kernel-module-8812au-6.12-desktop-6.12.91-24> )lp 814ccf99d3517e92d60a3b6c123e256f8a56f5e02cf5403b1d9a45e8431150c1d5a0bb410cca59b8551a8812b76e6f4f81fe97e1 dߠp*NbqBV>B&?&}d$, / \     = @DINx|(8:9:::G#TH#XI#\X#`Y#p\#]#^#b$c$d$e$f$l$t$u$v%w%|x%y%%%%%%%%%&8&<Ckernel-module-8812au-6.12-desktop6.12.9124Binary module 8812au for kernel-6.12-desktopBinary module 8812au for kernel-6.12-desktopjlocalhostVWROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64VWjl4964788c6040c9be095d4d1bfb33333eeb487efed5c9302342d5bd90a5d200a7rootrootkernel-6.12-desktop-6.12.91-24.src.rpminstallonlypkg(kernel-module)kernel-module-8812au-6.12-desktopkernel-module-8812au-6.12-desktop(x86-64)kmod(8812au)    kernel-6.12-desktop(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.12.91-243.0.4-14.6.0-14.0-15.2-14.17.0jujtw@jtw@jtw@jcSjcSj`jPjPjPjPjO@jN;jL@jHjHjE@jE@j?@j>ij=@j7@j+jjjjjj9j @j @j @j @j @j @j Pj Pj Pj j\@i@i~i~i~iiD@iD@iZ@iZ@ip@i@i@i@i@i@iX@i8@i8@Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-21Mikhail Novosyolov 6.12.91-20Mikhail Novosyolov 6.12.91-19Mikhail Novosyolov 6.12.91-18Mikhail Novosyolov 6.12.91-16Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-14Mikhail Novosyolov 6.12.91-13Mikhail Novosyolov 6.12.91-11Mikhail Novosyolov 6.12.91-10Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-6Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov BiteDasher 6.12.91-3Mikhail Novosyolov Mikhail Novosyolov 6.12.91-1Mikhail Novosyolov Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-13Mikhail Novosyolov 6.12.74-12Mikhail Novosyolov 6.12.74-11repo bot repo bot Mikhail Novosyolov 6.12.74-9Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-6Mikhail Novosyolov 6.12.74-5Mikhail Novosyolov Mikhail Novosyolov 6.12.74-3Mikhail Novosyolov Mikhail Novosyolov 6.12.74-2Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov - Fix "Zapscape" (CVE-2026-64561)- Fix CVE-2026-64531- Fix CVE-2026-64560- Support Baikal-M Graviton Angara board- Avoid QXL hangs on an unresponsive SPICE host (okdesk#4023)- Fix "RefluXFS" (CVE-2026-64600)- Fix CVE-2026-53362 and CVE-2026-5336 ("Frag Gap")- Try to fix booting without monitor even at UEFI stage- Try to fix booting Baikal without monitor and then connecting it- Tune descriptions of 2 last patches- Try to stabilize EDID reading on Baikal ET124- Fix monitor reconnecting on Baikal- Try to make sound work out of the box on Baikal ET124 board- Fix Baikal HDA codec configure failure due to built-in controller probing before module load- Try so support Baikal SDK 5.5 and fixes for Baikal HDA sound- Fix "Bad Epoll" (CVE-2026-46242)- Easify debugging Baikal sound- Fix sound on new Baikals- Fix "PEdit-CoW" (CVE-2026-46331)- Fix x86 build after Baikal patches- Fix bootable kernel copy in kernel.spec for cycle- Update Baikal support - Developed in kernel-6.12-bl2- More ROSA infosec patches- Fix CIFSwitch vulnerability- Build kernel-headers in rosa13 where they were in dropped kernel-6.6- Fix building perf- Fix issues found by statical analysis (Svace)- upd: 6.12.90 -> 6.12.91 - Changelog: - ACPI: AGDI: fix missing newline in error message - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek - fixed speaker no sound update - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix UART1 RTS/CTS muxing - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8qm-mek: switch Type-C connector power-role to dual - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: lx2160a: add sda gpio references for i2c bus recovery - arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit - arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes - arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration word - arm64: dts: lx2160a: remove duplicate pinmux nodes - arm64: dts: lx2160a: rename pinmux nodes for readability - arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3 controller's phy-names - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure syscon - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8650: Fix GIC_ITS range length - arm64: dts: qcom: sm8650: Fix xo clock supply of SD host controller - arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace - arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace - arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan Pi - arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up config - arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0 data pins - arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on data pins - arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: Reserve an extra page for early kernel mapping - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64/xor: fix conflicting attributes for xor_block_template - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ASoC: add symmetric_ prefix for dai->rate/channels/sample_bits - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED - ASoC: codecs: ab8500: Fix casting of private data - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: soc-compress: use function to clear symmetric params - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc3: Use standard dev_dbg API - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH commands - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: wait for blkcg cleanup before initializing new disk - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec - bpf: Allow instructions with arena source and non-arena dest registers - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf,arc_jit: Fix missing newline in pr_err messages - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: fix mm lifecycle in open-coded task_vma iterator - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix variable length stack write over spilled pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Relax scalar id equivalence for state pruning - bpf: return VMA snapshot from task_vma iterator - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Take state lock for af_unix iter - bpf: switch task_vma iterator from mmap_lock to per-VMA locks - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Validate node_id in arena_alloc_pages() - btrfs: do not mark inode incompressible after inline attempt fails - btrfs: fix deadlock between reflink and transaction commit when using flushoncommit - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: pass struct btrfs_inode to clone_copy_inline_extent() - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - bus: fsl-mc: use generic driver_override infrastructure - bus: rifsc: fix RIF configuration check for peripherals - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size - cgroup: Increment nr_dying_subsys_* from rmdir context - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON - clk: qoriq: avoid format string warning - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: ccp - copy IV using skcipher ivsize - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: qat - disable 420xx AE cluster when lead engine is fused off - crypto: qat - disable 4xxx AE cluster when lead engine is fused off - crypto: qat - fix type mismatch in RAS sysfs show functions - crypto: qat - introduce fuse array - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: tegra - Disable softirqs before finalizing request - crypto: tegra - finalize crypto req on error - crypto: tegra - Reserve keyslots to allocate dynamically - crypto: tegra - Transfer HASH init function to crypto engine - cxl/pci: Check memdev driver binding status in cxl_reset_done() - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - devres: fix missing node debug info in devm_krealloc() - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm init: ensure device probing has finished in dm-mod.waitfor= - dm log: fix out-of-bounds write due to region_count overflow - Documentation: fix a hugetlbfs reservation statement - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - drbd: Balance RCU calls in drbd_adm_dump_devices() - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amdgpu: add amdgpu_device reference in ip block - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: fix spelling typos - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx11: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring - drm/amdgpu: update the handle ptr in dump_ip_state - drm/amdgpu: update the handle ptr in early_init - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915: Relocate the SKL wm sanitation code - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wm: Verify the correct plane DDB entry - drm/imagination: Switch reset_reason fields from enum to u32 - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/loongson: Use managed KMS polling - drm/msm/a6xx: Fix dumping A650+ debugbus blocks - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: fix bits_per_pclk - drm/msm/dsi: fix hdisplay calculation for CMD mode panel - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm/shrinker: Fix can_block() logic - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/v3d: Handle error from drm_sched_entity_init() - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/xe/debugfs: Correct printing of register whitelist ranges - drm/xe/dma-buf: handle empty bo and UAF races - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - e1000e: Unroll PTP in probe error handling - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - erofs: add encoded extent on-disk definition - erofs: avoid infinite loops due to corrupted subpage compact indexes - erofs: do sanity check on m->type in z_erofs_load_compact_lcluster() - erofs: unify lcn as u64 for 32-bit platforms - eth: fbnic: Use wake instead of start - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - ext4: fix possible null-ptr-deref in mbt_kunit_exit() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: offb: fix PCI device reference leak on probe failure - fdget(), trivial conversions - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP - firmware: dmi: Correct an indexing error in dmi.h - fs/adfs: validate nzones in adfs_validate_bblk() - fs/mbcache: cancel shrink work before destroying the cache - fsnotify: fix inode reference leak in fsnotify_recalc_mask() - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: prevent NULL pointer dereference during unmount - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: usbhid: fix deadlock in hid_post_reset() - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hte: tegra194: remove Kconfig dependency on Tegra194 SoC - hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback - hwmon: Switch back to struct platform_driver::remove() - i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers() - i3c: master: dw-i3c: Fix missing reset assertion in remove() callback - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - ice: fix double-free of tx_buf skb - ice: fix ICE_AQ_LINK_SPEED_M for 200G - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix timestamp interrupt configuration for E825C - ice: Remove jumbo_remove step from TX path - ice: update PCS latency settings for E825 10G/25Gb modes - ima: check return value of crypto_shash_final() in boot aggregate - ima_fs: Correctly create securityfs files for unsupported hash algos - ima_fs: don't bother with removal of files in directory we'll be removing - ima_fs: get rid of lookup-by-dentry stuff - iommu/amd: Convert dev_data lock from spinlock to mutex - iommu/amd: Do not detach devices in domain free path - iommu/amd: Fix clone_alias() to use the original device's devid - iommu/amd: Introduce helper function get_dte256() - iommu/amd: Introduce helper function to update 256-bit DTE - iommu/amd: Put list_add/del(dev_data) back under the domain->lock - iommu/amd: Rearrange attach device code - iommu/amd: Reduce domain lock scope in attach device path - iommu/amd: Remove protection_domain.dev_cnt variable - iommu/amd: Reorder attach device code - iommu/amd: xarray to track protection_domain->iommu list - iommufd: Fix return value of iommufd_fault_fops_write() - iommufd: vfio compatibility extension check for noiommu mode - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - io_uring/kbuf: use mem_is_zero() - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipv4: udp: fix typos in comments - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: udp: fix typos in comments - ipvs: fix MTU check for GSO packets in tunnel mode - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining - kbuild: builddeb - avoid recompiles for non-cross-compiles - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: scope conn->binding slowpath to bound sessions only - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: x86: Fix Xen hypercall tracepoint argument assignment - leds: lgm-sso: Remove duplicate assignments for priv->mmap - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: handle rbtree insertion error in decode_choose_args() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - locking: Fix rwlock support in - LoongArch: KVM: Compile switch.S directly into the kernel - loop: fix partition scan race between udev and loop_reread_partitions() - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - mailbox: add sanity check for channel array - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: mtk-cmdq: Fix CURR and END addr for task insert case - md/raid1: fix the comparing region of interval tree - md: wake raid456 reshape waiters before suspend - media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe - media: i2c: og01a1b: Replace client->dev usage - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fix rx timestamp corruption on fastopen - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - neigh: let neigh_xmit take skb ownership - net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue() - net: airoha: Implement BQL support - net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - netconsole: allow selection of egress interface via MAC address - netconsole: propagate device name truncation in dev_name_store() - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: realtek: rtl8365mb: fix mode mask calculation - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: conntrack: remove sprintf usage - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_osf: restrict it to ipv4 - netfilter: skip recording stale or retransmitted INIT - netfilter: xtables: restrict several matches to inet family - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: mctp i2c: check length before marking flow active - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5: Fix HCA caps leak on notifier init failure - net: page_pool: create hooks for custom memory providers - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: fix a return path in get_phy_c45_ids() - net: phy: qcom: at803x: Use the correct bit to disable extended next page - netpoll: Extract carrier wait function - netpoll: extract IPv4 address retrieval into helper function - netpoll: Extract IPv6 address retrieval function - netpoll: fix IPv6 local-address corruption - netpoll: pass buffer size to egress_dev() to avoid MAC truncation - net/rds: Optimize rds_ib_laddr_check - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir - net/sched: cls_flower: revert unintended changes - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net/socket.c: switch to CLASS(fd) - net: tls: fix strparser anchor skb leak on offload RX setup failure - net, treewide: define and use MAC_ADDR_STR_LEN - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - ntfs: ->d_compare() must not block - nvme-pci: fix missed admin queue sq doorbell write - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - openvswitch: cap upcall PID array size and pre-size vport replies - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove cpu online check from cpu add and removal - page_pool: fix incorrect mp_ops error handling - page_pool: fix memory-provider leak in page_pool_create_percpu() error path - page_pool: Set `dma_sync` to false for devmem memory provider - params: Replace __modinit with __init_or_module - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix() - PCI: dwc: Invoke post_init in dw_pcie_resume_noirq() - PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq() - PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Align pci_epc_set_msix(), pci_epc_ops::set_msix() nr_irqs encoding - PCI: Initialize temporary device in new_id_store() - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports - PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Free up Endpoint resources during remove() - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: use generic driver_override infrastructure - PCMCIA: Fix garbled log messages for KERN_CONT - perf branch: Avoid incrementing NULL - perf cgroup: Update metric leader in evlist__expand_cgroup - perf evsel: Add alternate_hw_config and use in evsel__match - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf lock: Fix option value type in parse_max_stack - perf maps: Fix copy_from that can break sorted by name order - perf python: Add parse_events function - perf stat: Fix opt->value type for parse_cache_level - perf tool_pmu: Factor tool events into their own PMU - perf tool_pmu: Fix aggregation on duration_time - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf tools: Fix module symbol resolution for non-zero .text sh_addr - perf util: Kill die() prototype, dead for a long time - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: realtek: Fix function signature for config argument - pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/wmi: use generic driver_override infrastructure - platform/x86: asus-wmi: adjust screenpad power/brightness handling - platform/x86: asus-wmi: fix screenpad brightness range - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - PM: domains: De-constify fields in struct dev_pm_domain_attach_data - pmdomain: ti: omap_prm: Fix a reference leak on device node - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug - powerpc/warp: Fix error handling in pika_dtm_thread - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - pstore/ram: fix resource leak when ioremap() fails - pwm: atmel-tcb: Cache clock rates and mark chip as atomic - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - RDMA/core: Prefer NLA_NUL_STRING - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() - remoteproc: xlnx: Fix sram property parsing - reset: Add devres helpers to request pre-deasserted reset controls - reset: replace boolean parameters with flags parameter - Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" - rtc: abx80x: Disable alarm feature if no interrupt attached - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: use generic driver_override infrastructure - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched/fair: Clear rel_deadline when initializing forked entities - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: target: core: Fix integer overflow in UNMAP bounds check - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: fix __jited_unpriv tag name - selftests/mm: skip migration tests if NUMA is unavailable - selftests: netfilter: nft_tproxy.sh: adjust to socat changes - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selftests/sched_ext: Add missing error check for exit__load() - sfc: fix error code in efx_devlink_info_running_versions() - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: fix OOB reads parsing symlink error response - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: Use FullSessionKey for AES-256 encryption key derivation - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc/tegra: cbb: Set ERD on resume for err interrupt - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: debugfs: initialize firmware_file to empty string - sparc64: vdso: Link with -z noexecstack - sparc/vdso: Always reject undefined references during linking - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: nxp-fspi: Use reinit_completion() for repeated operations - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: spi-nxp-fspi: enable runtime pm for fspi - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init(). - tcp: make probe0 timer handle expired user timeout - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - tipc: fix double-free in tipc_buf_append() - tracing: branch: Fix inverted check on stat tracer registration - tracing: Rebuild full_name on each hist_field_name() call - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: ip22zilog: Fix section mispatch warning - udp: Force compute_score to always inline - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtio_net: Fix endian with virtio_net_ctrl_rss - virtio_net: Split struct virtio_net_rss_config - virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET - virtio_net: Use new RSS config structs - vrf: Fix a potential NPD when removing a port from a VRF - wifi: ath10k: fix station lookup failure during disconnect - wifi: brcmfmac: Fix error pointer dereference - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix 6GHz regulatory update on connection - wifi: mt76: mt7921: Place upper limit on station AID - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - x86/um: fix vDSO installation - x86/um/vdso: Drop VDSO64-y from Makefile - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- FIX GPO Frag vulnerability- Fixed building with bpftool on aarch64 (regenerated config with pahole package installed)- Fix issue in AUFS found by fuzzing- Remove no more used patches- Fix issues found by fuzzing- upd: 6.12.74 -> 6.12.90 - Removed no more needed Patch0512. - These patches fixed a vulnerability where in-place decryption could - corrupt shared skb frags (e.g. from splice) and a subsequent skb - memory leak in the unshare path. - Between v6.12.74 and v6.12.90, upstream refactored the rxrpc receive - path and incorporated equivalent fixes: - * bf20f46d94f1 ("rxrpc: Fix potential UAF after skb_unshare() failure") - * 016725807ce3 ("rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets") - * 3711382a7734 ("rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present") - The unshare gate was moved from io_thread.c to call_event.c, and - the check was extended to skb_has_frag_list() || skb_has_shared_frag(), - which covers the original splice-loopback vector. The skb leak fixed - by 0512.2 is also gone because the caller (rxrpc_io_thread()) now - always frees the original skb after rxrpc_input_packet() returns. - Changelog: - 9p/xen: protect xen_9pfs_front_free against concurrent calls - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: APEI: GHES: Disable KASAN instrumentation when compile testing with clang < 18 - ACPI: battery: fix incorrect charging status when current is zero - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) - af_key: validate families in pfkey_send_migrate() - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - alarmtimer: Fix argument order in alarm_timer_forward() - alpha: fix user-space corruption during memory compaction - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aloop: Fix peer runtime UAF during format-change stop - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for ASUS UM6702RC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx - ALSA: hda/realtek: fix LG Gram Style 14 speakers - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter - ALSA: hda/senary: Ensure EAPD is enabled during init - ALSA: misc: Use guard() for spin locks - ALSA: mixer: oss: Add card disconnect checkpoints - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger - ALSA: pcm: Relax __free() variable declarations - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: pcm: use new array-copying-wrapper - ALSA: scarlett2: Fix DSP filter control array handling - ALSA: scarlett2: Fix redeclaration of loop variable - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - ALSA: vmaster: Relax __free() variable declarations - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ARM processor Error: don't go past allocated memory - APEI/GHES: ensure that won't go past CPER allocated record - AppArmor: Allow apparmor to handle unaligned dfa tables - apparmor: avoid per-cpu hold underflow in aa_get_buffer - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: Fix & Optimize table creation from possibly unaligned memory - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: make label_match return a consistent value - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use target task's context in apparmor_getprocattr() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: c3: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: amlogic: s4: assign mmc b clock to 24MHz - arm64: dts: amlogic: s4: fix mmc clock assignment - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD - arm64: dts: imx93-tqma9352: improve eMMC pad configuration - arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - arm64: dts: marvell: uDPU: add ethernet aliases - arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node - arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: hamoa/x1: fix idle exit latency - arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147 - arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs - arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks - arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models) - arm64: dts: renesas: r9a09g057: Add RTC node - arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes - arm64: dts: renesas: white-hawk-cpu-common: Add pin control for DSI-eDP IRQ - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: rockchip: Fix rk3588 PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4 - arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order - arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: hugetlbpage: avoid unused-but-set-parameter warning (gcc-16) - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: poe: fix stale POR_EL0 values for ptrace - arm64/scs: Fix handling of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - ARM: 9467/1: mm: Don't use %pK through printk - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: boards: fix unmet dependency on PINCTRL - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata: cancel pending work after clearing deferred_qc - ata: libata-core: Add BRIDGE_OK quirk for QEMU drives - ata: libata-core: disable LPM on ADATA SU680 SSD - ata: libata-core: Disable LPM on ST1000DM010-2EP102 - ata: libata-core: fix cancellation of a port deferred qc work - ata: libata-eh: correctly handle deferred qc timeouts - ata: libata-eh: Fix detection of deferred qc timeouts - ata: libata: Introduce ata_port_eh_scheduled() - ata: libata: Remove ATA_DFLAG_ZAC device flag - ata: libata-scsi: avoid Non-NCQ command starvation - ata: libata-scsi: Document all VPD page inquiry actors - ata: libata-scsi: Refactor ata_scsiop_maint_in() - ata: libata-scsi: Refactor ata_scsiop_read_cap() - ata: libata-scsi: Refactor ata_scsi_simulate() - ata: libata-scsi: refactor ata_scsi_translate() - ata: libata-scsi: Remove struct ata_scsi_args - ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() - ata: libata-scsi: Return residual for emulated SCSI commands - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: fix integer overflow on buff_pos - batman-adv: hold claim backbone gateways by reference - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - bcache: fix cached_dev.sb_bio use-after-free and crash - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blk-throttle: fix access race during throttle policy activation - blktrace: fix __this_cpu_read/write in preemptible context - block: add a bio_add_virt_nofail helper - block: add pgmap check to biovec_phys_mergeable - block: cleanup blkdev_report_zones() - block: decouple secure erase size limit from discard size limit - block: fix zone write plug removal - block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() - block: relax pgmap check in bio_add_page for compatible zone device pages - block: reorganize struct blk_zone_wplug - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Allow ntuple filters for drops - bnxt_en: Fix deleting of Ntuple filters - bnxt_en: Fix RSS context delete logic - bnxt_en: Fix RSS table size check when changing ethtool channels - bnxt_en: Restore default stat ctxs for ULP when resource is available - bonding: add ESP offload features when slaves support - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: Correctly support GSO ESP offload - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add third round of bounds deduction - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf: crypto: Use the correct destructor kfunc type - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: Fix constant blinding for PROBE_MEM32 stores - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix u32/s32 bounds when ranges cross min/max boundary - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR - bpf: Fix use-after-free in arena_vm_close on fork - bpf: Improve bounds when s64 crosses sign boundary - bpf: Preserve id of register in sync_linked_regs() - bpf: Recognize special arithmetic shift in the verifier - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Release module BTF IDR before module unload - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpftool: Fix truncated netlink dumps - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: cfm: Fix race condition in peer_mep deletion - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: drop unused parameter fs_info from do_reclaim_sweep() - btrfs: fallback to buffered IO if the data profile has duplication - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix periodic reclaim condition - btrfs: fix reclaimed bytes accounting after automatic block group reclaim - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: hold space_info->lock when clearing periodic reclaim ready - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: make wait_on_extent_buffer_writeback() static inline - btrfs: print correct subvol num if active swapfile prevents deletion - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: remove pointless out labels from extent-tree.c - btrfs: remove unused define WAIT_PAGE_LOCK for extent io - btrfs: remove unused flag EXTENT_BUFFER_CORRUPT - btrfs: remove unused flag EXTENT_BUFFER_READAHEAD - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: reserve enough transaction items for qgroup ioctls - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: split waiting from read_extent_buffer_pages(), drop parameter wait - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use the correct type to initialize block reserve for delayed refs - btrfs: zoned: fix alloc_offset calculation for partly conventional block groups - btrfs: zoned: fix stripe width calculation - btrfs: zoned: fixup last alloc pointer after extent removal for DUP - btrfs: zoned: fixup last alloc pointer after extent removal for RAID0/10 - btrfs: zoned: fixup last alloc pointer after extent removal for RAID1 - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: starfive: fix device node leak in starlink_cache_init() - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - ceph: add a bunch of missing ceph_path_info initializers - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() - cgroup: fix race between task migration and iteration - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - check-uapi: link into shared objects - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - cleanup: Provide retain_and_null_ptr() - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs - clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: af_alg - limit RX SG extraction by receive buffer budget - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel-sha204a - Fix error codes in OTP reads - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix OTP sysfs read and error handling - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-sha204a - Fix uninitialized data access on OTP read error - crypto: atmel-tdes - fix DMA sync direction - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix netdev memory leak in dpaa2_caam_probe - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - narrow scope of snp_range_list - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - Fix packed layout in struct nx842_crypto_header - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: scatterwalk - Backport memcpy_sglist() - crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: tegra - Add missing CRYPTO_ALG_ASYNC - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - cxl/port: Fix use after free of parent_port in cxl_detach_ep() - dcache: Limit the minimal number of bucket to two - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - dlm: validate length in dlm_search_rsb_tree - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-dma3: use module_platform_driver - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add __dma_from_device_group_begin()/end() - dma-mapping: add missing `inline` for `dma_free_attrs` - dma-mapping: drop unneeded includes from dma-mapping.h - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm: fix unlocked test for dm_suspended_md - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm: use READ_ONCE in dm_blk_report_zones - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: always set BLK_FEAT_STABLE_WRITES - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/amdgpu: decouple ASPM with pcie dpm - drm/amd/amdgpu: disable ASPM in some situations - drm/amd: Disable ASPM on SI - drm/amd: Disable MES LR compute W/A - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src - drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 - drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% - drm/amd/display: avoid dig reg access timeout on usb4 link training fail - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: bypass post csc for additional color spaces in dal - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/amd/display: Correct logic check error for fastboot - drm/amd/display: Disable fastboot on DCE 6 too - drm/amd/display: Disable FEC when powering down encoders - drm/amd/display: Disable scaling on DCE6 for now - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fallback to boot snapshot for dispclk - drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix dsc eDP issue - drm/amd/display: Fix GFX12 family constant checks - drm/amd/display: Fix out-of-bounds stream encoder index v3 - drm/amd/display: Fix system resume lag issue - drm/amd/display: Fix writeback on DCN 3.2+ - drm/amd/display: Increase DCN35 SR enter/exit latency - drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 - drm/amd/display: only power down dig on phy endpoints - drm/amd/display: Reject cursor plane on DCE when scaled differently than primary - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop "amdgpu kernel modesetting enabled" message - drm/amd: fix dcn 2.01 check - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: fix gpu idle power consumption issue for gfx v12 - drm/amdgpu: Fix locking bugs in error paths - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix NULL pointer issue buffer funcs - drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify - drm/amdgpu: fix the idr allocation flags - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu: Handle GPU page faults correctly on non-4K page systems - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/mmhub4.1.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu/pm: drop SMU driver if version not matched messages - drm/amdgpu: prevent immediate PASID reuse case - drm/amdgpu: Replace kzalloc + copy_from_user with memdup_user - drm/amdgpu: replace PASID IDR with XArray - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Skip loading SDMA_RS64 in VF - drm/amdgpu: Unlock a mutex before destroying it - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn5: Add SMU dpm interface type - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix signal_eviction_fence() bool return value - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: Handle GPU reset and drain retry fault race - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdkfd: Relax size checking during queue buffer get - drm/amdkfd: Unreserve bo if queue update failed - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 - drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: anx7625: Fix invalid EDID size - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/buddy: Prevent BUG_ON by validating rounded allocation - drm/buddy: release free_trees array on buddy mm teardown - drm/display/dp_mst: Add protection against 0 vcpi - drm/exynos: remove bridge when component_add fails - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos/vidi: Remove redundant error handling in vidi_get_modes() - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/i915/acpi: free _DSM package when no connectors - drm/i915/alpm: ALPM disable fixes - drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters - drm/i915/dsc: Add Selective Update register definitions - drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/i915/psr: Repeat Selective Update area alignment - drm/i915/psr: Write DSC parameters on Selective Update in ET mode - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/imagination: Fix deadlock in soft reset sequence - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/disp: set num_planes to 1 for interleaved YUV formats - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix WD timer handling on DPU 8.x - drm/msm/dpu: Set vsync source irrespective of mdp top support - drm/msm/dsi: fix hdisplay calculation when programming dsi registers - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm: Fix dma_free_attrs() buffer size - drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - drm/nouveau: fix nvkm_device leak on aperture removal failure - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/panel: sw43408: Remove manual invocation of unprepare at remove - drm/panthor: Evict groups before VM termination - drm/panthor: Fix immediate ticking on a disabled tick - drm/panthor: Fix the full_tick check - drm/panthor: Fix the group priority rotation logic - drm/panthor: Fix the logic that decides when to stop ticking - drm/panthor: Make sure we resume the tick when new jobs are submitted - drm/panthor: Recover from panthor_gpu_flush_caches() failures - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/sitronix/st7586: fix bad pixel data due to byte swap - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/tegra: dsi: fix device leak on probe - drm/tests: shmem: Swap names of export tests - drm/ttm/tests: Fix build failure on PREEMPT_RT - drm/v3d: Set DMA segment size to avoid debug warnings - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - drm/xe: Add xe_tile backpointer to xe_mmio - drm/xe: Adjust mmio code to pass VF substructure to SRIOV code - drm/xe: always keep track of remap prev/next - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/xe: Clarify size of MMIO region - drm/xe: Create dedicated xe_mmio structure - drm/xe: Do not preempt fence signaling CS instructions - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/mmio: Avoid double-adjust in 64-bit reads - drm/xe: Move forcewake to 'gt.pm' substructure - drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' - drm/xe/oa: Allow reading after disabling OA stream - drm/xe: Only toggle scheduling in TDR if GuC is running - drm/xe: Open-code GGTT MMIO access protection - drm/xe: Populate GT's mmio iomap from tile during init - drm/xe/ptl: Apply Wa_13011645652 - drm/xe/reg_sr: Fix leak on xa_store failure - drm/xe: Switch mmio_ext to use 'struct xe_mmio' - drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt - drm/xe/sync: Cleanup partially initialized sync on parse failure - drm/xe: Unregister drm device on probe error - drm/xe/xe2_hpg: Add set of workarounds - drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138 - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: net: Fix Tegra234 MGBE PTP clock - dt-bindings: phy: qcom-edp: Add missing clock for X Elite - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix inline data read failure for ztailpacking pclusters - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - erofs: get rid of raw bi_end_io() usage - erofs: handle end of filesystem properly for file-backed mounts - erofs: move {in,out}pages into struct z_erofs_decompress_req - erofs: set fileio bio failed in short read case - erofs: tidy up z_erofs_lz4_handle_overlap() - esp: fix skb leak with espintcp and async crypto - espintcp: Fix race condition in espintcp_close() - eth: fbnic: Account for page fragments when updating BDQ tail - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: Fix integer overflow in ep_loop_check_proc() - evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac() - exit: prevent preemption of oopsing TASK_DEAD task - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: add ext4_try_lock_group() to skip busy groups - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert free groups order lists to xarrays - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: factor out ext4_mb_might_prefetch() - ext4: factor out __ext4_mb_scan_group() - ext4: factor out ext4_mb_scan_group() - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix potential null deref in ext4_mb_init() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: implement linear-like traversal across order xarrays - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: propagate flags to convert_initialized_extent() - ext4: publish jinode after initialization - ext4: refactor choose group to scan group - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: use reserved metadata blocks when splitting extent on endio - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix uninitialized kobject put in f2fs_init_sysfs() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fgraph: Do not call handlers direct when not using ftrace_ops - fgraph: Fix thresh_return clear per-task notrace - fgraph: Replace fgraph_ret_regs with ftrace_regs - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - firmware: microchip: fail auto-update probe if no flash found - Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fs: add for 'init_fs' - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: Initialize new folios before use - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: validate rec->used in journal-replay file record check - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - fs/tests: exec: drop duplicate bprm_stack_limits test vectors - fs/tests: exec: Remove bad test vector - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs - ftrace: Make ftrace_regs abstract from direct use - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros - function_graph: Restore direct mode when callbacks drop to one - fuse: Check for large folio with SPLICE_F_MOVE - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject oversized dirents in page cache - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Require sys_futex_requeue() to have identical flags - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). - gfs2: fiemap page fault fix - gfs2: Fix slab-use-after-free in qd_put - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Retries missing in gfs2_{rename,exchange} - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpiolib: fix race condition for gdev->srcu - gpiolib: unify two loops initializing GPIO descriptors - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: tegra: fix irq_release_resources calling enable instead of disable - gpu/panel-edp: add AUO panel entry for B140HAN06.4 - greybus: gb-beagleplay: bound bootloader receive buffering - greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() - gro: change the BUG_ON() in gro_pull_from_frag0() - gtp: disable BH before calling udp_tunnel_xmit_skb() - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: apple: ensure the keyboard backlight is off if suspending - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: bpf: prevent buffer overflow in hid_hw_request - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: i2c-hid: Add FocalTech FT8112 - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients - HID: logitech-hidpp: Add support for Logitech K980 - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: logitech-hidpp: Enable MX Master 4 over bluetooth - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: add quirks for Lenovo Yoga Book 9i - HID: multitouch: Check to ensure report responses match the request - HID: multitouch: new class MT_CLS_EGALAX_P80H84 - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: roccat: fix use-after-free in roccat_report_event - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hrtimer: Fix trace oddity - hv_sock: fix ARM64 support - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (dell-smm) Add support for Dell OptiPlex 7080 - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (max6639) : Configure based on DT property - hwmon: (max6639) fix inverted polarity - hwmon: (max6639) Fix pulses-per-revolution implementation - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/core) Fix various coding style issues - hwmon: (pmbus) Introduce the concept of "write-only" attributes - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: pmbus: mpq8785: Add support for MPM82504 - hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during identification - hwmon: pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration - hwmon: pmbus: mpq8785: Prepare driver for multiple device support - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (powerz) Avoid cacheline sharing for DMA buffer - hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt - hwmon: (powerz) Fix use-after-free on USB disconnect - hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hwrng: core - Allow runtime disabling of the HW RNG - hwrng: core - use RCU and work_struct to fix race condition - hwspinlock: omap: Handle devm_pm_runtime_enable() errors - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: tegra: Don't mark devices with pins as IRQ safe - i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: fix netdev->max_mtu to respect actual hardware limit - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - iavf: fix VLAN filter lost on add/delete race - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mlx5: Fix port speed query for representors - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix devlink reload call trace - ice: fix double free in ice_sf_eth_activate() error path - ice: fix inverted ready check for VF representors - ice: Fix memory leak in ice_set_ringparam() - ice: Fix PTP NULL pointer dereference during VSI rebuild - ice: fix retry for AQ command 0x06EE - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() - ice: reintroduce retry mechanism for indirect AQ - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: prevent possible overflow in icmp_global_allow() - idpf: change IRQ naming to match netdev and ethtool queue numbering - idpf: check error for register_netdev() on init - idpf: detach and close netdevs while handling a reset - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling - idpf: Fix RSS LUT NULL pointer crash on early ethtool operations - idpf: Fix RSS LUT NULL ptr issue after soft reset - idpf: improve locking around idpf_vc_xn_push_free() - idpf: nullify pointers after they are freed - idpf: set the payload size before calling the async handler - igc: fix missing update of skb->tail in igc_xmit_frame() - igc: fix page fault in XDP TX timestamps handling - iio: accel: adxl380: Avoid reading more entries than present in FIFO - iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: aspeed: clear reference voltage bits before configuring vref - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() - iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() - iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: buffer: Fix wait_queue not being removed - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: frequency: admv1013: add dev variable - iio: frequency: admv1013: fix NULL pointer dereference on str - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: inv-mpu9150: fix irq ack preventing irq storms - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix interrupt flag - iio: pressure: mprls0025pa: fix pressure calculation - iio: pressure: mprls0025pa: fix scan_type struct - iio: pressure: mprls0025pa: fix SPI CS delay violation - iio: pressure: mprls0025pa: fix spi_transfer struct initialisation - iio: proximity: hx9023s: Protect against division by zero in set_samp_freq - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: test: drop dangling symbol in gain-time-scale helpers - iio: Use IRQF_NO_THREAD - ima: define and call ima_alloc_kexec_file_buf() - ima: do not copy measurement list to kdump kernel - ima: kexec: define functions to copy IMA log at soft boot - ima: kexec: silence RCU list traversal warning - ima: rename variable the seq_file "file" to "ima_kexec_file" - ima: verify if the segment size has changed - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: bcm5974 - recover from failed mode switch - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: synaptics_i2c - guard polling restart in resume - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - interconnect: mediatek: Aggregate bandwidth with saturating add - interconnect: mediatek: Don't hijack parent device - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommufd: Fix a race with concurrent allocation and unmap - iommu/vt-d: Avoid draining PRQ in sva mm release path - iommu/vt-d: Clear Present bit before tearing down PASID entry - iommu/vt-d: Drain PRQs when domain removed from RID - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - iommu/vt-d: Separate page request queue from SVM - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments - io_uring/kbuf: enable bundles for incrementally consumed buffers - io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF - io_uring/kbuf: introduce io_kbuf_drop_legacy() - io_uring/kbuf: introduce struct io_br_sel - io_uring/kbuf: open code __io_put_kbuf() - io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers - io_uring/kbuf: propagate BUF_MORE through early buffer commit path - io_uring/kbuf: remove