE)f łr#*~ d=xN| ^͉%9QLZB]Y#詖vN&]Jgy~f?Tu}^ ;lHr'WR(u˟}Ci8>y`||+tw/Iٲp;֟7>n)1)IW=GBtA[divG&.I7!ҮTnԶC7y}iQ bDh}>N6)R!<_(ۡsX֮/.5g%!^A3vwt<ƺi &im&hgJa%sny.+"EsHnNd}x_(H?&ͽ}Ɨ&[% Nx%ߙ\qP)Z?򧄫v"}i{R\h*ћ?hwn{sRӰk\bx¥4gճJW| _`"ip1vHTuM.\сӐ[-* =B2 (VTӼt/~р2|ېQt<̚  ZsgWO[Np}c< 0CΟ#D ;TT5*('*h+.vk'=C0{Wi#2}Qg.v[ QE lk^ZY :]+d7 Fģ{kV†rຝf :r.:oTY*@2(uBgE1a9<;+sD2%sXJQ{ˢյSC._;pW]vIXf++ 8e%%SsR)n?-{pY7=0&H'!7$J~| T+(Sc\6K,x5$5<,'c~eQ,%} .JnMW:^p"E4>Tۄv ]!^7 Bbl^i^V1G0-y.]2`2ﭵ~ɬ4RnEV*rpyAtSN2|g С'x].M>Cfiv&w"_i|uEn6YCSdU>O-OH%YL˟WZ Zy='Q,x>hB'xU;.C6ltֶe?*aETp^Xg`ggiq֏"u^ptEj,< ֑6jѾEc9X6\zN֞](Ȫ0W~!5;"fFt:J78*tQo/$w0tHPF" 5h 6 ,9-~2;>^ٚ?8g Ҭ 3-l!xo71N{?``+-hm* 5YQPzS:%Fy2wӡEXMrx$~u2)Fģ+5f{(-P옺hvaI>8*>:Gz[&*v b%IW34ʴVG*ͷ&NۛydO*]J(U[TB6HkHTA0w%qI䄔N.NV2anoOYSTٝ20@U#re/k?KaƗpM-[ )q\%aAgZÊྗADܰ|N$Vgod \;$=ٸwkTN36(k؄gXzǴsO'oCTL`L2 utFx1};Æk7q,8?˫kn`"z{ƇЙ|MȴnC@տPn@^;IvXI $Wh^MʴyEZtǰZ;|(0{[ÀWbuN\?1N05h 俴r~8NU [lw?65\9߷[r;z^n.m>Gl)(O=}6A' *}m&zpy}-M䜸SsSJ`#@}A"hO P_Ӈb` &kpezgGZ{鞯Hi_7yjUEH}c: XXD@~+vbd ay&PzƮt0ڋw!1;R`ͽOʨ6dTv +z<nf umѵSx_5yѮ4-Ij ,xBԶHB%YKK*tJnmMt8qP JJ$UjԽHՑGoz(+Vu'nNfD_ڜ㍱̥mEDlF4&Z-f%Ɔ"\d-ln/D7Fm\ٹw97p_Su4ڜ [B8mUCh~j/i,睵!iGhV:ot~K#pM V|8gS,?Cڜ(ooMVl'!;9CvvF~"4  \zU;OAq!|nS'Ԝr0]7"z%{q)^4vV]%Wާt.H`#6=~H& ޑĘB>^u兟jQ'H2g1Kk| PXҚ{otj+7bD3we{?#E}w#)j닄{ .}<&N Ma #kֳP }\=N^N򪒾ZS]pv{'9f HR+X-Y#濊 FAb|jQrK*U 3>Cm$gy"\!B+'0žVK{SrYpߝ( @Y L9/eU=)__M`]u7u|i_.{oXZӺͺ#r nd94 ETɶ%d#H؟} (aU\IǸ_/ {DvhXE\(Ro&Ɋ1B#7 mZ)Ǹ_ 1i8Vn<=XW%n4 #$㙲}<Zk kjau o {z,cm 9\f!B_ 5"!}aM$?+J?/XRUX}vQYїv> \}TA{bqdߋȐGhհ]OOl=k,/ks S%Z1M@ÚmۀJ?r5N2{_Ƞ%ˀZV J@ijN]>^z=:+1>bp|0TA\Mwp 6g™]]$l&AGTƥg tR8LlWЎZcY>0Pm]@}#\3QԢ^ma p6ZK1(dR/4 dNe[ICX4R{scwC8+pQC5:=Do e]Bb.1]jG1jun&kYۍ#QKa#=n,Q?| 7Z71J3|W47^3>_rgY|`lMACM{4vHtу{2NVpr8S3NJ܉ǤWs-e=4kT(zxb 1|n'w%p> IF7>HIMQ}{&'I%#gC0re;%("NT=?X&[cjA gZ7K}ʦ`] \Z+1_~tbf&HaVnIR ax,Fol ]i]W|> il`ԀJYSI8^,|8UJuow/)=tGh 2~ ?]VÅp9 tרA-D#!:VD) _>A$^?-GcS:J 2}Ap<x^ziO[g1bnT/QF=ۗ ͡wˉ+B4U~z'T!;A8WEH0Pb6QrvFdЦFCG$6 D">03]?ARrt{O4<@3ZxHrxԬoPA`m?ea`[b}OG{7pzPAq̳+k'举ӥ"gMbh<1 @c=E񙕳8CIVS'͓8}$|t$mU:fa5풦}kt hڹF8Rl8BK:h-$]&y^/U nWU͎[G3Ȩ1qL9 @EV @;N5 )Paܬl0<&o4,Qn)gg$l/mG"558&'Ly03PGxKxH,BڂՅ*2ŘݶKʼn)> f ]n__'LKڡ u2?"iXj->R̂ *UY8 t!Ƒ+S<=3t 8lp_g!f%LX&^+)aQ5J fl @Z;?ͲԜ/^8fKwr^do趬CrrӌV㋨UmHQD“j_}Ig`,@ j"e5 x[M B.Gv/gN>\K {GA}>:Ӊ?" OtKYm.x4_ٳshI3u'iM> qiaUqB&į13ڃ1twFF?$kR{9MFHGZ32L>JhK9}Է`%E ύ`⧰w˺d0OfSω2ߪ1i3;F4fZ)};G{O!QYx9~~rmc5a诱B.V[Lo&|dCl"zYR"(5R!')dfXc3\&gZhR25u̗|=Hjp,%U:n`%f Fw*Q g(ωf)J0|؛uSgXY7ST6^p*Vb`MbP6WeGnlMzƯ:qmY}X*G FMt6.ҙXg lMb! mؘ-\UB?i\0`CTIq;vWW[*M)ۢ;5y_;j(`RsW Tw<3`fIY2#LcN; M>vٮ $c^猀mW`Qޱ&d7:J8&žM.۷%\%ovR-S:"gb>$֐"Kv: d9-Lj*a-kw&FzܼG\m8J2"bA };B`cvcTuf#!Gw-{պz{JPi lP ^ yAD}E>3+px_]腘+S$EQ"߆ /8%=הbH8Zu57L\%|kx' 7W>%])|,?nQ0Bz<(#iq^ &ei: Yk'4_'RIjû/Xqǖ'LMW`%1&U-pk2jFlYFx>=n ߘI 6sO7ş>I9 2}-Cy=p6JvjH?]׳`tL5H]1 kgGz 5ǯlʎ;o3^mb[T?,q̽QBY-Qy_w_Wde{8SWa@tm?=&dC?8\ >\ irJN%ʙ6V-d>.zkzRakԦasS>2bC'0v\W:{n% o>#b5VvE_,}qNGx1D夆D$P eb;9h#)~g,zqjCZߛ0(ܚM?\8xiBhי5Kd|R,D&nFhC3hǪ?N&u˴Fx BAգ)]YS?nkA\k'YZ~.NB?~k| |f˛,>D8: F`12RS&4uede: "gewN>r pc|q[RA,S$lOhGi\8^*%n+{=E3SӴD1cXrJ 74V7]y;&Ȓ[P8aTߚ| kO[_ƸAÙ8 $.,.}(''-BۿI+% ?]颺/bKT׊*laXt"D-};ܸzVnfum?O d,w4[73;?`wh0ĉ g!{S9ޑuӄ[f5iMhNřk|Xp' "~+ĠBE#*n:}P{;S~z[JYb2J^u\lQ7KȹvҘ0aqS~>fp7AqΦ=|W|R5COss"Vʡ8X>z߾$9[ V>Hexof)dQD_rF*ue x??:%-rVtQqT#!R~뼩n_vdYycd:{]mzZ=ކN R?IAS{k] rAǓr0zns]on&z./TX+-VۉQ1PF!ːb Br ŋdTo֟cu4\[N]K4;c˶r(~UE0鲂2ee3h Pg`qc>f-|7ך`nlPđVrbMY*kNHT1F1g‡݋ gg",j^kS$!K~p*`k) *%Ig덄R[8l#7/3I\ЭK:AsRٷ$ΊV #!LL$~ѿQ,;᜚  F;^G@p:\AJGD5\?1Xp.[3ϸa\)Lĉ!g>ՆB_Mζ(p 47G M8)])ذKٷxjPVϰQ;jz@ ]*H\P u[j~2f3ךr9Q/8Q RXNY_f!e~YG! GgXY__^m^ww<ڗlZZS)D_jm7P+˜Oqa9h}㕬F lz"$KV)mcH450T,A@*\GOׅI[=_F$;\758/^,3奍HPQ Kn{G;! `(M+/~@C#-)zj̡ZƑ6~;EN'KL*th4vA=/dh*o2'J˒]tƷяGo^ȏ+Mj95s5I N2ָkVMp=@>␉rKWVNu>{"'B-RSQ =k!mr<{T~ 8.,hkt1RHc[qׇ,ltV3 7Q B12RΆO}{|hvUj'hiդܱyΟ1XpƄ>]P9mi_ y^DRYΠh.Zc⹇gؽZd_0[ݾ'7ڴ+t^iwS0{zRL@Q,E˰{ n FfnPUT1jSI][ B6T/"[,ZBP|=;ݮ4^پ[Q2ՆOb5e6oDpzɽS ʛ畩8n#ؚy’UtwWPJsLS,(jȄ7@vF (%)"`hH3"+_կd`dX&h)m_ֲ:T\!etg f5a<ۃ<0hZ8@: Bh|X j_0R)X6[ kgMYskioskK$_lQ MG ˄ۇEhy%j JZ ٹZ{­(%g-y*H#r[B% wS_˄NOlҤmyR)/9IC O z)iO,gßCCmZ>, k`wLifY5gp,yC1ƾ[T8;g q(?@#.HoH}ip$9ɦwo7L_NP>}]\^RE|MU{"a o#;eu[[XS.'|c f枞 KA@BP|CQx΢<Bz{r?,G7-NKdefk;6)b:ߛJiU@B)sK/qg3_3~V/<;P$6-ſ*5c֩v#ĺ,XM&[=?%$kuZHyslooҝ1M02֝kBbFHj6$Vb]`3X#Ӄ9FY޵"#נTߑ U!|ݳ.H)zP)B _e*+/\ %J riYQwt4YKY0Cxzac;#PڄLjݾh@c5 ̖7\m6n6y#!,#c7b1)|7D$xf.7;+=5b37>$]lCݙ?'c3{23o_NγGJF|BD]|A_hQrxZUkwc9!l֧DhL*#]Sr+Sn)|ՍzburW&b@ gZL׷HCDŋ($<J8yaI EεPhA-3H,P]u͸Q1m61|4*#O |#t桖mS#1%n I0T*g'&'>k~/|hL/'t;M2wvdoZfp[z8{EPL0$r {ONyc%~$`w|w[ozeS)j"&4WdZ R7.4:1#aH0ohBXP/Dqsag}< 3 GLPwGXëc)ĥTk2)2PJK.= w2,BVw>z2'_Hmy4VyAv?6CV`Jwj{.;{%]DoH)}{%5v QNvPO6L⡕\w!.2`WHo{|B Ծk [%w֟g@l|fD~%e`0HX[|R0Z6 \ \1O_;y>!JK:{ χ=Ox)ۊCbwKc# VuFz`Z¥CkTGF)ekb5IMKQ0l?mOZ;I1,˽K~ x8G0ɹPyw<\vFX,8W 8gێo9l",~^O͈Q: X!:/1oV(Qp F:x! p ]/xЖ8 THu14 @+Zt>L@ka+] r=@ۑ hlw2"2.R>A -O 4b#5޵-HѨm%q(R 2 ?ԒL rI,CPBR:`˅oƃTo.h4  ].WK]ЮUwbHܗ20y ++wo#b~tsГ Q 0 %VtB96AvQ8j()M `h2})=&ҳsyh)1o3XU(Y;3n3lm| V3qkf]]<|\Tz:zS!Z ScR6 ˂HىI2.s&%=yqc`/Y0&akǽwTNpP_\ FM䬯Xrњ/Y P)aܝ ٖ @L$.7{`WC1;PtkK0L2Q&o , _β7;0$5xReiIO c4VB+^yvNRu-\[ƒ[טzt_ [^Uܹ{lVеDoZ1xfҾea9b*kU߄>(?/"<݌URѲUeOmȋ]v+^=3,L%Ƀn؁0v -=X—ˌNI/[' BL+ޜ& R:] Cg->rT7|[,fpB~Tz"GrNSE8Ehr߭U";I;^%t#az sĩ]|aw)hĒdEūljnd!@>c/?b[;Ǒy<)}zTxw'ԺWSKB()#پGZ|'sR _);l V;SaAH^qdžByOCӀv[, ϻֻj3$L?յ%apLXq43y"=ζ"s=GO6.$; *Ub L#$F195E0= T7ALquPD[{\A> T)#h$M ݼ9 opO@'y ^5d[@$84bvy=HaKm k_a7t'LzD! `W߃&l\;Q4$!&)A-GÆKS$N'Et@IJoԑ]P\Z gz|`v|X2-},C6;(M6_͔{z"A",,r.i$.?YWo0K7GtG,@k8 >6Q-rh*KKWޤBq4'ϑݿg+=W"K/.pָ::b#=>Y?Ki4|`,s`n ܔ19}Afn 5w( -X hKӊ>^JF6-ᆳAF Wj1ݯn]˼˵TOϧdkLa_ 4|fWGw$;`.92b2SN\k>[Ipn7܂ļ L}3v"ɩ}.~ju} 2/B9oMWK>޿mjH><&Ӏd0A8E 8sc3ɧ}iͩI,wj@sa_ߜdO+72' B7`* r +pt&*Knl {7?8xu`X(ܼmAo9[(sLC=Zv5 , %d@}W=QV;S!( ¯Wh#)HPbY]$k\dH3)[EUIK!C^0FEdcg yqul(i*,F57=VԺ )G&DFP&YSZ2jo*9JZ~!غ ⱪ.igS`-DNFxAEݻܼֈi@ZG91{ik).*M .8~`u%mce,-.V p,v qJj>'OJVÞ=_ӄ$UV_&˃_525IšՑ/ K2[Dt+wf] .Wnm}w /jEϠy wP/3=r6m&QmFW p NŋQ@ P>PZX=DhtQU(vxfg|m2l)$MG[CJg+Ǖ䛬^nqn%[[n?UzɃ)#"m7G脫uݹP0Zj~n&AXv>ʋ8f^-Yyv()%q#J>4[Rp"=L33:ޙܹ,IBj2Ѻz1~(\~ҢmSnE_m!&vcXo,$A(ne8RF]:v|UHf8sdLx︓[!;UagT/3v~rXQʰǪRe6ƚԲu}܃@'6>H+Sʱomݹ!;Vr\!B^@lg:%Î}2W(3Ђʜbi&|ZBSZG,RT 3#[ .g Z6@"gu`aT,ǢǚlJ6H0%cuJs$c6,#|940TvBgI7qȽkUg0S,)vh~Z PL::m0ϒ[퉵4~0X 58Mp <+pl Y?tl+,"5RzmXfņ-į9U74AKLSsR]N^$;B8CŠjηRE)I5@76euAOƄ^\#%KSFX"gD'WhFiU]^2QL$M4HT <9`/diOʹ kB"۷_81)K}wY{%( P=l!'xe7Jo^X[TnigbyÆhc*F|hAwW0vH/7e,Z ̹ f+F=3¿0l |CĮE!>H HYL QmB$" yR;ŒL#dH.fcĖE$oygVW>1X4إ wpGX͹3fs\r T}J}gh)] ٗ.'?; NE]J Zџ-(,tjE1TW¥jT"^[$ass@ܢHHtS}jCW >]L3: DMMї"=?@uu=8 fgGr~8fJp0}^UV 'UdoT\V{jSŠ\Wʲ /4l9un}o[iX#p0r=MȞ|Q@]|h"NL\A:H[ CDU\)UG-Ӹ';S?HU  3緗nK[՘ݿo y ޢ inMH @ޙ\6Hgm01){8n$\LGEx1??NzEV|5R÷d>YԚVK)xkɉ˝@#_)#oϛ$I2Ervɚ˜i{t訕tfUtnb# I4Qijͻ$]2~d'Փ@ʺ\x()Fx W6FBVD~wN3"S-t<:V 4W~OG.{'kgH_mTdL67]_/ބ®:qs p Y H%Ar8cїm X|PEΌm}.pǗA#pN>5jADt.i@: rJc~ v)5 7Fe6PDMHیM8J WCp#[Ƽ-[<&XmO^5ns:YD t7eYj)-eּ`4qҪPp`(v͘x;! ;_~N!<_W0ځ.‰!lP58yiY%, )U*Q8t~af( A|4[Ex"$`+1o[{NM-'NlIl(ob9 _ىnhE1ƯAfC-Ҏm-px  C]0E㬡A av=ԚX+$pK%I2*fqa9{b{bUms _iRG,?aلׂGa8e3(?2?EEa[uAVz9^s3\R KaeHso!MXڍsF&5n0"B+ܞPIe \W!tJ {%yj {'gc͠y?5i@9%nA9ATd@$p8܁E<)!z( }루*AIEd?W6 4*ϘN:(mOlxOܬG:CyVO *,_CP%)5N f'0Yy>*JA=BBGoߙЧw";h3AZ%[1眀`#$Z'p甮meFzE\yP~kNn|S.ht_R6t~qet ۙa5mF4b1`]t8)t0QeѲ-#|(dƵo0or!%-F~nBzA7W%ee7#H1jS]EAT_? @M]R]4=9cg;Rfu2JP!JFqD"͢ wR%l)=m# d5.8  3ƓA=̎#iFwG0jXZm%#_omj/vPEZiWOID?0?)>Dq5B' ?Gx&:)PD辮Ǧbi)VZF6b]SM\ 9ЙpQS%@ŠeF`m4æR$Q'B*?^%B6֡M?e1Xm%%"Ƣg՞TYrͦZx'sF*ǣ0` )2</،*;Fܰ@bI!A-WחkǗ= ,/ \O0WJ`&aJL6M}_ ǐDkCmp%yD~[ّ.c}l.865P1Q ߡ0s%7,+3[ D +~h8l*rz&NЗnwΥZҬ5 o8Z7y 4zp{6dZ^y3 ϕ ΞDI9UC%xJ0P>EV4Ii']maa*A8[U/ES"3D8E*G AىOy2΅ab͕=ޣ"qJ Ӑ{0TF?禅'̥ A(*;dg^`MVv@Ĥv ba(ߡKߐ!tDފļ?Dbv"#wu\mmwap͊A"K7Bw2|Gqݝ ,S]V")g;^.%dVapz;Jg]Lx'r9^N?o>͓&& ?"tĀt7RkwIl9}>G/WA[i_1 R\ܓ q-ɣ. -ؾr/+بѷ9 9eei+OADEƺ[IK/?P{@2a06:8ڔ7RD ~Dk {в1̮_]M v HqXf?Jźi†fE4gI>f!ˇ_-:>nuNI̖Hsh!gDr!(|l[ w KF\siH hỉyi.y3[ Ae:7B-7DG9P"b{wilk,ڪ\sڶ -:sտ&;wn<-{ZPyc2;BvQ[_&ttf:O>줺CDnu>W,'h ?e4n%51ѥ۩9FQ6mI{oux&Yo+Nl2ri .H4o^^zHPw/%͙!W'W ۧ B mg!:5y{_.hΜº6 軩q:╨Gjup?>= Օ .LܳKIOU5ܯaX'd]UU^<&ѵO]L".ˬ?Iw^ZT68EAw꜑c˄*n kl2:m@Cowifz\ͪ#pkɏ᫾)^(C6knNsJ&(\RW;gtԋwv5^"v 3+=Ԥ )Dh}]a:7 }!TGs3t_(8-cG8W"Fǫx]4vޕ tioZHV4=b3 )3]mlYGur[Yӎ q9ӧ?uJ4CxUglP#|:4 ۵8ԥvs 7CrdF~mB`2t85U7=6ɿ1>jS~wwiOh6{h"%~f.wXO)@֝H=$4e^q?[=aB;iYA\eY=)3uX'o)34\([Km .{!d ڈ+ x)l w-!m`W<1uMkN%:L,[Z0ԡ`nzKcw4$#[{GiH7˧*Wև.0=|Ǣ8~Ո¸cv+䨪>HWxK4P]H #/"ؗ W`eE, /<+69O1?W3';;l1wk̠ܗr@%h䋗YE2A'x"sڙ2-lpu .?˫@Z`bPS-!),e-i3m!; 4U0T~wi!eIp6Ł=Bֆ DP2`=$φfRpWPXWi(S>* 4C=?Ү'2N2n!dAZʒj'1gM%o?MD7,Fe>}7Ԟhl:Ve(n~ER=`̫xH1|=TY Z3r}n$[DU[Lje78@`IHSv:)4"&\gg[HAܮ e kp監(p#Q \d${\\(o%d!l}tIB^}*A34I31",nۅwF}HM>lcZ djwNjͽK5 [*_DzU, 1;yIQŴ@/Z:8:~3ҚX{cqG*>KS/8..qઞs~kC <;ӖGWT迩)b6[cN\2BH2/eqЈ{\@I;qs:[O0͕GR 9Kd7.x :#,F_߬Q~]708/5q E]GWʉ̳WހVlC%(}'x:6r_,|6$m^~Ȣ@d.C/-.ǒx'#ㆧQᚗz $LŖn%BWUrlO_IGPV,dh^@Q< Tcc(-e-P&4Ze.))QT2A0bmXjbw? J#2OCړꯚ#SǢ MQ/kv( ֍SZۢ1EIs.=9Ϩj*d.gރviL}-ZkS@9GWDpd^YO)lg+6*ꇢG  ~7x0kq[o6Oleπcht\Uj8iؽ+u]Ԫ[hS\Wg#>rWR#Krr2D"c=5eZ;HT ~5IQ .Zȶ~z[ qAIP',-FPNO%P~˙BsP67^O`B4鮄zժIsD4zANDBH7V Rz PV[ǓߞAdcՏa“ c@D"i/j߱.;)#{ܑN깅 _ESqx;3iӚ@{aH%aOq9 ooNE%K#V?pR_9DY61_">vX: iih,fOEa&X8"0=YXi%gv>{}[X1PBLQ=@8Z_g%=wvQ~d&u̕deWpܱf5߭l9ɵoʉ(5m0#[^ üy;@ZmU_㯵a;8[v.0ЎGæq#O~>n b-´=VA Z5E1jަB2 F;I@!P;t\ִONKONrRMS5 @Nl TqĚ&)5J#D$DZ<.uעicPj ^SY>yae &X`eu@`i1f|i{Br}w;sl͂ Cݸo6ުdlJa%e9Źj-0K*0krIp|5NJI=h 'F=wAy8TxMV,|/U[~NU຺0pIPKgf\:$K}KV<,*/pUCn4ۣQ/?$`P|k#Fo#kh^|j9%|B9-ta,C8ˀyyo1[ȕM71T0V[GIO!qxUs@?C2p" 5J\9 Vh8~i`>ƭL!@"IIzK27œz{[Ӆh,)):fG -~RؓH?Sp=X[^g7- nA5?PB.Oы%`#s+~u'pu1qlzEdK}oRkuNH7s7sk4{a-I+ej @.K'5$],K:mB1Ho(;JpS2F~ bZ\>ooDk7 Y~Ouj+*řo*ܖ=򚶿Sb3u̥pqQӫ'I (-άX_`YG1z#qP޻oY!aEgyAV 7p JfAc^-=C?_E@yHǪڦM1sHa/WqB 4>.}cH ,%ᛄA3"Q1VjX<b`*7ۗݱZ"{9+E;]#! Kb0;}D .v& Zhϒb6\??vJ.Cda,7 ]M"z'"49b]G _utrlBP/nS \/}%AG[>=R;H@'6= ȕVF?^ HՇ8tҹ8;K"x 7B KP9RQ7 b1Ȯ>k/&@()6妻VyF-#'g+}~˯z6Z۷h 297" juɉ_ &e#xLԺ+>EXgy!{Gb13qgf + <3Ϫn n%Sk \鷭A܏שx-}%2"I6PMz]:JHv/2_{s'Ŭx[z@WLjGO.,(mX(IvDrvK*,ң32៪4(]r6`e\P)bambz5LXҐ2)^S<-ggnž͚菫4uoyj Fa!ˡ>qϺ u֊i;EqҖbCf@V =Vgs:IqO{iXcq1gٺJƊ=5x?0#9J#! І|1 O!۹$_ 8϶A9f OAQ]֑܎!{GRN!~يIb IO ȧf?͗Oަ5oci!+ŗ5pх|Ҩ3HYvzpQH9&d!v/h:8vSvlx->bWifӯhzro 3x[&:/ߣ~<)EjUjJ$onߪeL.m)`w.:\/cPSS7[5etk:BW:u?xSCup.34c1ftbCjv7==d"z>xw9yD{Kh3:n.OTeF+blJ_O-v F=eS[ir3"v>'&em(HZ)̪HWG  ESk+۠+V@8fy0/d]xQưQž1,̢EɴZxǥsL;ْK -SA * 5FNjZ*Me3hrH]LMCdz~\m[TĚsrca)]'+0h [/.hu;m9N"Nv 9) B.'ir ;| -oN^]Yň݈Ge5{ C+Fџ,PJ$1Γ܋.ɇ_0)|[#I(k}ajRC">=jy'I'=B;I>%xBfdKL1`A:7$3mJ-!<$KZG OL6:ZYW<%zr|[PwK- 4`L!9 SW-|QEtM|XP^u&`6bߔ:jmZxITx`0띌OA cn!nϣ&I"` >O%M2޴W6jVi7yx܈*X4N-V^ըVIւh P-x4zեȤm(+fEʦW 3OÜ+FwfW4URhs \rjUr$\<- Wa%y/Q%9{!_{"]NʥSgf}}֌ dM JS7 ~F#鐌@yQ!յ>*9j ەd5ב4 > Ľ5#,^ `E^5A e49gc{YfOzv+zaOӝ]<7pv*)tyKNFZ}x䛠+kx0SCz;wz@kx ~8=k?I#O9ΫO-ۂUt/)k{c=fkP;$ Ⲕ_So׷8r3 Ogٹ3:rVK$k6_^&M ؛n՗uiPu"?jT>ַXAtLx`Amh` g#ULAOaVɂ\je ȅi#O&DӃУ$y(ځ3fBPwopS7% 9iwǀGkXsk(|&[Nuc~D HP2]Ube[e&J ʧ!~<[anff:H%9;n@,=g9%bi?;ēlYܚ s '+|^E|o+3NU+ȉ7yKǺ'\/Y7it%,eЁFѶd#(iنhT!5Պr7C"X?Ɂ N֔j=\"Le%W+ BvuJɛ;k "gv fb-_@ʂtD9YeuxVûrVq%ډOen.K,)aWSQ-X}YA7qڅ32 5'KȔ x9}ӒY"P;v \duVYܑAX Q' @ݖ/Q|1xnL1*XWvO8k5vx|5Cg.%p sI?n8ӿJwjUQgA_n+SH61w  &zogs\VOvbQ~!6 `e8d$6RN3VhSfOO0[˽38X׭*^pVL@yW8Nt>p ;=Ӳ%Pςw_6P!Sg BΨ[glAڝ }m{j Rr .M WcIfy#f<2Iz1CtAp1++2Rx Vp8NҼGI:D@'x\𭃻i4j[r?t؏>ǟpOMwc\-|t} ӏ tQgk E,HڼY!uf g=Đ %u&j8'iڊ.7IaSw;ٕxQ Ќk'`q_EdRpKL1(=`l"YϨvPƶثpw~#)N ^+O5\98Z)@o֊HFd"QX)S ΤtqtiN-] ϼqAȪ! (AqfIM@Pk7[l*T^9 Wvtw3UR>z EϜCc 8lr߰@O-B!"Sh~iiMÐ=S%h\gNi>X4h_}wRC}%roh,ld COW'>'8{^#+~FC:X礣yjZ漏#M CI([q!RmH g6m~bN+\Sl^n " ^*@4b~'VH~8ZeҼ{?VݛY >D)K Dnh~ˎ:d^)NM`y"vFaKː8-đ<_hƩw룴ܩ|^*&R6hO|Uf/x;H\s&杜*ۻB`:Ϋхf환Х;&TQhƞUe80͉ҁط*cp?e [u9zBߥ-R؆,bAp(FRqMx)Pp~R?gcN$ȆX [rCKIX䰬3+W<{,|Վlj;.r/*uGf,Q<$©%_bՊ%PXG:ّ7ޓLº 8~7( #aL+;VGV W8XQܤY@"1xg<tkHcY$$w ˨m>:]?ԛMSf%%1?Hmz4Y. .RsI !Ln|9UWmUhaDEN օGw[b$֢Ҕ8LGR=7ul*T%N!&;,RFV{~=U{se Tj8Z {~+-bYPbVL|]Z}h~E f}&jeK݈&X!œA]+۴o"µ=RhyWcu$ao~BdVUf~!\$pArvO:T~i٪"-y~tL'wT5WтJj` ӭ( bF62Exb&[^vxZţqbS?&e> ]6+9'AbZڅ z\L{ ?@P`}lSaKyJB2$ "mNhv q8[|m6I2Kصzu- b,7=R:/#3߻qOMzQV:c~/ovjI <n%'@ J,ٖdd_.rՅ'Z=T&ځ-}f*nI} h|wÿoeq C;RGw ,bwjO wu.<]N͈nAx0üŔ aX Fg˾&Oo SWLexeCސj r\E:,B".Kf{3~ +@Nerש$ҴtS@uog\|@,uVΉȮ} dI_)X'ˣuޝԅȦ&o,KǢC 4n>֡5ɹ얶?"pi:t0Y}5Jb>]<.%?BL uDLuCj`sq8@ːНʍy{q8 F ?KN;ƅ:V;yEd֬(Yƾ7!-W*2h.o$Mzk6%H)0urH;>nww$t6?/8KsHrE`uG&m$N[(o,Mȓ00!ho4mD4'X@ 2hp-KQ6 h3G]Xtږ6ſEXB]Ci-4d5 5 zb0nAQz֣?p*EU 8NW_T2иt {xR r}FjㄢАzIiZ!;gnd447*VG׺]OӘzY.߁2k붗c,],zkvU›QN']pS. 1S\R UEkdZP_4e\Ї\;&i{X-j+J}8{{`3uhjsÿN骃 9|t5s>ߌyKpR>ty5$LPQ-ᮃP cI~k;tc6-MLσ̷>c䫁{G^9h8ܘTgn,{~/9 RK}`mS܉2ߓ"R^ԎJշ 28&+qȑ<\K7(楞PM] L-ՌhNŋx~|9>0]+}+f>rv}ĚY KV!k2+>@2,e;of$ML<7z6xd{o'S`hx#e扒ςB @ZzےsZ&o0TOC_dzGniq5~O7t9k9m)'4@`yNcbJaTfUu7 ΧTy])Gɿc J`NFќ}?n\,3k;*j( b"ؑ]SCh( Uj: dy,c{ܢe*-ug-Sбh̿pJ._N!>l!,[JxxUzDQLoL^&N]eBnS qNB;^jLA vyH;)<~˘K[q/WxCJѿ%t?xR컬>S+h[ve27ךAyr2pִ 1ַxTe;>DgYAWo w EҨCDz.4vbf1KKuiqq`5Hw؝UEFP l\߇Zvo@~ϗY'COE`9M.t}-33s}W"em+} lEl'ƴaqWZ ,v,ُGBDuxW,y \Y) {hom"ŵ&xa̖#7t[-v"ۢ5,e 1ϖ4mLCBrtj*e/%6-X)OV?T< Skg_rwxxg}Ǻ48:ǢB}VM.Q4Ҭ^pϱuV δ{lˌ=K1k6g{bu+ -qǪ4QBX.>U^3DNL555Rٝyt>C_cM\R+TS??7L-$|'S`X<3쏴,պ,!ΨG/9 _wV}'ɒSZp px0ˏW~ SL iٙrvF{]ٻnÓn _`Ew *Z4 䧪cF ְX^D*kM$Hxd:._Ŷ\,dKʅ˛H2h${>L'tcɭYKeBw~GOUq3V5*ͭ[׌&</.`k4Kq̜Ù-MI @prGO*S"Wq'6yfQ wY+ܞZ}op Cj"$w3F3UJ?.h blUB$ւR  |J4Qs6޾fV4r3#'= ,QQo e!}Cx_{rp9#|68^*G~gb&^~"9!.ݲ}vJG苕la%xͻDH/`fb(\%&+M7گ乤UR%k&b vNYOcKӻIiQ'r2և2mEwL%Cr=9R;e%Z6Z;0eB.ip0X-s=wn8چ6Y{JA".Kgpo0y'2LXJ|X&`$)o7<(jU:Oۖw:09h]߮?.#1 {kZ&RG茉sq4Eؿ֎[<^’}sm{j‹q7g*EԦ5GƋOf$]WPi},Iu ֶƜ<,k?^Y5[t/aWM T8Kp]~ìAX/8 #_/C.y& 9C +!>mH,7Xb񷒛z0XHi=l%&%\t5/{jD$ WLwRz=SČ N فfq%UXD 㝖Z^k  a43C\#/,vDps:bZWWH|^@D\(u!rucc Ɯ%Biy#W@˒|Z'tRD1R[@6i"@i437בb @a6nZJ{HG`n=(٠NҚf Vs\ZGHVGYJ-P9&(VQ6}N/=oTS&,t0a0n#xI˦D e'tOYSچs FW:.f TYS_xm3n'[Mn`KˉljϿ(bRǼ(0+Fr3pDmy.[cOllgO@U‹Pj0kZ!XbkӴMv<.J P,G 6>`p#>ci߿RI4k8Y+ S3<&JzH-^D)*3[E۪^lT5SV W11@m|pr!) 8jmǑiN7X;@!uvՍtc=> AoD3ީ<{]k0>D gH@#x*H);|B"fy{IwP 04Ix ֍D`|3Ss )˄ =ڳbgJG7'F3V2w:"3FPrpèԄ*6 w|BWpv' (@,odSF(g"P1 ''oeM\l_}i!c&^J/CR*@n#ʑ~u6|X"Fm*0ֲ3M/{M;Xu 8 >g0iEv`!JLj O0M:R8B:a95e}*h9Ǩ8\`F~j;&IVnE)˟{*BveS4běJh`2"!>w!W՛:LХ iz7QSԇ}Rb/:U Z*z*)[M6;&*,ǎhN֣֜5h$9X" 4}X%WGb .fŞaLfxJI5&6:v H?^sSק!xjm` ^{:"FuM<9Sdk?ijbF)i?\2 M6%I=a:(NV%PGtßrog#JH~_\na,Ml>\',Hi(ȞPrbO> س ŁKZCZe[fT Tp2B2Ud;*sA{6>qg `lQpO3Dc樂^`[?&)WU*ed׳ń}pF]smi4_o[5$B[ ԐexO*#W: BV%/\kܔ=wu)'@h_9QY(.LTCgq4RT#k>[]yq5&CtS*Qfx?x!9#폎2z{F~,I2\Fy@I)ʊ'@A7`Ai08/FK~TBƟ,d j,P8I[0O=YɼS= %ouIUPotRڙggz&"a+SEgrbpa[0o-}#F(x5mJ8$iM&{7`5hiʶܩxAk|%w(b%3Y$sĭP > \q?Bt, XFc+3eü׿kZ3H=E=(1Կ.>;tYy`PٞMk ^|R܆ҩ2iό3!!qZUoKrN]ebtodVqM<~!"c~A7H!pyx:B܈wc4g1_))&o8\ێP 4j|HQ%s3Hc qXrWY_st‚fr2V<wGZfrwm,ȶP:칩V1|A*~\ܥxe,|"zWe.Jm%N2C w辎a,5_UGgpN9a\M2d}I)N#rElk@.3= $Dar99Yꘇg 2Zl*T-ֲ(4G헹%%ˋ;ja^Cʹ׎#' .L adND+%5v{OF{[֒Ln}-Ր/)@>˩hw rdljop8SwKAIZv81ZYw,/X +C-1q4]G@+ܺ3զLs8)PI6I f!4ʪ{j]pFEtһ:o2?+?Os' #h z %~La@I&$js(\ d$=R~bq)s|tM)'at6Lo[eg+)+`bj*DL3=dLĠ J8ˌ[Ą$*XTU$ZZ"QS/"9Z0P1De-pWN`w H?o͒fbQMSl"I\zhT{.~X%#ɝ񒠮P %CbY.tAƞx`P=aEzo8"iWg1o?֪:TY΢+P{']G0r@Nu0) 1Y?6č}ab$e5rvwuso_!~+ ץ3Wl)dŸxjN{ɛv.RJtTj48Uadd2T8}ޫClRC ~8_(d-I.Xv=7 <8'$^y8¸m @"Jq%;6 8i$_1d_\υdh"RXMqFY0"Qz'5 -1yCn2:V@x4GB괾, Yor*ĩ֋AIp7'aEkβNEJ]Kl)  [ȴP?Oq]_kb]8:z3>'oBzY/>DSEӛԖױ]Ӝ<@G)a"JC/9=S-K|c:7$' t`R0O>f0>PL?&ZV [䨪Eڭ-rY]8!ľ,y0zjNcw)_z=BlSP at-^XֱЋ`*؋7c9y1r w)~//䥱壛. 9>Y@lqM$ 5;)5& c z4rM᪩"4\3%υl2@p+ť{/8H[Nc*@Y`Hd TL齛2q!i4c\GE n! OWp^kCͫY`=?oͷ-Rk @4` UK1i/}}XP{4!Wrdz@d dM SIoQVp[)YtњslWp)7tWc0 ΥHzlz7 >+xlgC{nJ g8# Տjy:$TjT>fɸw]U 5BY) 6 r(_7>c321/"[{V獠(.&vC./uˁ, 6 Z[Ң4V156K dR=:}g @~YOjZy ב'bp1nDKg[H PgfWag^{CJ:kVe+\)p $iΗix&w1tyYD ugBއ)-.3O ~ʑ6E]f49\9w:t|$Ehf9+dΤT3"bFbXi¤Ju':  J Ữ2go$wTS</V[e"0e(>|+gU#,NpCo^IW1AgQ_"H{!+xPX5޷f)JHQ} caJg7΄Hkega [1N8d0:sf k"(dMoa>ЬJHd=DEN]`UzX*}3AF« ŎiKEzc7ԙV3kNQ/F%VXhH*zE'ɯOldؑq&*~@H eIِ1tbvIκ5{UgN㓙>4V c7=2" ,r f>`Mb cϋNLI ,< PPyq;kY֕`ȵ͑db0¯?#K݉\7Fd5s博W.@'ZpqKC01#j!u rS-?OYdcD?QD#}aGdTTĦKxm!$_LG^t|f/4F3ANՙL.aXò-Qj$!{p6Ȟg&@>?^ºr/xךXrJ89 4+Z9SBmU ѫf}u՚֮i4KE Vox5 J[Ʊ{lSFq.E`Ѣژ$N"* b-u@ Yh85Y|XU m*B]_Vxw^cݔm^X w/s̕ kvCǰ}cFU""CvNxߒ*R2[a+k{ɮم5W呖-&H#AFK>w5[U';v;~O}vmƢΓUs27e2/9K]c;7}=b';(8seJ("$zF(]0/iw{%y|''@Bi:fpb]T!`P#.x+-,nsEZ#u2ֶ—N|~QhJCgLߴ^1>M&$ތnMc1:h2Xrާ0 "nOqXN?3>\ӑ GWҾK_uj:ztol~ѝĺ,ٚ;SE*Y7[8$`Q JDu4@Tef'() cplC@sR}p,2= +!8G`6* \O@.9Ra/cavhJ}p_H KyEf\.4zIȹ'}n\-@6gG% %Q$j>axm7Be3V%yM|T@6_f 5uKFNm{H`WCsL+]ESלVU vnb/?OLkDRF\cSjAk%W '^Mh.Lm/3)j{i# 7%bL^A>+\E# X$ 5&'O׻rɠ *eFpr &zh9JlP*3J5;/~7I+c'CTΊ`Yp&K7\84ߕS8ۉc(b4"SYjZ Hx=V4M$PNZZ@jPS(Io\d/ה0NVP?_PMGH͌LT;5 Uc^@f<er71ڿS) }A7y6ݢ]&Z^x2a< rV,O!ĸPz,T]P>D䶸jy[wj]kFݧ{eQؿb+#}f>gJ:):Y^)H= 1-ɠyx~":\/4t+@ճFpɬyͻ,g\ߺHgQ;bELHŧا_! +yJuSX?,pġXJ|2u)fwsTN'(."r {`#ܮ8~r&C)e)v+N$".tT q8z XV3hn;wZ2XhzL\mNK7 ȪAs;?{+KfX >SYͩj34׵L*,iɩP'eϙ[#huXBS3"J@K#È-? w{U^d{cݿ^G>K9nmP ]jOh /R7m690-KExW& Fin4>W*U|/AH{~=٤' qv"h+Mt*򘰕oO/ihTuݔtQ7CQDTнu=iMJla<ҡ-dc 1,5x`8}7-<@,"Z*sFwEÂD"1z/ypo w1>k9w@a#pڒ6Wp׸֡^YQ)?Ƀ%݆gM'+ \#ZRcr]1[ a#fI@ Kַ}J]2NĞC?.hKydQzJ85·phH^ 8Q2e=Q/? 8Ԝ`k* 6D˻L\uIo$Qph8LDȍ_л IE*]q\勒WY5&NmADra~HMb 9YF Mڛ12(2WuE.-_ƆD^/iz8O3,J#uÊg~c}1mw-z"Ŭ7OPQ9E',yDV?`d쫓 jRJP}7fnRr$ƛ#q%I|GaِE9ʤ1VkZ~\y5!g5UA£!X"Ksg#O>iAIĖIlw/ϥ^0$Ux$ʷ[e ̰1*]dhਜ਼x=12#1 `HJ㼘Ï̐ڊ0+︪/$C~{o.L- y ׅșr_qEnI l4HS͜xϤ\s Jŋ vy5WJXGk1Ӌn.-,Du_ȘO{N_( x"=w<+寕\tr;XEG{HV]pyNt[Œ^nr=3sXdaN kb#=P6WvЬEkڎ5\Ya)Wk`MA FO_n"ӏY|ju ɛNyxp+}bj=a{ U ؓ8=mҫplTIT,ERx)Y?4W<(meς7Ĺ!\l{;.Vl|X -2<ݑhE!EkرgbP3me5MJ*N DzL,] e̢pxP7PM|RkJ.Ù uu|J#LCjwM4jPu5f앶BV1P+^î({y`̉qBVKq95#0f&U,?`lWo}ZR@_hH4 2ѕw|Ezs!\elvgDS#` Ս0O%N/8h¶.l;w{I!wڀ퐎c${5;?'^=R$]:DA¾ة{#= KD10i+T{8 ٦xY}C,#! GZ왳( $<]fz4YB$C}ia0-<<ԨڕP2k*%%(HoJG|V(OK$ID 6Iw9^Tt1p6}:5]}t;CN\>*Sկ 4ʎY8I=,۵m Z ⶗l e|nfޔ%#F&ڞ6;!ha< j,ΘyzL<71j[1mD 29Kt3ٵ'ZvJl}7M%GZq('(t WY4i 8Q?-s~h"SH|BC gZ@=)+r e8$Mۤrs>>N`W)=9K㑐n'a ˊ'ٽwyH)6BD6ݘh[ pQl[Wb-W_ƏE ,_l᪢Hak> $Z elu^W(uN9NxĬ}[OkՎ8]g٧WNTy$0H+.຃.{YŔ^CEF2\҇Q7 6[UgaDMʄMMCַ4%cCIHzr r  [+kN/ŧP<̲"݁Ԍj"xNQ M`)r'f?m]}iQKv+ d^ 첯MRwU|<+ a'.4}Gg}gɔ? ^XJ4a!wb Y 跴5DMbl(n r4_Fp\ p zpUY_+b$vq׮]>G|&XQ'5%xlj8$\rDBb|wК1Xo ͦ1|ԋr֬'eZ3ssZuޥAy㯮ǵZտPO0oGsh3ܘ`ְF:m<u^H1d8Sj]!~Z]ϻ]grO$YLp H*ۑFO=ɺ^z~!ߤ闌"0u6[^E8|]@z6͸^i,O}T)#ZiUS!%ɀ+oqаiُ;&%$J~a! ď!`"%/*(h` mcj 8İn,J)3<-QyH#MQnͽK*gsڰtcDHU'3VSPš.kKVZ|<MNZ,3ziz2*>ѻ;FxS(qȑV*+2=R!Z'A: Ԡ*X)#ܠ7cы+pS iyYs-ԾWrQT+'q [ JQ?dYR I ȥcT}g/IdOã %S^܊π.ʃ{=ѦcF_#bƼ2REoOf|H@ '?m`')0 ;`zwkĚV|D>iq@z13s_vVo`CtD^դG<SqGx`19AGu/p8tnu+t !vuyfRgZx1cS$m3g -_\5tmkcpDfI.{y_`dvѐe1#3oBK9Zi+&2Pwn]ϗQoe #u*WVQ"OJO.o\t1%VP{4脪K>w6L0xdx2QrdQPZ0[B@dO|gߤ* =Kwn狏9hؑ}1,i ÿsJݓ7 IyFy\ P z{D1s *#1Tqe>sf<;gf61xeZjVffx )gh_KoNUp|"^筬+7mزI<2bCcZHmYn]1D؜r{}m Wf)66NHYAlʻ-7n(M4퇚\W0bk񩆁HIjQGF2dE __FrS旆;Cз<u ּN"XH'^u99zl@w(|p'a8~ JrWR;5?B4b5M[ ^~y͔"*^Dc?zXkVӯ̀?K* [!5(JSS}v]'5Wv>AhI=wKV8;iWz.ԑ :jIQw;EFO݊(#*_İZ*La\-[@WD>CF9hO\=ۣZRu3Ī5\;TI<&7'EmIչo1Ca^ Cbša6f^De4nP-6d0fMHR{a Z%,fwci0/s^WY>uotx-J 5{h.BnI~O]bP4dLzm>@g!,7Ix\W~gTBb2=5Z,6"' xz}BBGpUD>z?{Ag3ou5,6&[fy]%oZ.<$z m>gKCdt [p O&>ϥߩ"/۰eI4q%O8+`j%;cҷj+yt5CK , ^0X Lۍj5Џ}g3t3kӰ1ern) v}[rO+ʝ%VKL yJ͜,I- =.M\x!d;Q(Wf.