kernel-module-8814au-6.12-desktop-6.12.91-24> )lp faa0874411ecda10f24ebef31e0117ce8a57741ccceef1a99ebd376119e7efa60511f085b2e841a1aa09bd058fa12a724fd120b30]8ws,>B&?&yd$, / \     = @DINx|(8:9:::G#TH#XI#\X#`Y#p\#]#^#b#c$d$e$f$l$t$u$v$w%xx%|y%%%%%%%%%&4&8Ckernel-module-8814au-6.12-desktop6.12.9124Binary module 8814au for kernel-6.12-desktopBinary module 8814au for kernel-6.12-desktopjlocalhosts+ROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64s+jla639c2759f58e48ff928d479304fdd61b976d03875f34c416d44136f50fe06ddrootrootkernel-6.12-desktop-6.12.91-24.src.rpminstallonlypkg(kernel-module)kernel-module-8814au-6.12-desktopkernel-module-8814au-6.12-desktop(x86-64)kmod(8814au)    kernel-6.12-desktop(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.12.91-243.0.4-14.6.0-14.0-15.2-14.17.0jujtw@jtw@jtw@jcSjcSj`jPjPjPjPjO@jN;jL@jHjHjE@jE@j?@j>ij=@j7@j+jjjjjj9j @j @j @j @j @j @j Pj Pj Pj j\@i@i~i~i~iiD@iD@iZ@iZ@ip@i@i@i@i@i@iX@i8@i8@Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-21Mikhail Novosyolov 6.12.91-20Mikhail Novosyolov 6.12.91-19Mikhail Novosyolov 6.12.91-18Mikhail Novosyolov 6.12.91-16Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-14Mikhail Novosyolov 6.12.91-13Mikhail Novosyolov 6.12.91-11Mikhail Novosyolov 6.12.91-10Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-6Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov BiteDasher 6.12.91-3Mikhail Novosyolov Mikhail Novosyolov 6.12.91-1Mikhail Novosyolov Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-13Mikhail Novosyolov 6.12.74-12Mikhail Novosyolov 6.12.74-11repo bot repo bot Mikhail Novosyolov 6.12.74-9Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-6Mikhail Novosyolov 6.12.74-5Mikhail Novosyolov Mikhail Novosyolov 6.12.74-3Mikhail Novosyolov Mikhail Novosyolov 6.12.74-2Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov - Fix "Zapscape" (CVE-2026-64561)- Fix CVE-2026-64531- Fix CVE-2026-64560- Support Baikal-M Graviton Angara board- Avoid QXL hangs on an unresponsive SPICE host (okdesk#4023)- Fix "RefluXFS" (CVE-2026-64600)- Fix CVE-2026-53362 and CVE-2026-5336 ("Frag Gap")- Try to fix booting without monitor even at UEFI stage- Try to fix booting Baikal without monitor and then connecting it- Tune descriptions of 2 last patches- Try to stabilize EDID reading on Baikal ET124- Fix monitor reconnecting on Baikal- Try to make sound work out of the box on Baikal ET124 board- Fix Baikal HDA codec configure failure due to built-in controller probing before module load- Try so support Baikal SDK 5.5 and fixes for Baikal HDA sound- Fix "Bad Epoll" (CVE-2026-46242)- Easify debugging Baikal sound- Fix sound on new Baikals- Fix "PEdit-CoW" (CVE-2026-46331)- Fix x86 build after Baikal patches- Fix bootable kernel copy in kernel.spec for cycle- Update Baikal support - Developed in kernel-6.12-bl2- More ROSA infosec patches- Fix CIFSwitch vulnerability- Build kernel-headers in rosa13 where they were in dropped kernel-6.6- Fix building perf- Fix issues found by statical analysis (Svace)- upd: 6.12.90 -> 6.12.91 - Changelog: - ACPI: AGDI: fix missing newline in error message - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek - fixed speaker no sound update - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix UART1 RTS/CTS muxing - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8qm-mek: switch Type-C connector power-role to dual - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: lx2160a: add sda gpio references for i2c bus recovery - arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit - arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes - arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration word - arm64: dts: lx2160a: remove duplicate pinmux nodes - arm64: dts: lx2160a: rename pinmux nodes for readability - arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3 controller's phy-names - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure syscon - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8650: Fix GIC_ITS range length - arm64: dts: qcom: sm8650: Fix xo clock supply of SD host controller - arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace - arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace - arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan Pi - arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up config - arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0 data pins - arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on data pins - arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: Reserve an extra page for early kernel mapping - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64/xor: fix conflicting attributes for xor_block_template - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ASoC: add symmetric_ prefix for dai->rate/channels/sample_bits - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED - ASoC: codecs: ab8500: Fix casting of private data - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: soc-compress: use function to clear symmetric params - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc3: Use standard dev_dbg API - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH commands - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: wait for blkcg cleanup before initializing new disk - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec - bpf: Allow instructions with arena source and non-arena dest registers - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf,arc_jit: Fix missing newline in pr_err messages - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: fix mm lifecycle in open-coded task_vma iterator - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix variable length stack write over spilled pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Relax scalar id equivalence for state pruning - bpf: return VMA snapshot from task_vma iterator - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Take state lock for af_unix iter - bpf: switch task_vma iterator from mmap_lock to per-VMA locks - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Validate node_id in arena_alloc_pages() - btrfs: do not mark inode incompressible after inline attempt fails - btrfs: fix deadlock between reflink and transaction commit when using flushoncommit - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: pass struct btrfs_inode to clone_copy_inline_extent() - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - bus: fsl-mc: use generic driver_override infrastructure - bus: rifsc: fix RIF configuration check for peripherals - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size - cgroup: Increment nr_dying_subsys_* from rmdir context - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON - clk: qoriq: avoid format string warning - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: ccp - copy IV using skcipher ivsize - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: qat - disable 420xx AE cluster when lead engine is fused off - crypto: qat - disable 4xxx AE cluster when lead engine is fused off - crypto: qat - fix type mismatch in RAS sysfs show functions - crypto: qat - introduce fuse array - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: tegra - Disable softirqs before finalizing request - crypto: tegra - finalize crypto req on error - crypto: tegra - Reserve keyslots to allocate dynamically - crypto: tegra - Transfer HASH init function to crypto engine - cxl/pci: Check memdev driver binding status in cxl_reset_done() - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - devres: fix missing node debug info in devm_krealloc() - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm init: ensure device probing has finished in dm-mod.waitfor= - dm log: fix out-of-bounds write due to region_count overflow - Documentation: fix a hugetlbfs reservation statement - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - drbd: Balance RCU calls in drbd_adm_dump_devices() - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amdgpu: add amdgpu_device reference in ip block - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: fix spelling typos - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx11: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring - drm/amdgpu: update the handle ptr in dump_ip_state - drm/amdgpu: update the handle ptr in early_init - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915: Relocate the SKL wm sanitation code - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wm: Verify the correct plane DDB entry - drm/imagination: Switch reset_reason fields from enum to u32 - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/loongson: Use managed KMS polling - drm/msm/a6xx: Fix dumping A650+ debugbus blocks - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: fix bits_per_pclk - drm/msm/dsi: fix hdisplay calculation for CMD mode panel - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm/shrinker: Fix can_block() logic - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/v3d: Handle error from drm_sched_entity_init() - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/xe/debugfs: Correct printing of register whitelist ranges - drm/xe/dma-buf: handle empty bo and UAF races - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - e1000e: Unroll PTP in probe error handling - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - erofs: add encoded extent on-disk definition - erofs: avoid infinite loops due to corrupted subpage compact indexes - erofs: do sanity check on m->type in z_erofs_load_compact_lcluster() - erofs: unify lcn as u64 for 32-bit platforms - eth: fbnic: Use wake instead of start - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - ext4: fix possible null-ptr-deref in mbt_kunit_exit() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: offb: fix PCI device reference leak on probe failure - fdget(), trivial conversions - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP - firmware: dmi: Correct an indexing error in dmi.h - fs/adfs: validate nzones in adfs_validate_bblk() - fs/mbcache: cancel shrink work before destroying the cache - fsnotify: fix inode reference leak in fsnotify_recalc_mask() - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: prevent NULL pointer dereference during unmount - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: usbhid: fix deadlock in hid_post_reset() - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hte: tegra194: remove Kconfig dependency on Tegra194 SoC - hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback - hwmon: Switch back to struct platform_driver::remove() - i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers() - i3c: master: dw-i3c: Fix missing reset assertion in remove() callback - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - ice: fix double-free of tx_buf skb - ice: fix ICE_AQ_LINK_SPEED_M for 200G - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix timestamp interrupt configuration for E825C - ice: Remove jumbo_remove step from TX path - ice: update PCS latency settings for E825 10G/25Gb modes - ima: check return value of crypto_shash_final() in boot aggregate - ima_fs: Correctly create securityfs files for unsupported hash algos - ima_fs: don't bother with removal of files in directory we'll be removing - ima_fs: get rid of lookup-by-dentry stuff - iommu/amd: Convert dev_data lock from spinlock to mutex - iommu/amd: Do not detach devices in domain free path - iommu/amd: Fix clone_alias() to use the original device's devid - iommu/amd: Introduce helper function get_dte256() - iommu/amd: Introduce helper function to update 256-bit DTE - iommu/amd: Put list_add/del(dev_data) back under the domain->lock - iommu/amd: Rearrange attach device code - iommu/amd: Reduce domain lock scope in attach device path - iommu/amd: Remove protection_domain.dev_cnt variable - iommu/amd: Reorder attach device code - iommu/amd: xarray to track protection_domain->iommu list - iommufd: Fix return value of iommufd_fault_fops_write() - iommufd: vfio compatibility extension check for noiommu mode - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - io_uring/kbuf: use mem_is_zero() - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipv4: udp: fix typos in comments - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: udp: fix typos in comments - ipvs: fix MTU check for GSO packets in tunnel mode - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining - kbuild: builddeb - avoid recompiles for non-cross-compiles - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: scope conn->binding slowpath to bound sessions only - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: x86: Fix Xen hypercall tracepoint argument assignment - leds: lgm-sso: Remove duplicate assignments for priv->mmap - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: handle rbtree insertion error in decode_choose_args() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - locking: Fix rwlock support in - LoongArch: KVM: Compile switch.S directly into the kernel - loop: fix partition scan race between udev and loop_reread_partitions() - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - mailbox: add sanity check for channel array - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: mtk-cmdq: Fix CURR and END addr for task insert case - md/raid1: fix the comparing region of interval tree - md: wake raid456 reshape waiters before suspend - media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe - media: i2c: og01a1b: Replace client->dev usage - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fix rx timestamp corruption on fastopen - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - neigh: let neigh_xmit take skb ownership - net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue() - net: airoha: Implement BQL support - net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - netconsole: allow selection of egress interface via MAC address - netconsole: propagate device name truncation in dev_name_store() - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: realtek: rtl8365mb: fix mode mask calculation - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: conntrack: remove sprintf usage - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_osf: restrict it to ipv4 - netfilter: skip recording stale or retransmitted INIT - netfilter: xtables: restrict several matches to inet family - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: mctp i2c: check length before marking flow active - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5: Fix HCA caps leak on notifier init failure - net: page_pool: create hooks for custom memory providers - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: fix a return path in get_phy_c45_ids() - net: phy: qcom: at803x: Use the correct bit to disable extended next page - netpoll: Extract carrier wait function - netpoll: extract IPv4 address retrieval into helper function - netpoll: Extract IPv6 address retrieval function - netpoll: fix IPv6 local-address corruption - netpoll: pass buffer size to egress_dev() to avoid MAC truncation - net/rds: Optimize rds_ib_laddr_check - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir - net/sched: cls_flower: revert unintended changes - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net/socket.c: switch to CLASS(fd) - net: tls: fix strparser anchor skb leak on offload RX setup failure - net, treewide: define and use MAC_ADDR_STR_LEN - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - ntfs: ->d_compare() must not block - nvme-pci: fix missed admin queue sq doorbell write - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - openvswitch: cap upcall PID array size and pre-size vport replies - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove cpu online check from cpu add and removal - page_pool: fix incorrect mp_ops error handling - page_pool: fix memory-provider leak in page_pool_create_percpu() error path - page_pool: Set `dma_sync` to false for devmem memory provider - params: Replace __modinit with __init_or_module - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix() - PCI: dwc: Invoke post_init in dw_pcie_resume_noirq() - PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq() - PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Align pci_epc_set_msix(), pci_epc_ops::set_msix() nr_irqs encoding - PCI: Initialize temporary device in new_id_store() - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports - PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Free up Endpoint resources during remove() - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: use generic driver_override infrastructure - PCMCIA: Fix garbled log messages for KERN_CONT - perf branch: Avoid incrementing NULL - perf cgroup: Update metric leader in evlist__expand_cgroup - perf evsel: Add alternate_hw_config and use in evsel__match - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf lock: Fix option value type in parse_max_stack - perf maps: Fix copy_from that can break sorted by name order - perf python: Add parse_events function - perf stat: Fix opt->value type for parse_cache_level - perf tool_pmu: Factor tool events into their own PMU - perf tool_pmu: Fix aggregation on duration_time - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf tools: Fix module symbol resolution for non-zero .text sh_addr - perf util: Kill die() prototype, dead for a long time - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: realtek: Fix function signature for config argument - pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/wmi: use generic driver_override infrastructure - platform/x86: asus-wmi: adjust screenpad power/brightness handling - platform/x86: asus-wmi: fix screenpad brightness range - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - PM: domains: De-constify fields in struct dev_pm_domain_attach_data - pmdomain: ti: omap_prm: Fix a reference leak on device node - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug - powerpc/warp: Fix error handling in pika_dtm_thread - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - pstore/ram: fix resource leak when ioremap() fails - pwm: atmel-tcb: Cache clock rates and mark chip as atomic - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - RDMA/core: Prefer NLA_NUL_STRING - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() - remoteproc: xlnx: Fix sram property parsing - reset: Add devres helpers to request pre-deasserted reset controls - reset: replace boolean parameters with flags parameter - Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" - rtc: abx80x: Disable alarm feature if no interrupt attached - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: use generic driver_override infrastructure - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched/fair: Clear rel_deadline when initializing forked entities - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: target: core: Fix integer overflow in UNMAP bounds check - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: fix __jited_unpriv tag name - selftests/mm: skip migration tests if NUMA is unavailable - selftests: netfilter: nft_tproxy.sh: adjust to socat changes - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selftests/sched_ext: Add missing error check for exit__load() - sfc: fix error code in efx_devlink_info_running_versions() - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: fix OOB reads parsing symlink error response - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: Use FullSessionKey for AES-256 encryption key derivation - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc/tegra: cbb: Set ERD on resume for err interrupt - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: debugfs: initialize firmware_file to empty string - sparc64: vdso: Link with -z noexecstack - sparc/vdso: Always reject undefined references during linking - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: nxp-fspi: Use reinit_completion() for repeated operations - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: spi-nxp-fspi: enable runtime pm for fspi - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init(). - tcp: make probe0 timer handle expired user timeout - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - tipc: fix double-free in tipc_buf_append() - tracing: branch: Fix inverted check on stat tracer registration - tracing: Rebuild full_name on each hist_field_name() call - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: ip22zilog: Fix section mispatch warning - udp: Force compute_score to always inline - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtio_net: Fix endian with virtio_net_ctrl_rss - virtio_net: Split struct virtio_net_rss_config - virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET - virtio_net: Use new RSS config structs - vrf: Fix a potential NPD when removing a port from a VRF - wifi: ath10k: fix station lookup failure during disconnect - wifi: brcmfmac: Fix error pointer dereference - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix 6GHz regulatory update on connection - wifi: mt76: mt7921: Place upper limit on station AID - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - x86/um: fix vDSO installation - x86/um/vdso: Drop VDSO64-y from Makefile - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- FIX GPO Frag vulnerability- Fixed building with bpftool on aarch64 (regenerated config with pahole package installed)- Fix issue in AUFS found by fuzzing- Remove no more used patches- Fix issues found by fuzzing- upd: 6.12.74 -> 6.12.90 - Removed no more needed Patch0512. - These patches fixed a vulnerability where in-place decryption could - corrupt shared skb frags (e.g. from splice) and a subsequent skb - memory leak in the unshare path. - Between v6.12.74 and v6.12.90, upstream refactored the rxrpc receive - path and incorporated equivalent fixes: - * bf20f46d94f1 ("rxrpc: Fix potential UAF after skb_unshare() failure") - * 016725807ce3 ("rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets") - * 3711382a7734 ("rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present") - The unshare gate was moved from io_thread.c to call_event.c, and - the check was extended to skb_has_frag_list() || skb_has_shared_frag(), - which covers the original splice-loopback vector. The skb leak fixed - by 0512.2 is also gone because the caller (rxrpc_io_thread()) now - always frees the original skb after rxrpc_input_packet() returns. - Changelog: - 9p/xen: protect xen_9pfs_front_free against concurrent calls - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: APEI: GHES: Disable KASAN instrumentation when compile testing with clang < 18 - ACPI: battery: fix incorrect charging status when current is zero - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) - af_key: validate families in pfkey_send_migrate() - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - alarmtimer: Fix argument order in alarm_timer_forward() - alpha: fix user-space corruption during memory compaction - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aloop: Fix peer runtime UAF during format-change stop - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for ASUS UM6702RC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx - ALSA: hda/realtek: fix LG Gram Style 14 speakers - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter - ALSA: hda/senary: Ensure EAPD is enabled during init - ALSA: misc: Use guard() for spin locks - ALSA: mixer: oss: Add card disconnect checkpoints - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger - ALSA: pcm: Relax __free() variable declarations - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: pcm: use new array-copying-wrapper - ALSA: scarlett2: Fix DSP filter control array handling - ALSA: scarlett2: Fix redeclaration of loop variable - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - ALSA: vmaster: Relax __free() variable declarations - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ARM processor Error: don't go past allocated memory - APEI/GHES: ensure that won't go past CPER allocated record - AppArmor: Allow apparmor to handle unaligned dfa tables - apparmor: avoid per-cpu hold underflow in aa_get_buffer - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: Fix & Optimize table creation from possibly unaligned memory - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: make label_match return a consistent value - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use target task's context in apparmor_getprocattr() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: c3: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: amlogic: s4: assign mmc b clock to 24MHz - arm64: dts: amlogic: s4: fix mmc clock assignment - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD - arm64: dts: imx93-tqma9352: improve eMMC pad configuration - arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - arm64: dts: marvell: uDPU: add ethernet aliases - arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node - arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: hamoa/x1: fix idle exit latency - arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147 - arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs - arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks - arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models) - arm64: dts: renesas: r9a09g057: Add RTC node - arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes - arm64: dts: renesas: white-hawk-cpu-common: Add pin control for DSI-eDP IRQ - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: rockchip: Fix rk3588 PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4 - arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order - arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: hugetlbpage: avoid unused-but-set-parameter warning (gcc-16) - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: poe: fix stale POR_EL0 values for ptrace - arm64/scs: Fix handling of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - ARM: 9467/1: mm: Don't use %pK through printk - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: boards: fix unmet dependency on PINCTRL - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata: cancel pending work after clearing deferred_qc - ata: libata-core: Add BRIDGE_OK quirk for QEMU drives - ata: libata-core: disable LPM on ADATA SU680 SSD - ata: libata-core: Disable LPM on ST1000DM010-2EP102 - ata: libata-core: fix cancellation of a port deferred qc work - ata: libata-eh: correctly handle deferred qc timeouts - ata: libata-eh: Fix detection of deferred qc timeouts - ata: libata: Introduce ata_port_eh_scheduled() - ata: libata: Remove ATA_DFLAG_ZAC device flag - ata: libata-scsi: avoid Non-NCQ command starvation - ata: libata-scsi: Document all VPD page inquiry actors - ata: libata-scsi: Refactor ata_scsiop_maint_in() - ata: libata-scsi: Refactor ata_scsiop_read_cap() - ata: libata-scsi: Refactor ata_scsi_simulate() - ata: libata-scsi: refactor ata_scsi_translate() - ata: libata-scsi: Remove struct ata_scsi_args - ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() - ata: libata-scsi: Return residual for emulated SCSI commands - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: fix integer overflow on buff_pos - batman-adv: hold claim backbone gateways by reference - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - bcache: fix cached_dev.sb_bio use-after-free and crash - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blk-throttle: fix access race during throttle policy activation - blktrace: fix __this_cpu_read/write in preemptible context - block: add a bio_add_virt_nofail helper - block: add pgmap check to biovec_phys_mergeable - block: cleanup blkdev_report_zones() - block: decouple secure erase size limit from discard size limit - block: fix zone write plug removal - block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() - block: relax pgmap check in bio_add_page for compatible zone device pages - block: reorganize struct blk_zone_wplug - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Allow ntuple filters for drops - bnxt_en: Fix deleting of Ntuple filters - bnxt_en: Fix RSS context delete logic - bnxt_en: Fix RSS table size check when changing ethtool channels - bnxt_en: Restore default stat ctxs for ULP when resource is available - bonding: add ESP offload features when slaves support - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: Correctly support GSO ESP offload - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add third round of bounds deduction - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf: crypto: Use the correct destructor kfunc type - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: Fix constant blinding for PROBE_MEM32 stores - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix u32/s32 bounds when ranges cross min/max boundary - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR - bpf: Fix use-after-free in arena_vm_close on fork - bpf: Improve bounds when s64 crosses sign boundary - bpf: Preserve id of register in sync_linked_regs() - bpf: Recognize special arithmetic shift in the verifier - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Release module BTF IDR before module unload - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpftool: Fix truncated netlink dumps - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: cfm: Fix race condition in peer_mep deletion - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: drop unused parameter fs_info from do_reclaim_sweep() - btrfs: fallback to buffered IO if the data profile has duplication - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix periodic reclaim condition - btrfs: fix reclaimed bytes accounting after automatic block group reclaim - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: hold space_info->lock when clearing periodic reclaim ready - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: make wait_on_extent_buffer_writeback() static inline - btrfs: print correct subvol num if active swapfile prevents deletion - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: remove pointless out labels from extent-tree.c - btrfs: remove unused define WAIT_PAGE_LOCK for extent io - btrfs: remove unused flag EXTENT_BUFFER_CORRUPT - btrfs: remove unused flag EXTENT_BUFFER_READAHEAD - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: reserve enough transaction items for qgroup ioctls - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: split waiting from read_extent_buffer_pages(), drop parameter wait - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use the correct type to initialize block reserve for delayed refs - btrfs: zoned: fix alloc_offset calculation for partly conventional block groups - btrfs: zoned: fix stripe width calculation - btrfs: zoned: fixup last alloc pointer after extent removal for DUP - btrfs: zoned: fixup last alloc pointer after extent removal for RAID0/10 - btrfs: zoned: fixup last alloc pointer after extent removal for RAID1 - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: starfive: fix device node leak in starlink_cache_init() - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - ceph: add a bunch of missing ceph_path_info initializers - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() - cgroup: fix race between task migration and iteration - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - check-uapi: link into shared objects - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - cleanup: Provide retain_and_null_ptr() - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs - clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: af_alg - limit RX SG extraction by receive buffer budget - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel-sha204a - Fix error codes in OTP reads - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix OTP sysfs read and error handling - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-sha204a - Fix uninitialized data access on OTP read error - crypto: atmel-tdes - fix DMA sync direction - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix netdev memory leak in dpaa2_caam_probe - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - narrow scope of snp_range_list - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - Fix packed layout in struct nx842_crypto_header - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: scatterwalk - Backport memcpy_sglist() - crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: tegra - Add missing CRYPTO_ALG_ASYNC - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - cxl/port: Fix use after free of parent_port in cxl_detach_ep() - dcache: Limit the minimal number of bucket to two - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - dlm: validate length in dlm_search_rsb_tree - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-dma3: use module_platform_driver - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add __dma_from_device_group_begin()/end() - dma-mapping: add missing `inline` for `dma_free_attrs` - dma-mapping: drop unneeded includes from dma-mapping.h - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm: fix unlocked test for dm_suspended_md - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm: use READ_ONCE in dm_blk_report_zones - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: always set BLK_FEAT_STABLE_WRITES - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/amdgpu: decouple ASPM with pcie dpm - drm/amd/amdgpu: disable ASPM in some situations - drm/amd: Disable ASPM on SI - drm/amd: Disable MES LR compute W/A - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src - drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 - drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% - drm/amd/display: avoid dig reg access timeout on usb4 link training fail - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: bypass post csc for additional color spaces in dal - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/amd/display: Correct logic check error for fastboot - drm/amd/display: Disable fastboot on DCE 6 too - drm/amd/display: Disable FEC when powering down encoders - drm/amd/display: Disable scaling on DCE6 for now - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fallback to boot snapshot for dispclk - drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix dsc eDP issue - drm/amd/display: Fix GFX12 family constant checks - drm/amd/display: Fix out-of-bounds stream encoder index v3 - drm/amd/display: Fix system resume lag issue - drm/amd/display: Fix writeback on DCN 3.2+ - drm/amd/display: Increase DCN35 SR enter/exit latency - drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 - drm/amd/display: only power down dig on phy endpoints - drm/amd/display: Reject cursor plane on DCE when scaled differently than primary - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop "amdgpu kernel modesetting enabled" message - drm/amd: fix dcn 2.01 check - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: fix gpu idle power consumption issue for gfx v12 - drm/amdgpu: Fix locking bugs in error paths - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix NULL pointer issue buffer funcs - drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify - drm/amdgpu: fix the idr allocation flags - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu: Handle GPU page faults correctly on non-4K page systems - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/mmhub4.1.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu/pm: drop SMU driver if version not matched messages - drm/amdgpu: prevent immediate PASID reuse case - drm/amdgpu: Replace kzalloc + copy_from_user with memdup_user - drm/amdgpu: replace PASID IDR with XArray - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Skip loading SDMA_RS64 in VF - drm/amdgpu: Unlock a mutex before destroying it - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn5: Add SMU dpm interface type - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix signal_eviction_fence() bool return value - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: Handle GPU reset and drain retry fault race - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdkfd: Relax size checking during queue buffer get - drm/amdkfd: Unreserve bo if queue update failed - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 - drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: anx7625: Fix invalid EDID size - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/buddy: Prevent BUG_ON by validating rounded allocation - drm/buddy: release free_trees array on buddy mm teardown - drm/display/dp_mst: Add protection against 0 vcpi - drm/exynos: remove bridge when component_add fails - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos/vidi: Remove redundant error handling in vidi_get_modes() - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/i915/acpi: free _DSM package when no connectors - drm/i915/alpm: ALPM disable fixes - drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters - drm/i915/dsc: Add Selective Update register definitions - drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/i915/psr: Repeat Selective Update area alignment - drm/i915/psr: Write DSC parameters on Selective Update in ET mode - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/imagination: Fix deadlock in soft reset sequence - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/disp: set num_planes to 1 for interleaved YUV formats - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix WD timer handling on DPU 8.x - drm/msm/dpu: Set vsync source irrespective of mdp top support - drm/msm/dsi: fix hdisplay calculation when programming dsi registers - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm: Fix dma_free_attrs() buffer size - drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - drm/nouveau: fix nvkm_device leak on aperture removal failure - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/panel: sw43408: Remove manual invocation of unprepare at remove - drm/panthor: Evict groups before VM termination - drm/panthor: Fix immediate ticking on a disabled tick - drm/panthor: Fix the full_tick check - drm/panthor: Fix the group priority rotation logic - drm/panthor: Fix the logic that decides when to stop ticking - drm/panthor: Make sure we resume the tick when new jobs are submitted - drm/panthor: Recover from panthor_gpu_flush_caches() failures - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/sitronix/st7586: fix bad pixel data due to byte swap - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/tegra: dsi: fix device leak on probe - drm/tests: shmem: Swap names of export tests - drm/ttm/tests: Fix build failure on PREEMPT_RT - drm/v3d: Set DMA segment size to avoid debug warnings - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - drm/xe: Add xe_tile backpointer to xe_mmio - drm/xe: Adjust mmio code to pass VF substructure to SRIOV code - drm/xe: always keep track of remap prev/next - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/xe: Clarify size of MMIO region - drm/xe: Create dedicated xe_mmio structure - drm/xe: Do not preempt fence signaling CS instructions - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/mmio: Avoid double-adjust in 64-bit reads - drm/xe: Move forcewake to 'gt.pm' substructure - drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' - drm/xe/oa: Allow reading after disabling OA stream - drm/xe: Only toggle scheduling in TDR if GuC is running - drm/xe: Open-code GGTT MMIO access protection - drm/xe: Populate GT's mmio iomap from tile during init - drm/xe/ptl: Apply Wa_13011645652 - drm/xe/reg_sr: Fix leak on xa_store failure - drm/xe: Switch mmio_ext to use 'struct xe_mmio' - drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt - drm/xe/sync: Cleanup partially initialized sync on parse failure - drm/xe: Unregister drm device on probe error - drm/xe/xe2_hpg: Add set of workarounds - drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138 - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: net: Fix Tegra234 MGBE PTP clock - dt-bindings: phy: qcom-edp: Add missing clock for X Elite - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix inline data read failure for ztailpacking pclusters - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - erofs: get rid of raw bi_end_io() usage - erofs: handle end of filesystem properly for file-backed mounts - erofs: move {in,out}pages into struct z_erofs_decompress_req - erofs: set fileio bio failed in short read case - erofs: tidy up z_erofs_lz4_handle_overlap() - esp: fix skb leak with espintcp and async crypto - espintcp: Fix race condition in espintcp_close() - eth: fbnic: Account for page fragments when updating BDQ tail - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: Fix integer overflow in ep_loop_check_proc() - evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac() - exit: prevent preemption of oopsing TASK_DEAD task - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: add ext4_try_lock_group() to skip busy groups - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert free groups order lists to xarrays - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: factor out ext4_mb_might_prefetch() - ext4: factor out __ext4_mb_scan_group() - ext4: factor out ext4_mb_scan_group() - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix potential null deref in ext4_mb_init() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: implement linear-like traversal across order xarrays - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: propagate flags to convert_initialized_extent() - ext4: publish jinode after initialization - ext4: refactor choose group to scan group - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: use reserved metadata blocks when splitting extent on endio - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix uninitialized kobject put in f2fs_init_sysfs() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fgraph: Do not call handlers direct when not using ftrace_ops - fgraph: Fix thresh_return clear per-task notrace - fgraph: Replace fgraph_ret_regs with ftrace_regs - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - firmware: microchip: fail auto-update probe if no flash found - Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fs: add for 'init_fs' - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: Initialize new folios before use - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: validate rec->used in journal-replay file record check - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - fs/tests: exec: drop duplicate bprm_stack_limits test vectors - fs/tests: exec: Remove bad test vector - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs - ftrace: Make ftrace_regs abstract from direct use - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros - function_graph: Restore direct mode when callbacks drop to one - fuse: Check for large folio with SPLICE_F_MOVE - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject oversized dirents in page cache - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Require sys_futex_requeue() to have identical flags - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). - gfs2: fiemap page fault fix - gfs2: Fix slab-use-after-free in qd_put - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Retries missing in gfs2_{rename,exchange} - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpiolib: fix race condition for gdev->srcu - gpiolib: unify two loops initializing GPIO descriptors - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: tegra: fix irq_release_resources calling enable instead of disable - gpu/panel-edp: add AUO panel entry for B140HAN06.4 - greybus: gb-beagleplay: bound bootloader receive buffering - greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() - gro: change the BUG_ON() in gro_pull_from_frag0() - gtp: disable BH before calling udp_tunnel_xmit_skb() - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: apple: ensure the keyboard backlight is off if suspending - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: bpf: prevent buffer overflow in hid_hw_request - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: i2c-hid: Add FocalTech FT8112 - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients - HID: logitech-hidpp: Add support for Logitech K980 - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: logitech-hidpp: Enable MX Master 4 over bluetooth - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: add quirks for Lenovo Yoga Book 9i - HID: multitouch: Check to ensure report responses match the request - HID: multitouch: new class MT_CLS_EGALAX_P80H84 - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: roccat: fix use-after-free in roccat_report_event - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hrtimer: Fix trace oddity - hv_sock: fix ARM64 support - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (dell-smm) Add support for Dell OptiPlex 7080 - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (max6639) : Configure based on DT property - hwmon: (max6639) fix inverted polarity - hwmon: (max6639) Fix pulses-per-revolution implementation - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/core) Fix various coding style issues - hwmon: (pmbus) Introduce the concept of "write-only" attributes - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: pmbus: mpq8785: Add support for MPM82504 - hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during identification - hwmon: pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration - hwmon: pmbus: mpq8785: Prepare driver for multiple device support - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (powerz) Avoid cacheline sharing for DMA buffer - hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt - hwmon: (powerz) Fix use-after-free on USB disconnect - hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hwrng: core - Allow runtime disabling of the HW RNG - hwrng: core - use RCU and work_struct to fix race condition - hwspinlock: omap: Handle devm_pm_runtime_enable() errors - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: tegra: Don't mark devices with pins as IRQ safe - i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: fix netdev->max_mtu to respect actual hardware limit - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - iavf: fix VLAN filter lost on add/delete race - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mlx5: Fix port speed query for representors - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix devlink reload call trace - ice: fix double free in ice_sf_eth_activate() error path - ice: fix inverted ready check for VF representors - ice: Fix memory leak in ice_set_ringparam() - ice: Fix PTP NULL pointer dereference during VSI rebuild - ice: fix retry for AQ command 0x06EE - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() - ice: reintroduce retry mechanism for indirect AQ - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: prevent possible overflow in icmp_global_allow() - idpf: change IRQ naming to match netdev and ethtool queue numbering - idpf: check error for register_netdev() on init - idpf: detach and close netdevs while handling a reset - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling - idpf: Fix RSS LUT NULL pointer crash on early ethtool operations - idpf: Fix RSS LUT NULL ptr issue after soft reset - idpf: improve locking around idpf_vc_xn_push_free() - idpf: nullify pointers after they are freed - idpf: set the payload size before calling the async handler - igc: fix missing update of skb->tail in igc_xmit_frame() - igc: fix page fault in XDP TX timestamps handling - iio: accel: adxl380: Avoid reading more entries than present in FIFO - iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: aspeed: clear reference voltage bits before configuring vref - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() - iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() - iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: buffer: Fix wait_queue not being removed - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: frequency: admv1013: add dev variable - iio: frequency: admv1013: fix NULL pointer dereference on str - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: inv-mpu9150: fix irq ack preventing irq storms - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix interrupt flag - iio: pressure: mprls0025pa: fix pressure calculation - iio: pressure: mprls0025pa: fix scan_type struct - iio: pressure: mprls0025pa: fix SPI CS delay violation - iio: pressure: mprls0025pa: fix spi_transfer struct initialisation - iio: proximity: hx9023s: Protect against division by zero in set_samp_freq - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: test: drop dangling symbol in gain-time-scale helpers - iio: Use IRQF_NO_THREAD - ima: define and call ima_alloc_kexec_file_buf() - ima: do not copy measurement list to kdump kernel - ima: kexec: define functions to copy IMA log at soft boot - ima: kexec: silence RCU list traversal warning - ima: rename variable the seq_file "file" to "ima_kexec_file" - ima: verify if the segment size has changed - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: bcm5974 - recover from failed mode switch - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: synaptics_i2c - guard polling restart in resume - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - interconnect: mediatek: Aggregate bandwidth with saturating add - interconnect: mediatek: Don't hijack parent device - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommufd: Fix a race with concurrent allocation and unmap - iommu/vt-d: Avoid draining PRQ in sva mm release path - iommu/vt-d: Clear Present bit before tearing down PASID entry - iommu/vt-d: Drain PRQs when domain removed from RID - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - iommu/vt-d: Separate page request queue from SVM - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments - io_uring/kbuf: enable bundles for incrementally consumed buffers - io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF - io_uring/kbuf: introduce io_kbuf_drop_legacy() - io_uring/kbuf: introduce struct io_br_sel - io_uring/kbuf: open code __io_put_kbuf() - io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers - io_uring/kbuf: propagate BUF_MORE through early buffer commit path - io_uring/kbuf: remove legacy kbuf bulk allocation - io_uring/kbuf: remove legacy kbuf caching - io_uring/kbuf: remove legacy kbuf kmem cache - io_uring/kbuf: simplify __io_put_kbuf - io_uring/kbuf: support min length left for incremental buffers - io_uring/kbuf: switch to storing struct io_buffer_list locally - io_uring/kbuf: uninline __io_put_kbufs - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory - io_uring/kbuf: use struct io_br_sel for multiple buffers picking - io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields - io_uring/net: clarify io_recv_buf_select() return value - io_uring/net: correct type for min_not_zero() cast - io_uring/net: don't continue send bundle if poll was required for retry - io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() - io_uring/net: use struct io_br_sel->val as the recv finish value - io_uring/net: use struct io_br_sel->val as the send finish value - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring: remove async/poll related provided buffer recycles - io_uring/rw: check for NULL io_br_sel when putting a buffer - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io_uring/uring_cmd: fix too strict requirement on ioctl - io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ipc: don't audit capability check in ipc_permissions() - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump - ipv6: add NULL checks for idev in SRv6 paths - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: annotate data-races over sysctl.flowlabel_reflect - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: use RCU in ip6_xmit() - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: do not keep dest_dst if dev is going down - ipvs: fix NULL deref in ip_vs_add_service error path - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - jbd2: fix deadlock in jbd2_journal_cancel_revoke() - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 - kbuild: install-extmod-build: Package resolve_btfids if necessary - kbuild: Leave objtool binary around with 'make clean' - kbuild: rust: allow `clippy::uninlined_format_args` - kcm: fix zero-frag skb in frag_list on partial sendmsg error - kcsan, compiler_types: avoid duplicate type issues in BPF Type Format - kernel: be more careful about dup_mmap() failures and uprobe registering - kexec: Consolidate machine_kexec_mask_interrupts() implementation - kexec: define functions to map and unmap segments - kexec: derive purgatory entry from symbol - kexec: Include kernel-end even without crashkernel - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kselftest/harness: Use helper to avoid zero-size memset warning - ksmbd: add chann_lock to protect ksmbd_chann_list xarray - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: check return value of xa_store() in krb5_authenticate - ksmbd: Compare MACs in constant time - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: rewrite stop_sessions() with restartable iteration - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Fix the month in the name of the failure directory - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter - KVM: arm64: Hide S1POE from guests when not supported by the host - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always intercept VMMCALL when L2 is active - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay - KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Allow vendor code to disable quirks - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: do not allow re-enabling quirks - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM - KVM: x86: Introduce supported_quirks to block disabling quirks - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - landlock: Optimize file path walks and prepare for audit support - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix missing NULL checks for kstrdup() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: Handle percpu handler address for ORC unwinder - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch/orc: Use RCU in all users of __module_address(). - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove some extern variables in source files - LoongArch: Remove unnecessary checks for ORC unwinder - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: Use %px to print unmodified unwinding address - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix memory leak in raid1_run() - md/raid1: fix memory leak in raid1_run() if no active rdev - md/raid5: fix raid5_run() to return error when log_init() fails - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Drop min_queued_buffers assignment - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: ccs: Fix setting initial sub-device state - media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() - media: chips-media: wave5: add missing spinlock protection for send_eos_event() - media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() - media: chips-media: wave5: Fix conditional in start_streaming - media: chips-media: wave5: Fix device cleanup order to prevent kernel panic - media: chips-media: wave5: Fix kthread worker destruction in polling mode - media: chips-media: wave5: Fix memory leak on codec_info allocation failure - media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: dw9714: add support for powerdown pin - media: dw9714: Fix powerup sequence - media: dw9714: move power sequences to dedicated functions - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx283: Enter full standby when stopping streaming - media: i2c: imx283: Fix hang when going from large to small resolution - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: intel/ipu6: fix error pointer dereference - media: ipu6: Always close firmware stream - media: ipu6: Close firmware streams on streaming enable failure - media: ipu6: Ensure stream_mutex is acquired when dealing with node list - media: ipu6: Fix RPM reference leak in probe error paths - media: ipu6: Fix typo and wrong constant in ipu6-mmu.c - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mt9m114: Avoid a reset low spike during probe() - media: mt9m114: Return -EPROBE_DEFER if no endpoint is found - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Fix streaming cleanup on release - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: mg4b: Use IRQF_NO_THREAD - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix pass-by-value structs causing MSAN warnings - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: core: Preserve OF node when ACPI handle is present - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: SiByte: Bring back cache initialisation - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: dw_mmc-rockchip: Add memory clock auto-gating support - mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support - mmc: dw_mmc-rockchip: use modern PM macros - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mm: convert mm_lock_seq to a proper seqcount - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/hugetlb_cma: round up per_node before logging it - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory: fix PMD/PUD checks in follow_pfnmap_start() - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() - mm/migrate: move movable_ops page handling out of move_to_new_folio() - mm: migrate: requeue destination folio on deferred split queue - mm: numa_memblks: Identify the accurate NUMA ID of CFMW - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() - mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/pagewalk: fix race between concurrent split and refault - mm: prevent droppable mappings from being locked - mm: replace READ_ONCE() with standard page table accessors - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() - mm: shmem: fix potential data corruption during shmem swapin - mm/shmem, swap: avoid redundant Xarray lookup during swapin - mm/shmem, swap: improve cached mTHP handling and fix potential hang - mm/slab: use unsigned long for orig_size to ensure proper metadata align - mm: thp: deny THP for files on anonymous inodes - mm/tracing: rss_stat: ensure curr is false from kthread context - mm/userfaultfd: fix hugetlb fault mutex hash calculation - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node - mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix kernel panic when a symbol st_shndx is out of bounds - most: core: fix leak on early registration failure - most: core: fix resource leak in most_register_interface error paths - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix receive space timestamp initialization - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: spinand: Disable continuous read during probe - mtd: spinand: Fix kernel doc - mtd: spinand: winbond: Declare the QE bit on W25NxxJW - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sst: Fix write enable before AAI sequence - myri10ge: avoid uninitialized variable use - namespace: fix proc mount iteration - net: add a common function to compute features for upper devices - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add xmit recursion limit to tunnel xmit functions - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() - net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() - net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() - net: airoha: read default PSE reserved pages value before updating - net: airoha: Remove airoha_dev_stop() in airoha_remove() - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcm: asp2: convert to phylib managed EEE - net: bcm: asp2: fix LPI timer handling - net: bcm: asp2: remove tx_lpi_enabled - net: bcmasp: Add support for asp-v3.0 - net: bcmasp: fix double disable of clk - net: bcmasp: fix double free of WoL irq - net: bcmasp: Fix network filter wake for asp-3.0 - net: bcmasp: Remove support for asp-v2.0 - net: bcmasp: Restore programming of TX map vector register - net: bcmasp: streamline early exit in probe - net: bcmgenet: fix broken EEE by converting to phylib-managed state - net: bcmgenet: increase WoL poll timeout - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix use-after-free in bond_xmit_broadcast() - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: properly keep track of conduit reference - net: dsa: realtek: Fix LED group port bit for non-zero LED group - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: check whether the RSS algorithm is Toeplitz - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix the PTP periodic output sysfs interface - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: conntrack: add missing netlink policy validations - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nfnetlink_queue: make hash table per queue - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation - netfilter: nfnetlink_queue: optimize verdict lookup with hash table - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval - netfilter: reject zero shift in nft_bitwise - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators - net: ftgmac100: fix ring allocation unwind on open failure - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: fix VLAN add unwind on slave errors - net: increase IP_TUNNEL_RECURSION_LIMIT to 5 - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: introduce mangleid_features - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipv4: fix ARM64 alignment fault in multipath hash seed - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - net: lan743x: fix duplex configuration in mac_link_up - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lan966x: fix page pool leak in error paths - net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: Protect access to net_device::ip_ptr with RCU lock - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mctp: fix don't require received header reserved bits to be zero - net: mctp-i2c: fix duplicate reception of old data - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5e: Separate address related variables to be in struct - net/mlx5e: Support routed networks during IPsec MACs initialization - net/mlx5: E-switch, Clear legacy flag when moving to switchdev - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels - net/mlx5: Fix crash when moving to switchdev mode - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix switchdev mode rollback in case of failure - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: ncsi: fix skb leak in error paths - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - net: openvswitch: Avoid releasing netdev before teardown completes - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: prevent NULL deref in ip[6]tunnel_xmit() - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: rds_sendmsg should not discard payload_len - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net: sched: act_csum: validate nested VLAN headers - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Lantech 8330-265D - net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: skb: fix cross-cache free of KFENCE-allocated skb head - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net/tcp-ao: Fix MAC comparison to be constant-time - net/tcp-md5: Fix MAC comparison to be constant-time - net: ti: icssg-prueth: Add optional dependency on HSR - net: ti: icssg-prueth: Fix ping failure after offload mode setup when link speed is not 1G - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: use skb_header_pointer() for TCPv4 GSO frag_off check - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: mhi: Add network support for Foxconn T99W760 - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - nfnetlink_osf: validate individual option lengths in fingerprints - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit - NFS: NFSERR_INVAL is not defined by NFSv2 - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - nsfs: tighten permission checks for ns iteration ioctls - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet: move async event work off nvmet-wq - nvmet-tcp: fix race between ICReq handling and queue teardown - objpool: fix the overestimation of object pooling metadata size - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep_vf: add NULL check for napi_build_skb() - octeon_ep_vf: avoid compiler and IQ/OQ reordering - octeon_ep_vf: ensure dbell BADDR updation - octeon_ep_vf: Relocate counter updates before NAPI - Octeontx2-af: Add proper checks for fwdata - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in of_unittest_changeset() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - OPP: Return correct value in dev_pm_opp_get_level - ovl: Fix uninit-value in ovl_fill_real - ovl: fix wrong detection of 32bit inode numbers - ovl: make fsync after metadata copy-up opt-in mount option - ovl: Use str_on_off() helper in ovl_show_options() - padata: Fix pd UAF once and for all - padata: Remove comment for reorder_work - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add Intel Nova Lake audio Device ID - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Clear stale errors on reporting agents upon probe - PCI/AER: Stop ruling out unbound devices as error source - PCI/ASPM: Fix pci_clear_and_set_config_dword() usage - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: endpoint: Implement the pci_epc_ops::align_addr() operation - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry - PCI: dwc: ep: Use align addr function for dw_pcie_ep_raise_{msi,msix}_irq() - PCI: dwc: Fix msg_atu_index assignment - PCI: dw-rockchip: Don't wait for link since we can detect Link Up - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: Introduce pci_epc_function_is_valid() - PCI: endpoint: Introduce pci_epc_mem_map()/unmap() - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: Fix placement of pci_save_state() in pci_bus_add_device() - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: qcom: Don't wait for link if we can detect Link Up - PCI: Revert "Enable ACS after configuring IOMMU for OF platforms" - PCI: Update saved_config_space upon resource assignment - PCI: Use resource_set_range() that correctly sets ->end - perf annotate: Fix hashmap__new() error checking - perf annotate: Fix memcpy size in arch__grow_instructions() - perf annotate: Use jump__delete when freeing LoongArch jumps - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf disasm: Fix off-by-one bug in outside check - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf ftrace: Fix hashmap__new() error checking - perf: Make sure to use pmu_ctx->pmu for groups - perf maps: Fix reference count leak in maps__find_ams() - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf unwind-libdw: Fix invalid reference counts - perf vendor events amd: Fix Zen 5 MAB allocation events - perf/x86/core: Do not set bit width for unavailable counters - perf/x86/cstate: Add Airmont NP - perf/x86/intel: Add missing branch counters constraint apply - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - perf/x86/intel/uncore: Skip discovery table for offline dies - perf/x86/intel/uncore: Support more units on Granite Rapids - perf/x86/msr: Add Airmont NP - phy: cadence-torrent: restore parent clock for refclk during resume - phy: freescale: imx8qm-hsio: fix NULL pointer dereference - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: qcom: edp: Make the number of clocks flexible - phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - phy: ti: phy-j721e-wiz: restore mux selection during resume - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Add code name documentation - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86/amd/pmf: Prevent TEE errors after hibernate - platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: disable wakeup_mode during hibernation - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit - platform/x86: ISST: Add missing write block check - platform/x86: ISST: Correct locked bit width - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - powercap: intel_rapl: Add PL4 support for Ice Lake - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc64/bpf: fix kfunc call support - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: adjust the elfcorehdr size - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/kexec/core: use big-endian types for crash variables - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: sequencing: fix missing state_lock in pwrseq_power_on() error path - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() - power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler - power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - procfs: fix possible double mmput() in do_procmap_query() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - quota: fix livelock between quotactl and freeze_super - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix RoCEv1 failure due to DSCP - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/iwcm: Fix workqueue list corruption by removing work_list - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler - RDMA/mlx5: Fix UMR hang in LAG error state unload - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - regmap: Synchronize cache for the page selector - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - reset: gpio: suppress bind attributes in sysfs - resource: Add resource set range and size helpers - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" - Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "LoongArch: Add machine_kexec_mask_interrupts() implementation" - Revert "LoongArch: Handle percpu handler address for ORC unwinder" - Revert "LoongArch/orc: Use RCU in all users of __module_address()." - Revert "LoongArch: Remove unnecessary checks for ORC unwinder" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "PCI: qcom: Don't wait for link if we can detect Link Up" - Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - ring-buffer: Fix to update per-subbuf entries of persistent ring buffer - riscv: kgdb: fix several debug register assignment bugs - riscv: vector: init vector context with proper vlenb - rnbd-srv: Fix server side setting of bi_size for special IOs - rnbd-srv: use bio_add_virt_nofail - rnbd-srv: Zero the rsp buffer before using it - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: allow `clippy::collapsible_if` globally - rust: allow `clippy::collapsible_match` globally - rust: init: fix `clippy::undocumented_unsafe_blocks` warnings - rust: kbuild: allow `unused_features` - rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0 - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: fix incorrect accessor reference lifetime - rust: pin-init: internal: init: document load-bearing fact of field accessors - rust: warn on bindgen < 0.69.5 and libclang >= 19.1 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cpum_sf: Cap sampling rate to prevent lsctl exception - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/idle: Fix cpu idle exit cpu time accounting - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf_cpum_sf: Convert to use try_cmpxchg128() - s390/perf: Disable register readout on sampling events - s390/pfault: Fix virtual vs physical address confusion - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/vtime: Fix virtual timer forwarding - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/deadline: Clear the defer params - sched/deadline: Use revised wakeup rule for dl_server - sched/debug: Fix updating of ppos on server write ops - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Remove redundant css_put() in scx_cgroup_init() - sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update - sched/fair: Fix zero_vruntime tracking - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Use protect_slice() instead of direct comparison - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: csiostor: Fix dereference of null pointer rn - scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftests/bpf: Fix resource leak in serial_test_wq on attach failure - selftests/bpf: Test cross-sign 64bits range refinement - selftests/bpf: Test invariants on JSLT crossing sign - selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/harness: order TEST_F and XFAIL_ADD constructors - selftests/hid: fix compilation when bpf_wq and hid_device are not exported - selftests/landlock: Fix format warning for __u64 in net_test - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: convert page_size to unsigned long - selftests/mm: pagemap_ioctl: Fix types mismatches shown by compiler options - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: check output: catch cmd errors - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selinux: don't reserve xattr slot when we won't fill it - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serial: 8250: 8250_omap.c: Add support for handling UART error conditions - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - sh: platform_early: remove pdev->driver_override check - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: require a full NFS mode SID before reading mode bits - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei - soc: qcom: smem: handle ENOMEM error during probe - soc: rockchip: grf: Add missing of_node_put() when returning - soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition - soc: rockchip: grf: Support multiple grf to be handled - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - soundwire: intel_ace2x: add SND_HDA_CORE dependency - soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: aspeed-smc: fix controller deregistration - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: cadence-qspi: Fix exec_mem_op error handling - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: ch341: fix memory leaks on probe failures - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: geni-qcom: Check DMA interrupts early in ISR - spi: geni-qcom: Fix abort sequence execution for serial engine errors - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: Group CS related fields in struct spi_device - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: mpc52xx: fix controller deregistration - spi: mpc52xx: fix use-after-free on registration failure - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mxic: fix controller deregistration - spi: mxs: fix controller deregistration - spi: npcm-pspi: fix controller deregistration - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix controller deregistration - spi: orion: fix runtime pm leak on unbind - spi: pic32: fix controller deregistration - spi: pic32-sqi: fix controller deregistration - spi: pl022: fix controller deregistration - spi: qup: fix controller deregistration - spi: rockchip: fix controller deregistration - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: sprd: fix controller deregistration - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: sun4i: fix controller deregistration - spi: sun6i: fix controller deregistration - spi: syncuacer: fix controller deregistration - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: tegra210-quad: Protect curr_xfer check in IRQ handler - spi: ti-qspi: fix controller deregistration - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix controller deregistration - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: use generic driver_override infrastructure - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - statmount: permission check should return EPERM - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - sysctl: fix uninitialized variable in proc_do_large_bitmap - taskstats: set version in TGID exit notifications - tcp: call sk_data_ready() after listener migration - tcp: optimize inet_use_bhash2_on_bind() - tcp: tcp_tx_timestamp() must look at the rtx queue - team: fix header_ops type confusion with non-Ethernet ports - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Address thermal zone removal races with resume - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal: core: Free thermal zone ID later during removal - thermal: core: Mark thermal zones as exiting before unregistration - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature - thermal/of: Fix reference leak in thermal_of_cm_lookup() - thunderbolt: Fix property read in nhi_wake_supported() - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tls: Fix race condition in tls_sw_cancel_work_tx() - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tpm: avoid -Wunused-but-set-variable - tpm: Fix auth session leak in tpm2_get_random() error path - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() - tracefs: Fix default permissions not being applied on initial mount - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add a comment about ftrace_regs definition - tracing: Add ftrace_fill_perf_regs() for perf event - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix enabling multiple events on the kernel command line and bootconfig - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing: Fix WARN_ON in tracing_buffers_mmap_close - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: ring-buffer: Fix to check event length before using - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix unshare_fs() handling - uprobes: Fix incorrect lockdep condition in filter_chain() - uprobes: switch to RCU Tasks Trace flavor for better performance - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb: core: phy: avoid double use of 'usb3-phy' - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: f_ecm: Fix net_device lifecycle with device_move - usb: gadget: f_eem: Fix net_device lifecycle with device_move - usb: gadget: f_fs: fix DMA-BUF OUT queues - usb: gadget: f_fs: Fix ioctl error handling - usb: gadget: f_hid: don't call cdev_init while cdev in use - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Fix net_device lifecycle with device_move - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix net_device lifecycle with device_move - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmode/displayport: set displayport signaling rate in configure message - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: Flush anchored URBs in usbtmc_release - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vfio/cdx: Fix NULL pointer dereference in interrupt trigger path - vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost: move vdpa group bound check to vhost_vdpa - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vsock: fix buffer size clamping order - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - vxlan: validate ND option lengths in vxlan_na_create - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: Fix failure to connect to a 6 GHz AP - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: allow only one NAN interface, also in multi radio - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: Fix use_for flag update on BSS refresh - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mac80211: use safe list iteration in radar detect work - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr - wifi: mt76: mt7925: fix incorrect length field in txpower command - wifi: mt76: mt7925: fix incorrect TLV length in CLC command - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() - wifi: rtw89: 8922a: add digital compensation for 2GHz - wifi: rtw89: 8922a: set random mac if efuse contains zeroes - wifi: rtw89: fix unable to receive probe responses under MLO connection - wifi: rtw89: mac: correct page number for CSI response - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: ser: enable error IMR after recovering from L1 - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out assign_rescuer_work() - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags - X.509: Fix out-of-bounds access when parsing extensions - x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache - x86-64: rename misleadingly named '__copy_user_nocache()' function - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Add additional fixed RDSEED microcode revisions - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/cpu: Disable FRED when PTI is forced on - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path - x86/fred: Correct speculative safety in fred_extint() - x86/fred: Fix early boot failures on SEV-ES/SNP guests - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/platform/uv: Handle deconfigured sockets - x86: rename and clean up __copy_from_user_inatomic_nocache() - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: allow attaching already registered memory model to xdp_rxq_info - xdp: produce a warning when calculated tailroom is negative - xdp: register system page pool as an XDP memory model - xdp: use modulo operation to calculate XDP frag tailroom - xdrgen: Fix struct prefix for typedef types in program wrappers - xdrgen: Initialize data pointer for zero-length items - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/privcmd: unregister xenstore notifier on module exit - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: account XFRMA_IF_ID in aevent size calculation - xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi - xfrm: ah: account for ESN high bits in async callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: fix refcount leak in xfrm_migrate_policy_find - xfrm: fix the condition on x->pcpu_num in xfrm_sa_len - xfrm: Fix the usage of skb->sk - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() - xfrm: prevent policy_hthresh.work from racing with netns teardown - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: check for deleted cursors when revalidating two btrees - xfs: check return value of xchk_scrub_create_subord - xfs: delete attr leaf freemap entries when empty - xfs: don't irele after failing to iget in xfs_attri_recover_work - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix copy-paste error in previous fix - xfs: Fix error pointer dereference - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix returned valued from xfs_defer_can_append - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix the xattr scrub to detect freemap/entries array collisions - xfs: fix undersized l_iclog_roundoff values - xfs: get rid of the xchk_xfile_*_descr calls - xfs: mark data structures corrupt on EIO and ENODATA - xfs: only call xf{array,blob}_destroy if we have a valid pointer - xfs: remove file_path tracepoint data - xfs: remove xfs_attr_leaf_hasname - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: scrub: unlock dquot before early return in quota scrub - xfs: stop reclaim before pushing AIL during unmount - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zram: do not forget to endio for partial discard requests - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Update LVC patches for 6.12.90 - Removed already not needed patches, adapted some of existing ones, added newly appeared patches- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- bump rel- CONFIG_NF_CONNTRACK_PROCFS=y sometime i need to obtain traffic stats- Fix Dirtyfrag- Add new module ec-touchpad-toggle - Also exclude nwfermi.ko, which was not excluded by mistake...- Update BR for perf - ``` - DEBUG: make FIXDEP=1 -f Makefile.perf install-man - DEBUG: Makefile.config:1127: No libcapstone found, disables disasm engine support for 'perf script', please install libcapstone-dev/capstone-devel - DEBUG: Makefile.config:1189: libpfm4 not found, disables libpfm4 support. Please install libpfm4-dev - DEBUG: Makefile.config:1223: libtracefs is missing. Please install libtracefs-dev/libtracefs-devel - DEBUG: Auto-detecting system features: - DEBUG: ... dwarf: [ on ] - DEBUG: ... dwarf_getlocations: [ on ] - DEBUG: ... glibc: [ on ] - DEBUG: ... libbfd: [ on ] - DEBUG: ... libbfd-buildid: [ on ] - DEBUG: ... libcap: [ on ] - DEBUG: ... libelf: [ on ] - DEBUG: ... libnuma: [ on ] - DEBUG: ... numa_num_possible_cpus: [ on ] - DEBUG: ... libperl: [ on ] - DEBUG: ... libpython: [ on ] - DEBUG: ... libcrypto: [ on ] - DEBUG: ... libunwind: [ on ] - DEBUG: ... libdw-dwarf-unwind: [ on ] - DEBUG: ... libcapstone: [ OFF ] - DEBUG: ... llvm-perf: [ on ] - DEBUG: ... zlib: [ on ] - DEBUG: ... lzma: [ on ] - DEBUG: ... get_cpuid: [ on ] - DEBUG: ... bpf: [ on ] - DEBUG: ... libaio: [ on ] - DEBUG: ... libzstd: [ on ] - ```- Fix work on older Macs- Revert accidently merged disablement of kmod() provides - Repository is getting prepared for removal of kmod(), see kb#63. - For now - revert this change.