legacy kbuf bulk allocation - io_uring/kbuf: remove legacy kbuf caching - io_uring/kbuf: remove legacy kbuf kmem cache - io_uring/kbuf: simplify __io_put_kbuf - io_uring/kbuf: support min length left for incremental buffers - io_uring/kbuf: switch to storing struct io_buffer_list locally - io_uring/kbuf: uninline __io_put_kbufs - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory - io_uring/kbuf: use struct io_br_sel for multiple buffers picking - io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields - io_uring/net: clarify io_recv_buf_select() return value - io_uring/net: correct type for min_not_zero() cast - io_uring/net: don't continue send bundle if poll was required for retry - io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() - io_uring/net: use struct io_br_sel->val as the recv finish value - io_uring/net: use struct io_br_sel->val as the send finish value - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring: remove async/poll related provided buffer recycles - io_uring/rw: check for NULL io_br_sel when putting a buffer - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io_uring/uring_cmd: fix too strict requirement on ioctl - io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ipc: don't audit capability check in ipc_permissions() - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump - ipv6: add NULL checks for idev in SRv6 paths - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: annotate data-races over sysctl.flowlabel_reflect - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: use RCU in ip6_xmit() - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: do not keep dest_dst if dev is going down - ipvs: fix NULL deref in ip_vs_add_service error path - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - jbd2: fix deadlock in jbd2_journal_cancel_revoke() - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 - kbuild: install-extmod-build: Package resolve_btfids if necessary - kbuild: Leave objtool binary around with 'make clean' - kbuild: rust: allow `clippy::uninlined_format_args` - kcm: fix zero-frag skb in frag_list on partial sendmsg error - kcsan, compiler_types: avoid duplicate type issues in BPF Type Format - kernel: be more careful about dup_mmap() failures and uprobe registering - kexec: Consolidate machine_kexec_mask_interrupts() implementation - kexec: define functions to map and unmap segments - kexec: derive purgatory entry from symbol - kexec: Include kernel-end even without crashkernel - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kselftest/harness: Use helper to avoid zero-size memset warning - ksmbd: add chann_lock to protect ksmbd_chann_list xarray - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: check return value of xa_store() in krb5_authenticate - ksmbd: Compare MACs in constant time - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: rewrite stop_sessions() with restartable iteration - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Fix the month in the name of the failure directory - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter - KVM: arm64: Hide S1POE from guests when not supported by the host - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always intercept VMMCALL when L2 is active - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay - KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Allow vendor code to disable quirks - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: do not allow re-enabling quirks - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM - KVM: x86: Introduce supported_quirks to block disabling quirks - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - landlock: Optimize file path walks and prepare for audit support - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix missing NULL checks for kstrdup() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: Handle percpu handler address for ORC unwinder - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch/orc: Use RCU in all users of __module_address(). - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove some extern variables in source files - LoongArch: Remove unnecessary checks for ORC unwinder - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: Use %px to print unmodified unwinding address - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix memory leak in raid1_run() - md/raid1: fix memory leak in raid1_run() if no active rdev - md/raid5: fix raid5_run() to return error when log_init() fails - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Drop min_queued_buffers assignment - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: ccs: Fix setting initial sub-device state - media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() - media: chips-media: wave5: add missing spinlock protection for send_eos_event() - media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() - media: chips-media: wave5: Fix conditional in start_streaming - media: chips-media: wave5: Fix device cleanup order to prevent kernel panic - media: chips-media: wave5: Fix kthread worker destruction in polling mode - media: chips-media: wave5: Fix memory leak on codec_info allocation failure - media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: dw9714: add support for powerdown pin - media: dw9714: Fix powerup sequence - media: dw9714: move power sequences to dedicated functions - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx283: Enter full standby when stopping streaming - media: i2c: imx283: Fix hang when going from large to small resolution - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: intel/ipu6: fix error pointer dereference - media: ipu6: Always close firmware stream - media: ipu6: Close firmware streams on streaming enable failure - media: ipu6: Ensure stream_mutex is acquired when dealing with node list - media: ipu6: Fix RPM reference leak in probe error paths - media: ipu6: Fix typo and wrong constant in ipu6-mmu.c - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mt9m114: Avoid a reset low spike during probe() - media: mt9m114: Return -EPROBE_DEFER if no endpoint is found - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Fix streaming cleanup on release - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: mg4b: Use IRQF_NO_THREAD - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix pass-by-value structs causing MSAN warnings - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: core: Preserve OF node when ACPI handle is present - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: SiByte: Bring back cache initialisation - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: dw_mmc-rockchip: Add memory clock auto-gating support - mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support - mmc: dw_mmc-rockchip: use modern PM macros - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mm: convert mm_lock_seq to a proper seqcount - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/hugetlb_cma: round up per_node before logging it - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory: fix PMD/PUD checks in follow_pfnmap_start() - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() - mm/migrate: move movable_ops page handling out of move_to_new_folio() - mm: migrate: requeue destination folio on deferred split queue - mm: numa_memblks: Identify the accurate NUMA ID of CFMW - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() - mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/pagewalk: fix race between concurrent split and refault - mm: prevent droppable mappings from being locked - mm: replace READ_ONCE() with standard page table accessors - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() - mm: shmem: fix potential data corruption during shmem swapin - mm/shmem, swap: avoid redundant Xarray lookup during swapin - mm/shmem, swap: improve cached mTHP handling and fix potential hang - mm/slab: use unsigned long for orig_size to ensure proper metadata align - mm: thp: deny THP for files on anonymous inodes - mm/tracing: rss_stat: ensure curr is false from kthread context - mm/userfaultfd: fix hugetlb fault mutex hash calculation - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node - mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix kernel panic when a symbol st_shndx is out of bounds - most: core: fix leak on early registration failure - most: core: fix resource leak in most_register_interface error paths - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix receive space timestamp initialization - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: spinand: Disable continuous read during probe - mtd: spinand: Fix kernel doc - mtd: spinand: winbond: Declare the QE bit on W25NxxJW - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sst: Fix write enable before AAI sequence - myri10ge: avoid uninitialized variable use - namespace: fix proc mount iteration - net: add a common function to compute features for upper devices - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add xmit recursion limit to tunnel xmit functions - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() - net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() - net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() - net: airoha: read default PSE reserved pages value before updating - net: airoha: Remove airoha_dev_stop() in airoha_remove() - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcm: asp2: convert to phylib managed EEE - net: bcm: asp2: fix LPI timer handling - net: bcm: asp2: remove tx_lpi_enabled - net: bcmasp: Add support for asp-v3.0 - net: bcmasp: fix double disable of clk - net: bcmasp: fix double free of WoL irq - net: bcmasp: Fix network filter wake for asp-3.0 - net: bcmasp: Remove support for asp-v2.0 - net: bcmasp: Restore programming of TX map vector register - net: bcmasp: streamline early exit in probe - net: bcmgenet: fix broken EEE by converting to phylib-managed state - net: bcmgenet: increase WoL poll timeout - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix use-after-free in bond_xmit_broadcast() - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: properly keep track of conduit reference - net: dsa: realtek: Fix LED group port bit for non-zero LED group - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: check whether the RSS algorithm is Toeplitz - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix the PTP periodic output sysfs interface - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: conntrack: add missing netlink policy validations - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nfnetlink_queue: make hash table per queue - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation - netfilter: nfnetlink_queue: optimize verdict lookup with hash table - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval - netfilter: reject zero shift in nft_bitwise - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators - net: ftgmac100: fix ring allocation unwind on open failure - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: fix VLAN add unwind on slave errors - net: increase IP_TUNNEL_RECURSION_LIMIT to 5 - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: introduce mangleid_features - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipv4: fix ARM64 alignment fault in multipath hash seed - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - net: lan743x: fix duplex configuration in mac_link_up - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lan966x: fix page pool leak in error paths - net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: Protect access to net_device::ip_ptr with RCU lock - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mctp: fix don't require received header reserved bits to be zero - net: mctp-i2c: fix duplicate reception of old data - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5e: Separate address related variables to be in struct - net/mlx5e: Support routed networks during IPsec MACs initialization - net/mlx5: E-switch, Clear legacy flag when moving to switchdev - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels - net/mlx5: Fix crash when moving to switchdev mode - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix switchdev mode rollback in case of failure - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: ncsi: fix skb leak in error paths - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - net: openvswitch: Avoid releasing netdev before teardown completes - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: prevent NULL deref in ip[6]tunnel_xmit() - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: rds_sendmsg should not discard payload_len - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net: sched: act_csum: validate nested VLAN headers - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Lantech 8330-265D - net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: skb: fix cross-cache free of KFENCE-allocated skb head - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net/tcp-ao: Fix MAC comparison to be constant-time - net/tcp-md5: Fix MAC comparison to be constant-time - net: ti: icssg-prueth: Add optional dependency on HSR - net: ti: icssg-prueth: Fix ping failure after offload mode setup when link speed is not 1G - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: use skb_header_pointer() for TCPv4 GSO frag_off check - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: mhi: Add network support for Foxconn T99W760 - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - nfnetlink_osf: validate individual option lengths in fingerprints - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit - NFS: NFSERR_INVAL is not defined by NFSv2 - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - nsfs: tighten permission checks for ns iteration ioctls - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet: move async event work off nvmet-wq - nvmet-tcp: fix race between ICReq handling and queue teardown - objpool: fix the overestimation of object pooling metadata size - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep_vf: add NULL check for napi_build_skb() - octeon_ep_vf: avoid compiler and IQ/OQ reordering - octeon_ep_vf: ensure dbell BADDR updation - octeon_ep_vf: Relocate counter updates before NAPI - Octeontx2-af: Add proper checks for fwdata - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in of_unittest_changeset() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - OPP: Return correct value in dev_pm_opp_get_level - ovl: Fix uninit-value in ovl_fill_real - ovl: fix wrong detection of 32bit inode numbers - ovl: make fsync after metadata copy-up opt-in mount option - ovl: Use str_on_off() helper in ovl_show_options() - padata: Fix pd UAF once and for all - padata: Remove comment for reorder_work - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add Intel Nova Lake audio Device ID - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Clear stale errors on reporting agents upon probe - PCI/AER: Stop ruling out unbound devices as error source - PCI/ASPM: Fix pci_clear_and_set_config_dword() usage - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: endpoint: Implement the pci_epc_ops::align_addr() operation - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry - PCI: dwc: ep: Use align addr function for dw_pcie_ep_raise_{msi,msix}_irq() - PCI: dwc: Fix msg_atu_index assignment - PCI: dw-rockchip: Don't wait for link since we can detect Link Up - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: Introduce pci_epc_function_is_valid() - PCI: endpoint: Introduce pci_epc_mem_map()/unmap() - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: Fix placement of pci_save_state() in pci_bus_add_device() - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: qcom: Don't wait for link if we can detect Link Up - PCI: Revert "Enable ACS after configuring IOMMU for OF platforms" - PCI: Update saved_config_space upon resource assignment - PCI: Use resource_set_range() that correctly sets ->end - perf annotate: Fix hashmap__new() error checking - perf annotate: Fix memcpy size in arch__grow_instructions() - perf annotate: Use jump__delete when freeing LoongArch jumps - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf disasm: Fix off-by-one bug in outside check - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf ftrace: Fix hashmap__new() error checking - perf: Make sure to use pmu_ctx->pmu for groups - perf maps: Fix reference count leak in maps__find_ams() - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf unwind-libdw: Fix invalid reference counts - perf vendor events amd: Fix Zen 5 MAB allocation events - perf/x86/core: Do not set bit width for unavailable counters - perf/x86/cstate: Add Airmont NP - perf/x86/intel: Add missing branch counters constraint apply - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - perf/x86/intel/uncore: Skip discovery table for offline dies - perf/x86/intel/uncore: Support more units on Granite Rapids - perf/x86/msr: Add Airmont NP - phy: cadence-torrent: restore parent clock for refclk during resume - phy: freescale: imx8qm-hsio: fix NULL pointer dereference - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: qcom: edp: Make the number of clocks flexible - phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - phy: ti: phy-j721e-wiz: restore mux selection during resume - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Add code name documentation - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86/amd/pmf: Prevent TEE errors after hibernate - platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: disable wakeup_mode during hibernation - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit - platform/x86: ISST: Add missing write block check - platform/x86: ISST: Correct locked bit width - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - powercap: intel_rapl: Add PL4 support for Ice Lake - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc64/bpf: fix kfunc call support - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: adjust the elfcorehdr size - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/kexec/core: use big-endian types for crash variables - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: sequencing: fix missing state_lock in pwrseq_power_on() error path - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() - power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler - power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - procfs: fix possible double mmput() in do_procmap_query() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - quota: fix livelock between quotactl and freeze_super - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix RoCEv1 failure due to DSCP - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/iwcm: Fix workqueue list corruption by removing work_list - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler - RDMA/mlx5: Fix UMR hang in LAG error state unload - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - regmap: Synchronize cache for the page selector - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - reset: gpio: suppress bind attributes in sysfs - resource: Add resource set range and size helpers - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" - Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "LoongArch: Add machine_kexec_mask_interrupts() implementation" - Revert "LoongArch: Handle percpu handler address for ORC unwinder" - Revert "LoongArch/orc: Use RCU in all users of __module_address()." - Revert "LoongArch: Remove unnecessary checks for ORC unwinder" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "PCI: qcom: Don't wait for link if we can detect Link Up" - Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - ring-buffer: Fix to update per-subbuf entries of persistent ring buffer - riscv: kgdb: fix several debug register assignment bugs - riscv: vector: init vector context with proper vlenb - rnbd-srv: Fix server side setting of bi_size for special IOs - rnbd-srv: use bio_add_virt_nofail - rnbd-srv: Zero the rsp buffer before using it - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: allow `clippy::collapsible_if` globally - rust: allow `clippy::collapsible_match` globally - rust: init: fix `clippy::undocumented_unsafe_blocks` warnings - rust: kbuild: allow `unused_features` - rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0 - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: fix incorrect accessor reference lifetime - rust: pin-init: internal: init: document load-bearing fact of field accessors - rust: warn on bindgen < 0.69.5 and libclang >= 19.1 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cpum_sf: Cap sampling rate to prevent lsctl exception - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/idle: Fix cpu idle exit cpu time accounting - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf_cpum_sf: Convert to use try_cmpxchg128() - s390/perf: Disable register readout on sampling events - s390/pfault: Fix virtual vs physical address confusion - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/vtime: Fix virtual timer forwarding - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/deadline: Clear the defer params - sched/deadline: Use revised wakeup rule for dl_server - sched/debug: Fix updating of ppos on server write ops - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Remove redundant css_put() in scx_cgroup_init() - sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update - sched/fair: Fix zero_vruntime tracking - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Use protect_slice() instead of direct comparison - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: csiostor: Fix dereference of null pointer rn - scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftests/bpf: Fix resource leak in serial_test_wq on attach failure - selftests/bpf: Test cross-sign 64bits range refinement - selftests/bpf: Test invariants on JSLT crossing sign - selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/harness: order TEST_F and XFAIL_ADD constructors - selftests/hid: fix compilation when bpf_wq and hid_device are not exported - selftests/landlock: Fix format warning for __u64 in net_test - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: convert page_size to unsigned long - selftests/mm: pagemap_ioctl: Fix types mismatches shown by compiler options - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: check output: catch cmd errors - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selinux: don't reserve xattr slot when we won't fill it - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serial: 8250: 8250_omap.c: Add support for handling UART error conditions - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - sh: platform_early: remove pdev->driver_override check - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: require a full NFS mode SID before reading mode bits - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei - soc: qcom: smem: handle ENOMEM error during probe - soc: rockchip: grf: Add missing of_node_put() when returning - soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition - soc: rockchip: grf: Support multiple grf to be handled - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - soundwire: intel_ace2x: add SND_HDA_CORE dependency - soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: aspeed-smc: fix controller deregistration - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: cadence-qspi: Fix exec_mem_op error handling - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: ch341: fix memory leaks on probe failures - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: geni-qcom: Check DMA interrupts early in ISR - spi: geni-qcom: Fix abort sequence execution for serial engine errors - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: Group CS related fields in struct spi_device - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: mpc52xx: fix controller deregistration - spi: mpc52xx: fix use-after-free on registration failure - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mxic: fix controller deregistration - spi: mxs: fix controller deregistration - spi: npcm-pspi: fix controller deregistration - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix controller deregistration - spi: orion: fix runtime pm leak on unbind - spi: pic32: fix controller deregistration - spi: pic32-sqi: fix controller deregistration - spi: pl022: fix controller deregistration - spi: qup: fix controller deregistration - spi: rockchip: fix controller deregistration - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: sprd: fix controller deregistration - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: sun4i: fix controller deregistration - spi: sun6i: fix controller deregistration - spi: syncuacer: fix controller deregistration - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: tegra210-quad: Protect curr_xfer check in IRQ handler - spi: ti-qspi: fix controller deregistration - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix controller deregistration - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: use generic driver_override infrastructure - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - statmount: permission check should return EPERM - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - sysctl: fix uninitialized variable in proc_do_large_bitmap - taskstats: set version in TGID exit notifications - tcp: call sk_data_ready() after listener migration - tcp: optimize inet_use_bhash2_on_bind() - tcp: tcp_tx_timestamp() must look at the rtx queue - team: fix header_ops type confusion with non-Ethernet ports - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Address thermal zone removal races with resume - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal: core: Free thermal zone ID later during removal - thermal: core: Mark thermal zones as exiting before unregistration - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature - thermal/of: Fix reference leak in thermal_of_cm_lookup() - thunderbolt: Fix property read in nhi_wake_supported() - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tls: Fix race condition in tls_sw_cancel_work_tx() - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tpm: avoid -Wunused-but-set-variable - tpm: Fix auth session leak in tpm2_get_random() error path - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() - tracefs: Fix default permissions not being applied on initial mount - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add a comment about ftrace_regs definition - tracing: Add ftrace_fill_perf_regs() for perf event - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix enabling multiple events on the kernel command line and bootconfig - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing: Fix WARN_ON in tracing_buffers_mmap_close - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: ring-buffer: Fix to check event length before using - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix unshare_fs() handling - uprobes: Fix incorrect lockdep condition in filter_chain() - uprobes: switch to RCU Tasks Trace flavor for better performance - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb: core: phy: avoid double use of 'usb3-phy' - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: f_ecm: Fix net_device lifecycle with device_move - usb: gadget: f_eem: Fix net_device lifecycle with device_move - usb: gadget: f_fs: fix DMA-BUF OUT queues - usb: gadget: f_fs: Fix ioctl error handling - usb: gadget: f_hid: don't call cdev_init while cdev in use - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Fix net_device lifecycle with device_move - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix net_device lifecycle with device_move - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmode/displayport: set displayport signaling rate in configure message - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: Flush anchored URBs in usbtmc_release - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vfio/cdx: Fix NULL pointer dereference in interrupt trigger path - vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost: move vdpa group bound check to vhost_vdpa - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vsock: fix buffer size clamping order - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - vxlan: validate ND option lengths in vxlan_na_create - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: Fix failure to connect to a 6 GHz AP - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: allow only one NAN interface, also in multi radio - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: Fix use_for flag update on BSS refresh - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mac80211: use safe list iteration in radar detect work - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr - wifi: mt76: mt7925: fix incorrect length field in txpower command - wifi: mt76: mt7925: fix incorrect TLV length in CLC command - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() - wifi: rtw89: 8922a: add digital compensation for 2GHz - wifi: rtw89: 8922a: set random mac if efuse contains zeroes - wifi: rtw89: fix unable to receive probe responses under MLO connection - wifi: rtw89: mac: correct page number for CSI response - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: ser: enable error IMR after recovering from L1 - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out assign_rescuer_work() - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags - X.509: Fix out-of-bounds access when parsing extensions - x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache - x86-64: rename misleadingly named '__copy_user_nocache()' function - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Add additional fixed RDSEED microcode revisions - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/cpu: Disable FRED when PTI is forced on - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path - x86/fred: Correct speculative safety in fred_extint() - x86/fred: Fix early boot failures on SEV-ES/SNP guests - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/platform/uv: Handle deconfigured sockets - x86: rename and clean up __copy_from_user_inatomic_nocache() - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: allow attaching already registered memory model to xdp_rxq_info - xdp: produce a warning when calculated tailroom is negative - xdp: register system page pool as an XDP memory model - xdp: use modulo operation to calculate XDP frag tailroom - xdrgen: Fix struct prefix for typedef types in program wrappers - xdrgen: Initialize data pointer for zero-length items - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/privcmd: unregister xenstore notifier on module exit - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: account XFRMA_IF_ID in aevent size calculation - xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi - xfrm: ah: account for ESN high bits in async callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: fix refcount leak in xfrm_migrate_policy_find - xfrm: fix the condition on x->pcpu_num in xfrm_sa_len - xfrm: Fix the usage of skb->sk - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() - xfrm: prevent policy_hthresh.work from racing with netns teardown - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: check for deleted cursors when revalidating two btrees - xfs: check return value of xchk_scrub_create_subord - xfs: delete attr leaf freemap entries when empty - xfs: don't irele after failing to iget in xfs_attri_recover_work - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix copy-paste error in previous fix - xfs: Fix error pointer dereference - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix returned valued from xfs_defer_can_append - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix the xattr scrub to detect freemap/entries array collisions - xfs: fix undersized l_iclog_roundoff values - xfs: get rid of the xchk_xfile_*_descr calls - xfs: mark data structures corrupt on EIO and ENODATA - xfs: only call xf{array,blob}_destroy if we have a valid pointer - xfs: remove file_path tracepoint data - xfs: remove xfs_attr_leaf_hasname - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: scrub: unlock dquot before early return in quota scrub - xfs: stop reclaim before pushing AIL during unmount - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zram: do not forget to endio for partial discard requests - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Update LVC patches for 6.12.90 - Removed already not needed patches, adapted some of existing ones, added newly appeared patches- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- bump rel- CONFIG_NF_CONNTRACK_PROCFS=y sometime i need to obtain traffic stats- Fix Dirtyfrag- Add new module ec-touchpad-toggle - Also exclude nwfermi.ko, which was not excluded by mistake...- Update BR for perf - ``` - DEBUG: make FIXDEP=1 -f Makefile.perf install-man - DEBUG: Makefile.config:1127: No libcapstone found, disables disasm engine support for 'perf script', please install libcapstone-dev/capstone-devel - DEBUG: Makefile.config:1189: libpfm4 not found, disables libpfm4 support. Please install libpfm4-dev - DEBUG: Makefile.config:1223: libtracefs is missing. Please install libtracefs-dev/libtracefs-devel - DEBUG: Auto-detecting system features: - DEBUG: ... dwarf: [ on ] - DEBUG: ... dwarf_getlocations: [ on ] - DEBUG: ... glibc: [ on ] - DEBUG: ... libbfd: [ on ] - DEBUG: ... libbfd-buildid: [ on ] - DEBUG: ... libcap: [ on ] - DEBUG: ... libelf: [ on ] - DEBUG: ... libnuma: [ on ] - DEBUG: ... numa_num_possible_cpus: [ on ] - DEBUG: ... libperl: [ on ] - DEBUG: ... libpython: [ on ] - DEBUG: ... libcrypto: [ on ] - DEBUG: ... libunwind: [ on ] - DEBUG: ... libdw-dwarf-unwind: [ on ] - DEBUG: ... libcapstone: [ OFF ] - DEBUG: ... llvm-perf: [ on ] - DEBUG: ... zlib: [ on ] - DEBUG: ... lzma: [ on ] - DEBUG: ... get_cpuid: [ on ] - DEBUG: ... bpf: [ on ] - DEBUG: ... libaio: [ on ] - DEBUG: ... libzstd: [ on ] - ```- Fix work on older Macs- Revert accidently merged disablement of kmod() provides - Repository is getting prepared for removal of kmod(), see kb#63. - For now - revert this change.- AMDGPU coherency hacks are not needed on x86- Fix CVE-2026-31431 ("Copyfail")- set cma=256M by default for Baikal - Merge: c9153a4 66a6ff7- Merge remote-tracking branch 'baikal/rosa2023.1' into rosa2023.1- Update LVC patches (bz#19983) - Talk with AI debugging https://bugzilla.rosa.ru/show_bug.cgi?id=19983: - https://file-store.rosa.ru/download/94a69475631e57cda3466a98efef1f76740bc34e- llvm for perf - DEBUG: Makefile.config:706: Warning: Disabled BPF skeletons as clang (clang) is missing - DEBUG: Makefile.config:997: No libllvm 13+ found, slower source file resolution, please install llvm-devel/llvm-dev- Hans's patch has been upstreamized- Remove upstreamized LVC patches- New LVC patches- [bot] upd: 6.12.47 -> 6.12.74 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail - accel/ivpu: Fix DCT active percent format - accel/ivpu: Fix race condition when unbinding BOs - accel/ivpu: Make function parameter names consistent - accel/ivpu: Prevent runtime suspend during context abort work - accel/qaic: Fix bootlog initialization ordering - accel/qaic: Synchronize access to DBC request queue head & tail pointer - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Detect preferred core availability on online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - ACPI: fan: Add fan speed reporting for fans with only _FST - ACPI: fan: Use ACPI handle when retrieving _FST - ACPI: fan: Use platform device for devres-related actions - ACPI: fan: Workaround for 64-bit firmware bug - acpi/hmat: Fix lockdep warning for hmem_register_resource() - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - ACPI: scan: Update honor list for RPMI System MSI - ACPI: SPCR: Check for table version when using precise baudrate - ACPI: SPCR: Support Precise Baud Rate field - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - ACPI: video: force native for Lenovo 82K8 - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Initialise scc_index in unix_add_edge(). - af_unix: Read sk_peek_offset() again after sleeping in unix_stream_read_generic(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: aloop: Fix racy access at PCM trigger - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda: Fix missing pointer check in hda_component_manager_init function - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Enable headset mic for Acer Nitro 5 - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA - ALSA: hda/realtek - fixed speaker no sound - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: Fix code alignment in mixer_quirks - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: broadcom: bcm2712: Add default GIC address cells - arm64: dts: broadcom: bcm2712: Define VGIC interrupt - arm64: dts: exynos: gs101: fix sysreg_apm reg property - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart - arm64: dts: imx93-kontron: Fix GPIO for panel regulator - arm64: dts: imx93-kontron: Fix USB port assignment - arm64: dts: imx95: Correct the lpuart7 and lpuart8 srcid - arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes - arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports - arm64: dts: mba8mx: Fix Ethernet PHY IRQ support - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8186-tentacruel: Fix touchscreen model - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8395-kontron-i1200: Fix MT6360 regulator nodes - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: qcom: sm8650: set ufs as dma coherent - arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller - arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller - arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: disable HS400 on RK3588 Tiger - arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5 - arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2 - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1 - arm64: dts: rockchip: Make RK3588 GPU OPP table naming less generic - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder - arm64: kprobes: call set_memory_rox() for kprobe page - arm64: kprobes: check the return value of set_memory_rox() - arm64: map [_text, _stext) virtual address range non-executable+read-only - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: mte: Do not warn if the page is already tagged in copy_highpage() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: Set __nocfi on swsusp_arch_resume() - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: zynqmp: Disable coresight by default - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on reset) - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: p880: set correct touchscreen clipping - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak4458: remove the reset operation in probe and remove - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: lpass-tx-macro: fix SM6115 support - ASoC: codecs: nau8325: Silence uninitialized variables warnings - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wcd937x: make stub functions inline - ASoC: codecs: wcd937x: set the comp soundwire port correctly - ASoC: codecs: wcd939x: fix regmap leak on probe failure - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs-amp-lib-test: Fix missing include of kunit/test-bug.h - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_sai: Fix sync error in consumer mode - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Expose correct bit depth to userspace - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8325: add missing build config - ASoC: nau8325: use simple i2c probe function - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again) - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type - ASoC: simple-card-utils: Check device node before overwrite direction - ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-pcm: Add fixup for channels - ASoC: SOF: ipc4-pcm: Enable delay reporting for ChainDMA streams - ASoC: SOF: ipc4-pcm: fix delay calculation when DSP resamples - ASoC: SOF: ipc4-pcm: fix start offset calculation for chain DMA - ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: correct the wrong period - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: ahci: Do not read the per port area for unimplemented ports - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Disable LPM on ST2000DM008-2FR102 - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-sata: Improve link_power_management_supported sysfs attribute - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - bcache: fix improper use of bi_end_io - bcache: fix I/O accounting leak in detached_dev_do_request - bcache: use bio cloning for detached device requests - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binder: fix double-free in dbitmap - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-crypto: use BLK_STS_INVAL for alignment errors - blk-mq: Abort suspend when wakeup events are pending - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block/blk-throttle: Fix throttle slice time for SSDs - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix memory leak in __blkdev_issue_zero_pages - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: freeze queue when updating zone resources - block: handle zone management operations completions - block: make REQ_OP_ZONE_OPEN a write operation - block/mq-deadline: Introduce dd_start_request() - block/mq-deadline: Switch back to a single dispatch list - block: rate-limit capacity change info log - block: return unsigned int from queue_dma_alignment - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix BIS connection dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: ISO: free rx_skb if not consumed - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() - bnxt_en: Add Hyper-V VF ID - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type - bnxt_en: Change FW message timeout warning - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bnxt_en: Fix XDP_TX path - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code - bnxt_en: Refactor bnxt_free_ctx_mem() - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf: Allow fall back to interpreter for programs with stack size <= 512 - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Check the helper function is valid in get_helper_proto - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Find eligible subprogs for private stack support - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Fix stackmap overflow check in __bpf_get_stackid() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Mark kfuncs as __noclone - bpf: Refactor stack map trace depth calculation into helper function - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject narrower access to pointer ctx fields - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bpf: Use tnums for JEQ/JNE is_branch_taken logic - bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: abort transaction if we fail to update inode in log replay dir fixup - btrfs: abort transaction in the process_one_buffer() log tree walk callback - btrfs: abort transaction on specific error places when walking log tree - btrfs: add extra error messages for delalloc range related errors - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't allow adding block device of less than 1 MB - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix beyond-EOF write handling - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix error handling of submit_uncompressed_range() - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation - btrfs: fix memory leak on duplicated memory in the qgroup assign ioctl - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix qgroup_snapshot_quick_inherit() squota bug - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix squota compressed stats leak - btrfs: fix subvolume deletion lockup caused by inodes xarray race - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: only enforce free space tree if v1 cache is required for bs < ps cases - btrfs: prevent use-after-free on folio private data in btrfs_subpage_clear_uptodate() - btrfs: qgroup: update all parent qgroups when doing quick inherit - btrfs: ref-verify: handle damaged extent root tree - btrfs: reject new transactions if the fs is fully read-only - btrfs: release root after error in data_reloc_print_warning_inode() - btrfs: remove btrfs_fs_info::sectors_per_page - btrfs: return any hit error from extent_writepage_io() - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: subpage: dump the involved bitmap when ASSERT() failed - btrfs: tracepoints: use btrfs_root_id() to get the id of a root - btrfs: tree-checker: add inode extref checks - btrfs: tree-checker: fix bounds check in check_inode_extref() - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: truncate ordered extent when skipping writeback past i_size - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: use variable for end offset in extent_writepage_io() - btrfs: zoned: fix conventional zone capacity calculation - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - bus: mhi: host: pci_generic: Add Telit FN920C04 modem support - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support - caif: fix integer underflow in cffrml_receive() - can: at91_can: Fix memory leak in at91_can_probe() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd: acc_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: add deinit callback - can: m_can: call deinit/init callback when going into suspend/resume - can: m_can: fix CAN state in system PM - can: m_can: m_can_chip_config(): bring up interface in correct state - can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error Active - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: rockchip-canfd: rkcanfd_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - cdx: Fix device node reference leak in cdx_msi_domain_init - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: fix multifs mds auth caps issue - ceph: fix NULL pointer dereference in ceph_mds_auth_match() - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - ceph: fix potential race condition in ceph_ioctl_lazyio() - ceph: fix race condition validating r_parent before applying state - ceph: fix race condition where r_parent becomes stale before sending message - ceph: refactor wake_up_bit() pattern of calling - cgroup: Fix kernfs_node UAF in css_free_rwork_fn - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix copy_to_iter return value check - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: at91: sam9x7: Add peripheral clock id for pmecc - clk: clocking-wizard: Fix output clock register offset for Versal platforms - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: qcom: camcc-sm7150: Fix PLL config of PLL2 - clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other - clk: qcom: common: Fix NULL vs IS_ERR() check in qcom_cc_icc_register() - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src - clk: qcom: gcc-ipq6018: rework nss_port5 clock to multiple conf - clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets - clk: qcom: tcsrcc-x1e80100: Set the bi_tcxo as parent to eDP refclk - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Fix memory leak in cpg_mssr_reserved_init() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: scmi: Add duty cycle ops only when duty cycle is supported - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/timer-rtl-otto: Do not interfere with interrupts - clocksource/drivers/timer-rtl-otto: Work around dying timers - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - clocksource: Reduce watchdog readout delay limit to prevent false positives - cnic: Fix use-after-free bugs in cnic_delete_task - codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_file_range: limit size if in compat mode - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: catu: Support atclk - coresight: Change device mode to atomic type - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Fix incorrect handling for return value of devm_kzalloc - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: tmc: Support atclk - coresight: tpda: fix the logic to setup the element size - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: ondemand: Update the efficient idle check for Intel extended Families - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpufreq: ti: Add support for AM62D2 - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Fix missing adaptation for cpuset_is_populated - cpuset: Treat cpusets in attaching as populated - cpuset: Use new excpus for nocpu error check when enabling root partition - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() - crypto: ccp: Skip SEV and SNP INIT for kdump boot - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - clear all VF configurations in the hardware - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - invalidate queues in use - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: iaa - Fix incorrect return value in save_iaa_wq() - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx2 - Call strscpy() with correct size argument - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - fix duplicate restarting msg during AER error - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't enforce dma mapping check on noncoherent allocations - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dma-debug: fix physical address calculation for struct dma_debug_entry - dma-debug: store a phys_addr_t in struct dma_debug_entry - dmaengine: Add missing cleanup on module unload - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: lpc32xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma-mapping: fix direction in dma_alloc direction traces - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err - dma-mapping: trace dma_alloc/free direction - dma-mapping: trace more error paths - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm error: mark as DM_TARGET_PASSES_INTEGRITY - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: don't set io_min and io_opt for raid1 - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-stripe: fix a possible integer overflow - dm vdo: return error on corrupted metadata in start_restoring_volume