\~瀯xV,KD(,內I$㖻)b|>Eͦɲ,,!*,zjNגi+s2H3|\ ,m]i}{Å0Q)tE;`04^cjA}jwQ %|z"Zߪ " FT ]uG  [;&Eϻ]`F(O?O'Ow]UƥV<=',wDdJ_xcUyPJJ1(ŝ,B14bcc! V\=I @I P$!B3@sYX%?lIl_ :E~]Yh/Qg+Hh*i`ZY -DHZ~Ǖ]3fT(rfŒc8g kg3.&K}A{Avk&' >AHX+ M"t\<[v1 Ry]ɦS#/!޹mnN_hpny|!m ΨzCޕ5>)uZV?Kd-݊Ӑ2pbF("mo}4 Ǎ?L.WվuL:H9;BxK/\ *&u#>Ln d_-ﴋ"6/`6&]NdK\/ͭ =a#H=8vCy<$'eb @O>Xkkc A!%n]KwؓS(g] w20e(s4HUZysĖuSs^hYVO2ƞw.qgc8Ɨ*sFQOUr3͆0.ruu0aIt Hb\DV &trtl"Zn"=yB/ ͵ȼdz.l[Q #aU9myX(,eLi*DSոl}h`P?y-jqUh1Ea[W'b=un.Uo#tVv39Y%M<Ē5@ !"7N S@SzǬ4z7>#8wF@=?Ž*2$B'X`zWu`w1ـnҮ= iHp,%xBtpz2^ԊMG?fɑNDmC@mX.*癋3-2pa呚 pPd$ޠcȑfABg~i2Ð/L />*v˗B>S{%Tlsg>LI ,@5RJ#May l$:HY3@@\Cz58igH6@j4MVq WgԶ9Q_eiTVF(Ϲ&h%|(&x,P+2Zt ΄B[&0:IR$~ 6}E/q[jfҀzTD_)MCkGmzKg:!7J VY%#aжw#$;*Y"m2}՛ޖ|0m'|[Q{N/ h|d cO|Pf6IJ8ǯj'8 m%+1߼k7yvݞYW/}SI.@mra#},`A^Y0&&*hVmu5ћl!tdYݭSGE8,’-Q W/ B*I6pΎ8m6M ɟ}>%nZHW~|f۵ mn^8bɾ)إh U3_3Nqֲ&;TJfr`\Z&OT$CŸfUELr 3cԏpֹ=;hRj͜Jv8^Kb<Ԝe:rg.n]ZUE(W,l5u<+J>Gj`K}r}1"ѯ2䍙jل[nSHHp1H琉X XS`XYذ;,5Wr%+$˺5KUlK t%#SpzX=4TqCr)/䉅Aw\_)z'(=w ]0@^J k )i5*S_!w0D8NEJ'7!ljfnf$@B^h4'kGI% K:Z[t}<\vC{$!H@zXGlyDv "'pH[KVe F#~![?!-Ar@"KӈH:|J)uݳ*|u_˽&#SأhU[Y T&0=ͮ6lu3 FJ쟬}}׺b(vzIxR-{=Vu?98ƴ$$1MP|wrA3':T#2.#6ĺot ][pFraD2Fiˇ #oh=izIўhYZX^l'*FVy zT$`یc2^.hh#y.0 |ڧ}<tW~1.7͔މϴêezYWb" U `Wrw{աtq'>oP\`O] F#Wz/Gaq_+fa:]1*C2mBb#`i%J`h6R3 .eEi 1W /azPop&quF'-1%~%1jZ~"#s{rDž|wB -2,"4%P7aLuIz[Q( vnZVzA?Tٙ"m8dpnНpNQ+ME%ﰺKH\tٳd-}EA>l#H _渊Myם^+3HwDӂ =Qg0yhB"5us4j>MA/c]i|eb!. [r), C~-ِ` tꪘ/ԛmGZ ?>=t:We> ;`%CXDS.m,5#4NbCJAlM|?|at5F<ӷK/%7VqA"o<<-uQ'1n h}]0+ҷqaZ 5a1T2<›cc (&lyJO~LG^eb!l؋(xxyҼ-=dTR8Zi}+ 9WX>)t|3"AC>PYRa?|n˙-WVIFHWH澺 CSsKRcARLC2+m}d:,C8EX*?Mr֟kTPѲ*W#?ۧB.|9hϜPu{M&5MSj8{KfKbJ}m30*Ò\DY#X_8J/6! 4/0'D<胝HэЪ_M4̎ E ⮝x0ǏB/+Ȁŷ$FiV((ak`oAULȬͶx>'mDZ42 YN+d ڇ҄ل'hTmݹY/aFJKHwb<8>q3-C\z+/UQ]]:uImC.ĘhɎpWRTFST5 V#xv6͉M@#.>~nq=!Pb&@$QnnV p=4V[]=Ӱs8Zo),DJ-[6=]DXjN0/6YKߣ׫o/GQM)XM}UJ-&@ynυKH+0:Jo>A2'')Es )^ h_^o #wZ,-l ,4l'-]8ץdG~ 3>͌QU5>gh=n/v+΍ {?PuT~Q.^#!4ۈUUA3y% mC9LKnG Ѯr{A7͋--1J P(X@0uꆿvѩ>ril/SB<[r挕5e'4h Hy&F^~S;][H lTb2Ngenջm-B"R)f:VB[E؆>&9G?t4Ͷ$Z{'4$+" I:_Cncl};BT5%zZWoQ#Ɓ0z=RUzI/Nm>*֋y[$جg(d58Ȋe[/[(jSB-˰c!cyBDk,֧<$NWErs?d} 7'>hD#yn W;N*j&Jnl5xaj$\ `'PI.#}Rb^|Q& #os‹pT݉*wVƬ@")OVZyghV$~?.]N6oJ TtTcK: 2 ųsWϾv"%ÑBGfKO74&ޕ6!T]Bȗ>YPh^N/׆G*Դ57`-_N rXyW**Do 抮W^wÌvPװg$7$ߔ>BJ3e#R sV͜JI SO~0ńh=P{cW3?*[~|{Bu`0+77*οn%9޷$^W,JwJGb+%"hWVr弟ڒTFun>eC!Eu{b .f}'O@pdڻņuouHr( R(:!#ZqsPDЃO 'H=+']tgL5DUOo![EzvIgxMJ4'̲ˑi 8_WPMـ3G:P 钶It '@r}H:nӤ.:Q:זB'a" }P`sU׺_P̱z.Fӆ:?wٞF'b& W7XY!XIYȇsAM5X΅k7?-*sVeRl6 hvR斓t}$Ħ}>݆ˢPlDOmw]jԑO CS n~<Q?xbQCrtw'2Aь0(%xnp?i$&qMEp;7A"pVKDfvr Vbc E*P.f616mМ-oQIQ =bT,TG$%0Tk%Lw_[5-Π+0&R(tnOD# +#%x.=7l&Kp鮧3EY584^q%F6}haiO ָu-]ZދC\*I:YCw=N+2A Favq`u{CBq) z.$46鉠bNX<;TAx&zTB%>7=ʆz%^( `yzl8\Ur~ƈ#StYQ"=C/݇%5t \xn /ކoR٦O6"cɣ/6p|Í_<H[2W3%٬Q[nA?_ H10Eup3mCY,Nmtظes}@Z zϮ6װ8`qA?>U5D\E_ۥ<'L& y%9[of F?4Nc 9N߼y`j5 ,*-)zsy?}Tq0-.B0LxmxUH[JGXC3;e7ukrYD+'7$ i.ui}ltSɁ "YY"ѻG۶$|Yt(o)V(+iG 9iT*rBxo6d+I t `#Vh 6o0)@IT9“>\d֍ BCڼ$ w +;]VllX&L&5u[{_ S~K BP3\4jP' ",,OpN(H:-AT[\J4|3z Jp.lw ;jI o>4?oK "2'VGf=S!*P䶭w*!H<~ӶspNƻK$,O񷌛[ ƙx|-XUY yqBrTkd9\Ci#7lW>i1 dU=p5 Ͻk%yD~PҴTk:˟3Wl>yo9| tZZecnh=HG& BY=-lzA gܵ8ic,`$MF +†/-BfjR8ݧ!oӞ匔*NNh.S}Y0U^ m'mPzOFJ:FZ=uNpԞ6~ `d'[֢C (vFG\Xbڦ|d DEx)لR3pHbnZ5;LjpJJd$G2|AȌ>麤zhMSWƤ% PPg-$rst«T"銈FIjhTc!zX\ P/u%K6CmY<Ĥs΂Qԅoyo Q~7ם> }@:ӌ-48_[F? ʾd\ KwJq]B#2b:>dZwh:Úqn4^GE=7*ATdN:v-kU1W[[Y%oq+I:cL\ƛiZH#sov3p# j` bY+@EeEbn_~_c0>T,oom.f\~k!A!Kj~TFC M*ֻY0\/!VQfP~VYMϛ4Mo_=٣+e\CF8z ćȿǐ* %$[hώ28%IzA`h ['|u=h?>P n=!p*InfIҳEN8QIק :M ۬{3=eYl)!œL_[\J32@otq|8=tv 4wĞ| T^d4dsڭ?kDPV\b[?wUGq͊wBTzLO?%5/o!18GJ/EFR\[m 8l \HA+`k [ȳ-eN$Efݙ@I-ϑ?H ,6bL㚬.~aVxKÍ#ML@ E\P n/ N^(OymD5JͰd`ڐ * ij;!yBjjޱNA2S' fK%,f\PI$Kݗ}"[PD*P'T)E|{|5H$ m7N_PpGG@CޏVѣoz6]%/,&(t띙I'CDZYAVYמaC:Bݝ)4? n7kT8J{ZE99j>TK=$oTGaؔtyU.?Ye\eJ$D2hurv>]_P06gN7WRx0ePc(jC\K$=}0CU+~BpfgB->z"g݌EJlGr;r(RTQ]3M6o!@t);xK˜4Rf>MtR+Ej[vcEFs"|^:5c2} L@=5NqW~%+nDb?\׳yމR uwK'9\NEUoKt6t/jP^$^7u͉m :?5D0,,0KDw-M)"\9 Hƒ-L%ɿJD_nq Ȅ$ﺖ`h!zE_>h|5}m gQ^2U"S"\Zl2){dV\zMGHrCNWZyDXA;]e,7ʌvyb" 7$;nO ap{ h (bWR0MDt3Ri?Plb<(0C%3sWw褴qݞgV~ĵiۭ15LF},^3CPS7fT؎Όx+LKOΓ QqxOgt- Ʊ֨ӟrzCxߔG{#==R(bH(ݩ^ۊMX:9tjO_V#Zon />ܲ͠3iz{FÂ!|PňᇧuK1wQ$mtТ WAK/aH#fKxDZ'`JA,NgQQ2ucI'*QxcR_DT*LY,|za[H=m^\Ӝ-]SC St9xٸ}I.82*#W{xxmH> `?N'6e~WΫh w5}GCxiq)4aۣ[O. `+ `̟u(Ђ${˦R+v[ߏ^KiT-TgEgSFSL":C1cO#yk#~BB%k"->cؙ{\A#~@Q_D>ǓcBo0_ݍˍBfc]6rP50y̧ 2 =6`2lȾ) ~53$i`qke @~F+}z$ vETIa^b%V;6 %/= :jnhZv49%o7sE`Ij*thuY1ozr0S(kalI~^Sg0w`!9ocU;L-)A\MoZ?- ky,dcDyk#9YK+߳.ŵY?"oNk[o1)u.m*]3B|W_5\[ mўBWe<ϗL Ҕ=2foFݔٲ>ZB9eᝪ cP|؆@uo ,vCm+|,w_^Y*GZ2Az$c6 ɉV`iq<ӣʎV\z(L ~ywl\cӮ8^ԠgWN-US@ڻj q;*Y|wx^o7#T_xzsu=1S6, iag@^٤nXў 3+ Gʹ"lw+m-r}9K\nipmMs9Y;FdMP$j%!:k]u~{ߔZY>Eruj<~gmF,LtvA I;L.7Is/w>D5 _7հշٌ+1{tԄ7ag{BBP7ɐ- \֚$|@Ϧ,z#M>ԟrnuM5%8iiMa6|x;K\1,q>CwC[W?A/Z|. @ײ UA_&#Z#L(. aA1g&e8t#B{F.xi=m݌m>a D ? gW9t-ћ2Rk}U5\,xE mgo4"%T3ljB&+U/esgq +8߮{XsEqtrAboܕZE1Ƨ\KZ):;w.AJ#V=ʎލW 5 2$SxQ,}>#o9-ya\ bO EC1]%z?eX#Je{QKn%ۑDOCM/u 0n9kh7$ҀN2_:U:-">}#aeΧ6 -H숔/kAĬU`( B''>Nk-ա3LC:ͳ=kK*D|bO^ןƋޖS'Zt}7Y+D!΢~{` n:Rգ.ha>t 40`I)OVani[h'BP>5 xK[?FoHeNG@$}Xl/Շwp`n~ͽϝ+=ndq($ZEYG~7ѕJ0ə_00B' jb'U5I ~ꋿ*$W_ xnbҕGBJD+-hU䵦K};V@\uJ+]12 ¹r^*] PȦ͸De,w΅'kK_':_h1rVqZO #M h ^1!JCGhvh~t$@t!kqWDe5Sx$?"c bVkrŚJ/-< )ytӞ\N[r&0X.zzp5/TQc".Izdo%-"Ƣ~#y6ޑDɄEs"cDrFR>bP53C25魂wrQM j_H5NH4ѮƠM fP-s2W7 V}yєg7.tW/hq:PH)^}) VTZ=e/>Et92*iO;e46KU+P@rE0@ei)֢t1.#L\ l0(W,7x-τL_:q$-n^;;$|W!"*Ƥ-,<0@U `n$Q5=#-0 jьaHۀ|UcwzP$O'e-/}qHAD0~kP@9wg܆TpܹFKNm ۷f U+y$ ~ |cKLHՄxnuŝ_[&e/]9Z!d26p)5.8$[u':Ǹu (p!IO3&P-eqY~q`-hf{FĒBmp -̸r3гb tfhƺÇ&k|OPĨg1Mj[|dbPif~i yʀaͺǫu8&C??0q҈-8wŇԪTzUe ktHʱ Š zuXI588wn 5tKJpM >ic l@+cU۹֨c20;13+15Fp? xݯ" bSl1JvD2}ҲT>>BͲ% JJda7Ah EeDgM fTs+e/)O4`#g|AȽ=e@Tچp2M}o nsT+[2nOͳ$=_H\ѯ܀Cr̳XGE,=(2.^ωy;ۇs(Q˿.ZV7NWџ5.w8ލ=x԰ )OJ䔼ב{h.-wK A13ˢO.])k܁)`L _/TV€2PR4O}wVJ)^% fqt:xt|O}6),f@[ոZt"h9|?i(\.~Ea[~$<[=Mv"V:;A"Q6YS)DA ?EXZZaľǖj:ْ;A9\Otc27!ʑ;NLٜٞvg*8j-M#|NfT +綠z6h4*u샕_B, ixOrܻ9nN)B?4-} bI[?[hdu0 q k<$8 _xcMaa6rBڜ:x7 Mԛr} #E{ rx$h:2 P;(10sP};^PxMLRYQ`$jW.<5%Et%L[i8AlkbWpUޱ C^*T'3}-ط-T{H ˻|2j/̩?ci+F#j;*eL,r 4%ǰSԿٙW6Ρ`W6rR >/$=xzSD?l=frs .b>1gdJiX xI_Y܄V "] .] +Ow{4݋iy.>6 dLe 4VU۱&3Mgx'4!WKo"r"\躒 ?xDEQ6ʧ{coU=L m > }PGelЬ77kK(R+I*ۙ~j5R3v "hqt>ĪO}8J8it8v ԇm3_CbPUYEoy8R Qb\ юWМQ, Մw$z̍/L1fv:d1 Tdy k>K1zs4h]bgrr}F\0HsϘOYR 4Giڰ?Kfz-_1,DUH@6]{m݁3'ohuC@f"c䁳8CuMo9#1;`3MxWYD\97 (~Xrum N[uՖO6ՄW~;$}DJ B׬9ƘфS8x;~?v{WȭPڶ@}ZʓmdpYћᣫŗz>_ޫ:Ԯ@Ӑ-i8?έOWT5z©!}ZehrWvuXqܴJR!߹zҠl)s]z<Ö?d/4+#(lU~{by~[$4WjJlpF2-?`.[gg\|$\3 ϔcINxʥDL< 9.{T8c=?I !r`L)ے~ZJ"(~[q)+2+R-r|t*q1 L\-y :$T2ecp{~KH*rjTPilo S2q>JUcRjNjO$0xa˔1nYOg m#9t@α=35cb,ߡax`@ .vT*HaNO} /8 9b9$GqHn9|Q"a-+9[Z\Z6eRaBtϫ6>[qSz#e+|JZG[i$1[HFcV eFJC68A}ҩ&+ Y75Hp C\6̽JBroJE $k  KcG`3&Yߏ0_;bgmAߏ\sVQCl|::v9kF>v)HHʆ6] ü&b Yú]u%/bQ1Tg׆YSy]Fދ/a *v QV[Mm.7or&FmW[8CqG"&k,rvpXx8U4--Ā;Pl+x*W;pA!1< IǍT5K\l.~ĺ9DN.wh1QjtQc1ą'MÿwaVQ7(yAP+$Q&_ $4_@??@ *iLoI!eK6mbzݹ;౦}΋^ k‘^A^AEܚvЄWPo쥥q~:O"SC[UFhmd~@DUQ%omUrB(IfPfГV_عM 4|>2.v -^ SAFr;ڣ k|v.1T2 gT  Jm\zN# q %q1^H!gW|Y$_>H'L8tcXgPu+"{5gb펳~z9uƉĆ0Mڐ @sHF*|$.Vpzc]4@˲*,j \Ur!)^tCAئ=/Tfgxъ}LW]#ե˂v ҝǫ$*Q ? dd؞Ht9ryG&_ o_ϧo6en :_N4'/A]Bvl92@\ȏfYN"(0\)KvF*4t-uv`+_8kl鴇rՑ|dfGZGH32z*,Qh;wQz+8) O"<6-b8y‰8Ijq& zmTAF`1+Wӱ tP˛ a|#\CH<ؼ<!OS4z`(E1jdY t=CqM 7f{)!*9=0=ss!#gY9쨡vSh*ȻH !y!6x/K"$2-8ѺN<PRRО"QI:@0KLE<ƶ}ǠL/C~m^9M޽ٖ#PF%/,M>>LZbf=HԄ[egfALm zIؑ0zX!wޞdn^&V\yþL%[Zb$Qe]L7[5RbQUAdQ">kfP b7~ꅓ<@boݼq3oU@&w2GIj"?uF6X!E񜟘U]P8ȝ*]rvqF{X$^[ IUtԿ艔MA 2[&$SHD$UutVtOpNhyVt[7"O{i-5!Zc=2 d >%keZC'rNLBh̥Ĺ,*2\IHqge-*;^ , cYΣl&~N|8[kL,uL=aQf*C}xX>3*=2 NT=@NI JN0SrA׏l<+~ $ YLһ skH,cQaةQ+C4JoɆ9 l]_ѿO2G`uRb|)GI Rf YlVmC%A?('6sc7H/ M/mxs%FnABߗ낀YˁVLq߈LZߓa8['fh(-.o(̾#?0.>:Px{E1 PjjJRk"a"}M OG3$ pZwuUp0$SM'L73l>KEܝ!)n3#{6}'@;`2cY侙$,]/J8LQ BiA.ErJT#;+rSuٞ2%RjxD ƃkn%T;[k~&Ew +G)Jشgf_+0(LG.C8 eJj6ajAۼMO7`UflwV#EwΏH_3=Zc\LXGo|$f߅e~ۏu`txi=Kve >ž=e-z?1-#%,%E֥ٳ@?U\|A-gDŽZ HWw/@{ p}+S[iҍg N"OھfsiNg cf; Iz`_;#[wNs|Rci)Ss&Yq0HN9ɸXz+1zFd`Zo0v=J#^x{⿿}:Ӈ~o crcX̀سVDscBr_p5⎲+l{ow>ҁTE{;&l#ۛ~{IɟE(>W7=3jn?% \$E&ƚmI8`cd+1X`Q %J;1@3Z}u5Bpu. 4' yj)|5ioP<.Q6l&]d5V T"7ڶjV>| ݯ)kM{RJbMI='32m[)a!Lwv Od[,-&Dl=G)_t-N*Ph 5`NA-Y|ˀC`NWueF)8(H| >VW>8 N8+9R r FP*#BxrAq01 TkRU{iQ4U~,rX=wdNo`<[hb;x_Ҹ _a@#<)$)c@@ӝoF|薢憮A5d#/8T?m㲿{2A:f*pjp9Uf,"Pc*פ' D)1(8:7VX%5R&봉3y*bfDS8^D 6$2@X@_Ga wdD15%)̍ 7Ѷb6ЩyY~&ND1(~FU_Wa$㞖/5Kofp(v>f[7<%;n!Gs#3@_v'y93̬:EEt,w7sr/ D ؂/,F\j1ζ@B+}u+-(d~ i)ᾌ tcw{P >2=6{$Kcm>SId*xn3 濡%aB ;>kY> JzPW:WYց-UA8SMlOl8tayX?gvO P,h/4 *rSr?i@DZ5ivȶYW[U1wr#c_A~o:Z€ >N@ #6ì`BZ$UI4⤇yR}iQ.Ipy_ vgU^+mָ (GӃ@^*hYd^SgG=_$="UQ/ř6DDN(s:4DX da'`{P: Ϲ݄my9':yA|!%Gwt1XXڦpyw0]NPeGXd5]zN7.} :\=zzPR"XjG*H[ ]*8LH&c9uc R}W*HؼւEjħ%!Wz#4> 6[Ea] ѷڠ1ۓx:3(QjkȢ^&j~D/9I`4 ] 'ˀ_ȋV Kc ĜGDñG4;!F}7Ssg$; yZ-kgE;Y 膱^|NFbI٬j4N[9NV$tK AJ>#,Ŏ)g PC#yI8q>m"b&K]wD]qkƋ"ƠS: "F%zOf"9}lj߬9dJ~bsnyhL){Lܨf/ ZPl w~8YE  ;e@E.<bjRXn6w2YN!Gi\uKc pdXzVuςR[AfM8(Nߺ~$CjGadžݢM2=}ŖP"qp,1CQ͸23GT!6~CX_sY&CgP+"Ԫz;Kzz',Q0iYK( AYO7F(Ʉ˶#}R<(DŽϛOJ0T SڄICwF*X+ARH:-_,tӞSf},} v81Zt8,9o A5/z~}fî 7k^4`! @jγhGAxR4Pxbm4S솖kB3&6a,f΢؀+d֐۫^qϟ!K/ :TAuk;19_85U=fC͑4g*rb TB& ٵc/-٘lHnCQrQ=QsbL?pܭ$;sLow^w f %ZU BT?"H3x_qo4~Ir%O@f.<dŷHOoiBOT$YZnyo\3Q;#jt^b[}<¿ B8;~7#yA퉡RI'0LAi&ǘCij8x.77(ol'/ǯiNp8|m)fa(F%! mTۿ{|S T/y E;b`-ɮ>@ ~#|^w$UU Sս{ n < G:¶J%cL :{ YZ(@ڍH4Q Nk赐#5,"IJ`Eݴ ϛX$fرYKn F4S~;|7a!6,(+4þB)13IPh:1NZ#ᄭ+]D7kK1h`-CT3 G4[nI+$7 tZYK*i4e'qQm4AT/\'YP]񋩳D#IcE/E*7vJ( :.a 4˨NCKou[3J obM[ OGS mdU@{B0ȫjp:8ޘKu}KN/ԹQ8:mAxcP34?th>A]]4ۿxvo@# )YwR@l[ ጝ~`-?<~曩kmmylZ_1Q*rq dW/9?z*~2/bxfc=}aH6)|yBS9J@PH6jzgotm*2 +:JFκ؞b9 ,[P?7Yd83xN1ԽZ\Œ#b%(M=(㢰bқ\f)fڰ]cZ|&fZR7K5)礟,"[p3?I҄PiˬG-=.S* HЌz6h.L8䊥{{s\ԛ X+;Lv@n[ۡž6#ﴩ_Ā<>+Uq]:;I'A$> + n`w qr)רp2y>2-N{3j}=iyZn] ja&4t =:gj w~!f΍&{$T1.;ʥn'L~T fOq6pf.qtAkK z)BQ()I3M/VuM>;|2qsNlšMenz.Ue-O4@3Wh)׊p3y#ȷi(\hU~(=؁C!?h;4L34r?s^s\Cw<489 ҕё0B&m_&vpك 8c]KüTX˟Y5r0IvmBu D;hPs>ͮB:YCO'OȞ0aizw6 0J(}OWUROxmUФ:.j0ԗ6uϩß/'<_6ܖ=e+-<~8.F[ d0m*`am^$7ѿPq*b+x8[(g7f4L2H 4puDžtr Woa$nĕGRͻߺbrzܞO)Dv 9SA*!njck#R2ҽw l_WH}B`}rC`GR%^{^8\Bφ#bi˚g=h aCͷ tTg*tdR챈9Ҕp\!⇤317v-/Mvg.eEg57I5җ%V3PؓV>xJ AS,gX"ϋĦ5s[7dF-Ék|vOh4ٗu]͢an%:䝰|^VġB4r]3ݫYzgs_5CHI% /-02v;~[u w ;&Ydͪ/f=7Ep+4NI}Dxpc4RQ`H—ΡZPSrIWſu֜FmՔKڣK?ק <ҎBo8?.0ikMDtLyY!/m (W!~Qot> lKM2wK9= )ʊ옛}Bfu@Zi;lX̐I::? ha: z_6ӵX{ BCN,rI_Gyo>IA'N!|*ڏh`XO5GCMd"t@+j*+y)+E5'TQsyzdQ?NѢ4%o;uV>8U;G[_2}Ic3aӢLbqɨ`r|@:6y! ᎺWY@"l3,]uK^'X~:QP?L@bGD2LԪnWIX,i  |+mhOs濂FVwrIiNZ;s5HNү6.Yjz-Ė=?[9[1jdq bߐ}[abzO2XhDJ)aͿ *aco"Vâ8dROpfE+ ˻ tkN?ق薥8& X#t{tisJ>DR&aRd{.E5$?+2SRˇo,EK)nfL٩: җͱPn_%,D2R=W) ~96w6衑C"۪Ul}4;gPj_Q7Y "ʜqH8DpbHV~үj恒r6-բ02΋x8|VFzl-^; W 5hA Ee.M@ ,'EFgLsn.Joy$k`4NbldlfdE/\>Y 5t@pg{m/5 )8{si.JEp1-M.I) 4Do-:dQWwt@ªbeZ@rKuqC T6l]SMi+ y(&QO%;D.vs` %usrty3=`Iv(^g<ފylDK0c N69 jQً?& HQϻML$r=u>@ey`~[+!xq/p_58n>E=;bf{T]T)#Q$L2ʦaj&>\Դ4U|:k i0UFtϴf0/s|A#A0֨ hvJX}k&US Vۜ^)@m>FD\Tj9.j5Iog%t ,>--8NFܴ~#+E% u$0~lvz i: DH~ Yb70]SڙK5V+~ }Td,> >[nxkc, prILb;\/p=Bdhٍ}-EUԓ`A_^, %;ӎ>0Hs7hλsI_.ua߹ɺē\n ;eBu3'IA\^awcj97L2@ m xtD5M.Oɘ[c??Խ=GiӐySx_;/v|J>$*YlrW~« ֑qtWj豱9Զ|WG%*.gdzs __`WS'| ?xwވAldԌ-!܍bst V{*peCtWD@)N[w}.vq=|-X̯T~\9KZM|-Luc5]YSa~.t6(ވ/\,fL)8tϋֺDM 2-"9 Ƴ!xٜc\x!Ҁ[34Y-ӭxJwyC.]ZQSmjW45 d`PX+Ƶzv6Τ$ӬN0ZGPŪ<*?,TSbKL6ce_UFC`/nmL W/š4)鐤GXJ;ش;m8$V͡򁺉] (. M`Đh\ۿbjF‚rJ{͍> 'ɔpǹxT&9o\|Ub犗}fLW2X%#% 'Exs]&7"cnAvj һx و g׌ڮv2/k=n5HI"G1+ eKDdUzbG+G{9}ow ~NsFɥT:wsT-o-f.8\J Kb 1nv*8-f'qk6`KB}#x.{ؾ 쮿\<b˂AQ<~PGhqcbgq)^;~cޜe^+?̝>сQq!2x䴌73aَAo2Nl 8d}N5J$}9} x̩(JF9E}ۄ7s!cTUw&OD|.[a#WupIhO;@>xW6K%6Jɽ;KU{ޕ)w?,yf2zdowЫ@1< US#''yr*$[={og 1jotp6mk{X*%Xκ[N M-TȐ)qG! UnfRը7LjxhbAhW)FRot2a[ϞkFHv,5zVa} NFbG"cs=^!D'HYcp߸-e"7pJE}O9 `čNjmc#Rďɦ.ھ`WӪy.h,#_垳k'P tGv)Efs ˢc SVT]@rQmf ]:I0 rIMgb'n(˜܉`#* b$.u76>pU+>Z_R%f T_2{NQJ1I? vS7խVb&YhiD !:z{8 $*„[lZO!_.e<᭷ Fyɢ/1dF0rbc+M;+Na<${*]$'eAޕn xhr\N8T%^ALސŲ1ޣO.ME'dscRG#,&B_ħ%YPn~$iKc)F<Έu)Tх >,OZC<yAX1%g¦U@m_*ޥИ?7 Q~Pkc{k~6c̲Uv!#-u/P'O.CC|9vtQNS6W?ЩoG ߣ'tȭzپ|)8TBʃ}M1V (10l[p WyZVP331D'&’Guy{x-:DՕ9t(ZlgWdLA.U$[BS'J(`jZQ:P( yOhVS׫\Sx_%Ew6_nС1?Eh-z7 DcXr?涨Uc+{!LAk-u^;LϼX<ŵ&<+_`4C`ulmdvqr#sJVr}D'AhF8 %Rz_ꎢL$Ocp$v[w❖-q%Q LI>m`6ÅجBTjiy)U@y>bzmɕF!oxXkbCo IbʟYYG =GM?:ƟSf\H7R q?ɏ_t(*ry_9|0u«Oز/:7W(K]S_:e5L^%AXթ"˯[];tfa4XAe U c=]E7<\yun3ֻR}P9H,oPoJ.\2k, !#环ty biE3y)kPʄpR`v3g*&W3[˼5Yp($VrKdouxw,2E]zDq7TF~+de/i8ZNN@G|-Q-xnDjTB*fuAHs,d7x`Ns`,;IVB@]f>ga\*(i;qz4RGyR'm6\vo'&ZA@`Y'ID 3yDC՞-FDޞhB4~VP Xr~TTeGu#d&F{XIO*ytcŦ8#N\8.dx/VYk~a=-rMYbNZf6D@j)&fBì5v\'6>2*CDa%NL]|\ f==K'詊< eݸ?U!_ }jܴ7}x}D Ӭk[1T0tmJ8 M(z#zK~A=ڑ3u @-RvW.qmO>@"{d_{nRV֬xq7 VUA=uȚ?wϟ<p Rr խ)-&>2trȤuf̜]"V&JM{z.!^k:Dt@x"^HO;#L@#./otG}5ev5(O 5.F  F_<Z9,`n80m!h)/QU'ƠFg#)vN*{RMԘu}뾰XJye-~:G=Kbhu;\'curXhKHPSʫyHno㘭8٪k4ve@{iz:/F=} ;69}Ԩ ԘnLY&m=CE iSp' ÛP:*]IA:`S5E/PMۓ~w1}K@]>皠mdpCinH{ bpLler(JO8rxø58f)h[{Vٔػ.7E(gNa f4/*62Ҫ !2 Jwb.TGF* .BA8Z&_$ݽ uJ>5i%i>2&҂$vI#~Vpn#AIsr fâmtn{_1HMY EHTV \<~3`cÿRP 7d7B7ܹ> u0w( 3%Q*ynKvqk==Fº\%j&ǤUb,8)U9"}b$[5֜?*3*M_w ů ,qN݂EB PÝps&R`v6G; jLۧйr k߂UXpm,9еxuez ?\s\ p1"߇ҷ1ue!C{ Y*e6D0Gdq>=s0(A<6eqk/ؐ7ܥ1@CuT Uk $l-?_D=[4*tV|}M^mB`t!wܴ{B{"eR]`5q.P\ !vDuj8yx ; ޡu[Ro`LT_#J6Xs联nsw㌌4 (\aDkM}lk,"zkRϸ1Y?4N <=`E=#ܗ`a#4~VE [nN&E*b#9~ɅRhqCճvBFf ^9x|ǙY?شTCTnp(^)_buQ̈́cynKs>d@#)̤Y UZ=ECPLLϙ# :J\j~VJx kq+Ettl>B(:|Bz=(r>e\v[|c)eeD;+I>51xoE#4)zOvX;V`=:YVʗ[ɠOOxeOG*˜hʬK ,Bv,>,t^9o?II?g Ǒ?Dl6i{pfֈ \Z#s+ϯAuAv'A!Ej9W!Rk5P׃]c-?d˪-Nń0V%ޜ]I7qYE/԰Ͳ ˝*4`kޠ`CAs漅 IYN8pz!淟]W[vHt~1~n/40ȅLh=2^/~(z ZmDX)R~BҫF#gsѾ !4_?2#c@^G.|,( )C4&H6c9iÀ{"*p?|S5S`'_bpÊQ!!ܽ:!x%q_`߱=jX^ k;Pu7c-Rt;YsfG k^wrϢ` 4^~h _3 P\78m(+9&qc_UFxk+%Rѹ_hSeSxK z&pb\l9_A! Pg("n/ʥk!1bKܰB%. ):6$U@ x@QUyIS](sP?_&Q'6uOc9s+qd6\>{u'7!M %2H qMⶵ$߸^z>`j77;¹U&ޅ*#N"\ UVpMϘ/ypC-r1" aH"Q(LXbw6\ i<'Sq4)GkO=AO G"QF0<*ۅl#FȂșwknDbio$Ee<įԬ Nc(>hQe+]jYœ'RͨP3C6w,§&Q!Z_gTر%%?Q/]yWX$iiA֬۝w͙Ј KP=(b|I ; m?o. C ;}qEfEk"'jH#H} aޡ ?WUAsb5P5'v]($ NNJ:uF4]4iXT"\Mc 'aIbNXtw|Y@˔}cӬnb|w<"pIGjE7MTI"F~~lbYb:^{XoqUG]Hd-*G=fE]qGpruNo VH3%.6:=nqO nI>ʾƂi0;U̢̐] PE*H|Q> A'Ϙ{w!8K - l Q E2YiIN՛pqݿ$YE+72kX]hO X,)9].줂EJM#sPJc1!!A"uL.A)fGɺ!®M9Whl_; kJ)IN Pg%m$[yq{'!ALZȨh瑶o4u~}]Cz/!NP\: YXpa݊kA]ʿ2VţvDSnPjK#(~HjvpR0,)3=LLwQaըL<\鲒1<OfF)|el`=R\tGT}cѴwJIT ;l7FՙAN%6??_XJav م%1S UG P14P%+wۇcoBorj(,&~*ˌc6?A!JeC6PXϋ= 31(jm,8 1/m!Mc[2Qimخp2+G0;OWtХ $CKrD+V`g86t'p<0п$fvZEi^>>rSi2514?0au;:zg 5QSfuDpH$9[$ ,(Ɗ?_YO^OXA^>u7L9"~:mUGߥP.(Wi%6.qX^fo;8 ,%-5dbA,/͟LS2(l.Qi? pd0Z\p (/]96A/$8Kc~WMYlcs:k8&.3$oĥ*l}^\-󱏱MejFPU{$832)N~xtDh4g-h J͉ܘ?Dvtetewn9dGc/٫9㟟|{PsPs1d ő{`$ks/4jN)'Z שyͷRNI1ETِb{srC}]oi!!q}h ,NF'IRFSTb51%Cc ƍEu7(N wd+#Ӡ5E~rQ]" cA.fbGt_׀a@;0YAMژE<iH= 77&}~gҐ ?CxdYfm^Yx,Je>?9 O>5r1KލC1繹1TqCQ2)lG/tk֫Ūo=pP{z07`p]qD,enp6'\~;tV+Ϊzid+(R gǞZK[Yá#׶C^|!JʎYqB^:gJspNL*7~~ ^M>EE(|{suYlJٗvGjyJx5(b-zI0LC[tLt=Vmvdf9mHpSm(_ /U=X:uI]b٠[#zd`ql&Pm+QCJI6n?,f?#Iotar 8@ِG]brO*lqtmVֲ%M)~YJi%JZ~9I5QݖBWf~U#zIp"vqnp03ed{NSSdX3Jw%鞎:GtEs!wNn|Ԉ PT>p lo!~ ToFGpfwG6͊a#g|Z\V?vY8$k*WH:g+ΏzjA@,.ިakMu%n .&K:>ܸnC@XwPwfsmQG5gBMʋ֢fذz62'wWrN AȆOU,m~ #پB-CW2 [xUyA?rG-H~s)I57<}lN J yD"SZ! SLJ:x'5rj[ȲHߛCں)ה¶[i)ԆkתD!V°iWCp5t6GuKu,IȲCcsxs.G8Zq$!lk>'$hTm$?eWgdl0ǀdv>RCK{Wx 9i302nmԻ7Un"|)TYܽRz6yJ%Gߴڟ~0|I]-¯e'NgP_%I7X=1iM}FFУ77$s).ijD%e_j!J[6w0rȲܪ4?1CӲL#,C!E~/{ĝkJ&Ҝ!c,Ȫ0KLWfˢݜI&ݢ# Ԯ=tkoЃo0|RtpWw{|t[pBvwmg789\m6'fcm%q*Z֒_!U߀3Ʌm&nYfS;[Gn0N]aCcꂋ[aρ00jiw(MPOn_H7ÉR?>smҁ!^Rm!(VUph(]4⢍FҮqlFl ڪ98ǥ !}4GHtG:⯶RD[?%,;ￋ`i&Sd yi6|7"a0*Rp]ڶD`v^"N/ZYӋ*鰡1>Dn]>6@{ӏ84z9bD[}X]nKcC+?²ݼ= `v,s6`P:%62a5oB~9`ۋzC=ۛ ϖSX*}G%Zzd²VhْO1}A%&\n`%=D( z<$x fDzu#;ސ:8ҘA-.p vI!pld{ ԎvKoDW+VT6z4*&CafXEr!\̾t vNM%&?+lu֙yT*T+jsV%@=Yk(cY2}}R:FcT)Yiq Ю,.ٴPRk앨4oIւw'A~f4/e.Sy9\q 8:)ddH_`uYa~DQd,SJd8FI鬟G]zvO_t +R.60 eO)3CKtMX90/ Y\ۯG gpj$S4V単[٠=YէTZҕJށ 7x{`Cs{VYFm fh2YkU@USSRxĘ*ѕ{IBUVF0U3oB*tF2MpFε!%~b,l^Ks:xV]ou^" ^c*PL![EN'扫ڴWH;ng$ #g;P$0}Skݒ0'g_F[SC-j-I,Ri=9f!HP-%DbqsAϰKP"f)qD-Oc2Y('L,! ۉ:4a?(g61kgf˸$F̭>r9ZY +m^:YTo O@هk>tTdᖉ-|!v ܡ6($ FA&}ST=xM4;.r5๼NHєB!7Mؾ-<'n`_J[]|S{4g{[ Nyz9 uprMLOn̈>3GU )FJOg>1VtQhyE pС*IGSd[>JV%՞%s7QGU0>pؓzG6<}Buأu+*<4YyZԎJ@\ W&eɼLIzzLu/+v7`ʓHbt/P2闎O Sz!oIQQ/x^q!3:(queFtK.7!s;$J.If0THI;,zF1@g$L gIFxSVƁ ]fYh-b/ ¦TpM)@ S Uµɮb!͚s،ґGYm$H pCAsͩ2ؽq;گW_߈3QxOsMj<w4⬹,RlqR{?5,`U{5g0EnVx~:$ 4]iW{}w9gT3ɇDJb6[ ۛ|r]>f'MiB-PσڛcɢD;G##'Y4FOE9QPw5qp۹/R"%@}}KRrax>5vin6J~;6ېf);(xWQ!Lm`)o<{3X iI\v.qt9ȣ8טcu$kg6d֦$c+B.6 pN|7g-Ohc2e\mK~>qlk{,paY1@1Lo&i,z"G&]} |Ih=gI_`p{cd}Y!.:\>ުXG+dv\2P/< X#YI[Ί!e@A$'\,hnP#gWq#번e}OҬ:xQb*ZZ`w.1rE>[Vt_B%FiI5M\+wS:WȗNMFצS~dpѨwv2FrĪ <t_W?^eT' !Vĭ,r?tw62>p:8]دL!MzDvӲeKs4Lj$GJeWnr0f++3gH9r@5"+?Q{F,$#|jXeM\g߈N-#b<M㾔ń-ӏ*XwC16h:j{TkMrR[;IB00.#o]Y?w}YF8TSb۸,5e6h1Im諘2<0Vب~f6_h]ܗO%}ЭhM1z躓.hsdIS=H29۶K@/i7LJ}>70HMIV??x˜y`HTc_Up~F^geĉDUgĜEVF9sL uf(wLFN";ǽ'ǒ8 "PaWS(|˧H3h2R fלLYx|J:_ouϻF?|"hmV5xfIhavuclɜ"J6 RY 'GB6'! T*m:jʴQT2-[T5hFvb|:wp@x'ٯ1Kt1SLWC7&(F+8vV&NƪCzGO2vBYMM, E$s'^TfoQ =UJ 6 6L*AёL_x: ?Gҿi5@) $FyBwp-/<7OYc1qd➦rO0& յ/턛=>tʠv_C4 .8g$EZ6'Q~N2glj~gv}R q4T| W=w>;^P C1CcFnh@0 ^љn5 Kv">FgNhM}Nubbfu"Aeedors2w3(ǜs *·؞]A|ȽI\}˵1ypdʖ󐌙?~y9~S??J2e}|CGh@SAThzƺm8k|s,\#5iHء-nU 5Ӵ e5Kʱ_$-!Y[0T$zGu}OlDP6w:m*37D ?ym"+cj1'Rz]#Uݡ~$QLxݮ5A!֫!z6?=#k 2\"?BW5 aubJM5MMd҆>+:t0vɩ%7`;bK0@V4e͐0p]rW Umʜ x&li1^3pT#č(Ak^̦M~$cF( +v`߁ 0bHC4vVW  ~k(VJ=Wav.K ޡ7.1J^k;K|)"!8))]|fތ-3@=!FE, ^zbm!47?gf^ %I̦ʣXU%|X$rEʪx Iɺ!qCc⠤Zx2Uv[btSbCnT}6ׄ?Y-.Qz0o*~P(/[X'Uܓ.9C,W">ۦZHW2m\hoQI@}DYHƅ,e8J},խ-Ak8ؒ~ DQ?E5&pcD K:ouw9k/@ avu$dZ}@xJA\ rԗR& 0w^rw/*DOuS0$JR[2V:cn^=Abכ{\Jsw{quzQ١P*_)'HiP>"Y.|vG>!_8o~~e@ЫvH7UBN5^qr bf0b[݊ؿev:XIACRxf5 ,LVHlPɻȂ7"N=Hy$ QVr%S5/q$*i 2? m JsOՆvl"0z1;2.}#Whi0x& .Tz>{d(]j>"FeiMB#xѹWZ[dʣR)^0]jƆoXB̲TJf˽,ѥxJ$8dB`-AsUxъwQ1{"iH'e&U3Bv%e.n B/ zOs5{QeITvmZB^>ͅII4i;3-լhLj"cB@HV,h7nظTm"WۛTcL0]:AMQ-9s̙ o}I#2پmEVĨ˿ ?y[AS,<E9A^ Y#Tq]BC|_hHcgst%3f<~HS]ā (Q@sV J5t?w2>ySj-I‰q3mkmtT"00kS׿LH%E8!T u:};˅ zF$j1!:e]L]Kǡܷ˽ (tա] yGysyv<*6}qyDSs4u̼Ls2ľ"5ҝmlM%X&-n[`?[|h/O*Dnb Mf6UaSӍnkv$Q"߉+ jJ*_^Ӊgpd/:^>g~H BgЀRfeم̏;+NaУVĚsQ u4) xĈ˰~}=n6춬I;?I%ӳ.&ڒ\f ]t<Q]@DWk} Tq58nB=@`vݾ(~ަ8T 45IY_Ջ2+w52ݡ,u2Ԏs\0WJşVc)_3CeMb>T,M((nzbҺP|U~䁱s})FȄڢs!z28p=_}UB8/A?IfXEc3D)¼‹J'Wqf洉ڽ(@7uI+xMQ  UnǏGhzPPdhMfzOXHuFmd{ǕBk}\\=_7#@Idl-GRu6wtyLS[sRc(OIVs#2#ͩIXlJ%h#k (53=1zzn/"gf6 {OWMOC&pa,6d3(ZNz#9`9^M7J!<]`C4ۇ“SSV<0AK]mB)XA {?}ZĘ5gYY,\\FlΙP &R)7͂aE%# 3de a$cwBɖ23"AܑS|[>x܉](aS^уrOHg:"?j|UQyR,;1BAB:ҖKA߇v( !TGP }iI,!fMyoTfDǻ7ZÀOUbJvUN*C巡,:T"ulV,+'O)́e%Xo\Ġj6?҆H il GM*:Iܲ*.+IT^1Ԇ\0vݏSv͆e3E$gSTM7Dg$uK'&@Z4ym^ဓ\3͡~@uWԋ#6` 2wGj8(]|iHsb1K&/$˛ݧ!@˙H‡&ٽ&Caƪ{sO&:5GrkdlEW++6ejݙ)L ԨK$l;#@Q"Dag_%D֧`|OssJG2mwXf̕+N׈;A2Ou4{5V &:1O%jjZ-sblÉx9 Qme_9zq\xfUÓ e~oSO=bv42lC%r|0 =U`cc 5i=ϑ~rrwiE뒼1ꂾt^GnөlύTJg!A~pͻT 'A1ċ.J>kE3Du \r$~32ŹB9qxӯ~AE)|Xp,cY%e+ؖwC5gA^㖾IqˮlZP] _xhovꓻ  JFF!WVLB .*B;jH+,}+}-ȩXMs,) 4wV HK"*HyzE=,,WEs5f#8RDgR00rҹ& @!]YUV$ bn/a;2bl9eZgqnlYc{ė"tqΘ;p9LpsXv1;H%|x"8Rz`Q‰7"3jkbFSݙI24)AmʈaXb9t&W<ٳbpYOry٥1OvlhQ ^<y(IO8nDo- IT^`琻a ]=F&:j 8z ߝ!|}MkhG\H7')HJcJ<13IiGK;J5^cs/ /*?laf+ CVR\ ˈPm3A3_ NI'*>^@t?cٜ;d=ʬ1tgh|ax9_P}jՃPcZzW}z$ðI$]2ek+`d? bkzMW#lҵ}fyj-rakI(2Jph B>x.iaL^ aVuh hͲ]Wt^(:[:{+JßOpXBPB`Nc}L<|/dQ` 'ӷER$1.3cFubJ?gu 1 YT₭%I:_@_S= CFW9 sj5c X#ϓ4 )K6P/ Bt`=ǟ ~p'47.D5uʲdj{\8r|#!