- AMDGPU coherency hacks are not needed on x86- Fix CVE-2026-31431 ("Copyfail")- set cma=256M by default for Baikal - Merge: c9153a4 66a6ff7- Merge remote-tracking branch 'baikal/rosa2023.1' into rosa2023.1- Update LVC patches (bz#19983) - Talk with AI debugging https://bugzilla.rosa.ru/show_bug.cgi?id=19983: - https://file-store.rosa.ru/download/94a69475631e57cda3466a98efef1f76740bc34e- llvm for perf - DEBUG: Makefile.config:706: Warning: Disabled BPF skeletons as clang (clang) is missing - DEBUG: Makefile.config:997: No libllvm 13+ found, slower source file resolution, please install llvm-devel/llvm-dev- Hans's patch has been upstreamized- Remove upstreamized LVC patches- New LVC patches- [bot] upd: 6.12.47 -> 6.12.74 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail - accel/ivpu: Fix DCT active percent format - accel/ivpu: Fix race condition when unbinding BOs - accel/ivpu: Make function parameter names consistent - accel/ivpu: Prevent runtime suspend during context abort work - accel/qaic: Fix bootlog initialization ordering - accel/qaic: Synchronize access to DBC request queue head & tail pointer - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Detect preferred core availability on online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - ACPI: fan: Add fan speed reporting for fans with only _FST - ACPI: fan: Use ACPI handle when retrieving _FST - ACPI: fan: Use platform device for devres-related actions - ACPI: fan: Workaround for 64-bit firmware bug - acpi/hmat: Fix lockdep warning for hmem_register_resource() - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - ACPI: scan: Update honor list for RPMI System MSI - ACPI: SPCR: Check for table version when using precise baudrate - ACPI: SPCR: Support Precise Baud Rate field - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - ACPI: video: force native for Lenovo 82K8 - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Initialise scc_index in unix_add_edge(). - af_unix: Read sk_peek_offset() again after sleeping in unix_stream_read_generic(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: aloop: Fix racy access at PCM trigger - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda: Fix missing pointer check in hda_component_manager_init function - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Enable headset mic for Acer Nitro 5 - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA - ALSA: hda/realtek - fixed speaker no sound - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: Fix code alignment in mixer_quirks - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: broadcom: bcm2712: Add default GIC address cells - arm64: dts: broadcom: bcm2712: Define VGIC interrupt - arm64: dts: exynos: gs101: fix sysreg_apm reg property - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart - arm64: dts: imx93-kontron: Fix GPIO for panel regulator - arm64: dts: imx93-kontron: Fix USB port assignment - arm64: dts: imx95: Correct the lpuart7 and lpuart8 srcid - arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes - arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports - arm64: dts: mba8mx: Fix Ethernet PHY IRQ support - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8186-tentacruel: Fix touchscreen model - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8395-kontron-i1200: Fix MT6360 regulator nodes - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: qcom: sm8650: set ufs as dma coherent - arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller - arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller - arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: disable HS400 on RK3588 Tiger - arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5 - arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2 - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1 - arm64: dts: rockchip: Make RK3588 GPU OPP table naming less generic - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder - arm64: kprobes: call set_memory_rox() for kprobe page - arm64: kprobes: check the return value of set_memory_rox() - arm64: map [_text, _stext) virtual address range non-executable+read-only - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: mte: Do not warn if the page is already tagged in copy_highpage() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: Set __nocfi on swsusp_arch_resume() - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: zynqmp: Disable coresight by default - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on reset) - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: p880: set correct touchscreen clipping - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak4458: remove the reset operation in probe and remove - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: lpass-tx-macro: fix SM6115 support - ASoC: codecs: nau8325: Silence uninitialized variables warnings - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wcd937x: make stub functions inline - ASoC: codecs: wcd937x: set the comp soundwire port correctly - ASoC: codecs: wcd939x: fix regmap leak on probe failure - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs-amp-lib-test: Fix missing include of kunit/test-bug.h - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_sai: Fix sync error in consumer mode - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Expose correct bit depth to userspace - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8325: add missing build config - ASoC: nau8325: use simple i2c probe function - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again) - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type - ASoC: simple-card-utils: Check device node before overwrite direction - ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-pcm: Add fixup for channels - ASoC: SOF: ipc4-pcm: Enable delay reporting for ChainDMA streams - ASoC: SOF: ipc4-pcm: fix delay calculation when DSP resamples - ASoC: SOF: ipc4-pcm: fix start offset calculation for chain DMA - ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: correct the wrong period - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: ahci: Do not read the per port area for unimplemented ports - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Disable LPM on ST2000DM008-2FR102 - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-sata: Improve link_power_management_supported sysfs attribute - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - bcache: fix improper use of bi_end_io - bcache: fix I/O accounting leak in detached_dev_do_request - bcache: use bio cloning for detached device requests - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binder: fix double-free in dbitmap - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-crypto: use BLK_STS_INVAL for alignment errors - blk-mq: Abort suspend when wakeup events are pending - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block/blk-throttle: Fix throttle slice time for SSDs - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix memory leak in __blkdev_issue_zero_pages - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: freeze queue when updating zone resources - block: handle zone management operations completions - block: make REQ_OP_ZONE_OPEN a write operation - block/mq-deadline: Introduce dd_start_request() - block/mq-deadline: Switch back to a single dispatch list - block: rate-limit capacity change info log - block: return unsigned int from queue_dma_alignment - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix BIS connection dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: ISO: free rx_skb if not consumed - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() - bnxt_en: Add Hyper-V VF ID - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type - bnxt_en: Change FW message timeout warning - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bnxt_en: Fix XDP_TX path - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code - bnxt_en: Refactor bnxt_free_ctx_mem() - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf: Allow fall back to interpreter for programs with stack size <= 512 - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Check the helper function is valid in get_helper_proto - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Find eligible subprogs for private stack support - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Fix stackmap overflow check in __bpf_get_stackid() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Mark kfuncs as __noclone - bpf: Refactor stack map trace depth calculation into helper function - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject narrower access to pointer ctx fields - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bpf: Use tnums for JEQ/JNE is_branch_taken logic - bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: abort transaction if we fail to update inode in log replay dir fixup - btrfs: abort transaction in the process_one_buffer() log tree walk callback - btrfs: abort transaction on specific error places when walking log tree - btrfs: add extra error messages for delalloc range related errors - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't allow adding block device of less than 1 MB - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix beyond-EOF write handling - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix error handling of submit_uncompressed_range() - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation - btrfs: fix memory leak on duplicated memory in the qgroup assign ioctl - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix qgroup_snapshot_quick_inherit() squota bug - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix squota compressed stats leak - btrfs: fix subvolume deletion lockup caused by inodes xarray race - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: only enforce free space tree if v1 cache is required for bs < ps cases - btrfs: prevent use-after-free on folio private data in btrfs_subpage_clear_uptodate() - btrfs: qgroup: update all parent qgroups when doing quick inherit - btrfs: ref-verify: handle damaged extent root tree - btrfs: reject new transactions if the fs is fully read-only - btrfs: release root after error in data_reloc_print_warning_inode() - btrfs: remove btrfs_fs_info::sectors_per_page - btrfs: return any hit error from extent_writepage_io() - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: subpage: dump the involved bitmap when ASSERT() failed - btrfs: tracepoints: use btrfs_root_id() to get the id of a root - btrfs: tree-checker: add inode extref checks - btrfs: tree-checker: fix bounds check in check_inode_extref() - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: truncate ordered extent when skipping writeback past i_size - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: use variable for end offset in extent_writepage_io() - btrfs: zoned: fix conventional zone capacity calculation - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - bus: mhi: host: pci_generic: Add Telit FN920C04 modem support - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support - caif: fix integer underflow in cffrml_receive() - can: at91_can: Fix memory leak in at91_can_probe() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd: acc_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: add deinit callback - can: m_can: call deinit/init callback when going into suspend/resume - can: m_can: fix CAN state in system PM - can: m_can: m_can_chip_config(): bring up interface in correct state - can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error Active - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: rockchip-canfd: rkcanfd_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - cdx: Fix device node reference leak in cdx_msi_domain_init - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: fix multifs mds auth caps issue - ceph: fix NULL pointer dereference in ceph_mds_auth_match() - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - ceph: fix potential race condition in ceph_ioctl_lazyio() - ceph: fix race condition validating r_parent before applying state - ceph: fix race condition where r_parent becomes stale before sending message - ceph: refactor wake_up_bit() pattern of calling - cgroup: Fix kernfs_node UAF in css_free_rwork_fn - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix copy_to_iter return value check - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: at91: sam9x7: Add peripheral clock id for pmecc - clk: clocking-wizard: Fix output clock register offset for Versal platforms - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: qcom: camcc-sm7150: Fix PLL config of PLL2 - clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other - clk: qcom: common: Fix NULL vs IS_ERR() check in qcom_cc_icc_register() - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src - clk: qcom: gcc-ipq6018: rework nss_port5 clock to multiple conf - clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets - clk: qcom: tcsrcc-x1e80100: Set the bi_tcxo as parent to eDP refclk - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Fix memory leak in cpg_mssr_reserved_init() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: scmi: Add duty cycle ops only when duty cycle is supported - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/timer-rtl-otto: Do not interfere with interrupts - clocksource/drivers/timer-rtl-otto: Work around dying timers - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - clocksource: Reduce watchdog readout delay limit to prevent false positives - cnic: Fix use-after-free bugs in cnic_delete_task - codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_file_range: limit size if in compat mode - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: catu: Support atclk - coresight: Change device mode to atomic type - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Fix incorrect handling for return value of devm_kzalloc - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: tmc: Support atclk - coresight: tpda: fix the logic to setup the element size - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: ondemand: Update the efficient idle check for Intel extended Families - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpufreq: ti: Add support for AM62D2 - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Fix missing adaptation for cpuset_is_populated - cpuset: Treat cpusets in attaching as populated - cpuset: Use new excpus for nocpu error check when enabling root partition - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() - crypto: ccp: Skip SEV and SNP INIT for kdump boot - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - clear all VF configurations in the hardware - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - invalidate queues in use - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: iaa - Fix incorrect return value in save_iaa_wq() - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx2 - Call strscpy() with correct size argument - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - fix duplicate restarting msg during AER error - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't enforce dma mapping check on noncoherent allocations - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dma-debug: fix physical address calculation for struct dma_debug_entry - dma-debug: store a phys_addr_t in struct dma_debug_entry - dmaengine: Add missing cleanup on module unload - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: lpc32xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma-mapping: fix direction in dma_alloc direction traces - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err - dma-mapping: trace dma_alloc/free direction - dma-mapping: trace more error paths - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm error: mark as DM_TARGET_PASSES_INTEGRITY - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: don't set io_min and io_opt for raid1 - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-stripe: fix a possible integer overflow - dm vdo: return error on corrupted metadata in start_restoring_volume functions - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: hwmon: fix link to g762 devicetree binding - docs: kdoc: handle the obsolescensce of docutils.ErrorString() - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - dpll: Prevent duplicate registrations - dpll: spec: add missing module-name and clock-id to pin-get reply - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd/amdgpu: Release xcp drm memory after unplug - drm/amd/amdgpu: reserve vm invalidation engine for uni_mes - drm/amd: Avoid evicting resources at S5 - drm/amd: Check that VPE has reached DPM0 in idle handler - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add fallback path for YCBCR422 - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put - drm/amd/display: Apply e4479aecf658 to dml - drm/amd/display: avoid reset DTBCLK at clock init - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: change dc stream color settings only in atomic commit - drm/amd/display: Check NULL before accessing - drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5 - drm/amd/display: disable DPP RCG before DPP CLK enable - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display/dml2: Guard dml21_map_dc_state_into_dml_display_cfg with DC_FP_START - drm/amd/display: Don't change brightness for disabled connectors - drm/amd/display: Enable Dynamic DTBCLK Switch - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: extend delta clamping logic to CM3 LUT helper - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: fix condition for setting timing_adjust_pending - drm/amd/display: fix dml ms order of operations - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed - drm/amd/display: Fix for test crash due to power gating - drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix NULL deref in debugfs odm_combine_segments - drm/amd/display: Fix pbn_div Calculation Error - drm/amd/display: Fix pbn to kbps Conversion - drm/amd/display: Fix scratch registers offsets for DCN35 - drm/amd/display: Fix scratch registers offsets for DCN351 - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - drm/amd/display: incorrect conditions for failing dto calculations - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: increase max link count and fix link->enc NULL pointer access - drm/amd/display: Increase minimum clock for TMDS 420 with pipe splitting - drm/amd/display: Init dispclk from bootup clock for DCN314 - drm/amd/display: Insert dccg log for easy debug - drm/amd/display: mark static functions noinline_for_stack - drm/amd/display: Move setup_stream_attribute - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: remove assert around dpp_base replacement - drm/amd/display: Remove redundant semicolons - drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off - drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files - drm/amd/display: Set up pixel encoding for YCBCR422 - drm/amd/display: shrink struct members - drm/amd/display: Support HW cursor 180 rot for any number of pipe splits - drm/amd/display: update color on atomic commit time - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd/display: Wait until OTG enable state is cleared - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: Add back JPEG to video caps for carrizo and newer - drm/amdgpu: add ip offset support for cyan skillfish - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add range check for RAS bad page address - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: add support for cyan skillfish without IP discovery - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - drm/amdgpu: Avoid rma causes GPU duplicate reset - drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest - drm/amdgpu: Check vcn sram load return value - drm/amdgpu: Correct the counts of nr_banks and nr_errors - drm/amdgpu: disable peer-to-peer access for DCC-enabled GC12 VRAM surfaces - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: Enable MES lr_compute_wa by default - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule() - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix gfx12 mes packet status return check - drm/amdgpu: fix gpu page fault after hibernation on PF passthrough - drm/amdgpu: fix handling of harvesting for ip_discovery firmware - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: fix nullptr err of vm_handle_moved - drm/amdgpu: Fix query for VPE block_type and ip_count - drm/amdgpu: Fix unintended error log in VCN5_0_0 - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: adjust KGQ reset sequence - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx12: fix wptr reset in KGQ init - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: remove frame cntl for gfx v12 - drm/amdgpu: remove two invalid BUG_ON()s - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu: Skip poison aca bank from UE channel - drm/amdgpu/smu: Handle S0ix for vangogh - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amd/include : MES v11 and v12 API header update - drm/amd/include : Update MES v12 API for fence update - drm/amdkfd: bump minimum vgpr size for gfx1151 - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: Fix GPU mappings for APU after prefetch - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string - drm/amdkfd: Fix mmap write lock not release - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: relax checks for over allocation of save area - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amdkfd: Trap handler support for expert scheduling mode - drm/amdkfd: Use huge page size to check split svm range alignment - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2 - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/amd: Skip power ungate during suspend for VPE - drm/amd : Update MES API header file for v11 & v12 - drm/ast: Clear preserved bits from register output value - drm/ast: Use msleep instead of mdelay for edid read - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/buddy: Optimize free block management with RB tree - drm/buddy: Separate clear and dirty free block trees - drm/displayid: add quirk to ignore DisplayID checksum errors - drm/displayid: pass iter to drm_find_displayid_extension() - drm/draw: fix color truncation in drm_draw_fill24 - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915/dp: Initialize the source OUI write timestamp always - drm/i915/dp_mst: Disable Panel Replay - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915: Fix format string truncation warning - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/pmu: Fix zero delta busyness issue - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imagination: Disallow exporting of PM/FW protected objects - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() - drm/imagination: Wait for FW trace update command completion - drm/imx/tve: fix probe device leak - drm/mediatek: Add pm_runtime support for GCE power control - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe device leaks - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/me/gsc: mei interrupt top half should be in irq disabled context - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/a6xx: Fix the gemnoc workaround - drm/msm/a6xx: Flush LRZ cache before PT switch - drm/msm/a6xx: Improve MX rail fallback in RPMH vote init - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/msm/registers: Generate _HI/LO builders for reg64 - drm/nouveau: add missing DCB connector types - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit) - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: Fix race in nouveau_sched_fini() - drm/nouveau: implement missing DCB connector types; gracefully handle unknown connectors - drm/nouveau: refactor deprecated strcpy - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm: panel-backlight-quirks: Make EDID match optional - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/panic: Fix drawing the logo on a small narrow screen - drm/panic: Fix qr_code, ensure vmargin is positive - drm/panthor: Avoid adding of kernel BOs to extobj list - drm/panthor: check bo offset alignment in vm bind - drm/panthor: Defer scheduler entitiy destruction to queue release - drm/panthor: Ensure MCU is disabled on suspend - drm/panthor: Fix group_free_queue() for partially initialized queues - drm/panthor: Fix kernel panic on partial unmap of a GPU VA region - drm/panthor: Fix memory leak in panthor_ioctl_group_create() - drm/panthor: Fix potential memleak of vma structure - drm/panthor: Fix race with suspend during unplug - drm/panthor: Fix UAF on kernel BO VA nodes - drm/panthor: Fix UAF race between device unplug and FW event processing - drm/panthor: Flush shmem writes before mapping buffers CPU-uncached - drm/panthor: Handle errors returned by drm_sched_entity_init() - drm/panthor: Serialize GPU cache flush operations - drm/panthor: validate group queue count - drm/pl111: Fix error handling in pl111_amba_probe - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon: Do not kfree() devres managed rdev - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove calls to drm_put_dev() - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: avoid killing parent entity on child SIGKILL - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm/sched: Optimise drm_sched_entity_push_job - drm/sched: Re-group and rename the entity run-queue lock - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - drm/xe: Adjust long-running workload timeslices to reasonable values - drm/xe: Attempt to bring bos back to VRAM after eviction - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table - drm/xe: Do clean shutdown also when using flr - drm/xe: Do not wake device during a GT reset - drm/xe: Drop preempt-fences when destroying imported dma-bufs. - drm/xe: Ensure GT is in C0 during resumes - drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue() - drm/xe: Fix conversion from clock ticks to milliseconds - drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. - drm/xe/guc: Add more GuC load error status codes - drm/xe/guc: Check GuC running state before deregistering exec queue - drm/xe/guc: Increase GuC crash dump buffer size - drm/xe/guc: Return an error code if the GuC load fails - drm/xe/guc: Set upper limit of H2G retries over CTB - drm/xe/guc: Synchronize Dead CT worker with unbind - drm/xe/hw_engine_group: Fix double write lock release in error path - drm/xe: Limit num_syncs to prevent oversized allocations - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally - drm/xe: Move declarations under conditional branch - drm/xe/oa: Disallow 0 OA property values - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() - drm/xe/oa: Limit num_syncs to prevent oversized allocations - drm/xe/pm: Also avoid missing outer rpm warning on system suspend - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - drm/xe: Prevent BIT() overflow when handling invalid prefetch region - drm/xe/query: Fix topology query pointer advance - drm/xe: Restore engine registers before restarting schedulers after GT reset - drm/xe/tile: Release kobject for the failure path - drm/xe/uapi: loosen used tracking restriction - drm/xe: Use usleep_range for accurate long-running workload timeslicing - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets - dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - erofs: avoid infinite loop due to incomplete zstd-compressed data - erofs: don't bother with s_stack_depth increasing for now - erofs: fix file-backed mounts no longer working on EROFS partitions - erofs: fix UAF issue for file-backed mounts w/ directio option - erofs: fix unexpected EIO under memory pressure - erofs: limit the level of fs stacking for file-backed mounts - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - eth: fbnic: Fix counter roll-over issue - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix improper check of dentry.stream.valid_size - exfat: fix refcount leak in exfat_find - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - exfat: validate cluster allocation bits of the allocation bitmap - exfat: zero out post-EOF page cache on file extension - Expand the type of nfs_fattr->valid - ext4: add ext4_sb_bread_nofail() helper function for ext4_free_branches() - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: introduce linear search for dentries - ext4: refresh inline data size before write operations - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages - f2fs: add carve_out sysfs node - f2fs: add gc_boost_gc_greedy sysfs node - f2fs: add gc_boost_gc_multiple sysfs node - f2fs: add timeout in f2fs_enable_checkpoint() - f2fs: clear SBI_POR_DOING before initing inmem curseg - f2fs: drop inode from the donation list when the last file is closed - f2fs: dump more information for f2fs_{enable,disable}_checkpoint() - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid panic once fallocation fails for pinfile - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid running out of free segments - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to check sysfs filename w/ gc_pin_file_thresh correctly - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix uninitialized one_time_gc in victim_sel_policy - f2fs: fix wrong block mapping for multi-devices - f2fs: fix wrong layout information on 16KB page - f2fs: fix zero-sized extent for precache extents - f2fs: introduce reserved_pin_section sysfs entry - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: maintain one time GC mode is enabled during whole zoned GC cycle - f2fs: sysfs: add encoding_flags entry - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - fgraph: Check ftrace_pids_enabled on registration for early filtering - fgraph: Initialize ftrace_ops->private for function graph ops - fhandle: use more consistent rules for decoding file handle from userns - filelock: add FL_RECLAIM to show_fl_flags() macro - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firewire: ohci: move self_id_complete tracepoint after validating register - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: Add stub functions for SCMI MISC API - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER - firmware: meson_sm: fix device leak at probe - firmware: qcom: scm: preserve assign_mem() error return value - firmware: qcom: tzmem: disable sc7180 platform - firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix access to video_is_primary_device() when compiled without CONFIG_VIDEO - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/namespace: correctly handle errors returned by grab_requested_mnt_ns - fs/namespace: fix reference leak in grab_requested_mnt_ns - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: check for shutdown in fsync - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs/proc/task_mmu: check p->vec_buf for NULL - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: do not allow mapping a non-regular backing file - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genetlink: fix genl_bind() invoking bind() after -EPERM - gfs2: fix freeze error handling - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: Fix use of bio_chain - gfs2: Prevent recursive memory reclaim - gpio: 104-idio-16: Define maximum valid register address offset - gpio: cdev: Correct return code on memory allocation failure - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter - gpiolib: acpi: Add a quirk for Acer Nitro V15 - gpiolib: acpi: Add quirk for ASUS ProArt PX13 - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: Fix gpio count with string references - gpiolib: acpi: Fix potential out-of-boundary left shift - gpiolib: acpi: Handle deferred list via new API - gpiolib: acpi: Move quirks to a separate file - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list() - gpiolib-acpi: Update file references in the Documentation and MAINTAINERS - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpiolib: fix invalid pointer access in debugfs - gpio: ljca: Fix duplicated IRQ mapping - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: swnode: don't use the swnode's name as the key for GPIO lookup - gpio: virtuser: fix UAF in configfs release path - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - greybus: gb-beagleplay: Fix timeout handling in bootloader functions - gue: Fix skb memleak with inner IP protocol 0. - gup: optimize longterm pin_user_pages() for large folio - gve: Correct ethtool rx_dropped calculation - gve: defer interrupt enabling until NAPI registration - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Add sync across amd sfh work functions - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: hidraw: tighten ioctl command parsing - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: nintendo: Wait longer for initial probe - HID: pidff: PERMISSIVE_CONTROL quirk autodetection - HID: pidff: Use direction fix only for conditional effects - HID: playstation: Center initial joystick axes