functions - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: hwmon: fix link to g762 devicetree binding - docs: kdoc: handle the obsolescensce of docutils.ErrorString() - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - dpll: Prevent duplicate registrations - dpll: spec: add missing module-name and clock-id to pin-get reply - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd/amdgpu: Release xcp drm memory after unplug - drm/amd/amdgpu: reserve vm invalidation engine for uni_mes - drm/amd: Avoid evicting resources at S5 - drm/amd: Check that VPE has reached DPM0 in idle handler - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add fallback path for YCBCR422 - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put - drm/amd/display: Apply e4479aecf658 to dml - drm/amd/display: avoid reset DTBCLK at clock init - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: change dc stream color settings only in atomic commit - drm/amd/display: Check NULL before accessing - drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5 - drm/amd/display: disable DPP RCG before DPP CLK enable - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display/dml2: Guard dml21_map_dc_state_into_dml_display_cfg with DC_FP_START - drm/amd/display: Don't change brightness for disabled connectors - drm/amd/display: Enable Dynamic DTBCLK Switch - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: extend delta clamping logic to CM3 LUT helper - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: fix condition for setting timing_adjust_pending - drm/amd/display: fix dml ms order of operations - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed - drm/amd/display: Fix for test crash due to power gating - drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix NULL deref in debugfs odm_combine_segments - drm/amd/display: Fix pbn_div Calculation Error - drm/amd/display: Fix pbn to kbps Conversion - drm/amd/display: Fix scratch registers offsets for DCN35 - drm/amd/display: Fix scratch registers offsets for DCN351 - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - drm/amd/display: incorrect conditions for failing dto calculations - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: increase max link count and fix link->enc NULL pointer access - drm/amd/display: Increase minimum clock for TMDS 420 with pipe splitting - drm/amd/display: Init dispclk from bootup clock for DCN314 - drm/amd/display: Insert dccg log for easy debug - drm/amd/display: mark static functions noinline_for_stack - drm/amd/display: Move setup_stream_attribute - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: remove assert around dpp_base replacement - drm/amd/display: Remove redundant semicolons - drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off - drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files - drm/amd/display: Set up pixel encoding for YCBCR422 - drm/amd/display: shrink struct members - drm/amd/display: Support HW cursor 180 rot for any number of pipe splits - drm/amd/display: update color on atomic commit time - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd/display: Wait until OTG enable state is cleared - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: Add back JPEG to video caps for carrizo and newer - drm/amdgpu: add ip offset support for cyan skillfish - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add range check for RAS bad page address - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: add support for cyan skillfish without IP discovery - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - drm/amdgpu: Avoid rma causes GPU duplicate reset - drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest - drm/amdgpu: Check vcn sram load return value - drm/amdgpu: Correct the counts of nr_banks and nr_errors - drm/amdgpu: disable peer-to-peer access for DCC-enabled GC12 VRAM surfaces - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: Enable MES lr_compute_wa by default - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule() - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix gfx12 mes packet status return check - drm/amdgpu: fix gpu page fault after hibernation on PF passthrough - drm/amdgpu: fix handling of harvesting for ip_discovery firmware - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: fix nullptr err of vm_handle_moved - drm/amdgpu: Fix query for VPE block_type and ip_count - drm/amdgpu: Fix unintended error log in VCN5_0_0 - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: adjust KGQ reset sequence - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx12: fix wptr reset in KGQ init - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: remove frame cntl for gfx v12 - drm/amdgpu: remove two invalid BUG_ON()s - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu: Skip poison aca bank from UE channel - drm/amdgpu/smu: Handle S0ix for vangogh - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amd/include : MES v11 and v12 API header update - drm/amd/include : Update MES v12 API for fence update - drm/amdkfd: bump minimum vgpr size for gfx1151 - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: Fix GPU mappings for APU after prefetch - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string - drm/amdkfd: Fix mmap write lock not release - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: relax checks for over allocation of save area - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amdkfd: Trap handler support for expert scheduling mode - drm/amdkfd: Use huge page size to check split svm range alignment - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2 - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/amd: Skip power ungate during suspend for VPE - drm/amd : Update MES API header file for v11 & v12 - drm/ast: Clear preserved bits from register output value - drm/ast: Use msleep instead of mdelay for edid read - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/buddy: Optimize free block management with RB tree - drm/buddy: Separate clear and dirty free block trees - drm/displayid: add quirk to ignore DisplayID checksum errors - drm/displayid: pass iter to drm_find_displayid_extension() - drm/draw: fix color truncation in drm_draw_fill24 - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915/dp: Initialize the source OUI write timestamp always - drm/i915/dp_mst: Disable Panel Replay - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915: Fix format string truncation warning - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/pmu: Fix zero delta busyness issue - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imagination: Disallow exporting of PM/FW protected objects - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() - drm/imagination: Wait for FW trace update command completion - drm/imx/tve: fix probe device leak - drm/mediatek: Add pm_runtime support for GCE power control - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe device leaks - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/me/gsc: mei interrupt top half should be in irq disabled context - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/a6xx: Fix the gemnoc workaround - drm/msm/a6xx: Flush LRZ cache before PT switch - drm/msm/a6xx: Improve MX rail fallback in RPMH vote init - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/msm/registers: Generate _HI/LO builders for reg64 - drm/nouveau: add missing DCB connector types - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit) - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: Fix race in nouveau_sched_fini() - drm/nouveau: implement missing DCB connector types; gracefully handle unknown connectors - drm/nouveau: refactor deprecated strcpy - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm: panel-backlight-quirks: Make EDID match optional - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/panic: Fix drawing the logo on a small narrow screen - drm/panic: Fix qr_code, ensure vmargin is positive - drm/panthor: Avoid adding of kernel BOs to extobj list - drm/panthor: check bo offset alignment in vm bind - drm/panthor: Defer scheduler entitiy destruction to queue release - drm/panthor: Ensure MCU is disabled on suspend - drm/panthor: Fix group_free_queue() for partially initialized queues - drm/panthor: Fix kernel panic on partial unmap of a GPU VA region - drm/panthor: Fix memory leak in panthor_ioctl_group_create() - drm/panthor: Fix potential memleak of vma structure - drm/panthor: Fix race with suspend during unplug - drm/panthor: Fix UAF on kernel BO VA nodes - drm/panthor: Fix UAF race between device unplug and FW event processing - drm/panthor: Flush shmem writes before mapping buffers CPU-uncached - drm/panthor: Handle errors returned by drm_sched_entity_init() - drm/panthor: Serialize GPU cache flush operations - drm/panthor: validate group queue count - drm/pl111: Fix error handling in pl111_amba_probe - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon: Do not kfree() devres managed rdev - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove calls to drm_put_dev() - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: avoid killing parent entity on child SIGKILL - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm/sched: Optimise drm_sched_entity_push_job - drm/sched: Re-group and rename the entity run-queue lock - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - drm/xe: Adjust long-running workload timeslices to reasonable values - drm/xe: Attempt to bring bos back to VRAM after eviction - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table - drm/xe: Do clean shutdown also when using flr - drm/xe: Do not wake device during a GT reset - drm/xe: Drop preempt-fences when destroying imported dma-bufs. - drm/xe: Ensure GT is in C0 during resumes - drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue() - drm/xe: Fix conversion from clock ticks to milliseconds - drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. - drm/xe/guc: Add more GuC load error status codes - drm/xe/guc: Check GuC running state before deregistering exec queue - drm/xe/guc: Increase GuC crash dump buffer size - drm/xe/guc: Return an error code if the GuC load fails - drm/xe/guc: Set upper limit of H2G retries over CTB - drm/xe/guc: Synchronize Dead CT worker with unbind - drm/xe/hw_engine_group: Fix double write lock release in error path - drm/xe: Limit num_syncs to prevent oversized allocations - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally - drm/xe: Move declarations under conditional branch - drm/xe/oa: Disallow 0 OA property values - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() - drm/xe/oa: Limit num_syncs to prevent oversized allocations - drm/xe/pm: Also avoid missing outer rpm warning on system suspend - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - drm/xe: Prevent BIT() overflow when handling invalid prefetch region - drm/xe/query: Fix topology query pointer advance - drm/xe: Restore engine registers before restarting schedulers after GT reset - drm/xe/tile: Release kobject for the failure path - drm/xe/uapi: loosen used tracking restriction - drm/xe: Use usleep_range for accurate long-running workload timeslicing - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets - dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - erofs: avoid infinite loop due to incomplete zstd-compressed data - erofs: don't bother with s_stack_depth increasing for now - erofs: fix file-backed mounts no longer working on EROFS partitions - erofs: fix UAF issue for file-backed mounts w/ directio option - erofs: fix unexpected EIO under memory pressure - erofs: limit the level of fs stacking for file-backed mounts - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - eth: fbnic: Fix counter roll-over issue - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix improper check of dentry.stream.valid_size - exfat: fix refcount leak in exfat_find - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - exfat: validate cluster allocation bits of the allocation bitmap - exfat: zero out post-EOF page cache on file extension - Expand the type of nfs_fattr->valid - ext4: add ext4_sb_bread_nofail() helper function for ext4_free_branches() - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: introduce linear search for dentries - ext4: refresh inline data size before write operations - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages - f2fs: add carve_out sysfs node - f2fs: add gc_boost_gc_greedy sysfs node - f2fs: add gc_boost_gc_multiple sysfs node - f2fs: add timeout in f2fs_enable_checkpoint() - f2fs: clear SBI_POR_DOING before initing inmem curseg - f2fs: drop inode from the donation list when the last file is closed - f2fs: dump more information for f2fs_{enable,disable}_checkpoint() - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid panic once fallocation fails for pinfile - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid running out of free segments - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to check sysfs filename w/ gc_pin_file_thresh correctly - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix uninitialized one_time_gc in victim_sel_policy - f2fs: fix wrong block mapping for multi-devices - f2fs: fix wrong layout information on 16KB page - f2fs: fix zero-sized extent for precache extents - f2fs: introduce reserved_pin_section sysfs entry - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: maintain one time GC mode is enabled during whole zoned GC cycle - f2fs: sysfs: add encoding_flags entry - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - fgraph: Check ftrace_pids_enabled on registration for early filtering - fgraph: Initialize ftrace_ops->private for function graph ops - fhandle: use more consistent rules for decoding file handle from userns - filelock: add FL_RECLAIM to show_fl_flags() macro - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firewire: ohci: move self_id_complete tracepoint after validating register - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: Add stub functions for SCMI MISC API - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER - firmware: meson_sm: fix device leak at probe - firmware: qcom: scm: preserve assign_mem() error return value - firmware: qcom: tzmem: disable sc7180 platform - firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix access to video_is_primary_device() when compiled without CONFIG_VIDEO - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/namespace: correctly handle errors returned by grab_requested_mnt_ns - fs/namespace: fix reference leak in grab_requested_mnt_ns - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: check for shutdown in fsync - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs/proc/task_mmu: check p->vec_buf for NULL - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: do not allow mapping a non-regular backing file - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genetlink: fix genl_bind() invoking bind() after -EPERM - gfs2: fix freeze error handling - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: Fix use of bio_chain - gfs2: Prevent recursive memory reclaim - gpio: 104-idio-16: Define maximum valid register address offset - gpio: cdev: Correct return code on memory allocation failure - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter - gpiolib: acpi: Add a quirk for Acer Nitro V15 - gpiolib: acpi: Add quirk for ASUS ProArt PX13 - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: Fix gpio count with string references - gpiolib: acpi: Fix potential out-of-boundary left shift - gpiolib: acpi: Handle deferred list via new API - gpiolib: acpi: Move quirks to a separate file - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list() - gpiolib-acpi: Update file references in the Documentation and MAINTAINERS - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpiolib: fix invalid pointer access in debugfs - gpio: ljca: Fix duplicated IRQ mapping - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: swnode: don't use the swnode's name as the key for GPIO lookup - gpio: virtuser: fix UAF in configfs release path - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - greybus: gb-beagleplay: Fix timeout handling in bootloader functions - gue: Fix skb memleak with inner IP protocol 0. - gup: optimize longterm pin_user_pages() for large folio - gve: Correct ethtool rx_dropped calculation - gve: defer interrupt enabling until NAPI registration - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Add sync across amd sfh work functions - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: hidraw: tighten ioctl command parsing - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: nintendo: Wait longer for initial probe - HID: pidff: PERMISSIVE_CONTROL quirk autodetection - HID: pidff: Use direction fix only for conditional effects - HID: playstation: Center initial joystick axes to prevent spurious events - HID: playstation: Fix memory leak in dualshock4_get_calibration_data() - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hostfs: Fix only passing host root in boot stage with new mount - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimers: Introduce hrtimer_update_function() - hrtimers: Make hrtimer_update_function() less expensive - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: hold rcu and dev lock for hsr_get_port_ndev - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Limit fan multiplier to avoid overflow - hwmon: (dell-smm) Remove Dell Precision 490 custom config data - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (lenovo-ec-sensors) Update P8 supprt - hwmon: (ltc4282): Fix reset_history file permissions - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (max6697) fix regmap leak on probe failure - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i2c: riic: Move suspend handling to NOIRQ phase - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: remove redundant memory barrier when cleaning Tx descs - i40e: validate ring_len parameter against hardware-specific values - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/ipoib: Ignore L3 master device - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: Fix incorrect timeout ice_release_res() - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues - ice: Fix persistent failure in ice_get_rxfh - ice: fix PTP cleanup on driver removal in error path - ice: fix Rx page leak on multi-buffer frames - ice: ice_adapter: release xa entry on adapter allocation failure - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - ice: store max_frame and rx_buf_len only in ice_rx_ring - idpf: add support for SW triggered interrupts - idpf: add support for Tx refillqs in flow scheduling mode - idpf: cap maximum Rx buffer size - idpf: do not linearize big TSO packets - idpf: fix memory leak in idpf_vport_rel() - idpf: fix mismatched free function for dma_alloc_coherent - idpf: fix possible vport_config NULL pointer deref in remove - idpf: fix Rx descriptor ready check barrier in splitq - idpf: improve when to set RE bit logic - idpf: keep the netdev when a reset fails - idpf: reduce mbx_task schedule delay to 300us - idpf: remove obsolete stashing code - idpf: replace flow scheduling buffer ring with buffer pool - idpf: simplify and fix splitq Tx packet rollback error path - idpf: stop Tx if there are insufficient buffer resources - idpf: trigger SW interrupt when exiting wb_on_itr mode - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: don't fail igc_probe() on LED setup error - igc: fix race condition in TX timestamp read for register 0 - igc: Restore default Qbv schedule when changing channels - iio: accel: adxl380: fix handling of unavailable "INT1" interrupt - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio/adc/pac1934: fix channel disable configuration - iio: adc: pac1934: Fix clamped value in pac1934_reg_snapshot - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: buffer-dmaengine: enable .get_dma_dev() - iio: buffer-dma: support getting the DMA channel - iio: buffer: support getting dma channel from the buffer - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: core: Replace lockdep_set_class() + mutex_init() by combined call - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: humditiy: hdc3020: fix units for temperature and humidity measurement - iio: humditiy: hdc3020: fix units for thresholds and hysteresis - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() - inet_diag: annotate data-races in inet_diag_bc_sk() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: alps - fix use-after-free bugs caused by dev3_register_work - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: lkkbd - disable pending work before freeing device - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: allocate s_dio_done_wq for async reads as well - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: do not register driver in probe() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Fix race during abort for file descriptors - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds - iommufd/selftest: Update hw_info coverage for an input data_type - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE - iommu/vt-d: debugfs: Fix legacy mode page table dump logic - iommu/vt-d: Disallow dirty tracking if incoherent page walk - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring/cmd: let cmds to know about dying task - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: fix incorrect io_kiocb reference in io_link_skb - io_uring: fix min_wait wakeups for SQPOLL - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check - io_uring: move local task_work in exit cancel loop - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations - io_uring/napi: fix io_napi_entry RCU accesses - io_uring/poll: correctly handle io_poll_add() return value on update - io_uring/rw: recycle buffers manually for non-mshot reads - io_uring/sqpoll: be smarter on when to update the stime usage - io_uring/sqpoll: switch away from getrusage() for CPU accounting - io_uring/waitid: always prune wait queue entry in io_waitid_wait() - io_uring/zctx: check chained notif contexts - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: adopt dst_dev() helper - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/renesas-rzg2l: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - irqchip/starfive-jh8100: Fix section mismatch - irqdomain: cdx: Switch to of_fwnode_handle() - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - isofs: check the return value of sb_min_blocksize() in isofs_fill_super - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: refactor pcpu kasan vmalloc unpoison - kasan: unpoison vms[area] addresses with a common tag - kbuild: fix compilation of dtb specified on command-line without make rule - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - kunit: test_dev_action: Correctly cast 'priv' pointer to long* - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: Make all 32bit ID registers fully writable - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: VMX: Fix check for valid GVA on an EPT violation - KVM: VMX: Split out guts of EPT violation to common/exposed function - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - l2tp: Fix memleak in l2tp_udp_encap_recv(). - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-cros_ec: Skip LEDs without color components - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp55xx: Use correct address for memory programming - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM - libbpf: Fix error when st-prefix_ops and ops from differ btf - libbpf: Fix parsing of multi-split BTF - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libbpf: Fix USDT SIB argument handling causing unrecognized register error - libbpf: Fix -Wdiscarded-qualifiers under C23 - lib/buildid: use __kernel_read() for sleepable context - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: riscv/chacha: Avoid s0/fp register - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - listmount: don't call path_put() under namespace semaphore - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - locktorture: Fix memory leak in param_set_cpumask() - LoongArch: Add cflag -fno-isolate-erroneous-paths-dereference - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names - LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Fix unreliable stack for live patching - LoongArch: Handle new atomic instructions for probes - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - LoongArch: vDSO: Check kcalloc() result in init_vdso() - loop: fix backing file reference leak on validation error - lsm: CONFIG_LSM can depend on CONFIG_SECURITY - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend() - mailbox: mtk-cmdq: Refine DMA address handling for the command buffer - mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data() - mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend() - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop - mailbox: zynqmp-ipi: Fix SGI cleanup on unbind - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md: fix mssing blktrace bio split events - md: fix rcu protection in md_wakeup_thread - md: Fix static checker warning in analyze_sbs - md/raid0: Handle bio_split() errors - md/raid10: Handle bio_split() errors - md/raid10: wait barrier before returning discard request with REQ_NOWAIT - md/raid1: Handle bio_split() errors - md/raid5: fix IO hang when array is broken with IO inflight - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() - md: suspend array while updating raid_disks via sysfs - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: extron-da-hd-4k-plus: drop external-module make commands - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: ipu6: isys: Set embedded data type correctly for metadata formats - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pci: mg4b: fix uninitialized iio scan data - media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS - media: platform: mtk-mdp3: fix device leaks at probe - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: s5p-mfc: remove an unused/uninitialized variable - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: ti: j721e-csi2rx: Fix source subdev link creation - media: ti: j721e-csi2rx: Use devm_of_platform_populate - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: videobuf2: forbid remove_bufs when legacy fileio is active - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vivid: fix disappearing messages - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: gsc: add dependency on Xe driver - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: core: Increment of_node's refcount before linking it to the platform device - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: kempld: Switch back to earlier ->init() behavior - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - microchip: lan865x: add ndo_eth_ioctl handler to enable PHY ioctl support - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - MIPS: Fix a reference leak bug in ip22_check_gio() - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: Fix variable shadowing in mmc_route_rpmb_frames() - mmc: core: SPI mode remove cmd7 - mmc: dw_mmc-rockchip: Fix wrong internal phase calculate - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mmc_spi: multiple block read remove read crc ack - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/lru_sort: use param_ctx for damon_attrs staging - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: describe @flags parameter in memalloc_flags_save() - mm/fake-numa: allow later numa node hotplug - mm/fake-numa: handle cases with no SRAT info - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/huge_memory: do not change split_huge_page*() target order silently - mm/huge_memory: fix NULL pointer deference when splitting folio - mm/huge_memory: preserve PG_has_hwpoisoned if a folio is split to >0 order - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix folio is still mapped when deleted - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm: introduce and use {pgd,p4d}_populate_kernel() - mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN - mm/kasan: fix KASAN poisoning in vrealloc() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm/memfd: fix information leak in hugetlb folios - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory-failure: fix redundant updates for already poisoned pages - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm: numa,memblock: include for 'numa_nodes_parsed' - mm/page_alloc: batch page freeing in decay_pcp_high - mm/page_alloc: change all pageblocks migrate type on coalescing - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection - mm/page_owner: fix memory leak in page_owner_stack_fops->release() - mm, percpu: do not consider sleepable allocations atomic - mm: prevent poison consumption when splitting THP - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" - mm: revert "mm: vmscan.c: fix OOM on swap stress test" - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm/shmem: fix THP allocation and fallback loop - mm, shmem: prevent infinite loop on truncate race - mm/shmem, swap: fix race of truncate and swap entry split - mm: simplify folio_expected_ref_count() - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - mm: swap: check for stable address space before operating on the VMA - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages - mm/truncate: unmap large folio on split failure - mm/zswap: fix error pointer free in zswap_cpu_comp_prepare() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mount: handle NULL values in mnt_ns_release() - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: Call dst_release() in mptcp_active_enable(). - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: reset blackhole on success with non-loopback ifaces - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - mtd: spinand: winbond: Fix oob_layout for W25N01JW - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: override creds to kernel when calling sock_{send,recv}msg() - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: Fix buffer overflow in USB transport layer - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - net: devmem: expose tcp_recvmsg_locked errors - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - netdevsim: set the carrier when the device goes up - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix bcm63xx RGMII port link adjustment - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: felix: support phy-mode = "10g-qxgmii" - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Do not execute PTP driver code for unsupported switches - net: dsa: microchip: Don't free uninitialized ksz_irq - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463 - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: dsa: tag_brcm: legacy: reorganize functions - net: dsa: xrs700x: reject unsupported HSR configurations - net: dst: add four helpers to annotate data-races around dst->dev - net: dst: introduce dst->dev_rcu - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout - net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism - net: ethernet: ti: am65-cpts: fix timestamp loss due to race conditions - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_nat: remove bogus direction check - netfilter: nfnetlink: reset nlh pointer during batch replay - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: make nft_set_do_lookup available unconditionally - netfilter: nf_tables: place base_seq in struct net - netfilter: nf_tables: Reintroduce shortened deletion notifications - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nf_tables: restart set lookup on base_seq change - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups - netfilter: nft_set_pipapo: don't return bogus extension pointer - netfilter: nft_set_pipapo: fix null deref for empty set - netfilter: nft_set_pipapo: fix range overlap detection - netfilter: nft_set_pipapo: merge pipapo_get/lookup - netfilter: nft_set_pipapo: remove unused arguments - netfilter: nft_set_rbtree: continue traversal if element is inactive - netfilter: nft_set: remove one argument from lookup and update functions - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix segmentation of forwarding fraglist GRO - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - netfs: Prevent duplicate unlocking - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add VLAN CTAG filter support - net: hsr: create an API to get hsr port type - net: hsr: Create and export hsr_get_port_ndev() - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hsr: remove one synchronize_rcu() from hsr_del_port() - net: hsr: remove synchronize_rcu() from hsr_add_port() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net: Introduce skb_copy_datagram_from_iter_full() - net: ionic: add dma_wmb() before ringing TX doorbell - net: ionic: map SKB after pseudo-header checksum prep - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv4: allow directed broadcast routes to use dst hint - net: ipv6: fix field-spanning memcpy warning in AH output - net: ipv6: ioam6: use consistent dst names - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - netlink: specs: mptcp: add missing 'server-side' attr - netlink: specs: mptcp: clearly mention attributes - netlink: specs: mptcp: fix if-idx attribute type - netlink: specs: mptcp: replace underscores with dashes in names - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: mana: Change the function signature of mana_get_primary_netdev_rcu - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv - net/mlx5e: Fix crash on profile change rollback failure - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5: Fix IPsec cleanup over MPV device - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: Fix vhca_id access call trace use before alloc - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: HWS, change error flow on matcher disconnect - net/mlx5: Initialize events outside devlink lock - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netdevsim: fix inconsistent carrier state after link/unlink - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: add phy_interface_copy() - net: phy: add phy_interface_weight() - net: phy: adin1100: Fix software power-down ready condition - net: phy: aquantia: check for NVMEM deferral - net: phy: clear link parameters on admin link down - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: micrel: always set shared->phydev for LAN8814 - net: phy: micrel: fix clk warning when removing the driver - net: phy: micrel: Fix lan8814_config_init - net: phy: micrel: Introduce lanphy_modify_page_reg - net: phy: micrel: lan8814 fix reset of the QSGMII interface - net: phy: micrel: Replace hardcoded pages with defines - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net: sched: generalize check for no-queue qdisc on TX queue - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick - net: sfp: add quirk for FLYPRO copper SFP+ module - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: convert sfp quirks to modify struct sfp_module_support - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sfp: pre-parse the module support - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix general protection fault in __smc_diag_dump - net/smc: fix mismatch between CLC header and proposal - net/smc: fix warning in smc_rx_splice() when calling get_page() - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: est: Drop frames causing HLBS error - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR - net: ti: icssg-prueth: Fix fdb hash size configuration - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: Change async resync helpers argument - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: tun: Update napi->skb after XDP process - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: r8152: fix resume reset deadlock - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: use dst_dev_rcu() in sk_setup_caps() - net: vlan: sync VLAN features with lower device - net: wan: framer: pef2256: Switch to devm_mfd_add_devices() - net: wangxun: limit tx_max_coalesced_frames_irq - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: mhi: Keep modem name match with Foxconn T99W640 - net: wwan: t7xx: add support for HP DRMR-H01 - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Apply delay_retrans to async operations - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes - NFSD/blocklayout: Fix minlength check in proc_layoutget - nfsd: check that server is running in unlock_filesystem - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't use sv_nrthreads in connection limiting calculations. - nfsd: Drop dprintk in blocklayout xdr functions - nfsd: Drop the client reference in client_states_open() - nfsd: fix access checking for NLM under XPRTSEC policies - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - nfsd: fix __fh_verify for localio - NFSD: Fix last write offset handling in layoutcommit - nfsd: fix memory leak in nfsd_create_serv error paths - nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT - NFSD: Fix permission check for read access to executable-only files - nfsd: fix refcount leak in nfsd_set_fh_dentry() - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - NFSD: Implement large extent array support in pNFS - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: net ref data still needs to be freed even if net hasn't startup - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - nfsd: refine and rename NFSD_MAY_LOCK - NFSD: Remove NFSERR_EAGAIN - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() - NFSD: Rework encoding and decoding of nfsd4_deviceid - NFSD: Skip close replay processing if XDR encoding fails - nfsd: unregister with rpcbind when deleting a transport - nfsd: update percpu_ref to manage references on nfsd_net - nfsd: Use correct error code when decoding extents - nfsd: use correct loop termination in nfsd4_revoke_states() - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: Fix a deadlock involving nfs_release_folio() - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix LTP test failures when timestamps are delegated - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - nfs/localio: add direct IO enablement with sync and async IO support - nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter - nfs/localio: restore creds before releasing pageio data - NFS: nfs_invalidate_folio() must observe the offset and size arguments - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nfs/vfs: discard d_exact_alias() - nilfs2: avoid having an active sc_timer before freeing sci - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme: fix PI insert on write - nvmem: layouts: fix automatic module loading - nvmem: layouts: fix nvmem_layout_bus_uevent - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: skip nvme_write_sq_db on empty rqlist - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvme/tcp: handle tls partially sent records in write_space() - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type - objtool/LoongArch: Mark types based on break immediate code - objtool/rust: add one more `noreturn` Rust function - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeon_ep: fix VF MAC address lifecycle handling - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - openrisc: Add R_OR1K_32_PCREL relocation type module support - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches - parisc: Avoid crash due to unaligned access in unwinder - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: brcmstb: Reuse pcie_cfg_data structure - PCI: brcmstb: Set MLW based on "num-lanes" DT property if present - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Ensure error recoverability at all times - PCI/ERR: Fix uevent on failure to recover - PCI/ERR: Update device error_state already after reset - PCI: imx6: Enable the Vaux supply if available - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Fix incorrect error message in probe() - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion - PCI: rcar-gen4: Assure reset occurs before DBI access - PCI: rcar-gen4: Fix inverted break condition in PHY initialization - PCI: rcar-gen4: Fix PHY initialization - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - PCI: Test for bit underflow in pcie_set_readrq() - PCI: xilinx-nwl: Fix ECAM programming - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf annotate: Check return value of evsel__get_arch() properly - perf/arm-cmn: Fix CMN S3 DTM offset - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf/core: Fix address filter match with backing files - perf/core: Fix MMAP2 event device with backing files - perf/core: Fix MMAP event path names with backing files - perf disasm: Avoid undefined behavior in incrementing NULL - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf hist: In init, ensure mem_info is put on error paths - perf lock contention: Load kernel map before lookup - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: Remove get_perf_callchain() init_nr argument - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Simplify get_perf_callchain() user logic - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test shell lbr: Avoid failures with perf event paranoia - perf test stat: Avoid hybrid assumption when virtualized - perf test trace_btf_enum: Skip if permissions are insufficient - perf test: Update sysfs path for core PMU caps - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf tools: Mark split kallsyms DSOs as loaded - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel/cstate: Remove PC3 support from LunarLake - perf/x86/intel: Do not enable BTS for guests - perf/x86/intel: Fix crash in icl_update_topdown_event() - perf/x86/intel: Fix KASAN global-out-of-bounds warning - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: freescale: Initialize priv->lock - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits - phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors - phy: ti: gmii-sel: fix regmap leak on probe failure - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: realtek: Select REGMAP_MMIO for RTD driver - pinctrl: renesas: rzg2l: Fix invalid unsigned return in rzg3s_oen_read() - pinctrl: renesas: rzg2l: Fix ISEL restore on resume - pinctrl: renesas: rzg2l: Fix PMC restore - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86/amd/pmf: Support new ACPI ID AMDI0108 - platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13 - platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86/intel/tpmi/plr: Make the file domain/status writeable - platform/x86/intel-uncore-freq: Fix warning in partitioned system - platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: msi-wmi-platform: Fix typo in WMI GUID - platform/x86: msi-wmi-platform: Only load on MSI devices - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - PM / devfreq: rockchip-dfi: double count on RK3588 - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - PM: EM: Drop unused parameter from em_adjust_new_capacity() - PM: EM: Fix incorrect description of the cost field in struct em_perf_state - PM: EM: Fix late boot with holes in CPU topology - PM: EM: Move CPU capacity check to em_adjust_new_capacity() - PM: EM: Slightly reduce em_check_capacity_update() overhead - PM: hibernate: Emit an error when image writing fails - PM: hibernate: Use atomic64_t for compressed_size variable - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() - pNFS: Fix a deadlock when returning a delegation during open() - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/603: Really copy kernel PGD entries into all PGDIRs - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/8xx: Remove left-over instruction and comments in DataStoreTLBMiss handler - powerpc/addnote: Fix overflow on 32-bit builds - powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kdump: Fix size calculation for hot-removed memory ranges - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max17040: Check iio_read_channel_processed() return code - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt5033_charger: Fix device node reference leaks - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix the issue of proc_mem_open returning NULL - proc: fix type confusion in pde_set_flags() - procfs: avoid fetching build ID while holding VMA lock - proc: proc_maps_open allow proc_mem_open to return NULL - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add a upper bound on max_vclocks - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: Limit time setting of PTP clocks - ptp: ocp: Fix typo using index 1 instead of i in SMA initialization loop - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: pca9685: Use bulk write to atomicially update registers - pwm: stm32: Always program polarity - pwm: tiehrpwm: Don't drop runtime PM reference in .free() - pwm: tiehrpwm: Fix corner case in clock divisor calculation - pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation - pwm: tiehrpwm: Make code comment in .free() more useful - qed: Don't collect too many protection override GRC elements - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - RAS: Report all ARM processor CPER information to userspace - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Pass correct flag for dma mr creation - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix recv CQ and QP cache affinity - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/irdma: Update Kconfig - RDMA/mana_ib: Handle net event for pointing to the current netdev - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: fixed: Rely on the core freeing the enable GPIO - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/amd/display: Fix pbn to kbps Conversion" - Revert "drm/amd/display: Move setup_stream_attribute" - Revert "drm/amd/display: Optimize cursor position updates" - Revert "drm/amd: Skip power ungate during suspend for VPE" - Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "netfilter: nf_tables: Reintroduce shortened deletion notifications" - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "RDMA/irdma: Update Kconfig" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "udmabuf: fix vmap_udmabuf error page set" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "wireguard: device: enable threaded NAPI" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - riscv, bpf: Sign extend struct ops return values properly - riscv: Build loader.bin exclusively for Canaan K210 - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: pgtable: Cleanup useless VA_USER_XXX definitions - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Sanitize syscall table indexing under speculation - riscv: stacktrace: Disable KASAN checks for non-current tasks - rocker: fix memory leak in rocker_world_port_post_fini() - romfs: check sb_set_blocksize() return value - rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: Add -fno-isolate-erroneous-paths-dereference to bindgen_skip_c_flags - rust: block: fix `srctree/` links - rust: cfi: only 64-bit arm and x86 support CFI_CLANG - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0 - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects - rust: kbuild: workaround `rustdoc` doctests modifier bug - rust: rbtree: fix documentation typo in CursorMut peek_next method - rxrpc: Fix data-race warning and potential load/store tearing - s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/ap: Fix wrong APQN fill calculation - s390/bpf: Centralize frame offset calculations - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/ctcm: Fix double-kfree - s390/dasd: enforce dma_alignment to ensure proper buffer validation - s390/dasd: Fix gendisk parent after copy pair swap - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix memory leak in add_marker() when kvrealloc() fails - s390/mm: Fix __ptep_rdp() inline assembly - s390/mm: Use __GFP_ACCOUNT for user page table allocations - s390/pai: Deny all events not handled by this PMU - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - s390/vmlinux.lds.S: Move .vmlinux.info to end of allocatable sections - s390: vmlinux.lds.S: Reorder sections - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/deadline: Document dl_server - sched/deadline: Fix race in push_dl_task() - sched/deadline: Fix 'stuck' dl_server - sched/deadline: only set free_cpus for online runqueues - sched/eevdf: Fix min_vruntime vs avg_vruntime - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Fix possible deadlock in the deferred_irq_workfn() - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Make qmap dump operation non-destructive - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched/fair: Block delayed tasks on throttled hierarchy during dequeue - sched/fair: Fix pelt clock sync when entering idle - sched/fair: Fix pelt lost idle time detection - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts/faddr2line: Fix "Argument list too long" error - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scripts: generate_rust_analyzer: compile sysroot with correct edition - scripts: generate_rust_analyzer: remove sysroot assertion - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: imm: Fix use-after-free bug caused by unfinished delayed work - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpi3mr: Fix I/O failures during controller reset - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: scsi_debug: Fix atomic write enable module param description - scsi: sd: Fix build warning in sd_revalidate_disk() - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Add support for Hurray Data new controller PCI device - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on suspend - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Correct system PM flow - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: host: mediatek: Fix PWM mode switch issue - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition - scsi: ufs: host: mediatek: Fix unbalanced IRQ enable issue - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - seccomp: passthrough uprobe systemcall without filtering - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Fix flaky bpf_cookie selftest - selftests/bpf: Fix selftest verifier_arena_large failure - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Test invalid