%Y35v ",=Lʑ:L5pu ֫h @r&6SxI.cePCDуnv^Wߒq޺yXEu! ]fBc|4?/^ 73Ue,3JRR}Ğ`g,$1mC(oycl,H- tWf8rMRB=QvbH 8$iE1/2P ok}H'74um'~Ү~Fŭkg]%b^qx35xB;(QX4o)gɠ$gh' Ћ7##8nYP8{Ϙp|(2"8XƗchN :EJ|7ԑaT;n>Z_ &= sґJ&YA95Ǔ YTU&nmg.VR~}#ky-uά&hlnwZ#g "GC\xOp~a I_<O>P[? A:jH%YmmJ@kegZ3wW@V.? ZB꿏sfJM2VL66&Sx׸GeA)A=ܱd>!h( I?82YcP7e͛&hiİUerѳEi1 PRP{WD}5Oؠ6ou]Kw_q >D yyK a$fEFDurExɉaoI%=6Mu/)N \g2'_7Q=FX+ R<7) r&&DUMQCHgȨ6$CM)-J6G7㕦-''5LɚNlG2/3&bLﰲ⽾*wG֨f 'NJ=8mN <]Sg._SЪb{a 0㚞eG_M/urWk«сnYƥ^?ԓGx{40a 3}D$yNCŷddU"w=$aU7J]b3ɀtzcIK:1bC}DػtH.0s .Sg~H߉QjBgTOz>Ֆ KtoK"݆>>$K;-d^Chԉ#˫ٷ 3}2i6IOdQs/,$&Cy9jx5S⸱] a5AcOs5}7 Ei/OD䋍ZZ71S,Z'd:Ԏ;6ҭhmY; vo8a4f C %dDJR5-qQں\hzDMmTwm'pf|ExѭH"Q|fg~]@Bd/鞣:V s.h}PhFNYG&Z1>9/ڦdQ[D?aLЄ:X׷6[WCZhyVR:gT6ч0Ss674|/U&ȼp”X/\ q9Y&ņ'?o߽ZZs2]<52hRWt&Y@IE0AO)F=ZP2puY{֢N~bOJݷȪ#uDTiw[,PHg:Wpfl5[hwi laaXo ? ЇRQ1M[iRD*miP96a]E0Op_T!7[2IBUdR1.);2y lQ3j 6wkY q>1ϣH<;Vs;@Be.MF! I'f%&ܑ @{WVۜȱ;dQ-ZEb~`M %Hr~i.ySِJ2"z5O>{5m0_tSIYJӯVĶYX=woSǃ@4%U,!mOITiX`'R. ]gbU$LFGd>ï^j9ĊXu)1?FԈhXX67Dʣ3jI?8#MOz]<շ PRp,gt])Az.-L 3۸(Z I L?h?3N=濁;fAq,U%`'Vs%;D_8BWMSsshY^Mdq,iU) Lӝ Qޞ e4bUPZ,d6˔2XN adPd2RĚHKhcЍ|Ҁ4N|;_PtGӢzsD>) sEv^:Ѳii^(rׅC:EYL/Oy4;k6΢o^GkMI|UF,]uxlMPX/{0wirڟB ɲdy4k%PǣhgT'Sf. DS7iuI=A^R*ߎT?ғ:Ը3KvS8BaPb c@2A&hj3Bj)kP)^PVqPoE x<Phkv}Ĺgi 3j\8 *$ydK.ԭl%pH'+.S|U񣥽S+ra XPIb3\PY RJKk*=Wؙ2|?eǶ:A A&>;?[&)#O֒-05 |(*%v  W^4Ijp;df시sd#Wb\"*inΛX3^t/x4λm܌G?dx E.@nF"; ]g:e󬇥U<2 +ؙoRL_>yk&rhHd|c5 +JpU![څG˩7)yӌv݈= Qqt p)ٴ5`[qT?//ʣF"NaQ:N.!Y."1;h>an$HfB/x"SazQ'*S׾,-fu`I4%k䔩,8Ms(ng+m&z䕠5<"E,l|RKK_wJ1Z.w啘zv"EF]^TJ5~bI] Kdt ڊ0YOPQ ?śp Nh>WCnQcOGv=lKcFžsPgl?N#Th¼Grok^& ’{uEO0Bfhӫ?0Vhi}~,0&o_o5#<32)o1pJ}!G #L;i҅2B%>wl]DQr}bpPh.-ۈǧ-`Ĝc\5+ *>Y!}sd&;RNncJ}'!`dApQ$ TL!s.$es?W}^2Y(՞i@s~kvoO{wNGClaظa;ήj`aQm Z4tvd;i>DʃƦ/p 0mZKu&[F]u/)N z"54<>k:[D.-4#UR;D%LFuGɺ,T9.Ro7re8}RmtiB'XNʯuzٴ& g_# Q~A-Zq`6q+<Liۊ7_ytʉdq9ZgU-agAE{EhTLN"yE)5vEq$JD1@Yw#5ǫ1IKqLt2T,GUYĄ\gdXb+OEM #A:c)X#1XłeZQFhKTg~>?ɗM=йpf  c;+poy:CTxGSR"My}p|̨:zRP*Ǩ"\I)̑A8K|{`JIIwk hԿKQZ䩆;pVrmeA*3TdF/ `f|=IH1/>Q 6ggEcjG+ dYL]=Q<;Û=e2e1HLb݋Nr;0ͭV`ɶF|RWx aNξ2XHJI(6\LZMJ@+tX\H--pY C@!r<6>^Zn~Ɔ/t v^Gu# dU?XO-2kp$p Sd9LCeUuu>w\&UB.!Fr83,λK҂^ t{4 fOKV{-Qv>+ *!HVPcސ9d d<[ >~=T_Ǒf@AKrwp>ܿ/{29,ݷy&J"# j' \Evs0zG? HԐbó\Fտ^r*d%m+|NnK ΘOyzo`E eE:M/@ iMX3PvT2Tix(O!xWN?)DGmnϯH 9דp)-_t^yoJ! >u.J-6!'R|KqʶJÍ?Th$K|zO2>4GJ(y'\F:~?}i'=4 VNwWQ^*]dʉҁ0Kl"ew;u4%nUMs {RUH)Cc~gpWye:gpG7 zxŇd~2l lp=hNr) fxI6fN M ևG>/̀GN5Q:Ukiٵ|#V(ThHCVo*_m(a-ynvJ?Z\{Ϸپ L[VՊf `GG:A]W\vMHr Б#.='_uÉnh7H&؇wuy|UN?70y,imkp !|aZ_Np\Oܻ@[* dSݳ1%h]`WrpcIts 8\e碨B\κ=Gw߁a>1dIs?ǻ,Chˮ% CcbpDQ _ދisM1g= 3EVh],fη۾^`öӽ ȄA=f9T)lyUw"b77v#aqfUbwkTf./cnCvLmG#Z]آaF]ɳgMEʼnp-';guf-:*L`Y G&#m(lJxz T] N&AC$#ݓXD6Mn0 {VI Y6BC "(av`oh B!'+ƊT0I } 玫a7A,nדT ^a(RB5$]k[@fFFX?aw[(B+< tR@=x_(Tw ڢ|jց(/:]~m!+nmWuͫ-Ah~n!UX)уŭL"[ѝT<8ikA o;|&bG4XQ]G0'!51C\O]"ʦ#qmv"ʄ1EN TìWa[2~}┐,Paﲆn7ڠ}9 Q5ó&B/~ LEg'4Ou@rze"g|Yu|7 G/y}-޵~-\$(C'1\\- ;qfdxVtvp*iPv-KD2e%aPG~&,N!NOuѭ )KX- `Hv`l5Iy|O*%m}-*bMt(5qi(>΄ج[? ./ 6U1rKDy񥙇w4dN!h/\phD4>%Gk)!mV7`su=Qx V?ꋽ q ͇M"3<9egtݓ0"4ph\&3pbݦ5.T)4x%c =.Fo] jO:tMTPeUA[WYvCYAօrE֯ j$wt@5Oڈ%ƥTVT zfqeɍ`t@~DU7.ߔ[Dv(]wq-#c{~z@U`-LQ hZѭ=]ה}~sH1[hKQ!p6*K&8?rΓ; ZAviL_XÏ&FeBB]NS AEnY Y:p,‰;|L#l[\ķ8b1^SEJ Hti}nk';>] W7pTlKp:jWv<k@IlO&6+K. G$אgMrmgٰ`Ux38Sh =ޡ#wQNu~0#ѫX:4O_RIqauA?G|2<;.\Fh׾~8ѫ3XC0fUڻ2Yv?H!>AY 7Rec'%ms!yۥ۔ZOQD\mW~EQNj˻qt:S6/$W,WBa:Ep9x?"Jbl|^Ӛkճ XRsK1[j{c~qf'Ϯ-Ͼ4<*jK@F1ThPz$Zqnf'8ާQe vQc,'\+74wMz"HoE:ܧݖŹ¥U5v^>0}Gz.9G=* "DjE.] 4@(+$$4{DObQ.l,6Ć8z 2`w|)tUz}fQfԼ4sڇ8vPR0gpHXiKalJdC#)+R*ᶒ*wۜs@b!w` 0vChڽP.. ׼_ْet`se\bdO*uuDU@)\ڷ-F׀ᐖ{zh2LWĎu {d%SZ5Uerh,GD@؃v9Cl  2v::܃ob\[UKŕp4q3͠Ȋ),&/ZAn8wjr3r\|NBrIp`Nႊ&\ϱB|FNf,^?O+ٚ$0Iz'\B5΀U<1-6/#q=ؔ>Լ8~n3VW jQgk h }41K|Fa[fkI HyQle}[j:?r$Pr[50&"4KukZBaLZJOk$w#;-qԙ*whc)Mo)F ZRsjED8`SFÇwTGYr"K>e<#<+,0AOSvWDNs-qqk\=2?l(F`L:tcO)i֞eP&1EcyXԨr)GFV{)].ra'H:":S4zha1kSj+PYqv>U/%O{)Yx=vwozC󷎸K/dX%&&Mn6HY2A`(x>Î9YR8nMD1x mÈjgiM+ba<ύ#, IdF6QIES={W^[X?; f,Ȇ_։K!.ҲI;O@ý^ag I5outۂ~ Y+ u Wδw+nC sPxWw:ih@-kͱQ60v|XDFMͦh}uW(n y/}![ 0M*g띔 AcA>S8. p`3V; wQ/0.h>5>e{s9&жXb|fHJZ(XGd PTw"A;\cQ8):_ʶ i}CxxVWjǹڏv˦qո Y- ) Fpbv1E(}iR:ڤkT$ T1c :p68?4mAС\X?17g$HZ)3NFQM$p?tYdVZ.IO١o\Kϡͭ H(_`7‘sӜs6r^ȷ1ZǙ>%96[p\ 9͜jڬ@n^w#"@A܎h @B! Iq ng[ +jQ4<Hwˠ ~sL ~49N{,ǰV%@{n'BTke9;Z3̬xq΃ ˝пrmP+ۅ_r cD֩`ɪQ)CeI eXmP*$6ZasB9̓GջjD TMX&Y$Ծ$u? kFG@3c}dC%mp+&D2cR8՚& EޝFTނ(<?+3TOhe iI{H4p< k*OȐa,D2Ɏ+nj.~q 脶9;{Tq:пtS@tPV{ԐMZqNۜbO<О!PMn0mvky~ǒA J'?_r9Wft_a?O?W@c0-T,E 6vEb+@5EtF3%8XSczh-ϠϨQ}9s<$m6{cX: Yw(`\Nڡ^닡n3 wY޽oN3zUTȜfAjpvQ?엞BmnE*%Rk+Z>5S^uΟZX@4 Y Y#|ڇ9sSZ&-&sښB? ^Œ /Vqj?.S_,ob}B6jk9OxEZo#dFx!vBDh^(TOs(v%ْ#4V6=V|n(J\GXUn33<QX)C|^Nǫ(7"-##ski<ϗ7vڙ5"*+f-dPߤ S7h)fPr6e/}I"Y#^|8(9S ٠U:j_ %cz}TD?DCvlߟ`8g"\ܙ4+M񊽣C:r!Ba}'2Z5*pDS b{@jW=41 [yQhg:Sq#7tCp#ZYĔWTCkVcCGm :JZ`HIn+~%Q)<,9 E% Av*GICLǗ[C6 aqhKmb+`jc?aGe5|EJ"@r.n_tA%>BWQzbRfG \,CucNy'ﱢŐn&F&d9mRiihAͰ?9xf,V3e?Y9ix;i ׯf}풥OY" CnӨ[N9 ?G$ɰ 6xW>d4uL: ?edaz$y]J!m8Wy![44x5~XT+)|K{#ɝd޷ž4.G[p\DԅN#/rң˒ն`[+=B ٬s,3#­Lg+Wk9. zœHjV{e=Vyqq3lI\ p7 mr݇ L- "{s^k>^ #/oOuFq>)a]kHy0) h}k:hA 4u0yWCGcm!2]U2ϩ_5̓7aa:͖Gg1r$Ciޚ_Wz0rQ_ihWh| t'Q`#IM'–εZ/mH sRQ$nmBCݬA,?PRЦn!oix $QDOR$_~"jBCj TWU0!CN>] l6m=s,ʇ0?+/9*!hL#YT1E/ f'>$D & ZQ[cMV}^<_%;@1q@j1G>/+uP©- &{({N`]˖  +533jβ}6|2;v<<.JbD}fH[c.jӕؒ6H8Y-TAZS z`Xlx 6쨣P C*æ UZ}\O(1qiS(_#B$idҩdǀx 6 *.IvvxMcH[3sxmtL*lqEuj(φoσяU? `v'?T}3zkQQ/v*]ކ 8YVVʂ3ՔʗKNsS)Mrƣ^br ^}uZ˲M`[>0}|KAgյ* zaj yؕq=pOw7(qg7cI h /bu:o['#]ƆTz. ]Pm^d A%9S\v&OTh7> yEȩS#Td4Ueh4)N >G^#,T[plS4eȰ]%x$x.L;,4`Chp" pOQbAeoo? _*c:L,PTyJ֡R;}^,T,_7BΞ$$CGsRMS!; M?>)=gޢ|͛h$jS{j-LN2IpȚ@zpUEcg8AEw'oK\ MeHE{!(9GI{QdGpT9pBDk$}K:%r ] - !Ȓ&u~`'-ĞwcwCDLĚsw 1$Aj)(6|'rЙwx;C-Zs.fpbw~,3@{EcQp>LOi:rҤQ+5\oe 2 h.}|IȁY([z\pA@0|V@uc Nx@%{/42ζmk*IhL ԩIS Mi r˕`i c[ z)Lj[:MQd햋 ^ 8J1wj]^RY9e% (wn y? zI8]Dg;v^=1'7 l!v'ux[ OۢRf(egssٚDe{'O5_SKdP὿#V^S(2t+̕ #gplgpyv'~֛,pTجf:yr_2]{8bP&xi( 6Dծ**<9nl AV斪KȎܙ.'em%{;j߻>dkqTW,;))Z| l,\p8@^s [h% H@B^![ٷI~ Bk3kTbQmO48U7%mwb쯝Z8+d"?6O-gDV5G84|"UE+_1[or? ޛSyP%URRRqky"UC@ =ZЀ`<.gVxϙ$rƸ3%p{L:l6&S1_2'o BZ?Q>{+Tqkec#Z4*v"9v!Ls\HK/_xun'{1hY% YU++@NP0&ⰰoZwrdJP S3Y* -Fr˅eL;1:K͏~Jau@Ixe.OM c޻]2a>H$\|}OƐyQBfL\H$^n=Cΰ(bbXr?H|:yܽDRa𮿁 ֛L ~A`F\??w[Lx˻̿j[ ic)U'}Z]f9L'9k?b]VaCS+"3Z[9ѸR@w^eˁ5$l*>27Ǐ27>1nYS=!7P gUn,Ec6Xu+|/ጙю/ |?5 ms!8q}譕 Rr[NQF9oBܗJkXhG0k&֦$?vٰBp_dnxA I#!:0^wVI2qe4 V @ReaXwq*bf5N(iYSC%N *jb, Ve;jCC&ބ!['LJ!e ?ՉXл69.$OQQgJS߬b"H3])x I]Qb&_/HO:>Aak2ڃExHgija̸\5'6$"ύ͞ 3+FpZ KUrlZﴷ=kkhJti5[Fkkb)b^ƢG; Ig' /W!$ǬquD7oٖbYBCjb>0;,m{#[>"0 ě³g0~Cw C~Eݽ = GH#`ߍF|Ov1 ʨI9%MSUܳnb+ZΖb. < c3eԗY H}uJf-V{b~.6$g }"at2ԆFqdL_E  gxjˡz~Sr0mzj\pU^Z;zgf B&bQCcRR1KC.W"B^#)dŹGU@8Je'h23DUpIaz=ȟ\ :&7wU6%tp4C4|Ci@89i]ǘϡˈ`*]yFJLؤIݍecgSL&p!g,+4Q43RW/}c(aIڵ7-{0Xv]}czlht&+>N>3Pt FпX^Buݴ%@N_$uv0Q(Y ٍ*-1) 4՘2t|G bͼ=ϭR1XYoW< yNZߴ:?fGZ{\CuaiLR{Xscد tQ\)O;d׻UF{`죥i${% ^}fZ?FD!gA3vjYLn(.V3eOKcZW)#;` mVދhˑ2a)Jjȣ-+_ :Y\>2RZ]yLr%7NWZnIE>u|~靐$DHd @h".zH/Hѷ3Ann5W=PyEKM noƈAQ֭z7 Xm65Sv0/ N3E_P'/1u4NAt Qf#\( 4# y vsxjvz=+7utX'kcLd,;f"\-â(#]YdISdYMK9^_-ĝaٓM3!@9afbUJɞ}J@͓Yے <%'ZtA7#폲,B%;3Ջ$[KFU8^3kh a]cD "xgXܒJaQ1˔W[ P0{;D(|b{,Hg=MG$הɆ<dzB< xأ4r"B6';Lj@@Rֿt1AL?y!Wvq~Yqq!ⓄXhZRZ kt)MqGOW]LĂ9TV0搲N&{ )܊`79'\>M0w1Tl eO rBb,Q;o,4q9? d.[=|%TܜoWYgCI<<'U iU1P)n$bIW!ٳK?ş7i/T &k<8jA]?%N}gv^S'Bʚ[@_O"RfAtєW?q>QQ@ g3S\l1M;Mu|#E!i@Z Q#شI. 4hs:ӗBpҲ8Zi~W]c]tKc1vrH}}~3c߹{YbZ+ӪjkB3犢 Y3IeP#3c%23,Za[:OYUK]lԖ|~P8F].=ɚ h4b[_n;==Pyf(\-gm?FNܵǹTI\օ~dJ(f;P&{'v.ZĽ=rJNlaN[h:S+C@at-qDa h Sy0! WwRrʼnFV8y'<:k"ߖ-۴> \{K%\L>oب-YHL"PIC"C#oqQ^k5d/$EN s.VIvVxFǴbਆ7$t9TOr8.$!SX&梞qEAv/wgjaH֛v者 ǘb$=]Yb#/\G" Di#)'&CBO'IrD ,!2 ~i0y_!zM@Y IByzgДAc+2_g0W{қ'(p) {Ľ""xK{W,h_71GF`\a{Q %rē5gZF_?MV +wuP<:HZ\ b4j$(piB!Aq)'q4bXzbv>t p[P>W&#o9^( T]wM-e;+YR= SbMMlNxHܲ=]=0 %D} ǁDU/n_qE4yj;Gv9-QN?f?n⛤9eR {5%d]qe>qXk%eY(fšS[uA89Jn6{6tǰ0FpjoSaʒO|so SD ɲqD-r1BхÌɔk5Bf[mWbNc;U"ߠ{~hz^ [N 8ԝ)MR3촀}A65ܤ|CA[mzŧc1VΟU(fk'um  yOݤ1;\rgeyܨte}%zye]9c(Q*n;@ZtB΁V;7){e&-)YէcG 3/Y+q'oM'?2a.-c8Ϳz{TqKQ -!:z xպI}Pjy98&!H|M#Hp*T 3oőBW(s]BxnKd=;NLn c5{N*0wy1MAgD |#N^H5*; J#-ф?V۶bbrOXmG#_[ 'R\%m;KrG${)*@.Ȼt)u!d@- yLxkr s֕u9ietH*q@D[剨Q%m\o;@3BeFq(oD ٤Pn)l/D0ۻ28̫% x>xttT50.($7h[_R:a#j Rj-B&WLB6$>VԬQ1݂E:-^+/S4..sXQpVtUE Va?,B^pwW]S]p_ ƈ)|}پO΍]+0{Ocy>Am?RcܻEoc+OOz}ˍKVM+ze@٥٠n$N@,ǾÙz޺OZ0Pi^1V\qX7#xTG7Os6Ə ¯FJePa[=_ⲴZ Yo)_URZoK>uPu={:{/1Q>\ZMx-]  aFtbBvakUֈ|1V\Utm}+y/HWKD Yt7w92q, _g9ڴcIaYB6BM.oEn ͣr˦86x4 ag^9k,tby]gɋwIeyjL"ꋫmJȶAW'vZ ] 5䠞J Bge~G[nۣPP?S ,Uiah`'W z. ߇Zg[_<1iÉ]Yt}xg XZ~`ctOEddiD}mi*-Aהn"vB,d~Ðm@ش,#7]{럫l@90fa =w,s}K!9ސ^t1R 5h:r[GqsY1UJ)yFoGSRɌOe /IsM,>q&㺎W}| 9%C| S zK4QĻWox@o 4j]r9b_y1;ָF#.v3q$%'dC.$=EJbÈʿމ@#*=~Z_! XzK_A)߷0Q8*lX{ ¯e>Ȁ~Ԗp4zR T %cr 'GQǙݔt`eRǮxs`A7M cαP#]Q%03|>j b;S \Yr^=0 S)Bq7Mv)jE(%M7`~~4zgw3Q߮^ y'[!$_XK{|A S ! flwVg(T: eӽ{I#!B}`ih_PeL+EA%`<S3 I㱾xlª&1iq>_ 9?+I5%܏^ZQL!Q0cSB"KB:!y,δ?7},-m~=SnfW$dvBn&,]-9M"[LNn^8V[!#uڐTɺ0䩼)hXE 0t'3KB#3:ڋ=*pyLh\L`ePA;L TJ>qW#if6r7.j|-{ݐ+SrYvo=RЌ6x&w~ZFT HuNȊbfSJj8tA.2#B 3sR.@F4KGIz,izڋvUrEePkNtk v(>9?4ɱ]GBzf3hwܸhJ3xΝZ޻?,eXEb21 掓t{!vú{Q-nl#!#fJ;GC!ZujoYܓMq٩9z( Ut<y>t XPp>sz V|B?_mOo}Im1:ktK:,|j[.&"j@npV mS=֛y:'[O'!L8@,`?3=A0ˡ`". dmJG-i."ҳh8i @¹!å56H`q9p-mMH*H 6ZQ)dwd9Sb2pE;QNf&, y%!Z5v3([u9]rN!IC+7A܌njHC=\*Ʈ\^M_>0 -TOJB&zW`u *;?eݑ(FaogZy&3Q%y?MUxPJ na.^`Nkq!c:tY ;>bsuvjќ3HlV  2Pd{飖)7[8Fhԅn ԓeLk,QUu&?wG|ǎO?߽k9Clk𓓒983+~$5oUw^ơrox]&F2հOs%ਥ]Q/98N w-.wJCo"Y0P[*ud:/&Suf:X[QM:;y=a/x~˹c\j__ZW:W#'X #$MͬFe ۲FΚcء={*NVՌRup~_nm!^}߭K6\nЀ82A|jj_R,jgᶧ /_C0e1RAգ=XD1 [!&O5R?Ԭ=͗.>%#!v)%5 ܟe Iq N V+~qfxN!ѯO) |4`U`|F Ft?TcV f }|Tf}twCRIJ/&!Mȶt8UN!׸1 XWJ[ fC*7f:18\tH1G8:^WfD`J# )}L&^ͺs/M.w/ʢIHJ3;#LAa=/K )ݵK+|@2(U\XH^oauTJ09^O#m3Ӭ IB~*5לkl6Bƺb~MuXv x=y 7@uX Wf0*b+ @K{K!eQIe`ljq΀WpAlJ2Qv1}Mop_^e<<8vÌtޝ׵ @o Mf}ql`,j}P z WB:!"@z/E'eUy\'laS3v΍ <+|/>_/Qv f my &Ծ1x7i7p{7 2}h#1 \[]uq/?%6{jWg#@:|||cz Te`z[*qy¥XgRe-zZ3ҏ%Ly5OnG3P."1` ?4P^aY)vN /V}bZr)w-Re9va#l t&6y:B^je-e$QQ&y-KW8yAd ܣЋɘs=[]u('d`k 2i530zpN'{5zd=+&֨kl -Ǿq܋ǴϏ>/dr.'OonlX\Z0ưqDkv(K)Ou?xc ZXi`vêv;3q@d|g+!ݏe -fdDs3\ҚLE$YAg`_jC9VeM)\[?By<Q6wF7LWR^T;}ŻmO4.,0 V/$L=;Ta|.u00+Dʋ`ϬȐU}7䲟acδ"D쓊OD~Pa( %L5Ӭa\+QYK>{Gk.sWkt|x;3a&`_\!"?k4ϔwQiL`["]h &vPN r1z70ҁQ uӓ#*]$_~OxS8cxGOze{>\ٱ[Y*|K'31QF>3@{p&t *k!K 6d )jzZFgXbQʱ[ J 21PvMewf5KbE.ZmwBHM7WR~5KEeShC?H+C{GLW0"|r_g*S;)× :0@}: iGõH<PgkX.D&Y4j2;e8\#0cpJ˄<7uQDa۷A,ld= ^Ǖ;4Ti+[:+za> Qlj.c!]#ؑPj$X%yt o2 xW\A,7Ԝ{pk<,x*3/ˮ-4ӑ"/t: S=g6@TڳA8620>S*i ({S X`"|O= }r ؃WSWqjqƲKKLtE4=Y:oaic/ ӯE6M}|S#VJ@Z\(Ͼ3=l8}~JG,]!%ȸa"M6kmtuGb{S̪vT{1v)e! y} D-spTnz P;c 7)_#X=e8gYxt{>]wWF>Rd[g@tD Y3Y %্:(g$O::;VN]psβuIV]>ѿAao B!4 c%]f( Բ:W7ZipIۙ//m2'"LO$B"5}7{]!$ܤH~"O.n\y]COcbq{IxsoNBU$K˥Nr 7޴pȽ$ilAq`Hoa YJ!ly8G@\'`L cTsd9p- pn݃,9ׂH~NѠ󓆵eČIATx$TmծF*OE5Ҕ1E-_Qߪ̟,6wcYjR/=t_ 7ֹN$(TykpN/ւhO8 iF 뗪K HHOoe KLr0*'_!> Ʉms==Cr3 1uZ@x!AtȲDSه$VŐB>M,ځK̷{mn ONt=H{7?.Aݬ:/JZhB&g X2)oBͧW[se"*')IsҟbXQN9s3$ݴ:φ㏩C27A)d@@^cy0>ǡfԩWg R`a++yP'q;C߮I?n+~ɂ<JĆnclsXFpJR6͌dpDIjz?duʉYA0i7V[J, [iSOmO%{Ax8΋93?#,`ydc)tiMRt,lB\2Gɛ"P"Xx<x#Ca33]'TK{Ek|48*%ԃ(mլ^̰{ҏ1UT"|nuTt35ΫBzUYڌt)6}z^t>~be_7ŧy.Za!tr?LKq,m,H֡6ܲSnƈgPtbtr0|XLu f(AE~m.!T굯Wp]CHfJ)jcZ5|kNH <>Bݡ*53NPvX$±r[zdsǙODfJ@T1% Iqba׻HEZ-)1,2367 DƐDʆ,1bq; xCEe{:2.vjgv.s=)(&8l S#TP [,82Vc;,÷:*&m\jvaKa[ݔ"4fDlb&RRx, XsʵKz%k-T[{RjWhABD`yƶJBeǍܶ %nqQȻf"o2T*TmWEn +0j\v a4AE(K_2En7ŝ춣:)dEq;|6̵ v,V9ts my7YݳBA) 1 :Ble1uo4jkcJ,CB!wPA-j|UpJ:K+--[ >M^>D%`R9ѾD ™ԗ́[Vg#<N pyNRx~$dd ibN.\ ) UJsv~I.k\ W_̀6Ơ΍7y3|"0p}żd>TZ}ín*ؼqn\0e;ҝ$@+o!" N -C8vG/o~w8L2; x ~ 8l#ma.ۮo]5M)s?ݨ &aA`NhTRBخZiO# Zm<-BR6h:=2[f,1tE}~ZP\HL)klz6$GUBȪ@rJx|eMN~O\9v ߩvuB~vM_)`y9k45E=o#Mm9ՀZ^IgD1 FwI~vJ🴴<״=4+O_3Kw<,F{l5q&'b;zH};Gfۧ 9>(d{n.3K8zɀܿtub<5z_{'89VZ49EeX\$!`+ s$󷙞!,4׹q=Ei_ vH\ԝ'=LI0VYI;hšfYm aRz 3ޢKͦwdJb]rC\hlvmk!3 =M wύ.~uu)zl ;LKt-5{1Q*yіa{ 0> ugܛ¤ 4;98M I{i/Ϊq7Xh4&fA&Y1h;AE=e5l]hJ7HIMP_\L{0N׺4h"Ed.;Ȍ>5HoQ+gѥtuer wClZo&|Ip4CX[SuU0L-*YPM0GZ,r|zˎ:GG=[ɀ~w_L`jRP6=!CW>Ut C!ce[ȋ\UzXRDVA)jrԀyqrͪ|wO2ԛFOl;0VӰpa_plb* d`d_ xW(|G4OPe] dc'fbĺ4G>0L1snMD0J zw|sbYT XڢH<t*ݸ^ae m=$bэAV# (yd+msω!R[J50z)A ¾\EpNꎂ\&2m1+7GІ]:hn׃ܶ|Gs"hNxy^tI{Ȕ|5]`ud"nkc,{Μb="},Poe ͣLwcw㝛d۾Cװz^bJp^$UԒҸŅ qL9j Zk@1sz0)4Ӿ@=,}[NAm^O\\n9g6x C],:kO\AsISS]]e޹Z,x>X[^6M4-(`[Qd=kc.2gH~f#YçE}fb?o{00=m*P2]mф~Mznn\+aWW+DXw+7̦6\qvLvnl#p)A lon#]'rЭZpJOV#!I2^ b&GS?LV]vI u}ԑnx;/n”7:->,x!6END/+1x_3[8O{u33 muLԴ2)x$p,><&o!Օ`v9!꼛\ZBK,&B%:)7$k w%Z`.=#BΗ!t`6ɒgo0 fkvӢO_Fn^Ե'][vGkb| G f]޾}#@o[>B%ۜy;0036^SB\kq3Cvua2|_`QoG=4d伅;iYF/u7Cr)amK`:V8뜮LK*d\\AY[ITWk5\zSfDX:*D GRz=9KJųˡʪ(pDHs-\,B'Nwۗ MLrˮٔmݣ|>N۟ Wa>zL !o6:ser1tau"dR0WI@Y pBEյraKZ&0SOg^1~8Yyj%<R0I<3Ar:>|{&y98W@-`oQ]\, 6Ic3n 3[Hq#0Kˑnw^c0::_kR=SFX_TRA>LX)OkJgGk sI?yBс8 N9$/?WmҀy']YSL%٥נH2moâ{Jx˷%uOߝ}%aI75u9cXb9~HM7А3GBuyOc =h vXwv-6 t&Vo75b{;u}3̬]nf#hn*\>R z7U7@"}}ɲ`ao> uG:@P _J@ǛXw7w-[Dqw zpA :U5.8Qt@+u[U bJҬE,Dִկ!]!yݲ`RMԏs-: U@=M=)ۚ"Z?On^#&p(HOWY=b7``^gPI'*egŴ '~Ux<5хjNaԻ\!H1v)FN+T4hZ/0e$cm+SpHF3:,u W]4K,Sw=7.O9D zƸ0_fUB$|dWEEH XZnyYH BsK@z>D&aﱒeЌ6//,4$ 9VQ (=ݭҡu. яa~ B1'3 JK:܎㍿{h 踅r[oN#(|mkTlDvU@ri Tsׄ;zQrċm⚝F<䇽Y *8^qxB`if\ZkM=АKKxwI,'ޓ߬Oy~`KpК@C) \7uS5 >_A01BAaflMIiv31]XۼF;@b6ev'|d!KS&[2_Ct|u,?=w> F;KQ\eTӛЮ1 njɠ*0wx!<P "rEXLSAy- O`Tu qt_2D"@tt)]h—.tzY)k)z<9zNⴕrvBd*k Z(ۖp _ rTBvmn㾗 Daҡ2+ա0Nz4^"N bǸ+U;)}ہN8ASHhfH.占-^j:!7s5Ct|'ڣvkl'Q@&Mpݚ /.DPy : @BRAYYiQkLS9nJ{$ߍ: ҧޫHίZဥ8yA,5n^u䜬w=(7Tx+3S`=3>tє9#dM8$U֥G9? ק1<9UpXvء<.`"5UY1!(VOܪ)c:!ReORܦ) nwu]s 6ېXT.p |n!Q6>H$WLPۦM",ɲݷMR곃D LȔXTbl4U㇖JPJ| g+Ǭf`_sޭzHaZ>~s9g~FʰPGV6x-ENcE$#&u_~7oAjx; GNnua^7yCaekq:]7\߇틘J=tMl]%PyW i2gn 7xWr׼ O#?" y Sҡ珃Vm_w9y.]E YɸI_d501Cc+C& yR`[sMD7LX`$KvS[+ia'hT%4@M_sku#Nʬ/( 9qbXd6nJ6QW4'0rꁐOO@yMd_pʴfuL(-(ɧPX^* [ւ?}Q[0B"Իk_;N3=8y{wDJH q#GX/ Xㅆ},o{X.;ɴW۵zI [#u;$>x=W˧ b״ rD٭ɝH/Njp&>c" w$N&#j6TN{'ڿ(3v}2Wg߃|[0M򣭁 ~y(L3'E!LPl.QztJ`f(fqa/On]}o3",fNsoɜ$^ f@~%Q4if30SwOjA?:k+Cyhvns-A^AskiP-ok9zgv}p|JYzuVLfuRˊRޒzR{ɔcI8ys$ A"z-{dTh  (V؅m 皟q*ӷZ{@Xn 6@EadbOVXA~*vTsךPv@ sЍ BciH@[c}?j?pFboyeT< 좯J* ?^ Qs4jzu8$Mڽnt ?>U@Z3΅չ?1M0ݣ|ZfcZtx&KT%H(j{$b^m1?^bR<n]<]2@vEpԼfMP#Zz'zv.aB城'`eIQ.*߹!Z2/j*<[X [Ǒ454ٮBgo[=: WfJʉP8'O9g4)Q렑@e+G¸YB\ τ K}~7fGi'͓+mO k@Ws/,(l2< 7޲üy-eܳ+(帴rܣ p{tXuȩ( ٘Sa#|^щWQ,trΔ\qNj#Jj}Wm04$G.>,Jjz6RsLwJW)S pAJ {6CH$/:m"~αzɘ-6_@~Lqb0BYB{\3MuDEUg|;?A (nc[mԖX|}~[. N =& xQ'b]jVV)H9Y MYGn6{)ӫF?Vj 3)C60mȃ?o4  iNV?l`]7_̟(9 9乔 ox0Tّ2 ܳc$ f7y~+ՙ$! Mu&pVkJS:0/cXf\3~X۾Rw39h(6eиzW)ًLn5d| 0rPC'kFp~ ,]י`!0Ԣ,1%il>`n<r&)#R{2sީU01$d0dM*_'ReЙ3NQso[*DEEFxn(Oj9H6&|)o*M" +ACB5wFTG8^ZF$%ߒ g90e !^m1=HfAMJ=hE+3vB|P۔R Bmix10ғt?9!ݿtޅسi^f 벘8E"K'șa+z,Eh]yňJYcr;<3Wa 2!Vp󨱁ԃA*#,2wTņSL+S |gIm"|X {%*+!8ժADb((@~-N+̓iZG]BJt7mw ):&gR`Ǣ->(w{o/5'HFbt}S(ѣҵ-ܬߑ[э'oYWĎ]Cd 'SOwckEP|L+` ъưI_IŏA4')"dLq;iI _$푒iZ|hޓo:&o[;S  JW/(M\uTւLp/y"@iQe-OR͊"]׬£]DRmy-sif(i9Kls6RfG?hJDO \f45 J' ziUy_ * Y3L\wńrBfj-ؐBy3_8o6]H ikǭ #ثi31?`PW՛q}891o)w`,2@p>SL;i&EEB0YRiDx}3x %h[,*ٶ*xLZgDCRqUOq hd Izd)=M7yˢt21u<e-]ScNJ.2O)ԍMC]Baj([ hnVDG}}&>Foư؏v3nRF;З 87(ƷS.pe Mc3\^Ed3ĎN"X0lˏ i#`?.ڃ S9- ZkO]%\+u t 0!6xZtd uX΅+yRՄUXϲ0XԘ1=iу 2' mZkh5KOhFUzp Wυ x1+.1F85 _@=S֞ Ryy(n9rPLqU)A/X;R+Z̕OUc[A(V_ CB.Bx4&[7xǝ!Hyɂͬ6|Ryn8\ uC#]݁E50s̫ju[z:S/]Ǜ<"|BJ(h`ʾڽDs(bCMTƁ$6`!.ؼ~6] xl싥}HZ#:~v.ж4vGy^#º&^꽛dA?Rբ;zSjɹowklGrVz]{!@1Dg~"gkj݃,WyDHN!z{ƸcDPtxLfzFݡpRe?8t,m#a6 )}a`ڰ[w?'ΎHX@ǎjrAk͵r I;H\h92Y~Pi5ˬIXFcY>+iI.˽VqJr| aSVb]`;dXBnާPL |V[ H-_vw90hUT߷j:=* כI x8!F.:@H g*VQh mFҪ|[Cc┕(';֨*e;vx/8pB*ZZt$@éš[ƝMn$b53d*i(=;2ýf5m4~7-tu>]JB>V tiiH`"NPZGߏ?X)eSbdYJNjy[kΥA\ґn]QŅv$G6̣[KJlƱ! lX@XMKՌfŜ%L)Ɖ] N_`C} i6 eVdRH2sd-%/Hc(94iw }>N}˹j8[~ p0H\R=iGQպ4В 2ZN{okح=-wDr DjFQ&{*FPO(vpsZEgIفcPwW ^{.0W1KkVO;ii Mc-RK^ qzʸny~S͝w'˄ӴbMI⟖HJCw{L+,XkӶzZi8ߐX b <>=&hxT!7_/l_ᗯ )Jْrܴ׷~v^YYqzjMdXCa gr9+eA -ܜ.&|͡ PX1N#lLt"V-+^Pe5WI3 /OЀ֪88 jpjxZG/ɶ ϰ$9La9^V;QCWqB6bbn}.g8M3E{䊣]x\&.a%8b %|N4##i]UZyUE[)7EAz4񐒈7\qcE''˺50_|*9>gWG9) Fp_YdÍ4Z{x&Z\?&N>xȢZmkVebc.]tuh.`*}z'"g<P#O7!X8_ VEn.b7,‚^ ƝCZM+PIÃTpiEjbC 0Y;x :ϟk7 ʴsT>#.p16ㆆn{|3kzbͲf {p**UA,3C?4sBՏټrZT~׽{}OО7]L^SED]<8IAj}ߐ h)Y픐"dnK?;a@iյTeViKc$@\$NKi:i #;qB_m 7jGՒӷu摁="TQD~34V8ؤ% ;CR%'V4F`Qk<&-@l| x$Sbo7aՎ zԨ$RŖND<>uG!eŞvfhi=ƧO|;ְ$¯\7)s*ټg$(/{ܴv.z[]ֱA=I ߥR@'T5Iv {ߟK X( ôb\93+I^5 5S~UҪ?e喫ܯoPhGGeb\ 80PGq{i+%$衃g8?SY<^z`n x95+a8B1~mhueDIzxpmDns .oMVX;[!8w.ɶj0ڂAz4a" c4NVA!F V<2owl˰bM J3W|2\ 0|&KM/9V~1m"4[dVLfss5{k3u q߷@GtziluII3 xӍDBqkA]5So2 =8a_V{%, OqMRvFMoW%3 ojﱷ1nis Vk͘]t;qьڋ漚^)Qc#D ^-|=^/]/+Bw+n6Xy(LXv?Qs&bDh! BsO0dhzo Y30I}sD98z%,h>8UW["٨kK½tG\78 X۵a#D_ǻL'݊ M^(|y3CYt0g_VEQ9׊d/؅r{fT9܏QEmށF"Vd#յH:hbG&lhH27#+t\0g21끱Д?abHu A: u2Ge fL6)q=zN~!cQNp/< BҘ> B~GAo.UOf^vue 5vGC, F$&s_dᦟ3$]ҊT_\֛!wsGwcr]MO Qxn{ѲKz8<[cMlP*k2$*p2^؇>̫OrT7!`'Sl^+ضZm'MusmoAӿ9=mk.e?eOdI 9vK-@qUP,Nz/,qµN(gq)iPr?<ׁk&;}"GJ>iZ{r|>9X{ϕbnOh?+r= *]U 'D(.fʆ\I2〰{MMt&9HO=tod"*"$_H6iTXP-ׁF< \ZeйL]hRJ)[T͙}w-ZPxܶl'cn$Ѥ׹s⇋]ې)5t^3kP&;8,`Xd#;1Mo+AB.L"ag;t{n(3;Ͱ_i`yrDl?U;-%iH^+tڇg[\bRa?#!vr=".H94UrVUWTGg(j|-f3C6ھL4#A}uÚݸ\ο,12J1EBˈhtbʙ[Kr'wzet/]'`jE#1u;$JZ,ie7" j= HZC*fWLr<-Ҧ%K[hVLܦp_ee> ̨LF$ :>PG/]\w}Il# W%@Xi P}^&Zheo(9rYgiMKꉗmW՝naI2`¡젟殦&ĕQԧ/£ ɲ)9`;LV2>0ඤ٭49Q\Y*yrsAJ| l{.r.\x8$'1ZE}Ug,Ƈ 1b+0.|KQxn|`YVCTTNY 2i%:V/W em*hZ{Jr8ٛ;o LPsp@O/85շe;i2xvn=H.~zsnh=()&c=l9qs-_hʄa f:> \ LV!Fe,P<7Cs=Y:n6VUM#)u`tN}֛'.e%mXdu0M(-*v9Tx3%85 )*jcՁ? r uz؞ N3[08qѸIGO-4_*jp8[򓷟̠`X« Ö=f6ED.0p_)5w;}aLWͻclɩub`v]Bϋjpxd(j<z$%CCiVޤ h@h$<\2}ij1W$c) vUtU(T6lȎ* :Z;K''ipTūcup#%zj|b4u?bȴ݈0 5X*(_(j0[]].r54\SЧ9K1FL9leN'UuM`^Lġ:ײҚUT O ." A]8URcHma=\JpJ>΍ Ы$([ +1(X:~&$<=hKjFޤd /:h7-gmS^3yJ#5UxY4 G>q׏1/s>ϣ㬋h,!Ƃ'c .I:Eoc[wAщ>E$Ҧ7o}-*43ZU鵊%@~\8H(" J*DWG6}SBl 6 K9s,0ֈ?Լok +mCBsJ'^YP> J% [ ^X[|^kJw]k;DM%pgKpg] e1H4FmE쯓fLd5}_ʖ-y\%:d{yj*P$>w>^~<%LCdg _p*^{??;%Ƴw;;GVuʙ9筁HR[\V$ɰhtϵcO?hF>XC;FRw "!HWdӺn촒iɄǫWsC%hC,Ek|NDt< 9T I嫢^<[C QMУzۨ@hT"&|L?䞚[?$(R,oQ(k"uA6צ`X$`/M~5sәpKԁZ*U"{;DC9ׂz*wIơuPv?'m6O{ DI˪6@p@laU.渰lө?h&AFy+zJؾ!DȠ%fp++ @165("ĮWt? 8oȎq\5S`#:Bbސ,WawX 5[䂉wZf^jEh,iA[7?ǁuEM=.F ,Q܆`$° X6 O~(x@z9(Mv9L@?o5/9jILA#:b8(-.o䧉g~oL Fг{R+n3-AO'O5g$ڧ]`K -0Yj/<1޲IK Eh&j4X<YjB'~:qb"bZQ2Q2c} _=zO /jl kcH'ze"nV }&ҥ?U)`H<4\I-46׋E]G\~_@3H!mKqt8.3R3EPQf$Aǀ`_^=UfzGd|]0d3uV3xs!Cj5n?ZGntyg=ztvz`Ő1`Efaa%~Z P %>lR]=EH&Jb"+ݖpVǭaE"Q1k0GV(C 'KlÂ*=L63=ɝ~PŘgz;훜 }!ęmuf#V>U戌iAXu1h rriĬo'հ"TrNp69xԇ'* 8<6Ž/o2VPU`X2~CusF*>ja"<[ATp/Y'roVUi-XD$ aǑr~jy $C2XWΓW6PZ3zFhqMʇUXELcAQX !ڵky-q=cf`db׆j4kFRg60Zv E`tvAktED>G4feGlRKy(WeiOa4oҲ6*N$bf/ /=pA<ZS.R˰؆ =X I70GP{ir+.۝zyO[N*fd"B|](x,(õdk|7IF0&'lk&McIt@mGʇ0|{Vt}}*߁o/+3X: Cs+|Z,4uP7ܿmQ@52,|)*{5 lv]ŤcPS (x;a|'NNw/`wo.^Y>$V y1Rw+B[92+R[ d@;.#=9IJ69'~ȳUPƨ@EZ: ^JD^ĺk 4Ū虮/{o^w@9gMwXt(-&ixsȺߜiA ?+Q%멚f;7R.[Nqņkxapf" Yn ML͞&I- 2~띍꽞@n;}%V zI&ȫz_2#5.KY=%u}n]?L\CFP-|v Z6~UF1~nk8.@AR'~4BD ݬ`ɮDi[\rՇRv4CĂIfugaPؗtN_'}:)BTށoJ$طmfS)mJh%p pKtO\f)<d""9[ltgWN1.ˋs!1PSv 88:̟&8ԅV?6vy=NܼPhqf_Bb/{olyAJ޻bU}AS*.Unc86LeL ui 8w8IТ=VV&Bn/CZ6Pi,Df24zXhfaնV$K:pi42 UzT75~apyyjW%oÃ#ΚQ1 G?LYƁSOVEupvBxa|λN߬;hN͊Qp4d4(.