to prevent spurious events - HID: playstation: Fix memory leak in dualshock4_get_calibration_data() - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hostfs: Fix only passing host root in boot stage with new mount - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimers: Introduce hrtimer_update_function() - hrtimers: Make hrtimer_update_function() less expensive - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: hold rcu and dev lock for hsr_get_port_ndev - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Limit fan multiplier to avoid overflow - hwmon: (dell-smm) Remove Dell Precision 490 custom config data - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (lenovo-ec-sensors) Update P8 supprt - hwmon: (ltc4282): Fix reset_history file permissions - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (max6697) fix regmap leak on probe failure - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i2c: riic: Move suspend handling to NOIRQ phase - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: remove redundant memory barrier when cleaning Tx descs - i40e: validate ring_len parameter against hardware-specific values - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/ipoib: Ignore L3 master device - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: Fix incorrect timeout ice_release_res() - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues - ice: Fix persistent failure in ice_get_rxfh - ice: fix PTP cleanup on driver removal in error path - ice: fix Rx page leak on multi-buffer frames - ice: ice_adapter: release xa entry on adapter allocation failure - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - ice: store max_frame and rx_buf_len only in ice_rx_ring - idpf: add support for SW triggered interrupts - idpf: add support for Tx refillqs in flow scheduling mode - idpf: cap maximum Rx buffer size - idpf: do not linearize big TSO packets - idpf: fix memory leak in idpf_vport_rel() - idpf: fix mismatched free function for dma_alloc_coherent - idpf: fix possible vport_config NULL pointer deref in remove - idpf: fix Rx descriptor ready check barrier in splitq - idpf: improve when to set RE bit logic - idpf: keep the netdev when a reset fails - idpf: reduce mbx_task schedule delay to 300us - idpf: remove obsolete stashing code - idpf: replace flow scheduling buffer ring with buffer pool - idpf: simplify and fix splitq Tx packet rollback error path - idpf: stop Tx if there are insufficient buffer resources - idpf: trigger SW interrupt when exiting wb_on_itr mode - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: don't fail igc_probe() on LED setup error - igc: fix race condition in TX timestamp read for register 0 - igc: Restore default Qbv schedule when changing channels - iio: accel: adxl380: fix handling of unavailable "INT1" interrupt - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio/adc/pac1934: fix channel disable configuration - iio: adc: pac1934: Fix clamped value in pac1934_reg_snapshot - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: buffer-dmaengine: enable .get_dma_dev() - iio: buffer-dma: support getting the DMA channel - iio: buffer: support getting dma channel from the buffer - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: core: Replace lockdep_set_class() + mutex_init() by combined call - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: humditiy: hdc3020: fix units for temperature and humidity measurement - iio: humditiy: hdc3020: fix units for thresholds and hysteresis - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() - inet_diag: annotate data-races in inet_diag_bc_sk() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: alps - fix use-after-free bugs caused by dev3_register_work - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: lkkbd - disable pending work before freeing device - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: allocate s_dio_done_wq for async reads as well - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: do not register driver in probe() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Fix race during abort for file descriptors - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds - iommufd/selftest: Update hw_info coverage for an input data_type - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE - iommu/vt-d: debugfs: Fix legacy mode page table dump logic - iommu/vt-d: Disallow dirty tracking if incoherent page walk - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring/cmd: let cmds to know about dying task - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: fix incorrect io_kiocb reference in io_link_skb - io_uring: fix min_wait wakeups for SQPOLL - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check - io_uring: move local task_work in exit cancel loop - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations - io_uring/napi: fix io_napi_entry RCU accesses - io_uring/poll: correctly handle io_poll_add() return value on update - io_uring/rw: recycle buffers manually for non-mshot reads - io_uring/sqpoll: be smarter on when to update the stime usage - io_uring/sqpoll: switch away from getrusage() for CPU accounting - io_uring/waitid: always prune wait queue entry in io_waitid_wait() - io_uring/zctx: check chained notif contexts - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: adopt dst_dev() helper - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/renesas-rzg2l: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - irqchip/starfive-jh8100: Fix section mismatch - irqdomain: cdx: Switch to of_fwnode_handle() - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - isofs: check the return value of sb_min_blocksize() in isofs_fill_super - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: refactor pcpu kasan vmalloc unpoison - kasan: unpoison vms[area] addresses with a common tag - kbuild: fix compilation of dtb specified on command-line without make rule - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - kunit: test_dev_action: Correctly cast 'priv' pointer to long* - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: Make all 32bit ID registers fully writable - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: VMX: Fix check for valid GVA on an EPT violation - KVM: VMX: Split out guts of EPT violation to common/exposed function - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - l2tp: Fix memleak in l2tp_udp_encap_recv(). - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-cros_ec: Skip LEDs without color components - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp55xx: Use correct address for memory programming - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM - libbpf: Fix error when st-prefix_ops and ops from differ btf - libbpf: Fix parsing of multi-split BTF - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libbpf: Fix USDT SIB argument handling causing unrecognized register error - libbpf: Fix -Wdiscarded-qualifiers under C23 - lib/buildid: use __kernel_read() for sleepable context - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: riscv/chacha: Avoid s0/fp register - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - listmount: don't call path_put() under namespace semaphore - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - locktorture: Fix memory leak in param_set_cpumask() - LoongArch: Add cflag -fno-isolate-erroneous-paths-dereference - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names - LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Fix unreliable stack for live patching - LoongArch: Handle new atomic instructions for probes - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - LoongArch: vDSO: Check kcalloc() result in init_vdso() - loop: fix backing file reference leak on validation error - lsm: CONFIG_LSM can depend on CONFIG_SECURITY - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend() - mailbox: mtk-cmdq: Refine DMA address handling for the command buffer - mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data() - mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend() - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop - mailbox: zynqmp-ipi: Fix SGI cleanup on unbind - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md: fix mssing blktrace bio split events - md: fix rcu protection in md_wakeup_thread - md: Fix static checker warning in analyze_sbs - md/raid0: Handle bio_split() errors - md/raid10: Handle bio_split() errors - md/raid10: wait barrier before returning discard request with REQ_NOWAIT - md/raid1: Handle bio_split() errors - md/raid5: fix IO hang when array is broken with IO inflight - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() - md: suspend array while updating raid_disks via sysfs - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: extron-da-hd-4k-plus: drop external-module make commands - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: ipu6: isys: Set embedded data type correctly for metadata formats - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pci: mg4b: fix uninitialized iio scan data - media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS - media: platform: mtk-mdp3: fix device leaks at probe - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: s5p-mfc: remove an unused/uninitialized variable - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: ti: j721e-csi2rx: Fix source subdev link creation - media: ti: j721e-csi2rx: Use devm_of_platform_populate - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: videobuf2: forbid remove_bufs when legacy fileio is active - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vivid: fix disappearing messages - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: gsc: add dependency on Xe driver - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: core: Increment of_node's refcount before linking it to the platform device - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: kempld: Switch back to earlier ->init() behavior - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - microchip: lan865x: add ndo_eth_ioctl handler to enable PHY ioctl support - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - MIPS: Fix a reference leak bug in ip22_check_gio() - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: Fix variable shadowing in mmc_route_rpmb_frames() - mmc: core: SPI mode remove cmd7 - mmc: dw_mmc-rockchip: Fix wrong internal phase calculate - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mmc_spi: multiple block read remove read crc ack - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/lru_sort: use param_ctx for damon_attrs staging - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: describe @flags parameter in memalloc_flags_save() - mm/fake-numa: allow later numa node hotplug - mm/fake-numa: handle cases with no SRAT info - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/huge_memory: do not change split_huge_page*() target order silently - mm/huge_memory: fix NULL pointer deference when splitting folio - mm/huge_memory: preserve PG_has_hwpoisoned if a folio is split to >0 order - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix folio is still mapped when deleted - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm: introduce and use {pgd,p4d}_populate_kernel() - mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN - mm/kasan: fix KASAN poisoning in vrealloc() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm/memfd: fix information leak in hugetlb folios - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory-failure: fix redundant updates for already poisoned pages - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm: numa,memblock: include for 'numa_nodes_parsed' - mm/page_alloc: batch page freeing in decay_pcp_high - mm/page_alloc: change all pageblocks migrate type on coalescing - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection - mm/page_owner: fix memory leak in page_owner_stack_fops->release() - mm, percpu: do not consider sleepable allocations atomic - mm: prevent poison consumption when splitting THP - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" - mm: revert "mm: vmscan.c: fix OOM on swap stress test" - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm/shmem: fix THP allocation and fallback loop - mm, shmem: prevent infinite loop on truncate race - mm/shmem, swap: fix race of truncate and swap entry split - mm: simplify folio_expected_ref_count() - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - mm: swap: check for stable address space before operating on the VMA - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages - mm/truncate: unmap large folio on split failure - mm/zswap: fix error pointer free in zswap_cpu_comp_prepare() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mount: handle NULL values in mnt_ns_release() - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: Call dst_release() in mptcp_active_enable(). - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: reset blackhole on success with non-loopback ifaces - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - mtd: spinand: winbond: Fix oob_layout for W25N01JW - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: override creds to kernel when calling sock_{send,recv}msg() - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: Fix buffer overflow in USB transport layer - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - net: devmem: expose tcp_recvmsg_locked errors - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - netdevsim: set the carrier when the device goes up - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix bcm63xx RGMII port link adjustment - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: felix: support phy-mode = "10g-qxgmii" - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Do not execute PTP driver code for unsupported switches - net: dsa: microchip: Don't free uninitialized ksz_irq - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463 - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: dsa: tag_brcm: legacy: reorganize functions - net: dsa: xrs700x: reject unsupported HSR configurations - net: dst: add four helpers to annotate data-races around dst->dev - net: dst: introduce dst->dev_rcu - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout - net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism - net: ethernet: ti: am65-cpts: fix timestamp loss due to race conditions - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_nat: remove bogus direction check - netfilter: nfnetlink: reset nlh pointer during batch replay - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: make nft_set_do_lookup available unconditionally - netfilter: nf_tables: place base_seq in struct net - netfilter: nf_tables: Reintroduce shortened deletion notifications - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nf_tables: restart set lookup on base_seq change - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups - netfilter: nft_set_pipapo: don't return bogus extension pointer - netfilter: nft_set_pipapo: fix null deref for empty set - netfilter: nft_set_pipapo: fix range overlap detection - netfilter: nft_set_pipapo: merge pipapo_get/lookup - netfilter: nft_set_pipapo: remove unused arguments - netfilter: nft_set_rbtree: continue traversal if element is inactive - netfilter: nft_set: remove one argument from lookup and update functions - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix segmentation of forwarding fraglist GRO - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - netfs: Prevent duplicate unlocking - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add VLAN CTAG filter support - net: hsr: create an API to get hsr port type - net: hsr: Create and export hsr_get_port_ndev() - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hsr: remove one synchronize_rcu() from hsr_del_port() - net: hsr: remove synchronize_rcu() from hsr_add_port() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net: Introduce skb_copy_datagram_from_iter_full() - net: ionic: add dma_wmb() before ringing TX doorbell - net: ionic: map SKB after pseudo-header checksum prep - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv4: allow directed broadcast routes to use dst hint - net: ipv6: fix field-spanning memcpy warning in AH output - net: ipv6: ioam6: use consistent dst names - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - netlink: specs: mptcp: add missing 'server-side' attr - netlink: specs: mptcp: clearly mention attributes - netlink: specs: mptcp: fix if-idx attribute type - netlink: specs: mptcp: replace underscores with dashes in names - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: mana: Change the function signature of mana_get_primary_netdev_rcu - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv - net/mlx5e: Fix crash on profile change rollback failure - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5: Fix IPsec cleanup over MPV device - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: Fix vhca_id access call trace use before alloc - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: HWS, change error flow on matcher disconnect - net/mlx5: Initialize events outside devlink lock - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netdevsim: fix inconsistent carrier state after link/unlink - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: add phy_interface_copy() - net: phy: add phy_interface_weight() - net: phy: adin1100: Fix software power-down ready condition - net: phy: aquantia: check for NVMEM deferral - net: phy: clear link parameters on admin link down - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: micrel: always set shared->phydev for LAN8814 - net: phy: micrel: fix clk warning when removing the driver - net: phy: micrel: Fix lan8814_config_init - net: phy: micrel: Introduce lanphy_modify_page_reg - net: phy: micrel: lan8814 fix reset of the QSGMII interface - net: phy: micrel: Replace hardcoded pages with defines - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net: sched: generalize check for no-queue qdisc on TX queue - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick - net: sfp: add quirk for FLYPRO copper SFP+ module - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: convert sfp quirks to modify struct sfp_module_support - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sfp: pre-parse the module support - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix general protection fault in __smc_diag_dump - net/smc: fix mismatch between CLC header and proposal - net/smc: fix warning in smc_rx_splice() when calling get_page() - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: est: Drop frames causing HLBS error - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR - net: ti: icssg-prueth: Fix fdb hash size configuration - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: Change async resync helpers argument - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: tun: Update napi->skb after XDP process - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: r8152: fix resume reset deadlock - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: use dst_dev_rcu() in sk_setup_caps() - net: vlan: sync VLAN features with lower device - net: wan: framer: pef2256: Switch to devm_mfd_add_devices() - net: wangxun: limit tx_max_coalesced_frames_irq - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: mhi: Keep modem name match with Foxconn T99W640 - net: wwan: t7xx: add support for HP DRMR-H01 - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Apply delay_retrans to async operations - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes - NFSD/blocklayout: Fix minlength check in proc_layoutget - nfsd: check that server is running in unlock_filesystem - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't use sv_nrthreads in connection limiting calculations. - nfsd: Drop dprintk in blocklayout xdr functions - nfsd: Drop the client reference in client_states_open() - nfsd: fix access checking for NLM under XPRTSEC policies - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - nfsd: fix __fh_verify for localio - NFSD: Fix last write offset handling in layoutcommit - nfsd: fix memory leak in nfsd_create_serv error paths - nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT - NFSD: Fix permission check for read access to executable-only files - nfsd: fix refcount leak in nfsd_set_fh_dentry() - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - NFSD: Implement large extent array support in pNFS - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: net ref data still needs to be freed even if net hasn't startup - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - nfsd: refine and rename NFSD_MAY_LOCK - NFSD: Remove NFSERR_EAGAIN - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() - NFSD: Rework encoding and decoding of nfsd4_deviceid - NFSD: Skip close replay processing if XDR encoding fails - nfsd: unregister with rpcbind when deleting a transport - nfsd: update percpu_ref to manage references on nfsd_net - nfsd: Use correct error code when decoding extents - nfsd: use correct loop termination in nfsd4_revoke_states() - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: Fix a deadlock involving nfs_release_folio() - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix LTP test failures when timestamps are delegated - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - nfs/localio: add direct IO enablement with sync and async IO support - nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter - nfs/localio: restore creds before releasing pageio data - NFS: nfs_invalidate_folio() must observe the offset and size arguments - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nfs/vfs: discard d_exact_alias() - nilfs2: avoid having an active sc_timer before freeing sci - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme: fix PI insert on write - nvmem: layouts: fix automatic module loading - nvmem: layouts: fix nvmem_layout_bus_uevent - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: skip nvme_write_sq_db on empty rqlist - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvme/tcp: handle tls partially sent records in write_space() - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type - objtool/LoongArch: Mark types based on break immediate code - objtool/rust: add one more `noreturn` Rust function - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeon_ep: fix VF MAC address lifecycle handling - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - openrisc: Add R_OR1K_32_PCREL relocation type module support - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches - parisc: Avoid crash due to unaligned access in unwinder - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: brcmstb: Reuse pcie_cfg_data structure - PCI: brcmstb: Set MLW based on "num-lanes" DT property if present - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Ensure error recoverability at all times - PCI/ERR: Fix uevent on failure to recover - PCI/ERR: Update device error_state already after reset - PCI: imx6: Enable the Vaux supply if available - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Fix incorrect error message in probe() - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion - PCI: rcar-gen4: Assure reset occurs before DBI access - PCI: rcar-gen4: Fix inverted break condition in PHY initialization - PCI: rcar-gen4: Fix PHY initialization - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - PCI: Test for bit underflow in pcie_set_readrq() - PCI: xilinx-nwl: Fix ECAM programming - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf annotate: Check return value of evsel__get_arch() properly - perf/arm-cmn: Fix CMN S3 DTM offset - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf/core: Fix address filter match with backing files - perf/core: Fix MMAP2 event device with backing files - perf/core: Fix MMAP event path names with backing files - perf disasm: Avoid undefined behavior in incrementing NULL - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf hist: In init, ensure mem_info is put on error paths - perf lock contention: Load kernel map before lookup - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: Remove get_perf_callchain() init_nr argument - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Simplify get_perf_callchain() user logic - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test shell lbr: Avoid failures with perf event paranoia - perf test stat: Avoid hybrid assumption when virtualized - perf test trace_btf_enum: Skip if permissions are insufficient - perf test: Update sysfs path for core PMU caps - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf tools: Mark split kallsyms DSOs as loaded - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel/cstate: Remove PC3 support from LunarLake - perf/x86/intel: Do not enable BTS for guests - perf/x86/intel: Fix crash in icl_update_topdown_event() - perf/x86/intel: Fix KASAN global-out-of-bounds warning - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: freescale: Initialize priv->lock - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits - phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors - phy: ti: gmii-sel: fix regmap leak on probe failure - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: realtek: Select REGMAP_MMIO for RTD driver - pinctrl: renesas: rzg2l: Fix invalid unsigned return in rzg3s_oen_read() - pinctrl: renesas: rzg2l: Fix ISEL restore on resume - pinctrl: renesas: rzg2l: Fix PMC restore - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86/amd/pmf: Support new ACPI ID AMDI0108 - platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13 - platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86/intel/tpmi/plr: Make the file domain/status writeable - platform/x86/intel-uncore-freq: Fix warning in partitioned system - platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: msi-wmi-platform: Fix typo in WMI GUID - platform/x86: msi-wmi-platform: Only load on MSI devices - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - PM / devfreq: rockchip-dfi: double count on RK3588 - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - PM: EM: Drop unused parameter from em_adjust_new_capacity() - PM: EM: Fix incorrect description of the cost field in struct em_perf_state - PM: EM: Fix late boot with holes in CPU topology - PM: EM: Move CPU capacity check to em_adjust_new_capacity() - PM: EM: Slightly reduce em_check_capacity_update() overhead - PM: hibernate: Emit an error when image writing fails - PM: hibernate: Use atomic64_t for compressed_size variable - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() - pNFS: Fix a deadlock when returning a delegation during open() - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/603: Really copy kernel PGD entries into all PGDIRs - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/8xx: Remove left-over instruction and comments in DataStoreTLBMiss handler - powerpc/addnote: Fix overflow on 32-bit builds - powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kdump: Fix size calculation for hot-removed memory ranges - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max17040: Check iio_read_channel_processed() return code - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt5033_charger: Fix device node reference leaks - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix the issue of proc_mem_open returning NULL - proc: fix type confusion in pde_set_flags() - procfs: avoid fetching build ID while holding VMA lock - proc: proc_maps_open allow proc_mem_open to return NULL - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add a upper bound on max_vclocks - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: Limit time setting of PTP clocks - ptp: ocp: Fix typo using index 1 instead of i in SMA initialization loop - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: pca9685: Use bulk write to atomicially update registers - pwm: stm32: Always program polarity - pwm: tiehrpwm: Don't drop runtime PM reference in .free() - pwm: tiehrpwm: Fix corner case in clock divisor calculation - pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation - pwm: tiehrpwm: Make code comment in .free() more useful - qed: Don't collect too many protection override GRC elements - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - RAS: Report all ARM processor CPER information to userspace - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Pass correct flag for dma mr creation - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix recv CQ and QP cache affinity - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/irdma: Update Kconfig - RDMA/mana_ib: Handle net event for pointing to the current netdev - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: fixed: Rely on the core freeing the enable GPIO - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/amd/display: Fix pbn to kbps Conversion" - Revert "drm/amd/display: Move setup_stream_attribute" - Revert "drm/amd/display: Optimize cursor position updates" - Revert "drm/amd: Skip power ungate during suspend for VPE" - Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "netfilter: nf_tables: Reintroduce shortened deletion notifications" - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "RDMA/irdma: Update Kconfig" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "udmabuf: fix vmap_udmabuf error page set" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "wireguard: device: enable threaded NAPI" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - riscv, bpf: Sign extend struct ops return values properly - riscv: Build loader.bin exclusively for Canaan K210 - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: pgtable: Cleanup useless VA_USER_XXX definitions - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Sanitize syscall table indexing under speculation - riscv: stacktrace: Disable KASAN checks for non-current tasks - rocker: fix memory leak in rocker_world_port_post_fini() - romfs: check sb_set_blocksize() return value - rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: Add -fno-isolate-erroneous-paths-dereference to bindgen_skip_c_flags - rust: block: fix `srctree/` links - rust: cfi: only 64-bit arm and x86 support CFI_CLANG - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0 - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects - rust: kbuild: workaround `rustdoc` doctests modifier bug - rust: rbtree: fix documentation typo in CursorMut peek_next method - rxrpc: Fix data-race warning and potential load/store tearing - s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/ap: Fix wrong APQN fill calculation - s390/bpf: Centralize frame offset calculations - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/ctcm: Fix double-kfree - s390/dasd: enforce dma_alignment to ensure proper buffer validation - s390/dasd: Fix gendisk parent after copy pair swap - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix memory leak in add_marker() when kvrealloc() fails - s390/mm: Fix __ptep_rdp() inline assembly - s390/mm: Use __GFP_ACCOUNT for user page table allocations - s390/pai: Deny all events not handled by this PMU - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - s390/vmlinux.lds.S: Move .vmlinux.info to end of allocatable sections - s390: vmlinux.lds.S: Reorder sections - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/deadline: Document dl_server - sched/deadline: Fix race in push_dl_task() - sched/deadline: Fix 'stuck' dl_server - sched/deadline: only set free_cpus for online runqueues - sched/eevdf: Fix min_vruntime vs avg_vruntime - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Fix possible deadlock in the deferred_irq_workfn() - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Make qmap dump operation non-destructive - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched/fair: Block delayed tasks on throttled hierarchy during dequeue - sched/fair: Fix pelt clock sync when entering idle - sched/fair: Fix pelt lost idle time detection - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts/faddr2line: Fix "Argument list too long" error - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scripts: generate_rust_analyzer: compile sysroot with correct edition - scripts: generate_rust_analyzer: remove sysroot assertion - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: imm: Fix use-after-free bug caused by unfinished delayed work - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpi3mr: Fix I/O failures during controller reset - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: scsi_debug: Fix atomic write enable module param description - scsi: sd: Fix build warning in sd_revalidate_disk() - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Add support for Hurray Data new controller PCI device - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on suspend - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Correct system PM flow - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: host: mediatek: Fix PWM mode switch issue - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition - scsi: ufs: host: mediatek: Fix unbalanced IRQ enable issue - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - seccomp: passthrough uprobe systemcall without filtering - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Fix flaky bpf_cookie selftest - selftests/bpf: Fix selftest verifier_arena_large failure - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Test invalid narrower ctx load - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: drv-net: rss_ctx: fix the queue count check - selftests: drv-net: rss_ctx: make the test pass with few queues - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt - selftests/ftrace: traceonoff_triggers: strip off names - selftests/landlock: Fix TCP bind(AF_UNSPEC) test case - selftests/landlock: Properly close a file descriptor - selftests/landlock: Remove invalid unix socket bind() - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: allow more time to send ADD_ADDR - selftests: mptcp: join: endpoints: longer timeout - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: userspace: longer timeout - selftests: mptcp: join: userspace: longer transfer - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel - selftests: netfilter: query conntrack state to check for port clash resolution - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: lib: Do not overwrite error messages - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: Replace sleep with slowwait - selftests: traceroute: Return correct value on failure - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: vDSO: Fix -Wunitialized in powerpc VDSO_CALL() wrapper - selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing vDSO - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: core: fix OF node leak - serial: core: Fix serial device initialization - serial: core: Restore sysfs fwnode information - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: remove useless enable of enhanced features - serial: sh-sci: Check that the DMA cookie is valid - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - serial: xilinx_uartps: fix rs485 delay_rts_after_send - serial: xilinx_uartps: Use helper function hrtimer_update_function() - sfc: fix NULL dereferences in ef100_process_design_param() - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix recovery on rename failures - shmem: fix tmpfs reconfiguration (remount) when noswap is set - simplify nfs_atomic_open_v23() - slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts - slab: Fix obj_ext mistakenly considered NULL due to race condition - slab: mark slab->obj_exts allocation failures unconditionally - slab: prevent warnings when slab obj_exts vector allocation fails - slab: reset slab->obj_ext when freeing and it is OBJEXTS_ALLOC_FAIL - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: always "instantiate" inode in smack_inode_init_security() - smack: deduplicate "does access rule request transmutation" - smack: deduplicate xattr setting in smack_inode_init_security() - smack: fix bug: invalid label of unix socket file - smack: fix bug: setting task label silently ignores input garbage - smack: fix bug: SMACK64TRANSMUTE set on non-directory - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix filename matching of deferred files - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smb: server: use disable_work_sync in transport_rdma.c - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: apple: mailbox: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure - soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure - soc: qcom: gsbi: fix double disable caused by devm - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: pbs: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc: samsung: exynos-pmu: fix device leak on regmap lookup - soc: Switch back to struct platform_driver::remove() - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - soc/tegra: fuse: Do not register SoC device on ACPI boot - soc: ti: pruss: don't use %pK through printk - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: airoha: add support of dual/quad wires spi modes to exec_op() handler - spi: airoha: do not keep {tx,rx} dma buffer always mapped - spi: airoha: fix reading/writing of flashes with more than one plane per lun - spi: airoha: return an error for continuous mode dirmap creation cases - spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND - spi: airoha: switch back to non-dma mode in the case of error - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Fix cqspi_setup_flash() - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Prevent lost complete() call during indirect read - spi: ch341: fix out-of-bounds memory access in ch341_transfer_one - spi: fix return code when spi device has too many chipselects - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-nxp-fspi: Add OCT-DTR mode support - spi: spi-nxp-fspi: Check return value of devm_mutex_init() - spi: spi-nxp-fspi: remove the goto in probe - spi: spi-sprd-adi: Fix double free in probe error path - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - statmount: don't call path_put() under namespace semaphore - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - svcrdma: use rc_pageoff for memcpy byte offset - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: cache RTAX_QUICKACK metric in a hot cache line - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: convert to dev_net_rcu() - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcp_metrics: use dst_dev_net_rcu() - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - tee: fix register_shm_helper() - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thermal: gov_step_wise: Allow cooling level to be reduced earlier - thermal: intel: selftests: workload_hint: Mask unsupported types - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power turbostat: fix GCC9 build regression - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools: riscv: Fixed misalignment of CSR related definitions - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: fix string attribute length to include null terminator - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm2-sessions: Fix out of range indexing in name_size - tpm2-sessions: Fix tpm2_read_public range checks - tpm: Cap the number of PCR banks - tpm: Compare HMAC values in constant time - tpm: Disable TPM2_TCG_HMAC by default - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - trace/fgraph: Fix error handling - tracefs: fix a leak in eventfs_create_events_dir() - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tty: serial: ip22zilog: Use platform device for probing - tty: serial: Modify the use of dev_err_probe() - tty/vt: Add missing return value for VT_RESIZE in vt_ioctl() - tty/vt: fix up incorrect backport to stable releases - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: fix deadlock when reading partition table - ublk: prevent invalid access with DEBUG - udmabuf: fix a buf size overflow issue during udmabuf creation - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Don't rename vmap to kernel_vmap - um: Fix FD copy size in os_rcv_fd_msg() - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - uprobes: uprobe_warn should use passed task - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() - usb: typec: tcpm: properly deliver cable vdms to altmode drivers - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: introduce macro for ring segment list iteration - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci-pci: add support for hosts with zero USB3 ports - usb: xhci-pci: Fix USB2-only root hub registration - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - usb: xhci: remove option to change a default ring's TRB cycle bit - vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues - vdpa/pds: use %pe for ERR_PTR() in event handler registration - vdso: Add struct __kernel_old_timeval forward declaration to gettime.h - veth: apply qdisc backpressure on full ptr_ring to reduce TX drops - veth: fix data race in veth_get_ethtool_stats - veth: more robust handing of race to avoid txq getting stuck - veth: prevent NULL pointer dereference in veth_xdp_rcv - veth: reduce XDP no_direct return section to fix race - vfio/pci: Disable qword access to the PCI ROM bar - vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices - vfio/pci: Use RCU for error/request triggers to avoid circular locking - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Fix kthread worker cgroup failure handling - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: Allocate nonlinear SKBs for handling large receive buffers - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix grammar in virtio_queue_info docs - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-fs: fix incorrect check for fsvq->kobj - virtio-net: drop the multi-buffer XDP packet in zerocopy - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - virtio: vdpa: Fix reference count leak in octep_sriov_enable() - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock: Make accept()ed sockets use custom setsockopt() - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: Allocate nonlinear SKBs for handling large transmit buffers - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: Coalesce only linear skb - vsock/virtio: Fix message iterator handling on transmit path - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - vsock/virtio: Move length check to callers of virtio_vsock_skb_rx_put() - vsock/virtio: Move SKB allocation lower-bound check to callers - vsock/virtio: Rename virtio_vsock_alloc_skb() - vsock/virtio: Rename virtio_vsock_skb_rx_put() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: Add missing include of export.h - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Avoid vdev delete timeout when firmware is already down - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath10k: move recovery check logic into a new work - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: add support for MU EDCA - wifi: ath11k: avoid bit operation on key flags - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: fix VHT MCS assignment - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: restore register window after global reset - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: correctly handle mcast packets for clients - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() - wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() - wifi: ath12k: fix wrong logging ID used for CE - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: add an hrtimer based delayed work item - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cfg80211: stop radar detection in cfg80211_leave() - wifi: cfg80211: use cfg80211_leave() in iftype change - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list - wifi: iwlwifi: Remove redundant header files - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: don't mark keys for inactive links as uploaded - wifi: mac80211: don't perform DA check on S1G beacon - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix key tailroom accounting leak - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: restore non-chanctx injection behaviour - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mac80211: Track NAN interface start/stop - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt76_eeprom_override to int - wifi: mt76: mt7915: fix mt7981 pre-calibration - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7925: add handler to hif suspend/resume event - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: rtw89: avoid possible TX wait initialization race - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() - wifi: rtw89: obtain RX path from ppdu status IE00 - wifi: rtw89: print just once for unknown C2H events - wifi: rtw89: renew a completion for each H2C command waiting C2H event - wifi: rtw89: wow: remove notify during WoWLAN net-detect - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Add SRSO_USER_KERNEL_NO support - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: KVM: Add support for SRSO_MSR_FIX - x86/bugs: Report correct retbleed mitigation status - x86/CPU/AMD: Add RDSEED fix for Zen5 - x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures - x86/fred: Remove ENDBR64 from FRED entry points - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/msi: Make irq_retrigger() functional for posted MSI - x86/mtrr: Rename mtrr_overwrite_state() to guest_force_mtrr_state() - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/resctrl: Refactor resctrl_arch_rmid_read() - x86/runtime-const: Add the RUNTIME_CONST_PTR assembly macro - x86: uaccess: don't use runtime-const rewriting in modules - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86: use cmov for user address masking - x86/vdso: Fix output operand size of RDPID - x86/vmware: Fix hypercall clobbers - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: drop SA reference in xfrm_state_update if dir doesn't match - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: set err and extack on failure to create pcpu SA - xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix a UAF problem in xattr repair - xfs: fix locking in xchk_nlinks_collect_dir - xfs: fix log CRC mismatches between i386 and other architectures - xfs: fix out of bounds memory read error in symlink repair - xfs: fix stupid compiler warning - xfs: Fix the return value of xfs_rtcopy_summary() - xfs: fix UAF in xchk_btree_check_block_owner - xfs: rename the old_crc variable in xlog_recover_process - xfs: Replace strncpy with memcpy - xfs: set max_agbno to allow sparse alloc of last full inode chunk - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xhci: fix stale flag preventig URBs after link state error is cleared - xsk: Harden userspace-supplied xdp_desc validation - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Bump release (build with LVC patches)- fix typo- Add LVC patches6.12.91-24.module.8814au6.12.91-246.12.91-245.8.5.18814au.ko/usr/lib/modules/6.12.91-desktop-24rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-all --param=ssp-buffer-size=4 -m64 -mtune=generic -fltohttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=a4027f51bdad7b52a0db33326986e64ef4513f76, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-8eaff8f5e184674f082bdebb159c34f5b43b007a1b22105b03c85d64c8149c9dfae47b5f1b6c40b756a518f12860e2a8119d9456b24761eb85e391225de1f1265?7zXZ 0!><] crv(vX0q(#v"g{g%0{F?? ?~`vyǤ ba\zalC"#);dIJ]%j80sÔZ_.S>-Eg(ISp!-|W#xER5Xb:*GI䞶 MR+rzǞ4(w nҥs8 uu1(Hy!FBVt7ԽLCt^#zL?nr򯃲Fs шP0_tr`4jOW~TdT)a?EqVP_U<`X>1l (Ht3hIOճ?؍Z6N!1LطC9xn]P4/ĚjݖfI(}> bk`WK2*`q̂{(($(B^0@m]i~'%$Q`n-m ^>/K4z~b5e@n-,[tLkӗP`[0R_AR9AٿzTN#*ܩ6imYʥ'3u#gaL|G!¨;4,ҴMnd>l|a%QJeVbyPcHy޲`W[h1P5?Ƀp0leX7n|K[ aGveh g"kF J^vM)Y2^@bS_ԏ9RJ7J;hRڳWˉQ[DŽWʥ@kʩn6Ai()RUBP`Ñ-LGi-ke7 MTlk%GF09d`#^cB ڗlrOqzrPScݨCvN*Y@Rmq­If[ Q*R`IК/EoC|9!=QA!>ud'3o 'tpW/좌CN -xrQlqK94c(.C&D+=}^a+P4܇VeKIL׃Q*L pR6ɃH$A @ (h_,.ID/bɇ)W׆hc]ފȿk_Ʋ)ҝoBS#vCk]Ogf}t{U#YjRI|x#fD a:XϪa2}дX7#|߹s$3|I?74G ifZ)^KYRi7:;|Nhla3n4{d]i&F$L8 @dX1 ot{-q&&Y4ˤ<]r03ެO0ؒZ7A]98͘ti*Z@1H'tMIV7F,sXއ,^)Rbc]8:Vx%]\ݙ"@M}g& ֣olNDqa2seCNƙQ'T嵝rW Cٛ T2bxje|I/ zbj}Dvk: bW>tKQ$\r1Is?qxPuc ;2cG&ņTBdlxNiW?g,~/@SM@q!^#ƍ i7E3|iAzr--P>AKjßW+}ܘZv;Dz;~~V2E5qG;!Ƕ -UkׅQ^9>ɼz3b]3OU{ )<w +qWb;u^BjYw[ب+U5-eId5戽(Cl@\G/PtU?PJ>CZ[AL(Le-78lϦC `L,{|QC!e7O"t} /Kp۠FfRSFz)cugGK\Z[`u-﹆^`T]8}ܷo)þSyvfzKD!;;6Y_Fg-v>MY!sO=V"JsWs#@##7LdtJ\TYLdkc?z40&?lڱ^9k2?inߢۏ=H˩OL2G21fřR盖ݴ{5g#%:$M$cJ<܋;KXxE:_'8mRZxI~\ Bg{^əIEQrK*R&d ;e:9fܑ s!Io7Vy|SzsZ08 <31>%>~6J[Z2HXԨ$!k,Ƭ ?LŽ/6uxra_MzFc\ I)fv>e#[o3Wv~t_\Q$߹#-N"+lRzٲt2b+8$'?仮8L?V+ԆĈpm]MYÄ s\vwk2 Lɨbr5@_Pl;0tJ1tey3N -*: ~<)֜4> ˘7p5@_q#~y,zxQ:+O2xg ?CO|1n"N%M;d.[*x1)4e^[& MU!~m! lZF{aB] <LHܭr1zby&%B6@;㴩Yߖ95ErLc8 '|4tM)7*= QjW(>ֆBvJ[ 7Nꎺbs]hv('YPeNQD5L]33\pBxQO|:*],sDž0{G`pٞ@pjJ5iVCվbD|43=82CA=5w:0|AՈdAەIV8cRy~국 Tv𚝩䮍TDƥAGyaW4B~k~,þ$ȋw1bŖ2;(Q0!*ӋZ"UjnʶꔂRq9r-2Jn,Ճ # K Uc/A!`_%cwotBI9d =LeZQ+6n j.a;`HFo,x6Cy8p҉Ue5O{j"\i oƞ| F >P i_"T IE7 #p*"%o>X%VKPJ pu3v),]ƧXV9rұ{qd-ĥ;¹ά$63*ˆz`.BĜXh ?(ʡwP)Z/7?=*G&^ƍGȢsHVML4G '|WwK{`YfP;|w rn~:yd$ )qWE_;ƕט#Xv]{1b!" 3mjP0h#Rk䳰uM'ixZQۘSzv(w)kdKvF  )K|oϰ:5a% D|3tEk!x|ĉ'*礱'7>O%+!FV ]AbVDm8c}tׅoQ3X P4pcޱ%ӛ"D󝤚%} s+P>3.2RLS|8$ ȣyVȹozU[ҌNA]8} aEA;Xl*LĤ_z3Ԍ {#͝lp}ܸ?g: C}I}uC@N%lcȣh;Drzau;?߾_M?#NJƍx?{u91Zdg>cɝNǷINTl;2j[C *ASR.ZU L^ ~nw7v[ 0T 런&£ZСۡ>$IM6-~WnjY=O'KMSL>&Fi1k2h_(ޛƃײB?|йQ?0ԚFP*揕xW#x/XZiƲ /OQ0`0b ¢,A9rCqQy/o2/0Rظ hz\P]ZHX)ϝLȐnr^#vSWMSFD o _kBxeV BWõL'"2jbL9;X/r1Z4#6gL]ʝ]pj:X9$WlZ.ڨș4z8HkGk"‹6J:AŶ_!ן+¨SeB##SwM{;/`/e% #3Džʱ[Xp]*~~WYv+m}z_) g!&!AxhlݿڄtA~igsW|$ǚ2%hMjd;z&0[8.&.+?> R0[i e}q 95q| u ^z[&yLv+Qrc .ҳ| )j =jLa;Ipj[~'_mD|=fܢmL_zq^AИ#`/LhH3F2'v{WU*'ہ9"5 )c}bZ",5ePNO RnZ` e,KUOQ{fp] aDGڄ]S8m/椩M&,`[|7!`C.AЍ6"71_O ˜@-bi"N옦8m;{s_-pj6jp:Xh̏] tϹv뵍?o#}3j/ZqL\8hi"<Ƃ[?r3O"RUDjl4z6;GFweY|1 gka G?wI^XJlꬁ_%yKx+cl[dS*TG,"@BNZe@-0fTSN#F*J:HD#ދtt2oxiBNd( -eCy( ]|`DZf嵞4aDm4F_oN7e2Zn;tk`J CL ?W=RH'pxWQ-?1h[)yGMd<{臉MAR@OO^ Wt;o[PXWߊLz =/-Bo,O+V\[aX̔kM{F5l|a5_?42%Rяd+iPUk2O5t{2yRu/ZLŒ5K<䡭/'. iY!6̘jf?5c'5 ?$_4b17~cw+&V*e8>IJ(%c~|ZN[XyNp,FU(Y_,+cFGOxQ;2nӼBg x`p$B%C􃄛!؎=1ͥvs[l_@zbj":qFa( ͦF<0؍ 1o$h&^M838tE{|5ʓ}xv#[K٪Djtu4:B@Z CmUmݦoB_V6Kll="}Co6N; M,EpS#1N‡ڒ*-|.EFGm ycQm*im?XGΌ|&o ̥KZx wE .U}yiVZQevP."Pl 6*!e:nX-5J(Bn0"CIt(p #djϬ20Cٝ̓h,sI—2rh&3&2bغ|Js,K&^ + xj%.1V]wO 7rt̪*T{HnG yJ: 4s`99NAw1ltq: f|oû2Dd5 JW~)'K\0Mph`X@t6h?zEӭS>%,()_K'41k vn୏WB ~;o8+l攴aO#%5{`(:o ф: p?!Hw꤮DSwY7ΫH:,Ⱦ> Lʉ[Sbd~ 2}1umq-kjy@L8M.HZIIw| ]0xajeKEH!R.m1 G:NU(?ٻLx}TSGȔw F>=}] u,rJ[.θ9\}$L ֯(H)1Uķ۶BÿLȝ9Bׁyd{QE UCw*\D{J6loOWl<(\DfU?OHz4`h)@Qʼ NS7~/,Qڼt^2LoU/iĽI=Fz'><%}4qj%~OTts-G 2P>˖,{z78RVzR!#A:AmqjƠdOS;捡~sԚeA _wأIˢ]V 6ɣUv%1ҐՐڨN.ǴLF+ &˅d)4â`VF0wBQ ݬxK~ kPm6nM˟:`z#2G+HH9q.9)q%'ܫ=} #}I7I˳4ĜPit%}F/$J<9WLt? ']K0l4TT]pqb/T%!o)%)\>cԖKm 4IsX?J]^NF>m&B>c::)@ [hV5ØR7(bʑ%K%R(9syy&fm`;aᰉ*__?]=Oj/0_>Е҄šԼ|>9Rm&%b|Bgg*HrfSܙđd˔3 Q $ʗIETi"-\b5DLgÇkѭd[$ǢO GF;h7P8gmѦG6}Yb]0>e[ AR?d_Rj`~}M.ۓa]2/E,w,YjP:3fƻ8@3C f2 O"څ[2mMƲ؏@POVl.tG=B؃Y!> IlOEQ#jUi0U-RnoScpu#um~`af|Wъe([gD+leoޚrzMOmQ6:' -cIo/Pv>mb =BI@- ؉jZcӌ F¥#̿0n7T懈N+nY o} $WYR ^A:k$?{7̤YA@SxM~eXrhkF0<^Ս9w'O i4,AV4|.N`y# 1stNH|jN^E{IM\@OR#C7@5dŦ̏q*-o/~oJ5c`)4k|9Z9Pp$t VD;/]yyq%O3R6bp xŁ0Qھ tfDȍd ^X)lg! bsͧ.X֔xzu>߯bj82UlOB֧#\9yCFeL|4ZzuS9Sw%f>PDeYH }DV@UKqacD{,@q2;fU<͑ 2' N`kDͯφ{IzcXW;V uȟe+a_]pi*IB W1-L;2./R'.^YTA(d&&fܜh%G=H1Ԥ1j$X8gZ{=G~W$wNcRA$w֤4g 1'pHهD^MuG1Yk/y eYqKֽ¢ΆP=fb7~0SPrk(}~~0c,ƖkZL!'W pj]jIep k* asg(Ʉ=Ԉ>_/~=[lM& RwHCRc@?栎u*,;lI}@v 4,{x:MlLtg\g*s;1Y!`Ͻ(qW<֏F*+OHKX)[[jWoF-_uTѷoZVs?j?Bޯ9DHpɥ$)0cvJvnNXDQu 5_z%tݡ{TRe NdAƙ#%KH Y0Qg=&fԖf.{l9R+? L%輺4H'}P(WRo64`ҋ_0+OHS6 Z lxgӃ7Sv€a➬72Nj^oɀɸU5AK /E]A!>lKtΣzq=v}#K۞< yO]3͇'SfRXtC  ėn|F dg^sķDs8"[CIxm "抰ޱQm4rV~MDZD ˤ36.g޽A0x>G~zF>(U+;kҫsH5X\^Z<$jl;3*w_jhkOEa4OV`Kpc,3s)) :G$fY$LzB 5sËZJf,/<ΜO4\vg*87K[$vhB:Lfتѕg}f`ͻ6[!SX&%ٍ{J]lV?p%זncc-^0Z$ΧЍ!~K\r<+z gt^ԙkQ: |;0M_kbsr ZY|RBVV[o4pȋ,ݫ `UXCoeN \)"fBY6?袢$^C)v>/[Ι!&-Qָv-"Lz(hL\ꦛ+]4|ԪT/S7֣ƍ #>%h8^W'Orіg(ecU_pY:OؙL?pg;!Fe{)H=\"g>ڻ*˭ 7+pFynX$hPD;7^] N~@f$;/H>6BOhe-*i6GsK0=t2I7/5imG%q+;G&9&[3e0˲]Z_ _[ۮXj,w (A$L㲠J).e@-`%i.%(=f X'2.] tL=ƥU Cm/7U^d"}?7}v3`6XXPNo:GybfaoSu*OƭFhPׁg 밧(C?ŒGH6<<\#PP F,Y3{*c8\81f4H+:#30Ѕ{p-ݫ`{;U 9 QA1-\ u~* ,iX\Z .񓃺?LAR<*a rR\*Z@{XpJ>0~kMG38uV8 S^u;+:{rkE X>1 ݲiHj `A YRYِU3d٬VGժ5ω :w$')tΚP!;yst8򽏖v ׊4#LHW9'Ybdk5gqG [+hnͨX*Ü3T|Nt0;ftKMIw " ր?U.";(y堨TkHgkIŋhKrkXie(EY|Cf82-'ZC`k%@nc^9nbLjqfYȃSRiiS%8?-ﵩ"_$S@+#!}%":*9R b]QiZe_4o!snlm;[RWmPݱ(]gI6C3z"a4lfe։"$B>d Od%Ë+HwLpH+_%JA<+7 i(\M{J3!ecn8ߝ gо}_lYuX{[ 'ps[JƱŌ?6Oypdabw /LNVN}PN)Bn{9U]xty3Kj7 S.,2:d(/K [cysA$XW I"G{}=:G-?0+JUJ& 6H)Xfq;Xu7i `'s0[Ymk&)mKOZsRtc,OpzNtb YkQѩǠy}k28.Eo\")a\9՞'ɋ~I M 2SFʈ 93.%VDs $ԃZEaf`gCGRf|Sb6we:HUCT2-l,e1c)9Ԋ+VC1#X]MN~_vD0?/U~Ӳ/nw먈荪;Qfnou6L:JGM&ˈģc2Ѣ`GF KQͩ (·q0l'cՂm=/5'80q=k Y:M>Lޣ9к@f{I:bfӑ׵#$D;.ϦYyfZXajOi ]r6M4v[*AL?y'BPNt%ˑX m{ƈRmA4ao(@z/ٿǶ%]w5!NN76kv4l#tDKdBX E'H"GǞ>l.k lo}  gJ?nD?oreYN&ZcD,⪀񍦞-n5kU7dylBa1z1iۆ_!b  T \`M|c5Y@G'=d.ՕX<.91 -{)صṗstO˵4lPa઀q6+o!PhNCR`9Ss#pv-NƋS$qCej}#umvzLd8ת*ymdd)6X5!F {VzplPWUStt/M\5Y='!2*NHcǔ=agl6FA]cd>̦]$JU4Ã.(RY$ĞB13j5S6&~~O6ZdȯF&ɭ &T681Kw\E:PIv+>?MБs>7ר{n? nI>%nZ FԈ9cwz\Q]ê)pٟ8Kԯ׶?!9wN}ӕZI TUmcI|v]HՅ0Nɑ{gʯ;^X" [+(y/h0ޫmÍ8g{[IYuW u=mI=8싌"nKkN.9fqNZRYmp; (a22 [QBRw\¥I "Y6mXn̙]nD4~Y\FK~t5=EXvκ u /\_o~& dqxT8w/wa0+7%J2 qpf>@6H/s(R^m\N(Bs.xbS(%%i.BLD8Xҝ; 8|77gV\O܍͛aYBѻH.D|msTJQ$z6}3TjF2ndih\W Ҍ<^%M=:'Ӏc`\3I$/~,BG 頼Xgbm۩cSxJmqϬT$XPA[(bܼj;Rd#GE <*w%[M5~Ҋux%PP? I-g5MS-$!EKD/A AZ'&Q8jI =4Im 7fyR[l{&Q^;vhkU"Vs6̔2@n0 V;R[0\<yܘqCCݷ96V3"8X9+i UvhJ Ͷ߈'JbN]1SvXc:Ig/HDq ?Me5~\޲ pP< Yav\(_PՋy w5eNk_d-\v'D@rS2S~۝a(:$ fXh}]l:Nى^ ڧ?:$ 9#5EamX"9m&ЧX22Bm!GxYRḢpL=je9҄įz!}(_X};_A+pj&"HIl8nPR40lQ/u 벮wXF{{WDVdĤ؎^R/E--19)w';M#@O&K9.4q׭ghP5o+óq 3ogl{G& # +4sH7 ۲~zIkE+SFDEqvq̱iћ~e!KRU|$TYy[ ɁsEnkǛݷl2{{nJJ4lXZ}7V(3pig [[V =U#g [q hFtX;UVhg0c4 ވJ_XT)#jux5D0?ijEyd(:JB te^#!,pGҥcoY2zT%Y 낆xc17R˖rRdR H@Hq5K>RNeOaLj0t}3$% !j7g yŅUdpOdlS%pX7ղ06e&hGӴjBz?b xۭIJJʨVtlڥ냡e*tyh=9|;uIhshWn aՇh IJ_[K8m|W*h$65-ʁ!Hܢ"#jYd)R-fbsksW|.P4`9yTx+?K^K+U Rj~>\I߈6b\xGϳC<)X UU278m[IKVT &x ?f~K枩ɿ(֩W@֊yNں6bPlHrՁE!(^u'] GMWbkpblG&[6m*ur7Y4-֎Q1Ok~X`dC>6:Ł۩@mB{ƇnҸ:72=i-7mkQ H&CPm\<[% h/=$rhM~}ҥLʘ?E6֣y諾RSD=#nymz+|Edx!2x ꓆{u#-BVrG~S ,lZ$ 4u!;$>,U75V;/x9MO=hM CQ3#-(tnK)ߌQ@(Fc T$E)#BԭkDŅp`{JVQ Ih+v1$Ba?E3Xq1}Hͨw U,ͭGG1ؠ-0g)Bb?nʿiOA #bi۠]ܭqk4V9Q T }2 :[ꓩ,on͋(S9BǏTKxiPk-d/@gZ9K2̚?8aB,J`ʚ/hOLڠfkn%Zr(&%߅ѢO0>&&^g:wt;=mr7L~ Y*7za49E j'+ZwhD }mmDbb`#LlTЕؑ|-u@YNOv^͔ӬxRxA:Ubϐ稏b*(N~EE7Z]O =EL$}M6-MXcz{!l[{L¤׿DdZ@ aţf̛/?j-[{m5"\6XTm<|h2c C;%NqjM#U=l=d!eOU:ehVgfPL"fAAՊd7*m7Wa&Ee20eZz+_ε䘎魚mw SgM-$xFQ?b`f_h΂QBn 32lE)Tԩ}ԥ*q[T!3⒡XϟfJ!m_y8AA-} `-]W2-+<(!+ 쎌^l1؉.Uq@űM()'+<"+9<4Lml7L6``Ц:ʳ{.?Ť__BZri{)U#lLm[`8 LT V,D5v/]xkS9 yҦK4 !/=BUˆzo@tFߊ?)%'؄CIѧ<0!H"1@TB$d';ĕ}b:3& 9t;[Wܟ:|1.*1I#̀xT/7$ll(>Yac\S-@8R6_bۜ}WS}cB~nsg8}C9@\2ewn^M/mk{/0 [*F TڛNfsN‹ؘ3sbxTtpZ_]':)q7^.'ṗZ5,]EAf5'upA~>Xlbg&M 2M4+"2rW1嶨:h)]"[@>\(En;$u4J1((y^tfF XDE3=9k|Qjw?ofLQOA,7"G֑:C,Aǁ=_Ӵ:oom{.Ā$uĴrRE5cJ˝@f耟D`Z7IF f_4=ЅBv.\Akˀ)rg"I !ZOg]w٣~ FQDrKR ~7\Q~x4 ҵ?njXu̲bh+2&ioCʢ؃ik<°>Z PҒ=WI(b)9hP嘾^S3/h 9֒B4M[p 3ʀkay? Mt} ʖU %LD<-P.3jj~ ^@:5TKђ}'?t]ࢀS^tc*ok!Bt޷3ݗ85wb$K#dЂKN8u@΂} *?\ܝa:Uѻn<Ȭ*W .N͎(Ns,]{۲d<뷽вBw͜>ڑ^N< \hP|SeDwXlQ )sDJg?tU仩 < [^>gs I{ !x$ήy?9𤐏2j t 醅.x4;dkJN:)s*ar H#⭟)}0Cةu'Rˏ%=5@ A.H}3mq`S~~$ F#!{D5!ٟ" \ fS >XL@;~C !@]ONbR[Z A}1;+!{q'P{'!_bZ4r"| 1)w).kIɄI`Vtu8(Qg:_ Г[gCK]|^$9͚eJ.T\gr܎Rʬޥ/zNl```Q4=7A*fLt}GU$@ M gf7yW'$'N $Cs6EB.[/XH9n7ԇoCy}PX0|԰OKX Ha-ꤼKwO$4m'wL %;Vj*4jSKD3Q1{)ySD}[æv })5 جy`7USxi-H!C 3KL;K=)!;NQw9*t$j,JMdR+R]ҝ4)rfI'$c\) F98 _/c0sxm˼ E0M^}ǥ`fIɀ{H]R@q`S6USqe lt/K&Jsubh c^%C Wغ.] .1 =)<*y{x+[yρ^Y"&"x4Y G 'T&V,Ь˝߬?^4 elhUqQ4-[l%Ҹ'(1oD|dU%riq[LD%R/G}*\,RL ],!1|wI^^D3rGE %%I:Ԓ="o 3$I#q-Bl~M(aVa5P)b_I1*oE93e7%Hh0j?CFBV[+"HNr`_7>S_ұ.~fKqOAqZ5F'U݅b HZBDOCgL㥙+4iS99wsX[:~pzbeGa$L~CGAVF Nj6=aRj=^2 0k+7]]1$Ι.5U9ƒ&{j,+"}T$w(.' 5^jꏛP3]%V/.۵M=[ty =T8Y6֬vKs3sZϏr 6wPAۨ%?F “]jŻC1@Fw‚ĂBbǮU?zo"DŘܐ꜍zrO<]a'xW۹*0 s0-IS+<ˑA y>U>攅l/!~)Cq' {DZn2 ưKxR]_ ˎ@@mʼ(?!>,{3҅&!S X `cfKxkсY[3u=)dېH=C^=z8,)}m!`$>vt#dJ=ڲܮvG3%g\(ɎSyF95J!6"'iRpr k&4 {*zpi|UO4UOf?y/ azʃbM"pN~;-p%Sh'J\|} *W$&ݮ!Ӳ!Kѡؾ]OAe<qWHc<kBԙ83 )-~QmSF=%bbfæJ~tÜ5Ξ|8ySW8n? 1̥ŎpY#}D0kjyn95'mHBk,,֌ɱE!6jM a: tӱf;z﹁ߎoFX.$[u\7%?q< ~"!1cRqF7Ki n58X$_DbI^ԪpCzj4qPY<߸'Y}zTP\ M}Tޣ'F.S(Kj [x0<*6 C]ל[Q7ԩ0*9@,S*~3a_;ls3{ !/J Mۗ夶a_g߲tTkJ lq3(TOBJt:ٔD0+xyG;;Jas*S) pA ߪ(Gi/!fOo'>ᆺ%:7dVop"W1 8lyD%5.(RYuB9elJI0Bi?9/- iAtaO,oˌ!SUk ]󙘝C<^DOŽ`wmYJ Tz:>HH<>ah,9yt3m}!pыw@TVHF2I+$/SQc^8ǐ ѭf3pV&4?ď.zeorJyJ,~ԎlB>g#?{)ft&r ^ ŵ+hxiqM1<ܣ%)٣}*&v* bh~+oUE A >X:v Ҏut<`C1nas,}cT*`n>Wt!mmr1S)LVA1OPn:.DKX0r5ӝ'Vܒ^ĦKz&H=ń!'$КxUڮP1K/0pҸ>HT5{lAyGO h^Fs'"0Inb}[bb$CZin5zӍaa$=)<:%28 T)?v6l[D[ؓB*B>KR/ ?!je}7 TUjD/ɷ;پ,jK^&f4@.a{jyL9^"LL !eqK-LƨqޤD `H j).Y P֓\(628:^4qL#53w2R_ku<" K̑fj}ܕ*-69!.!B;bbrb aD7Bbhs} 6^t^}~ CsLT15~cEbl=x1", o)^ MUT`r՟qh0vY K ҄7Jv5D=ϻtW (Zk-jj@$o5~V-Zg/Z Ԏvy'<>~YM'k:?ua\Q}{1;?Lw {ů2Ų^ ]nOK j ?dE*BE(ZIl11Fp(i}R5V땊=hx|3`$vK9UR6z9- ˫/s$D]ysU%.cvJE [|H}'FbR6Of&BIL{a8_U!#_>0RgZNsolzN2TPӈ 0C 8ܳ%MAie$0e4S4H[V_Z͜lbO >P2(r 1u`fRD>(v3qIh]jL$"؛*֟ADc]ym6ҙjr? ^n@J0׭f,@BX? }H3ݕW Z2xq[8'7CMM`#'{%8R^'1lX&]V~q~z`s"qO3FE}aV+H|hfT6ȐY-Rf&xЅ5P"梹Φ\smIss UOK< 3,N"$9ӟ `N<\ܷO?xܺzng6ﭠz @ $dP(^GMjqON-:Su@} Av(Ե('1(#BW SL.-w_Z d^.zvBNYu 'a];S=lbݣ,A?g$bVxvF4lFݙ8~Yc VuWVR{ؐɭ6ZA<\YmnGN<<;`'` H,h9ҟNk'-*`s~䳋Zz_ׯ^#I̽t EmSn-V͞# 8*e'V4qT=y]aD*e)(<|aw2D)b$e^}S=U݌ NbOs<[@I+a_Zf:)|^1LvR)ʱ^϶ v",GBA[rFѮ}"J\ Hv&xp/T3Tߞ`BHWa6;,a󉬊P9 O&|@q"N`̊!q^kJ;t%tr5:ҭ#xrVN7=y.)0uݑ]p ,o;D§ &"I=#ԾOyPn*]iNK9}y}g[C)CbPdyhXRQ#쵱OHt5 f Lm\<_LTi4H{B>k穽fOBE".ԶvP(fz}Ť܉.>[3G /x% P@4 >qwj5!, ?RAL!'/)΍w,>m?HI*E8+QǕ=AOYrof@8Eb +Zwwխ*h(>OI{ρH]?~_"Dt|};OKxqNp t!4k|( nAb?,yJn)OH3]S q wf_ ғe"4*{*[gJ֑&t |'$j jgZwMf15fdYkiMQvzVRK Djx9^+<6kA2!'=uQ09McS_Wp]e`Zt$'4o;SrN*qLSB聕z.dR|8w*yRTB#՝#h $vy4ò/El}PEÇuSS ԑkXH0W@z>]Pu:=^.Nlv"y+~9G)?t$,e{V&^$Pt)t$J'tȻ] \sLRx ]Y .~*t̓\A _ln:ʤ5 OĒk3)E;^? A(d#~9]S- $.UYc}ןpQW "R^KGbz.H,M^GV]s=}w ܒm6DI՘qU5@ޣ2 ]}㑴؁$M "hPv-2z߿g+w} =ʴs3f7"^t^}iODŗW ]r >*qjQULSk&GS#_Öh]]2;7PtxY̼q9[^P >,dl, <T'fJ l 9&Qh\}m&hG2~n+QPX\j…v#Rf6rKb9OPm, 6YdSnpZrl "!r~NIw[7s)VE6:^ufx5<>x4x^K6I9ƒ'3⤴Sv.;g;*,#{nOrFA>+0 <([$XCSL^R niY0{^ (?=Bd,b;߃-=MK0GqM eO3kxvCa8W}!{N 'y%<;E7EZNsF33z̳lxޘ[Ձ4AB/躪 2o{#T1aS[#f?eي*i;";$".g^5fwH` +gSV#yG^H|IdYSAބ5]FH(eG(lRdkK8q|Ra\y)7I Q5j\KNϽ˟`K l2{bGMP+9zֈtGbz1GrgټWwGݪzK]Bј!$tu'ye0A'02.Ɗ*5#ކBrv67O_s;p.9BSHBw**be=WӐ @;dx%u-! P$W2$I '`SJnY9@r &_]?SI33UM9-!fbS{6rP7` f`U/G/ѝ֞zK? 148;4`:SDX!GO[&6HVaQZR%u"{/<ԟ5aӛlI |!%9u2hq c3aslN49L\pv nkt%1V5}d7.(OE{_a;/CΒ4Tcbh ɇZU9Vm Durcns+!LOb@ۘ)u\s787@ ^`k1]j2fTRH1r1^G mcU:竚+}s]6Qvbd:&7kn8j ^cP?~ xe{9xse3ktP _ܨ; RFyS7DcJ,'\> Ox?^VPT^D|O#]i\]P&Cc0'f?X5S^qp`2#KrZ"43]1sة.8 Rd>S!ZǵӴD%TxEh{Ywj<yq|D*˩a-ԓx}c^< 8dӲqތD]Sp1 j/ k>OYǻL7\L%j^i`sSL4Zp#VkaUb 7#- J@&Zuhc^<6 9p2gװ5юwLC+7TٌeC7e`wREFH鹜U|h1KZ95ŷ P3NW_bdZQ7n̴/94,l7%=j|ކYG[zF@ke݃=S(i$l|-[KQȵ; Q}bAh9R}ぎG'uiynl2c:0uZּ#H=GKʀ"֌ȷ/բXgQ?;t =8;h]j"Eyڤne`#M6'Ұ4äAh&5a6%D"7#%f׎d,`TfBv|Y>cn7쑆rzJ`nj?Z07HlZXsdIhsQ%lj0qbOO]%ɋjE0:)\5%Q-DaQx\ Mrc5!-϶;AWIeػ*څ@D MYPN8۔mHz!