narrower ctx load - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: drv-net: rss_ctx: fix the queue count check - selftests: drv-net: rss_ctx: make the test pass with few queues - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt - selftests/ftrace: traceonoff_triggers: strip off names - selftests/landlock: Fix TCP bind(AF_UNSPEC) test case - selftests/landlock: Properly close a file descriptor - selftests/landlock: Remove invalid unix socket bind() - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: allow more time to send ADD_ADDR - selftests: mptcp: join: endpoints: longer timeout - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: userspace: longer timeout - selftests: mptcp: join: userspace: longer transfer - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel - selftests: netfilter: query conntrack state to check for port clash resolution - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: lib: Do not overwrite error messages - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: Replace sleep with slowwait - selftests: traceroute: Return correct value on failure - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: vDSO: Fix -Wunitialized in powerpc VDSO_CALL() wrapper - selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing vDSO - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: core: fix OF node leak - serial: core: Fix serial device initialization - serial: core: Restore sysfs fwnode information - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: remove useless enable of enhanced features - serial: sh-sci: Check that the DMA cookie is valid - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - serial: xilinx_uartps: fix rs485 delay_rts_after_send - serial: xilinx_uartps: Use helper function hrtimer_update_function() - sfc: fix NULL dereferences in ef100_process_design_param() - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix recovery on rename failures - shmem: fix tmpfs reconfiguration (remount) when noswap is set - simplify nfs_atomic_open_v23() - slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts - slab: Fix obj_ext mistakenly considered NULL due to race condition - slab: mark slab->obj_exts allocation failures unconditionally - slab: prevent warnings when slab obj_exts vector allocation fails - slab: reset slab->obj_ext when freeing and it is OBJEXTS_ALLOC_FAIL - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: always "instantiate" inode in smack_inode_init_security() - smack: deduplicate "does access rule request transmutation" - smack: deduplicate xattr setting in smack_inode_init_security() - smack: fix bug: invalid label of unix socket file - smack: fix bug: setting task label silently ignores input garbage - smack: fix bug: SMACK64TRANSMUTE set on non-directory - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix filename matching of deferred files - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smb: server: use disable_work_sync in transport_rdma.c - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: apple: mailbox: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure - soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure - soc: qcom: gsbi: fix double disable caused by devm - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: pbs: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc: samsung: exynos-pmu: fix device leak on regmap lookup - soc: Switch back to struct platform_driver::remove() - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - soc/tegra: fuse: Do not register SoC device on ACPI boot - soc: ti: pruss: don't use %pK through printk - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: airoha: add support of dual/quad wires spi modes to exec_op() handler - spi: airoha: do not keep {tx,rx} dma buffer always mapped - spi: airoha: fix reading/writing of flashes with more than one plane per lun - spi: airoha: return an error for continuous mode dirmap creation cases - spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND - spi: airoha: switch back to non-dma mode in the case of error - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Fix cqspi_setup_flash() - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Prevent lost complete() call during indirect read - spi: ch341: fix out-of-bounds memory access in ch341_transfer_one - spi: fix return code when spi device has too many chipselects - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-nxp-fspi: Add OCT-DTR mode support - spi: spi-nxp-fspi: Check return value of devm_mutex_init() - spi: spi-nxp-fspi: remove the goto in probe - spi: spi-sprd-adi: Fix double free in probe error path - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - statmount: don't call path_put() under namespace semaphore - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - svcrdma: use rc_pageoff for memcpy byte offset - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: cache RTAX_QUICKACK metric in a hot cache line - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: convert to dev_net_rcu() - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcp_metrics: use dst_dev_net_rcu() - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - tee: fix register_shm_helper() - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thermal: gov_step_wise: Allow cooling level to be reduced earlier - thermal: intel: selftests: workload_hint: Mask unsupported types - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power turbostat: fix GCC9 build regression - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools: riscv: Fixed misalignment of CSR related definitions - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: fix string attribute length to include null terminator - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm2-sessions: Fix out of range indexing in name_size - tpm2-sessions: Fix tpm2_read_public range checks - tpm: Cap the number of PCR banks - tpm: Compare HMAC values in constant time - tpm: Disable TPM2_TCG_HMAC by default - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - trace/fgraph: Fix error handling - tracefs: fix a leak in eventfs_create_events_dir() - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tty: serial: ip22zilog: Use platform device for probing - tty: serial: Modify the use of dev_err_probe() - tty/vt: Add missing return value for VT_RESIZE in vt_ioctl() - tty/vt: fix up incorrect backport to stable releases - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: fix deadlock when reading partition table - ublk: prevent invalid access with DEBUG - udmabuf: fix a buf size overflow issue during udmabuf creation - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Don't rename vmap to kernel_vmap - um: Fix FD copy size in os_rcv_fd_msg() - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - uprobes: uprobe_warn should use passed task - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() - usb: typec: tcpm: properly deliver cable vdms to altmode drivers - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: introduce macro for ring segment list iteration - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci-pci: add support for hosts with zero USB3 ports - usb: xhci-pci: Fix USB2-only root hub registration - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - usb: xhci: remove option to change a default ring's TRB cycle bit - vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues - vdpa/pds: use %pe for ERR_PTR() in event handler registration - vdso: Add struct __kernel_old_timeval forward declaration to gettime.h - veth: apply qdisc backpressure on full ptr_ring to reduce TX drops - veth: fix data race in veth_get_ethtool_stats - veth: more robust handing of race to avoid txq getting stuck - veth: prevent NULL pointer dereference in veth_xdp_rcv - veth: reduce XDP no_direct return section to fix race - vfio/pci: Disable qword access to the PCI ROM bar - vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices - vfio/pci: Use RCU for error/request triggers to avoid circular locking - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Fix kthread worker cgroup failure handling - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: Allocate nonlinear SKBs for handling large receive buffers - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix grammar in virtio_queue_info docs - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-fs: fix incorrect check for fsvq->kobj - virtio-net: drop the multi-buffer XDP packet in zerocopy - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - virtio: vdpa: Fix reference count leak in octep_sriov_enable() - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock: Make accept()ed sockets use custom setsockopt() - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: Allocate nonlinear SKBs for handling large transmit buffers - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: Coalesce only linear skb - vsock/virtio: Fix message iterator handling on transmit path - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - vsock/virtio: Move length check to callers of virtio_vsock_skb_rx_put() - vsock/virtio: Move SKB allocation lower-bound check to callers - vsock/virtio: Rename virtio_vsock_alloc_skb() - vsock/virtio: Rename virtio_vsock_skb_rx_put() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: Add missing include of export.h - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Avoid vdev delete timeout when firmware is already down - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath10k: move recovery check logic into a new work - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: add support for MU EDCA - wifi: ath11k: avoid bit operation on key flags - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: fix VHT MCS assignment - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: restore register window after global reset - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: correctly handle mcast packets for clients - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() - wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() - wifi: ath12k: fix wrong logging ID used for CE - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: add an hrtimer based delayed work item - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cfg80211: stop radar detection in cfg80211_leave() - wifi: cfg80211: use cfg80211_leave() in iftype change - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list - wifi: iwlwifi: Remove redundant header files - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: don't mark keys for inactive links as uploaded - wifi: mac80211: don't perform DA check on S1G beacon - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix key tailroom accounting leak - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: restore non-chanctx injection behaviour - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mac80211: Track NAN interface start/stop - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt76_eeprom_override to int - wifi: mt76: mt7915: fix mt7981 pre-calibration - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7925: add handler to hif suspend/resume event - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: rtw89: avoid possible TX wait initialization race - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() - wifi: rtw89: obtain RX path from ppdu status IE00 - wifi: rtw89: print just once for unknown C2H events - wifi: rtw89: renew a completion for each H2C command waiting C2H event - wifi: rtw89: wow: remove notify during WoWLAN net-detect - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Add SRSO_USER_KERNEL_NO support - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: KVM: Add support for SRSO_MSR_FIX - x86/bugs: Report correct retbleed mitigation status - x86/CPU/AMD: Add RDSEED fix for Zen5 - x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures - x86/fred: Remove ENDBR64 from FRED entry points - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/msi: Make irq_retrigger() functional for posted MSI - x86/mtrr: Rename mtrr_overwrite_state() to guest_force_mtrr_state() - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/resctrl: Refactor resctrl_arch_rmid_read() - x86/runtime-const: Add the RUNTIME_CONST_PTR assembly macro - x86: uaccess: don't use runtime-const rewriting in modules - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86: use cmov for user address masking - x86/vdso: Fix output operand size of RDPID - x86/vmware: Fix hypercall clobbers - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: drop SA reference in xfrm_state_update if dir doesn't match - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: set err and extack on failure to create pcpu SA - xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix a UAF problem in xattr repair - xfs: fix locking in xchk_nlinks_collect_dir - xfs: fix log CRC mismatches between i386 and other architectures - xfs: fix out of bounds memory read error in symlink repair - xfs: fix stupid compiler warning - xfs: Fix the return value of xfs_rtcopy_summary() - xfs: fix UAF in xchk_btree_check_block_owner - xfs: rename the old_crc variable in xlog_recover_process - xfs: Replace strncpy with memcpy - xfs: set max_agbno to allow sparse alloc of last full inode chunk - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xhci: fix stale flag preventig URBs after link state error is cleared - xsk: Harden userspace-supplied xdp_desc validation - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Bump release (build with LVC patches)- fix typo- Add LVC patches6.12.91-24.module.8812au6.12.91-246.12.91-245.13.6_23_g28812au.ko/usr/lib/modules/6.12.91-desktop-24rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-all --param=ssp-buffer-size=4 -m64 -mtune=generic -fltohttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=1ccd1ff06e5f83c02f3db87ba6f55f790013ead5, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-8996c764fea49132e3e2fae4bb60d436a2452501d7bec078d52f84764500ad140139107e26fd21587de0b962c3f49a8553d3044b96bfd7a8c199b0a396b727a1b?7zXZ 1!(T] crv(vX0q(&HZ U#bӰf:X\/wC7xjn)N*=GhN>|0#C ^|||ӆ<%\+-ЕKZOL:2Ċ-U;vyi; NzN/L/CHk'l[@N\n+^a_ Sw?z b9rLbgerahJxX_b{L6'nO\o'aLB!> |`&wa}79+%70#[4EWmULIY~ZbXE|zX!i`W}n;lcFpJ|*k)?mXVE`22uGDh jQ¹_C☘X1`#pHc BSC7ѱ{_g3o:F ȉK¦Sý|g; o1Ӓ0N(9)1~Π0!\3ZBF̡'DIlp3?W_C<†&ƬPo )}ˈB'p^%Su9yh=m]qhUa)zedj0Q—WeqX<}СHv,{Iq>gѳm?Y_KJFVe,ʝme7uxrc;t%oػW] :#3h0x7ŷ 䤱G΂$]4%~"c4XyMDpp~GWf|lX:i\vSsynY%ߓ}ACҩc<|kw5SS+/5qP4/C-Hdh Esl+2@ hժ5#hܵZ εw|$xb6d9.Euyd$[f@5f樸9Pr/PS6LFs-+&a|a sk#a\Tf[(Nl})ƇjL1En<)iI'JByF;ۣgaë_;~ty2Ap~^ڕ覘)t.Mm8щ2xܿX4E\@ s;XM0v-했̓Kp;v] j0A bHt'`~ ӘW:F{e2<>xw(%x-5Xm WĒFqf$ܭq8ڛ7eIb˱J>DEVYy2zJ P7"u!{qNbiUًtv:bߊ(i^>_:O&%M|DfL-pXiؾn)<5ɦχ쓗zӘd⩩ .VdڣJA-;gg2#u&BAm*[TK| pECkCp#\tf|ZMY{h[NSB${~gO6& nJ]ܐ3݈|D>ͯ<ܒ$JųAVi'Ǝ4fABٗ2C%PCij]FlflL' v!"YHH .YzkOT!4Wwbv 5) fZ{:6YI3(Z#[c@x_M.QTM ޏ> sw`#o!Pd/'r3&M tI5ΔL8)֣ZއoU3~u\|g6he!S?nW+ۖ b¤/:V4!`µ1ڈnLСtYbO27DՑDJ ؎]f,[>Q; FMVq &benzer{qA!炦%\05M&~~ .&&Oz4g9>mo/ [WM5^GEz>ckk57Y||^+oY'wNY2^zts- e7 ; )S|K8_Csɕjk(=BM_K(n!8gLfU0I )D'ל3 [fЉwHQdp,c({4B>U#t5c!X~ݎ!G"uAM~ &vvnUXMϼ=wFm{'v?U5TpcrrAcAfNQ]_%Q>$z <-WyFU2nPkoY%rGW'`Q%ȩ3Uk9 g&NNV*2LjSfɽDmm _\X[4w֮m;#d4KYgDRW8 9hm EްhܱГ= )_g*dFxE,7>jMb%4"Dޑ^FwkaGcf{C?~|cO>,vGgыc;bn/6j8NNi$įsivjx]н2TUJ̒Hfy|uI1d:,TN֏փW; hx"p:qC{U,? V1уvHhnضt^u`|QeG.*-lȍ\7mnWCVS2[ aȲCjL@X!cAԝ`TB Ćf~vdyH85ǭ^r\9h$"Q6-.$hzC%jl x$[rtMDVl[L}"L +Oe2Ӧv?blW=ЖVDa8/ȬW0-.[q?7"xO!bϖ}9UPټyqWd/tР^_ };ȣ)3^4#F *`;}/1D#O2+-3!A1)w/Ҁ:D{j~i?S9?FV3h y(U8\#, ؉jI4Nr[))iۦ/ #\&e1KApu"2& ګYp>hRZ}, $'b"' i&C ј3oy}i]V%w{\6G 0*wvDVjFUܦNSU/2鷱m3DڅwŽ8L'K=D@=m]đ'A"w["].}-x[[i(ñi\&׊*Y2~I_{Mh:aB3|bԂnuN|dQ//0^#tA*F>D?0j&Um.@C 8EXNG>'PzqreɥCB:Y U2%l#i.ߔσCd֕䰋m{"^p<+rwHW_C-glo"&gxTM򧇡 !72’O'R?-Q~/ &xGC_U{SFQO*m|e:!"t<9%* ҵzZ2Gi#ۧTpQ{MX on&$_N^ؔOݙ `Q? 7ܤBS-NS3E߇0 oe)jG<cU~c9Чl(%&W-1i:99!xSZpIBd)7[5hM!uzJTX:L}MI$SAYzOkqX##5'bFײ+ScEK禤hb03'b(L{9Ui"XA1$(2$M(f %U&PdYGWvݛwPoMV^;ߝh\ \ڻAvwc:~*x4kp*FP?׾5X$$ЌdNE*ȷp6]ҸL=S}ʿX>K,yf&.ySG Y}1!B)<@A,%"q;6}.P̱Ρbi"'HkQ-QP\nT׏D$ CIrGw{b<˲ۚ,V it7v+ "|E4i^Žf,jb5ti&_GXHQkm8HPZu3<\hmj_EI9gvWK< oV8Z6'IjQt% ]n\oLH:{[{߆fg쓰qtu}|{vd^o)t~,9_tW!U_wfp (u)D":y3V0Z(W/[CDd2Y Kj'(3Ō1lK'a~x*,O?hhA<3! Roї"hYYWf+F O~~6!ӷ#z;٩¼X4ؖ( <d5hbr8Vc3V!RXЛ>U8<`#VjQ7H%,իi%EkzZb~UN^vʥ[Z1w26&Kƙr$$b/7#>MՑSI>D4R4^@@/}̔G dH \ۊ&m'Uk*U(V]W;.R\@}P.ȣM]P.-4g9"._EmKd=RX0Ӿ)fhK>/Z"G7Xmu,-X}5}JLF tZy=g0fI:DJ%6'E@1Ǿ8Bݥ:SJtu6+KLfl,ZKC"/o(Oi+kL_Yg^KzM+>v^h/:|v7{0"+16o=Xevb8Ћz ]4Nj4+Œyv]O_RW1Vlj q Q@˘ kP?1O`~*Iƕqs@*&L7 'WD7 Q"=Q)o5z %IA<#rX|X @TXKGoZWٮ,6'gAYD[zE^ "W#b)*Z}zJYC+*ZQ0fr$@h/° !g{Gc#= @D| 1]1V|1"HQxe>Į޿"mpte@տ"f›Skt ۰M,QUp7pJgǁSʕ/q @ml$@sUBC=l6겂cnvGAg+SZIa=֊k%>%!pNFLW)Ye 1D?D>>S'S;?DB;ǂ;:UJ6AJܔUՋ PO\4¦s._%2YAZVph9& M;V-\ 4Y>rPit]Ԥl_' _b'N&>kAbhc%g:qvF]1j`"Ggrj >1x'6L&rT<5aD-'"YIRmEsrU(b:eit" Pb;@$Hxl]>JUe s]@t:Mb:fE;4_2$Ŵ#^+os[JIZ9VH+Hxt#YVb'7-9-T ;jEW"vAb"HCwHl]}S%7nr'IX-%z7}') ɠ K]XJPPCSS^|a[Yc;K2fDE7ߕ2?Ti;YyiBD뷶g%uQRSԢ3\BW)rK'dU)OСC\r-CSs&h׭<#cuTc0һۏb/3`nv#XL#JoowQc)ت0y+b9 ,*C9qy‡}$pm`D9ȉiQ~{E<-JG/%SJV ěm?lenGT!?q&UKRl ۛ^kU+k5$[ճG,֬ kcA茥'uѤ&fޡ{cAd_ Q||9S#'k8E :}( VxԭLٳg rL^"?(XcYƁA 8^̉3S;ʚI3wDOB GmHZV+詊ot OkCgfC2Ri0@}&)ۥPkxZ,;m-(b\۬X Rc>>륲><mdS Wb-SgiE`7RSsDh9$~ (MCCވ9&0)a]p)Ià^oeWË>u'fP`t=tEDd^'iO֞PX{>Wy 7nXZm݆8r7EjY[Ilj |׍0hqӣJ5͔SL^"v@[sy6;| =R%/=[l\Z*t >@Hj*\?L)mnzMPbo36vPdk-m!m1u'fWɗ̌XCYB;Zθ4Ch/q2%GC:4񰳶bЀV6CJ]qT΅hp(VՈ9M b'# {ң[fGh`q4v;|"2b}mGKw5@sBgI  *;qF֓dr;t3굗FU c\UxŇ&TqڥIu7J(30;;qBBWMn<.XrF͂UmٯiGq+yWVʵtx/-U~塚[FD`}G1։wդVKfsL g*ٹ%g[5Myµ .oL//s"FtċK6 /A9rfpޮ2Ju!=Y.g?ˈm0>mlB&P$])|WCIKC$5S`dSt,3yIRhiۊ7poQś~V-(0L{0$Ip)Xo&z]t 5w\2evRVeL~,2!EsO4AasgPpo\z)U!joW(ط<)SM{bGM= ߠ.aPdi^tLLWRvX G۱<5"'zmNj*82,OtDKM?.-f'WͩC`Wf6㈐*VL9 k 53֘"TBi3]j?^,^9|s6 + W㈛R"\L!=,ɗcr9:f6 šeu׳,* ~g}~Z.;B𽙡6cg>~GB] 헞:!N߻!@Y⤘s1}Y!<9 'DOH K6_R 3}&ğd\rdQ)RZڪ"u 痈4& NyKb:0Qz6|~RK馊c_j@rpCG0]~x/'e6c~S+#4(`b/g W gٍq6tJi j#w7iY&WU(wsR>ǐ;JشbYD>ÖL?*ө67]iI"?䮋/Bk]`v3\եoXw9`| j[@zoABRӄ~P9Nm1q1wS9-˓8j)6; d>у&[cE,"C[oˌXonN7sx&|bvrG3"ݨqinwS :C? (\Glb~4;$i`.1UM2ZnF^f!TX6-+R,Ty:Ԟ:c4@ x=M8BPBK^i1麟ic% %ZS5e ͒" l~Ko͇m%oJŎ[bVi#JWnо H<,R5sPn_.E?͸ G7ۻWYxـ\gv1}.-yۯqȏ3Vl+yz~AxJrѫ?@3[%'ǃ?xq\dbꌇJ1m!EH12o3RL֔W)ʿRߞ2XΟDW&#Miѡe.5KBŞe`B+Y(1/یr1ȢPO2Flb >M"89l4OmQP2X22Sde,IJ[=O #|0j4U,5LAP-_9;!EX[a 4O3=$0)a rӅ찄Gx8_3&bY fɱaZh\A0QѶ2{^-f=*Yd$ECOE5E 7W~Q 6Ўk;\T;R nEIl(MF¾fگ>Gfc#122Y_ZqP/A^dPfيW$;t f0۽U<IV~Zd)2ϻ3Sޞ  7tw[YF"*,m@e6Z`վ@Jˑ]\ɼ;8Aݴ!$&9y.VӎbEkE+øtҵ:ߎۋ6 Hӄ2&I.(o؇>|""ЀB-|;O=ʼnфTh)Bh=r?9:X +L)z+7չ̪%$%iT%!L [AF)\Z6Noc4ģ~_SְŌ3Y`&kj^T,::40ľStyhfo䮨~N+c.(  gT&bp&PBX\e;Y&L10~PCS/|՚M 3-CKEv ]29w;8KMԷzMh$3d9snȍrX P(Hdu/,cA$Z иZ>8KIh]f뇽t9- 4RdMan.6sH1d-\Q xj&X7NNٚ}L9^':-X2Xi}"{}qB$,)©#񗙦$#&=>*)9qK|c9 >>vԌJF|% 2hIpu/_͗Qń̼ٹBɀXvSXIŠO=BNЦB+5Y֙> 3"Z3;E؜P8`Qj}14`JQ+RKk scNޘTI(!i8k`Nm:ޯvVT~k!JJYoD32y*5R1t{ Sbx#МV.~GW]x*B#47K?lՂt E߸A}CVLrweAM ""9u{gs\|qb⿢a. Vo)w98ٖwꖄ\M'dS+AM]PvO6J3|"*r' g㉡'V BQE'̅! Fb{*Āӓ(L+Z-am!WP"jkvuKoU6 X3+J(یhbJz{Rw$C /V}&6ɀ3UI n4"ʲ4Ux1:ַW3%d^`抹bFMyKa+R}mEP ON ^B>w1ܹvӮeSpU;hىt.d~뮾SɈ;LuLn_JE|Dr[e^/a5&HVAtO ܬtHv]S]n?PRIβqqo(EhhE<ǔx[RF-jɌߕյ|HT%S./n)֥^QDGn3]OA+'h1Cu<e'Qur˿ȿY%`e Ο9~2FCe(s8 YLMZr_HJu{,Te=<Ӫ;,Q9'l++Sב!h"u}\>L֪1TwiߓQ?9l)V_$wȭ1ӝfT8_7=姘CN6pm+76C$D/6DUd7;o,)-S[əkRt܎~f 8pӮawst$Ţ1oXDP^l?eUF@[ gPPh>v=*#u]XӍ^G,\꼎)qbA:n:q]vCR,"lDȲ6lYP DNPb@xïo}Trx~_'v|pY, /FV,yC*^8wPwW; ϊ,Z/XFܲ8#uӊ2-r8W1Ltbw$ɽK2J^ڹOgx}}NKl_z2дBVɞ߃Yw O[M8X(>K߭%t"wkO(;+pGDɓL)nV,LY7 m9*؏9ˤsjGb q]XK+),|o%ڄZ_"愚?N5?9*!' ?$-̶hPqeڥ)CҌf=˄78ZKTQ8`;gmZ`5^^  tB@J_ F\-nQNB;PuļJV٦bTqhud 0%aϼ8$P&d a$ >-\*RpWvh 6Fw9Xzsmڴt PX =N є 6 VVfʒXD]vmJrH~Z%"|ŜP8+Jc+2/pz F,D3=Jj.g`rDr\7Pa?83+p[\" b >6yK~ΐJTa-Tuz{ a ʽ\+]ko }c|}TcdM]'Ӕ]* &#-H~ [㲺VȹMV5WWF]қK{b1qc4>Rn鞕vԋz.KGCs*9? /M& }Xd :{Vg.>B('*d$U_֛7+q൏ N\EF[_ 3VVf^YW"AtMԸ\0 #5{C 5H(MRI' N6W(j :WU;9w?'" p(&n &9f߱x!_6t NW~8gDŦUld+CHjX\1܊9\6%Pl_Hry422ó=V^Yoi1 *?ќ6~=Xq~Ō Ydd>֎.W \M@ia=&& ! aޜdN/4_J׫G7Cߺ;PZ=|O!0osW⒤{~6` vL^Hܣ)NF#Җ>X|R9}Þj@D>4+.qr2/ovWha>QtXJ#7srCkp}kڣ]7lVfˊYVWoGNUN4Es6Vj 'b)8ᙳ,!XD!яuLKN =I P9" RE_+IjCjֲm.Ar@|{vd޵%3Gϧϥ̃nP× ۻS̠=2~&(/5w\oHiG"j^&{?N)6ڰ?q{shގ$SjƹX;J`gbWBܙ,0e9Cc\S `EN3 4n2Ʌy<Ŷ%OI.p5lHa^|orCbm?uEDq~: bwcL B&ن/70 {6yp8<@= f&j;2rh[S$ݐ\XDSUr5V)͍bN^IXԭMjE >յo-nPFrNW;#(n(L X4'Lf6_0SG#Okѣ2!WH}yXmoCeM2z#/+4SIv}XZ* ܵa3K~^3iN;>2xg.ML߿NRje`6U3BK<ؼfULx.͌|;=ւK8COe[SXG#u #RX Jm?E/$;JfԼF):LhJJyB[ӀWbv䊚5T^s {y|-]K43B)"*x/h(ǔ-;H^/&:Y$$.EHp0PHsuWNAG0Ï焟 zU*7]9}X$A6{`'Ȕя N)v'<#6{{c Z+Vy3j1U ȈzƇò ||~TJ}ˌzw\%%5Û<(ҸtY\V;r =b 膁(|s>cҎOV"ȁ 5 :Z"dbqnj.8-Ynj5r+8qelL!ٙuttsD6 iY;=XbeǨ YLrۛVꖔTXD0.y9@7]gz&TuD鰦="G# TAoB5*X&+x5U@-DE%2LႯ/٠oS3\1YfgT.i@ikirxҜ!ʛz߄ 0)9zi*Ot,@le:ŁkNZ5RX!j2oHޥ\,F ^/WwLvbI/S(IimtCUՙ*΃c2?2{~CSzw[4̤'XU?C.i&g#^g:.}RZ>#Ԟո{zdsF5Gͨ0u+oM0o |.nK %pzdov"=TʗFax(f݁PsHe$)awakCT ^b}A T"_Mׅyr}cHq^ _##V"&IIxHAQJłMl"Xt^IbrWjP|:%@Nh}OG1-E}y ,J莐W@ kN130/D`B#wqS2>G:Ҵ`r\* ]Duؒ|=کMltz-;举, مx^i $.(4l׻Eo5{ HmRz}z.!UJ5Da [uYrGN8KS0? 7tċ {dTc5WSWp[Q 0ө `<: /,@L;e}2 .y1o`;r`7>;p&w-"ł X↓հ+K 4*@\c37 f辴9\{X"jGm-_82RA3+{- |g-Qt2x@Z&.R HJwޔJ1S/4$1\~b)QMEA8 gOn>m݉ QŘ|r .B85߸孥ETY(T/5e֞Q$` ܪ"e0:C  X#.iP(^.O簿x|{he/[{J%YRF p˜U 8sC6) YvbW@TN8]~ g%iZ>⋞n+Ja'6<u$XF?9)A&d6fu[@@F (`W1U\C g1(14cz<ܷhQo}Ksn_2:ۓWOmj᪓oEC? Zk>&2nv6;.,2{ᮬ>qL߈#HQ7uELcvgmL_B"ypvgOWDB\o,bDf1 b:TXPYJwޗs]#6/Kbf9!BGZrTp2|te buZ߃V7$/?weba}io}'Mac5QtdVool5d7r]V"|t㦊 hkų2}%I J "ʠEd<|U;KF0'nej19h\0awMjPg(N[8\t:tT\G⌍(/=C;~,ZPF2Z2-C@jMAI#T7#G?IxK3K4sl֩߷>ӑC@"eӡS3;3`Na K-;yL)c__J :oRkC0İp d~u}7`cO5:ndS?J u[fYOQrך>%0g |O Ja䘦z /”;aaѱm&hg?;)aϐ-LJ_a`dC1PܶfK=!S`4)$ ](w~13T92`2#ьu3[}k}1Qܦtξkv{l ˾|nR,aX"pϺ:i8ިYvTNE*hE>,~ 9G֕,oUvzP e$l̻ bȡ#ؤ7}%韰} Ac9'!,dC֙–X&cd0}H kx;`! EkeMߴYFcErǡkkr%[9u Ӳ!Rɍ Gpu渚3R6:mUdsJ9TR|0ȪZUI^ 蹛OYG7AT F{ނF13:lF}ٮL*ي)zlGR.c<]cc{7$`5'@H\yG;v˅ǖn=#jݕ{ ٢28EJDXT34lIN u8N3Jřma;[k9b}"M9Ue+@RŶEG6 Fo1>U%s|6;Wkn9 rS>TgӕޛJM^Uƌ ҫƐ> ;hfUU.4GaLԆnZM`]f+5; @ BK =sto>!&qXf.yɗ .Q@KxVIeC=~̈́*L)Ρ8F%y~#COwF8q\yNPI2T;JNٻR&/v$^\1>'{G)nM(NDGT-c`\p ++JR $@Z4mi 3^a"g˗d皫DL'B/fD.5ȕd2h6kxp`y'Woij AkN 3J\DT20ԁXm윑Ał.~!_yѺ`FLpYq} ,.۵ G{Q,%wB30綤8y^h_TkSJ%GO8+XASw7~PIV( TOCdK uɛ2Q/ID˔ qj#-rk11j7' N႑ǥ֪NOٯ`ȺSGd=3y%/?zԹ+W=FS^Q0[[@*7JZqr˫S6% {W n-2F2h+N[32SޔFy[M{b^@B"ҬMTԊ&OcXf+7@Fu`Sx3f;׭@? yR굧!#S))[5)bIgrgx#6Wd~[I"`Ÿ*])4!úܡ4 H;[=Fo$,f+NqځpTʻw`\;]תu lGLs4Ɗ[j#8ANh5?!u3K*|;BB z)6|mI *e2|og#}h[̭\, Ξ[4CW]a>lR}4%h)&fci9R@ bS/1},*۽b#S^;jQMh}@ $VM[P> .1{sܸߒ͍LʏGLBQC\eŵ"9ƄS*{L%C]@񿺾† xBhz}h HnPB #cP,F^4ab&6]lLFv!ҁIBM5adN΀ Bh#P|~ QacB ?ĝRƧ+זcv-n)(y+l9&EP|"B*IҹwT<+2Tq', |8߼…?[O(P9%;CaP"a^JdK<7 7O? dN.;T;/7C_)U H_A{\rnqOȩ, tXP^z+[Q?(1ď6ɧۤ<$!Yes}+&TfV܀ -y"Y8X<+9\-V(|$ߒ'_2SQafEw:K'- '4թ9`G?7},*P 9?.$'Nm>Ebȩ. En$*K._W1G7f49r*Xw6hD5LZQTner:FM0 ܼAO8x%D ȕh |0 zG{8'yΆ/`~.n띄_ {qy|I6)sW_?brDYp}-xaǞ@&&rkg'xdʵj7 8pCbR*# !!-.H3L+$*5,=I_Fof*lt Ձ ˕'g6jvR߶6Niާ(o*NR }&,눛 ZxѸuI<'7t؏ƸMz}zutۤbo?@p+do5[6שZZٺ)$;i`̉#~+ OHe-vG8 JiXr`P[u^S˄u>ontί9xW`4cPI}N&t'k!Ծ.C(EZ*??ϭ3wD86ku]U8 MrWR :Iџ ߤ6)9eE&=IZɣUṴWVWZ4~'r#sۑ7~yUQN?'z/|U>IO[drc㰄,YT2"SЉo/DbFW._x5a,a))Z\g| xbZ\ &ƫű_v V~AF=(7|=aP1|=cdM^Rl~}6< 1*\K|'! ?~OS#B?+$a \@wLXjNw G s1eUfV[@EClgN'ʐll>`c{cfRs/ԮL&~BAu)ժ0ҳQe6(4=T,ZygP+ad'OGvயJh䁓K o-D2%spˋ"|' cU^@b`{gԴrLS3}z{0m6Gî=Vȯ\ajzmtMTO 2MvmZsfD==Ӗ>6׻[;ۘhbnvF4#I ɺo7I]VS_^Pnl~"}qSۃv;TKpCkU $q*Uuv+懕am Zٮf-Mv9AeݏT~ߒo `*ߠ6?ڭq RY3Q23&É)#W~Ad%t>Kr4}c#߃A!\>ՙy] s3{`{d)$:Z״t$ơGUo+=dU_oz-FI(Xm HOZٟm Helo,XJc`Ϫ:rwEň+HXӕ,lC?5Ie? 2L^,+Kӽh% ;V>va Z1H"IJ(άa7ѥkHZrva6ZWxt R'$8F'6ֈoN& 1sa0o7rXfs}:^h.J{I?d[$3UV/=wN񀼓mPLii]DZ7kp:jPQMZPM uJwc l-c 9^ʅ5Mk۝ պq {DF5%-K T+bcw^FT/11z) ,Ds8=3h&X,L/``VT$m hu!,Β~ ei74G UutBEȉ K^7(H8Ԣ7骗JB3% +vI{}ϦK JX|:hvØlu L9 IY45IFGS?$'߮AB2vO&"gei{jGi$PR|vIbk@} uEqLj?+Z|,To]b ήMT;x'ߘ V sB eNGe߲ BN__a~Qh/!h3B ľS%hF\ м«g ~$j^삤M[Qx?inଫᳳT)͓Ndl,Ω. {  csA6CTw =:,چ\ Z~pEV5J~S 2P﯋6ΑaCԌ A8 %sX*T1 GJG}*0CgޓʇC+NmqZgIme[>`FegWNSLxsrfrSL%n67 `3wpl0!YH8+E9 pt>H>=q頳n\CreAƸ&٧utV6%`:s oarĒ!H~/%zm} иawr%b kFkEahP5>{о6XE_ vu%|mfY֋,;ӏ}\q`=S\A{r؛)C/S"ńSpWY9EvGz$(P&>f+C?SW=T>4GC/i hmpnHPbFꝸs$]AnoD\滍q%D ّcL;KL@nW#S&<ƽ =uYo jKm i'5D8 vUljQo}6;{l,UŠ$ ێe',Ϭœ k'Nd IZ\"}m%r!B"][BgCt '3U#/!c4s.<<N}-8$iw=VVAn]tmEE L6M[[bݣIyF:Krd^71S}أ>]] tz:?lj=f[>*³z,bp^2#X~>9PoQUT'_фT`vd3w֢s̫ʲ/%Q(If0BJC XX+ H^һZϩݾxgOZN,9N#g誗.e:/K# {'0 Yߊ*zfG6dˑ4Ж01oExgxCOc[벨MT4JcM/=ٮ}-f@3XE!rh͓UO9z&tTGI:`lp-g*JJ8-Ք`~ZӠxXnnnTsVW u ӈnx2ٰř=a{>OfHzzqٽ ّSZgL;[GWB!l6c?5Xw1U^R q9QO4Yb\ HvL \.){ݳex[tF66-y$m(f?X*a3p,堸S}( B8_@Wl/i QƭThYÝI]S/1pae [M ߋ N_8 5HWԏqk*@'+ cp^qecJr|{"tKM-|r\Ay\[\ Juޙ9|`̈D n~n?m\?L/o=!`x0?)m*嵷v31kP͠%,UDZRbL|"ghϘ=3%wP?' ϩi`f5ʩGȽ93ǦdPh(nMY>PӀΗ˼Bo19{0SqQyYwZsOb.!ӿ.nͶ"~vap[m(oY=7GM^/7rUbR6{ `C7/0u!\렜~8qP|I_4b#@L|,L4 n p`'6Ȉ2'enTPM*Ld_<ѫ"#&l0y͜[ /Y]4OC{zoCr&>.>?v I?[t(1Tv{>Q锆~4co2κ9 'cIJ˦B ̒xI$_~%ؽ,Ζt#VH]{L!>yuRkAHӔK ",5w7s[R6ڃd͘⌲e&AB_9G_D0-at({ͯIZj\EM57N uQk:[?Gv-y=x+b&o;vNWE {SQBymNNhL΋18K l ggh!5D1ja[%/f$vtfr,?8hl$W/A>EKqKנ9v Ay'vq 9Hq-i4R.E2/6Ƚ׈ V,m 2%"e㛖nExܰ;b3˩uB-ҳ3eCg"U."bOv//U<lj)sz?~d` P8e5-ڳ,^%9<|u'TdbS~AKF~keǻ!wqk`B9 2d_YVlBa%_]Wn5N%g*ę)q^"ѢMT1g `{TD@I9;ϼbކ]ucfjM}F']ƯXig汞ɕT'{<0)AdPsOad_qa!B!M@cbp u rg{y}U10\Tϧr6cWf"md И4HKiâ GXLHiB{l\\- b2ۺFxm6BDDw ~l 4~p` ]u a\PESV0a+7&7CV:{RgRBE19gyÒ6yfv o햴SF%1#OwD:S`{t3]URI^CxPVOe mFO,/a(_Ž5Q@O*=aHg=Jv`923w҉2:zVnC9PxU×>u [38elҙ13 ̒_$'Nq`:_η?Q7:_8@N AWN _s`# v4y_S.)Bv'H$KG- ck>E|GڍX>čԭ[Mc]IWSlD#!]$3fG+V7ԞP#K9K"xY1 krka/}PX V^M̄pRX3BRr-f{̙& 1.xW' ArrGQ-5@$m15_$\yb !;4Ҝ2yP,[9(+=YT(l!_4R[ЈJ\P`D*oÇYTwW>T''mtQ16{«fԴ!c.f οR={i ȑ]1V]:xSNM~de3OKLٺC<{9$tHn^K| @Y;cCa vpWǘNT}9?UʃQ)Pd'2zH>-R.WׯݏaK@Jv a2h{FAp^pҜݨ3H:;WPh&Sd3(lۣfV*c0]-bCǥUFw~qm%yصR["SxO*" jXu sc8dg3@,<6<3'O;C`n>o;Ult D'@dGHgW?VH٘hɖ[  &0ߔۅ& knG!Md)Zb[-mӃ)YhH;%!u(sT(}3u:I%_n9 !68ŧb1$y-Gc_PWFmPdtM(Wb3G1x~k NR`8vOO$.4 4$Ms>t1X>N~<%Ja2do'I~u xiwXiR0\' Y/pp-IQ,? Ch\i lzœłA~+Ƣc ~|Sab zm>#<::Sޝ̮߬FJMj.'IV%x|k_[ܡ48}#ą47p@c0Ӗj'|ǣ2L1*x06~O'_U z5Ek68T=>k2kٜ| #e 3GkzS'$,f~tATk3GWqR^2TsaFSX,(!>*VDqmӕRz:'ӓWg[M!5SF&ɞNk*BPM)Ux^ŃnՑaW|4 ;ϡ٢"@OZ)AOxFEO>w5i -ai7RDvx,/7٬qΓz|n<B\lB]><`Ocն$;aR̔ǑT3Tuoc[`YcYasI ;S3K|;]]HGȺs]uz(ab1 '1=vFR"'g,ho< Ww Z_Z]}-{"k`9oTQQy&kSCwSG*XnL~rZWg$xrAC^|\#=IXfb[NCjQ_Oʳ,ؠ(HA3fa}#&C7@xG yl2DMN+\6mR Y'ʡd%nWa@E8x6 ˃\pc)PYNT?dM {piބ$yh={{eFwdr`v (``|x訋)pM"s+beoOWͶ4vFG&̿>nܸqWū'ntdK\>΄mD"Jv43y DZA`u&X+ Z1 _?iל‡tyG K|<ћ#~Rk!p8G4F v6BζFPlNx5t: yKgT/dRQ p% _yfyEy4˄gjoThp{#z ]6+GCO2ٍ`IA)/Sl#RoEP}90L-XewHː@D$$%Yx,s݋Aܪ׌M#ug>qtF`e%#äGQ|NZ(Eu"MC؆ZNr")4M~ȏ5Q_b$̣t<^c̘ԌF@E_Vʇ?zd<5>F̊R-%U! N!ʈzqʍ`74!\cT yk&+0$+GSy^ jp{qAB0 MBb2Ȁh[QCQgS̠hjfdϚǞ)R]%^ÖV, {}:cBp*g3s)#ٻ6TW$U ̕[K# ꐺn-C^sa%1zDD&ޣȷx(#uK0yk%W xF0iDg^KA>5l՟ ȀU}qZ.e\I{ev2 :b[-r j_8ٰźT.hѲ p[NHq RreXI6XcsԀ+}r]7+Ԃ&n`5UZШC^,-Ҁ6מgtO(Wn<7^ہo?V߬n|b4^Hdr (fmsR>;Cg8޺I֙c:pl@VWzk8#| dяOv\iJz}x~3~lp{ .XLFY3RE^\~:ޑ.Mjq 'VQT3qͱ26^zC=uSD_OΕ6_,܇#߼(΃"|gv3{9K'Gn 7hԺ\P>'Z + =^bG9{U~WB$XnPhK &w=çå~XA7;z @݂#r񉡺&?e"p"~&v)͠TD@c 3N}FYhRf%9)pfz7E'ȋ"/A?bO [9+7U<"k'նδx9K5}m 3"Z.Jpat\W1!%x!OXP`k vd /6Gf9R&BcdZ;JL5+}D;E*:)Z9r?wvN~Tb;~L%^=,RR Kn+KWͳ/ga>R%e8."QJxIiKYjbqzth,ƒ̰h#`,W ,HY0w?3]sX.xn/3hmC5NM[t- Hٽ,[ઑ%G}=U#cvxτ{+~bQ[d0ME%1D\ }/dG :0sy6#{b)u-e'ε9$ύo;pWZqnNf{D^y 0MĨVكkaLp: χe2b*Ͽse3AK))Y79Lo.m~I6A!6 dU#K'FUq?q #qmT%C" 4n&k ɋ9-ȓR|=U=mLQރ9^'2 bNYu\Pb S`}˞K P{R|s["pjH%qRHGf0wF  Hn,Rh"rQ]č4]mV ^/Įr7*2>mn ^42>X`W;pاuTDpDCLhCHtL!Ǝ¨E))ȞjĽډLzl^r^&r]Q2ȷv )iQ&rԛ\51j~2,l& Qހ )#jP0[49cdff֘4g,J^w ]Qh|򢵀9R1m>-1(^N:Er!Dc>6Th~*^/AS *1"о "d{*p9 Qr-N"N\02W-G![En8*59O{{Lv̅|sH5 (jM;8xbh:U©s^W[\-%2._qq]MWkVK: oo~zt c綑zN 7tkeV߷`_-OOCA6 H+WG!6- 5ӁO!T{vJ)QZlox]Z ݵ 7yM|&ճf;#/Z9!ҶQ ː>Qд $JB;x;<4dS|ٳΏCRnjz906\~ TvIqe?>8; \jF4]k!"~"GW%z{N~͑PvLэ(﬍咻g͋y)?Mm )wFu}cכ>DFJې lQv +jz~c I:3 r3X)OI3xsx̲PB9tmN'QbX`U`r`ŵe/%0* + C-whTG|4ss{[:I|ylm0]ůCY &0*ʕvyg.?h n"ª"%+Dh9/-ݝZ[d$Z&)7)ʰzrKE٫c IT}#@qהk@22,G>ת7/+"KUyO* |* nǧ t D{MyRo J|ʡ!pp [0բ`7[<+}t^9yE\׏ڤx-GNTc9Q0 zYg}Z{zŵwOtBؖ]%[tӾ*yz4#LsRk9GjnAeEW [ӯ}Z?Y<]X?7;y0%\|0t wgda[IUӅڬ\#~>ߦvY!j i >ٵ\%ĔXuD є.3bqhBo% {S+{{kTpca.w)aKF޳mU:sBT/?p4ź&`h0%4]Uwkj؍g_Ll6BBT*hu5ߊ&$mB(iŌx:v_k*xb\h}okV?sNx}/9w1jt^&Ȋ_dr8&?!P{D ٍn=^Nvb x?-ljH9GmZ߭ |tA5W%gu@s]F:aHj'TwTkKo{;ONW U@TwjB7ן8#mpt/ YHP͌%{AzuRc ^Z[?G 1)Zb/h'>>8> P ;,ZĖ;^Hտ $T]m-%=:+5]zg:n(F=:V 21MBwmÍnƗyY 66vsYuw.#ЦY!:J }PiT5#.+AfecSB3^hwi:vU* pVthtcwG*PqFrErat io>9YgAv?K]U&cUAxJ3&3cZOx/rwx#u# OYܭ?>_hG&m@: xΙؑ:(DzuL{(fIVR(fc̼ U\7zѪ+52ѮAy&Eo3C /iÖN6Zsu {ACws!]V܌ 'u}MjP 8yJ|,?˼\S 7*MTaq}nTQXW뤧R CS`@[CU[rTZcDz-`9Z:Y;h.3uAU㺖ϸgC)ы P Yu7,c'9qZuo^'yM>MO-i$Q[*T_w:/,&" 2~p~u>̲c^7k.;#tS,<&Q`PLyRF;k?g_yCl ji~ҮCݩSj|h5ysi UCstZ iS 8oYuEat7RVU0,t|$0pg )#o Co{*̫1T~jQŀPuFR ^ʸIW>#류>LL27lPbHd^-D[9@,ꕪeQGz?۱05Y(2l]L\ g03d}e+w!LlՍOJߗIFIUldU@Fh+KƤa4~"QAQqB<8h^#fS*G3R I9+tPI!;3[iDgs[~iѩ{` $䍥'$J(j![~\9lf&Wh1s,Uif"A-cnegÊ,ғM >;H_.( v/зGig]'r6*l6 :4Zơ~;DGkTE<%|WGLF}f7bC١,-dT:xIXWY(2݁ZYc&lM h^-nT0B1V)xƇF rNWU)X{)_ nhjnc%*p ߍ#V[DLiȵns؊^_Y>(]e9*JAU0h/ySvc;ErP$VP^ȇ?M6 ~i1T.B}g!(JPʪm:s~vOcJoi}_ P! RI"ENI|]m٦/T:]˯+wp2u`=<'I츻s}Qng!Tگ7T ߐf/΄v.| "0x #X57Std2*3xc2_ ^;닝V C<`tq77]~[3llt 0R-k9%p7_-RF=n(?(d+y& *(\nXI^q校qcI.wP= opyV╆!"mb(3~D؄-ku6\j+4YXNgyu&ب'k,2\E4ԡ3" *.pߡPgͿ܏?Iv)y(U8lW}T=4gqBA߉Q!a2.)\ [*P#zJVdK|v+^ojҐxK>~7£&;#MuOqVʋ$3xoѢŞ,X{E: 'DHLWP(F&LXdטH,l/HŘݾ/`Pc4MLIJ˗uM /̹”lb& :d%D~/l;r/ecknqZ"fnd8n`c]Ff ;7@iZsA&m_1eӹ\)B :3fblїb0C?l׻ґV? snh3Ō2A'=2rLlT_j%qBTP}pp^(qK3q Q0ٿW0gm}P]k&Se>9V)"7H֏}N0P2-Wrd|WZ"+,| +Nbq<fâ&{s7%y8p!Zƈt/ej"Ta4T ]_Ȏ\e+DfxPx.ӷF ) ^G>c0_}ij+t<\ݞގ?V8jD#[^35 ?s1/i_*Tj$ZM}w#{oBl,Qc+6 |՜L=wMqQe%wYH5 Q*҄.?6Gd_"Hb6mR wz7 .nä+|b + LMQɊEAp.D*ɪ)LmgiDsOM:G itwn8,Dr3QE.N BdكK0+'[bgJLv Y`HdF ,ސ hKP05H2C݃L;jT`tk/; s?: "xzmno$5T.%H?X;vF2{hع/9Vߵ Gqs)KeK3oU2`Dw"BLn>#f4V@7{̜ #hFLr,N  {(iU,hOŽ7qX _04WRѲG<^ʩت[c%q;\ Rh{KkY:,np0[cҰ'e+'ojVI`.Dh0grJ(١#'a4D1ED:a|bIYjN t |wF45B3) K GFY5Uaק(yvqfzΖʖVDǀzl ?KM]?1^,%R?Seks?42-RHҾ?m֙[j}KW) 0bj݌إQ1w>7uR;^LTFY6ȷsбp rjZ6YXs6K(xz4`a$]_,R-{ phCK.Ql uc9MہiZtt qn^L\ 7si& &̀[0]O@6A\GO1Z |aI /4Cۃ GoBzXϕr mTԢ_ɿd^QӾ%"1 5Z~?Q*pcX׈s: NC$k 5w/\+p~ A- 'RI bW$J{ %U%c_`O1tt6'[# NawA\!Tr$]W-Q;۞%p͝d>Y77 $=Kصm*81x5v+dbH㿰WoB(G}{d%yJ7ZTpF^\=((T?#7Ce5@$I_2IͶcWb_\&"/;ՁHUb7iu'1aQM21Ó33Wƴd*߾ː4мl)/ÎؒLQi)z P%ǚuN #NJ[Qq8}i6MhOsNK4"E>47JTzunمi껛3Ssnf]*R޴ GH ¬aj*.{lS\O\wf~zvpц+j$S񯤭|R3T71`" (F:!yp+&1^ 2%t|"5OJmi9_. T g}o LCxYj"3o܀6,4T!(Q`+H}kxJ'>W#P_%ML\䠷ؗѱܢ2̟u=R{z|9z`X5R\Iaf-.}(wOst>4|x>.GcpZ: `jl!H6ӂתb7b4l%qis}ʾ edmE S16 FmT#@U1(k"Q.;TxZ|VB3M[ufUP,<&I(u]#r#o[G֩9O5iqNHP*ZǭiCb |PazD?Z/;a?aw}quƦ@N݄'R/ ^(; @tdP`a:xl0 bAaKIM^(iZ^ 8Xr^1j|hc@~N7(L"M涳".EY`MӂzrpͯO>=M OO@DG;0H|8|kc;Pʿi8CZķf 8k!9uDQO^DF:㆛~c;pzÀ, })`I\UE(A`ڲT4Tս=M֍)nQ{{} iIfJ$(M&d0 d5 V"`qQJ#ܟo7/"'J<%57w|,Pl(E$Kv#@ c*7v"~G7$?: Zr&_VUvoŽ7aXO۫3:ښdMyǙ#a]xme߲B!D.=2vX$ #*z9xBB8 Ӌ "Y{D`I N`O0@ĤT.e22%&Vi]I/XLT' T_mz nGH̐FoT8-{ΜM[J: 4$R%L-2VXaZ*NO>z ާA//Ω22fR9~q}E]UJHBxMء5負AX3?:i߀StuaI%$.'^GTO?֒5.}4r &`+-AZ.{'=[j_WMW硊*~U.)}>ɬ'n{P&Yu&Qy>(ߗCZ*o';e#""Dډs,Y9f@DNLHG\sʲ 7D^2'0i_G}V9m \LTot/( ?n8RRxç&o,'Bohݓ V)L$=X{a uQ!YKن1p5B6PFaؖDJ%^2Fb}y 6E;GsEC(X2@165GmhFF/s%ٜmHD^}.`MV2f7Gr^v7e'|T£8vRe sCH}&:"?ʆA>6\oABԍ=~QoY?6;JHy0BZƮ2l;FnᬇAAGBsby^ErR4=5y8r=v3ϲ/F5p>GZ mvu:FEؽh>=h"-]JePvz %~,t;JYbN|٫Gs/T$Lߍ(C1RByy)k/#8T"$ :im2yFS)8Ym,HonKufkgNLP} FlH&1?Vv|tini5>r/Z2TmY97xf8}nI'hjdƨvi9jDtq,y;'JhVH` NTHN tK?QĥV5Vs.)ftw1^%_Q.tyN Oz}Za6SuqZYSF`^b*} Y eWeWE[p"`~'KH79b(PrAy|:WՋ4Pцqf *%. h;mC 1|Eژkۖ=;ӂ`us /$ôB@š?F^dojZ)]˘q`}Jxy,LlN3K ^B@QBb@Qd!IF 'VoV.u⦍TM-Wdu%hW HBU,3щSSaF̿A0Z\D/ޡԙt(^n6Ckc(sjfƊr2 KA܏CAm[JK"*KR{0B2[.WU,DF/8Ax(F>#JROY>P ݔ7j|ݎFoϷBK‰j΍ Xkixm:"yW+w‚3Ωp) My,{j,Plyr{;Ύ+cHX% -$  Z0;L!g9 PscSUY͑J}Y|;Ql~cp[(VtyO'A`v3H1j D}O3jPc2WV*:-"*6 -OI*" Y]~YyZ??k!\ڔdDN@j]΅ z)y ّؒ9zn<"am3>P𷟨BUuiZ)>0K\lVCY5,\G1@s~\XLמ%7` {V=M׮>BGط䭰+uJ7ڧO&EqI@=_9Fv%щ.bI4}st65Df%؏&>}.7ed $Psǚŵ%x]ph/ǩY[70AH.;]ɬKq0+]5!:K# gbJ%TH3cP8%<^-2gmZ ּO{K]_( Az``=۱bdDެXƻ):Kx\ɶLUPik,w?pR#1}o]Q`OC:낿7T-#JԻݖ̪I쩗%<f{u+OzoIMӫZ1W7g6 OʱաŬ~Y_һ ; BR=X){,*J[+: $]X4ZseՆZqa/8_HL*-ΤZP?J,PZ`bLOX*u4Ź=8uؓY7 FO@hL).Ҽ94EY\*G+)o|RaqK'73*fJ}>bI<=D b~ 9kEj,GMp kys GI{JI84DFDNxR`OLVO y'zh |)Cei(j$Y؛ixݰ̏);tLiA_5ĨTaIީCc uo8E))%rVT=v8\ ϖDc*yIі6JB}SdO ߅ df~|咥Un6 ]3\OzgI$~(t JM][. a^z~ =&ܾ h?%,\d]8 g($DQ-7֡hG9a2 IqnwyӎBܶPJq@a,iPxL8aY$⡥/YR\gO3,MAΙO/p,%3Y'aVhoK:A^bLɡ:P5 ÈiTUߨ@իe" adL"^` bFA]< xN1&90e35_OkZF7krqI*P:')2V^Jr)̳ ue|;o>eQJC GS[|܄YZ1}Z!b jQ7X܂Wo 5f`|"DhY9R}BgĥZ(s=BYd[p?<͇3x0EBUN3f1+PKU3s&_)2.g&5ߡIr.O;9"aQvأd9gj촑GdD:OOm\"4Vq-8T&iw\|rrQ cXm7,ciĆ2\sS)`V0qGCM'i[7Kdia)st Q@:]r|.6C6- C+B|C G_,nc<(p5@@5@*0637{?wD~dde +М|?Ȗ wAԖ&e2 fHc0zG62@Gd,6E|܉hCwRkQ70[8LTͅ`4Q l I}P4 DPᬗe)\,B IYz`8W\5QEQw-J{ %*Νl1Cut4qyKQn?Tm3jdmbyq9-n_ux.*O =DDX, 80n WV$.c鉛u,ԅʱ \Ln-`˸^8UABv;VkHj0gQ&`xxȔ <^0,B\AH$ޡ%NK5uJY~t{C9ANu% [¤|xz1;n)R18%̵goG,W,%$_N'ҫAEDhf)pp0Pe2TB+SHu&3!-, [A|BGQPe !3nНP@H/)d`)\ : %r0:F&7: R֥Y ~_nAU+8*mJ !FpR$DR8ŕ[{yCېhB} .SgYbBx@X&?fXt}TBuoIIUM_*|DR&%]++ַ7J:; ᩳՎV_B%:GoBuZY/Kw y֡u/هs]hz\ VdZA(;WjKX\ EBYPQ(@@"ԁY`F)|e)F=%g˃;)l"ȁt h۱Nq$w =7:::1Gma5pIlã%.+ $GԲ4V/k$ d ފP>F0B+_P( ,ݦG9 gjMe;;u51/H}̑mDqKYYه]WaEw&96GA5*'_5d|[+c~8J#3!YY. .E˷7d΍RS% 틪E6ԗsuG ߨW#m-6Ȏ@N2h'Շ p+m4+@~C M .ҹo 4RNk ּep%̑7L+(uiD[b``4 D.kWgiB'trGUd\#MY)A-OM`~=[BXd]psCMh Ug [B7=[xAþ=\M]Y 0ZWd[Q .?If3/$fԢ6 -ZUB U)ԡY*_τ\פyژԴ0p Wªf!^)rg4`Qڢg0~Xy&^7,_ʐ"e[i`gF`׼n&qcƘ-)q܏0%uƫ| }<oc [zp`dwѓB!NOHibhqtۙ w\Gwf;PU颳$IWz٘56ihAscyRsٍҠ HTku=lNyǑ%!5-RT/@R 3O/s_$ne@'H?8L!Q34l%!$Gզ\6eTk`c#}b|#?=e{ߧ1ihԹ:D0>H2ăd+PkF^vK%|!بPS]L4 WQ--v=:dQߞT1<'Q@pUGs^9l CZ|&r=b:htz_;^j?AItImG[퀐 d"ZX[>Y.S Pȝ~ah,-#tP O(f1_UA`X 20ؔU G|5H/~.FJ/׾'‰5rw;$v5{+uOAf|8V&,C(pR]:erc971huב3֬1 reSIMG p> a=s Rjm*e}>^0A@BXK;\V6G\H@\Fט5y۞!I6`l׾8{uZɜt^~ĮTw?3GET%qZPw^jidhEy쿪B|A 8s  0a<ڸ?[ĺyNS9HBGj wBgvok3˫T6*ȨhFeRd>%QohL*/TD5kOLi( 1 .?iyZ,iGE,H;lܥScSI ʠY\mM%ϔUH-8AA },yje,a96gfF"фdط.O4@{J?FD>L~PRh%^\ãD%`אAfWzE"c]IӖ)*+A&#@PB@UDܝ.g)DTwJ"EAo|`:f|'C g>h"2pB<`%rt2oK7+ϓNSBrR$N cUXQ8ɩ5W5M 99<E@vk!S/UYg!/,![šWfHDZ7v^[댏ZɃ=옞5}֫`LEv (],  Qqcqn:i!_QN)m),Cha~*.C6 ]LCntmη4/cٗ\@< |vξ5l .V}#[}Tii  ¯% 3roADR)H kM]Q9Q(($ӥjDmXUf-6G2=d,+֑;aLue u.\r{cM>`=VjFvςķbXB=! |O'=hհ#ś3Ѕ9>ӋK^mPp_3Zb|/a -mu#7e"TGddJT< I@fBu>?<ىN5M>jȪA wE .֩OYBj;K䂨~?A83۾XNAKs )Rl?EعL3Y"o)"`7,GwvoAsЀ0xC@=j (9E8z9urUrV|tLήoP""NPefՑ53M-h r=wr?(q!ݗ"2PF<Oy@uo 08D!IZa-1;mY,|NZ9EaA Kc;պ`MϺebd+P|W:n$m$_Gof"[!̀+7*]3H4^bC?9DA{_* 獤9 Dv62 C¯wߤj:z);9b5Lj@3%C<Bv].34 -.%OJB\ +g9bg1Tjlvֿ'E`<,ۃ7h g54}fʟ:Qa#÷Ev;׮!XU2ey}ӫNM!ͺV6(a57\`"~ "!Tofr6 T}S`9R6*ifd"qR+g--kg!FYMpy,}V)z1+_|P ?gӀ٘wVg A^lСu[dggX^pAւ.]#E1ugƒ0{4*ϱS-#wT]%zpP;}"{jMl\IO-+NĆ;T.:љoTyHsaW(a +0!t#Y9[N®\r \ERgqeVO!H1c ?USկ?jC^8g'kJ5~c}iqqވEA2 H8^;/²Bʲk r"S%&u@7B GTxqQ>osJx_1UX0D ~[LhnWhL/ǥ F+JDAbqӆ*zS\iex"th-4j;tӥK'oFquD.)z0ꑻStxr bwI1ߊCB}JD*8\݂v ĕK BouDRFuY`1ѫnÍ\RߚlJHW'Ai^R1{4n{*[>I+XL:!8Yjx1ŋѳޯi4}&(3d2lx|8hpok.,'N=vY|Lk$Vkg8Hl?bI>̝į6ֆm4"idEPoZ± OkDn{Ω'71R>v +ũd]dswT a{0qKeS6؁9bnsUQҧPM*DNq4[ ;]Ho%KGPPp{B(X4rkQɚ~Ɩh[/v8A#];y,RBFtzR6rP%$g1 }P N\=-0S$ĽuT_Rm7GSL9sRFsfjzX0EMar| |;H]A} ௻_QlZ~')Κ0d.bI4 bkl<X7MKjIذguIn&~_㧂 t]$,}CR=)?8\WaAj`q ZrƙKS@(Մ|QpJ?r1ڃ^HO0/*gSTNB T8 j6&"v!aVI8H_;C7bY{>ύO_2G)I4kn@ EvXuϾ$,I~T+ )l5Y$UKsSq|DR%LdKΏf4ՌV۝t _fnκ'㼽4~MBZ)4AjM#{0TY>A]ˍ,C vc L:eı#n ʡ쉏ok>ULG+#4w>E"l._I\ٝ i MɆ8<)$=?:R-#B^4B 3 _?q#}3:k1y^dz$(e SLg ̀[(匿g2T %(w=r$wƷ{*| A= 4tei8zJ',|[;{d, dd&j'Z_\!t0JhvO?یbQ37{#h4R'rƑ};x;uS{$J[.qlO~j9U _HPYmOŊơ#SR%W|=&A (闆H(<|רH˞(xZ:2S-Dm$sOeт|S f[n2s̛̖JH&~ ,wd"VJ\&]drG5 ' xo9Z^'<W#HO٩4CM,&p=>p,!0|of?5R{=s׷$8Btm-,]6rZ'^A:f-ƏQj 2)*5l{f#vsXnC>@~z5.U'E0~d5Uߵեp\fq!zek\wF)/B(L!nWr}_རS\Gw±Qͭe(cIy΅ ε_A51g Z "Tvʐ2A93KV9^XQN=t 2! 0Iƫcd=$|m%(f?'~ԆL睒ZHI|R࿜(@ $ yKࠪ ŧ y˖VƄ? }(|CZTT[OBt96hPOwaXҩ7~sK衛 Id> JZo! ׏޺[N|J ¡6!xLjB<2yR:F7>M'T֕xߏojmgVwdn*=IF/7*B 24f>̌/!$;+k8VO;&֫="կݣLSQceNy66!gMy3\/ ٓ4B'yÅ dOCf9 (?)uTw-O+rHrYj8>i5LT)^SK$PCiҁNH>$n,w4@0.c8p^"}R k^f{q1"4 , Ft8r/2]%_)Ef\*w ,}W걬Wn# %AxЌ*E- z߸ToCO5wl[\fbG5G7t?vQ DoEAiwb yCA/)[yؖ.3ޢb Ħ3'}ےul !! ⅪJ꧶;BڑGu9nC`uLr+Fo<ג2>yKT^;ҊMWrp}iE3e)ײEs ZW(p(IQ1+o@P"O/K.?wc b9ܹ݅5EL4MI#?Ǭg[4乺IGJ^` v0NW*fK:b;ö=aC{&3x~Ҵ-1#6Z¨}0) vg72$᧪!qD]SU)pK#\<,,M`lͅx8U ԙXSi Љt(EK,m贳~uCMmj"pXM7rn@t#t\:z%F>k'v '.!&1f<\k/s[W|r[l`ӆ>nYHKBV;`@w'=_ÿx }qLrNƢ˓Ąn] dJ;OWN(CURR&XN]DdYWr"ʇ!.~Ayޏ"gBv0o%`.tjOe+#i^a5Id=|-(~"QL[D6Jkd<&ZS"Jt/;*>^q>G$nb14D}l[/Kcebd-BLvXY.6ƦJ)Z$b=P-_Z.]~{w `HK$@17C%r$U"Z@$Ӏ Ysb5oQ o9rL^^3y-03jW|Kx|2W=;bM3XSmC XWuZUz/>K-fZ\/R{)O)rF00 Ɲ[X3:Fh\^[s1 WC9|󯴣DY4bC}d&-qG´u})u?:+, E d=ΤU0uYXaC˜ldi4р^Ȼrz2cJ6 myA.߾%!6Fy1FTlk!o 6#+y"c *z?AAߕͧgN/Z)KY>*QTbyXs7Ǯ>5:lh?'i'СvH1q $<2~ÍKq8;^dfX%sUV(>~&ɹT+[-?=e.e^Zh☰/ `^xuC,>߱Wdig$^B"LcYx`wcf\5pu#0"6 ܳ%Ufk>pR—x Ҹ\=/F[{p>}'LU[Ym!j=@91V"C?ï,Ȋ1߅O(jxasdhskS(8 GrvG~窘8G$2ؽZ",z7kL$r{~zl`#'.V.þKaa!ˈH`T NH'aHπ V#$z1 I0$/>^kSڥ蜥J11n\4\RVHg~6ŧ)հLENAx{zsv@6&4p)I]!UCһ9Rd\ !4;A|T(4A$u~`X%PxyLumS7%-vȳZ唄^3l 1#\Fg!sm f?gE\]d!R[D~?9޶ [&)LG3JxFД2M e^1ô՟[P~-_kθƅ07BϘ.xcowp;OXO$pFWx`lۉ2ѯu`.Ggr;5jrHG'"!լb훀!(]'5%JykU]p~gLhs]hD%9F5|c x&(M`t^87c۴=n \*FA`UZ !r+`?+V\H&D1>(Y̖R! TRZ5n`gQT{:F06Po,q_c&jIXg)v}%*gǙsd/BC 1kB'Q]R"ہ4*5R* @G1%a{K%jScGR2 _!Iְ|CP#e۞z$)2r?Hm*D?W5OiNޚرϰn$]x^ZB1xD1 4`  &DVO:ulF=*=js.@'3 gZ~M9? >J +/Nac]溢4IDmPj0Jl`V!1vGVWUf6ˌXZrLH$GY P&X57NJ۽ʔh2Aչ{.BTP4e=4t)#!Iz:SD`3Q 3T'C#Za]rá!9d{RHܗ hVH\1u\#5 G}%f &۱Pĸ2PQī2{๙ n 39Ts}q3$#d;?58@U4Qܘ`f`J6Qx2<հ 䮜Zoq@F~oU|Ϯ$klpHsX(e0%ϯ{8\0|~g~O~.3,)f]Ȏ $]Y;~k( vyM`~;Nyc? dNkq7ug%5,8.YTN|}*xC 56RT؇%hN^V[ UUi'碪jN&7hg*_$( $HZ NjJtʟ6zi= ZHFu:}>jRa R,\|k|#em &M3ƙwA7n:8fU4()dIQ#`=!<㆟ocgK,ST9Iwjm7*i͢q"&+lB=|K2bQ_$8K0VzRnf*^ɿ3{LsYL wph}qC}5؇|L,^o(P/g*pu)5kUĬWn`7vf$|⚤ȠS!Y ؝i<{܎=JgM "RtH8x&]$- _"ѳa1 _ls;r]`s[ n1uvCiIǾ|`:90.vbMsFpq@Ng1%F<ǟQ#U ;<V=v3f>z@tPOW?T[իko D-sLÔU\S .ytmaVĻjB.HO"~Rmu̯0H tewOV[RNx4au<8wlZnvS%WY;]ʄ\^onpQAFғER-%X=?̒C#)Y.s"vP4͍K/⧟*yw&/6` lR-FAS&N4w5ܮ"ˊ[~G{ @en8w#3}}'t sxSQ3~riҊ27l]}Ҹ7u83d$m u[N*}O<@-R#.T+v` \q88ŦZ(%6B!Qj MJ)u!JT.oHT"N(y(&Blb#M-_ߖLoK@^i z`%гΧ @vϡٰx+_,?2 3uy+RfďK; a8 `~8ϧE+C-n&c!9>x syhWOEO]E{b+c/yg&Ǘ:9I& l8j~y1cG1ـ]H2KnG{j~"ţk\dc<(izMMf^\%@A]l~,?[ך~Kp[9ŒdpvZ#0+_Rv`YLqPbԘ)zbN{gopx]Aρ"ܡt_ Y#74s/nv;N[35qEH}a/l*e@8g]f: #/Z?Eb;QݹImd#P ٖ^ Ăp^6V="sVũzꌢCh%л"M4!UmzvoȻ=kʳmPTjKz(:G9 l;FIHTKkX˝<H8Ae} w[߲;cjCE@lu| (/iF-ԋtRגJ X!|AFTj.5o:E6*F4paB=xWIWJ %KQdOɝL l0 khUўqbk @ hV bܥp?[wgf.J@Wm;~2f)%xiFiɎI8Knث2%R`nv/!醌ڑ)x˓KpgS%a_=t0}l:&72_dO!|x)>%#|^T.wqhjyVEnHYXݿe}I:T_brjbf9gs!*E1%K=w+RKڃ?g9ӆ{hi!j8Јž? JLs!djBww<իutEx>9z]J~P@l*̎t03p<>giXVE/ꃾNr|Gvllf~~m*0./7##KOC[k6"|Ypt"f$ODs@ްYg`xnp#>nFZ`(>坺G{5i2CI Ez($Sx7 jވ'Z&m}{,_܈Ϋ(Ҽ&u/KHDދTUOa؎#vC[gsqR2SdڤNxDif CLrsI7O<: n?Z (b{5=%# h^JBGr`2:֯l,A%S\!UZw%ՀhM!v3Q4 */p NQ씨`(bJ$XyWb 7:C2Gk4JZZl!^*mFyٽ=T7eQ- BeX*t~'Vw1{}rVͥC@jJC`tKNsZɁ8^ dnTqq>|SmH-T>FHa!H&Hs})?r$'@G.YDݹ*=cމCqU& 5LIk9ܩI?Xa+|^"W` I6j)DZ.mfB9v%*M!l#f InڤL0x<6!g.O/BQ o͟Ufk17Àg֦IjQc+sI4v:O~SOR~m]$,NW=L1\օ!0)0yi Cq|rڧ@v`"u ob#% i[lkw՞J]O2|WCMq8aRIzma ~!SDe7p=*gTciC+[m^ds`Rl)o}wM 2Ǐ*mek)IhV1'E髜StlF?Xrg(4&577PUVb}Eu+5p|p$1{rދfCVVr-=ʾrz]1aM|d(@pq|YJbIW߀enJar|RYI?8OhJk7d_JǛaThp3Eo^[I9Ův`N'_Gȝ̳LJ"¬ztC0 aetY5-L Np>#h#UxlSft⹡J$Nߒ XTp$"d]Sf*^ᓓgBF-du+־`]$O˝ S9ч<_(h=D.y si5Ha,Ăk9q_@Zy_,oO"W>Ҏx/)svXk)}RyBkaa;h/@Tጻ6I^$uJEWY36 M|cLFKIp>XCRʈpQId?%䭂Xxw:JFda @SnzRϹ*P_G!l+O1׎5yUH枹 X6|"QZȭ?7Fqdc7W~Fh\) Kg Պw#hقFU3oܕ}|NEMyC7⥂\Ĭ X ^lk v ]dL&IмM%V96?M+#UY[4VO,Ig7=RYH}ȩ# ,rgxs\6ze;B`b|3INA 3aY F#.SJ |V,fF/6QW!FƏlFu9O!SɃ0M6b>3u(?Pr#3Uf86Ҝ,䠉J 3S{$\}38i鷻ma ZKm]裉Zld?6GQU!yo\ܭ4}:FOX=ngD}~u XAym+}b:a1{CkJu ojDmQ=U ƃ|Hf"^D\}D*Qlؖ@b0ŒùVK{6*rP[D)q 0)0ȍl14mprka/ϭ4j~wlaq@il#6ATW; ׬Z{:#b{Z`%UiX&GQ @(~m,IƦhCƹy:ģ۱]4 aۇ%cQى/Q=mIۄXw|%:js~GdxA5 6"4/[lh>a> 3L4V#/ %eV<ĭ]X `S{mR"׎nj#_tAZEvqiLSLFw;͎myZZmj;.IJ i33DYM'> -Z{M<)HUǒ2kMzl75IG7Fd(aKVd> BJV3!~#8F,DLA(vV‘zAVSҾ{!.~I5Jku9n}R@mCΑס d|SH"vvչ/; js;d'.A[A|`>JwVV{g(G1Z;}Ym]ӽgwXMi$=e-jglDs/eg6mkOySp{Sۨ7bkd@&ߒsQKK2$r㈯Kɽmy&LFR>;cTwgW*C+ײU8U"fY 'tieA&kky9=_e*] n?H)0cY h5kơ2MQdˆ~FNz%۱TI7+bFyN'&ycp_ .e2--$#W-;U g6}55Jjxg*F}567t` >9{ zlԞ)4R CV"rl#}+! euۑ*N9,Ҕsx //91AOu̓ B&a}Nv2!sqS_*F= j@WyE>q8CWg|'nژ_G=ОUkgA#<9-˕΅^A);nƂ-TVنǐ =y'S3)[-:6̆(gV/o[bրj 7xkx42e@d׀ʊ՛T XlywN2k`cβV+ʃ[@!Ur)/hYKt5{`zbsP fN&RJԡ` 'VAv]@ <P'=vs:' زՄYKP~K> ݍ2DPځ֪\H|;:2;q1JN)g8(em0r6l|K/a 0k-V9Kr3JDps˲#Mg!@$#TSk~\Se;NXpGG!b& C&D.M4mzƕ5\tGa`"iz$@?Z6Hf.Ah4R5玂gL,zc?Np;+\>&WoP"N0/M"ZbzVG=N; -ǑiL}#`UpdXtU &wyPxS/G 4%"=g [XZ|Ȱ4-~-|Jh~d0g!+̗gzcOb=)i~'L-yƖ1/oMW'BۆhoL꿅exHmW Ж.$;;c-+5V#8~]iO `=sSfGĜd7oq+/? zW);#m5&tT{Hݭ̙1ǦdUB*tsfWkPk: vrz!}%(^V8vlX@(tGp&ac }܂s`<_z47kZ&k>)5tcgMwe?L}V~SL P`꜖ߥzvtS\$>ENDOwOn{&0`umTL,nnLRL"׌8s@8̡}3w] 8PBC)`kB'p6xӆB}yBeUѠȸ<3 oL"Q2 v[voy,q}0=iHz JTʯq{cJo_(E&CT_,P'LW e){Kn/[;:5)̗="_[x,hGaO{pfM2Etq l"%l53iMp)޼" '*\7hDTo%!.Prhvؽ+4O}}&#MO;igC@h\]IU UZ{Bh/*FDEd `:ޘ,15QY'V R0rv$VӦB08e1Cj:X(qc7 7VLP<2ݘJK=/ϳul&qφi(Y@#jWp8-CCæd'[0,GN{t#I1"ehym)/˄Rn(/?4_3WŴb xZ4q"$S2jw"0~U^}Idž$+[>࢕t`,i|m]/ިnࡊ=U )G+Fb2Vѹ` %\:`Q!DLuzZ95*!"OL~8\nWiPrΒUnMf\u~v쉻fQ"AF_NW |zYїE" n%(1J(O.N53/;=a9x/,%3§=Թs|Bvdl.µ@vC¡jovD"@UF#]DT $7QĐD&0$](ۗo Y;o>| ϝ` ~$G53TȯBqz`55C)%ON+K=q\IYk˽\'ZzD9Cѷ.o]Oij4:}U<ˑNl{o;5$^ z+Ab"Wh2Zq~i{ϋpMl,: *'ݻs`F[Z'JGX>Jз>M|!\9$^ hnmLt}bB1ѥؚKinE@()o#Bo`hs!vY_>8ex֒)\\|{]PbsbwX ߘ1&QT2sbKLj7 Ā5h&V7Jۣ* IȊu]M MI{Cta%ѝ!g3`{ :5wL"S,$ Ro[]qZ'ldmQ3ٮZZ!5y;CfJ1^ oHU 9)} ?/Cy=,P '|PBvPjݪ׳3c[>Xpm Fb x> %Wg7P $"VpqQkBzHPA پת%yoo=®!~y\RS^To8'N}8㆕mfpYuϥ M, '@b(Q%":0gZR;υEzоt<9ƅD9cʙ?QIk#>) Dq8&!0ԑZ##" Ze \Upt39Â@9OPKYHlֹ>ZxaGنA bM}FwZTP)iȕ'cgk5`1HOW֍I+[`bBuyaw4Y8nhgx*y҇)WۄFˁP,<>[{D]_F%2=s>ɿF2{sh~_82S{AGXW=wt~}X$(@0i`_7CNG_Xy^3v@-(4WNjy~[IvPmЭd@(!Q@&帮8I@&0Xֱ*Q۪-|L؂I` .NLI|=YheMRv4<nr\YJ.Ȕ3iR'F}T OO{<Ƅ|)NF|kɀzO%mģWCu8\0TKj{!w0kl->C(r)DMk %g gI)/"l^N5|(r-Vև GKGҡ.Eʣsذ>ZD"W:q•\-UZW@4!s(ZGX&}_Dm"-aQ]_it Db( IQg,":~)D.Y'~vlMFoxETăCŵmAw,Cb!y}6ëjNy@qK[`^gD$OFSˍ!epָ2\2 <)/|=,lEb-zP[V|s;ŕ Dtyг۸}?(1v:bOIdС I-1)P8 S&"S)9]Z |QZ1`ajk𸤪/)V>,09'~40RN1VaZW`%*̋kp!ooʉXjNc7 Z\ .RmW?6#ݠSH6+1N!{`mX/a'Q(W,2l{ aH4ea[D C㲐d#V{9?Tz{}y+eD5寥&EK: eDcaޓ ,AC>(ƒtC%-ű 8ԓWp*iQd1b3l1߄h<*/(RD8ߟ" =:1@(5M٠m6V~Z՟`Bf }UA/Un?$T#tnB{h;48v|b䆼U]FO =''Ƒ|l ݞ R? *cV OfSK50҆B0rZpERtC2DS; dU> j [.C3>J`ƙL~z>@*O)b~sLxpIH)?8R1t$u7~͖vg3M.>#:cnO~D&@O>rvmgdp0TX sҗb46x˟GDnu_y}IHef1{8T'#bȆRƟ7 S>y/M1cD/O+-Z.sVc%b&f8Kt=D(0@Qޖ7e_H[bdKгh@Y,Iߡ1$)qzݽIn_뿌'4ݩZo0s-#"555 j̳bC%~e>>b(&A*<7u7˺w &e0@nzx?UӊўzbXo^Zù/Pl NM@k E&]mY!D$UX%қjlV":Zz2wlw($ELJ|Ӽ^x٧jy4k ^w66kSjVl-uwkg_Y>8zh\>.ɣc=;b.#xXN j~{hktXe];V#$z‹O&q»clV|mb @H\9\(П 0B߆FS vG1 s'$vv3 0&6u>aZT 'l o|I9Urۢ/О;S]CeI(~LDZIF ([]h)u .ns9v_H6 aE,sAC¿TtVd0h/1@/Ȱh(e5IrJߍ5:1+u3(T$Yk`h. {TFj'|9HbxԁP#Z9}URbMR4G|Q0r3mgF}pR-ceIꉦㇸӫsHRH5I&cBO-8#&_LY"K4ҡf IRN2 oBYT Gdvd۩nD!tjubvy{W\z,K΀Jw'L`i / A%m w%q;fx2x^}33Zny?H8lY#d*IpuZS7E2qu 9V QJdS4Rbb̒/xLn鞂?SsC/5*7*,ѧ 1-Gq-p(&@jV<Z Zģ .ȁ33:ـ[pqEӶ\Lg@ih@@L?*&6$Zu0̈́]I@Cd|ֳv_YQ.i 0O3 #!3}LsD%($U)q /aè$3|M;N Y? 6,r=_ ߉ 4~S(qxeG W|"_dyIgMY㫊`-Y} iI| i=FXVNɫI)p1G>W BɚXYE (b]O/f8'vq¯}+BUڣ9P{BȇcQ>RTjivT}~#;/c YL 2T4z"p̈́ISv`2ɾQh:lgFŴ 8_aE.C)?@HS=0.&\!m&w10, ]kِRF ~c\{՘3#)96F@5:Abl bI7s7sw t|J%$)&@9c#@_Nگɜ>oTIC&Z:Ϙ{Mt#M6-Z%E$BArh+|j@_Qf_OU v$g@ֺhxnz`Wz*K[}yv%D: DbjܕU15q@jqP"LpU o4J+aW |frCeMZ/B[ؘ{A_xn~t()z)$] X ]tGoYolik'c^ށ5| +%#)%ˌ`'1miYeǭNQ& d5^NZSN t0Dпh`q51NLȨ2}U$TR-JQG98uŠ1 [V Ur 4DžP|)dC(]=U̸VC*'?ۄXAqb\)O[ SD+"%mtwo]qlR(O)#n˒Օ1'wRr Yԏ,/ ϒ|F1S_cVDXzڢnE†5 -FO ޕw&+9mܠ+W[Lγ؃gX>됻]z-YdRXZRȘ˜n1;X н%deOWe].>۪hz:aJ1~0c֨A":U_(&bMy.?@(==zwov[%ޫ<iysP:xYPnP]uȞ )ax^F:%NO׼ 1j0gC|badf{MK3ѐMZܱF,)stל3w S/^▻;C%zr[QnY:`ͫVws܀@*baxlI}ި![ $%wYl$JN̐&20#"]lY ڼ9V) ,$?^ｊ(^"%˯:/{~:`2M1ItZ ")Od~£7j7C@3p&Gm3 OFYBZ;m}zRkٔ騴dP,}g}vVCԜSB7xjuI0+:RTT Z@LwFz䁨>m(j:XE_S|gdkɶh:|ja96;EJ^W!3W#k[A@G*A}5 AdO㍩x.3Y ySǃVж>.P+ğpՍvnd&a8-6u(+3VǾ$A<>Hw1Dǟ xRݒd` /AŬ3\7WOhIih]f23;LI$'# yΚvZ?:NмدNô2 g'O_Gxg oY4e%Tr+k|k4"FNp3]XpOcBeZپo3ڻ e 9AigDi'4?4615}e'F }ȷ4;0f|ߒ00"u8CHǸUvx.jc*fdo]StgHM R j›⽿'2G)$Ё)8V4X;yeV>SF̊K`Gօ%>pzؘEߕ.O{F2 ߟϾ %&ɮ`hp.qpJ&o)8@rQAF`ͻh I!J6n%E](Ӝ+MTЏRx(y@8S' NޫR4iU]|^ ^#ڳ~m8,A6{iC]G'f'׌dr3}(^%k2bn$0^%کDN c'ߧs3ݤ(\vYN4 6vZiCu|7۷ԪYTTC(K_W2Y_5)C0G62e* *OG*W?% .E(]3:t^K/3uVn:mOIƩ7ۛc-Ez4?cptWX"DYw y-@F$)u͋9a?|{詫T]1pґpjĪYrIo^v!;L%1{)sw*>7$e; i-o5cڒdiKolaP(x VF6ua[;ޘڢ1K#^il qdωEUo KjԢSu&6?ظ&(BStgeKyCr9]4c`~Q\*b,;+4=C.;Fri +W*MݚѺ7q<pMie\/8쭽C7ղNhLbL z+ ɆLlf]n+:z%8S\ iSXOpC}N\HBȟry`_L{O{9&HeښKR?l/>:;UF& e<2@|~’l*:ƕDTR34CK_SU c9V@SZdAW»D9(MkfiTuRՔĸi agcXf P .xA' vwwä^OؿvsҸ0Ba{}^m4vNFizӍ['DMchxQbluiZIb/(klXYdM]<η%UX dc^}hyPs(tΔ r>dᇵ5Ȍ(Hp2K w (97%/Gd3G3]l{* =ջ01`*,eu>f\\q:UO…,ѰVk[~-f nPsJ zTQTf?x>ָuۓU\`;*(/4[EN5 Pexv~S[O2ZJF#3y6K$\EMmi @tp?AT gQK\)lbXŝl]Y&b!]1.U1FP[,^EoX5:lq(hmN7mXD-RtD\)4Eز&^ vlE{CP!q$>Q-Y7;t*6]^yHC$rJk QqRAj]$S^.]/{df}K"3COoOsA8e@O?|"`O5./dS)zt,^H js e)ֳg_ɲuw͒t?4`N&ŀKQuVY߫\Mk}lS;r둢Mm m_"׳{:5(-23*6T}GYjwNg/fZn8u V)!#\C%([(ɴTs1kFmLnd!L悱 %ӎrf֏=˥y*  nœiR$2 %̑V>4v!jƘ,ȇɰXgyX3D.Ü Ï(Rߦ% ,\V*}J=zL0S{QƑm՘I,UHjt2Sb(TW,~w^/)4'mfkda3lj=O/7Fs_8.ZRlނno' Z-I|I3zhPpz(PڇksQmXl䰮ʸжӊ è]MqAnC 2]"A|e 3)CjzDq6!`I IaUkOwg}KZ:ie?e9xnBS:EF䜕JX\M}8`)4=QI^>mĄMmIKcڷ):Tliwm9i+<8 B9TQV?S|vv9Hί~JouΡ#^ ިJD$~}OUuE iux;ණ }r|OH>IpF]r,>OMK7=+/1P2gֆHMd^ m+(4m(΅IGL"5pX L!áx LVo(VӍnuۋm{Ĩ=Nj|AMhmmRY!Fat#ilXᚩG٩q*5=-NB(WsDkA)qNt/Aǎ-l27<`Lap{f}GU.=гGfD*8 qa^K:ӄL]/AGj2`wP|ZFU-Gb[Vo U!cE$TG:w(F)ccSnIv P̊"VLɳEi5VTdsMYF./&z4 "oUFQ&#r$R-j s}5U) I,JOtŭw,-D4Po 0aMB8aUJ #[ =@=#X(آSjJTD֡ S~Ćm F$"+W܆_uϫC \}ܭ5M:UJLCE{uPb;oGĈy`/$C3J ׀+[es!3%@wyo҂m2 =W#!\.oq#*ң+M"S߬ʱ3:b fˮ%?]8:BWxv$@e'[?TpCvfDB'uzf^ w6Hj+(ZR)uM+ԨegUռLV_KN**>dDŽ&^æ\:rc@>umа2_}Rв#\qyMَx(QRdje\gTBV3Z6ߥBF2T&飈Fu= ^e1PWGk߷%Z\VS=XCn2C?4Qw@3jmkqWO FcF:mM[*chU;nBO?;?z45ɐۗ>K…Ib5Xa2'3*ajDpSLŷ7UjrJTcB|lK9V3-XG :x! PƄhc)a8,$nY%+j3Hi)8Vs@YC{hHVt3F‘s!&lBC7`A7׀ե^YGcɝ|},.>3&`+P7[97tX ݼ7=U%xNҥ$ Ov=M\!|'gXж}I0` ]ن&9SBOϰ0>.5_ס\Me/K^ff;6U3?Hlpv Qn:v42Uyʉv TPT ^cs`zz>7<* B#-8p;.Kڎe0̗_~ЬR!zri.-՛Q*/BҖC6$㵠RĬj$W\hX%o\MfylCl 7x- qr8.PNn2?@jJe$KthpNieKuS'B–ގ;]QmbH`b_=v1F( /a; m|4M_=N Lh#D9qtB ͱ_Dt .5=^ƒ~9>`ɳ~g.)*At#d "A$'eㅁA_{hA:Je zͪr-F\D$uO~y Aς; : R'`mwt2KNab@;{v&!Y;q KHI~M?BiֈMf(K?3d>-z},>c+)6'Gm3'C h 3b/wj| ^|WkoK`լ}JL/9oٿXFd8_0akl%1JO;Xi<*Hy;w6?<9ؚ~Jn+N qF|5Hp,[+;vEgԳ?UHTreNfqQ,idma$@ #t3G&M2<$},G]:"L8V8ŋ8:vQ r} ]KVwٗ(_Q MŐCwrVUwW"[ΐƂ)bE:}-%p<nUMu)Cvgѓ=5; \kh g][ 4Y+3~ c.)LhT&yk*nt/4?xȎS|)9TQC6@f\? )%NWsytR<uȺDӍ˜ʹj+,,8~e]IQDI B|! hׄ>ߝq)46<PkX:(ƈŪ\8` љy<ǫv}SO#X439P9By}RjztU(I1|>.[!-qZYܢNIgPЊ1*1Jyekdsԉv<k^*m#".[ęfg!B~FNR7_"޲&cy2t=/C5䝧 F9G]#Fk+ézc߇,. y}qL%E\Qc=B_#3z%C(ium7Dx:B:C7 ,a=%Oh H&/^{r![$`YxX6`F_itՈs0'zA z/~F|ǡL?n  `$ Bi m-6%CiTtސ4Ѥn̪ -3'kR" 9+dX&|q" nÝ /$&%ʔOD1'5z{knZ GI/)ԀKB$7U@5YOa1'E Ti:~vu-b٩1Z䀪<M[\ո /6-EaI)w9 'lx2[ R?ȹyqb,i ^Q*҃+:${ĥ<ʣ+g16԰7o6:fS2-HzMzpHa˰1ȗC}-Twՠ"C/CՖT"xd_2逿~oVݙUTdguᯖ7H5{ϞS=#Bm979 Ow:"ٙ۩NC2 q}q] NYKt#1f{84 LDch~06hy0U?b FԚ}ZG(q/}\!'ыW)zL0)L, Ĕ2ڪRuV8Mxx$cg,zi')h9wb߷SfZƚQ-tM;XTC_:֯\sE#RR&/3it txZh)=? GI}422P; c|dY|K_נ+;p➤h$>X6?IR|@C{`"_\t^'"iݩUb`,ryby?$du:cP1C*Y!Ԅzܥ!/5gm`Sw'IR&ziBrϩ*]ʄA"ռ CK晸|DR v;mkN[)B xݩL폆4_<.7ץN68qE }f5k.ag!ˣ-31Fbxvv>r~?Sn&J0tjUXK<'/}ZI('`z 0z^1ee/Թ̏(L`ْ򰟿3β #\>F䃍d'U L1%i^|My]}u*؝F (59f0jR_ᯋ$>Xɇ? ҮEpQ"MꞍhǕ7?em'[GonEn"ƊcIb_q`FHa,i6Q@^D6G*#h:goۑV`-hHL>Vf`CF{`=hgoGx6"g+^W~^L2] 2]w3D:c:M24q8FNuAUAQm~JK&xq y#Wa]㈶@d(})Je¢nقM\Cܐ$僘b굙|{.w֌ "DmXv5w\8j@[\F+tBUn VXsHm $XYkyIG ݽzz9JAG.Jfٔp~˗,'8f:*Ndn+c\'gV46UWQ4r;o>o/F$@&EpG{4.KV҂ ЈHxMHX޽SU)iHտo 'B# ]^H܂ xXn(#\'"轹bхzvz򙦆Gj{ϮflcC 4)g6=<!1蹍Js]q#o$3:BK |k"ߑT)*wVA C1wgOFM<:Az]ZA$}x9G5WS@(>ޣG oq:~$t}јO6Aufv $բG,T:t8_Kmr$tH#myU4,[h 򎛾T:/p_Cv1WD3Z\ֺ]*3F D:9U} 6L 8ᵛ"=ӎn}x&@)lC*XBP4;720[T`u&x1Cj&`PrTwI kswx꼅)2(5Guu^D{(-uB%֌bAxL}?5  SG^s -ոQ6_AfbʤT^!a#͵9ߎvU# z s GO9FLRCo-/U8%mA[ dqEhі_~|X ;PIƦT \e}f8^y%^@Z+ ~/v0;6F TƗyRZ@7#9Y.[hebJcROEB_ު%](_?Ra*j~Yar'Iq)h*("cc5r-xV.5"܁T&zt$GvvZu'LݭFϒkpGMFksotDMO $M%ܶ#'>Czx|SA+YS i8%ucx{޿sㅊ4H"S6=00QdW<;iL!ؿ?̚pYvpyK-+Q2srIdZ7_e>]76Lzq )̋BwN:!S IioIFL?82c4gynZe<-ٞ%9+.,-Y.QҶ,}1jkf;g; dRJn8o+{3[h!8 3}ah6UF{QL?͍<9_AA1ݼΡx;|~؃ߥ1Eri"R~:l:Xȿa@\E 3n[j%(.ĕVw}箍έY̺vr=12%o=U&_R{ܪu"g\~(L3(RkczxNÍdH߇5'?Cw)N(B(XWǙV)*_} c#N`vdY<|q}T$Wć¡%!=zY\;d 4"$ut~*T/[|}I.a:3T׬UHeD>`pp=pOi>*v䨙݁Q-1F+Pg@*ȵn?fQG%_5r90 FSezkяM[I>ޥ M|MS f ֐\,kpgr6 gʢo= >832bw**X00K8:L/Ӏ[h|1I`&F=y q\>SzD)1$ᙃz/X}QJ 6eN%`#MbA` @4=k踉Kxt 񁣗4l$hVbYY|8Ÿ G0a#x.o YM 0NӅuMB fB.`8 6MX_J<TL`@zN6[@db's#Еz1x.N݆᪻Wna=xʴTx{Dtռ&?`z1NK=A%t[x)OtgnMU*+2W;-g_[0jCʹ+$"U:ن;j2݈>Z4:|%;6 i݃"X*_z %SkyHF=έT{0-9L\8Fd TJS*IcP/=n/(r75 J_D+0l@ĉ!eԐk"ӠDa&4+$4J% x+Q$!٣/[٢̶&%D0';|sw/5 ` {WAaRjY:vq;8=5e{eٷ.}jշw&p_S f I jkU#a/T p,X;Q)s1(GᱼP[jAA) '{V䣇T\SB{\zI7vq+oZ@%iy^e kp6C=H}wPKYẑ%Ȟj )CO-]q/C9=2##_i}\,;KL.MphRv%x{&+<֪X%8|NJ`[0f! m%)Jr%|i/MFJ [0׃z>Ɣb߽8g qQ wdUAJ)!Ո!-z3$a:_}{GqX~R6s^  ɱ7ڋ]IؓWћb rPBtV>(̺Ji+Bk'=<דޡݳ^,aFK_%'_yDxvot_;܀LB~(7]GcnC5^KxUYѬcM2[ꊺY˗J)T+]S`J $’[sVzKsnX|'$; jwp ~$MMSZgg/T Sk`]bn;MRf(7K5J#N|@I =fK:E+=N7+\#5~McVh p\hi0XC2zF}~*&yg deÛI8Ր;Lnl!Hi 1jac;eXgP&yq5eKvO" ƿ hָpQZf~oP$|D DX0Xi7:rSh;|Aiw $&+xӬ&mMYEңY 3 =xr@AwaV1hKp2[ÖDn0$܃;Ԙ_L;*U]O 3{Ч[~TcLϣx@63O w0b&smf*JIH(gl*Vl%fKٴUF/쑌($N<<x^$3"%Ka`wIJܩ X!aTv&؋Amn[Vís/ c$Efkd'mrba8rk\jM5[s_,QI"jY1Dad!+?Q* hbWV^`&U]Z?/#gpwiOżQź27/c#~#?~ c&Y0s[`12!LQdysmr90W?i\`9j[A +;/Lq~*5L 7>$1Wۼ!3Ba8Ce&xse`+[2۠vx;N9:\oFS X[T4D'p4n4Pksh|z$G,X>6hHطdž\zLLMdeBY 4-c7C?O1Q7 燸;!#@JXsĠ?e1f7#[[f_e+-|52@`|" ShJ)__˛>/@Z;1P,xvȶKi8n*ɵO@$+x$o'=_tJRDQ 5Kx浸ܷ-16WKߤhآ D(Nia5'E|5\"3VcF!lfMlP:|ż3d<^*ۅ^Ї n)$Xod4| Yͼԅ D?((bʌw U ʪ 1=nw0ʲ񱝆l46k!(%=nhX$*rD?)CPc il\D^N#G/>"J3vJ$)8&6K;`T6vW}/Z&AP\Lʦ k7&g#+$b+6"y\퓳Ͽ0eq\XŞ_IRϞz0utbj a]JJSќO\*OMf5St@3xwwj5vǰR+^\Wj9j&rl_+m⌒-}6V 5n\#L"82>ڱ0|.4 neT=z|RBFtSOhNU&v7 %@Dd"ߚ*ͯHr؎y$ÚHld̃ag12@5pF@Q!u-iU9 y$5$ou Gfck$<Ѿ3-i:Iu$ΟS7HSlq-ʱ{bfCy#Q$:sRpnifR~݅LBFx׆ʃ?_ؖTD-S_bNy2qylҴ=9F8{K  Hmz5?(I¤uHP_6DZ8n]m 4%>da}HN80t eI5yle->Z62"+k$5بSV`1/]m-3q}7 5Rnu9u?ӺM pUEovEpk"X :KzC^  ({ Z>zFhTRu-8]hpH3eKBF醨3J&iahlwQ9=t)%o$lv0G}tW2!3iCExWB{瑃ǝžuϩxPBb.ǰ$y+> A'9Z>qQd,N/*u0ǰ@W7$sk#a&}weG# yfRM@j:ݠ90F#`^X?mT22 AjnS؉tohSK IѢIK8M}QSc$R*ljqth~ZzV]D):>l@h+jQ:0C[č ~EƉ+*8q|+bBq,[QyH<Ƿj/;q9hMAg+15/l"9y ԮZHt+Xi1&bm/4x |BYVDJY^xcb߈݌L,: ]ZBYP;CH+tިL[-a8 兝]waF5V%/3ئtÿ?OwF% N|SpDIQy~Yɉ*rE e-AO~^U|d9&&o#yPSݪ֕`;=&z,FhM:Agmza&N4.EUeW9nl VgPن]{ g`FʊȾ" Y#|+w'ct¿v~LAԇh!&ȗ tt5E6b=s<p\x7պ8r ;N1ܳ5s<.SlYt+AhYOޑ 恻^' 8QWUq=]VXJTf?\ӀGIdB#Ϥ|l, "%1pHh N14tƼ*q*IJ}V&#.~Aԉ'd#:3:8g Ԉ,)#6BT:o(MϫR-f|H0E?.|pI-SF'f9|I,i$ R>y`,Hؽ\`Ovtu-dB^&\hWZ,Xξb؆plJ~ā돚.Ȕio7pu"gHSؼ+'W&B0fX^$Wp'(LJi'#&;J N_2Kw7| N-Gʘ Y@dey\;VTR+Xҡa[AvX hZd9G~TBЌJk fS-6Tp.I:ۡ0fEaxDr*QǶDRW:-]<|LcmuҳO}Qqyvbjx2`?B3?=둣놉1e6A/~V^V).Q3Bs/Nx~ ]4u`px̂"Ve-Qv"o4I4d/ذZs: شOqT\Stc܁2ӈo,22 `5(QR%jaڨMwQ]:q{ѭ晛bWZqwfC%2ꯀ Q)O$^Y-0i ٨؎JյN Wy(||Oy)8T89Bd0ZFE; P:J R'Ab&@"X% "8ڤIA (z䄋)`r&~ݔ *oɨ{#|]҈ .+eƔ wN \.M8nw=k.{hpջnTH;L`r9NJ`˹;~`|T`&T)5jX))<Ha>GZBF Ni+1Bxw*cl$.9^n6%C?`2~-,[!( `ZToB40Ȧ&I-?8g8nu"2 /P+`\U?Xbf9ů^ҁ]):ot8VE ?\0ԧ\ӌ-htv~IVNj 夎ۦ EZ4k:UI'›¹1MkY#gx}ul=~ ?tb Q%U6|GvNz y`3hXK~-h.$+Ø l<0/!h;e ߝ0ۼv7L" %a,^xY\A6WN'7`q8X^O ˈ }biw;t;cIHx1Dƺr;ɽbd3-%,* J'Mc*G")7˼b[3XmgU)&I,Q:_/O,ˡ B8Oe2Y1D|A{)|T `z;:Ab)nC*? (0Uqh,OWN 3&_?aһKF^3GiknFXh)tM;8w['*djҋ_OƃxƼ7>D,Q^wIjwW0ZbjTƾR/ T-VYb҂yހ !a9 i"(/8Y%f\R鞨hӭl\:;!xE qG|y:İ\W]82`mu^ uŒ!}q?/GpBTS؛DymTv\qηYkU=[l{(21,cl5 ^[kerEC{("Rq){~Ӣ\M#O"-Zp4EP՞ɽ/P64; Lㅂ'c"\5Y)|힧"2j@a#lļ͗TOV%A6BbJ{RIj5~ ʰw[ras驮m6KST 59ʨB;0k%3fJbʆ@slMTvRٱBKqt5w<;ufO{|`ح@wty)OX (,VZ@:}j;C3ǞQ?O]bo~54C]kx(c^Qaw*t~+bp#eipXreB;N頁*EqY?$餅o . ~R&gPͩ pYGcT,y*:v ݻ1!u5jcn Aʐ=zCPV\meme>4}DI}pIp7Z4d=Ⳝܕg&Du@)t'mQAj!%中1W2 -8X`-VRʹTCkN)>շĦ%ap g8uɓD.SHt}8w&VaݑUײA2i`TJrS3M8CHS>(aԻ{Puٸg [ ׈VM..*0b$X<2.N"OY .cO;ZoĄ 7jI-撗 [ 3{ )Mۣ`ੳDd/ [aDG@^O"@m&\D% 6IQ+}3pN<n<jc/8b*/͠>֏jH#1}{]PW](6ꯊWb0فN  mX#0%y!7ʗڨ칷ᰯ0n:S@< -y4KSb? ~ój%5DC8Z8$A jX5C)8y-.QfY6M²4jTFȥ]m=lfK)}EMrwINϼOxHe!&1 JVaҁ v⭛&I2?D;u+)tz+sOBss=KI~;[2/gӝY\4a/ ӭɶ wGv!Zms|h3 yC/Y{2_~ۮz,x˨ݛ'J;߅ ݥ0"&n* hrwE~ПӂRZdf ,Ԁ'h'%J;07~u $7nUoҩ}Ӄž 4es-LYj(./LJmMAэQE*ga?``(S7|b쥻 /Shnu)(sc ɌU@L̉9UE|M-0ooqS}S:Jm~+!$eE4% 0#Sy+=pDzVkR5ZJ ,ۃ.YZwvfBZů>bNiyfJ%*4k}}/4T"+"Ip8fy*vrwsWmDUy}0b؀ Q%,:`?G*a`2eg)&w`D*+ 6."}78 ^sc̣]/ZTnퟠr!ȩ (e6B ]ib8c: !}WHM=l3IU ?&9 DՂOC4U6]~53`6sRbJ#t\ՇOvGvp8dn_*!3ћLJyhۃG}>E=\)8ac+g` 8ڛ"-H7ݬʍn:/psUsmA#7kPJ#1Ft[ 3)D[:z v{u_k0aH$C$|̖RD&닰8 ūrR{vٸI(gԫ~,گr X:3n(ϣ*Nmᇥ*ć{Dv jz7"NzEtN5L&:$yE2@|R;HYS`/ }ige=UD`)_k '7#i!0љѢA;Auy7Hp0\ytj`'Y2c] 5@.3I`]q.]Br\Vo)Qu+.56ƞ¨A|[aVnƊ3 eƮOľ>Or-A!uB)؅ V?&WnGgC׵n+ h[pĠT1yPp9W x@y2 4VYU raAAZOπ)u>S]9`eԸ{}sv o?`=խ<}pS R+B,sYY0"0g'X!"tcOc^`zpNAgS\VM뗩[ s>Sտ Oy>Z:<X^ SzVtv ,[ypJj<%_wAT!}r v7,< s%S3eeCW.G^1зkA`''Z4r`hiXkGy%Yl }мViYٓҌ'P(r{-$JLww ؇ ijl蟏3-re TjX;:2㪒x;.s9(ϳ?Eoua)r"GşQ(c| @e>3?ЉE|ab:&f\~n:kᴘoa"^9"M{ˁx|rDZWuVO?Ō^?=,q.K;ĵ6^쳬fje^w' 59pi5PƀHYy%$1ZFܣbv&(ed|fX!˨~g-TFBii#H|(T-@DjdHX~6T/1ŭ@\iW'3扖}.a5b>zGy'8 'zMxH|"r Ԇ;(PHj8B*]miu٣nI|=̔Ʌ\'*63,#̭ԐmloΜ\NFh+".-੬_#leiJ]}G1MZφۈƻ&]o)| Q%IMt7VmRQ(07cE*c@h+_$U@ěc=WoY]Ս0۸`,╝O%? oaX#܌f"ܪCQߐK#Hϝ;(p1^MZ𯇢/`NgU/%FB<"6޶Bk_h==>ny\ n)Gʄ($v+gL1F0O^s~TY T4Vn-Di~7RJ0  $]*J ZX=O:*t/ <5[x5"a+.H0PUahwQ0!rxTp(  CB pegTGToZ3!az=N)ކuh(Un՟cZ[SiWK)`<^Q!