就ndn}{=c7)Z/2DA D6N*.q`D6cZ9LU}K L pѱP|ݳ,/NJNЅ]]U5Խ?q@< dauʴ߂5BVwO/+NCQ8 :#d!6sb4l#wyfAVVM^^z5d͒&2Q&B }Uxl6u_dU8xI<;c@-<{LOtw7QRMMNA4N(Dz_Z Kt6'dD0FU/w; X"ZבҤx(ۮޗzv+Grwѵ}I:},:!vlƳQח7ӹFE96vX//s_V# (.7 6o2%mb$!]Nsq4poA&MZ.hԖp9TbCqDʵH}z̈\%f݇ت{+olSkU)5TX,"3F/w"tT3{p;.Ancĵl>Q(ڔ BG=;sϰ]}g2)@jGUU;]'Kݷ3lA%ijݣ[_ű R)ñi CC۝xXf{8wdSIVRb$tz|?֦ĎeODӫGQ&+ǗJ>4ªw ]͸:Ew󫓦b/oߣNJHL7K M.lEe BC6O4y-Vǀ#@iY\Nz;`eL>rҚf^wH4u(1 h<|FQmLUZ5&] j$Cn)+b M(5E$sF|en l}_Ue$݆$Ug?N{ ~\ʽ>5(W^{~0*ݐЗ.ȝ5g/L-a @ds[;ׅn\dx7h_ w?w0QA R<(3 \ 6we$[] bW81r*Vf*1?=BA\3]/ݧw/H'5ȍ:0 A^b!YDG۷ւh"N(C-x ŝmc%fm3eq r?SbQMˆiB;` {W0)ؠރU: .;5P &SnPiC5Z7\YD|q'2tus4D(d< }b_o%JD?eA|XFO`ͣ1/ ,FӁaL||/!W-h [Pɕ#"@|Y8*uˀwݬN }}@Na lWs.,}h\ "8jxQ= gp];!vBϷ~T «h' bd&E]@HSGI.A-hp_0/eؐv֏7~GѾ':rϝg0۰84K3Rr|Fwgv7>Tpٴ!.1$I:]+q~b.NQ ,㒷{K 2v YJ`&%T%qXlA5`5vPs4I(t`d'^.}0#r_MߝgL,ZK|_ 3cſWּXv8 u%!0xv&Bs8 Mޤml8^tPR(pHGL%^¸ܞhpR*EH,|}sv6z!V3y11M9Zokn%'cmwD`|)ֻ^2F N3> o݌35hXAʸc&Kor#(スv~Sop]$bv5ߍ`żIe&Jn:o2{gdvKøK~ _O?^1Ob&4L,w`e"0 :6JBޏ r#J72,r9+^JEaߪd%A>;k;̀aB9ťiW2@77wu;(sTQxMmM'EM ۫f\e}*RƩ~de|MQ~$p<+WCTRw&,:BOdhndL=$I'Mԃ9Ɔ^/w HVlA4ÉX,wû=[۟~P?ѓ){g4$i]'U(6[4P+xW.*i^\;X*95S^)˜ L2a3 ٱb@Z 9bJow;Uu5{2ZM+\epI!-IQXIM]NУOh+ ~]qp0+ ɀ'NIe/zCPl"H{@QwPmu3z6f޺B|؂@M+k//KF8`sDfA?oX>"qy䔓X- 57hp,c6m1kNFJqs?*{ ]P+!w*rsD]026e;TE"[<2ªi lYՊ/HDOtL_)ӽWF4уBl™V,#VwEzKG=ˡLK^fBdȋ֧u(/{hB}U=O#8+e({m3spMwP ԚzidM=`*,l`U3x]W.zlCP2p|7"gA4[(ϗb"7a Sr~@$@kBTq榱BPjRR75t}.M0T☨s#6.i?s;u-h'}T j3㒹m}!ȑP"R'GhxW 1FnPy^(.Ƀ]WvD"$O+2\Bz/+? :)=™cm!UAR6%Ϙ {}b҉DuTJ1"*3R%A,=&y'!!qbXv;/bᅎca{ְ6EAW`@q4YyiA$;~Tߛ[ +/H|(9*nвUsϟU@q"ߖh HO,=AQ֡ջc9N\ydݓNM;:/YM =û+\ZHߒݐ"A0v&CtAwkRK` 1H=< "K_s2$gv@kAup [9%OFw*koJ~7[a#>~9BfXvFk~iDfh Cn,G3l?RѐLvq8͎0.&"kޫ,1"qJE7szۡ:v)_&#;?ƛ=ZwcU?'& %ɋ JTR)6;1316Q"Bߕp(+L(x҃ gQC˪1:vȥ?L}Tg4'm\dp^t՚(A}TY`Q>H@g$1#V 798@"UHun#Tο/F2:9AFK)N?T^c~ |{_z\^G>k1T~G>S*@αv) dfOgp'Q '2v ӓDg\8?nF͗nUΏ@$h$gkfeL@1t'rD(QtP&[͈iq$&K V;L0Dt0S7PmcHg>,iN?{4mDҪw-J0j %9ěNSi20B*YzKQYq\0EEÓ$铗bb?Ȧѻ)7:b6fF$iH)6Z Б-!y6SRd$ EY.rp=V@u)Q޽Z2U[g[,sOkV~ʭ90S'Z|C-͏䨎?hl2i~<. *1)JjN+0򊟽[ПC+Ֆ[EӪA ՛iV&) (51N_]1ǻҤh@#/"sl!vsq4"?f:CVJoC{RʰQ;\{M{⤖QKu(3l[!IIG3G}xTLV/C+J&ۘg-:[w^YRfcM ^isAÓU3 >lG3FJ1aiJ [ eq49z@:?;?=MI=-a"H՘Uڕ"͏ng7MߍKRd51)B%^+s^ЄIƇr! Bu|D0;N/7lb2gmk1T}hFP2/^˾HobE̥슿1 (]Zf@[Ej25$~c8!bX"ɤ:+Iw APHl\&T,%1$8&s<фMh{ C@ B4v1m Ֆ6U0 pV=**'xG90@fܞ7aG-1y7.T Zl!K,̹ps+[M.u=ptuzYe o6+5x]dJzȩ>=G[RhFgO`?," 5jJqFteRR>X`FG=VuU7#a >fr˴nc*y!?⋜ vgr'NhYK]z7:`œ#AC_{U,Rg*QH=ꏬK7/=&r c/$$n w: ^OIPg9K6IUY3~A ɣQh8lEc/! $}76"1s|Q̹Jtn7Sj~qBpw.[-)huxg[E }is(ƀGՙpKd;GNZ#{9%4+^-kI^l5 1],z-ØOK7| JYEjM`tHù+3Kپns> D6 {5?Bi~Mͽ62׈>H/H`Rv$ @P(4x^{jAR;zH,9i]>7 + +G AkCBºͽ`j; aQdj`yL@ >ӀMEg,/]Cٖ˵reQsƪA٢7?MLη ?:<ߞA:I邰9YQ4"2FeB)[}߱%ƅ@j{/o16 6Ոk0ul׍L8z ^Jp)bq"bVUkͼ}%+:hinRVبM; =DJ) mg)ݔ 'idE]2HA4迱;/o,m 'M΋4K7Arй-=ЎgL'_A8|&4ѼW(>^V Xѳ7{ЖIWY@RҴ lm'aKl0&h\h4xg,У]OeBD͜Fs"ID6KRIudȌ8Sl.(K|A_}v%^>xt*,m83k">8*okݻn&_jRQD*s2α)xB:͂$I8˒b (b 0fFSA95 kZ &,GPۤ9|Sl{pq;cٛ>@m)pLH/lof9\'hJ7c]"d4#Uрg_;ׄOw 0&\oz1v97X${=dW@#Ьz*:.V)|@1mwy^F:!t6[®)᝵̲1p_GB@["*0 b*v\ cWeϝaArWNIڨ1nraAX0ΌYh+5_[K/Ƽ~thS&=ߪL])htT }Qn&ױWj*}EAwAftuҹe&v3V=sZ ӝZu` 7Y*c3b/ORT=X=*DA&;PҮX$ᤞ$-f#@BE\@՜Olݪ=MweM< NI9o (Ť!kt&JO5N=89+4oӝ^2{Z3uUM.X0l0x^MLAY-5G_%?2B!lz-_Z6e^ޞ7[.e%uu(vaP@52YDx7_A ^bfREva6eюߎIn6C1>hߢ2n Rjm$a~3efM3teg(NֲH_PK\<N$,~~G۹]KP50}i/c߇1Ho*9b$DbVd}}r=~ 7E_䲿%;F RV{;& Ushg q &KܞY'8/O]or{8O1!{pǽGQ;>\22}v(*9(ޒ= lzb48(msi\А8kϣwƂj$h4+Cԣ-y83EJ :8lyHf \Q W%kNߏ nTBӃn$}!JUKs HZS@N`GR"j  |[`tD%CQ R^6z70Bt~?k{ ~0iR*fFVޓ2 |'rR_(^lÈZZzk<btJxCm699t_7V#\V}mcK1xetm4Y=m+Vp!Sd""@rT.w,wkרt @ O%QH5؅mL0 Po9V_`] `|F#Ň6ͮf=jZ>`Ao۳&yM?ͅ:FVYEx4~D.<{8)i 7- q[SNGhV؆/9GXSK@`3(I n{1s]Re? b$v2y> }%2RC r`F0p'=5oɘKE$ZaFIĨ8C~Էyz(A=6o |ؒ`=Ω6UB 33iK VȼdJV5݊n ɺKNd`"ѿ&O}Jeļ:Ԯ=y'86 K7e2E|ڝ)g +&ݨ$i,d.!ų ɐnOUfq1$Ky\k~f_Ig2^#ֵM-Ue{-cPu4엝mc$}xJr=i,Kdo$ȀO}7xnV^R\i)*3v֕'O qjZ E$%?P'Ӿ!K'BRg@䲘YH׵9ctR5hjDeb):SnLu0NKOmpQzWO뿙(%`}F+&MqhMQ9{Nh?סhk93Fq&uS8b|{R[ۓ@фh |F]dAEBg11/O4aodCRkSP7f¼JaAVm_i^Qiut]6d漻mG]&LRY`hob.Fݜۉ+WZ˧Z6u?[+IMP4#þ##nkvwD@v5s1~#LBJfw%4cKoٱpy'?*՟JG[eUnL`waΖ8ݷY~aqo"tl܁pDcTRW]+Ezhfzn&O?E4Qhz|~QAqH E]TYJeZUL*J}JdOVW2}H[ed)CntuoGct D5=~jNG%pW89mJ+3 3Tq̀M'J:[]hSo/K3ey(۹cN0pMK<&c,S骨Q2+WZ͛HV\S)JhY|I#KM܏d/I:IFyt!f]%ɆGx9#((?lM\zlѦ ΠRLqToXNi|inˌ#z")Џ/eu4zb^|3p[kqcZbS$˒vf`8]_0g(yЅ jC(X~ߔOYSHFy¨͵S2k5OwԙCf= P@.hIƸJc_9΅PNi#Tp&?IfGTKC{4ۣ2l.;5twz,3̊{G!dmbPNS- A8J~򁚥BHrŊu>G/1sogcBO3PYx,iQ՞kYĵ2W8:un\1.b AͰӇlֹ4oc|Z֑x) w 1\ݤ)I@+[j`H5z{ Dm-(s(|dL?FZM+fL$H1vL`F)k^*Tr-Bw3_>NkLq<LE4g0U˗' f.Vc,MH%)-KkbM;??wr,ҳlؗY#W&?(4a^q pkP $?Σ~o,0)V bsY`#%ȜADd$;{$96QA"Eճp_qǦQ15gR(GaAd+Ae*F*1+f՗ e?4LOG~U;|M} ^#֪FدrW.Si;En/}$GOuz_p`B.hBd$ 8 zCfΟט^pfb= ;ӈiRJKUtZLX6L`gg~ ;nhOW^")T C`K%&v"ń+TՏc ΰ[1| ڛ>Zqp s 2şPW&Phg& CdIJ֯~6κÅ% Ep 8OY83Bؗf|Vdh(̩7S)̨6ot՜ ߪ6Z0z/< ?L'y`-J HcMꇼN#ҽd^hg}g­ٟELN4!TAi9dkKAH*n,'gCmLqtpb}P8rZMea| `؃npܔL#~hC[&M6+xi;Kݷ9͔EٌHY! 2sk┽;ȁ!BLtK^3&䪖ԫ'껶~+4o#讉($ym=>  l,D%m ᢡ[7^v)i0h?4MWk0BjT(yVo " M '=v. F( )7-R~$%\O.և$xBj)ƋMV.{&EYYixɍxA1/־Bws(/KY3y?^ ;ҘQߠX" SN-ɂC2R+>qAӖ=zsڸ~oEē*rybS ~֬.LZ:ȴ]d^Tud*I[`|<(*>s`Ox`x$x4] tcI%YlB1 v}oشIlqwSsśA@JeT2==x\`(I%ޘ)A$hI@+MNʧ}U+1m'a(\xE_wz"(Ax u5_p7fzX [䡩kt6!tZdz)/fU(M'oʲU)mo>>38It?\xqw[mixnCؖnauJ80Ai&rVr=7kpWjprO".U|ÙbbݽxEΗ*:R:҆Ej m䲲0I<^/¿D<?iu_wfr9L?=DTaWZGC؞~5qiCz ?FH6  O":;J\nϻ*P%]*(L蛼J/q4>^TyDFS2:ӌ+th.>{Vp/8t3gL.waMMQKd&D6}4M/>S@ n?zl%@kv ׫^5Qۚh)lbx,[S-h%5_l% ~>|NP p_d;sU"iTO.ۂ /k5?3ԧԗTc.O πXv3aef]NKOSZf$0R)OĘyO0h2G͏붎jJ )sq}+\`5E!نAdN,  gLʙu׫pd2u*:vX92]Ӥ(6"{3F}5rEJ3e|- W]~%}&}7̓8o0$)ſenoȵGh.uZ oF~6 /6WE7N QYK&_N;TsOa+olԌIH5BR(4p>كLd)F]ɿc;[iGVeZ "iUUZm)lRd>S7sPm($' ug%g89*iSg;~<;ٖKQ!Mgu`;:l|KQl0vWV~H &eY,l"e3lu]釹؋'!]K"J{ͬ_ܓu2q|NhP"T<ʱAKœeӳ`劽?j?jJ/Co[k>Em哒K!ѿ*ߣd0; 1q饍nG/{`\q ܻ,իFu՞EtbNnC<yegG UbtE8C`۟ѓZK%jDQSƲ_#Q90Aj,,AY1!FbbD L2۴VHYRfZ\S8+ѻ.H3.OĮzzRǯ`Pb=,ta~8WI![NV֎|P, YFRzy]\X+idj.Q?st# RX~ˌJl= u@Ј?4'JJۆ4l =Wە6^&S`ekVQa,R1h-7 w:R /n}HymJ[,KUC?Ιg%_I|_=vn<& 3jZ6@Vp'" EH8%pŨӄ4t9< XƻhA 3]L =VE4q;;j%q2 % o3V< SKXcje;`rtƈ05Վ &!NB(@#ap&j7AE)UC}9w9rX>$ 1+{U#U}vPd$_?HdBfXۮB8Pdk>߶;!>YUh_BrT7hȰ! poZA䥋CDe\tsf88!i_JXEw7*hC؄f@Db} u/"DoPYƹڹ `TX=0Ws~lu/UZ^}1miZIa\Bj!ǗU_\@bFf3 VdCo:lρV%l !wܪulUhr!G2#9 DYC9.rhsn?@MSuۑfJ\Vڶu~ֵ֩G9TNnLVՎƔ#OO4%@CPr o*bQD gxe%p`jԾQU2c/yNgVF ZG .uӱ N[9BXiyy=!UX4lG46iw 4W8 K f^YA'yQV!,.V%EBf%O5+KOZΏ^$ZzR,eJ3F *n䃓]`ʠ "*JK`Ndv`,­o;LxE|%Oѐ7"3 3ԫ@@qyvURu1=#kW;/Jӧ.h#u M-l!ܹUMlQrD`к!hՅE}·7|gbljBę]2ŠJ-e+9x44]pP>#]'-KV`;1F5uیHAR9*Zg!Չ\r/6olk1 amb(qUf^DN\=:06'lu=6j>m|%8z)))Sdwӑu'kے `La>?g]`gCK+cV]/Eos*.eI $'ڞGؤ %0pk'}Bw ~gcʿ$fpClK;X|z%w{PCG>Y9ܗw:3VO*F]Tf0ln#XlX]"͜sړ jHU2i2If~ 1RH^,x9tF1>gOQ}c?lKwsE㽍Lጟ" f}]c|^UY]5Xo4Ǟ1mZ:Ԙ1ېЮD`|"mBn݌Gy LE$Û]`D4!Ҡ:T@G S^pGߐE^aaH "޺|`/+ٮፒgdZ{jE"z$OތYd@fH<6GJ!L;\x}eφ$1}kD?ʮ[w`f럛w ,AWF}$:"n FЉIH8~H$\ώfM\S5L>q@gueq=>DO#ʢfҊ EaZ6F=;7`d JGԾ /yQRx;+r-6 = s\'Ct-1ն7$z ѕ*cracgN7] obop-B7Dzbn(7ϲq:Oـ"!I𠔵ۏ߾ Ah oݨþOx@et_x4%UXkQx?4y o"*x5"7b-W ҕ ٯ42V:jQ!{rvvLe)z<cs25'Ib@aPsX.V7}F6QLBSv[}c.jqʋup ,qN^InJ%fnx\#AF.g,"r -}- bdmkYZQu2~V7S(52j,]7څ/ 奈YVɏҵ~eҧh[{䜅M ;6 ØJoҁHd-fH5poh?X?fDVWszPg^P.4!P*J?VMtIs+ y0Pk]C +!rR"ѣ!NI˭ _+2 \d/RT29 Tn ou?3w$ji]nUrlx.qqg$iGDlUKPBBiFx+G ?ec뒊owL&u"KB{$?'^Ms3`\>'2CŶQǐc=cw|ڙ_7Z!9/,mtpxھtOa|%³nяޭCV6=RMĦ>G8(!-O'Hh_lK'OKq F4\7bDaU;bEZR{-yZYkɴ8a ϶Y,D[zQ6x@]p~e,v< (}/W Knrf64) 6MfϽAʽzhUga`ή'|rtTvH&Kg_\_{qBΰ)szuɂa*Od(c6?{hI7vR$ds-uH4!UW8JƖ!zA$dҠ'* + md/QAB`h_DZX45|\-йBl? =G-MGUbIe%A}_wR+yѾ^׸® ; V[i3s]Ysw[ͣ~@l߹,/y^nDaWscqɿlmǘ!VCp}asݙ7:/{Kp1\;(2'\ P 룬?za8{#JAw&ՓRVx%~ ͱq՛v7^<<1G(?״D+#LdsI>%.Flh'bRKk\e䒙#eDjC;@T4dmuNY7˞hQ|;Y!VB%Eͫt)jT^-54m} AO3voAm$8=—~؟!ؿgoq*DMWB>`T I IdA)җ޸)gKJt9ϔQB0}K\f<kɣuR0nݞUP)#&.t.4FWÂ~co&eQ x "&%Ii$Gt.Ddil:`MvCrT@ k*9B@LZo}28Dx˪HTRmxR@ xldfHA^QYYX8]D=Dا pv%a_m IjjԒ6^\C~]ѱ`maDz+ 9܅YK=CU?1p~X&_ = +OSn.][J䕶0AhIp¾}^1&XHqh`;ZhosrW#IVBnնFq^;nt3O kFb}FJp'bѕ) gМـD)raSz4% kv1쎂DRI"瘇 {ew"3傳-8Xt%Ak^*"2MT};`6^Fڜ*V?{81RC޷Շ&lI=AdM2ƇP 3 %Sj?\W %GcCM䬑K NԪgp6̪]z-n↯QwBxm'/TեV`*|c;K#9a{c*Z{0ba[6 aF[(~SB386{,Dώ'9/V_ D=ւ}p\dE I*}8dx QvCʙ8םݐjˬ%YBPWҗ\AaLŨyZc'=Z5/L/ F 5Y^tI{PQOSf!t1KO 0}?TfTm4 /;sHpEP6*.D,z }^QU dOn&jJneu صZZef8jArPNō):rM͖"&Z%fZ.L*1O9%0Y-%S 'Շ9*v.O]j\8Q]`}1rxEL:n1E6NWk5. \i[h2Ri9iQYRqqmXGOB\A'h KW#qƟSB}H'zoZjX'wp&޵P5n$@7댩5 `}v*zPإٲvhDNo].E6UgH<<@.uF.C;NO{9*֭I-cSq~`aJҮR HPGZ{cAI8?ɧT 0\.,kFSIKP2_o~8KC7 iIJj \2Z3JCi3gZ)_,<qyJ$Wj][s3*+ N^_Z Ад^g2ʗV4,bU:ֵq<y`$CDi/×˵DvΐHCglEo=\>SGW&$ TӻBlQ. $!ȝLvgg~luf!—6/bSFd1JUi2KwS8Six+8]AiU!7}w,CVR[r*vJYW\=ϙ#i /E4WE-9%#dKnFP?28OC曮|\99TQOR:5/ S+?H0/-=j`;`R:TLzOB]W 7v=^bAtt,ƖQ!-*䶆zMs 2R8qM-xz 嚆mƻXdػm3hH!d+C! ϵ^rǷV!9 m!`yqZnj$4Eu5ud=|A[U/\[u5d?BMUA!At,(^#H噇 PIbx|aFQ3۝- oL+׾~ܮ|=IJݟD.ܙg7ie e,o[ XqzC9ꢂ꿷{RwR6̖%3Z"8Ff2ejF7{UQ@H=| %߭t ,p.:rBx8:#jm HwU/<_vWw5I6j*ƭeut 倚Vfj^ NJPH/Njb'+KVQ\8E8xhU׳r(ϗ>EZMuT)5t 7[`A= Y Oexצ3ʣw,jԣ6.߮^Q:(ۚ{D\uqj*|á?޳F}!pۥI=.,R3~0A4;3 \<{S 8)z0}JN16^ 8&℥wrs4%^lZuTLxߦc\nfA(*RLBp iY}``uTw֥g*-Q a,j = OQ3߽Z:f;얦~qf8_˴='XIw aI is[3+/@z&+4Dj=V^3Jv¯qY@k zS 2n#6%gd |1J@G);fth,̬~$& iAB*L5u&e&inFps'P#[~ϧK~%-ԴA` {0yϪV}J-Hňۤ7Z&^jm\u,b;T|V?-杊5Cy1/zOFHC fN;؞['bbA'eqE=HOe$pM Pf3Qd7ּF!T] 9U D(4--ܫ-k5ԀR!vG42U^ɘ@أMjTᗗ4^;_bRd˔dh*l\z[9^?XgD=1a ̈zQBraOT^YکWVUff=YY@U9[f1pqb{ZQ;{2̴4,7d>0d-;%*‰2/ |?Tޟx.n~]$Kpu+Gj1nHDǵy!:xIZ ?6~mե%J0HҞc(IaA$-HA}WPOK Zz!⠹IskH׬~&N^kQ[U|. tYnzMf,n.aGE+YU"{8|WiKvJ#k!x ZKip+;l0: - >D'8tXcu@̹xWm?@25x}%Wb&V\ E6ak r }IڴK7Li65J.4!Pm@(zY*LwF7WD;9fNNؤey޿G6T-vd(Z{؏ &hbZFf`v p4tEn h ݃=ܓ9{Bf??4z웅1 KYt(Oh#0_j _fyfԆ eJ 9!;tvZ Y sgXȾ=:s@mlP2ΤdP"Q^+Qܓp?tt? Zf~o>Kn(mZ I?ݠ2<%%^ +OR WE" B5!zE{R̆dx|` ţ/ms7<|\P-L|T;O9'˦V'!w:V8醖S-IqîpIV:&BU!ݎ}qּ p7b^ EecIn=J?` =Mi8ۣF"Ыf6շh=.RpFghR+`JW}򊲣K! c$В'c~Nſs7c ;27Wꇪk3;Yh?Z]?bhW38.dUO;<߷6*PvِaPr(lP;@I1$nAB) b[ _ Z$>zT0b^moϧ_VZ4솤>:𕲂:w,a 5p0 HV3 1o,s+oh ičRREH4OQD5 {r[w%sre~G2 ^ReDjA.8ޞŊs_7Sfظ2Q ˕/Ay7(9QaA@QؖmiKO'teAX,$ ra5~e^ID-N ?eGOSӗCn/N |\)ᒮ’ͺq AYKD!3 iz8""Nj7:h6R9,&D[6UZĢ0{1/\;pϰKI;*rKK@''Bɜ.0ʾcV}Vy3I4r rkx# Mw,pY3/ 4LHkЅkg.Mhr KBW @?Tw%M(}H;cDgWcgݪL=PPYrfъ5j#_C<-yV˳zF]W•:́{+9mCOƽLMb"I 쫭3[y^ؿ]Р98/:ٛ?)k@HWr9f"ɎZ+H7ӅA2'3Gb( uzKTg_7<&Qߍ6? .Rh9q #rӿ,3Ǝm}4*p}G)Ț մixf/[Xy@b i | '`hUKE;MkIƳB~ l]1M1Жէt:3G0#fH+>Wmӳ99 {hx.P$PÀ<U#GTH[= ѿ\A[Yrhy#>Y#h#0ž#k@sZѽT^۶_yzPJu5_ p/RݾhpX72HG 1fVHq8ɿBJNk8׸3:|:7[rM&߫DRֽz#q ̟lwO}cJ+rS6.iJs8= 7S/eIٳTOIW/j34_CC7L\qrT$Bp8{cSWwbG yCA>R]G T*?Ĺ4=ecp GVeV/%t$E ]a}'-%{v֫2 sXA+i wR,LndHcO[AO-PdS$&r;XZ6;rd'0EB)NҘb@U45f8iaf>ȂěFгuw%*Sv[*o?DHtlh7=!o,F=ƿDTjP ciL\y?]7T$//*pUpN - pcc: gNr&5kaK;9ĩm(6s&02uW" qX(;  W,gnz2}=٬6/ oF\; {د?kоa F4Ҷh,UQ n0̀|LFE2)<9ecN;ߘ6?ZڑpIQ9GjԙAm. W$w+j9=|C~.RK7S{=pZ(J|ڟPoj +0K,M4:vhst >49P7W}8ݐ;t[*@rD 0:ISܞr5#U0腅ܸɖa&i3g!c)JI $Os?IT$Շ֣gXIK;}w8 &Ψu!Y7=l\4x/ ϖ-῞CB/1/5ŠoLbduk6oeT6Uxp? 96 J\׶^ z hϑv 'ɂ,V@ 3p Av>y[4%/);1aiPpo_ˠ%RnbT,[Р QsK#|fi 0 6tL6 i61 ^+7p~%lNt:^󋻫FelL!!_kqsD mZ(eo9@!C}b2q*WWL߄68V#bF˴e"6vyCA  ({f hLjt=Of\}."օS˛y|"ZsȽXx b[dzm&h9l O=D7Sp%t.l( lo1LT:BRz\:%zUjU tMR7e1F*E\5}<N˔%DBfq=ȥ]Y%HR@CNe}#+ސ_L0rh⒃051Î}gD[@Ιo4ӥRoW ܏*>qxsxHCp2&~+lkߖ7GfnA. i: &uA]nHbcJ_Dis]D2 }2h;tAakp0?1jnҶjOf\>|-/m@ȍqw̒xMr)㬆 f7^q=\b&Aww 0 } M.k -ejm~*/kJY $Do 6 |xHD IA 9svyH8(ee\6J##Pw>o˪r!#asP )dKw5?֬%h˖{\NnBO?eS.v],[n1>Eu?wD~aL6; i[,jGy J|4ɘ?ʤTTM?,.rbǘTHK6^fduh'SefOyn#_j5'6!Y ^a=KLJNfl<&^~7k]*83rQwJpAJ㪠kC+b#०‹HkOS3{{OjI!FDlPdn1yiE˒k^ &1Ds#8#s8aT3t›},hmNZk55,詬 7)p0 qЃgcs; h##8%4->Ee |#o e {P;pתM7Qd !^ЬwkQ*Ocu6="00$Hip:vkn|Y^\B҃CtY^;83OϦ՛W BZ*^q$ЭYYBNְjdH]`Z?^)lUqVdV0ȊWRK80Au!y0[a"# ֣j/_'*w!jtwש楢UYצUB }"}!@C\ L]1PsOT /d-TM8G̪Lhv4&.ă-,hyL#1Ry2' 3m"wAņJ&̇N_\CUDǩ[`pJFtlO] k: GeR'mk-[vJl;XY5v P3g;W!Mҍg PAgNV}Ow X_S`&?TgDDs?\eC=iQ2܍ /Tq} ~,-4^Y`нHnufKzT~Oq~Po/F3}Q V'qv$Ey}z 8RVj#]2Li@.W0DQ<7.ijndf7K,Q6Co iwF% c =#x\ÿToȻ[J H1S뤕g܄<k'(8;Pj٭y$4PX u"~Zfk)w$ʑб;Yod '8̴`bUѢ K5+4j ÃTA }3zZTxwu񿨺{'Bt!­]J߹.^s,C!rOT"nZ#, 4+ Xca3`(O),\jyS@}"ѵKMmQ>8~[³9팧_h(rj?U"װ̴x?WdQu2;pӾ>x؎PɓHS> L3i?p4ZёA TZ~dMZUDP/C>aDF2 p~% vяyo:c]11\2>ƾ?VJ)M"vN/Y$f_oJ?'rƱ+tŋ}w\v: $}_(<W2|Q];Gq+P%Z5ë9DHعYvV\l D6~ss'??$pIC,\Vȱz- ͗lԷw6Ŷoal1 x$mޣ:8)f'dsUlQJy/unwgu@ETV@EC7TP>ۻwWb;soˏGGe$SB /zmp_67+aˆSN1T#98\ ut \"\:{~SCW\n}C >yN wtM+GevH4eܹ-@`?;B`QMW Ѷg4R**Sa/&~/eMTXʫmZG&/5vGB3NxW#<iCMDcfd=\ Ern GI]w¡=h9g>X32]|ZX|&P.UMO!~l+B:m%E3BnyQi߀N9{&E> .g8m[_dm‘9|"~Y-Tl2i!GC. (q=B ]DqIca jR:6xś>e,萍+^M|^C^hf*C 0mB`dAy}a ӷ ݱeAx8;o*vO]+H6eڰl?#kv Sc0RK b%Acc)oD/ ,,Y>7y@ZB%ǗUTT{HO.:s$-Qa6sH~ڨQhS!gW??a͹޶:xlb$=;*ml8> "jWk6`0T0rW|B\Q#oy{?ceEf3P /F#=HI{ܱ@+3n F?IaR lm 6>TSr&@hy-Ĵ sN Ug9t4 w4n6p0J<}[kui>8X<=) ⃇x[O 1CS#9 >kesL1L!{:ɋ<^b;X|aKd<b6H1 !AeJh c[aT(`1䈢`s/vbf^\+WS7ƘLQ -".L nҨc0O7syq@`ѝl8odw,.}u)5 ̧6Lqv]Ӝ^_8?NIf%jCyp[,&U=d듵Hx@ˑB)abzѯ"mfEX;@]?C鲀GO\bQ~ǀm-{!A)W=MC,n)'yV4S'16U+2uKzF7tG4[>SGk kFUu^ѫ.) yZb؜z7,`a` Lx]S[b$hI:Gͭ1}g|Aa@-za"V!U\E(&!{JtxgrJcuBqV=t\>Li!Q$JX-M[IL#dN]L"[`= YR6mp7:- YzfE DI*!rr9Q1Ҏ$Ky7RI¦$'xb4F32(U0Zoԇ>gO2ڥX'줝Vu3Q$Qص&$n`'feqYjmK!gN,S9]> 4~<\0;'dLU&v ʩfPy~ Vj}i/ 5aJpx KM1 0?24bLYّ0PP@ ' O8'xZX&{X-I~9@.Fab-[l/@ǁ4f|*;S Z9 k8'&QsN~>N c9J"T*kQ;:ޱ}t&<RDW`:0-"{2kZC3iu0#6CBi7b,ŸDsa4, L+wWqFC.)FhADC(zOکWZ` D+l48JP 1Gfeb)?X=e_e,Y2E?uFǿ4Bqj%Atfqq,,)1h1Ȗ1avԵZĆp n:SGjO-f?ĆۃyŪF E˟ٚ)i݅80Ll(кVLM^]Nv nµxg&lp\v0֎-fHY ^.e4[PQ*a.l+]?!g_f(c۠g7y 8Z hUwWn4)?M6=~D3 伬zLiP咫^c/˟)iG(Sj]O'uR(d4|!h/GT-C1Ohk[V߁3~Mra(RF u^~)bnav&ׅ3]]ɟb{Ҷ>ODtY͡э jPQ!BLpwh\!<ꦧa$.`<xݏV]#yUY,%p(!eke”28EBdaӇ}u)w/CGQE)8;4F+>Ȗ*I_Fn`BK˒]yVg1|iUa`[Z^Bt@!}-i! ڡ{zW?A FX 3EԆ)7L"|iO$qz;1[AS{'վB{}8oc7)x]=Rв3.\7_-[C]gHf*I8)6:RN1<[6oR);:E17v/ FޖgM6E%L7DtU V0IzOi}JDǘ@jCM ~FĒDWE16TEMP/'b6L&U=۪`ƔDRPb$SV./P[K\AR#cqK6!}|^>LxR%@ioZ8iH[މJ6& lA4AEujccKtOvDyܥ{1}|C5+j|yxz$AB%>L)w].tFb\k,9zX|e¿aX?"E'F c7b` ڬ)?o qgD!0ԅM$})Ң!] sN)H(͛Ï_f *L3y>KMlJ[aQۙh~Gr Ȉ=gQtY&u@C~M폜8ψRlI?e 2V 6'Q»x\X'fg\҂Æ/_i\ l3!Weyh'ME ߌMs(<;7έ~ O<(?MDB_VrmݭFPbUPŬYCTfl->/[EW:MWahꝍjLÎn1NȎ> 2!#gp[Ԡ2]!ńCxX*sGߎ8_@'!:W&{ӞXʋXFs͐TJOSu<#t'?S9`# O \fi3 ? A/1·a ozhje#`T=J\<Bx fKΥSSJJy9`91Μ*HU*NJbY)_m; I_CBu٦8+d'Ѷ۝2y'j2xd*7hn- ekA :'D ei +$;[F&h/3g?E|F0ʮڿˁ/(b2{ niIfH%eR Zf[u.؆!{.*K$JvF$vQ2/dm`[B{`RT>鎵7ӇJ1+ y`U:Ή)v$ a@vJ,OWt HW#k6Ik^_Fb5T$A=ntHc.O:}վħHfBzg/iӗԞnS7Ks+L؃*ơ,-wӫ|=k|ҕ7c] pLyVn5#Tv9B a5zrFlWj"~[I.*4S0:+j󼠃+%@Z%.TֿI{e G@dAH,(sbW\>jrف]8 " E-vo |^P@f [.d bo$$u*WDPWz;q+5lnv&G@Cݳ*&^;#i)'򣸉_*urߜRE]Yt{L G ,ԁxH7B 쒷_N~>OKҵO_d⎵Js7'AR|s @\W (]^> s|5G#rI&M&W֞QQ7CȿGA{aF3A,& '²&+Γ(4sHuK }6_-8$QR6\iDS$Fn6D&l넆tiVGk84UξK݋Y;w <}b"7$>$qa%LSgwlkL 'דBXm妔u1,K%(3Y]ؘ3b_Fcw~|K1*|7ܾ.,{0w`"q*A%˫,tam 1T넺Sp@[RW}SYy-sRѓSͩˉױxa7v{K2vK؈-cFѫ@n9Lڣ|HxlQ)֗$ ucF jlT r hت#-q@t^dD iH{YqD+79i&P7e'QpžJ`WcY&G" {xgƨlMAWJ\'u7 w^m L{D"7pap(ZfCfk&-{b3SM̯`4*㻠edqhy(`ۊ?I!:m{gVn ]S78;2Ϛd;2a-G"4+nk=HjsB|?`Xl54-|lWŪ9AQ\ޒ@yXK? KTS cm̑7 z FpaaaQ.;(_BsfvY*c!רu(8 !wU}q޻@vuq ,i=.4v:LuȐPy4UD b4$Zc![Q4 ]Υ?39>bٮ 3N:>m{=6NoܶL@D]>Ӥ:T#MatV,cL蟼Y#.-N{u,$_ઘa.N`ۡAqqξ_`3ScuK/=ڝ6KTUB9sV1iv1t|ײ7h>azy#=iDL,ӭ'߳yFE Y5$- -|T;l 3%6UT:T`n+_k* 0e' i(px?Ƚ41,xԩzdڎο2u!~|W^QH13)LbL L>ؓ5_<`.\1&7Bqg%h"ֆڴ/\},ٕɑG2DQmCf~$S=&_ ISZ! d;wur,aNԲ09-_ {qw$bPSekVfcdLXhyf9 y˒5ydo!)A7̯gxO)WϗGhKbY%tSJ' qs@SQ`fw}ASa;j6 }JלK!'RFN*\BUT$k~e 7h=2PY1oSY gC!lB nэDc jEv~-!Sb"m<$r93ݟPӼN RiCh PXC?" iMp@Y_:@I |̱7!Z{'Z@J Qd-m 9;v\beOB`b-~lA?exS0mj(R8Kp&BSWC^H^ 6-榻9>i+&vK6{PV,P\t;jOPSٜM|9S[Gϰph.. 9/DGe"3wKb4iߋ+7)KL{C%RHpc,RĥlE Ol\>5 FIPpu;ߙr ^@fhd{ Pmc*ǣNVY dtK -WX3kЭyDey0!M5, ik,J-NVe;)xڎvV//<3],«kU~O;r֒IdvnF ;r϶CVj v8d wv洊;j6Hᒢ?,]y\gɏajrB"!QQc6Iֳ mX'm[5+BD2[3kOi$Knȹ|M6QD=MiK`J}9wWқvQG$_ai괣[-*/re&9<1#ӕG;opTPuG~;͏fgeD.6f.cV?tP5}OS1j.J9ζc0huÓv饪M4y.b/AiCPk!;YkW`:{/ 5RĨI4߁Ql2F "I>/U_ :RC@oeמ="^6r'Z5?nEC#x^!Rb5-龚V!+ ﻁK+쥕"![o!ck+ ƻF]p/̪MQc.^sxYNW-Nj,{ެHwE.ē+cЏ5b!e+.c93NԳb24Ӻh$Gjğ97W5ҧ)MvuMK>c@o䩐&ͩӆ= P,zsw;M)xDZYyH >T̬[C+ t br~5Lzv'ܜ#JmU;Q))B7Y#u\qcB#izq%dnu+0HtP?}^)-; DBo+gg Ll+9B m )"PbtOa&G5qrtxBُL|+(S}~C&s$HG?8  –XaX;ƽ311B ofO~1TMJ} x+G0CGWiE/ŸuL^y2mC&=BޱR<‘iU+ iV)5[׆Û}kIV5!MwSzgsx +ݩ'Xwd+$RuNbv^ ԋ'󖟬ރ~)HP/YM,@4yw ܈ovJTTyTe}m /7UE,B)Uӂ AQ-~̿N &~}[ ēk6¹ҬEϰ9a0Jug\kT]Pݮ۩Yχ),Dǃ1NW4\?-fL7vf=\[vd2L:2 1퍡/:{5[~0an4s42{Uձu+S30[be9-;82 ݼHQ&%Ki5gɺz#EGQhjxHlʴTLyjn  81Qj~(Bvs#r~~"%GnFR, IƊWq܁h􄩦'2Mj%:M!YX1lK&+ Ȣi3+ ,O o-НEXpK_)H"B WdƿMSJ~{̫M:O܊!*fk*]ڎ5xۇk ?zá.VHKdKn4JTX4=I2mªI$*O9SkJ]|WR~>sLP. rQf<MVˍ(*7͜A<ĸJ(k@(3#U~#zA{ZMȑ9]!=>,EIȷ! Q+u.HvGRPm!,ĆI{n/9| b]Ӯ:o%}hX#8P8Y>Sij 8T,D*O*ٝ4s(J򌃃|wSe@ą"2er+X{=;7"k"Lu% &\V: UE WF[o/EST Tz}Y4J_@Rj|ȜtrӞRX84H7yN9h?țy4pSmosO8Fom73 8X{X#8$n 6‡DX_xf?:}:SxBHFNxGmIbш0堸  !H@,wb b F,F-BWe؄_YlϵUjNڰtYQc#gAT5#8Z S0;B`"Nv;eu]H:mVD;-PBja `SGJh i9B%Co 2s?ARZw_Ǩbg"L.t#+geB$e>MW|'q;] Ug VDԙڮZhT{ДD]%q FL0Z&J= AjI)xԱ!}@10 7~-Vb#b.`&Sb; Jpv͠7G4(xd+tJDT0n-mA,:S/pɲZ)u|J93сk41bŕpۋ_r;rw:hJ0%3l$@1x; *PYBŅo!JڂD>F]Թ" mG6h&:f.IǦ'X b'Iu %q~B5}{xI<_{|&Wgμa^&/ë/ݫ%ҡƚnv+a``z$PF,m2"uYƄoC*:Kd7jŋ,Ja]V\lEkka _k(2й_\)};UGPٖ:LaGW?0p}Mfα>ܓ~6 d@XBAtS$Z폤۴ʃ@u%~\a,w5],ɔ;BB`։"dE<;+gP7Yz4ά鈵 cwI^ Jz6_@ytӵ.U[ Agٜ u)c+ѯ% dCWMREGe 1FB.Aq䪅"X0 Mdr%OY_z$XLOKji X`n[،9FTt QJT.<@FW1QgnUfFw9 uJJss;GWZ/O[@ʼu׺%3d @@rP¹d\N[jaTyC'ohfRTLYAGDBؘ~ ]csZxޞ ܡ| O!>cé,{t6{lٲɎS-z%dvR'D #=_`icHaCߦV_띛>'vgݫ[(u75 3z۔0e k>Rpr`"=vL]<A%΅}Eȇ"P] sAj݈as=~w7莣m_MRI#|4*m XUXp)yLYZ(gni_Iƒ{fXQ цh`쥮ܫLX>cJvDCʭY yNJJb YqVt j朎1!^$), 9]N~HqCF/΢T $#< U)[+Y^.9c_L ?~G 쮼0*M\ 9\f6cEmS fi5-˜Xz/p:z 9/ӕLĥ 0 r$P&a HU)`p-j䜗zjҝ\ж߳92 F#*?HoR܋QSt<-*ȆIe煀iԵJa tM )gרecV,Y$ň=qTnRxM{.CuC (9b)|B߸qcʫP? L~ ǬJ2 ljn/Õ?+yU5Jق#t @Sk?*P) uX? /?)LYFYO.iTa0'ш-X,"7N|[ Њ`Ȁ]yL Qҧ*>jH5lŖE.Q,9e8T/C\w :He +đʥOj@>~ƴR "s2B'QX\[""Ј Y,o-2IM$B+qRo)UlCqjbhN1h`H!\ZB&w[1í: cGOkسf;/)(4*(&ެ*1^qo:$@܇!xJtVE,=Tjn.`"bu`\[0~}21qkft3RlPJ(}5+`WPa=.i%tmaO y01f_d$JѨN:Ux|e0NWɋGP^L˯z $ P{J51}Θ0_2գ>rY6S:츆6a`fYQ2Ș!$zt]y4Okhxaeu HKs8;]DiDY>|zSC7&@k= bP&Hd1^YG%NnE bPZ3.#JCZ*VOm _4A(- US?LP9J[~]~O=7 ! vw\C06~ ax[PDH@F-T34r B+_Y%B*5^;3붿ٟwNÓ1M>?8x_ʞ*/j'{fln\>lܠ0bt 6 )P$F%,%}F><3F06yr8jX qܝ n{ثB"zH(OȚI>:Sk FІ^D>'JVxqDT& c7߈`r V ?l!ЬFdOq"2x&|hMiilu(,yD8ӕ?O?N)']2ME& |u A!(I̥QG }qH=Q @ Ktz*]DcTp_^ӽ/)v۫LI}/3 hߪ`RT_4"`lTcgl;L$~2f]N{o5Q68RBWR\$C9 `Uc9E%AHܢD<ՐDx&M>-_$cq1d5\0[뱘ng_6TQb0 >PR(nCFՇ~Di~?sZ;mDq~_n&қGjaK̊W3f ҍۮķv+}r3R%N^ 5Jk[3D'm )Hn9[GXyjAL;';7C<DrAF&<v]cck_KH I 2j-V`1D~vtFjއ"PT 9 %Sz(`Ɗ \&1{5Rv8p߅r` #VPٔHM^#S,շ4jh㩍wYny&0O+ OY'H +cxA8-poRIC" =,;ˉnhO'i=@.ӿ5(܁knx |WUsp/ 4sOe.KLBhIZm*FC ^svvXu[DTA>$.z+X׫whV`+p̓r3z#sMg.HWL| ؎Aw8vG Dyx/ 1<4o+$8-k^Tws?m?cUk(DTҡ.q0:XDZ0͠o?Jvy=|}2 rQL\ =4GB}PFb+Ф'3.gH H;N2]ψ8],y1B pE<*ԶI< DK[-^^mT'b7g![]Tc 4IדLHHB9DrDF:Y!_iYa2W8졦~M~\%LȗBE(46C[#'"{-UL=*ޅyz0T.૽XC>Gh+#Tq3{NZO<@̽yXA*!;AUGmVRysH,Ԟv9(ZҁAM=Ճ=l%E9#<;\u f=R`X*~tNV-Fx(Ր!v5PhOˆ&(#>o3Bg9R1n;еA0Ƭ (P&o2_/혊eevJ.\BY<.ҷJ4:ćIf|5Gb94k1I[f:c<@'p0:?:ihFX=7׳`N{}cAT12f[ -v46|?5yevW8i?~"ibgHB3cg<)䣁g'cq#b27ʚ_ U~. Ȓf39|Dk(*WHKGY$åm\\M# 5aK]I3 %6R$ƺ&8(]]{PF1/#dwIYpld:6<%[a,'\(y:hIϠU Qm>fL]>,Rw :/18ˇz?7Qbx 8lO-J17B`m;~ }rw5,`q6cg"_ܽOIx48فG([j9 iB0e]s9;oXlE5DȰb̨=#ߔ;[eˑ5~,s2JD2;1Sr?'S&B\iB,NÛ<˕s.k?z_eb"pu xn\pcm%%`j-?Ѵ7+*uF@`&.FBq`DwP:H~wDVBdYbJ+pl*q͎|] F{o32߹] 370/3JJޭU}137/  3t7Mvygu ?n< K(FIXҨ'XcO¦KТs13R$XC1a1lLM`@Fs9??k\[wD0?ke=³asD᪘0CMEJXZջ4e]xؿoF(y|HJO'AJp> ItX0r#Zc%~>Ւх+`5s_@5 0nT[/`"˚*[ʐ0!@%Yy giIpGugUh;dH+CMl OgƢn8In"ھju;Ҡổhv-S"d*Q&Nc@fɟ?o=&H?[iqzRt$+XtFkwU@1.񇶤wi4]+l(<.