߷.X#C<<770BDĸpc)_'LJ N1(FmڝUQ>hckq#lur1A'^1˵\L O;jScHQ<^'h7U~z""P$1\f60^"C. sS_]0S=lBI4 5[FDwſƉGWҰ\ֺ %GX$DM3GIrL :tLV#L6a/ {M5`POGufËBjyq>'-qߙ\ }C-w"K_~u]7~ ۞[\{ 8| 2u kAEF]h`C|sܭ*fX%Mxw esKqNekkl뙿6|J@IjSp}sTtԫ :\R~.e΂g7%M|"G~-&Q1_׆LbrrGx1=Z/N؍(a|SQCX;ݲ4t'K+qK52Ii|o Ade60 O4Ya/r}S"›=^Tv\6 wg~W}΂RI=K?8u~g{oc{>(Gv EX9kn(<]3Z@̲\1ޑEDАMޣcKrWE"gKqelO]hmƀs7X\<%PWhs":LK*֛`GϚo}/lKize & 9'L-bɐK-ڪC|F!sJ(5> (fbX*(re,jb+T 7K|tM7bx0۞>=ݕU7$a/Hf#ĺ{'fdBp8?T^YCaESΌ|f^7(fcY m ֿE$Ȋ˰!H86IV^qZNT19J/gZ2cG멭Q(>՞Ұ,Mi2m@& n/tļsRJ^O$5lNreax0%71!#)6Vhķ ^$ٷVZXN )7K 5=/N9^Z@ ֦%E 2kGe-\cSZז#Ϻ8{鄍l}Z GsBKiO[oqZ\>zWR&eom gV~ϸː> S^^r"Ӫ'ZO n5T>~(&oS"\0K|0@|mQ*cڐtZM |?~Qᤵ^Z=LFqfEZ/0Dro6|Np3H|U}5PxA zCZjty |%e:|M4'*uPoڲm@J8lA-+23U!+|ӳ@f㹡q/19uN 4dQ=HFHݷȼAuCQG&:X\"fH=췼(fwM-u+ci |̱X"k:yL1Y)ۜQmggw<yɫugqs\e&qWӵJqy@ں%2GYĕȖtd7m{;~(_V5P DPkC?*.٨(M'4HZʇwHniEyg~Oc3 ."Cq{0-E%".~wwDeݦPrybLj'ewM;%eyM&9Z[ `vZk]}ї|)%3@BU]S46Lz?Q]lyL\$:Lc?Jvcjذkxqʥ8cf5Ad>ALepCu*%m1_jOT7C54+[oM " ,yNޱ]BQHM {:%ϊ!2Gjbфdz?k=hh?O)otҽW(0s'FCa |"Ă$&ȸ=9ݎ]:XD/ŲENg[HDz.hs9 +zf~*8]r3WğWle%lu_qglT|RLZM14 łpQpך$Q)xXLR!C9 ~`61`βx78lUDםmf. Il-DPfuK7H|PDҡK?>c0*{Հ')nBT%1º6ޛau^e- 5w 1-0~Q\l\XW{0a *<(gsa1㚽GEvꤐxw*>ASf1%S (йkpik;'a*D58/킷[xΧ;N 61l6ϗ^rY?\6/.ޥ~$(*|!9닺c4fD^؛H ;s닷1<+`nWSb=۟PNe/%29pp$Bk ,)ӣ7؆\t&O )LI;xwhQɡ'o_%15<9wfAjF0G 7* DDV !Ka]Q=.r ,KN pT%p5KsCpvܤK|G'"zVynbq$ I fA9jѭ}T&ZQ7N4ƺvBng\V]F= A[`aP7{yBHǍx\j/lH;AjyW8"`% :崱䘖LMsAvN@KGO7ړDŽޗU#I+Ytt>;cކ|s{>s^-rl*i~RӋ&2'DK*@$DK6\/02d\k,AUxH2> p`{eyQn-Ǭ.[c"bH3ПiY\(Tl3tFN$A,|zm. &g}Id=5?0~"𭰒p2RA }}9kRܤXey7*c9pubE4nr*i'bޱ!`JX} 4 -TMBzn1,+;4ԪhJxĤ{)P*N9`ȏm*`2":zZov}&"isLd~JU2V t"|uN !o]NFT1K"('ʶxٸUDr!~6<r4`jzMC n`H.p@W'nm0NwNիøuS;Dw7(2!dK.%& ]sY~xω`O|$OC{ ++F# ٴZd}LOj%&oOC3b3RӀ& :uǚ}s::|\6I(v8Qd(xV}-Zac+w]H:g5lCTAN&G^95zf L$L fopd|Y :RHv*{ ڼ;)qcjjdD8D^o̅ڿe*?2)oXy΋Eq=@9G }; fY4hC>8?֗;돗8PIۼ}ݛ4o[o8sϼs)?"A;ɢ'"/5U!pSk='QQ*M!f;m-R4j0 K) ڸ|dFbek̻oz¼Fkϋ"'P]qҟ8VZܩMstkb;'DqnCΒo;c=k` Af~ C^/` ,G3r1▩q间&Gk 7ە'e,UN& ^mَ`e_Y+,L1Q =Q#%ZBaⴞxYO~Xjbt#lR& dX۩9s% O#%jO\]ŋ5TZcM/ ݕ쮀 roߕ$b/҂VulU8P].-Wk WIQcs4QwU8 eS6}4fǨ>8[wțccJۛqm&?7Rɗ^ Tktyn&ӯMYGam1+?Id`B#|H0|sAqeUR ǝڙIUH-0>!^xEp=Nf(#߬Vˤ*v/ͯ>օ_*}̈rVa(,"YMi_tp_-bEIaܫ?+uDn0'Z肓6{+\e3/8ÝNFE.ڙ+Y;5n#%]Dêy^[PgH6c2`/$Ts  V!)?«-x EnXݻSj\[VX 8̆(ydYl!ց3cxt˥s0gD9t"i1#eLY{q2-rY+W#u`Nil+ńb:*dZ@#T¼9A~%|5 x:oX#+>i/%Dl]uɌX ]F7CcsLNqJF_K]ӝ!S!- ڒHƨtRYn+Lr'[Q/o7s%Gfab%ñdJs5\#x=H޷>WRY}mVB^YV@2"F@5M{_TЦiq wO:rx+PJ36pEfM9 \g%X)zw%@L;z9ӆֱR&V8O/ Ԙ/_ 4y)8Q8ؤB^U"qmϫ QÐ1жzaprw|Y u #?`CjQy3iUo);?#͢h R. z#59iRѮq,!m}6aNގiqo\6@>6 _1vG%5,㐃ݎY8{8'{S͌LjpٯBHLrU %P̌mwT(<Ĝ*1pv.5x&!l\eeH+P`g 73@z`H} kywս/ Qg / nt:as 9On#ԞOYPܛKË{T*mf%3]}][Hfxd5xi﷚&%umkM#ۮ}g|7(i]n.OAfUZt"6m9J<1=v0sPZ@_8ʽm=\h޾ .SNKWpB N{DjPVo*Y}OG3z$cn y>wEr|c+GcpsXW1H4~*C88i`GO[mW#ݕrcunxWpMNQx^qO2J#=Ϗ*Hȟ; 4m 0Y^ӻ*fqeYw:B2'("Ű>\'E㏖ǿ=-)/)db3aHr^>͋;̏ %m"l -NCv C*g w2TRHEׇj͆0H䗌 ̓S )xH ]GZ_fAT|j-3bJ_jEL?u+Td V3 [^հ9 *GEm:,6c)n)OeJJ{1Ѩn#X`rs;VÛw1ʢ P_^z~5>"SHǮ LF=hO1{G6Ԙ1EUhygYe(rh .O[ D)uχ 3tgeu>G#JjOA3 $Y]jYRMGɵ;=$GC괢fg{CTԴTw5wJ34Mn}}ī Sa-L"ff}cć ۰5\:iH% H<׹5=B&eQ>3u+;PQ JhK,Vn~O]@#3#CΜT1d^R }EJ=KBi1V)7coSM0B9>;+}gq0$78 jhw4ȁ Nm*.%6 sVA_XlЕ\0AV3@X&!:T7UM>EG]cuZ @^Bi.͙f*c8wP..GϽlR{ ZK[b\E'{@&h ns7sHC`cG1b `+Jd-ˬMT3F If$剼3رjSfFjKNcawFe@ڰ6+r예"#/] 1Z2>$䆪9Fca52(tH ! =&?;[j\_Pf)y/.K1ڍC\m- 2`Wׅo:R `"#-5Сrz,oZw&7FqYFB22^,R%gtz|jպ:T怓!] nohZҭ$y (BEz߼qZޮw+<~[&OXTbLCR}Τ]=!bA{Oaӊz״l,ߎ+o_i*SOmʪ HMdlO4i ď֦0 (j&ںzT*!*lq2t]|Oш!0Gݧ,/C9& ٓ)t ?ʌra|lޜғ$&Y ǃ~C#^IvFȊ%WgM5JUA:|$.n4ӢnL"ː4oNJX iw? Rk+{y? ğnS(fԏibp$w-j<~JuO;t%eɷՌQzV%Ϊ AP.`׾MRgP =1iHZjS̘;R6OM}1Z<(;LǭE7_vdIw<ϳrf-:̻o[z'4-z*}ߺcR3̯IQA{$1W,Wtc]ݕE\T09 ۹歡GC$zu1}ۂegT ob0jcdtTo|?9o'0N2X| gm,vq)N&s*99K~Wr)!szh%:(YUDsBݑ1#h hP}ϜKSy.*y}^ %FA48P_]u: !I~^6d$F 1|JUcq3eLfC vA8q@-Q-uql.a qt MrIiJH զ2ӛ?2$ip e*Ī6TΠiXW"|`v,,vǮ&UP;5@D(VS/+&0Wܱmaj6d-IK0+?mLj\NͯRT-dFkK<˳q&‰\hhƯ2q: uy"y[9Eh\ NJyv5/\}*?ohZֲ$L?z{ sUsVm&l׷N}J9KM]An2㲥fMm+NDt<DlN}t ~YHR=3!=˛WT&ЗS[7sH.' K!( hu8 N{qJk_O$1.k[y% y]aesh@P<ӿLL*;(/P|Yt5Az\myCnMhCvn^xe+)i_`PZ-@U^1W03q)p@S \_0CUpZ0"dU0_ 뀩^1#]Idhn2%yeGSwVdSC >\Bk_`/Nd#r ms \b/N) [+D~iCXgi_T7 lRlx~D@Zђ L,5[~л1=ߔr]g\'?.2+L)0] ]&`OT>ε8lºK~-]xʹ{&W[˦TjJkʓDV?}Ɓ2Kk$f "jW}Mzo aZ1DJ H=wOH)ʵ^6?eV̋n=NgCjgRna.;+S'y$> IV#|Ne]daxqRq|Y}SS)<ΰh>؁ Z*,=іᇄ'h O33|YEj8)r.,&IHG+/ь!$sBu?"⹩UȉyN cH 7%xoЗx:xUTZ%?ÄtQD>jt< ]ᛆ̦|81)͖:r%[Y?HJs@.'@͛m@}̀TsU*,)ys~qՉ8C|ڵ~>r4pEg-{Ѕ,tm$-'rJ )~9c'9NWi=Jtech{/op4O؁5zAN̵7 pf >0P0Zgs&{߫3lIqCpf~"H_͉Fp4J[luڟCI.ypRh*RK>V13߽ { 3tYMM1G Q%Jgp@VVy'3Űtxl2uRA,bTкhTofG4MLt'of;L[KC<+& vj*֙Ъ\^ȂQלU5~99F; TFn睜BNUU|R JQnµPH+;ۘqn}14Ա a<6r4I:J l81U*KƐЀKϺJD)UI{b*U˿S:,p П=yM25bNȩsUowk$c5Mp$88$G:wQCuP$-74TQ \pSq]|ϙd/_7QWTQA] W?nev$!q.8 n^ȂԻf-$旹!@CʕޣQNF,׬]e; {uy|iLX&<0SOY1*P'PVt2瘧]a-=L˅VGH K iſ遄%fHJh΁8'WF .*)H̪4F>}^9w QF\ ECzyGy.LNAK@^FBv-OkE~6=/O²?2UmW`ksibW7zŷEXL/ߋ+bVLD_k C/Mng&5]YU?ܸbL&e0ܖN9i S} !l]lҫ\7jl>k{Ds4`uu;J5'fF(/KwHWu}}3Q` Vx#l])r:C8^tHkyBV3f)ّK11y[|(9Hӑ2̬ڸ!pB5q~ $X0 V5XygԜ q2JbgD1)(WY2@ӶNb`(IWZ#vXv9Ժp\o6 5^M={"hѶ87ԏ\D!Itk13U9DS8sy&!+/;-YKFEI6$ԆXbMZ‹%ß>PqFVskNee~p\~Nj6@c4Brc^a-D-`}pK'B}BasCF1; aCEn\g&u#3(txu{aָŌ`UQc޲AyxKIB6)M'ٚWf&~yZzIé/qj2~kfّWmdM=4T|MyHʴ|ϝIs08I|􀕼,Ցl(g.S;HC7 f7nQshJ ɛLK>Ys1:$M!tܫl(50,ɁFx#N$=sbw#M0عx|ɥvtM_ɫZ#Z6F%߻嫑4|q ڨሄ>C ESi+qGt>^LpHhv ԇXk11eI:Dz>n)[sGޱH q2 ق2. 52_+ Ck~I!nѳ$kwS (~J Uj8 燞 `#Nq~(3Dd^,{nJoH$,_L6iY͒1@B%&!FNT|@t劈n=zt5O;}]91}m rRI4_K豅,Gأ %~%wFCq6$oƯs^!>YxL ~^*U̧}L}"%WO|OU}{ +Wmogְ![KjI)C9irp?p>p#8w^0'YzJsM}Bq?<΢qP{ ?(]@Mܙ Shqbֹ8N'x#7I֛ JeJbzz:蟫HW(|]&,&闸I- UM`N# ArKeK(ZUBB3VՎHīvC d=z`TLW>Ԁ .UUR75!j`sZf]U$?ٲϨ9) \,a41ߪV*nO%iVХ J##ߡp,aZhXt $ dƊ,ȄLi \&|SaT_$XAb!FHyY||x6 Y<00bpƺ 5֚_ -Bpd8t]9$i Pe=A,LcQY5W)N*7{Q.vcrx/Q UY8:pۂLFhIA a0J53XTL6ޗP9tPQ.$c67{n#YqـbK[zx8޺+x!!g Y9A'Z%oj.OD" f< Y%\5D ݡwD$)rhbkrk 5o7'ʊU eꑫ>B##F9T!QOlp"A%.[" m BrK$GYM{A9]\T\30:VbXq=AK'/dC6 K9zXPk"%԰0X姗L(ւ4ɒ&e^T$Fu.CWȧ"[6+K}lg7_. j4FpW!C֜Z+*Y] bK+HÂ{#7Z5% UmbӘݸ=`RښH?tK~tWǛlTRb86Gw%*)4N.8o\f:>uh7Ջvյ$1"D޾Y+V1ԨCkI $*o驖66J+rV$L^Y"9P;W+!+CF~X͋f#?xDCŹ.1:tn/4X/(I PT;uk 5(8 {[%=y+`*|5<%Wa. dX$ԡ-va} @IJꂐ!2 G] mei `u"59ȬAppp=CPnkOQXјŵet?}Ĭ%O)-^mRnz?Z]ouOa`eRSKuW^ ,w۝ יIwHr"{ySeP۬*d)ۇG5[ wlkrt= 솆 S)!inv!_:h1U^2[O71IVgXڻ}jy&~FaZ/m)ȉ#/ıx)# (}% qYZeϫj|tz[ru cIuZfLU;?”()'ע`Yt "l}{6h!|,{3NLN_ˆU83{ {Ns4H榗! 䓊vb*G.<\ya%冞1 [OF7q1μr)'\N#HV[o>Y;xʑZ߄5{|S4+IVpŸ?[a;fD&ʋX~>l{e|GB´)8nqxbBZɈ:d*`A1SY^s&N50(Y+,^"8VM =CuDPBLOatt:ĔGYEaEJM=JVQ9٣:@7LJiAFv`zmMAV}e-܃Q&^ss2S""/^-: (ѲK;KC1+ :?@oE`Z5DTG: _l奩+ϱR8}|w0d5w1Q6@ RʫL+z7pz}OL3gU6U LP;{Jî/ʡtruK6ר)71t_4}N9>N ^n{}Y7y;B};&e KTwuCe?>إjϡ=RDdx}|x:خL/4I#4b8,8YONT=6{6F6].;%ÈQaʬkGA{q[? ˧iQe[ڃ,ZeeuQnu#x£˝tʒ2uςT8-tu;`nv4Q)X^wVwS? >܍3rZMoȃ[BG! .JdsF@$(dϵu ?zbƛp2=nme^`3/ŃS CJgDzhǡ܅jI7G ?gc< xX (ZOK[h"LZ\6e2lyʉ0e3%z)@b-ƢCe pNR.bw==HiqddUv~K;t[a[ ̇sKS{J =# {.iQVo  PsOɂ+=p?ᇔl=">o%W|LS2x2/:l_tZ^g.Iu{;!r"i=Kő< a^NJ+;@0˜9 'y=̈́sOw\0T%95Nrq[|e`["|*>dfl9tPuT reT+Gϩa'-<GJVOC";'dΥc8,1q_L]m3PS-gX!'@< ;&2-YpjT#- ?F?:=j5R@Nڗ |Awƞhxq^L"g rV[$ :LUۧÑzq )@C)Y+w/nr*mtWS0%(HR4`$33VLdn1ڥ]\fLp8ʍA[S3(>* ak3m_}!n8nzZ4X×NX#]Jqذms`Br}g+#NS_z#.tAUNދS]Dk5B/':v[zY#ِНkMNzÅ谾 G}-螝1j/޸PX/kMqB^9$)TVz-',2Tw7BBxΝ8™QUJG .Z8}]Df.JD/T|A*-o\pxvN&Jlh^38b%ZZ"Ȭ2Azhuε o \j̯0+K2m^|ȣ3a{@l?*"+I Y@,\Cm1f=We.G}?DloFV]@! LQMH5N`BOuO~>X_^{Y gLeMOjs8Pf@4paV6>foBtn3GF1 1V;QQ$ouu]`ʾ>0'm"LOԈ:NùqOG+rz!~CN_pN~~Ze-Or%*Ҕ?9aooCKGl#uԌjM;,e K?M/8x +/,P7E 1=&L bi򺼺|A0IݨNt -!g[Nw6MSQd*sRID>\%Dº_^i%pH@S7{(y"^Je Д,ʆ_\T%Hp[y_l}Ң-\\J>.yPb[mʃJ8HpٓM Nbރt0m˭㇟ߜƮ U;m%giȟ0y'ڥ4Iw]G I40_؋[o96UDzv]qeŽ}%6?M[xbἜK"ǽjׇ@E )BCDFmU5-|C;-tnlq'1d71Og)G`ڹOG,%0.:ԓp+ԨtTIݍkۑѥhڟPQ {9H|"9LQ}3begd̂`NrSuo$0̾47!C2vϠw _d[hT"ŇfjYb\df>QI_Oސlp L5< p|*;@ڥsii<㹼CyjÛ@T}sB,{Z>BӁ Q$!}gÂuB.<M6  ~*ԨIY6V?gBCᅪwFѹHylAj3YCt|Wn&yqHCSpO R 9 Oob)]+ dIqI9Wxh٢yPRK@0ί:a\_Z[+eEנp2<_,l~kEkڗ 6og)JTصBW>SH|!N?T7/էռ-nPIr\ڊfCt傠P*7:PHVQw̼z&dy=?>%vXi>q=;R#WNQ}famM% 857i"מk#s瀋+J`[8|1n 1Ywn،hvy HeTM9ή%_&)>Fς)* S֝`"ٮ *|P~?E]4+'y$ۗ( /BXsLZ0(L?ա8k J]%)!ݫj5UGy?.5;B8ƁH/? ;` rЦ$6ƲݼME^g@gCjJ*E1ZvHjnzIś.ŧc#(YYG n]ȭAh&Li Iv`jnCG09`EYY'MsC.y_2Dh$=J.kRo#LHʩ@jo2`5kA$uz+P1CE^M俒|9WJ d,ty=eϮR ̏UkN;0 ͓{!wsŶIk3oo>ɩrه/B.>]ΰ(Cu8r~5I|ǑC7ݿvv#0a.͔.(;VjC+B"@Ce) 8%ẽ飂|h)wY-wCS'|p"׆ cu!C)h\/-J|W$ܷE˟i;9L¶Lq%rR Eޡɮx WC-Sά12GD4f"~UX23|:'x:7HmcM߮A,O]iGn67Vd`]%\u& 3U$'N2{9! 7="_f#WT$!o!61 ΒUzX~0ӗ;լx%sV}ћq[iU(q wldۚbf 6r]d 7Ŵ2R\B(&ڙ8~g55`&V7LHr+Pe 12(( [,>s冶 ]+; <篨ֳ:z I.> bэj_<q*p>%إ#c a 9թɅՀw ήGu6bʩjo,d׮֧SG^*̢ҟlS [J0{t:N#յϛ֝yͺƁ[qF8"vKOk,;3\Qc2RG* -ǙdS2 F͌x3lZS2,<;ܺv~\^q)Rտ/&`{#lBp0;K G!AF'zRú?A0˙[ ϲv059툰yuv`1 =e%hm qpZCVI)hd4 ;ޖ+ٺX/-B;PIOENXaͯ '^Sf%.{/ʰCLQ6q 9ޞYwv{6ksU=/amwqC)/K? q|%JÉѷK٥zy[S 6{$C'-׊=Ux *FA, % /x=4QN2vu]Q.^.{pCi&qGJ#DKxOf+› )5|J>%G,7A;. g-X#*4p D"u V/<7S 蜳TR**dh};d "V7$սө hܚZ3ܛwz[Ղ! I9LB1./+ד#p(SvMVfkKO|5:_u#TGDV;Wu— mU!#"= @ڛK100y[ U2gf-G@iK*K5cI5# 4i#~\l9NQ̌4|+˝!þj!gJ01^9SH}% ּ(0#%+ق7r6rN2oڞzf7ݽzʏB"D0H:F %nOuQ%wMM +Ds}W #ZTHT\6.`:P5)Lh"+/%0N_F&w,K*c:,` "4"*PlҘmMFEH>b쒫ћN¸`OϽe9)gK904u+46 xA0C|թAS~Xd` #Ƕ nx6d Pnp"N9"֣PgԀ .|I`B2 yo7̕Al&Ph:J;WL9rRs<rgz| A+BXU<ȿcr n;F|Ld[_eylyLXMjqz:S2ueeȍ`*V-Nq(kV*?qKSxZD|+ WfS_˪t7y1 m8`.OūB {+)u{-AޮqpU6 6%F`q|]~B!ir) h~ Jfbd ߙEJ"@fdo EQrmh?|GI'gv kO'Lt*=7{ \nԬJYVL sS0ߢ\'4d#I5B 3:iVN'z+no+jYp 0̸)Ro8ӝcGŒ,sgLoH- _ IpN`繊-gފr <hH@Z-%|?&^ ܴ#z`H qf} ^ >,R/"QBB4a1\l gd+4gRoXᘭ4o݈I鋽j<5s8IS2n[(6i5դo_!Ѓ 6Ա7/0J(XX`]e{Ձ#p,\ zU xM _v[Vc߀ZTx=*_*? ?5ʅl7u$Eea-Rtpr&}g{@DK7δu[kŪN-'tWa5KbENR")5nbI\/^H zșʀurIEvGJF ,^( KS0qqR<~B}";a{Vi~r5 RLH2dÖ݉ i#dN䒖B ˹U݁9T~Q2jrS@,kvV5L}o$tBdٿ\L((luӒ2vQ0t. `HAXl>sIZi-`N2miη4._ C`){a·E^FB@?JZY~`GP1*gV5lD m̞H/)) #%C(}W *pQY>oۢ2?-l_NyG euC;C3J&[0f l $OۉWj͵ޥyp|CsF`i"c[#փky*硾od2Ule鼿G+̖.`p%OKPQ\hn*eRmqi%7k!bԣ#+ Vc"=зґG6T zMrKө 鎋4 aplO`gdu绨T ^vc׎ GHTE7.k2>kq(4K>n0BnS_luBM[:[G5\C#,ISWc7f B9N$#@pVa Hm'.DdZaYk}nqH w?e!HO)l-r-,ü|_Y"~2T3{N Q&\maIONQ&sf nf3X}_90Aad]L|T~.+$}3Fd4(+ou +x~| 0\q_]?em[l!: RmAtS,"%o])d uX,Av?soSU:8!er!*`DtX_K;zLRAC1(bKmTINeJEs#\Bʐ)u-'~#U=xJD /N'T?w:3Z`;4|*3A~\0q\6! #(l 69kKSIm//|y>3p+2rxY=[ z>E#IqT) 'Vi̋$碴\D<WL.͖Nt]"{|`G=<fgҐJ^hbIK[ `W6.dH`ü!n*qk7欿 idKхoՑ*ƹaSoQǣzĩI ,Sw|ܜrN` , NR"5lS ]4=7R83V!qN/' RIO{zun۝@oJ, мr*Sǔa)!"ptxZg@+]YҺS9GxIa3 1=wWG;a 4Ȫ,B% "ݥ/ yK/m;a'p VK^=>^V^Y.=L%r%p|uHa}!a%j_NsFPm0ʤv6fJ;N5RU/qʣp lu[=r;5<5&C-J^2='" 83( [" FLF!0x4`QHƧ@_=p]Lɠ˱%1 [d#{]* ;+v7qUqY ϰI}3Xϩ_՘EA[D[ .س.O4YTO0Hݴ$Zz0D l|omϊZ>: QGY,NV<5*kIo)"\Ea#A~ڧ:_l-qpc0Ѣ :4i[-#%yn 퍻[W$CrulX&omyԳaXyr?OJX,`_\tE^)0$7uTEl+1|G=7uЯ;ZʀرDPQrLe/dP @j\7V/%6}(Gzԯ= #=NNzSTcEgiX9gɡ1w cʦk%>}ِ[ ')XkUauewLg}(ϫ]'/H/i&S8Rt੠iQ%5O$ r5 ؊fdT~<4Xn2( >zʄ%4™&ѩa,lxXprk)| kr4ch|R-Ϩ &r~,SQauHd@  9Ѡtq2&?BϽwZrPy cUjȖL/rv.py-Qѹd\`dh)"fr~)/abcHԈM}% FO;$~(eWO[()Nhrk_{X'~GTRHdkj XݤTTz C~U& mvs;ӕ_RoohF¼rdfUKi sI4#%VX\ Jwd1ryw$aD $29+Uz a#ʔb$Vn0{ zgcoh{IbR)/['KTSrnoʎɓ 7{yhMg_ߕm4c. 9c{;׼xs) "#&\3Es]39֞gڤwFgjfB Oad\1}*Ga:-i5F:1]/MWZUfL(Y̠/?pq"wŧ$pU4|)|SեjKelK3U.PgU%LcvF/͊:2Ldc=>y\?6d^qHᘟV9Fo]xҭ V,?2l-Dzi{yݔYd0i9sI Hr|=]+]ٳCdzeGoGᴻĀ,lmR /:{% L _e$c,ǯSťp)NLQ!Hqi N2ȊY C6 f'dq`^f0mCE:UN%ؠWUFDHX)GqB8q쑪>o:Z0|I{]E Q7z1OhY]9Bf;VAJK,&bev%!>x͊4.="X"9@%}z.q_y$K("=XcmSŧřÊX<;!px` kм%TA`{y1s ΰ춆{=@Go?ZZ`g B2;0иM1 rdi=(}"bM] ^a(Oz7&=먒}MS XY(/lkq'ݼi:&qdg5XS ;C 3!3X}a>*AfAH5TBFp[ŋf%~xMY)i$  鲱y1D"RhVX Tï_U#ەUbXFl}TՉlQ|IyD?M|*W|y~B"N2IbENI7&-ϵA톊yΗ~G_Z淥b h\BA3Ff`۵vXbG?r:}5 85btJȬ@;Rtpy9SMID-N-r фezX90}UL@]=Ɔi{F?.VAbއ /2+<2og)9g!~ʨn'I#MGZۖbI|Q Br<77uf1ͽhcrbl8ߔq+=4\LV](QLyk׉RIħbfkPՄ1Ǫo OK.[V to0zKNhbi[gGj`h]ULVP S$`7o:Cѡ#gN E"bˎY=#fƭZ+!gg &5Ֆv4艹^,q0WS_dsv}Yo)iY+xp05-/ pX'KHeJS>>Vk⛼HExJ2ksh H ]3^6 \|*BYtԔtӢf%WPVF{;/zSI=q[Di ]9)zdvO9Vp}.Qo \uI,cN؍&6f9 FM[%f\^@' vwo )_fך哈VͥSf=Ya@2AcUH@yU]5nKiw) #ٿtBb+NNߏfk-gR]j[*Ǡ d@sY7sԩY\h!=2ҫ?WMş6U\Eb z8!틒Fu6~I*hjg(G8/ NTݱ(ۚ$@_(,tX qpzi>9K=&ڜxt '6,ظW.'R_vm>!ƭ޾)wP}jkOD2[2' "U#ǫRD %QwjGֱ|fX }U8mQDV* {ױ\#wQ;PSʃtܞ?FݫThPnP_3plSQcK̥8t&)#:8\e7y3,dh 4;w)ï]sS X<:uWV,C%IcH-&T{{3[ T>iqjtI!d$5zPr ڶR̳e&ͩ}O֕xOJ0קFno=|BmKtߥE>![*%e0h6ʙeݕzK{H 6:W&'[5"1O6?{hrW /e==ڴJ!9۠f7tDdy..XRoD!=;j1.Ykރ<(6_zvLlȐ0gT~∅&FgEAΣ|wQNJȒULI~;Wm&{0lbLp{s&aThӜjCYUs4W`lйۻ5}wpdc*[]Qe{\ >FOO\Hlq%$rCڪ Y'ܫWrw(Vf'#\.A(8j$U}qF*y$ !Vp%^L f!]TuBm`.n9z@niHȒ!UH5Zfi1{aljDԗdZGn?0/#G:^ͭ!~߿_XZf ܟn,L@9Ї:֭¯MoHـBI9i# C":o}8 Fe! MJ2m DUOʌLy-5̀**5y=(*3v*8Hc0s^NwLv+1 ު;;(nn0\Ăqt-QmAȂUj6]yQ''AE 3WQ`i H751h˘;|+:}b}+/柼 %rALYpx Cͥ TĬg5i\J/1:`  洠LFF#Df1~Yeh^reKt}g'*`d;)3*ud͛Z܋LZp$jk@+' j1 m$zȮZLWc/0[N||)T4(P2 y T; ,`ʁɭYߛ!&pb~-,:QlWCI$T/ťJɋQ͟CZEEl1jg7e/5zb_")~T3 3 ;um񾴀U2o-4EOaHY]ǀQ>#@nW&^ƆÛ*tݪ cI6؋7̄^$VSr+Xg#7#}XHc(0&ż.Bj%#pR׌чdn Ih |SCEzC¸}!Ap)585OZj<A+i&` *:YkQBbvd3E Sξ͉y6&oA#xSQe,jʹZ^xc!@-0h6^/^_E|cﰡ>'rQ"Biܺ(ekB &6l|$'b 0RwS*R]`H>,]BXXT$Q ̥΃I"XvS2,2c~Pj NG-tÔsk OnǂcsjSRLw94=5+5_T'yXWee<;=+/R % ;rB%E'UP`&Q8,Lɾn/BB#ѷ'0Ex"ioOy`4-'ܭʤ ZF3+|AL%x\\2ڣ+ j1X^f8 (.͛Q-\d|{-vnj&[^{;y>W~o4/"PGidXZCMc(n/{`&U{ CE}Z@șΟmY Va槸\aҸ~3uJR< ,@$ލX AfTSӲa?!1q+Z Q (յۿ^ݝ>i ]{vlq+VRF} ePl'ЄF ta>jn}ZpU27}^6ăHȹDg}dE@@`AЅ. tAϖ;d??1=Ygrh^&)NYmgB^kaE<~{ ߁; HB8nC7B̴}Q<˫F{8},;]m`)$ߊUsf2ZL̈.xj|jbjq1ZgQ2,@k|Y!8 6|EŖN*̫(u4Qn5N+آM.ˈ͋z$pJ h][΃!+4Db-urdmo7]&46H=e,E^fӽ?i2a;_S3>Ssx=$+k7y{!ys*V% V_iE_E`^e}썷rYLDS/;{$Bp\`Ls [>z%F2 r̃%nnfr;id=j- X>u11际7f`Vf)ua7KB<iVrׂ7;z=JK,KIBO&+}3ֽo+x]LaH¦Ρ_HӕQ";UQ|5)%7C7A"q(CBN HFDvByMs 4LE3+ni%xwL IPݚW)` x%Z=֧3h2IeϮz" b'gyŸ[w&.X6->E+`Z| u ?0Lþ͍/rS(3wb)OEe}#gi:iI1rE7BA{ GO+H4BIr7X_iЊpD$G`^c[cU1*S?q犯 ݛs 9j>h}8ѐaլ(" &5;2s$'+U WCEM̳2M>S5 m{izՁ L34(\{izXR|BXJV?& Lc)($_p&kuIDUgJ`2Tq-c9>D3jp"0"E1Z5̗[`[)ƳŜ5+ۨoKi{̗DN+n2@K$fmǀ6lv_L3Ñc'Šy#hp2AA#S}Ǚ١Z.4s0/>>Y 03KrʼԴs8 P Sc2o3\ > \\`{ϤXJ ZAaO|1/mZEZ.JրsʎrN-o. l {l})Va\XjQq(2d'[? 9ͺ!ƨ#^?'WOej[z3*JUێJ0Ce6,F0rAkȰ-~pRw7saG.;Qm8tD(r:j[8TD0M'v倄͗)QӤ]E=÷IKOkzC{]bA 9O!rE7i-2(-o- Ԁ9O5ƇIv<\2JbHW͘Sp 8ؠI-q5_O:UJ -Ot1:mῃAOVQ?5}{l^@zB0vNf"d]*PW'@.j0ޔ5Zb'Jq?od .vޚ+'5%O juaPq"*oK] K I6EWiZޱT/#&Bw|&ǢS厶-B6 + ;z(E u4LKBjk/OHO)> nOg,Imf/&*;69׉S$Wc -B/LRpV?AU1AB#x;dy?ƨqR#)u">.Br5;ne@VӔrȽ#}q!q;keRE+<%6JQ XNm@i?%,Frc%hO#nlmGH R(n^sđEg|f9nqD Cl Q/7 j1դ&19Qz{+T3v6_peϧ{F3#CqPs*f)*2'l\:Fޢ*N/B$E d_ G/I(FҌQ)RtqRlotjʰXТ1'blNPD,Yf: |ߧnLs춼1j:>>vl.EB+{B|ifgR!2O: 7FhPѸ"PWFKJUy/!oESLgD~ERXZff@(qg-#݁foк[L_%$_'lұM0WocNF $gk,?z$y /"Qrk{1~._jgw_s+%Y`J,'}4T怫9@Q γ1z+mr:ۀOCpYoU _Mb)oJ5$u8!jȦZ܈nz,2ׇi[/BeS =F'tl&;9@@@mGw8& Jh[n;bAeeJ~Q1F3 0OY@ʎ}:H#;S5aޱW Wύ],|?V*3c=x"JBKIMdFL4[ΔBL] DyjT膷x {-=)o)YjB R|o3zhp;q:Ҍ˧EsڇX[|c d{Zq{ cNz9 5rzS}9>ZI^RVx=umlC[t[W.LSjA$U7)2s^uՔDQ +}daя,Vaظ?!^Qą6rڿHĬYVr@ei9%0o2/XK\ ִp?2P2w5%i08Z(}o3ϯfn]gz;lHVڍЏ|NY5%{[$%m~ "TqP %]R&23U323F a:"fa`,(x.鱓9O3?ަFUk_e04r{Md,TqW*2wv.BHkFUifi2 :y^cx2r;l2t)+'PB*Guu*Nܯ}J$Uc3COwѹs¾k7ٍC"rf:T9} E q'41L+HluPnay Yj\<)+Pi9 2x2 K|Ȳa - &UZT6 LxtĪ2,0RRHu"JIUvH«+ ?J[cw$|Q(֥ jB L^[;s},8_ff螺A`^FQPK ޸T6=Pb]u/=6&k[-sAo^{F>fe0$o*AȎG& YI~˝M2TF;#\POgs+cJ|l,I<1 nkJbͅ)23]"ڠb l]Gx [}sًۂrFX,ߴؓB62/R/o3EgN"|{\KWerϘ'rv2Ƅ*D`Є*`V}.˧i-" ):nܤ#racљE>i9?jE7Xv#)…ٖZqWE/mgEELѷ^J͗$cgO;vr}+`[6?>MCzZ_^K6ի4 8`ɾ?Ӣ Q$5$ˎ;@Xz0%@f1D1a47r'r4 ׍Ujdp18Qi&QXg$ԥ " Lg5Cop5v75,awmwm*;C굱1+q{ Ht ꞣvVb7$o% IS? ]"y<@_D\ yռM*^[eZ M[ ~iuyPâ[9Zo須'/j^Z.mA5%ulIlCeP·1J:-*;YbSDqؑEⳄh u>9ح-cw_5ޗLb_awQbxDa)V}s[6N<Н^a]I%1я?\Z=h_t#xfh#Thj-9['2 82 ם906wCwCH$7\/Wh>>{Zb-N"qBT6^ꏯ@AfoCzpzs)cqR<iX rˊ^ ENzgh1˅bRf hrɥg [y)Rk:9Ћ:e/GaZWze9~P ň`="{sy 5`h'/![B] >8.URHpf;C,v+erxRwLV[ ߶yzIF(o_lw˓0_5,V? +F z\UFb)p_zq-r"wr yhKA(g "& jAeCJnɽdƔCg"MֱY4b [3M}5yRnayF {R5 r_F9!93 KJ<d2%g@a15uW|2/Z6W0x*p6#hu@Ҫ sF^2[(PBj)hK g\! kl5͂V4DטKG^޹ܩԂ ǘi"64 |621T2Muݦoa?) wRw.,kz! CI.@k쒹 F겟0l soHdR|ǢH鑠E蝎ahİ*6O.=Rd?W` ޳_2ihA Sm. WeqIv'l.#d Ú"z1uھ03I "@[ʓFѢbɀl~sXW+ڢ`ز-%ͧQ£38C/B4%wCLͼP/ q)?>ih t&ZfiPxm @8cHl4g6/}*Qy<_S,gS52ȯYSg<tRV< ʅ{+1r@y. g|C%ΎTO9r&tb鯷y<",sB\:#MW$TVsb\%1sc7ONҒXux>pegãɁG "6`'=E3pO<_J)7I*|=r" ؘ"quc #iZBs:D4&j6xTmIyJ[.,ouѵ.uPFzw|XAGc.u`S(bjvo 2N5\EE zH8*Ls-VjoNk;JjQi3 "(' [Fdb[#^"5vr# |IL;LXMi$_Zˢ/0C6/aEq,!eء{9~^zŻ +No M$,E!vzTEx0䥴Dp28#0viXF(cq #u2}dF#C;NVl wI֗4sQ,|w?;};ߤ'7vFSǒ+J_(݉(A?ԥo."e! {?Y{ |Fԯ~JUle {Em`0+GD!'5r9h gKxyu>N֬.Fbb2{Sv-DP"i<QXB)Kb`Vg!)VW?SDibbbnExV%tU6}hW S?JAt{Qyɞi=@*dnĞh}h˾s"_M+?ewʤ\&q]x Qoڡ=Q^TConT%43=CcS 0QiG _5ޘ4[}ꁉҕ-5F/Ay|&<%`/Z.υO:d71ep, NZx5φl~+Quw+oBGK!4/gK(R) Z'a;=1$(F-y~:)xE Ϩ_NҥhC["z3?(ͻ䬴ޡWMIuzUؘWb" SZ+>ı_D7~Y;,vXTˋO 괸a<&e %u3$irAgjHm"c( Cی0\|0K0ێ 詶.Rn$S̭Ʈ`&neel'9WEF%af)U;v_Pt(&Oy<{:&4O]Ѯbr?V:qRo=%FǵN2nEqvΈ5{qr/i#5S`/}(jV֙K+lI9lp(%[7~),ѭ^>w2]n#iA~ekMG 9\ \(*/M =WeMc:ܞELIl-a9tZ2y]  pw<VoC07=R*~WQLo5k0qJ(B]]).GTNvٶ.R̴7O$A9d!:) 9l\k*/8T9G6()‰~MLq0"9*-V q#ȹ/܊^TG]߉`XB=kC(2ε&)_ɋ*I$3I jKPy#wdld6\laQfXhcQns SEmMcmYfoGu{]Vh]a_*2x)*ַ(U2%XJuy;ee` O߲#$ZNQׁةk}B=PXQ,G-v4+˴Z7Y'L.դ"jVBOڸ+$Ov%I!}=4G`7"9O_}cjmd`_# whpEJKp: ׅ o뢎]w,L''B fcwgN9>} ӂjs 'R.lq B%!qQw M9#vў{6rC/ 5yld4xڃD0r]$Ý a1^ssfuPҘlQG RgCGS8(LH}emM:q5uUC7C 5p T8*coBaԝ&5 2EQ3܈7`uW ~ԇk4@bF&sCD4V_&m5=Tl?Ի)|vBa7 35+ u@{%7[Md[T| 2Z!HWY{ۆ8Z8#S0.;( Xj|2WmJ%iT (/nQulTz5)ԉ)?O@N4BG=Ć=LIs®L '*A6.wW*kWسfTieA/a~XP|z3 V'3Tf2=ZQUUcK5TN)m;t\0zɗ#~LOF#vkP>IQ!,uMHL@v{acZ4uh~0*L%ٶr .n4 SY.Urf؜܋cchw2{ΞڄC=f'wLʌ1<'y ܼާS̟>9e14wv݈Pz= H|cor CLE^=q#-%*l#oBuOR8"<f#r,=7kTBW,jpٔ:P[귬qA ϱJpMD-dF%O]{&i`J$+ʂ_NxHLz׼FA4;i@6A)8ayM@MMrvϦ͓ù?%yѭ 3ToG"}uަ_vKhM p #h ^Ի9!e2GzC ?Te0#>(n[gǠmŌLe$[# :QH%lVZВ"fHxيvv1!r5}w= -=Fsl9^~DdEb<'I;CĺVn\"XǻR܇X=6^L}S7c)܀8j k׉U>g!oFA\sbۥ^[!EcU[J@/ݼ˱˷K79x ?|Pcc%>\Z7eY>i*A{IH3>`Gn1Y}M# ~plce$IÀ5/vXoRI:Q 6_xx"bs[+C$=y ;|گCMc1ffg j$&6>dz\aQU,Y8t(V{(*mRñ"ܤcN) GF ug.fi~[څPDpRD.0O,^*[ܞ\誄SSzsV7s6i.H`Ʒ,L[RIYQ6쟦Z?\7A8PC{ _[V S\L~?Y00WaGtUw&a ^Z܁'۶]/@M&K21JV08j)p zC]|!AS ߒdյYEQK,2;g;4y$2GۚX$o$S%vPuO1QG* pw^kl' y$7l2>6AŨ(;`Ctu drC\Uaqq6I%6I]%I,Hz O MS+&l[SnT~'pw ,V]Ăd`mB4]YΏϷ0'Y3E>e]R$Ղu)V,w=,DQoI>4.<=@ pW>^!GEdZymvwno 6 _YQxڥ&ڞN0`3/d1Gh ҿ"}J3C:h?-RI_3ۢVG2yvnřLb:9sf G>rqBSEn-?P V^8+I馷?hY2ZhetlVgR i41~!^0$Z&vt.ӌYRmC sD$^NwV"DW 8ٯ{Tͳ7Ȋ&`lx %XUt C"ޘy <@6fU= ;N@ ޶1)CSnÛ{;r3Q)I08=DNWз *H)\.O5iI$BA bT|KNS'I.)k'b v(ؓ8oMI)W*:Wqq~*͚X NꬋTѲxg]zX A`cZxtŒNz6Z0~_pL[sDpVfAKf^Jy%T,c')¤;tK.I[H΂3CG:]Zk 9g|@qB i<''A⚙pd3Z3:)Q~ D*) s_җsQtђE42[;]KbAKK6|8SF4ӝ0P*.`#Ǣq<Ɨ/F#zڔtPR'BO/Nk$tFʲ76jb=댤b1b] 1p|d"`V6:p9Vj~[p6Dø6bַx\rA 3b ۠pz|bLO>pv; @T\:Br# D4+@E$,Y,{n!*< _%`L81)ر}uڿ9Ӑ?E!C}o9l\1EKnƼ"J+aj0w,Pn/.t!i HI# x"ßSAV-C`/X$:YM3%dN;K([P`ezS^cwB:OS=K uly^=;E6%Z}8@iyP- ίLىHw$_W\WrSFбuiJsbYV ~}l;X3ʵt@fnllq=AYW$rL>[ͺ0ն ty?ԍED7j9@ VS ^!R/mhXF7(uFKcOo%?| Rz} ˘ )rEpXJ|mdf<(Z hB$9m9"n!6$+Z VL0 ~^xb`Ea:b e182N:eW#MEm{9IJ=(')d{dcP.4%[MMbzh:S~JqHn0*ٳ*ߺeaMENa|ҹ,{vi A^ۇ6bJ;xGs1JԇJG_WZVwfށEe$dp(/FI_>h|X},= û2І݋'X8)3eA5A5C"(u6ky߭נY!ч]p{7߮dt fq5*w"}k@](ـ3Pzo#"+'8HrY 05%K8Rp6u^ YW0'y9R:;1# S~Oߩ(N`SWuyNyHϥu+`oG!7xv.(T8Y$6dms.[NCݯ,L29#ǥe]Wyvc5Y%EPL{'.!M\izUM,=!y`H] <{'lcqD!{cGWa\$tu]ee)-DT|P4<ܦ>MS _Pgwf?{8 hݣU'Y9&LCsDREEVJZpul͛k n ., F~Jg'$0pzIZIs+$/qZ05ܒ59FA0PW^FE 8^ܪ;aoeɦ{&"=ς&_DJ7vwzm[*4^͚'PKfgw\;!3.FS^GV6Yѣ*9R9uLhYn} /$[Kآ1Q&?oyY0>#'-E^˲W=~ Wz]G>ub =좩 t#ME|<` *Nh{9Bp %R\Qe5:N^(@ȀҪ{ C-0C4;/7j;z~эryrʼv/Ra?@ˑ9h57JǞ BM[& %t-=P$uqud՟{jF5^z`3=7!y62AY 1[u@mσt ,EjحH@^FIoR̒5Dc@oaK ZX<%N!l.?ِ(/ MHtw31@yAbMʳiyҷŶ#q0FU$e DUd0 wߡd]-* MƤ=z6*âHڰB>>uwwt=W)dJ%U'tAfv/; R~ՠǠM/x[sV$sȼZmvKo6pk|h!Xv7A)߻[.XQ50| 2>4n#ϮeHRH'J+a'hm~&V痑<#>e57lr6MȗvX[٪88I:K61 +Жɸw9nx!AJ#3G$O2Y\/*(݉YĞYb v{ P*!xܰqK.a>P2t&ALJA ~qQ XCwjTS -`UJ%qr:z`EwT 3N՘yWmԝxp \LdLV ʔaP GnҗhНߊcvhGUSu<EoE!sG蟵/ߺNqL JDh>_`.աd!JY*󊶂b Ug >,0l  nkjVHYS?$[p5(J%\@b(Bc:ؒx,3׷ᥢ3*n_9/_ۇ-G.nV t śl; 3)KU³:SLp == @cB.k'M 5 nA4TaC$ OYݳK*g|c qSPF3P]q!Ý 0jCi 6Bҍ8#A KRSNg>v:h0YI~}|FqwUALQ!ѯ~4<YVOҖ6sHr='Nadؤa"i PD_r<aNvxXhI -fĶF]-&ne"/9ȳlee"YfRLJ d1"\ M>rwA4ߤlTǐ b& ghewA4:6Y(yH_ǖ<7mX: Ve0Y'hr$aP'k|8:F5Ѕ:k)q(l,/|҇?x,Y~o$e$!58Y|%` a2C'gI ș .(yW66zYLZ"e0jt`V6B-~qhP,WBFb3#} tkpz)ݼ2_\Xd3#LbCڜff! _z@}%^iMB6aiXP&^3d@u@5-gp|qJOhIP޲FL\mmhjz}#K%Dn3~vR3z@|#VY YYC !jJGO#rd2v$W~0 Ů}Rxhrggz>zh9whDo5/J6Go3"^C,Bd]q@e|؍bTCPr*5Gݻ u٢`+fFbSM4{G|Is:24X\b!=DUꑹ:0(_Ȭq3[ yMVn (@R?Mz=b" `XPR(fR’{I>*,MqkBy҃.`"Sz bMj7$:2W3noG#ԍdŭh%*w13DQWSheO%E4M3(#bu}c,}D4 SJUe{$|R4*[0:GB/߄TL-6.K3WbLR Zu.YN%2ǝJZP.H%Sy&WC{8\6HX$~r9 c?uzA7HJjdjfzNgN]3ۑU:?q[0;Kԧn޲?!ZݾSExN _=BT7wIc$zc+펯o$|s֌;VW96^@^_E׃vDLu &ԭ/!YD[O>'e竰RߦW|9VNWbb4XNIZlfDE@[ش%'ytGR#Qu ~*T7bߜw\7[* q^bid‡,A# /):O62Tol!rod=rwfmbjp)0fШnۀAHByG!mJm޷5kG7qZ6,@+5<4d7TUOg,a1_ 6&@0ˠ ѭMml6xWwOP/-%ϵtw07&q j\ [-9C@nj#ѹa:/v_Rt ㋃4\"KmxC.-mtA/lN^;7w o7BQ c;+Q 3j6ݟmcU3(T[E+ /xx۶vɩf5(tv$%oWsMjŤR pDO *++nwp$@=T3*w֖G{Mne,^e.? +vçk!zk, 7OS{ zGd8n!zlp,^`&2l aW~Lb ͣCoɺV|}U;\'/({ RHObHzȖ+9b{X 'O"cbiZ]) 2Fj5g:J}'_,)f".@&R^F![g_)6P6㾶챘פ6[P˨dIh40(t4Ǥ&e&i.l37F %_slE7w|g["~g-q7s"ZcnnM`؟ #v5+g"iV:B֚8=KiCdԎ?P hlM-w(KBOgA, 4:Z aoO$KᅤL틼*i;&YY5xϮOR,n:pmXPj¬΂˼0W;%FQB:\.2L1 taX! wu$5]g4C̓n/ttqM'jWrN o8ˑfW,2qX3t}3#3l%|oQ0&ǵ@W2ц6SVӰZo9jrr}ⳛRɏD誜<C`hji 5J[dfq"׈TS|8ID~OQ`jL, t&|5m62e'hǜ =LGN\f0aO 0bN,Fh}[Ά' 뽘eŽWNuX9PHL"bJ mL4]LB@*{yKwG0<sOW@ls=ն0ZyӏB:n`f G]P-^I8LL  t668ʁ}pc*E+a"*] x"CBwn];MZcXc&Qb!:H9^WxpkI:N&s6ӑtpDľRN:55ϟu:)l]n;@JB7Hw Es MqHWuήFuY+ l7Op2ޙXp$ : 8(ʼnjam2@чny%8%g@h@ Uk|Qm5xbku $-S:yWg4yHKh2Ll>y$@tŠ3WX~--!2YT5oJn%R0]Netj5@7N8Xh*6y-"I&90Wg LM߀ʈFDu&`nxcv`BI͏SÌ!]~N9!2dGʧ[8  Gxڪm'rL_53Mux0G-=U "Ya\w1_ 9, AEk| ń/? 4cU0Gf-6#s8mp )s !T"v\Z;/C k}"xAc4V~\-EFK7`vW1q"ٝW0*=gNћ[S1K[x9}אsȝbQ!xp<c?<ݪT:tm dl.gBdXNGJ1feM-zܟw\A({p\S5+2%ϐue.x/FVCxezsr!7W;F7(jYC xs!#+hvH؂{'|prM訜F;S'^! ~T-('_m:P:(9t̯CMwk*YBPׄ)9ױ(%zBzZp\D0 Ѐ2A"Df|1o.rl%`5C{1;G;4L6”ٰ9W>i Bizkʈ@J:}'/S)ODlkvP$ӝx[$Z}) leǃ1BFQygU^ZA+V~{) oI-.H[ myxytK/sxm!&]wӓu'N O+1%z(z+b~"Q>r8{-^D.&bQҒn^π񴇛Gk}ݔ  O>. Hm 1pD[۔I4׉eb({/㺕:DvE/vL т`TP p-Jc;(LI!|ռ2x|>u+FrVo㾪p*6:f GwsqOB5]K!OSC7oY8;m` OB5A0Xzs_J͓ ^v|S, @7-%챮[uH~ꓱ9!½>Ɣ!hnSnz.hRkD,EX;Xƪ=NE!6);[($ c`M& uhhxicm6 )9' !>L?(F|T@9lU!C!1x{6f|VSBĮm&4H X1&J|e ǵ/x`#;7Hj{rDՓ VVqU=2S$lr3Hh!\ S@!8^lU$vg+\.P ]*(c\_ j|`))H7@W,zJ-JCg"[Oz\?|~/:J\pqlm8vRk O Ù47x$@.4A%[Ndci-:\xdv+V2 qߖBR OлQӬ_ʫz5)7ypN ^SB*w=3Rt+gBÑq2f3|H.&TpˢG׏ۅpQ,l+V^#yRDaiF6O,g(~/{~/Y{{&bm$N.}Gv9C/:b[Q^t} ?eͧ/k!mY@IO.Ӵp=Y -ߔߴbrO3d!Ɩan)Y7rKCQft@Y%[֕@$»NB}йri456O|Ϝ7nʰ#tciBQE`г;ߖ4&@{Of.v˺<7aa-S7'wC3Op'3"'~{Q}KIr8,c׽(:I3pdA4VӸf𶹳3,z}hgmyr;IZzˠf?7wF04(q#GJADv8 &ST!#hB֓  d=WuclQ{zaY;\4dn~7nN@{$ H7eQ }cOresɪMМ>13l9SҼjr\tQy(P) .&9f+{+3):2}vJ?6I9ۀT/Ҟ\)#ޟ*`++s#9\$):ٟ%tallTIOFs4{RzeOV]P񆻸#]ֲvJejɈWҗC0>'ƹ7!vzsc ƟH[8<ʸWFoKwFݻ:{~sď۾?5:C'"F'afkkK^=5Rz!> ŮZ ʵr^;eWYZA-_CsT9a/19ڋ: e8iJk:v%CN5, 2dgn@0E)g &Z]'` ;(*-eyu)_0]J{R 8G]ˮwd7;P$X\zr JAQ*w[Zp{ꉥɺ}tn곯߉ׄCdRq IX{; s8KkF)W!;sRȧz=^> ʧђnIYˠS`c*4dyb}_qw1|&~|לꇞYl'/ZxG1w*n'һ2[NuJNG$rbJ03.RNysƟ%!MV Wǔ{nMW;uk޹2鉙v?Sϳav= @! Pzu6Z6}4m}d{(] ^24ob?1j_;z}oa=2$!v\d?k d*s"Er*DP 8V)jtT .Q_OIF@-d@YV%I_T&O xдBFӟŔ1gc'U/<͎V+qid5Xn ˛P5@]FA=Ge^O\V@mUFyH]. o`l { yv0>XWñ`q߻g hIÓqvelubߕ+PpqD}p gN1C=p: tԠ|fӸXU 8ptv-+WEۍyΊQbQ|@#6”_c:X;xYjF9wZ}MZCfHᱛqw uXbOdns@&(Qe$ xHG77CO^E`+ TОz0tk /bU|G1;R񎷸2o||PA^A&}Ş'dVa10v fZ2,rs#BgayszInR6 3Bcr 8g8~oBV!tH,gP}W (XTE -.=SN?[=IS;ƛOŖp/HT%=0sy1tGBT;Lc_Ҥ‚,4BSX[.@TJr %G3_ah@و%kuAφmD+J]>a(~3+}# IK]^i119H9DBHe~?YDJ0[`PwsT^,#eR4NR3RBZ$b.V^3(WT19P 98F hJ߮JEt@ԯ$M`R\=« !\u`Rm KżΓG7isNZb)>2O$_4nՌ3~eJ7,FLJƊESh 8|1nJ*pyBIWH~Ũ ҲQ"6%K #=GDNQҔ&*UCF 0U . lZteÇ? .DZnP!x󫙙HqYnniP\Q1 x2gtE@$EIITb+M ڙIἙ1D#z]2R?+x/9 oF,H0N$)YJhg*l_G?k@^XClS)Ǜ[;(dwޮfڼ Vj;;Aze:Lę(2ޠ8 u&> SMz%lDxÙ=¹lZ6cMXy:X#̤Pg_|m,0S^ EV'jԶͭ)ey*0({{\ɏ8ձ܅N >FYy7m-sR?S{uvWwBdɸΞ"囥LZ]g$؆.Kd2IkLcˆ.ǣ2Za&5`AЋ&vB/"9 BxrcՄ 0chCfm[LgU*Tc3rE#h zldVc!vq?O ?% \icN9Lv]3ؓQc~'6^2r4nͶL7B^7#8T9CM#@3ZmdVuHBnҾ+lP%LơHoԈop[5seo~VD=YF:kYCP#:wF}*%5ra$o"HȬ)0n]?Eͱ* z/ G-_AYdyنQc]/'g{j$neVc2Io3[h7 +û7C=CE9nJ] D%y0GAfTl D?`@@g [OƱ'{[|GP%Y(1u*pVcF2Qr^4`YL,1zrPyKT+2qq.BR2"͸5a&F obB6` N\u/Qب0sґnkL~lXX_2MRM$R0؄|ˇPEMtdFKdKh-52l7zIJbb,w]3Vc_ތX Nf,Ff`Csl_Mޓ6$z̼pQ0^CͿ.PBe&GUf&fMbz#h߈ T5(6;g+x~OX5G@jO OЛ!q+ ܪPUsbY /]DU)Ӽ f}cOh|҈FeXӟU /P!@OܫxBԨlK8>#<'ihHT|QLkog>9,vƊK:(Ўi?v^D 3۝B M,Z*UQV۞w;Qlh˯0еc  !WLWFWJM3?sɆ߰N -|R wf̊p2j}mP`^]I3w^fY=u]kI;~""4_(8#rӏqՒ˴4~}xb noojO{W[H?SĉG2~XL)rQ.&c =D^F'I+8[R: }?n͐" |H{M{k/=o  !2Es'Q?_1 ~/C'Q3n@:ᑛsYd׶6RYFILK8B}ޘXQ(PA¿x2.HnsW2i<3X:¡STj4spw H!p:e,bb7Bv3>fmO):8({%‡=}VVeP00h"}HhJ:j-sTڒ~Z 8er 6޺Di$eMq3ʼn}!Q+s6?ah*ie{k.mA/ mQ#g xg`Mȭ߅*QFdǟ"xX6j8ۂS4N!Y~|h| o(c[lk$e\ u_B)83` f }A7shx GXJ`Uu  )"Br=$05 !v廷& RD'W$(({ƮzXC4Y(~I*16 fyBY^J$ߪ`,z>5;|i[o6>uĝ %6g!DaKɵv>K*P64|EBy-MJ9 e/*e'+MYG>e4Gɨ{!3`Ķа"WMpr`ߌHrEi,g#lPnj1pUN2YqȸGIL\N#(Qxx rchXJF?dr@L1OCn ;}Rņ_3?|PY0 zH\=[*HD"LU81"ޫz%K-9(BxNU7w{M  De% [iE (餝:qctpqC qǮ4j˲i u8ZqQ2w c3)4#Mf0vq~mFEXZ;svn+eUu?h(5!ex|(T.NOv7WR aa$%|:O`"5( E;)ŚK'EwN$؞]"QIv ff]J*(vADI80nXOFo®FcЌY\̔hʣzb\|+P/xQ}#*]ב&TBtIUH,E_~{qai*闽!Kjoǖ)FE~ǖT0 ]t+&Ն)gu]\a;BP[)E]MʉdFhNPؑ4 1U͜}$/o :./7pS~gB{K(f~~;&嘂MY,Sh)Xk>M]eYA9ү"]ׁP/WOu_޳soؐȍK0!rnI]Z,J:Ρ2 ̽JOHZםA' h{ mlGw#Mpf@cP5 (%H_ AGa0QM_r[qAcMճL7,e#{_]}G[A{Aތϸx9ʏ~rvwPM; n}71vo(Ɍ0xEABORpL {H8m`E"Os_ i9 MSw`Ifĥɺ(/ ;㡔9JeHuXN{W}Y80FiI\l6r!ljB$:JudCiziڰ~'f }vg?a /e?Ky;"ݭ&-do_))qNRI‘hrr;x~L!0waV}ks [( xvdQnrt#8]3ZUkXLNaL(zoob*$yR՝Ź6"7ABi!w&Y>GFQɭ).EV?kW.?+H 7l<عEq2)֊ XPt(o%NXpg=~a`i.[B6({$m'g5VZ>4 7C=lnc}z{ ֻ %)ǟO``R> ʏ1&z/~ҵ/38ry=KgOZq|"3\536qR$ h O2KtA= xvC bF K 3y!UUleiJp,-O34Mɖ[#}/Sl9gEƫ F)L:!TĵkA961$X3&Ө8e\[#F  rmv3L٤JNZ HjMAerqR{;-w-~1[!pAWx#'ڣm۹Wͩ(X mV``-ڳ̵[ ];Aחץ觕!ɔnkZrbwЦe.ڜvN's-Xk2t@&= 35ʃOЧD#_vBK5Gqs d@Ѐn P:t҇77JUd{)O00&CGȬik# h׆ÊKAmKKsva=t啊?bZᮯx}Th*إ}U,5V}2b?aIDf08QZ}ܔ1(15N_wE_ hXv@)~r7/|H=( VZwp𢡊=삞t~_gKXd(`Ŭa_<~\ISqv,U{>?Ϟ .mpdkhpc3>)N5I&Ž* E/46D2,zIà+]bܬ IYza(ӏFb>svDp'fvT'dڱ}TVppPiBVHA4LSAȫQQPT6}*xq}y%{Ѕ犾~ƁG6h‡`)؟@|[ @M\hS.+J,:C{kŒ;<6j2SoTJ}U8)G'HUyKM|U[.C-VxqU f֣bgFΈ>nxګ[x왶vcqS/ؓߴtӣ(HZ)]Xfk7ݹz MїqD8AUh|AޭB9BU#qL?nS0Z ox;H]̭WeLe@  ΰKׁL/.,[ϖ,,5qmo_n JpcBR=7mja֊ZkERh 9򣔛z4.+-)Pc6$>XG'b5vr#0Ko 3Xt+F YM9Q7i<6z T܏o>Rpl ӠUeז9+"U/umH*qŕV%P69oUbm7CX:MUAg>Գ@3?ҐR.t~&z+ɺ8t! PB^_޾ԫ dˆ6Dgٻu2*D?E}d%3ȭjȘ=.YPyE]v&Uv Z[[DPqO 9&3°wZ'~Se.eO%{IEI*4L,xKRMT$,P5'0h_u}S%M,+9 ?~tA`^r4^LR oq"Q\EC3mWʥz0ͱNUt"+)d&@:ŵLN{ǥ7'&=5@*=!uO!N\YMƺ _0 c'5 )'f][\.;9G֌eWA<%r"ag=B]ֽ['|ԣyAK?r7} m'ߤQZV0xn.iy.7kq 7(.74/<iZ fJ:(m% hu7 J[CȈzNtK?w9Od8u|rȇ ;Pf=ei]y؜c`ٍ^QRMPa'y 0;mKʋ'f$[p\=XPo%~Z fhborw3;&8pJ:`GΉK+;E el~Yxͳ: ;KlEqG0$El 4-{h] P W,:k |` nSlsB&DF[s^8Y?/qDJj%Z^ s46ѓ{R3.*j7|DQeXQI 9YL̟ %8US-ʮv3 4Ukr[O 1:qX8\Q*N\o`WcZ-~t1GK[# rZIU,`3'uK۽4\IROyOOpOTΡ%eH\>f $@}s Ux.s貦ﴉ[ᴸ9¢eB=x;KB#뫱9n,ܪH*g9ྋP]'*I-o;|qSds08ORwv ߘ|k|, ^48SjsHqN1ƮM|KAf袲1'z6sW؎8n4]sXL56Q?i()60ߋρBoCM3qD1ÎL}p Hl 5\@[]F@;&s?6-*ȭLvٰO>u \FZa s(uZ3ٓu\D%$j-g!TAZXֳW6g/ldFX/(:Dg:HB^ugK,(#=B= W@Db=Vi MLՌFpMIoOdHXHꃛUPyVM}sSh;Z<Ya@j8pIJ9z[Y>m#W8?SULEM8v_?,8lzFB8FUcK}85cZarҨ8BCDnv8SψI_ uti^IJ& sH7Jjи7f:bwײe}f8POuGF!K!UR`mXFO,8ٳ^J5`" }xkT{b+YjDI0/eE ~H6y~ˉ>0 BaP9i!R.j(|sM1 ^ʹS8/..>%d|D%ygy5)fl!Hwlt^C4@¶b@m$ R f%<~M!88K7 ]DKآW[z3}[QjgaY|~SS~g 錶Qh쀨"ב=cNlGS`]UlQz`;'~L7g(PGz8-lE0V2FMҍxt"P&; ďsjY\fZ6p y:\}BfN!VjE;n,WoPc➣5YLuL%?"Y%Aƴg1sH߭3iU@y(8}_}B 6_-|Ԍ9ϏFNh輗d-Ot # DϘyV{'k/H`P p=8DmJNҒ6mjAPhx 9Ʀcy灛Kb0B]&Y8X$s=s {ٹ "{=q\?%e3m&tQS+}FHcǯ—Jv9yԊL;(W౷/Wޔ){@Fۧ? z"M:$- bBK8وRI;1o&7d^(Hޑ~Qw1UMA e^kGLJu- OmeZw $*?eocFq̯S:FwP.W8SM2w e׏$EF& xi).6VQ"% }YG.HW*l4Q0 +MUe$l@bWiĤNztCpx0Cr1HC3uv،lj) ~iF;|t/ogU$ה).7lY%ˆlp?GNX;b n|0FdD9#KL-ӾLnLxf=CH*!>2jD 4 ,uoACBwrsċW?3m oAdJj=/|]~Z0C񶈲xHnaL_4؈YћEZ)HL ?eO@5Z ^ObD1L>N#nd69B\o PXa3\z,sm×h!FKmF3O }@AuK$r8,:5 C.^HZze6GRs Ԣus#BhVxY,[ߪEq~yN^/Q7|%m?|fQ'Z 6x/`CzQ؄e_vq_945Bڵ]$Z?R{gѦQ6ӯamKXxVh-5L!"DD4UA|cJ%rP'\;`'(AoH:i1g7y` Ykb]i2FĽ[ z/4?ufU}9H͏@=ӺΩNJ’Zw 4RA9[~ɡ|FY:_ZO_~zs ˪BDܞ`a 6Ηū޽BaiSu xARU/ty.}vgi 5*:c * g;f~9Rܻ1K9xZœG/de{g|xAfڃl,?7UPH n@7ONiuQh_3KQ1$XKpΜ P5ߖ}?˱/v X0@匴KM# UPa rSLcs1n3kkv=dbFBa\E0Ѿi" MMxW$ul8J5 3>NXil-}8G6Ѩ!EQxEj93BQہR{N.:D Oԙq25J78-G8%6yҎko_GkEÂUoXo7-nۺȕ&]s#nLf tCh /v}BEluܝnX$ĽcﳛM{EԷ0ϲ/mhr1Y=SB7a?O98Y]jk^:?$>2lڒpV eىդ?-9 +[;.g+@}[J׿QA+8T3_(9=1DfձCߙw)x9Kqe@ꎠ>; [;)vY ҟ]{:< .:qg3hi'$V@GF90iרQw.~>y5K`Z˗_ ?pd;#__a}s$N;I$I#9[*b+цjv˻Sx9[c~ X,8d%mǧR%hU=R97K3ӻ3 㚉I-$/O fN/3ǟxikٙ|s ob4+c9#DrH愵 1e ^\rcMs6嫃R>F|ÛݥsP s$eW4.E GP#>'0.>Ip8^'lvM/:X;hA@G=wWTǡz`,6,0, 2L6O^pSӥ4#>OU> >w <=,)~ $^P-c3f[IBgbLt(X6؊Fg!cJZmaf׶iaΤM|#d5bʙԥ e YK|rYU\ӎ|ct5{Pڹ|[aQCj\Fi+';D6jm{b0qDwq8[U&,Nr#,PũI[uRgiCK] T'{z<Si6(|`+bf@:@VrUL5 {!&pn_ vMA1?vW7 ͐XDr:30umߤ^c bw((xMF/lzr(] =7&qRy+6?Ca F\t}0+SFV#sMeʽj ŋ;=YvIu6 ;@M+!)#X1nԈ#NN)0Yp ȿ]đ.d>V}5qԪ#~A?-ۯŸ&{\P20#>}ɺ _6-ڢ.' L[oL3g޳,%I[0ٯ M`&'TEpK+cop y5`GgCʪ^uC@{=BؑAUz%=;\iVWtX,NѠiuXHo q:鐷9{_lu":J@jmVF@}Ό(Z ʦ 4bd^$q"˹XO"o-Xǧr Cז,덇o_?@4HDu 0{ޗ-r3_ՠ)JW8vTƋĢQq"!(1z3@},7*x.4 0.dV=(ײyG~^vt$Q!d"J\{c>Yh9=Kp=lEp^p(̳Y\}|%}{vƫ?M,"VärH3͍(!<[g[>yr6>v哂Ie*>pFF.`ۋws+ॲd\K@늋-#ܬ~lQ E>C?TBzb Q+dYUwfD'4I+ 弶<v'T 68/#0POiU i6?򙆌9ʼnzbKӱFvG1u[) WR7mpYSiJ'WY?\zq8>0tQYiJ;Q]6| r T[^O? t$;3ʠ>/ #]nZʱHB]@*q$Lm(H!a5SطeʘwÁZ)Yf i`} (UTIC *A/ T- F\ή]QcF&Ba9>cKZQ$xwA&?0,Zݯ~3~)Rrm^R6-jpJ3nxRS4hzh-:ȾKX_BqE;F_("0NJZ\^r tMaTÚmyNC ߩCzU g_={MhD@)Szj&,/*Aa"i/gO%xz6͹D2BpٙuCPJc`X%~?`]~󐿿QYXm]|s0]}OJ0tI r"1 X^@.]%k+:cyc(`N Z9j*8G<>6R SJeZ;K5%T#e&ZflbEYٝtgrs9TT<{[Qu?%hpOCF<|oM,5 J8x'h%?ih-~Faxb2'6ʁ7h ᫵sXt絿YeHQ:y RRPpS[&ռDzZnZD$Jr}Nvh+ 15T_'qBFsr=M93rSb޸RY#cV} 4ϢKPqB EW3H|iIg8e {_VGFgB@</N TSSʮpiT@qaQb@' /?&} V~qR9;F )55JZrke jЁ :@/ ܓWIrѭBV1^ (DMټ Ť!A MH|6f`b}Hv :Ft7@'n!N0Gs{({\PMR;PrGI_ie1gߟ#ЇRUIfBHvܮ4-H+UR$Mp'zF%'}58G5t` FCsɽMg(l6l3!Srۙ.~,5 ?`ccygbN PZ#?ۇJ'j9cdxq8FcX:`c xU4Qg%%&i̳6,| ch@a~H0GT|ފvJ*/,*6ŴQ7}c.%P?#R>aQGB!9Fgƴ`^Uk3-&Ӄ-\RG9G(r72';4Ir%BqٕޭJ\q[b><.;,*H eW-?cV@L-4]muR;Eq5Pr3͌RG>p V<1hn\Ҁ_7BSV}"`V%bF\M0^Oi8(nH"[ 2fXJ1xίAhwvbt4=$J6>Bul&v}d1It{[IRxz :?O}e_<տFŇWɖG{A[ 'ΗH[&~_OG1̒ + yl_ޚA K|lh˾ {ЅxnI/ gRԥx%{$L.[ euݼ;3l㼊6E@` F6/+j^O>({g=z0S[5z;_.Lr=`U  ĝF;37-kEm!`S_L@!9v9/6R-=;I@:-tELrz$vVf:ܙ+vqJ.3J Ifqy %HqKqx+}*i?P|zg&|P쎟_`f?1K2Cn)2ǝ&r{E+';zJ%5|!ΕTw`Ifq0nXrx89y "#gvꗝڧ.uGK0= 01]b&g  ׄ uDՋ s̽j7">DR# /ߏuLb/zJ݃lIQw݂_2}@ O֔b0}A)Ή!My)8 j-E7pY!(^3gP.X$:BmP fY$Mƫ{Y\] ƔL|M#,Z įȪ$w,|o$>#;DO+OdM5r&uɿ,*[g"A11VȷMTK%v+t[xm3xȺB6>@W*׈|I`=9[3+pkXlhתףQ0|MwfÈì #}tKu <E.+C<{jTd?Xe2n( 6-@7d RLtpw:}tm;H7FsfElARM_#Ȇzw]\Vɓ#U.O#OuڃHk1<݅mjeQw\ڑY u3lcKDbeyLhwQͻk`p}6'r:!@|՘j- /Ƒ[[=FfQ/&~\"|M|p?5'3 k1D{"D dK;{L^vt,(U`Ћ>jKY3B垽v<"Ng:}4פ7n:ie 9h##5zA+HͪysMԘB^sؠ.4XhdlkhY JyuidiHCؒ]h *+(Džúf h!+ʰe hiU8fS+ KM: j5ŅjeRU )tD{]]&x"餬inv :FAc?BnVso8w`jɳCq<[9,ڽsJ֏iC ÄJ#PFGw\`s9dCBٙuZDtA(NGK{b.M>ai~nT`FR;7(Of X mXLQ05^,jc ooR(q^$Z8+ E(U;Q_ooTR-lRhVbS*m)X;rJ7A2lPj*73#XpK9qĴcq%?;uIm'TJtH>IˢŰN)=ۨ R}d`1;L+S 42v)Sd\&;s:uؾʽ~ia ڕ.TjM| IK6\u(TMd6(>.%A:8O1p{& یcR-TFx[~8xZL +)!s;:U˂m]J6EJrJ?S].s:M({h)aG<gZ`ӀҹQk?D:˥r=u<7*^650,{0zr/T_YYuj`:?vMT9<<&+s~}UҒZ#n 1^f `@oV/ VEP'% +B,gq9>yzJf}K+< 5GD! *;A!/ELgȆYłY[~4'm-)[7H;SL^%B{ӛ2O*x' {q1)͜kX|`xw#Pc8HqGA:B'Η:[Tt/&+`KnLUEPTX-<󧃘ásm~AMZ٥!B6X Yt}ac+YiSK #w>ƺ_7nWU9]CewGCbziHȖtв]un=0oHןz>؉nuÝ_s-!hMe%a?=T~CEnUn`FlA% .JHՃ_,Ó'P,ò40,e z"]AM۸yO02҈8%znaGC \ ܏i^h4P,%Z_މq%EGP(T - eA$\/#AXӂbB!Qxve5)m(9%}ahE "мkU T$jcŽӹLU@+r?紼geg$id73fA\#ŚUbp%6yN\MIEsq?'vn^6x )]KP/AJͺW<"\ ԯ5g*ql<,N8e-pz0EJh'N=+^QkߓT_8G9bTY`s-ﯕP9K&jɅV5"`%=7̷3(D)]# N6)vxq)70Ys=A CpB4W+ PE15k;6 (Ï}di\ޗpKr0^hI)H";JwC87ӧMrN)kc%&prrhϞ##' b $E ;o{X54HTtU+t}b.Mm2O}o)e=$/ T H_yrM R۽Hh+}Ek$Σ-X@h_3_ " CKY]ݿ輰A8IkiA_ƻiՂ<.-. ;"@ Z=g`YG}lR k 4mK('ߣsYFD8(RwNMr zoI u?6OV 3xb.EA!q[*t,wUK0zriy G+l="N3k>)vE]va8*SIcKуYZ;R2TO+FyWPDBY9wb3EB[pBy4R**w|af0쓪F8Bs%DĘ'p<pE'Ĭ4$G2p&m ,~ɔi],y3þW>2(NCRR?`rUXN Bgl{V%}&e×'2zTk՜R5فNUq &GdBlJBX'MX'xRħ:9[j>+n֠BXļg;2cC\ ٛl;+0`6%F<δ/l[`w 8ﴇ$2'iq'p B[ $fa`b=xwM)U!$=qkH9Ps$D@8xf\xcQpIзx-oGܮ؝|PoSrGNZXst>TU ݏqU]"OG|(f)"vw 1ұ߲lB32:x"c| `\ah՞&~Q$ %މL57( Iv&U2>{h Q.X'efq@m-R;fUVYUr?Q#O 5Qs*Pq][.uEU{uQ8.Rqt)L2~5YH>,3!ùdH _PY˖wk_|\>GMMț&))7G^ڄx(sôAXP;Jpl1hƚi1BYTBLV.Ǩ,,+ŷa8!V\GK?!X^T__>p9X^4gcEiCѰ$+ 6F:;T`0j{RkNz, .v[1HnM ?. d5V-(ls;QNv!ߖ1Sb$P.sLSQW3Y+oC ]ηa;Y$8G"qX]VaN;ڗJQQ'q(=loAjC#6SS5Q/EN?D6dG؄\j]1*ىh7Q>:Ol苷JM)w- ]_t&Ee, Q ۉsqQJ-{j =wFTH6Q & <- lOwcكL ~eO$ Л ^t}_G2ldP91ȡc|6(f#(a4򷆌c|1:Ѥ #k]nϽOv3'R8ܪ^9 Cs*a.2u4ei.q ^)p2;HAi.uLrk_b 5}Ls Ι͑Ud+YN)G`m'ӭmET"F(./`ZH1(sTM_ &YbbxwɳŬ:hGuҘ}U^?