ӘއE?]PG>AWsT9^~J@＋OR|I*uMÎfnjw!xoR4mzFO,~p%I{` +G(sLKR=0cZ+)%5,eoυ3 %EQ<~@G|V;݅)x:= rY(5ic"Aom7`f|Ĉe+`76|cQhxkxǿT*+=ν["ZD^]v='EtIL^ O!Cw/yRIJ:JlWwxmW\z )Dj|[7e0Q{c ;28k*ƨ̈Ok H$Y/>|t/y+2@#~' T;!"FZ1T1qЙ1CB5l墟@LXrӮLN1NSEz=-n& .,`ڍNs.H?SԽ: %Ox0 j\g]#W,5G79glEoz@I`PkCl=V3t|[H.Ɓ#uYgLbw 2/ sY `lԂ:RX`?TJw*֥ Sg>Hs;l25,Y_sqXnU4O莕X+^fpt"+w+ 7S:Tqmdu_7 \.+)^c]$$ݷ6pK1wM-fI"xTS?J63P/)+4 VB()2p"<}'A)QJ⿀DF4EcL8ڷ3Sx[ԙ=^ `S.m<ʨr+}t9/diRcޞ֒-L5vX5:dA{fm_#(suN/^HR? :sus{_1Y'ܘd_!M å\-=e:8UD_~X)_J:O~~0MEE=|jȋݽ.|!q?.Nd iEz;CZFdޞ(*3r _LŅ_1[b90<|S_urE3i 3ϔbqDhҬWxq9ѯ,^^Xhb`nsz"gQ( zo?vBg_97uő*(,/xZQbPY$ci sMNJh%Hoj-}Wc@\Šk2|Sü혹/[l5JbRrڵdѧդAMg$ZS*z&}omZpX~ASeo]=tm}L QcCM 4ѧbN0uG+pPsyqAU\.#V+ͱrJThR'΂`Cc MA #qz'bL[6خ.^p2tᵀ\V=# dzyܙ[S w߿dC34(ԉΙC:e&);99=>z ba K,Jުâb5C>&z 4^uB i_#jҦ$ԨX4ovW6ZX?##h~x6?vmF)&r"*n@yWgGUcEm*ϩS <`1#ZU(/M蘝@ޜA{`Zp;Jpt܅pvw(InT/Z8 MpUaGly.Z6?Y{@̄0j@6QED]ii?d&W$^ ,8=Wt}43}Q?!zi$B'Wf >~v7$?"O1F`X!Ё^y+}`}ĢӔXn`C(a7_I~3 P ̮!` 1j>Fy QiK !;7q+T(&ӻmڒ1BN@n a$)rH]P^BT~3,H`S;*#E |,'d"5Ɋ#odoU f_Z1ӥ`9L?+08?[ 7B,FZ4""a7U UAmsylHP_Q!RyP8 2MiB6}ucצ&yYf ʻ:/Ϙ,Yt珳1kk~$ɣXul)L > Lּ>p; PEZC_Ѐ~[+q܎z9ckLOEli թ^* k 43i)6/nbF #02kj\J)o@Rk@,7G%oO:ŌP쥦#6:B .arz;1x⣗ujX$,LՒ2nisj,]G@hك^z60ÆBh0늟!Op[;ekPҴ 3#9x$|:Y^G 8x}{I?I8p3S{GҀK2٤__P'VB/(<v#ٱ*2e_ˊ_CNd9-gF;V3xAQ;m~RSa >x6]M>Is]+bP#S0ВtڝQb^ /g|JH3k̂%Brjl:YqC3+ 9E0eu,ّ)`*l=E^,]\ap #I4B[xX<ι1i(۫)SGꁜ{""ё~ieedYX#~,k_('Pa2#gKJ{7CbKaLjh$Y޴1idd v`Buds/@Ov=sa}iY ןuI+">tf,Yw)>e[M{Tf,k0Su.X19&^$dvy8jӎW\ՒL. eת^\t/I= 9AB!9d. vLoL9ӴKb%z3p}CPonD,Bf g Qa( 6{Fup٘%ˊi"[k=:f.FdSƔ8`H&5d ZQx-́^ KL: ^β! ]m5=ZcGZ<5%:E<77FVBqYQrC)zzJ lF1,WO/21e߃$*y:X`?Z߻Wl;17NFާp &ͭc[}"mwIJBqH% Pۖ'EsЪA"$649!. -ﭏ;}= ˻Zl&-lXQCςѥ.ti|dk2Y|Ѥ}4!X9I:GiNG*]1GgEicS+\(mMJS?ydLϦʯ@>چ W_b*BZz2~߇&0TmxtunWT<;;Ub-!:~2!Ï {7—/3`ō~TM~XQ tuLJ$$Srh۴T&ǨN p<&8'#Rd] }a@qvNGc+w?j?zNJ˯Q9SH+++69{^Hя+v…!I2|1ſ|8юwN#~}•*ˆ"$*+n""ϒ~`RgZ߭v.Ӎz;wTf-vT! ="EQyr.K M@U4kuǡrx-5t ~g~<&CR |==z(`5JƝp/42w#ʾ[%6ycpvL=K0>:,gIj|%ZrB]? WD^=C].X6fNf=NY{2QTp^{MS,TC]V'Ǔ,F7j"J8Umϥ (G wp|ie;9H'#m17'3a0x?6ſa6kjWU":UDV\=!Ef` ])W%} xз x*dC(f9J7ӂ3!74#ͪc1 ]16q LHe<|l(DV?DO:AQ/XRYn0jJRpTk Z-Xz;SiƧu(ި~/O.Ʋ}vo\"M8xN%?q}ˌI+b5=+U82@yW?sxjs> FA'Ŝ@g3 Y@6^Pf'> Ÿ; GGH\//o9l>MȽ7g%v郑\`HFVF#*\Ld¸8dJv[w jMmJg6uWyM@YA1]& A{αmtһu!,w#7wQB[7g4EZz~>祇;!>*P(A6VY S;Ԡ@hx?a8XV@1^fHHO"mm /|JrJwn1x]Sg. s?&`6 eG|W,D4bTcĭם""=l_ ?vKK@~_S|cސH[Frd At{fK;)H<\z.* XR;l0<Ҕ]W2ZF_ 8IȪ͸AEyVK}*5j5EuЩ4**s%N5q9>[BTA ]@Alu%kYZ 8]K]rfGr E5k+^Ӊm_,c2]jg2b>KP8VD xy)B©"ၗ8WfsAB^.}[ڭ&IXPX)f,;Yowa ln8,n'}: ',ꐘ9#0Eҭa7xW+VtF$yWR6'bm0fO3M/Zޖ>R?SQq^}M%DO]@L܄v︦4s1k\ ޯ,A&x=eLJX>w:7{fO~uj̝Sx): ][Nr8zGRKI_q\puG1+1/Des{3YkN(NI>O%Ƈs/B'ł0ig6%Y,IZDĽ3>X54t9Q_yֳ#Q+k4ϒª#762uaʝjiu^䝠P^>A>ͫ^Ao-jV#2Ccڞ zfṉ61[eBtg|L헆%>ϸl ҏ`uMIsEWiJ*AѪʒ#sigo &pnwX7,+* +_>1ڜ咘d; xAIth? Q}龯w{߉AS 탖멫VyKSrdUmXi&XY‰]3M7#1rVv_lsv|E|L{/lO 4R0R&=e݃??or.uU+e"[RWB]-BpZ"^A7UK fX ԪZ[ym:Ef>scnkGF\q;ء!LM_AJ|sd 1 JawabahymOQaHsw`~SZ{F95d+6( : w$`Abgo"#0EDq+F"I'qYܘQ}trl2K~-ã\@>\wUr4[ț ɥQu,I8o E!bU.a._rچd[E'D'{uУ#'n]@kceop_Inͣ}VmwboL54.׺ŧ$$6DOEP2еȕKhS/XN`0$D +lLhA H o>=Hmj`p Bfzl6Ie5ݰ>F.2iٓ룛 oc aGUC4?HIh5[ Kk}|97,I@Zߟ394 w,pxy< aϨ>mQ=4觤os}dAg EKf|'croa) %24S|+(8G= g?C߭i!p;#6bkI?qKd9HhlՏ3]92UdI4kgA&vge0:#IQիTH^1Z`Ȧoޗ D UŚxzݗS #6A{{ 2%-syZI}qrA|BTo3ng+D\4aͫr jo\tWWk 8֔Ҥ_ik7-ƣ7EUEv]GI1}VEHa*GJѡYe~PkE$^d 1$}NEwX;.]@_l%u5Q`&+J#B`y,Ex[y[%wnN=,%l|T')?c&tIy%jC[RPx |%Kze2C]Rt %Mu(i7.'1fNֽY4]%TuoZ .f }!"eͪ$'k3z6Iql3L5_ x= U# ]S8c׭afM/0]w856םvkN^r3'H.)LL̸Ŗ1rU?!A,;(_z*H.=R$"WD.'[͒Ec260nO.0GIKI NV]@!4#5RW*[&OF#c."Mdٳ.VGy7@Aqעod?z0ܑFDŽ{ZmM;@r콯Pr3)t%R1 N3 ffqߊߐ 3BQ֜3M?[I6,~~ɿx>>Hzϼ"J1# ((Y"X_+N 2*}@<*$1/}~F=)k=oGM=L*ɲEu a\z:h3Ә@6& I7LA OdޡIt=7*9j4s' 57!Ct.QZG%V#)7q cd3Ȥ?Wc-22b #$oR {<$97&n&K^zG8bi-q|ojT& o=' +7@t.s1-^4KJh*#ۿ "wuK( AvaW\m[ZtK&J]saq4Ӳ;g'6kgj)ҁĔ{1~zöm#_v-y3+8zOBXJ|aǬkգfN!]Jd);^Ur^{u٪'HF 8-t#A|VFK|K7;ap뒃2n#%3MVi]NnT!IC|=8 H)ŵU>G1O ߸}H=bZLt@ a 2s38vb$6+N)*[N~ʘД0MbHnm}DYڮIX2g\Z6 Fm*K=LR_i88;\fYӝw-zOͻ9Y}᢫J٤DC wu~ }澃OVax*{vhalA'L+d{5pK~b6 Ehp:' `}iws像-}pZcX| kj=lFaGvidU$wdy׷1:,Ji+03FTF\8QQd}ʅsm+k)3@5x|h/&r?~.,;LB*74grk߅iTe Ƥfzp<%(^DtU!§2y/ѧIx-]uY=I`.߀o~Ӝ1/O/`V.nv9a;"XSuQQ"J _>tkזNW`Jvc$(fKE1I@v0Grjy} 8bHw+ 84i"T\;B$1 2k0 5~к OpՊ!ܻ{ N"GB:9Iȧ{„m_ A pe j%EwPFeLGn37R_&-b$$PXN)@knxB)W3DYƫ"|[@Wa?~-?]9?< _'%f^<F?/B= OثmdzT#{A!7/Ш:~ {5`J.\F. NjbHhG3-Cj|ܿ&Zф 4n5V'(L"k'U1=Ji d}B[Js0&|uu{OX" 6C2{x&0_x%'ś2˧;]2sn7'\ -AѴhxAnw-e~S0| ~qa1 įf$<Kր$ hK7&ʛݒWk=%y7f"Ks1IѶ+Åް&=t?}vTƙ=DM{>@=!o{AJn%:`֑pY⍥Nէb0a׻Xgwa=Tۡw-2bcC&T.!Iݶ&_v~ouC{~})Zi\PhM"! lG+q?ÎCztC.d0s2j&t;3\ DC *^]31(#߇] Ȅ'pTFs&Vn1~6 v䰮(U?18q:kz]j=\EsjYVIQMt>mmj262Ij5j,|̟z¢Oܳ8]lI 8dYdsO_QL(N#dm1¢I2T]+æYaW-;Mm}F4Wp 2\^:O{֍NaY㙂 l+ <܂K?X1pZWFT⬵Fˍe7xʙoA8M5BJ?BXɔ';^ Wjnvw/ &VR(8u+1>rnKWɫۑ08豜OQώ#°"1"t3-!̦;>[7?5b:4еC`ϊT,燈K%NNZHmD^-Qo m|˜`ԯ9pCqb(\M }P"ܒ0}147nАRfb;4iJL2])\֦ fI_N@40#<ᏺI8T\9HU;k2(Zy~{>BQ?Cyر>Knxn% fFidx WdK%+3_F_ِNT; ,!R=9$ިMr (lg3x%X>0 !N ,"׵gֵ]5dC5@cWWXIy,*ain"_qe!xg5?L3l3`dzc`wUKH GJ#Qn -Ѫ&GCIP8!2ZkEWDS$am$ֽ1f⋘[z^?t F0nNM {'Fžy( : ;wGipd6ѕP=5INU]c?qi|):~x6 vc(Hсdv%!Wشp^BFyA8KIO(2c>(fbJh8D {a-QTU DW[f"PEfaV :ߕg,dw$B'hhtͦl^ߋ۞3G͟ԍ|/Is>K֮^Sqs `<kv7[:cÓ!&X;`I3& ] qo|9$6E<m[/AIMWY$OzI[:PIrCiPu 90XU[Z^;&ub|:~Go6vyX874 R:aPށqL'1[`vjbsl[A1dJLnZUBŒC lєh} nIFd-Ri[ ]U3 hx~w} $I.:M3K[~Kқ?b!XWS;h/BH]WN$H3/0qqXK;:gsԵxӉw ;* JӅ #(@*!/#ӑI1$*xZ:{`2! r\GTf-D 2B\xeNFhS)G+O+fouBLlQy4<r.GlDxqIQjkC*yrKlYytCk1v lxwL̹69oX6&Wd}D= 'pCM=|gLcz(Su"s!W1$ n6(:MPh6^j'tGݽ1sBJfB^;v$޷$L`K&{:JpwvZ!("Y؛U3xcbqG:-@6JvY$E3Zwe-d),\s OK;@  ҂f+*l(l$]ޛWqm.O(%Bnxݗ˿<.%iv9_-*ӷ+jޘ-+|k5 pM#t!R/7OۂN=[G׋!DBa}6>ƇV*[w){ȜK;[z qk)1S(<?4|>A&_ AR4M{U\3M fPdUmRlt%f e1/dƷ1V ÿ9jì,vm sT^ѝ|>Y*ezyP^: p |o~~19ʈo0<ɫPtiZ)fr|ӭV O䏡e@J1D~Kd@#{Ma=6=C6W ^!ATGĥn k =j`;MFt]9 jA._ʷR'Q(U@k>UD^-<8Ip'sĉSϽ R. ٝPH~EZzHLM@/ygkտTȦǤAk8֪yTG73ju{T p§a۱Vs"۰?)ךh߲{9㴮ܼ UYAVKcSs)b/O^"f%qA{?n˷*V}+rp-cXzBE }Xnϭh /{]J#H&^) 'Kv*XN:y]+M&3L|ABNWsػpJ_7 C1t3:Lm1P0!͖>ǎg!3VtoJmMDLt-' [м=CzIHrX"-:u[D/ (T+a@8 }}8>Ȁk?#F\ǭвO}7]l!'HhC#uEfZa%T_?ܾ%N)n9U)y'$uOīCA`h5!laap,xF r]WB5T9_@_ _N 84dX&tm]J͍leK3HH ;z_K9G%8g*X 0 akb5apԻJdE- kJRPl("9ɮo1[% L&)~>}άZazfyV}(oV:c'"?I3jCyޓ}NHnZfvt*HE""` C᪳!CXBL2,%"t. 4%m^/>ǑUw_(/@6p Q)5]NHjNl&V FmVK`$M-X dcê,EBh7$r$kP, R^xe⃄r~jH w1?Ey;z Ss^fD,dVFg:ƾmL%x(p83q1[_4FEעFY=6̢#?1$JŲK<ۛ4N#Q[d͞O]윘\w>$|ԔPTv-0g g:υM2c&4S2 7 rs!C;TYmF(PCB.b>UƵ,#dgTNF"JEjDdz>V nK7VY~NFl#\v2!RhUET)G(xG$lEjy0D5K}>_-C%:!AN:-!Z s t譽hP`.jKa{zn$Fm6K:QjRb!ǃ-% PJ\TWȇZ-"z.rB;k_ 2h{}wz;_4B(^iVc֒A=dzjV5͞T @XV ,˃#}uC*ڊא~'B~ ޽HC%׈pb8fpUb_rIjߏm'HDuXIл<(väG3?Yb!E9n- UTh*e6C1c!%; :I&ѥBaA]_I ]9jɠW# >J um|mqM&2+ ;x?s"VoӔ _ڏLeI5ܤŠzuzוּ>Xmf^ C!V5HٕF*Y@rc]t >{1G>*0z¨PC(}nw!12eLntGb˞r$*)cGhb BU_`~&ȞU2HQz<#ӔJUwaÖhHGK +w1ĊNUB-Z3). ~_.&V\GlI3nUڠe1L(>ٶk_x*?qň@6*`e1m{_ _Hi&d7|ՒATC3eP61/}ckwį!nF%Lz}^M[sEc6_pD5s1;`޻k.PQiXacA0SޱIv4ma{jޖQ?H,ni+&vI┗Cw}ÞυIML>@]40ܮq{E,ՠSDc/ДpZ2ƢWTLtAL}L4z,@+2 !aLu OSvIq,=Wc튆hFϿ[jeښãmqF'E~ţ8xWU2AL9;ً,ƽRG'c[ci.Z=WAW9.nFidY $| Dκa&uȧ2ȧ\& ? a~g9H6ȅS/ĀKċcyF Pi"tCuRXگb'#yC~D"<= W2!.mdkG4>H㈁ƈYu:'ʰдp9@9.0GdCN7ˆ5ZkACK!, gA*Z~_Js'J*3mrB SߗiML5dzܟC̟<\ۃGy,>xL4kNs6P&VꩱGifyazO%ÁkYY|b1e D։]QGAe!`B GCӨV5|^ih̯U~PJWx:"fL*3pZ=q|Z_I !\$%i xAr@<0^ikʝfp&`ƌ&JY1 gEX -ҽ.PH|؁L|/QFFbt|'2) ('4UD+͑f7kA obrtα9攼48mۢG2e:\ u-72h-#:⛕kײ[9@?Эdoj/JPXܸN9 ڹ-_/峘͏p Gp0V1[5kږXǛoVP*E hD(O0卛5qt!-O (3XQ`JSa٠Yt9BPnAYK:51km`H;;G/{ۍkO;Z=·mUt帵ԻLB;syxX=|7&hzTBkmq/ 8%XMuv+J}42: W/ӟFQލ"'8'ZE!P71,YrYo|0P$E_yJw'Շ.>`)j\W6ecĄ&xQ@/P/Z.UPq"?F)Zd Vlbҙ~;3fQ7ʽ=`2R/ёC>:PÂ~~DϏP yZGb72q'o'X5n,,4':q[;?uJY !17Hpc b206eWڬ| Y,%Lt#Zw2Mz$/sBs+ZSjP|%y!S{ztT,Z@ϳݶ~u٣pzt*],@gh廱ΦނL4>fǗLuэ8njfD YWP^e} 0g?uCpy5\.Q9+Cg7e"ZϣmKӪw8j&> ~bD԰U\ӁglZ~b7Swl޶H`(TJ,A o}a7[ZQ1{A #* Oik`boRDh ǿ 3+i"`m\;#69YǠcapT1m)rZgWe-Aӟ~br ȁcVѥzK˜*"vۜ=ܭbC|ˡ^-[KN:Qv­ 4$*)X7g.>e 0/H@oGٜza8ǟ?@^LB2^i6:xoKdAPk7߹qH*)Ekcob.ӓt[q)l/a ;dTCx?~` WՒg"z|$sBc1)pćh#ɍ3։_P^§Dx*%u/֨/: M3K_oۇ֥2e "g\#`qq~IGd¯9XjV26wVF+_4;&sv|Qų}ingyVL4^O L`C6Z& ?X \nYGY3/,bn so97 : {Mѭp!]v' gtX=]*@uEpDVP;\Pؚgi7%<ӆ;g<|GULcU$74 %hE, q2~\3*zCI1_(ry}Cj {q|LLEHNRœ0 &2m%ӛޯ;!o}(73cGC做 'ӱ}g'_٢%cyz PJ1pbЖmSI#T!<20ixuz/T4c jNӇr0' RP7KɄWD+U{]W!;}.0Dsm[k]mc`^$Dy:$=Ǻ@ RLQex+yу5+i[d^ T&'tQ"!z+ :ZC+Cݲg΁{bPzŻlȄa 'zj/bh zj*Ml bOR#5oHla+-dA: 0!kwߢw9 ˓}r *mVR)ϭ>pr~OP2Jt.6m@$T ^CJykD0!ttJO0#xl_GLޒ!R70cB/#4=Wװ?ʛh=al>g+su ';KʢpqK.sѯ- R hC8ȣĬ٭-$ܗ+20܄_@ʳZ1;߈$(:y]I*X2 )DJ+UY6:?'=ڶ-G;JlHXA<0XFݷu1qC K*-N -],NTZBAhO;a(;Yg2SqGH/s#A7M ӹjgڙc{qxݑnsb>1Mc;9tą-Dbcuq*?0@ɠģ5k$MPAKQoOY6mǙ *og?'|7RA`Ht!4*=fBvd^S|AV(6eA?R5ܢɖ|}HTA%7 :W`R0q` Sr&-_"ux**uIGX$-@'2H*MSE1]cY FK`3>~qRcEAGjSY=f2F*Wz>f25f ۱$Eo";ÛKNKA3-FS}΂&) %ږa7֜oPVfQꗥ, (қI*6IS6m [~s>W~3g_z8F"!MOj S&|&Yti_ٗ55'U&^ >ͭgfy=-TبۣIε)kSbi۹JbZ9\!-8\f}<^ԁ=9Y>=W8>a}W;/}\nQdn#.VDO*s~eAӨ*.w.M+W{t(WMQ\N Uk=RE v'}__39X7Ί렏\託0cK"wC9ScR%t@ %{_;4Zϗ2*GEw$~=*7lA|9i(YɠĢ,W3Nf ,+>G!L]ĽUۏ)wM􂼸se ~ܬ r=?H+gω%D KϒYv;巖kiU.@ nA&fouD)Ujb:Ϙm^$:C9p):.au1Ze"*%"KT  bdi>;YuLXB,ѺSYf\95f@_.6=E0מ 5wQYoG&Qj;=:Q 9qH;sA>*9 %Y<z,sϏ\n}W-GLWӸvaUkŠH6D kGC%Xi`Nbo4{r#GgG-d v%^&hl&N;̢uA= AQUt( *+-c.gA^yinFpK<ځ[/U30qZA`OFn{70 (d+ ;'T'C # 3stl 2aqLkzn.HS( m[QCOpd@T%{SIgr}Ue]v9 x"VR.X^{/|Pz%V`ZqF9  Ѣ |jp'|dZ/c6f1z&n>ҬDA^p^G?;40mV~K xPL_/f(/bߚo059:þRɜ-fnede|Bd3n bȌS,W*d[[SMSqTV` ]m0dkq+YtdL[xWtUϷKpV7hrC$\:c],Vn߬29HbI ES׶ߓ[aCZop"/Gj+quAt@AfVxP*Ӂ ʜ͠0:>iOHeCAF)֭e\vҕ C[2,'ipPj=asQ9FOz v*'+O܂Nwla<$ֲvZ" ʃ9/USMz_E4 ׶ $Nn4M)s3YB "ww3XyV_o%ۅ}OlZgH=CZO-E4cw7  w, . .XX:#40cc:&0sTt}*S-:w2. _Ȱo0':p$JDl6tP6[Qz_2`_AW5\LhYT7iGiQQ&&b3@zc:! ,s1hȒ ( KK8>F19@ ^ΕV`U<_t)CN9Q}ID(߀aʏD\-MTO'"/CeyX}{'{wǝiiDK+0͔>v[ O=Kf A#u &Y60sq p3I.;cR GmR3rֳҽΙDUdy0k+yRK>5i_ݫޕlT'7/D'<ͰsLNM /V::7,h$[mq(/Q'MU21Z]roE#bf&tBA*۱_%~B{Nv[8#+#mv3wd6e|BNyZ* ƁgKj I֧6z[,Itч#ڼk20 s8Mm~Y?LP(qLR1-g@%/غ)S* Gy`{,Vasn}2)-GP3w^G1cJ ि`KܚMQ$M謥!lC:Wl'q;4a?'{OqnGZ9ƄgTC!KĊKFVEU,l4I{`?]4@4.EwLM[d{3v|?yM3~BL)s6ze+:oE"& YPq Xpeo*7JbϜ*ǍF ޚl`" _ R|FLKGA@%̛k$ΊsE.H *QݙyOp R MռL J@Bb٩Շس|JEs,FQ ^mTǰ"V`XjO2-gHؕ6r TQ$5]-&GF6R*6Wm1p0=BN-W\Q*l)# 1쩔d/'-()\PQ5H$0}oQH-4s\FeZBUz)+"[4Up$@]J+t75m,ʰ"HND2=3>o1YH%Q?zI(^t@?Nfk& lYX!:o'c]Pl?X>B3r 7G/t:c։䊂u{쌄F`pFqt~^u{")n))c>"%rIKA/BsbgI" _m#%[a Xݍ\֑s:5z,X->TD"]Gˈk P1go)PD%i̽L##@ P[;lA.$Éjak}[l+>uHǨY[S㸖PhvpҺtֈPw E?,d?KWb5pQ_B &/iy69R`.G10 +αLU~ZjN!" c(XBGCB ~2 @d`qs΀u59ybg,ZT2= ٲ‹=ݥhHVٶUK ɯҔyRa]0nv й\WԩV*mTb:u)ިd7> ki)#!&+EWKq#VAPJ'VX|TU q63J]Cg,[6@qJKN]y"JcNujڍ-vu:Į~0x?>oE;Tʖ' (NĔpvXפ(6D- \̆_zo'ewZլetxI_wϹ ~)A DR릪Pz[٨Tm1D _]bCH,J> #rC͉|WZ Wz!\ cI󭈜d<n=S?T@[ #P7VO9F'҈1'dvNmzd Sk![{ >9Z 14ukB]UHG?;Q0dRľVn<?4/Dk:vn^>׻ jCU?zsٮ7pM"g YX\v;]Om:"~˜#ȱ–0893ߥ -7 >˱No 8XK;Ń+PdB6<9`VcN91tbO[(7 uc8/08BM^Ov@! >K G)SߢQDrqTtc8Y{!PS=Gp5LBf.$~Ce;I8쯸u໪ꇏ)1" djibN.ĶIi *[; ?Ze`Ҭ6s>}1Kn“wZ)dw^ ΎshAՌ :tX/Ґe}:Pϊ&6s/+uX۷& ;t]DZ#JڂNb!m5)\ۚO@2c8~nSw6V"F;,C>hVnύ/8KBj5:CP8coR\8BW%P]tԽ;&dS܂閤vE1'u%b"FytV$lt{XY-O5@8Se.5Z g!p% -`zHnhzc}! 'rԄz8`!^3כRh>=p6yW~G~9GwrE%Sw\\};گQ; ?ANIS EJfW-)3kVzM1QVKp V 1z[h b +#NR}-!ݾ[2_ǂg4GV֩tiН38s?xBb@G)@֋}yly?(wXpaaY"% +:g['&)A˒Zdu$-zeKXܲ ^ߍCZ\!rj/Ȅ Ww?W\22U$ Ep@Ycgvpf$!^FBA;XδdÛLiҝ9aK ܑ{`['FMxiaYB/«P_CxK+hz* <@geQa@.j$+7@6R Lpz(.3S_bLUU=)ln-}_[K%uڠfY5+[ .,ǝß()W0"a:6NU Qo~~F) (VoJaerܞ Tc7UBaf6d\;r7tEÇWahxpHr/y_{-r L ehC?̲t%0^V҂3V$ԃ=a]w0# @m7H"Iymk!ޝ& 2/́g?J 5g㲌"CWK8_fґxa=azUc†Dc)s935c)sZgk ]&6]9Vӟ)4Ú-a闟v)dA:Z$TJw%s/SxŔbFNKUU;l/[ M1-(8P̘@tQv-mnꨦ&|[\]J#x aMMD; Ж 54j6t4TCH69a75\~qWbѶq"AX Ӕ؆e]8N~fv&y#V_t1yL =Ef:u34_*Hq|0V=DDm1"m DZ 16IBC9YN:L0-2 S}]njaS{6kz\w3Z~~/=̉! ~ࣃuti>%!䂰]ԫ/)H^~gB) 9?ǒ |`;x&*w|pK'VtcXlM Ϟrch){p+u-pj%)eoJ~WkG8*+YA';[01bCx(v@C,_Vx~5imCeT5Ko"4E4RF@D0ɡM;OuR"1U)7{6O}}3́j0rR` [}v9:;)G1c vi.Qo[ _l/q!U*b+H9DYMbĮGr)Ȁ4-wQ{6Q=xu;('8O}_j2TD6vLHґ-YG,V'ս_:UX!Z ް E%xB_@b=Bb8=J1m6~ `?#cvԀhj >6|2C'ס@=}9'lv7,/þ7N1 Yuڛ m&b%Pbȴ;}HI1כ|`b}PGlcI4=tLGF>N)c]`IV\rhj)nz?4;tje鬻51i~~Ts5!I+U]ő<]f!0܀fȒ՜ 3'UF+'j̓^)팯]g]w<+Gt$,Q0B")&O}[oU"~e[}dw~,EgNv+R{xxd$T% |7\-Gx(@]H]']qc OsV@6ä́D`)/v s ݅8¾By@%~d-c1^6y1*a|iC߳WbIɻ "qf3~ *'%"O>mJ1Pd.h?j=/et۫ߟ*K(oSwV#:CEkxs+ =^N5Sc:0!vL3.;M5{ Ml[_s*5WJ~x.(y AWjbxv:ycfqyT=ZI6d.7Yzx Q˔Lv9=X5~XJ)s}N4?n0Qx=Et :FG×A_b7As蔣F;BH{g2a(Edy[|Pu/q)d[4t>_/!н^2DYz9)LA v{f"j}iU\< ֹq*'.4D[dCj?#4.Z2LL|+ehߪh耝N3*^; ߆H`*6ɶUiGwNwKr 9gNJ AV׌Cs ގtƀ|\ $+kOJN h+Գ$pC*8zP4MvУ6oMŢ q:!,{>ʺ4M?H$a139?ʗ|0g4TBg)ܗT(eyS`>9$+gn)ܲr v O黒I!rγdmUPG' 㓃\c*;5ېԎL7r4VZTa Y`;!yM1tskB4F!yx:t5`7ꅚeǰq}q}~΅GH/)Ŀ95sb[!̴US ih6zg >P.Rhq(v &B?$p+$S.z}f6tU=އ^YBnVǶvVt Uܑ D&b4uR[e\'ٓdO\#,?tHULyO71}S`@Jҷ9=|TlBHSמ[;6٠ mcԩu!*h:"RMC` tϡojx4R6QÏ)Yo 'iY'w+@z(rԽ>@#`CȚ-}5z.b6+Ic2YIIžۃ2O2̜cW3Nduf3eM~ ,ʰA'gcedUNy!sY oXsreJjQ KJ th4Dv3oQy_TN4ho9b#:J} ж 0@XQI!?!Xp `e`~+=seX*xaڈ6> ag9K wG[QK령 swoM)(ם!sx߬ZڱVK{eH6Đ$/ F7LS`ӄbޓG[iFu2>I~Xi"ZP&y"g 8t29j%rY 0fcnhH\c~-& {ٛfƢzљUwUS#;\{0*~ǝ9qD(-̛XA\BN!T'$gp24A|*}W(% Qh>gn~[Y03%+JAȱ.OcwXi ՕI^o$N>u  8 Cku({O UJU/k"O1G[C!DwrV(EmK~XSnrt<2\H2i׀Zf$0FZ}"D -)ځ?CsZX2[|4Wetx% #QH=e$W UT1K)OVΛ!E0>Zy+NA5{}+%#Qx@PAIV7 3.E :w]YpMD͵v0xͿ̪PډjLj>x~Yo'^PE * ?).cLz[jfŸsq VѰx@m_y?hyσ=x#҂tSPt{n8 b^ T{)^D5sQr:z tT"/}#ᢋzX̧Pv?sݰμÐh3#bfC5TCX?`HRW:/0ųd+]wDYPi'(ĵ.,"ׯGc2s%Mr B)֬8qqQi628bom$u*ax1IIZ1ɖ,Z #N VoڈLX]{A #4^GBNjfwwx- ǕgbTSAs&.j&{ s Jq}6??oYv q)o9Ƶ0,NM3t)H.ARﲤ}MH6~eb/pW۟c8ʧaN| ;j32چQښ1Ud,ƒs`9zcնM.Kj 6%&6=$;ra1R4'oe+Mm{):uUƺNxNfCr6kvP-#fb1h%T ;ݍqxik 4FC5XUaq&ytqitǥh7_-8ȺTGw&'C snu%Ra96Y{1ǘr0hӚ8E/ٱ{ifg] /#wME,^y;6hOv 6Jxi5=@ǓrѨKQLJ#}EQx#)juFsTe(# Tu^jExh 4!7jJ?+*?d'r=YXD\²?lkl,KGs7_d|9x;[m/ntm3Z|Anm0uݼ{1TON}2(ŗ*u~Z>Ú>⎚ n0J}G 6?0ݩyn=F?qbH SaJNbJ뺤}!~Onn턠q`h^ 4fky @ʊK-kG*Q}gVn+K٘&(SA}}~a*e|GHOmX4˭2B=yl+̨&DޓlRae%!@{<preTυp@l2fFw?vBu8D,3= ]Sztuъf5VoAJqٓ>[^ӯ=t py.!S>Rr[-{qlcFZx^kkMA iM S>f5Ao5p_iӻpfS$gd% z>렖EP<%@}_ܸVXU.|-sg[EZ݁9)M,Y#ޙH;|6wBπ\Z 譞^n'OQTAs ZJ_pG< k+QU$G!~PF{OU8D \s硕u1ʋIA'>qT_r~nB .fղ|6DJ3Sv>6P60Z,j@rES't;E6`/{}~vE-+lB +$@cH]qt]TlgD0k{;$ܺ>]xp(" hR$kw,FsO1,{{g@SL&q:sez!㿕.~~/h/n2mZ$ӎj3`MEHE$!ou5 _8%>0g3E Wq>;|+Ȍ Rsܩ-\Jp0 sU &8ũPTlQO+r#Q|^i:Y+JIA]є 1c^ Z< sݎ#GjoN:|͖麤V64::v@A7 Wv|\oS*ʱZލ[񡐆fAʠ,#qS7 ZF={?$KsJe)O`"E&D]JF޲Ͱlw\ʎ#7ks|]=eY%{9 m4MaL]#AuDN%,$L63oi~"m:Lw*4J"YV8%FCS^=$1Js\؞ W l:2%!AXZ+ȹrl7g^B/EuC,39&(poW- 1KV ]4r!~assfJޖ3 ߩ`jXKȏSkg5+$ Ef Z;JG6twC*[!ɺ}BЭYɳ꒎2ΔXG#,$,a @5YSByg%AuF#~ZG~GfWMZ@ UV&e$W<Ȓr-sKԫҁSƆw fWM)~G! 9n\3xL[Sg $CLdU<ܧޕn\y)Zyv͈- sqlg=~{R+F7N(x?EJL!ƻU+*E'8&92$b8R{%`{Y[wP,wtA傤05E^ZËĚH^CIo?ܨR+@,QՌ/4A! wBB؉N GGfsZ߄F Uq u\C:Fq&Y.u߯*H/'Ϻ%A&GXŊ..@?^W]|Z^z`&g{'}H%9Ai0B:WM]*#S$]D}/4pG$+|IL#ŲHx2}D:Z aϒQ!5 surr`~ﯡvio (%ji}S3\ITgWK;z§%u'N{ݥ5ΥB@U 'pO~RO@n/o/lCO%lshgilPyjmn o8-%ZObX2^=6h<6~#EvH Z48]JZ-SL6j~;yƌp܁#\-XL{hq&HpY晕[1EW?}v*- [+G'';Rmmyӑԡ@w;pƠD?z‘Wl *Wg[lfQ}}x x HCDI \ K`UK/j0N*ȊڷBOA ϧhq_0$4lª* D>dMOtzp`J;9^lm"IkkF#!2Z&kP)'# a EN`.v<[  {,j7=tTs;ib=O84P2Jޡ)4f*L[[W$+5졜uGC-rg紼~npE Dj$?pTV1-g@z.B_x~;q" / CD55Vis=>lx׬YkL3=rj]fK"W7Pw1S!AWtO˩^Psby ȗЮخ * O"aa.p'/E4GZDA),KVpgoX%)mF;geWz^Oz_o5OlP>C91U\;)D ÛNdup^0}9԰uݥN^ZSBM}zgֿrzh/'F Qwh r`V {YXyΓkʊ&ݛna,^/l7(ڎjq`q :˴EqO72u}gT>= \_~x7%-Ⲓ6~=Kk&F;%7R6h)8J0 RՒl~:nxU\& {C~Oг Ǹ;vYO u}K`ܔT3! 4@oV:qdEI֡_="'smHW% i<; [m b˩uO24Fgo221Oa[{6͋n8 㬏qp|b>ErK915Dd:{jGgQaN,1M qhJGlxvF3G]<\Dʥ^F9&2 ϻYȠwuhډ䊂}qnkFXT׹jxG I"4$PqX I)Xb_JH0q+o3Z;{R҇q9.G(N (n1"Նv zszTΡ3k=kQX-םABhiYovx dɊM|4&7GtPw4Ņ͠_>{0`:N- zBlqaѐ1mNe1'iS#1WB'y|D bxQjJ؋KiP|I3O#lgk^5Ymh fZ#hy;yzwr=Gc\{Ik57*y{E3 EM̧jv%/kP^k?r3%8\{u+Htu gha EaAwiDyƚ8!R.a|gDұ%gst]qˡnhd@3ΪtaI hSk`/p v}M_=8 ֤`hA `;W* F/]ߺXUk iQs%zsM:d@Qf/; 43GtVoVEbs͌A`!i ki!TrJ~QF_xa @qX$$YrLaiJ"Z9l乞+3YJC.F콰J+%/;t? #YW-A%m}@IޭG\ͧntL3*JUl*Ҕ /GKc#3j$㴳 B oV:;R n{Dg{ h,7uTϬLZC>1iOd |UEEqM9[٬Y?7*m+}A>I!0QhxA93(4Yb ! oCQ'$gTr !sH2 ҷk1%:dZEp.%K)d,645ehkEbB=*>j'{;*Fw&{RMr, )}) #ӛ1ךjZiWE@T,w-`2!HT,H?6fPd >Pg4qmu@m<{l;~88?tsb$AƥG0x%ANNbU4 !n5t8uVK,:׹ VZgCRyx@Ee>Ob !X@瞌c%K#nu{|ƕOYrφCMk* 4Mf@~ q7bﲥbRSh8e&'cX-is~54}b-!u:v}{MHkڢy¹鵳'+?H3:X,Ϯ{{oz kRX܇FnIn\S\&} .#\*/vKYe㙑3'TT 't!E`b=#/zsG܏ӵMȵ/-7r/_ TpwVgEj^k޴OZ{Wsٵo+E^o.7#  B򡱼ظIALYZ=n\? 2Ŀ]) mo)Iiđ_ &^TRp6 s~/ҶsT,ZZ(n/n$XFR@z.倱 `i+S%WS#FeK4s#rW^Ȧ%cXj"Den QgwZ62M8;_,ְ =uO8]R$6ɰζ͛DZ/Y 0Mn\a!0`@( yM9/p'rOk!cMy/-#F4+z06jC\l"s-*4EZ65Pj={V`d0\mevYfkZvN\́G f!izo?T(;rᩀ-L o[}cÍf-T ju* yAWMtB ,:ӣG X뻁~rtt'X)2\rw6yup;GI/ZXtpLBbY7v}Qו!k95ՂU)e6+A{㩂.ϩFaO]S|WDo pF:Np^SGA@t0"%&C֚U`kX8sv[Y㐇}EqlwCYF~Q`m;4[[ҪǞk[5u%4+P*dg[ c|JY\z stQ7ïv[K#/plj yN(zvs;|Fؙ+prH}ZHpIf.3@a^&T{٦zCءoNm_"c2zDenYt٥2i3a6µc T4= }97†FBbR^is 8l{f}'h…}W:]hO*I_LJKGDUTM=3$ZOOܡ=+u\{dR}Li()b2\݆_fG(tpf$'0S^C1Z2E D?P^٠|0R0}[2hfD-JMz߈JKxu6f<"PA%aQ>CFc> s 'xGƊCÔٜQĄE*JNH:ۇGnw!QC >9f\\bz$:U&  IJ0H  HC 󖸬h|O'na2= q?5^[mZ}YO{WnvT<)/dmIt wgrS;%/a vme߶7jYˀg'.vh_&NtַuӔ3JشHf€Jqk9z&ǟWlx[/_.m$5>Uo]|;Iz\?EO*{B[Fb&<GpóG(8_*#Ha`g=Mf?ѱ`c[umM0_1``u]Fmu[}?h9\a枥&p2 6z@3 Uw|WynZKG*naHC??pOqTؽPe90xϤFRa+.d$8}w EԷjo즰掠!CTKdUNIX=v́}5>H uCZ$!*8GLn$aLDPvaoȡ-o9Zip(^%®jZac-}Y İO2JU>~6Ą`/S;!:R7[Ka:L@LDljF &|].]0Y,y\5JL׬WkJމG&?x'T4M54G\:6M Nt+oyR,/Ue2lA;ɀ,doOTB[wRXiX1/&y_ U8r.g(`4$AZRmB;dDTpzWhO~w``rLZ p0ΎVB+Up`*%÷`mHp?A ,Ş̅޲ ҽnqh5ZQ]$}f9v]? ;c?9׈JZ0-xЋC#R@9b)ҕs`96v X{z XͶ } WSVUG+#5jBHt WrL@i"WvSAg8Od:k͍20C%rAyRmkQLjڏC)?vXi.vl ڒw[^Ūe@~?%JbGJ&".Nzc3#v\b_t,'Ʃ7:\v,pM:T_}1FJ+^F 4J⨈Ծ&Yll3 pJs?yaXEu|HƊ|X` 1Vtr5Gf$T3A5h[}<M &RQt5/W=-.GBCXW7ZYQj;Ξ,X3rU4/m5'nW\GN5KE1i0Ҿ}Л3ݶ(*֡5"H 41y6x0@(2A(z׆uyct4=|ीHLĹ-Jc%-kdàpXx 4+٫# fU$,gI)?G FbFAš&%#E@^GiUSڡ6̈́Wyቢݓʇ~Wsxb-[s׿W?O>C]mF.Vdo~7i%XH*)blT?'BJdPDzч/퇉}]}R1vE?M H? s@%"q&:L%wO7-J''/7 F6nt*k#K5H 1уTeO^*'! fZ<=L^qnET.&/.DS AzEe4G _l_׊C%dk0 ?]Fyˁ泥Y]AhDi/p@{Ih@=)ʐ<-n&3k+41hS +R\YnqއA\.vk@~SΛWs`95uhp7K|VP*&*z^.=-bauh5w.b[ S}[KpZ]aD8- tީegHV<Phm6wF3/m,j8!* QG"d,JқnwH6jW:^H*e]ߚ/4Y\8q"7Tlߌq ֫͡TH0-QCğ6x"ˈ>=cXm Tw"wңg4ѤXf49+ӧL\0FOQ:M- ̩fRa ,J79z)Z|*oW+_ڔÂߤR}{+S#Y@}q(( ;DO7ij+bW*XB0oR#:: r;y$6`++ KU ՈPB2esyu|!f;DǮ$GjOYCy&-@XZ8hqr3CW YfLH٤u1j`;@oPKy|~xEbd%֐正8+.q4sK@n0$t9Frq^S)f]ˀ6v+4W}Z2\ES6fkwK2 7Oh0n}O%Sps~@ەV)%`reMٺbR:Kǁm,sgĜrAoDj _#D{3\:I,]ЋnND°Pl9xZ;~ȶ͇ޑx-SYbbĥu9Yd8] coIgC&}PJJ]pXoNhzV%v(1{cOiǒܻl_&B 5W G,&]dDZ>NXSΞ.{|$Pb"lP u/\rYN14(ŢN]&T&e]f bQY&}VXc8 Z=û7+yA;Y!0rO&=rբ&?a{BU%Mw1ClU0ؚ= c؁W̪T]7ji%ElXo-!1?^Ow6|iP{ɮb|Ѯn);hVOU@@f#6Q[9 Dj,Ilb3?JfG#cttMZ8(ȼUQz -']KBՃFFzQ89Y$$|G1Ћ3a1Xd4A 0dJ <^IƔȨT=r‹g>dAit2/"h[l$<9n$>g.&HhqdN[҉Sl-8*-^U; ϼ*`N]807-Z\[a掱͹ج~$G؀!5f0%+~]٥Ok%U,7Q-f@!B8?FIdV(*2}D_'oU6hkadLo 8jBO5b,P++F$qXm1*Z%-V*<¢бSoFxމ=Rsأ)qKKp%uO*{b FfPf@ٴio- CέnoS1,3}_ǺcSsjP_Mg#.fS4'hWjiauO_k†4cH5=+g)T{h%XNĸ.}FJڙL9Oln~)-5bKjUS }٧%[4,ޣ?/h=$hi=$u DN.6 *w=*''ݠ`v93 3p-DG444In~UQ+}NZ{s\@PMVnw<+m+$TWU<)V]:j#"<:4rԹA.bQ ?oc2R\SZ}oYQD2[}F8=yK,}:/g:[T|hc}C)Āc0m 6, v|3-Y6pCrm;/)E~Ex:InC^*rtOIŭ v%xG搷tݸ )iV$2i!<"ӓ|h^)#ݺTMwR̆ Mf*,)Px (P@G}REZsj=|]I߸@0p}-bAtJ ^ܿh"<0\TmV 9_VXH)y 4KT\ɢZ$^OPU"4 'x+5Ɯ!`"h;w>Z577xzN?=*cr-n:oVJ8wW>=ǩ=2HZmE` Pt줅ԏ΢<]j-#MXVg^]VgZ,#vhHR_{:'BGlFG~tV r1y683*\f\cZ բ4JI>DZw7S/|3'dnmf\8iTdsrDR"/CuncoT;>ZJn+ 갡 K1.㤝􅜐o̻؟Wrk2K,1Nh\hzwc1ɕ)e{ |5C9TǏ_>#*" YY&{Dn,HKbUU2X9L6K,3<Xq8/v eh-5t 죳s_ܖ* J뼱cFV(ִyÎ E6KoSv{@&kwV#m*Ԅ>3 ʶT 8+7Ax8U%*sOo̟j 9|9}%X(;TMб37x^ _ɑ; $N&1eG(Rd1Iyy%O sg:E{ZbDwy |9݊@sR :8R~Lbz$me%p a/ mCimb-# P0]y wB=R'U Ix(omD\k->N9:)/O "t2zN`' Njz|'yYЉ "CXBq n20@,ۘ%\ߍ7xb_Wٰ>::Dq,4M~`pɇ@k:3mz8UvG5{ Zv磐p;2䱮@Mg؆ƛ#{BS*0trUźQ:5f̴ƺ `c5 Ƕ$e#P*X3gh::~--lxpi+!< dgE/F'&Akw6U%nřC2L{[{9VɃa#@#3X;A$і9%'xzˢy_wD0eF]ѓjviׯ-}׎ hp1vN!#*>#dǯ zgCQL%pSz[ :̋b;^XppY3M(*ƬYlXa>CJHqE&\o r$(?iTKRo;}?<>6\nN&5% `:=޳ t7(k<#BFbZFe|Uu>_+?I}߾m98\;Q[T>Ԗy*'ojH!?-Բ?9rZq([ɑk_nj$A{ѱYMzwF庳^rZwӽ~ctR0ߟZi;v)!碁YPp; [Ypgd ^kCcLTIti^RjGox5X@_:orF#}dh{åzc/~b5͗ovceΕIG~Pz_izIAT&|DQ-6,U >.HL 8LA}S!\ PAud4I"DȰlcC\`ymš aV#>QJafo`mSb,[3~ČC߁à5vʬjJdQܚ6$FQ "->֝)FOR_ VmIS&nfNm;#,)m@-H*ex942q'Jw)*V>!vvZPO21\gUZ隁8/*=s!/Ijh<7$)sH״q" JIN7f}sMT~(hց A5n,օMfXtjwA4Ehڶ_V.AۨB:m e1w,s [IAJd"DDk*ob-Ok5'JFŅBߚǮ)u&k@IhֵP}G:v9*p*\t G;e=Om_,|Z0Vm8z5t- :H <W5 j:cN"i׬vApRvP5[ũ. +N ˆ$[bO3ޑee&T߼wN9L"c2BøPԻGՂTx piӹR!קx3mQ#`!/mL]r>X4OTZZ]uP< S9Oꖸu3=Xa@w! IK^et4֔f*u&J$pzw~pf V׮d~f ~QV):-r/aZܛ~gHH'r|HKJvn xskQ(֋w,H&QdO_,z{ZFUbt!=ާo[a|liC>Qk'鍥7W֮JANc/.,Lf%t~\g3C.lH= |!qs'[ml%뺂[BKJ zz$CkKkSu71TxS \\q^jYl s # 0ZL)G=q,OmHГ+/~L]vo`oSiˋƺ΂#b}<̈́7#:@Cy'v@O&*aI]&9}'WkU2 }1Q]: 9RT utDёn{K Y38+X%@ 0M[X N;Kb}+[#%>^h$hB},R//e34qIs R^jQ%m5=qneiAf* >$(Dpj~]D?wA 91>Ru#:GȖc>VWRCH(X‡~$SaM(ElS)U(9|\s1@c; _mŝH/%a k Ds+-O /(XXi]Dze o qlEK>pG56mAKp]17? Btx5*aW΋dwbc&Dg=ǚ#œa%eT25Jўt_\g鞛8(_7ca #7/(;ChݠR>l^pmɲJ@9'VHWI y4n`GP+Oh̓hѺ QUC{k9Url-Y{4~Ƨ*|{E'Z='Q~bV6VC=*i'|MCJy=fV֯,PB%;T%g0~%\p^'"6 dyh! 1{Kx2+5r)xWʡ(ц0P2fVL/^E!Cﵱxͫ~P}]9^֠M1jG.1c!FTbA#DEU2 g2".bh|?y|=;Ò9\|~G׹EŀP i-gvTla6C.B[DN"f䌮ҎQmz6`CH$ :qhpS ni4hN/-crT=~Y/dw mvD.0TQ_L"j(<}FYDk'̏+\<ihܗǵHVMͽ;"Zu+1&@2ĠӠ>wyEJa + fMR߿*x%J)nR_-eVs'c-״0FbE^ -F5hsd62iLQڦX8p˛|M}]J*xHAO>#[f͋?Q=L8gيY8$2rɌEay1~݁e(*nܴPC"La3j(/W^N FRmշgDS$V@_:' ԭFSh')Dޅ¿ֹ*ZC=,elƻ&Dr^Ҙv:m-ҝS0 V8Dg f4l˛?ьmۨEN^q0)%@q9^qNӂIp _bӼmu xPO?!EFuO{׉ERGdtXm`y_][ԥO2vHJyMa;oŧ(D@u1V !;s^}H?i׺gjy";Bsw|d]~`J?;ܸ,b@?p Y3.#10Q gDN _>o<SiQg6 ڝ"ıdԃ]xgL+Gw] 鏁#Ry{t8i~i4l,pFlN! w^"L^BN#+=A3U 2$R u; z!E3Y.c2HV]ǭX4>)}ݕY[ -ģf |e 3'2zIzR^|6ԄSjZvƲ`dRSXt?bXb`a?j359J˺Ub7+a.\SƋuEH 21*ԉkCC<13>42,mX$%g21YNe$V-j|tiqPX B-Lp<6TOW`)C9.bfgjعkj #ݑn|Tt 5+Rs]28R| #I+ekm_wxR=hO*H_l4u}d#!Ы-RgT.?6辀#61sʿ"<P@hfSDC!%̯x!0Qn#zHkC&m&gT[sP:r.6'ϟz7PWVR&sjxd~C3h0͇u`: ivqY\6-|Dkͼ]t&Ma΍QESU%`Gv[%zK5)E`܄ITP?%6q7ڬʖK˦gVW3i.dJ~Ld'9,6O *6@%/7A>"@+Im=v(0ٟ^nEM7eI_z;)fjǏ1GT~ 2g@!F[Ĥwnz{~ (9, 7-H9(NF\34aNŋ>E嶙k4aiUhױ&/3u+Lz*4 `+{Uw$oϖ)1Q̭ϭn/b~ v3 vA+DcjLz`= #++ ӱצ0L,+l/'>j 9v/ }ʕ;}&$zXshQ4OK=+%LqH/ (a`d${؝9Ruξ]xN9ͲF@1##%_'9.i.ǝ>[h⋟gz Z%_ 6t;iUte*rs,Q1p6o}Ak6T=qMj<-WdڽU0XWpҕ ϠY7ՙՑR BXwߐk .h;gszբQZEs_'OTf>P?ysŌ z[;0:}XrtB[^wg)ܡM j(~E>ϓUd[1}]v^Pivv *z#4`5TQ"ti>Fl}5PG_3!MD,8s_ڛ4V'Og1%!`d6zv\0=3Q[GLפ6N%3TR_6@$rDs`Mpht<(`ߓL&Lĥ t~Zz-!̗Οר4kN;xa7.֜-JJ!K8-l(M[RexUz $ 8VI;0m%-1XB#Z8iRTn:o_]C0;'a3 0Hg҄dUkld-{8{JX,d\wS9$S9ԝ>$'T96v_1hM\ԲO94q||-Q }(4Jmv$&{W59+u7jwk d֦THѦr>uYF&&}]'Z DcK{%d/kY?y|%ux(_ R!WIs8$;|U^l@Byx s1JK']/~@gRUM]*]UNnmO+9Yrh s52ݚJy\X.< OQRP*2`s8xh+(WRmnzSl,Oٲqmz[Vf>%Q3q+&j<ɱ)@ęCОD!Ύ TJUf-vh5ѯ;|/:v KaOmk[3Zc05&%՛ 92ۊuTq7}v0;{|lM*F |s9tP1غ'uO]* 9gpmZER)v^Y@ Cނ;h"e L`޶(8ǁ8}hl$MH0~ݯt56S\JgݛY^h/i>l_Tkku՞` -52QJA@UyU 0[m>|q:2\K2ڸUD:e,We N_db6q{N_n^%xox!.+1pv*̖7#oŗ bKO7(I" 6T2a% ,Aš7ϛkHid|:^ Ce@]==zI԰9pmBg1?sIR\ؓ0_~ HR`=>\$J  z(I8xOp֮Z~75Lҏ[VZ7^rV1 q^;h|:z遬7_eN7!{n7iO^%vJ|΅(A{y.) ա5~Yʽh\鮜(f)FwV(MTjL#i.?ǨCJKtDs:H>EÝ.oT {Dќ[f(IOK>oŠ.G&΂sScJ[yåK;u!}WGT\WB}zo1 >u>3 d< "2Hٵ9Fri䤈 =pSުul= 2 fPLK2 d6rzjdg$NȒ~z֕,IpDp9WYgǥr~*&>e5:JÏ*p}5w ALH1Iݧa$ddL4ևqa< N{_@QүXk2b$K ~Ÿ#',c+dVsa}Q:*d.r>%U4W=Kߜlك`^p%ofa$2:]`## VBJw1a]6(Y[fEVXEfR),REr0iBXNWGF<}c˞lC^}QLZߌ>\\U8)vwU^9x'"K!Pn_6KyN_Jn/ T帷;{}VĚz3cYb[gI=vL3).QO ܹZü,[$~Ē**]$&E5=ghI0t [nB-:,!'|[ޘUkumx, ?Wt(4h+Ǩ:C Ĵ0ɲ,7i_Tޗ?P-%˄h!*l㗖> G ũ޸3Dܯqڂ><rPpo{š܄2^Iq#y'{j.'bLVGL칝n9h[ۙN]( V:ޫ$w{܋ʭfXN܋VHq@4W n(u kK"89^TOm 9K7$7{0YC&7KAą)eOkbjy,iZ̾BfOP3Ϣb CXJcNY'7m,"KF[X!{cʊ At]IB Pq!ɫQiœGJ_hDLVa"<=hxn'Ebh\;]r Ks枸Q Y9!]C]'#[y X[JS)WsRXt#Do[q4 WdgAB< Neq8H/miIٶ",ZgTYx+06gM^6@b%S5//FWœH[ o=4Y W^ڕE=75Cd] )k~RƴVr/וۆ$U~k-}t5]J#D2v..i|/`~4\#~\&)l& P([Q(55ڶ.B(S8%R3F P=UMTеJY< C |=4}'` 2 qIwc1&ޙ& ex-}+FjNXΏ, Yor7K՟|5;-w1[ܠ݈t*##Y-, hpDa|L2Eax&۱^V;U@Sb]gcݣDˈY$ _YQ$3|;\j60EFF\f纁Xj&0;q6^&3֪g~(r.(Ob! g}\Zv΄ӵb7(a=9} Ю^܂&4C*[|Y$FR*r =+66ZAL(?/I _ڷuvEs &WìM7rYg#J,ۘT:|ef:pYwy[:Ҍ+00ͷQƌS,!_7䴠O{%?87:$S,.- $4]^Ip(R@-$vo͑&#@lә!aQ)֚.Y3w3?H:@[nY[MT&l(KrX6QtXJyrp;Α(vE*z4H&~\cjV_ё26A D-pJ0LLuU+Vbc \e)UȷwSjFyݸcYGLiPS2kR2kmOZl#d15jȼK+ jӕҽXKS;VV=)$cwyzyy$vVSL*M7q!T/5ɲ/ZLmE{EYe $!5PD'Ydycgo1,s;rŀ#h4eHbGxaE`o2 S o?lJ ·##ʤ8xy i%&Gl"(LZUS_ lhk{eu7LƐjH'ޘ!Dι2h0ڟ/ǂ%YL{ɖ`_,Mo&㤥5㕐߱S3c13utb"쥤7kbXL2=xp gJ\Xfd10,5Zoؙ5KUcN4+u^>:+'<:Нf_M< ,cəc<3&c1^-_[(dcO\9}O&*RBĶ=䎫*}0!2< iE&9>ٕH]4HC!g .siĐr-ryF+:}Ku%XMx`S6bc*\hTNKc% ȫn-/ClQڣ,Ԃog=( & vc׋CgR߇\ K BY8)GAD]B$߇[ zўuW֨oQIS87r; 0O nCQgBHOUÕ>7,zF`2^?޺^TeAOmn5ć|M76X1Xè6A'{td o]ěW30ENhkv?PB Cc1j*V^ӍP9lׇNc$GR2lcLELojo^|<džKNGSx+l,φ6} y~˟7]X62m3A4 /o MyYBR`?OOfmM#I\ˢ3 !;5R߆|z|$ry/ ]|;|p1POjː+ڄ^zEyU ޿ =Яv5}Z@kqzNwr7PRIجZҼyAT;hÖTЎVuTLx>[Z.04xT+z m"h̙"^74Ttiȁwˬ|d0pd@0&Ŕo>wkZ"ct.Q̩ap~6P%T!D@,Ƨ6IUq\> d{6sVDWɒte`BmccϺ'J P&^`\Cn}XpA+ŵʸRDXJ۪~`C0(b܈)я_t0uM]CXxORMuL$(XB$~ey5.yP1( ̒^GMT}bvSzN||@GlXF|@n^Q(뻌X4-'Xw,Տ"C6!䝮u[σF;9*[Ԓ5RP{`y~` MT%(!M蓻0p7q _pO)AyVLT7_h,t9Muɉ[ӷ.sK6&h%}fQFχ/vrP=N(~B f@ =|8hS"24Z(Ƙbds0oi>9!2@eLq~6bBevTS(27@Vx?;{g^E} +v*;])bKUV )g5&{y&㏄+`sl*w-LJ]VD߉]Sa>'5Tv4ii-:m~#!` _C?_v;<3gžkO=j^-\"F(V2+kX+MfWK!K"E{ Pkgu"i[j,>sdYv[59üb 9o2P24g݀:pe3wB+Ǟfda?`4)q 4o8 `7SMϽprzen Qԣ2*d@#4%'g:aW ¹ G$hjI})g茖 2D@sO8Nⷒ5ʙIM٫&=itAm1&q#]}2d<|GOn>4-F)oeWi߳%_Gg7GږUNҵoppx V:KIgc3j:Ӱ)C yptCx'uHHfiз(&GM-6Z5E[MK]>q$&SA@G^/˞瑉4_^X~U|MY/_@tPz9]=5|u^Նx2ޚ7nc}@ԊJv}6S< jB{]H+9^H@&فN6넘1гW'5ˬ~erk 1ո`V{>K-Kiy>~$ņ@]FivT$]]e uvџ0e{ 0zH?̓iO9 o64 j>1,W,p>G0 ZW1%a ]W_2.22[; &eDP-elTHnuz 74)ve ޥm}׈,Mgry= |^3pe?)?/B[n= 6zx QDq_h7b͍g):ize;ߺd$rP ;}?-UdLuLD$\9؂M⤰X_,"5]nϬK8UqR%HyC4Kڮ͐ [ctU n\`uBIa/*#m&|BY􊌢=fԇbK`3 , <}NdH|I,ї1+!/ ؙe^8;`0m&UjnJO Y7^UeQp1W İl[)bxBFcYφ.!d0zt_ny+)Zw%G.uu[Q%lycf?m_qpk2"xQP4~9|PCɉ`g`U u2`mĀMbf)#;F`uDCEJLaYN⪱CɺOmo~$7ưH8 aX,, ¯]u 5zGz.AZ/|Z!艖Xt< ɓg>(߹q#yM,ޖbTPp+qHdMMH܌3qa% q8ճ)wtPŲC}),,9"#Pʷm訆P90I<^k44WBKgcZN-q7pr&%I{ p,} l1i/zmJ㗄@$P+ A,Юp>vmqBJZZU3e",?@< ;۠Y(4+NHfd('uHA2VۤS4|ZrKaϹ˫ribQ*0 >ޤʮ-bDQNo h؄Tjl$LYbNXۗhi?}G.\#=wx{/sB/P!@hO7A!gޫu\|Q,,i2G%z;efʐG̩UM ÑEx\Y?N:> <YHc?)m7_iWtJ-bg_rhv8gfrndORg͋Y:2Y)P1[}f;tbSlKNa.)* I\ϸ`X#;=(阥ӿ$,Y=MT& o5j*>>ӀѮQp #ވݽER1رbbYgZ+7ˮdc=$SA yȍp$?$O' U 8d Տ Qڭ[ 96Eb m4i ;%_2Qdi-̞&2GZ4oڈё^UsA6 JsH2%c3‹2#hBc^ݝ350i?!?EK kyƆݿk)V!,!ܪ'x6rNڅ˳/\kGCI)s c~V^C&^,YPCdTbDBE{;˚rLN=66L#hAl9ғZ$g koXOV4kŒ%)!pF ]J5p9؞ꕤ꣚!au~#=+?xS:_݅:0âeQ^#s3g=w~A0]QD= 8\?ł22b wk"kQE8D=Qen(> f6{~NM<4OBgo[uyDy WÍ!JO|VR eɢK}~bMC%san3)6Dpr jlRESN# d] "<] dZ1RpG-_E'^sQr*&nt->C`!UwnmXq|SyH5K ~5wv8#ZQfN}vs7i73:40H`|/a\QxFk4uFyA<)aFFF18Z ;;ӝa1'W <{>stT3d%W7njqe@O6rT/f1Nۈ2=gCi~ s?[[v'KVc ?L o=AXہW0xQ]U(q~f"\u@۴ePu B>]wSvc,GT)\RT:&z:1ic`o,5>+,`z̓ V!4fN[UQz>yj3/@Nl~^ 64ٳ 1;t#?%ӚuY>ulH: ʪy:̇\ҵUfѥ$/&gAPdo+W-7A}Jq+4sJc젆0(?yn8/^ 3،51. O<[}:lrw;p_iS9 tIiAtfUp_A14,!YJH ;]<%%twQ|'Ca6@ !T58FtQ1/T?iUN-L@-7/'IqKjdFQW_S pEϜ5scVC@O F1]sJ7(ImWyH>tF86 2C{BBUrxٯ/Lt&YX}X^ܺ7ϵ-ݑ,eW7\%gl )jxK,楕iޖ T~K|Dj@Z)abeP/536-a5CB0(5{F{FLR(ej `Ko? Fɜ︤!;Um)y%5Fcy?eYl37Q~djLжaSawEqQ:7%HarUA.3B>ԙ@S#$3m 9&~5wuJ=!1nP<(*׾( !j%D*wc|P+E|1o!}O=֔-@o]*'EgRNfo:mw>^j\eKѓn\.hd+ N(I:yF9UYwäsI6Pb⮢RH\Sey?~~E{ 6M(rBs4F4tc ұC!Lx[9J1pf 6i9)&ƭ- pToYJl6\1+)% >y=TseBs9ގ*ؒOXT8`#NCMč(uO׀[jNHm`oDʄKpLygU#Kqa2;9/V$B3cA΂C~O)Q2(:A}rLaS7BES] ?btjXZxةgz;^3WE Zcs_>4BuFdmZX&u g+͛iLsnkXNS\\@[Ajb䅽vxhE㧄)J4Ym2UW^gJjNN+wb*\AAG*I0`q߰OV/}ROeGB 8(ڊN{,Xv$^ejc]6|@ѡdd#R/Z63?Fq(9\0BF; 2.5uAXV] |@x-\r a|/AŴ5J-?/YU?,oztJUaS.CD.4HJFvF$5Fo$3i5Enaܖ!sotѢtjl/XnNPYU;NBټM lqwf&}޿P.QrpQ{K6r=poM38Z>]lZ[Mʀ9OO徕?@;ݕwHQe1F= 'xKUGhfhWFZƍ,m@c77݁sh&?M%$C ՙ(.ULT,픿Ԥ}b_& c Y4u{&p><(oEB٘|S7]݆AT,uT0@5I V{֍JSG};o_҈{=a 4`ʪ۫r [fr3@ZLb72 MS,`ꊔ]Ia;E-0-[2N]njz!jAfcO\ǕhV `iҏQ.-;F|d^IK{U-لI QRzӃhɈ)y&c37$Cw([ )rP,Q{WٳkrX=]؅@a4,>!6y6@>f=:x&]PH1CX UX|CEƒgc@d u/Mk[H1uH< ̤WL1!,,kAN\Η;Ij4""d^=R$.tX[udxl9c$Я/M.D!tCotdRe/ Y8{O O*H_:FKJSz~қRQx;ފ\(GNܺB<A<+6B&C9`Uڪl'Xpr%bj!b3KDݲ!7M0\43btrဋZ s߼yiѰx1qsYVy7HL}GkHT[ə›$6e%5Vg9X"wRXY.MČY C$.F=<8Sr:xt0-@)zܫ6Fu&ɤ2dQʉv}`VE6O3pt ^h9akjL/K}[g*qL7WX}/CdZ] Sʠ;PH|+{$I/J&w[Dnݷf{Nt zVIˣekS] "u)cɔKMU>)4PnĠðre6Hd&ƝQ O^-=Z89ӎ]hBXz E^U-=:~$.KN%B#_٦p^g2_bGUwR<0@τ_[T@_ ?RBol|_G4X%3Qwv lSnk e/N恝t\A]M A&Uu?~xR\4sw\si6||@O)_.~,WEYob@̏ʛ{hAg9D6 ԧ&͛^cY5K+y˶pMѠa7< Zs,\c=DDk=Y`_Yt}npmO=SG0h^>᥼…ÓT y[l3m^#as3yrOZkeBgB3Dæ+;evg 觾ofK)2箥>Kc psV<@X֚_{}yekY5}7qXgG?@?,Ovv]S+f}݈{E9;(sB*؊;:nz*S_VLYW 3?h28hjlTW^$]L{es" nFY'A x ȱ_ Inۺru [l ~j\ݠ*R͒y]x0Spŕz+"1) k% I;>A(+!X 8e5Fe+a-23gxO#:~OSEtdpRZ}f.p. 6\cqի"-4z[GzW)0GV(*Nbh㝃qO+ݠ^ 85p[{Q nfП3zV y:+[%RfJ ,.||D4M.Og2G> ٯjOMd-r\/\G+bujQ Ĕ'TֆB꜃!GX(;C`7g"Bl"+ ؓ$džkp6HTX/'onp؎0'on+JX?AԌ 'Ɠ8fh, Ԝ?Nv(:BAi.<s~ @".4qN_Xn qtd׶IMŷaP(ߖNLK!K9ٔ7K3Ab{#?=^ r_eTGK8,{xzw nqYd.M{s*7@HIܴFɸ'/^j[|Oh8xܕC7F{n<9"r ˬc!шFXzp}Qmiľ-Ӎ!1v2rIT 2g_%-vk|"d¯헖jd']FM\;H5cMϫ}xucHJj:W@ ̖LJCXwB4'cUa#3*2:N3JluuCi—+pk]e8;yOjM{*$~>@0|T"LPyrijxSI Gt7-!fsU* UЧ'DH[P| )$RetZ< 7,[v 泬gh"AFKF.Ku Dn5 6(I\m\29X%M7Nسr#m7+.7W]U=LiZmBBM 0%@101b U_eS,Wܥ*7i ?b[B*.sr=т?s/VZ 1m2Z޼DDB8iqKZ|G瑭\ns, -Kׁڎlm̈ H!e2%5ՈyїwP ]i+oM4iqM QE{L񽕕,'6d_-b*_ѫbى/>)svH*޷BF*sT-3F"iqDT·6Sb ʱ&p#ݝutک*,4ʜiMîȓE턷ht]+eAƋ"TzIXigSr lD0"+q~kmYEMi/5Qd skkw` ¦T-MTQ|y<ҧ*@l0pИ zW~G.WՔ+M5#;Ew/Ak)Эm&Qk9/m^/jyӃ(j<5_o=C)I>QdѱUÖgkrRO^IHv&(bVu셳!Fu_Pd8gZNIr_ԒLwt*fV6x|ܒL> ʭNMhčq >KKQx4TZxq|'ɯ(E09>'CEV:D*U)ТK Uc1|ʔ rB"0H*a^f I mbHTOܕB(ByyfVj W@8&[JDQ}VZP``3,(K—q6w f cmB~2 >jY&vC+F;N $oqRrt|Cq'_Impk_GWf*._㛂K<<˫؂3y[1Si:& X8eSvDWV9Z%Rņ1:[< C$[\γY# Kǯ^`Rp,–G(?u_iՐvU>.XTZ5byP;Ka rKE1@Ub><peWћq;Li"_!wGV}P d²^g3P]Uv$XdI%}I]"D5UWaq0#E |pL `02mUQ53USiuwˌ=mr$DhUn]bR9`---v ›.މql͊GH?s:YK,3@4;h1iRQb\ߴ^&\BF-"(+"r]*ʮ*u-55ͭp2Ae1w Ȯcv]5#Qk55p-|[fe [;Wc;9+tzjQ5YP_0O3Z;+aǙ%|=V4?f3Uń>%CtV|\S&"(@%QJ,6@~#M_g ѝ_Z+2{J;Sŧfe,Xe+y]!g@]({#SS1{04$ m5`Qm*h3=^szZ3;DpJerJ҃KzA%Lv.CSHp Fq QL*-j!d^XM4QL*@APU 8oIQyu6Oed['l铴 m%zA˕SR!;_':=taΣbX77G*b?=!be=_Z/:!@IjT%87@_-*׾H-)ɞkñ.Y ̓<}etP M2Uj6 OqyO7\&}E' mNOCӽA>F]_A i[[6$"h" g)"OV d#YTB7]i?a.Ρd0zA?e]| Owduh.K?@W;bң<)({,7 ]6̀WukMWcmSS Q#TqLh›"r\ÞqhJ7XjF5r !cOc.۸2hޤySEv oS䒎W &hk1V4כ|MS~=hX6˥/o2J]ac;mqfi5&EP&jR Jc8" a}|g~*W7pkz \ѩE햕E!g4|. [ םxJ K|+&x~@N_)#YB5'zpGHWL BD"]wEP`%$ӜRzi _;;s#  EN1iY*J? {T^!S2eK$G&\@; wLY!z+I"G/\ZLL'LBXyLOgeqr| UR6#{<^>$v qT|(]p{FV(*/ EǜMήжWmԚW ~`_Q3"`ȴn8my#EhVHw;17pi(MMw abk0.K؃u$nJIn@yBO)T#?F>t$[0._[c_ƍ\88zq7nB豷jq=M=ٵM:%%pT|=(%,yz03:Վ쩚^u_# e%PX|P%#{yT?)[Y-v&"S5? {[}!~r~Pm n44d\lj |נoV݂w*ܱ9wGdJ\& $pVQc?2WL)[Cw50dB3X0wa =Qt^X-EԚRLQA›}8CŋZ9ϼ/y;`7aX2U/(J:0h7/zoKsm8+5LM?TuVG`v'(=ҒʺxB8xuOzyOeI>dJj?JZgn07x{akX+u(5dg~EP!x7m 6%4;"E! YS}hGߓuD0 "٢ͻz$A "#eV휂[>gRMwU\\$Zm8KB49hgJ9iiO|߿42xe|۝6:3^CK R0 F_i\O3$V;5Dȧ^_bXi<Dx{R#@hF[szmVAhNet]7YUxPS(QUFʪJ+b옜QM >N,^J`On) QLjEoϦKPu3:kj! RmKŋʿcvêqn~w/٬-ҏ 33H}vgه8j91_O=к#W2BtU-6z^A:\*8MnqcX]d%X9u d9¢}ۈQ=C6".6W9{eXizTM%ɳSA9o]ѽU'{: U ݢ d~W}3OvWed0zq*x IRv9oFW5kԿ vBX;feOEEM@e +~&} /̀җ(b2$?6G7_RP|[أ!v㔿9kj[a+%WI\4$, fڛR N5Qj);j0mW@mj. n{/;ܕ-rx}q) ʧGB"i_e!kp$0}9DK\; &iݺ]!uZ6H3ܻ(NX{?"h<W&.ٗue1/yqNQU[H VL5/͊C®btu+,/ _M Jr;~Y/ 0Qt[i{SL=AkH}|kMí`D4Co<.;uO|F>-OG@i>ܜTp4rqʾH^EI F/ ՄU '!>IrK_4|ueڵ[zn6li>` D3/@ܠd Y%E+x;Hgޏ N?`ƞ5@f 19țF4RL;I$N :7Y^ik]r"1 4-Ihx+!Anu[g I\RH)-FEٱG"9f`vBfn;jcJ%٪ 1l )A{6~]-ok9< $ .)d宼NXd2ȃ؃4yQtf.,yC+_XFNF$/\6r'[;"0AmjF 0G.q4Al-24 +6*z'!{0 ghb? 頤3˽3+CNtI>#4Ag 驵 -y5GhvĨKNpuk8EpzakVۻ)pw[=5 !<զܘBjdAehew^^]{e)ܐԻ8]–za: Ry/.U ڼD0Kο!U<`xѓ.Ug[Tk<`)˶/Ɍh[958=V/| sSd>"KfpOtH$P8R3ɰ4qkJU*\Y𡀈S$ТMF0Mth 9OtĔ&"aggQXuf 'X@Mmx):zu焜y }X XWGO\ts<ѩrPA`ْ}rxn998aB͕9%);\Ըwe) Mxei}lxgiճM1;>IaZ%/~].9Lq%(5)717l!!Ϥ[^^tYPykə0 )4\v=#{2J̑XK0W*S4>WۙrNhe*j+vCԮ{ sjw~VJ6F<σZ^hT1㼤T2Pą뇉?(I*NH_ } jueΓc%T쾄UaEosҋKKeXbD; V g}VR((`pS̍E .;0f}UQvM8F΃_)-qOJw=]; ><w}`LEd28]R~9A/('[xUWpWwfF -T뙭l(oڽ0]cZ$,25+Y?S1 .Pb: ZLea`f8)UC!t)fro7܄eo>@#jՌy#Ii[3.+'`@i( Ɔ(|6x !hBC^([ȌπAbV/LBqo)VRWݡ1{Vd}l*+k#d\01Mr& R~-]-IڷoI퉡;fu.U0R^Lۻ].qW%\dP}=uQ]`=4"7F CW}65P3HKg6m~qvq_8g G)HھEU'ZZn5Nkpl,nb1c-!ϕ=Z=%'9T?OJT0{iG&Cwի. !"u'~]$RO{-{_. # @RbŨwt2#CF&wyC dY~'Wōpx1uh'vH$̗bõOh"PǢ@@I{~_ PJF4PFei<( X gIBh'G'ݣujə:^ʥJx>lh5'C-Իa.k5$XeuQ:N5.\LfH0'DOk7d쾃 TߗK?\.tz3➯1kBۖa79KT:Pm&=!4N dn^AcmfzĮZ/;׷s\J}pY|_mح'V^&*c1R)NrnK) -uޑJv(=Q8j:*,Ͻ~(ƠNٲtυ4`ܱ\uNX Nb82 Q}XoW1uu٨[|x":+X렫18~ t@lXSPwu|F`҈uEY^ux5^uh?tD4wJ?SEwR8 &r,m7JӉ~%*H870 (,*T'm‚Tpktk>Ԩ@GffE¥܆>h%kP] R#J3پP+tx+۵k~$~a8PZY(WXA@uxF^B5:hd `i=5m;ČX6l f*0'xb̷H XBhO)|4c oހY4UDk9 +uqT0ĤJ{ Ʞ+~ϥW90#_Q^2hbfdPUͯAV1M`Yn'Jݡ᥽]ݥk=̮ hEH\kVP13 1X04W*Sw*uO}bTf_-jm%ƧPGS j._oxhrDa4 h5%ͮ׆&S`g*(1 G'qS'|V};c]a޶DbЕRL1"~twC^t,f7~繙HG$O8ce\|E+QYؠpTI^J-gyM){,D7R&(~ %G\2,#8W,a΍R >}l K.g(VN*k_%l/6U)5]پTjL6쿂5RN鈤|s`'% ;2~A%C39BͺĀ&[ Uuc.,IN8c-s+1?1M#͈"4yԆR|"B4"X=MO GG/LYU~=-f:`TaYbӍ:YQ6GyɽiG?V,Y46^gڒH=G4"XVTS=(Jŷݻ= I( ӓ҇Y|(istp\w2n hV$^vmYejr4YHˆ8z=XBh<=8B( ]+Dstj zDs"$A[I+|~MϿ2na?b02$ehm4$U<DH`ѩbXf_,;ĤP_xH/яnUUHNAGKVԨ/ce )1/G9C&Nd402e-yMɱU>/›͓Նj ?M䊹&ƄA\ηˊ3G^qw0&!./ED1"ƲW#4c#102]9e}yj^1}SoڠO'Ѷ.ƚ}{Ɨ|Νc?rhR.O]]MW|΁{lL7hq{i'%XKUv"ǥUcD(.mf˟װV%ӠOqWv2vl>pZ'Τ+F=wuLS^Hn!qa,C\Dè( 8gvgם7!d,VJX5#ߵ%Ӿ &*W Ǻԏ" $}'qrk?3 %&Mo^{Y&2dcBI+U"08avpX?p4& c:1S`ڜ=GdE<50g1ph KO6mzb(9ɫ(K>J(BEq(s3pQ "׾K< 官n8UxU;Twt`QHs韌lNů$,cb9%XnL?m{ȍ ,ϯFp#GqX\ :{02o詚̎_es#jy۷/tlc[W7Pq׵q*giL f7Bj>>2̓rwaUUun e 8[dEԊl45|c?Jylk'GŃ`7B#N୷E,.GnEӻfGˇs<6FYeBG) A/Z\q EG %Δ[2jy}BLSbVil zhK< dBm 1wV㶚Zv.ۥܬ]͡ho1S(ͻh"\ W:M R͍634+ K#QRp lb0O".(о3@wf'h0[alQݏu,w-f֫0PA+KntV)-W`meC2O#ei٫سU)̉%6تWUZ^l\Q݊Á#կZ4!"QZBĹRϹ"F1V8:z݈锤(cbm"CkK"I;Q":TPܜhJGokn0J\^B4fkutJ|KчI zUÒ2i d_M9hCd3Q Mb\k8)1ޒkY=V) +=o~u q[wץ4G@݋XCo24<U`7Xړ!RB 믌&Zz!Xq1Z>.zts]X]FD:gB\IݓWrGs!GvV['=Z'VmY4 v?R~rGCBp~ERmNZϸw뎺U )RBxeKNV:㾞 x%g_&J˘VnYn! ̨ e@s։YDh#7(2[d9V w ^W=te`=Tn(wo-O J'*}J#% -@^ HilD0q–T#@)Q]A~;Jcڒȼە ^Zo ИvQ(JVLt8]'j-7V!K:fO jE&dרӶeLZ{њ5jTړ<ɳ|*0 ՚ٓ7sBc1ē'Bg QZ,#K.cɩV Z8>$ڿ޶>빜4!ԷA Hp[*j ~S SE@T d|t?05_Q<]R*7an*k=FR4QkfoSS{33<2n,feZ #j~EšEW(\K'ZU8i'Q[ӡEs"Vޔ,Y~?;DŽ2F3]t S nb&S1Pz$A7m.`K2Ȁ24" ( 0P ["3C Rb 3!Vn"#Nx@$ N9N]*+ a(+?jM 4.9Ϣ"' .qA{x!2HAȲV^v%^с_yXrVF" K ,fbuE#@C.vQˁ"~YyIlʚkjY%Sm3۽ ;2EZEgH^rN [yيǙ@nV` 524􏑳kLNSϚCyIGcn&-o6/41Ս _,ӳOA \$m&H{!Ic p92+qxX".6EKcD.PM`Q^qX(=Ht2LWyKa0wrµr,-E*ؠR mW|q#?^i?-?ʄpْdM{[Jxwy}%Z~~ QCq էϝx0M~ݣtFm<{:JLf8T7>WNi2'䇰÷Pz{z?EmԌpb`LHfY>#Nb ޤ !b(e%K9ֆB/tV7B`DADHc%SMi2ln>˜˱J=*u@g7:=x~';_ ̀y!Ф1yaY+@n&ZaJTQ(pė> '?_n]oC# `lз3I䝧p|l6bbjM]N`͕QܲG`AXLȩi"X%䯥mK$dzo]ѳk7{Vd h"a_ʴ;i.++v\;f4`5WSA&HdJ^c{$%CR;3Vs:ꏾWPzsm _UUlhd]B6< 8P F׏s9\^  pD*4܏ÔE=< DO1fn#gzp90 ` 9E+T@;&ɍ5XK& +AȬJ*T?PV*ёqp9;.%,ņEFڎ4sxR *E[m;X;W|pזkWoo',BV( G :uHis<[19M'նRdZi%Ƽɼ7;N;G Q}7NJ:ܙR>h&Lh͢1Sl؛:9UPc#H,G*v~XL_ Wwf n \2@r®*u6)F!П CƵ 8gZeJ`)LޏYeI~X~̣KV-BcL~K^VּFH1FloG}!)^oEmj'߅cީnϨ}j'NpC4hRe/bV>5+쁶 키<644 9Jf]B;E0Na^{$ T*' A?r^64_!%[-``t9 8gJg1 $NU$E"A0d]j//d`x qE7p1L+;,YC zb۞;Lv2rDTydI'?+Hؼ`L-/TBX&͈)՞ǰeU+: qұ@  ybr}#/g5\AGBGU%xDߛ}Ire*0&"eDh*r\]MnBP3t蟜԰ޣJa9;$@"p3LT`)vIĢAòLj4xHhd3\1Wķ=գ7<حנoCxn pλ5m(3%;͖ liiֲO93RQwG!SWĿ!R<0i<.Y{y@}XIS^rm#7`2c @2l?9%@d@9 qc\U;<Ŋj☧vkEJKm=_ImS6b6sDPډdK ϭ{褎 g$_MS|Na}R$D' _BCgs$~fN܅$_izcJxL eGGIQrT`SKmp]S&Cka]\i·`K+?ht*i%Ų2 !Cо˗Pu(00ՀLrCOP@[ݚ]W]v:. :6]cQ AE x=ILq={NG-AdWJoBVa1IJ+q>ŢwŇ> P*dtC_rC:X?P 1}źX}ⶶ2q^T2?9HjL^qk Znnz6B #elo(L3OBt/vcb\ dր*!F-IZ0ԒP߿}H)|\h4]_'J,%c'V%0m<$z?K|`9Fz ѼN#TUB ƚSx̓*󙘣'rž~4ݤdZ)Hz,`!g3,.&nsARJTѢ]./lO7fbܗʒh["U-/tm "]#RU(3D)Z8j8؅J#'aV %~5R_2]RP#D7#IO8gQHdn$c;^j*FM2q7q1Nև ?ԺR "瑰sl|1/qa`11zbn>w"'kJc¡yPL+dĨѡ { 7m8vaxr.XuL0O.\ |k~d=7w|{KbNZim2% XQ%̓y0oo_8ogAرZT &Vf٢nI"׈Z9$5j572 ' MKp8te-TO|V2]<¢Wʬ[,ϟ, n@7C0U x`@y0psn4ф„tvO8aNrFoQgN߬FT6Y]!m:ˁ+G=3^+%'+Zp> a([X& 3)l42甙¶!W~=Z 0D5V[yњ:H~e TleSL6<SsGZ}`^t72K Y $I::1$|'e+,u__{ST*4}iQ!&x"wzwWեt9vq)9N Zh ȋKS 78N68X<&DZ8|9yP'Şe`>:|r$HʹJn2=avDǝǻGFžCy4-Q\wlV̰y뙊MɎ`'iIy}Wv;XHt/^ͧe/p}8GrmWgiO.JiX^۹l;U ?YK~8`eϑ2Zxk6k`%▽$O¤iؕbClb^;#]ӠM ħq zXfvՑ~S/``rӵ:tsAKI}a'/RZpsg%UX/{C2-);)l/;h'\ioD 2nv(`FcVư=@ljd acbN'=~}xQ $ И/9G6)d)(}` IWUJ1/ U^lFic$1c ВleyIή]$h;+n&T3lKѴa\Iӯ,S&JG0j"X6 h̘2Wop\\2ƜR}gW٘2֧3/[̒9vݞ_ѥ;XZY1dͬUfˈ!S eӮ0u[څ%aF)|`rj'_`M> * QG\[$gqsdd^d( ]\v!]} ڳb8Xfw[Д 3 4, |dHb9aA{JyFCL}ؿQ@J3LM6&AJ1TcCx-jjAP9"`l&5Uǿn_Q\.M2_$5\ӈb[=@Dx?*k\=Ai9b9B,N\2>*Y< D O~t?p<|0B,YfGtAFt:~%lyOS$D|-v^r٦ 2QcU>8C|Xҋ'II.G 0F7 0،IS$n .I iO(Dr;P?UYg5+U݅(~; :J0ڜ tmDl@$k`! Kp/+ j6XUBJğ|ѬPObVVm]7JbrʦoK" _iu V7WMⰃNs(1 V3֬[yAj)cM}!UJQo`Nc^ EQ&WLe81%ݱ؍ R8EC/7 ժk||Tfįڰ#iδߞ_Vd[(gtva<' Mu>"fP)D9oG>,2R ifr3+IqJlPX4X) _wVI@Ȁ+ d8d9; VG#Kx $hK% 3Ɏj(Ņh7 `٦qӧӐf^_%>_"?JPٗ/luCʡG%ߣF XͳgcÒYEX26ѲwNw9"e'HeȏDd;xF?@XZ>t>+0+.p#N0,c "~<=dthi,1FXz{E;4miqD|&Ź1Ff 1WMm 3+Ou6zұ]! C~DpkTo$!_ lZH$i|P["пU07-t܄G\$_\hTf7')nGī=URG HXDQ塒v7[6ydml2l(@MIs(B3#\+8P&;3ipCۍɜ9ۻ)`3 \)]'p=ъX\>b$|l'{'9(yDd-~yUSRﭝ Rx$c,5XF.%#%6LԾ1u0 oÿq}Rx1&Qj%\͚ؒ<Z-o/ )uhpBC svVaUH`Hqt-ffqz*|oPrcQap!+P@ſA㈒c1lĹiHt[3>ec5x{ke.ok>@@BYQM\ṃD{5$ͧs_mVz} W9oc$nDmKq^ >>Sn5ΔX?-zMb#]z2h܀Wkt ~[}SeσMM)hTlxZ'د =h5KuNfqn\#ĭV~$f1/rNȊ_H zG6ָn89+p,ksZ.NN!q8 z01 za*3ZdBj]iuXj| w}GHQ,̞ʶvm9os|ɡERD5FyEʯ7%n3bgfoR#Rݳ7Z`־0,#4  EadA;Nb_88?E[[MbtPlCHxt Cwq D?GFwPuLi0'˫hR tSDoMPNּ5YmE8UgS9HkpYdžl7h!([L!Y-*1 B7nbѱ?3' -s{C;W^EJ4J5\ <<]p{5D% G;mpO4F%N1VPOc(./֯C[di]#JBr4Z&0m N>fZϿa2l JAi UnZ}DQ^C+xdVL 1jk-HKM/d'xHyY "3Itµ >?$ZNo@>J!Y(*Y-Ccʯl>azOԉ+3#>K$SaX%CB K"jSyOzz_ިgQ\˪4ĕ@cU 8m\y>C2='IbyqUY5%!V@#v3T_Ѧ#Pp[q[}:\iaPI*A>M{ "4:=rʑ^YhKH`O.WW0}:~er# yقÓp-HɟoEn ߍ. nծ_'Wdfp02m'N$t>voajGkֆhUd) #3r~.*w!0߷UX`uS9!>ȶpI nv;W=Pn[lyƪ87"6D,n!z>"{h+c낾 EHk3"|*>Ȱ4(Ł;NFL!` k q,EENF48(GblSSq\P$ MV~)q;PÎ,`Q8"u"pGȃ>{,Ɵ\GAEh1 Uw'v9k?}E@WGnJ0C1pm}Ur"- An;1NU;ۖ#*4iFfne2Qn -/v Ql;e"F9;zxk#ٛ44i^^!A#ĦD'DuKۄĐDg #c65bm[ ? FF`+Ⱥզ*"K`^fSu~ރW=Kr\n͚/k5GMc.\ ߐYq#y>:@Y~&<>j2(1ehC3C-9\ ".L  "I?d-H}2@ϙvX^u&7@*bqڟdQMltlxˤ4r$\6;^ "hRW݇ӟNG2ȽCluxq|֎RQؑUi{ru3ҧ]FƯt;«m*YM?C%y@WI- d}lUJXFrGw4薄/|b;d%̢ey|((T13V|Ec026ꋏ- e? ]U\>Q ^:mpX 1-s0u$:0GMN] ?w{Ek뜉iV 0&h<͘9:E ^#L mRv|(J0db* 4+( mU wٳDFW0#pu@3њq!s+[Œa"RenlZ] .`{ltkcF?Ӛj{5cyoη3ӷêƥ Rf1[ubwkUh)ri;CX +Dl2Ux'=WSM ;Ѓ ]kDYk.%? &MĭaLaX\ھb.8܋?% 6A!U1_7Q+ d~gX``jIp;i'^L'V .FA8rCIZ_>k'FW4fI˙?KkaX"jgSBNYZ&81wvh_*ǥ#N t,5)>g&_I`qQa[Ny@1Nh+jM#D_yԙU@1Mk>14,b0XvsuKeN} LIT#iឫJvEd(nԆ|𥻯1!p37=0{yy, (8[nHZ)Hǯ01:%>F|  #m.2 "~G D!0;}1(|\bj qtq0^#i\z+5}rì ==`ҭ5D!D'\О>kƓy\ӓCs Mmj-FX_v\GtVujkrM_ngUJymJDmp{o'ó`eUʸnŬND6a:I&w"6Q /gvt}~j HoMk\\Ί:e?-"7]c'֍d1ٰ(YmNfQMD{v<j\8] YW_t\(D0b>.~WV7DNuVlz0io6 ESD6 a9~C[ "Db;iRj;31|CEєx8Mkr}ŵpdH; HJڍ=l܉VAQivZ#$v6 K 㶨]#.RzQOwBlOXC!ǎw/CIAN'4[um%[WD r >C̚,PZzd"[>Ic)DEo`]!` l~u{矟#D5$e2VCDknf}ӻTQ+LRR<`e R>͙z*thl1!TZ䆾݊!* d_ϑz"#Y>PK6E P~eRxF!<6^TEKhq*?N ݉29,4~1xfľ=x86Tcoq+CBu>*o9H6o?$2>?(̀D m?;З)U{玊#Aؐ/+̹B13Q,w$T;'BS*7_r%sjX3uiV'لl=)#V]µS(W?4ŵK8@o>}mL^ziý,v6jDfkbԓԓg1!&*X>V{Q+#uh_^sѡnƮQYa]GPeVrײ=pc*ZE\3/G5"g[ f8/XWP7B2Wu6 #kβgDbid )|څI8W dm'"'({(zc܉lSɎm!-V4!@ڮ,99oõ܌ jbԾnk]_w,)0im0\6YycoKHUF-T\Wnw1 9wTR^PSm f91Q.i304-L<s*d1 - 'h{"lwiș. kıxfjo\4*Sc e֎xdp &6NI{ ԒppYt -}e&/++tʴvBo? F9^%{w<_oq̱ 3, LW " en,ɢȠS}u0wbwGnx8Q'6sgM=e?})U>"Q-ŸG"vP5)8A: nS; X/IQ4_t3 !Q>aB%/SN\C F wQ8$fX상oiAc`?7֞WkޖOc9G"3ޣV[ˑb縁n0ٱPI!.)yh*o_SЅB,BFby4gÆ'a! %.A̸vADGx?;ҞMPSd@!8suoX/b6e lօ\ Y\QX)M!5~!҆qM٠s,dٓ*tpuŞ r6LG_*-'7x Tg~ʑexl*l qfJ9b={LM]N]ϔXz"HFX\ 9 GhVRC[Kd¾Z4} hʪX@qŶ2"0sIf~Cu 7Y\"$BWb|CnݪYuXḮoȹzxB4>QǵTȄ!sRoɍ"WdDdNPߪ@됯~+r.[i,W! űp[TBq?9=4_#\y!YQ狤h2͉`ݺ*+]NJA j8p3Mp2{Mf#KL4}rѠYpu5YL: "D3,bLwSWҙ^vPf]f+'Z utM%c5vw^ۇ7 CI܊Ӌu2/KUd9w6Eo^I87G$ ] T˖ePÊj='$ Sv_YrZmݙ]#) J܁ [L@%_=DB2} K>|k@9Og(*LXe_⨙<'5H&W< q;r|[;R'ėpDQ~>88LX/i%ኼG-#Eu'ป?a+/V+5Je53g9OɤX8)._BjgcHu-48_2 ^UGЕи M k.hd}}02|?~gh953;arA+m/?8 Mk$IꋤEosO/fxe* MwL *']GKaOxGBL8tIvE~."q/_U|tr#6:1_ӄ`=*Z~@m4j8`N[qLCP:@ '[-##8&wk@ju86|p\%5ܟ#.Q&,,b3=-NO, , kdSS! xm!l(_h- X֘;S|L3ehx\DImHq9.hc xQW STlp 6e +dȭOpp d  zE`Ngm<naCѿJhed!P0A=6,1ȭ1:DF?SH/Deh?pt_ R\wu^hG̞v X\tx\1JP DYܩW=NȌnh`Y PbߌB4᭮Z JQ=FcUJSyIwu|2MTW@;K_+LgE|to! I"=, )ܑWZ.;&^t7[C QrO. #K[5Op3d:!/eƍ]v"c{x= 9t (tma}d|9VC[A;vO6jfB3vu`C _>(FjۯN"N:\4jd[4R{}se~^eLRkn"sٻ'?Gha;ٜ_#Xd H` j1Pe l$3Jݛ`6Rjl׹;{4f>~eʌdt[塞$4mIvV6IzFr<ޞ#@W_@ctQU5Ɗ㜍UGݒ(GpRxrhP8m*`/ nQf54dڿś7ba|L,ԯ}i`#&ℰӠ:f1ZӞQچj5L+IuS,=`];o d[(<<,ްiW{ꜽ,C^h;b2ܐ&W(S 渴HDenO.mfq6D|b_rl>@虱oh8ڃ@U^R٧__!̫:5bv{`ѧCo r"H$-O&(zAg@wѶDV/4 Rpw~2t`Xxw-֨o(L_|n-%x})2Hw87 Aο} ) ATjZk[l;p|D6J鍌ZFBZ~%-@U:> **ѾQ|!%(<44s|=~|)] i{ Z)MLkA8P-]=`y0[]A^)VD7i'ى ܺVPl-. 6"_[J8j!'z*f ;nU)s.|ܩ}*hl 3|R)0{bY,t3pdL^r:lTJ~ H٬3H 2k8zWI(f79DP[[t5-fiZh'*;/3Y~4˫39rvַ T_Yge^ Ntv]]㔣=ɇaa-AJpwG/W)*!h. MEMCO8s;l'1UAfs0 :s2`d "TP$8|,~r~A%+a㼧P3HO*g_]A_2jWJXN "-hL̐..uǭmc%+RZ) !ӊ|zr0Idĕnٺa-u'# ěymY75VİE| 4nFr&Γ-rC~x'wo|iʬ?wa^.VsS#H6L؋!ZV5*< ۤ[" T?+iyyJMi.?}v/hB {bi=jUXQ5&v(@/ڟv6Ww&d] U S6dM_b`9)rv0hYB(.-Y}Jpd,}SU$ ܠwӟK&s&-VM;S9h+N:0u аP .axFqvh4J6,-'Pf-@\<0u&j`bA]43o ]q.^Pyzfp9S?@#&Z_YZaFVO8>C׏w|{W O) `Za}y ڸEJ#lRHd1aӎV /0|a9&< ϟxD[l'U4mؒg zoBn+VW9֊5osKb$q.m2GgNQB}63IZ#ut됫vWpG=[}/d~$i*΢o6ЙH={AԕSj(*3Ӑ7 x0ЎW"j kM4BF$vҧ8-$?yGh U:a$qgݽqk+qj =YdYoJ<ВSg&кӤYZ4MkݶA(ѝQHuR5}@Ev0oxyާ#%[JW֣/H/{7Ay9vM2s:x"akc.r`luLqB{ z޽T˄! nX<t˱H粑϶޵tAX8>GQc1StHWZ~hÞ2hLʷP7/%=]\H6N ^<iv[*'nn?ÏYH}yrՌ`pQHp5D2ml`s >(H:rAos, "I ؠ;4z%1?tR_ ?uր}up\Na*~۠@ԇTA_"#GDmUolWS*2a.v#Q[9Q7%X8[~oba^ !%+`((:މ~sTE6=>LKhCH1fz+#QzHU9A#VK.6ƅKn;EMjPR³+;NKpgB QuvsGaJ%.h< SՓK)3*C//}mH@\<ɉqE]A8` /ĽgrnL0OF:‹(:=oK4ՉU]xې~+=<0A!.u,g4`"3# 쿁\@ϠgIx>奶&G 4@]}.^L:E<(Pg6"i ,~xJK#@w9a1F(@ә!mcӄKn<saZYw(:f%)Q \"{zhkt̬z(&2[V]婉D6,W3Gsw̟oN:BTعE.d==Q#gޟdcHc( Dч!)؂ ں\MmA|[gM$)5M Ll G- 65b'[22^\No-=\fm$wCxI(M_i!i(/e| q7p@Uui"zs1tH.q,criSP&0s/pD .xՃqm| :t]0rX9/aϐ/#[听_e  >}B2xV{du9PG WJ-'$ECs8ʏ#N :0I '`C$i/TQR@K1V2Xε7~9Er ( _3EI!9wt4.'0Ol'mΞW|ˣ&AS&[#|hψ#IuґŒWslC(}@†5=r%cһAO3) c,kV~U[,SfHZ8밧uux _E E.+"*=c ݸ٧PE(y ><<i{39H UпuB6X&9 )e_G=c N=:ڵm5,t<0p zQ-L*XYDZs&,/vVxWc|>{EpAO| ,(qlyVt5tP%5&R{1*ؾFR瘜p'VB$VL!uaKQX0q|euS1IXSlYj{%$J'ݖI+e }z=tRVv U3nrY[}!52, +=ڗYk\` &1ܵӺ-hiʁKNjw,YnYI´6l Zt\UTT,y: KÊ4/ѶilqT.[`]sWL5TO:OyرDܤ2ZQ̀BI80>`s } 8DBH W36J9B*KFnܾ!|fQ1f r8HJ/;if;Yy躒5! )Fv/.%t+awX z,z["T];/t69;; Eqc(KemVZLN&ywsJ$: &em5]ygFJ_1 ?څ 0a /8H/%,qݝ y3~y3cJ׽7V5nk0լm 3'~&* ͜p6-kb|: <2r P7hCA‰fTtɌ##qSeS2r@j ̔Tpt5֨N@~|@JF:rzK/ptzPZc.m J[z P{_x?Xޟ}M<"-"Xߨ$ a7.tnkpJXgآqgvÊ!0í|%Q[&<3/ u]Hpp5APt0]8' +.6w߶B#@z\EpcXi4y̢w RV{Ьs[ Z3 R^+i .^hTK: XtB~JL  gCTl6@xPdWwtՁ'$^N-I_|kgŃq%4$w ףp?y8/5:\O[aQJ: wgm%;ENay%>V9Cn74?Hon0y \j OwJu = Q\$m9/Cea6wReLw~x50 \F]S^TrDN tQ\^h{,؞ yoQ1wj} {R INGb[=fv4Z.EDn \ӆ{t%W 6ޚcSbv<,\h:jB5;f8U +k\fw7k~5jA=Z ЄotӟILΈI %9_|Re`b }{`O.d_{x{e`yoٹAI4I-m7X?c>zĀ]64]*A"DS [q8"UKhZWOcCwG $]KaMPArG5pmt,׊f ϞC9 :'Lvcx&I8tc3;k'FfCȡqe릴'!f 5maK)~fho`I;[ũ<1ˊ@9?5]Tg#tzL@>u2כtSϮTDm7,іZqu7|N ޢ(ϭPpzS @ABeƮ=Wl8/ϒLv=*>>6LEr]*0N+vڼ̀DT!ʱ8ߟ7GP%_Kd ?vQ @5ehg,1`m ƜMձ$ K0yA)"k'{4ydl: 6ʹsL1n+cN +"TcFNl|WÂЁ+.vBxtzWR],yo}}`|NC|*d9:!""vҪ74ʞxN0N2 cДM^g O6X1@"Zv{4dr6{rg>ʗDqQRzR3^ :s $W '+:P1FFo{h$xi J ɕY!@XZ)t$FMfͿ4(CR]/(a3HdkAvJ!DK27(34r`%S "˒ZoO0?,QrKrq,8'goZ>\CrvW mWƩM,?g7N]aDa!-+r Z~n41:2*T}MTִժЗ3Fw^pDN+P@=Z_!s^2Gmc?Ƀ'yV8䝏y=!zi7oQbhޏalWx"lIV3&IK dc椾2#~Tp$ߍ|O.WʍJnY(ۣЕxNc^ 5ġY|R8$3j^,tBS- 1ťGLW<.lf[ìV+],Isq E` =cQd ïZi{:\4|`y>$)ęDܰzxkȾn!s4`TQO,q1oׁKR<wR. J( ~^'$cބu~2C!^}l`uwĸJ1)CA]u~]"CE.֓&8I8d%9H9p/ MYY.Zɑ>]:xф 7J:٫?]8;oM\DO3y.q.^;I?,:6S\mfjp]{? W}3yH1iM$x f1 SoꇘD@7:"cLJJJ6,sHK䕹ɚN+m[B3d`)۽i)O鍵/r8GH`!kƳB|YmuFϝT%s5~WKv~-(]W:n6x2 |XOXH$(aϨ8^DQlEapA0bXcwԞSӎʔ|Zd--E)s8o/ 8 -H}{XIꗆGˎ;814,@&|f v#=un?& ϶юJ!\^|IWoSF8^9"ܪ$N.iy~4rhҥN9O-' F~dUʅj%]YPny91$-lGM,0c't˹4R|z+~˱`}̆*烌Ia# w:GcBoܶҎhJ m_zHq;!'X^˗GR|1 QMPTggX,*N XKsh6۶s4_m:FoUOg9.%*3:+{fQʴ_PW~:x)>uR(*B\n5 MjF:Ζv*l9ڨS^YD$q>;RH0R:mwUoÒz?QYJh]ʏ ?</gQ7;h 9;bEPnR|$~K>V3)̴KYRa _؁x,&M*`?:c;އ4AEH;ָU*GDmivpu}? IWEJ j"} r15bo^I!#VW6@W_+ @`\0}H%={Il'$O,4hjqK^ Ei͔+_$S긪& * P F{4Az)Ѧv^~ 27-~ֽDzD\)0rM>C8c9 @|^yycHxBTDV$aH;Sa4XR3PK~p u}k>!NK1 `Aulj9 y_?`>X6B*)V^:J5v@EZ:Rm\c %6&%6u:{pߘFVpn/t˃gܬq:l|[NFao5,tb%sAt\2]%ڥ V0;~ݩA=d{:ĺlrdv%>#J؁'V<2lnZ,TT1EZ̒ZjËQgwj1L)ؖ[RX+"PxŠÙ+mj ]){˱LӗK62K?D fM ӝ4pK&ň: }xG[0+)sre~qO͸\]!s\=?q٫Z]V feag { {?] qwoj|SB+ڥxKɌReV94`عGgZ7^MC9Y|o2mC;CNDzxoZ yrџ"hg< Q{o )k޶E lgr,SLw GuؠSƅ? I77B#isHh/яX::2d Cp:'Z+s4CQ2CF9=Y]?} s(6M[0M/]$mp&miH,2_w2g.}c"66{AqSQnSpHo`$=u08|}9pv9C~ilaPLchA߀mlp:F=髃r%_b{êhe>"4=|:'dI4*`1sWJw)i봀jxSѶww=^R8mF#Lci,؆l~P-j3S1lL5ٽndʌKC!Cg-*_1wvda&=w:O=Ol9/t]܊ +20H"Bx'e$*\n!0 okp޿x-Y})6NkXp1\`Wһ\+ XіvݺB85^-xKcY5f.T\›UI-Zf9ı? Jq|~ȅ@4)Wn6Q6hZcaJyKFmEeQk5/Eq)`);[,蔷bz ZZ!>TJIDmͻ*XY7x[s `Yگf_nQ|wl\U].b&7PjktkTC/.6\ن ^+-ȁP _ÓiŠh?#Ac\kMůAEruPGT[Sy1*SruS$jq]6%G ,yg5ئו5SYR; 8ٯ~~ ;gЪKFlPrP#Z4m*vRLPEF2)C>yw%RVp4"0 yoNr' )v EDq,zUѝ_Q5>QpH@pD^XDO"j&AAf{6C?{L@,6XN:G3FvP;o R q!oH8Ք%8x6&CP] Hrv{OCB"MG6+2SRIKhpo2Uv k>z YqCI}4RkJܺ>0閐hrzEIUH+ީy.E1f[gI31$fcBy38JM ^\ؒY0tm*]`.=,"֥鈼'Y 'D@ =P@R:H c75OťprKbĉ%1d3:ß_g;V1}} 0ݥ*sCj'ZE|tvw*Y3XةE 2o’MK= d1܂B:_4& ՟j2&tt їjFEr4չomA<8K$v+Fc© a51S2|~ΟF[]=D~ot\G jcG>=+H ±6Q)O]E-yZ a"f6VlKzS⹔Okoht\.QLJt#\~O\'R \QC/ ZvN3YN+VFZ%]YX n&@B({o͜q|N~iⵠ͊e$ǗeAfjeϼBf%:GC@ڱ~WO쐁G=땎"BwF]DU!; l},\z P.hMwB$N֔?f Pã*H&-DT(N5c^UiH _* ) ޻#DqȱL*x*chmݡѴӐҒjМK6Qu?eWeTBqP}M!믂YO @D'Hs'.b]qĝD8Bj3vr)ߵ"ݱGJVkW .K:B-ފfd3ԉb-Yy5TUEpPү;s ݢ:HI"RKJ6hΆʴ_fEO5YV ut`rzФk'-Y`E,57$=&=Vu,c<#LX2g:}p>AiIboEC$GFy/ W5]Q]LpO\ږҎȈ.0CҰ[1o=M |`"n7Cۨv[;.ڊ>wmhN4JS)=,>A~)%O6 LW806غ=Oȡya:*Ϛ&pbJ ]N l!g4:cV$Ĥ-D4JZ̃@p2\ܙ+%U25UVdlAOYtx~W3c73׫Q_d: 3cҎ4^XJ×I@rm>9B`=@P=ە-`N#4k=Ied;}yVyǝF0̟II8fkLQK%Vmw/+}'䮗L|I4 4Kb^I簂Q>#.95e?W2C'}[lϿ@׍U0Dm1*~"LHTFZV#7 mlP&k/>5R?NƲtxiOتKgHXSʼm>!i†`b+PEc3uP}~^o3iE,Bx2Ekv>V>2GA$uJ'.e-Ґ{(2@zIe)^}U(apmFa al>[?rQBLw^@-LtRR*UT[5rZWb8g'mq2|(=pH^_UZ8ڔ0!#)l5&`d4 M ʚP7ʳcjWӡk|n5`7=%Աy5`$Cqr$"&ҩLgJIn t WCÆ*xڪWθu jҡB7q ]6 Z/a~ e, @Mo <=,(OtJݙXZ:e, ų(mLfÒd\`u!-[wSMٳ$-3&u#q@?QEoaa$HrK;(Jl,wA#=i!Cr.\xCyJ>Q5 "L)p,}L8| ']zћ`Ei>]a;- MGXab0z ܗ{s5sBu`0qa"@ <1Gq=T$lq]?=/RȤ*XMV`|[ 1H O5XEC;`l5pcn}Ɲ Ux(S,xPAVfޫp ¾} %@d}uO$'鿕'C 5ANՁB\D-4Ǟ2Zs9MC;E+i9lGѳך|oujUQ͚Μ1gEY=nՖYOގIķaD+J@JnhI\Bn>.`qЮ|ț3qjg})!״[S0koIzT8d+ޛy)mR^_}00ɜd1y; Yw~+} c`G ړi~X[p%>2ȹ^ "A]pg'=WyMJ Sܫ f3厬~aZq&ǠYx~S"n֝pջNVԱGfgiʰi4v׋hQ MwLCc /%e!B6%6f>UEvbhd!@Zm< Kٯ|bw1,xt (IJ%ٌ0&{{}2r;Q* p˛YQOԳ:,{EF>׆o)JlHuTy_sMAz#Ćf\jܧvv(եB?3aD\RpKM @X窞tsf1t# ZT7troPJ %0<]2c)_Ӄt/}9P^m©ָ k'2K:0GgMtCp.p>k Ժ<.ZxU\wټqJ¡8&S/Fg37; GϤfm0dE|[dbXMW+RZ& Џ㫯hKPr>}Ą *|;zSwx>L2zG3j`PIs)FVj3Ik  >1NߟO}}XPHz;(!wd.އ{c-%Cu9ElYZ?\{=ק"H,C5խrG Q>P ;6rW %֒.$No!IrLmؘGkvÌ ~ s o^T#WԲ]U \ *mF=ץe5y68x:͟?_+N9v\ii}'"f"1&b7Ϊ`]r!B  Tk*TaC/+=Vh|U-{ːQn}$7UofOŕouЛ" J[# YMﲦMmnnG`U40b .ir(Ğ D)W>Xͨ<_lG0敩S,Y=ЫG&V?E;"DvgMhe ~ U/))ܿЗz=Q@@[> (rp=:7`qqP묹y-bI>A{iݺ=R8ʜYU*E %<+/I?@1Lhlb46+1 XqxfMdɘHb#%M2ba \|t1%wa)ST-3 Ok Amν—ZCkM84\.}XQ}x/|BŨVf{a?d޳45VӺb9|#A-:/Uaúy|_5o􇞓5DtK }iͦ:` nědcz!87R, j2ksB'~ټo`/n )c9\~ EOD*IcߕAd>.}=:Ke,]gY-:L-۷1.Gx\ٻ}bpRCuuwCJQCX4Ge^M؏OXrS" 8-ϳ IUw,n;=xIrX@KaQK75λ%_- tIeHPSNgroA[!0HJʘ6_mt*: 2금sqܨe-H3_1:F"B ?Ԝ -VT.ىɥ,{.8c%^X"1NƯ bLu'l l*OY:nB4$ʦe`T.> f?ȭ#OInK qF 项pSfxT 0H*Xl,NwBJҶ`;Cg 1:H,ݽ$_":Py<П+ @75i8i>p_^+FDr98ߕJ݈ x[xG~T c~Ƈ"nzu*e}a>:uЫ~=&yІ)Fs,Kt$Bs`RLb2c$ .)!'{ I(D MoһKTN8БsSJkɾMKo" BVY!+=-ƬXm (# gXMG~;:3i)`'l-_| %=6u&:i.m_FdbEt|JrEtDE}~wgȇ8;8ѩh;SJ(&WN΍jb5[+m-AF@J@2<94`>8%mP%0k#ɗdM_/#)> EPi*hVx fz\u G6+Gw7&{Q0Ň3i ixtʀ evC7 d`iSn>iI/Y U` D ?$yjՁt ϓlXu,?7`$>$mx})EGe?|46Le(bv z[1{bڛַfc7H| N :bb~@%)Y'5*-`LsA=l{1J|!Һ/CPƔbSov3%F̏ljI&WWQXH!a j⓷v&p<ĉ>-FÏx^"|M|( G|i=_LnfY~L\4lU)j˹r`|k4I;j{pR#/Waэ3_wN$0}QhI5Iс:aP}Gg}ss9/Agcs|ϸ, xuZH }4ij[:ɭf)l@DW J@l Cót5kvpv9a.{ߗm2c^sr$7,r0l%s @(X> qg?z.b8[>5:I5eA{x9c&5)'f%:/8aNz:OInc -ևsK wn@`93@Oa)RXBl'+N̍C(4D2me֘)xaTŧ1^QEN|Q\?!FӮ >i)R eC_ȑ(x N2qܼm@jWt(|S=wˊt0oWKP1%Mq3Gl"a7 LrD:\@NSξ63CKG;R$whm{)RǮu]M 2E||&JR<#S8`ga4g:"Waզ](Z{ υ@ <Q4A9߶Xd6_Wsi]1 k*p6-~gY|ֱGsgX>4"77oI*O-gzjfs@ ù H)je ruDdVV̹@c'}4IzGԴ,l%Q/0#& ecDFk}>GKH^uN~n|>t6lc"dN/$'rfc>`_r*)e2q!1A^n U*P"뚁Lr`` |3qBm# C|k)WRD`T4Aj7xWӸL [SЇ P *g?L#/䷳tv:QM& l)tnx57?j݊TS^/$ t jK}vB&_dg vc H8@~^*w𝃌b >!jF |+'+k%{]necOEH=ZտiLI Ld`-c In'Ou֔a=N^f:kBY{&Jh0yX)Oa;sK~ѹ;<@YiK&OMJq)Hoɯc@wrK#z.+{e}{`(!۰k/90|KHW\25~ v?k-L~gKM,$ ĸhKF'_1~7罬'4`X,/ĩr bxv~up2ƊG h-Z l̜B=$–}_EԂ~䊒LQ/[ Gᠿ\&gMXM/^>YpuB۟z**~MAZ-> $M0 _d&En/D=@#jah>'GӋ \nz$%: I{ܲVc?اi&"5I{CLGA㾟vx"7> <9Vs:9'яwid_B^lS>'M鉴:П9֋~@hF밻# X,w=g ssЖ柭Z-LQr4\|gѪ/#8zsZΥ lwo7ehۊ&"N;ʣrGČl 2&)dzQܵ "yL\L@݁IQOÖ9zQ."Q "=8ajAیцo+p^r_s%'9fJ;6?|0SA@CΧi2BKc:}‘U TmLY[{CnWT`qMUg~tg%٪CC aGѬK |b[VPMdB7dj#SP6ʀkq?(6̜a_KE%gC tF4{630g[~ ~ez,$6*ϐr %$e&TږQ9T`0}R:KA_ͮޅrh WXwpW C{c(LuL0>+uptXN=R4"[Z >S۝~Ze΅탩b-:k:Z Gxi2I5ooW;_6