^+dP8uZOf#.07Q~D,ow=mdfi_Oߜa4&qC)X=F{꒦ޕO {kE؀In4$Џ3vx5!#$,tgEp)^-My9RWDNGe iŀU``ש۔+j[>UT)%46JѦFEX*JnHOrlt'{ {A2Bd 8E%+q, 7LWv;!M 7B`-L: =_--JVQ|zܝɪ8Ks$sꖙ.hB'׶YHsU O0fbfZK1:p|g 9\x*:Quo_qG9 %+FΗ`U E0xۓwĝJ~VMߑ35>c qCQ2RRl\}yᛙTMs bf:, 6[dI"oĿy\#=XA%?֡-ȫ _;x*gv%C0:L$;JXgqw}؆cVݕCL2qyrVh/dEgoT+?"/Q E> [!Vw<5ċdִEY"hɺtH2ogL9[Vpmkⱏ٫Q;[)9&wn+Z:D$O\ Sꚥ#&2jSP}[}+rݪ+(i"auٗb]#̣pG4:Ky]i򏛒qr˯e=Bnq5_}s~ Ӻlk|5E!&Mk78Y{ yS2xk<ΈZ*ˆzF5\Q@kخCQu`Np&q;Ik3K>yj4];SMtųқAmdn̆=KYzQYhpf`c-q^4;?m¨>zK]4.kk*d;^$X%G.NZbN Y|1Cnl@"jC*$Nk/sgF Ot-{+uR!=`9)ӱkl-FfbN_'L8:]3SX\$Ϧ5/݇.h' L )?dHy"Dsx1сI8{w![skޢ%y^Eu@5sƐI ODX}Gy)j. }/v8Bzky)Ѐ=uv]: 'D5<~ioV23qE K0򔽆rPI ޔڬ xfx }՘/_V\"{R+w3HO!& M;JIC0xdu@#GmMd+| }b v^]bW[J7 ݟȥW94sX%|PLV0!\#e(n$)eq}< F<(]z˔ rOpH$@;5@Cp3wppliF#зf$\uboj&-tR፞Cop3JaYK$.lDgG]FLw>,ea`kqKjCYQuv՟wۇRU18'xRFl `^] pԇW즿:}sHJ6w߂Lj80)agY _%#46HG!N|ݭ)p!''_RxB6`予->Y]Vjl IL>Zc@<84Ӌ|b 5g}y+ԭQ=Z .Թ\^y*y,}!0.wtND8! tW#'9gkr;5i z#$Q)^@)+7'^k'AUbQs*ҮҮmʕ+h}2{|†{1%t!ֻAV{N+aO베 \w};Uql8cȣegGn XNpd %@_ sLs* oqњ"ae6Ďԁ˘_ ےislhae s|xNL*Ni}_`Bj%B\hA$lk.zVPA'gӋz5 [@drW 5 m(Ͻbf#9KK%J<$4F5pM*e"tJZMyt#bUGAa E_2Θ](:(9mUk`*zvnFtt20u~O-m j@s*ͧ( d5MN||(7m#H̺ld ΰ,vQgp'n~"g+'$k4Zh7p2JɨF95}eo/;rLE80Y|-fk^&k8|jE>kx;my#aSq5Aθ|H2OH\uFP3'Վ[ ُhHQXzAbJH=9O8cZv5CvNU5t|K*Lz&I7X¸$v\<U[ ZB2eR卹iOμSfu`g$!Fv=R]fsŒj 8rAS֡ͮr,x"6HtBcn8gc̡ I9Irq_袕y x Tƅ6^]]Â:CBIUw FI]=>P\\@cv3\To/~+x5~URP.$pXY t ƸD#QNpJ .NeWM'B? B;|Wne&Owu:/92+™jsSn Ͱz0Zi8tVlq{( ΰ'kЍO~Ll|ܒ"NbHo[)^ W% Ԧ34Q}ju ͭAwFV| GRC1h! 8 dv?H QI]::G~]u~Y ;Wk;3VlAcՑ>ɠLG.=Q6T6m<FiJKc/@`|?~3H|=0DYDSabk~%7khұnJ̋; ЯB^U%XO ^ {Z<HB~ C8_ Cf}IKQ3/Kϒ7 zExW 'Adt .zn,{I0wkW%)_Πwff}})>);ˆCx7ĒCA}],i7|->{86740!GqS֥|ٵFDz 8d6G^:}4m=C1i"N  m lqr?yY͟ma_IMu߂lQJab:gS -C Ǚ<3/#VE9&4!Fs ^5ΡC _eDv:9썑,#7^AaP9w*pX,dژ'=/V%yS8y=@i9ы?i>S&,q< P:RwC1yz9 ko0 Z8[(~v'O(1mAEVEQ[!Y Ƣ Z>q?oW?h"+QRXVR)7赢U61sX^O-d>ih81eiM5A۶7"BdK}'Ow\SPS'B@z t-aMC)8v _u\9]Rf7tCn~>ܙ?T10B:=0r̓JF6%*M1um AQӈ0oxKl{njHCd>_%*!ȞV}9$2, sT N5\ƃ5:wF)MȊ#][ZFm`hMBIdn*((yGTW=0zɽ\"X`!'[SPզ 9h\*GK3b iJU/;Q9u$v9f&認%crj^1S]ͻuJĽ4Il,b?5+Aw5nX-{e3IF8 jdOR""-ְ]00}M,zxC=W"C\F3 ]i i kwͭ߸kݭ`YI*uEE!"C㨲Nm6dj+jp N\G-NJ5;4Y/]ENvL_RTuy}7|<=YGb/0@ z| s Ua% uЕU!/oz<3Q bKoPG$=nѲjeTcٸeیLTisD{)?zi'tk "k9##?jJrS6I@XI0(ڎ_RŠNyitJw8q}1'$`1 u# *#DR. Q)fgӪ7)F@ .uf)Ek @$n|mߤYI)?Ny4 CC(`#4(D@챶ϲ k\eObT9@I`Y|oԟ %n-MȋOi7[=n&/(Opc \k ȟX:t `cstՠ#%?(Mw m7ϱƇ5n{q1= N ē*C;dn*2 8Z&H?8bhcB|(ܫwRFF"V]91^}ХBW} $(~Y#a JLA**p/M8 |8ny'ZfƥWH lVYr f:')nx=eT5,8qCrA\9uZ-X7{i2 ISU7ls`dXPaIoW{ l , 4ugS6]z$z>pz a%YPLYFr~)7K]>ٰ,Ŭ swς ݇τ:5)' .::6,1ՓFAO*AnH;O &БmQ_,8%\R D%|SK8w'i:6 vWmAG/E+g"*{C ]^xuvWܔזzbl! hr7=Qǜ l@@-N1t'eTX&ýfp=2F`7Yfh-+A\⩌V]ү"08:#Mq=鸿ѶM!ƾ]/6bl1?mIr~[C'cƝҮm?l=_*EBO'S)l#ݗӲu?>O Pе4+A5zL\mGs.xF1A|gWI-9pRT;xfSĦBf yWxN՝XĕkqPЮz<"оߣGyRNsjr0'+BIދs%V>}_QEɑ $]^i>W7GdM?6\R(X N -}K]OXئ,]eL0JA.3Q9B}w cL]`%&Wt|Í1] k!oR2GHp{_j=/xtv_8M^{ڙI`7 `ZO8m{)|eYiOY`HWՕJlg:˛7rfh bq@2INӏ>[ /xʊe v0xS`$,z?$bZWْHY6ƅ.9ѭH9Ӂt`bPvqLˏ zsF^䖏GT#uEdvP1_ hU[u]'}VCU%Bk4D+~Vu%㛗2S}l%p+(bqOGx-d|Y>5~MHc!uHĂ2 )!A,kn٥%` *cNp|(j{;FzbȦD҅`,l3Q(û5f5VZ)&JsGZp U.b1 %hLs<)BQpi#ͱCRమmS[h[ٜN.IG9U2.=dE M3|*ku'd[m\&P٣~,7=t/+-9%$ֆ Wk6 5z-G7)ٱ߭JEkR[JrJJ9XIiUi+Z/A5O25.RA~l C ="\,>FK.tT= X}{~*qIF 2ۊ%$H==Y2g:'޷ROr4UN?(ˬ\>r{ݔTH'-XztF=ř fWhWv?lMSH.[Ð(Eȍ ̰#7evÕV}ҳf ? $G"c$\OJY)˩t3oWyoXA~xKzPXyOh/|Ϟ]tHh enl=-wx-z\==V ޢ>I!h#L)\rJ8nG.mKyP?[>)!*Ro+}6n EfKEʰ-=[S<ԳjsU$4P\Jwjc%(Fff?>)ьbu|]}Lɺ].[0! ힾ?m)k?UyaFteJzDYI颇"C*$ ލ)$c/L/}ݮQ5= '>f'*V$-!,j,{WYۘ{L gtY$U63/^^2/gKK092s3g򤢎El<[W{YyLRpRYڀFDōRP0pg݋{\G OMJXY8$7/}Ws8oh݃%k)ޖsoAv!u{$!9"mؗkG=GŹGvB}A[05m2ދ]3K>[])\zDFvv.rn:+cn0D3kQbH[%u!fX5'P}~6+OX00hzjo2xSygHD-I{u({J$ߎʸ-0pUY엺> 2tqj߅>*jpFP}I+z6͐ZRܴZ[omFTfA]ݵym/cT%[A!o1i/Ϩd l}.'o(CJlS'R)?V~lה6e!k&ⶰQTl$(]Z,7ocNݩcdk&'Li*ad:Yl&P=Z)QĽ]#qNkzb퉻8`@q`-POV3D e/t;@M*E N`,q;/$ԿfqS>.7Aj7^ O.gusvwAjn'np\IXMJ5ੲ1պCjBY$uھ)%,uM/vI"cxߓ+K+d{167{~z+(HL{ϘvEǗY@BF΋Sw($h9At%B'A1ũ7Tgևɸ>ŢOcmap89x͡G5}T>إ҅3DuP]qySK"Y=*kKjF"ΌEg /@M!GK̝֣~IU'Ą:WY5M%+VF!pm|HXb6t3UZު90|ٷ+2KтqJӮFץPTkh"&B$+m]bڍH܀%Ao dZ-U^IT]$$ h5JrvqK,ZYuL q,CDOZ,_mRY"Oa@w("fߔ Q_oi Oʓsq xLoYрaJ{{sLa3$~K^.&BϯJ췐Yܘ)P{i*"JI:#<|>f])=uazwxufaJ#ƘR҄|j"l5+6ʇf75桛]ϋz4=ɑb$̗솟^7ʾ=k sܗx45}V}}XGR 'av \7aF"{Ox٬]!~=XX D*B5 2Wإ%jՍ\L8r0c$+x9Sגh}m{w> fH,k !3[sLwnrcϰ]될W#ef4>$@}=. [ h ^ & )=v]t, 3QFU0;⻤ONpc u~d qQ}زl[& STWS [_:5/ R]pSI; dK(#]L+'3x&L?-(-VAY8%bB>fn¦[^hXC-6maI Č%9B7ؼ ċ^oNt|Ni~|Rq1 HUJ!`;@G$z_5xp)lN'BAN߻z21ݽ?+՜.Ew0 j.bHuGck}%TPe,E:@ɉ9P}c@Kq%|y@[o{OvljY9>m}⃁bl7M;3G:_|39 w\S&ζ3(@}`CHMe&O^9t,|2vPP] q|j<բ[7znLjwM StFo'ge0}RH+jV+RU hu ٢0ng)iNc:JMF/Tԗ`g3nR;_BL83ֽir:.qaREZoR\>WY7q[EtkJu8",{ޗ 6}zMw92LY;GhW3=Y؋FLeU O@- Zes8$tZO 3n*gh'K |^-1F`X65`SNXr7`?~"? 7v}aIU5ґۤ÷8M*&C:,\iu Yp$ x ,D*ƛfUŗ @)ItiD"94\޺kɴ'8{, a˂YŽw̒7VcP++iRzbkvY#|kv/tVoUòUϋpI4%}#!5 e2'W%:ȵr8Ss 7]|أbRxIŻEi$*,@:E5x$+Ӆ/9hϹ{^]8zvAvv`)d҄s^Fz5ivМF%YQl+$v5klW=_yM7:jpWg^6R[2Q+/Cj\H /HWrq퓷T:wJJoIVH(8촛@BXi3;(dƮ.D^,IQb<}E,;l^(h5[e I@:©lKp r=#j|[БJ.ZƠz]UMtf_:@C ʠڵ{@F{ 4wP EOC*=G" +>&ݛ6nV%L;≸$s/yTݖ4\|j >fmiQ h@s->F4[n̿9b (/%$}:Nk5`r)e8 9I.YEH+oZܸh.BE C LE})>c.LK*ջ(m<񽠉`F}8+G-2AtHD-L#~DRDA1tݝ9 Ǚ9ݳXptv\JX r\Ɵn^Vl3tCglJb{l% O 6+LV2Wg2ꀠeb-Q>&ը{:!kS}tysWh^ʽ )/qq0ab xt/2d^*ǥ5Z1ؕ~b8eȺ z ?sCPip bq@n^&;EsgOؑD;QSmz T~Prقzj+6 0SP i#~0`5Ɇ١9FWjH7:uޜK7wFl]m%|RrO@&o ZU@0q>'qZes*TsS2#̰ӷPSIeRG%WW}c V˙|}20Q$ўn-ĸS+O6DޅS' (xͶ^¼jP64 ׍sH~(nZ3%7,4K6&mv5K $}s8-As:yqs-;)I*I{Р|VFХhoSJ @vn?;a@/S:j#p.& )+u5`h~N!$x`Gk\ jԭqt[`'ʏMӷ;-R,v " gD M]3R%.0 |W3$ᘎ³ Mw{F ӆ+ˁncƬ].V˛gH*27,%t?F́ g9諁sp_IW3/UT=21o JL鐚wrs烝(DLNA:6}uSVSG&g5EGo-s%yw+ dϣk3 p|y0t\1 F+Ć̫`{K!!ph̺TϞ~b.Hᾖ}B\/*@tՌ-{SDdjN.gYgZv|Ͷ2 j"e Pи#SM%ՠپoǐC3 QJ*aRdiA/A[آRt~hJv?S"BM-a-9x9~O@P@=hѽ/n%ܩx aڽu".j*c8FyPboѳFVkB5c_P4am|~r!uܕnXͦ gB˖UCCtqK!%:)!Arx#=J&6r?{d BJNVgv$vWLuϾ?lĔqM$X@CaXŽ/Vjlrs+rG>MVݎt|ߩh52 rK$Yx gaH%&GMO%^/|7 x8n<\wkU22RD[ү>oނDFނ'? @k} FP_%ѐ3߅;NX S{W-=퍅eB254yiyf)ρa;j-b_R7ݒt; )UwZF&7"eMtsw܌?B)EpE(9O fn"8ȭ-r{l'y'XNwv("P<&~=#˭!!&\< |XF-P)`p;[א]x!kO)N `(ֺ=d/evZoQ)osV#su1t$]&6E5쎧,c)JlS+ A?02+S33н:tT89J ,y !Ra5n=0>y0ЊNAP԰~5JJ}&kDǘQet7@qWlJT/DoS^Kt.QZmik[:Vx;"k/:4cwsNo8 KsD)~Gi?`!ظ&G<CM/ Jd40է?c˄,c 'Vy=.ѯ*367$aKcI?#x!A%|LD@;Ss n\JLK:Y!g+Еx?c~ޝq򨠎_{h F_WYCFQ".j#ݴ Z#]3|V9!:wL2!*~8=Nۚ<߬*чɑSaL4nSc*ʩDpJ'#oJy0t]Ļ-ӗ,$kܱeBϠ1T| gF݆VƥZWCW$:;`ax$/[t{Dܑөٸҧ|.ZwdaY_᯵l;8[;[@D$ٍ-FI4-lX]U2a#t56 ɋA`t0RW%!XɲbX~PhoE>zWg/:'{/yk\'1N,AVc|P&)~t>p%8 C=pJ~p1Cғ.ۛ-c%x2$-S6^ Vf c b07L7@qSx;Jj>y,uQ? ˞9r9$ڱOp̶&{&$ 7++rzՋ5(mSۣk F,|sR@< eʐwYm倒p;X`O"GWЦ%K>eDr%]4=w钃)*ZfiΨR(}4^+]POlrtBںimZA7O ֞uyM+gx"2&E!lBj"ir BhYoA9^I*EOp{r)tRZ)#;үGLuxu$F 0R`,wraO=HDP9=tPi-p':w%!Bł.>v"D# \UA)׽j=Nʣ3>^POkݓ)]ܧwFI綟Q"ʟA*H햧dۮUI'V_vH̱nڦ'0vYd҅GΎNݻR#}e[32o 0cWt&\6<j~"x?4'#YJ-Mp4(q}SP{c8t™ph?R gBfrǨI<CݵktֱݩZA&Nџ0{OM>9z?^bgKۖ/m$־ L\,Q2SvG"CtSҌTd`O$$^ h"!gp%辄xxjLxkw1؋c$i$w*Ign2f(לG'AZǽ%9*NFyGV dM2Tv@"x?Rn8fY  k=B2ݜB7m?AR7| 2*,60|ubR\,H;"7\ Q){dȁ+ce@cFpE{EOY4?vzٌ곛 1%vtgxLCad_z1O1-Q=(UW -SKhk ȃ(Z OW3r2-!1YNU<JZ?4tȗ7&jH I v|M5 LXU?x*@¸y;}"nfQ'-\ǗI6ZBPQ,'] ބdԡ{DfA8Ym3 '#UWDgy9ʟ뉅!OXb>1CP vݔk;RK1aÒF)1vο/r_~gjXQV׫zyD\8C,Wk&V@k3! Ã>s]Xy*~kH,x|uCQ xv }N7j46؍7mVT=4:Vz,6<c ǚ3N¬M|(?0[HlíIcP,L &5νD&[%؂ O=&ԵCt]Bx\}pri4'+.L g12 wn>X 5m.SS?Ap01q^ uڶʠQP3Az JEYjHXVHlnmȳ5voc٫V.~O, ܕ,$C+qiglnL! L/h1+ 2l6W"j r'EArzk8ÒȢ*ȝhO 5\O|vL0CTFU߭'ҊD F]rgmxzT}Ioۀ>ovFJw`}f<.m3] řTF$J~XiKSMp#p j@ׯn7dgáw.|6}_3/%< 2g ϳl@ۮ2?^ 9fr?5*X^==4abgI\*B"VfPiJ{+YNi;~q#UX-S~CHstK r>x;+*B!%΍\fj?av`sQ-ֲ 6A*3m #_Wqң 8 >"c9|\|7e)Jh#"@'_OE"/!VJSbۚ8 Ӎn r=y#ag߿aRP(^@SmEh9pYMZ?ȋ.| J6+o9&%dd MLž80ulɗmi 7rci$'yaڳ"dtd^c%Z2jJce͕n8ݶ咨v%v'w 63jzHE4_rL6?1פx /,q"i3duʢcvs pPLe Ϯ\$g,|:SDu wWeqN(K7M)< qvTĈZ8v$|B'lqSP6 SF/f$k R1Z`.CޔR6zmJW|2J+1/Zw"m|@’d MJ y:FTs/N 07Mz?Waw(EwϗmMP]sEVd0OBoŽ#>iCyBڦy Ĝ`**IGhdz)GDY)׍(k|ic *jii ߉tLvgYLJBr5Զ!;_V )aկQd/ja굈0C ;8Fhï Е#GUSR_G(Pq >Ny?IrwG7z *Z5GUѬ4aaE%5+ժ2|.m4ҿRV>:pɡ+9p%n9Ov/cY0@SW ?Pa'o|fI N) l`GUol"=By%s"rvzM8>(RlhOɯD*G?|Ɵc/tʑSpƬvoEFwm`Ю.Z:"|oiJTS3 uϽeC|Ɯ7{/!IN3juf.UA)7i8 {`;֑P.xFN鯓/WA 4h y@/ƅ琜Rhj6!)>Z.5~1}̫eT" zv<3f_8en cyMב,ڑZ=hU8 ذ5w( gvۇHHJӿqƗidB.OKh1z2j<_$Ë=psJ$|KZ ij_(;6^fC,#+fhkXi=G}MZ0p +,fpGF ؄Իo?ϓ)-W[D׏HK섞LY[Gɲkn9 V['IBƇZ'ɹPN,6 ؒrt-1%v[`Bt"^W sKߵjWVedme?k7Lg$9m,R/R8tN/ZVuSͮ,'aBUMpiY&ҍ2eZkP0#1-`(ćUa{SkV!Ůg8,B֕Bf(T6}8(x;F4Ø{MFrl$k?gdhS&o!ך}ZRvW{կU+?cF<2Zx76٭nȔ/]͙?UI.eM8Hz3Z\ri4:]:̐СX&ja|we /}@Myu|׈KeĊ=C&W8*iRgbqfvsj d=&4~cg#VP';~$ "`5Wa[˛Ѿ F2M:;S9mQsB ksnY5'DD ^B3s3lB2W2nϋ#GjXڷpdr9?8u{Iw,F(v3*q.s׾/GP. t,2U;t>N[Y)S|a%9vPmJ9pLwBMQPnf#;ɾ[8ޔ*$}] jY T~IRa،tlY<?pHfL 0^'^X DO-eo$~wREQ}1zWΩ~ᦔ+>Kfwkq̏dHLOI{E>G |*Z"7Mru&ވ(&MӅMLo8oK0S$)x3#&KGc$H?> KL@޻Ljo~F|ɭŨ&iUn'" d5 ޮJEe&6kq~Zyv٘8U͂#Mvl\P?^*fn&[p* +ǩӘԧ)O "`#/M>SJNjrN3$;Сx,4ޱ1`B^>yGȔ!>#ۦ/r ZF?gҫM0y[H&;IaFq/`ss~SlOF9jƠ*hɉ|Сl܎6YI7oTD&Dy\]fXlA)k*s̯W%Cғ- qDC#w뾎ǎ,3J$pbF$ FDU8)Բ”n\xe/ZWzx[HPn2lKkcI$D!j:[)zA{L.y6=ŦSKMm~xvqZ,Qd1wz/bQw-ܤ9*gy!kA}_W<@$=9{.9 (5_nފ&P'Y1=:UZk·32a!6‹gj$y4S0Ett;צNn3|Ӷh~r-1u5M6a4,<ܘBH`dToLSJVŦa2:w/|O.Ng*Yȼ:9&V4=lT _ .(Z˦y5%L&uT)e cuٞ-"7Ϯ v}G`76_2ªUNDGmj×4 Iq8#B[{C/$3BQcypcf맂̔8yU@9U@Lr>R:)ޢ{[k "ِx DqJĒm9@!Е;0w9~1nŒmBJԳRӔjXnvVkMӪ 43N=OB }?e^pm_vb{̯ 1-κЈ;ftd=fŐ-@{r3 M%O_Be bg޾-UZuy~}xfjsȡr*S΍`hN%½/eJ@[Y?U4Dc"I}U0 !]6rK^ .1x( Ԑ/zfc5P3d?J_ұ: X8k#Pc4.$Y#s$+lZO$c2Y/g- 4Kv}HG組9W HQJS;UTHSM,h6KЂk*MBQަSYG,; 0?.k.LjZ<VFW/~vd>$bmqQ'r{dX R^?ZHl r_| 3iJUE-6Њ ')G$nm`Z5l*=q< Vf@__+9-12]Fn-2|+Dg㻼Z ۃd]*"jz]~춀חJoZv$Ј+VCRBiQT3qn`bج/ys8_U %[fR&dΣ}rwj[RusޘY\0&ݓqBKH6R%}(?l~UqpK Hsp^ ;IzehvpW tXGmKyO2֭9$aŪF aH_CI'Ҕ~9C,WBpN^zÔgJ eiO"Gg)n-)\ws< գζN DyȤJr\XjO`f9ێP{؀͜J.`\?9\P4{+W6f$&=$W gtZR!y)t#d.}.IWx!6,fR1`mۼeHwpfHWy7Q3̾52ΐw6ϕ!qTCQTDž@+g(w)]ӛkCR: #$_Æ5sFqV'7YnݼA& fh{ >;eNJ%$cG٠VI@L^J^Ze4ۖoq*+ywr`DNXLBR;p:-J®Uzͻ+.;AWT3IA MfL\­[|Pae>V crc,~ ciA X@<B'? 3d9:CWgP, [CXT A7nx>mjNn5iPC7.ӟ`1qS\5LpmϫbmbYI# 4QAcyzŞ""ARZF~;H~ưf!63hf@,H`p܊ILHpWEl=|pQ d)+7Y| uIvw;ߣTn󟸎ۖ y@'O*L%F ;F]9qyc)Jb G\9 ң"AQeo2㑕{io@@. ! (YAWJD! o;5ЇidWRANjꍳWfƌACM κذQC\Fqo=Cu} .1~C#BK-O+tʨ~=Az~ovߣ ]r6*_F/a$d]) X˙RM17{1v*n@ sH >U[U9s\ab+ +h8u\"AYfڟT~pb|EagE\B_?o]`g'G=Y>ڤ/4Y$K\Ec x) ZQR'* |͌ccVPzPO=Esw"o)ބbPqlʅ>?D5#MGNqeot8jk}DM[b9I|mBڑ:y.몶MI ?8ib (Nλ䗕ݓW%bj Dx8CojEtKFy`]sv|}%ĊWowrؓF?aS9e3;P/䆪Bw`E Cɼk~YVGk"yFCa0_"u" fiEO=#X-dxb[fF"о%ew$Oahݯ,kuP WA#xsMT*f*[z_ Ӈl?@"Y; Q&bٽɮ&mYqaj' ?oZ|gUuF*mO<{B{H6R犤yf05f{ermѠM9 c%|>MZXޟ9/9o>K~0^RE;(0FivF/3J: |Qp-椭ᒓ!YLEK=GN}Inu:*Bq?6=%5rG ܼU*MT+%%NnF|m^B?M8y֐cl.⿑}`jQ[=Jmn+h^߬"1X-+aUEG+t۵$hVʷܞNIv]z>so4ucQ޲7`Ý&V%b8RN>$tH%4ڹ޺|9u6ٞUuNN}DĹvT|LʗfWRun5ƇY@d%5l.͂G8a6 hZ PњNb0ik`(zjas%60b NGk$&0p~ w^L!&]:40*oٗJk1; ˟K8R?ӘҵχHa 鍺,5 [xޮ/-`$Xخ/FbWs-`^v03{}wh),i!{ⶬc+tpYJNZ'sOy?z T aA Up`n ZSc`hxYKzZ[WϴICEn災q;"tI\Uh>,LVt?wZicAoS3vsf+qi3ngZ9nhϭ]qj5+_[zn,˭Hȅ7v[V9םm/V'H$AFXl4 RUk ~V\xc&ykk8ghY#V)ү~ɨ9MAm=q).Mo R5M?@$(z`?K8BQzrOqpT!aT^"m&l8ϝRG`'~+t @RJH2B$flQE*Z2%ޓH`lM&QoE0w_oUn]{@pA*'=v"/%Eq ILM`9.cИ{sOdn):I/<ܙDoDB$4(|S-oiYUA4%WpS,եEl_}4!?ʶ2U~m bHMrz?a #^S /kgG"`]KERسӧp?]TJ6iV'KFif&ḘKX' }B[fUeSC(]x:\}Wfru;tDgM*8 kARkÓ$ <6dAXN{. 2[e'#dOT9XVW@sarҙU{60~o\[쎒{ ;L).JLJIl͒ pܼff%FqkbDEcQ_̐`ݴP~!V"~~mpOePwMe!s*,44fXs(J.~r% cIէ9AhM)y @鵏;D)@lw ʬqDu\6#d͂8* 6$)ǷFսzf´P9OcYױc^%WjalPl/\cHt^`hd iX?_Ve'Wk땶 ̉De<KR9l;Zlsr@OjN?bv d+O4I9$ܶWv룪izH /{]^T ;@^ˊSߤGGh͏^WZE Al0<&EiCF#4:%o# t_n-LF1d3YCmRe"iQ#&;- Y(Ք_9D1kWyTJ:̈\PeoI.[94 Ixݸg=.o M07SDr?@ϰUj<4a.r}a Bي7d/r W'sxrwx|JR~ctB24Ӟ8ݰ1%n-/'X mLE6Y2 .b̟icr\|!R5}C.*f\!#FNڽfkD̒ Gneh5-5τVy5J7Xg4sASX}W&<:`aJv⃏JLbAda`8ɂHks?$F)SbYiL|oqG_xZQ䨹׉ЇAoRΰۣkzoGe*'eZ1=v:BE:A U g6L1TJ[W5|}%%+rQv$˞j 6PAEO$L2lEBڋPF%K|2BmfNJIƂa*}@wh;|8eI8RY-9;FDQɕ_SgŹJu82|{IZl^2_%x6Ew#Z9`DV^!n#-@k#WA2%6N􊚕`n!s-rIHJh_bRSC<-N4K6Q^Ge`@^oDs̓yMSʀ vkR~\rP$i@^.NHݘ?5#Iyu:ƅNy~ k[T9uBbѱZ $GzY6&n]F!ٹQZ6$zD V;-J'ҮQUv nvVɻ{=s*Kٲڬ}F`ȯbc6A$xПcUWiUJH ldhĚ0Z`1piZ&z6aܜu٨x˩~ƕ{?o"4}f&>sV>?'xѺ ێ{Pr$\S)**E2BiևA`'?iO BYƏ0"tܕgOQO/fDu8Ѕk8Ua<"s&4~/QZOfIKp\•\ip_[ tik?g$^Clߕsi{5h(R~:ᘪΥdJ!SpCƈ+s,@Ĕ tFo˺`t>AF tS"|XƠMĘ*c*wxI1loCqp:T Ip?6&`7QC(5f18AĜ z-.2RkM y~y!B-aҲssՉo g=hԴ$\(~-@"CRi(IdĝWY`9CB(·|?W  6IeBw PNq>oWBn;l=DXJ,[YGN^Q-#KT܁iS)K㫮n-BwDhpSr8(#dZ"G<) <ϵ#Qݨ܍j*eҟS# GGPqn krʭ B/LO*9DEn֠\4e/L,6s%8ykR>MV(l{BpP4ж v OEh5%H}:JnȳI9ev=)2A#v}(uATtgmQ&muvuzPOg_+!Tua'v{ư (kLȬ? $/gx A,ZY^;f9MKd5oe3KX^KuŖ!h^{!2rR߾tv9~lt:-GْuO塷/;_ eg]wjvj.bZUSE63;ؒ aX\*, qw2. +Z2C-ԩ4 Kz(tZ#̷}o!N1BHGYF"dW8%K"2N"k*P̫K@H|+?QnvZ-bx1%q&l\|gwT^'Sϡਓ%69(M` ˾su:9J(H.ZqO%yZhAչ*FA6LR/8O*/ z̥8{k7 ؍%( YXu,M5x:G*q)40@Ƅt{B0+N9hU[2׍/?e淉 OJnmyn5H(q=b}H\D^e|y 0XE~s\[-?9."M;xdϕNJlÓi8{K4 T* pwi<.2\};lSA@dIR_GfE *Jl^/W%M!bЈ14j t9FlxIGIn Yʧ}VIa#vZΑ<@^E$+N>$&jP2ѻhX_5.5YC*e歞xnV![+;+>|v~zUm7r$Ӕ U^;Caq ZQCc*0{{ZAYHyLN]4yA,kИGTFb"l12֝ -Cey>ozo63nV,1򴰹9H/=y6,;/ !HnXUUJg8{PףhThҌWsIPbI+uP"OOٹ9˞6KImg,;و?D5"K)_GGeBH]: W^Ș9f: cfr0ƻ ^hAKu'seTDd"!+(h"$4Dԉrw45?["XaI"]Ttk-C 6)#-T@pCDgj'nA~7|C ‰02<욽gzRwEɛn.3y[+GሮYcz\rhp!-cm&%)K2l_A#KZ#RmO h/,z+UFT-@S@}psz2-zOL7qdjAb ήOgAJh'~^{fE݈ӰOSN?J"B^Xmmy31AB*LR`=>*/>J{nPKWR1v(\rpORP,[po4hz06Ge4P]}1* [6hnmJ\*]p}a~tk׮\bhQEl@i"M 6kV t͈[-Jz7{_Y$}' aMSa$eWXGf7t5zZ'EɁSjc= z}ݺzg K+LQ J(oD(k~Ț$HX0F щ8 }(c^J-SϬMfQxKj LbEI8AG51'h+~xe;H>s3 %5Fޠ<t͇Wd$&wvQ'fɴXw~T̲ZqsPqL:Jk:uHٳ2+r}?hcHߵCJvti=(Uxhѥ;T ,hd@_@dk3w9k?!NJƝJ;'[`] &|##ö!sz뫋l)beedPDG66vӬV+E̋V/]1yh֫f+RHgZ AJ}FʲvQ0~Ac3iʏ;IIsE)IE)6iXm|_%ɛP7=I'QdŜ炘+ %eVKu| Jb.EF5*<҂n#|+?а򣵣DIӣJ*ODj s9!-l[U,i^AԺN2t2/rSKATA&8 "VɃ)6PT}-?Шoʳ69rc]+*A .y%_2>+*gLYPsJ=oif5 li*dRYkn򃡩:xDcĦנ",&PԮ P-~|| ?ki׭%=jĩg;qrX97%9"bgv'հaQϽyG>SmF&ODA6Enzh |dJ;N ;/B>,eã!UZAUQk_SbIP ; 5F@,X'6FÊ|P*I*IG+wV_4Èy&$>>z ^Ń<]_$BVœ%bϴðVG9$=6SD `Wy^Aι[&'Ʒl 8Ap: ~8BiZ ŢmR&,^{?A~ aZ^w4/+`d-F;Ck'͘QeYCq,3Hj nH"xS} ?fE%ǧ{7YUr3cUu^ayд;Đ[wW:+GLj|Uԍr'E#GN fOs>k-NQřL$S6~} v΋#6p&9E'j.oEqK~B?vKAE(Ej@Dm<5)De1h7"C[bCfwݲձ͠U*;u&,4 p9?2$y%vnb  UԇjKt̰6lAcWlտs ,EzEk=EP0;$W-]rAYU}2DABI+8Xu/mpӟuD^&&ˀB;äX**nil_|㚃N@a Z ܘ"\/RTx!(hp RgG)dv~#scF 'Eq])(x*NUHUPhlz}+@׻;L%2 r$GP-<2uBtG^exTzrjۑ ᜾gٽ8X=O)rf}.("U1TNDA)9K{\kFYWɏ"yLOB *k1Ay첤4 i2ЫmӾNŬ\b8\i1ǏhIm( GJbX/8p\QLKȟrŧQ 6yѺ{h j,?kwHxvH{ 6.@^Ӣ%b9]DaQ]/)/eWN~Ӥ/Rۋ.G*ߎmd zL[Ԓy/:."1:ߌۣ7 \݊sew~o( fkl]4Ƭv0GKZۂϽ8 -![D(-Em~PvnHu,Y2i#N1HIB-\eLs¥!@Z`:hP;OdV+ϘF} !NTBZ6|Zc=Qv&o*:l%CloygE&7"$컗wl N&E)iyK:8,$~}c(<*yuM%2(IJ >-0@] 8Qܣ/JH)5fĨMتwmP[ -S´g/C  \4dWzm-kQ"5De[-3hCe]Ű4{q.G(g ɿu J㞟79UeZ%pr3 Y+ұߛ5<| y1?SZVI8>h4yqj+%޲v;l .taں{Ec(Yo*ژ&9+!AVc(!_G2/M|iK {Tʥf8ո"v& 1=[OXtݝix*ц{ jӳ)^>^:>e;L,VtLG:U)"A$K%g/7U.g8/c>ۺ! Bn`_3{WK^yiDsZZĮ޸KP*1 R4I=8&VK!uEʧѫbzai5m.ň݁='"_9qVP¤3wҩ#TzF[tSڙLJ9-GEH{+Pcocw}iro]C)#DSià.-@,|⺢\1=׌іˀ [ӨL]!g{zRj'qs]f#n2c@9ܙ IˏkTH\MQmĥ$R먗q誚&q1Nv IyL s%}$5& 111x3K^Y%3hF8WC>FWZhz1hIfV ƣaHkur;<ڢ;2CÍz 5e5uS~/>x[/ɸsQh^O+$XIaZkcY ХhMYX5 ?.ӰPRsQ)j \rjy'UR90.v56_S'ΎΩ*. T/=$.iqI_9=`\@oՀom4 >]2j,6w(z(Z(+Tr%n dw ܷuͧn=JRaԄa1pBKSf[ 8gd>5pa?`|ILb? n^#,))%~tH/01݂P["mRYWp㞹~&Y85_$h\WZ؞GF<8{:7;2cj̢2!䔴ڀo滶VCE^ XofzcEaNTpeKozg%ߵSoBC4m]Deg=rG'pƷ`?@S{4AM)UcG_M*SGNYHdץǝ;'Ġ pAʴoznlkՈOsW'S͆K=|Bȟ?V.|m>w!(eWY \weM ߚaj7f&'Z 6:&")hWhfv #qV]aC#<.[II-qVu8|]O ɍkK-;FRޑݩW^~oe¿3Tx^cI/"M6&s?xV+bVᝪ|(֥鹷F9`l-M_u:)pptcL 0G!i`{}l>1i 1޲:2Hq]m_q篗7XؙHI |adHȱ.Ο_;$ _ t=xD r)ϲ^+ +H\B8&AgD3MFăOM#s{KFL`{:EoyP+SA !XN^BWˢCu?uNj+}A+"㚐y֓+F-;Wmo,`.@g0m500 TDtmET'37~ۦm&" 6o+-iI4ĵO[hJK̒%EرN$!'Iaå J1y(Dc ?pP57JAN~1bڳ=VW9UC Dpn06HDN^$ C@ZhR:nk*-70|^=頀Nv,c7=W& ";b[Y*BxO|@$}3@;r]"]ϭ\Jڈ1xh:EؽZ!{TSNy<)zI !t|my6qSuz>Rm͜FOmC'N׾vzy+bIA[yEx5|DW̉nnUsۜ"rr$L6 @`L|5ME93HApvۓV?M\[,[Pu<.3vX^"L['rj Yʘb-jEK|uyX\j⩎m2G)yĤ|ljV)z G9M&zx0W7C?!Xiw-Gn 1Nݽ .Kё#'+%-"ߘL Bc$2_*[Ք;[;6°0^н>]S15-}kybI(6=c+;/>YZz #ȋER?#1Mz5"9g?e9>DՆ\)U੹rRl3`>̧֪Wsq,5hCאZvU.ص<q3 x|Y J-v'Y=?NS(coVhXx><_O:#&D#ysKE"TMHCΧ_'jcb9" q~a) ٍ* J2[ |-y/'Bￛ寓YlqZ\ڙ&:q#g{OFCCN蚓 [پQ#M.I2h'W.vT~03 dlj539倞3*'} le7VD(q9-ά@?_g4\Ekfx^Lԍ1k:fytQk 2vfP[AŸobj{3ж`{w&fσT?<{GqA9ts_Q-thɬ+ ed|r8mY X֠z N0Jk"+z^+Qsc;3WiMl Ie+gEUHm?OiG+ׅB`bE0޿3RRjT t';Tx)T6K5K(7݅|()\-5UttcKz-CwM S՜ jb Od R+nAkUG( +e7t5=,ea< |~'X8L0ez8`c7W;(nb7lohSC[!_P-5k'|1 Ps$a8H"覺eHin] e[ԡHZ1Na&~{1y H}TS쒎jJ[B8D3'2(62ܨi;jmK8VI點zĬ"`S2ݧy#[ih@9[fh`5$dN N^tnhK[Q/>D:4rn)Hod)> CDwN[\@Ǘ4v].Ca9j:zg^1wsNrA,CvyJLgV nC֎ >.8k6ϠIKiӟ=G`mД[/FWK`q_\/h_T\C{=0(8$=Qd39Wi#DgsC#!Um8o8]MLÊσ7<o}.G IܠUZ%4ފZn?AD}&+K1V.xy~ͬ;LsI5JZlS.210hDRҋ#Vit̾Uܤ_oF^ʥECǐ3V#O'INMnܷ֨),"Prn%wZ@?-_tH|7D!V:;/V+-Fq+cg9nj`5Y.5"msb)-3jcQ,iUZ`kW (KK<L"穔Q;Rit›)*M AX_̎7 ~TԳJ c3~3brM!A\N>g_`90hz de!ߣ 5[d._\ R 'BRE;b;C,vB"ؙR,(?M\Zk')qѕ幓6޶}s%'`Vmb^_/+~dw][!ഹfco8 CL[,G+gV`L?QG}QgM#$TTg`~{hPt9 KE!*W"06/;}Zf瀥]؝*ۊy)/ݒS7En[x30k\ڄIR &aldOoQ)k_H@0.p<"=MK' 7XP{t;\Yf] c)nNүV_6(*IG$H $n`A%7UTAz ;A7T3]c!ǁ5}@YhH)1gR#nU:zۑqPR^ ,tS ăCHiW!< 4tH Z˜ꩰ D^`"_cُ!HdDt4 zmuZ}3IxK = `Kita2{.}LauVҘ0FkʰqvPp sTݱ<̭nw䏊c@*g! 00M4V}͋3=~7c7:==<+rP[(f~4)apoa RzA(+ĵ5{~jM|ÉYTOJ;׃@^u+)7j)i_MD"/5＞.YY}EFqYy 0힁ke{T~jX/3z9%Lj|1ưr<3m<dCK@oxLFN O8=5BDd&d}644wW&KO{*{8nE$ul؍[ xJ)Cw`0Q%V~:պ9+j?ƪvoh<N g.k=#ܶ dQd\Q;r.~q{9^fX&$7F ~}ƧB601ZY!ˬuPt.X 4~'õb4&a8K3S +D36ӝ?CC[vɔ1bEx9Uo k( hO I =7 5E ":כ0G]~x~B1q?ڳUrAX" FLGO.R>5#$=4gMe&'| DboB1$f0%dδPPpU[>gR`pA'ޔCR^y2cD-vV.nQzvB(kcQ"@3m 0Ux|2nRa XR=WQUnr2,a%+>+q)]0ٵy-FzkFD+ qzwUxi2'ߣCo[suf!8&,:_筧;-e p3%R0zPX x9 αsͭn jO أn@L6r@|~n)"|{M]r~6㞏I#hFD4W?A(g3\ ? G(~;7%*uj|yBi60d}L0ss40ֻT JrJ0#΅#1/TRFJvJXc ,U%X v( N8&l!̫ˈF)19{q{okRgzDbj4[, 뫓cQddj6"UǷ'*5[Dٖ.i HoZFms^L!c8 B[~JQ 6}рͅ S¥aO<'W>-.*,-c+Ig#>cJ)VPM `p5ZVf>5D`3DIoJ{ kc'j #aadXQdEcW/ "3Q-> ؓBWj8ӑ uPZ@?ꛁb}өJk#@{ 7YKޡi[L{쉎RR{RM޾XôƿIRWJ}1$͹=u!9ꯩaqO /oL5+lit"a&ܛ&,*VSee$幅yI$;B+4%I=c^C~w~q"?QA‚UP)FrZйA\|%Կ~"JImk.m{A(AAO)11> "߁k.3 9sC]&-cr+O/ߤJ,ϛ%cwИ1g쁗erA(>M1B$rPpqӑK=68\-L^-6q'1O+uM;y(@)XN>L/\n:8g+D$ny5ݹlɫS-կ8 %-j u'K4\KM@XYM';w ])>Ȋnp4Dy-GL5@]DM;HgS$wBc?ϭ#7qE`.< l s]M$m'̿GfDSsi_=o=&pzԚm1!i'ņ"CVޅX˽5"˫ 7g i92/EsTYznGG@Q/` *rCdcYؔʁtFIC2Q"#*q]Gdm202M) oXz[VǛ%vI4= ͏'|]6d5Mǥ?f Wd4sI%x:Fo7 ֫%`؝k7.a*Ap%K` w=0S _L> e]<(t+ PZ,X#F#Da d' G l5c@ī5k!賶˕dQsf 癲 MiDr;) przW$>82+s[Md1wйL:+8geKĽØa}ԅoʂTic0MXY ~~ՎjBX/xBꊱj%Ո?e; ? BW_JQYs⤮V v@RY(LeVWbF z(d2sXFd:[ɬuAAr 0^`gF[()XLyFqP*xw2cy2$<ױ?989נDbhck0#d+YtMk8_o5K. d/yEό1|s󈯊,Ʈ̂'h伫a{~YxQ̆ L#y3a* qYeFڨ'hO@Zs9cPJ>Kr^>r4SobOFSytE!oX v8^@(" ,)zy rpmKVU!YީeLVxʫy>&-#o=_.Mk'DRB66|&Z^$b@m)ed6!0"HT[c_QA|l5&v::%i˴3neDqst!1%|ɉAaQV$+ZUqoPiiߨWpwEVΩ|P8E"ߠxEN{~3!Se3j 4…^L-̻Զd2 šhgZѩKH)5*y8in(cVcZ$wgG4G`ʎ4}\#yu5ZAG|;׌4vkԎtZᬾxؾa"/ X+2Rk\Bt6_܎z)2a.nnuzO1I8Pqʼnk<@stxpd{j7rS@\[=˂L]wS,()N[TzDХJ72f @M{3 |~%ZE֕FXfܔT]4MB}5W/+C0_u.)6cX)̽rx&"(t'tsPOlhI[zNM<Ф[c-+]>ܫ/0%ӧ'pr4D5voUww[Ҵy\N KcjTא*MUKA͗!EWL6p#T `X֬C"aYg"2tbn?yٿ\-ܿޛRݩ.e2O!I>Jg))6꽕[Q(< k(Z\o04-őn@ywN,FJuXX]: n^qVFQv1%K)~%MK >*@$&&Yŵ8-*Qq(o-XmecF63M(-+D;ZNOIWiQc^fZ\:TYKqS\: ]ĿN9LmH>\)74{տjyi;F[i"P"]z[72]/ J҄K/l?pז#NRcgF/(u'x4`qjrhL0/y8sS+㺴@X7ҟh08"^P OC 8OkᡇҭBU X_W %cK{ntç]h0"Fx2 ' LzϤCi>RTLXfo-ıcǡsB1pq$ޏ=tԈ}%1o(SaGWUj2>ԭuޞWD}ٲipc+2ݱc+Sӧq@5ė]*CVTtb.YO6$+'Q@ҵNpc!kW9L8{o{Nf ijX&!OP6LVt߀?r&l {V~i JÞL*MYD..CEFt |Vm '6 9@\ԋ#o'~kDPstE(S~|Hv YU}ҕ|C* UK `({dh *#DM Wש)dJ>v ;]GDxg'}ǐ$*ޡ,`JhSJ}Wk;2B F_z2 V|&(dB>74!uU k=\L)~ZYЛ>_%]-X ki|`I'&A{NiKcYFDS[qdl|M/OL:ak0VMԙ0`G 1 H͊bg͕c$}doF0+Sv}{ns]f.k!D=[+#2p/Jٽawt*kg4|"w9MtH}~Bv]T#SNvGoT>zɻff$6e^!|!tj\?