&U(7E pwezqVdkkn'f>lb-qV,ߜiEq @ws:]ܴŷ$-5'ۜi|9Ɇ.K5sbGҐ)q-YWFjw2"T4VA6sm~^^TpJ=}􂱡lS#y(A7:iHv!5Al .Pa2~J@Ⳡ [V}0x<".Sj_?ZQ n6S9oMz,n= CU0֞+/$&Q)JH5.&&%۳FkF4tn+%o\f=[Ep~[aQwUQsri5rN2.FUm+jqbZxqں6| GigILj~PĪN'@0{uPQP*Z-gR=N%Lz 7!l驚9Yzui= 7e=V. b0a;,(1:>A>uR56Q$:6[Om/a#.D9?PZ;Z˾XPȽb.i](dL|}7"׋8N,v>T>#\sӔy]ڀghf),4뽍q~N-"P=j̢f>:ְs\DDK DLF,[u= &A/VBzxx?82RtqcIJ۱.^pM&, FzKʸ.Br%OK ́UFh @ۼO_@U|g (D:<#޴8FE.1ˮWҼUF`udF*e/1W7*(1X5p Au+jh%%$gA/,P$`WWD/}$t|ͅYes5dUUd ] "Lo׶04ڛLj9l31 &ی!z'Mktoʟ*xR=@b ԯ&>܎>O}keKzi18u_3vR|gJ56 aXv~U$Ԙu[ !Ŭ#PO{=../ ̆\Ά BG"osJ, _x0}%sU]!|`Z#cCq W}ҲVp&[ݒk̨`" $dfjt܃X+r2m҈X"ųKp{fK_}{gM[,%ոEGzЈ,&pTA,N-.I[:4&I$}řF%߈$XU-q%hG$neCQ͐VVocN+ cDS)wX>UmmHk/MWkV31 ܿRh9^gwNj;"4˖z+;—1qڞC5!bke&Hn_NIG-R/5VFrH*^h얯 }QMĊ͆Y̑dɐ)#[Z.f~]'"14Vk|pi^mXHЛt-ҝe"j}TM&"ҍL1T,s=G^|s%#U}F,$/{-Ҷ Ij\@_R`+kBLuxSj=[O fB8FyzZE;|.l R~sRG f _} l^ -=i-2U̚swmɌpwR?*/>H|*6 }jJ^A>V KUiktX>4r>3FFևL A~R/M&RMk4QĮCG9{!Ww@s?$ aBWC7 @%uQ_e>vN&u_~iIKN_-W޳I"nĎs@~WHs%@^\c-i4GH{b;:۷QכOEMuK:Z} XTeL{+z") q3̪{3۞\)pq{f}=_k mTUx ^0C2ɲ_aoHyP+ &]❽LřDf faPaQw1-I{KsރJb 'a[\ ma_W"avLB@I':̰Y] sq6~a.aDEz I$? >RhGH݆Jr&Q#TLZ7i2AJb9fAUAƞ3o~z|\쑻Z j٩TVIa+y ^ԿW=OU*̞J${-2Ũve-iqP`@ 79}1."5sӤ_K(-L$1bBN]wž"mo!ʛ&ORC hr釈,icV W$.r"" J2i̞IOjAy*"1}B:]õ}yO~?>{y;À+_c$gsdn7\)l'2{+z[W<B_0ِ4٠?N=Y-Ig)5;(Eo6ʌݘh|Fi5 cw=wg4܅j[,POVƓn|䮸ܐ*6\[]7eOː yZesgi)֮(\`Y#4D_ZBq@xF59L)e)M1_Ri*>x gtʮn d_8v zJ_"2`x33Uاݮ ߖ+/Y`ͫ}ª{*YbMjLGk@DD-Zi=_fd{K i pLlDcP[OR fEn>.qN",n,Lp[Pt)[NGlH5bhP ik&2ϿmӾ^']?bvLj.{; :icNK 3$n^;f&Ku,5'^m=FTjCfͥ9`VMo$HSb[5PT9_{c?E!%JvOp< amBw1yt@-rK(}9.3 $2<tQ'KP^C'S]i J d|{sh],2N0Etʉ_ 2%Lc? ]`nKJ؆uXQ!Q :9,=u`ED'3=ML{| V́|1)1%N%H5~x&uE=xZ 8]A$7Uɘ8)"DL؂젼<Jr4' _* Noz pu;K\!%tQy@w-foXR|KfبV.J#h:lҖ&gNV՝uv9DI5(lL~!M 3g-֘ }67ԾtO b.Pd. LI% , SҮO5wsn+- סS%U4j ϜP(z Bt&O*OKuniJ }pp{VB޺24j/UB$e#;kx݅ULaZ dK@Jm83%Rn*[?ⲽPW|H v`#"9=ƜXБ;eTnVƯJISSb7%W΂R#,)傘 xm%Ϝ, h6|@ZRi{e]^2u; H_Q9~oNzK2Qj=\s+|i^F]/Q!xGp7…HU?N(l|%##z3K=p~)'k/3rCOo%c@ _gȤ]+$S(HRғѯitwf  I3.@ڗl#p AwB[^yq|KѻY!έS9_&>]4:v(W9k >]&1ݬG58ᢩbӆ, `'٭Ycqث^Z E#sGnPꂇS=N)g+-E >)e~kHZ(@"c-&=fS9h(5N0J8:#^깐~Qaic ytn]* VpJě ZiDJ&u츇D{x6=t1w|$PZ;^yƒ_*nGįpiUjXM$inAB5otܠJ;;HL3 $bO{씜LU#1{  H_ _slVDMqVWrZ$L5\FֽY]mCkfعR6f"Fݚ=Ƀ:9Bp媫Z,y ;<Uz%As)0$ |ȳ_X n&(y34PzC\ 'o'fkS'#s*-yFfnpwyIEK&l- .ov8Nbso* _:Ԋlmo"}vM/oTIƹX;a\,^ x W4=_}J*/~;`<6g+"f2jЭ2CW;=8 @ͅ='8` W76gr≎_T6K>qcT jw >5 kߡޫ/\G3 %W) VNᦚVkpE砼0{d;Wni)ATf""l1Bw|$&h&dã[,L MHi~M #q't赦/ld[btԵKl3G'aSpƹ|p&O Z QG$ 9aTKg=(M0g9d,2H7]Yufʸȷ⑿Wu|L*.Br}O"[y+}Է74ܵ&"$be|'dDq}Tmd^IކI0gj4an P_X;'Ӱ)Jn& EEH6`xs3AD 36 #MCId_ :cs_T3\/LgAyXy|$-B LJLNs`JpH7I XLK/ZoS%K9# d)>Rc>#t o+n6+hsAНڷ&y^DnߝayF*DGIq^"pnbWX VgcJ'IqG/n `SOJP L @-dlv=N\3ʜAq|.l5$mIIZ$s tF)[|]is$Ľ *R$:"'6ov2_E,q8_DG#RQ=,'h 4i!i^~x{ӄՠ󭏚C9aPwy탴I3%m#i̩m;jgt uLay[РLΨ6* X lƶüO*%(HIJ钎d Mڰ&yBevmbk Sj"RPӹKig>Hit_ Cc،!bɓy;p/2NET|W(Utt\=3I \i QcKgjQ}#KZ`{{^J *z/]6"[^ؾFn k 6/e=Fr\Vq`[ }P ~)e]nb0(TK$DN;-#kGوEU܄MfjK+x(u))CG7=ocD͌5/-:։#T(*.kg`H[fRR3z* >QMk2wVФ^,ݚ١o9z2n 'ĉ s3txkߘh=F+)8|? B ɱ DžjD >aJS" RSܿo24 f)wgzx3z.bpSi)tUI vR0ef17p{@f* :7wG1#|]S΃{kam&p}ܲY qKh9%-ͧ}yWlOPl 7Ko 6,cW& 8'iqNfRd)|mOOWW+9$ecd[֙0kQ I+7 b}{S FڡӍXӄ5^,U*C-ߤ6miMq2Փ.w4C҈ ީ)jDTqLeו!B*)0jޙLXn>e:>{9rS4mS/0 0@󌪃jrfx-4ljrЕwjGߵq'x/X@~,^ }+erEX90Ծչ3OfjAV3ϣ䊟mФ|iµZ!vf!Nt( +C7Ir"8"}{fQg6u#:}8,g3y 1,I۷VS22N9t(C.5,d(߄p/}˪ [WP6J(.^NLu{2–䣣V?-\\.GP Naql떘2]C\E/HΥ( u`>?a~:Rn17N4M΄~3'/<<;mE  Ϩ98EX=Y夒>;1odC[b\a Qo)cYPsݱ=XTMPOKI`s*#߰6][Fk}Q/̈rt,H4Cd ܰw-!{ʌ9?G^hg5b`.'lLUׂ$7yDÊ0\gyfw6-i\ '7aķdwMKtˏ+ed o`kHNIntzćӛ^;b~e$|#-VEMfT\ $H(^%RZ sO[b(D!s?bTiqM7uOFg5ua-74 7e b2+Z.NoSU~`<ʻ$^VUDoԳVwq?,;u>$x$aJKj$߿:Tx-XZ8k&'m߲TѮuBd<@Db7}TZQӔUꇦw+Mč=z.1dmNVBO=o]bb>"XVZzD(2_s T<-l,|׭_.VdDs1r@r^Nn†y5a4nv+J = ?7vHk g/hT96P*lE~$ MZYdHs;_SI% 4Ȍ1DD5ʉhc=ghMk^]"atJ/C|FcY"iup}ٻ9|Ngb>7qS %Om0ig-}y(,WZ[}r)OAJ҇DHzZ59@D``Mk7TRBZ=^d08ku7r@!bQNy)An,qAoa!1ʻU.2vL#u t:X`xcr*Q@ˍMbj*!%нK9/ .)@u?xjBOU,F@M5вj+,z\wfīά2ed90G.LDD(Kջ6M˴O9m|n{6: >[#ʠڌ[_cPhul@*7}WGJM eH lqTw8{>y-XO !UCQ TFU*{d1} un5U@}/e:IYUi* ;L-9™c^f/zXL\}9Gj׀(7lIJ"3oM]ծ20nh}vܔ\sV"kS{Ui u,Exਈ!nJgĘc?(4nȊvU]9qH >KV3Vy?,'\a\񣋙jgR#!h@UX>ֿ-lQx(嫑M9Djf| o(Moe k9J)S<a3LJҳ+֋caj3׈0 =QUֿNW荧m|QMB>;\pb$^9c d/Yzn=Oֹ禇ڼQEUj]/ KjmIXee~}:ƕl+nSӺ@#[C4w):dMt+4,Y Mc;$ۆ{ ,rmo~-yOA!.]ޤD͛ W/?Z!YgPvv䋥p /_l@Cہ\ǃʮR+#ڥj%'grK=ަs |-]9 p"61phm2;VV&[0=Α.Tk*DT &C`5[ݡ] r^hȰLID!]kAQ1ʗѬzc=16(gɬՁVu/\ݑ:(ӣٕ>l׿׻UIdQh9iAȦ2lZ &,y)t5C\C5cr@K#x3[]~gqd/?KM;#7J; D`Pj?Rmn֒41̫%LM Ny2GhhUL^@ U_iWB%و45VZK(@"dy 0}b0[Pc.:NK4<;*FY4vz##4qb3&C>UV&xSˊ$rUSc/%,$2ECeo0RP 1|(zR"Ƕ%: l&JM;(rwR &;WjqޖR;]j@Pʓx3Z ܿfb(nJC^ @WMRT@ok<ʈج"l-Fk 5_qEg sh^\!XbVi ~lSqc|Bg>!v`D(_yE%Z|W+y[FYBGc\rPP%o8F{2-JA <~>7&bjY$ ,P毼yYj6bQdF`XH_[ ʀgJP^.0s3-| 6_GoJBm@Zx[n6󋵡-(i &$)A|`2J^-`p-ZO0 ;}HM~%^c/A]Gh|?8L9`@2rfCj'-{1ټqI;LWϗb\7! "=|gEK痈]׽lh˽7Eykw}LJgOvjp4|_Ozi#cAjb,kԱ#$!)\\{沮ngI*kʚ3#9. 7֒(<:Ө%sӴ&(eMg,u&3Lt~\GKהѦّ^s^J`V>@-iGUVed98,1Q YʉܛqHVRL]6Pxzs~ !?Lp"O,ОȕT>efEĕ8xڎ9Ro!p tq v$򫟻4⊕WQ'ɑvg#dW|Su[dxTѶAU-PԺ*11d=La0ņ/qq>n&o{!CVp2aJ;0=n`־׺'}Q= YDkAQKKAԎ 8{O6yK2/X'+IC~l-o̳ȉ^Ta} b-Νᎆk/l2*J4̒xTNJpQ–Go$~7mf.EsAxv;d& +.yJ!5З̥NByvpqOTfE<ś(MɬƤP]{!^-$2xҴ v'QRTxj"wRv~<8+Pfi $+PDaH>n Js=lC`pVJP/USQ0#i˼JP^kHb!ɵg$kRjE c.m[[Ɗ#SW'F6"35xlJh^uFUHt7^]ς69WFB5ap1L x콯?-BRpKM?]HՓBqi-V3ܭ`P5N !}U>9ǓnZfrGa2j|6&rBuKժߥUڨXE`W4EtټെPcG㎓ Av1,cؤT8ꍸmbTLV.] mG#D4JnHʂW\9l {?Hk>[aNZ\qh rt-o?)W؇b[xS=zCIsFsɧʪilhƝ/T BKK EWҡ.X #~q13bXpP {)ȣcɦHBUVg$TK]dڧn x~sz5crG1l#}@z`pxSpeCm=qU`}P5D^ޝ~%z @9nrdˎl'XBqju3+Mx]i0(*Z^re`r0V-'! |`a(< |q|^-l"\%]է=:yմ5s/aLj6Ies E=qko-^X^m[d'F qw{غwc;d_"nQ$mb(Ԥ︝_YGr>>]Zm!~sG  t)[=1=stx%݁<0Ehυ y9~{'28k$YfZVLfm>NYWKp_,~x~ǚ\^ݕ~hjo1lLhӢ$]vZcvr>'H :k]N/u _]VʚšȦ!H9K{\(^4z^]Nn/oZ(dⳗ!@\>J9{ شʤ @ZCF}u ޟ*8OG BBʶWЭөD?0af؃+4+ Jf!+ ?a8ݢ s ۿo[/0an#*ӏ҅P}-䒤z,5m!Rl@*"*r\Dt{HL Q=LN#'A+tGwo*to-B#>'c=džH p8yϰ⁇<%k22Ͷ|{B3lNJc(X1F,# |@ 8Ȥ3]H^l6LSnxa0;]35}19{ÐEfѩl୘(-bBًua}z\Cx"`)*+EЁɵsYvl5tTԗ?r*8$\|Zح3*7PJZp_ w!?$Ի2q#hu28+r} c}\K:w=T) l %!3UYOd# Qk&pmd @VHWM49s \W&4[P/錡>Th'vbňVȵp) |LĻ_y?\xs8H ǜQz`ҵexIr+_֩TsgrkZ|_Xa{M3AՐ˸_qDҞ~*dϕ_^)%$f3iIw$uC˼6ڌ< sӱ8axMۆK5gusҫ[<~ Zt#H$ 'XG':3`I#ם#|!X"@ ӿ,H(n^QPxabݴT>n ,½n+pEr@0YC^$Xv76r]j3\UP춓7a+7'i 9|2¥xg)&AKҋn}ܷc@JoqΏ7x̂xp@94A64JrD[\ӳzg&Js-_{r!b]I煖HC*Jg ݢ+Z|BaLX~-:7S*HC2^عܠȁW0tVXc$t1M{ kw)y$ ?)j}vI7ZíVF(4dhN 0؇B< 1X/c; TJpm.j %MO9 ь$E~j~t9D4k^wEI1$|u>ޕH\mxmikmi:jbM" z hesOU"lxJeZ.3O-.+JmÉUKX$T iaOH]4o4¤Ev@ VEau<5jħ$}}SwA8**>L<[jGÛvc.) Vb/WW8:JGblũ(!N9~`癑P)!)j ґ:  73Բ1rUd1';|DXNBe=,>jEA;Wϵha[/ڇkR~$N2ͣPMMxlʱ:oGg̞l _NpuXd0K_\?,ׂlg!`rC5dKqLJ1o!T`"4cءc3eQ2R).LS3y0o;hæc67Xo HqnΆCIҖOȋk5$Y[0T}}lUy]z㫤i!n )9٥AB-]P[ih<+HI= 5<ϸUqQA9F.q_l['456meY3˧؄aJ^y{g@'9 L{DEg@F~Ay܅a)!T,j^c%&}E)nbE@N<h%|h!rYf n )1Չ9s*bYOIݛ#<;&KoSX*@w9%WvA%О"T hN ?K > ~M1Q3UxB[+S9귓P B3 HD7nY;oof`_e kP"I \5e~sJsYcUԊvn'}$@eAZ˅SUl>NPE{ Ur,,LY%kq!7Dp0B VǬJ{qvȆWz/hXazC uc_h 6ŊqL7dx 4#}'Tnt}y {ҦH6;$7I8 M|2fU^L.aMs#g*QM/laa"S ch؞@d)0dNJ+363B/;1>_%}kDZwj hXe0"P>,BttY* QK~?M:&s*bbsiu/^c݉Y>.Rò#@fP4/kN\}'N|m."ت!٥ﵹH:¢Hmbe/R&С9-{d S]L'*|sS72 YtePpTdtԺTH|v$Awg$UN 0'e% gd꘲ l'B{d:^ uoaWIb nz;(xIvj"ji~L=#/#kLhw`d\kY^.&Y*lZ "e*{5~ٴha>rr+)P+ v" ‰MՑf]Ҥi.ckƝba+4}vCAݕvHA Mυ9Z"8`qa5><ϒX{s#Q JXoFHI z=k=T^5}8z=)hi#{b3}6PyQ~\iiud>ИYR&*1G+XܽQKMI8's(Hs1ȇX~[012\#D""D3 QDGYiZ('F)![q6D87EɧP0p_|PLFxnզ?m {g#Dz Rγΰ8FF&a#u؅GCr\d4Me .'p0̢O]d\ǡnWKl0.\|cjA~l-fnAdHj+r|L(|'>)OzL~2{5$$lhq[A$!y"ROo:LsSrx跶DL ##.ﶿ=e<'Y'ikN(`uj0EAj"1*eM5(_b՞ޚU*a}~ b PZ1Tb!Y$sg}5dJٌ]'>+Gk@AC?k !Jjb|4?f=:R*Ap[ɍY% /Q-.$[ |J281:,we [li"ov 2bnE `!0Fxg F1GUth\ 6FE X6㑲dҀ´jI~ZFCj'FLN-gNkŬR n(n5t 3 ،xF8ykBy7<oyg~K~ãؑMw<] 7@MtٞG+ffCk1SL/7D, -ˀ$-@|aCEXK%0LJ 1霗eN9d};uq*ԅ\7]d?ԙΒ&lOc qt~qn0 >'6DC3.mՌ5ro2`B0[銈r.aU.yf3o1B/z/Ph4/g[QaFVjޑSX 3dMH-[eW˩E)A 2 x.42UÖwVFmf$nc-؟a e&^321SMIY)o c"`Y҆P^?8 !7(&+ -&x|)\V WQ)Ϭ&Mjk t?iSNi"NSqr{}DuDI 2OJuĪ"otgj .JM[x*]LvXiM-dt(&sh(z:s,k~9*||Ł(q߄8o*32$q,ro!eKb.bSX╉x-HnTDQA_=@2f[9x8ӗvK}KGpAr‘/Ĺk2dm2`h3{R̸`)7e&"vXhh!R=\`(%ٍ$i[ J( !my:5<-GKZw*OP:bհ%V1#+u(>[ť׍G^&>\FT7q}IQ+ NjC% Щ|.[L`b8<*lP:Y9/-ʶlt~cRG@ӽ#l OGa G)4 `L(1<9cc|t FT>I 3 N܎GO?p֛,L--C-Z·7Q49̵@C>"FYfUY8Z,^Ǒ &75 G*wM e6#$k_)5VMuӠqj.\I{`V.iQ &]˘Ylw_c_ H^lb-lYJ0I=ڥ--XpJ_qOע!:5aVZb BH͛A(c1R 2(` -Ry|Sѕ6ކC>:qe;ADH58|;9E_˞Eff dQ44Dzu;Q|#Cq<'1/(qTf UXAe\m~q9}#cB^ׅ΀'uTRC; Pv}H9jgq jI6Tޔ^"5 Oy`g;^v+J"7Tx)̧!N#:@V_Q :?7'e.S\^D H9r*nXN=O2GێRTkoȍEhBP\";F $%oR`EyI]z:[幙qS쇭L"zJȌtJ~nJȾnAy&HТ;-0h r%X62TV*-ZA@jL;%~nyjTIHoܻ^ 6U q^oBd6["^8l)ׇTh?#MѨSH8iOe=(D|Qzp7RlFծV?a^^f?&ޢk;,X%œ@g(ާK{Euos< C4ƆcJ"vYR {ZH/_J CuK{WkQ a g)lbQC]~Ec-/8j]HGPhľlN"- ;Y}TkLEyrGI0x/\/Ϙ0ҧa5cZᓘ}h e_8Zw45Vt%o+7md< xbe ,f|%nhe2$>pe  8! >9RC&\@/ĮOaBNwACS;Y[/(EM"eWos+2+' HkC \7H@j}nxRz6~' }[NbV@1H>+V>" 07̍L~ W͢Cu/2mj:=ٹJZA혊ao5T$p]RlÐ.JL?osْ37Q-?+! sP}9fS\Ã\F2Rů/l?h1ɗHF?Uu59x㊸Tk@QDd` (eІCCӏjj \=@^gknku/< 5~:bkg DFU ,Hk"7NTY0b" RȉE?aa[y[`b( MK}U|.oV@m5}#+qYT^ZJM>UeWpXybuH}}.$Eby䫞Rve2%.3q;bNNa&7vh";nE\l/gRz+t~egkem+HGifdY2fKEEt5#rE q* R^Guz/Cwه\Z5vd9aXUF33NvٴY[mJ%HZ6P t"%~s ydS$55wFFc~Zf8Tȟۨ{/Eq|>@kH |饄"|ZCC!dv(T>Ox$5Xqk|RMM}h q=Ǿ^ġx8 S[se\F@Vэv4. IXyfBb  ma9˱)͓/T~ PG8XOi}я۶aR]݈9QU Y]M03i8e!bn'kIq xK`T|SzgSmZ?Mk 5{ݓv1bs2`ʞㆺ4إ,'_t%yVFw|WbϩK=c ^ufVtсk|09Z0&K ?DnX)=_ljbHt˓]GB)kjr*ݛ|N|]eĊϑV/_dF˗ ʩ^ǩѾOg#/k鿛r9vxt7(@A\5$7x)ˢ?S'sFJO#H6P лyZ&ց,MԜ  MN;Uxif'=wBk]N}w8CkދՔ/(D.V_Џq oINC |S|F?u:KGl8Y|R᪊PlUs eJ=afޘ $] r>xës[kjQRvu%zi.&p0@okӻFddh%jÔq` sL Rqlujw#v'qA an&eisV' oTFv]<&΢̅ͿFk߼ .$V2ԋPS:|p+W`HӪɬBͻ"^c t,0rV 7y;W"oL|؍Uqk'-+^߲Ӎ:( "LѵbYɌwO$c@*7 K "pmc fe61c!h'H{5б`NE&8q3Y'PL8D/abI_|G7^|v H5'qѩ`7{KZ_7ψSZWq4~=V7OXuՅOZj''⎌4#/AS,%6׋I(e M`ݺD(B#0vٮϥYѤfrO7wYX>E4cL$H0t z\^΋򣨑:>-'41$z=''Lmਜx͙Yq.ijJB'|DQ<OʙZ?Ef+g烅kY iT, ҡNZ[ٽ4#/Ji, Ҿ%/8@Wb~U, waԺԬw:ifGjLIHݥITnt%!-mLݼ_HosK"*7|8z-xE7 5)MoIDqR4|aE>0g"nQhDh71h2"^z~3" e5@s,u+)C&s;-KȾӊ3$m=ȳ}L9E{~zj˩ʺR 52fd,cA햳Nn2FE:pQ {><ᜥ7f(?JƗ#n˩kl3?', Ok3&D(Dml@*ivAzl`h+&dg@RBnu\˝m2DFO#P[,n;Hxd-16o-1CxX衍02bxTlqjI|x 8T8>2IND A|]b w6F>?qyl xjf'ђ|vwl&̆ 0bȓ)[|xMEs.9g*ȡ檥BgNWOYqHauIf^C&)o|7]ҞZLiX)S*ϒ QܟI3k3v\fbB&\W'L%=ӶRdљv,q%iƿf WEOhcψ8|bNf* 2W'&nNc2"Zi!Hn5V-l%VΙ! FvSpl {Yh`|J\8Μezq{W_R5ixcC-y#g%~OsWxObb#`C ?AըDmN'hkeww9Z yqf5W7u6Y>{wՋ([#D#pN%s D5]N w2CGS6`Q kO0ʾ_Ot%JM~KkoH)t6hz<"3x2$ϑ:Gx'ShYӣ`n uQg:zϭzXArNM%+?4","Q\y%T R8ËH͚I >t$^ _2Z؈a3V:Va5⋓1" FRȪS|旘 euhƶU ۥȢB$@6A#!K#-e'=VQ;M(ANAbnѼq̯H9m}Y8kpNGi8nwmտѿd  XAPi^) eaOn-_$~\cITCU`9\\䈲a ԇvS⍿=)M9Qo,bh2mTĉInLuc\FD[Xf 厪rrZ_cj[9 jmt}ZWE"퟾~Xޭ&/QK8SqiIG2E) ]qU֕2  X.y} CqLDܦ7P*36.2 aF/^HJ͖gA!u`Z}J{4\LRFaƺ?|H1h8hS!RL+*hdCgr-s9ZGsVɬ–ayzn=ɱ+X0x[k#L[Cx,ܯ"•*yl 6d,$$}̡!1~RpN72)-윝S*nKtJ1\U0ЫH|všdHߤB$zyvuVdY5Cv.G$]cpͮ=aތQY%1%3JDw 96m?h5l7(?Zg'w^TFNebH^Q{H^e暚TdBzx[qWKhf9VB9mb__P%}V#^ZI5{UmT$˛\k~3DH't;$,49ˤIOGܖQM S]7Lo3cj&NM4|J>*#<>&> Dg +4r'-1}8~T6[ I l~ƒ<CZ"S0K|0Yc$у3%>|ZWڕtϫv mL1IeN썍:~רH|n;ZݪyeDÿ%l]9yᆶ Q х rH /=%H>J[*1QۯЛSŒhU6F6 G:,"oq cSP<7^L Ӿpo$'- zx/3bl@2 <oC{ Gx>ZcS~#?HYVZx>u6(XA0T- Ӭ&o/ȋCqSKg҅@O7_U #&!Rmyז 7߹׋EN[[mjMOQkBbҪq_dWr*Ӕ9 "›Lu'e# Oob70:1*<nbNV9;Js,}3nB7FAU=u괩`^ ġ{QBr W1,@st{e P 1tHXPs 8v8_ލ.)jcmhY hirr);R@Ϭ[ em4TQ)t9tW`ZYtH 7V{nH~Q|GN%&̢q:0"_!>kd"r>H7ژC[%LF%G,"J.%խlwŧ 0.BH\dNÐ[!x9MB/3`ɳx)[ܖ1j1J((w2`NFd3xG5OeH_Ks}jd@CNgvZCJʠ ڪ1DD/ff/|σGBo+ˁ {Fg Fq.pޑB% l3XsLT9uD 737B__w{:6FBlGeU"7 ݴ͞t~zt,t%ժ U9' g^D?N@fR?=LEUΘ,@̎c)dd.Kf"9 n #$! ~D5K dn UM?0)UY:' Lp:9ss%MIJv5`d"!'PHJ^gUv2/zʲWRN_893+(4tpQ݃zb)3|4P]˯Ќ W3g0)9;NF<`l+xOCc.E@.HyXCc~`LdLĵ$5>mn`"z:bl9"^;5cPE 0zPxmH娔$ͼNS9Y{)L,(lǦ ?W!iеn H2dt_Zo( vxd|2{K(x4ݱU1jFaGg"?G\!~c*bV'l=K=:i\ ]4/=(԰V3>HL2a>οk#Io۶kSk0% TB=C̿d:} 1uwmqiZ~m@ WNʬvΝۀcQ>d=mK.}kKqEqY# ̦ -a–vxI<EޚHH25wbDXDWBĉLbgءA#qq)М ;8,L/7ف:h0h>Sx= u^En@:1]c4nߪ+~?/M~3j Gڰ;u&3-/~&ir)>٠62O`+$Snq%SrXs >g$sc.UR0c,|6kAY P5l *m}=.R̟RR`ZU[YPAͺZ}YqFu2{| (9D,c`zR p:'׎7lM)"v~QDq#P` m"xojNjmf@e;e@B҂$u1mC8sO;(Eh:[{sD7uM~;  }>K}Kž\R%w#Wft׆X&Avե~xm&3b[%ixxr-rHs9<`DӚeWN>BV꫃vRr)D^(p#j:)+o1:w f\[KƉc N`0{NgA_PDϒcZ^86_}dLiz"ׂ93]*9n/9x/|9D%43YѢ& )X_o>T!R W;ȺtvO7zbM>N5$/UTP7nT&J6lwg$32$JhxJ BvϐcȘ<ê\@-iD$o"jC*$dz=r<{8AL6eS0V`- a<:gS)gMLϥ4àg'G^Eۋ C%v*2bO *9eT^i"LI:ʹ[o6N:Uk$D|>PT6|i[k:=K J\CAgփa^}f̍j8Ĵ9"'Z#J(ydy[W;O,daR\oN0~j jݓAF*/'@d]8ĺ8ŜeM⴩<\$V<|23E&Y<X_>QX5*/IAZ^f# >jya8W+ /T  $!8ZقG_lѾOwW`%,HM H+suZ6hV;Ɯyq -Ywc~u. aiwMSˡ6$TvE`$lQnj?2Գpi()Z1?VP>fӻȂWϚ-|Րy_va4 {vj¸Y\aU~K&9$O_)XWm `4/~7Ol;3kO$ =v#lq3 ha\r;%DKLmՈi4$ahKgWݳaS9K aT >Ν!vW;QwC`ó5L%(Dɞg$Y"djHSlXxzv蛔I2Ў¦&o[,a;t # kT^q:!md4}e$껥ZلPd!?s?g&zjx~g>TP'4clc󤚋DpnJC7F]){[xy:??b^ֿI4I׭kPJ?!pxT٠/ 1jc5_U$~cH|@3i 9rƬgtfb5Ц2SH>R\uUWή}A4Rp]˶4U:v#aԴԶk*KaRoPC#V-FK‹$$oPilVK[]O!$r@By^y}{MTp" \ (:0hbN*yd\DNX^FNH>:tvEr{`WX#l验V"^qHnveS 6V?^;s:QzDJΊ3!ut$<NiCC"ƨ0xRV݋TdrO#Eкaިᣈ'buˊXd>Ѩ=i)_lY%/Y E*@/N3:6 znJk!K*h٢by oˋb[P%txQ,B_D! (n"|O[ufjn- 'd KsPc֪+hߗ 5?5 +8k F"kttj8s 8Q2?6_x>> b5|1;KA-:+ͩp^7d5X pHM<5^ r0睭[)!jjvD-/=03fkS=HāW d)\DNC5$: e7>> 67ldf\Kׇ9KdoNe'< f. DyƆY3)\.dRiMw 9Tӱ pq`d3^}?d|{~΀)soplAʞ͑C4!1l?Ϝ0;f4i`Βyñ@vJHK%vQ'9*Ld1wǝ"Fpedh Cq9FSEmlHEem4y& 5Px"Y7C]"֞jpl!(;y5RkhN e]ThyT117c6IwF~œoA_#@!BDG!Wͫ?'B) qaJZSa^0镥>a;JC'Y @!Φ e~|5VY?ʳo;;qJw$;;Mv8i9cN|~SI;l:kF4mƑv>6Si,&Yo2C;6~l۾CBPq|β;.Y,հ8?<])>h>q?<J4.u3J[+O+eX_阪Bc0K\-f@>"o  M7a?؁D0G?R_b~ OԀFA?aTjVnqKtPw|.e\npeYȶx5ξq1 |:Pfѓ0clZ>83=^wKb`,4mD6z=}K:V{-+19ڃb{v}e{%E#, mq-_e Xu[}(( w~2117p$iNeNu~bV4I98r=h5T2IVoFs t9ν* TOۊX.\aC$wUX9I?+g"#(`h,*\R^4!}i[gmb&nеZ+(*"Uv}gԔ+e.|jZ z9)uryB˦CWDuޘ-dzc ŧBKjVI+ 9oZ 6[P 1+z?+q+/P~G-j#irϤ^e:Ǝ>qj65vP2wXL'K!Ty "" KA޷UɃLc&> r|ji'$?=[יh#Xc+5RV%KOg|ҶLNϊ vXr٦-`x@9#; afgِܜsVh/4!hO^bm%@_tk+"(_0 *=+9)Z?R3_,~%v|Bnj!&^G,fTnr> *HӤa] ѡoa = 6hRA8S{"O^XBF-شNTgnƟpꇍ[9U2RqȷqOXA PLR((Wؠ&{duD,60j/Gv? ^|&XF-#ߑ]\*,gEت|E]5&To?tzqyNժ UԾx6j˩5 TIrQXvۍ}~f1E8@QfEVtw g ;-A{클Ƅ\F;{_ک !{Ks˅ V}'-Ŋz M1!)LR8,.9Y"d8KX f< 'Ū푇[ސx[AӢ O~hBU8wj룚 Ѥ!ILIqaO/dՁx?(e~" _/{YDqtX .>ZƝ{㢢GRUnEwp{AB# lRcc JVq#4r˪>9bk#ܟًQ 2Sw4fIi3+7AD34Y8"ɖ~ / g*g0v#?f“.tap%4ΝATJh28w~2 {@&vP mJU =O삭{xw0SG-bI@؟W%}('[,D4}N(:a[r>ixQ@ೳ?pt7/T]t?D[7N% ƍV|M|/9 5Fō6e_U1I>A5fMT}ptZC{)' ntvm J&ýt.RȘߏ:Zի D( Btc]Ta𺨽)&/g_ |eMmFl[O!_#]rd O[W]P2ԫ#W6¿ Yw=\qu( [^f;ߋ!e`A&Pϲi2>|_z˚G*BV 2f8Az@+ M %:)]Ew *2 qMgl[:AHۀDGt%C3h=H: `X :şS>} wʛ`҆xk UN&{gdz'';8e$0r/m2@i,ʓ:s dj`]fӊᛰPaekwYWL$4Ibf] =԰)D6uTITeL!I.dب+]T)(xn{ ?R SS,cFmMqQvzTxpzmv&;*l{ezl.Nځ#D~yz a NXc7_IONvQ"[SKeSzYKE x pNj4 Y7GC~HXZUYK$"i-JhQF.3O痡swsNu]1iCbM1$RiļA>&c?Հv_=/lzD(f+~;V.R O#\owPB~M?o'gj:C,qVo8 Q(}g pMN:{ zYjt-Uִc{WQ_%φ;jx`kYВ= +ҾDN@tڰI!ޙhttPnR7D./-p]tƒ澳_}.MXͿ{TrLDUcCk r9+ebwb,%@(\.R.+N' 2(F&h?F)_GCSrOU<׭m LZψ>cT2"6<0pH 'U~BooUe>ZB>u_ﴇRļo}㭸s4ϡ cG%'*QD .5xU!T}&H9|IRpɜGvo M\hl,N,yDnw~SFfo$%l@N`zy@{ LJFhf ( ɩ3{>@c6yО5C5ՠ]KFƗ>9.i;(3#Mrd0TiW*e HNn~ivD.,rO@ImDj ?U8AUWO7F蠸IM?MV0iLxSo4RDxx)yQ0ZbFA`Ʈ 1x-yPx&@T:^dv;xMu/;fNcXAckI usmaĵ-C6F7 d)Kؗ{g2XPyAd0`Cp QJ?/i~@[}'ktcJr%@ 塚$☐ <&1a &1x(ӏV]~3w N/by̘49;-4{j^s~jwm ?UC%j { Bti2"c{/LH p #Ь_.@G?ɷӃvˌ@DL;qv6,r &("nag!iDȣ-BB,ViHk& meW^%Mlqp2%`Ĝ5!>pKDL@ %SަY>$+:+TVS`-}=&!DKx^8;P}ȚL(81q#l8m\")J̾k2χ9F9u0cDFCpwFF:764A_eykQ[6kaXT|Ei=6ˠYuzqk`7Tsb|OĪ|iC bf۹NLi\,s";?PTvg y侎ƀy!d{5Ÿ'QKR7 q5JIm L؃os7 $a񌋻}ƒ^dEZb$0y`YuI*A_L[.'qv\~dՑI.v#22'ZRAbif3 hZ!Sv|^{k"gbGIM ?:Fe14 I\46;SQJkQUg`r:T+ʅa \1;YjIwU`E:#s$_mZ(riN8(iJ.^mImN⒭L3d*i VO!m>©nl#1@w Z;iGr5RLU6%Gt<5c%] ݐ$T~^_~W *oIu+\YBgG g\AG1;v k`Ԙ˹4Y$ 1ՄL}#>|~N眣9C4zv)'YyS3CFÑNkp>5K284{RQ>焴JZɛEI3]2̢'U`k-k+^hEbBdW3󟷾ظQ鸀Gx0(yk-\s_+Sv ~#se#2'iz7FY̑MV>T!N'~N;_/w xSP?־?PX'fTA'aUnZT*K=ͦ/z)7zz*]2)W8/u*߫yhw!:2:2gO<ѫe]s=c+ 6>djGN6Ϙ(vJCI ·eqVDF嫔!q3 4 ob><MBLG物kX Q8&ɼ&C.1٬bI.O@8x7Nvtp{q1dbϒɧ2k&?<}j$EhLB:^3 HXKrQħ>5_B)h-gfu* pU%dž>\ {Db 9y Dnྉ'􇎐Z3F`LJ <&W$8BD4 ФXؘ]yf]b8deyV 1vPxY¤ 85v(XƩn(f%л{-Ç*E㳓bLPBL>ܬ=XtC`)˅qT6Jc,vPqq}[NzEPigɆmm}W[V* P< .EHNefw(YN~Ѻ ocj&\|Ðr\O`gF n|25RR@W+6AFK* -ym!ȔTGSO >vteJmJ֕{&Vڔ[kP$GD\mLm  0m؇A5 VmyMI1Bܬ&2>#Ngף7<8oCq綸(([ۄ#<-p =UkBӋɣ]h!ko񶆊mT<$wG^A[* W|Ěf0nr {\T~_Yʢ}h|ZO˦DB >3pN_E7}GhoBiu#&CP3Q!&C8y m"U7q/8G>z)!U+_ChSYlǃ{s?(Rs&jl=?ycD1x%ND/(F(Pd i(}P$o @Ϟ(5;iT8ql%~g>)v^&3^_¢=⺽= 6uӲ˖XF~+;l[VL!,҇Buƌ.r \q\JZ܃d?X(Ηs-yb!SܶOu/Y͠alĕm"܊vG ,y3Ùd+HB^J=0&ɒ3Vi-$0@jE0ХTpiL#i>գ*C۷ sKT3UF[YX)9Kau5<'PrX]$!xLb鲥Hk% N"ni0UgH7>ףrZ[16_t͠ `B`@uQzCr|/% !B 5Cwu`筊(_#@dFb㜼SX)a>?͆MCɞ~07lҴom>ӂH]OH;ǮXp )=j8B!]!߷,3#*YtLyIbQ㕙6yӤ gEǐk|Yrrc#\h)0ed.li*a2mra;-MwMYw Q.P{1xAxYet]JcHIxujJ?4>C$ #L36T:IayakTY,aXkdž J2r$@-ږ[Qwws|3KrMfRRzC䵒Pe da![<À+zM."mų |islCщ@U \)ѽw ?#.8|FYA~_'bSSfב}.g[|,F!7J5^]vW$&Q)Z赶h$}hXm<쭄QL8̴)=#=.pS$#Cvn9沩=& [y^!2TE gmREbJ>U#3hϐz4g+Nf&z7C?C!ͻ!/DP%=k0bϟ,fI&H9R-Xy*Ǽ=}bJE) Cy CGߏ> +[@>Vψ][ 3/Fa! 7UkZ91?hņ^(ϒůTqoEH#{aeQ(5Jl+Œ` .ט-'tu,5e,< TyӦ(thGHS|x9|> /%&mhE`k/9%n6Vד zo{$=Ykw| -_cE lxJNa=l+ R#7ɧtL c%Lܣ}9w%0-LDvOP\9'u|jhi&W MMݎbZIWu]&FRPwBz1F&~›] ןV^ϋ"j l Bԁڶ5%g¾gSڎO6{hruN1[Ձ sŚ;e廰eDKD$(e[?~Rq:N0"_*~`k|-?fm5~Gc3e>h[b؇V ǗƉшM$zҾVI1&z_k2d m>r,ɧTQ W'd4U'axMƎ{Em˃'bl S7 I`Yl>D=+1JI7~t,~xSս,=BK;PKeN;lxr%B:QJj3plR3w/e;JmqJxjTayqW1b=ʶ@:)-[/F#[MVH5t0LhN]zv (n|DFX}gZ|ɓ q:_R@_ oB,P FYaz̼7O =z3 w˳Yƶ!?IR${Ͼ+hԡ7,Hz R/d8ptÛG<,%}>98H \I!ϙK2f﫲 ryb`㣫 :D  ~`Ȓ@^y4Hg4 .JM34cHi=u 6)"TI؀Z[b D 'I퐳qĮWQ9hָ$Vk/ęߪTn:Y~RVea*6b}g1hq]슛zИ7sP2ҥn2\LO\xnQw##i "[fV>nm5H//,_0{r)UT*-=zʢdGzGUVB^/Q2׶L)Bo6go{Edҁ<>B:m??n^|v͵{f2 2<̀|@ 8<{j)tb>:mPϸ * ²Iw쫯"3쥉k%*Td5dk$OM_G8-3]|w*Y6$;jO60~E>ӛ X= ͉itڲF_V72ѿTs@FS|ąa. Ⱦ=v= 6`>+O[YL,I_gyWtVO٣ *}(M[ ՇX~ܚxxMh$+ϲ9" 1X!-KN׃O[bOR,@#oƭ~yq #Zmt#{N{5: ;")B۷.J8?trN4;Cd8?3ohbd7$Կrp'*[%3 ?ٜxe"͉92!ʈbPR~kYwSz?ט^-W3^$MRm3)GiLzŋ ,B NǼkh yLN2"@,&ܺ.h-Īj_*!tBW@2[w'3$$/Ivrz5\/،xѧUT g1 :Ͽ.Wavs%:`C| ~R*#GNAv-Ԣ&hľl4>v8q \:'UM}xiCEK>싰:P1M Ƴ^},7:.5Wa17IW͜g,ı1|<1wIǚ1mz4SiꯁE+k#]!*ɉlTUL]v朗7y[ 7_y]#uxHS# yt hKy,"ɹ1`wq1p#j,Lg *Btb{jBf(zٱ=M 4YṃCS"2@udy:b\-[m zZ )y{脵%-~NDA-|uX6\ch6"Ķ/ '[ c k"ݕ(%h e8l,w>D1_SYå /Jy{ل*REUXpiY i%Z]l-Bc]" B@14+r+9.؝`Od2͙G{=bU+.NGX: kH4YmX|pjֹ WR0l6,>sd2Lq!3|X](_Jaؒ*_14vBhO&2m1IRJ>!MsM&dX}'{.Q}-S,V_F׽&1]`qEGLmU)9`s+vmˈYMbrx85q)xcWlA/';`*K)0fqv{i恥VNWb^W+9zG p2Kaւ䥎&zhZ3cK@XqbժwTӥu7̜AI_<)kuyeJiZُj*獷,qe= >gTl^Sb`le3  1QVW!^6[pYgMOmm"eqT ڔ声,̡I\F?KC`'̸<"v,-cHƠ4Q4 ]j]ciy2F.^E/MrTXEp} [W'ndЧP=tTUjmo^Dz(Ƃ I$nSʭ)WXwQ#G<ϛG ;!9;"Q^Y##w"/|e<*]C+߿"B-2(3MY%>әΰo#w=OzěHo̜y,-, e5bkݩřWI9^Ɋ$]P}zsSKv3ˊ=O[ WφG~_eBDE*ZX"I6bQPf4Ra$mLx,fIf05}󪩧1couKs1{8 ´^ ^u`%3kP+ 48qO\60U,BejïƷQy֮@b"h4*DƘHX+F4;sz^79\}tCo(IX0Y*S }":#&Dq˜OȆ۴EPչdvXtfp<а ۝ D>0HP.:Eʝ94/vcQHqDv!M D04EǣIH2( !j:^[`bq2(mhk`sry'J obw+y46$@WB),/i/J#ϓWc%]fAdg[Tl-G̋ #` p'7njhoMla"OvRw+76_ʷQסst+|Mb%h>iNd '>欕N VuUA˭9;TdW选2V"1+zyV9H t\5)$5,[5j^~XONHq Iᬎf,*'?0ܪ|HD59t-_ބOX̼Kkn ;9VZ?ӆ_9f#FU eL*aˍ0xQ$K7>'`fvƖV \2I"y;\/ƿ)xU"g[ '+6j=D6 %n¯*R&TLhb"Pߺϗ@ 5,8jq-- bAAy?b̵c.R T'%JՄ&YYz,Qu-i"Q1# $<OKP}agȂA/qx^g| K\ )^#1Zs|K"[" d0=<{*m?c8~2zFl@ Kq)^ %X%E4,U,G=&1[K'вyxm_>tQsȷj ң4稏RɎy XA [*e8eӛu/\Ň'xAFCIn#ux*6VO&`7ٺO.D/! U՚,^!#W nǗ"w;nx)4 |x@;7KI|XE 6Y> 66?&9}&ڼx-0<遲(o.>@zC[ɵOaa,\KC,*=5Ph7"߲IP'͜}88}1*9ypjU͟|w9@܌%ilٔd8iOɞnA?'ILkj˕Hœ+0ի7Noo{Fa]|#VXYU+%_K|&|B)a+RuH ުgJ,. ҜF^XoZt=/cf"͛3&xPeJ}.ô 3?NDwe_?oۖ\.FNN?oy՛prtݙ)Tظ[ "{xWrK`tWG4 _'6M}W*c=XS: $˄I1\ތj>*ΈԶmT~mFIm}vaȨ⏢r6j?>pv귦E$xa ߊԾ%Db("*4l .z^Β&MbL3PZW;Ϣ}T*oHO8 ?*<GhǞH Lw8\Q(=.!?e?5AP-+@C@Fk>xnNOARSeM%;g&x]Qm0ĉ' ۪B ^k[Ѫ2eseBqJSo5yQL ltQfoUYlcK},oNZy1n4zIYNll2yBH+0g?X4jf8W'WxүwN W~x|cO0ƁҊ'\\.>Mf4h&:-r 8 z`8H WiuGp>W?x#k?1~PNaNS^r$'>XMQ^oB i,5( 40G%J}^+r._K-]^ƉShJիGy:{4ˋ-V(aw)-p[ "qXvmqmHNl0i#O~;a픈PüBZu>3sk=KmC7j Q;V dgGg4yd'~-u.OGENt#lm;Tsaqu2H{lGaW>wlIZ5vԦ(0ޟZߋm-'~t&6$)Bsݱb5zVRd:4szT+ܼe Rtfʽ,XܡO#Փc W}ʪtĠU)bw_O Y7P>)4,C+*Jy#H#MFе Y4ͺU6;0ߖkx`\i]vEYYKwiږ 2j~)C%|3HCu[MPmBhHKQ5\гP!_% Yh7~v<Fh˒ bӨ=ءGԇ<%gN""I& x67bƮD.lmnF>Fĺ^}]ȴ[u> xFayI Oތn*"D75up V0cPbB'Ձcx'#f"Ns1@*7]mԞE).N(F jwT sT^_߿ 74k郳<g};]Se%l͆9į3aŅ:'aMAl]Ф"Dk3Buc uZj1 `a6&C^{wo"񇪲30'jՉsڒcS͌T1G+15`?$EplG, 5Zpx%K\E& L #Z 7#>ڇنOg2W}z7(;LJ|T_ʐZ{?9 {=Ѷ~9qIt.+o<J3!KHDA|4ŽUA ꉏUnGX}7P*'Q@=PofJ%vuqczd> sǎX#>z,*tA)eITwԅѩ:SZ = -zKQ90jȌm Q#@Xy1E 1h4Q>poWEХ-&xE}?e%1{J\CVz`&V@A/#Aิm@X5<z~g̛7Gb~BX21J"] 1,Y8DrBD@ Cl\UhQ_F;mX.4Dhv]XX Z$D\[5F:j$V! pdn@2yG0?p3nêCuADt),Y/䟳ާoA lG!Ik=pr+|ŏ^S][?ٞcEU J%Glzr?a D봬`hG|Njʣ[uGo*鎽Vq$wX5-ϖ-$CtIgdQSqeYM FxckUV1^az*MRky`ɨxZ^`>@)`~[0&~*cb&([%P-m#bmVl_ċ__c"aā* YjlPqI8rborl.VI)pNc!*Rf=>%6( |rtLF ^v5#fqEUxy>yiN= ÉKY,7\1+v`q *=$t'OHI=@8#qR[ŴvjEk M8&8e OdE:*bh^T^GJѪʁmvRSWCn&광oODVX2af̅Y6kzO{nuڦ=A3bRyp$i$°<.4;To(߆Pm!ava5ܣ<24=oɮ=j+K ̫L5`Zm]F-&%Be礪皎p݀UL1V@(( a%*fY"$ZurX?M-gmҏπKD&/,uߘ:rG]/^\cp#fO;RT^-{]~S܂Ȗ؎OF!k:#LÃ*%4}$gѷDc"tfǣRCM`m-9A L`]eQvˢMRw2*H`|<#u~!MI2U -}T)>Sp[Rk8P7w[]RqV;[2fK u9D3λz5e?3x*઀ԯTbaU^40 [+Dg*xV'nASzhCr -F;&Siu Ѩ+Y |K`9T u2g\>w"&ujq9gX,`fG3~o K[x~/LZpym] /jcT dlAY]ҍvвyp%5 _5y*YIYe =I秀 h7B Sc_L֚B|L/"0>j7<ґ쮮Ӏ7nFbOlP7ZiE(pJ-mqOm#3C,os_- B?L+IA_2^Ʈvw;?VkU@v&{eVμEX~(!8a  &410ҥ޳#q]6s8U~cE'ϫZJa ֨)Q1N1kґO^_AcձCKYW^E\ImI}n{Kof!%8(ݠRtMdG=+h-$)z C8[o;}5- .p[}G?V&~H,(ͥEhBGfV*q$vZZމ_c>2wb-OTӭ:(fUcc_dDk],^]Qϳ^\3,i~rSz;! R84dԄ ;?32֐Bٱ)-;)5[x$wTDzEBDZv$k_9h@vVo/.4,I^ $GvGFP\1xQhul?->@mY~dE3-nz = bN&6PE5@9/Q 3x5)&׳lv)AuqfDR ΫDaF|'_';72O@ԗMq.cxJ$~HϩG6c= a¿q'Ȭ0m9Vn_E0%OEK\*\DEVk.A:#Ɲ0W2?^%lMcd4Mm6W3N' 㐳j϶sߺC*}Q Yq}hv7X-5%W&E1viBz3˕^t@/g1 t$Rws\PTDV \'+kΠ ҏ.=Mb2 7'Ih"OpY2U3& a b/HΥ_jy,M/x]J~ yTx⒭Pb3/p )H$9uVց }?*t̃#DCyyWT"Y(]#}Y&sE ͳ~&6׵.kNX-R n0r;tAH0A9TPrKVijO .<#ܾH-O eU{f߫Ÿi5+Şs-Jk1ꉗ̮C }* ?J; ٛ4n4GDK鍋ʡ?E$ULTWdMĭ':~Aa?wb6z5xMu^Nƍڌ\nWWwB:evmO5Uq;pEdfKbhf mFm# kvqgљrUsV̶12ъ&']r ËE** 6((BYOJZٗD^,xQę3+}X~Kq3MVOW&19(@*jr + -8ySuJ`Y ?A&t)ea[-i-qOaEDt7i˥+J32M&*F] oEQE]zP%JӃZ`AbWg|="MGwbMy=m7x>=w;#.BH|ۓ37=ni?exf[^;ҩTOl O! ZZn VpȣW̯Azw\pd̐0"8+5$%X߆!Dn*C BĮNA;7;G㢼Ƀ i֚#dN,=>PEz~6p 9L8EHd摹7?(ߠicRL&UjOKr}_N GV ZET%u_ܒ:K]}*jPߓSg ̀.@擤r-`NG|:HJM|LHKCrqAF×K$@:6xZDnˁE nO{βI7$2; I-W.&V+<mgTW&e|?8 N.&c9|hg4UΛCri 0npUXNIu5sgm_ .SZbN?}k|}m,U\zi6:4Znu!?JV̤!KpA*hxlѳt b阝 0kӺzSF0 _ 2p6/n|Ǩ1IZ4:fԿڲrV*e_3ʖa:5a~ܛaFw> ViJw?PƙG?a Pb=KXu;-jS5RC#? !Q_x8l rфVT`΀M0~;Eazr{ʐ5xW5Pqeo#7k8+s'C+Y篜wO^KX((#_dv Dvcj(bcq35vIK43͂i >6tjdd"{'9V w#c}ifE&>v\ R*%305/adx&;}e:Jbsb3Ҹ$+PgsW,Ϭ'{Bqpk^D)c:\5-?SNK"+Xy'&egLfM%ǝǤuzpi;};ZR^D|Ji^+U<#CO7 SooxVN\הUJ}iB]S5\H+%{XMZ;o_n+:EmZKl¿gpws'ouٛq|G$< ʛb55Rh-:@Iт~>, .ϏG|xLp/g<1)`.1"GqC&4JXˆW%s^Gl&q\!ѮҐ΍kGoEj0Ű `~3?j˪ lX\~SR[bn$@Up' _ɛqjzðbO#KYU*H_iP5/>=TMz)!QƵkѹJ#Â_Y]vgDP8r2hnGd$֋w7Ow~cj6HYnhS- ,$ްJ 1fGP&B7U1֕j[ ]7nӼb(NN-9 5~3njb*:YJufMbfXhARklVJUu[OQoJ F2VZYO)h_Y<?'M$(ܡ\HlX)aGV6bntJCc^C 8. l)ra?7l>L[y`x"3H-d>-v]u iZKy>SUVwt|bsx/ |ǎϨ,6[gW#b (!)Uy= 6h&cl"ېU7YlH3bgiA"vZJl%@V[[8$584{kT=!\n`BBDV'; C?yi] \̪'*בJF0vqVArVmkXOOCLpϻe}rk͓糺#j'=sd6()anl"9Cu&aIB"+ DUƒ=؃QHFXb|N@~*uifЉ{|#'~в"D-]Yn\LzGXLxWf{E$~֏}I!X<wZM8wM,.[F0j~5U$<8:bqE<;oJi/>K"ddC^v4Y, nY숄 dA8hOJAˁw_QШO>/xr=_.Rނye[R ֚̽\/i;y|P7Юݜ@WBs; ոj \ksr3ʇ(b"L/]: CIt'8\o2Kh4E{Nmw%DACԘJfK1^7+-xVrYj@LQ%#eO]6femgL|ci}Ox Zٜ/# nCJ#8&=U|KinL j(&8C\=dX+1FM[ Iz>M(>A?5.ܝU3N/M3L1 ]MiΕ[sCƨP c3g2R@>HϽ  :V9n;ON\f9+6\f MrreIENyΗI_ܢ8IRi<2Nٝ8GׁA}ʢН%U>-8L46H`S?Im砢~,v:ZOŬ5jJ_HsݤY&n~Gcɧ1M"r. yϠstҾz*#C1L2x y6YA \ ˬ_GeSgCܶ=J'Q$Z#9@4W<'NiMwte3"0!,KIr+YwfOz:,➪ݟTSGeGLe@;ߜ>9b^r—_34a=2zV;Uӟ;!UD +KW_^l=(.g.O& SS{/NjHV'\yŸ#u4pI>RjWM5)*}C3Q#VokÇ.Nx(b{T"d25k!R%;JXuN5G@mIkHf0T 5l4HIw)nw_;m]0uT6ׂ?rid֣IC5kg.ҩ$Ӽsğ mvg?ܻ+sdw_.ES@($Mj<͞vBvWu$K=N=REgGI(`G{ˣ>WظqC+dKgPIZH>c2vn~qbZmZJ_5 >vg7.pmq5Y48U&|9,BǺ, ע)$AdʱNuIIaz+O$'>=3{Diӭ^UȀrڽh-%)ȵE`RZP^h tHkkGx:l nFb9}U.T70ҫ!X66U4iPKw % !CU3fy?G w5$PgXu?*QdJjWeF{k2sHۯeKFF# XgArWRMc<*^(\8 e [:_evM|Ip!Ң-]$G+Bá='31o;SG(6dZJ=a|dY@^d7K*!\?\0)29Y&M`nT Ư?_cIf&r$KErcV=9J5]>fCI}{3<1J0O|~AˊoH }vy _ A~^l`6} ei AyH( #.M͌w=гDPa[kWudQӴjP%2;PKL]ŀ}-kY/.2U[K#&~T?E$~ 9{o) F:<|<"POͤZc0ǎޡ1 oz!i•OOo]]9yAgJk|p${CjQ x]~'Ƅ'c$N # 6Xdbq%ߐVҾMM9(^Υ& k{&bȿkGZփEs8+5~1o0уC#]q~OxGl,V3 <`IgAkрefCb=+G[?ULui qa$M?/[gжS^FfcbmAhv2 Y) ydsl ~~L{ sqMCMvL, 0&R5߹ARI3l('ǑG8J5sk(Wo3 Arԧ9'I3@p: Z ,LGRe1]`s L^ÖK_H^v"uD=C5sx㉤ pn޹|rue4a5E``s)MS" %cnr @MĐcxJ "|H m=Dڍ%\1Rśf!;JV=qwvlV |W;"q6yB6i<Ϻ(ioPvC-Y4.ܫ(VWe`+yS6Hbi,Yb|:`pmlHJvlhI=,Y7bQ+mū>U*+iIWACBqd^ 15m^m$#r ]:NaQO1JG : bTof |0x2/2eGsC yf`3YZ r^rx&2c͗tW a#D<)! XQk)`šW T $]D} dɩ}9c>i ozq# /Ԡ6 3O諬T\SFH?fT(k8;ҷV0$PfzfAeP,0Ɛ}g 䥊83ؘ8+µ  JV[-C[s2|Q[:X/ W%ze`J?B~dV7PLZne>Z+ڪ(CUE~X)^?o˽g&;vЀj+iQe- C$B^ ght#u):y-}l:tVR='0|v*NY]MNG'vtW+)H=cG}t?esM}Q(zң/ghm̰C`Ȁ -byf8n3݂ Ca`\P`6Hw4{r+T|2ci:uIYk9koDˁ7@+u TCwI4D !Ӷ=pns7O"H'$je7Hi dQt;vϬY&ռH%;SEF1cD(c '\KI@ؒÞy jd.&BB-`+',%21癇Қ#DD`tT6BJ&vz7f:U-f9pfh}W(גL  >v;cBNie81dv,$8^i*#b.':E%:^L+츽v=CNb'%C;3WxU/k״;-/v4 ؘu>וDjj95.?R/oKC= E_$aWgLr& vHtV= i[&y% {Peg;vJY=<!=P+CUbsהp~Ǭ爱 f)FT `t.suYPm?OHdЈzuv.h5qV/ȡ׏ˉQt}Zˊ$"AnO\#JMIͽ`ZaQMKu1C BQoS(զ2X mXܟ>1*gWFm)>DM""Tqp`)h^HB:fruHx'Ķk\5\r"/?C=EDN0U`2 +bixzk=2&?Rk 0@p_h эS4{$Ḝ;aYo{+ˆ֬)^Ԛhá v2}zp$ o+3 -k x )<%PT!N548A9od{eAE! o4h}ݽCk<ŤI7ϯLy{NXDAێ%Ӈ E1XXXȭa/4""Be)hkМX\IQ[6g=u̖&XpRCA1,Uf _>~ǻ;ϖÍWbXoӭ[DϮ#EX&_0*Z]to W-AV\(kZ!< t9&!XKΑ㉕gI"IW'񍧉$ccθ>-+4Kjp-,R!̧X$a-z%-؎ZawA&Yigʉ^'Hl}-+G!ՒMm8L PLuK4$}1`līA(SH̰N͟axe'l FI(oϽm1wx :Bp2q5 fe򞞞lA E,Λ a5EpfNiDۜn VnT@k 2Oik۱>g0\Av:3 k3몼ZH!m Uli;ϨP ߿ȰiF#ȢV%6܏ LCH)JYs1}6MbP/w=jX.bh8A!ϑpr/*~k Bt{"<:,w$č>zuo1Qi뇛PؔfP# iUj]ETYaZ0QKֆ nB`^:N]4JI-iNH |KǗ B۞F`Sc|tj(D:NI6՟/ԡp}pES#%d;ffg  $v$֠T[3 /qEt%hg["d.K귈p6 RGͺ!,ZÇw2(dCkbXXBTV~u]2"3u p ƔRyj:xj1C)2'PKf_\]r>]V ol1 \*")n7?ѵG*;|WNBl9oknA#)'{u?F0B]|5^_PMb/Vt1s4tV: #2v'm;9(hQjAZ8;5*6H*L]ۣ!O35DOzaUGB:Sf򵦶 /tN~{^{q*KӪۅ,.@gKƚKL5$;93yQu T1k;*(f5t]zД}enf"2hW[PqrqiX `>i+7eT?JL7 *|M!>M!tex?o UWQ4uN; +z C`!qＵ^\ XP)|DOr_I@Ĥc fj9<`| ȁ?Y+ "eQH'/d7ϕXUUU68:}zE'nev\cUyVNJ(rQOC& ?T?t>txB)N)sqe [By>!^,ӮR[PO,2O&C>_ɸ Q5fcd$]ӯf7O5M#b uDaЃϐobL+P0{4D+":OWF~Dt_qT'>4E~y#)Wʹcmj 'd >Ecr,pRG )dd3PĀnG<.aʵP#يF:4EI m{[OAܜY{R躈ǒ|dޣ Txe-g˰]9_a+m\NLyL3oYqc'zl^T`q"d=xk>1^7f o|0YBF*(|aE4,ۡNoUNS{POHZ =#0e5._?E;;e>dO})Э{jV_v>zº?"痆5DGɩ^3ti)]{n0g7D F^>EA͎DV+-钧|.+^e$z<̈`&5z$ӓ:ʈĠꘒm>_Hr'iܫYK\Zy(Bx 7%Y^Udu^gƊM9ܒP)rtg&7Lݖ`5dL{vV8ged >aG]lODXP#HP!u,%PQ{齛m 5=Z-p2O9t6 vݝ}E4J"A +z;Y=="hCvDS)"#AuL-d>k{Sb+n/kVP1LW4}SZDU*܄ˇF/txD&̓p*OL+;;ߋ(]Ix5))=3Д&MJLZQo}WC9xcg,7ZȾ/la#ܕ3K"![z"8#q?77]nJ/*Q+:pUH FQ/Lへ.kr18"J/1.uQgRyj!;e[zbEz`miSQ{$hJy)F(p4R/< эK!2V(pSUQfyeh_F@p_%?s<*ytw׊,~d9hr[N ZBv?+]WHG7,?"DzO 8up #0s ;B} ͔LIۚ21-[,Œa&Ôg |'(ih^hvvH >XB}&І|OhBYjD87JpZgDcs}?K&{jQ(w|`׽:gPh9G8k68ݭ.JV@wiע [ޭdM~F+7cXv>7kWC'.hi<䄙0z2B-X- ?aDQe"xV[KFu >1ze݊8CrG(!| <8N6 WA@4NƠ:?@xq"QY4uDfl 旁X͎EX8&qmJn R`c~eBw%^o"rj_H@X޳߳xg 38tc7`)uv^LeQ dH5ͳkdiZ!bdi0\pRA`PʈA Q'yX1rC̳i##'LfY |3LWb( +] ҥ=` _<1]4oYiid Vb+NDF3_*8 heQP721nd(RTs C=bQkb4XpLU h)\{q% {%4*k-,ZL Bh? ].XJbuA TRC˂|mX$Ռڴ5+T&u^ Z5<,zؔQ_VFVȮ8yyPw3RE |Q'_;86z2AK-,= |}́"KL;T,(*r( #l:DkPй;ՑIy=9@ ;7nhƛM02>o[` ;مr4G92nҡ>0Io +<a2BhÈkՊ"Jn;l 2l*s5Y' l&P{PnoKY%_Xnpe뒮bvwJ2=A/$v[̿Y}Jzdv! ;[P R'Ϭ\RڄVeP'jV/T3xP7|Z<1Pq{EDZVwmZ]onƚgwNF7 uhAmG("{Dy%ǣ#=?ځ.wэJ's2?,bՖLTI3wJICJ>mPA`s8o28Ljdү5~׉ھ>;YJ׎\ԴP,ޤ[89 !=4x6cgdބzr40޹qLχ7#ŻG8be+BSEh@e:ς F8_DNEۨ3N/0\e˯!|PTE:<9pc'f)NZlByBMғi!W6u~la?ȬABXͳ3 1o~1LIIU Y3RtA=6">VTX0ˇPML6WJCFW= M=Am*10_ &Y0/7!X^)䗣~Elw/;Y$s/1-tp"'cgg[Ʈ%Ŕ,8],þ0Y'>9D]I0SKDfWy4˴|QOJiXt-41ÒFQf!*M~' 52D#Av;=zx\!LzumP`'#}3ӦQ! j:~]~9PZ݂P[OX3whg%sFMYF7Q2~Lڍ5G\`g"s4-?SF#­&y):Uw'0 ;՜ZC-i~}-Iͷ7@Yep>Ѣ(4zs9e);'ZJ.$WݽҎ'۳L)O-6oL3p+FH ~^J}gidj~B<?*v=\Qx(r8sK7iCn_7$NnA]{yZvKXܨA᣺=)Td%k":#|dޞgxХ:e*̷W[1B:ȳBJ$:1oEv[U>12E~hہ>Ts}^`D-]nykB%u"TxLit `CD ҷKL̳R <*M~0PI9/M@kTHs: rZௗUQl-oDTh:jyA{ҊStF)Psy}% ƍtǎߡtfO*ax|p^Ip>[Ԗ6߀;tֈ͠|٫I,T~e)}8C| w9YQc׉58BY{|QhϺ=uug0?vF܉~)jlydsGk;=fuɀa-/i|A׫.0ͫ}vtY[5)>ɯ PYo~;CI#zz?V E!R܀3H&Uz_tӆ$:޲h[:`>J[y/D-TrW}ov*q#qh=FxskثX&r j #[YHJJ$hdպot3)C1UxH_ uk| :.pOl;>bL$5ђD>u4*AL8/D -xII(V.Qbou ژ0cN4ee|H 035h`XalUqdT˘,ĭw3‚;l7)/:M_%^4 ]`dgG!7**lTI7/qm^C .A'qc&pX/\>OT; v.`;x]2"}]Z7>`j%![*_Sp%Bh͆ \M@8Ɔ$fAd8 :^MaᶫAx 20f"vPNj4,rxwNL xAJpwp7嬋Q*TPc+Y3@rW0ŔJPAJW9STJv&x0g1<"Z<˂0N}6OS;)2#-`uXY{ rJc`;#Tvz>bwY˿iq ȘTo8( ~RMu]tFsh' 4Ӣ (Nq6 5kD@^׋{;Md?) 3.hطPVdPyf@%R*D"ϒEy)GtɵS  K( >CRW_Σki6qE\ <,^n10fN\{ Eq6Au\pOts3mGK #e!_ZhtoP_B9#:E_%2J\J7"a8Y32'L{ps,4`Y ][%0]uz v6+O yd ZJGXLBmc) ̚ TX^FN;Vo;\wю`~`eIÝ7F*D7^*TUZg*/:IZd=/4G7zuqk8E='H!HTz#(f-Iޏo{p[^ ]:D4'z@PZf}u@O Lޗ,K&`%P:@Jw›+vDܪ yeoQ0<?CƮ}[\>.! `7\!F-fDe3n-)u5Se>RFbVp}!p jc7jh (*R[oڔ!Z?x.s>7F1.@ .YWy":rL zHq+\hٙ"rVsXL08e⒄^ߴDOɓ8Uj2 1mC~cARA7BPT4_!{Cd?EH6_۩ 'Ȉ)mK_˔^ |^ހ[%5 Ѷb,#!h23`  GUʃ.,zgX&Af)sS_^ƹBYnwӅ.ȿ% ٣,<Ȕ^}d._X6p_$mM$LQ\9 ITE Q9 Kri>3ͤuL&w_AL֤MZ۫p(W>DG z[f3;j?=,zczsNS0_kJ1H@O@0b'̜ej?@4@cZuv4מt mٶ1j͆{Dywbʕ#h Zc~ LfyC7.mw 'i+MjG fb l*Tmx;J71iL%ObzaI2OF^ k?w3/vf`e۟s՗P=jk;c0Q):M|x8?N@A]hNJ_DNyFjced& 2t1 J:-YY4&*srV#R6kexJ,њa*Nl;d4Ptp + t@F QR%H8z{J|cAYwZe p40jՙZ*\wz`Y'˕͋t볭/֍5fQUj3?r-ꪆ5Ie |#1ޗ#ΉgØ)QrʐORi04Êc!e8H+s9$4ܺT0ީnY_s&c7rltKtžz!lI2qFg9 >4Äҗ0d{yaqYr'4;v7EH$bcׄlX{zZwT{*Xv& [Oq3:$~LH_@*h禿ޓUAynJ7d^Ixe?Yq +tsʇiw)̱߰Pp m*U1({!vPc0Su jw\Yqv߿tapKQ Tf𬚲\ N ef͖-7Rru\lmS:m7D9:?8b=5:d0U{EUWr 4B.=7D ? ǡ74^,J粶.>ZqX oCWЍO)ղ+lZ8"TO!φЎcAy*fӶb ~ '{{|ulCPͬZC `ֲWж>sVG <=Ʈ>5X:{l{ZJmy76tp>9-go7)/ky"C8$[$ܬ#"ccݒ|8;W[=Y 4rAܐB%t^,8vUxG`w읫"ԔCx:.1iDuvFC'T@[wlzSFYY.20Y@m]ėG␪xmj#s%匜5m#R2uME@CtīlcC hVdZJj/GsV4F`g[Y6}i$DȾ2hm[ѐ }&>Z0(dCb1N*Hm.,u.<6FO\!,B({OGF?( ҟ>ݜ-<0^ryYh؍j.4BJZӂ|iʍV 2f2A~SWz1i߇?$,r w;;>N :Mݗ<5#' XsxZyj**[〧v%T׊z|9|޿MBx?8nwms!nD]"Xa^|tGΚ9c>B-̈́\^Q 1 P?Y46B~H8m!I~ux햅-4hC/Yzfr.ܴ5A*ȎN}0أ6s Es.6xPA8%yF[|'f)>AKQ[_ˌ!M:Qm.a2YKlSܗRhpUS o@>} r* S!{Nvق$-P`M %%3 h`^ɓ0V fPyShQ(NfFڣ$Ģp]?4wpp踌G<ي!);J)=`Ph`I9]+x*J,4tJj#3 %3L /끐ː;g70(j}vtsɚyuG|ќsJ/0O J`C.s6x\k~~: K|Kd۰/<&tù+vZSeG5_@l-ִ>n}/Is@2*Rfm wӼIy61yK!Lٿ![i6@IV9٠r MSʿ^]{1F,D>[U`8 bb=a h2Vrh`` L=-Oo W53~,Gtζap5DtЯ&e@qxTo ϖuVz#J>g[2Q#tÐЂyn7Жe3[yN#^{z"uS2}mF~v6/مC5׻i N r? ?ElB%Ӧ"7?v|+ No*Us}g!0YLrz[BO il\&k "0NASg\/bF nv\#R ̢~}'@U 5rrlݢ <* .y#c2$~2~AMZOcó}{F 3GB.CfG$J:ܗY)Ez{p,XGRs&@^Id8@CCZ^VY3 6zܢ$+ʮhَFbQƐMى:leFEZj_'>8e9XȨ[;m \:Y!Y\#ɿ%E%yB+v`n?/tlgZ˱#A ͮF#3(.It yͭ) ;ɸHUI6>ϛ|rQҔ*pS÷$˼ֵ@wLڸ(X[^rV8t׀6X__Q/(6Ƥ`dڋ&zys)o`:diuɅ B?Yh-^:\,=\^q5 L:S`oӮ԰;r,H|V,[vW{Obe pKrQ28|L2&|KfGʖ{9}VϙZ'>2T||w62"듆9jsf6"nOwZEE&A(-BHaGUܗNrus&F|Q?哥Ƒf }ByG]{N9v>Z6?nipj Q N wD N%8h!`ʸ̑F(n<*E GFK{HX]c٬jP>Z:۞{LQ(?Y ^d6um%^H%>$_ed IB6aO'dL*U( oI3wˋƜ_3)"H=#`lpn`w3萆p?:Qm%y+)/5Ԉ|]Go6mٗ[mZE ỤLإ=nҕ׹2Nfx /N~ba)} b'0)ҊN0z6 s'"4`)z@W\ Hޛ^9 em':y JT+pzH7[ Yր.kB n|&mV躱ő3TgCNjxR1Tfe|U7[~'tn%ߔTPm[WS&žNފb ص{'h''du'" )Š,ߡ<@;3۔# fE.nRk;IOu!#MU%hA;XzE|]1"c\ lx2q}҄WP.Ťc$N7XQe̅6l^>UK%B5vH2yf)ZYsj\ZB:ي lPq! qHoZGq Y- dnr<$ Ō<{}0 ҕMnvO@oUEÆ~ZQjZ`L"ͷ #X>hCub҅ɔq{6GZĉ=a_hl,6>;]Q-a#" Õ>썷*mw~0)?! XxA%63K1dY=s-_u_{P=Z8KxeZӞ{=ܒ XDf˼oQɢ+%~\2eV:Kh)şNg\|D~RFcUG) Pe7ȓv]ZҿG+U }3)$ Qԑxn1s eH9 3tHd׉;a#Y1HLgP,J^Ş&IׄU__r IC=d.ECPn$ELd hCV#©ȚO( r k%x)dP8%!Rb>@3,hI! `RiSbxAl~G3 R kRl#~}ܨ>KҔ[(+rJF=ˮ[]IR u3-Qoj{⬺~+_Vcr",\fbF0{:>TKȮ"'_x62P걎Qc0,5K mA2y3 A֞,䠗O5$ %\X%.>`f~'[T(n=fE_: []DQk%KliOOQgBZT<'l/llK (Y ڊ?0Y93̴zD[bF],#7*)71$V㸄:v9ȩȗd̿tC)٦I9]>n9죓H'4^;D(]1%%il5ЮF,uѩOd5W.އ&;>!`K;~ቿ^TNYK W*d/?_"xP<,.6UR"eu{ĭV2Ý\h%É-V4{ Zhkrx\'G쩲]crb\3grpEy>Û]\k9^F^jaF2}=珩gWH@ دf}po«rvib&Bpp|4;ttEAfm!ڲ;D/Gw1!ʸLו; וϭ h.] qgV4!v@ˎԩ[zu?yo^ClFNyJgaKRz3@|ؔ[mNYEn }"M# >2d%DRwL+g%$L kKU^{e]ңOQq\/8 3ç5irZg:"5x_1>^GhQ )v!37̖-Y#" Oy+Kojff>K9QUم}h,= U90.ib>jk Q1L[^o|Uo}iP߷|i'Hs8^\T~jx%/ -V^x6X) !P!_ސ g\GDleG*~AXe1f 1iW$%lr0{(X_L΃$OvgA9>3 )$oc F΀d,%ABzZ˾ijEjlB1Nf;a1{lS&-kmˍ}~HT~ӵ $pp7Ӟ nx`P~ G`5_oNvƳ|3p HLO- AGL69*iTDQT7'/3fBe rcXg{;N3+f+ޛ>\z ,оB!i┄-ƒi$3#}l3mdWЦ’K.xGe6#Q:DXG` ˣ<#=/Ҹy<@~6:HltT04ph7S~oU`LP|zE#{{$k{^:VsAd_8Jr]JE%PZ-"#JLrmAd~Mx\7USŨC> XUΓg%FdZO `j|Ul{!aGNN #'bpF] AC{&Ă 0t|V_hUX$Zp nN ]`"ܯ35~ZPd8>+'>mWR$A[?88+\~S Rrq9wt[Khnj=ϡdkP L$줨3vzX^޳2vLT(U!DTS"O5Pu",W|<,Chj8nN3*hX (YV+0vʼn-W*R/+VXnP|("DdU'HUr`^r1*Pc3mL[׬1A+8~5*Zfnf„ $;ujȚ]7W> 9_^ퟶ^\`^HXvIDHDsTcݜ bjJ*)YC Ӱo yNQ&#vs/v@e%&)$V9ȅ#NX> "Z4sR'ҍ`!aqlkf5tzXjA-):j,oO $6"Q8 =R^ 4,k?n-]OQeԱFzƥv*Fus_%@9 ܌iɂY?|˞tZQ;{++>I/vҢШ{!,Ʌ#ݗou)f HZcޕ< A[jd SsjP""0T&׺jGʓ?>-n yz2=Xr$׿[!Mn% ~%?yM}{Q^% ]2SM*,a3ٻtۤ]˦Nhp 0)j(MG:7-b6SdQ,pʨ,P/';`rc-XF괏j=&{Tڈr>`|zH9gX|:k`*aT/aa2K@kD;_s/RNilv5=ԡ|7-(w-R슥>xWJ!6Q A?ұ#>mMCI軵ZO _ڊ2 !BIbGz.|e"P}G#Ms^uwHD'F£_H^,'9O%ǰy|QE7F\O歸q}%pA-> ƙb.Fs3,7M!Ժ XQN5[En$#e&j~9i{c qý&^ޅpo0)Ӑ{񖝀eTN6Z/DwC\ v:Iu(zL"Q IcẔ1[?i``&2m*TRh 67,Ȏ!)+VCX${ߘR;s/bP$(a0e2@K:P{b^22G<* o9L0 cWl!VkS*赏c|cKA:,v 7 | bvX [w%t2 SCT,qP&ZVum_.`0?g]{QΪk/Ksבw*+ԄV7PX:ՏE ocv]e!,MX)kU$ݓZDv;Q嚜+VC"C ]UzSKXD\iK)V'`Bt˿A@ ^mg.eZA H"5ifWeE}D FD]dl9f(6ύizȩ #ǃc3x??<38K \3Wdbc{w505^fi_Жy\ jеl'vAT<>1 Bafc.h(j%%܌_䠑lnHzu]1荣8h~zP= XcgL<(KnoP ҎYjeUz>T=q pK5ֹ|5ٵ@1WLK@3؇xSN\lz7.[94;]z,{Ah.O0oǜ] զ6 w֓['`njXR06 )^#&tӹzV~EZ}/$k$FD11$ Pb^f|oC(1$'~i~gVG>}r6搄ϛ~'~G[O$a4r﫰{ptYIZ0DP&MF*'@I tɌEWXζm^UgpF H+5gF'v;U6ÎD9 kاB*ڢlC9/ ""j^bl2OJ%Vr+Svl IAlӂd#AkLG(ZUw "FG^^=l/vܦ" M }[А ʴ&*` )QߜUD;9?svGP؅=HN٫ey'-ON b I>Q~{_%|pH \WUDXѲ7#6)l) kPfbމ,Yج3QbpND!g6oWB %=YuٸKmE}evϓ$*hTk{ ~$ŕ7$y0Tiw/MR)T)vhO` -dK3^_5ɻuUy<&%l@)[|H{ XdVJO-ԫQDuf)@Z Op=7 gSS:Ħ!};B=3;S\mOP+b~4$ -f`C6 9>zSJϚ]sYAQc6ܯ=zhH3C:%qG~$d2`@_[PAz 1pDt.hDJ8W4g[kROԼqq ŭ}[=$>c%[PVJGV MUgaLѮd}i(;lZD^] ;ĢMμ*1>$. =(Ŀq'RL-ũ_˘sTx]#=ܾT :p s, ;;6`pnL-;ampT)tTSb5@=@RI Ei"呰1#l5SA~ԡL@RL+)ߘ+/m/髻qm (qRߚRw%P;&6[I}@nL&`.+:T qd [E y2d:Ni ess2"aP]m%?,m~GLG2B4阘DQK[I~Y9ELr7bkGiX= FoJx~K+ ǑJqӑ^FAWfMz)'d-`Jrbk`*8, ϕ/۽R8D(Զ@U5.b`u,_n݂l(+ʧ7q zR_pp%KPz&ڎ2* N*O=_br(T$l&I!&H; mH˰Z\bkEV mk՝ՄZ p~_TtMD'2kUJiNG1]B *~ NNdsՄhwn*7>:\>]3%˦l/ZTN2kdozpޯd,8k!QU7/@Շ}w u[Gx.OJ>6u׀2Tof̽A@!{ oj|<n;`tg3-br;'YXxTR&{1DYicMTS/r8f)T4Z.ic:PO?p1v}UH٦Qo ly`/@ɲ%J)g7\ sj%G# H=fh,Xi!ra8ą+Q}0o:hZgxK7hZ+f XбؒIWiІ|\O. Tz_O$"Rgrw^( S; -O=dkA#Ing(J4qg.`Ӹ丏y>/'JT^2Hÿ ŐQ<,SD۟wȎ_RϚ N4v+.[ͭɩs"!dn.S>o {%se2RX;+ő.i;Suy|4:G_U9B=7^ Pa!#՟f#Ei+ggM%]:RY63Q#Lz=|kW~JvUh+ ~* ʊ:f)J"*-5k$+ninMMrS#YUhPE++ڃa_ EJ((~:f֜gB2M=}BٰNtA'͞LuE؂[iS^X>.#yPUn;5ea%Wߦ`'BiP<`"is}B %%D,\i/,3*+, 4ֹaeݓ\ϥU4\ids(fөOKg"&#DiRȍa/jem6 'sfDSFnj.o,jr޴SvȩAjEV!Ѳ sɴcejqJD]u& wyL }]79#U! Ym{)o]-V学]^9ogWxzhtĭL57i0g|OޗNJ^y%hJΣ8f݀YZm V'%֜'GhBOwD C/K[֞j副 9S|(JuD1\ZjX݌Tfu'UL! )> juF %Iuw?*¸T\t#ǫ,ϒZ bEw8֙ʑÌ8 aK4c~`oQǮ9@9-~&Z)%QncjV8!Ȟ{{ G(]X崔hP%["Ew,%-Y)tU5f?MԫCWJj[UjLޟ%{T,!{QQgEvg9HF~b|"A*"JF+0ww ~H|JS7=;йKH\EG^KPhh7scf̧Lvf+%AI]3R ߳s!BJǏ)k;I#S\$=$B&B"#L=30Y?oS)\vCS¬);I-6!`P۠.j%s#'NAi+>:7"`sйXaNiן.!xm+)@Пݓg Othhτ嘤G :"es 3⁊.p@7uJCUnW[/v+}^[Oߎ8cb#o՝I6"t"c涸3v=#ztޡkq;sVrH󉙟& kX LdHy|S&ġh}<'< + :U^sT=oGa:dQ=MO'WFZtOHt"- /dxQp~e@KV|%=.GCb21=\IO$ "E~̀z{?)m8j\'C+v#a¤WZ抬NٻE)[PZR tr<*taL~mYY3exC sl2+| MC&4L"#5d 27;S0Ka`a2 q[1gs,y{sPʝtLw_#|%ΝWXp*3|"ܹd?5 a-G@rU%hrJSNR\N)kbq(`PU(+6SP' n!B ]oé4=i wDhP<h\zJdėdb (g`^̀\̈́Zz:92˔yKۡuM5 ݺlNZ#m^xƉkf]IAndO0H%J~^߬Ljk:q`z%ppnPg4 /ױ\~nK<> o$4'e&osz)ܛgjJY57s#~|JAU)(h(1j(b^ke 3`]e tfXnlkݜأ]v>5Br2 _=VmSѩ1#ʉ&sq.;{sT]/Ql,r3ͰeBߑM;FԟyJMqEy)}b2ĺҶs⠗ҫyQuBlf,-L|~2>nK߫KHh& w8*Jl_֩vJM@ ϴLro7m.r.n/1xiH%Yrg<ܜ 2DrihY*Q4NVX4':+^8Ji_=[ww| ? |y:ƅ) 5-{W(W<8~cf/C.-ӹK_5/H&5t}8Kl%}3q{@Wɢed&4J"Q?βV}.aX;8왮Zzc 2XZ>OcŜlbtH0#v!Dmt6H$~'YTeg+tH,1#A-͓|OլAMJۀI- jEzNзR3s:C*:y%*uʿ'Fj,! MrEo?F ԴT}S-h%(]1L&G>RLW8{DJv9/RaX|"&Ǎ{6۪:DTE9s4<-WЃ9MmR/N%=:&q+G|l\+qHSQ& ˊ~'+{wu"1oËAs͐W1TU8uD?xHä|%n2wwP6OZԅ,Il"'u^8+>wüPk}YIIX|YSd7ȏ3K̗I;iTCT*Q)\5 փfr-j筛+Y@ Ak`2P5߻N 14GE͈ ?;!K I+W枝DiN% &ȜJ.~\݄&t[0)GrYmu]NJYBxbIf{.)+uZ9n̓)8;~~ avMZwé~8O]cZ,f%Fx.>-K5LPH.cl}3ʯPlB"D\_eK\XKrٺf~]UFy؀yj ? S=8^ƫ X 9)y0dB ?ImjrI)~i' qyȵ,H;h7D]eÞW mH++Tic[4&>'"So^r*xH`+;;V|qg]9/ӏUۻ{îֵٱ ^}\H$cNg*p=eI"wӰ"=\d&B|bW0xy\;O"tކCd!~| Xs#JJ9a9]&fop[:3s,5,rE;iƢ^})*Ơ)P6A65egiCvM7D؎ S_\|*c)|yaQ]D/.b;(~E廾_ɞ+^?ޔc:ǖ.FaEa~g3(v頛˘g?̀aLR= j3:{c 4DEoͅQ4F ![]"K\c7/^s}mmc..c)[oא%-MH82^5^J(:l$pϺ3(M/ rlJѹ2RĢ_uZͺNna 3OB̬B_jR>ȘSmǷܵBUp@HP7ҥ^Q: L.\6 SYO6* ȷ6M@S̳=yDHY%r*x|0e ٓ6Hoz$JV:vXbu) m "+a()!Ĩ6t'6! ׶f^=yclJk#NQ JZ{%LX͠ &&UGPi[BLPnVR r#y#YLfy U4N҅ T6V/`=M)ub3:iRSui%9ܑ!RBUfoF|}#V*y_c(C'cf WIGTif)]/?:&t7vT czmi0=DLȿ\^&]J}#X˲Яx!~8X?dٌѯԓI{ce:Ȋa B :л#}} 2/ѹ.0o[C31:iH)j"s'/~#+OI1{3u_- II ,JD0Y,;J Λq Ei^˘aM`S[E,\w 9 0'ǙPxd.eoL:7OҺ{)m}yGi|S~[lbȣ̈TY9c Ĕ蝫 ,Xr߶st$) Q3]8zF$~7c xt$53!b\ڲ-xp &)#njˏ'8!-diO?B1'8lQ.tNeo o3A0f)۸!&;NeVNrLNʁs-;> EnLC jOU~Mi/Pk k9;h7BtAvZpGfEB!oAhrִǮYX2$*c*\@q]$ )Tgש oc`QLX.3|q `9v;j19ސ<~0Q javE%L~4v%w\Bse]Q+M~gq3FY@ #dmHb+G ۄ"V Towp^f\3猪`b[Eo׷fz$]h=د%( Yah8ƸdCZ| q-'qoԥ89lkPٗOz匹(N2~4?y57 Qy10 ) n)|m)`-,äR8h*ĝ_2 8W)A(!+?Qt XZ^N+6wT1bKc$QIKKڰyC ]0o߶݅KВ.AA :^M(|<Ӛ, E*-<+'qbyQ ޠ,;3zRyK^sfw䋤a-6+Q*uӹJ7e B~r)np:61Ø!A#u u' 'uR-IeSGY)(]Bm!{A\.X7#g8yĵW,a/j{i?pVX`{dwC,O"hfuTYDk<@VڀgG?"dJ7~,ЙQ~b.#&hyNy6+ͱ|)" X|t~TDY횮cgŢ(;Ŷ!pf4x|FG*ås3PELL؁0ۥ>JSVQ5yzpҧ62'tH&\=FHcaxD%jmd埝6Y~לftckȼب<> SQO;zM.2\\0,\w$rU)qC #7KanOR5C LWhm[Ȭx{H!INcr1&45-ЦU^tq"6=,hK:]N0%qIg4?KsSަwS^o;I>IkV6HAS\ Y}G!w_fԫ/2ey- E\z͋,_]~Fxjh VŁ;½ w2g1$mt$_%Le j|̐A0 hctJd>ځt2.tTWLѬ05o)\:I˜MEE5Ct6O2OKrK٬\&T|bb;m&j9*~K X_m=S/O语D ?xz)&=ق|`ROh}UbY:m*,iCb:9ЧUO"CN6F5PDg4k4q˴Xl7n#Tx'dPɛ"d1Ь 9,fTaVgS*T꾝M LQϪ2O>8TWLU,x0z6* >$hcEGCA u4'byTt2V` 2Fͻ # Q%5Yxx;UQ#i=Ζ'Uآ9 ]>Ni$c:[I+xR/ֿ"gǣ >wWt5D{2s|[i*Mi FoB8SnIiݱnZ ;)e.t5乩@*d TVWYJJ nꙆ1<@C"09~]KCا[y,mHΜ=՗͍rSY '#lgYbz1h/e?o>O$)XA*P6%s3I3X b`__4Uz6QOxk-_rID[T9+yx\Cɨ2%N;e- , +Q ^ٵS0TXTmx< Ѻ]1`;ɔoހRUíHBbH䳔ɜ p:_|q&V; yaT:Ř<˂O:}'CA,T|;xǥ)Z%N&P6ujv~6Qd%K%}%вey3:sbRq@ o%wӺ8pZŸYP`" 17irhA Q_4Wg3evv )k0۸FC>AƟ( wU$cx'|!wrfhj2_~t^P% 5(muG)"mج$AviS%Q\"i'm/$96WB3G0r}Svfs = Rlx 'H~dEIlsa)fO#Fֺ>Ƚ%C0CMyGM 69EԷEIg3IJAN<8w@}J9I.fKD+!kyZ'PH{I,v/s0(&ITԤ6ؼ%27u'NExpcꓧ${\ɩtjJB lg`m*Y8lbx@"(-E*oAo;J8@'&ےkPQxhwO@Se "eypL)ס(}_rvhԽ7]>ex,'cNOij@LA-4ҧF]A39k(p}us\B vMpdǁWF`;@&PN[խOIR^DHTs2YCYĸ~fR<꯾듖8pȕD]5ӠiqXp(%CzHD'>-cadͣ[tټ)C05$@LzҝVc/ t/GLJlORHYv@wW|Yd+2eL}!MQ3)FrzEXT`2N\y (UUXaj!y~`3d,萝RIJS;Jgʘ8)L  vVX>0o}8 {!B3+jHjߑ֗L@?#ݥQT3L?LG3J oDGܘX.χI:s?#h7'2tbjK:mAeެK6|~6xQ|3ܻkI*06P")X'#^{m 3,ֈ E%M(ڎU c5܆i,OZbҰ=pbS>t[Q45=Z:@VהUj>DؑY9 JpnVQeki 8a:D7ws+MM Ug@rpU 2c2wO)wmc0@ F_0Ma18.{Q0bS=Nm.+ShiG^M,L; YLSϽdFkCz?a4+` e)gĞuE-H񺊉գR4-a8Zxb*K(ű(4h &(xG)pz24o=8-m)nd6,ކPFۚ(_öj c,X{ӧn6m4ȊNhNt1WRwM6Zz@y>d9T7nރ$HDMєVr*=Y&#z/]j?[@(D}he6ci?޽S\JB#[#vch\₪y+w8|BteLҫ/C>D@2,"BPuQ53,%p 4$LaF᝴{iZ'墘- cg1>EQaeȃ;:."Dp)ešdša׆yhhI.DsI-Tw6$HN֏' | l9 j-gj6hJ;T]*>d>I ۔n(hE~NWj)Xk~4mP%~:6R]64 ?G QڔަC!*&4FØ:P(İ_q砭%g%BfSz?hob˶JZC7)™\*0 8U "h v2ҕf|ZԢ~m,fgT0n "Wٱ挒27Ɋ|w!I k-}3R2)=ߖڵ@ _҂-fl wҿ2݀,jŜK9Pe6g&ԣŏ `" u벻^)pM@ٟ43Y(ɨޖň0TG2.F+/|gTފCMW>+L ґv&Co̳JѺ~I9 3xkm_rⅤifDU2pV k7TVƓU()d[w㻈x r*~& ܼ;8=?moo%l+^X^}ZC0tt}++}CaRJtAy8E aww7 %v!~GP*xLo>Һ 5D DŽy;aqp_}8gDŽ=f7oW6iUytA+,!b#LŘ37Rlab=>A?څ4EJ[R6gDj\nkI92%#`AI#Lt0鲳n*e-5}=܏F=8ӉL콗|NY qjiIՖ]J»JᰍÍhP;FBJ_pug$gϰyDM:nS9?&F\{~{&6Xõ5k* @8oJ?7l9_CP!c`J.G>؆YWTCu[Ɯ2"r'ϔw(RQՎME< Жib *jB? dK4.ߗI >mї}7ƪ&ukPAɾ8NWӣIt0@Oba>{_`pVa>]eZUˣn#1@7JYX_I>O`L:aI&y Άw)%{Mof|^~lӆ_$k*QsspWv&.wߖcx1"[`x}PNM<)[,r-l' Z^-`ܛlcZ (jB`SyU*N/j &q OZp*'tzl`ԴOF`ю'jc&f&36iWU1w.eä5F0ۼh?̋}?Vbw8oI0SC C 42mCM-= N4&c XB8ι e| ׂ0~>߳oh'A\ꪤu?pݶ|oVY3Cuvis!G8<;*")JI4L&#NfA~Z~+w0bi{ŕؼ5fR!и,~̾w+Z<$ĉF AOg` .G7giMPa}R J?aSylVF oy+հ&/gZ֜E2ɷ7KvjI[wS#iɽ\*;l]iafաg,x"-m[(ӜԞWnc_3B+~ͶZEtߟf^ EQxj@k[֔4}yٽ,͢5H*d@f Q W]!Pvץ&)oMsIim]n@[_~~uꆁ҄ZnO `'Pp.j,Isӝiܥz jR5UUt_tFM,p_A^{qwPj2}C$UI|u2*27$DFn~44 z@j?XD@0ty) ;@U6 ĽTpI YF;:NF:i,=獙Od\'Dv1{|TpF.^j?JAT]4e&9] e5[mBD[il޷y׈@P̓xGBuׄ4Ű  L]*Ke&xJjchyAe_p6x[{6Qb]23 䆙9kYܘ?lUng=wTlL[0azn=, NU1z9>WWqeb;gZ+)mYjX. ł?ȋpۆ4qE8!2ξ:F9;%gs7Èmyq0Q80.Ic9k G^´S7TϕGuW;jh%L2Zl p^@B*X5aosjpxTܘ4j_liI!F`eqrcNv5ֆVﾊ۽C5FՕ]pj= NJFP;eO:X瞅y!h"h J;$j5o)aBP^G"J=c_j#'y۶[A1t=fg}|S]&r O2 k>x[9Sv`p3ɠXx-+Yݼa`"zKH ;Ӻ,%|mԢ[j7_&>C`vW5 i[7۝UwC<f;h_((c@2$uomcuT;̋ R®X }^6y>5iC!Rչ_Tv!s:=!L^Zʹv`-Z"oi-\6s%@׈NJ;sY)CÑB b]-P"/|/pbı*\ru*H({Qe]AdCnh/ !/kƋrUsB߇LF&ݎQ4-Qp{x޵Q^#J57)e"R}^\2Ћ)-2bϲR|4i*]z6FTuPhٟ#LŶ2(.bx` tdPF:Pr*TyZb׷ PUDi>;RNaPYIJv'G\ዾdWMD_Z qdPl-g`:֚uoc)ԩk N=FH/M؇žWёʄLNh,m#@9y}悹JKFI=ܲ U`lM/P"ko:Ct2@#tHx]]C [zOvNP@թ Yt.?)aGK3#< s\C;w W +veg#m0S)1!~|/עuO ,)޸*fiI~pkoa"Q3L\2m~F'!Owj2C" XWOAx̯čuy; lv;HB%\>۩od֐S):"QeMq<6+[/DM03}~@ƫFs_ u~ʨUX96b!N%ƅM)ϭ!G{| /p6R!nI^4@;CW)g˫00ƌw^ :$hSod!3#Ң*V|b0)DH{BTςŸρ+c6 !rWPxjHn)zEc l vC#rx3/ =05`:k)GF3.1\[S L.¶:c>OsI; +Q.ռyPRWշiPr٬D r ؿ\T1M'op<'QTERgt?ChxGZRI?~Ȗ\[:*lt[ch`UCZ;Od}@Av.4f'mފ΁t6eJn@-ӕrt6P%̿RBuCWMv]WQ+ I\ $l|Hi2o+՗uQs¾0* {/0*at0A[*gqq&khtx@oLkhi]()Ru%_?*9(yn.V_mu.것IٔlfX 'z37'P)o o0mЀJ1C&G@Zna`H16Wo|J?ocB^{pGe0 ˛:Q D8((W\^c׃RKMҁk0mrt%ǗJ䭙k `[ʛ6OI%?w_޾e') M~ t' |LwV 5܌ϧ$My"/t*/:|!3zLeq; Lز=bu+&E%i/Ð鶷؋eHJޛZ^ljZz;$L[=$a<`DZf@ecQ2 ʵr՛ kRr %umjmj5$Ů< /y"~SImwQ1(1\~)؊3J$iF L=u,=yչՀfVdC ˛'V4/% p QL:W\@妔 5.3B:>سؼ8 WL Û/ % Jm.˹c#=%tH>orqb@V펁XvjAcnuD!\i3Ac!xAzZuF'J]ZkWXeS64ߣQy2q!Hڊ -r-VT8`[n^GN>B! Ψo5O`;֜p@0o"]iބxS('i S"󚇯_ 66C1yE$=|u̲vJ0BU+6"8-.G &g/O-6K@.?TTTZtR: ;hri?-:k٠B[b6ϋy(fu{\_uvX=TeDU'$%3#|I Դ!jFDBP{ו6 =0 ~hBr:y?Je }Eiʱ-fTX,Q_ ?M]2Q/D@oXF`H g+pGmDGm)Uut|eJi$Rұ-m!B# ߟ(#)uL49zxJBX08*/+t,pI?r|~b{di+Jh?rm՝WY?eSjOPK:p W$ηu'̄Tr( 8hIy`n~b 5Qܟ\ZPdRYBk'{W+&OTkVaMndd"Ëq*Ds(MD)Ze3u ?*$+ʹfFZ ՟kI`1 C fVYհ޾ Gk[i:ƚ:%JÃF8\/WlSf2{nI`V"'*ٲk|JQ@76RS%ЗmS*ȑc\:̥S /ջu͵)focͪ|Q1=Ĭ bjc薤d2zC./û7ә>pte4тGEb<$ԕ_}i֤P̅1Ι,fyR !d..kQP^}DܑtI;3Tb+7ٛ), >627UF#¶P$>5pML-WFguo2~b yn1} _(Z 팜@k?@/iRߢ_+!|̩5u;픮ٷ><O~h]&*L32!qaboEUT[7]‘HNn,]Y(B{7ߟ U:ˀ{+mĜRl!S"M i*$nG<8ƽj-ǴXИґÝESb8[ܽv&؛0[+٪mf#H-ڠ_-#04YԨ[T^Jz;«HmӏssCWPx1k`D>YòjAi8" \=ϳbvQ)sERؠ)"-GXì_֯{ - ֮fΝm\43rH ܁" ṅG1P w9{lMOL9"] yԡ8B` ,"aV~e§bˌhU@.Mf.l ,! ưttcBk3gcާ!kS3ՁM`M&{t]ɅP_c#Z `]h@W<23\Ɠ0襣vGKmFp ,8!OnbaC@RTkLxm, ,yw7} n[!8c!R?OPGثTcŧaaZ9'3b(FL]$ٸו&‘N'*]r)4hifE6aw[t_B!&蟛Q&ɠ33po m^OIʪ2,ڵޢ]aN6!ZӋHP[?ts#Yreh| aUϸg4 In& ={*\PSCS+$jMeKIېZDC]ikv8 m?4@S6NmBbr0->k Qz!խsIA} l2i.ũ/t'ύJ$ |#2eiU{kղv2KƱAh#̜5[z8UA`_4P'scl>&\m֩?.o!0_͙{wjbm$vm93fX[f4|%05 wdﬡyTF+vehmXr}|N^BNW:R~T܋i~ꅓXN2vNdP9h\aZ{J&O3؄޸wf*r@gd(?xd l\r1=Es;_\.X,.#3 Yd>^5 :DTDSHKY(SatXL7ֵ\҉n|[p;Tqbtl:o&ۮrD5+$#~Kց+$w @^mBz-#SCiʀ ƶHUᠩ9hP2Smooj rmj;(٨>rL,0Ҧ\]>48TekLmNhF1CZ6Z d۹ǖ.@T̄٢ٜem= [g+oX-k?MX wt_+7w*3A`aYuRntH r^#uBU%PsHQ7LYz$wܵx#Ce"'2|,k%Jz9һaiٲy\_@8.'O ׫ }$^7';tC&td+Apufa%?l\ڲ}Jq ASRSxBv&7SWiI!')N o_QFlfScBHfk{H=ѡnĀѧ6rapUÉ6tOOtNwC<;2=wV1УW4{CQƇr⿇M?1\@Eyc/dmOrsC3+*VTLz. KSsOn;JQ48=t;`\ƀ %vo"̉XdQmKus& 9l0( "R P?}'Yx5*L_Y V +sh} q h@\@oU&K] TBǭQ=W6ᬍlvUIZ!XȎUn@EGdofbzۅKx{̧C̈]1l=ˬ~"2PF$L6PTIxd8FfAzHMQI ,Y(yomW9{'sRF~ߨq"g¯&B*]eݳ4MyMZ3w%E]z\ tS}ZIhRP}e vl-#W2^TaYƁ\^b~TuW[ix ΘU pa8 v<1֘;֗f^áMG)VlR)5ʿeԆzYzWM!"'X'Ygt:Ti]~czshPR;èE!0qoNi]3z\,mZ=<>!X%d3qT|pOOT]Z'9c |' L-[z6D*p(n>al? ??KUp$6+8mej&)0_F?Mp'ƴ)?%9l7S|aOøчld"_Еs- C5#1 Y{J:'9:}z%xz < p#.P h|wrO:VA-lNX)ukrcXvUϙk9d0?mJ?*qü>AO߹>\>B1wݲ䣅Gb"g)9%YP'(ȠoB\<zЬ6w[SZw N6h#aLsHvPS|{> ;@vO#631^-4R՜ քsXV?&>' ˹e a&ZyaɇMf _Wv}է ^aTfxVIG[Cv%kUIOĀo6>8B:aÊ~OK]M|e\҂=~}cŜր6]`4Ẑz8PcjB`:ٮsawDfάO'm)$c1e5>ӣ7beE73{tS A NX5s†ܑR~}IJ[Ht{ߨ)22Ԝ1/T Daid08aE?'ڐJE&܈>"J4&"Oسm@ҴT鵭2ۑ&_qȱAw龜 [c5ɂ}qrr\MIm]bԮnD(qy_LufKvSoc?L<l5·CmX_/5⺻Jݗ=F5/w~++w{G?x2q)p8fM Sv B#XI{/L6Mtnz+)Y 0~扣uP>g{+q+(&RL18VP"ae-V>vύh}I[.5+ݷLhd֔lzd5; yu%_Z~3ԁ n4l'"&2J3)CP?-[5pd93+BE3s(OO0Y܍9HT/|1Dy>H.OʯI}^JǏ_YDy%ތ5WQOؾ{d&#=#*| :1(Լ)f@?醕\,1 8K_oDY ;pHX/ ^ 'Cpik鿦#R@v)g2JМc geZK 6j=mL|P8'0mt1cklgօMe 2 rwkqKV Zq*Tt~v"a)G1U+^B'yg$|?HT\`o ;Q~`UcyP}S+O =^5{]r#ȄWMGbKV(Щ&ӸWlV@MICu[dߖ)v>Vm |- T஭[b1 PVG'+IwE[aف{MKb9FCodEgs1I'QUtpj<1^n|١cȢp̌-}PP %h2 DhP8/ nO1őedj+; %΅kzm .z@*M Dޯ*~bZ~1B#[5nyƗ[D^rp<۾݆R"кsI9tؙaള_T% ɔxd5{t]y_$RbfL 88q݅@(f=bxx毇ȌsK5q>۰z$4e=fX)[슄LD;ɇ^yZB /0U/qf֐F^3d`v_Xl'xeyN2+>8yTMMD.0|zxy F#3}NݸÇ5'+NZ/Kr{sűo -Z;3sj2hW롍7J!Ⱦ }-f:pll}j05`  ^ٕ* ;+N p*P D,]Wk"3g#g?Dzi]6BA#5@Lx>`S 703bBYWêzd;Mǂ Orӆev9?KE <v;%9Q54G͋r)nH[ѳX狝8z†$Z-r)݄'iE߹[Ha&@S6_`PygQMh;ŭ~F"l~}YøD+csݗ[#Hop>9=}5s.NECpC3(S[D :pQ\g[5r3Ju}=2k;Hfӆzp,RD^r?A<`hnwu4AdUښw~~9_[*j,2?9+vpV+' 4-E,&g4M@CJ>L뮋3.[;ӝi< _nlM?9gWfu1A .4D(|5V-ov G =Z &uٷjV1 +N8˴BC$J5¼ip8)YY‹M&\76oDX4,U\u8uGqU,o wX72 k| ? a,]W[%p?l>V&d8q_̘Xb54ZjB4-=0'4V*ٟǞфj>ƒ.pEA˚(̯BXA[11T b eP%nG9 ŭNjGt˔v}gw+Y0fVAF Ѕɮې_izRg]( 22vd#1eĶٱEu+\'z_}G28I2.Fgr#pm &|^Z㙇4m.b?yr~FzD1a:涗eR%G|[9'oclۯcg._XK5;s0Q?ϐdH' zoIHM, .|y>m?Ds tm)3x=qA~npxwm(#)Y$DK0{udMfpRV1]ZEy`~`썓i f ޛ.|$s+@_;SE 6CL)!o&z p!f\S ԀݓЏ*oi{!0cWvhl'4ub_acQجLKJw)CTG WFW!y֥_ 򎃓O|_l4Yڕ~䣚] |E(ܹXۣ5Bn6M,|~f5T hD鷞sawݚ3״ycJgqM֦G8HL뚃sWXY}!N61'kᅒvߪ{8潿dnvP&k)SH9\xrO3 ҡF~zo APq @HvH7~7خNZHWҼ~߆FG+v;ݲ@=~;)'I0{#j8?p(^VY&ku3n3|356sqۣA[4"`6?iWWbFךV;vؗ;Z2cmo}D#|mSӫ.{;׸Vt[GkOY暞:{9#Ĩd2%Drr(#V"D2[G@4e1Z}19:hP|m{='lvnm7;X9>_<861Q̆tFjű6 aaDҙ/<4kWlIQeZʋgm CRA5A [W% 0UaAIIuֻG'C>sZ|{Vͣ[:eKvÎ}ߔ!?sQ~űmh$U>1]YOxeCaެکM^l\э{I` &oǨ],[-FPLq2O뤛't֙!Y 0pCAS͇,5$N!EHފB{?Q-fcoaX o$`ԫ1*9i"])ÑRr/}WN},vCvseHDJW@PÇ'HL#"n}[ە8v(bG# -b۵BTIFm?tç:llv޵5IJS4H4P e]. !jSqY RY5(Φ"@I]:4Iϙ59 XcG:ϖb7ht6rKcœ%g NXZ7+?uϦ}ZEjme;א}m42 jk>Ҏ 3NRlJ >an6s?ÕCH1%cx2FϚ:&=6l PծTJ&`mTi#V3V'QJvh$tE=K4 uj\[ru}fOxbI^]L8e}~:䯗[5}p0/Vx \qU_whDY RyѤ>0(15J z'>^h z_M WGkǙoH0xC8ђY rZ!Dp=|QY:掾+(%+=Bn܊8E^@R@ݓWmWYh*^2gs!wkqJu>[_Ck2f"`Er $yXYm=s<_v_A/u}V9'Ğ6t\\4I@Q՛R3Xx"˓+?hg%$'Ձ͒!]3g6Q߰20ʞ$W;n?8-ykƈLsP@2$cS h)w5gQro]MX)4PX:S3N Q eXLͱG$;jO p V~ ;xrpG1=92g98S2藙b)SB gRK#AJz,F$T%BUq@M篬ʨ +[ Inʭ$yPSNՃHWAbc)I6-S!GvpUh5͇VJw,aMKLc XNf+.=3ֲ3$ V'M38gXb3A|݄k2j%Le Sɷ={SS!e>ЃpY X _s>9?x:(Rht/%N3Υն0Է (% m2>[ LNAa=u;D+wY%(4٦"7 ten}#AhΕ}z1AJuPmԎt,55v Oav6 SΙ!PAda*nk=gJ/6X*+h-9C` dBH;[ag&CNoP{NiMog!,)m w~_ D=mǬOrt|]R@lX;^BZZɌs=vAmmN|S=1tX0*410-qJb]ѓdυo9xYQ ʪ~G(!yYoRraQ,zẌޙdWƬSfbJ77)1Q~k)8Ujwp_jBkP˩S1'fEB!NgKfx=m#5g._Ԇޜg`:27]@]2շ빩yPce"@楡&;込̶i易ܩigiv$ SFψBɾ:_XE`B \A5h]ƾ,V']IIy+V\2H3]e]M<|־GǞ qx1!6 d9QD`xǽo{Lj1&j'˙"?f/×ȸ1}LMn͇uֿ?v i$0aIË6^Ǝ<=WHp8#qD(WSL"g08xb E]Zd }t0ȴFNΦ{} x`@:PwpicN0\7IJ7\"&ű7k8a=C̶LcI Bc%ѕe/7D# "`Yi|!'TռC6Ku2?u=쏄V73QlYTE`C2*[&Zx:CUK ref誙;\|1G 2qdY^|cDs 04*)Jk:CpEtww~](kK|=}ס̫9كx&+QׯbG2:*\_ύ!o*EKŠD@=A4ȖxѯΠ8r\"L3n b"fDQ5:F2ܨ b~,03({*ZNHeMgV5R)Ǭ{=ĵjݠ'Wפ0#{ {?bR3k2Ib.f5A ,o"ȝz2qY5Ti2XV~XiZ+`#dl-R9mʔ\E]d&I(PO$AՕH@ej׳n&=D ߓ>WƯ=vkj<. RB}Pn2W2FwϷ2KCnwh{Kt Z"b\w r:2g\*9 =K@BaO=j.?>kn$"\ 3h]E4b$ aǥt%i X;xpy M^0um"n^tHDif~e.#? 5 v^!GNGꊷf/tbԎ6Pm N/-# =VeC^p 0conduEa'fEpә ٹ?U*9ý?b2vS5V؄cxD e6^U}W,gso.XW:`gvYXlG9)bd ^<͂E~9Iu."HJ|Na,#1g*cú4?jCd%D#.6P %}De9*,JHW795*lfkY@crJZ=r5oTް76܅1otx7O(޽ph|3"SɳӁY&Aɖ AO4}I3.=7aCs]v)0Į194dq,i![4w65KpWr22oWk O F2j~Rcr.ijR`fWW.ڀ5 Bx-"*lC"q]?Lp}2$*}&lS Jz3+ٍ}T8lY{,] +V(AUity,`?t/+m>=ef mT`#l&{ctH }aҗ׬PzNyeiT+0& XO1j φr1%Ώ*_?^MdK!Hg& *r`?"ƛ]i0^C|~ V`=m&d_ ^}{xn**mi^R$[^kHD]7VrrE?_8 gGQ x1qzuDFudgL 8lQ1f Tv-{.=) о<z-Fq6Wu.]UʥE04s!hnخy&x>#Le̤M^MJ=J4g m@.6z8Yx.9]755eJ)qr⹦^A5O拹K}+Uex~u\ykE#sa [,!!&d%mmu0"9›V_Woޕf#u83çco#v8ەZ[_ì7ѳ}L>{]L6`8M) ,wsH;a8(^c\5rᅢom@-@wɐUۨH]UhʂC,p` ,&'&A\&h { Sx<ήqs8pD|zRfb ͝j}a{?uCw2aˊo?:tb*lIR2;{j)%7(4/&mTb*fwKsSQ^5Gϴv*(3[77|YCy<>*IE>I5ax\0e/z¢K3q8V813aYޓH=%yӭkH#cuT/&wßY E aD=<67\yI%x9nE`r.8W2\\iح4W ϊK[~X,h2_;Ky1;NozYD.8Y/\uDzZr/*YV̘MH=D=VcB5q/JHgŮ9 2`ENU>ϿQ5gԼҸ |'' pf#ةW@7%JIFT\bb#R](\tdYoǃy_0`@6Bݞmf&teӺGM&h)AiaXy|őkgMWP8/^A!yQ޿fUdYM&`TC*~Dt*ˍ ܵ+|#F̆fLFѧn\h}ͤf,`XŊEǨx٣'ՉĉHlah󻹼R OJ2 |w2NhV(~(|JTl.n;z9u}IgY2NnT OP.'QWm akIZ&t>-'3tXOPZA}]B25`h&4"mB)”,kcpXQT5 i׍~K f`񩏉/41AO@BMꎝj?+Ti6XYO:W&y/_SoK'x }E55+}8u$<+O"`f) %=KIY]Bgeo _Ӄ4+u)㮔C|t/J%A͹ dlq>J'z|o^(<7M@aWHyJ#8X*^+l۱#wL9]nsRjħdS-r>=L$Očj4sA@ǠAL`oٗ/XS|U? ɤ)w32Y1ds"(|wlmA$n6Gt;(&v#z:H &%ʫ?LN"gѸ[}5!4Aqi(YDa(q۟6p ?blXƺ,39+t!I`- &]`A myd֠HEb/rdcʒt0DOӡ2;']GNrm7p٬Y?iZhtӛg*iik⋱ς}y\+[ 2I ~{} B55qș ko:g&godECf:1R.W9cd;;=[Z\(Q9UsVU Y[WXBG $ \uzwXO8P@ȩXj6_4FXL~Bk [9WXt^AmS׎J3m0 R?-x8 钅ƾe`NG/T}hͬJ~ JV?ж7\z u*3 vbVrV Z_oZl=+tsi }\TGA5"dΑP~UO,J.fz0ɳ>@66?8J(e*FnWI_ EurC fZB>e( $A; 5BЋM{\%@ί}4#onl‹ k }}R2OCXB8S@ZJk^"SZǖhM zs2O >[bw)rIFVmY2VƋ5T4ҭ^a!% J%<N9g}5^w #bFЕMH7q#jEz[\~}+޼/ՠ8!c?Ν71*>Ȩ\~EPxbOfJFD],ozu[z |sf#6"g 'j<]*p}k=]{ｎ|-uGvE/ $G5~^;qkpcSz#Xp'҂ /تV'_Þe]KG$9 NMC̓nEv%m(mƕXL:Ƅ͑NQ}*u^:H G؊fŮSS*U_6?:0Y{dˍ3۾" RZOxaA\Fvܫg$Ш(“@cs8{'_{ޝ҇<(L02=)-bK)h6JsX+[m'"Cώ^éͫ pua1 /enA}7, 6+wE}yG)}h6aXۘNJ̯yDպSҠϥ 3W7o۶-LQ* @|a0T E4B,c2mO&sc1c{>8o>o\YzX/Pܒrhwp] *rR'QZy7H {.>̭!vCqCa(2Pj1m$9(RvF_Hw=`sk)=uV>79bl`tn(ۑ!6[ZB0 =st2M3_&:Ti2N, :]Nڹz;_oGk'`2en輹LL--˒4Y+c6Z,e/Z,дrG 8h1uEW eqH#p"3 :57SFz? aAz^Pp@-$R ;쭰qDY{,'Z %exmKW!=fG^n>(1תDK{D@(}6q(='[G+*RvfJb^c47v\f`p+szEb]ޕx6]ܻdѹ0cFX(ώ Ѡc~$K>ךR;˞Rf*9coxg>cm֌,gw3_7>8[W%#H^tLՉ"' Rhc$\Howe1Lf#Y^AVZ j87o8_W?Zt іF:kY1S4HYjO: :=9pkO/qnIqQTY3q'EvÑ9n.~YEM9FRZkLH`}"?r8"!N370i4 bv js2pk&9+{NZF(\} m]j;l,Cg)f=NDn:$P!xl偝#\C.p˫@<Ou^%-+*I̕Aw}gx΄!~rolKK3 ۈҵk. ڒ~ n k5\7yEXQ [O $_<غr"ݸ?zA^nbXLsXﾢ+q( >38*AYnIMSͩ7{yȖ5y869>>͝x\u֦Wj1N&JtLa sFKH@J:o%O@`I :xӥ}bl"q͚^mjntѭ_LhVYwj̊tu9mw.Ө?ďX FZudET* 3MYϫQnt U]ncO"$5+.b[o@M,5FrcciOze2z£I~s~~l:_Fjd9jlL~)!%3TS|皐`O>0zrxZP~OF e ?ve/'U{Rы9Dt =SV݁jJ' l2te =8,-@Oƾ Wp^D+;ٝι`iЧ8G\г&g=ܾ3ی^7>aHZE*`s(N U:7{8p 7k(X?><~ێʶ-& 1j;E 2GeжQ0" }dLඃp{ (9W8ADC- zl҇ʈA`l:G%Hf''@5ncJ^&'hYu9g'i5v=q0U9G0U6$]#| ӓ)[(9d"(tcc+WbI5X>q;&jXX ߚ;Q}9oa-եd|$e.q12%7KA݂ÅjH*zޱW{( )/qЅO o&xJ& JHc6(b zz; ȵJO Z0&*dCXs vc,SxA"ORm0^fn3XICTFsX.`xgc]#zgj69:-׻ln{3$G|Es3#OZQ-OL _/ɤVU*L)\bYG4A:VV٣HJB>EgY4'ϴf[-gܭ1vh0ϨT+6LILd{IZ4@ŴlS Z[ 5景m?[&e}aUo9XcdS=M?,:-*ip^71T_@~eiJx0%y  j "p(OH)UM9d]ߛmT'α5DzAUR/!o? bJi^60|ggooJ<]/.$v(v]Ig `q !y4|fc3  T.323Ņ:W;OHYo8餢q/y(lw]is<fErPk0 /uɺMs&[DI,˽1670{;_j9E\M944v=HL0dtl0BwZg, ݄.+Y-4ؿG("`T+ˍPx>!HC$ZV(3?#BeJ(`QޑG,=2ĵQWJ4:KYPۙl zm&:BY#@Ň*ejQd$  Nۧh )AHDue~v;pzǜ19LϽH'D;9wuOȪ"WrWߝAջ.u3IT0n>F;™I,a{~s0DC&WEJk(Q+Y%5EK <ϭz!/Gm`>.C&FdV-7=c$!o}#" cd Pg)ğӶC ޶!%>z0%1ҟ/ȍf-Cӥ&ʮVwaE(ٙRXR5N5nHOvr']'X|8 !^vb3IIsvO~bR 5X<*P5IIFaBd1uo@o[Fu?Ɯұe =l|㣊SINf"<9;Z<&Zx-hOUiY;6 [.Y[*8// -|*j3 L LiR/t=R0R`<y\pE_#)S)$=޳lv3W;/~HLאȜNhnd\,}D`Ss{/?-AˆE6d,S}BRdIci X 9H#'?j"e͕5Ǝ5ݪ[3KJVɰk2ZОtoc2J_ C|x9+jZgD?B>p< C]wsŖrl?7QRV9f"dhⴵ'{;j4|(פֿ# Z._JZC: Ku*i|ܓwZ]t&^*sBMZI)g}R0uS@Ľ>fpM U9X5C"B kE]FU_7E1দLJDxnmWe j68kPԅHjf-.,Y{nx7cWaD{-oS[J莹 [ Sf06"=# C_knA*CFcJO 5(?T7"0=݉d}\w~kb Pigfo~XcڶS$/g(<ϵoEt`_ 5$NCiaz:y$EDdn%ǽ.xSL_~7mF1B`H_6 3e`cƖPn$. 2+T'(,^5 CnP.1SO}86{)-Opu.5úL1r'd)𵗒W-Ev*ҏ5|ғTѳS/4@8( [מyqˣg[̊WYb&BD$ܑ稈ZmNM3Y-*o%_rH磙 L CZR+<3i X=:= `m ́R{u]N2&`V g\)ȅ7nJf\><U C$9R]LoGmKz$ `9zd+ꈒr@l\JM5i+f r;~XTfA5uڷ$(/4̶ͭv2Z1nj4g P7og v,ѭZ/We =( ^: ,0Ѻ) .bx%/]͵gcR/sn%ֺ {˂L0q*8p_rǰ{R܋ܠ^jkכIR/&ۗ0 Ąn9 ΄ 濝f @wLYۇ ~8v$}֥Bxоl4Jh8[t7EvmM*%VߩYplcq%s6dZI8#LzlOڐ`Obv?l ܊IÈzy/-YsDpGV_0][ʔ:%q;=J3SVox^ǹRI{yzb3㿚R /0K:-qD?5b:InPa.}]{߆4a#"Z`ҲE[w mw!]OƋw;}WGx !fӬI~iQӈC 4ӹ?9ތ@UߩکޣI@H5vyߢ`wok06滛k2xQbviSqw#4l 1|e`(LL( "Yx9c6_::KSzTx:cDL:Ukܸfd~ |Ll=V yEV؀zA0[d*4HoK?:FЗ޽/2¡C,kP+Q߆ΜR814E].(y=PoQKh<4K6H}֒MDZj]`§❡>%sYuB^ lM jHT^ CP~twV-{ǿ|㉲j+m1 .J:i֨(% i}Z0357Bs%qD2KՠbLrnq(!qϜ20' z9?j0Wi2[ӆ7(G_7Ӟ߹zdvXZ{ Y+¯B.`%8sR%q rQ`T$E3 ACn'5iD ngъZyk`!v64uq忠6'[i7/X%(@ǟRT.+[s`Mc/kr#ۨmhUsCXwɰ[ mo^d_T-]c\#1ݫaˆ;^X Ωw5s)νvkxk&4+U"w n{F9FPYV^PE "dkEIȽ$#ҫhC;#I,"dvm/L=x[r9P}\n]޴n4.趨g\+rN5qo4|BILb7Hv}d}2ŌX‰F#:Qj!n12JXwQB0Vl^l$/ysIx | D\'&~xXm=O{({e1WX찵cZ)CA%__G[hv Gwn||.8F_4C󾽅 <fiy BQ7ƿAֆ5q޴'gc'l*YӬP5'緵za #Q[~SE3D6Obbr`큇(L\OX޽4VXv2#G%S ?qw= xzuU(}xl~6w?ZF6n>*&X F?\9c}aKbKA#*{BOߛfeQYch%ĺ/9Aq(^bm?+e" sSyt1.YH*yۥN==xn@8}L<yI5j)=)9z?nYQ۝vBP;"UqdmvԥxWSFTTS]e)E@[n={mڞ^ݸUdZ˲"B*2x&zp*ޢwJω,AM!lb&@y,f[ÑQ_@x^<h:yoж{4{Ej(K{z\\hϹS=1Sa慁6}-c oZuQQ ul > c5Hl8 A=[ye |xy)4{Ɏ5]4CEdYz}˾ rw(2Zk<"篂VER1/`Ϊ(Ft(8o#s_EjҜy5hAg$,u~Tn3$u"<uNi/?#?-<<Ԗk6<*xh&Ps  ݩr3"atAH9E5)ߥt𖽁IFOW%t>"Ds]$/ o3cﱖG f! { S\S,&qU*Rde2>lFR_T8Z[q&nG,mxi-4yM%kjm̕FADK=I #W@!]z7wt~$sI,}ؾGRDIg֝Y.FXHbP tlŠ!mI|"bGyNðUŗ%Sl-R@֘} ҵ7$VԶ8[poU@ -Br(;ظ;= T$I N4E1I綌YAdLwn4@\r0>d(G,'7+^(?"!Ɩ]O\r (Œ*i "71xzrK:1OFs\Q KG;W- /zzś%H;hG'ho  4y=X̱NKT1vqgLer#)eH̞v%tvptv[rT0Bl=APwCSt=iv6?;x)A-Z0k-adR֪/v| lj }V9Q\|n i\:D|ѥfFI'0U<Ew:ݣca {p2z$1չdy$\zd݂͒#GƜkc3|-\ -T#q X@:y&2o%YkBdhiA}0IHDD·jz,| $-/E~}(-_֔N)-F;63H`hunb["!*qrmUAA3AGf0YA?t.3P˫c]WE8"UM%nZ$+U` k͝3nT%S8}p>u`t_5Pف:0'Y$b"#hW$b8A"9Cval@ bq?LШ83T-lwPHna ԃI$po&duE!lEV6e(KK$?A7͙ g|^= ^?u>ѓ] qԙ୴#`*yAlkzwl)Yj>+A/#voń ίwq< SHRa:$XB18SI\y|H+MBDr:vQafm[Uk~mm? Si8DhD5oyi6e{].uT]A`G5D,ډp(' ha?X~dF\'"̊Xc0K_i/s_(4DD鷀%C 8,p-iDs߹Є!X}Lh4zJBJZh]&9{yW8DMy7EGk<%=iu9/D0bx0 p+~u-2Fs"<ʸР n;L]V( gpa=c,yt:L}'<.QQU/g!zC>a.z+#n.`IQ(I{p>Xe1#P\G p"^c1 9N*X+?2XR q]n/6k?+~H@QB;ҚS1[Qԏ)p4w[rH]qesr$o hMrClԘZ]&8Bժo{2攲3.{B/9uvub;6|^Ax8ICq01u# <J_҅ { %X|=Ҍ8{M\d N5_ءOhQ=衱.nKטδDQ_j Ǔq\3Z'Jz50'N܁6f* vcd>ҥ}\CkP",Ȟߐ@WOЖkR4郙:yIMG%M$;R3 '-ALjU|W}aIP.4 \%⢆x> ;!_X^8y3QA"MMު#)ҥC̒} Ϥ7f70&\b-E,hHcGvz(;gQ2ctGCuhC2@K%j:+K,qZQM-t V-GyTۧE,J[:}6 I 2 L$b[B h6 `?W}5 .HE|b綘;\/kq±>R~QpL _udԴ8s; bؔlfm Ii.!bvB`f0:CQA!P61f}P^&I>DMS#JF'VwƉ;uO9~t^9mKU&ɭZ/Vc]׽[a!1 ]S9ѮJBQbǮ^M{c%vؙq""h*Tō.;H@&*QBG.Yn K;1#tW㢶3=HҗFQ#H Zh@>'@A_mqλ GgS/8v9deYtCA-Oj \/ub! outEQ{qULrϼD;.)H#dD",H :C ˤ" /)Np/nKç ́_ !;t,6<Ŕކ.*0!it06C%x-+ͽe`DEſD@{L/e^ FNkF~R7tw S pv8v A,D(6J.-`4~0*FO@#֣ 9̗ p\oy)H1+Q&$*{:CE~L!"j I)|~u֎I~TEA}Iwǧ ;jC⺜}۹3+ž}%g@Z1ne lB,Ao]Y}>ZlŽMPWz֋8\ٰCKfZins\X܅dB+iL< rϹBdxQ>/Ԧ3G $HU>lc-29wkJU⽟}̒uͻ3}nYBS3 VNuL7 h_{4^Tw?8<j!W(4ԳMqe RAgۖ݅SAgVO5M,Ŋ:7D;5Ί#B3YrNA(w#ߢ1dƹ,kOͯ: %[!ե"C/ )`,' })G^e]Ա||IqoƟS=s%.Kf8.ŝliQQ= '#w#Eb4!ZaUjii&;* EH2ҩ4 Gs4G(AJK6zAgyӇ ɀu3-Gw9o~v>By>R8&}R\3N(]$EkĻ=M `XUD^C..[iby|hD7 rS>#XS Yi!+zur3tLw8 1W,IU Ը2k-E?]][oyGDQ<.@+OŃ pCnbWT%LVYwg4 i/6ܐa]=-A˓92i vWUYk)8whj׀{yJSV-"2o3gY-U 1bbtXG=1Q0!Q6" :^V=Kgc@0K$ʶxu "r It8)S+F!lNU*IapglGv8&# 3y HY΄MXx2GEz8"D@ ~Jk4U$gDbU9/@%u b~&F(H6s&/<=ml9M |dpqN]0sERN|PK%,]x*<-"a_A)J ֨[" .$ƀH9PǾ'?YވZ,'ZM[Hbǖ#p>ړ)^%}d\I)y- 7StXb 'yw.K YtHj=(f_tԂLAϓtc X91]`e+ӽ>$ߤ{ HHf/I5f~xjɱr ^^.aBOWVRYBAijM0W(et?e˺(__R'r; Rؐ6!^z5mXAs;ZVtu֕ݝ W(2\e`lE ((\1Ɵ  *f'f9n?a']Mn $;6n˰MLCY6;QN5E#*Pe)!G0&D#ʰ2r߈AKR:cYY%}seke Ph{A\ u*Ô0 ΍F:W~9vuV:(Ayfgamxbl4W8 qmq[W3Rdy Sw zlj@'=R)5eg/ي1;Qz%s%ɀ/J7I,|fQ<0Bi>"*_#H/OU4ژZ ?FqQ_Y8!L |6~{ܻmҼ^B "+rڜdT#xAb֛.Rv}Ɲg€im@ %2Kuﲧ"2m(b'SNS="_P 5 ɑ<]`xcB^c|vt_ RVH/08†KCL  "Ý#~\8DPƅ$s\ܔ.bNkz4 لHM5圕]C 3"]c4iңɥn\Ue~dm"0ECg*g!~mJCL8Q B+[B R1/i<Rl5SSN2&{BYy`5QWAkmLĽa 9~ZY)V!}K,XǹC}_SM] )*&](= iL1z)i]b8])js7i'TP]wge26' (7^pPЋ001BSB,{F |n % CZ!=m<ԧ*6 / AsL:,` i$4 2?R*WJr*N׽L ~Rݻ`ݱ” noHֈՇl2+Vٶ:ҰHxcA4џD +^Ky/ґsHPpdH40,,8ʑ lQWN_Pvwf.ܐF6~J}k3Fz5_Z؏y&`m^N꠼_궰i[ v>-D@_ H)THz?؃naQ8R=/[z2g^r 4'2Z)MF^%Ox ^?].@}Y nW>9([*pma2L*t_/Vicɏ+( ]] 8L+bk*.Hܷ:OyQn/d7>Ds5IҐ =Ѱ#6 ]y_AبZcqd,Xg%D=`E1Pp  9 Roej6`p$;zxH;!}*Ch'l[ρ SxZc!.3JoW4&0h J0C[q+|JͲ/жY?\D`9  M~F !!\ 8R]C!֬TyBZ.;bPHu'Է<)*hT&\ϴHjxe\|ÿS9s YӏU ?"+FXK'vJygBmi/ݫYB33u\\B!Ɵ&?\׆Xa[R8OKg&ftetmn]7^ ;o8p=I92;'︽~V.D劉Q.83yT_r\P0uvG1'}rVd8;wn82gUT3umiD7 pX3TU%ŭbbmlE"_nVL)_ |XnJE#NGh|!m65~MdmH  g)Г8t!k0E AX#nXAzqT?$j|b8rU+Wsv jWF!Y?_b571ʮ5zRl f=j^EiG:%R6&"5p |#cEl=W pRvT,r8R(ѝ=IR/ūJMG[(]l &KYCcߗ!QOlnu/$~KDQC!iWgWD{ij& Q*tlχ Gÿk[ 0R;2P$'R틝hP ә6Q*%+c8>e(\P.G$!)aO~DOF`9]5q.vo,nń Ȯ?,@$@)XF6MTDzͫ%o؇m*MN{ /M(Zxc@|F8Jm* .PH`%KB QjdhY3c0@ ; ;1'΃4ɞv'2w+>V4n(7UF|#R2EnKC'GT~J;ioq1W r->8)ci:6TDBE4`+f4V^˗.wqSIgƪG .ZuKjci;*"Ax,.@p _3H9k=qix[96/)XnD aܴ!5%:njA:U΀0F%Fv!%~A/ojL{!lh|Δz9KRjׯhquJ!(%)sol&WYϡZW&iMZ*Jݐ`@GڳxY(kaTz$]w5{O.Wt8 F$=Ur6m*gLu4 ټkSŕSAzNZW>@#" Ry{GMjrnkR<,JT` R\qÖ塵{41 Ԇ!4C(4 G]y W>|qY pl[s>6%@޻̬5RhoV?I^oYjN6L3ξsr*uxiu-O[ ^= 1᠚nR7b^rp=ln7FZ qX[3gu],d,Q'1uQUP>ڗɀ3%6Xژ5࿁(, QKgk pe+0xȦ\`SUhǛfbUoAU XlY!=J̞{̽%uYYW䛙Z=lhǪC}6^= &U'E<| VuiP# ,eRh)u8&i׵u;~a^rߠwe ȧdF/ϛЁ`'%a>Tn!L"^)<́ tk0VG kL1h]=}SUZӫsnּ=\Οu5a gnWg'瑎]qY6[^9ӫ?pS!*>)=mCoagT; u{Ћ9Ь2ykя\]m@Gx$yy.LGD~w͊KPݐ_^/O *] E|4Wy|yGu.6/T&0 o.'fP)(ƒέKFEU,$Ǝ>XYkk-9'_bX?"Ra[XGu-ov!e5"\Áݪ7biAa~|&&,wmEl¨x@d/,d]Vntm%y;=onh(,F~p7zԾȕZuh֣/գݱ' -%K o\{a6d`8*Ч%VpE1Yjw<[FIr%SZTj50 2gNj i;>cӓB^0j0bMTnȦjwRJDy?5_#˕*`g0N邔%D/v\5rvok  @9D\%,~z#bxsYZչ6k{‹Q}&:1JV/aEw?},u֠J0fp C"֮iA G!(1S>Y)-y."6*rq3eE)wew79?~V|{:RnC:hƴ0a,(N,[/pFN:zYm|e"ܯ+[ojjS^&!Z3d$n_M~ ?΀E$wOnڹ2R n0Ǟw$Px5 lD M)kggp͠mgƯRgqAЉx`04-NyT;ev&`  "e#c0*duRpʋ.gpP$xN/!-:p@ лjZ]_rQ:*I/NϡtJz #Ç͘:tj.3"N/]H Vm7Y]g63c1Z$KI.շK!42 rGT~|^ЀpK;K#oUXj'9-0 >X-Bp}&Oc,GϐG XYRw4=p? "B~3ة]; nLEY{ӵgfG7K!5Zǵ5څd6nn6Km. $\r rk?x8D`+~9GH (foTgT e0q~sjc3`# CKǨ_H{x"|sP0Svyr)M3zx<iN}Ų' #L³␌E7gf:1 ',Q{f:idY͵j;gWrFH?EC(yhIT{63 }vw5n"5Nq5ݢ[Hl#TFl%gn`+|GaMhigVl \jk=*=oir{WIMVW``UAkD砼zakm8&HX }_WmmN> !()M8qɀ '󕓙'&(҉ мt S5<٭̜ڀFըjj1ǩ3i[%*6>PzD:-Ǩ}ՒM#4~/!c(EvKn [⟻BLjJq \V2imZg$sG"jlu*o8) ussL>ekb5!ҿD(3r9]݋|1&j'CKDgD7[m[x즉?0l['18WBfBq b6 N~JkYXh] M24<緐3x@P/í_ƞQ*{5:ZI PYp'H5kC.hbgv*݁[d%|`M? 7vm%S s>QnP˭xuʱF\/x>ð@RZpgs56#Ů+ʠ g͆Feqm3oN؅( j_\_l64 X{O>vUruaV?*MYjIW[eC9}Ƥac_,%ѕelٌ=\7r3 u*~47} # |hs5L ڃ#a ,V!QAXk% MR<j680J7 U3SŽ~<>lH6 ˦Hx.{/ِf]Ihb^~~{ňfNvɪϸ ʺ'}@(; Gk.K0aLϺn)&-͂9%=kcΖ}Eĺg";m OlПP1JzlmR!=7O0ޕz^|n="fPˈVp5Ҟ]~9!Lay!t ؒt۠Np*(&:\aʫ84?]f. Ax,jEtoLf3k9+G@C-v[g).qJK0M.`H*I4Zڕڪrd?рi";TʵHՖ$ShGQMy*0X,ķ}HO|_1M BwSagoݪWOz/#N|0m &%ZypOʥ.7(ƮiqbD 1 .IcX:0 zDIGՙ Gw̟7]^B5=wyC"yO.n4r ;rmZJD>;Pb]x4QYgF&FJXd='M@U/ @ Λqa{q#i|ln "͌taO" r%K-\z{}ߡ#.ƶRVy62NqVkD[18H^~gHz=eN%&ĸAk=F,j:JMvNł2p,ezZm{bTB-.O1 FRoA1H/`C3<5toL܊46v*jD"uq&UISbZW2:jaE[*T eث+8("Q\h +._v7t+@2F@+sU1VY>GK^\U' >8N>"$%A a+I>Ϋ\;lhz r _&&[^/=׺cC1>GڝBLv lBG0ww;שn?m؍wK˓f"6G Fbٱܡe쇺Q$34\V^9O_[t]ّtAp8"=7\6e;`գ8ZhMË=gUt(BM\\ waQ(kݡþ@h̛gI5 W{ᔀa3U`U%O1M#Bwtf_FG X_GkV?,1 8La@R/VSY`jC@i B \cq v\)uȓ9ac\5U処7!Aӭ* ;y97; {IQRP\1k=q>̕yne2:Ȟ|Iz9;uk>u60s,樞,#[i2>‚C2D}$0Tr͌Ⱦnn/SlW1(x_6~M63m*C'v7f0;Bj$,_6 `Hko(kxmSY40[P.nEK!fܐp1L^;9ȪX/Fɧ9e,e,|œ_{#+.3ɛT|nJ3X۾\vv:l2tvʫ`ZDB̃4j  E׳x=h~508Dpo>9h`uB #I'DI_;ra @T=48O^r2l}#hVlN~iYLGi?P_ [\$5]ԡOXRypLt8o7:1MhaG03i\|hE@'ӘF(6?p*uQW5M֔gJ8Wsbrɡ MiE1"aI @ki=1fɓV;j*Q 9SX 8gކ6 pG%77_4Dc[II5^+l*X*S"hH }kah X'IaNI$qOUE9ʨ1͈xuճmHHdUUqƱ_QҌ0YpO7V:f}rj*1ܼWZ g٥*ڇs5Ѹ|Dh\N7)\ۆ(-4o $\W&~XhFL줂@ZM Che4dB5GC fzOMha+F!q8Udpm1㸀q9oC=Xi<?T+QCqZ:2( Co /t8qx0M7 &F|g(tǦp;kXx @=T~Y]lRV&iUStݙUCMj?Iݮ%}2g\G$qɦk6P8 ZA5΍Z!/!$OtcU[&DnN|z yDn:K:ؠ4oynĚ[G*Fٯ}-Y{>#@ESn:زغnLg\EM(W޽,%`iH~asɷ8PJt֫7BPTF?$wC?11ɵ"/[t@҃VbF._cpсS7Ud \ Kss?Lx[J>"mAI?(H yl7@y/ZdӒ0#Tk SBtsqubik#hB}˃5╿.7͜&3AHvE`Nͧ7IGSp,u;qFhQC+jz*_,?FQ4քȭ-jBhbQO 2Kpu\LQ hEyTX2`Z>mRV IDŽJm c2t hH H1LmnR`WEGeçիjs > gP١9u6y45L{QucWr3'|X0(hbbk]*hF4xL{`tN꾫#ܽh[TV{۩1]3G;߳[HXo,4tLʵ&pUe; !tP DouZw: `DW2MZIѴ8ȖJCf5ALjlۦ;V9Hˢ71:$7/57<+"SU壶@V/>e\0Dr| \j\36HۦĖؗ2v*7cǛp0ѯem+9ծEG={#' %w1fh65V t/\yᵑ F\ĜCnusd \hx>4X[@"KԊ ׭_?ɻkUgŸsuk5+8𝥑x]q={Z[[woLe垚^ mJ+SX!éL`S &,C?_ߗodў-4.dCWF^cf6%~@e ⵟ+=Q2BU)Sq(i@Bov,C8H?&Pi}At %\~?ำtͭɯnɯfG, vǏYS!jeCyqgxO-^CAʽ#&㴭?U|Nﺮ4w,ȀJfHuª! ́<_uzIed lp'kuQO2+ /h3}Mmt,-hY|K)V '@ĸ0lv/ݏZ>xYfuHk>'Ǖ7>] yHRR\[4`-Y!H7U!=Jt[0ov~-|kݼ]*Y`u`s7ʯ޹~lׇ96-&,hy<=M$9t&Hm ޔE ^~E@Qe&5UK\li8`;W߻`;W['{ja¡t{9J<`'mI[}-CNù( SNZ'YEm_)Ws 5d w} XSvlpڥm/t>+P}mZi#|(.j` buD70ަ6) B.{jȾ @.˞:uR"| 0<ЕX$-5ԋM#<=4CKOVNOA ]߱>|Oz/- Ip|+ռH1@Q Z*;=ES bWle:xYli ]!=M7D])Zwh~[4( :1&3mgQ) &l`l*OMs0ʹ)9|=w%߫6Tگ4e.qbeBh92pp>PIvzzJDǵ[ϸc2"9U(ǕM #!jP%rc&e2`u$m֨ƲqlAwsJ9svNqH<ԉ~M=6j`hH# S}{xP[M0Qw."XQLH#lP~!d L5y6V7Jc^T/e](U螿)qNSj0RV*XɭʗKf 9,7qJT -dRړNhS!je?z|u,j`?mY{9h v}/xr^5$kR^!X|OuDP'վVW;o6kXul3޳Y 9@ෆ2Di(T3F]/av;seMN͆ycFi=%_rd_܉0;濔gku?G3{J?rVlNu粄WmgEo5ŔճѬT"q꙲?RFEAǝ>$YD!;pgSsƾ{ ߱T(aYhJ$xbM0){KwR#t,hc6*k_'(x!V8QzJfit1z25Vt5d\9C?6j,O˕!8ʼn"9W'źPzΘeh_45LvϧBqZV;x08lM t$ QvZ KMߜ7L6Q3Tla+Ccvd9-i b3} nTF? p1&mTH{K}d.Rxc5-(-$ƕ! Ak_dցdMRZmr?qRd;PFbfҐS>zcJM'ghK[cЎsFNˢB DuV0鄋Rf~ՁjW12 'l ≷k$e~? ,2gФ*,tU_hh4V g5<2\ѷU$) lx^| صRl302ra q[b:r4LSI)Z,D++@vRxuXoRL CP83/ IJ3]s"4RX, m3>n>NAb׭h J0ȠVf5,q)Od2gD7YS B/a*]㋿[7lc83 PtHhƔ q(I@2d?/O帎es-|qHmjaCӴbLc>zj߉_„{F+E,s\}uwH?wg2YQH]ia:G֭E[}t/uwȧP.g! 6!KK$ׂWD^:5p}˅2cZW%*D@m!>bkj~,Cfx<.ﮍsc..0GC,`}-w\O"IƗ(X]i 66^M5 !%B̢8yeXv6݌YѼ xFFƺN∤B:i:cѧ/ i? Ң`+]xCzJ˱Lu Zߏvx ߨD==c6ىcIJ0SVmz_1.z}lmj<#vjr_)ꗷEl@vѬ>%-  _98NC?(>r>E!réṠI[{QnJŶ ׬Cei;*ER.2L6XE\n!G8Gl '~:+Jے>C"خ>!?25H.:# #KUWLZl҆V֢aR21jS [˙ԑ%2E$SeK _TO#wEZFLV |l=mǍ"p BxŶڣxmW&@r1?I3|OKGuU! yq{(G&(̇v. et?q>\/\ h mMB\ͣaY/`dfA? Kner=bNߠ0Mi5 1rb@]zF[lPd$~|Yo3(IJ+ c[%?yWgyxLz>ˢQ#l%?4;#EOuEե %VЯ("R㔎hepՕ|X0=51)]+2^/GlFc(]w֊|pGa͜.I6xP+á篿~ShS1&&nןBٌ5 ;r\%8\(#4dC#[*WJJh;-Ʋ0ãMG!XJ w+G2 s^?!Avީ H|AXr_# pi ׋']Is=,Xi dGQfuLwޱVs`b\Yt&r9uLϔg+Smablb9󹬰O~t\>9 'v__9&P%?^1V[%mjYfGa5N LhCt(_y͇9}zO#,bɚKg)zy:1Z}l{.rZ<3`w-; fz\a Ɔ@.q%,UMn RF?>4.D7ا&ɘ_i&K3rp*]V3R<wK8ĨTHIM:#"NzYV+wdprQnAm\k'=+3{+8=Uk"gg ;ɜu\_ C|nN7KYTz|,"Oz+lketh\ܭ$/huދjGXƬB&QGX=*&0ymϥ۫o n RL+=$lkCt8/Q)מ O[HH$Y[cCġrKJMBۧx\?~cW`4/ɅEVΜQ k$c}NT!bJؿOV!64F+)`)c<K1bk6+^Q<-4oBf{佤Q *kqC؞8ȯ )ɓ߂FjKGUvխ;["<jQA& m3_kVE<|*B]p9r^)Vc+GO-E~efk,7ڧb5 .[#An W-N(Xq7#}fR' }~)"uWǟ Ųc+ WBI"PCOn\ rr_DҁGYVKTb `<ƿR%T{CQ[/!jeɣX9L$A1F"kJum%~RI юW=:]Jf=CPNϧ&dYR麟 =j_B//VkRHBΛIDHL7Ro@Q%|QrQء! #,KP`+hWs\6:wm59o*Nl.nqX8jeR%u c2p]/`ytUoIf\ c9RE+pN9gY<Ϛ"Aұn ًw0QK1Т6TFJ5t#}lŽ=R ˎNƳtk(WG4IK >:SPҴvBqp3<.QYo|\qEwn.elܮN2Gh!(n| 6VXl*sXCMӢJz cX  &0P{/0Zud{mGYFC%ŕ<Jd^5fnMV#4h^߼5<@Ap!"|TUG+[^}s:qxhv`ݣYRi82 k+IHU@KbY<:t8?s|Y?597ȝ3ߠI]AZwި'F`KHO8:]ϦZ ʍȣ] ]82y_<E[51 RoQ9͙'ChLD}V *)q A+x`>/`t؞Ů5م$ͺ|䤯j髹gsr#uGb1P*5#TGٔ(|+/ -B^aK>GTq,59~UE%[[&9C5vV̠!'ZG䒢$8%hmopCٍg#NBd% i]% N}CE8zVm~/lílR9 b D1&wnC5"k(^1/we?5 D\`.kx#:(co՘0+XθNB[S$|ˠ:_OV·p@q'jiaƚWN"+Q2ɳ}i~GLgeK ej0PQ:M58ם[YT\J[mIQw&5H,ypxI#GB—ks`bw(|~1_abRH;n4M7^U'_yǘˢOdD~"U+)$ôUR=٭f1Skr 1w~&#QFmzv%=(}v៞e,ɩU\z]XK@ b&s2t[ p4 |O:UC2:df;h@&)5+~hˡlERD AE~Vglګom2[X*6(C*UUWe[[z%,RU(][@j<_՗{> q@?