\ AX(Y0N Pm+ۨOP(B<1R5t{[Ao7? Ysn!o@5[ؖ'ڛnxӸO'=Ҩ^B1alt0$e5[VlDHa'TBAx"W&޶j_Y2^K,ӫF"op7• 7X+J2t5WEUlXP+<)uh*?(k~FY6Iw7͙KVFD} E:,yqI*NJy!@Ʉ2g mgC`fԸ(k OkUVImOٱHkb֔dW{4 u /z`.XPj$[`tIy:C:>@ PځPhpI\Vm~-ڽY6ow WǕ}?2[]I kb/Tt@6>|N9k~B핔yZuJay?n' ,]9]Zy}S~K@ja]kbDǥݑڶup>"X!HG$HI^)i!Qyp1p"٩ Io]-kݶف؏ %>,tJ5! ׮Vr:2H>ќm /QF)߯ߦ+f3 5Ú@,pjX rϠρ*Mz2'窙R֙&gO-VyktslKt`M0S fq*H5Ы؇ xeG`,}]h_&㿤F37SCa{ GUypNmPayE6ViV8xZE[]gԺ@Ac`#g]XKĥ_"JoЧc1=".ׄg;KV2]}DCZх}r&%]\ 7$7E֘Bf,&]O! )J28L%?aEcEo}7JYWGQ(+ٙ~ZdvX&<@K"g"G%+VةE{0hFhLI\wMh^i| !adYD_VӂBl>քL}3Y!˞(%Q@2pEs[`Z+ N:z`{icPct+*Id8]ia 7]ut oL/³_*Ko[/ L7^,\P /|,&0ۨ#EqqYCl:2XsmgD |QL~֮CtWo\Zm$1¯#Ʌ+Xs̍ B,f¸'u6^;.wOcB+8RyjJJ3 Oު83OZL9uljh;KSpt~uDm8ueNzdc>~l(ni:ԱBDk&6ގkzBw` uJq2-]*Ӻ'}'jTdD%FAr*P@Q0pgdQir 5ȕ# QsC?$C-D]l6቏޽1C8~⸹iZˉ}`;Lv%o-O^Z #ݒ8IlB].ALW2J=5kBEzbJԟ+qnN~دq7?#rDyj9./Mw'6R1ɎY{?n@s2u( ) wsШLЌ48 $ 8ͼ>b~rM9oP;%LSp{ l{#6W3\.mlo'wH0\v:'CmY/ng.֜95 C8%\x޷$Qe9}R*|`WayJj4 akK٦g6j{%LV<;/,^ y42TG]5S _Abg<CUfب{(Hzc(eZ&$7[7Nü%HcOnwos3Lh.;p0^Da[ˑ6[A9G{%!О_!ۡdco\;[3PqYhHDO7V9Z\<4|tǼ,j@v`‡9MT98(KmPYˋ冿 >l~~AX$Gq^A&g)z87sfB \QڴAQ5="p9(JdeeȷF}ڿvVǔ]st:<=U iR Z(&!FeAwD8,T<(+RrH=͜tJ7iOXm斣sf?BBzUdu(8t8jEyP9E&?EӍtv=3La(F~XQnFQ"ȍ1PҸ`:q%Ԩ֒qʂ|1 řfޝCmwl#2`gn:mȪ'%mJCEɐ<f'QB:=`rl !J[ /ٔ n^#bPc:: `唍޵Q9\=HU`YᣓoF./ EH }i0JHy.bfz7y&uZZ cJR%{ tXes>]]5vL`S_`eot3V; +,hNC_йt29FWՍ(~YhMcŨ3>ҩcۺ0\eܭ' i\ 9%BV,%d Ln mx侞n,0T@l&F-Cӌ^m3Ёڦ9o"m'E7k1 559h)1+dP}&cUU[ӄ`(K/BH2cHf کh((9ui(qX2GOmuzdS@ͪzoZR;D `mB.0;y| "l\K?֎”LP'60%Uۦy& \Z!B.xO + IQ 3{>\9p2E'2! H&!SbG8aҶ%xCٗL<-ZՃku-$ z'cN[;(N"/SAu! " G t1C2$ldn=93[2}j-Psua[Ib"rYKB_"U JxuN5h~m$.{Rs]p TΟP ^cuKV~ \p] "-CmpW֥ O:iIoY-V_5t72ZY% مǏFu_FC|>3.54_aypMfC&D{?U]'y0kP7}q&Gq+&?t]{l*Ngh^kGb%_{DSW<`[&g7[GgV>D[WԹXe`xўģY)Qď\3s'qZTSijh bJ=29 ?~9=KEr)~;)q7 Ub+$>Ĥ<+Zi{2₁nHSppf  vpܶ?`AdBY)K=~#.YBi7 T~˱)Ni%_8)-E] *XZ8+6#e$*dBVyΫfϥZG6b˓'=⾸=n4v*ˡN;xZaY]!Y$@0pH:I}z ~hu7n1 uU5}% #%gHXZvjG!~Cu\]]P@_biAlD:M!iKXRw^Gnx&nfm΄s>~zǺ8نEj!J˓97gfu$.f @8k[.o5U4SY%rfn62LXϴF^AQuT{'OoA`2L[a;Ϩ'z|Ĭc:- %;'T$YҕUp;QĜ?[&lD6N_5+6\ B5f-@TQZBC`ra3ul'eR8Ha*PtD%x{WQE='dbgP>}k7z*jB#[ hך11D,$(+%|R VMg8!1QE‰7#.W&,plƥFr0|~vm,p/UꮍEG{T5?=x DS;)L{EtXzΨ*z(JK[ƓyʔgR#|{skB fxI &jApk+z)'8v#i I ,i^իkMd *o͞L0SX;YNyNjj4gp=C %g(N$-Y Ob)>=0Ȭ=)`N5wL$-m ibzj5h`#^I4<h9B-z^Spǵ3F_NS3 DqZ7;!x&*pӤ)dtW$1=)&@Y|%8 '0{ЫRצ"QR`=IAZ'x2RG*Fm1ޜG cX3nDZ&qk78P^pY;/)#ABdÛ糬:0>"A4@p̈́0ͺM# J:pbm- T8v4)K&E(N3ҁiWiHr1c/?Yr)l/"|,4^ ɦ]TeSj.uϒ[xqy&s°63xVCjOW瑰Aaᎀxa+=o WPzOd8Tjye'|Je2/9sG!6zs{G"f3W|!ß"I( _#ѩ)YZ{㷵#1#ih&֐@T`x&@~x o['KID6])X/2ޓ1hܤGm_"rjׇtY_wR6>@^&8r!|0PT ~CԒ )f/H߉ap4@VKZ<䣑r6@N))F(- a$|tH+|":s_#$=]֙ w>I7{:xyB ݇=Sg$/b*${?c?,kvپHh{LzPCdbdRGh̓-kY VB{#b\\,=.zЎHHFc ƊfM֦Xmz4EW!;ua͍:~< r l;MfT{Hd #)ۮj G6K8%9y*O% hM 0Ws?Ξxnmg8L.(4λ'dOOlõMt $?ҿI,KY3IUiEaObE8zُ(>K Fˇ;Fy~1+=I]aS@Czhiŷ@ dR;Mwhm&,~zШgZQh&1`Vҙ!?[M,68So ⮓8MUiTlp z%(;|9UaP8-?Gלs-hj tŸU:c&J1#fC^1^|jnײ ThtD+eR* )DV9AEh\`d&Z)3q퀤}C3ZO@YST2Q=._QFm=WDa3"=EzɃbch:b%v?oW2FfY=v;~ke/Lq^&",@\h>`Z5!-zܡ 1,*=ΑdC|J'#SF.l[GNUa?ssG\j-H^?eWg!)]d}br*AĜ a(2<=4܃z<`׺ã_ ЄcXt[SaO"}_YJt(q7GrNDC`cTiJ݄%}]D䫕E#S-A4fa4 &={9L p.v;116vn$$zK`f7:zt2m0[ +v`&~Y H؆d&Xw5AbWp~Uuu{4)Z5`*[6^c>m0d{g.tHZ ۬[h.BҠHMS WCfJ9j$u疒 NlqO$!FUDVXwSvO-Ze^z%ʖ˅Yܾqv6H6K+,T.05x:Sߙs'`3:ŁMcf!g7K"_)VOеc_u7ٯWtGIZ9bH(>5[QϱC$}CXqO!5J6_4[v }$gZrY7K>s0y!&Ձ]!=Z "9kl.NU}28?Kl"&[CXkq]Vdz~jb6 -d~. m} Mqᄋ?鼟gJ.,E/뗐I'l:EIaw澫,(&Hqu?0·@ƕP-xtK&pJ58n3(%v"X-Z %S1`I(&m G4p2 Qj1HlW0C*PٶzV搫EmڙZ*?gD⤾;LkMd`/$XG ۙUtԶ\ qX#D.hmЍ,F>@ܓPm_eBbf=6]R#ZVIEQ烍A5B$rˁ/44ڙubimYh@z!]/x&0hőo0ǔ>"YkܶLa [Je򄪮s Qq({VS2;; x3,f͵!CS_=wAo::F*C1\B+h6݃-[wdՋJ`DR6ϑ"c ޠD XX"PX}"/(ݵ&7 :(ZWƽj}E|| ͑? z~Y8nUˤ"$ %] Vco)5E@'bl«QiC`!DZ|2rZ%~"}H}7 x(Dk 鶌 /^~D;C$u>.{Op ڞ%'St#^m+Z[a#g՘vM09T8 3/E-wVMjZ~v'ba2+xVU8oRh AY,xpBU:dr%ܖD=gA Z L8ى dzP12z}p|Ÿ76DWXw :u)jY>rJCJ\b֞fjPm=Dn~1i+hB:q\p RCqY7tsP hzBGVw=S'hoIFʥߙ pk )N_0*~e%],"<+eFԋXQ6IٖA#aq:̚__o'8_ N?^,1-2eT(z7 q$Il'C\Bh#G !C't Vޟ&$̇ 4һ0PĈR/+ h(yH*,&Ȏ+`]+OفnB/$X *pbM )Mf߃_ vP 0$J8#XEkn|Υu8_U~;丵WZ(+QgI^Xgyk08z25s"Ǜ gqRIM D_gUzH!*KC@;g r\&θDn͸Cҭ- jB1 hN0k;$#jh_\V* jhJ_#uVb58]CÚ7a_g m{G ޲ei9I-|3zXjv2:r |U34anfKƵ7DuYkǭnE >>?viW8FDyPr:)|$6|lS=+I>D`zKo<2 ΜUmgۉvj,ԹRs]1pF3Qػ4ij)hM7ni2( raB_HC:m&<7pWydW16lRyZ2%IΪvcI]i [9`qRW";3Zq0xϼnrwR[]U<=9s98aN P|)=cYW{z  dÎgV+9b= NswXaw }7F\v_0`Ҁ8|C#dy&mw}@Kôik.>zўa`$yaA}0bQN t*q":=qY2 **70gkJsW(I*ZQEnH !Dpp&67GEhbN[;doMą"gt;\f0&M㊬rZu5->=7J<)JIr;S}g:#~UN3}E=63͈^HcXh@*c_N $"eu&UXWB@ARѝ|&.]lZDŽ}|ґEx$pLщv%mE!:ϬP~'R~J#Y4L:,\j/Gيz| YaoRStYQ(uf5?2\؏Ve= D8_ٲϬG՚/ey:%2iң)H܊e(FUo?_UJ^!_Y =â*]jRfgaoi_0ɢ" jI6tt&ٽ__y?3>$ٗ ލˑI  \ka/1`\X s5.s Jtm-bRq5́ys#@S|:XUN}Q<5`0&qcWwagmn+r:.fzdG nf>ϷK!OcK'z@߂TAkp6wr5:=Vv/RFq+&bkd"^DR?`[^''Tw*n-(UC@qqߥ}g<~> pʙ:ykGHR+no h ]fȁ[.EkD?TM ÛvYC𢿳 & gvcgGLVׯ5?H#7L⭅h^D#S\憎0ˍՕ !8L'1$@M/D57؊?@[ֿKEFIM{_DNӗ2i(j<^+ڄLRtf_3"RX}uj'9Џ u=@n2|8In%nkMvrKj%DxV-OWx3 {~8B:^o<:ݙ_k 9nb}#0ђl,r< 31a:=7n-d]R;'tjm]f =C @ª^&`g<=逢wNUPvV7?{X]~3y9V}:?n^Orsˊ:ǘڂXsUYw~PU*R8t5"Jr6~(Ke ZZVipx͸Z.RG&\Z*!'K A^%%o8@CsA^ Fgt߷5I55Mk*#ppE`D.VġkJ@g_.tP".LrMxi܄ϧV/"S{'F\=rx34@aN"}'p7@1\kZLM/ 5"T&ܡj/V%F\at+<Ͼm.8^:hhNDc?52-J_# mUB:6;%$/˽ j궬NٲQNA1]<٠ߪ8Qsh(CadcN]І=&apr,JDs[J2k?.C+4ߥx/ r7&vAw½eqS64i}2zFa!$\@@B2B3J̒3{+iZ,:J D*И2nԯ^?MikGj*+QXhII_zV1rZx:`wZB% 5r)Q*Dl͌U8;Se~Qw_5?ci|Uoy} vj2CV ]F-bԎ"IHِ#Oh$..>ё H2eH]̥ru{yT'T!BB7.SORfs"CR[QHCB?Xs2H91 8n_?Hvꥋ, %+Tew>1c=u~|$َҵN2rz*4V1!g(E0@Jzfߛ\+18KsRV7+d}f;ж%;bq`|9վ3}Fd` 7-)0F&Є!Mi1%|31>#CHi1Δ^K/.F 0z>iL 1υxV* wRBq)/qNGMfY%BZɩI]x' 6 z`YИ8ce7[pN=l1pӖ{eeިgHNP+ E LdmCԱO|9x=ve!R m)EA)= WLf9V,[Gy+J^eDh+<]\bW[SQBଃ-0S*ĢĦ qw@?vq-ܧ,7vtCFX[XX/͢,;/A>4o0}܄7Pٽ@雽nMC#&7N}J nBzb֦HɎ߭c4WL%M׬9S{RKT>TN~-hl'/|WgFl4iNm6߀NXS k86gaK+cB jY3HCiiM0 Wŝ tk͵X̖uDgiyDfMn=#8Ywj0-d.RQ#OP 0ޑ'g3u2)XEYpSȻ\Dl'TM E#wff3v) hqx~%Ex?w.y(%N7=>FAۑ˴5v⧋rmDv/}^nBO+ĢwZ Z[k0'?%vqj %-pͣշ2(D |,5nah_*>8 :lNu{J|/-^; 4Dn66Ñj.#[Y4aU2 )ȕz-hb{7lr^huT`C<"i%BrGD/b~'^dB/%KkhFPmĢX0E&Ć8kx"¯2y>;`Tka+׀ :mί VMAt1d@In,<7鯜<˕V{ợcdf3gAE}Wy_DМtːO.IoӍ-օiL#1%DJc9z6BslȗqrZĦi5i]/KT ۛ啹͠6r[(Dݞcy7זx`9OR<`OF`Tۥ, /RF2\IihԌ*G{#:30k76T)\j9M} ,x!WTon6-06 cO M"t=r&H][)+VQ$\ (l&]_&oh΢iD 8qۓ ֜#G◙Ϥ>޵ħB->6uV w/qiaFwb)hMCw¨ < 0Po s1U2X7q1/ bFN-s 9L}C6߉ 5N4J3Mhb0B!"X c5befDd9Y@bg2:f:.hG=۰]<>:M488a)t n#9L*,]TkM}<{swJòivrppS<Ӷ1ϤgNZlfcFcH/^4!?%(=Q$SGOkM.2B[fG[ks^ʼDqXZivv_K vWyzJ"Wt1c4 ҄do39.#o$kZ#0D]X_snvú$*@mpD`Lpgc | Dfa3UO&u/1VulpH*ld5Tw 7>y^%%ؿ`Dz`-3&_L>Z^pN7u-ACгaa_AsΉ}81ٻ8>Qw诒3NqF]\#RoRR]oPe6ރԢ}1Ĭ'b-ޝnq6#TKP8gYSti]Q.WP4E1Q[QUi XWzA`CT!-~ 7kȖ6:#-\L7Uu8 ּ߲-S~m"Mm$X64%|i[͒gL1Hfmt & 3 Uޔ+)!MR=O`±`@[ߣOArRw@q(Y9<Љ9wadY OoF7/ 3_'`6D_VOTaw}^ZT {q4 ?Rs fkcW:ԣZזWbw Xϓc 1#OHMOE9 %Oӂ` 5LdKH`|.*x,qg2l2 է0xQ( Lcv RG?CDj_n霉 ]ob_ ú/B8"e!uT@"vn& ^~]y|kĊo")?jفV+sr2r̄3KCr' \FſZꟶ!Q`MeL)2u Sև[/ø[Aͩ64i^w;|ވ)>AdR`S}IԕX|FU;FRd/3^E/'\s8@wxuW;(o`iؐ*R~|)/7rz:, h[hdnY+G=:`~85&"*)SȈd 2BeD,ԪT ~ a ]rc%,:P ZCi£Vr!VD'$+/\GFX/2bıDv Xi W7 h~OZTez{–X>W$$8[ΐx_D'.B[]*lWR=Uѥ @i5>"(Eewq4u\N蠬XmK(Do\zcƐ0$z8'x2Ԕퟦ6uNb@ y-H@όtı&qYhG >DwID.B&cs8nS{YIf$rc{GwC(dWݟ <4}MZtyin92\e"kWx&pr_\ZQEP+oqt v4V l?'=8B>F$*ٽIE[1k,' :}"د\dqg:Ffgt|_[d܇gLz$⩑yś\,t9:bSAm ƈQ tZJBs':vETCwN ހaRxѷ Ny3 wb"Wzߙ'wNEfZI+4' wr[qesZ!)r`ayTr92s  7?du%⣐ M}WǙgB"aofC~f&CXQ^Xu3Y("W!k%gnVS {k(Xy?Mc!G:1S ck]s흒ZJy볋l̷iw&2;#:frvm~sybd]y͖}=~g}H8[3վ؀El`Jcant9CB̤BρK9Ƽr%,ʫ ﺛA ^0%qBÓr?j.95ƹ&f- ~?;mq2rF7]<>dp]sEbBʫBJoN3C'QN|%h&h}@2R^e[LQYLFaZ7LǮ,vwVnp˲߅o~Rba9JsnOSd t48CG8PI#`2@^S=)ɇ;ʇİ CpݸXO)RޞrS43gaFd{X%ma~y4J8c>~2w|(Yٰ! 7\^nK7֩?O)Cb c"l-,DhyjƲBo+N]+{FKa8qM@\7 S((st-1j5RR"2 |_H*I ȊclY;RR@YmMc#}xcIO:}%.˿q@,PIr[W8'ρkMuЖRk[qFjR!K2_,0 uyEF߈].#FiPo=5 _͜CH7OzrMTX$ htsfK( osY,v % KniXKX4ҿ>ynx^Cb;E fZX\'9H$d_!κO !՘'h^'E;'ZO62E(b4[%@Ou:b^>ji*;t=ƾbFF]*NzPY0\&8:>FUqE:$ ]߾E?vUܬH")n.6RЅ z0Bl5A zG1-9Fq#lX=L ˉySlrgOhbsP򤹆$J'Enڰ$AC:r=}*(7/<괡WM'F1JWg}SJۭ?QR7!}~Ϊb/} dkqveIpű"rNJ*^mZI r"`]G(H M$q~|!%ˏ*] T4g38yoL{0w8ۛ XpLp*re2.<¥"a3jk[eXzEWTr"Luͭ^/ cHp-RˀCbemҲ2X-hބ@m:~)Uqv8A+m,&PS|vpM6 ౬]Ð N(8$sJ*k5Hd<XN懚 Tp' pH+9SyAQu-6f-4Eln-|PoN<aKUGkp^ۢTʣ|3gfFD}ߣYv/ipj 6-qU͇%Y:[p-Ib /!#dd5ptI2mo6($^eUsF\>1vl"ۣ:ZGlC;v'*LwLXI-܄l;sȎzHJxэ\َYi./J7ȘH!0+Q's}Ϋsq{Yk"H n/)PzlQ1g(6up#P ̐k/vzމs: 8!kEň:$g,z) L_ѫBHnpD)C՜ե/W2a!qV%S*M-!_Tֹ_: [C,`AwP܇eSh(OXno\9@R)&}&~ө->Ƀ4=rzk6 t'GЖk;XHgH2_IE9Apw1_oSA:̷~׀δZdZ7/f<5P7'|rp&;i|BgwKۃ"(\h_D=j< o'~O(rq$Z02WQ; 3!bI,%^#xs,6,dAo>7JM^,5L]@W ]4Vl?-`R=eS!^!߽r?,`8%U ntzx@ H?ҥ ,,e~x!sa- ?wEx|[)Ҟ{qxFG`?rwƁ. 5y[y7S(4 nlR$|HǨ:472w`CIy|wUÂFI?ma;06ޠ=_<C8S30q {3P Gn1DŽ~a5m3}M;=~?5՝KI.yvZ͢ O3; " S̓盭>R3|t22@ 8mƋCby*P끷Jڌ '~yFgG[O 9¨{}{cuҠboŢ>;G"( gLkMOe2m݃v9aɦ C1}~]' &:yVwqR|oHW 69LoK@ex^*Ǭ{xR ( zt&J];>; J͘I*2ce D 7EhQZ\&A=% &CB7m .tx\({<ynC'!1u53/|hcs߯:U p~:oSq}hx0Aa4 ✩(.> u3C)p=,,sD>ȍz[Z $Oy!RZeB61@OWQZJ+.wc19H}"F@ixvH_rKuVU.$Mдq~R:u#llҠ05H c︥ĞKfP P8Egng\>*!Ym5ca,\^֨X g#j%Hdgv QF]T>]8WQ ҊbasRE*t pme5Y[r9Põ<[D܌鞤RS_>hN/Jzm/m V6E[ l U aY7 ?^GACՀԼ^__M(dșO,4p`_'! gX*f AS|V ?PsMz֢9k+4>韂Ϣn_n҉,$6KqNp&}*$hh!e]n !k *I^C m% S (څW/XM ۶bϨ'xx?иt^(luM]SR V6"!Z:~r6b({)Qg;n-M:'s'3؁MѬwWsԸVz:tCd9#Tp8AJU9$ 9KO8ĝm&\ DR!6v'HZ pJ;3%ha&G$K„eǽ̞#I}*tO({E3GBԴ~HӰV ktʬReڋޢ$nyuA7< 1Tc#LR\f> t+T}|s=pintn^^?>tL Y,}PB:9ZXcޒ'Vf0YK{׬F"2oTu-pu12@/ ̐{BlT)N`nwRIs _VG~w`!r򁖄nP˅0e{3&^7WqFt#0hS)YQoT>W#eNN)lWe=k iτɋ5 8'!y|1lAS8˔3D.(Nby gr' E 'OmQ+[Q„WAƈCV]NީgΝM>| l1t=(zBRRV][낷8By1hH:L#ϽTa֩KZ E4`i>17\^s1-JuP>(#bF]HEΙYNjQNWW<gb@`|׼kO`f,⛴ M5ºjW9Ưl* K|ƧwܑH$82Wv ~W?m^Kegʾ4p[d4K'?xxc: ƕ{GԤb`PF %"cGBíd /kg [.RÊ@YŸ<[ÜԍE'e]ߋ!i5tWFP*q@BE!q$F~As&_茄HRl/jFV9Boq^{1"m̿FaFhe ,Ne^@^{K#_ex:Dzl:OHiR`np B!Zxg¦]ԪIkim?rpӛc^"=O?ϕW eNF8q90h|~_N~\NLK Bh v.U=o.)ո3h&'+\/pq9$)}vuR=v&uk3fK=l/ <'_s1KP~-{7/SD" r{ꅴJɩ; _^ьA׳I G=ի%zⱫ SY>fC1Ax^j;P:;:i(e 2L2K >$Di}\`|ёRcRa}cJ)b|N5d o=5ŗ鑙]@Meiƞ2aHr%nQLϨ7،ms-+ P" CL>AɇMnҬ=;|aB%;Ƙ/e6&=s/Brv2CWlEb&NDJ"Qڸ .7Vd-4e}-j4joi\ zlyJ7]i5@0)< B9(`#xMzE=nנk   vDD$2CD<ˡ_eGtޒ.jl v-Z?W~&r’& HDإԸէ6/PA A>d)D}|4Kf\3+H K~u9lxzPv㌧K?9|*fR!wMd8;F(8aJi J2.Z۶TM&Tf/#_BآփZ9 mPؼxSµҭW K 1dVXVK_ah8qZ@׿$I{r1| 6O`CINC`M'D_Q$sSW/!J2 6T *;`5E&wz~Ǭjqu,!s)KDKzȋ=]1Rd%-d. <큊$ֆ-c8v J-xПlꫡq_9yŃ3%M8![ͭ߬?d0Mj&ҊA`㭔u ǪιBZu=^Y2i%t%(6¾lgJyk86_!.`-zcw{Rxwug <j!\a(2Vr.Gg?qs5IMukQj6N<{e3)87tF=݋e<}s6Bq娥mq }ł1f?V˧[]pkhJAX%2l-0:7ր[صCHAH"q?Zf?UXA`O|ŭz[b'|FJ$9vdOKm \vfzG)(^&:' )e+I ?)@HĩxTD$O u6B8bʹcd@}o\ioEbę([KJ Jp/H~zHۮw3vwsKy: PS2/7)h9Y^Q"AK|P3~?(g})JyPt_STv~%Ϟ"%ʆةЮsnX n;2-΃T 0/Jɾ1JVV<҂ǠlO7_ PJ`W^dCbXftIم\. ''6N_h.Na.F9 Wa|+:D]FO_286cqVG8dVFuNҿͯ{a4>& U@E )/l^̰-B@~xh=LB}WSg"?ITBy+K;#EA^+7ΨgW%ީO :@k,[E4=FIKCV53Lˬ9'ښ%|yAu'F1eEC9Ov yU568P`MDyX030&l ^[i g®("/⟞Qr Lw={ڶ~% 9*P3!6j"c%H2ly0RF+a &}3}x`v}Ch .9))li6fLi兏5|ͭ\(֬ t ({1Ej MGu.&PٹaE^ +Onlsl]++)'k:?k?<IxY) tWIIϸJp|/1l5y9x[:"]'pv31ź"J>Yh&ވvTW^EM8m|C:]/&k@Ńg\. esz[ &Z-#g+ x1yt ȶ6T cy|4o(ZAerګQv0V.ډꘕfKXT"Oç*CΕr1.YR{n̥$7AtW;:U $$jFk}.u@l6Զ3Dk1 nH B F|ML%fn#Bn MiǬd!k)^#eK,m^̐oU~4w 'yBs 1`}Վ.AצUFY8ޝ c*-Ng΄ #E#ز76 D M ZsZz<]lۣܓm5&18 Q7':~U_gGv(d&#v;suZ\.V}mv3ʅ\ǒ7O̟~;Vnm|A/%VH՛5簝k,[zy>"N2f"+` `!î=k6[TH*#cK\4u³ WڃbVW)o_wՙCޅRiahK~0(9ۺ6Fc2BΙ_w@ϭ!c<08GwXS/q6 ;KS @ sp1 Dvy'^R&nX)򇧧@"(40p!8X9M,Կ1N _IcKp* mb@ U-zETt|G6 D/Xsiºs*JkOj >H)o)3obgi,k]g޹]s ŏp,c#!`LޚsO9k@aKJyޜoV45"d/8x@E!oRg7XG,ژw&}HKdxJm3n9j3Ei̋3Uehrp-#ʑ=_x?t$-,BvbT6N/%ϡ%lÔoì섿|~+Hb8Y5e_c& F;Lh99_5in5Kt'XISLn+͝{yª0{ xVaٶ̓jQ%Y<|[r\cZߐ~儕JRۖhe䩢Xv%Jήc>>}d=ƻ]yw$![mݑ^``qB#>{"m53|As4ЫqA%i'BSڭ lccm–' jjPc2N?1T*N|,(-&`4],/sxϬA[$0]<)O~̢OL g S>#w%$hFIh J늢]]3e h6Y " '%:o.n2'rO %@ZYn31o8Ya#YcU %5nHIӧY>x؄2 :%w3H\)`ڄ(haA{_=␬bICg'd"w;api0N&ˮ VGڪч}?r3WzlZB3#G4W*#04(TIF+le~1>㺫d{ѥ@3Xy#ܪ|P+X r fv}$xfi ]9? Jzw<3tI؅Isoh S&aVkݸ-;t?΁(. 2-/5&捬 M2[GB6] X*Vc7b̞Od30]P؉c=3IB"xh?fb [LCI :wuv6xvsG <C/ I6{=pfͳQw-m)D}pm;XBhpvƢޏ"ȷhDW=Qg~9HIYOks&n(cv5͠)sc+TTЈuDFMvӤE6rOnjpӔK,I8UxV,#/r3x-I6cF;Ws~7%SZNGatPd\QL?5bD.m$ ^POt֣x"VQ_I41;s>yx~ޱ {pb8U#A_XlCu?~2O2==xf\yD263ϨH Ԩ C|šl\tv ~GlO RQ(Wu8 D'S;5ur&6e__GҞȸћ_mwOAf\PG՛+/YM|To1CN׏A( =%)'0u ew4{֌VH[̎FbÍ7Sy~d/ lژτNeu%/Ȗpz'f'}\aN/" | %oL?ɓ<^JA;Kzf[Sx E;ȒkdtQf"5ۜ]PRJ^!(i֚%[=):u%bC%(OD؇1[MrMzP}JcʎJQ'[8Uv2*' $,DZc|rQCG~Ya'%S#؈3=d#n<&z݁b1$k$,)]~"i(9֫x;qV0Pw.<8ֺϸЎ;+ !N j9.M%^ctXC,7`9<ΠemHZ%m[ Ms$~,6x&ڕKju o_KOu'3Yx&C&ki_˓~kfF6DEa ~ ۜD@\H(}wy~ EjL;%^ufFjܵ3i>ବ3g0d.974/¸Y(Md؈]/W7#qW#C[6TR)!ωFRLX"+?Qҳ=HŰ^=]>tѻ7FFIDH2˖C'3wV6F01>y]F9tGva~˖[x79Pk;BU-] kSeZjc1elj9G>iۃusĺX e5DBNk:} "V:D@]bYWQ vZ8s{f~yX{@C )εb6i Pc3D;ȳ;g2`% QڒFU8nS'+-t4f.Nqbt]ۖv9i)Df b{ hSK>Y@F4;eG+Qzǯ S9ܑzM%bS \!6v|mͫxgP~"3=z۫*hː3t_6Y-=ҥ* u?=!j!7pƲ5-:_,`wBѿ(bىM 35b%61`8kӦϐ릹Tel P/O"]-Nɯzp=J ,,Uΰq %e`HQ1HIR鞮s s~`<wre[W ;h3hI18;Xg[5xnPd|5q%3zHF '8~n2b):1!MO3 c^^[Goн>9vq1^Nm䪂a-[$ kJNqQyUlNJ)\(h.E/󭃗1$BeѬ"cCk1.B4$ So\Գ7TWaYݜNA`*C A@ 12J9+bI!#(<ghCwQ+N9J(,LI vF'rhz%9+|:m,[ftE |Y[nwqaɁmHwUku%ɌyD tcdPʞ&[hR1^\vEgh!p(~ף7GB20Ku9"h"ǣyNi ɨTޭ\Xݝףw[Z;s+,&قch_`Gm6xHYab;YGmm4d)s0TˋiR;QaH/%8#S*YL)q}MCMw G+R>l@$ۆ:+ǐbY؜Jd1=ů-մfh=ڧjQYR)Ze*:>?LM 7nǬCnDY__j@&p:69\vN#W+9rӔMwlP&욕16vT:3~(?83c0 dILQfٰD> vG71Hsf]bfGSpXZ[/e\*,- _߸18Eϓ)lI&97hהEH Y&(T;]tfl,:g)i Wau/ ,Vdž%^MkGܕ6VME5ЇM(/5P߼m|;6Ҍ&n!X ԕF!b6Tr\ȟx$1y/dqX-Pg˾^Dw8KoVxcx-|4oE HΤ'dByNݥxVch  ws}N"_.l~娝ٻN& jpַ=i0\>,H)'4sb=oup9 5Ȓ9<: igJz^vɵ̂ԼDzDoyAɂ} GZ?w;CŒ;]skGbn٤{,)YU=b.{G}wFskK̋4:彩Ə^oYxUTChӁ@DS>kpK-pTx 3TK>VC0zKIgK^ըL${o^uktAѵ^gp0 m )Cl0g+5_oSk$!pG#|1YpGlgt~ﺦ<_\wVP >;Q2eLo_^ׂqD~)c?ߚv>ߺrYjvYfO\kH:n%_q۶OzJa#8 UC Ǻ"'rӎ|4M`L-T W-m*-pn`P{3ċl(H 繩F=kY$7چJnBħ.smSkRk⩣-9SӢLf3 [b_DBh萫 M,_+BŸkv:MU_m@!ֽWiC~^IyߔP !b]"!d,$-'=[uS̲ i~Oq.S&Qo|sZIt:* ks.2*>݂}:JFxiڰ+H(Ò$SkX7ߏ120<  ql__-ƙ͛xy;F*Z"J u;*2M~~ 9F8^\MgD{*G\p[DzI=ͦX})g$-[zRE䳡Iњ] $ W3caxxܜl?!.D؁EvPr_s*fޚ`@W`FgHM)== SZozqɜaӁ AͥN #z@3Y[a:T;ŌK^0G GL֭Zf7Λ,2aJ6pTY.訵nInjҢj6Fkأ,7lDq"U_j{ýɲ _aPIϧP=\M"B&I׊ xlk=xlP>>;xu%A&qR}$<@]Z. (iK[X.> 򜛯fu:Q.2￑ >j\ BL#Uv#Km8s~i# .+нU[m!fbRi7^RqimFφV7# rO4p"OH*˼MIAZ%Ξi^f1^m4`P.-Z/gŀCZ@{#NӸ%;[ B=P"h(ZI ӥ4`mQ)2m1`nԚ9ȮP @i|n!G G_oKhb SGD{>N6R4'\`w Ǖ *5g_&@eBܕW\QRx2GѨ}\( KbMCjK$PJL,"a`ע\_9iZ2icE“kNZsq%5[G `D[aSWv 2} !˶]?;|?wòcm|k؜H)ÐpL-~sxb;<Eĵ,=b)ފ_8ۈ@ƶxE bj*5}D C3m8IɕͿ=6D~΄V䀫{5~n[^y!P$;#9Y[[#I#d[iwwlyjX q#q:M4;[e{Dg{PX7#}PakqIdP[T%ν !B`_f6Dl/t91Af}pЅg Jlѣ*KRC]"_i BRVgi0*J M=DӞ'@!Rq՛"QqTT_eK9`}! [ǫMuǬcFs/G @'<44?"dɺ'vŌQ|gk^ږ"S77mCY-s[䦂|X UEAؿnmN֣*ԍfLxP^Vxq,=d] hG z ~6ww1Ucq}>؛o/~n( ɛ? āC#w9@Jdkk8×EsLNBөN:d0,iJM=xIE>_ ڽ{J|]N.>bբ&{5/ X^.p̼Hc ې* dߏȨѦy,Γ{f2^hJd5_\C穹u[}k%!c>r?Pq5/Id Y^ku]x6Riu]‡9h&p 3H]ڽ ?/ޜwHU<ϔmaׁT=o+KHw{XɝeYj$|GYo1D >Fy$B Yoe0]7Dc~ +>q/{TE}wk X&H (eQ7&JOB+Nșn7o5ye,El0*~.DNط:$q}Âp1U(>[½i(-*fmeyt[ E ,<1xw g TFEMsֳ4iaHo*q:3}mG=)Z8xyfm;̙ixRJ1˾"(p΀ajsןӞhs>ncsFQY&&~L=TYAIYH 2mzYQz-WRv!$g;KB;pհ ἽXJǠ2 ޺-4A*>H'X"YvwQXq1 {_GD sg]uERM3yѡ2]mBh~*5 )g,Ŝ!@bݽ `4ƎhJڴ:Ad_ڮI0 C|x.y9C=ѱrq]ߑ4u+6R2 .995g$ވNDZ@J1YqW.I[)$|pӧacۅmԭdhB &ErQɌ Lo^GYZkSFϘe^;ӪtgMVE˻gFU odӬkot..ҕ;QdCqDx(RYRs u.Dg 5sSfOS28;Z$Mqސ&qX^4한sڀ*NOAIpi+0q8!N LD ;Ko ;}XqkqE)3b5ߎBR/Mm30Lѷ1P;Ʒ *h/b%AYMӉ1hֺL0᠗.V,rjާAOsU״ޑm Z}J GOi:I\o^lwP2\}`* "oX>՗]|B&҇}*,F򇼴(>(Ӂ')Oy)En ta S @c~?`d/<ݐm17fù/Q3QBUpUه,DĢ/o&E JGMqw&)$GqV:?FYXp1*x(L5ՅMvb7xi`?D@U_rVzDTF3$Ri i|--%;eΚpןe;4l-(~S&M&RwڀcR& SD},SZ`]'LJnPXUѸ?(h)QbLݣ&0SJsܓM!!v]9|8ְqb Ì&;>lIw)&F,[qaڻGɶ wzX>%u/U(粦Bc^,b/D31R!gx/Iٓ쀈L7UZQww,lhjd̀M㣫}I7dgCX7a%tC\0&h;_rfW%=AB`l_&gEca|VhN!^>,ļ8&h0oǔӄC5Ko+fZ_ a]w Ɠ3E _=~!|D@c`܍Bk}FvatB|yCsj:oFFo;ɂ՝ے& {@KC&I)vu1u3(O-No8w).7 ʼv!nD|g$:VTꞃaK"BUa$LܩN_2[~s+sʤRE8r 6*iSn ^Olb ~4P0s${u2)N4QVZ |ו-^ġIj̔-e4OKcL`֣W@ikMޭTㅉԺ][U'X+֊FV!ą;~\Okߕ|*ɞ}+uXGjN[q]UULd'fFZ"}Mf'A*+U*A<J>O5t4^ƅ4xE]}Ԗpㅾ.I ?Cw*/< ^p:[2-bUkLj\+Qyn Nwn7$4G>FUc#h_agQ.YP" LW8ȪE8_V%~x?ViuұeL،b!I!?l 'E70;ѷ'*;ä_}1<:ܞrͭr8D:׭u ( fB"*)Bt Tx)ȱ3~Vdw pKqŁK+\$`mwff`|?އ7YMMljElrTjm-t8IvP*gZ8 n8@&(G/6W@m80@݁ |IQw9 +箌f 89Xt?O/7N,)4FOto{b;0χ>.jXs*i&0FI5NQ]i]W-XyweVAj}Sj? + h {!lR{u-H:QȘ gqVpYѻ(#Hyc*uݐ: { uM*1o߮OR'IdA)Lݙ4kV`HxYR.[ a1o='X㈡3':hcf{4a}dj^bs&u=$kcЫ\ Ҧ %5L,!㬨Ccר{bW#Cd^p VxkOm2`IektPC*!{)KWZzbѴeCJ:ěɬZ\ܻҿaoMټp@>?-6?iPb-q$-%ǀؤEY% e/ϑ?G2(/3ݵKMFHG_v󿽚ƣ>>2jZI=?]e%F;,{N*vyEn0tPLWAAA3Y4$;X5Zn…w[#7/O& j(οB̋4rW*FѴ<݂ڍڢs rևק|Ǡq i?Aװz(yi8{ܑ7{FgWB'y?'·["m_woP؞ Qbx,p=^Dj@29KGq1쁀RW#.sG0+o>Onڗy,44%R,7}>@ w 4$7$f,!#vB`붏!f(wbO! 4o|EۑPk965}@#`;/h*WSjX7[wl4yf@̓!)u|eٔzavܹa~Nmpa$tj9F5a\H}e8 3\a꒎'S_&fQKl\9?E~>[:6aԧYvkZ˴n>so 6V7>ſn0%ܓ`#o_ n89D@n4T_0tRg!GY_]d!g|ᆳ%2L7˿?!9`>pmls^gL$9{+8E8"}QuGu }ؐMO|^%_4m}>'~ sU"1 ]gwˇiꋙ<%K3kaG?X䭘eV9 =!|0F"Ч即Pgʲ+zEZ=oE1J'}Dy?u븱l^ny>̵1X[Y\YhU6nW]$@c袞W3agάNm7ϐR #FKL/r9Fx(a|+E"'+19xNxi[Am-{nPQ_MGL/a,a 1^jf( (~pLUMЇHW|19d3;w5V8(YqOe݂D98;?͢ųF]&k ${j 5}PZH3A_0:7]B(S;TJ1L1|TNݲPy4k8gi` PE߳H̬e4uy^vUPX.6PA1=)8*8O[Vn:#IPT?Q2#-~l``[;#hh}0B%._8`!>M8ƣJU!ƒV?j moÙVRXFG9lyzʶ$N0%џUu(>c@$E \NBxjȕU]~,/\A['C̕O%FK`d5(¹5> BmED8U..]N?A&lo!dq*s˭UX6`.Iw_S9YTkKg4 S6t@f{szElWӱbYSf>bR1bFgwfӃV1QJA瓸N D ;kƗ.r&0Ɲ>  6.6̀O=KBd@~Ou#|z`gf=dv$#&NaTj WyK98_fel1z+gH[ lrvB9q7lrz5bW Ф`1/&h μ1n ц﵃Ks9ǿ$du%Z)UdO}*6Ro!M'r$ALI)X5g v n(Gq1EH6DBj5!Jr[dq q&rb_ѵb@F Aԫ2UQ^{B퓽q_.&xWDûd?oŲ)DqiUF(Mh!`+a1@~Uesf>0at+6ZFa[gY8'ě&DE2 `^[P8m A O?uV3 Y*J{x넓x!arZjdk1{c2+CO8+]g&Mŭ?5$ “f%y%݉z̙+ &~`i1T^Vz$~vKta:ѥֲZq B w%-SZ\nTKX jD&hztc. kvn Rz8dY× <g΅"\ӑe=|F;dY^=>w`$t{q]3?5= ph?*Zyg5q;!nUՕB@;qޛLlZSH;>sڏR ByQB2|W5(rԟ[FiP7Ȥާ;g6] bg8I%yvVx"÷0xQW|*_@'l(ӝ[vPYV[(L< nIW3ZsU.XK`P5KrIkq: OB lShOq"oKwH@k21miptlAJ L͵)PWVFnzX+iQ䵿p@<2j'GE6ğz #]Y&m>l+ӴLY*{:3!~z"y,tsmuי1oTh hCz2{]T@|)fĐŨר##|.!2{=oLed?P+n4e7xcR-TF4=ƧkWspPS`7>=5}d(կ\#|dAvʗ.ed7eD2 7IaCN,a>l%G  ǩVυe*$)ly}yzw7!mD!=2Wcg2a](d]s|sB`-,%iZ36sC >t"- ύ ;XLϫj7!K)7Ѩͦ?l*a"ch)6)8]9򛱍{Ћ|n5 <04)%!u߉b(2dҘe-W+nz@㙻c/tphHK5X)zGi v2)wb4Ɍ!vZ?Jz̴5 yўGi%$6pl^ZO r+=m9% y׀!p葅*ad]SW:Ě#ԩ\ycTγ d)o$Dm^>1o w(%*]>GzowWg"+ϡX@ WNSM$%xYOMTR>s7z50[$=yi+֘w2{F$)=حxdS@ b+vb@ JڝȠL[(` .C.=aQGMiv)U:5J θ'jM~ u'%[b`댕f D-zi$JD8 :o]<¶x@> LF^XQ Uz9G.I:Zo-nstj9w$[zHjN>jFNdp$is7K/ Xx5T;u **㢠F89>RJ?EMpyas.'188gTa{ӭ@n]5uKVP敕.n#Qm>>=u2ykF8É}Q * |E>K IXXP,tF1@na5^Fˑ}=ƓC&Ҍzb3t#@@V W1ÿQ⫔׾eКsӃSq"Մo8?l~MkB<"낗DIvT fbZ/o2uxL.49o֖'$ĎR;LA}WT̠ Quz̆Kc(Jf7 aI /_B).Q lɵU"圹#ZwՏ1"d d&ՈI]t['K qjv DICx $J* ʔdM312ޖf[$tJnlI+&Z/c=YWc|HHu p^^=.teH!HhWrZL. dSnD8p#qxRTtv"}FtS|a߀T`(h* 1$!F5!&T?:&Ht)ܡ|IȎSgXa@?rg'o5{]Z⡘ "@͏Te@)Kh 'M\O(L3Fr`^o0AyeCہH*ۙ3%!}4RnB~e B&>*m/uT!\ jN.B ^adW?A#S8\ @i+,{~0\(\JyX]|ZǙGK m&U޽ ʮ$j}# } ǻ e":߅H㹷lr"(v@ Уlu!mB.UDӖcr}V_Y5^[̤.u@9 kJ'} $VҺd~꼗X]ƃO꽆Ye|L̘B%I?!(eCûQ vaŝൗx{( QbFI^lߎdѲ94\Q.!&-U`+ug58ʲgٚE ~cnnIR`~MB9]\I@dn#įOMb>i=sIH֛;,lѲN5LC^Ȟ DV\mxbێӭzj0M !2&CCd nJx%o%nr&wFك}71~Sg_U|C4j@VG"`rZрv4mm l-/Lm7h1i˔s(<]%OaOI񗧻X_TԆo^" $E|h:D>=5bo)/Wxq6 J:-f`8˴fqas+p_~+$TJD[Ĉg8ɰ D ^Gm6~H`;'LxqzI#һ+A1K4cDɾ6>\:@O8%WUo{ :8-7ۼS1ykؓk{oD{F'aAX^$8X瀥x_3Tܻ~#jϰf3"ΰ-=e;sS>;Q- ށ<B 3 k VfNRsx1$I^ r43ꦚd-.CMRFq aT%;(Gor,E+DL!lXm9v"wZS<ǮehzDGwiďAiɭ꾳:3^VC2wY7ǵݛZŖDfjBDiJ{;cIYyCOG>2ɱK$x^>`#s}KV9ZpԲ5a_A9s;PBpCSӯ@E H.yl<&RD͂,P+ Yz>":5v7͓w9# ; @Ex^rH[4VP"O&}D>Z2 5ܭvM<]1gt-_FYH UmE~.)z5zeh?Ɋ[_#{X6nOP;bGr d(6ō~wR4KNg;)~a$auR03zϛx@_t'En>EˡU֬adsIֆwѡ N`&0:%҂Xe8/6j,<)z>?3C.x SuK$u:y16>:jepYc0|e/}g–d_B(euhkfw6RLJuIU]2 %V}6^˱[lԿKm%+2Զ>اWnxQJo\+ XCp]tE }O5Dp!+ݨ<Ȃ9g7ѴUȍIm(E;1;:Kħ\_ H)xg%*yȭ_ЀEm(" `tM[˾ ,I@NբSGy% <=77E9%%˓EA@7ic,~ICp\.5\t+YđCg*cdVstr1ˬ0R?jثpv!*ԸFVkWTGPv&EpP[27XՉٿ7axzO4/ ~bw IYd*KՖc_LArR~5# uY (B_1u}?