Ӊ1?Av_55f`Ja>p'ЯxYw0wR)ƫ^j!,vԺh~d6Ҧwx?72!]U9dҴc$~!6;wi6Ȗ6'ی3 &cǏhQ+8͉h֦1ATrZ } `>#āR l򸉻t"Vbnԉ}fȡ6fMYwDҫusF}_xQ\Ö[p,#b y9IaK\B{2 [˿eQXGO_(C[T72` O݃ } Xs-8rۺX{+9^fd)qJƥIHm_1Tx3{Й 2PȥmrV>/qfa%Eu9&'~%(B5G6>ζؕ5dfI^CNFxy؂Zij}ۭ*(Zꄼ؆Qjz'9KLD‹{&iOFB~F'LMn.c4(: TU&~b PR&{ CmzGKMUiL6A(ͬcX=75h} mw3j0U}CRwvt~w iB i/B^;%OG]ǣjC=53e`UkѧsCOl@mqHhd܆0/,)Gųs ϬD#5þ;hF갼a ~,-t^d"C5tĹM951]|vv"@SwT-} "3ժK( 0 HD /uE }k$u&SѺvc?txdMV*twP׶yvjDͱ+ PȖkMn۽eO]8nxaP6f+vn,zFk4*Wsm{7+ {;@ѐf4w2=m#c;d3KW#gFd8R0+HvK݊&lpy i?6^Y#pO:  DQ)QFzg;JS0XXJgGxJ;'z)r˵3VݫӒ&Pʄ@^{xL13p7ܺDA 4Vΰֺ%MPQWGjrqGj{B;Cݢ*,zxvMGe(+xr~ͽI UH6-Hs*(6'PZ S>3i;ዴ].6S"X9eC叺WSQm˃3@y- HxjWy^οCz(!8Na L~KV˿i$qp)]tU3E..2).4p 3IeYau{uH"$<lXG=Q~60 Ʉ>Ÿo*4\ J+_; #P(-cD"8r"\/{%y)1=dy/ m |oehj8e<ëRNS[1pbѫ0ܑcR։7`]A#ά`_rb&'aBKZ.1̅Zt*z}8q;H QvVKFb2^ܼn>^ pWxCz nrxDc։#%Eg[gy]YljjvIo Ol!sZdֲG\vу>.,pؓJo3 7{L9x>7H}bF9a 6.:7O/`Y-L6~{~we 㑇/ KL+Wx<9 Y̮w$"E: Oe70#q"}x뷱yDs|^_ Y["3InAn1 F"dŒfj!|DroX%f,)Ff>酎&Exn;Ӡz+ڼWdNffu+kyԃdAPsLx@Ct:D>rNZ# XIg<<]kBXOHD5;_;4kԇf'@H շÂT0'?Ľm"9 hR#1#NFņB}l\ 9?ZP`]ٱ:u@47 KI:ͩ)XERD֬‹dwPVOfOٿ;rZŨ!I&xЇ0 ,'ZAr!m.:P7|q1a\1*rb۶z΢y./!¯݀J~: W Ub)JL.҄%h ~Yn7֕.?Ɨޞɿ:䰑 |< _xt,_h8aӀ p+Wg {|naE$rCS]ʞLvhX=_p`'[+;ɒ&$|8hkq+сer\TVC9q/tCwӕؑ8/q|!+JU_ir ͨbbCRi;5⾈i,I;WC8#RcU{I'i$6iRxܨ@x]mFĭqĪ4`–W|EBeKc<'K׈Jn-b'/tB*e@ :O_;dxSEtF%9}@{lj*P^ōL:zBo &{O=GꌁVfZI5 Yn5 Zw&k9"H=E.@E#^ `D|.|~C)`q{F{mMK@:T@Ͱ';eon)x;&NH9!38=d 0U^4}`ol3x74 ,*:e$OEMAɏUӕ z4Rie#~[,yV%4uQW{Q8ޟPy SU~ o4vw(!o=+@T$ M"g]+$9'hz[[L,V޵I'h dQĮ\5Z{'!$@o .Ks3Dvtk1=ciA=]ȱ͌B>r. M/ssz]DH #Ǐ@ҬK4>pxBM9^MtǪ|[KTbqT]Q}{ˈ0 M4U7-+nM]>c,wR- 21ۆl|DA\^^eϪf#j+1ޑ#\rb ִ9/{Px)dl@1#MO1c'gC&Ӈ#ji Ge-߃.708ԘXYh#E%/;3|GI7u(ߺ] wtl(KrHpOI7e1*GusADSl*U'.wDy 9Փ! E 0vT08R ׎jbeV hK F#P,t˭Y 8CS41{ eUoiiဿ43C. [ns$[Ft sUEUh=BL p߱me{1:s|=Kⴑh9K(_6.1P/ DA?m^[+8hwg(֨Eɡͭ:.zLrb="98 JG}xI>{&e,պz:w%[ϊ,+Ϋ[[-(ȏ\'t'ikӣT+c]*z+F@cJ?"66bl5ڜ Oc[h؝T:Lp j=״SO3?vڪINxmq|h̖}/GZ.ZI+^ ՜K}5*nY4ۉq'`$/}؄MRu2"𧲘.J7~=>EGǒ1t@1Z[)kY}q<+n+]h#2 Hg6A+SK!h6lqήYc 4Xy^"Q2yĚYaeWHw[n>|VԾhI &JMϒy*'g<46j(Nl&(YӐn>)vе ":-LMJ٣eC Oޟi7+{%; 4{CK_2qXF7 ,:=JuomJl\}$o(HC;-PpL$w(cu47gӕ#Ů]wӁ׿#|_&Gp}n7?jK;_[V5=:pj^NY}O}>A=^Ew(kv!G[v[;K$_ RaR4B4<TLeRjݪ5&f nN~BZm\ڳQCl$i|攰!4c&y7{ f-D ֜xץ"/ e\:=p1J*&zZqށIgET|V&qwc8ہҴ"3w4T]%@Q à^/]MǺߐ[3?A|v{}7<7AIdKaiUЅ(mm$٬Ԧ"2wۡ}%&՟ ؄k4֘ kvO/NJ3@a#8(#]ȥ;E^C2WߌA"=ZYn22I*KLBJ t9Np|-HjێdUiSv7yUTmtZ] #u7l@9>oxjS[c,"~!)xҰ5>gqCةT祋ت4&NQAe(hZ ;hqƺu{U `EY؎Dl`H7!<K**7ڄw<^g^΃=-gڤ6&6/+:_!f3bh{*/뙘M½RmT?o( n7.cA rќ.&2p~Stfr*ܡ'6in̝rLTZc2g;f.llӫҙ]sʯ*ռ9^(˴GatE':un GEzvj01AxPI%R.dI`)hNL i̖3rw<Ա) p]ީ/7 {gjw_(YTlFk*ܲ$XeI-!rI*rlLc+ zȖGJ Xj~AxL@/^Jui5Q׶ e*V⩾W 80' ϒI˶A@$ň =8qSE$ 3#r!'PZA!1lRY٢㿺]'K%[kz˲vax,S`.a̯E(^7 D#ܵe!-])»Vsјvn!AgqX@çe'G9zAn:b^is99ZU}5w O+uA-A碕tieClR%1-Q#QsS6dcخªK&e1aiwYǎN&j$ߟˮ9XiHeahaJFނ-[[3)qUǴh2φ&b: Y?#ky]s s:Lfe >:?R1)kmf-$Q͏Me^* %UR4+iLYKG#A9@ȨLrJu6}}fxGc;C᫩`C6;UF_̄8Alg [gC5LCT'!4dFLr&ݾ.[&C)ǎ d3am(dpDD>nb3c욬?3[X$tV4/ϙ3uMB]@2Q-CY%ɨ׈vN7z RGy}IHT0C2Scby#FZuF: QQ^*>ei ^BC+fz1<WF߶8/Turtdc54tĈFpr6 W2Aʯre_Bd0ݘ*$OU#Nfu2uNsT|G((6ɳ8ܤQ"lqğnJtsD%{4!+#hZgV߱9O 4)Ϯ3BU(JH=G""/4]G4RJw홐1L=Sr+5RCY$`1E*5ܫpH/$I׆]T׋s!y~0J3R*l\ـgYނC-'YƗGpHX;&7Y۾sQdi`V%%W0("Zq [pG⴯jZL&GOЏOXf[=T.0ç;u{ j؏*_;5ء|$8D_G[1.7Xp90E|~\J Cr_>x<澲f6&Ԉ`x=}<Xl8?ٌ\|"wx*B޾fQ h}K 8ٲ$uL8+7W,jQ0`t/QJQ{Ϣ+ѵ:/O~6YmWu6>ρ7p.eYYݥ j1@9"$E Ak~``0<_y,C0PzcZ{Пw!ScP`MvJв ãF;#w LU:[ҏDm/@ ,tS^'wͶ&kI]Mvl=4$bԇMv{@]KJUCshva/eTT]q+EJ3o BMt(MKzoM3nXNyY8E]韷bN=v~=TIJ>t9x3w>eB`)Mj[6$%P'٬rC&TsStP8CtPagI `2lC.vn@WHn>,v3AQxYrQCnw!, L"[3@;U6s,Az6u;a4am(Yf/rU@?: 1fU#?IX>MtOB폶E; H,CH :)-(D*UdgdM |;usCdt_ Dšd,pvgGnV %wlswRסTAbNW19ɻQPN? lV T\R0ސK_lMKrzi.2nT8 I;b3M =DX ܇g?},0/m]v:Vk"L`QY^ëNU1 aM#rCl7MƳM5ayC)5-C* |-,^DZ{l &\A=􅫩=;ܽ)跀%W#8Y(`χ+/z1YϷ"a`Ɩ+iyw-b]c& X$qzQť SQ}6`Hs &xtMc5YU9ʍɅ c'.!vU~BW4+j6vџ!0Ԇ,N ie@ Hu?.(gXKfnz_#?o2oD|ESw6OiiS0C;}|~0U A%a~ZW1n*ks:J FЊY"QjG$1G@TՊd˛?9ZLk ѯky $ d8>(VO%3rQ m-BMZHRbDp 6\R0ʚv\[/խ Hdm*\ n}~$_9[ +1>?ѭ4EA{0GMzV&͂ąj`E aE w:rNagMˠ4PRyTKtcetL|1vu%xlA&9,!A.縀$|Ot tdv2 VL&[,WcNmEvˤم(g.`vɌ;?z*FȀz"bjc{^aWд k7 C`M߼Y(+ ިsAO@D̲B$W"'#Eu2#+ɖÉ+X;śd>qA\ m5(iٗC]c: &곻 7w*ؾ{ _Q=w(&C d(МM9RޮCiEVm\з)~`؄xY{w0=2sfsL.[1=49P)IQEQ\ۭ`N7ӈs~C]痾YJm*Mb & 9xF0TJ">pڐ',i!lZ"ÈA~=GvL>a,k-%ENg @VLL{y|9Mt:did0J9ݧvߝ0HiB+8%ž9Pk T 6'\#Î9MJ8N (ѢqG!UYٚ 㻨;L%mT»p, C6sR4x'ǡYЁ]XQI?| tx-1Qa*ޚNi.i/nׅmBXM\ 5/ǶmP *?Rn |ɂl)v5Q3ߜ(rdBy1J)_y_5s$șeTڞsOe=".v[>y!`h+;:4y-@ske;;v Ӑ-3r̀>*olՏszE9?Hȟ[EiC}S y.[V{&cE$6y]aR8_-x/PSzBX*$#3똙bQm[9/%A3Vk;Ъ>O=wK`T7.88;DӻL'DN 8<:(ikB]74R%)r +6I[#,S kC8smK ƝktӴsUJ,8ϽYI-f57).+_S.=V-d% Ԫ9CȻP^&q7csDUhBk >ݹ5X"_GE1ΨtB >h!>9hP4 LL:2A 1ගyqx3J}ge'z^. Ǐ) %۱~rtSFwvفz Uc߱Vb;ĮW]cJ(Bۅc2n: *hom`,Mby- ^f&+3nN X[ e(ߚΛ5ڈBK.Ͻv%r`ّv\KپR!_>q)P^gZ :r9ʄ/e:,#^d3cvB(㼈#\esfI+~Zi2iQ@?⢓7#ɜnTʚ9;|9rf;UF ݧA}>,+DJĥ,XD ж>kS߯um\hH]dN1F=FPU ȟck7WT7Cf`3}GY].I2mNj/c*᎝54+&yXfn.0VQ!㑘 jpZP"̵-ptt9.1<.~n)A(hAHQ#D~pGBniʞI KEـF&r}F- `=7P` _=y]!GKޚo8f`,ڥ,rR)=؇<\,ٛĕ_պS$ hOtz}_N<*=Cc3!jd.BgRYC-?\dԌW跩$[5eYݣ_dJ=ZKS 1[?,wWh0lCwwDL"I@L*j5ߨExJړPg[O@9R+VL7zLBA ^ VeF-aч"YۻWt 3WDMqDPbX .P}8HU ZPW%`Ʈiia\I_/Aa۲y_"#G67"ݸyHj'$8gUx im Gֳ=z4.Avev貧wX<.2S'ٯ9x# Fh>zR31ު=ژ ciRwfGw:fkb⳪8ry n4]ڛNqG`V< Rm") ..lnu|Ze1<"/JMi;7ZZϺ*?{hjॆN0ް1Fcty?yvmRe7㉽[ Bb T"{uu 9b_E* Gn uP@De A"AeKUk^aHN8oX'!O.{U NpU@^)CPy{r!eFxvdX{:75̍ ?u [A}Ȧ!=$v+Iw:2O"ށZ_ٻp}xxk By {-y?$GeN^>ARgc2ylem왩QXkl}>H azo/*Iuy1 |8 񱉨 8߆#^%L 3P:^7룒Y3xI{ʗ+`#޲=d2`+`:L9gI,{G`]7'ѬQND#ipb}NW G)OF!L*fg>!TLR|X{~yŢU#KՃ@8:=)+x 12V;(vV8O|TEbPsZ[>lV];rҖ[_2A<.F&<>|ҼT;#!wW%ߘmB^|H0R1qZ d049CIt#,錾y_"^ޚůjO AO M^9i?iQ>.,fQ>_x'|OiP/YӪN%/A;i~ %q?ⷕ8OI l *l_4t?̓ u"Brpi^j6O"˯ijZ,;*ȕ=̇{t Vpbn`<:m:TrϓxtO͎f1vz*Sfs"sCP;xAp r>ձKZ3,|;8 zǷrgkO|s _YSӻ)Ųt0Ц@`2(PfL dG-crbDJ{ d&XLLp"L/J 9WOJuY3Ax#[R5 m\^"8]F&x$AE7s:}v.s s!$9Sio l \2\%K}زg";p(ƈJXNbݡR V$172x!)6kL2QC%tNɓMZm˗%@Vga0 CT *h[~L4TKxyPկn Rx𷷍'<'L'D3I)@t-5W qy MGBl ̪&/Uʇ<?bwƽBL٢3L,^. @ō`Fe#fd}LkYM,!>9J?:-w V6;jR<:vs09q}GR7e_YEu[왑.o^m1^ T.o꒟2]*67]ۦ&4r.JE9W=ה+r<Ȉk ~Zjk7[>\G߷E͇%;b5+_wCq4)2YyɼT(ϔ;i w7q++%ӟ’fvPfxcG!VٯFm`#uj!ĵ3 !’ߏ\†m}z'}|< 6%>t+};33 Dz ެ'DJ> ޶W<%GJ8BQp$ xD:2*7}YKJarZB*<IZ`k/5Ł ^T£8)Sn2m< e2?P5x~/RO`$xD0U q;G0戧Mږ51>ζZ")Z?\ _ܑJj(z{@}⦟gw[k$d^iX{̷)OK,ȣd:OrF@BEhW.Cx%Nt5>mgZO-!vGԠGW\@Wb }-} dhpLPG1nJVbOP;+"VFG|E"j)C9U]5WqKŸ}Il qU qD$T^ JU*XJ6\/:Ɵ:/%#g&rdw 5 tb9mh/M;, ;rɼBnn3Dk۳=|O%_qYbTHns%l%{ͦ!JX3*joYx-n@ / M,*0*x ݱ*erפ@@7K*:vK3~XGzO̳f֗޾_^A{ֱ JQ&o*A5m ^QP숊ﴞ((m\*FWɷlK6W֧5zXiM@ӈe;r~s ApA rXqIkpM+bvr 9à2W+ziBmÓQz,(IJj0maKbo(9N ĩyË͖l^;<ȢRtse {_{q&: ^+=S5ј]]ώQG+ݙXR+K#DZ+D`F= ҕ.Wx+?L ÞRE*[Px dWcq`7 M|M-Րzh?tEs̼2w8i&{R'H%_7peS~w彑nvt#5wUU/L|8%;\v½Pwm&dQ㘆(z{z#&/kl6 sd2X /@}Zlpb+olD~u;vC~E43z O>("KhÜ7ȀjW}8NfT<].qC17O6(>O~&+9{_k\VX3$]ڭ }MM=Jd ))'"+ޓJ=sS`qJ"E A@ +R"6Fj`y)6>Fn ܽm&<6wxJvh1ܛ ?U0@ poJBl9lL$5kԒGҜ8?OM54fF `Fr5\©ƜLIQP{B|o]:DҨ7ßA5 <ΰ'I%,F:_8R;ґ.1-Ϣ>c3MdH OL-^vUuj.vVӑ縌Tjۨ]b$fq~p?>iTGd9(wN[O Krq*gv$j"MT_}|U8~QaϽ'joSEX נͽÄ(N e&H(D"sWܶxKF8fگs),u5_p:f[_}VHdU_M&*CUOac$$Xޅ*|[#ǂ7]Q61hS5<ԙJ!Yڱ{6;?߇k4n f6 _wtw烓em?t^2Dfϵwt(W9Rj?rˏ )yn38#$ 1f];[\wDH8.~wԚD\QH6?vw-d'a1RG(A+$rQOjnw" ⸬y*sJ˚20 M$B2qSz:Xݭ+jw+ ߡ NR[ü[™xA]}?Z#B#?lSJlx#[50me t:}^jOsBA_oxER`)H}ԚQ p*v|VjǢk:iut Su`7։!v=E a+<_%3Ok2&t*/-ӊr2fL]/ ̕ʳtЦJIþL!~ӖTշfK];S a oa+OPi5]&LEBI= b9ȫ\ȡ#x_B頑6P@ ˳0a>7ȹ`knAy"4k!?RJEpwLCg(9PH "J+d{g?Sn`d欄=xs2Q1c};|Bo˓<=,xˤ :SXebS:sܰd`O13|yŁhvH~6b= KJʇ`g60m!x<ʒh9G\KyHt4%]:ʅT-a*l~)|6Ϫ֙# gCi|!yN`YJ&a$ΤV:_~KN#ҙkiYG\{ucv=[6{k78 U@x`8gudYG1=;կ -LX*.?ZUF=0 ;Jf-r|<)(ICs7[8?'Doȟqza9W 5b>+qML@Ȉ;kNWEVr^~e*{,ֲ>~Qp[[)9p:/J;) 79o=o DCаqTvr"K7 wom=IO*J鼊2F N# 8ڌ-4KiI ZOGbZߤV`vQы[Y;>eG \1N%š019(w[ZW5uxq"n$q|&MƂkE{♖ j}v)>ҏaׂJa-29R TX hR,Vo%0lfpj1o`R}`yOϚ" EDY5 :cJ7 l!5# 賋":aT4B#|cX8ok*@8۬J/v30̨k q uC_ߏW/x{=`A\szl>8C(םHQ1]F7JVmJC R^ DwP[_IdD+G',o ʤS _}D{d2c\y!dm!ެnEũy;&>|'5c4} gJ_G6 eK 6{Y~ 1t%CȈYyXcTCV9S_J /R*EZKJnq!bUu-nR{I[Γ^P[~3=@{Rp6 qO/GQ@*esPӧ}ex/meHXmQufA?ҮHt}fJuOct)eۋ/Fѩ'6A@]`I)ҁLGF_ZaK2ϳW+֠ Mٛ¼ wnlQ T+M Fx{?ŸBlT~\o?_bHyM\T1P|+-twI0F$ jx፠)o(MPZUڍ+#ڔԄ9(W3As0 Z{ZHJ:Ȥ [,i3=eS$4( G-/ ]|x9~1(K*!#)ںk3WD~||ʗz(0LSd zvuJlTžd(YЊ3Q-EL V=qBKL"k/͙϶T[.9G:7g]<Ne1g;1"InY>!Y8Rh)ں3jݹgmƒ]BSȣ 9 /3"ˤYY_ز3"!.Y~ltR2܃*\>h}Dl3%`'i[3fzo+W5#Igm`5!pwGdG!vbѕP +0* AmAR>3?F"B<) ?2p/N> ڏL:*v \'@$'kYtKdy6 q<{-^P7=n &4pZ2QRR,5C[nʁzşvpцo*4y0탯Ns! [A bx9 t3B7d&t`@L_4ؕ?L#D&#4q|>8s>LH;;2-˓fdLVx^RyZqҶ| v~*P56R_ u-(wpA =sD,МχI L^U@T/I/B۔"NBsa~.etMc]H E+D4 )5J]O5LI0:aǁ%t#vFþ/aMa׋3%|(RUF}S-,xh e@oKSJmݡ/%:+I6Omed %M4p5qM \5ո>^֥A7`{17a*"5w%{{iԮ(JBpXa|Q9#LdUKہ 40ƣ x}/\N4'B2M/zz&,)L~ǁT$a9:;W"R=#UW0&RA:фN:A |?P^?c1IΏ[(i])0aymVD_!|&*l}IL}Rk%FL>[衬һ%@0]2⎬ M&58oPO72&rȾavq?xclu'.!;5xS ~S5ML&-*k C%lku~׆wKխ]rՒG3|㕕<COڊPV==wE-Vp2iVP˭㘃<VSu/Z4PpCfuD8NAl Ú`򓘱dGLfҌ,hvdGnb lί?3Q2~(!axtfM>癡0,]/g6(nmdTR9 TeIL4&~KRumę.iNzJ)e*J<-gBYwKÊuCN3s24 -HxI<վbѲl5W%K&Iժ~yZD'#SR-gE@q87.JJڴ%:,A'6=S~]:Dgr o;h yO p,'jjϽl[/Үˬf^N&)ʝ/tk5yZwC]Z`D22$uӫ0Z%N_pǔ'Bɹ(|V] 9֩LnzB4!ALr,x!V/]6Mkv Ce(ۮ,EK Yd ()׮ᨭi^\iP- aC9 hq14ʖ]&Z̍ϽaD~/iL>$WQY;kkWH)SfP{[aʼn>6خg-S±>$ ט%Mخm߯Cy}EQ: w:C.˞'|R'ʝ6͍b(6`oosɹg\=e*MRxXX9x`liTKݼmw`r5?!aߠwnvj0!Q>6.>E{]?0?J: )\6[‰sV=s<ݗIC d+޳RJٍʌ`tiՁ÷,R]k0/ Z!`SXIV1UAq0"T32ɽ,#UVlj}sS9.$7dΑe: .ьXU@}bo4"QSA'I& CkbUTHEDG{|Tar$ Djct lfp5( YD>T 5)&>֓]dul5S%G >B5vƁt_E~ӷӧtK@2',_;|w Mϲ"K5EXRz5Zno0IGF5)=>hz46p9m)Mn J3zKմNA~j2&öNoq~8$YA1` (' TpCFckj e< + ʽ!_LR lk^;rMWЋǭIE l@159ZXW9Z* F [?AM-&=8xf&wy˻A`%sn0K{;]"5w ApRZG悟%~H|K<4PWE+,p)ڑ<ۖx;yб3"_0@p?mĆZhMV[iR) S cwNnOui^ _A&>:P|a4Zm9G跾n=\؜`ҫAGt42' Ndb@]1N_qޱݚbTqu;DǿbjK^t3.!1CbpgRuc#b~438R{ӽHr .By3.\U8)&Mޡ*|hT7 dV|Q3%7s#4R}ھ10 W)* ^!F@ !^|'\(ι{e&Ӊ6icP zGp]H=3V5b &%nbq^ӶtK4`ʢlc]4)`mP ~y4Y*+h;z_,LQ i: UZxG*?M#B,>81Y)LFLxv 2FOM&y|&Ip)ؽO^XX j7+[v0&Fz("l4Y#`phJ*){jLԄZ >NǥesF Y̙M @*KI(<'7k?XH-.;ڀb1 `l(ՙ-O8Ȉ~[Rh+E_:YQbkwlv^aeqJ߶(Fy8v˄` cq;-׎/s|rUX *'pd~jM/4uv@1c .꾮ˁ;پ)r93afɡygz=Ѓ[3mڑO̾Zq2:.Y'"EpO/8gImh`#/MqhLE$dcL%.ܺxqX_ jmzlY!oҏܪ+BK՜337wtR>}WvX_c_3)@[`lq?2'>甅yĪEԾbHdF ;!|;[J914K;D͗Ey7YNI[866cعAe)娒tnj݊&)٫FH-ȳ\s&aӚK" cTUJ0]]w ٌn|SXND [jq,)HIW)~9a'J1^ Eg=FwO h޺/IR:_w`dK \IHjJ"cŸQti 8R1qXϮF509:ܩ$|jjytKcUl_#4n?O ^xc 0e0PU&}k(LKx#QV ǬdWʀIGFU3NTN;o'<)Py~=ċ 5Er6?yf__!8.W$=uB$Ѩjhcٌh.z#x|"?Ӧ`%ʄB{u[?A)z* }0kX4ځ>)&XY4l"1}^IkM- KzDwÍxUIZ^MSA|e>̨r7C%3S1=F:Ԭfg  eQ&cc wkiNfGI38ЄB_~MT f+Q;3 O(Ǯx[>G\+$^(|&f0/lݾ$?͹b@QOn|c+ŵ׵rkWSO+̛R/Цq=u|304[O2&A9y*: ]/305 .Me˰,MN=$ѡp.0'FPwwX 1 8GcQR\Xa-jPXR0j"u3_C *Rٕn&6ϔD+18JZ*s Gk݋Sڟg8t^ @!Xf8j׵X?s,P.k33(+9&lf˨ nDn):H.ʺ`F+o|Q*CK=whXװ-v4242ȫt\%ta QKvǩ {HY#긼ji, FZ^X'5"Kۂ/rUA\\Y%JH;I"%<"XtH8j HB?p> a8))v+/󶹄05k}5%vd>&x9胷sglCĎV1mHiLq4n0/"(%]B9Y Sfq%k,|SLr1AzZ QMYK&Q5J-/439Zl-tJ~{H$ubjS)y|.3$K:E} Nv/ .2ő_O[ح7/U pjlVV6_ll.N[.4~'!:gaG1&`R$-`O}CgU{7AW?<]nװ<p*jJ&>⹖NDRzV:VPPy.prD/p$=~L)I9th"'3nG%GGm-̥݌$q;vNLf$Wfj8݃Kʛl,Ǭ>:n3V+fTl鄂9+մx B u*J=~ |Pv]vp3ԡ̑<^y4rQpK?7&f| SF5gZO͘aHhrFcQJyǼ-w #"s| H7 ?BT .)ŵ'i[݌PC&?=6zx; /'Wso!.@s4Ì=p XАT?lovG(z&ǃDޟ))գumտ-0(d\'fB`v1I(r6jfI`L ];nփk~l 叽- D7Ltм˿6}k~e- _Րwr+mEFf ڹ-KG 4 >T@ 6! !Jf5+˙H`!-Q(ԥ~<-.넴8I쮡.Yx1Fp`7ż:3`@5"%Y' h!R4 vcCnIɽg>r9wO61:e]%FaGb4lLȇd1<K;؞jm$`K{QU]ӳİ>Ͼ9bgF{'6&d9e ?-.2c n恃^SIIsf(/7'S cCVCH?E I0u4g`J DǷhDdbarwn!ר1dX yem29sd#!~]ca ~7qھ7&݊^G!aTQX{zr_BVT_nnr% 1ڸXJ7;M 굙(M=t13W}u0Z7n#lg@7b`̓*0\bLi_qFD ]|T9y(&񁝑*`DUF-9r\ ~#!J/jbc'Gx^l`KxTv r7@{Nüw!OO!8Nqvujq- %a C4,wR-iޚ6]O\jjtMo_TCu95ܘt :~yҞZRiWo7 30j:ޟ >[#7-(_K.e. Ѣ -pZ{{z9#OcK_t3kBy77T("}5b Ћ95z@X% pe1vk =bVyCbjg O2}oSHlVG/.\V\:@z K9ºնw?.qqFr1[o}p?{H,.||A< Dmn* zy(M~(T=A|1+M2pȈV?4ot>;tOCj0vfܪOTG'?.d.ö5_(@`IpJ 8{VVkg Z# o;X6+O`=i˨=r&(-AZBZbxTbκt`gUS |ж DFFG.Zj9U8όO MmHC4Y.6]nCiu1X:ϭ"v=ߠS 24cS+,p7y -ƪ , GE'L^Z,XdL8Ұ9AK\._ڵKoGQHU|dcqɌ;cWdB`*qj@l ebZ|"/z8\M `w+tػn!$]( ؈6&+Kt_0l|aL MfG|g`3~gܥktiQ,04\=tmӵ:1VPk(U<u+!AZ3li9FKῷ.mZfL4N</ӑV%m3T2q a:ԄΪ/GXIn`HdDW>#c%H5<`IWĹKH|3dCկ!P1lR ʑP]C\TS[#._gKO_aER@e;9e9J>kΗb!ni j'iñl;#O)tԃ9!-OaKBѓ Qà/7+ѱn(N6SZLoMƈ.G o>j]m.?ALZ-&EΣ†e:.R7<a6dhoXOMX ciA#.y:cL ox9xgȚ,E`P&v4!4\"w2q l0SQo)!FJMix&CLqRYf>;?[Vmy %DyUX~'Z@O; @~Sͤ^_jސ+ ׌3CPJC)N*e#0)z=Ă壧bQn-JxR<_F~d UeC}:֧/Jbܲ8՚P1ȏMb&C8fj>W;7p®ڍç`"fJ}H.aR↲-*(fð`7ENc ?ޮW9N/0MEuЄV(Kdl @GG9ScY߳l>MNe7Y5yi]R;LfY:>T 1e㷫M [@}je^vi_WB),Xmm:u"D8p' s^ȼhBf^lǛRa>@g>!qXxȘ߇ xgŚ('yWkPjb^vߟNjk%' m`VjzO67 X A=Hrq:,^Zl?+ړ/"HJc5gl((oM.d0# ~$1A)*6sAf < !P3APlaXqˑ(aRD7k9شz]tՎ/U<u_!/1̡zOř0yFىcb:z&Fg:jP,'z ڭ5E8l2HIE8֙-W0xfi$Wyg>W $wI6*m{ a%K%z>JJեVL~+N $ ՙ 7HS*H)>>)u bM^qhbHEi&/PeYK|B3|{t9e>`2.寫(o0\TP19) NIeccS]C_T.N轕.?e A RkؠExdt͞S"QNHL)b$3]8"rޱw8&W='a˛X IHxnxr<ɿݖMSK,xnY5,wPa´98d9zQUO'@-ojrpGfn¥ ዘԌ `<̒.ǐDJDj?Ћ|Ca\ HQx,G횭rc{`x&>G|i-֏&ց4Od0GV/*H>y /Z nNn2gEhYcԲIUL[Usι7eyt?g2|^cN>~CIldҺkJ9TGӻ߱@VbGmgH({|ɆȽnd;{ov$k @5`.`1غ&:WDr0"D Hmi!]f6T)Z-SlA'{w>3yO?{k6}55芓VN'T}1{ξ4^8XNeyycmAUpOkvR^kc&~#ĺ)..}c'x!쉹]zO"uAB !t±#s/8#l8@ nU@SvJB]-)J-bqT̅9l:H: )2 ep#bnE?RVACݝɞpRMEZSe-,;9gH(%>zgwJ,|V5_IK3vB4FvL(P;t =ߘx2_&4~>xE Abp}uz_R QBCzF'3dɷ!lrP=5"n;s@+u@BG ժPDӟ<@D?` ˧T Zpg.J%Nš2GE. ~-Vر:sJ2FdўMz2" kinj\k=aD{WL-]v P9$Wdg9^&ZERQe{>G<0 xxGX0𔄰mX gI4m {׀вB6Ϫ8Yƻ.҅l^he#D"8km\#֫_VZE.!`{X yU.Ւ b/VNوB/L_=5wBW8ڻz`m&:'1asw19cj]Zb'. 3MZr;ECt]^W >\T|!'Ȃ?عCk4 QAGHi*.ɷ,WjyA.ڒe!-ݕivAWKƽd^\2 +Y:65^,ap oa #ՠ@9Vi4gDA'd-4MCgDcւU۲gdXN4v=p_ol?3OodTyⅭBɂ J?J{F^sܩܛBl$,FQOrpڷ{z2S 5q7A>gƄӁ'+w~M}{R8-lZ.m5G+!AG+@8GU>#9lE򶵔7z[PхTw*ՀȊU%3;\I0<|Zyҩ3U?ql7ʆ1cf{׮pfn # S,@Oqd]$N ЊU JAd? ^Wx B~v6/sE8qԣ87IH.igƗ4w;1l@mL㣶s/*3Z^+p('HvLR@9>t4 Qē=tU owUSf=0I&*ӲO\O*vFHcXU>sxI'L6(6N,P4*Š׬oefmدv{Y7`YֽD 7񿠏(C^Lm)of:Lsxͯ2׷PüDC1"9[}J殌RԴjy5Ro B kTf|>'JCgXnOXUQHFm"7 e!ytГԛ+QڞRVm[9.R)b {rc6I~Q a#DvH MeMWM.:sgn .+b7|ݛa@f`[s=HdJѸ@QYQMJbTV;c[tCO#=4e ?w@`$"0 QAyMA %a-ҙ ޥGh("WBm 7 QdxpJ'!% &/~,5D̽|R+hWz=.G@:MRhA& $/H2m:6*w@~Y吖yaʵ1bcp| v[=MA8J)/"i%6{[SƆPb?ޯ0#$[0PǦ5G'>qBO &Ԙ\.=\u)B66:h,&Y2饴cW-G%19ژ&u_xZClt\d+<6 P,V(Qu3crü̺6Ӡ#%)-Ong0Z^h9Q.y֥/eh}|D7 #@8r|tqJaEؘf/rw0|p"Ll`wy fd(N~R):9dai4GGpˮ5ǤX?bBcŔT%5ʋƯ 4uGFrW߿6=Bu,3Qr4=Zjx:yMA,e(=xm)YG5dߙ;?O@Ϋ~sxXgӉM6}"E,Ϣse 냉@6rZ9mÌч7צOu$꽚f, I@h^W>a7~pJtE3 =39DM瞬r8Uhi-&o) m *<bg4@mC((cDCU3ɖ::7V #؃|z/V=d3?C2(q?3EDZ ữFꚲޟ4d&˓VH1iK C0oEa&뀾GHķ7Zӆ`PB66t:lADbuSDnGRS'xGiQ]ZP[Iߍ|C=8'#ӗ~   HBa_eS/m+Ǔjy¡1O "8PQI U3[9IJV +J?p]c)( *Z LbhT2WI-m(_m>yQ"=+01ݚ!j2nd޶؃(z<*_u8jYAJ;2#g3 A wc6.o[ޒTcsEUg6v nΆFɘ_h΋:5Zm ];? &$ in5uٝ?%VdokBl+yWUxr ŘIiI@bB=U u`B>6E`cOZ*CHa" ]XWop_-? ۈ:1. )>7SΣR- l[} OHcә_R.V0 /u<9䦳aq£q::߳L_}SDGΜz>+O5J1ˀI*oH!'&dtR^Eψ2ٲjfC~kN~-?#Q"ɚ%~qCH '^M)C1}:MǺ5EY=J%k~ʋg=r^r{7w M;3;&U,U؋C{w˹ofFPc CZ꽾,^7iRȪ;4hpbuMB;Pr.Ȱ3,j.3G8ݰ) ։f=iM*Q+}8ի%3U%F:XRx{P,`[rk1Y |Hz`w\Cݮkq%N+J38J͠BOYF5wkl=H,w sC{E;l7avj&:=tH|$|FE謯 з^ӵ|aY8{.L,p͌V/9ϱVy#=J;>,Yi-BLc&O>A:a_'?V">4D @fGP̲-X kU Kjsb0{kڗљJNϚ9 W'">Z|, DeɈ"q$0Zٚ/.@P3a:Lڸx-+'spV⃌)lXaE/ ik9a_U}IL b9;o:9A N -2HqJ.6b~ UڶЫY/#WnNw)Sz?l1ёm(@ Tpf5u-^6 1UN-/:aD2ˏ g\z%cAE"϶hw?QX)~;E6Ίd8H;;g4y5Zi%%y&m6 [)I@DJ,\(r1 kWyL')=- < 6I](/b/k@4y͑XXm)\;YXV1 s,x8g!*Ȇ<Ŭ-ЅU^_jxKZěp"iWi /QB Vۿ[Cj}hiPHWsF:@I1 -E5r}$ u[ yǃM|K jMva_%v{%?-9CZmp%fk ؃e:!$~-9&>mb&CBM`9;z#lR1lYjEP.H:v"ǰ8j*"VV]$*`Z%X)…o*j_1R3sv =M9 '>DW,a PH#-*Ep 7o]&|y[_qU̯e ys|ţ 8e хvr=jo)vx3̽@O _gNE֕Eɔ@h tٷdrkt>A{߶^ux=̹[ZUv`'Uu&(b0A멛^jjY7cI+L8:pdUL~|Ny*S?(m glX$ѨLB5+|]  Q+izƳ'PZ)!X.yv$} fNK'hvb+%S?tf?85ɉݞ~ 4 Oc@bG{,ysV]Ծ:烲bxx*[9 OyӇ^߹P4HvvW3bFcFSU$tKc 7)IrgnǟІD#?eğ/%q+ df$nrho/rj6_Yj˴fsmu΢+_0qV4(_LdyR*㞪 e<6;j$ XIȯ2D׵ΐʔ$m·#mSӪ/vIl)(F_N̷E)C l?k,'oAS̚aǧ(L;ZoOd'j)54{*FWZ;ݢG,ݦD!Sh_́(]fm r&N?`Ĺ+mMJR_j]#^tv6R3]PWT25y|OH=(Vm_NXd /1m&O[Z.8 b`jʹ&Hf *nmM&XcwbZgOV῵)5yۊoa2LE"a L 8^F7 6c\$\dz5鸟*D9REOrl,".e7n1~FfY@ /#6a$_#K%gw+qu|)%̟1EҜ^|l_;4hx!k^YbHBxuC,r,>ArQE)F6f˨%w?X\z@1t.k1?yR$_荞8 ohx)t\gK5leYv}7A<1h" J@8іǬfʝnj&'/UcYNrAOQز>-t4y(!Iĭ BCNJc=N:.Bcwƈw P / S^[;T.;(Y#\BhQltR!оEKټRjZ+fPk'91—Vqכ!irl";GB׳* S!>ixLɇQ՗zCS 4b#4,S[)k!Tu~1F̸ W _#@Cfw]O9  3 B:;pc0(I$K@}[ E2 tYZVA0R,>op;"j?xsh,U Ń5rġuM#KQnsYiuTpzįr'˂Je/(X٩MwM{1- ,{n(W |zHC LpM?߳W';3؍@l+AoQIkP]{Q?TUZ|NZ[-@ii6u;CHfϦΖ1[#zYL ?i2ϊgIťǚXh'¤ %k nœ^vR樏3ˢ3D]TO17pDT/ 2AU% y:!>JVP-:1o=dRI mo!eܦ;~#tgL/ezZn'{F/NG݄7J_,f4 tLi/7?/" S/\)I  qT2:U"K+LALY&av8SC?X HńG7<^wo(HT4xuτNnӂvPCahmbr%YY(~=sNH>`pd Jp Z@ K'g=(`Cq@%@3zM]q6R{ L8hj?BeЪ(~V h4$ c7Aa傤0`}%gc)Lx g8$+RBSUo7\)mީǿfʛjnlTNenyyQJ Bțm%dYQ=h>$=g zX6`=[Ve`Y mҀ kh3X@\ye7l,N'?uq']4Bc(t$+(fe|wi'l!NK)/VReŌpG/ݠ z8*'̀J96ZTќUC%ۊJ'睑Cp:K| X"#o@.ay.I2{%C׋>7Sw!/tC1jSMR + &_ D2dJYnB.8u$.9X^_P_\4s֦"tRCsb=a>10iV욱"ѳ8]|jŞr0D)( w^r>E.1]uFC a=ɂ\iǗ55%7ݞ^hIϭ.ؠpo[lP]E?-Avk{x '_f!M_U2fN~{7t9;c`G*۾ >zZ"fTr@<"'5|@p$mb9\W>5'!i"az͜w%ck8Ky ,p̨$R CIW#z?@ j'E'Rt\S0_4.8^C6v=RlG,5l]JpU%t qiHzȺ9UAak5h~'!9?q{ۋi`zu9O b8٣Ž4ѭ.Ըa4u[YK& p% $f0ots.$iЋJHs姯u%/GbcxSPE(7eV]XFW%Ix|1a\~Q+O󹓊boHP@1)3R#/1]/%'$4ƗszoZL!QsYv7O-7팳%DWE~7߭VC<0/}LSpRG w'a/5$3rHBh093it.+wp@zW0[m8lUMEFUV[/[e+6\C&2%vD:[cw[C^0XMGhdb @,a{]HrwM3ugikSzS qt mB q+,Mk ੟T|9 U8_DRP"r. LD&F5Տ\T9JrpAVn~$0b:Y^EinVJo*$3NŤD Y/hBmzY͖Յ¯O[/@~=ou}]V\@B:/@v[as(rZ3W󌼏L5d03U]SC4Gg%zz +K="Qk M!-ebk3ZvntQ~/C'a !OU>. ,g7 c7^\xF-$8hcr[CoL+Zǿ0}B4zH}CCL0I])ax%!?帆wH g}\`R;p/ @2PaMڞ1Ie)joD>Gv#9QuK?[qRdѓuWFWeɛ/x@cfaj +Z6gg^lna3p{?:آ}gD@V!h Lzqu[.B Uq"Y=`aBw2_u=۵z9a˟pWЗ&N 6К`J*_e?x$WB*3ѯKR `HtBqis/1SE(;--i )Xx5 bi\ؕgm{%ɝܙ#n19#_+oo ʱ=`W'V'%AT  喇Ot Ml?g i6RQwmB0s㪂yfP`@)mãeyXcUkGTl2=; ڵ+X@h'RȪ=΢Lk`=_/c:y_Q{ht@]D4W<0?@eypv@uЉL#az.:]˲/+M>KLUcns^l/Z^a|68/b Z%OEHkm}xW7ƯxGrY›9 Y˦!/ij}_ɫզqxLۀ\ sф+RA_sy L凌;f,]@h:&~3A;cM!mq#%Q`.|XoQ*n`12UWg`RMN@@ ؞RvSNnm:sRȚ: uPYK£;ܠz>N xǡ 72%~'eRvCY.>+1tqEہVY =l9UWj8zm=@9L=ie -o*=LXxuF{./3N-q9ڤ=9;owDj\);4\V!|Ú2o$>wD~·uz$zUsn+{S !Uao U8ʰ|Y8?;ZVSoI4T!Mum 4Zΰt3K5=s%0xaAǹ&FF׿O5Ccoip?n! ,4̑eAU/CvHڷamPctR=s@#N$ct+&-AA`2(zk(QGX>3 j h Ơz#5Ěuz>_d_;r̚yH`+Nݸ&X8x`'%X.{cEV$6m{"y ?+sZ+[vrz2.ngku84>jC,$MG@?<5*=y$,ą}*taɣ1pe$'"zq".SJ01wssQLn:"p^ւ &Nܱܯ"K7 A!{@v>9|0.9) l55>X:6n+OXNN+]'}aр(n%>-{x:p,f ag1c@α0*/,}|H>yj(#\PdT*[}L|ZٍciJPA䞒?%i71CxQ%-K3Ύ>jW{H{@P B쫪^%:SHǐ0( })ۗtUx S1>%WH@C>Үz&;,ܕ~DSk0ReLtJoH,(OL7GsZÅYĹ"c[H`IRg起JRyfk4 AёǛM1ׅg F«oh uՙ<ê /5aOF a>XEIVzt=JVy3ת=T4uy/fU6sG$Kq6@:!s`˗;Gt\t WF-.)J-}8jݒvƅ?ׄxm .t ̤Nݓ}) e:=Ԁ@K:]qHA|D4YgǢw<lw[V?\z3|S7&1*7c {rϟ w9;\IL-BtMV@^ذ4=7Wm Y7t".6`xW{o :Hm-nEIj?3?͚[+a-ȿu0qB^ 1=s,>g=ҩIUB2w:%ݦ궡>?JжUKbzߐ><[Hup }2 Er XGC3Cagk7$<,#^BwN5c:7IU k d fW'nrPb1ig|@{,=0\@P#FSt99D<8<-6@ZFR]# +vb#噕kPQoϮԊ&;*Xo&5x+PZ6[3i |_q&iԇ̃ZmbwiUc5~ 'KymNmELޅRH7k26Jmء^PT=bɌtO'vT7l1\[Ns}yj5"( ?dUWKϹ^4U>g| {5jUY` S u+;nf QJ *FR0 Rv:>" #PKo8op?p>>̚n/sۋ]v0!pkUQd:-%sq1@_H8_Y̋%|z.Į41ҐGOa lrxiXm𖂁=gyL’C*>;/SyF  [OՐhdMBSzzP5NC)Ƣ/\ͧWjx1P &d,NF4 Ts)EݮL>Ql"z֩"Rp,*rc1|¤8BFo`*ՄT`W!v(ҳ ˍW OZrӟy1'f='7 2 zSտds5,1*87p?E I=˂S#q%[˂ˆ/ZiHsjC=atEJZVmxo廿#~+W ɟH+ay){:,JB&jQ :DjtSy:%G]mXE9<;9J}bUbƲ%? eʘxZS@^k1GqI6 n#c_gCLepd8Ǿ[୙Ǹ.a#i趰t?SψxVBS f1)Oh1Ec xB}Z6~nn$O\RA#}:GfqgX[!ܗMU302*$.Ƹk)vq:': d 5O q/"Y{I\l[|>$4X M< u F`^Nм2k98ۜq Тxy6r<ĩ_q2A d$QvK&[zH|a5k@] M3Xz.l¸mLbY ^em+Qx*cϲ%,+! “.]qg+ [eMuLj}i#M^ĸsG}R( 6&"›=qjxi 5E($}XXhf`.@Wi╅SuH4v0 mpIH>}zurX /9 uh*d鶿ׂ vTyWmVWZyBZ՜ͲyBayEД1BN-0{B~-f=VN`^ țur&M>N Q> xXK?#Y{B;;8 =Ŭ̚v)I,|vԨҭI >a(LGl& xg=w;h۬4b*MOL% (KF>@?o|U`#VSn5UN5r! {6,A̕p`0/i}z2/`mE )=-(J":ɏaPpb!տkҬ;_4d;٫R/ 簞KѼG8dw-WncEzU&I|ul-J@\7Ve?U'RZ Ӊoكvs|Б ~⭪)^hvRA|O,G] r ( 5j#>0=g[{PqU L:EGJM׵*29d3I>ݝ ȹ"W_ϥP2׃i R#.9VAgR%_]Ť8e$i(tMsFN%1|^uj r^:xlЊcny\7)MȊu`Yеx;[|^Jլ&叛0?Q_l5&_G+jV.Z8+WZQvӿ:QÞ-y jQtUX5x<-mϱԱ'HsS$'$ (`q||<8nz9dt|gI煄*VA8`${k7K|{Ek? HCQs(%%^'@k֔ortJ!1R;|sWd^&,R&Bk {Xԝ1a휞T Jd*/[x>w }o.| `KP>!s tKTlьŗPYpeXqXjJ`AbblV߀nO&Oq5iQµԤSM*=^…mB6` ~P:닛[_; h ``8'JG9y 45{~?3x".4h5$ULh>~8E+^j6]6e 27 8CX1HHaSɓ⥜ ׄnK]0 ML; ׶@l|K6@?&HA{"*lzu8-ȗں]y*=w6ybύMΛ@[pH煂\;H!:q<9)2ɴeػ/\S?3MF*Ụg mg}c5Q E.7؈3t g}w `ğskxKnбn|Q3j\ 7 ۄ{U]}D@_Ph {b| *\YGLc~9663dx`1A:qC_̷ ?L4-3n}Cv2XEH\+詼* PV!>dRshir,,EZݷ#@c:f O߃P<1馶9ݠv>לTr3bڞAC@;BhXNg yn /#6!թQ~w7]RN,7yqNGHMY5Zɣ^[hrhf ly%T+]Iy0g';82w2Ԋۻ"<f ϿmPRB@&C[y.rJTǢ!>|skC#F qg\uUτIBD*=8PKS214d_yj! `jo*UxҜƎ`Y❺àwg$ L*S6]]6q>&*}0pTeOߦگ͖,?Qh,So*:8l Ԯ fyd)5nyb0FEF+1j|[PWE:"'(i o+yM8qwZ"N,v7#7"1N!N4]\H00.E! ׎cvџy JIP-(n^4F͸7$C*0#sT9' sTz!/9~l SO~n+6y{˯7QZx3$3ڏ J<6H"|SnqEHo(YzFH7\ !IY wq!b36۞M{ZZT>zz2dU/m`U+.*Rp o#RL=wb ٤_*43 ij.L:K²Uܰ1BT\2BղB))h5e\A-tJXO+Q0IHCR^U0cIzUm7uɫZGMXu+Fe0(a5u-%N}(TO`E:>UyoYSR++fY- 7M.j[10m@c3vz )(o͞j|"PK;5UN`тhℚ "4r@y 9^|u~JEyNRMpvO{G8ށv秘~{}[ % _|zOc88`ƶ"!t6~IAaU'(qhk1]6á6i݉!B% DJeR*lC`|, uZ),;tD82o(enB5t⋮%v,_8 3|ӺiGnC JÊ^`Z-cya 냹[ rbIrɘQܭ= B\gз;zw|*e"Cr$fx38`s 3`wow?v QdW 6!N,?7L&:iAQ+zЛ=#T4q1ZȂh9MݣC:Km>5pK y=6ح1W~ЬFE V Y2?i)Maƃ"*K 3ecEhB1ݵd[ 駫q gH~B g]vQ2B1쩏дfr^_:]tI[sΫ|x?Ί|)'^.)d:gS9c͹mAcybW~ pCluOv rodg6.Ɨ[3=E܄x\I0Oig<Nx# ~32{k[.f9vc'!*R> oEv]:NF8C k' U]X~kx$om B aJWN`abqj$a"U92&8Y1jz><9|:BdqIAg=A}CV-*rwTGZA?e50jo]~g46JWy&1e@VeR'9Gz[)q]UϹ{A >!T 7@I-|V''Z5/I[>6%G>=zۯ-SU70Gic1dUkbg [ko5j+0g}\M4 ˳}D"p{eMI%TsČWX?b.J8Pr PJ(,{uuJP6 6W͈$ԽCr,؍ EB4R[䜤9t/6XoT񫨆 WT/6nj+kA3C[ 8ˇF4UjfȞJ *;)3F`=#g0ih0븕krAܻJ=ond^ql:*U@tXNM][宄eY6 xZ]Rq;&WΓ^k_af'& Q .N<4! J* >1/^J{~;%h|wS:"TwkaAb8FůGuBy`<꛹$]*jUEVl>d0(f۴sk+)[VQ?I3  D+S>1t>I:UGr&^)Wg&Hւe]5 e_uwYG~ .!ElѪdEGXP0  p|f!iU9ZҀ;y>7:ڊS0WO+Mݦ_u[GhWNSgKr~I[0 ܥY瑱藵3v8txKu%T5!րM7/5 X4d㊥z S_d5,ǒdf'3oT.q4]=t=R(/_Aӫm ,{f,ol"˹%+`v^ 9:FYʍ:+|(] ˶_ dE[C]،2_ gyy8h}wNgjb rsT`kQ|͊[Ljh5] uFWWL T˘--JMi85j{!3^-I!,,}4FZs9 Dpe og,v 3D&8aĚ]5sS8jAO>*γlpX&wa DvEb^8yG)ٚ=Ne lv^O;Re4SR$,; }Sɸ L14Ax6nd#TEr'u{m/DUJZ'N,vʁw9vFVz9ͦil ]Wb)xH ej&Zg٨x {u6?T`EaQC?FƂ!.iM AQx[MKK (F) ЇG(afXn6z{3S\uXgkFn(bK-M~E/u{<0"8-%"Tj 1p%6_ d|?~  n0qk^Z 㣽~7>PZKXWwWJߓpGqXǻYd",;]%.TI$>42 #fobMnB(c,Sd'<_eP6/~``b(F} {b bP^j wݜJ>EHeZ<8  yG|/W7V*vX <DZ⌬f:S .MU7BQ$S WGX`JЧ™ta<ۉgQ3*\O#I\P<cJl3wJ/VR>zt\*hC%W2dpg6,i_כO3~ga@Ak޻ 2h!$9t0plaGMUQ 6Pvi?5&u;_R5]S9|kޱlJ6Α b^?AUGa[F^uhρI0PeCYƝ_IJW5S9"3›,+r ;I9n:--7)X烏ШSٸh.e<O;,#1cžq\59Ġv.EpNT=Y}cb:2_>s" _Y%KH;VCo_oABN[8b!gi)7g)F<_Ėwq添jc|QGBALbq "bi}te&\ &hA+]I]lTM V?nκ7hs27ڦ]14q$s?4ϒ==|6.nQZg*KwW":Oa1{e]Ө*}!rO5L3|WKҙ &=Yi;~ @dҲ @a/9$ŀ/O'?no n?'h[qOv!K܅dF鉮IUtv,~L[yIJ@8aO7]B t'NfO \B!վS;Y(J~j(an2gy() M'Ez Vz6ywjqz&G2h twKZY><:Q4vS.4'clNgra lt74dPQ"=+:C ԇ0bnߑNc-+jv(F ig%%3gy-1_JhKxUOjCت`cheWg7z^}1b<7hzyW)ׇ;]Q{\DCnǎVmᔵ^):*palBZ>U]("!q7\S[^E^n7c&| oG& dcxi‚PߩHn11BP{ K/9.sRRRUm%!条SjzcUݲi,B}.k]4x3 ~D2qXXgHR}=UAH(#+yDvvdC/pm^Kf#Fd (~y9Kc~!&"ysG7>]=G'v LvrjPkG9y@m1(՘NQVn3G#!{B 7RϜ1p8ӽ+"zƟa:+ [cBs\Ҡj `P\|`K"C'lxaC%JC*6h3SۥU"ϫdJ'L7Ʋ? |Pj:ޗ1ZYůzDtINYeR{?~ *0 $ld)8X!b EdV,g1+U'g}Tz/5L1&".OpUE{[HdGuZԮe8CIeqJrIU h \"-}O46Vڍu1ǾoH {$ף.&և|M~9(y^/v"iEaJuKd%l@,|{QD̷5oB5V֫{]01_5hV͵?KB;dGTks[>vv\c.ǻ{*HG-Kܐ:RA]g:cf&k@K_ʆq滼lc*GSk+\]U!0&gM-i?b;gh/3o\/vrRaQ2Dk!9;EG%ģ̠@5#1c/n1#Lbt4/l6-b;aL=$1\C5 i[͑Mxt۞(y[}kWkx(#8/cE2BzQ8M0:}~#|[byT $<Ѭ(XiA?b ZߑĐŪK=69:|51 1aW·A+l霈X_|z 7QBN~Շn̝"R6f]g0).gy:XlfjmDZfwMyYH".6q9iV,(fw)l "k!\koa>Q0fC5vķ_)*}FyKӞ^8(5Kal<&R X%a1噠!oS\Vs0fMµ @}<4uw ]Izaob@ӚbJ?.#`͞huGDdCS~0l^͚ 5L?D<0W>l/$^.ilO wշy\Hu+_]8AW¥8'*V"lɫǀ*$T#.-Z^0̰l:|rH6Q(lbɝƸWuHSǀ*xf5S?rK3,7Z d?GQB }T eV@$ |pF/-$;'(d2vR@TlaM0 _&v5³SgWd#Aew+ 4Dq 8zfƽ H;G WŰS_Swh=0<BO (ݓHs2Τb߰0lpmlYͻ%hW/T[r)L{~$0z (CS TUa,Ȉd]bz=<٫3`:|tvìI<\^M0$[ć(w_}=?m~ͧ9eC?Ro%|v&Q<3U[C$VMmvD{Eh WHK/YQ̸;G }s}º~Ό`-j](wXvI'*0Itܠqo gݹm{b'6B0F\sRK;IɎEp!XO2ɓ0^>"n2EIo$Hnśkr`$l<+4I>Xn|`5I_FVx Kᶺ`IC*7L+QnZ淁jO8"_jFM@[!$D%5/="vf7ծnl;Gb@Xfђ:CJN8y[YXV!J;-"?GPʋOOT疀)c{HG[TfwYn0{c%r(َIk-C`7!Ț|8)!*z 9`./9K-3u&aƤ ⼃=`KiY dҊsMTA]i [c] M4ߩPVؙtHXZ=wBZt;- ]*aJN:.Mh5X WeuOl${t:gUa(2*h5575;JIV+8KI\=_ٟ3?jYmoK A\31u6]ֻ [p!z\ukR,봱Ih\l‹۩lkVS|1ް YڧlG'9Fm82J_9MHw_)LJ?̼/C!qY5v[ /ɸ}}1>.~L,'6|35('&8Ɲ܌<$+U$bjƟ,#DOy>l&&]WnyE eb;kz(=rd{-G}wFPt"O}YwܶFN;W4,!cG@o[ÙX&1Ώ% F7IT!R󲈻].n`JCʅA+Δjgǣt(Wg*u܎j˜)'^^G0 * ,F>ɕn0'k݉0sPN[üX.Uxy_17<'M gZ} {"q"4p-pN,P"^ DkI.hFH l'ESDBH[1`;&F:U/upqh=Y}(t_ehX9ء@S; }fMj>Pz953'l`c1 Z<Ё۸xdgKYZ/"q#q~p~zrP]^Qj ;;@Y]UA9y޾Z%`T 캺chO/~ eW@I;֍5^ElLM'fj GͶh 6Ao7uZEpڸ9 !JyJ 4=}&XHdt# HϘNGޚ]a2!%0X񲿳.kIp og͢a2sZ*XփK1|=+ڎ`v>3薓 S|{O%걵^tSP_'ΩI)4&#K*Mأ&MaG~vȷJ]iw?+rbeAEWRwe']@ۅaN$24KitoI_XcBې(,^RU~wAm @Chx$+Uyb^(ez<ȵS^* (aRNbDfv1Oo-- pH{$8|nat c8%+Ԧ;P$L ev?ЬfJ Gͭ>]LgCtXL3 ڎ‡je~!ϻ9#X挶2_ K.~R޿.,Ae$ oRn-n@Rtj$`ph.D:A JC|:v?"Jd_l7i<%%fg;?QSeOfט SLeyw:RHӅd>~h9MmD!v/"=\ Jکn8ja~a9JKoQlK&g?BuxsDmrI|oLu^R߷tBT ώgw*@sF7;e峀`P_A XIgUGI7!e,IJx{<<l(p۟SFu@QMβ9Tgaس-|m{]*EY yV!3 Ҙ;L/h8j s\61-,.tu7Ր^4ӈ,k' I3>xr-xb5TN"$> D1&}= Hl-i }n- 8n1l 2mG^tbCVT,/5}#oR &,L5-iAA(,o,."D%aiҡ6ma!+iW$LΜ(GDp)pu%TGng/KTq,u-,U>Y>uO 9qN) 0Ssa7u\!-c"z!WSwCzv9P?H,>KFs O#-`~XdcȈl$F/v;^X T ?6dwϠ _2]-ve4$z16S5ddO$v9Q㐑H /MԊ4}޸ߎ0iWJY(02RSEs3GY#0DI:56å>?-Os7dU '~~S >4I@ һByA!q0UB4)ctǍD>KK#y{TH`g{Sv&x̌16=g@l1D:5) 3Vs+%`lHۙ4HZPdէG.#wwY!)^/g#5yWi`#bVO$HΣG+mFn$Z@ïOuV`i^1޼W`+cu,H LʎަH= Mͅf8 G4T\d_P)$4wpo.o{B!vIi}'YVC12\HF`xVْ4#]2_Tz@=5v[9c!$L"Olho!LqfCWg WPO*r>G&hffJ laX`GL@0jⰋmn\P61B"e;H~8랁VsfWtZ BE~Y2p s;Q[`g~f|=bCAz'z|ɍ()D e&o{< ;J|]w| ~55 {B1yH?B#ZjyA 0,YoRm`9@:tB0u?5(7Ͳm&$μ1xݤqn: :E'8֥Y (uZ)C.lu mĀc=,87HW~pcS7c_=vp"qN[8@SH|ʽmUp_d.FO,wK>z.\d׊eR[IMZ3ao" ?> AshDPTyÌI<{SP(l>}%dᆧuk`6&ȸǟqY`Dc8ʻ)`Dߘ7Q$jKrw<M"=ct@ Wrxa,(,tAP@b?祥ɾ$~6bd8ek'kp51?f+E,SkBUl}F;ɃLo( ;)')_ktcKeOb +t[4&C"aT\':PcgPC~l['\64R_~ATάaBԥ29WruFaJ&;,E&]R,;^%!Gi$HZ06L˶oOY 6](}_'Glo"+?T +0|6t ۊ E݊Uؔ~h9L< VCUf31mSNUP/5jbRᣠ~ڧSod_D{ih%Sa %UL+^,{FIS}`ޕvUِ#fT4/sdUtN+apJH1B+zHpr)/ZU)v j.plzar_"U%OA0f_?w+χ_Y:![j0'ʈۢw̸16 " "g2*B$xz`DN8AYQρaV!3)TvRo]Ny\0@]xY2[fSG<1@m9ֲP-V%O煃{"m4մ3wD9|Hpui:?05ePVa%*Flt\z5(%Y,I;acbFd,pb G:4_0A}E0jO0#[?9%kSՔ[^mjz+>.YVegm0_/̕VϕދdsXn}׎< yU:({S4&Cc lc\Gf4½Ff0)%jy[iV.&QQą@,!K%_®@<Ɍ.{vI{.tbAc\D' VS!Ӝɛ.6 ̂&ˆ8cMw'BKS`bϊ?9iM$'REu"fǬ_MG+Y&ÉR# ŏ0;reGe@V- MGoSxd ?j5mNh8g32נ!6ɰ.`4py\u맊jY8> Jo0 lt+@o4rg墐\GV\'0{5~6Gtu.xۮ3\ /=p'[w>8\$^(>+2STܶ G<.ACX.<ˣ,2GPlM&"EO{xP$éJ fڍY@mVͲDƄ3#?j.>[h%_ϊVuzK(cګ֗Zn>G^ 'd5;50w=7XN2_⏡wf7*1(vW)4zx0GW}F( SrR֭ sP5m :V E4/;(e('Dl7ECr ԩWUy/1SOxճw73쀀r1|{ݍIUЖHx%#C}k~E.]K7+dk) )sM~B?E}&[bۋ4 I=eENƪ˟+bfl+[voCx*ʡK'PV&+qJƸޓ"Fn$ƼQ嬤E"ZF}\es $w-BEklt G q"%8rU}^wEk08p7>0~(8"G, <5(60jݡfL~ mby&̃k 96`hEFHfEnQ)6s# 8p֋VEnfʷp= Y^`t8,G_dNrڡ o<%j.7Q%BQzc̮ĖsyelJ9K9W 2UPe"RxIE-T $W!7qԐL[퇁hkonDZC:d7.tֲ MHY(cs7+aW)ƪ6>B'0紏i,3{zLf/Z|!0SʢXMWd8b?>nY{&^.Jƒ 1y(6gHi @%g%m^vigdu,]}E%˵ɼ듇Bme86+7-aNEn2Kz ;,pVC$LuӪdΈbue^z#ቢұjGY B]OmRi7q><GId8mڷ)j C-_ \.{?^,53Opr: n/_R ;>!jsJG e.%pf khԸx~3+ ŵN% |TI7ɚ.}=dk*}⺦ }C0^/$+Drz$NyQkr0e/kj.솭զaMN=pH žet2{o_)n2~86϶u(7g]UG7uU'ɳpp-9Ia^7q}>gE9<=j6j%Ux.GN\48:#⣰DXL+oC8.W۠"[\h)Տ1,1ʹSf;6Znj!^MJL'k ۴OLJU֤#)!1f!T6z -)7TlZ`:RS,J܍8=4&4RP)+a_5wrS~y\RD.P#T!b[8K&P@KX8U`pj97l cTu~1I\jYhݠLHOvȋ~-־a?@1/0;Rz0# =29q@XΊe9oj.d}] {ŀkB⽪G%k3 2}o~N솘l+1B-*,!S߲aw F'Ǒk$)b +Dd='j4=p?).Y-_&Gu]85]cE/{6[y e?..-a߷/#LQʹ Pd%OMutK?Hv?.JX3G1{/cF%K^ rSSUT, )0\F&xL_mnoTQ(NU\"'IHH%MZ iKyk9;SV[ߜb"<8ۣ&{mԐD hQa-_l0(*`!,=|~ 2$LVD;ΗNWml?K%!`8E{BP+I&e p:di0 uϗN&}51;G KS?Mn0-"DO=$!fAYaw+y(˺-xihL=eAc"ր$h~+ƦXӡ;O#0޺ k9 Qdk,S BaE<vϴl^-Ѳ; #wl hP5t^ĔQ8EeѮ4؁tb{M1Q%`Q{ z90">n"CMaFYa&XTN$ۜ0Sģ6[lˠL@,q)LL~V԰T='N/ uN8Hnjz>P77gL҆+=1}^Dد;aʿ^D|sl) Rh>bc]WFEWi2PPP$ӕ-^th*[0b$~;a])aR{s'\>+/2QnzUt>k#0 3%:K6 ; aUuB&OAtG됆 e~P m^rs+@bbvɁR=O2.Λ`@ZB& 2aqXnsU-j!~jV@?%yz)*zf47%=G/?X k ~_`ay@x[rsvlLF%j#:ibM6<9j2 &ZF- P8`cb7Q(G8,ܾ~&֕\"֨(=ƋX]/W_[q3Cѭk4PfK#ŬITT-%DW%vz`L(ZhҺĄPNW PRS|' )KÄ1|o,ޮ jrHŐabX&ʅmOLqmY>pş` dߖ lWN>sdJ}WBTK $CaU-NP %lϝ,vmnB䶎 W\6;YJ5%jI-keީ aE7:Ь:CJ lKn26$?($U~e vDmf<)F[71ʅ9]"X"Ldp,Wj"i8.J)kز@j'FP<b: <4/v*~6c)5=0[5wON>AxAȏV"ZS7L)JZ ܋']Jf43ԕєKu#xYՔZ>OD-2z+)i-f'jcPLMO8nA\jBSK$yj< 5VrQ/!> 7wAPtܓQxHYV 㫉Lp. ,Ll Q9W #]m>5 u˓ʄn]PdpwASs2|dmm98Oށ]Zv"kګu*;X1IB7O =ucoa@NfȔ.so,O<ƮC+WN"g 'Ƒ"}gi mF?cfW^tW!.su5'( a!ݚ5-͟ʓg$~"7 ̼19;n ƻHF [ɊCkjGxU|8͝ ;vvOAO1?I|A5t6 [3*3Zi(m%C"s/E&Ā`[:X6k5 )ow$ٮ bU`!#:92K $§Qz-Q_~j[&Xs87Ch &hW\r<s1]RJ$7dprOAOf*҄fՁKB}QxD}'t{2%ST8MAQR ׯb:C㜓N 4pVMB8)Y1IxqzR'Li'YaB獲difR#ۜ]un,gqe^6wr|*fU n5Gud Y"zH:Q ݇Sp‰p~ ԛhq_l#A|޹528o:;aMi .ط_*~`g9@w;JsmSKLwLJj/͑$M*ER۬ll(.k&/ez]}9)  N2WD TsGИϓM}׿D`Cjb &/Z3+1u>.~W`9xQY,kbSa [1ZO yTZEM:eÓ4-0KM\l%A0'lMC4Dz*BDAϏWT=<.q m 3na*T: D0LZnn6i>.^7@ALjn'=ƙ+F3Z^~!d?s3 |DaʟŽ'57JvمFXhw0k˺*ޝm+l=z~(y>B)-G0e1~!i2;^Q' 癷}xg릌0=hѴީ> *b\V#kH#uQ&i4KvD1z&Y]I߬E$mF|@>CB`߈h&<hD̍7š?nE,qXuؼٱ,d}G/cbg) uolZk22pG8!>Wϭxu7J\k㹉mڟ5Ziq,I) _\qsSLx[L@DMS2diKkSTi`q"xi>re{ k4MuߙkKhW컺cbYP;ӭM|H* d8{SDk( R+yC?&*b9"ے4( lt!Uh,=7y)9*݋/*.PD p~iȻ`Pc=d -ZVc!fx.gD89\.P[@[06t-hCʓlG]Fe`)nvX gWލ,bdp&@P*^MTFlr,v绯_I}IeΚ HyO Mpa4=U?Uާtպ 4~VEJ5 *3YwEǥRlU q06=NzQ cI؈W*dr>lѤ:{03)&n@8Dz], ю$-=kz 8~a}Шke5܌m-PYvcL$ `\s(>73ixmˁ.I@ݏ Z'{D9PfBU;a/)F:sEFmJv]XR=FܒySa(=LYxv %wb#蟣ʼn'n.ofp ̰@/PriΡ)'O]W2Dh< }?o$M 6pa\A.CV }1OCG*R  ej .bxr4䓴XT IMy29%nd쓯Jk;Fn T (&h-<9v] ԥ^TnCU:۵e: ߶@lD4Aj%Cg$7]y6_jtPjiC{\x[MC 'x]'{\W/ܹ &xvx5駆8F(4H3Olο̾Wy#6^Ge*7̟ dйi%]!\\ZAz* jH%a$aũg)HesAvbr%9+ p[v+(Y+8Z#S1X{ \_w{QY$ TJrqb aޟ;V5T&,h,-ԍаOdI!xw‘-^%T;*]vе"M[?Php ]Nf4Y?1bBtgcM޳;((c?2':ï Cu>FKIY٢t=&~ԬCd q\y kpHC,ԉα5`ۆ0T$LNr{^*7K6(ʆђ^ÂKgL^QBj?E+4*?kNmR}%[Y j$}bPgo`I%ߕkH1}Sd{[kuZ3εX;L>8k8zuV`3L[Iv:}^Vyc ıM0gyҜcKQ?}∊ 9f"9`\c:-'9D.|@]?8I}7K<Dz}Z =_5(+}63gL)# t?Kɯg9YkIt ES|:;NCZߏPnؔd1<|5.tK+=x$:A$73ԥ-E/H>ͧM9vmuF>D"Jh7ɞl9@4 o@RPr%jĜP*ҢbՎɃ/X4-N\w`<5^XF6*.`dž y@a=W%4#1%}y x\| iQx%&W#"g`;"w܉ȹo^ T. 0Ǐev}f7S EOpRZ;vc(M]v ]KxUehޤC\8NA`Zm/bXKpF%B#6pQkB 1 6_`$mcfoŗ@q4 SSE˔~5ٸ Qݘ`}efq\ G.QDt埿7/B%O狎*XT94<%Bb JrMVgq&gA+=F~10^2?Ij هS:@T՛ rj`P*ILb1JYŸT}8~ڜ%o\̸2ħazo;U^i!+5t~Nc'MhCRڪryurG5vVjZH瀡9mr̘2O`>4ڧ %)b7mL4rnf_8slR<CL+e{H/pn_$=ŸM>hqQ|[dG02҃'V7yB<16"-}v=xHς/YY mN,"ZM\ѭ~6ڔFk4HZ*1yˮ=S٥N} "5VMc!dhC=҃Q/d.ׅ-tWj)877޶rb;ŏ>Wⴷm|L4i1]*j˒q7`23b5~+'(څ?^L횎B@QQw# K;&1Oc&V 7#C j54g-'Kj%8@HInXmY5l#",B>EHWlDN:|لc!RtB c 5@ϛvi]M@$7oBCXsft& JbAerK`G꼴G+ 2:7`3 -pn~7eϒωZXp@Ґ>ESו[q*j'`IRǬ*U "rD9PD݇Wʸ*G٢ ٴap- ~^>}.fօ ӧn#oI{YfPH#tygC#w-aK9\(e $eH;rױ_*r"ʍ:^ p`ᆇ.ϷvϪ ҡ_3V쳏wyDa6XѕMb㰴Hsܶ9aO}S*j!#ͽ?|<ӮU E^]XɈkW/ku)ָ/2kO;yi..FK^}*Ϛj/M7/;y9kqlC+\6pA|Ѓbs6PzYz .G,{`B%v& dA8b׋2g*?ObK@% 'Y{Nn%\L{8?HE֨#OʖCr ";aĒ8"kVa%d}djWD\=n]I:vT[S^a&+ maqDfSOΞoH„N̈b=zy7&kcQNf5~uUtA^]3:2/o.sN$Íxk8kp,=[Wmzy{&ēҳ? *ZomXtG0L=}Bس|.ĵڹ%P}G=6tAAtiT=dt½RgW(jsQх(:"FvR16;4%@|e6ȑpLw+e:D2b\L{V?cqص)A OK-odo+Oʧ@:Aq0@!ZDl͙&IfՖ8~3 (oi0M#dksBn<|ػr":,2f/BkxCm@N40Vb#DA@7FV(D?&k/1!d &4YGE!yqFWbn*ÕR?$hs10~e)ED&C}Btn󞦆kv~oe7ve:{!Z459ci$}FSq\*B|u >".}ZOA-/t.zҍRtyqa¿/o<eiqFsXE.MMޯ@xR0oQ\ri.](@!IbC6*o1$?O'-Ĝ(Z3>N5h_5`nSS䟄'"-+#ĕZ:2p; >I<,kPвG< ѷ~1;Pa||]IOf]F}йzg+1rz9/RtGk Tdo=FJ^7O|DJsF=v Ľ^a*W!ߌzQ0|lhtJẰԪ˘ONl[#f$ O/wa 6I({h7d=a''f<{%A)4+No7qT[/=Mi3lMe{]،u=S *(t҉OZ3|[n|Yb}M/[GWA6oLʀww[t^4gK XxG䄦X\Lr}].4=ZFU7'?_4y*jKoS{p^".p+5M;5FfCOB@nZkQ&T7 ֪N{&쯫5W )/TNf(taP#o#joEq $A~ͦXgBZkз2} p󶬇`49D<_& i.i r=OmE˄fr+f# S,iWV?{\vhLavr{D10剉M{pBwաfI1G,e`w Krw ZmoԺq }Z/ {c3ju?>iK#UXjI6(wZ!1cZ7~:~ͷl^0()](FD\S%'P GpSBh"?/W >!"ϛ*a/ γ)oQ?SwX#d[C|mNH\(rbopTt٘ZH™x]~,(`d[-J|Tq/MG iL =EP |ɕv.ĩ11A\橓5% *j}-uS@5{ư\ so俣h ϕ WBJ[<']a_!W] wDFfB6< h=mǛM/(B!]Qꛏ{*̒@v$xRkdȘlz^X$Af)s(p0RaVz(u1ss b|]#w{ּhw 3wsc-Rr= &'94xi3vsH3K'}tDB1@ a|o{\:yHr-X؜>%YmqaILS% >_ !kr=в{Oh!cZR5YV c; YO# NUv>@%%(q7& }jt:?,W"=iN0(T{!Hg7/+g~TO Σ?]:z"MS 2Q˭{[`pT% a+ѰY4~ၘq$@ѫ4@Z|9Y\uq4tdjӂDw~x)13Xtd nBmhhDݏ' NOLCm0,S&vQ=j Qg 'ꖁF"׫%\ &)Ŵuzx6) pdw`bdqHSEe2gAm0.Χ/Y/`;w:>\2$*eV,uðbX#'#~LB+94}! )l7eE(Lɹ|׀K~t^J`vG+"izrӈNm6$+sQ}r"6[]o8qBSqhFP\ ߻ q] qm2?eZwb H5<5${AEfoBGOyCN|m΂뱼a<h!)\?"sDUc:nb)X?SF;-Z$LyMT_-;EԎ]F#^rhT7Z d-fK* SPP{BE[8蚸$qY&~."}Tf*gX;XSr>Չ׺RJdޖǕbŇ=#dYf2Ums)uGe^nTiVL*Ȉk3c$CNQ 3!mjYGlQ[q:쫰$.ü{{O6bj慗T8屰'k" ^'Z jG鱐>)Bl[P0Ǿ*9YVU8͕DGѬNtDȸA+<*=d$pܚ{O<12au{6EAQtNq4'0$tSֳ3f:1A+df{+R4ꁾ E q1LMO5L]ӘW#oֹ>j!p&oףJT%PX0-֤HbGZ*GtdՂI5PaG1]1 ϹwYş*3JS2 \c{ΪFyоƨ 6ZL aFLA\ATAwCnRKr-h:XK#6*f62[ VI\~'HtcY&yi>*?V/KʻPB첮I0Ks'aŠg̼SAGQd{O3VpmI7C>aѝto]Hò8 IڳM̀/X&2\rnDl4ۏ'$(ܺ(뺿(6?(6$?Xc7qD`CDj(KјWlUU 8fbg IG?haoo9RstK 2Ze$YL'x &3%Z][nE?])[8H &MLvWzL9+"ӕg ;3o`z7ɫ울k㷏J>fh"a0%A^taoo(<7>lW`Zc[M4p6h2˜.}WؑK{1slu /KuJ/Mh&|WKiԋ+Ly#Yt s h/3UG\F_bkU7rD89V|5zx.h/|wgee+Ӟ(d/E}$qhƺ*x/lqxD 9\{*::]#( v5!k׀zy&08V;Ca#U_;~Z1v.]x\T7gJ3/qz[3DB}ٱ?BβPVCId}@_;9Ӄ(o^mQ򜅚?\8K `񇼩+R쒑&wn]8F"GUQ1|?ęrDN:y Igj,Id)NCf0BGUxQXf!2#,#Ab<Ŋ{?M[e9 )Cn_`ǂ4mOZMj$+/eJ=X(jE :zTDZNUĠydKǖ wx9]wx_RPM΄q^c@Ϥ̒pd,7N͔ ly7\1ܤ%F"q?/]c3JzF@?tBb|cb$͝&::5=@G^=E(75=_[iθjBKPp9Pؙ ېۇ JG'6`lzrkҐDi|o{rfrMwLՇya"/"eq k̴q1:+芿)ikVmXL6!LUs_b#p3R]|4l>b |9Xyi7hcR߻ewO1od&87SԜ^=VpI'S/XZI'3ywfjY!.2gl+hm1#fa11`4ǭaqlWq(͙EdsM@noi2]lHU9ϗ]j]ɕ E: x9aMlܠi^wDҰB@Tؐ/t#S4%7(͉sDZ5f6eٔ!E ^xY [4F]V} 6ubVcO[K,!W_Yy; ֌T Bmo 8Xm=QZ<\sgW U a2<:'eҁ*#SLN?=p'1~w( <S6ΖZG=Z$_Hlu(Z 71f1 ahd@<{_ ć\5loQI8r3|ݡ Z(aY[DUnb<Ӽ~B7y' 4F7Gi\TE!:xScs0||dLj3ietR8G=߹ \P uV?VEfIL4PG݆8ESTLC7c7~Z4V\%h`[󟍖p-b HTh;eODeQs*"!XA̰ FDנ*d<Ҍ0]3Vjp7aTx<BMpD!8d16X%ڝ\x U[VJ_4cO:5[ ȗem{_lNC~޻]p [sg_A1Xur6zЫ/zM[)'[X5{l0ҐV 1N$Qj H}`v}g2 / \4e"wD LLc'\]WC?& ,*6(%VOys 75M}X~;́˲;p*$^&SiX 8:R0m Bݷ4ؑF|"B\d H&F?=SK~ )Jha7vL¸8Irҹt|/žXv'\m ʷQ0otC&+VV(j/N^r#D_rܾUXn=`[#Ã6Ǽ(.m]1$Z#<0j#>^Q|3"ߔ᝱d5 $ȾVm>0F I?L; %(c ILlv?e(X\D=ۡCJ}چ[K_}4MHl+)`ҨH甎ypl,RzÚ2:KF4aw%膆ʹ@LE4@"^Ss۠ʿy' ds_|}Z#v1>a݄vFTB7OPvFi޹"IRG^D.r7u >%s\ƺޑh'oJWD}Q^# j8J m.F̷m&mF;qϬvY2JUSa?qyXH)&J]hPhrl`N9*C`pYnrh<j{appN"n<{&_|&Ã^kjff&֑"M[Ԛ|Kt矄CewG. %:8]_בT'Y/kI9<b(P<M_{{݆ `P# =%HTH˥ /@P6+ "˶* |;ꕄ=Db( ꛟI6 ҏ$+Ri!QnP`eBOGۜvip 8X3l2`=d1Ht>[VR$dlH[gZNrAf;ȅz>VNlki9$|xӄiV4WRÉAk/]AUU)p1O$>H^RVE@sB؎8dk-lߪ mQ[1~g/*>__[qOҰ'xh5yua!bMnA?UD RfŦC`Oe| 9MYD&Օ-5ø*\U'\{ >]Y+1@]%?@>^gVa8s ;ڒ^3Yc})ʇWǏ%tc"Kel/X},5V*/:KPJ"m9wc%+W޷o:> X?'{x"94"l3BwrNE+N$G1mjՂF I:+/#'Qr($LTzf'S#W7ۦJ^+ @I1C#pd\^m̀98-q1C]{x. y9ܻ~Vw΁:^$_t=䬲ٸ,,o5txmІg pB sUتC λ`˄}9pӅ!(s ](\4XxrznfF2gfO-S`&s6K#`pM1ۿr2qZ8l5ݨ|Nh: |[ D׫t";[ZiAj.pchQj 8*|ZH].*jbzKh U8bY?dȕty=æS=lrR <7 !;oxPZQ۟?CnK] .v 208%bʞO 5nI8) ֦EjËʋj*Iν  9ټtxi\@54 -1ް4L!A|.bOK7 rLAWď3:&y?*I6>d-2$~IJA'jʢ L|y~Mil]9b=`+VNn瓾Oғ rhwO,)Afs 10{0<<0pN#6/\ ڨJҍM~ kK +'@{6)' #kMYAm/حvClWoG?rO ETtf(ɼhڨ5@[S+!tWB̵QNkhr)h('6*uJK*{#J+z~jbAY Iwu\{G,gro;Y-AܱXXIZ3Pʸ=ltyiY-Y$(e)h>MfcQ@,Jpt Fr-+p۸3眼rof!a{ OfS0'LI>Sg7_ b$bMgYcRr v1 ټtg=uA=1CMĥ5loRz@`x\x1h̟GXi[} VC' Fq.ƭ4 3S2el/M<)Ë A/BId2OES|khWŕ KY~;rP?A ]Ujv>O!Ioك6 BƖrrIR0Χ<%Fʟ#F.ċ f#s+м!n8 *_\tg^lJSoL($VLd Qkk oYv,?ʸϙn YLq *$1bX?t3kgvl.NQJX@h-oPhv2mA+#q\.ځ R/ s7*o:W$>J.FF~zgXlNuputK+'[i-E+HfKr|OM%=ஐLPY\2 yPkhٖ}/xIz :~xH M/L>7k|! ht~`V=5Q x( mÛh%G-g:b6bN)Sv :,kyo=@8ЋwRA1ӳ Bl#~/UV[(>GE͂i%&ժ N`Űӱ8"]גj4/:&%st`QIF(^<=aJ]싪CRwc颩j e %` ZtOs&Ry E~՞a# ]#VJOGPk\' _PJ\3\#ox3iz +L(.͚KU McQR|E&#E(&mŃ߫"~~^1j lzV>c,r yb CddR݌&b잵YTH¶HM;_C"j'g,*(@iIIH'H8Q wjʻ5r!Sk~P9C{KG ]uʊRÄ8.O*ڽ}<@\ڦ,{21AO؆TC693Z C= Z}~j_"M7EUB864*ln&;tK"sH'_(Ft& Be^ՠP ,. O2mUW#.(C#sKef1McI4C ˣw9F(<,KrƮHԇl-= 9_ oXh A@R 1.Q9zyl#x҆z5ו(nۧ`Ε#co#&l.6rPr9[e(8'q9 lR[KՍ=kh6jn0tNMjB!:dfsbUNb0e bd̳O,p5zjBIi=Dh"eR5>(D+q?`uF5-߄Q}Rq^'ls$$;M[ń62Kpp5p-&7"^+i*:\*va VG~kѼIRdC֙YYt4I Y2;+2OE؏td$m3[@@ .+@꬞[&eOXOu"mĝ& uR9xd1ifWj5=؟;xJ2$cV;S=˿f?G> ˆ2œy0pn:ЈGo%àx,۩ [nKƭdsN2 -aANbiӮmi9Zg`7Wkh`;V60#E#ܛ >: Ck^Uogx=  Q}JҦ+fv#M$0&?_khNحoY$˹5^ndtũcŢ/++*8LJm2 3Jx#AI6%)c ŶDѹ^vu:r5Fs|Ԡbk"29w?-4ϒ" ɸvnxV6u3!cWzP$+VtkFH' L{l ߱8 9а8)U`X/#rfzd7H5?xmn- rϴfdLdzÑ&aE>VrNo?jHc|ipW9 *cF}'2͈S}h;:*3U !>ptpE[DJ9A$TiVbZ Y ߡ([{Nb\]Ft ukQ)PA$ec/Sgݜ'N6#6rLn# Yu-Oe7+euDZ(켭="Ƌt' oYOQy=&t2/v>$޸:{8#eơYT. a ~ĺQ(m&t1 \2K! #:) InzEq *Ez7Z[]KG<{ y0Cݒ=s}*dX(/.;XSh61c)!jġ8B,W*s^RőQꔡ4+Cu]:\=& (acb¾.} mDnJ%6ᜉɩ9gζ {=v6nDM!ŸQSe`8yj.6y΃bg#G|P./EyAbl%X?7GGM;Nue ,@pnQU|;6 iXm,[#zk( s aCy GJ4)Mio4Z`^)ނɃr1~~|W$>H|CpD05ghFE:wA˳Stv" >(@o1ܨ4TtUO4QN{QH>"^o5ҭ}Dֈ5ZB!ֆS#U˂Ӫݷ.j"† ;t2WEPgK8hDvXwԴF!]6r$V/~}Nj&4GൔI\ر!>h{-Uɀ ÈD隀 @Zs釗!ykqTKKdoek6ɛO2GmG$/%ˢ«ū0`,Fur2.s aQJ߉o<)ԺlՌJä']xnlû3Wr t\jpa?,aqeQbh%dHcRM%K."c Otca]" I'Q*ps亣iy[^qud̮dX́u5CHb$p%9L.OK~Pj@G8D-2w&8TiaALb 9e 8^]HXztT[D2%KW_Y.R᪹MxuT#W,UJ1,F,56US.2`IP_Rvem6}tIT qs 6gFFQ|3f;@ Jyҏ%X8mx-n|_H(:0=mFRс4/aNulVOG_BV :rswToIv+q|ns=@Y1IGӛHeKU>5g<Ԣ:Az@˽ Ha9ōe,<Pe^wOfŽ^taJC!Mj|oaydc)Ƥzぼ*GvYQjFEX c+F,-$C^RG0V `Ɵ/͎džo4Gn>[O"꾚6+I] X;9Q9rLB^p0HkH wrw΂ǥD?)Jg/3LƩne93^B>D"PŒִ0  Y'&zU(`uhd0t&SaʳOS]PbBT fj~awVܷ?;Crnni7)% t 7(P=$ s2VhnL^TgzU]OJV+O=@9 %I*mY[nźnF&PEuL%3Zn|2!<-۱[0 c3oش\@LHh Ydh6ImAKH/5|c&~P"V#G SD%DMƒ ʾ0K}!V݀-1+z{O8#}PK)o*-o%9Qri[zҩ(BxZ6zS8ݝM*PQl奄Ū~N^pzwea5Gn^?_ zV ,2:b/T^"oȦi{]Vi_28S~crXCm(,.%qTT 4uHƘ2v72,&23E[ 0bjM՚kN%-4emeu@.(j#O =(b6S7aSluaf 7ƂtC*3h^ϪIn-킬%9Jtqvo?$LL\?Qtݙ%\V5'_Ac*2iAù,l|cIF-/Wy}@ɞN /uw}tż/$ͤ.fsK.,@/ \XELy[Y<RߛgR|4q"[KQrxA, V58j']myf E%W'`sySoR٩oCF@jzcSeci E|-GWI |נp2V)!fКϛ/AAҹ_/rG5`-݉ Mr_7KíLs< K3HǺl"."?{_BA%8-2ۃEgmP4mB+~9,yLkIٽ RAb» #ڨ2Y9sdW,MĢRR&Dr='JW-Yfm&E悔kxXbo+A#H63^$x]j&S-t,$}hâ@-DqzKE [aQu{Ј27 ďS7fЛIWhVy/59T@KJc"|@(bPD6>35W %a:ȊW۰Qm1!w!yyTxtoȎ׹6.I@vë'D!>-%r|5>PHYocCj !¤PJ,!gO/)ȗSWW\ŬPyV۫ 6\h<'.fAPICsDJ0i3c53JW_`VX5$ŗ>|h]~aӛ 3yhvX_;[-~ʢ#FXM"-ӢrJ?R4i)> ѧ7s$$|\t[oHO6puX$h8urd?"jXS!;pm_Ϗ+쪭,im:bxo!zj`;^xh4(ā&&BL3alUwr-i v'x9a]%mx !+oB,wH)FyFfXNqMə{`î˥y9'CHhkP/mAWDsݺ-R)`$&(3)I,/]$Ruܸ0kǾKXƜf'j?o6q-E)GEW󌈩7S;ݺa(ApCR2d_o@yj3CU\YF+ - j+VD29?r|9I<{R_*dG Ze[d~>AN;!ϥYPZL͓tl˗`I8w rt׌෶O8~Z_UOx ,pTe?lE~qi70S 0w8beJVf8(;Ane  \Y0wՎ?x`Bc=aÜ*E06(ggnW4'$-saNUAs5}Lg/ra\\s[Pvih Y5_f>T-S׾P`,-Ԅ} 1S`^~-WpCCTz(#W+Z5(N 'LnB , =ϝkC 7ݯtEJS/X-B۫&Q4]p` kY*ێds9hX6R> =ZEC jo"XʕKlun;ֵKnYQHOuxxh x'12 Ao~,K@3Jքhj#ĴvEb:xBP6 GbMXc ՞3]0欘ғ f,IS`}k?7 j}+в~7M+5m$hT̒!jqeZXֱ cm!I3\\}eq(nd7L&Nyom)kh,CS"=@v;1w$X[yGtxrr{|aXac֬ a4ף*D!qq>U`.fjP{%{mC<5$(@TSn}ޯbUZbՌ<pN`ԱaON)= ;_P-0G&df8$IkcϘq=7FJJ N ,cpՕJ((} !h1{3j>NtНUc7<-^T@̘1>C(b*Y^mCݿp@n`HQ@Zo l89A^p.:Z/⿛@G-f)BR泓8RdÁ{ފpXcC^<--pdHkQBz7fmcBBBJP)` ½R]PZe#Ʋg;7wї]:u !mn\#-w{7INE $`hcuhIVJac3Pܰ|Or붥Bω<?G&j[*OX1)g#W.ʲkf¥h[*渾4D63-?檷;mfV9OnPi(v,g0 NG  ȗJA»M hʦ 1&˂J0D2O\k&J5$?3^uB+&hP򣒦;nj}; <́r\94վSňQv48|-0c($}˫9+ZܯXUS-BgP\X@WjA %8|" gQƫIX yߠ)=7G(I0sVpLRryCAD՘}-Bz3'G0hEوؾ#%B/%S[<6[@ L=zj J'}FƃtXL1AD|7ʊW!/|#9;D&8vD TPf2<֌?a_0)pUfN H?L)(#l3Z$KY;9l3V$Q7ȌzIg1o'6!aUm=VNn%a+r+5=ֆb>|4GB1.g^& 5KwGp*q?Fhb>^2 &h%-C<rץT2Ctڍ"u A~V3R 2kjh,N7}Ӎ#I\o (P.>6rAM?0t#<Ə–2JarL0GC0G4Zo v"sM~$;]ov4`W+ jU9&G>h+ͩS]/کspa}7~%S}kؘTޛK< + xJlq?P|b J_E wĈa [AOj̒Z@4hNg@1mfaZk 0)̿rN $g6s۹`63VW2YJKܺct@+f63Nu%&bBf/&9 cQPR&i8:+D2g\=Pע*`BI DEɟt)]ޒ-qYEXNB:ft4aZ|%0*̶fܽe 45#^İR_Y^Um\CSAɜIL"gMEx~cZ鿣.A͋N-D:KtKEU0}% skp3†YRͱtQ.|/R=j#(tF&PZfOMEU۹BBXUz%bYM > TR n- ֮_Iz| {rɩ|S'}h˳:sZ˭+gԂOXI P.;b;þT)JNh?7_ʃ0.aVsPl}~ _(bda!M/QOd:` -H D3+om()~+O^)jTrL`ù:%D1- 1Tkt.cכ0d}Ro@}eCLG)0Eo m1:JI0RwW&\tX0EȎ7I<͝$e_qvo? )YX Yg_0sǟx0yYך]Џk0Gkv=*AY(;ch㱺 8޾,'߼MdiDm˲D=x(AoK ](8OkPU:=x t[T eqx/]W4.Szw顫4nj!WejZ[֋R 4|ʰDv695;{CtVLZ@a)ct:WU Fi퀹3{+8oxL5̓ 9o}F^էb6w ,_N[m{swhsDP4 w ("/lTbzvi첨-I7_ sC4A;Z+YfQV6\Y㲊dRY.:̯sq odԽIXU3\+wDT\iϞNU ҕ'`\UK,$.Py"{m5;}r뼊O&X3InQO>"p ~7nnb8;lU)K~~}6#J cyxL u ^i.5Mr|ӎj C~ѭb7j9qfnk7eq&TJMg XUZ--/7σ9rRGy1W: ey4bY} Z |往4ZO No; 8jW7>4]c6J$u|MDk?=;.U-6 m%13bc\OJl|c*f?ftW v"hxRSG]f"yRꖎ] dWM#>#6(Y`^ZZܧ]E5d̝Q+?2/X"a;٫d D #jF';w5>C:p}AuŤU35?5ҺXh8EжQܺꡖ9"6nWV =o b{]܋S fl-5,5ö>ZcZ'&~H`d]ir"AC?~ JIli_Z8$8q%@h4~#lsLgF)/!8F_ij=0t!1rϚo\;…~'cR]z1 $FӁS5#:bnu }N ,iRY[-#`}\ӽ kX(FWݭҟHn-'Z>&9xWt>/cHӢe; 4Ki\X;{?NdN\\U\?+UǙ>D0rKݩk&ʢaq RNlcmU#A©}CnYUdq 0cN/(:0u)#\XTf5/|lT+тGTbvjW]y{YxzD?꟥h\&kLD_m([4;cZZ:;-&hIX'݋.sfѯ!3(gRkbv,^IUpgo?HdZkge:L->br0k(֫]wfc ^}叫#mr0譟b%+ ih"9Kb95&勤`Ot< xoդRw+UrpvtG(9ɘB9 "lҶt0I9j9\AU4 kFul jPP4@H|+Q㊌19Ɲؗd:5N.2,S{$KVUiѾ8v"=] te,@[c9_{=ٳ.h=]O.&zwc`pWw2#ՅvFcZ]LH5m]WsD<˕O^ԻX G cKM{Cҡ7ݛ+*?~e\'gI0W,YC"W(.hYD+[<|qrpG2Zgh e}IVG< A.I3KsӯaA'&ܨ|-hMϡ⣐x'3n^dRo.i%y'ٔyz6 bT9_t@Vr&ϙk>Ҭ&Shy<9P=1ڴP2.u-=2wԷO~W 3jO_fGtop!SJfvmHu[~G%"dΖ)BoꨨII5e! L2$|"}"owd\++&_!Xa6g5*2~L8>v뺆Z T-a`XViha߄V,+dg)%qI~DrD6w[%18k4,g~kK ;?DԘ ݌HkB/%9nX]TqԠl$#8]&텆46_&6u]B?C< IXSj(z aWm'r*^%MSXL^Ι[yuI~%]$\2kr{hm) H %&t;ńs "\?< [ 7k] {""d5YYHҭ(o(toJP|:PPuTE՜`čbKG ggQv 1T0Yg%Da!HT˝lϗ(' )|e٫&f佑vpYPBL}O`ݻybxs]0O/*&ɣ3 IIɃj$TB2?$99dfU9,+&Ë|ȢA%~^[xjfwxg  ϒ޽0Fو+)Ap0RSg5 j ݖP.(Mf:Vmod cXrmѡ$^|sl~Nǝ oD޼̡ky-Os^JKE;iLz]0ڿAߪ_ב;N\C ʪ Z/\~Lo (Wo"`t Z:v`i[ŋv\GPҧ\0(0pL[/]8CSKMLB@tT8h5k]iyjɶڦ Jڔ ӻ,^/ߑqWԏʔ{cX > JHi-uPۦgGd%) 8E6'Lnlvyѳ< z촘I2gRs{JV;[JL>CX|ޙbpb;yK̚-OJa2}T= U5.c UGk5^fl |f:hd/ĕ_}hEA7OR(lI|ɯVZ޷!j<|F=Pg W7sSM^2ZFBpvAzCYVv5X =b^=bo1\8l&OɢBrG #8 g3@TɳB t &(ĩNtU1jwGפUu24yP|:hBr)r@Sw}#HVrP2Sj3jD<[0)MkA´q,- 2Jp)`=>=VS-u>Rx<-\,IJlM\C7:՞lBCM)4~oH{j`~*BdUg 6( tWG#&gx~EߞJIlz5a9 bi>ރQmdB!)R9uHN^:b!nk١vفV40bzY W-(Eoس4 KE,7)XS_oIHg "gtR1ٖ g8ߑNǐ,] i:Kz:#]?feMgJn.6;pPvwF|yNj8!"z ddhͺA)3r a*q,(F\'N-ƹuA7gnSy@ш0mSעlP_<+=#ɁY㔕t`7O4xMɪ~y(jWv^JPya<%C/ƏLslj>+ysox ic^B9tDLVYHύo$R )Si)Ar?$X5#f|w1|!]dz 2>q;7Ҭ .;b0W_`#+ѴmAB 1&zfЛ,{sEv@!EœqAq\!پ겼:Q(!\W%D'kD */O0&2;'_%DYi, <E$!dzBZG|i7<\ &}v^=^B?BŌY(o&p6И^Uct)H%UqMzӈl>Of*L ,n|HF][dJLbMO|4fXV)-bp," ȅ&qm,dJR%1NqONN8|5()sXYޗ^ >Zp Z1t:MS5u;3RLN~|v&n<|H S(ӍX;O*e["ξ\!ERvEGrp4ЗH nBEzkX[5a!Ҫ{LS# vJ?6(N7 sA.rC5nhNpӴIȷpńp&<M)NS(itQ}Y) z.sk,53[C̻CqJ2\m<y?'# "0U[d72\rn4 s㰠yeB@qE-YVͣn*m%:S𾛝YNE|VĆ4W0c} Oe0R,B)0jC5 IJ]y!~.3aC.b b3?[!s?œh1|TQKs`ߏκ!5eȂ*%fzFvҤb:_[ӌM N]+pD3S&ՀUqt/ MABg-0𠡴V؟Hk/!QcBʓ $FmI`&O]6 o;?ʬ'*P7M]?~R6٦.OƔ4RU}Yn%n s~*;_%y3V&hE8"WB3&3DH:`+d#H^2K &?Z@|g'IOHZxlWz1c۔6Wo_mf(o_(3Ib;t"7p ]i% JrSLROyldժsL57л O\_!SAyuZ*͊EosK☬Z!n?3ѩ5B%=?.HgE+p#d3+G8$fwlaV=dX͟]͞/Bۈ+}<: aW)d+"*ΝNaH/'BqӬ./SJ,S)6 dRJRkLٓ!'5aۺ$l\}qHT2j̈L.ԡI[Iuwm h¶LԚzD[rr=*hk98ӞR躪92BcqG WT'<tn^l>eT [̰5ђdwy(| Z O^:+9S]mu dށM}}XrJ=ieځzp12D?hiMȉ'8/eɠKS}v6 z\“b3⩂` j FKL+'۰շ%ȫN`]1%hZdɉ 쟦 .JG}P^=,}n[HW%gлћb,U'Sňz fBEVTw.k8ld_iKRER?CCc2smǏ6m! ?2A錛bvUUh+VyskR (PjzA_@e"U!{锸0nm=CQ9/ %Kpom kXk<0C@sNI ꌞԽoS}IOr.7jzti(1t{=y4h2X <T4vvqvy^HLlpT )wqߟ!4T;B'0֫?}yo ξdmX|$(R̈yCߵQ[DmG,1 9}z>p타Lycy)!"-qx-ͭ׬Ta֊(D0CJ*먭+"9M Wt.&݃(旘Nf0ox5e{pʀQVrti3 K۔kêÞj Ѕ`xZbQ"t)IYQYR0r/Z~< D~tyR@J0#YK:ɨu+V& (o]vs3 7lY)G`ӨtSSOW= ߼ħlYC01|I4⬉fSK:2a-O8lSo B: T(G T0{fx,>$l]B^4rP`s[Ƽ6cnpTܐӃ2fϝ"ce^jDCFVt Kat(ֿOowyH W92Z1qs};3'dR虹򸴙F?1܌;H{nOc?ZsmճS$kȫg)wLG͟V-|0~=fƂ¯]u^z쇊38DoUSeN\!AS%ce*vz|3 %#_|erؗ:tR6(=/"|=, lX}JSȘb(,Kby_nkaG yl@ h(^ F826*W4)\( h| Ziu` ,&?CWt|QHS*Pa])6PFY/^.0@<sQWu;M\?>[éS>xűOMHfbjQMiW?1aPth?e zdl9XeڏѕWAdzʜ`І#\q m)nsx x+/#-u٬4:0XU /؃ ^߉=pZfrαft[ՅxQx_8P,<;6oD^:L{W{SoUYLR:{cҘO.^q9T/N-52.?+7{H5 drSJo?Ékٻw ʠhgd ~95<ã˳ˬ8w]^twp^CZTH GD!qz3ںVXΕ# -#ƗЩplB2΅nnXB̗BP&mW<>і5DeF7W'[Ǝ,gXG  @ #]#~:e \63V&|=5bj}\F/\0T::{/y/-c@mUpZȗv+JjNE]EpgQ/J@jUeN ׸\/C)E偾R69&%ቌҔ}dThr|t0tǠZx%^y)EYVFkӛAA+$N & cV9X'/$=Bwܳ`&Ulp%0NY2U M z\ ]O9&餧Qّ?BNS2w1`] RV}G~sC|34WD [Ngys<*~k`7fk\e ٗ;4еŹ*hk9>72gXNʰsKs^ΎFRZc- S|-& @Y p#ݒ1%pP s?pRk''S,KfswKZw'Pp5D##k,nGa͂q.zkfҤk;CǔtR^rxP~<`U`N- 1^ӱm5hQb zҦŋaaTn;.x QK=g?J)PΨfm;ysI2W7&ȳTR\N1m0jU&q"wd"ZҎ{J\y7z %?eE%Ck}ݺvޡXzшEFu,YO^ \qy%:^ cfl(x@8l56Ϛ R1C3V of sv?)2`'7 Q1 `4w9* WljxLj)-䨫=b}Yl2N!ㅔ⭰뾟C.3o\j}kh !h;wU2C ]`Y&ʯYU.Ef[>IR2ng*E |#uy:J|=^WzdP6'ydJ<҅͹ŸP&-. [K8DءdzSV9^I)ӟTRh6KaUxәMıT&Zk-e+g7UwREqB e桝*0Օkq '+/#8zL.;&Y`~yzPfVM9<eFlˆ`1/z*FN${YnIc?%kހgfcx|fVWfƖ[,k6XFMG㋙k 7J}2~)72Q4}b"UME Z9! wE%'-S.ŵJC]G oaU2F:!Ǭ iODNd] e_BawV^Իyj: w+\"EY#fI4?Au)||Ãd r"zV jQ,!N]U+U%Pv`13M̹ {d~fz>eҮ ]mjnWouO0$0dKRwqpZfUV l7_[G zʦ2jPlL3Uz obOZJ'h0%>5qJlZ0KRc;yjSv[M s~4λj=Au s.ZKR1R=5H f z *`"hgrRcmm >+50Ƕq<:)$bDBxVxpfs#9\ Eop,Hyګ~ -|CU1Qϰf^YD@{ cnѫPɬk3cgꊰ*qӤyD{b|ͦD͂XSi{ !J }8` IOz 9\ Ǫ> lRVw2t JY_O Aݑޒux$Mb M^ 2gT $uV#rSAEܮ8}) 9ObvN)fs+-*l! eH(o-&WfoI(R3q02L"^AEa{鞗41{G,/T[8 #kXh4Une`Ʌ`QJ RtS'gA}U)U隶[/_PnGNqHGqņݠ1H ob2e[u3.DH!ZU1&NZ7]LM f Td75ibDǍXo ɍ :.E"Od=Jov3G+$<9O),ϝs?hKw.ZQ'S]e޹1Ǫ $ǸH<ˇv *d-b{ɭ$y%(Q]B8[Ӕ7_y`>g߭/L9ZH`mPȔ(0QfҥK9˚`VaXҔ^.Z5E cYF;5=0!{y dԵ+>6eѬv2v $ Nri |^g/8zƹiQ (d]1aRmzIzUjS/3Ye?ӊX1_"C=q,85ψcמ$;j߰e\inE+[O 9wRa5*^'U-;v xnO>O{{sf}:>G6~|]MRmh$Q4Prt00@KDrR jH!SAvˎ<תS3^$x||w^~uEcA'ǵ;Z>k:3K&y&*LC.'[dL~^Z= Ez)Е V p44t^_UE{߫IMؾ3OBh|AS )=a24H(giڠ_# P`w=bu5ǜ-  %r4!)i$FI_jkvwjaaċ#1uǰO ?A޾ػ*/` 7?U9ܰYvPY%1h7?Ĉfŝ2Rύ!l]fh yy ,r d9ʣ#Xuo31#]| I$1 bhNk B{MkKvxHX˖"+eGzs-Ls{r'Ę>laJ0VG{?8ljپBnV;aZC( S!Pq/SNԛP:7]Oζ7[?H"#4 -AY4(y mh#>g-ăGZ24njAvjQ 7؃hFtI Vqqcnqe w.0`GD#Z,Og9ڶZI}5r8j[o{Ynh0_,ZpI_nd%L< G 5וXP7uHuU/In'nLO+h (x7h.P~Zh@WwsPH5*19)$N#V m:vvrK/$ba nv]wU֨ 5SDSBޥl&~Wq`$Y6Q vTܾeLg-`X10~+ړ5BH||vb}(o:[ KrRm!HrPS xGHk% %'aɯ3$[k(媁PsAjwBb*xAfR3Eb_}<21wܱ% *v8x۩Ngo(¼[KgFzxͷ篏%ۺ֍ӝ֦8}ۧ9Qo=h >O2!h_sLRrPo YL^X%MZlAچB"liPC^UterX SkRR%MRwmIJ/Ϡf|*E 93!Qg;FxhP %pp X|:FI!p*1^ ~f bۄ%ɧ-5s],uq^&ڪ.~կqk~i/XBzAͭj'rzsAaVB˜dW)1 9G; |Z[xX*!+N|"Iu̲ÕL+\5wls/nq+A/D-LY[NWɫ9%'`K)ARa8.K%eT'.P{ǒ[72+p5@7z'Sw4u>tiT^w/nHKopjJMg_T(C;Q*G(m& pFi-.q;P Z, !֛QO\72D'%XQk6t>gfi9LV3|i$o+6FRipldùJQnVW- b v!!nj2z.z5"A4[m]mji7#Od~OdXXi1l+ 2%l/~BoZ kf>KF(ǭ  ./I,'ʊK:hF&te,sا&jX7;Nu1RZa'd7%O>m?Oa;$R{Ԫ{O`;_SW-k[4M Ts,:,OF+W6-m>^$~E8vb#OY˭l8+8͸xFd+f R `gɹ (|3>(?W[.LTQ14#^o/ ;]BZ8G!Rd~o#EVr @T"Ygj)n&:U_k/2i{ (l9R_Kl-f?5g: o@tXME߄ߺS~CnGuq̘W; XŽ̀Ȝk' dha_)=E+y1er;cpH;Ҫ2yP2}LAe4sjyc, KԸ׍-q?h$LBr݆kN rG<`j. fVw4=.N W SCZAH+MV6 U4ZA+Yfii<ÆQv5UNI~b|xAX5jzċ5)>- -|A;?$ mt($+ևZFU=B0K+9ud[\Wy{Sy pm>f|CtƿOvnm4jZZA3GlToQh4U$B¢#:ѳU|I1i!iR}O>M9mR]Gi&V=?ۚg6`RH) GtOw!Ka Y^T g9_1O yW v}780_l0VCa й Igr Lk6CEdF>uP$'-"r/6/E q5W>oTU" a\\7+/S NԦ9+YcYl MѲ{9ЗI:,5_iH&OylLմXUͦU\q\)l٘as."]B,-Sr#V:0O? yQ.Fܮh̎lJaۗ_╆`qo1sQi H۔gFzW;,Xty-Sf8Lb腞0,~n'Y4[YaZ&p eR:.AjϾ(Jրy)̌t,q^\|[N#b eKzF>& FbhsD`'6Oaf + ^%T!ͭ︷heO)y62%6ZNSX)QjJNaǷ4p?,ZK"(l<d6PD>gjlk9<ŢEڔԑB[|LU_aC \~)%tmJ[i^Nd_ԧkIxVާU9 =!pXPz,,ݷ0 ,5cYMSިdLu+4uTwHi~'T#HȮ ;t~Ma#Y@av V7f[K@ZD͊Yõ\6;|Z DwZTjnd ";4 [679w6ub  ֑p{Vl1uuC,v落䎧{USbz7;-YX,2.fN*a%M71B_Df.͵;' ,Uk_T>ųs_!D\>ړ3>K (&9wKR`o02wrDO ݱU&X)qpa@JZ%ecy}t:BDgj 3fY+⻿M)D=|*rӈDt5Q\Hz>ܖ)-g` sLht !ޝmNd[8jϙ̟~>uu҅gP٥BL<K_,m`El$ Kh 5/*6@ys{B ֭2FIi{,|BcoS66(,]7\5ƘW&-mjsOLvPb!IL LP7,KKsvbPqScm0IhpuN:G>y4I>1luőoj||8B#fUys@1W±@Ԅ,"C (% ;_URl0kGM%C8E(Vj,uNnB-`rak3Rn5B;pz$g.CQ dUO~Tk$~q>!̀`;j™g!5tu:;p{Hus(¯kGx,3]"'@TE )HI>n;п>*k>Y/Z$z&2C5ZOluCUMNQnlaۮ9C-0 F۷VA.kRc{_(O%ʭ`G֠51}yyI{:dGsK֤ K.*z T{m{GB/&Y𓉑%?Lr$ȗ|_ kB O r\llhׅP֍2.`k 'Ed=cNQPfFdN[*?6%V;n>fx7ɉ%.l থ|y8 Qm7>dXaq-UY,]>lv!r3nCOdqkQ}$?w!K%eF~,{4 : ɬa5#uQ.Q}RG7GK h(zrk#S>6n]$Qƒ)@ YFW'U" $.^Vj[1Vp( YT* 'ԙ)b=3񕛍) KG s^_!ʚ9q1,O@?L/VݲhKJ-#ꁬ*B޸Iگ>z8rWN9B{ F G0ʴ 5_:M_=줭J4J9X?~4}ܶU+> I5Ȣ|#Om,3}k(S{A"^S^2|2aN&,\LosRbNf)}S a6b6L߁YY*8U^^`#nTDjR]x{2TY:#l ׼qTvzDz]McFBY0 Lx'I*ZЎ15Y̮z±̽m.!amND}1~FL ڰ uwOg8/ɐ ~XHW.7G-諫DM"> ˫tz]K73dW!d#9s@L=eգz|ߖ{#6Υ;ɸ2r3컏'T}+|]W'F}<2ood27wCDzas\ܧV\j GW̫yTK-+Yw>u֍V/e9wLF`p?k\ [ 7: ;$BP} Hwn# 3wߐGHV}.a>FvqZ.TPȻqUR H1+tϋ> ƦOOjAy =l~@|*lUTBS^ ,ݠS/ wVs~Is nh=IOPwg*,PCmd6G21+h}'kHJU [l q, J?״s+ hKy0e8<~5yRbMZ] ec,<> M2cΫZ(/7/VOJ4d%L*=_+r2$<(a#- g^s#QԿ_ ~߮TZS#(~˥gB ёY0y(Rx,x1[Hܨ>N @6JtTU'I*H2ñ?v6ṅoܕh7,ÂBK7Q&:l!+dIi[ncSpBM#܁((>EIM͠>VnvYIԹY!lW+KNvϴY~+r9$nJ? 2EEQW Ms-n*FLVquֻb(eYz1A=O%ؔVJ#3|  esʢtr]Pׯӣ oa#KKSͳ&@ǻ*IusdZ2+'ӏ- 7sB qOLKr9ԘB[شvjxI@ʓ5sHekn$? -xOhGiOyQ-5,nRjFݽq"vL' XUyvz2fʞV_71dړ>lFDaO \[{IL@(ȗ^ s@#2ɓPp<H ߇V AJg[PB㬬q$U|Y-< 죪U\<ij5w1*iBV~k84ŭuѧ v5QV'e ~  {O QQLJkթ AcuO0o+uroZQ,Bſ'ZLr_7. j|hewa5ŷNHOCT/)^SUd |2~U. 1"p6K{.W'.̥v\)R*KϩG©/T̤*9(z]Ex nj_F#"p[H?0=WhQŢr޺9*w3uŽDbVX:U:cWgH+tbnȳmGraf&-4x?VZ,k9Ϫ[z;VXx6 xRxX~gM1ӵ c5w279Ds }+ߜZuB{^hOZ#=]өD|#`в6dC|DlP83Qgصi EI/fp|  SAx^C#ӟkS;3;œaܭP02* ͇Bt.;N6M ۋH1O _,_n8' L/.ogBfm\kj$̿y9'>+)0oFBi'R^TWa`k.Pf6eHl1о]gh _0e ګt6q׎ "vO5 -3vNJedhᣙ,X;8{yRћXuj3k))Kjf6d& Z(wc 3K|E_B慔k<\'Fl8>:y> >ϥo{y=Tx[R'|9^Q{.)a=&ۓ7=6Ƹ 4aq|B*>X>;ɍ0t2oQMi^qe߃g]B(G ;N#d{W>S2F?^r2̥P0l-ǟz"Q-oS*Q`3P# lٸ^MLv7Nd7Oom]]2_/%U oB"Ek=9aPsd7]X0jOӪ?g@ n4K[7n rN,[uCs/_R!'Cn7O] RU`k?(AOmJH:eOXf\+0(e9 ¨2IJP?~5ag0y nǜ%$hl |Ra|63N+buKBm1zս[ajwR_:=< 4P*4m)Tك일ʐ1 # ,Lnoea'V!ՋPlHPQT:նû/qFPb0u%%OtJ]n._%07-L֬b5TZOrUBKq̖ rIG_ /ɣc7dm^韤`L*h6 }k $77YK2!,ޘ| p<};'/w#* Ŧ܇܆3GjNy 1n#X%hڣNOdfd^ ٶp_~[Tf\Ğr`biac );=hLjq4R jⱞ2z~|g˔hfG@u9>qg#$G7&v+c=hƩR 8cScֱ2(gy+WpD-Հ|5ga5FP#hKȒes̓fVٶjㄼ;UPy2?Ec;w8¼X6]imM/GpOP^cRi.hIr)Ӛ8%TjJb5"4u>`8%'x<(hKX&Yyo ѳ"WFX,g>f/d͢jW x/:E򀱭Z kW?ˊ D5 S@GQ ,X7?-FXuV,]&ȳY"ʳ#Dh:%ugn\i_ƹҿlrW~FtۺdʥANU7Z }N-%G;{7M~,H|k-^{Wcnr!)gupQ65E=lpYp~21\Mau2h^.yn<N-Qx{rfkMy2mNFHFS) :w&dJ1{DDiZ85HxFXK8Wngg?X˸*Ȏ5֮?3ӗص[/l*Yˈ Pș}t1aٙ\ࢅ)38wB ]oc-=hqNGKMq Wj{tV`aٍFW 4Er!806bhƒ`iz4>Q*_+⃘^5^3@Uce"RjК$d r&9.kZZ HW~? (DLOMOaLK7 Ch0Nj^^$Xe+K[7VhۖSy#ڙ.~h#^-Ukz"%Ʃ6ut]C Avɋd0J\މ8[[%.nD.,|d̯S"<=rTcu$IR ȘMVߺ򺄼Zmb vbRfyM D0q1]4E>?W9uɚ%D/"PhIիol=wjѐQF>PwD*ќye),ym(b~^qk}^kY~IAG˫Gܪr*Jgl4m OV`Οb[qYC A_!pʩq1pB/?xa 4As4hPZ'p \_*jLGV7ƁuF08"v Ł{mVXApiV*]r A[\U5^fCZjio;2;van61XyB}|/ճ $XxG4\Z{U%=~aĄNyn_ȿ4]ތh۹X’w+L Qkm!֫ $SnكgvVQS,]2a,T"EX֨MG4${KYЉG3^EG1,'*`QMY"25*zMD3^s+I*Z}m#}#&rcYe33땫^^'w/ Vd5+es \h}XxaӰAwh$gle~'Au` {gt=ȎrYPѻ}ì؆% 훯rI:|k&(=Bne3ԠFA3[Z[tZFHuY)74agJX!gw W>6)R9KxD1U]A?رЗ˴+I}e;x$eD^/߮$}꒻K~=Mwg/!s|Xt_6`ܫ>yx klO'3BU+͙iWoS @Nc!f E/eX`z<|(38tŻܪ`%~bBYraE Pw|kZًU"4&(#8b~,ܬkZz_ aq>s8Yx@K@?aeq p_fꍊwߧ߶Fot{~S\C4XVr R?W N`Cm|?k2|>zc+fY?j|wbHg,sNgts>X&m<<-%‚d'ǶO5 |Wh*,MЕJd]Qug%P \^e>kJ}sLs ?͖nypR+uL?U^0d3㘉u grw%Z+ h;\HMͧףMUJs6[x;ܟ`J 1w0;Wk3اoj3 $AC+ 0{+ 8 PF>E7/9#/O#? .Nt<y[a8xlž<$IOm e+0SnunՁ ƽ#0)@ZPhLP|9fcEŀǦR,a9h9ܵRLhEk<_$x6e_2*nWsx_"2}HULKNV*ʑb2eX &G>Hk7MAԬ +awZBFmZoVm>¨6 :M#Z \<} ^V ߴxu| #1PRvbL3#MPF#1L=A<6́W Ho%AV;2̈́~\XW0P~x2:/7IP('@J(fҨKďVnQs \+¦Z5<\!C#C~L [k얌[! #KBu('9 >a۶ijC*f ԝt.`S ͳ[$6yfxe;]ke1`6vH] 243ѾR!5/&/5 tyQAhAXɻa*kΪEuc52ȌXIlP .$_ bQP/՘3-' ٨s[ $.~!>X =_43^LQ1Z&p* *6SI؄ML~e ςȿbj\smBL42kJ'O.kMXZ;ğ]0 ) L\ <ޞ<12cS :R)g2B'V&^\b@lfѣ<y8z>JF ~dmt1:Sz~dtPane\BtA^{!GadqgJYY"}Dy"_⹒ڴyzpaOUS cHOqۺ앹VUt3(Dyl]N3qn. +V7LW8c_b/%L岲BML) u]u{wiy4'PW㙊Gƿyj ]_*~T#S\q]c$\mMB/_RO)V-K#4XIe(3AbRSL.i{%ӱs$ӴR`G!A$4]I7}ȣ׊)P&V Y=mF.B!G;S |ݼqnI˽R@єVqw*/LE ?NJUsQVe_K\ -C,`>мy^E6m fIt.s؄!Yw:D&Zl1H j(,Ƅ%"Sл& /#n}]h^kV!٩`"ROcɬ@9|Iw iDPōu$uw4nŻ(P 7{=,N/;zkj9yJ; IwPSU)%'HS(ia4l>Cz;fdGuĤBkCJW1ljS>m /Zn, QR)qd$r'!`*ŷa͈hys;o Lpr/adRF;߀{bhj@' >"J48j@j@,8@APS?/ 9D`rUo)su~Tswhy{ [p:~@d)DlT`Vlݗ kEϼg@< 6Evt^R;+Q8oȿoRΕκG*00C5Ӈ+wut9woOA!@q#K\9RhB7ϧsr3PDlSO)*>y;se7ĴY)p2O}c:Jp2iAHTHpOrFՖAZ=BBjVQ#z뗊pp 6 2[Ri17 5퉭{_@6b.Z!Ǧ",2(0. F#yﻞlG<K{O}3~b <?Z۫rW_(Fs-U9˯5=6͇Y*࡝f`$zXs/2; HO9RGf`=կq֬ `Sb ݚtJƄ1 ~]i$AR>O.M9Ӥz~RI%*0ynZ|Kŭ )QO1EIU"B>YBnK}D{qcNafy$[!4?#lͱ6^W79U@`Ы7fϐgTExjz̸/I-;pyzl2'$rY(H\єBdk}kz t64 7 83~o\(['csO(sűV{za|w2VtJg>k'C:CFAk$PMx|o #{bxa\H}t"k5HQvem^4֯7ȇr < dmGZT9.i({4_?&&*bqZ> (}, A׬t|?8[73z:ei:У%\B?/ ?{ D<*V҅{wH$xnl{OŪ ¶s'zPqcF } "QT{'S2SӞN=Jaؠv"%L9e7 H2Beg:m4OKYc1-fofF6-MHsRƑ-9ЊW95Y-1oĬ4gzMA5u1-T**JQ<ه.)y7]oFNT4w?!6_ ߜP ;}Zwk'JzR ?*k?"Xn4vP ^!=%7ensLoo4!u`O6`Gh$Y`$<~{!zj1 q>*;ՎGϴF8Ӌ,m>e"w<_$6 #ֱrA MY*$i!#3%l^`pGϢte0P3Xǚ[53o`hr5{R-R"FYKSmȻN j~}{qLlc0'!Ĺ-SNt>iN ީFz">Gp}<`SD"p)Ƈ{/2ޗlۘ?MhwNg_~71]U,S I"sQK2ف2*|ajIܰ ն(/ڬ>gB%rXjT= U0DIj|K #lF3xZ/BNikP  㗑V|pu"OɆ}.R8Cx8ј=:/7 ,ڏIȡc͘՞k\E >.Z$I>c@/mҐ鴻 DlUy{0@q='V-6osJqV 2pp3 I9<8ūw.wܛ+ݶSxéʥ~ejfg=9xgX3bqOnB Z[ * aqJX c,1, ǣ vewDv$wL:{K~ Et)qZSaG~WUJK׻'FMPs\xX}\GqxadT&3% ʧ]7S!~ȞkwxB!>HB{ M{j w[L7k%̉]YEW6kԀ+Kg?u0Iޏ-0{6H/LDZ}<:O-Qz'ǑD{0Gyh j!nܤl~o+̖[C$|=9.%[Cv[zpL{d-V00wl"HQwr676oK[O Qo(h3b)7_.+AAGͫy 48Rn0!uˀ)0.u#;XԼ/Q;sP3g/E!1 ,%_lѡ5nXiNP +چS9ì<'{:e91E2`5\Ihol ^;~1-q.սt)C_qpܣpB +\qyDIJɰHz%SAac*$cV?I"G[H.{q} IZF_j: Z6OkHj?6m[-Iʻilh]*Jji> G*;$dΡd LRE"T G๓g3"# ]p5˛%Q# PJmt;ӏœ#nHxᜉH{$`Z MS*8bj1ppFKOaadpr1H1Qu;%Ňo@۹kSxK/PaMGF)~ypЀ j_ S"an1єXުKbF@u&O8e]jXj/RHBtWĜ1A䷑^\J Lk[/)$1hC?,ekH<&Кcq2 j ~m{xgGL{S"@@/'/7_Ab+ RL`wl&_5?5ڱ23S'%%$LqF|Y_(u=Y:7ج.ПE3RK&WH>z&]#UR^7ujOw| )'l5+m&?.0gew}1YZ^\%VږŶYgi1ՊG ") SZLIC"|Qp6۾xmN5'@og^ BK;}.?911'QGfν͚) }6V(ΤaҶў냒tLcoY@;/=cQ۴݌gl.doJ~xϑDzu jqވu!~:ǛU$y},_\gf[)aO= 9Dod"K#t[FᱳM9BK.<7' y;Nys-pV~ͮjjaZ5[ t@S:_҂":6IJ%Z;JЃ\VYXCtx%ݘ\bjTfB&bkܹڈ.]0 x.7k)wT>i)Q@nqӳ42,EV̅LUc 5Q@M˭%+$b7׉>TjܪqᩗsVpZF9YK,Uy&e΂K{wm_~7.TD#P|:@aM|W-စ\o+c·A΂ |j/ƒyhTÛ= #&8]fvNumELR;vƍ*ƈہ"ev$V{* 6hUfc&ԇt"8%0e1d43, rƗ\_E_fHP{Ԫ^LmILFi!3X́oY5 ]$ *D]OǺ/N[bս?&8: M=7w(%\LflDj΄տ6c*g ܡE(/tRWx0mBKCESsɇjb8s4;xX15_Œ3񩲚JDwWKat7TA҆4/[Jm{x%#CK~e;[b4j瘼Qu`1"BCqؓg+σC=:k^mg1QXl>Ǭ^<*m C;!@3| r#ls_Cb$H*& hQB+e{}#=`ޑ;g@PZstL6kp|`~exg8;`߷&C!4^k= q_(SheRNY1KxJl=ԐVkcK0% Qc&0^g]xiɆ /m@M`Uł@uTh%"dA:x==zB?Ae'9Tl.]AW:>Cq<͐? ʥ8SaOr<]-p.xsn &P{^H!Em ]_oauEHC96ʘT cz)WOA] bшfb[}H-OX.̧TwqQ9egVpt`7ѹ:_`/+Z"=8+||Aؘ.@LL $ B=LmlxdʆIYe ;Xɡ2YtvjEW/H3XW_#i4rC#Ui[q>LBG2ݓQg ~ Dt9Qo\̈́SNq4I rP?=$=*JQuNKUZj)wD[xTlR2.CwG$.ܾ{S~ےLT4Ԯl M\S+ܤMለI=/jjqwy{)`Ÿg_/JbgcF 8 nTU4I@)SHJ1۱4_\C]Vh- "=D8 \^Vt OG<}f'.[!8H} 0ՎUP>iF9[< }v= 6DlcxJ%7S]VhFt}jdW5+94OXE8#l|R՝[c/?Jrɖo򩊠o)HW$`&{6nH/|yTsa&a¿8!͡5Z bS5{EAV8і'YCw* ͡8n \~}*DhWcJHNRnKOه#M%Ĝ]f͐KEDt5~0}k!%iؤk(LTU=1ȷr\6NC;x8:?Ӥ=U(@HB7X6]Ҹ"sxhMYI{3xt -vI5(r8ƱǫO*+RH {a9ISwjj>qSF,;Tw^ZӢ{:JO0N鶉WmXG_X %uxOKY}P;T='!}da⸈%4%nЬBqzuЊ26~8^eh"؆))L Ň ? ! N^Fy,ky\"]@XP&V4095 ]_XMMha3K4/ѳ-b~C&~{@a_8)<^ *!0/v|f*7[NwiG55 q1 n'/H6'in}q|[U/ ୣh/_A/"W`CkƝ.^MஐDsl6~Wٔw-[1Z3hGT2pQJ} r% [QDÏSqw7x $M3!_ߐɴZ% Q 58@BwPވ4UTـqEs,\`Myu7y/Jik^a7{Z%j!n7!Z6J$*o4"#VLd1aDxCJ9F2Zm3_2 f,㻰WXrWoPIyL8|v;|itZF]?$#G7}5uah5v}n9N- QXةnf@@8 `h8lʉєKPAVa80BR۔IKV?}?gNg]źK&q YpAƭEŰ)Fڦtxj5rжZJG/ʜK_^%{Uz2mbu`(L WOSh 4p.8 Hs7HI6Mohz<&qψ 68SHZH02I8M=I՛]#oŸP>|NM:p6!GBY@Mo3eߴ19*x@FZRxRm2!Zx7a8}Xl3V?aN3ҁo-)y^8xW ɤatiܽzg-٤mo;vF]teEV.Ct:.\k'|VH+<үp`0ȥ26Ko~ff~@-~,B{}v)&[gRjp/.tsp;MWX.'lG-Q†(h%*V4:gR#sxv'ȾpQf%YP^=Տ3&5nݞ:/tBq'˅c=hxX&Fuk5QAlY/ػ/`b57o&3 7EPt%gX# dp k5 jl^nV~+hީQdތnpzdqxMk@Vnޭ|.NjAVF0(7 ~&$8|ЧgiT&buep=?w`%3)5GzT;3ԃ6pS٭"KyPlkt1Ć=F]"Q l};' 6 mbr!k563vAr`eS 78=`kD--9cL6׊p䢼eږd}M v'/w{`oހ``V!Eԓ0)#O{왑RG$2exM!('v4^z %W'+VRZxޮa=уP!ƂN$[w6*aCd2y^= GE1(|`^[̹FLǨauٞv8/uT-xDx1OOe3i^{y\ZhbAryʑX= b ȯ0.!{2U\bc@*jʤdqW(i#)L%;h $$V3 0YFVWl˃3ڴ%>$/!W?0HWe'_q1r8GMSzY=[-ыT1e"uFa0f$t I+Ody ]H0Or]W2 I8M& HZxAƑJ߻ԭdKKhX%җ3Ob<?mJČkCҺc~z98Վũ?SX4Uݨ񖦩pdǁ]Z7Q@FMk&x~Ŷ "yM8qW뜸zzc`{&AHcH Yp^(H)J| DnݵSF|ɍWsE+f0Qoaih1&o׈̀i9w[BEJ(WF:u| 4D$IIJg"U/hX4Sk)CLI*L;3D{e"_{\-RM0u9Qi%K,pn,OdL:Byq,21Tj}xҌWŹ4/UGyR3)+!;]?zCEoirߗO2YŖ*I&09՛2 .jc㥱iGWp;+ZFq_$x£Q]dz|Ǭ]fa00,M(st\y%߁A,j7j?JL8~{&^)ѣ5cGHt hYI>8^U<8[ bBGN%wg0kJZsXPvn|Ӥzn\! B +ͮO5)Qk[2ut#p"/׍G{:{Z,t $qj mJx+5mx@`*K˜%IsQqrHWH4b/jXUg W4 ,l_!ftCa/| w7o#J*HAPҾҁݽ\D]!^Gǽt{޳F~ =!ߦKَLPN쒍ȔG3295ӷlc`)~ eGqE~qSTL@W6\ Xש <>N]zֱCZ#㧠LIWȢ2 \ٟEGz/z#cyc8=(xv pA])$x[Sg 4wR;rNqk0knwn3AH339ڏ ͺvMDp=񿐚Tu#4JgCxqYUaG`+U.dFtx b*c!ō wN 7}]%xSO&>|y&kN)3Yg>(A W㸉-m$qx+ {i `d%CC#i&f(k1E D?,l8DzFv-8d=v`_)ҋ4|-,|LH?7dW,1&?w`LcstTR%9Gdz번zW11SVnL>o U"EC9?ӰGH Q!%*(%=YB6ۧu:ws!#}@&QUhGq9%'`d .A#M#PF*.