_:Ȓ6lBG$:ZYVW،ZFɗά㕄[s0GqDMirߝjy}~6\,zm,CQqѹi@IC[HDbRCre |ϕ7?X] ˽ՑM\eC,2<~.Yt,k? l.M7~EEX{іIogioV?ŕh-w4#F}C_j:ŗINGswJ'_4=Û2]}1Hx;M j8:BIwwJ 5kg+~g95wA5f9vZX4Pzdo".ngp21gvFAZG[uđ0j<>Nl/9jx%00A"[.jr͑ =ە0h׶X 3t|SěpoC߹XE ux +cwK^٫Pۢsz\/@v`*Cf^52LC‘8f ȷ~N?zo4RtrAR9`}qһcL*NQᆛ٨3kD=zgC-t&R61IУ8sQgX]r8 pm=0|;$T ͤgbL-A5u BW$1!z~a=8O箐r 0,$7jl>7@ ZT˵,l@ լ(DC7]<7M뀽b1QrYC,B?NUQoENWKqC%c!Eͫʑ rXIdT%ԎC^F(m cRHMbò ]~Ҩ X3{>BeqBf8DAwVd^9nIDO|fz UPQ;oGyc{08GX ̈*0|#/W˙ FIh{"1Kwy-W!}ڠ[z.)Dv 5]{ "Ԛ[2(NӮuPs򧛺׻\R-uy|My6f=Ϋy-+.t3d LUf_㯏\9ntwo_] '#(A]-)5ldxi:Ρ-cju`6⽅wi輖`&mDI KݢWa4fcМdPEi I_v s( aV'+v@E8,lb(W%xI9-O%^8(gP =F43p?P5[pN?K|*h6DS68{O%ʿ# MKaE}(d=hB[= UϺK14Ӌ/\!{d7&Q;|K?Չ9R]Paޝ4:O!͛!ꆹa,Q dvw^ݏ}&;HcU& 7lR|FUyD-Tx԰2 ĔaD|ON8'ػGCOЉgj,?3l&[(fmژt&OM#. n_鳒8Wa;zGuɛ4הb 5m+B =crvr,˗$ dd36P`Mw(َ)&m5q|YP)>u&oAXZ ٸ)P -i? 9gg|>_ lTu陨p_+lF oTdN Z㎧X'߸bI=.I\Rx2`H-* HSr\Xrh,S>yMYNMW[E슅-z94 `#Z4 M_9.D7KV)D"2E怜 h"҇ӻ2 w Rš".\R5D?/2/k1\A_Iʟ.ci z%ǛYհ0bWC:-yb%H{~t~cd*ڂ^9f![I[=YQNpsVU%u<~h }ƝǨh:CYKFmIxeALI:|Qh1~^4ۇER$Ig.Ǿ_u0 1؇Ct(Mᱯ:--EBt D=ֻAY_vtkm`pj?iP _!_1aU/؆ {,Q2}J_>R+G!>E 7#٩!XN4;>?пȗھcEvh}1{c&1(x(6ͬ'߂?5˯( q?uPY9J%u{+Uœ˭8򉽕ܹ wh 'C䎙,dܲ_/ƃ7]FGBٳ2-UCBVԎ>s6飽%yWBJ>D4=J[2ؑyC/*c^8 `?]3)$ $C5#=Va[ܥ>[4"ik8 ,uGB'Y˪wH*8mÌ0M  plPk\h>lDo$T_ {d-ayVSJ%1\1L͐u]yW褙eifٽl21xږp9DD)-];Gtb0Sed իDp>s6q7:m>r8. Z]:JS'fEqF_3w2}5^V. ֶ_ w3 շƏ />SKur#9.e!X,*n}9US 6$̲ 2eyCq4Nlx y/\~Mz-tu8e p [{dSk9n ]ur–%w&zϹ6jy9qam *Цb5Bvb>/>;/E:!q˓np># Ε 8Z-<0V-XܖUDa～PhI1\5jZ«!>6)$ ^<־\P%#Bt⽣YZaZ4id>Ŕ 0xJds|3`w3s,@BlۤǢ˄ȁBj^ D(cIpf[L]>^,Cy3 +du#ZC(t*+5dltIo43K2'R5/" `-N).ү^VBv4^ӡx{]RlQ잆7 }TWCDXY c*a2Pz-0JjCCqXjuN?&ik~dLy(XNO\)6ls4s!LASL&UAsX}ÜPNM>d:@jyrTEaQ"ޅIva@F鮕f@ jMmb,9h p)2`,uONH^ r#Yګdhe FkOwD|3r![OPI,',~'6 !p*TѴ=vQ?L؂Ku4^3g;:ނÑ_u_}DZTKfJv5މj# 'j_<uG.09^;Vi#Ø xVh%N7&v99??;Mfwbܸ Ƨs[#lp Um)RٽjR~Um'zp@`97E)ѻQD-f6(qhM?@hTN`o\gu?t>]nZ l*Ll V΍i1;2ueKюg>yj{YQs4CX~\HA?-*cƁ>Bk-cGN 4LWlZKNS,׮[3<\:;~6ޓK4)@|ܐKoWU(ww3s\Q5 ̶r^(,  1  O/lu>\p ԏ`o:- s[ʔH%Ǟ~+0"-<]j\xl'~I9P:)syV_W<ǶdCSPv%4z^7H;WX6z`(',Y\)ٖfl3TrR[MCw3c] Hc.!ߕLxJ4[?̪%7ߛ8.d}ۣ;=LSKe8 ΔgCRX @ܷDv},ބ.f6ӪHߍ'Gv*8ѓ< e}yLk*yd#揓iRN @,ׁ}ǺE,B>=Y9YQ, mkk/<)(-<)Yi ^%|4h.Xպ $ ,))}PfeLVki+|$:D\dsvzK ERY3ׁbiع0lOC~P"3GhTׁ.ro-gRn[& iAvϋzP,;D0|=*%iv*8y4ff,06کv},FӋ L؅unUFr "xfJd.v'vJ6EB?wՎw<۾ejZ~Ș.&VU1K[6ܩFHP˂,VEgOB׋HKue7 "$e"噳]k1tc~<3K:kkd|9\P:XNНy]x b ˇV||Zx'VH < j.;g.O@C r4e]U-gߛ>)nJTjtIxIP͎u{LqVܤh\X|z>J:1V3}*rZYK $y/xmꖬ{=4O(V-BY準fhoIz>9+{|{NX рk@\;Y?$~#h'&|W/,L_ДUW/Fb5YyjSZ_XU;emeyda'`YTSA\,Чv Z Wq(C9a\pG]qp+p0Oΰ'b dm뒽S‘ܖeK{|f*d:VorpNJcwtT%M<=.  J q4@ʬ+㕯~rb|?(^!ax'm ]@&yIm{l̼#[`4.^=2*B':d,^tuUp OGh̾&C9apdL`RL,9FOkN T1J[Δ > M^7>%WR$qd1;c QÞ&!.fd*"֤TrkTk+~MĒF"o%J>*wD)Yx"mA{D"4cCieA|MmXɖ#qEWl%pB/)(>p쁨6-) |=le|3/6\[q|O Š$BMr쨥 D_i}9~O&h>$kvdUC rsnZ*r~kdtkK HCmS6]# ?nA QCtc y|/gwi iâM22KUgz .r*KrYObYdbbK+A$dOi%әw Z/XmjD6C{2[hIX02 X~!{IE)w,6+Jw#r$ a$An-\}?V٥gHuTPpW\/Z] nEfh ] Ib"/HW粸(.a:G JviƏ,9(fy+fCTNjx6fjD{uȘ|5'm) Q$YxOr5C?~o@V},-P C?| m#ʁ)v7,׫P"dN[hRbsMC05$7bH7+,$ޒK0]guaoI)?zj\+$mT-,"=% &z7wR/u1jn"@T nm(%.#]U4*n@+3WY[{yJ Nx%HWK#VnI2X\cdJkiAKA:$'xv,hJknbHdκ{ L>'d3;tQ9jT Hi%$"Q4Md=2s!SV; ifqjk4ZTRMX ޾$Aִxmй OJq{Fw ,N㲄ʴYj[s/ލ> ҞmyXLa+&3%OH5)`B}>υC I!؇[#PB7@6eowfhaF)M&UP4Ajۜ@1))$:NUɸgJ+h\E Zߍ8Q5eL2 ^<73C|nle2w Xɂu AٞIr &bt.yU  [>dd](` `!o}#&RPwfPz,M֛3U/DBSm +1dmo28-m7ͺɻ WzP@_E]tߑ,Ƚ~]Mt9"(#IlϠf/rc `^A9LrɦZO x) g6 %Blrpj`]*)-XM&Q'EL;OU o}Ѡ:k>R׹A8$>GlhnϽ b"vd@ܬ< 7e8+!,؈sե/udR&#jwu*6?1 3*"%2gd՞mh]BdF$t ^潳CvGLxuGYnN^7ŽNmᏕJȧꝴ h(ҕA?6jO܆FcQN쏳e5iڹ"cQ~k SSO ؿS֛^\yY1zOV >"vb`ƐWKgb&Yv%1`i 5E.;'ab3R:. >N$$834dz_{E}/]!: ambڇ"jm mTB+AXEUb쮲o?Z;N̸P> DTd7 &"%Wz2$ No jIeI `u򱻂I-P9SK nf?:Aǧ 8Mq/V$q3[+ ij*:J{ v$cv^8B{rgJI>mQ<_QEnlԮ1pi7҆fe1 #`EV{'Mky |TTH(G̶hn {y+!SʽtA'%z`LR%W Өo?y~'帝`csh2 @E͛N/7I$ȼs~rYvQ)a anѰUT,.|߹6λVT% 7O|OdRj*ګ]8wrvc#ktG1#x/n{:T%kO񸌸UAahr6q+:Ga $Yή`Y0)3OnKQLS8{/,~j+~0e:aJb?pufy ޢ@A4>FgnxA4R<j˳bՌ VcwG}Ɗ"U>څXvܤcPuZ]BM>W[VcgV[YW~$>;1UE1DQBKuHoDw/zYQYzIYsD7#Au*n_;ϔ!d3cإoR a#nQ66餈xz6>m䭿u2/gTjHs核sCXiɭQrK> IUIȆnA̅}(YV+$Lk>*@j:eo_,*Rl9+ VFOF"7qVB nq.[^e]%߀<~y_:,نgG ;X-9_CRӑ;psﺔk5MYۇ3|qå;QS Uؿ{ 'w(.w( \=rVkl$.&,4# PKS=`?&]? W7(sOV)6ufRM6rzBŧʕvD%Lmk!JK:$U=l/rx\zƄPET}P#%0\< pGu؁gz@y"W< T5Ow Ce;2l [vKO UpG̜qqY!>Gt%CM{st vXFFko1m(*cA',{<,R[`\%*49em_qQmH t# Ve=06ԧD ⮕ll9!Xȝnذ7d nw7п".nӾBtM}a_:ޡIV=hΉL;GpLo`&gGb0A6d)2U=_FP IHg +MUYQ ~V-4^9 3j!48 JnElS'Lu6XA1Y9iE|!͆;=iT%;%獝/5?W9gxq^1^^K߮N-7dZjZfDޒ*&>WNsg0xi'`hrdʃcgH'as&8t7FԘ| Ƈa}^IN"wV*)д؅Z!px;6vC&E-.^PI6sːnI@Qė j6%3>o3 (4ZTѼ*=@)6(92'$/ a@q͙+WT= Y$UΩh˦7Jh,g6Ot!R?ɻBv:"+~=ELJn,HͿymMX^ݺhf a A0|¹hff ?-9WJ;'Pʮ#1<:O7 JGGeB. 6JK.@VFm@G H$< qrw^q<-m% {ݗ$aED BЩ XcRݓb"KJvz]뺐'u .{;&*X Y576 _w253xzIYfo (*' { ~0r8ޗt?OD/YC6W݆5~V|7'{[ /FJsO֩a]mToE4;tkN5[7QZܝ-BJKg/T,e#~Rm ܛ1-cvC;.'ş`q1ot8}8~mfB7lOG',NʫB2t؁@*8,#}銵R;I Ό22#Ze9&ְ:hM.;$!zgu@"]ZƯovhAu~Fkv+g-zmz:E; P56ҟ4zfJLBEq)/@U_*=.3v bRp`ERƙ.8Жz2_XiNNw|iN;pia 8+poK6kbB3W 9 (QA A%F'/P ؐ4!b)^8LdHlɢpL-Yq")q5nUJx(;oN̉V@+ : :|W6{j50+sg:2LoLoRfViӿtP P |VKK\g? ] CA*(xrgwJr(0\dExt]vRO{:v}k @p35myW1%^ečI28QT,@FHz闃@TξF`dFIIuBY2EHQx }Ҏ&<ꗢHaѷ#VMm&YhP$c(5Uw/6sZ`u{! yR +mg&ߕl:M]HETY 5"`k>pq] u4Lሙ/asN `ElF}$<{j_ ::~Em;HJEtT*7syg]C?=!Рx68/Ӗ q8)aW@dռ'L\7&6U#YyUFe3ڡENg(c-gc} Rr:Pu-2yYRWQcˢ$&Oy6 et;i O=be!(:*e#o=љN ]Oq+N Ъ.c+*F7Qo+,'ڡ8%ܿ,v/a(uʸ2M;Ԩ8<"\,9ΗwPNJ9(W#927l8G\'RU  Zq&) *&rͅ!xNo2|ƒ6J_IS `WfEq R5Pz}u3C }JmB#h>W#B_,BJGpXhɿ+xm0Yfv| ǧ;J;&с|OiU*|1c.sgaNSϣ>||ؾ򙉁"ah.EQ`-'\Wͧ,(v2/DˤzpHRMR2sQ(92ǰچ_&EoZV쳬OVv\8C?-:\Hmzˆۙ`n6γZaoS3<ȵکKSVQ)!0Kr֎=QjWѡe#>7zpx9;ȱWiEka-}R0:#5>9}(p{l (;O>0bj0 R 3?z zʢµNFLSHdZWḦ0K8fH>{=m/XywU# Av~$ R; (i俊){ fiaXɷ((nVj?S4ɲC*d,\%(nVo'e"b 6L=eb.>N].Nn;Ku8/ 9?ݷN\ut  .A| pKA%ir˲^b߷&`-5BnEMQwTNA~ 1 O? >^IiV{||hla2WWIw-[a6*|J^f><nlB^HVDk0-①z(M0bQ rδ_2y/[ {7+;,e_Cz:76g.Z >gqqP%5P׼m_k'.Ņ ٯآ厺C)Q_-TnƷPX69F  _n;'w~qUn|C_A@ ,>A{bI:=n֪T ,2Ga+tdL^Xk7ґe٥f}ZkR(qpTچJ#O"8u.Wggٯ'ܭcQtGR&2L[Z5n R1 թDI  z +iJ?U,OSK;lı{ZukwߙQ+IrcM7 FČOH{-dYy܀TGBJd |S]:gyVL \'fBv #9U HܙqֺB4Q@5GO"tAK Aݨ`=^N">b]$nx8;W(6hlU#|eH R*QB zG.[AU|f`de((R~k~<p'Ÿ<_Q_|q!%-~,9)G ;jtqUk%(r:y“pTbVM=nX}_:t:3Ql$<S7]v@@H%pRN,xPRc6 prgo!&x]Vʐ;|7L /Y>  Xxr Y!jrYeo4E)o{j\v1qB"ێo+9nPV1%ZJR K{ֺfzqdiݮel->TBjOCp3ySH[6 {tGJG+$Y9imSkwg-P.W9z<_\lYB@%L.=Qآ7ZQj)W+A6՚VnoFظ~_ sGG= ֿm-T54HAO8"N9kRO'e1H`;D i@;N4f2dtV%d0#18jFAȔqd5haoڈý䍢IJR8i=oGwYj%JTl_p}fI ڿWO"9!AT`7]?cQzVۓnMeՠ2Iz@[v*='&o gR)C2>/ڳ 08wYpw5_Ha'\Zmm 7H <,,2C)|1[)sOey{)t5 Q u\2ZSƹ@M*=-.WHQwtI*!K608FҹcN=Uq&ypY;YWtlIOxe 5 Q]*ZX/Z,oAAx}zj^-0:]=%Tc)sP̠LACnT1sj:t.GYVay5`<Z7z#o ת:g Ul&yP(Y i 9bc'Ln85qptL(EܹoKJA}E5T(xy2+jajr&![w+3)!V4>k1[@gxg $"p8:9sNDGI 16)ڟ\&O!HF 8ЯPieLq{6RS)IrXÛ)MP-f(ʾIK]:l InĮ D,kwmfk "ꛭ֪&4%g쩖3TCY|7?q 4;i𦶭m`^ڢ͒%Jn88fS6 H*Ao,OÿhXg/Ci" ZYy:4 ^\?J7aF dޣ#do}ڝX,aAJ#6yR?(>hr 6&H:z~`6h>C|13bDo>& [tH[MraaS$o5|_c&,W=#L]݈>q5Zv-Q *"֛Pq 2!!܌VߝؒK:w!|h Ha tb,ŨŴy"j+ZO: !C|fK! eKdZQbpI%*)7Svg'xJ]ʪڍWZyWq50.-yX#Pׅ:0YK P i,l?kЮy\ zH`SBH9P]WTj+,E+HZ{|Hp Onɣ)>KWmõDx86P|۳Ј<)YfL"mhy}hقӥ·$ܱK5 ! 7eijHES("^zxMej{ɰ̆k84TZ$4"q/e:GH9 so^&9m3PYeQX'Og6=g,>B; }7p>UP+XS_uٜXc<U|qwyMQd6T+@<Z PcÑ[V dFPFs=w(稼ϴ$ifwk%[Ox Jj76X񚲡Drz4MC(+nqwIjN1LDPK}þ(uS_@>IT#5WW1t ŰAd'liX(,vev0frUL턼`@gyX-0ox1:BgZd {j&%'ͮ(=[yW͸v2] iV?=+f}o }:ͬmy܁ ]ppFgmBkD!ZA>.Ǧ;J<ɂu)IHCCpȥ"6;`vnR _^ Y:|5.H0 fgRlӾ7wqro#7oŐRɫ.7%Ns$6]lgQ6 p+DNnnQ`bWTSL&}Pb<6٬y* iv/8^8w45-Ȫƕ/f/TNүs=*cBa 'x h:z)N^Ra&|KH\ƎY3Yoc7]Ln2.Z-N= q4WS-gwmGkPh]=s[k=,Gk"n"=^mYO0M[@W p3|SGn*xN-]Hh:l#Ab t.ߋ.ruYft I)3i— cAk[)Ga2n056#_NܯKpVRGFtv6wR$'9+u|PRJ[ʶYx'Q+;?كE )T 7*fP(L#xl*BTɿy& Pk_]Z޴8'jBβ*=H]3^՗5E#{vλz"тk,m#2Jg` ]5Ҏ ${J2FMI rٞ(D0`H BI<tg׻j.BEr*s1*9@Tx9ʸY`2K"7d`]E)ʯYbthfßsp k>(ܭR"#S6V K$\%i]qZ::6j%~{0`gP8tLlPY$`ܟszښjOW^?hh>i> ‹>5u<<¸*Ѷ1%,kv@s7;5rBTsGzVԓ요g$ekWSQ8;"]|{$ "ڭ-UgSɚ1.k{-$0AP-6j͔jFƮA>PfB*}BL>7oqM| e 2[ܝ}d?Jvm P>o:}J| R^k}b/CVsufYڂ" %L;ט@vjlm`ZD]]ڳM5y<`4yUq;oEKLRa(*I+=ƋjE.޺X!6h7d+IcB!uܰY86Lo+n+ %0$ #`N;@i.f R<+PL-!jH/#t M-{ڮAE|^*߉Vg]mzo#YOfz+l'GX,#P%-BنF60ڀsgV'ƆDW۩.`І'HQH xoEtRĉ 4R >@`pfP yGDŽ$%@']liz)qI/'h躿% CQO˯NjtfhP!X p:Um)ؿeZZz4 9R\+.-/ͨj=m(: ،%Σ(NT vO$eYICoA-(3i1L NfusM/Áe`33VhHi=_Ƕ_mJH\Z]C./TdDLEZV7f1V=_y\0_>9IR,7ɔ9Gc$8Ph>ۧi= utÛtĒ z$ F UI۹C ꒊQ}~^ [>Ijώ=U6Y !b1L[.1 Dd`#+yhnw6( JkGŸVAj=]{WFPh%bF36[Z9EΕ>LN5 j%́X#Tڌ$(N&38͟9z/PYN/p>pر}~}MJ\j,7k%V+LtS?۱)|=plMwkcQ2%4'V$j@B=bEc@!PwpK+6#)zElX ΃/ĕnǮlu*C<ѨgpK%NZFc-D̦$?d4ecfH}M*j, cq@CmeaZ%C җ}}o?I[8e3iu񢔤ICcPIXJoÌ$:Va'>꘺o`b-Mn3v߰ENrsX;+vE\eqgA󾨇(,R%'p"{vgmq8m;`n絃⣰޾ DY>wuQAhmov[Wk1_|r߻DBguE,W#sm)  Dbx_Qnх@!->v@AtCܼyXهyuӶlhL~׮8f&uA* \ؓ6׍ qu8L!:Ĺ{4ʀDT ` 筓6jWc`^ 9:Zv6S=b2GÁ]ƙKf8sA Gyb4{S/?T?\],3bxUr44+ 3 _K69tV.<a@+=D :ޛo)-Z2Iʹh?v e |̱~:U-) hPئyJt "j~JS@hXG3YIQz, h(oJnHE6{;tȄi! 8Ktcic@*ї]#v[ZԴCphµͻA=8nі^'vGV(Շ hq*Wq/]} P!-_ݫD5Ѿg"w @0JdwX㵅&{A=QK-6Mz;C'yg4#I>S-Eͫ7G_^"բ]䵁0T̅ _|Q%wQ*D&mRwx*6]ϓ(ao@Nz+h,yE1/+LSxdu~FfU;Cf9j ׿_cj*Vݗ$ ?:V~ޏ̧}7.Hgs7Zc\2jojAP@goh]T6Cj5`o"8o3.@]yI8_@Xp%|jb%O_"vӁyDW 'ڧ)=/BPP5mL^e^,0 Y#(~eH.K R`hJJ1Izd^Wf!ugJh/bjHɤݐe 2y6l(o`#K\]QN]q!cA)UY!!-w:R\%|7vYwX+Y7KT6.V#-|(?=,P+9{w NLgPs@F/EܢƏIt$D|t˫ztG=CZkxW73G`.>Q/V)/ZlE(J4`dajBFO"Vw~Zぃ_8hn'OY;_LG b}Xy+}4 8YfFam\e)Z^ ߬l) ,`x·xY^LсZA)IJ!J'ҸŚW_NhM,QETu55(X,I<[k̳pk7!A>llD_@n1g[Yd )Լ:yA-@9 Uf~#_Ki;7@p6{1ZSTr;eXn%kK[5U)6ĺh!*Z(R!5omFY~<*LML-(1&!\LTӰG .\0MRx~*D:B__DBj[f-nT΢͖TmeBh^Gč~.LR/ Њ2!1=x u]&c,^H* ~$:B=njk2[zpWn|b:"?'m`EG8 }:~kӎΦ]XJ1" (i%En?b_'"RߝHtĮ?Q= Vt]@k;úGQ73 ZW]tpAgx@IiQ@<1*GB~/)oL/!DPARl䑵(9;Nc[rvwSGɮPc ҄ 6'"*4ړFaڝ}*Y:|/ 16$=5 S-TՌҐ`#387CgSӮhw('F!:ew\;H]P-`qh25 j%O^CB2N4aШ»ʰMPKNƄ5%}Rܘe_ :qQ5 ߁:ǨY$ ||Me.>){40TCi_%PQ<{E=)(a%XiT8d r&Gۅm "%5([}#da UQ4C@ŒPn Ǝּ,*^~_ۿU(z]_h=r_9v{<&KT,5i/V(7qB?fyџUR w#M,> 7֜iB G$ tx,GT2yjݫқC 6S_4[UyVE4fF,ueXok{djsKT xҮ+4]҃t{ [!ĆsF)D ş2u8T: ^0)$Hˬp4Hz!Jjh0{GKoBo)E lӼN׻LZ9v?z訹o"xL5eC"E@6;Z }z*e0ԅ*9͐>[.=qͤg|SPN/ `0:UR_Pg`˱j.Ba*2i Fg|$#Wiq.84Xc$*t>c( k8 Ita6| "MT %rzfLTKs$z턯Yz@J.zI=?HXl] N޼[LZ'!Xɑ2bc.[̐u P%s@-C%{fYmALG0W&1^v>NSr% GٚfbC%[RO7/NX'bVހae-_υ"i.4J׵M;u2D۰_ z?&D3fI(zys:mT,EVֳYX[1Y87PihϸgIdRo~k*`a_x/f't?F?ך%>\U("x+wO ϜyT^gڠ-V~XJ(^*t(cQ ߈AfИ$.󂴑sr&`Zs1n[2w V`a֊D>{ %"dFfj&`nd^zy^B' [ތt ez!%"B@*(b .n6J7=4e;fy? c{ j3TO2/$t3njbBFb']Yhfǐx ִft?O07|%X9t2BmtLbaxCJI!&bpC:|,JD)ogs1úc`>_ xvo1LҒs*3t f"MdOs7×=>p+\ ;O1UGYih4NRBqkĸ%3+3t1kiubB/iSh{r|UYk;Q`nqῂ YÿEw< HqǣK 60@䩫3_Zk'nR_KN#jmO e^CϦiDsGSܴNHL5?ujO|19?>QҘR}B@77ʫVHp4K] Bw)j\z+ȟ!)}!M*8ӷ%Z3) *׉r 4[..m y̳N{N>~'SB13jUzCFF<.EI4*>u8XV`~}ui8ɟ`J{/)$4P?E9b8^| Xhabhm'(+OѦ`pgq#-XhV+n\(~.Pd=:} z0`Zyy䠼/JUeP8P8aȨ5EH|qMgyQ$3[+~+ +:I_]M%0}L ʲ,A.ޘzv"bѕʸ%hϨ ѾM?(Ag|.=b&iZyq!cʧJ-6*ԒǤ"nɬ1gYh"pmx^(@_h`:2 QN :s99Ir%E(}7Թ+.ecPbZ%MHIQn-xmdV߭ȼĬ$n%˩7U"{KJrj+įS~%ma?OMhgR,:k.+$!\E"FA\V.bXz֚qYi!V bzp&n@!՛jP >s\3W'3?y ntPC go ۿ2dS\i䋙o٣OI%B'C6 4)F}YqoR߾؅pgVyX6:[F2WmwE㋸KL.P:街f RA+a7C0ѿrPn1-մgMJI7a0l0 "C1F$#Uw "4hwtexOљ ;\"6Pj-'SE%ٙlI;ۍa6aړP|ȇ cgttuǙ5*VУOoy^}^4GBGf%YE_>~G~K;!%JTii`5j @K7S%F EoN>ՆrY̪\/%tDb,. eXcoq@> # Z oKYZnG{uRVR p yO>{"t_}kmX4BME "KnRZ*(u]!{ /w.zЭ*7oHހ,WTU.45l")Y'gmɺl(vԞWNܻSn9KnsjbFAʒ 1&RA0$grzlR>I 1 zMYTnY!5VaiLG ePQJr Q*k?aQ~:`ٔ X_[:ȝc?0Q\\ӅkAHC'q+t슔o0<*(fI_r=@@j 6X%w<ȬC+VӮpM~!8) *}* z#z @ ޮs`R@ n0  +F"khm:;C&Ca|>z>D5:U_q.l Vl@SPOfH {F+̅p_Iͅ c0ޟk?.v#JLuvQYree$ꭒg{O<8pZz%Q`,ʏ 뺢U'7< h/NP>mhk]B &\x鈶"s"N{\_BIHr E|YNKIwW*nۺԦ;'穲 lh%IEW@E,KE V_lhs;wQ2]>`khKFҬ: }m_^/`?Bq`Tjb;h t"𐐮gZ@80JA0XsA߇Rޞ@wUU V9ƹjVH %ѹ1}4YσІ2͈%7?Lz '#k\Jhb|i@Ajyq)Ina^o0Ma-~e-cm HÇ^ƭ8xjyg'g"9/z\egr#ߠ FßZDt(JmV َ%]~ ֿ Tqy| W+diEPM ѷ {/e<~T+'ĩyfYi0gܫnDrݠ~;;4hw(ߖzA WϿ \6E^h9[}"_o]؋lz_J!I#iCZj9Ҡtӈҁ(q#.JDnu0Z' KIO4 ˷x:ۿ6Hc\Pvɫn39km ߉Dy/ݵklKJw"/QqJY{t`-íQbxMэ T'A~@w'Wm߼s4)Wmd(YT- ዆ 62BFGGR(qFp8_W^o{N_jnV/A9lM\O Wsps|q~4qjI=%o}Y,D ^Hc٢ GEnQQϻXkn!%It֢It.u)D7N*LDg!`lvo?:Pf/"& x&ln{QPikoF@/9\t-ЦFb!ga ]$'%@ݲ/y(hk'R=%+cZASx2 k'8I XUg"h3>_jLvpmޜwNxV @ +:)ӛ*CK`h͢xo^^-Ibh/Jis-E;Me* oZDA4筹Bj4>ٚB8Wrj_h)d|xǦ 4TVBJVa.sm͜r/xTk@|e#c٦T}X>dsy4@&bzbrqj‡< /qCbd,0Una7-1j9۲X!y۬Uo,*EgXi  oofMݢܥl,;}ݖ߳GJ8(e ͑$cɄŻJt,&zĄzl;A-[2} ag$"ދ=!nDPmW@&,G8KorFUFR%qLx68Tl 7Ew`8Fg M5PLJ)P4A6Q6lSPY4glK6Ex=ҩʛbgGF(z? kڂ[a:ܪ'VNc~>e5Ua b^O-~(Ѻ7+67E9S[QI^6IQp gb1Xg"bi8y8V6&<.Ғt?ڍlWmFйc$yhdڊ9mb WG]Qo~1-ĦtI5q%/{l*yPLo`>.V*S|lSp]ަ9+YvYܯя/,CO\tzVC}؟!41R T-f"h"DFh1|CP7on5ж5{PwׁT,.e`ﻨEpMhTAd9AoH_0s@ޤJɫ7rI#,=CqC}gtx2;:)KB@u o1A\Q蟢$+:^0ϣ`^(F IM%!OH f馧9B&eQNᔟ014'VgKpTrN"9ty|zUo}(rdvN\)W":dQ\fNJ &{+}U7 t#BҽNL+ @1x@=`"yAW@DyE"gW,j&FA%Y]W0\{ 9̵!A1NSp%X @_ɩuqI_I4sO˨U7mZ{n ׏G*xY_ǚ_Y/ hs|MBN֐OTe۱o`9eGfW&R&҈jJDk v zjڍ`>~H 1kԶބ]PQ6M6> RGvض@*6Z(T?KaYdocpsSP}FolȐc-'Ma ȊapU[ucd[R1 E89棇#9X0D.p?Ԁ?\z0:!EBv.@Sy`c'irU_ú/"W#&}o珺'|oԸ Op%~ 'ϰ; ? L2ɊFskzt4vE|UmjħvllscmGF}Gk#+AlQK&yv@ -16x5r[ !&\Ʌd}.ˍi #=& 6^#" Q\hG=4=h@lcQApMOvbGe:~Ǎ+!܋Vy[*O;QY+H),gqGD2(7!;9G9؂+F_X̂-q,DjoQ@gB^sR iDAMV ƥVw,Վ&40[ `%+39m햚s+f:G:+ :F#Q7#8 z:"ű<}8*4RZ-?>Һʃut'yy e+εV@Li{nX;rs@aҚr?*,;GH_xӾ^JE"2 0`է>J=[qkWö^F cPuQOg*rݜN# *۰1l׽iBkw&uM`uhLaYXwφHo^6bJz+A ?"S4[52\LZaiFKJ9ϥZjIK8;&:Ph8AњV-X.c|кLڴu2B?6]$'AgwV^̍L,fTl}-Fk/u[YTAD(׍ 9Mz_gyJn* (~ruk EFl8^q)8ݱhgic|$%X"?z)$ YVn"7ݗC˘=uJE;N;gNl1 \nϭLIuޟ&aW\ܟMe H㘏97V^z9LW46UY>sy>!S:\ԝ2G]i$ː Ll.Lx`<= C&72Б:B>;!Fi6FbB`ba'- ;qpc$9/<7`eJsQ1X͏Tΰ1Ld/lc8Z!P;a< u-'h 5+%F)a§c*ܰ 2MvWvE,^'>2gzVVgÌh9b\&ŁbSg& 8"M번h )ɂBlYIcponHkCNNgRr&㙜}w*cVV53qw[Ήxf;D"vAҘ[*%ѧ͡=hڬp :>7xD[aèh0,do?k#1V-wGbʋS(k=w~Tn8<=S#<_ oLl2!TYb3a>8K( C 2 [@ +*o=J Ztq`@FFqk_w*@hJ6 θjwn@fh\sCCeTT+4?u4[ v<jNZ:Bhxh1<y?U{^yo)0)AՔ)lvť%WF`veٱ0PI# Tj\$چeSH 㓦#\uSXk4no;)xwVxaWWAk"dwxQGp8k& ߩʑoheXC&WU_3G]Ap6vkFX2N먉X84l$kbUqu?=Hsy(wEO9;g\@2gys**`7Bl8hGTnuޛE z Q5[_N(BtCqg?tUC?]0([,YCt=28wnOzcz ^EO#w=PZ䯚 B@ВƃKiqeeR$Ԅ]< ŸP^h>upP ̬)+q?4eҝ yr֋R6-e Ss OTb7 tFxBi>2tICIPH$'+؝~\8A #ĸS?{u⛍ǃNgHhڨ4*>OK" iEњ+"b31Ga>U-۩JmOob9LD/B.+a3d5*lHF{w_;rL\}w=g >gq R.p:8״/u,p٘ЋY5s, V\2.z# 9Z噣GZG01T#}ƿĕu{!ˤ~+.̍,ȃC5ح s(.68&Ő`Fy2,g-OpyOq8IG[= gKt9G5׎ @'50%2miNv¹[pԑ,4θgJ!!11w,ɀuQ}@7'Y4DfH$S0N^Lb\<{JAm;\DI(Fzh :,]tA˓NY;Vi,c\SKn,87Z;eiSCI+޳n_nؼSGYf.eKl\w>[6w@և6b4j!(O ZS!(wS"l'jZ  s.PRB:!z UZo-_>3 NR\-&OO{MA2vaC:o-5~@4&.9 >5UaA͕PiJTg+ N‘5i(O)AV9'F.9GC\rOy A7\~%o2~N:쀠D_$!/|T綳P9T NRAcjZ?'{,َ,4΁v;C=P@jW!(R 7c8f>V(6 3c. ]<SEM?YrdքFۡMMD"HEf/?-|&|]$P" Rh9Ql٩:3™sF2-K X2}31E]^kѲ9x@)ul#I'72XX\Sb.ΉqE(&ŔbZsŽvݝ3BnA"E0/>*1Ti"ɥe^}odЖ*F^H|Ri=$i1&S/nlrQGv6sƤ݂; Kؗ|G]X@SxƋ ơAZNBv{"뜉3x=NnMc("qHBgGwϾq{Z-|o"3˺}B{^UM[ICމ(h(#=g'POA@PݐVWa<;GnAP- O|$> 7 η.K<(DG}}!H=}߼c@&=r"pZzaoP⦛z}+e{jℎƎ.*-5xQL.Y:?-Ď^nSOEE Z?xf=|Vrk:T )mvۗ EsU BzNBf,Mon }$_(Uʵ~h=DZ$H!?A5YLSz`|4Cl`4 ^$򵹆#PzLjp҇bQ[B|!eEQ|eQ&CJs02/vӸhOa{%(w},t+[5 YaBNS9M/\넛/-#ͤZq~!9xN< ?1 /sƐG3Zi#ٟ_BsW'y'65VeGY*5P=Ybp;6#Xʚ:XC_&4Wâju#0L+.n հZ]YE~૽;guOXˇI %^K*0 )n!J87fc/Ef=m*}VS-if`ix _c6l4}AmtJla~-1myM8 1'V5v LRk(]@x€vbCg;0Bjn awa` ݇Jך_ȡI]4,i`r#B*_|'pu \P[ G9[?¸FND PL50e՚}^T,MosC^œF"͓֡p뗯60bha&//80Y {u]KʹDUYc654@=iJF('eNy47lB["B!}F%0S"c_8ɅR&HM¦sγGY#Hk %bJO֛H+ `E}ϗԏSނO\ @ }H@AnIԐ O3 Ԝ%79$~nArIa3A@2,uں/v/X3D3GА,9#1BfUuIG~`P٠kDKo0/xru|ryz!E64u oPė7Di_qL՗N['q:Wɱev[k3s'R놽+>Ё~ԅS7̋dmWB1"^x1YBОW݄G0gPS:4Ʈ9L.? 0_t4r\m8#PF)II;(̟nي+0o'r׾mzY D``GRl*RJ t9(EYQzL:bRϜu=hk^+wiZN} %9~p<`X1GlDk0"7^|8_{dt\ۃAL /aHXs 8{@0P TM嵝 `@K]*xܵ`ZnN9ziZt!wL(j-/~b^4HB^K//Bn ~5)M1=xemr+.жR:(d{&~Րmv/)-_z93I^P";Ԋ?EZElűIRIo`^T/5!z7H@KIxz V@PeWI "Φ9jvZOSQ "̵xeXG\~Jꀵݣgvx ëokA\d xE-q_)Z~rR[geFɑ`5p 2 npҝӑFi~_wv6gb bTH^¤HuTޯ2J%{Qc|UEX$ +o;ةʾqR Ijd'NbDc"/O_by-00fEوl3qi$z@(Piʄ}S"(Ptը){Fa,2I7f.aZXc.N8khiR`:?&ÇqY^.0ijzP( !=۟uiOxۅFPq Zk:5'[+l\-LAj,Ԉ5ܩqK2zͻhwUBj-3NuϹBEcm\jbQf@ިE`8ZV&ظ+~_碹Pvx"s[I"žkלnڢG6`2Z:(H㊀!"XL-q؇ZqI9bɈʃ`2_Pc3| 郒&tSL # |[[VфW j,!(Y#~_0a''h z"!32r {L7Ow>H/s'ے  / kO}%<;*cs ^M'].0GnY0춬E7L4/<)9itG:I\6& %\l玎ذAck3-$G7¦H@a j!6P}Bh JRtJc>G _onߒϮ+' ʩVn˨lg%5@ht㇢ߒo>fixQ4)y]n]F /ӹvOyH=mAlKSiOūī4৮ 5g߁w)a*ms6ۦ<{GNn&T " /zeS g4uHӼ?vt<h9˾fS!^4E,Z[ kU=4yZm',i)fNdBX!l|t(q eE*ʀ6xOOF#p1xMAhB23_2%0|3y#f<|Y?v4mMIFt;/N}T6u{̖f &"CC%.rnqP`'^\C|-uVЬ5`JP0".V&!\ !1IgF ,K`rSggdLS3sBか߅Kg3Xέ v7 )کˎZdWw<y1=_HMiSiI_#G~($~b3? wߧ&r̓W^)xNS6˭*6^gRm>˩VjY܃U!"sZ#赔}gdxF<ǔJ?nQc$wixh +R+X Q2k}/49U}qPM+S'\e)Gm #p!9_Xsl8J Xd.wU) =Rp0WITB*}mlR@>?!dwŊ̝ JG cQVš{ďEژ}:_layVJ?6,zF-iEMZ@FD7O 7o}O'F7 VOt".oİ(D@%>>%.uf7DQPXV7ߴ/kF)wËÖ~>m2c /R@~VpZ-Y.gi:9h  [ʥi+ذx؁θ#P<&Ѧ I1u\\{*;d.==WtJ>)=rJBK'2w[ N~4\;VY}5W<:Uh:щU|+xk .?XўTB5f3}dl죈}nXK,;K\㼞?qVRUϪbfaAvR7km+:J( ؖEܨJ_6n ڔ'ׄ"?q:" 6811{_IѷOŚ?A=ٺ羔?+5ZF1;V&Rj#B @#ZɀٜTco5&i꧛pBLpH * Qzi9ʔ*h+ zf.*Emn׎S(탧qxA.?ۆI f~`B‘UجHRM<"z57Y}9B+Q.Tƻ9TB_ KA<],|ݩ7+Fί4In֝bĢyeeV#PpW5@']%IϵF#kt+jwA. 5gQ7%|B0,õB%SX/3UXT K_ U qX2}̱sy8NFA:og͢ Z}MrY"oME F!G*$ڼN/k)ha=fTcפR[ГX< HS֪2:' 7䃌E =wַ `c%߶-D:*,@˽jLIˌWFF]1+xZFcL?`LW_[M7l:=U3;:}T8ub>Myx3|~-e H-TwhY!IV w&)5YH#{xڝ#RaG"%uZ] Kq@XZ"m%FuTX. * ؋խOۗR׽)\gI8b 3+lZWHF$`@oz 9C3a"ƨD)[-)5v(Hi6U} } 4tj%NL7a͜JhU<-mn3J$}rnྜ.yt_G0Kkάka0[bQ>$sXWuFv'sigj[<'4a;~EDi4'Nkxյ6צS}z]:M}ǂk,8 95w5Pm=]%+kg%uDZ068QTL]2_mKa9ŃW1Sc\ &kt7¦@%AyO;jx;jB Ig滐UnC-NEH}`EKze:s zsͲ:,U7#,0((I]d"êdt`<✰@$Ms-mXXZ91NZIn¤:3 tǥ7SiͮԁeQ9dYEA 'Ҷ`gA)4O =lxCC/BO* JN]!.].&z-=3냣E.GiZv$Sct; -8(qlFn^u g0m(0 GjTH_6Quګ -t̀narv>670q+%l\Ha.RD/lqKZ\>v#hlm꣜q f a<;<$ܞnjawLr{L\P q@*-p(̻QZd ps7b8|1 &pA;8Eͼfpa] v ˓GNuo`QO!Y%դYusy"!ݙ/ zkcFjRY LW זin~Śެ]jYDZ&ʫ.d+Lhw$n8LAIƔy18GŪ?,sc]Q)z}Mf|G!qCT+b=0$9B2^KkNÈ.tlYLڡm֌La+SYWºg|p?й]]J>=ߎRcs:U!9_pd^R&PT7ZFp3(Oܟ6ɜPjȲ4W Q7bZnYfu>F:GKwZ ^.4)#%E8x8-.Z l)">5JUo5K~zU [83tw&da#mO eblr+UӇdY@'WbjIk,q͒4059rDcwCfy{{uҨs=y 5d&GphHby:Wd xl3sp3H0YbЖM $mμfɀ_YxEFo sVXAt=|xMՆgzHy3R>W鄝YNYRHP߶J!"Cޜ+mȬ&u*'~puiρTH95h*K4Z[8=C nf5 J'S$ {`!N&G3Mܺҡhcd2w57ܺHT(=t,7jsƄ`d+[r:tTŖEJ RqKB1ݫڅ it08(|a m!缓 )F1]Dd7FMyj)Օ^Z[^8G*/Nǀ3< Ή=_5{0[0ְFp1"ܻنM p6o|:B 4+dO#W_ vp+l;otԲG<4 `.As.y [ oii&G+ t q, "&)Nʵ,Ԙ$_D=C:cqEl!"Gz\ d@`T~A&`;x_r4 ha) 1g&Cc噽+ޘb_T YB,6Nivn*T6${ݏdĖrmsŭٜxVIi\ߚfgsvwjRwrX6:^H//ʉ"Cf>x3J[2S~M2m"gqhv^-ir|hSsU 맇k'E{NJῸnb*GmG*|+3إzweoR0h1m(%5Tx7MՈ0?ݒLjX*|Nd l'.o!>:±鑺hƾ ^@L eqPQxC]g Oc pPm>sÚ|td 3|tљ']Ka'C-DKau!@;Cg:XHϋU!}z凁N}k+ LO6 bM3 h-FuH}VB}(}xl ,M,;*ek WA- ҂zOYQ:l/ K1cN$&*ĿF0"_#mTG0Gt3{>jCq|>}<4BEcu6K*(P{ ~S\,DUIci B+^cU1y`'I')ݙ4dVa%TfYa J+hr B-2ͮ~4||J5.D5^p54<y*E_gÓDR&R U?qR8fi?v+yf"λozK"$yVhKmYO}꥙iV>y߱ѫ%cbE9b|Y &hjM*iOw0~)R U/z- ;E~ ;IUFăi2ps#)\CIO-ӀaN sےm wQJǔP˫-+HK>CkԲ"TXlLt ~M(6>_1 &8;S-h )M Z ̡Zr a]I'tnק^uc OmB;_̉;9XgB !_6ʟ8I574U}mjBdQOVasCGC+KᇃO״;7Ϛ%/Boźf 8`Vd()sjt[ l}">Ad* QE6k_ͥ֫]ӌ~ Mf({hsb8-e1cAF7y$QSf|f*EPnOj?;5nzDУhW\LfmHnZCczJ$[^GZ, TK:}cb3cy҇J\kcc?8lē 콐GԎl! "X+K.~Co":K^7y3Y7 #"?cT O:섦VP&y}Vrr6mљW)`Z9"{γ}ZL?mP^;g'}<{H_❙J>PEUE]kGt]!>.E߸  gd-}%LIi,5p_˒#8Ozu|&P5Q&.D/Sx;0֣yv0b F\yfQ_d3ADˊ:l9n?.-|ݷ|` SJ'db^v SXjBH؎N|_t\ьYxō=3,`Qt]vw=9]%kHã^;psiyyl !-yG<6lfHG[/~=C)\9`ODy !EGJAx?Il+@%jɼ!ZO-^^E4Q`UXf2h^wHzUs;bTWm!Jy=GlU [$8[ㆦm".2+fL+:w0n'+KUZBY(^%4R08?e#Ky\KP>BWk(Uc3+Qce;nzB\ c. Ö*jhLH=7 M|nl>"jh;`KLs1Hv t-\'7d<;I}:QG%qP2@FذϩElZ1gFOL^2mA6Qʬʼn[#=a ;Gu#%8 )݉3ѝ+Pɵw[ƅIdĞ6Z/e9 Kexz% 6uJ\f^G)Y:c֧*#%ŗN^u .