{N}(NH~-0;],ᦝƪO{-?u>m n.4%Q~#M/fln85a@քAR iv LM~67g/)STs!'Gd.+@dc]Qdz&U)s*)iF֭{ᒼ9zrmO&rP/Ty?l( f~5j.zj?>,5 vDD)ZJ,n%[S=E)qQҤEñڢg$i Q{ wWM$IU RQeF {2¡b|sCW&4 ݤSDH߽ !܉kLX޻pP<9ƞ _)N(Dg⠄k(5KSoDsY O gP[cQBl58-cM+S}_(?ʮgt-<`].QwUf8Uεi瘑*wՃӜJUl~C=8ӒVkXo-괲g 5Iv\uRls5ٹ_MᴗMA {GX #1Y]֞ͣX 2Vbr,kČɟx|RI-Rd*y,fZ`珏cB5%M햷8{!82TqZ7\9B]z(d"qk\<>dͥ6زJW-r$ f0؃ak1Ve7Tü^19SL$ZOce0AB謴e:f \. IirTܑ8tx]a$ otE5BRcޏL8%K&ȏKxoIJ+oVp7Q+i|dG쐩.{?5r9ѹq&E%ۧ˾ARmr+|<5!ۭYF뺹,fk qbļH$4&# x- )NY[ eU2iQt\?aSEE%1y1 Z_3A|ُ2^FzL`z D ,Pf;P *םi]j-!@4ywsk=_gSn1.a %znq"W[| ,G*=* ފ[g3;žѡq5E0mϙ -  pn8vI |#{bFTUZ\˧1i8 wj!Q+L\Jaj,8d}L{%@TNu3,J?hrS1H"գStFFm8Y/eN;Ɗ攅!ھ9aPG$){bhpַK]S5X{m @~Ϲ 岙_Ow^pKdV;&hg !m?M#uY݄췂 >v0,ymeZpnْb*EB92]:fjPZ5,&e^t$j>MVR ]ioȲLXKh^=!{36f9RUC }xklR: &ΨL `dH`6p{뺠(_S<ȝ+Y0I`#I 6Ȏ?>y֟B)CIx0"M)Ŗ}yC!*6KVW%b]f}q~oXSuT=Fa"Gk 4gD)W,5`J{=, /P/tF15,fU7\:8"E\Q;]*=A4̼#TmV3Iz-j?L|cDWO0  n{>aPzWJ}_݊3GG8b+k*mBX8r \Lii\ ZMϋhD9BU; hC b#H{Zt?R>XU.*+/E-Į&ɍ4p)X-f_2hnECYĠоs?9  FK_M~HEl)'՞ϩnXOߔP4i(J˜l%JK&&"N 7dcP=+$AZ?JD<*ba H Q*Uم%Sw(zQVz;y鎫4USt֜o6,~40Z_ktyZ؏ IC.0suvud!W<}@eNI=y5ž>o'.qE@lˤZbQ$rf;8S%3 KSB(uX=d hOu1F; ql|~K2DX.CS2VNx~yUfA]| ;luqt, sWOV[QcBp/[-7E 1 RQbSaz#k$*xkKܞt_ÑVp0b0vO:#rEp KL:o&„&K@*:ghB I IkSBr"HeDtqnDwk: uؒ+@xo)Gd1s}_X}R:şotΦgAlYK:jk2^+suT+tϬwo+AXҷݠr`XEfX!JGJhJw-ȣD 9iC0O)վ2bA{*'WR3"l wtm+w *go6/(8/Z3;괕T΁(i3l$\.p#)*vȁF]A zf3f2)gzpkf'> ?㫣o̪$tj=00vS䝦!~IG#{p8-{ԡ`48yL~-fAD%'1 ޳L  8l*-qۍԝP.:InK.1=:$!( #OBsvbc-2uK7Q!=#-6:NAi?V6,'(Vbo{KBOB_;PEwnT*Q(n&VW,\xʼn8*v0 fbntc䓴5a#t*}+yXɽ[" mJ: 6wؐ?C{L>Iwh}@w:@lRHcZ z3-0ǕSRLN{6V:T9r4q ܾ뾊4l5e3v664ieυ,"R߽oOp!*$?WspoF]z6٨s@D,(**2,s.` )j̸"we۟7,cbDɨYn T喝N%1!Yr yp6Qyvvs܊Y46F߬]rד-oL^'Hn{~Ɍ%ւ$)t~nN0?h(,~[[ =' "CqȔ>b a> .TD-w3b%83&Cn"tFJT Slft  CGُD@EREWT>;8UFP_VMzo;)V;߾ռA:z-Ͷڼxz7O01ǭL6\-~wpFpq#4d|.Şr܌4|\{{钟I3!?̒ a;Wfop-ws>UUd,|CrJ|(I,Zg_ 2"­&੒3.ξb** ,-iJF{GbSi CaY iz Z|cgs׾F Ff0Yhy(W{c¸CaviyPK|&b˛Y j2XANZ,xHGN'uIs;K GUH}/wgc_FFIw GA@?Ə^YĊ宻f./ؾ7S$'EA D$h cG$^Swv֝L(_MQd{Y$~n!æƮuCf'r<_\ z2 =gGijZ`8ElX>Q--_mN0[_L)$Yի,G_u溞hA.e&TS!`~8!H$VDZMUxI4eKkAjRgO2OZ#f:Z҄_" U߳ t^WV MVy}t&zd&^" Pt[ٱ3N|ۺ!@j.(2[t(SdzP? BehP^'%adCL,e=Jxf'd3w{3?Fus'WNȿrĄ.ؤS`wXF KϤʥ5H\F*_؊9:c+X̭$g}2mh -oOui9' %1ZqUB?18m 楾di!.5eb!c|w1rC|jy<\}:L o1G׌,xF+WlE/z Wl=9qY&nK \> 09WOZWS ~xgk|u}G*Q+ b]a׵6tРjeXumYk}w-apUC( D$;Y[حɣ+~f#=K`I!LJM('ݽUhiRF\#RvX&~J2`5}?AVV%_CL;2Y)FbFßE0ˡG;QǶ\PBEjpi0WgrK>Cy?^[793aMGIrSN!^RaF 輧KGÝegap TnWz/b !l%>~)HZd Yh𩬦+v%ΎHIr}hsSBu ӾiEns`p)64Q Cfn; 3=>DV(\CKvsNTG'Wl/4dzٙ*@`^p:OƁwb-x5&?) DC7PK*lP]5JCU=3#vsjؒE6Ezm*1j键PfEeFwhs2-#}fMΰl>&o~3nypB*aܥ]ZSJDۆ'=(KHW"gI@Ĩ7C'`I;7sɪ}8MptD:C+u-¹i.\r?A&%TЦ3T[gg ⪄ הͱ3T$Ǫ fH:ncߪ| `h]UwD80h{fPt闗+ Iݑ>)bx=kw'MxwBR]q(Q( ʱWasE3mV|;Ж@΂θ_3|uh)FGW9t9/qw݄AS!S7]NpQꩳ]̓@YԪXŨ|:8 oAxo |c#q{ɲT_Mx6(ò+0_k%d_hQPr$P[{!4cPY; >#ꏬcihĽ@|RdY<ыƿ$E+* ,Mٰ5[4a7ό{9~^=ܲY&48|J1-b-#ߛUlvV \"1Wgڝ ܮ/;U|VomLCpvS쁎K(&𶋸:=S-¸yxwI=uyB]w&-41+VYd М@{VBP'" 4RHGtJ"10zLCӣ7cMJ_'mF,T;N뉾v ! ]~%4\S02bض4+ o&U]!,FtЛo2kt>%hHe7ZYqn-/#9]Ey% ϑҍhUarZJ,V3F)ݞChͫu2Jm,Cc(\~_AH$Zv;"X(UgE'_\yt.'٩ِȳv)ׇ YT$Iz IJU]ƫ @i9vi.JPũdd=dA)Hi"1qPvj?Nҭ fT7 -=p j`odZiSҲ W{@6]"3fAFJ$T‰y&H>Q,)Xys%8@鐭)r~2U)^oU;z[$x-4 &I[OlN]o`O;2NҨ6k%NT[XϲjH&?_sbY{2L=kUI_Ňʠ haZgogHPmt8Uh< cfϬ!c^t VXVk9='ѻ&s 3v KQ+JR@իo`OP'mjW:p[ͷYG 2s| V1XݐjGlgPD &[{=/._+;PMXa$SwclҠS-/(97Sm!6Kɕ .JЪq# 4D6l0G,㫡Lc2}=W?]0RAGN,+]wDc$"ʍFxA/k[%@ "Z6TkIg,1Ŷ^}vо4W]~y"g (]xOi񂎕)JƧmBqHċL3WTU ݿ^ׇC]*.bb]x6b/HL*#Sim7@f7"aO7r5̲Lʔ ;/$]),ϪXnw!ERu{!gfkh; qhS`Xo{X{|0„܄~rEM"$x#,Veqѫ0zSwoꅵNDln=@6FKD)%!s vD$2@R3|=C"p຅(:I dL~g|F{嬮6RJBvOt. uԗ T)t1?@x__MM7Lɔ,sQ}zA^CӧGOmhlZ3k5G,B,X&ʎ4x ݸva :>=*U #A1c@=N()]J&o+Ҹ{c;;tסi5^~Puaq! 3"+5-ye [n\渥N47So3H _"n(I@<^] IOxT&M@Erk2KTh/ :50 {^*u(77u J"kcaZvzT[mVL^=~?\4.qц+=dh $bQJb!T_pz=A\t/0aN2y noyz6fˉW IYHTiUo95~:yzXfi؊w.c}2-:8vߕ ֖DB$ 'N_ހC'j A6D_h_ %qy8|~~O15R*m!N tb,f F߫(lL7!\b3&^xК&+XPzj˅q(ƞ0O"@}vݡ@ߛa*)$3H<{WBgJb=ځk,|=x=RDYؘap[kQ]_|,k"zB֘0<.VTk=7#}Sٶ>OD<1m,g9$4&$F"T0۹PYB;U](yJ_ed/YU{a lE2򪋩BU L\Ln "?3D1 aQdd#6 K&n+N;ȥLUg%8ibgU⻌;Yt." oBÛGyCY8 ^^^bYj͙yWO>Ff}ۨPHC ?%>B O4zJC0-tp-[coTxoygs׽ o6X "t4BR5@8Wdf6*{ǿ{ЋK x0 ]0fүC=j&c35S~ cYem壢$k ?G)RnL>,aw%)*ЧORH^l-6` oT^9(0n}$M*-IS~ovIX7!iJtY6pĵȿ]JhR$JXcd ,]?|aC'Ww_b8g>\?=\iB ?;CoYeq |`u0iEۭ+~ZAH7YA3]$E=YʻCHkn?uWx;7+{ f;6B[ðVP줦Q.2 po%OL޿<Ӽik|5{);5{>/`T㒜|zfD%^G0i|AWSҰu L{i=6܄ ߚėݿ>P(suN `#%԰ +8Q5 _lĴ@lnVstSOKZbWD=O.,74?'B\=iP`*~'A 4 1pɝԁ'h@4x ~J 48^KfF\I.MR\0)#s}g|2ɂD`)MF5`,o(8?Mޱ.|=8$17QhkC\У3 Rxڰ3E8RnI?1dxr&͆)frb,nzguN~p1:?a%=TH{.fN7~U ʋBoRmwrI竧F Ҫ:_K$bU )"|XaHk7o8jQĭS<_ju`";E:Pj$xpHzxI ;9ht&=8y8"`Ѧb7kjf L9_z{}&kuKdCSAq3WM|$r?*jriRQ! 2٫# ر|'a7"bҢUDJ,#I~RA?暀XT xPV#CxnfFȹѽݪ`O183鷱Ŏ=-WzɊ27j98CrE7@ؼsPXnܗ$O#$fpmȟQ?⤞(M!Ѧ'KtYlW(?D2?2ڜL~0?;^=%/ةgr82h?gS`JR|~͒c):R{I Iː]]F,.U.~@Iq=u%wW) -[#+WSwL %Om䣙em1V^vŖ5xT?+qkUt c1Pq`!45pۏ\ED<>Gǣcp/+|' eu3`hȱoԋFyO6}XeTlj]'e&Z8z>df%&$ESJAag6C̊DMIͯj.᭘!*557zн '?dÒol!"oa3>#*n^2{K:;cp@'RNC}\3 r-r[E,i"L*O~reFH6L unI25NV=qzEc|`;pV`[qBzghtf 3Qj} zH:rHFރzOkfdw# A b25>wh)N{gBmw?CR3ӖKH&7%]C͌k`ȿ93@cԖWE9O'#$3Z[1HgT}  2cfJȃm]fw2ι9*#<)!ѓIb Gu>X dNa޸0 ͑Ykn72kV*띢V+]&%n%nWP(goVra$C=]%jtZ!:XӀRRNm60]W\R_kibO] [O0PBsqm,C }E>z؄(=s;~=5@Wq'} ObJ8^9~Մ!nA@IhW?]8T J&X7-!ZM"cYi8BV[XF[z_|Ǒ ᬀ-1i+[='MR ]1zwqfoS 2 HQ~Fj@u9r/6L`*HS W]VI$x|߄̼kAH)~CAK;:\1{ pq6 l(W|;  OuFOqQIKAKOi|ڡ1i? ptb0m_d׽AZE[&8]''gsg [#p ٨iGAsEd=0*|H3[%|u)iݑxB=⩥"&AӮBK4 C7lBkz\UNah"BPZ9`qsJ|M%G5[(X.wSVWq9uK$B:}j9HXm_ʋhŃ{x]Wgkg!c&S9OF%W*}_'J,.-zo};)jU1 .ӵPW[*A4) `hp/ӕr4^>p Q_eĂ$Xm)1{}<CNghYg: SyK8>j.Ysgw'a8QVd11x>ܤ~-A \/~Td4~?⌢z>]n sy@cayOj> u6e'ك]tfՍ}qT{)IcƖSa ?}Il-#}]I/oT~01{2Vc >`Y*s(@GY.;j>Mnm/T QMy׮?Akhk9}EHlNСw7Pڵ_ hvN wPDܢ'`Kx)m>bX֑{y}oVͽ)}m;5`&^*V8<ȼI/}jI5h ΉfƊl_wep+ j(9X,=:5jEW5}2X XJDG. ~bD: xP*Y_l^- Pf>啙+f ۍPT+\왠&YM7yzoZC1}_r&ҙ>cAY[?w6id#R2w jW;G9Hs2` g:>sVXbf̤ mR>(:ح˫vh0ZP40/P1t<&&ܷ`Ʈ'"ؘ:-b slXO);"Q^c`1eVv)>Y,@W)ie !H|>̃qQ ok9BEK;;~0 븜BZ'&kqW6 'zT ^Քmgxoojq9oVOF6׻'yi2M?%w_ l$=.~_*L I+35wwYg0QVvOrOx<,d{0xڕ*ڷ#W)ሻq Ņ"#)Sl+Uk'= }iK[_*"(=s[? Dsk>QKhW -?*F#M oKm3͆.)2ekVz:l'iO.WEVB?\ 1*ɷ!(&Y3}ѐW(*޳M.UN})KC6 j}C'Lbܔ~"i\ 9 G'٘m+ GL~~]VcY2='s ?&O):@1 ipɟτ-W)krzf(neps)z K(xt;E94B+y[`U ^ vj˂кTT/?ʥ5u5Vҙ Uֳ7'Kʖ09NTLRDմ[$p| @niV0wHFY9%ݰU)ZC8NXA#?M(3'!DX7oO_I V/y1@&wGQl 7`qS]:aYV`6'!l`u!Ы2hIb"<|n@ڌ-K樔J f)BHf\=Y~`QϜx&o̳VYqz% ee#hi(!~]xS*:8א(3Kүy,c,8e E gu\{èj$>BGԻPK Fq[ؒc Z%߫Tx'mKn9kNwa"vf'Zg]͸Akܿu„^7ORkP {ɢx jxXql l\դ]* L r8z[G3GӜAlZf[Eӊ"8} 跽Й*'+oS•$Ǖ/47c@,H,8̞-bqñjkΈ6ӄVܹapDI<[iBhr8^;`7KbTMx۹pl-ńN4:~c5!CL*ZyѥEˌ:+2ouX^׎&QNd:#=*9,XԳj^rv<[bB%_ERvlXx-[m,4̻ǀb8U?G @p(C0hh qA DCWCl){WN~}I#1iEG Za"gu+\FO-7L?D}I|G eFb@c(ϴg:Nv@ˎUK 7PzN1+H i"De@/rWUIzecL6Sƒ6}NwA+yDGWJKGIK,ɜD- N Լ KZӝ PF/\pw`fi:~W*GO[-c+86M!58 m+.2o^a>i(Z!=[>hld}ᒝm]>"֨9~:ڽ?3Ѩ'+1n~ik2X tiwFjy*0*79G|: mﮇC:zE_~1Py%0ZƬ*QqJENry\F2~fhnM.Z;UtFyY tS|rբ2씡sFeN2oC` cF״r.!=G1u1T8.c'YӃǕey>/D`q|6:h]WC:#qQ]Éb&xt8S7q_zzXa)},p "3tdT]}=1-){`$},m%7IZŭ#;*>@`uʆ53~eq>bUȥb %M;̢li?KC61JJubRdϐ'[Mz-#"̙mE~[Rb G^}{ZlH@zFMV|Rfۆ&[ 7@Q ݗe$b=$׏D/unWvl6~L%2A VdoVzMҹPC]VIq`›_ɹѦNU{(TGyr ދϻA:󳼼=/st9hOq+;5ſiHn1/y؀Mb~ -Eq}\O a~j7K˩e&P'ٖ5 / U7' ~‘KBgV!7UΌL؇Z 8H,z,r\O6'9'EX3sr Əl, /O\l5;_&1E X/ R(_V]!ٹY o#LXF b!a%k+ Fg1gsia2>ۨ#&pf+`;:&ыa͓ofdS%py#4-Qv,?ZpRx˽[9BqS~8âa%X0cK2,mt [LANQ\o#ZOw:n@ gб%!Y8SKݘ ƃ fY$tsF6YZvԖ Ǧ?D:;#H.Timnz tFF0wg7pN/`z8`nlHOZKI< x9R8oۖđw}B t $Ν0MbY?C~zCk>chr>uPEȴv_|sσrt'dw415LFhiJW">DsfߔT tɖ'_}25̖AL4H7KĢ&jъ>qW9O }+y[CT/S(Ay2X.:KGdK_xCV@c3W4@׋ 1)?HB3 PY k7Gl{Iu3蓼[NgSf R"h_˨~DlLi@bݨg4KtyL=Ŕ:Б%bSA>O߅"]ZAfJ)|wÕFԞ^rDÖR8ʩ .kx7~JIVZ жXǝ{w!l%K!/?`e"ܜh$`ث")ؗw^à ES@EH0Ճu#*2'+^1T&Xl)/iah2y':l8:m Fy-bgu> 4iD^Q\P,d ]R%޲_;쮇<+K,Yo=$Ryef 2308%f_@F=,"}@.Hj?9>#1iS®cGdh 6VcIEDtA@ې<)6U5=H`K|;bm zH Kd/q5(ȜT%C 􋉁~@ 4O /jTҽ|csVbsL_PH9eZjw/ ,%̗W^-w5X2^Rd4 1Ж,>aU` w rDT:+mr %FhX^){UA#;d%aP\ VCK$\(1KtJ(uXy} /@tҵPR %v!i.+c-ۼd-Ѥ N8"^ Ve#R~1|}[m= Q!,B>{)f۬E"cN섙хޡwvJ j?\ݟ';{i0Q5ލ i^ 6C'ۢwvO{yF"D󄨽9:bVZHZPz*?l]P68SY4zek\\Gb%ڴla#-qq0wU[ ǾUOEk9$v*܃=w T줌Ȇՠ, Gt}X#t3@:{tX{=cM''↭7rA{gU 5 (+pj)Ƀl) S8ަZs$im,8cL t$Iud6>SV d6)\z#MՋNa@VY; &!eLHu =_/??CFBiYs"KW oAcbV%fwQJeYoQI 1#cOe]-؂t~&H@'j܌ Mi+yIr{z3Ud" Jr"(NR&/?5/x >kPAs*h6!E3DGOx>:lhBu~47ODaiIvkEEQiX eTiQ d1d6%sd̩Ĺu,0+XEDc P,&F5@ JMM<_H>9 r -\eM7XDD8řoڿqǕM-mBFDt9fŗXF"hJo\E9\kNuۓ8vlSdD_T ռo\̩5)#Ϲ;r ˏnR2xrq`,`$Ha(,sINZhy UT6M#n38Cɜ:Y&I;WɆJmziMxbx^]Ctf>qD߀=~14P!{fv}XkZ ⫑򏗏g0AAr{}nbb::.l<:KšRsOWY@t|_0  m "qvN+*^7Tla2+:gA1sPbWqΤFه3pb?j(z&q8B":cU'ZQ(=u.2[R uNX+Yb.U^{;7G *J v+aBXɛ_ۚB SSuP&ˍqC7!U75oy`'*RE 4LE̊w)ՖB'뒐 fG`fE(,c6Ձz\⹵;NӬ5(@=Ğޣ װ:3vBtր!F;D?w>ahX1¢#;, ^UQT5cf?gBoۂTQ-ջTl_VEھSL=! +ᒔZb͝2DRngtH+56s?_t@I'WآWj)L˾@ry= ֫%^FZp0m3} fi\ccf9~3)`#>j{y j\u$Ԑq6qϘ*.bz0M(T> Sn8q)ގZE_G1+ޫ. e+4Ӷ]W2ڌN%bY'g:JX4pǺ<.DJ.Q6H]sIxӮ3ZZ wR+,Peh.h$y !bu]TLk[\*ްz5j1%GսQJ<˒v% 4@сPÊ~ڙ#u4\w耰w( %+Mt"7(BKC! MLaxkU(CPDjAcc@ǜ<{ ;Faw/1o) cae/=zєq((0SogYh H` 'gBO}_~m\N LovNw%NE=]?(2 e>4\)D+j| ޱo}Jzyݦi|MZ"~&5ir{tdTS VmUSI} 9?,b/\,3$WC{4)ݐz<=6^/ۡXu;RzZ+)2{y…Oa[@C5*1&H/r7X&83&uD# 幧m7(X-3PyGPTwh"x IcW|j` @)E?Co2AeR297mX QH;:,Y$)oZR=@ܧdGNI?"RH~TsaEAtʞeNSSCz7D&JWS$n6zB"=srv?*04V{͠ӓ=DG1XT@+r ]q3]+Yht5XCô3'DQ@\q#rn)RZAcͪI)Yz lS1 }YZeLm16rsR |Zmmں?cl^Zl'QL@ϼ|#0WSHSOVGoY+CK9}((e513ȇ0xHuFf]g/|drfI;X^I ?\4TI̶⁸'~ ˝sc.)h[B9N37~?|˱BY*} *L]1PJ;ޣHG.>32<(f)ٽ# wgY1 ; ]LڸLy.B46-U@R*O ܪӪt}=]M[mA XJiܦ5JRha0sK摬;F{*ʇpӏ3@vݎ?#=loYJŖQy˻B'q4[VC#(EqdIb9b'B@yRhm r* Ǎ *=>y9dGMƶcT_J#RE'ju|$=[,s.'aqYHe N TF,MGt=>O*4pvJ[*G-8(BxGYe6ߘיޢʪ߅M"=C„?7(|3IHFh(M.ģ5´Vn<#^)bDz>Yv#<ӓOg=q!VVi"4l]aY"Q7\goGj3|ni0wix9W R>GB;L/Ti-jp82.Ε^X\J{C^NcYa"ЛfJKM>qj%f $U`އ`E[|{ C̓{+1+h5ϊbֹ̀lpܓ.wt>E['ބg;Mk/}(, M̍Jf\,Zi)|e q)ahAKgGo^[cMyqY oDW؍F9iphIQХ_Q1_|hob%=Mݱ,ز.{/zuѷ3~ܔ  W?$LqDc 8g s ΈG^N-,63?E ~ADW+'G&UGSؙZj56D2$#؍HR4#}C^8:QUܪ%m4rQHG+b}Gl9ld X}(kvһQij҃9g{τA/񢝳hy$DgjCɫּy])̼QN:촚u7_գk0 pj;bP > Ȅkn<"ϐQ|H Ju`9 Ot 'I_E[pG[OYm]D}F w/r9SP%p; r/~n+ݻOC^ԾSzYGgߑQ#dyӰ4γS#ޖ;{s S^FV1o1ŨԹ&֯`9PѰ|4>3tٺgb']5W{fn6& V2gq=deB:wDFc.pavnT|P1Ѥ2o `Ed' K= tH0aif{}h 3sB#-AdXtRWB/ē,_:dxLc*-T%;d" xL8ΊΑյ~^^r qREW;Փs&B6@HdY=4%! rm"W ?XY]<8UO: Kאxg+@ B$ b1b$Kk9V}.B();yNqn]rZExIÂC6*7\ |IE/g;gVvAyڸ[/K#`ӷ!q>{n1E :Ɣ'B#vϜ!}5 'fJGXf4f`oB%Iim"]V3ҫy_ʾ%*I8$ T'NKS3*{6P&f{ӷ1K཮m/5ƽ5躌\=-v#,w6lݫu H)![\-W'-e ˡomL_ _ܡ@;H.Rᯬt0^D <&T P#0epDxMk`ˡ I` 3B5y>J'If8v)fqZPf8%]w>^cqNp4_3 =ZX%Dž.~6&aMdh*/Kkf7Qalh3޶da5 橏WY<4BlDzvB]PFUCan;3T6JH^On8.ɀn'Ǵu?IpENQԻtkzEŨTAЌ .#c<* `_{+8K _4 H/ı98uh+ ۿ/`zѐV+)}M ZёWYd-2=VF|p٢B_,*w&E` 22z$B⍻xnQ׸pKj,E튖5А8d~&v RA\o،)dgܧLcEX$&(f`KdIpW_{J(Qٚ䯁:Lk;Bj{r9g,E:_93lS1{K@zy2 [5n\srk(K 2h6o~u' $@*|B`T$@f(LUP^P_?l/euc\ōuAD~}/}Y@cu>]`ZUA2 }51LwaC+Fc6;P<oA,$g8̽xrkOʣ]D1N ڷ0Ag%ឯD~0g:/՘RrZE3_ܛw5ʗ\dZ*@|.ζ-~«P\q@$" F$\`)ߋ bϹdabwFʟR忻3[φ}87 x%czq]'bB8;fֱ^RdP}=<ɷpE[l3E Hql]q" vvPT^@ĉ2HkܼTlQ˵`i߻5mwۡtg`üt U5C^7H6#c`3 MO!n;}_+Nm2F)3^v<4gOy>\=PN!6]蓉`x?]j{1޵Ω59ayIO1v撳NSxP6H&M^#Yw{;ÖP–Pf"4~#E+efnE!X%/՚9c/cAd^Q$1qu&x_p웵ۇA7 ):.e5.OzDp@c|MvAUCy~0GhpҒD)HzeՖ829w5Wh")r/U`SI8ԱR#ւv)Ve1؊$j8 9E:ac>T8 OB<NeO6[}V5C lXg"~vW'Ǜ&اE%5|z&I Nb+jQ'5[,{ >c.iv3$ DmsJQ~ծk}YRq;Ad  -&<+o}CSPDKC3d K?}Xl" U7" |=`׸ѻZ1ݑʡArјɿߜ(:d(߮iE$pvcw\񟣡q-ևS蟨ޕX+\W,wmζ<,@AdxQMw,Jՙ12HW^X,>4 =P)OaONI?[4V{rsapt' ג!M='{VȐd-5Z0i 4=8Tz\T^G?ߣ78h#-Ԓ@(}` :oF rD9bTiOqc}nP38mLjDm}`SAiW|٢:xjcq4֕IXO^uG_z>m`Әlc U%"ģETx]fB @@ZXBOuk?a;|cji W};6>x/FNS/n(z y^@kƢ9<0PloηF̱p)c75)>$eݼea<j hw>rq\+!; ɐxy;PHP3˅xf9Kb$ GA"%zɧjǾW\na Z=ڛDjզ2$1XA/$]LMJ*# >.U[>2 _rS9 8Jjy3;?6=$gܡrTb%󅊞>[?Ic|6^׵h4%2#J۷$E AV%7$C$/ 5gs=g'^ז4"eeиI]5% sx# ˶IhT창dϕ 90ͼ$brR ÀᕇafZ:,ԃ<žtO[rRSނt|()ӺoD/%WQ:@RExO#xH=cs)bT\y QA?#'pnF)apvpmisv&szR4]pOM 513]ӁRa|a6Uؘ BWFX?͹oOuG_Ǫ#p;hLYJ0\Uی1 "|* 'F%O~жF0,n,0Mɪ\&),PuY0xb#;Q*m*qdjq =]fUDݳ]͕$2x B*겣6`Yt$ҡ1NըnZ"N Z-4X9>Q ->gH붙^fR;2x-c'&[,+vŞv2X:kMfq@Qlq/Ezt\ѡOxyBVs?EAeat0|Uwwc,JVVc`1@oD?MM 1jD4_«o*z$SA܇oI0p ߐ2%|cG}A^{JE^zh$MѦE~nD}08 'Cy뫊C@yLx]4#^-Dk )/E-ڤ/j;@Z|0w:gY,Y>CB!bax $6(:~ٺM{G,f'DTraWi &rd02#tBwjc|ǧWڡG-~9=7bgGUnXoTpmZCB~H w\?EƃK^>թ0}ED"%ի_i~{[PgIg^㜲[@s4"Walrm¹cV%.Lȴ``R3] aTYa2BAiDyCH^L-FբO N׮YaN{60Q :KYv(ҏ8fe8;R 5l'ꮨ3ldXtzG{2.ʴh!񘨉˙:Lx>ft_{{p@oLI4H~5M6P R3B; /[rLXK`t\{e`G\\XAa@9Rź?A|K \WUc][Z:*'9օj0&B9}Lku"\nZjou@T"k)6Rg"K#%SKҳ97=d 3RB?^/$a?t~ˤWb+~t.$/d*ٓwҡd{{ `jz%$2v^E'gew&DK1=s 6LQPwH5;l&㷬|hu^Kwz4j_tq֣݅$v9Xd;&0O#U;RyV_Xgyh]ۚ KIqH͜ikDjSn`XG!@E4$BqcFȍp dv? \FsXur8u`J:HQHiTXM&/V0 DuP hSkhz=eJ[tq l)@8fOPF@N:HqEmH'C 9Fs+ws}utݳ뻧uN}2[MU ͌zWOV'f)k_ ;N=ji7gD&GG>7xx0,:g?‰eFڹzcT`B&#:ܕpùZ1ړ֕7GWdՠӑ L!M<$b f F\_&k4mml 0I|ʧOMng"G$R*{uychՔ^r(B: œ0p_-bQ&es:tHe߶2lTɈ]{f&#U& t-љ 0,NM߰1JgKФ ~%+VMD,wY}f zEOt:Lf:^>:sCG57}m|kVa[mtϩ_ ﮡ d7.Bb*rT9kk:M"If0ҽg}?(V^k|;WDόfPcPɟ6'5GYRP%MsRFrn֓pF~"F1|oqY-LctǃBd*J'Tziȯh6fYqU8$! {9̋f(U̮6 P| ȲSkpgBJԑ0KS!O]_܃E0!];9R:v+2ײ;HQak١EoЮxP]II!k(C?sB,XߣEʲ_m]^zQomG2"canίV[;TTqg3ax&>t)w[$Ib({6~/D}4uriax3޶ojl0i#.q GWnN32eesExb%A'd;1gk~B+L1 s?acF  `/ql:X.0.uҤ_|\*[6`WI8t0TrIˠ|`2@a?K dMw$ƍWW7/al]F\>7 }!lux_yG~Gh(4q9d8u4_Q]ڨ}rзvcYr+niF wIY[qϏY pEv8&}=[u7v;uU\-GG>2`[ sh>m:B6WbgNQOq b;FoxƷXe3ΙKSmJ ۥ3AJ!ؤ卭[jDu?57Vflj,+b5}Opm(f zuh$p4`kܧЪ^H ?lXu1%-jE)|;NYhլ%#j{<$FbzOwsJIZ퐾Xꍞ*ĵ-݅J8miHJ$ExZ:+ӯeALɗ@wo DD X9!Iq>N=cLC{l2']N7Kw=%͠e;&5>M}5-+mkìɨQ%`_3WjZūܹYus.酛'k=-Tg`FYaMxCP z:RWĝ{=J>vϷ6Coͷ\3c gYo%#EW`e+mzSPZ7gK<-VU}vpn X8M6@`9h:M Ҧuo!VFvaQ ԊqAz~t"%?gb9~z`Hp577^ ,j#r陹u؋j?`fqiώq+ުISzԀ&½Ȥy|3Jm_rG[6n({N<" Asxq`)q6uVS9.yRP5+'HA,@Hdꤿi(" " =h+k<|\cMa֥z4'9S@IcPxnV=jkraQ?іTMGJ 'v_ԧ4K< S<kUDrsq=<:eA< QO|ᅍ~x|ڜ*$hź\zѵ͋,Ԡ|b E%O%ZZa`h^ŷ}ݧ' 9+PuDHETGGY./f>Ҷë[_@qqHrM kh˛b`0܌6rYD-Xtc;К Bӓa,Njh5[5sO 2R㳎"f7hvdi M2Յ[y( .'bGExUs/_Z fbrGį**: o,[xl=ߕǙ_0*qsMf5kFkn-hJ0&ƑmӍ#I!^}1Cik5->tG%Nr/qEQ mH~NIQ+^.3Λ`$w-{ Fȭrl_\_?p843qnb5`;3g*Շ 9S7`RG^tr$Z~45=p色$t=PO#,AE<.E%&[/ #{8'_x:\XKԚc]j%5gzlk1 Dg#WGɉޞ t9ROL7ӴkkҀB! f4*}*UN3)7ܘޑ' 8QAP{0$7C-R/zOEĥ{ta N.M62}8D-toEapWƠe\aҼT )4S:xyX\2]Ɔ㌉0ܡ Y|!7+W 3k]iQI~ZU)EyY^v{s-i=M_%]׏jzm\LLV)>B,XW1%iM߹ #hҿ 85}+Xc{'S]q|QGq|B4 I d 8-[2cJ(3:[lŬ9K޴+oG- 4QjQjpW/5yJq(SP%-f!zV^f^3sELRŒ Z9U3.qF1E%bbhQ ]NGTr")ozJϛ2 A7,(4CfƛM^S?ų A= idq#{G :CaA6_kTrwP7GR@ .<#4"LihRtth)kQ$eB{.@f{Kk',`5TK&ithM "kTHGO-r8sY'(#6闟~nU18wr9>kpZsfhj)ڙ4i\4Y:\8]FQjR.GY< lv[vIN6m,y! :Ww7vѽ6JَԐԮ0'7mN hYI3H9|ۈ.ƪ.ę"g$3LQM"7 $5@4k1F3j"3vf2{uUDoPtueBsf/>8+!r@c]Tx@5߾޵Fl}( Ţ +T^5snh#!"F&$+R4뜂zo[f< Z#lGջQCs}є$%v^KAjL[bzT[߯$*}7JdRw Uzge/IݳLqtSl+x$}Gb ?hvuvXV\iII3-(K_j!~tIJt;^67YO5f o{S4ή+WA02/4Q9g ($8J%{5ʄ95xR' ha,| Щ>O8jňQV^٢qsBy)&]AxZQmd Zubb׾h#2k$&Vf:6[-/t!ipxȰ[0nm/XKNj-ӻ~\$!0 "j1)d͟¿D^{#u$CJ9m +ӍD7~Ⱥ6fa5ն1{}#? RHT߾(82HG xRj i?ev6ݯn7i3N%"f0Gx124KnF@] 9B{yЈ.t(L$W f'#AU).}9%uh~$>ؖATt]~n뗌#(W j_pe['Us`!\u0SZy>k~-/>.(6CDv] 0TUg]1ʬ>X.?8-Y'ϝu!`H+]_I mA%sJhzb@5'Wwa/1f%n.9~'q<_BG֩|sz(pq]CKM9"֮46W!$>ƋPWusI&HMH1J:Uѷ xf2Sie=!j3|Iy|} !)[ q6)1hwUs޽ M1X:t"(ox+0]I/nr~mH]Uvz"FO~0uL;g"EםBЙ̢eM4p?RNf1Co $9pzxgb"W8[!t)>J}+1}GY[F6RN>K#A% "$n*w]gԓhm A0%!~  G2cɖ J)uJ @$}Ozε ʕ T*C=6:hdWd͊f= Npl!٭\9?=R-p9㥞.2iD|F "U]\W@?1'px}}Vz"YX3I GLۤ;`NyP U̔U&|tJ_zjwJJk˛SV1ȜƝ Dr۾O\[p#$jldj (wVki7C}t؛?1-FAx= VUH?4Z"唢GI5ش HeKDds&/nAA9 hNURVtF.w}K-RvU­+pSCSkfS#ѭi+Y8CcRoiZ`mz۸wGlvĂN)ԊUk),G+]  cpdv[h.:6):u*{9Y(GNޤv)ԧ9Ϫρ/6|-QgoB}uM$0dcEUD:?+vPV}R] m3uN+LV f(y -^f:u ɫ-̒.~3qxMVQj['csaGz.ך8Wn@2KeCqR9<~ۍm,'"AnW=ՄiFy6ڻP#EMb;8B`8H zN^?y@^9T f /z̎> rV~s@HbhmEF@PX:PRv&+{#*ʸ!dd?H9&t=P4NLYGCEJp>6('\{< b3FP5 YC ሩ&zU$F} yj\{#ŁwgU1().nI.gQxċh<9Ӯ[NY}sD~5>o1n;nȡ yxU*SnUu%B3cԬyGG&k=cgL]. >3#GQ_ط< _CYYsݩЍloWM3j `+-FOPW-e3-7@4jx?1rkĮ41}GF AT HiE+0b=úINZfL\Yu9p{&, PǪ]H+F#N!֫뺹M|Ջ* G{}5҅QB9'5P,)u̟9V^F xjJiuL_Wb-tgSgm&QJc|2:Ft:'7FjbN0)`n2Ѝ O/m׼j,툩 l/i͟9ge@KK!Qn6~ dC9bm;sWs@pHtRRg9pOڞw6w{ N$&\2k %R.s<'%J-22W[ CT/t 3A1iDpx} |7cM2&E,=Ÿ,.G+.{La%?Yq`ti,Ű E[s W,1^\9ݫ"m6P;L}eR\Guy|wfo9JDbv%Plpm2.c07AGا}WoiiY&!%rNgj$kRuښ,l%v8Ɍ1*7@X[:= >GRv9VCM0VAw*j8ah>>Sph1Jqdea;P.eY*dΰFv7 `Zҡv7L}kDH K=d'WwAX%߯+q^UJ-̈e j!z,]NnӬbB~$ ylNy*ql,Bڦxa,m7h5i^$\Ʈ>RZU;${``|`l __T)p==b'mbTF< !nz @K)(8Ffhc8HW_5!@spsRp r6O$AEϐnmR~D;>x@_f9BW)}}<YڹۉXࡖ#)ھT04X={n[H'W;T[Ģ~n<ZdE"XF㌴gFV਌'+"@n;2}PCn<|0nx 9x.cmB]$p@ZX’]{Aի5ieWJ1bltY}/?=j$Y+yREڮ]xs>NdRZ,M",k59PLSJ(I>2@)(%e3KnΛCFBQȠo>I4tNth?f , 'o,)ۑ&_Hfm-]>[uZdrґ~bk/"Cl$\XXAM ]4N'd <-+"޺#(;r tq9u _}Qߪأ6Eoػu+>ћpD=VcBv#=r@vqN`~`uG6a{[QtAmJ?o؃%aݱr#Fշ] I; "sv&ZzR~\S3*jWMrFRϠS7 K䩿yP5lo!8&ҁI SBL1Cc.kL3"POٓ)D't] ~K~ӊ"pf:.8@z/GF{0χzTL4~XW W a}H&E] ' .z%5v:HE~W,g޷|AlDόWl[~L4cEf箁n$D"jgR]7z)#MiB$eJ7 >_ h,OjI;ՄaY@~xPfHnh`ҥm6OqiX"k ۣiW=۹4&dH]Iju7gzzFYeD-f.+.2cSqd؍>CZGcf6kӿN1uԟCzgK(hT.WW#K7Hm4d2P d>VL@Zh_ƚ;&/6!9ј:ӻ(5tp =$ByM-\,] |Uqxh/YO)Rh&{g}EDY+Хz0ǩQ2Q\-암Lsz,}8c1e4ì{BWy Bm!u9CqzW˄ Rp6d @ ^8G|1dhҜ*tv VaF+ӠiŔ)l?C;ҏ#dX'&lb]Յܻ ld%^{dm.֣ :<ˬ(yF/8woDF3ǯI.gHzh'&mPqB+uF^^_9H'%+.qƇmc%+]UjM91s8j"[.eتp? U֡EI @o# a0q\Pd#߅kcv-8_g8kiɶ2-Q%KnC76vcx8f 9z#&ZɨHĵ@qQ '09FlÿAzOM z0El"M ! Ě{}$6Q/r!+/!p£gwh[*yaC'fvD5kŊlMϥX|7}vyѨўgS_`ܸPfc18ޙR)vUq@T'/,4IgC3ĥ3ĵ'O s[D^ln=5" Ld8=2b诬n%O:Ƨmpޯk,`V„nT7Ⱥ_ >N>6'$`1f؆; :n?w%*) =_媤E8ڑ@2l<92ip $O-36F!?{ c@ L(4~~ ӤpΚ։W؇_o8@ =!d'poH1CC~[>V1{ TGR|OI0LuZK5?q&zil5rux4ό~x+{V#H'n)h3( ۨDTc%$Q\j;{_i/}t4 'E;楠4ߠWR=섗J9eqNipOt+]^59El&sA +,Zv,8ԥ(WZчj t-@St\}{tSʢ@ ]5lu1qmiV{0NxdZXr%(hzKUBKH##9Hw~^AK}4(q\੫eh(!fT\ٻϨKZ}v.(`z:@ATWAJ] vݕ/I$Yd|ZS ɉV0fе$ -!3jdIaHoqrU8 UN\ 3~hiblģt-/ޫ^ỏHgF~T~^'Q7c9!d<B'ݖ* !<>P6Bރ@Z2DxEذ=el㤏WsMH <{^BFKFѦusujr ՞`6i ߍeQ20ɱ"sV %"54۷$ /z1w,70JstŮH_# PpLcAe|TX]y[A2=69ja_X)Humũ6s :1 fI]2cMOPN 16<8EAVEb$<96V />iOʸ@ͿW̏ KMãCʳTb#=>ˎFU"Zoa|bm(4ɡYbϻ}7އ\f wxiTOW 3M Wjd&tȉ{,#B~Т.iO2Y+[o|\\(jyXcZ-@l](K V-7>w%|ܽNMvo3aV_R] ¢hIKgS@w5hA| P5sK.3m(@'g1޾{ a/ ?0&Lq@`ۡ+n>[)z^x;+ӰZk o%PRm$xBlc pLF&ktEГo}U;j "2:oIf*M8C(V&J/)ml'E/13$FI8h ݐ=кG )*AʹA{45C& ~Q߲t)wYޓ$*/>EWB dGVLΓ3_ZHQ 7%-|(/CW݊}DhmMI#猻6n8Gkhx_hW##L g㽥׀xk94r^($Zvʋz;hmoVa/<աeW덠~0VE'y~ﮡ§7V{XԪr 唺D.-^=cDLri! ߾6IFSnRNڍ(kң`GJ}]Y%r՝\I ŞloFj7haqAC~|<cƑܽgJ+0!ׁ sj%}DhM"| e_e@H{ bXg~",텅O_N<# 섀V(ٞ>DFbrF ڷgցfiv&EKiUr;d$uN 93Jgtb%l5+]f7o,?OfJUUWk@PMocJǧf3Km2}t9\!&3\F~8jSaC#SLV4%h՘Z^%S]nO@mywvK5>i%h ѝH4*n|FsL 2_PK_ق(PiupR,7P$jI郟.y"W5yi\Ŭʃ٩Ž>>v ɭ6~ZPkBzI? *_BI{3/\HmM6GYb[hS"@ RdkIP}C|lS`j%{v*|= HX,e^5Ӷ A! -5uԌ.fb4L?p5Ü݉yX&SL JF^Lndf"M EظGJ,N¨3}x Я }}Z'1h*W6;ϢEB%Ymah-xLuP?;,M~}/Xʃy'W l !0 wGj.aUi\(u bpaj7#O΁  f¸FZ1j"b#)E6^QbݞHno(Yfgd5{w,55Oϸ?T ,fn&9)[Ճ5$4m5V˽-y-O|ָt Aɳx4V8s[~73nw }%<d{NglnpC)nv!-:R+ 3fP`XK8]|PDb51rH.3dOKje؃]f'!-ۥlFr"0(KDLnJ{ tAJD$sy/[0cқت\ؑD-.>?ȐqJxk/gE,^NmrKLgmJ'%Ezza1͐Y'w D c%&sd^ F=\ts58cCbCYȵi$uȯeQ~:bdf$QHFCF>W`laC&!VK'U)ue %$+A7H{g܄S|w&Cb:HZ2"&_,/WϜ%.&?:},i =:}dAӕFCL6w6҈g%n=UkC⻠IJhJ !s%u$pA1njŒ[{̜xlI/;`aJTX^Z uv?X筎Sr%ߴ~sû W <9g6gx/x|~= XD>oii+|1Y_ TpF*;ܗs1$3wbDBX όܭb '` q`f:1Rp3>W]'Nd^`a,$;ytb5\b3NT: 'ZN:|}¾ p j b ]1xo֏i:5rv Uzfe\]]$:U{%ޒլ_FhϪIжwAw4rR kx(dkU g',z9= \ @PԵD Y*l,xO:Cb2i$צ2(1QԘQfa6ϴٺt !IO呲6gSa8 uMP8c^Ca>*&B&(G(W -6QVe̿*n0AXG—vޢls'tHU Vi23%-e/ E 71 :_908~+=!H1~WG!Q?;'YC65r`bSC4gP͇җ-22bO[`8PYÖCyˊylH`OitܲGÅF: (= #:) p+{(BAƆ<,1ghgbjMۻK*F!"+q6YΫɟGe7_J wdz%tBvF+HBB$C?MISb,N]Cf9^"JV Vw)G/dUg]|{W"촔"5r*΅ע?Zp{n{|{{̰KRܡħ"NH: k)?,~БĊ%zT{f]'@LCK: ċW~Y튌LXz'+bYܩ0bWq&YwX(0"hۅRy{7Mz+/ijò0#*|g^@R?m4:xc2M,oҷdV4b!#xLkgPݏX׻0e`?Lyz(O_JvpZ[E`T\yM%6%n-LnèNL<s,CD|}S-ٚ-s. O5swפzѿ< v]:Ճn?;r~C`e܉??#rUOĞN*|AO ,V8!6[{2CøW3Dv+m>Vrr~>SQ#|c;ØVK>%kb͎V\b_ڌ!`- -ڿ-j7+ﮧCnS>N9Ð#{lN6k& n,]jLW!N7|<$8ۛ>h7Ahj䟹mNMDF(HR:?&rB iʅ6ÈtYIOMSś j8B3ו-!C Vڔ)ÉJ4)r3.גQ񼙼A#zkFxA<-T¸^q-'7"(p#Fzb,cEitfigPDŽƺgv᥻#mҠ! NSиk}AO**ħPDPnhi7Putp> %o~)P@V BiXj<5ZE/jݠ|4O ,Eb0QiCP$BHi! %l.[N,8?ù>Ma?P˦;421tEm+Kϙn4ЁFCڷx7CRW(3ɩLb|q+thv <=EBGqHXkITZ& #T{_S2uDh*'񌎍0X %#{H̿fm)oU3f_kD3[B1g:XDD)R͊B]R"ѣ4ۅ/R˚Za**9En=|2azWM>Zj+T]Nڑ),eP*lCNT[Ԝ_-ңpх?}G[ _D]Mc/;e'qݚCKMϼf<^QnsQ㉅ Zit=]N`|R fRĞsAHИY7O)eVNO:CC}b vRM8Q4c\EXFyd?jзMƓT(;k)Cͫ"+xb+~A1j]Ur'v.sjٹm!x=uTj_09Ժ0JS!)Q"-K0CI`@!RXd1.p3e]gDΓLWĀ6"ňIF? <}T`$z퀴`XQ"q}]J~ÇIe'RM^@>!*YҠ\HHݾ  Eu) "9}*#J/c%!HnY.:@M_;?$\BZ:\xuߨx:{&j_$Rzɿ܄l-XTxǃcgl ͅUCS8Ϟ]#[o{r<{/fO7N[my)<i+Xŝ{TLE_6ղN(Rfk>b(YS6#?ҹ}R ;@Zrʂ}_Z8X< ۝`7ZiFabG pi KFbQ#~0=~ț pHAa4O|{Oi|TX^؋k Mg_o`+){4gAgV7;mfYyljŕܳI5X 7wM.~N:{^]4yhK+EuՁ1cb\>,xHRZ疝;u 0.=(fHs=)z ˃qx[>)d(Y`AXt?$۵l'E(ӂS2TwsLjFZ Ͱa^RM0RB6ہX#|~][ 4ʌ sZT2=+@'T-k92M{Re7E]ei S|q,6H}CIXex"j)~i D8&j1L~OM|%$!F4K7 ] 5#wL~=ƄI SҀB{pP U/xD{N741NlJRq*[/4\}ǾfOI2.D9:Hќ At ]#kW^B ;+ Rq" A٨EVk .nqd 8v4wW}ǃBnPPmqh{D?Ʋv48PȤwY=-K M)57J:âj3?.4I'tiMZ;x6K-SX%S_sneMЎw.[i3TVX{MժW zp |oi!sd>WqMAO9pC^a_JAlwzlS,OZЧ6S : +cA&QYy`{nwdb y8qR%q!Ln'1|T.jP+2:ܚO8" ^2ox3{"Pwz^ٱbf3l zNc&`4}r'1PCSoĝ]s{Z~rT'BVrEh Hުn6}0XhE`\I^yi~aYn[`Ќ>JCa8ԩ PZE Ibou#؈nKA9 @g5Of9`W+ ^>WolRXRRxN]5 <, GoAXS.Brf2D.gm`̌>RW jP8["mKMEyh5 z双 VZx8qIr fWD-[O.Q?)iz 3Ǔ!,)Vop;W Sk,%5 ^#/0whgj7JӾ3O*eH}.Sl7`3*t{HbG;kPNrGZ=﹄}%qkaCEpw#I}!ޏȼRUY#"OYV*CL \YĽFkMnő׏A*ր0q^Ѓ*1'P*H  ow=fOR,^U?zI3%nscz86>Ț$kj"^Ropdv95KuYrs: ڂI&AG0#Spsm~sJ= NrYY1Zir&r&@^&TU e}D;8U_JAvƙKx|k,Z{?M7bTM/ X4"Rw޿5 ] -}Xy:Q"7KM܄C*B6h*]O%il{ŧ9U_p!-xB$eM :@bUh!ږN%ź]1hv?ܑ%*V%xzN9\XѳYb,Y*TCQ[%#:ϋhu1/΋.|z!\ e>"o&C ]VܒJ#I|pbdƹ HOu0ބυ_6 l@|f/Wyħ'+ =SexR"cEZb`: N5SD<;(3*^QSqq=$5 dVb.$7:ޞtV%E@hۊ77WP]>!淲\XmB3_%01۟R DK/Qu7@FOX 9CBT…# ( ;YQ7` a '` E1 m$˸D.qPe+%S%HeVv4 NtC&+|!;ZvGLˢ*]^dbڅ(/ +g̈[/NuF^FJ*?: Qgk͓2{W{@*Pfޏyy؋G+vӁh,99`ԉ_Y :=LTaI&{p"nѹ^K{ۓʉ&b)a^$A)JnuoIC|}Y7V/4CAjC_xXۯ:G9 +.8f!(PPfjeInZ8 HyRؑB5 ED/aq8`C,[qR= J;sīݽzIR:t)w1eIՄ /NwdRa|@u<%gpRp2u0Eʌ(!=N#);<(+.}̸*8OrsD{Es*<2 &7tT51(nAep1$HR=6+Z8ZӃ+nҘ3/+b|qvho8mlTp"LR˓B:F5@iQ&yϘuHDBץ# phu gv$ZZTCg^Kx铚vI0;nrIwH!‰_@Uzp*|H%Q0oQ;XK,g :R`A]HpaFA|MdBn="e-!YCKt &DbTA);Ghl/X({A'(q6G5P#]!g6JITǒFv4 >R-^:1,,% lR|EA{P;[gF`ss!ph%N?{= +.SldTkM4 3`.yH}l-4ި=씝gjg/k܎]<߼e;P l5,&gfi0ȐD m@˩Nd_o/SwW޹-Ra)Ȣ[! "& "|Mi!14 ,:-! Yg:ux|Pw#*B&ieHa$ 8k2POXj;@DUc{ouc!ӻS5|P$Ly ̣j,_mru%w,iDo;?7=Al X7M'-c p# ,J $tGϥrͪcOZv bX i*U @a~/QLjZ'sVeF%p61DMtEQ F+mHoz%Mwܱ]XSS `t5C°2o2>EУ-k"ۻAvCM}paj7laoc2ͫ`HSh(x^Ҩ,V0v$#xL+âULJk WrNhmظI\1J5+[Z}&bHEdW~d0Vj ~If7.(S)[_L/rxC#5Ju5DOOYhҧ0>k5I7,ywQ+g5hɼoA.ϡa?6U%)^LT1dLVbՋt0$v@nypKޭ-bH%2.l8oW:efμjIaHjW3.FOZT`lrvd@~7m)C"-#ʀz ]˜Pi9V:Jb{s+_LA5'Il?鎏m4&mg ֕`ЯuUj=޹%;H簚[NߨD6~Lݢ΀ƺUu0OS֦:*I09R{ &}`VWOs6šr"  9 *C'jhsC;P6.k%0eE=^icmBf|5C",xF"96 A80dwUVP>D8k/A7a}DS .Sav{hA1ѡJӷ'"q"k @'g1%z%CH_"X,fE|ht= dm}ppESFENѦ!5͓uRk0~ $Fj.R'5qN;u`CX?[C`p"q66R =zWTʹBރ)~l);P9Q{jn隈C j6A %{K%_9Z|Ojp)߽eM2u5lu?Nڤz7teaGO- l/‰xy̢bRnO?WF5&(%8pk}1TuZ ci<(8bnd^{U# \b! IRxM}AuՉ pS) %$f0XX$"@Qk?"T[h2j`oz6'¿⁓+drj*@ԻIݬs8pD?<x~gmZɝ~HRXz{VImI !Ɗ쬖)FBbC1h}p5{j-pYakhNuw_na]{Z~p5D IHr>u=x֗Rw s`B~Fp#|[> =Y0a]Le}ca¶PkW*TA˺?(yf; F=P\^+3{—?r a;[A!x=o<6l s9yEFeL}kj= 9`@.C2,3R >-w$\uɡ*ݘHDS_ѕ#c7Ĺ^w6|=Nȣ0dC5<U/O?"r& l rmXw:YFLo3JN7v>< bnkˁW2mdLD`?yxD8< s a5(7Q e7Sz? ŭy۾sVn| DnUb,Kg (X-|pz `~D2ӻ[ݵ kVdN:LFy"}H ȨGTgmO~^3*)xqxw@ۡА$?l %p kFp(Ol΍Tuu/[LLfǕ^K+;|wBCCu8&V u>~qm~/q) .e Kۏ-Ѭ=\ YTCЉjyoMɶ t3ʶ({߄8ZXNc(OJ̏tٳ%8d턪Ź tGt45aU┭/;{=AЬߜbI9bj1w*G2@gM4B[0uriHUrC3t}q[b* {gM~EΨTܫONZD,) ~1&JMC-7:/BUclct?>hTV4r(X# A\2ə*7@W Kα깿VIն>k;u˨K.,yO>،GZ@`#[70cv i/N_+By4Q3\LtC'mJpqG6dfX{˲jb߹QN*^geLku#jrld{&zi":*`&"vP;/g[qZ{K t7KFHӄ b26Qb7smƬ8|jy L0LZ(9":Oc}bxmKTMݱ \" '6e@ 򁨼(Kf;l2j+.dl9= +i+I\UcjJߊ㌪gz#Jyĸf}Eұoo qmEdh]yE694qZD<#cfZXO O{#"tp 69٭+EqN=|Zurlo+kd0*% _jgT)粤wxܵ~#1h3Cͮu$?fU&Ԃ r?,H-z|#p`)B)(j?/<=suW' \'Y0snߛqh&*u t9~&E.sgz.fp’V,M6qL]5hlK`o/6iˁ3U8Vdԣ:k)y ƻp0_Ӈ$b9{+4Epib$ONx4'_Pqo$r8&R.ggh5_dϟ ^࣫"_~;ʴ[P7$íklDĘO#C?*Ff#.ίD**O Uu{sT!uBN&Цt4? 4Q/BOf7^. $h;wn[m)&o"i8 0bbTT|pRouZt)n.EN\Y:>U^ЏkVy7(>sݻc=G ()x-d^:⿭JI-nzx逛YzwûϵC,Nt Cpgp|+q/G3O[ _a?~ҌEPS<>ϯ|Û?Iм tu!l+7O΂mms+.uZ|4MZq $V?0+4.O/Zݜz((3P )Ua/:[i-}W^0ʊC[c9p+䐧G& mD#(+#DNz;IZBv2َ U7Ek>bZ_,/̮&uG%xmyD|ZAEl0lnnCw.)K-[!u'b9yKho)BJX5y6bwޟO,0i"ƽdٛY.IϴߣH-:m3BiaQ8m.[Jvkd+~HJ *]S?l{4Dc'g]yZ.'՜|هk}~I͕*e2dsb";R߾wF_3(T W[W.!1﹒'>2S PbrqTx Q~.\FbpA㾶,Ğ4Ɉy3teo-lmQm#ZJэ [W.S 3Xg҉ 7zmH z4dJ3P=!TÀ3$){:&%3 A 9 n6: "pfz/E{ QlUNcLGyac̈M42+u:" +/DJ~:Iֈ %QA'㍎D yvY&T'aCHU4+댒:$xai+-}{TꓠgEg#wilE JbbE3J"@mA BA"-憄HP*>jz#uaWEt ;Ñ*!5J(+j3UY^t)`LD2H" v 5&$J_*fbI9oO~ciC; EӇ)Oj^si d F;{ϵxb\.5ݰeHF6e8s?i++wqAXjHJX>Z2eaBEeBJrk +J6iIDu%,BPPBtz杜by Fxl\ps i #YTl;3 = 7VgHG?TQj}$\` @ʢQxA0K'>Sb|΁_w -'Aln=_b϶?蕵.z'ѐڡR>hgj<vIĹd;RY /d,j.cpIF4q VD#HX&/oۂ?F7]&{Mfkn! nU*YT*IF7d wyCS8Y4%--2ٌl-k,tT ((^I j-}.83NFA9$`MڞsT[M%RLqXG 3+nY8(m#gfVF7@*m@}G7Jk_bSetNO]19V:jP:#g%.DZ\6<+$5u|';\/lr2}hyM :rUH "L݃;/`IAat5,ѭ< xk}}s>lTuVsәŅR:,R4ZbMcHBK?ϖuY1/pԪ6DI44ztnA2u'|Œ&—iGV[9NjW<{{Уg͚z%XKAY `pКm+urvey%-[S 7PwBW MzNx.*FCv`ځ_DPw^_[n٭ޑn1`7AZ-8 _(vIʩ0 %laӸìsE㨝b0sbԇs( .գ(<]Uv 7#Vvx⋸]cbk-DvKNU˽%vsg5A 6Q-='}%kp3a2:+f~ɟA"v,$Ynh­m&>:Ekd<EoM# _Bi) #ZvebL P [2㥍` ߷ ͊s.U!lij7-ĿW* ߢNG$g%ely pqav~YH]?G U`(9qj.#ǡt|rX_Uҋ"1061964Dh֨34ymeB$E ދ|Ex>]3s:DsK4T944J{^r}\z.QY؅lv_?>Ja53nVNٳ#Нw`|$EES7<-uzrؔ< ó10#g(Pvοb+gEJmx]:$=w| 7kѝkBN`8qڟU?=rL쒤!ʩvUJe2^1U#\ECJ̲8Oڅz3ƴJvJR(5.7aeJR P/aѮ7Jl56!f!p|DKʱy4\EVhwfv9`&`jfKj<)~@Bys˝_DgMa|~ %0q4UphC6-lė!0II}`⧉]Yo"ˡ;JA22KAǡJыN򡆏20 3j;"HcD_C'[t6O;-ؾᚹgMH4 e܏!MޮL2~mN(l c=ǫ$]owB-ҵS md1]dQr³V•1՝eǐP9DsЖ&ㆨCĆn"f8t (^ĆaO4A.4 L"`n̑\Z: w;Z0ve=Wt i5^ǴoֻIi[/$}%3^alZMˆWUo#2Al6-44w$fٺ+ԒIW$cg2`>ٶz9;Ю<&]_nNlEp}ws;lcB UaH`Ns*$b;c'C.Ubo(7lf$z֨WEײ`pBOaZ}vO"8>Hoys_𖖕!ʺ%Hq۴;%;k@v#?&;pbP2SVmӽkkhl˰VYWcOw׽?ۨ`I<|rH'E`' 8 fa?E;}kpQLj ,>p_)~0Atlsə^R~yK]=-S3{p-!Zn?ORp ?)@ j(D K* %׎~rk& m~Ji_'#."F-c, S^6AҲ0|m825{ L׋)î*kӎW(bþ Mړʏ^&gi'=E!2-2:VRe"S̾Y}[UhA㫧pxQHZr)(;*lm^ԉ7œ: ʎD{PìtH@<;`J-ȅ7K`~P^ d\ 3D H n(OThayA@Scdc҇3Rʋ-]Ex_*@jJj5\-7 h Bj%*G/sp}4:x;BD[R D nHl0:Ʒ~ތ?y UwR4DOs;1ECD<;/%ݚ;|Jk%,3t,Orς@@y?&)\C~{ F..0Q~pz~KFE_sޠ3z>H #l_C"C`bc5^*?Cg]? KI-"֢~w$戜iϜj27G1\;wFX@zW+X*Hf7us'!埬Aù( Oxjr6&*: R<5Rq uɪ$'æ?}<[!k$$o;fw|s?.1$ﯙLřԡ ^Pyx-$w0-K&ɦ~Ke_ & a9v_iNl 7u*AmV[~p4T EM-nNTuB:-<;ڦ7;kP@8{aFiD}@3T,);Tq5XBpKš]0FToGlM$"VUQf1mlFh[~;i"ٯPkH9/q+~$/u^82yЅjQ.J"գufV28;A9z:$l]XtҌ݉~@?3JCZaHoYn's0 *޷rExX =U9*.;cb wgZ6|N|d/QRǼWerN6{ 5C~Ίc՘ #{0Z>ql6]?ï<THa!QnZ'l-ؕ;npC|{PN[KNJ xC!Lte{R`^!J}9@qUT1c_Z FR䌐C'}g#SQC+9fo{tNfn䋮ެ"ښu~=OM)ƒ(3v&!D%$6a`WnkN.ofk##$*IG= mi(dd'e 7큿*=. 4+@I7!}7؊9#ǜ>#jtHA6Sr}Y7djUz]=Ti{VA)7XkTX{`XPceU7{=[]eixKVq iͤGeZ6qBkUD3E*vVEe%-!qfʢ&1`p_W$2B0Z* %zDsbp2udB)uO0=0 /=q.'\^qFttcHbD#ؑ }ȃ]&Q5b1N2{l7M NuTZGq[6 .OD/Ņ԰uTF^?Ep&!o˹oϋɮ޲D]͛\J5xq\9#uUpZP' ~f=Pr<?#uD'N㵥mnbY*:[~}3\ ;4bDGau&m!ϰ0(cJ4h>c D<65Z IՊ!îy0/H*3VO CBKO2ԐdOigmOE'8~?tQ73u!4a%u+ 3W0чDj:ݾg7=YF}?fRZS{Y[cE# # ֢o ڔXmf~;+% YO}LEVҸ`,n e 53Y Ut"a| Zʓ3:vwWXc,|:O{ʾCU0>J2FP}xf 95 N!?"^4ITDt8[2$X`>w;0 V ^w jA`:G*ۏ~i\Y7{$h69GNH5` NFJlP6.,/+q0|Ύ (Db4ὡnƌo$&q0 pE`sKyepkTz(\{V`g3M<]FKdl|,EjIʍJy܃AbcSrV}J!}ӜB.i}\¯^)I$w]CFxDe}>6Ī5R5(Fk.W${ĕ>s3bnY2_(21j|k~`sL"BP^Լ {e!QnB [`xuZ~ )G'r^醙t-.#&XUfZWq>bnupd4xXHRR@ "&iSрo@a39rCѰk&1wm@V3m=c/G3;_69J7_G݄)"-F'Y}=ӏD ;'PKWB]lwnx["۶K F|7EL07jj)ͪ}Nwz0LÈ w6cp3N" FE˔r؞lnS'VWwR:'o>23=p Urs>a[ץYkK'~+t{70weEzLrruO@ !OJOcvP1?K>GG!}y}j9qhmM4$XmcO- V^n@j*_{Ci3 A'Yk[R|F%**WiqrtA> g Q0`}٪TsQ>g1N$ϽM,Zj7 M/ʹn<Qz1Oƞ;v !ؓ^ ykwVbQ Gj!_w[YhKh,?Ktou2Ly6]~=l- օ;Q+-4,Du9Pa'W^-YÐςN"6ph+50g{aiNܸ]Q"2TR_47s+ e-qf2!"H s?W_[OVa By9a9.x.[i*n :ܬnm{#!? 5Ƿ&|ռY@Ti(r Sִh"!f67jOQNʫO{|u'9xeQmI;aȚB"9# S0г-_F}W~+wv"{쓖~67lѵ`y1ͥNovljw{PxD"k^G<9䌚e9~ ï#fX?r^Pɮo(v,QEc!QU|btx G|tF훪!._ 'Q#s*sסF0͆_ꆻ96{ƞ#l ?!ag!7V|nF8gz_je驻72k9HU~[/kh' "K"קq##WZ}6웶椣KxptT✂ty4S*^Z\X]D6 8%NL68#(emPפ1FDU w[w?q!rzEki؟"Kc5a]. =bq>',( lU6)=5nh ڞQFk<*%{]6C!f^x2O vgfԱ8ors-YəvTD RBpI`Ox5332٣woH3ǑYQ7wVd8;'@rs"Y#MM8RA"-f_DfEIHvR+Qo7nZa[ϨuF0\D -3deo `K IO),yZ\[eײ}(Nɸ?Lrӭi>7и r'kE=lt@ǃnonf{jcm5gqkF|Zawd7 5 =hq dˊ;4gF |2)/`ϲaQ 8OUPI;|裬CE_KC(sY&A x0˂^wOJ+P4:UO7Cuvk ) _G(g@]ozaIgfzU21fHp Q:<|2x{LWiSb3}|s)GONaR*qNlXA5ACk*7TYiO6dY3$Y҂S-YwGqiת6|.3F{+l3#U'#P[c6R_0q,IJKXEj;]}[16 *o~%[<BG[MWk&Gf0}@kwu6#JMcQBoi 4"SFg>&OHMNe)DOc na"|Jglo@M2eWM\r DS/WAJ/{O]=6*`J. zǞWiIIE;k>iǮ0|%"9GrWO/$  VWK?=-2L.MIu+ZO}d{:8W -0S=rʐ`\QzҚKݞQ8|U[zLc e_u;xFzΈFKe`k0:*)s; v}׍WoMsJgb]t,hY[nYJN?BsׅuyKˣv6 AލJ]/+ЇN$AEDC# 9Qd?xG3Di!u8nmfLx\qҩ0.xUق\S,(W:*ޱ\C ^G[וQJ2oea ]zS[z9+0iGJfH7^;X9aC9 0WOc u+t(F~!F zo!߂AH:8V03Nqͷlėh-a]iTfޓV9!SeYfT4³;#U}uQ匭'wk؏xE@>3 =@4c^h=se;st5:#+d>:oK^42=WH0ڷ*]<R:y;JSA% *s~sZ^I]V[C^u7G'5}ݜ)S|OAtHc$UE^j3Y*(n怴ۋnVF!05 Y}6vOOd4'f[[nB(5/ȍƯTM Kp|Fk&͔2觓uF{a~v!Q1UU&$ }83 |Eh|Pw"T %IS8.1u/(GXeҥUϽidM?z3.XU?wjef H30eadgI1ٝrTv$|be^:ŠF=hnCEͮ6 t,) Dvn_:dаTL0ɆN,zp2yNI1wܙ+@&,U2_k˯gTiA3{T!_$xu2ٰh`0|OɩWbQ 6ZO :Ʀ;)2jI܈ٶ mc! AuH&HsmY>MJĬG8 PkdH E^!3 !~KT ]0Fs(՘PQQh~˸TnQ 86K(",lU]Of.Sy??ZR51'=Åz`@=A#B_@=3x'b\   S@xL1׏@&X"Sh^wO[D[xe=&+"}̢W;sGQm lY>*Bcw ]D,BկwEDS^0Pp[?bKfׁCaI&rᨀ>Qzo{{ ozDK9>=ǺZ̯Y;-|'IjFq_wVFi|qTbK^s,' !U$ru@Ј.+7F Gmv̵/;a%f=Dr!PjC7@Z) X"0_!ûo.ЕA6%5fKa:?\Ά9q).s5ڴ︨ ~^mWj if.cx!r4Y:]2IĊN%˛ͽEJAmQ(#x=.$U hsd+_9|}ьaʙ:lH-e^2=d,0M@ !hgтͩjY 7I[M0dud^YJJ.1<6X'^}cuҞBiw#@:[D#l+ͪ XpԌƶO7M)rE.m "|.y~~Hz~#=zX#;U/fKt2ToNR”Jkh7.],c~p;WBMb8?tj5oGZsF~-h/f5kD3O9UMƄ U LflxI7 񘜰B6kj<:~6Gr5|nIniDEw&<]8>\*TeoHYU0Gp.y귶ƺ{ŜE u;gEz7ԈKذ, 0b1R|IB$*5{KT`1MqM\3wޓBV} -t6vNtDp:D 3' g+`룎wƪ|I-Y5 *\*>]4.H\fYsӐ >& *Y/@0&>c9/SL5Xfm"1Q&bC1wMi0zB=cD(1bz-S7R>}ů+ +eȶirVFƈ #߻vV hKKOuS RwN#r8ʒaDhfǥo5sHJ)Q3kH2EC33CC.ć>.Ҿ縨?%* /s/Rc[ E14%:]WHA bR{+V<\V2g-Vx Ev69'`u*ew׿H8(T^t"E$?3OWPBBΏdc=r4%o4q=?Ie^z$p- *Yvy)V5a /Q;AyH+o]3$Z -%LO`S7fWC{K,)CddcxnEזw:L~: ;oV1Q; +bU'r1&վЀ"ѳ"edzP!`:ݞg9઩x7Y{ D-`LfM)y^XG9;On˥gy $wp tdip+cE篴rWVמJذo<D*HfP <(>GҪ'N<fCKcy`Tgs.=>V>[B? ,"J؉;~F)>M{G̅KoA=Kr/ڼ r]ˉmc4 pE0l;w+s6B*y# ޿`zn2'嶤U+Qf9G,@֍".Rw LkO uOnb4c?|\U%Ѕ%-w+Qt\TTtt9Bm3A<35tw^'Qr4)Yir؟Lp|pEth>M$E/.+n  @"/ž甆*X{~쿝̧$Q.ql{"DlF%e\C8/#&zt֘aDfJ1->xP[^3 kBpXĹ^,,7“ B_Hг2 J#G\A-N[U:9 vµA2OXЌC\RyJ턜&p_u޾ א󺊥 \U9>F\w SBHV>U(_1 no`0YܑJ5QKPr!gOx=Qbʺ&_ kfEtȲSsBOB]iT8b:a_Es=K m.m8f"0LFw9]# #X2x4Y Qx?3>vBŅ]F .}o\UKS/;g?wD?0f)U8r%[77%l+[O]v*2# QGՌh RC"[%qe۞37?3'KI(ײ`JP`)3B#-P m[e0rS}-d:jzY -$-z]Tv/O֪|7UYgA. uuD!xn#)438W XH7Ek=mm҉P. :ӱm Rt5 /eJ@ƙ+Y?(vy9'1xPtM*"T 9L3\8jH3hnNFÖ> tIaBdpY=wB=cҧ};Y {ÚC?L-Rb!@W&t ^ <)]*駢 .&<ѱ(8w3hȜ:A."jc?zn{*w^j`'*IuZYwz*%5; fnl$ cBVsi*> K/}O*SuRv5J~%[\_Dr6{ę7$w{ԡ!i#2e换4b;ψl\aؑrtA1f%\ I\>ΖNR"6D &P:1x0p(*zo$\ITey379$Oc> l9M,g?۱z>)ކǀگNmiU}d}or\oe!T uQ imkq?KÒj*16Jֿ̎Ū14C.e{N@hR$^\ Eiu;r@Md@:aH /avn)+?=AY±Z)nBc; T,w4Z89YaÀ `q ڹSpJr'YG(^݄hDϤL z FrbgDv2EdhUJX' jk%'ƌT] D9Ov2;DYJ͕H(Y  -TO)u34dc:_Za`,%} Lmf] - ,fAm~IƓ.X1&9NYSF{/TtD !>F])V/6g'iyB]:یB)ӦH;ѕ8\~Z18]BBQ#SleDO60d.[Kv- 6+MSi0gnS[Ke;dreGdmEoUYp߷ =TO,K+K)}GmuNNcu~%L.BS}6ӏcvTf k#ҝz"D.(}4vZ͎SPԞ`m OS. I}؟h\aadz7 O2aءi bIb` 4^K @h6'.Tri{,7":3V- sT;bb~nYҳAA\i1*{$As/KzKy4U!\\ܾ`GZppO-iĠ4%lRvՂ. :};%xO$V_:'}~!j  a!C,iaJ )ׄٿaH$^RSj<4i% ,s;9 o, G/gGRk]g1r*>Sqr?G?C; ~i'=5$}9@'zR/g. psD -R"dL>R$^v#X&F $Ĕ-.A ?zĔ:ɇIXťѮ 䞺znfR~G` /2r!mi_{gU4ĩn8T˧IV] 5q(iZdu [(3xhvBTzARc@8ŀU&\eYKGh:/g:y O6S 3?.p/<$sS?V&B<JIyyaa+e, *{zq"Yks^oZo++qCZqԼ$O]z!E̪ d^o &|}ptG˧/2:rڐ?h;dE-[t{!ZkyT|h0Aw!N3@m?Ar>jZNVT+e~,>6/`;]ln5q|{vo>)hгLcSd͝e+*^3y ' CrG B5ec.!gOtf6@11IkuhcvHSPMWO$'k98Xܯi.vݢ#k^F^^N 715L 5Llra/~h"X٨:`ѫ'LR}?y!zRac{!ߢKE%bI;5AoN'E%}ufk`5beoZ@`µȰmzV^9$؁5JYJ%3:Rb[0m´T~ZgPZ϶bs/%K5/ kUj>ar0@=`9%rNa6y 2 "^,HO)&|P2ع1٤c.=4Tk+؝T-3Ȫ hH^,$^ &sFUg muc=3f}qS;^~>tİ׾vKǺ޳t[Ni5lP ʏIVojN$(NsW3|OcJ  i ᮧ4ԾJv X3[G[b1!!5UK߱`10cs*:&X A61qeÕ}8Ͻ M C|' }* Ľ\ ,Md*i3lƜ?#y̏&؏B!ȋي]p7}mR4ڃ9l{dr&$zRM`aB]S0#KR;=~`8p]buYO)Bﲱu)Wu|Ebu}|D|S~31>aq-*`=s\~=WR"&M}XkL騀Xف/_ģs^bQrf. \USՅܲ<=fohĹ^RD&t|NR Z S/r+P5xXm7{ڰL޵&_EѪdھ1hK caK'FCVx%}ؔ巰 3y$)nDgZ x6W"at ~:y}mViLR8E_؍]Ya/$8 Xz}|_ǓAs0 d8~xs_''E-DSQ5F Ϭ4%ʅL<;?4v{19(o@LU-wD,CՎYd}0`HWO< ,bg&b i6O%pkAURGK UP ^=bk s~.|3!:5^FiAc l$oa~([vJYav*-C#TٍVڧiC[td05SRBl{%>.1>,[%+g,,VZ*C,O$> _R%Y<_tg1Oڠ.]w¾Ҿd$46,E{ 53ӨO1q;.0j;PLJah]zkf2." 6" ާe "ag5Up#V`&e'Ek+o &׆}cJcorL'POyL{M>3/Wa|v|vrT ok ؟}0R8b bMW7v;0n %'7qnSJ\{G{Cxy^H]ߝvem{G>2[h#)=4_؄Oc>3L*h۽DXjg > ̫֭ ׿:YmeG١z4^j(~*dOi +IW *џ8VHRp?+hrM"v3.7"g E8J6F,|64ŎA :#<[F&{nXA>}Yd*ѥ% Y ?IoS&.Ʃ(p E1&xUZUEѸ){[`ѯB_۪q->tRQf6U"mVfa[6-y]@1Uҩ">\qtS4ZDA"BOJ@$i |t@\Ϣ|nj$K Kts͂ [,9[bOp=_ij|?\X. 7VJֻ]~kUXSm J^N?Xg7@ Rc017ɐf?,]s'F?G, 80/p˂QE/2ć.eII pb_0 g]Ki@wMԷ#g9S9#ÿ<ǂ# 6߾ rML/+5r[2Aun S% <"L P;MGOf\l~[hP0vB:sIF _(%'e,ťr0nB@fEx`,UL99_iHWI"@X73LO=Qwlи*|O=th+ZaTRQw.N6ZuYwܮ+E0ނUϛ'Q2jΰyQoA$JK~(2JcZ/feOri(E5<`,w[db mI2\m8G'ЮGPDaFTzaD$3w7Ցu?s:#Egk%Ȁ'NMV ,J&n0BM7a G;"Zw%GQ"t!nŲ˸ؐz[J=:sͧ՛fG'0; ux<󺆇,;DIn\[HA弇eTdFvccMSk&/h͋#N~ꂽ_LxʣAec駥n-,wUP8TOXDjL!SWY + Hc7^]q+rE~mr~-5{,}TeN>{NV~;BVV5 hvd(z.GGi ~VOﳸ|K݀&+q&:q<O6'=5G0K]U+_dtx Ӵ={szNH=lϟ8g€p:h3 ։t*s0q:=4ثOxt*SHx~N= @#f E̝ǚS,D26 C7HeJĴ__s cٛؓ }t+~H>X=>BW'} ^z"o^0[u=6R)?'HyxMk#ccBTK'Oݝxw׼tmXxDRƔ"߮b = |P8 umӷmp0ųڍcnۧUD޼0bD#~(NOr<= P> AN7RT{<qZ#\שs?e.A>z?{Ǵ> U҉֠>}$oG=Q: 9f|05UZc@s!G AZ]JM;p~<UeLxVY,ٍTgEEmOᬯʪ7El^zH?ܔǫV,3$> W,Z5t@*!n%mW#>mNW=_XTtXLL6HM&0X}ca *_խAP 㑖20ߔmwFeCVUO@8Oq-Xĕ.fԐY3p8sz mT4΃][ص }*vt &Ls8i)~}tDڗb"SI}wWKcӬeJ+!ɥ+h֧z;Eޥl5ҁڗbP4e+`O2*k1N/i/k+MԳ3Q8}Ndy*a!="?yJiUuPվiwEd Evlpo׶C+9YrXY2Vns˄:jpnS[D׀װhJψ+gX= tWI'!9 !?\gsW kL܍ژGm ۝vM#;,U*\_/ls6G:q ,|`Hy)ds'71zJ6I%}mt5<+`5:hKM!ڊѫPqW}p`Pbs%1$=γ ߂4 w*nvheI2; &I k|̭?y2ц^,AÄi+uc!Њ W; Gv Jk2^֐FBq"ܗYgIyBaa Lqmq[Bx5赹>0A {2a/Y"Bkc%;ރB vv&S"WkM B$hK(wR;ǗP5_vM>c%,u7tAu!`K\?9G'd iBAlQ3`DnTdr#"j ݽH|tK}ä/ /צ\D"Hzrk̮VU̕{b-lEO7iR˿? Hdg,,L}W?h?mZ`;d,;$~jX yf,w^oB:Q\[&LB$N sꝕU'wT4oK;!ܢ#%L,Gr P. 跧#WDbV|фYge<Qj>?\: RЂ@ӊGlWW3d]8L97wڭǍfpLX^Q ؆و;2û01d A(q:#T?k4#K$!ӢNE[me /[{Sgwu^q&VoqqjJyoMѤҩA4X`;HPreynS1gˀ i`}>` Ĥ0!r# UvA97 Pqwh7 7ZIl#|<`WW@rơ4|\:oԢ* ͠3cA' yk$m0K~,YrLPQܹ\D[;ii<Y* ޷jYQ ,ifpR~wPv~a[X~ɠ]}Eԩ] wrOS\k@Np,]6Vȷ1t]5@<Ydi<%ht|ʣL'32=, i12M;/qS(0f Y+s i!_OSGkAތ%@U]J4/Gxu. pIYЃzu`Iz&1"5o{ѫ))>COn!Jh^J\&:jd jq܇;U:T %bc[^U.B}"Ւ|?`iA|>i Sخ&WKGP ǠLgQ;{On "hK'T@5|WV_ɶY ;_bf$-<_ZFo1Ib I9b/US}$ѸHt#(ΌK0p:!s2^P,J)Da(W7LcfkI~O j0Җ{cj`UbM#(G%~6 u8$+, -'$bhH&lb;iMIM} w B[SChQƵ+)גW|0:s aؘfFqʀ()MYl !ĩ:U\Tu8iWoz-dD;wfa!:)rN!A:cڙpe:/f~G/K1LN5Dnl=J$U&LxtcMHZW hC7n(_kD/{hVwRUP$T"k=46IOנ5I2.Alifv!tz X,qJ1ݯ<¡wS%#ɭ;W8cY졷ECZ{$H#>QpN/oHR.u׹GJ|^ j9LϥHiT0٧m#-cEen(vl_oWSQgqq Êf^NQ Wp;);ݝ=zR%JP+ɘՋGϨ{dFpiH"/p\nv !e뷱Ȳw$)YbrDGo9i"Kz P/jۡćءлD^WFiGTTrPh娈e]T`Q U[%1rOqƒ1DDS@\.yu1rv;)b)T%gVBzr$Ƅ89dKW3Z6*ؼKHŽo(T@|M:>q[ah (NfjG xAN[w#ctrLE#3j*RXUIޅӡmvgIS[ ojX(vl]#4Rq\x,/x$ֱrĖnX}4/V!*>e*zV]ʺɛYB@jZ>_[Nr/v'H<q@c趹h1c#bsdYD^lд}3mW1xw΄e{IN:=)Z?P5?Kی z#Xcm/+dӺ^0@?*h&я!]eNz+;G'n_~E$RI~꧀(/rS7%IKYqОiL'r +v>5XERFV5Y”Ze$LC!%ơ۳oEvwیG0fZBeNg<@þz=R.98{$ͥ ˵x27)3;aG=N'L|GM/‚5롩ԐľV6  ꘾|K2[BMcRdaWJyHq]gS5F䳅bpZc)MRd`VY0QF;MAe!8=>Y?uLD!#Id{ӫߦB*ϵޱ-y!\Vڟ7 r;>?yxGN2I] OS1r[Eυlc^Ф}c9g+2'SO*#{F>\ENЎ;E4$/`PD 췪Hx8E~Q::#lCBQP0'^|q @հ!Y!bny\[Ji^(tԽ|7b]% Y]}!9Vvl)ZA>wE,U[Zxz^?D,Jka0jZo!)q숗r#j[垕vm luf|nemGep(&/({?+|tUgJf1nJsYj+ni:nE,K)`7/r:[>18|(",B%O8lBk*Lsz C0Wdpӎ w9LkZQfڍ^ Еk#ըޏcvv gA`(\SߝZ ȝw D|tMifGyѰg^PE`1gXu Dx <'/ߎn1s\uѩOhSsnc2]ɕuk&ݷsׯt=ܻB8&yW 6Ĕ"t?S1o\'cɖjLl\vV x "VrFYe]OÉ94 GK11QщL&D$~ fDQQ(|փqv@N9;ɶsxC] 0CEAMNA+`q__zԻ lG1ZQʨu*5o秾`"̝2Ϧ-!ɱQqsیI7m/y7܃y#yLit֏MXnD4.2@ӏ) {D%fו#zMz |Y%V\%3^3oPb'khXI1О[}Kи=\=@;JA7[zjk\M\3מ.+Wv1LCV1LPQ!M_C2ƀ.Π:QmM{U[ԅh6/2p]H0~[44bnmiX6%q~^"Сኊd}}벗{]u lU\hGiYD *\$52M %Oc8s~w^e~S>Cpmz Gcj agv=łꔻ.f)sb HQ?m~{[Zm=MNr]?U%ySH,Iw!#yY5 ~z#9ItQ@JX˘E;wע49?%[SF)1 -=Tɭ/wshŲ͡Qऎ+/Q+gVO>[Hwq+1o@H1Gڥt| s-2cx:1#IJYØs˾e!Y/2'|$\XՕ~QJ# CkSHr]̮!͌laSk3t;`QJvfoB `o'RB -j߳kMzLSphu72L: =BꬬxuT֗26.$t7eOF4̐+!J{Gi^O)wZjA3v) J`\p68؏yZ1THFh~NP:x~rzΔH꒡;R .됗JpŁ_2%dgȞy5~358{o L!};8/3Zi[Y2] ^0*UF`BZE*YkC rXb!de '#K@ٍ2d[Ԥң} `iʠ"QaEYTB쬴6\L6D^>Y?t*MEM*f wBNsw󊷆~O6 %OdtE_@-𲜰 $lP6, R}$/x L|r\5QFjcegc8L| ͠?YհRJVt-ΑJKPL͠XewwYP OpsqAcĻӱ5YFÔ=߿S۵WP1KIkD[2VDQ4dN?%wBSF80<H5dy!_ #ɱȎ٦GZtKHVg^UwnrCq׈dYN|-lhd΋ɡfãtY f;9)e;A$Y tj-d%@[ nfq'TJ!0‟z䠱[n_>.L^嗘O9ߠ_Fg>\. 1] YJ E,v̓ڔFަ'SO~@eE ̟ u {N Ԟі:`PH>d ~ `}"TA5!.a_!EXK`6'xp"oW*Èi`\?Z8N0}̷%LCBW58qF1{"a뇧#&[UtPTĥ,v^>/dsn {Yg]R.US(8q;p%j0z+x)2qء:g+!D"tÉbM8v݅~ !Am DO]~#fU 5γiLJ_u:~ 9h|_9߾$ Y3NRTYEoIj&/caS$$|O H|$ygR-U]Ŀx^14gO1V9G'|SR_Enĺf3 @x5Ny(ΛuC?эAa+Zy;#a"rR"I!c+̮Ú:` Vǂ/?۽`z}>+ԃVDLE[^2N&Ni%c}^3c{tў8[hg|1}Φ ! WQAW(zǁcR#L2yaCOA29.>HwU"u ùxl1Fl78;?䫭DMJ#Swqɥya|!(V\]E0vZW(:]3&ӁU{]1Ӓ!^J!m*.!T,I:EôZ-1MQs9<:wK . N}6[qܙlԷW /4ey ׌X%wH:%~Y@Y: OSf7t¯ĩK m # bS8gDv1EU`$Dŏ(DE ȤUNSQ4q}j8i`LN,[Z {ċN%NUZyp]&+8~_ |ÆBaOucKJ8֧/"#&akr|sFo2|yScy3grHqRDHR>>e*e†a]EaF\ÀN]܄l(q\= =$^ĨH3,|?W>\Rt-g=w$X-VR*p*"H1U^sW͓n/ӂ XeWdWE$dL_қ1}BPyh01DmU]DmM{? [~|>CYEXz+Na&cΡWVF<,᳦A^t>غXgơ7nؾ|Y<7H3w& GV[n3]!qQ?*^Qb|Gq\z#ܤȍ~[sAv1E  l:_zh) N/F] 1E Exy/^X~hovtN}F[0A^O?( G]i. ?]D>a{ߞoΗtZ6\| \3񠍯vKMpTza}fWa6دK:}p`I.ʯG9N|ly*LP>x{I!%_t0l ͅx BK1ݮsWv%XJR(Yq+YqFA 諳6"%n^.+:YװLgWYoy1>`tnUb(n'pX]W&hxGȐX\M˼>Odp ?k 5c`wcRq=Fẻ =__O 7:4a IؤpQp4\e25 pP7g{A=Ӕo=I {m yJGdX\9AA=)˿S+;P`j&BDcy|H٩0X!i\^dRr[Sf(3&cXan,B >2t{䕕7 Ȧ?j}SbZËTǣEN)F*=TYD^ qK n$M+ͤr-3KQ;7h: Mt jANk;r&ی5+s%V$+FXܯuu;+3jNͩi =Oxؘ WN=1,f.CaNWNX|fF9_P1Ǖt}?pV8M"?oH|V'x$ap ̂s|n0M&K5w4gƸWf4qͬY#oKl>?a)u2a@]Ьv`dɪەU.2"8҄:k{w>RC "2 [l}MLW.-uKQ1%uM~5 ng~sJzΚF`b*! ~-u 'oww"EWő-= Ntn@(2s A6^&\x1V|b=Z#BRMSZ@(e{D/QPI̼D_褱]c LL#Ua(IskkG$w ªMntލea2Z bA:I@,xie0R P3~shHɧwn._1rx Pz0/=?zbbd›PI(EIpdyV7X(&͋"b=KR߫*Yo'QBEQKogjИzl>B2!\lYEe*p_"!&_+ͱdG)!?t 2?@ᲜiJ&%xXc[]9aFw.SYfol#\C^ [U&!mǽo'q'X(;Typ&t %11(f8 mC(&;OI¦Hnхr2pYr¼uZM8h0voe4 Q.qeO1U | j-}îgv?yQ@{*>u Iu@#f$xxP$\A@Ƣu6S9c仉:R'XX<]xP ~Aꄐ,d؂pXXو1/>ai@lɩTHMV_V3Fz٨A{ *nD3A'#d_SpnnpT)7RL>_V\U:0#J949:ѶN툸h b}Y:H5tis[*~JQ,cK!Q" }֦_$xգʛEjE7iLfm- ٹ,%~%ʏ_ 2s5ioJ ND%yn*2Ԁt;a؃ر7^"!BMQܿ3J00ko܂]opV Ds2YG5t VN 4r1R\X@q?:rW:SȽ|[| ![?С 7Vɬ y2#':2ŵ$*ѓ&?} kǺz$oY)#7u(ol!D+)m1^/Hpz "𪪏~FXXJӝcyTl|,s"0 (dD1211v@SrRy<-4D{@ƏgI+W[dQnUPDfjb%j<3'|Qh|^L͊@376 &J1b?l5w679uL)Z&7 }cJ4Irk yr։~ } TUzMN$TuRí|1pmNQ)R-k|'uy3 T EE/ʸhnQ) C?x9J^PyC)D@66W)#!uךEi2FWu( ]A1"9 ǵ3(i![A+mkpw) 'Q t ͗+c4.$// KxvO+ȣz3oVN9fO}gy|DXb9ՅaŸŧD~n|NJ)K@l?F1vjVrҡ5E*_"+ \V'QѪLqh8%Iߢ+\M:ݔ\QvIJVNAq!qLK{tllћX* n)jT OuiH(":YeƂZ0=`t,9eϫ.BzA9o2M1AgAZ;J`q 6q1s{v"3jYuM-v/?J+almnsR8@}?Xj- Y<}Z_64\n"e hldNb~~cѺ D"T8fCԐz n`hD] 7g~YM L+?^UDuИ3oƣY}³. r~#')X <Z~V-҄ae)'qF#x7l8s eR<4qiӸ 5cD'됝͵z=0s Re%Q!4F Ƨf2׮: XQjQP2qYIGm.%[$ɸp'>`\M̤*1;]rvoj$&ʱVʵlq3Rtw|O"Zm# uq@hJHbf%p`^ҡc l4=s~ D .pB$,vQ#Fǟue\_u*Aw g`Si_ S0!`!#&BH@5Dp4Knt_cL/ϕ!%%i$8(`џɾiS2G7^s_q\2QK/@|C?"x2_m5THI ӾM1$w R.ZRCqS3ӦНr=hѦpŧKti5rZȁELNpUT۱K_J5_&4h}NG񅾜5˘0"xv8 mRONBmx$>=U6 {WMfI}99#A0gs*q5D?mu\3,T#>/?Pť)$@?;OUaYQ1Sq* =#kAJܯbTeBHB/gM0٘k&ވEcXãwRלSFӼNv|ghg ]#}}i R%}}}i9E%1RbAf 0bz]nN4}OH<}?t,`6FQ,ھs 9i4 ?NˣWЉB $^}DY~+60*A۾)U]+woV"5C:[u-"fϰ΢=?7A-Zvx 0kGmƦDA{G39LKA=R/2<{L~?xI}rnL𪛳Ш?שFC]"jva]h61[3 hN}CDFb7N񋇠͕ ٯ 𬰦jiZs9ҷq-#C;c$ f `c6/z ;p1?kՎ_IBGMzmjg B2t(~zZuq͸ l\Z= 5ޫX垵z83Z+dBU O -%ߙ{B6VVPzɟQg :LY)$YZNŃԍm܅ zbpU^?֜n5!֙^lׇfW,ƍZ]`3Amnv@;M W|xnLL)JJ B;ޏQЌ4y unUېEt\$&m-c-Hҽr)58\?C, t91H&ʻhV{KNSh}l-׏[G_3zisLOo?uÌ^WT #~;μR*wL@unPMf8HݠAiBi!RB?KUem(VX4AĴ_=kI=ǣ=Qe]4:| —/1.<@ }^幩|l|w䀽v!-1dݿ@H ʁ`qԥ8NR~=947YÒ<ќ7Lsv&&RifvDׇJ߶DY^ܘ! .fH$[ސB]r'Vq?2 6k)/;T'K;C^fG48u0!xWz ˓FJ!ef<^D/[~zsl;1Q} }EeKa=,Q燾 )b-h՝a%I._NKN.5Ӟ MTr|0' oŠRQ-ߥdX )*yg 0aCx n"D& '\7&>w0x0j怼&Cו~ޅB bR}F:GY/j1]ݴͰ'[~bW! V_qSZyeY=_:f#Y?7Zu.Va6" i :ayR*+|=X+q\[˘<|)Kg"{yw,ʕ7бwNʚ|F$swwth-pXR}B!R{ NӷaYzD]Y#:2G-Şy$ n1a-hU?&ӹd6Cu".Ė! tM.+Je![ mnhKMΤ2Zg[q| F*8|:F4^gܱ:'m#P7Ca[p/@lNfd숰uh0̮06 m&^\u25fWؽ}!?p]Ҭ!3LjۼTufk|TwWA)sƻW+r!&֞oڸhy7<,kQu`Nf^47v_em$M.,d'%|K¸-! ! Jiqsip{+S G<Ö !WQ^w>!&lw5ws.*ߧ,oRMM=2ϸOul_(u{Vwnbh7lv%uX,}ܻP+mgWa$wPTmo e}';$r DNqUj=L]ާ `ԉ.7ƴlw"+czR~0HU2CaO^x5kurmLPW1,+6oik~^=1F*"ҫH׍E#R"DlJUʼGHr.[tlp7Sc/GzF AMt9׳ NJ/TR9p=q3D}bRjrO2P,r 32Q~IF&"LPqѽѕM5F{e۹V3wܒQ)} |upه6 >(]q$`S?,oH}vgJ2=8΅N0["3q2HX=kyZ1l{,Ɔ[s: J7 l _pZf,~}Q=|= Qe}CXBT@ %~gR#!H*+/?E !hz5J=0gF |I<2.Lc>4(ߌ=Yݗ,ȵF%hՋoü=ytO=~nXC9lo{Z̓om= F@uUFPݿ_5rS|ez,W(;U9WB2%_Zl]eh}Zݝ1^-)+һRֺ`@fqi/;!-^0HN;x.h"{;&AG 5 u0#sh+pBP\-PzUDae$2sƦ&%&!G}'$7)loC SaS>E.8dqܓ'䓻}< |H ?=j̒Q"j\\O'+ū} >/ǡp]ToKLZg 8 r`LX8CPm>+HW9'at/^\d{ݛյߟE(yFpbz‡TUX-6pWؕ5vcV X1q#Ml" Stf8nqp5;x~ < Q $c~{-|dweœX1y/"1*@@"kB_1g5Km ~KmSVA^&)հZzC0.!3&qwGIp|rOċLX@@^Kur '8B7>k[9"RCt>]?rB RH;-C߹fuuCG[_ϴ1HaqZL~$Vv42!CgZVŃFE6s8ՠ]Q "L/Yx6ϫGPGԓȕ̺]>yYi27"-2νc8ozt@Fc\3ђVR1}JmlL+*ӱu&^Mȇ0 vUl]\acIleĩA%@`_cxiBiM״&{\nΗR$r rEJtjwR\Xc\exc U I (w`l?V8JwĠHDeR; NX;n" rWc'3$"`@=x *awX.A𞈎L(o+7G ;>3u5 eؿXhh>MU4e;: *Iy-!b}]IgK>DX)X4 +9뉗aXѽ1 $pMՊ}A^Ѵ +}ެ.VCkNF΍_gϯۼ^m]M@OSS<#;Y#[hDѐs,Irt]ҾuV𶆔+/ AV3 dA'K6O: {޶nO< ՕJHI$tʡciE#}zܹR%XͲ"Ⱥ9gjyW0I ?C-!uC`aO{Gf,XSy,chd\xmHrSS6 9 G ZsNdHwH-H#ngEqB>*x8ԇQƯB& GzKD{h"f!JJרaƆ!$FPVc(?1 PQ,?r\^@^K8Nu@W^6Ϯ3 nHq$$tYCo8r{-zp[*11+g]%Dm_$?!JPg}6~vSLsCA')J/4ŦLGɶnoHUG-إDk{l OMg1 ht_|̱H`Մ"nc]6>˃W{tS YlcB$ ![:K,P.:^%ϋ-jQ+e; j9s0Օvm_b2[1t֐[š퉦3TLQޡ K,7O-`\_kJ9`6T!HKȳα,y>Aqypwg2iE73)+)a$xh9{LyM`+@(xIv"ADQCc@9e;( Y9ېf#ȭB>Cu"/B)i `[?|}Q"]}@!Pé@s֣8#2Rv7UiM&'yYϑDU+:J-g\8Ē1]Xu_@x#~eϞK&hUM9$s@#{FU3XD-FxU{,Y+%TmiS=U&X߸01T17X |ӻʗT-{ l̃nZ1YP8L%g>+'.׽qfi*͸g5,AkL}staE"14 L9ڳoyFHvtt\0uA:әeGjոE*84E*H{'JA/!pI.7'Sr-^s~`tIcһN"O$B^98t0KrYv?1Q[#Y=xmԤRg 5tL:+Й,kZ ޵B 3j,s*~Su;Ы>[J$ljG<&n%A"~t ! FbS֜c>gѩ"w^_x8" |X8'AD)|8LN@XTftۏܲط'v؏}'CWQЮ1(qDiw-ȕuVnk)2~Bh&azט`O`3(A.;8n&ZjJҔ߫o~2}d [4B>/`y3Q|)JCFq88Ւ%Rުҿ3"~oMO(&6sO $v5${d$I 8V/Le,mt PV)\*uNr}.aɗ(w9|_P7h׳q`,s@+1AbW ~F )JJ+s=LPpSφ"H k8hg  Vt(:೺%l7LY1j5! 3G|v|+DKK/ R^]E[ U޷jOn'.]*֋J? ?.Txs3m@ !9 )믆>0S o^%'23kj$_h.YBGmf/)O j *qQ4T7y"Vuɒ<,8u\ijž K_|D9`MÆEgV06Au->#Ł7T%5oRcq̵ 䲽:*C2A۵_E =6Y@_:r7*hbcqZ;@7~)f}B܅V ǫMC ;𣯟1*%%qX߸CnƄ!U8)QҬ KҐ5>S gq#evAnX@ vwd., := mQV2uSZ`eR K%nnd}Hy [^)}It" zl\M>|=l:q[`}XV"@زWBl7df eGGtѝ$ye\N) 1t@!}n:Bpj𺀈yœTb)lcANfEloa KkOBUrj8'"B 7 !74LǏ@D`{ Erm]HΌ~6?uEOSwp;pMUJSjݍ&vT힎RwlۛHaIE6x6T Tyd.'/hR[d0^"r 6->CC_!":w&g%{xfgQڌku7$`C%#|I!h fuG1׵bt 8p/8NZPv-Qlo@͔dKwx1S@dX<&7T\Q7h]8jAȲzpto.wB^(iщz=Q3v&6aK!GV.^O4*_` d!%h+]5ySA1Ķsz{9&KP[S("NMm ,sSq̿Fl%{G`Yts}\c⋑d rfi;.,o"H):}[5iqeq>&$(/^մ j }H\?W G4`;tڋ!,ravrN`h N@E"#):m =~Irؼ̞`AJc x[-F'Sl49k ?In+5ǿOvz~R%QZHF(xS`b֕WtVy6p@A~Ľpoʰ׫PN4O/k]XE@[PU ;UAR )ocJYYҫ 4Ƈw0N8Q[9w#&AR *'aDDpmdGJY㍎܊ dK󙮍 ;VG"?b ^ߤpگуbuT..cNw950;Q #E (L_(F>~4h}. Zd+} XVg MO$X_p'"("c 'n}Kʉ[3}:_EPBʃ/`OcPweGm JKע;Ϟ+e~\ t4Dsp7lH®8tqO[ fGôY&i/@OON4qPk I D:^~0 f3 sD #Oi…=I ɵt%9]OFd:B*~ƪ>[m0rB@(˂˗ߚc[adx[~MgSQ} HQJc˹?ǐ^a5FZnhN ZSA1 vΣ#5ڋ(mм&Doy]sPkZQ1KE+Hΐ̠h"kpa4X^E֖moM5>f0uIo 3DV~4q4iYnEd.yi3GJ'D*CvzeQVoN[XQC nuaxMw<[c&|OaWwb)6dO0 y&dN oR?DsR@8ϝ,O"_M61i{|'./.ly%Q!*w#G$jvÒH7ѻwVHO] `( IWDImAo~c3Ol/G&!P3:NWM@#APTIZvL{2 |8M K7k8=(bg$b c3 q*2Q ! <$ÑJD܋z~mq%:SlNs s$?U3"R]Z'ʗ_;[x'R}G.߅p~p#P\fo";*!=%\ZAdڙ4C z}\OWۑEo*GxAY0[W>" H J=b̛43mT^8#{nզ8LW?GK>\1'~c;mŰ~FKn 8ˍŠ:c-??T2=yrʠI_(Hyt· eT5P;--$MUv#'bRG `-\"U.LKUP3rtBp b5+Jg/u'"os^_iHLquM=ѳuH|A"aAMk"/c-jb(Zڎf9\YĜq6O̬*CdޒpH7(DNdPZ$] ULeYd  eC+ZRU&;tAivІAcTa WkpysW}=cnúK""vf~jzw(r:9P~'q8O܊Zb%8WQ+3_/܁v@ZI%726/W;J.PnR*n?Ʀgz`_\uSA<:ǍLic;oneyQiM=|oWHXSxǞБ$JմPK[pb}mXP [ѶGmN=l 2/%Dv<ꮢDؒcϪ륒> 7uh74&'2)7`&# tfs0# +N%OrHf'\$rjTT,kZ_<Ž j-,` jo<l{6{*&mHԟ%:YS=uF9]d:?Qb3(JplT_ '} 1,4(b`Gr CB[#y*)X`lbr# >R 5:_|'KܓrV86#|IS*X8T*~n@OK&5rq9CJ4=|G2bɺswo29n\A2!wڻ A/T@lkLߤNA[7;vhۤ@;U"E=$S:v<FW}ު,i[m2a:{Z`9R{Zh]>^ YL Ps,1eFvΊZڏ$%m[PVe=dA6DBz-B⬐x[NjKT rh/I]Wkľ4ԃ5FpCgV14 $\lI|kiH7<]Q*f)d:P ٕuqw2X'ܧ7&r/0{DFjZB|Y G/Wiv^WN{=oyS\;ANmvev|'& mDvȮYq|0(]בSUM[XP(@\xDᷜu8-7BnȤň f l@C%]EY?J}P;²QyR4!kƲ>)3Q% Z֝c-Fr"_ 9p)]Z̏.`5RAP9WE!ӌg!~ dEz9x[@Xu)]%Ҋ5qԡYV:SDmy|&TA'H&̀xTO5tnO!u08] ǖ;0L J8W"4[hhZ\=\i`}Qz,UtP ﵝ_ng1qwChƵD!1e! 伎z!<y%Z%GUQ.+ [ÑgvZȌE f||3 =E¹KC2TֲvR0e7!-̍l˃V6Ґ?'ƒT œ,l=̊$'Yp:YMϘUTvP672avcEe-#f. ;ƸWRXI^֌oNGqE(툠!vB+X1IqiXu3жsb;mౖ;P :@s3.m^qda2IV36q.|:N'{:] D{wQ}5-j4o} Mf!g߻αvrhcpr c jn/ZCpty#` Ny<_,~Ty~9|F=nz1ĎGc+-r*Q8vq VXўS(#(lo=z`_QxY.2fMqJ2÷c?ME! Om-1EUCx@``;2IURכod` 眕z`TݳcCl f`^62aW.V =a!/|KGieƻ,c]ے#χ{\< $ gi?-L.|aho2um'wvEC>skO. s> y'.I`?.y5d*y}vU;{(#n"jH&9.sn%Tuc5n{ <i\;z ɤ3: ҕΫH)͢5TWDa >XluD8^E"j.. 8 qw9 ٗin>ܻi+=I4iԫ;pP~lמV'ABR`"vE!Io9T$D7J`GJDHv\!vLnnX![ceH%q5Ui5'AЧ;튾\rՏՒLXWm@[bs9b9d. 5WDRI}0UM*QV_~pU+eL 8c*_JhnAY1"%=">Rfk ;C4kLTl"A/U,;p*L&JhSW}f7`\s3!4&(- b?=ۅ EE|PIj"=Z؈Jt>r{3mjVG?9~D4ɴclIK_ nY˔}Ҩ!j a+h6.,z/G FmF\ )*#PI24ˈUyjy9?eR-m ,bmZF+܅Ff,gEEp/0^w_IS[iR`{/y&ЏQ1jtLa5(7tqP+L ? (NGT./(s+'nFg4'K0:SLDNg2ck-jJI!s|wRYWA㱳|e6 } C L(75i" i ߚx!WК{izp}vGo;uPraAJ*E7ʊPRA;wn.R\=RDƑkq,H7U}G\"V~t o|K.2۟tR "Tn Ȝ? *""J:5/MD)o+>6W{ 걃@L-KIDɻ)^Mw_a >C% )rT&]WN4 rM}a9Wf"=f.@LFNHmշn:!JÈmrkK&IH,cڰ/wy^'\N3Qt!\c \`%N2՛ma /)mE[ ѐ5ddM(Tx&)#E/0zL(`M[uLHa]2p,5!~މ@Ug 738ضUwV. !a@dOaSu7<,iAvulC ^Bz%4jcWyA9nGd9}5ϰ"Xgy䖥q3Fu.eo IC=35غ5R[?Tv(9*>kW"V|12qw D HsI jB U~9!4\* -1sCc]d6Pڸptzս֓':5RR,bMLDz|\y4$0bWt*'hlҐhC%ke7Ps׼[ic_튫;NmmadNI٤cfy5 Ύ+'u4'+ˏ.ןd*), BPN`2?`w g#b<8C,87$}^q) ^)ePk==G9>ԉQ 6kiS Z\:fSY9Tt|v1;|ufԉ2qP8 yF?~|/D>lRX}dXޮĒy9 /[fCYeU{EA3*m ۞\kl~J 89J3D}vVl"v(rɆˡ Ie˯Q!ж0voo(+0Dh/ | W7Iɛ΂B3\ѓUC3Iz[(&͇2 ӿ4k:*-LS|Wn"ُ⁥h{ؘpNrZU؞Ǟ,e"`95]XOQEhnSVݸK ȸ7MpQ1=pDQE)ϿDd}JI?㵇qЉtz021!*O_ː*AɄ%c[ u#O_3gt,j"ړjOY"tVXQwĔWVDV":cPS *f*Tjk56ej<ؚ*T ц b8xgY튞+Y|cK!< !x5TȘX F< V|bD5ɊLUhjYd;4&hZoR/'n8f Dh;Fb( n{ɜA\Xsql쳓~N}͆4~- -2\)[Ty$Ohpَ̨3 Qe^wVzG.jrdf #5~s479zdM$x}Xk8]S:j1ifMp\xنan+G  :wO9ODݝDRF˄Æ- C?a?T  + QoEyڗ"`e'2f ٪=,HD2<&jNaiN #ydڵ_ z^t):T|<'ߑK+b6+k8Aa;i",wr-[5Z6 ƽLQP3ſJh4j%]RfTT@Es8 !e6|s$."<ݥl8g]>O1I7j͓ ( g}b\ݠ(U%T4l%G\ܖYEXؽ\R{#= iuBwxc TI Ɏae7dHb' qNy"jcɾh sB'W!@6E`603-Uԓ.HI&đDM~&)(KOmb[ s~j=k$C:0x{%g"[Zy)&n!.؉{!6kUS6ܛP1ƘeVMВg^Y'N @Ih/)CǩtgH>uU];&)X9jyWI 6fb JB׉>\22s|Su>̀m 1T]>ޘLK 4ĪEF[HnŽltH?\lZtg V<|t0=6F}C9%‰:!F<weZ]CGX%KG;*l~K#E؃4z|5B7/tsrc ec&ͤqdi8Yq3:Ҿsb] `=o7^&yTG{J ~ Uܫg!gy3=X6|M1ϩ@9V0s,8=yj؜Qn^Eͥ15%om +FjR4Z1py遦☿YFaz*tp8":]HI~ "&y)Էm>Th}+a*mL!N1Va7fFTq-#Lyb}‘i$ s*Fj uċ ";D\>]d)@PZC0|f \+q<{ڬjB:9 ڶVߩ!@Vkw;O/&U@0^B%1:Bp:gIB|i1I8"XƏ\kέxqeh ? 7\7ϿT0:dU"JT"ܖE>J'+8z.VRHiؖ⻷9Ҟ4!;3/[=tJ) HЕ܁]RN/9F4ItM]+s=U^mgzr\"HrL|A~{<݃o=b-P+Ĥzc.ci e ~nBjM:9w-h[e035 K?9XYK%hFxҲv"eM%7&L?tJ5CF%x%V#~ī;sGU҂UZ֩΋a:ܟOX(& חp ubo#PLBtV;_䀺ՑLJ s A\ѝKHƳ!I3V>0Z;XC>ܶv37E^\?*-gɎ*rV\:. yjS۾/P{zK*_ +l!V&фA)F6nr:D#*ۜؽt~7cz؇+I(sࡩ,d%݅ēbZ2fӭb* QcH![_d N+Aֈ:8kCl6A&./xxtDP\LTa"ձն2]JK_p[ه1a R@&XS EXN?+~F>ꚤ<;w۬W%KSQyF񸼣GO "+ϛ!8ËХM޼D-tW6y%S[a{y1 Q#Yo^(`3<]x}ZGlLqrE[]&A.'~_,jt׆kAft]=KVK}*x}v͘N;kM,ƑŰ,[|ЅL|_ͤP3i RWG[ *!,73V1~PʼnQ@ y=%Y  ܯ=%k) ;'TrD2xE"=O1.hrdxCy_.=F: kMpY uIx%b7m)z&6|P%MgÆu}ڡ s!LVTʷk}.1^NJ bҒJ){Ho)82xϹն߶%Qދ54Ȝ_xݾnN :P$VѫjekS6zj*t;b_2{<ӮDR[ɞ˓E)!g/ I6MO}נgP;"5m޹ (/ V9ww}j=BR\7`]>Iy K*92A=6TrGc-7?2d#pD+! z*lAT$MH~yyV06wҨ<`=9Yyӏ/eat˟.Wd/";d-jT(]yRRt)Nj+(L12vL/+S}+:aryۓ㸎%4uh/q~4lb1F9Y9gC4/٩n2b"y/ɪj)8Iu]V,=^a ܟTPtK!(8MG"G|_÷MVfbŮQ; EiXVjk4*ZOӈGaQKQEjcƗ~x8>ꂠf^m_Jƍ\/gTfsаUL?u pWK<%׿F2py DDiԫ"6uSD, }&"1>+9J3@OQ1zF0wq7Tgo=.v3~;sva3-*̶)4;ƽ) ^7w+=[d$sV,É;4$smKvӑyn_UCyUh36#;^yV=Az,b(ffv[*/; JR:GB_#"[tиr>MmIo;kC3aj*&;j)0BFNH搽9⡳&Z[C*H3DNUdIlf);&@(K?| /mHC;`Uvmm)`0 ڱgyJw?ڡHXwSG -y0"7Rs|_$fiXL{$*vEj'+|6~XínZ^ H:j^=Yx+3px*nށ:6 ]*IK=|uFL_5DM(,⦬JD"}A7)+2~vFmm&xXϱRM oQapi PQD+itu6X2V8|k:X5Qg P$4_*.F6>N?E@OjCaG ts<\HL}Pg$xݚxdh31 ϣ$];nݳzFrX!-ľػǘ?ɚc(.=oM`rvcGXZpX\ M ہn*/_8RƿdĊ'վktd_:i;˷]Q"1cJ'oA{2fԛV:| Y2ݗٹIƍN{Z'K=w̸U*"6F'_sm6OK`)``Sp&^%h tǦ cwTn˖OJLiK޴uNX n5)RB@Ͳ1{qt$:5Rcּg܆m;^#NE")%%Xs}(2e%XDX&+Tje8<:;YSm+a]Bc_Ewl;Q$n ’0'@K6R_&p79Z zLa S#UU+m5 5|;gDyBy&Ak#ݫTgǯ]|P hdb)(oJi2}wD#T#K,{D'Y\XGEKjsy] \NT^M/w ƥ^}TJ ZIN]м_9 f_䘼^447,W*pDErM\ɄEs`wtvR^%}i#l#lAƀ+gɢ[|O3oԳVRơM@7΍tZ'|]=Y>Gt3:S~ 9`2ب 5f^՚0' s5@:=UZw++<1 z!Zнͺ(nk=N9HIg; ;}giLtyT,D!f"@w+NRG̐U/fPQf"ԈCS< %䈿tbT]PsOҹxPW_\Ybuy4skx☪Rj]i̊, ڜht]j^3??cpUwI }+Y"-Glj r\m _i .㥈Iiau;/k<7)E4&4۾U_|z  ڲ7WnsTr˙@w5+WƮ7c~@LV/H^ M}|lj_L"G[\%P.$F.sjmA@lCCľt4^h.u'4W 3׌:I9` ꗅn\a3n (.`6(;2Po.M\ˁ$ z5Q& b!\&4YJy)ŮW:V%1 8@b qxg8#U;t F nx&cKMA~bHq]MP9BWs!cr>+T%%ɵwSwx嚖]uSϱ#4?G Wb6A̩UP?J%vw VW+ %:}+Yi+;0D-|MѾOw`ɯ#!i+\[` Tjgr[[n$:ȪC mW II6gWcRw&y5]l['QZ\̂E3 u|lఠW7E1O^=K;Չ? ?aoHD=uEo;oZ:Z$g <:ܫj99P@y܀HɄ׻߱v{c$:Pa>Ewe0\2[hϊ!MG-$A4 Gh B'& NT}3T݁;"̥|MY=\x\6(rz]J 1܉*/Bg\$<]+UͤenI΢|̃4k[ҙ0hP*ӷ*VEu1"Aj4JhBd5dx\ЃWlEo݌4k/0NWO^͍!2zuF=n{`+ЧB&F]A1̪]xﾃc(%{Nx{g(-55&"̄᮰d}]_? e/Iu!(ĆIiw{zMeP)G>C:]|XŒpBAߣbbaW`t1#j[\qj8퓣R X*K,} t/ Er7=+SCx c8*Y¿lRQ- Kшhl]|v(ScA-`c@n 'j^ N֦"PxmP$WqjZ|Fn0è!K3-Y]J,Cܷz҈OSnu8.z*]p,9j7UEϯ^^4^ w0e3yZ>\d|r㽋ԑ:ڲ 4d}Din_yfbr6vGY-4!Ab\4"kD/}'+G')x=o]0@/tvG6@:0T׭Uz3qfzL0ÃMiRL;F*D.t{tmP-k`zOXS`N NKL k0Ua՜CSY\ECdZ>E^@*E r^=9̃ZP}yb |Re^gCT$|P։κ 3ڶF=tm<&Y1GgK:ʟ!ߤ74DF?g[y_9{c'=fDbngBΧS!LA#>aÍ)Vf-D Q<m5_q/5#a'`@ҩ-Nǔڅ$ GHаx |Aſ|කیnX!*D0]$S4˝kTJ몟WF8s$Qr4m)L'nH T)l4e__+R\ZHC>_]ēP(땒{"~K p˺LVnс:]m|y5X(V}knȫ&O՛)JտVVdd.%AWFbSHYTkbX@{]xbrVCg7w8í.2KxKtnh M!`?& 4FW2s*?P=5@1T[ ߂*ʆ#gg&rKygFQ"KiT){zɺY$Exٺu&U&f5WnONѤ,'ƻY$b&.ha&//wBK8k-@I&,U`͵/fd(? 69}~Z]TDXI="+@cRl֕ bۻY;z\E8;HSg+>Y2^?gC=V;,( 2+$\21œ MBak?{o`dL{r$3Om0J'{2z|(W_XX`c]-?2qBn> F*<\lRī,ԢP!Jx7wcҚ?t,à.5x4O2:95/@yKT9e01E&:P}HKen? kųʬ-' hϻcYJ~I]RaCx]cI y<]x_|ɢmON"ԿA>=Bg9Z%Gsa-;Uv9lep)Ա+.8}KvGm;Q>a{F jK78 \qЦ7\߆ KVջ3L}Ć֞;N;i֎o3?(gՔdN|>Wjj+c; W],dŶH'{k:fPɍSkM*g.w3 z.uB Smz7G^4dun!Mj׌Rй G; ԋ}*'9 ;L;Vq;QCr}Q8h]~,=II*84݃ !,mlRf0n\\BBcN\!웦+#Ʌ(<{RȮ5CD%zET.g?bgOr!iK/8z}RV.m0s-!*WO)Gp)"]ąo )pJΧL\~E,|das4}ɖx2 L~aPlsv(1 "ӧO8 ~N˒Pfw;IIQrcw2oWs RMCV~ CʓPDc%z4J%Uq['Zv{7G_MkjP1Ϫ{V0bu9@`exd*K  C3.dtz,d[L$3~~@qjPNeGWO{&8  =c avbD0aP4Oc);S2eTHe>1\FKdޮ: 3=$D<&]d lr2kfh1,Ai+e辡G}# di_jPA4Z'v׎geg"eq;)O.1gy+N)\r:Sh&Aki!p's'9 >`j;SO>=(oU=EM*"Ohx N۸qνzJyH.ʫnc0׿ٷ+ϥ(uln3@]'J_aއg̪7Z6m3U1Rqyɴ 󝕪$4UqC֨Cy؄OŻG&㛯2@aXcեGAEjsrd14'ҹ1FDcENJ?n&,g- _Aic7A9`ڋcU|s^;!uWwV9/v(08#|UƊ= ܨ4( 9z4qJyM7R k8GaTɳP?^٨rNFG2е3lޝKsݗm #ڒ`Sfe`XU`x|Xs.btJпB+^ĶO&{b]CgCv-Hز s5Ƶu(t\QSt0,BQEvu9tM=F0}j.A>R5o҆mν9Lg 岏Y_FR*@6HFDLP&(]Ӻ&AfJ1xU53ߺf/*\th9<$k 9M%v;˷"x.ݳk/FT^p43"@:NY^e9& چ=.i۳[dCAf,a*FY3M(̍ i.q M=q, D(6Q*SOLMW=ܖͩPBӼ_S>MvSPg<fqa^e5VZ&覞őLf $mqi92&LQ~˦1I v1k m9A!<=BoDaY[I'^@±/wιrS?)Κȳs*S|Ooz:Mجy$${amჼi$S˒ᢍ s0*RdkXMݡ*ͨhAg>m_SubܢR=,Fq3Y•9>Q稟ǚfAVåF7짷[ҹ:K9cNځ=*/sX`W4Ȭ3,}!hk1- V2 x|r7֕' þP}h>`UΚ(A T?Pp^ X}5W/:*q3?aDXp~q|PpkIeUteg :f(M)o{i9yE(fΗ2l'ax77]Tļ铖I>mapћd !WR;-&͓a(Kw͋H^9JC@ث6aCZFUa&r!⹂.賂p,X뽲ݚct# Qm$˜{ ho+j~܍axl׸,uۥ`=jekM\$ {13@&qeGT]TrZfA,˵j(J""EuUJ[Ɵ8x[3\Vb - (ntkԯI*,1 /5}V@?oϿpӥ'Va!p./ voА3}.z zIhĵyFB4W|υ1 Z J۝ݚ%ݖZ.X +|`ƚkM ޿JYdԟ^7'lE)2ƝuF8+"[%Fڷme_1||Äx I&*HRw _:N fs]2e}apB _~{Q@.qffCM?Ɯ+p"M0(\(Tq)[pN*y]^s!DцZg -w~]ɾ鿝WůFpP:ӃI2{zD'4:УE@aT \8rצ;ٲ9{xLv{T{w69F^;A}rc趌|,mc1Byo&!~{bt<Ԑl8X\P/\7h<8Ȍj}mSQ|LQ򕈝t\k9T\]}qIɚ{ʼnr19L gYO 'ƕKqGᓉ HHj--24$-lHsoa;~Au[c:̰z0W 3v{~wp&dV-?6wV>jš"$k t[{C[B#%H mꊂ#oc"^pBٱLe3W&:F,-2[$(ӻ:sf=rXTYhm7?1< _7HTfcrx8E_lt4Л|COpK@sB_bղK!0 KϹ\.@f(Ͷcf|;hPxچK'lh{ !ХJ\KFm#Imz(6j:ȾFޣӎ-^{bwFE{|OWi4G xM! W~(z3͝'i]Qm"M;~ljWL)w.l+_<4O)D;p\U0([YN_2̷OkSWթ0a <'F^CSUϑJ^64YT@+'sռD-?t'9'C g4% |$DみL 2[3 mMsTɐX@ԙ\I6>3-'Ѝؐ-q`ޒ++qj>ۛL̸J k !\qw^I>XmL$>nGLfD;)#h2@dE؎ G&/y[ }冱LgW-9BKi& diнE gVj8o'{9!8 ({XlL4CA4H$i9PQ1╛1l y N3^خ;⅜tU=~t[z#OF:-=ǣ$Hy6O+Y]!թK`^Pܛlޢ|7_+7` aBsi mlĄ^T&P,f62 ը`uE /aT`9D8=+' GXФuh,5tz!lhVT坢J LRdԭ>\,sHQl /%5"c$Asu,PsZŦc8+k;L|ÙDqr"~7`تㇺP'Dr^GW2}6GQNpb #vK 2cy%J6"nbW{ii!'w7)5&і(Jf55Bt6|(|苂J#~#z!6&d,WJ͌4̯S2,;nˉJKlҙ ?s7 Jff6W@${q` MkR;8׎iNq qSVG \ݤXYC*!~&.`1y jdžq'g>hXAGy꘧O)KsNb3H8r8TthlިTpe&G]n҉72!-:GD-7}(y`酸 ~*YL/'C&U~{-X7o` ]+ʺ/0#c}mX\w?t{}@wYo.&=ȥ?$䥯}5ufb a^ZumqĄA*] [C>L(4T(Ռ|EWwi ]o[~l[(Z}BfM*h]ʉ{'@0+)+6 _CeՁӒ] pVBdMO@}!oÐlE33H>$CeE܆t*Q7f&ٯ0_' 3kbk=mAAlmQ 5aQ= ;VA.ʨz%QK̕=9KϢ*5 pNhPpqk+sIMnO 4C)[w7_O(۴n+{* 2IPPLą)'9A%:hI8ӟ:C@4guAXD 8Ai%+I{^yLC,I͜6 FNeT /&FmҺQض:z"ى?h9A9&[ 99gۧn G+[YISx['ֳҧ2Nۯ aBMSīJ=XFlU%K:H;p].u!v(WtH ?ږ>Ko"F)'%k^l`u۟wyzStLMۃcŹgYcg3ӝl@\eJcLg3 |Kȶi_E4,i s/鴗Gx iZ5{RQU^g$BgBua@-s'ޔ#&:eiXUl3DVHwFv FI )0+zLR?c] 5#Aw?ETRrR?+ kZ)sl7ݢ/P<2G}4Y\fįg뺶=kgʧ:)YTT5#dm=Q8A1F?Q>{R>S鬀빑n8r$Y{M!n5m1L\G+!2-TTO3YԦĖ2eCoKtqd>H@n7u=urVAˌ6,X!ۢb,-oӾ`V^4V(lB+PCpW{V^bAW%,w%"LeȏIי }>>xOﮗZB_`./XNХDcvc KCO H[AI%5XF[Ȉ{O=6[+'ǞA w0ǶӽsԺY fAZ$ +\Rj_+R'JYv!ԩ{fiAQ܍Ow`@^8Qm tjhiE^Rs*`- ߴGNh*#w[Y|;T۬6k~/ )Qe ݅1.Yoi)UUuɲ򡀃ʘ˼D){غmx 7&s4W#®UI7 nCo> H{phDu7JRrU4}<`UPYsW&ׄEiɗ!cبk0|_^ Ι[9yCS#:Q&D|l̶9} c6ga/W9B.Ȳ|j (Ea|b/oR,s5*W$J m\sF鷠-Qـ Y KLs>4-7ޥR~ sd=!y }3q Ln:ku6hGVhBDR{0k+M o̶$5e>]D0mЙ+-`YoQゞhQ2,ap :|xO8:A)3bpgVG4/2`:@w@E+.XPx6IS8}ZI`NY>_euJ&STY#-R\iҸp "F" h<_VY4x/˱>h+ԅA=LЕ8E+ۧC! [;C89%KQ86$5}vʘfQlkX{P#xAradfL xKM{ew+GdUy>+&[uDQv' [D T,q~ h^R р :ȵK|vme~8l(nx1]? AFvClp74%*`?,Y\}(6xX\p:g U> Ih!uDhN ^{͊P.`Uqߴ=VԲ3l2-[ (q [EulZwD;k@ݧ 3uyUp3VpNZ~4Őp/[D O^B`^Yޣ\(:o ;Մ6&Ltdz@C55c1;H7O ,P/n%ejT5!.M #zJ/kz(y3Tv$Ӱ\8Fz|3S>zi5rxْx`}mQ0wi' ECosH&NRlC(R]aU'XFI[#>>{R ?B-'*6}*7@غS*]c`\0 Y _pxK7D,l\6yY> r@s9G SY{RrnUCi2^+Yn?(7Bvt%zǹ=KHRc38ۇ{7+^QԅopHa]g`F6 DĭpJb>z Odф_7 45qh=jx 6C-RӫgB/wfJNM4HNty>+4bؿFr8|{bh֑نIJ鑠N'į @=]iekYhj;4?j.qCzشK t\- bzv pUo,yC5;E0qr~-l 6 >o眿# p_cB7dP/BCJά/jT>.E'`&cy6(9clRn71p 2k4Viwf7waH{ 8qUKv=~M[e[XC}ƭ_7`:S)O8$ Eg3 7sOAA}A zR´I "|ӂ U_ î~oh|fС_&E 9^ox9%iFb(vTNkg8)kεq^AF1"ۿ.6 D(mocA C+U( u bTڋ|%V+OWqVƢ]nD#LJϟF骆3X΍9TRnO W$Xk&w=Pe ^?Q0D $#ݎ"/qEЍ'u-`u&r-~g>]Y2a!_@~nloղ X+=x" o0ez¿9?QNXHfgg4_@k.YFO1ӌ3{9?XfR 7O#ޤ*'^q4U N_N¼!y: rwUV7p&r<}A,t9}_aC.HjrH?<7n?NqqֱbFiY~[3T!R+@^9:Y֙V|2R?3wh~QA5 iKwK/*=Ŀ5_ˢa*3sx}/pɋ鰛HTD*@7oou/9RGuiY)G#H/-Rb\Yf'bHfFM'xejpPhH modKS^R%~O21 O?[u|i"^=T)5I`h \"Y,o^fS܁;h' iB}4$?-M-? ,hߒ@?dD`S,5_#'+%9hb]x&LIErXgo3;gI^\8tJ7qJVi,!=-)=DC葎x_I"^V->g3 sHF{ )W0`[@']tϰJqغгHygz# $|DYJ?/yQY2fp6z "n!M[oAV6= ㈋պ])X#[Ɗ;g`>6B0Jۚ07D(xDln #,dv5î Zw]D}ˍ\e֟Rc,lM Ǟy贁Jz<%֍oFh09eIe^>'R|sp2TpAO8 QK|Y7vGLwLFӚBѦlfyyΟzNpJ(Esh-JO殈 ,}wdY6ZR!ba?hd!O^ՏpOw/$* dtLV(-FVj?p"4:ȇ'0$I 5$Wc1i]YtRL( P+,먦e BhIAB r_f!Rqʙ/HBbl,]5yuem#"Uv x#= ~QgkB. sD" W\XiMqh xz E% c#{'/Co7cj6D.(RB#F$[L/ +'_Ȟjg܁>,IJ}߭X6,P0bfvso?jKcl G[U 1J3<6%^ųql6:!~_|UDy4ZvYJS1US%3v1rG d||J:s;P{(6mw`; 42\p;!:f s1*U>H6QɎD|xA_⷗bf*k;{0fQR㟞j"0qN냬/*.Ȟ_nԫ2 x?4 P +Wmܷ5gqy0*+4|Zr92M([0>ZQE$9R> )GB&K&-jCyܠK)|ӗT@#BCoT쪜[)TzdQΜWEq=r/DކV8`V` \[vϑsaͰ&v{Awgp9gMyǙ2@/`C)> snwv2!eU7Jxx]v\j *鷰ûS\X+>̒,~ظC,~XzX&L1@*(oSҙ)r-pqAXttVr03]kX&aeO8\:xYn> lJX@~-՘zrְJtF#J<$T*OWa`MqLGK|ݰ1pu V0BGL5TY_ y/')xfy>zZBV|8}RouYeYȿʳɏwxVbeQ:BvMQkyYFFQFԦ=jRB|KcEae89}Fd75E7yٹrsqycGԂ[-єǕ㶉 6&d*~ YYbR3B!Gcٹ L LvGG@[8`_~ĘXq[?V' nؐr'bfX[X 4ڸk9dK~_YgA.P#Ih.?*gK&7|Ï&Rj1&acWR:4 K}*{'pU]D|AۗP/bO>>ܝ9^aL5B/ut4t D.q#8#1xKM] duAibx9Ӛ%Q+FeFR/^oE|#ঁùaPxxV}L _ vοh7$6fNhƾTVBwe6@09H%u"IdԁYx̰ \eH-*]FLwGn|+x<ކ-+SڿSMtRH>]h3\b<9' k 7ZtG3VuDUGJjQhfcf?g>6%iM?tWqc cR&H&ER|68י63 k$,b'qd V+x N>fa!!L?ݳI4v7:"H?**#$>64o bwO΋^p'AzUK{+ rk0KQHJO^)Mv 饏binD4ݱ;k^D=@w3$BB͎MZnK rn'u{N'zpx&tc\gd0dF*dZ_txڜ擊K~S8ɞ?yncK\a* mDcO"E)щ.cMsX/'#kՇ80ƛQ?XGUG1ZaV,cUb.kB,Hf=:Hj]Kno ,?IU=0Dkz 9krz1Lj: YZ