+ 2QںIAeLq&lW1ىR< r_C|—UwzGpZMX^ _qðAbc#,=K҃#13m7 9klǟ S!SQsp;C.65ćbГg3B]$ݲpMbs\yJW mh ro3BY {mmy6#vq!w^Sk2=dNfeOL-`td@ܮaA|yPr{5sp5npBͪPrO: i\ٚY4Ir $` QЈW欄} mw Z&K4^E>[HҸtD -eS͔%#E|ML0nuu,`%C  {P';b;;d=qu1t}4?Maˁbgy=+w7"1V>*_1[89$Tؓ cCAp # pA㫨~ۮ EЉ}[SXQ]w9ƣTf;\3Q$ց SwDb6ͱ2*:@b |bVUn^ VT ) )Eu&PLu48!2N2$/cSM9nFHsO~U>9ܨ5ywѬOd$:ePT(~UTeS?sn[6FĢXu=MPav4T9`j jKI^Y% /2K3%, S|2TH#B~W9D@A2{U/Ҝ)t?F1Ř׾pp+X2Cz#bpE 15jYMaWhG]~Ŀ;(ߤ8q4 $| f[gf V |r9u&X) cN[jrAtK6tYL ̖'3-e caCf'"=)& ĉ1Y)Ttw|t@ {UibvY^-Ygqx&8 FȒْ[㳌WKȱ;¸J_IۦdQ2,43;D@ܔ=̮Zk 1![ȌIN縪VmGW rċEk:-MÅFܵ@ܜ(e1h| &-kFOQ۵}f'O::΁EDQK^tb^Ñ!*aI)J֛@AYp>,{WM7!EZǷф=5u0Ű8~%rgz~Ej_)D دN/>_E1U/N&;JuPf= {ʡ`,v|O Քh{tyL5G}6|'ʇc6?>8\QpNQyVaB|g[?Nv"w|pd}AG4$ֺ; 8Ir? 1W#J6M[OsM>9n2jAJ%>mn]Gq2~6Bmp03 êt-e}ތ8z>64z/s %`aSirrjb.ƏH}Ti^ȋ;/(a: !N [V^r5Pڗ?"4чT#UN?/}÷NAxs3uqd;XMՇOg#y3?pQ+Chlt15d}qKWRGF%~pULkG|Q#lLN ~&. '4.0%hԹޙrފ\.}GؙUwFYsݲe%}3p&UD W3L-dȣYEU^[77xAI(ss~bȕ23mb( ڱ.qJUr~ڎZkWL0ы+h?c*Rɥ!]P/l㶫IZR϶t6}3)x#I$8Y0P;؇,x*H3n}+8Y5Gjb]p┦VK3h_/.KulԽ6O(b {^LS#Рulc,Z<ӿbȂ)\ l-zDkO;=(:y&A>j۸$"X> M] *:Qm.U^dzQc<ؙJHae bPIЏGiX1\}ld3n:HF(]RvԠ՟x&Ok["#hm١u{.Bt.5m:'g3Z/F/pn}#JclCqw(M\gA2W =N續Py/c'c U*?GnSʓe`Bܖ]pFzt y#|,3 VA 26QKϕj$QiKar׽Gahe9DOvo{P1Z!svTZ@k~;OXJA0.SPV^lbfji`dHƭ͚~?e)J99&/#[^S>ıir5gA'F R?5+%cwޗt@Pc-0 ڲ9$28p6'fYx!#ic@XE9&д)LU6114ח%|!X_` ۡ+-C;](^e1縼+F|/IxLtE7pX3Aٗ =yer2sr} kv\2b;BYNuJ31  ^x5ab/@(n=vC{12+c<%ߓL%@Q͟AH'3~״sW@σ43^{*[4:ՂW'eUd ;"d-",EzJ=MqH 뿾wwmTpXbv59`en8#f^$v &'qFA$"CF*% pȌU5&K}[pJ7I3qՎHf{i۲^u8Z&Y:S+ұ51[XILvn Ҫ;Ev8T`_fqֹF;om]bɻ1$0qGMt@wq%r9<$ѣAjNϢow-܌`Cv~o5" .O2[ѵ[!j̩wǛ!`!}GM=12_?BM`E} Eh,d%܋LmΗjgٽ>2eCRTX%mO$[7`Q=6 FB#e”K&I.ˆZxQ m>Xbu'ӓ@Nk `$EQ@WJ@BY1>zrH.0P_3"{m&>Ze/xdHIA[͚.b5Sչ6A`St)b ;w=h_G-S7>eлu55s\R4&`F2H%#toc=j6>U5I6괧d5LׄvwRt]{ i[ ߇ *=O˴ MEoZ̞OZ~<0{Ãٳ˝ʸ53Y!NttJ@r$_$Ռu]vAU#"ZA@բ{<:n~ȶy 2e?dyL#o[sZuRN;Q22$_jAbYEֿEv"`[ʝlg`Cau.?<(^|[ǣcYlF{@ fX佐//dcJ+ W!l6u7^Dtꑼ3Y$l}v86إo~- >Lx/uŇ~fKKY:>cCJƴ2Y qd]!TThB+a>[T{HZ^!eF[}3x12m pq0^hwlxp|8d%{/hsS#Iz߱aտM6ň1Lp6'}ѿd,Ę58pމ5yXlI&$%&IW<| 5V^X).GSt^4`sP]i/\$&P/.) $1VEGK`Lbh^|O/LA.kt**jS /Ub#%灮P4ʰbڅ?B}ZcfG!]g6JdȬݹij]pDk:̾Kʦm2c>@iO-wL(*FWPꞼ34!|7'L#0Mz2:W[9mlCT6%jKdJd"+Ю,.bP h[=AF+maB\5]+?͖$CʂE 9%ȶM`E(㤉P].]w w*ތq$tvlӌW1$$yѕ6@M#1C@',7e;+r:(5N?L4-y+nPjt7btM$R#Lw_ƱJ!$͊UIĭoiPŊ| ʙ]mVG')e*PU{"[TJ{fi͡MWOcg 6ϐ$2$spc*L/pjWq*YIMe},9m'nJt4e>9_0X;N퓊 t=dyf`< ,p+?NfYpy@乞Ct䉂+hLlPS//Jd)ģa~- )VFRE=q+;|+u:G("ӏsk.R/N;9~]I>JB /GɃ06_cYLPIYJmA1  )+@Y"#^->5tAbt44FDj9&5B9BFvDk͙MqG.|SXDf&598ょjޑgdQjW9h]no~tKs^Kk$0Zq+=f;8kBZ{pX!_UToA“4A:Um ZŬ4S6>hxP̾0T^aPw*|Q0}H9gqm2fR@RX=޲25$N r* ?7ju@ X1d Ԣ0cIdP_]MȲyP@T6[lA&͐%NmnZ t`qQQqsw:a꤆R4 BO`1Kא(K fzb#w9*b~# 8(~W^l#d^XHX?c,D("QM9Q=4p*[*i}= @PI )?fMh ;^ul(% B3 g+_[^sdS  ]v㄰mEvbl=Cm`GbL# ˌanov+u8*@oDXIwx'Leo,1^S/&JBZ?4A(fOOV9K;Ї]v/r] 7Pw߰fmB"›"V>Tj)XaWb,պ1uiPÌF2 9㯻| `oTZ֑Fu x\~,vsb$'?[{M+ˆ;wk4ʹ[D2V{3 X$tA]}7F sZ?.]n(a NP1H>d5rʖ0;6rEC+L@ /ݍ[~/ /PdtU"b{Y3kd-MzIH!w*.7GH,i~{_q!U92KKں|Xӭ ͍gYqɻa8]؜qdzQuhe j܉YlQ SˍIu2 ) فJ󱎺rQxY/>,jfR\4{z]l|AjP?%J _h<| !' oC9FyJ*n(:y놛 w]bHy/9:D86 r[-:e`\zb9i4@rC!-蛽 x,?xFtE d٭_' 7\fB؏yzvlr*#}?]-ec}^S1~!f>!(5QCdtQdATHfx'oBa2ȶ?5[:cM=|75c!׆~TZ-Ϡf_| ȼ7m/,9Ӈrw]eki&3%1B|Uk蛿DC8X3^N(o|X ЕȪ ڗaBވ&1MVۥoȕEg5X=j3b- `-ай[4=IJ!δ|mAoV($™)CKEvDF sbѨ,sDtGS:a+m1Z ٥DW)f.Ծ-g.Tݕe"i·mH2cPCcFW~?:ǪR:[ _8hlvݻ0t5YXJOE+׻:ڐRU➊$WZ]W/H'8~P#)B`1%%wXPYěL=(CPo ]!Eя P.J`B iȯ}^&rE-@@*t @{DYg}Oy *6NFe.Ӣ/oY6b>,,1>ѦM!{L9ǒtlË׈MKY06aJ  ΠǛܚݓMEn@=]nR8$Ds=4>eL6]Ua^x| ul0+K)o*ӴYlhsg t~I)?pw^|;kѾ{Q"9`d36='l+mCU .r:saV{H hzo$^9IGTk %J)yVx( ohD|!4t2 +qk\yӅ5XtQC1ieo<;f!li[;gɦr*Mȫm2 ^lQig:N*ĽOmB4"i .bx0+~p!F(O5X*HmƜa>R\e2mU~`i&ET?([BZ0Վ~N=b"utI:=6dfrJ\y휡I Q5û *YoGU=fMB &'B?R!6 +%ᛙkVR "2C&u T2SSClPu%cϻ j,!\xlu€ @-a3&{|â&uܤTwبe!HRmjy΂r`~3"shȄu_xtt( h\UV0#Nq_fƂ)򅺊:@uLH0A(5!~6q3tUa6UoVI-)fOWrˇ|" @W_m4F~y¶a 8BB0UkcM e21kh* ˳1~Hg2i$zlG[mz-%r89:.p>On-IJ?'{,juo8,2rΰk" ,j3-[w'dYh$4 =;+9<:vg}kR-ǃZio>pE@bܩ-`lH&!HHo;>T? :ihsQMb1At7$ͬ#'nE jTA?g%@i#9F0ԀJ Kҙ|1-#w&@T.9UR1WV%ȳS-AAg\Ѯxiܲl{R]k#{bw`FGNp4PnKY0OjTVLfP)n(EHAk8Gq!1u! theh};z;|~kaZ/6eh\ӝJ9)#0J |@{F"/HT$ X! ȉ+:Ăt}fNl,&:N.#׉H:秴i91{_nXF( $JsS#l&6DWY=/Lm$B֨QXJ[{gE{-%6+"M߅:e@_H0~"" e޹w-PK6PN+94e۾aupr} 5ՅtxԊC0GSj=2!ʼn^'Q`F\W~is&=b f($9d*0 YFRxͮfbIvyaMTj뢡k?Oӣ;/9꤂&I  ]dh C$"nʉ {;*&6 73|I1+dmcEU>Dtn˂Ң%%I<k =J=(Шz~D{fȳuv_ $9ۘBzu8K==XgF1hU޺FLLKfQnAL k;#+MwUPxuz]+)1@> #Myk*?6`Fݧ˔{?l98x2 NlM̰:@lv^P>w-MtӅw)DÅPNx2] DѬTG#{˄EW L] `CQ=WY2JA8ot;CApEpj.1Ca&;pgTYL:vtT\&yjtxH`Z~5J+yb)!_(QL81pٚ!n)twLIAl܊%Elѕ*:Qf41S5"I[cj\le .8ю)kh@A2սOM(< UrPIdwIK3nB^ nPdMٗ9!XWv |HoB~ o ɡehXv%E³E04V$pv1E |]Nb;dZGvy+.XLAU*zV ݧ /3\ *[`(9u((3ܫ87jo|"/sh%?ozBL NV2‹q ԄWWQ͍6UY ȖxB5w1U%~[;N>,8Abl :/Ų{.a”>oOkuA5=l^"JrCѬ9YӨ 6]q3?iS\.@+|Vm% n^.U$.D -|FD'άY0hHՏ-8$5B!朅 ^wȂ=ְD*Pڭ,]#\ZMR<5u IDsfqI _n}_A kNEmlJԁ aC~&KL")\rFPqys"U? [B WZkKK0ШSD rŁ6jYUtzh7f)KX\|i6VvYڳʊ5L *S1G*gϜ ?(IfXG}:}9+/klUcBOxx,ޱg:ϚiQ"Yr = ^lA_|^ŗb:D_U<$)Lv?ˡR Wvl&iJ)͘8lTxZ/DyR|Љ`V4[RՀ}6 Ah'OS輖7f7ptr} ~H*O=ApP uH:G-RHH;(6"ҧR]|dF: uΝJӐ8ujhj#C?7*u6dq>%2 ޢH|}1Xy3Wq K"46nZs a>)urL{(lrV!8ʗm,tN9"󊺲 'U#DB 뻯F Kd {|Wa]dqx:jί4SI{Y{)1jD=CIw?;;uR>P[ /^$ pJ"c9SqbޝqĞ_J',MJů1dQZ1J-x|-Ԅw٭w ڻCtjYRUEh߮06 ,Cxr2U}:>M!߆GB!sLm X1d˻Q(-j3^o[^& tꂉ-Q\UA|ux"_$K'[/>p,e젵-L~n-g=q>:Le+Ym݉~u6O 6I+؜_W?,*FfدI&C[ivĖlyF@<AS?=h!8=\5mM՗-72Bh`\C10Q w784_z @ޔv~NWO^ҙC0 .&c#;;_)AS4e1J7j5ںO<οQ6`$$fԁ@$Oobml8#*h4 ses8~ 2!|؏nK*[#SҪ. יb,AY/^Fs vN1H43O,f+|6^oUlmmZg|t "fa\9b덽*L 8\0et`P@7^;S ExP̿z[߆3>{&"+%C|]N/,5 nkhm} ݜ%ͻ՚\TeοZ8П" !2hVfsfosީƦXj\J9DAz&zKS& Klj4Wх`RseS eSk5 $̪$z۽XdI*;XxTbr.8}{6-苕r_#gkge͒VO<"Js#=[hxޥtR.%I0龜 DF(O ?Q8'RpRu;Fs_9nWl u*^R’n|Ą>`&:8XЂI#RQ&Tͻ[f3;ʥzmLcbN, GR@.qa;;T7\(swNCv|yMMh@teZH Rcߓu쬻7Ď%.N,&=c_aaGv:v ju8QZ0xAR%kP {]@xrtd_9|jRWEٔTϧeU7~)#&2ꆏrWӷ)01:V>*3x\JxxgieElpqؚp .'}ǠnJ8(fNZ?-&^.͇Ԥm|93do|3BiSZE񚂙YF,n->˷ LDYb[c 8 A8&bvJcVҁ"`D%k:zBqjS红J~)[ZK1UԿY"oָX:a{}H0K燴{)nc }¤ٓe|B;/^p$ȲoZ~ͧ(sJ1m̒h@dIc§mx(|EйPZ>01i@rJI.|` '{1՚\*[=I2!Nv; |q M}[?`?we_ze#l|r62݀\S/ Q[!d[LHd. GTY'2[D5^}&O(WSXeBg̳wx~;4ø"s _^4BΎ"[4ϮD)]nT33BVdEzD 6M00YBo Sdft{9"G}{3dSBr(vlZB]G ȺDVd. 5%%n*[-_%N\AٵJʓlXѱ|݀?ŞD]SCtL'fAb) ײAeV@!9,0p~:QH cz8_%PN,!Ƈf"VqޒeAÁ# gQݻʷMZ^"θt =ܼ!M ey{J@`Ui0@ܤ&|2pUFeXfy!gm!.!] hmOJ7Rp%a;`G[TtJs),^!6Ҏ^cR/8tCHTlB"](0$#{Դ-Q,%شH厔Cgª,k.괶?^eXÇ$3Ly}RI*={ Ęw~}bpHbA=`H2$--@..RNAf򬵙l\81R `md+= G*>+{!_toT5 dCnZSbR1~I)1W ]2pR.#@%ߌb0\+p.>ƻHeq>w$,ɑ<$IHB* յ('c#h ^~dd@n%Q[3")fIUz7Y'Qǂb{3~݊'x;|au ߛ]KZai,*Wrg9|«`EnQKtV^QļnGT+Sc ã R+fc8O.w(/I^q] uBa Զs%ӭ3G_9B$Ed\+npnSIDKg^݅p0ǥ'>eCWq΃Űڨ|br$o]yb )fh7zuUdɜҭ9'=͏1ʮ\D/I\^"ûz|X&.aױYzmʪs% !q&_M0O,Wn>/ܩ)T`>1nb@ۘ^|s0h\c]i!Sop/"'X65*]`*Vk?,'rvN z%u)`cO%k[sRzb]SI6}%v6w$8M ~1m.{󠀏EeFL$Zb.t Δ_o1@Gp}-Oќ ~!̈́ԄQm%@>L1^Vrh_ ^ mYOTq<KbߍPP? k;kPaI9_Qs0UVtmК1i&j WߝmHJ[S{QL( R3{֝`.t,U k7ƃ&U %dmt_\dO^*=T|pej4T*fL<<){V@eݡ"w*S MeUlf"""IA=.^U|N&{6)K̟ۗ2UX2Կ@4FmPL҄l};VTBY{'\MՂ@tvHuQC\\Н]$}jNW=X bNEf ʄϻOs4P.C>D¸m6JJ671,@! G{rpLs-q[j_dCCX`Op۸P4 Z٪^$.ݾYE(t8o [no/X6HجGY&oTA2{X] ]#@|bpE6w]||*y;|d}gQ9k*ߪ"{|,O0^w>qq̓HJjPL/ U1ӊ*8uDݿ;p(:K 2ڴhb}5+4}"Kĭ 6Z{<-Y0es-p8Yg(hmEPO8%06/}B1'l[-psgLCcb:"*Zg.'ÈS=j%;O.O۰?'Wr 6lżӛAΟk7{kOq~G#!{ 1_lڝ D@ήՎbnb9ij 4t]z\ Þ,κ}?;j\I  iސi<>N}[v%]5PA"Phc O.aPljL'HhD<)8 5ֶp:;R:mJ58O?uY*;PQH;;qkr8? f7U A{*JX-ǧ2@BMP2`r ҹl|tqߩh,GpTϵ%@[20^=NR^5QDf;REycի/#;sYݼl&n5= ty Z6U,7nG *ܲBuF!~"EIYBʤͰLc{9b.ď6I98ɘ/*/',eھKe|r~'2@^D(v}=bD͡s0}@Ntmdp4TMfT3tbnrP[CR렫\;޾a#xbS(ɯ5UA aŗHk%5ŭ<ʮ] pGoIzF@/sd||94f& lVL ,)Z Nk~3||Ǭ9}bֹ K8=RTUּ0Dc8k6Fd psw4hj oE#W-P(82x_:X~c~0$bGz^) iZ212no>݄\4ߞ&V#1 H#bu/WXLή 쯞 H u&o2ts,!y91w5L+U1-%Tꈹp vJ6ԧ_Qƛ9Z HFI;RJz/p,TEQ+xhDO; %]c|I>oӿ٭Õ4 PS0zcayKvEϕdP[z~"r} #嵗fB,D9H7z-OTP~C*T i4U.?Ӑ4!/1Q/FvB_ǯ1w{"נM"nh#3ߝ[) 1HR"Bc8c0i pKr?f |*taO(\0>!Fg+Vz{faB@ +I빖A|* wKa0I|:]:! 075YA348s6*ᾚ^xƠ*ȧif!%\D)0>_e7ǁr<^$!7@³C_1ЧJ bֻ6'b\;Ɋ*1?ae,9@ L\kJo=,hu0~d6]f\Jpg`Ͽ_ 䐽FKfʿ"@Eku+,d:pr~#.3{dJR>.x0P0^ 7'ׇc^hCOLVFq ;@JE2yr4b`u_?`mnl?7rt^NaT>ު@3!+)b=RyFx-s|z/?+M^V|D5x8؃3%-DNu3e:>7[>YIf[9^Ͻ! BwFC CmWlxpgP4Ėm%fk;&[.,`>OþO>S¬зy5;52}Z GpcFLH]'6)#2xT*oxj_ں_TI{!mpkb`yK ȚיXk/<=xC9$2~4QJjyVUM#\EVIH EbU\w\O>&f" Ixv-:| {2?WRVj p ^֛ki7u: de*by҃y6 *mE@ ,5H$9nԫ3cmǍcFg[r+ <(Vs0$UÅR7u%-/0@ AFfk(Nvg-Z|ݴ_hP$ͮFM[Gn^Ä5)e^v Wox`qQRZ$KGGC˔ސ Mv * (Fl3pJU#[DN8,AYآNNaJj6k??vcy7SahuwKn@E52瘢j-y,y&Qr}]-d)!X}',0~aٜ .9?<38QC^[">f ֔K=B0sx _)k&L$$z&AJeAJLSkT^͛[Q濂̦)wzX1bx~ʢ;5D(Jad GQyRxF|>A#7|>.og6Go]^QQgCm\6T8ZY)ȫ1XdPڃ#/ B73kQ. /'\u IԠJr%K-?~˵W]$Bկt䭎#dxڀtnxl |l\s'hcYwɮE<8F#maX W K%-SEU_ďk_@+\ehSupgȅT<7Ѧr1Xy@/vAe~</ɮOWUQm)Uӳ^e!S5S9:JoS) EZR^Mw{Qj?Ypxy_>+fG_ETP!r=t/?Ȫ편7U.t c#2\}@t<+yΫ:.cEWK g\g/7ק^/&1 ʬnBEqD{zҞ–2m P6;-ې}̅qL7rU 5lM' b 9./0i;FBo#~$p/U=GE,mA?O% _ɷaOsv<_戒ҬR} kvw!RV)kE! fNb|=Qi1PIR2n+4@qdaa?W[`3xQYh\%F5;6KUk$9A&:&|!+i v}> |EjV*\#7R:3WCV< 1i]ۡa?CN9kO7HGѹ(Jm0mۘ@kg'_+݅ME+{(?E[.CBZD5J"%dV얛}JS)i- U%Ny8pot87}svɾ4ͥxcBG&(\CY{wm4z/壈Ӟč_%bH#i%W1f㶥Ĕg;6g@۶YC9?%FIލd!ou!c{".p|<FsJtpO9}k~{ɂtO:u5IDf/ׇ#A>T ' q>G9' G0KǑKf!mNMl𴀏Ѐ=+܆N~;xҚO&bcG_V 13-7\[K| r(dWM%ߺܟP'7 L=pϤr&*ĘT{혶,wh &7g/)GUL Ct lkїjoRU)* FaTN LI*bbs5XTTZ;,0%YpFh$ ;9ojPxT+l ':-:)}MuH&- sNPpYO>:6H$]=j)so*q1?υi< ũI`*e3LWYn@ ?Cc[F~'\ْt-B i>-aRȉg B?^z!]3PWJ [ A\ǫDh XIq RP%/b2+D \Am-ʬ%(d dgoP/|sTlfTS26ޅ#O,n3pA&bp[U.q03sk/(xT0#b G\:= ԷPY`WBՉ0'T殞,#k@(LӘ9VΔҩx  h!4?qT98LXډ ~2_Ox8V{7)P߮ +D5` &0o<ԫ1% 8@4+uA\&dpjxR۽ yg&mLh Eg?cŦǬAR\X~Up^B03ٯ,mlHCXK( rN:,K@|[Oisg6sPb2T@CU2X"Ø|cJxF NwZw*V%LۯniIJ$ Rt:~*!شSdoY*jhF CQ1;fV*TI1cY\E:i*}e*krM0a;Y P 6ywMߩJzqw[#Fѹ_)5\͠KAYۏN |]L lDev pJU Ǚ,d'8ZS9fC& c1GruH "@b>czM_u/~,FڋD#zX0iXDzB:ˍ+hF՗<˛Vmڀ%gcyHغ58`V|{ɓq esWʅk/umCUj7*0B -'AԪF.{ƭiiZx]Aer 'P;T+ SR]'-&8z C:$_8;c#N]fUdTUDjlC{װnN b <> M:O|rFˮ"-RD7 נ4nSjDg`Zݻqs/o M4:Ye_cRq`-.0.$-s;و)2uĩF̎N\wx<>NjgStvW \x~_!ž2΍$,Bĝ:+w (vDG@JOYAm%OWN lD't}Ӆ?]:2dU c |FkU! <ѕjWFE*& |(Ye]&9/q陲܁dGV`s=gQ ߠ+Y7 -l m+*wA:}gZ|DطO^rEiL !n!#tBq0)Hqb酒 ӂKϲ1@[Y';X>6_"giRiSj~ .WCTqPy= 'w6V;>8q]vJ 37|#˴5-b~CiM\Tܺ%z}dNcE䪤S1,%_lrn=M[9&s;&d%# oڂ Y&V Iϛ뎱zҗˈLK{8|f7w^S螷CWbc#1815_VRa+D嫧+ @O3N=2-.<#/Uc>w ]i?Ŵ< _|!sK{:KQObl&Pe쨬5jǛN{ʃo79 V9ԛ).U؂ɀ`V^4grO *=ǟ 'sE'6JGp*(E ޣtQѴX@΂!;t>epD[{f!Y\#15m8Bnq<J5!޲Y&8ِ:4H_;:ik2?0v\l]9R:cj2Z43 AZ ^^>}ːJ MPmq!UQR[> H(NB +XGZp-ĝ9x&7m{<"ƉGΩ ʙ+=-ONϡO"2sS/Y]+m[ =UJ0I1x¹ff̟J iN9ԛAuAޯh෋&A0[g|?Gqr^`aYB^1.BbJk wEz"grb9(WS#:d|}13֝ N{=fwLh/&FRɣϤzP7gw&{=%\IAk\ڤTSL=0˙iCNEU^Vk)9]JdRP߷mBaeBbP1նyW w_;vZ(+}]#jN> r.8k!S< ڪuN3x>(I>|wl.; /Fa<~.#!KLd|JՐ7|]Qpd6 SݺO%tJF瘻οe F;lv_ml ^:OY3d.*o}DZ5/ esdXT7㱷tfMJ?+Yo5K>H+d}D/G]FQ֍«_?_8\=.(\ Em^dWN:ۉ.*Y^{P"(SDலm]kޒ'zvsSA_ L\g9dم|9L=gm5OW3k֊Yx,h'Yde ytQH6SqXojbptdEC҅PylB|,V%$E7^MZ*uN;H zmj/cXB(ke/~֥>;JwN[8"X [[fZ ä'yOƌ =XW>{ =tQ* >0dO/.=~ʱk#ޮ15s.Ň660]Et0:<PD*k; \ WwQUh@F|ikS"*#^gFU$i&[%} =Vع<"W2&~!}\0Q[(5[X&@$&Vc8uo pO[pfMٙg| ]nLEUВ`Co oc΋}q(w{V\_wh[XO&~οLFXmKk=|0[(}ajP䈺Ar)#X9XH{>q](r"_""^c֠p!}iWX_A=O#;*Ua}:GWo#L.*P7lT;7pHPT!zD+9z !0SYCa )Fz5>|܏[vgzvd*%EaBMEZY$l8,~d?g]aLbT"?6zVZԊ_ nr#̧7Lۋ[#8}@X=6^ k8/߱1Ro9.ZM 9",\B 4L\ ͩv%'(eJ>o;qRCAj=ҭrҮhC$쓸pp~l>O FC(>8ZBߙ$5MK鍆U ZWDtTx֍Q)F;݉IE.JYOS1ZOK _i[IZuQ85?WMÊ1kGظG,r:Ɲ>ykS=@F*2f '}+WxdA>Phx gē}TnYx LW_f'BN+j+U*9_m{=qw8mQe3 LAF[ٿ%_x'PØF|k=H̡PJ :mp[ףPGޛUN6B K⽒([P4Ai7@w#stWu 'D6o-&w7R9D_ Wee˨@vr^1i  kr;15YE, _Pp=1dZKiPI-yjYnt^ -B(³ ;j NKckEFkwsu[%͢ Ruamp T?Z:Y[_XX%߷ͳʫ0e^ F2U wfVh,} CT oΰcrt5k+p zpm>pϔ=)VY"ȹCu:ݘKV09A%CaabrnR*cB='Q0NuTg1oh@Y 3TR>eLpۿ'{ X|]1Udè^`i,6Sn1f,%wRt,bB.WijI,[>}5Q/)~_cXj.';/ =.rO<zps=뻓 ~Y%>Yi$iLN;N$* O Q 4>Pע9)i)jcZ0i+؛\$dDvr̟}g~i#vE._Z N\6a#(3_D7 f\Iٺ Rh˱.IF7AЕwkl;"ܐZ2-%Qu Y/2ۡ[CT[AJiٸ?fЄʒ(\oQN :_=-\e᭡~ڒ7gƛ(iN5(o8{V}G_ {(o{󞍁#H" 鵋 b]>Wf\ dFZrYYٓMۢ}]Nn9ǫbKksqR^TFW.'VACAfSh۶>Hdk4|q6 ȹ-*򠦻#c*)e ?qarC.:&`v=deucm%.keA]1osrz=Mia)%J1:u1_((> 9YШ<~[ҡT7 tfæ ,mW  T\@|X}un1Ɔq-c#ο]UKLm,0cBlsջr _/(=UJSB9|cSغtkc8+MhR#Mp3Fmh|dlTZӂ^"4&å:eWq̝g򾉣O|ZJ\Kk ɰL; y-AR^f;h$*-V=sTL#|YoK to.-Ұj-sRmtw*>81e|eB8Hiwhpd5CeDN򔡍M!_ۺ*IFΔiS&!bf&t{Gs%.'SfXļ)U ӻ%/qsZOĊaHcp麧H'hds3 B* is}RCD4VÌ{|rM/y)}@9>@w@*G"M(:"edҒW"& IXfv ,Ա!QP*}J548 ~V̡~LRwnDIk*tØT>qN"ĩ\*UxkYN%G*/Km\M-׀?_ybmK4/}yo1c7CqG% VU7mM]q-]ٻaeΕ.J#ڢ_[Q:u]eMHVfڀZ#1X0,Bd7!ĸZ` C%D}S.%s@H־AFP8I#s'Sijg93\.6#{Pj7[eE$B)-/J2O 79l~ )Ifq Lr1MV8(>Q`b5CCПF] rpHIEC؈Wl*qYM,X⢋+U8r8."ph||<0fdCԍ"4'53,v`7rS[>iRwrI'7򢮧ySRN)wF:AsR~ym]#e6.sN0"50̼?3 _ՠ`>Y/ 5"{zFG2(yj^i(` z<ռ@d:ǧ,}wCg",OtpJNeϝ#WLΫ19>t1]3ٌ]wx/p'07vY Xr4} &|:3~".сY3 œ3sB ,kxIx gpSͺ[~ßIahݯNCXi tTodcHN3!Fɑ\ݭ|֊H5Sp.n׹3)2 '?`ۮ<´S#ˁA+HaEvA0COe~ KhDhTgBe!+ b?b{հR"fi{n %jZc_tD~%WU $Qx¾Oc0y/(\țUcB=e)m]VYᭉdOiSkoƴD'])oud)v@5KLvZݼ쭧c3S?xdV.,Cl^oQ@`-Xw ӥY6d;u9s;]W4hw: 1J<jxQOPajuYjN<.majbp]NHn6bt:Ip 1qmp@PpNݠi"ʴE0\s!*V}ai8{Q9>(HV"2M(xψjrz"OtvDCh@sPrüZ>첗NDL};`U9}&*.ɞ]IETS|/O6E4M \gjYVfSrW f'e$Rs<_.XN4y?dPl $ECn7Zt2R&ehjHO0ȱʫiC-NY{L}6⭔瞱U/ CoA݂&>Ɩ%8.\Cds#&wO2YFqt`kOH+tڰ1T Q!Hk;e'&vRa[_#ϞzDhm|{)Rà;N4ℎے"QV69ZcS_!u֜̾*}=_%_1,/!īܥ/J %:6B([ioAÞ̈ڟi ,'^8=KKn&iT*vd;}|ܤL5,LuKmƔ{un";(U}w,cØ( wf|∕(P_nAl|s/=:A7Cbq t({Hب<& 8ĝL;4YzWk<= E7RRPbY;΢stFә=]3:mF,݁Rg@eԥ~hwE}MK "\fCau}t~}m%^v0z+d}fi-J; iҔ+hlAf31k@ 9K{YGZw(Nș.e eq$qG N|N|`هxUQE>G30=˒z@ƍ8,7P DBTe *^ KVu-C i;e0 >f&e91YzDZ29*_`4ivd.)){9pkH47<>0Wn -4,)4!Ǝ/I$GV|J<ع'{\w*;&LFYs]wQOTK>FP-iZ2u,;))p pXo,?N6(oedch1Nvr-Jk&s(-`⌐h}DD1BSA c. GFF+hV)yL`zU#ѳiCأcӦz' } [bj|5&;81m3{(\EY%po3:|V+$Gw83nc45%Z&x`+ۃF+v8}7L>f{YiEՌ'?\q<1.@9Ȗ?eV3GItNޜRl {.K[k]A~Ky3x'XKa77}HzP7V_Hm;QYiɵ*ϵL|&^~zŲ\eH%Su%ED PLDz+=% Nԟa*aa|V꣘T*bk;Z7(3Qhmyԕ~pj@fa~~tm`r?V&lͼYh;bvMg9 xwqtA$̟s׮vnV:+v(e=L*ڌ]u;@i+FO_Td\vΡn()OhCe~`31fJmz o]ܞچC0]L#G t*Jy!G>ru5W3 /t;k(\!R:>GH^hB ʄg#->U5awB3Eb;עR<π,Jg': *~Fpa*dLAimj Nו$3rxsGWc=6_9KDw΢O vi?޵Êܚ ̣d$;L!BmW"cʖh7:tD[iMGhc^DbʅVD h&׎]]0m+u1Y޶XE KG!Œ-*!"kI8./ij{}w#nvw8_ʂX9.t?ܶ~g2-dFw~Djo=mhp5 _KL'1B D 6CFaއTw%Ny=)tst(,S)>R3FiC|$4|}P,v,, 4=UʛB•V8R+~~ `0N{QⅡKUtJ:r&UM ΎOzϾbH%fkU|1:ȷS0V[2we^ShnjƾCglPF-O=@uyX'6%̽IZTf7gQc&p5Jvzo_O./E& g݊WxICQQԋ^%2_ .:W n۠_ L;xޱ$c혵Qqը 0~Z\Px4u!Lki4T5dٙBdctQ$.3'9Nϧm:+B>cRoiy|ِH 21ԣLOB՜p8l]̷ZԢ+ԍSE|0G+uj/&_HXVy@Avr,&v[} 6Oxy|5?e kJE=*zg!˝o6O%;F(l z6[ݱ lK=M W·vJ)cRP)ri[KsWty^t‰H:7&`nAn6ҙj)Oq@M\ka^:aEY_7^;8DdK^qFᖈ$LbklT'\O86Pqܥ%ExӉoHSąAwꔏj~,`KS,tc(-Uނ"UDV]uuj vؽ!=q!+XQYoQvuhTBH Y%}]?D&,a?&)HE3)X"rB#_80xl 6fk<4o_s CiU g7_~'.h/2rvɼgw vl?]0poND_ղe)J233)aޱH~F۶<aE.JzUð> TRdFȲ+;Ehm+zY $=5J,ʼK.[=owP7Ǯ:}$TjϪ_U/wF&nt@@+hj c~#tɉJ tP^<1,Z@[+q'ڮT|i[`ӕ"Dew8D`G4 (ZX%47b3O!(IlM>+f7+RXjvG5psj>1A򣟔2 C!:ԏ0"Rqci7@Uo%@?4OSzfxjQ1[{tJ ʣ4.U!SPٯsaUgLra#>r;_{(Mئaf1Z5}qɿH.Ţx$+Zx:M.OBnLQntCK}-=D;ʕޛ_t&%=#ΉXyPM'$SHkq!TDU+z̃@2z!,bޭ[$.qTAnZRxZ>ޕ,u"Q|iAgQ%6/+٦4ԟW 29#,1s'g밿]i!Z,nR)SW3q% 0h\q(&n5mUKA@^Oc!S2grfsXHSv;oq5I(g;IK` 4T?M`e:9\@gCi"bA{xoJn*wbcX|3m;!RPbpť_6/3ʍ[IpOKLEO8 .P&Tv g>UT&hřc]Wم"Ә'}P3dvdĦ a0B%idT_b286b ȗVԈP-a@L ia?N,؀ &iiLPS&04g*I^ 1DD!AA^Թs"ЋuE „1EX ?N2l'̱wl qu]'5t4W x8h`[9]M*u[XR.*/W|{j @zࡣ_}ũe~ H0EDIe S82%8ncUV:DDL϶"L=8n_wPTVp!2 KxJ[ 3^pzRy yka4цѡGwe|96*[!=.fx*+$,!\}A4Ab(\q a5X*K8JilXQ:adH0޻tZu -KT*OSm"FAث )NuUH\!.핡~;&2*}SLʯ>9fi`/z\t~E@@I}rlCSe+I)dFljxq8L#|gQ/!vHחy]YRʟ:{uǸr1,u)#mvhc ZFLy`IN{)kV0;d)=d{@HǦw칿//Wmc.;ҪI84O8Q> .1WΖ0`~c99؍6}~ig w "(#% ʏ#飸/"w'ÀG b 8`zմ@mj_N\oznp "*WmQ~ϝsǷwz.K< q9\MGp}|ϩ"8[V;c\1wK)ڲ>VTջ]ce!GKc=Z)i͂{h|X@|w;i28V=3U_[A8G0@_73R MwF)1 bDۙQHm W,RQ} FSBqԘxt)vHt *7{Ł㠄ulR;;rLY-y |@"wM?bTp;( E0deoXՆ<ڈCe{;B$6YEDr'gLebKNON]T8\bkaW[1N:Ҕ؎{hl*4Fsغ,NW0!3\u;P |X[#c#5ˎvLA"|zMMf~FT(75*猝6§JvzmR0Φe}@;x?KjfO I)(1<GQT-g݌y:cҼz=Fn)Adz4^rOY=fc |uN֞G)斐rM=9V?]ckF[WÉ]@axuc&#e~DG!7묨dh쌾Łh/Je&j߸{2 y!@4Wmv;-NGE*:ݚO>RwyWv?? =3}Z P=Bj*UqSKӆ&oO環TZpnVCL9lCMd?JS"|`W,cpycjw{U`z\/tIuYA_&ߗJFU>9rLWƄfM Td4Pbfா.0lf`,BQb*E*L=>j Pť~KUqegzyy!_ pd +Xj'}# {<$QNX$QkFsmTH<76*T/ nv \~ +zjn@TWJ]-H{&$nb-$>m{,?xPMW zZ@DtJ*f.-z J٘+6fѯN]/&םzb8r `U]${ ;d2fdlٳ2oOsSd2;W; .B_% "xBGg`D33 dxb܀9']m-MԢB4wM T@,[kJ)f$ 7m2Wh0bʘY }8fT^H&L5D8x#Y'{E{=ӎ1IE 9_<K U ) ۱cT@HZЧ5e{f0a4.FV49t:D-~/!8_(J٥5̦v6ߍP!{0)qB]jԅ5Ok1f_{7P{P/_$k+6IҘutmW,m5G"H=c|"f|ؤBC\P,pNw|k+?R:ܚ-NZ珸^UuUЍ cC Ӱ2Ճr&?J`F^q plK=ց.!|4z$6 xd50>zm_qڝXb`TQALr :z;JY&uakiqQWa`B6?F\|tTf>?_.$όe;ەJyګ8X^-=AHҷN d\XZ[M{ިt!4Gi0v3kPSHy;Nbc)V!^H|'QHfԉ@m!)@#ʨ8.+S'z]9Z'=rd!g8Xl\@鬡a jA1)Skbs%tQXK%E S7~VD^> 6 Ay?>Jp fvm-tbs 6Jt޼)ȯ7~e1% %wY@T*P&MXnKU'{J,a^bn"; )ruuW3W?~ph PcPB;H˖2>sm(0jc8'@P#I:$qw#+ѲXIAL%%4Ow-8X.'!s@n ;"KlrV' {`?S34mrlc\r,X±.I|O@}}BqM1NN/4:/p  ⫡q :@ʂ.M),Q^"eu/_,FtLĪCoPQHөlߍd^d:Jw׈=eWO9BnwwCu,-j w蔝B8)]s$r`I,[ʦ_{E20yrF1#FO۽t%ɃwltzućN,ch4QIonQT-$3BԘ4B,f3-eTvϳ1f>~ _4zxPrSѩe0ID OL1(>K7kI>YQ . ңQ?]]3qVV?ٸ>`?qY]{C*9l15Ѝ4 ŹtqGVkP"cnz|N*|w2\׷U.ݔЂZ(]&sRA^v X᣻ )!aW1oZ=>`PrgbDdhf).amZF>1 S DT)3=vDv6fcm˔C mgnƝd[4npeoC Cn-VB&mb(nCkK5MgxbB6^BLN#z##V| k86{K$EoX4H+=hs=>ZB+ݶH=0rДe^3`m\StO053W$el,S)? t,W7AmԗK/+FiDޓMc2<ָl +mC2=Fr,Yeo}u@?dkY/oӣIC?s7%XW9pI`Z{K5l$^sy#pͺ_8vTs9٪=M-]i&,ħ#_D BIp(>S(Hv|$Y .6uH5|\>[0bnّe(29]q9UЖr/>adGr`=>ql\]LkEqTq%5gȵo {(:SOp'VPڏyf7Hʜ9:#[qvs#LT\/G|:R $:#ya!ZQ9f8-jQԡ>F6pɼ2:ĥAɆ>b|P:hbQUp[\ 쳁Aj?Ec4/϶q ј484'+T|D]ը@r:sT ~B[H0Ye{No#{ %U dl%+&Dz@K $F3})L{NMg|dbJoJ\ޢeM;z\$t;p,dEA8(:K&k\jJ%)(Q2EyQ3ߟ!e@T16T 5P; Þ)Gdl*s+w\LgXea1rMr7x*R}Z-Vx'$7w@(EfrA gKa,dnw@2%d ۅ$м~nAft'sTaЍm!Y^Dfa̯wD]E605)|醐_ *ꠉˀ ²C[{'Iٕ'HcT5ikQ97Yђ `*y`O{Dd2{pԮ5%"CV~fCd <0촉{']~xu^0"הp˰vY~w9"Vx[ -\uKO.ccaDEF#&mCA~[ QTa;vPʂ? v5 f ;5uO1̝R/l족2hVi o?+]"Ǽw%C4#a&^مݼBye, aFi{Zr<N$<>_{h1idEd(E OaS#)"P#.33lJ@O/=Vx[FˊiQj~ ]ss7_f~[ 9s+j^>IB̬Nt[񺃋 >aRr5=3읦(^D⯭&~<r톜["mn:,/ـr,lƣ]@$xn@^Mo.CA*ăO"=-väEH z5Bw#]qjumf\3o`k^\w}`[ 3_Ժ]UgODxGy< QT?*/ fS}~cYZ!g ,LLpϯ 7($ԝdjL5#:⸲L|S" y]ǘp*:`ŐvS~YG3"s1<`Q}]%'o/޲*[;y1KZct+;Mֿ*A(^Fv;777M L XݩBѧ;VV =Xuy6Z Ԃ mZ"΢<˺SԵ<Lq{[TDZ K XCI V?FxfJ @R6?ijTeqٞRGrS5P;͌ʥi9UI`ؙ#Gwy&6Y<cPgUKP'4&[qy/4H~،ʦx&+!-!;SCz3LgvpN{ԜsYxz֧AFAwo 8|VBZapMho&?n-z(xkE4ɍIVߴ+u~7Xᦇ\Qk-14v>jD &;W ZCq_,GV^62ʛݳ,xaQ g.ƒz W6$pY/kXz ZJbPJo.c̩Qʵ!/_-od>NZ 1]/ .!S\́L C&xŒ^%ork+\{4J#?peΛI*z̲+tM|E6@/vX 3H*wD~#$ʄ dTTPatߤ^;l9c1AuuY P`dcTQ ^5% ZBVx3i}m9!ZhF :nj&"W3K#fBs3pN4ýO=_Rf>&T ]k[qr%wH6Fmr֫A9k]}һ Q*pӲvqZ{  `DYE5ƔǝXInկV 9"q^mBkhϠ![-C (bg10?2 ti2I-BGSx.[K)Ou&;q=s}|b, n+UZKigm׋g;1|=T.IDxXCt 9. '%қw/(3~q\7ȿ8zi2B!#8,x +Z&AړtSy&{// ;5JTRO!F{Rt2S(t.N a/MJgT*+˺2Nԙi0V4^$uuǖ#~Fs vFl8D҂"VD,;w3MKxbn:aّ4C%+uo%SVh41o8EG ΀&>_Tٓw?< 7fi'$r0qmrϼecիp trטSi<5⑎1<=~!C,qKjB1wMChָ<`8xب:m N)m~XJPz Von?Xތ<K[i3ѧcJRRkVw &o ` vwEǯHC? kA~0lWicO6&u"{ˤܛp 2ONoزeBw-Y -KjkhIx2+\"r2*Ѐ{LsAįyi块g`Ķ X-SZ+sD{s9lˮ?M܋4cSsk&ˆ/rO~g8Waԕ9D>h=N_NLAGL k0G C04ޯAnIoXUQDgtc]Ex?ςG(5mZu[q%$h1X}Iy4fg|I3bb`kΐL•M܈GvqR*GOIP/|62e:AZPC1SԅtON-5m#wu!#sךuwW avALUD>dQaBJd/DY^/m,ķ&)V>T`j8ڞå䅻ϟ88P"Mddsy`hhp\T +gg]Y&͂BsAuWwqʒz}Usks4EUلI^OAEV'(J yWf'sIWY~?[;1y/W VƄYbmavBr,pX#G4_\+\8K%dz^R="f\UׯMXMxG.$tBZjة˯==GԤ7E55XxZ5S CMWY5f$ܔ71l}7j+h+-Wr( /6Hv% %e9lRM|Xz z>dk\k/,:lXH pe@37. '!pQݘ[ڱeB3I0*2~9D@f.(YaŸl6#鷉Vq~cG|͗yUnF\"ȝ~b!rK˕X~izt̎e/~/عJv %ud%5ŧT.`r !:{OLKD'^‘ΰ*gyYiyoW]Zr,a?ّ59R뭕 c*kKEx&eذ s4Y'ߗJ^j9AOG$0NLO~*k)6;[ /Bs( QG=B '/])LUX]{tܝ. >_墴͋GgF#@{("EN@ eS¤H :n[)k}dY觏 D:/V4P%E F&7* .1$u:0V,5W:MRxL8vS񴲗]8pX#0=oV'е[S619 L\6<﫠gZjP 3а#XD~7K+⠅#'0|⣶Z;FAZraNGrKG((|=:dl`"J$GjʢT罎/3@C!*ǂ61 K32=\7c`4VQf=P F1=ȇuvp*Al_>ll"HjL~wӂ5>Ln'av#IcXF#uStNGBtJ\.bԻd8RM!c91164-4O#D8KQX,>w2|uFxˁ e>e!g` sa.+sݤHT`O)V+qVQv_d^q8퍔 vȜO+mtKxMk%jb9@ifҜW<$.p^ey= #蝳/Z*dSSX"Dg3#b˖c>M 'HOCۏ&2rS5B:m%A?.WeDc[ E.oB!JXG.Uh@nM&KhKl-} <͠ SlMLmZq7#Q,p#Y9)ȹpGGxe**dZ]l ey]:SW.v(]fPBClV l.+1W]V.7.ڂ7qC"Yv?zE*96$|FWGkUYim +W)`uDEm \sVUY"sSF`5\ Lyrm^X G11:D:wۡ+ڃ8,NF Z5q 'ڌ>: YZ