[BEn̒U.<9xie@H ȚQ.(?j;#Kk&<&)st"}-Ƶ8UOR-:|IN gF@km.Vjfzqۣ>= {1B#dL bl4-CnZg> YD\VHmR9T \J|Ct*p?WV*C dK~FQ_PdUK]tG9gDm\s Rc&cjQk?dtG~x5G ,T#ձBbģclZ`FɜJ#6l;H"ZY#T&S1!.:z9{;Jx p6VKvݨ@<cGZܦQF25i&&,t$i~Kǡ|qc&](0t6P#XhZmb(t&o6KT3<^ʁ37T*M#ZT DfH؅DK,hni3Sԛ]ݐScE%ӜyFxV\P-k-O*~ /R C_mN!> $#TOC\疟$5î¹i )M'YIn%]8M* ؓZ<&J(hu(zDHw]V_CO7?zFt SgɚaP 8"ž-!c[?`a(+L! \k|(lh{BH7W4arJn]=: ؙ Y{>٪QeWnۑ7ɚtH-v[m5*Q#Hqγ @wպjpnn9 9*S\jH>zrv .dN)Nߘ|A\~g3)bSp<iƞֹ(sBb((AS^ @?/;3GiVJiFؐ__һ<:n;ƹUfND{`}^Hgw}Cw9uRQ%KH$6ۮy?Am=.ߤ(@1Y[UQ*li*rW!8Wm:$5"u %Ͳj>;axV7 CBm!:yۆֺ:sie9dc] ?l$tP:o}; !ֈLu!е@~xdodtJ_g!Iȟ8GWwMC,F ;~㴀29awx\?%C@:`[By52='PBU)'D儃6ZJ>X-߀+s1羧mf&>6VL9}Ck$ ܵ+nu6lHCx+K\Ew*gTi4hU xj0#$` ^ "\,QYfȋk瑍IamKUw4O~cb)2LNFplp7V%q4 _#ُjd7GWàS$CGܐɋKȊ3R$XƊt}L\UيϘz" @ӰmǼ/*B|K=j&'"wf[&mL6GU-+R fc +-cϿK>X\G: p=. D"X!fN域@ Q= sg)cT:CG;Ib(zcsa"v-b ~)}Y ?@w"^-0K[wY0 Hp~l'Elna\uu9rPhjh[r_pL[X4{2eGg?H̬ e{P<.%B ʸ:r+q]OS3$ ݔbN^uY:~!;pB$32>eOY̯z 2g. 5=(!B* p7(ш{\Ch r~}Z܄ǻ}A@Ѻܩ>E;.*661.]]*쮞S1*E|FavH{ӥ?gITB+p)k ,|װ? h=e:S&דFzU3sYkojJtҎc=яvI$] y5p3/A&61~5S]wp.=BDF꣋31µɦ(@Ic Eid?pds QVsweCހju `/7Gm>4zG1v|:6ʌSNe:ījS ))yĨ G3b1#XpON:Šւ@˯W.ޫZT ~6͹A8~~׊%2+! !qbpjZ 1)u=Q~O8/ xe9urڐzIhF_7H;lAkjm -߂C2帤֔=PeQAzR3e=A/s&[#nn0ӵpH}2~WO9n60fP(bҿW87k7 DUj;%k (;6d-TeIn;+1siѻ+N5& 2yN! @1ao\X[s,A 6NW Ɍ5=}c/>YQ5r'(>D:@] ,w_ދAw^p 68[9Khb{~^hLTӊSLuB[t~׾aQ)5x^UWP٤|HQcV!Cȥb?I",lG<!4+P= G6 EJQ Xfݬwf-7#6ݛg[Q|~O6H;"'@};V!E8أ9թ|LgEYF$/ c09V9%LY_T覷ä7M Σ0JRIK.m.Js, v\+cɈLxˡ"o"-,F&{Qv8# ʐ qOXkaȇ뿌:0+K3B`!ǻڏװg 0s<7_?@|ScGLBN.&39h;ٟe]q6 M:t#LF¹sn:&{5u]{GP ,Kh11{`FxYeL'$ vi]@2ʑ4(A0Yܽy^fnzFKefwj&\Fms<3v4q)Wk¹Oxw3lym'Nbxt电mmr aCqkb^A @plIT3p@{vD8[l\{H9^gU娅q/Qwp彯V Xi OOc2F29,sagφz@R,Ms Ԉ1R̀Ӭ^UyPwwL8T`aT%+) ޝ%vWJA::*V}#{Z nc{} g/I:x+4NJSk~S THu V86_g޻0N"!*OS|ZpD/4b’Hop:XV9,5 ظ:>4v8`A_g+/ RIAsH[切+^`(JGq#)< C.VGw^KYI`@2l Sco> 6/7fa;4ʆoDn4ձsTDKrQmRnQlCZq[. 8Koz_]lO–<+PM^3 6]OP],5||w./ߏPPO':T~$Joh.LOZb!G%$k+@@UIxETH@.'fdIbɍ\|*Bx O1Npٳzh1mDɋC7Z9Yȁ4 2gI*֩u(7<I“YޡvTZ":j+\KS.5\D\h G×ȳFͥ|a\>N^ ,Z4¸.+d 3,|ʑ~2oY>B=8J>S\5:Q3-WFC"m\S|Ѵ QxC&BU~ݤ'zdYb]4G:S sNNteGK_Mnm嗗Q$~z-V,ѿ t9qCDQCZ"]ǩ5xyj"x. /2&*P(u·kR>22-d1]\A a*~_E+7?0cz#- -Cwr;ոW\*n(&G 9]X|Ddf̘߭xKF@KC@+P1V83\``@ [6kz'a\VƀlT"JU1+L; oy%؟_@I1 <#1bZ=S>H%7 ,hz妆̸e[Pҕj$ܴ^!tt i[hG B+Z<-Nc1!Iw\\f.1QZsX^乾Ѵc|JD-/բnuEtP(zI_`,}K'f7I(@VGMluV͝x`CN?U.wu21S($x~"6+)vҊ.̋s?qtOB'&n֘iSt WliF5]v!fC ߔ8j\|b~R$ۏ(Se-0X[r5v Ҿ6dߘ84E/mKE ^Lb l.Hmp2HFЎzFoO s SzDMk_ݿxmwMrRt/|4 Y)hn :܁[FRnjA#D%Z{fd?qɍ}!+%o=TCH +;lST5狟W#;6Cؽ/m`E_] ly_# m~)6?;,fOd4K =~qrXSTؿ0a&Gbod^/D싓(b3oiw$ҳ 7Eḍ#P@( BLIdLy;WK1r|z!&sOXUᦖ3(/L_ڵxڎd$C+ &d!{9xk({ۿ:ԗ^"yS$Eg{;o Π>GQ+5Ўo rn=ykbѺ-r`BO=*r[e?ζJ'9yoyFH2 s8DTt /z7ڿYHCrnO 3BݪEa$cb\+xvd;#h$1E' (,sav t%H<jRGa98Zgn@oyu_rS<*S% ȰwвP)l 3O(ĺRemb╞{f~|bIF~OO y9Z_[<)~O*}!!44 ffi1!NAŧL~~zg(֔s-錶!Ys,L(.J,pύuL --0b3v% j^/2LU"I*Or\;axuvevI8Q]`K܁_5@2w))?]&i nS&&˽k{]\w4B 5GvC\<y0K-?]-Ebú2bׄ $5NPo^μ,Ļ&Դ;| ?qB(_M[E 25bj[*pƉMOj$8(PС$ .T$CKK:uHWLpah$7nݐIVhS s@7 BO )?qPMЗx_}v!H$z=LH@9CHr1ey!@q|#evmHz87rzKFxaw^),H6todڑY=h^GDq2{ -G&7[lG-).N2qzjH'id[q{(xQ>v DlZbpJ\mm1@ދ/r }jJqfKOuixʣUJ4cMsȬ1&~wjSb`U⓮70D/;%:8_BKFߢ'Uޣ _w8fn¼ݸG_~75j׺@Qnf}yKaMe[R$W+7$(J8g!CM#(P(/8.V=Ev N8n??!H>McL pwӝk+@DA{G^Ah+mE³E𘓕˓'n\r/e%=ZlǦiQ >[>cEVMN*ԍUΊ^qG څPoL S6U\a~vBxj8B1ggEW`FlG(9ұ~LK ͛c $5R +={S&e(k9O0T㣕cݼH_G8V͙_?d$*UJb0)`O `r,6H_esm3\nt36R/<Ɉ\RYrr4" yJC,xx0iemWճc;fҶ9']v͢YT 0Ϧoi{,*h%өSp4}YE}jk۶'&!u.^E[+e\,UDdURՉ0E'Am;!//c3|.mc* ̭"un$GlzIKŌ;B򭗓j'~W3l,jknJEbŠeDȈR)U~7t.;2bDk"BmxKn#Al C> L"es1 'Ij8NHR ,a@j_:]IW<Q0b2\EM %-$pNu8%}y/ MUڀ ,k[hF|'ϟ91os,+ͭdm@dj:-~ur夑eAU|4|\p3d3[pѲ(i͝׳G y1nKSa<^F} rAVM"ZxU.h2}Z|?|jd`j}sbO֡⺬-Av6Խ3XaA2I8jlqOЬޅs2S䀛A |v㿂[$`wOd jFA _>ca @y ?&ٮEZX :0%Ab1bLNV?x:QwXhQ?@Q[{smy.4։ jyI{*9_ W1_x ۵ű"ڲ科k`ol0>A4))yxЕ1(u06+p.?2y4#y4+£r X˘:Jf8::[?:@?UӁ]Wb$N Iߵ>2"}`x})|d/%*N|M1*JqX^g_$ù w6¶"d.3X'nzː80F|>o4]tM 9_nu6|hTxR-tHd)?6\lԿYmJYj9`;=mUs^ͻ aymʕro}6m絙?vW5#i7tܲpRTӽu)Bx?TbQp9s|PE[;}q(BOr(%Z *@x-~eg ,0=^33uvBH2r%`ieXV&Pr1j:MxC3&8Cd]gx@'qTñZGT?GĀ>YouVډmj߀ o`>Y͛do\K&E * lDA`!ӮDށ2\FZӕrqb;Rˁ+z`W$  7)Cr@+%YAή(_k/T[QC5i)]sߏ, gqJ[%-ε2_:Wh͹_Q" -U>i?6z;~qUQ+IO+Άd$n@D?A6Ai YF7n*[ecp.ޛrΌޢ?QlVE~,ӬQO7!Ȳf:Ai=:OW"[ #Fo>6 +I6Qh] ;~zIƆurCⲮk+FpyyU!cq0#$R"]6B|K} oߑن&HB C(e'RbSWc:9ڰ~:`ں0A}4833{`ULj.k42Fƴj+qvݽk)D=ELN+{'N(_M$<ȜiGԯkӄ9|+:w|7T{pbco7KS h څLcQl@R(dzx }=>N)J`*X1c cǍԡU]}?Bu]*} ; HcW(B:bX '%`{{W: *̰CL~GHfHxDheĤa\ JфB[jMRǃ`iUtORq'̎gȍ;#7JDAk_PϨʍIp'ab/nSAԣʷ|ڞȇŲ死o\bI/#o@0Mx<͓Pa҆Wv8P{i=: TRaHh([[xZfuB>; 5/8ukQ-bdt^:QEH@>WCoGr/唙XT2]g6v(>nNuL{K<` 7QYSZHTE#X0Vnfhcla >f+Gh%ױ:TZAC#n4oJN¬X6B5}{mUWFj)+{0hqYEf)M~F#x>xe' 32u`أ{A,$Y"Dؽf6vu6?w-h[qIFk*;=qٙo~~:Yֻ:hԎc啄+C@VXSgT.M4#@5Ӫo& ]P-ILpvzBpgu]w2/E;qcK`p`ɀu}lkۅ7Ef L%JC?:<ȩ|Խ3rw|YZ/~M%{_WS 6oTfu2mHh2_%lБJl}к-p #VS C.닐&əX j~Mk6R6WD5f/jՍljTe&Ì7-.Ar4lâoKNXe|`$d>yg֏w6"H48*e [ꑝ 9\{?˜e@u5|m+tf;wj>l[;L~]7]<B^`g:jZ]{&i˹Ǟ p2B _9n_sI|=Je,JMD@?iࣛ\XT]\]i-87 N2;I?_K+F,k۝A5 vC$TYS>|QլГF'@@6MԈvN!=|pm=ꂽF d:aЋ,4 ],)7,s!rM= K 7:P?gSihGCI6z7j Ԅ꟠]x_R1J_[?֫f EZWqC.d//ķ l:[/ݞ?tK` Hah1Sh0dւ&+")H/wnwF߮enNm& 낭:'INOl+1;G$ٴw'[$I=DOjg@6sxeH5gSNkcM? _ކr}y[jNT5٘cݏ'%h,4ؾ&zJd GcD ]Ou#sq2ڶ_f'we=lP²z?zk#uFzo]0$P$RTobPR+?mֈ^;}2쏈M?%A/PLjt6ttZEE8ާ#XF9ξ ,$p1Ęl5)%4 Y8z= XF5S9> )f ajANwXӌ$<\[}#k66 и$%vM2Yq*:2-p5&_ B.SwW+BtJO>bk_!2}QDBЬzUtBziSar4:"kFB^e!‡@tɇZYخUz\0 Xs _]cjW帝1*Ng (w Oܱ;O/JT [P-;BZSijei=_J|d-6{.5r㎱5]OX **Wdm5=w+ yU֐ %uau-T9``l;x= M G@oWb[,U"Z9elR6l >iBDĘ#sC4_X֝.2ED:TJ͘Gڼ s" pu1Xi(s+m`G ڸlL*F1 gQ&+ڜOE%p#9}b^-3%p^$*,TߍtȦƂ3Wcx@+/>{Q!@BO٨sSl滋M 0&Rޖco(saߎ蛂ē7z˘Y)?dJG|B\^s*aWO*MtXVif%8m  FУ8K&i_!/wS]{ي4O%rgx \%Tz钧#bjMJx܇JZn EYAy48lThޡFJe`ak#?S[JfåQFS4xDii+3rCmK)SӣNF7lI D1RS\Y6P%n4;\E,=`9 A}[FIao+gQ׳'[ǡqq8#ݭ=%; "A8c6 hܤTNtg-)!=AR 0Ղ>Lt B5/U'O;ƕL8>ČR )~([R\ccqC&MoتJXAN ||wJ[Sm~lVf {v+okݱgӂHBh#e9/JLSe3oN]~),FH!챞a0I\ Š13-4݊i_y/ʜO I8A@Lw>ZߵFR~h&8KHt>/A'El ?"ng-pMe uP{:A>f$F3UX[IpTrhA Ӡb2X:T5{_UnmgFy*Tڂ >! HXNnA'E4ٮ25;;uûc01{cN5>U^P3, 0Tf|CP6Ӓck$1&Q_MDq7 lf"b9&EV{O,fַdQMs0;:w,6@1:_|˱ʪ_Qe@t+<Vz EF09mc>GV]cTDFFqBNGfBSh# ]Gw:̪?~p)'Ég?=tWrl<:]n۴ͪ @j$mqaDT9%'mҺ}\"[ CD.:4prZXheT:2C8;X ]NXrVǃ=5?yL>҂aKK O^j fcWiD!L-)F~C+au Z%ebAt IgjM~QQ*QfZ\@ϑXC1?n2} z#s=_8й8 ۔${!ZX n⋂€fX^i]^^z.ͼpe'sWxF"^毌NuڭzqN7z 'ܻA>9Sp@ &Q^PS 9ߌd Ϭ9FWP%\ܨα"ؐt_ж* Ui: FWH"@: &WpJevl`0q{&0v=CEzɟ+!F0tϊНyCU#j)&CFek`uɨaX /ܡjry+?73m!oE)/2^JL=#Hl )Nڐ9ԡG GxΞAL NlL$:3OQЙ0ˢ\KPVK>_MW)%ju=Ḳ0 S"3b-ck=s*}EgA;]NmkjOjLLɊ埝N"v"HDhkS>"QŲU DV:) B˰^3DlY]Q#@ ɫ1}\$!bշF3Fp.I ǝO*fcj.O= 1>`߁)݌ ׄ2 :| ١cM Ix8MLpiϭ 3t5w(K0S5e%[ d'$FdRq g5P8~f NUOS}7sqCgh5GQ˒ ʉP Aͻqb#æ!h!x&v=~x>C?9SQ+@Mf$( #=]9mBv`C}z;}Jnmd |Iu#b4I>ɅI#P*cϨ>T $H'001d&.^)0sk` R~a/1JH1jg<4{b'e 9B O(b ./Z'u^$`Ès@` _bvdh~U,vW!#Dō%m\`%| Wqu|sfvc;et!Sa&bU u(l*{_|sփRS8Jg?P]|vj>* qeEޥ(uy\0t;v'rgG GHfuA8,Z"dijNA;2p627\5VF3OMeZA֜_DݐErQžr{mlPYR *l,wcȼ#2qcpNJ=+;f+𚉹{1|}T3l)Ǫjjl h5F47FװFc6"xfxD9YM}T`mV#zAra#(ta!B7bit\ck\-:a]V Φ^ .ej0r  -Ax C2,R? 30=RGN]b<ND{,nB@zK4bNlr}y^rfuLqXfH)By zdH)#ZI}J F@<`v9A. r4T"iE6K02,56c?) gVn9D/M7OL5~l p=xjjo:240Y[S΂4S>_pHѯ!Յi@͡>mZ2م*y*C9!#ZBvQjZPH:"<xMu3 b5Ȕϙ+vSPy&EW0G{^BN?O}?zpF^5,^ǟ" U(!e}J^aSrQ~EX$܉E ]lH)0o?S~ZJH-3iguxy?yh{W.u& o MU*IW 5]}R0PrC(r3dEIP]P/kS\2?([pDs9p!/Q̌/FNAi9 UBy4 ~$9j]v)|MXjW?Up>kfCq#q2Y]pϦ`>+1m~Fue~i@}hv1q$"9CfjhOiҴ7GL@{`"{_tϮqoĝ1U˹B(U}ə cJx·ei1˧"R9脑 U"> J>R?ߖ1Rezhښv-[>-cHQdh0䎪ˡ uQJY,(MF5kȎS=-q4^-Am}ƾs98r YBN^~kx c$čV i#!Ld΂2bBw;\:Fdg$y D)4 UlC ^=钂e#t3IeD2(|(- "<`_J L;ª%o@JZДXGԕjK_w\8vּ郣}~'݂FF`gipDy`<B~յ#9 _naYF8) v;vuaY MݯHe/ UP'ۢ=I/ڛr҅- J#dC5Xv`X5脧no:lo=ҵ. ol-?;0*-&]%v?|k78sPg Cq㈔~u4%fm&:MY((L°{v g~F6KIq /sVKxAiI.FQ9jܮ1j{'k_HFm$ʱ[@Þ*=wB|BX ckn[ jmH$ ^kWE]a~;t02ۃ/,qyW8VGmyAmYcbc"DkȿmZ8HGd߽]5eפǍ.m@op4,Y!gygHdHn>S4ǹ_odao9ӈ )`ò+xQPw5Aǩh$AIc(v8dAq8+19̑S>Աh79-*cg8dG\r')OPE>%Z(r\&Ř\fX,S"\2 ]X&x! vll#Q=]aMǪ-ݳr+^#  escʮ ((Q؆hҟo}%k_aR-Լ߲ۢH3̟\^xz=8 < nX7:EwNN>5 ,ÏK`y5 p)r1@?ӓ%\= |lDC+P+2OPV"4I,WQSSTs>8|ZeDT Z顄ndߎBb88fJ`ld^C=ùk~lya/yg!'q .Ôm4`$qMsfR#zgB&1 ŏ{ToVhK+|gA} {YR66GEANKԜv]4+b7,T6up:OZy"Qj[!BH2oJ?FS 9\;:n/l n0cu†w/VSI&4B(j"`٭79zJݵ|ƻfz&7"Pl| C?is:+\m18r␡dZn? Y_*n9ꎻj373(LPqr,rj]1% 3U[_y3Ī8i[|^5-থ&~IRЊ°" ogn+ꌂ |Wej?Z렙,EQݼ گb1#I &sO®̴:᪯EڸEpN?Ym0ٕp+A˯'W?$XoLĿ ӫ$P6myclоbT:iS~eazgbWĺOO" x <>*vd-ݳJZ:cL3ECצ{@ U.";Ah'N׃E !^T$Q;#H8HSxp赘3㇫|9"Z<܋s.C^C\٧>=[})' 72*&,L(!퐖$zwc[')Z ^+j8Cs#aYkxHYF F|yuګVl@ s%aʼioAK>~[xW+N%_F|{=/ vTϞO+;䋧 X+iJ++8C+"׽' tA&oWw1HD2 ("C"lgpܹǘ()j puu W!\;Li `(_۽𪾜X|mCG۸}D$$zX t҂`ٿRo\z*l_@r\: drl,3Rٌ0'%u XNnnf*,g\gKK 1vZzP@wW~ݯ\8MS(psiTGxn2ᖨgaM ( NMfF~cbȞo.` waI6U=َ@aΜJU0؟>AnGb\93cL0?ᒨov ^ũX)c(Y?݅X@g<~c}_heC<’O$HwG4`<{`@݂͒^&5;B]ng,BeX<gRZ":\2n*֔ժ@iB^ BxlzXps[,mG͸P@:?>ϣ`?0X@ w{;XUC"Z>oT}]3 gf´.%+?j6MwtW5o]_C!fH6I#,k78q\Ϳ6:`=XM .lGZK_D՚P9`^ErѰ% U$t'+xivEߢJP|j٥GOxE6LOnB*?PgҒ-F81&fb}̄1FFp 0/H@7w~l/*^LxOTC\2r3ʺH+y8pkx׉`Yd WIOE UQ؛=)Gg͓W&9.4_e:yQ DH-vg!eF B*S)cgM^_VvU [1J?Z&+3/yݘyKx42 ď.[tY%̤u{eO]~o CfV%Wk8AG $&%IA3azBw'*ۗȖI-q?u~Jg3M:[|od/g{@Aw֫ƃzrqb;iX(ZGKVO`m Gk/݀ ڡźΊ%5SX!ſOj\&6#n{)ɐ9>(_4ȑJG׉HF# _x) ہ4f*̘Hz0WmEu˃(f N;T`ha}b E-[ZK֤piC`뾳d:,c.גX0id$1&,NͥSIVbOm&d,)ě]Y%2]`rA<ϸLYag& FόSbhάq/w%_4Ձ7so}Ouju2'$G=6l=F+ߢXfa4  WYtؿ10I 뵞: h?aKz:U>S1uNW Y|8_ѳyǤMKU1>s5hO­s,];TH-fy `bNO'// i;n ovV TWxʞ ʛX(WH)>%g+Ie!fvă&s#75F[< aw:D1INLy@L=C=ʙ{sUwhLvG61[Sc26 ~:;/j5ZÄ<7ه&^ y  ڹvbB/%(`;F $kXQ XCjx'cgw %,} 96. ݛAN%wK`[ EAJ%1@w,X{㰓wCݖQ&/)$aFHKa 672+#uK}.moo`R;N9q'2tV OuM+ ~y{F0~bLc |d2Gy-}/0U8Rւm')_̶m2f1 8nZ$e'tV<3ίrDQ1˴جsn65+pl”JĖIpk@U'k!XԺ%~ ϲJjf^UI.K; n7ai@_ԥmsh9fxNDLsU疳R _|î-ix2L`uj?ΟH ֡Sx{G+?:z@Wzڥ2v҉3 iFL?LpiۀLN$rvs*cCve=tLp\5IcNZ6%NRQz׸&ЕLx{WE31`4$1hbG\9^x7< 9#Xlޞ@;Ѡ묠IxT5N?WK~=;hqvwD7N X +|b=^(Go +YL%͙T /f[cޏ' ].PSʋJ *]=J" !4,5U$&VY|2ŗ,f'J9 -|jpquV2]~ ` o.X+צNWJV{ZxLBb Ziݱ[. 7qN y~*) /L9Hi$.!p`b4 ԓih'@"Ss F%2M|GىO)^}N2G3o)CM^V"C8-eF*2lTc"[2끟E Pmha2eJb.qU$DMA욙bۣB`b3T4*`FUdnh vZrԠ^]izl `?*z7mGz g.7[$]WC# n!XN`T~%.?vAiFAPl5dS.ra1vM:p b? EcFOݩcvc ǕQԑ_]0*qY{]9X1|#=5!V̓Fx} <qs\D4둥™ʋҔc7! F_<??+E|aEWW}7G({X j([9F^rh'S֍E5Mb#͈K7;Q1B1{_< e)#fxK` )i$Ҝ;]'2gnrbyfNڑAepa:y jv 5D<}iqh"q wчl_?_|c9g%R$inٴE6‹43mk5#ۛfJ?)dNm"A-@s2asVj\eoxl֏-5u$;MнBiGo;UeWLyi+).fSc]48ȍ&ڦaNU}Xgl"g؍]V7!QsX0= Iu LuDmhj=Iz!H ͩvh\] 3Q񷟮-Yw!LKlfYۇ;pi Zc3G}vo(M?@6Hd,1f6+QyPCN»T[wB0)+#dm+ 28}n:Yn'FC {P]S6 Vykٌ{hToI7ډWKx]]k)߷^Z/Fu6wflݡ`;GlYC#qhMd{.U  ?]U-g}lΊK=^bHU,]=Gݡd\n|;4Rt|P;}-N栍ōQnn\EzM$D0Y9(vuXƠ敡jJ"(m G~^N#:$Ҹ&:tC 1-}bjg kIϞy-$F|0>vvtCB Ƭ/&~Ftȑ/,˰JF̈́.q o^abqՙ4q!$N^*)k)W\{C֒W]8HN{Jm%fm'cEl͂)j8Q+M7}ddd"waMPƸ%ez(2h8;P3k_HVX SCwlŻH0c||^Շtj|T{x)䤣ąrtxz6$g_cd<~޻v`q? ?d WBu0G?JN',0΍jbIJ/ ,N)ԅA?50:S0<Ɠ sm\t7m <fJpd _/f-+/ aygNb66.9S #]/ JŐؒ8\L ,Mqz)k] *pV\1 sW.Jގ}aUT2I}qT'ĕU]T_n0r){S=KD/rNSZBGS>iqA3o~ .d4oIS7d Dꂊ02s~2kGZQp9 '`q~ʜG\ rpw}$?{P~lX+o6=-@.d"|]ma)K5q{F8w'# 2@νR^!MZBo2day5ڭ%פde?nNR*#{oKw͎SҨV2U{8kȲ?Y /^1ym:?[e/iE8@!ɴC r-؎['%ޙ ̦?WXC2Ixewi@ Mh?MHDp# QΝZb*Lk'Z薏:+#)n iћJsH`n (0<]2^ޜ HN\N+L<%E"Fa>vWĩ>[U;T|:42TMka{Ԗ1lݺe& 8~2HPjAb1WKT,֠@;Zf귶;bNU#>u˵ ATΜNPq& ?-El SX@ PK7+"5j!B!l,_1\ۤlOє[XmV;Yw/.(X*{ t"/Rr)+4AuBp"zvr݂P"i?mq)d]^eMn`D-Ni n2\؁{F0? 5HTv1-o$sJ Mŀln؎r.y5CHļHAstwkB`bVDVi l%DuXR] &2MSA]@HdqDO몊WT>moMH.`yeQW8[ qؕ!p CB۠e?]RU^ -HpC̷O.xKB| ot79jmF)HGE #w#@HồuPs{ʶ̏T_ b Z> $[*G~fNSd D <  $V!󌈟J!:P ĶT+QjŻ!gwS\~#p >>tD^;ј>}"i2TZl`!:44 Ԁ}gw'}42W#;o~iusZ\UH'P`S2+6XqZC=/p-?C9g.cn|D'/p!kQJ㢬;6k;lāx|):xx4 U P~*c{KJnFvv`c\BY)\OuvRoIw>O NGz0>D&՛.&>ȍ(0Od|_Y؍haDa]g{&I LdCoABTe-/&vQVv=%S7{!u |ːi& D:P%U0zXœ~U \9d;\P-p>.a 1;\Q%})ydi4I7w3 ӗ24k#q?p WdES4أF /t@RQg*B,.z.!%2t"6\mazs$(12ϨSid/9_;񯙫iC/_5PjdZ$OhWҳ7ǮO3VP6+.wۄK%?D ?aH*]JRvq>[7~ ~*@ *40" B#-꽢BlGcq2x N]+ ;Z 5h|Yr{sw_3슉HP&9.c(5@~"qnh1ޱKI&چ4oQиm$TauӗjTu\i[#Q/eT9TtS = u3 >P"*c;1*<t?c}w>ǔL2J@߻ D@6=;D'DfP&DeF$ɇl?u T\-g"ZMn4Om8x9;4S\)X`QMxYhd,~Eئ`oaS!MbjFQ\YϹ%U3$}\|_uvӈ)1cTRTQ?Mn+ȸ)g&z#sy&ƢP/&kI_cLXrr3,?3ep)-Gl^'$7zz͡eP(ޚ22Pʛ~ƩegOK졏 1n`UŞ3eH~ FgVL I nq2͝$k&YиC;aJeѭkvu5w;O rgLġ7^pDR}_d[Y[c @& @3TReg담 "Um܁ȷdQjWM"{j?Ī`|ɇT\ b~3/ЭxB:dz:=?2ƃ`[5FK-~^k{@| L&`P梺0V@sKM`ɋ( SIBqkTD[=;lvPp{ {Ft^~1[!|R H WH3 }m :E:R sdMM^lH.؛}U <'S'lmКs=% z'#X~.5U2f&tlz͜&nޕ HB~Fp?-%~晚*:&PC}lMmESf5FG~]Ga:Da9}!ø#i@/;x)gKْ9tIHcLFPoECKXD'Fka%L(s< XC',`s2< ;wr:$R$vzu|fcj"l_+o#s)ޟ:e:w1 ~gF/q IP2Ujx.EE"V1 7dp?z[1+NLKoGԽ* m $=0ܬlyw''_tgA*Oy@@,KṻCE-%6Pƙk! p&5(Nt;X&DWLaїS%+6VAǁ>;,M1y{*T4%¦LDhC ⑸L|e UUoBw5rY/}&0e&kxmF)9/2Yvrq蜪fX5in,8|zc3(Mo%(>7LWytOpa:،TQ aRmfM:f +G@i]\FMy.`1;'XQR|p-^V^.6&"VUXNNMi()cKVOcaTL>6dU=D/E`z2 96ًGt{\,H=J;4@<{YrElyt]`J|{5 + F+!-{ v&ǁ+!c$L(2:Y <$-29Ay[V'UvZI뜀3RqRqk`M왲E|rArԌ8zc^F)BNRF9!Vv5ɩ]AuA[o6Xݾ07Cڮq4?ipWPD7ʛ>fΓ'w.!Ϭxd;p2v'>O}+51d-  *=Z#CJq6`: =Z),MJad@'d0=1qg$A]lKʺ~Ho͛E-\T n抅bNy0,ܵiI="nx[йu ,A|o: #Su?2~X#bC`S>Re|N6$p.) s&7\xDDYgtNq԰nWM'<&ҔƁ^%xlx o٪ω]$jJ8pX^ 27euK'bD e蟡ikGk, w- j"Uz'/J+&,TBSa@G9ECrKkIlcç9:nޜh 詆P8:zmD" (g'OH09;z7,;[K33؈HȪ$╈^jx[]$l75'_w0!(o{!CD?\ᩀ*D{u~5r ]&_1.iN [5Q+Nڃ;Nˮ-TG o;: @AtvoGɑpZjEٌgʜt6tBZ ?3ѾEZ==DM6ؾOR:e$艁DxlqŚήS֮ ݦ=_F4u-/tH)2/2q8:l o}FԷlbk9 DPh/T@e[.Ag%ij҇&\z?r[eoxlVdx'DR k4TCҠ%P+. # A6OY]X2PzqG-^ 4;oIK0Yi^=lR{Vw,Pa_(#~5m2[#U4ζ%y|CU7p) 9 \!4d.u*GNE50̠ VYx#$WĒ-ִpNcO~‚o` [WSªHE\]87DAC}#DlњzQnG,W}4 5Ž hS@:k{ یb.>~T|md4e *tNz,ZX 1@i {BMˈEX>GdӲ~]r76T6 Ls\M>7=wvkBXLRXm>ȏ'|הswPnLnۂp!wiFuJOS 7hbh]!vS\+4~k0ރwEi NJ^b4| C!a a .+<x۔)VkϷAMy?E]162]=RVuvHcu\eS 0^OqKS(@rAm~>:ȱg2p`[H'=EDW=slÃr_airtJlG3.c ε2FD ~9vXz׊Y=\ $8;q2(%w~E7B7&A[ $iD-Xwu7v'ϒ̘ }XҔ`StgDFϨd'g𴡡, SlJ7BJOAxKyެo)(%r^r3%"FG,$Ur.7Ý\yԝ2 Ȩ|XiN gĖq= +;J}e@/u&Ms;Wd0k%ka0!'P[}_S袅l"sqw)T]ݗXUrDLv/(e~e~g@"c{XsXByu.ɞ ԁ4I6qBA.]~Қr[f솺 p9?B^/&X^ ѧı #:.,VNU~ Rꪣ_W$grw"Bʊ̸M&`U(y$|^M Q?'va3;2\3)&`IRWkSfb{.Ma%eEs{n{V2W/ Syz! 7yU7/~@ٰkNs]L~@qXZ(>&&;Wpv;X\8ԅe7${{eKP"+I9 ]Tz0މǑ*g`)[h tJgk ,U]1Z4goryZyh۰zQ gB,l.ﶠVpKN]燸I xd? \5T(h[Ljg`Ĕ4B )CnLĂ.TCJA&hVSn8~1Af2pvuj.=Tj>)z]CE 8R;Z SNx׍]wT2SZl"T6p$t!H"ǫe@גlf %/r ?φℜH }vχO'0kӋu6x\t' tfD~ѨS \q02XE=YNS[.1D!*F9\e߹ѝ0 `hPUպVR XA^hb_Y2Y]p ;70By4Ъ^:SM!q 7K?>k?y/a-'J c{h20:_{St9JW+r Mlw_M ZplQ|¥eFi?kD~vTRqLg#m^gvP[s ԑC>$9au-`2 lHH#Q]N |ޯbRJ&Bv> t:]iHdCŹR*H$r[2EBYTiIn^ ĥ}$<) <X2@ZGiOBC,Mk:_Bd#w[zL> pH2!K}2'{2hҽ!E.{ G'4ÎeIAWBu_g4*ԱYF+ڝ1xas/;EU_prLTN8VaX*4Bj|hWG1BtbOïp_-DO r-O;0IWHqǟ[?v4߀ БDdUJF1]$&7%iez0a t)KJ.)X_1M?ְww K- ~OZQ-:xl90a 1s0?ٍ隸gxnrNeZl ށ(~YuH+ξ\-dЁ<ϝ3؟w5Xa̱ TS$4oi]S`1nw/ޝ6XĖTeh^{[[@1;lM_o.\]۟RguBǜ$I&"x+@gmy1O A&o³b4 _de@UT,T)(Ⱥ߷MdR !6KA_O*{aP|lu5#6i}Uf&d \פZ~Au!t>I9my @Mɲ퟿^`?`,h.56y1k[P*a-[)=-w>ߜ|/LצN˖F-.`r湦Gq2*[묆J\5LWdy v-$9_X\װ'ZQD +3Q4iJQ5D'{4(=k\4=VS$=IGB%qϚ:LSoxjٿu]:bQKb$ Շ ?,i\bfP߄4:$),"wn|-kP}pl؋q^^~T\C-q Χ2>%tS ׈ .fO0Mb>IFb?,JF+&Pd2ݐtrƟ /D5NgYw$St偼pìIn}F\Sq<ź$&4T8TX.$ʐ|x9iKBdc3ϐ% ww7xwTVɺqͼK 6o?Xu:­,ec3\/϶N&>" "GaF(٘{su?<Ɓy!O={zu0_Q2iuokN]wAP *R4DSFM΂g}QmёEw!fHkƸV$U# Ժfgu"҇xH^E7hgyqrH %.mP> 7t6QfE6~( 1,zrLm=ZAC3o8Wr!XDa+BM<)c+X3XHk(yG_u"ڙta3ﵩUq( rhqm[. :` GL[,hKS_m+RLcvas!=Q}z[~vFEU00(MHޑmtGLa[}oT`O5 Ѿ~M6jPB=0w"bn CbXiV4; C_=zo!JE,`E2k'E8c#v`5/Y/jPLWC=rdT:O5u"n?AeiVlO&>*xzJsY6[?ĵ2ވG^K<+'oILJ+XY:L}bM@0d$aHI Y髆Ɉbbol>Wpv|Os;ҌV20r3;gqoi,BI=;%B"E.FW6Wu,]WBR ܂jlhXYOg“JB B,IHVq^9&evT2ÊkQo/Ɩ7E?4Ao_ YhB9'8btY}f7cQ0{s) ^_hN{ѳ˫2UJ \\+S:j_Qp>@r/tCK(E9cyhJׅ7%ġPޙT `o,fX /|Yԅ"ƄPGGs4X}57l Ucg;,)׻Gy_7fs걩2TP頭`+>&|3[JzjVט@Ю3ױ HDQ(|aoS%ݑJC$Zm-%P@۽8 ҈?XW-3ٸM8iXW'᱓).t0t#79S(""_I "ijc1NnSws4& {3 o_| YThCQ9J0YbR7{s3HV5!܅BsIL-'8!}Txv,CY)蔔 =urӿbTPZ c[O+فW6yrG,Or"M88SK4v(N&MGc[\l:2zMG͓Z)`{5ëι#8iS s X2#=c5u]Vm؎80g1,]& ^EBF[.0tTTBw RYH_>n " &~hH>A@p|DkXK:' XCb n: b̼p'"QX5<7ہ[{0vթ 9䪡HtZ3ӥetsrA=|Y\.ap6{ɓ}=^K%$u:Xw?F  wCit)}K[[˅-.s3bXdoIT!vA~t&Mc/X"\VСcĪkl,7%3on&02# OgFpxzw6 =BQyFb=.l}혬 h_^y*D0 #PA wJ [Vd$zҺOL$&3FJ7*ԙ1r]WI22ҝx <^1߽ujHT0-$ڂ]m%6ycfP!c*U6%Uo@_9l},>CB{HBZHQ5ߓ8~$tFb7 #̢ŬR)?x3 Zgti/ ʕ$>elWHr\~I;/\(~_ni{~^U'H`>Z{#OT)440tB]sXL7c@|_qn>%_dw\xO8Fm1TNyuGS8< Ea@@\b7y ftVl?XgBCU>kb|'Û/ЬSgwZձJYPG'lob(S;gB$I5N~L>|~e͛xjڃuOMU'n$PRb [w:jQ&Lwy<^8g,Gn].}F/CUdXBݢ#-.j8\/ RZ 1)X2tZFe{%g;?mōq<JM\]B- \ؤRrU>sܘ Nu^g&X*;hd,^wٚXzQ2]>K[VO0i@.7)X{{,%C"Wmf<\-?V,~K/q_*ˮ%q 憆EZ 8g3swMq/=Zd? ZXw>LR D/:oDLQ3!W~UQYkp>%!;C~ɫdv AֱUjSyS6kDOHl䍛^-)k%3ZÝU% t Tg_!}..(V|ahh$9Y I]c^:>ޝ Z}[uL < $p ل^W΃}J,MN'Ҭ"] ժ-I!;D_ 99jϏ ~ÁUp.EuNĶW<\#^${BWPׇ5t8("/7 ͐"hqk__;z̹7H?I5Тk#-?6 Ėl>4~~>!5ˌ%>sM `D_yð=' ʙU5@N*3,{t߻kڒq|縞RP/q)'Btӱk0 hK9ҁYbũdBg%eQϕ/*w5(Igljkdɏ|`xpǛ2)x Eլeg0\!3 }^SRlʼng=,]If YŲ{K# 4l^IZ8=k d.4J # ˿80/5.kⶻTN=z#?ߍ]lKy:/j^bpDHÆp6_(Xn$$W)=viZК|Z""W y~4HMt̍ZTB}}{ %uϝx[R $t kj)^u$IFv|>ć_\;m<>ﬓ2o`~0 RfesFBc" @T:HnwJطjo6p@4b`$aTZB`cbSN{$걌-Dч4zX;UB|^#7%m@ %gC~4GlQ/B.Ҕm_id*1|@QV$<B;e$4 h3yeȻ+x1{g3 GY/AϿ?:Q0Qt#Vn$|?IW{ +G-Ru39՝l-|5*J@t'26"0nʾCgq>J#-Y}:2[.})zo,T* *$l0N %=#[jqyDɜGlݟAzsTgM =s7n?f'`"ӨC'0k tfL }?Gwo_`Re~^>!c(ٞʵS+D Rx0$'[8dܪ,&ڡ =SB0 ZW/6AO^(Ws]NտF>;W(.}:Eu }ȝ]P9P c]`0m׈*s̼JR1YS ݴAmZHFTx?W`CM>O^TsvWi@S|Mc%P34;c7~HHt=nJ!+Jeh%?Ju&ShHR8a9ȋN創)εiWZytQ*o1zC ǠiXJ>lSHkfb0 9P?Ra$<#1Wkj2bU%1֦ZVPڥ]}:q[a1;xa2A %)xPظtXާ%5B\4Ø䄖&}Sbdf(^O*0VZL "0AFUBaD ۝F[<%|93Pp`PgURk.H}u?Xvr+~eE;t3 Xu2σ~ |%lʔ9$Cak9zj%4yK#4N@e|?ɩY@TZ6X--iS#ʯElq]6* ͻ9 !{dQ.JZiA.ޤ8EFʩį8w!F!gQ8߇?D+͙-7V,c/,VuUw&U"c^JHU/$Zza 4L)|+m{p3}PgB1U? ZWU.Гw0$FW롮<.`{o1as8 Ϫ7.Ta`$V*"s>ʦ]p`qsfc9.^{f! J$.k*+b/zAYYhZuOvHW!;E=Zv\ٺf/K_j/@a"rE@2|ߞ*ٳ7s ޟC%-*67ӠpJ!0%F.+%;fi"MN֗:\Zqd(ɡR,7 h\r+h"1b=[O6v:lI(l mnL JzNRi 2/$!/(D:=x0ha '> ]$e->\!/X'g( BgU_3{zV ?WrhtH# ^n<[}3`iu{"g/ĠJf.^deqD\G#JTE%gF^~׏eZEVk~'}38<%SC0J5l8n\9XݞΕ~Gi37f\ͅq9kv+1e}nePgx|9" u\4,/r 3yk4ѬN0A@=Ak>Op?Ġ95#BeC#,;aaҠ+ ڨ~QiP^wpv@}~sw7Ľ:Vש'jɒrĤDl6ݔ 1wQOwMmU)> J@8n|= =2wEJ@B2 >Xz v eAKG.*G 5-^f}_X<-9&|c/ŧ Q͇d7:.e'*aLd{Var)RGmpC;\ls0y?Md+#"BҰtuvt D YϿIN;޸w L۝"&ssMYb 1K80tJ^" FEyq\Y:SEj\ґ GSvfmI|B$e)e~#&+=!~Z&D_vVprT|пQg8OaȳeGuV m%t~k"y4,,рu-: \ý9%r|fI}Zh ܽ<]#?CȲVVqhܩ]'a~I; EZkR,B:ɵd0qcP 7܌Oi`Cf;U<;auOVC\fg|F!bh$4Ehx YjO.&c;˛yl ^|DOCpX:XۚfOcPK If@^P7`ةqQgQu3]VFL@O Dٕ9YS5ϯ@֪ |E EMN#6gW4 fܩyf zf2B~N/ hkPK(76Tyb0E,Amcapn sbjsj}lfC9s<| KkCE PTY@vnpr0F*L uds+|Q k_hX[}\m`yj^#~G^эL爭Pw< cukPؠfdP;1p^0!Տb`yXIo$0.8G2~O~gČtz6FNte#{HÈcì.o*E*,;X&n"eQL/S|6۾Ϗ!RMKnE$L5uq&D'iBtGUX-hӼ۫pS̻yY$ fa>eBY#')-`!psKoH*)h(L @g^U}qSDT eƑ#$OBTɹ6,Ţ놄j7=(…GbIE6ߦ0]_^pbմ%jF &vdWt~K8UQ0>Y8-%S]%Y/= . ʏ ڽu$`TH(ʹQRF}>` ̓mQ3a!Uq05v~N<6C&7^F(;QIlMDfd`@9 Y[#6Vc%T i5*B$Κς>G  4$g1e6+6WeN2qy+>2ъp.&~1&:cv?`\EQqhVZS͖JrNs1f\J_(Sߩ}o'CG8*V m-O(۳EôH}%/Ǒ`7!Xи< X3Eo\߿ϔ-ۙ- .AƊHX)a :In:r٫$q(/}n+Zƒ*n. c*ᚇЌ?A (%ʪ+ʫ!}7=I$Q r?)gcpʂ,?z9۾Z*/",c切ҳ9+@>3csJcoXaZQ@)dA=a`aμ{eM8=kj1،nϦ2Jݦ`U wf`IRӽ\kD1 T|MTlkHcmq 'rj> @ V`&y֯m_гBkyusa9U+Q$OK s6缆ktO|]%#ndDG*a]I{I{k `[<ۆQQ>#YҢXcNYk3"Papp,Oޮ|mbڢ\pQ w&M%^؀мl}N.`zI%i'gՎj3,Z´Ú*-\#t'=G]3;bE"]E,j+Q!_H3S;|T n{q(*.z] ~5*q*ONBҵ6THot*s=pa-rTφ'CJ;iC{)*eFNkEc-iD@Ⱦ`?dDѾ}A8UF@<"/ȭb_( p/6ȢeQJ DEc>cDwɁ~u"j~ꝷxA 5~xPB~RCD-VG;3Q]I>ģt4:n &γX`D?`rݓ@D.B̍+Yh뷆s@|]n' # Sn.H33k%Vg `2H(ckb.F|9ъ6^/SN т4e3]Rop+LRn|Q~RS0nҵC%NjĪ?@HA4|x7e0gP%  a,m,6-e^J0Tg_#k1=0Hgи%}xݴri(UBFdר^مյP#mྋIV?Pn?_UMҜ1bc5z`dSd#0H9*mք݈5!#a5>BN͚F!6 /td1d5It^=ذ_9.(g "BE^ͱ@Li͆TܝkNU_|a64tUJtTY''*]բ0iqr>,3!1Q!x@{0[zٰZ-,.:r,(_EYukJ"6V\|_Y qvH"6jJ]H퐮\G7LiM`^8MUy4 /.[Ў Z:8υʧ*QTŧQ VSpJ #Lhp)CJ$T͟WYQg|m, .Y4k_ gh8|I .fI[Í&h8O n^ Ll;n艸8G9EigAІ/%JkdY>8B^Ď lI?4g]F a T*[t[ 3̇R k+̖DBHfx}\T뜛$ƈj}5gЉdw(Ix`[TghwJ^;aR$V*g*DqZϫ7t }ZiF7Ka4шSi w1r7VxHk}&I.T3 XE;E/ertc4hAyU##L3{[ Pzd\AJ7r r#VOqńon:7: 5vaz='Zȱ{JgI{,rL{4@jƇ3h:Wb'G-YhJT<  @w0QwxݞI5zI2N[0wD'-pI͞!!7 + a¬9%r)!(^kF> FQ&nVVKJ&Jw |:[n;|Y?IÎ6"3%NimmX'X|ze0N$DmbTc''Ţ OԞrcLJTP҆ڿ|b(oja$Tx GR!(tկwm5ڥzס=`ʉ2,;B#_eX ٴVfU>5 P1r9PrC ^iΉ h4KnpE4Hq)ϯͮ&d4w*xCRkqEI;F:X=ؽ&'|ZPtn-eN9@ىW6ե􁖁(3l駜@gE*]V]ꅓjApVˡU_miՒA"ATqK>8gʹ/m(c*1L B׶eUx-k?e\L(RS jֺMy%.R"k '-rԊj+iBQ-7Oe"Yk.OJe0 WUb owRnmG^piJ_#b`ۋvF>iluYɣ<ٲjWBBOU|,,qs *5:D99T=X tg1=Fw!^F%Q#[خ[ \#ڀ+CcS61'υU.d BSHw8

͕ئNJ팮`> Syx@,`!Zi:)K{g W͸dts b&Br`s_CcVzlNyGI:.pijk4Oz&Ey֦Zt<ӌ,_ L;NV]CnW0WnO}hK/?W[};&]rPA6Y푙YGia n>}J2RTP7˧!`d A. D`!1Xt"z*1=nqF-V2㜶AŮ\Ğ%UD_* i<tjڧK>) kPy}(:G }1']!YenCvy;dkb*gJȚR97@i;hD]1'<1*CZzcI۫)wxK:!cd! 0U+ʍnhm–drX:qDCu< Ks|r0 voJ1CWaeS2 #/PP%Ul^0&f%+^z7d "%f|,S/ }Yp@#QUdHo[Bo$j!ˌ %Wϰ7UXzAFՈ\[FBtXQ+gɞHVѱ^Ko#b{BZvr,u$T#a*p[ #\W?;XBUsD Z;3n|WRvQkO +k,A.x;:OKꨝ!GУlO|4BAnRMFy$jeG,ȁzabwjD)L&+X7"?Y]0خPߓ,^Үhw÷CrEYvۥ[v0>g;Blس|.!hᕔLL-=?uVsQg$3Dyu^uѵܧ0 "{zhL<=gd#GS枇 kXE݅:Pg@ QV5.0 }>γlnFj`ߋ\}5as/mf46pevhZ@&Z0-KqK).lmNs3ܺ#-5҃x T-㖑:P[s!'^ԛAO¢S,#^?&r1&@Vpt*?w&OPmeXC{J M"g1])6G*oӔ3ޫXqIQNa;ޢ [/ωN!W1 ]~^R憻[p7kRSo^HcnJsd7t.aLm/6\ ~6l|6bYtI}BHb޽j,^V._gGxCg$F(q=уt*>^Mpe2:2۴ *m7xWXtc "KCJ( -5c;r- b>*rC t6 *I%Ē7irC~+Wt\J8v WLW}OҧHb9 @D+Tck:8:8rrɝn;b'g-abż/};_sPq(?1Q CL1ىZ=^v#=5Pv V+ߦ%Fb ~+?WeK gӡÔ@V 70ܕ!HT>9r'ρlS*TX!_a2/h2^T] U!NhrmhH7HMN,:d7DWvv?۪BZ~7Rԇ6O" K8?ٱE̬{R\ՙGcyƟ"%H(6'X>9&#DK}d ϯVmI9\g*~[AшԂ1[p 12n>lwGΚoeݘC'rr4G:C 7o yT1Px0~؊&K=Ku=C^Ҷΰyqש6 x<ל(+UY#7*G0]|.]3쭱ZhvEjsTH06 0~gG/bjG,Ҡ*5hĴ h\YI7uaMLf^-]8h[⠮-M CKF*0>&QXUX X6d]]ʲ )14@n?~Dus@Ү+焔/Nʆ;WkSFwɪړۄGӜ{NE4(&Kf%Kڹh z %0+=?0Uk  hDf&^@Ht EZ>|SgXˡ5)J#&Z\<6;R͎Nd-&ZZ54JM>rz qiTm-OO?M5}tJ )vK6+>'À0GYmS~/FmqCaiX'h8ӾF"GByU/Wn;W@r%9sỉwJҿ78.?Q_S, By}} l$X.PIb 6ҊB -]/i.hZv1x8>`>S|9"i0O~q:\l#,kytA/H^Vh FRk II7(ڸF]BqtH{`\QέK򸟬 3.ToȠB G~y=]< J',~d&u¸4o*Q"alg-+U66,M>^ʱugMpYO;-]pծ|͜>&|8`}IuxlGXòUlnDLM^ҿC(>YF"J)ŷS[ ]w&%d4Sx8 O>w_bR14Iċ("}5P:?*} o8A[Z0 5/hވP ,LN1$?1f䲬Fʓ.=!ԦB8CK8u*rY] $cZq+QC !㧱0$FvYga'LqzXԦR{1,%Ay 8+h*'5xNt9˗ZJqy) xO?0}bW*5:H|7ՇEgETZ娢*i|b>d$5Fke)1-`;< 2O|Rq*1:'~w|dR@nnцr<1`8  #FVkR]\{zJ綠4L%L4o*AT RHgPxG~`A^1U fCr((>ğ0⮙`EDb晆=a@2aAhp,RuW7`,}+}L窢U̹6Iuc&^%Ueiu1!YaOJZ͏gl활 +qo)v%1o f$az}cN;) Ivw-"v_PĈ|pl*J-)mo";1Lt$7ܾJ*7/EXq6`yN༦'*{ch3&昲a)i ꍦdATg Åzʺ/ '3abꄞHnł)~Wk-E Z@F!! F~Y6D2m (̦OgdlץIov , n%ӡj§Tj\`-$q #g{?[,A!;/6U)hK6ZL|fbY{x~8dk̛}.{ǹ lK;cZcσVri+'QX)A7kSMV!.ce'a-B\#,pe8 WÝחdzHqʑ,wqY3_.NQe"@>< r8j ϸqY>z˓u%co gIn'C q!DF >(_Q\ #vZ[B(Y.qU̓typ[>H" ^ 6, w_achdCCǍA)d0E9G_n򵲭-uv&77S?m(#JB)/Y9BN_O'LqDyx`Pi<<=vR͹LLઐ2_sI>ZPk3^hanya}4PF5V`mP^Y"̰eţM] U+ vՃ.3iRWn)zfsykp.ׄ,yetS[l`IZl-~B~XsmAd߿ycPL^~N5R(h"\{XcmX>We@o]BRu ,|"b]JrJKD!aƴ~(e"7 I>QYAygo[|fk#|iơ!-xu~#H 9||6]`W _Uײ5E~XYeI=W·~%K|?6؅ wn$NTgZ)oVvV~y _2$:Rp.p4ӝ)NMVٳ@VfoGLvUVh:'H{gYX?a!1^ږ`A%-::P1*w7CɪM="Dy d %skQJ}9W~N_`-4};ЄfJSbߜ7sx/#kCY w! _=>>`%cu VDj*kSLlHWsC(sȎV$e3N/Mm_x'6/2 110 :b ˉ/%tWϯ닁^.;,MȗdkX$Zd7?Gs`/`Ra.E}T;\Ρa$JeG١Rd@xk_0AqsfήTIp)y&_$ D-ήbjXi$+AW:i *kj>_Yrq,;_NM4%fDv0 [ EE"M:''$oV/p! l(G>L=S2@NHҠ$G;rq,<7|3L̘: ֡|Iv+Ŭ>B/"5Gz1:@pafΉnۛCw|/' =<[hMW7+&='] pDYNg뭃0=#rq^IB_"~UNHF|emZ|"ACMϻ ^=2c暺uܣ Ne RJZ _8ni0K\p*y}B˕5ТvCIBs ?غMo{)=>V3WFY3j\.R$+D%" !fWR90{{,7wS8EB |P \'Υܼ>+Np(ZU^>TBIGb2`Z+jc6+FJ sjiRsP 3HE9>b f&Z'/ϾzዶI2n1 ȞX<&ԯ ll2OӭQ2YfoKm>3)餅5a?7fO?$͏k_%V"?׹ *D-nȳ;Umj:JVQ=<m}OS?u%|dq{gE#| ]Y"7yv+ǚ㢞rrؒ+˥Evy "۳Z(_{] N]Hc7Dѕ_Xs\I܉-[[~Z#D(Lh*9/ve@6 d _6hұ0+[ Sn '(0hzr44`k@wi)҉;wK;+׋V#F: x+^Erj-zd!颞QA5 D㌙xFũ00,r3ls=oq^hӌr&z ;K(: (XGq]{zFɋ3B*~Yq ^vMnm-+z IO:a>= ;lYЀl/&)- 5A}Y+ΧR7`~0! )J,_u$_!FˌK}M<FWfEܬ 8s!aQ@wi%e][JSzCvq##SFcآk\ :=r,`d Bt[^_{jK4459S!122K>X#/<ʼ=2._t6| ]ԁiVΤnӯMbm%1AT"m].02#Vv7{%wŽJ&4 c1Bt1^=eʬnE+: ;aۊX: hUq9$~eS9TC(JxZ[PNT41,I Ǭ=RYP U6bNvkUxYB(p+wwzcV̔cJ|MB'vqm-9Bns+-;Z'kdwT{CW0&JZN pMԐ#ĦR=W' kF+mM ݛ% 3353?hs%^di_jgՖIN= _ly[m>rO^H.ks*@a?9k!@W|WFDQQTJ \oI "'8;trM`iDI b}k` Un'r {2 flFЎQMc"d[3`Bz51/󪓪ǤLnuH["'ȀmRU- B e](I-_‚ʟ*]0zBOgIВz5U^ Mq[ҝ2plS(G"NH$b䬙"hJ#|)Oa.b+6ײˍE01$LO_9m C<֜!z4F6ȳ ievadSf,t2#s.':\GJqk,?)@;I:ڣw3 y\('u-*7+gXxu:I:3x֘Kj*ddXcI864:ǣ1Nq hOPp ;@=f-md#h}wF,R`N +.F(Ma +fKo!1tQW-)JAg:IRuud:9f>H(؁T}K -Ȫh mӨa~,@o_"qU4q̌@{8 cɚ=  YbנkP1z;(}Eq[9`c)%jr|[><Ǝ$G-xq) i=E䴔uBI*PUܲZMjlFϬ#گ)=m)>|5DWjjP2IjCDy;j,-J S[>% n%S`U 3Z!_[IʋHEfZDC Iۢatqay޺93#%u&^n2"&aQ4s][j{?/0l#Nx(!C APZxP \psW̅Zja&>L&p˩xG/|},!ʹ&}MiWKPLu8jc.O?kZ 3~m?m}(}-oE7sӘ.djĆT)7O_NMJl]<{,6#Vw"&6]ﱿ@2:G"@.:ՀmY{fUC!';[f`Њ[nꖳo;=bY|iХm*&ō8|vUX$Yp10W]v;@H5s$U/F12bj>!+yh;Tb.+(Ow}KA >$LN jB=܄N)^e:w@8ޥՍ"h8 /6:/'A]Hv@g/NO²;@y$-Xbəvd䕆Z|ȯeBTiCn'4tIMj*5W!kw >!OP%`A*3|8I,B%eXinIdŭU+TT6MM3s-Й?3 d"֫GjN74̋„>p϶6B`iU(m4l.S"%MMuJn^?ZjBd֞`ŋc0}KP&"X|/\dkF3~GUFU]i8sKE&-+bQ diwKߣ 7QCۍ8 F;X'SJP(wFj  ӃD /H,{(/cV%܆.ŕ<Ӧ@wkS'Y/5JŲ,eͼ'Y2^b/ ejnXZB\@)l FuIDh̺R8l8SZw5zxz\I-V<59a.0v,PAٙYGvny0YzL^wQ&Itn-kWWAT U$/iHGYk|\_iRb%)B`܎8"f~\4捕<ޏͅc8Ϥ9mSxmv~Їo֡Vҟe l^ rꛆZZgO.X-^qt݅b:GGUB--IPqUc}eaf’<"PgXh1myZ4I*c0T4":ҎhO7"Z2\‰UMLG=>)G}3&2jUk^N@frZ yTN '@o1qPyi{EPe694Xp ݵĈP6r(~p=%D^2RϲV*TyA˹2wɑX`=3LߍpD 9g|Y2^ g߂$33d#$u[18Hi@"xP8^%3aES`tE}g./Ȼp1`G+|hg5TD&Uͮ6b,'2yrQUSoaN]3  b&\?+/Ba]߬2F,9p b­Q=,J Hv J1͸ 7ҧu'i A% &ځϳ¢{ )X2Rs{t =}#n]L?˴ U "津n^-ٵc.` {w ('a[I]?JnWƜ|aWYˁR,-MY#s 0:J~m<+Ü֪[,I^UӚ=*.V]a/ςqj|?m-Xsє}5}=̀,۱S/4jRZ»4aѠEeMzw4tO_Ɋ*D6^"o_{6gm՟aIGx7ݨ͵,wԲJ4& ;”H6YL?1f˺8+0O}/밝q"e2V9#u4|4{z.rDʜ6=U='mv9%b5S% f4n sd(/L0bv7uݩJX+P$IaĞzV?Rހ},&Kh.vo_GFY$ek`y,תc)iB(nTj]m86˯(G͹pjqW},s1A^ȧm'U%n@'[O>;q\S;gƠ@9RC5%q[__3DgI5EToMDc5e;'e^3qe(Uɶx @wE*h!.a2pMխwhkZ 4T-yB!c"݁ʨ9L5i='bJЖ9Jec=? k I&1#l8kxG `[ j?DxoRNIV 3sMΉF2O헉Ý({KdcFOR {b<7'<:sBJ(ksԗvH ^g}XpŻˌDp~&N.Tx^8bw!a]vkl }ʘR?}ɤkGItYdcqv^_1m$1"j-?H>{>'5Ѫ[IZ'M/@IgIZ;JyFF|3vv &{ֲ 䊗 Ul!49hW / "2ʚ6S{@/?}'(XtМ~L-6($-h$sHb1G*&a.SH="ZijI>lDl]E "h_B֗4(?[Y*{YJZfK/u2R7g 7h(U`xQ&2~F/{FgDr}xGq2x!! /Eroqy=Ra\f[i.]}ý%Wc[&IL]W-o8>_9q³\27!<5 S[JV9+GMߋU(}+z0m2lJ3ugC`m F)y}BehÕ!P+LeQ d 0hl }`#ieᾮbR薒]7~Csfx(y0"̆pmb^|zӷ;u.aV<ƉЙo>©BRpXE]H:G z -@4IlhZ<%ߞ7)[B~u|*0䗿~`8J^Z!A? ~Y ,'jxijބkl`eI^Et)Gm܎]:KCc w4'5$P=ȺȨ9D U.ߡ. H@s [wx+^`8vV1TZI}\agY8ua 38 ,EW_!^r=TSE Ϡ/$R&jy Ew+ T&.m&aiA2 PIծt[vUhm?QԶ$MݬzZaM;(s"PyiLϟ>JïC3^Bq6Mb@Fn zugh4'ڌM-PdPnp8ęelj24m.Sf&RR6wjJyMpI$嚕:ykq@fUރhxwXb99gzCiy % 湫gOGhT%͎0[K,B ZNqXTGw_E=HIh@ɦg@݁ 4PFsV't5gH+3~SmC;B }F9`Ўe5dq+,R5;tg$ǫ]T0uQ.:S񫓘i6:z0 >Nߐ2Xs7poRG߸690l;I7l6,'6WڔW[Jm'Eu=! OY$rd4v*RNyk ZM<$^jb(T 5J(ٞ2aAb˞N7(hkT0S nϢʑh6BQOqVNs=9s-kv7%(5gVt757t́';_\=d Qb{M5̈ 4eEmcR4H eVa6r;ԐHRf[BFU+ >7v01эLG 8Tao}t{P;YX|DZ}!dd's~9MDrqs2 ᜍLe+#(&}KWvUE{M߼ Ttʱ:4t ?@ |*<a2-9(2+((EBoaIEH+rImVq!ɴ nNHLd Lz?WCeQ" $7sɂdq_+e7piykEⓛt}r(2A$́ ZLP5V]6[:Jpw+W!_7ʙYAs͆z,z\PDX\YDkb4xhO< %qGos=AqO*a_`7mVh6NՔzuN CIo8]ϼ?ѵL2}Ճ AqV%R\~}aI_rR~^eD$HR#޿ %Fahsu@9]EN6wIUH.E~ _s}k,ˑjhg,sS&zJ*G8ÌXi습F$7 "*,W }-&ə`9U%ৠsk/ ܱzO]EcNNk`( h(̷tzT!ޮp/* L*KU8o~OvLj7[ORy *F8W `| &^;\XG4Ŏ@V2]'n{rAZǻnwZ=຤ T vu< 3Nr.aGn6 71]ӷue JсB7*HZ ۼ| "%2\ύwM'kMR߹1lBk+Qy݂[l}|4oU:T~"U19L<|WI?YC]E8=" (B mKޭ/ijnX,_n^I_U9#q9bTAP/mņ~E,ėޥ}c U8t֗ϩ%ƓVdSmm ȏC=mQ7R0 !X?~Tγx)TMl^7 JSѵvD@ذ;m C*N:M\Ҟ?fA}07p[߰߬(/2\\Ekt$]޶_MoB< fm`wD^ FlP^ʔE]_G1iywF@Cy"^]e+ӦȁwЗ^at_pZsTؐ&Bk$<^X 7;cg4ZۣUj:dj0r9v J URR0ZjהWkXD@[z5%Xaa[*̦H¹~A~_+bƵS(rkoo$VI9 DWtͨ2|(Q?j틻MWd w~ϔ㨏x2*)P+}y5i(J)xت~nEjب D tчyj@6Krb@(_fGcfMTE~7&ޖov̀ŵ]Zʡ./D#UJmf'. Tʦ5bsa#BZ\MRNw pǰxMNMi:ڰ'pZیU TdtAVZ7f7 XLcl{HT1[YWO~܇oB?N*E#mx0}r12 wls!g6I\rc~k]X8 zrb ͋_ J֔ܤZTǼD hXޝ1%}b`<p&!Qe:aȔf_0<*}/@rZ %$*T NG@m&:;ms}}k\ vB:Mf)>WBwu_74~V &3O: JҨ_$2Kx 5"1:$FUϏA}O8Dk&̩'>Hr B}ץ`s W{8ngGzh/\ okӖwf&˥^N$[\X;vK9s$93ělyw4A%$g>,- sAej󅛛 ZJT NJ\yG.xz#Ǩ:hkr4FgAC,t~ %&?dL5`ϞtyΫ5cjWAeїC M zIsY"%Ae-=s9_l/sM~PFΤ{%n ԇ_B{Zn<8=58jPGؗ)/ߕ' q8l'uЯ.JLwe\CHfd8VK\a3&ivvJ(c5 "n䁂J\5{{|#,%X`1/ G@Eo* TG"Lğ4 |x6f׺,wFtf&i) KWgd2T2썶B&jO TDUL.b7[; bJ;oaE<ÂI5)dc9&T߂.C(.Z?O2 'xE- CVLD \&~;WȲ&6R&4fU{1._tz0^`3$t9Tqe ]ia?o`%ڏŬ$GCֵNWއOiWE3sz|F;t#eci3H|+ΎUαAq?$ i vRY#bKk3~V#ƣ1S^<4@ LU6l vUf  H\eXU7QQ<dpvR&w:ogHƖOʫ*^2ɡdC7uݹѕ+W2IsZИ/r 'a5SCg$F'k4;5y85+I~oX˟ wqE63qI#(b!t֫@iO?:1#+fXBja2C{Gl.c]J&v%tG@UO &_,c)ܧc,9?}ԃC7I@Q˨Azu}} |*,r^,NɃq"SbM KI(yW%@IQ(+6w ٩[ .i \lq#:Ydj$x<Ÿ}up$M zi-ϽSX0| fw;KW&HJju{ה?fD0+H#{d#,x]ѵ%ߕ>|RU*^cG}anlf9]W c Z~sD~NTA\* 'FP 2~ѿ GAn XE4D ]s?޽d.ࡎj5#g.϶h\KՊئ"y 酬Vn[P16q%#Ysl_..zӘH<`zgKBxVAAWNar޻aJIG}'<7[:X-ۇP^x[ƅ&+=.ԹrOUIc \.NVC.K,@{^l"Z>c_xa@>ROAC_I+TwRs6 u 8'E V)I&BQ!Jɻtyzdg7شp^R."9rU/ǃ#%'H\qXsȼQ!aZ´ås]JB5 3 ^3dyDU #9ž/z-Gӵ9_ߌN9}tW2]7[%9q xf5'ʝ>SiF;/ϵM:z4++D %xZSF%mA򝐥}wHX;능9!0< BsnjNK EG"Y7ʯؑ W]]b}pR##pl?9-յ_J'41Zg>n8y=0¡F2o8o#sn^<K@ TV--.Nӏk7gZ<=9U_|2ݫ"OAtOiAٺ1])8J8;+|]NΧ#Ft%6Bf[RWŔtS=e'uov"J4T_{HuIhipL9BL- T-gDߔ6/ͦja&N'< m?.!H.cthHf;L /`" Ĥ~zT QCWt_!E\gkFZ[>Qas ^Br=g:ĺՍ룮]T+|نP WvKDInN`8SX?ol<޸}Z /%f~ĈrZܕzpjtUɧ H:3Jz#X˲Ԅd_ /] 6IEЎVb ʘA a%M5hą@ܱb-Οx7#JT[vx4Q Gi"j#M&h< z%3ij#PsV GozePeuljv_sq皞8*icV6:^dh 4CZ#+#7ٓ+:|DB*!"Ru֦OG\QsNH(ڒ!R{X(pt‡϶UE^jkeK{?؛d [ﺻ%KG=Nخ*8zd"u`N@zyM=cjQ}a3Mċp)/[}x}ԖJVpYre/=r f!o*ٖLdY" "! JU _y"ݖ? iNyK"\MQ26><宄`P%ɂ>yُƁgV>ÄZ+')K#FL-:X%۞0a yL1t]YSek_bkR++2Q~M[$6g2I1_|H}⇄kc͞f%o(C]?$pT,1z8KxPq _/^g:gճr=iHj7_ㅸO-v_1cj0}1 :Cb=1I%Dn *O|'eħyvem/Q EO[6Z#0nQ>HfuTFAUr|ǿ@3r)\SebY I΄ 8bfk\ny NJ!zr8,>i\OhWqLG蚬L1V3GGDo9 fs"zc(2kc٩Zs Rc:!ճ_>GXFP M-LkR6+DϦ`.ByB"qd gJ Q&w}r,)s:=Q+-Y:_@f[X9eSHلiRrl5 v3̜ނ yn) P7,Bzpxpi[#9JzE#~R uA^7bq@vͱ`M"wkz5}SoNױ ]f)ٰ]sEV͟n}-#+[FOSpE .П.v;|<5I  =A;9Q1k$^T FQj~lȱ6"8Nv%L/*gžNN 25fV_~V +SMD6;=bv< ͱǤ'r& >P[cm#_݆Bކk$dX]ųlEKo!D[c!=ɷf)yi5TQS_Nz}Yfb<i$$ynI`tDzags1ϕkܐ`67'D![ʞ0K[]ӱhn*Cړlb eď瓰B:t[F^%G6#NԚӓ 49tA3>3@3{ݜG//Q |Mi8T߹֠G1qloywsV~rmi`{ p_8qX{!F($"Ʒa\+\wQ&^-0o#bչ!v<;=x+BGِ{4O _ȇAaf*dlt?67|??_A|X|G~|z1Ҧ ^&evNnLx@k F!5PQSyg`Ee}64²[+l6~W  úϕ՚{bMN﬋J>yle_#r/XFGSSIޥEV G⩺1WNu9IU_,W(O%K~BE5Zhz@)] re=̠.j:$~\7mu})IboI{urHPY2(OK@b4z1>yH~{/\9Q_T~UWkTԣ=]VQBy>e?ol6|4B2 N۞ 8Fw2/Y* i*v>T"!vDݍ7DDPW `yi۰ͽŮ/ maam.M"tÙ뻯6ď+;RJN}nǀ_J :L00%g!\59`f2 PZ1:'j mڂI)-{`5HHPg=ڇZUs[rn<ej*BSI~B41k.{,e'|djCq2LvDv܆*&<;m{'RTzk+ K,VtE^+I[=×ϜX>OrO1[w5wsRJ]/yIyrKrۀߙ4oS+ 8ٵ,T,pN{BI[ls%oZFқ.|r{i[;b:&u 8g睟IuCjLau#ɚT{a;.qWmhiz@q,^rFnk]ل~ $=$UZtH tFnRt#C,tŗ~w 31x2;Ɨ{o؍et>L[;+8 L\ʠarf@0%d~J^w]4:.4> c%u]mG^كTڻ%PD~!qcG?#n{^;Or?,Fh3FH;V$@*\+Z;rIDh](4s [Ү',#2Dpp}+4!RQ!V$xAOswQ- “KBrm?&ۢF\]Q L=w #"B.lJ?ţ`*Dx;x腚В?H5Nw^=w_S5έ\ 4@~jO~vC_YDZ! +)&MH3ƴZfp1ձr4;bmT@b9]"(\I"{ :2tY(NnE}_AS,SDgWMC gA6&)S`LΛq48/];L5t.I rujY $} ('Ks5={^a6ɣFշ.fH^""-f¬Wy=^yK1!q"b7e A}A\Z4XåB3!! 3 왮)AY qzk?m-- ˛09 z (湚ecBrFE, îd$|KjLQ!DU1%mV@$b^?:?f=RWƤ礢Ww% {q€۵a$D ) ?,oYS4>a^;E+#ec&BiWĻtGe]|i~^YߌL[oB.k|&?hm}.C]qƦB- 2=VTpt†>HT{e!%dI߮ GL>tT+h!['37@D\m.JQ.ʂ<@STNhp9T-d،}뱚;F[v5PEz JOVNu08 / {PaDHOK ݺE+hhLjx}Wj }Q88ECƽn7} o=' -Cf8l8tqÂg!5P@ss~cIX,TDаBA9g>'&7#!Cs{*4D,B22WTG4[㚠 eK@*c5{4V4L18=CpB!u+4\j1ˀT~hph^b-sIGaas}g/dG אS՝r M^2 ^ߟ+6H;XSNր;u k5y펚T**pd;m-23lˇ`+~ͺl|$^oN9^Jy^m}6B =r*c/V8Bۈ TYr>D]4)fk{FkC{Q-mqI3ӧyi{i.ŧDa$=mټ X08 ^1]Sj"uknEAL tDZ 3FrP"cn1^A4qd$]qB])ޣs0b*͡—l-Q[{@gF4뮆Juk WnY϶Vgf(K9aNUV5Qf!OKb D9 Hb& x,B//lrruՑ| &4}:9U{iv/cwCkILiKqg$A)2!d.f·SNwGZl0(`TDFFdI̟Rl%{MvZbط9FT#fz)5`T **2Ec 4y;Ga*NUaĭ2c?&ST#u>/9}lg%?z2cH)xi>S5jzZKWsY49Du 9MGGb< *L{]f l+ϬA@=VDlY*g39S'@XGpSd+iU=P JC$O7pV\SH*-!Wx(8z>V%]iUhTD8 EƆÍ#HK$L1Sp#}HuXK锣2huSo;qod\$iـp%<7.JFuNbFi]l9+lVߠ#ng[-:zl[z)HOKR5|krg]BTD9Ye^^E X%Ls`˟, azѴ!)7p6fh("נ[2U@W6;Y>x&+!x~ T[H$n\(olZϧh<cT$;zmg0LAfťPAaF#^+1F%՛޲!q?oVݯ%kqV*&k!![.AGy57X(b ?-2 a44e!QEMx bJN KӝQ ~&ns'9eL|MٺDc,!iA 8V Xp-gWlh0UDci jۺРZFΣ/,R īT\RkԾ;s脛gJw5Jws|&Ӹ;[rJpJ/#7vRZ C/" 0ٌqOBdaYLЈx@WvqV cV.*4sR}!ge'|FWOi;eit᧾!@I\mP-dWTL'E:g0ѵ?FGiӝ^"/:Y)DeYؾ U , qȍiA eE>OkթǻöCy:*RwF.@ї*.ᦟNc6Zd9b\kJe%:?|.?fXl3˳ۋ!.3H^iI>=S[7kH0 \&/ <_I06aͧ|4 lY<@!kP;hT-h7m`n~(T  @r{uBtrt|-x+0c~k2{u=/}-x@g}fpihb1畑-teqJX"x2Xq;ςᖒAaSH01wMSc ͛y".ʛVj-rPTYN-# U؉檥;ˀ\uoIIsvblAwЅ,M>k \C5"&f,XA 7+dyi)>=9&hƙ4XQ`tn]#hLTхZ1+4ͷ;)~LwzK+ 5J0cŇ [Y*Cu #7.faiAKUBno,f5c_ w:I ;f5iTM]èwղCӱqdVf(4|)8,H Q7~]e`SWo_%JGkҶSt Xo3.һd@3-2 1l7]1Ϻ*<ӎN|2EjkbJ5ap?8ܷ$^*]اjDkk?;ݠ8żmd53$== q*[PJYWa8x%,UQ>)GLV+憡 -!@;Z|a/1vlx$qpH^kf*K`ҌPH_F>|AzΩ"I:DǬ;T#:-:36v˄IVJdAfi͇)wUX9Mx DV0=:rb4ݞC~uۉBy_\Fqq,&BsVOU&6F>%IB}lՂԮl3}2~ۢK0O[&Wu&5:%u"0UVp o:**zE;⭟H+`4g8E7oUJ`y}\:bŨ*0XÏ,Po:_SvĐ} TmjlK2p!J@Ko)b`!,(Jr>Υt\M0h!TV^3"V&yu49"BpN.rq!ߕX%ť]FqaJlLT0%f(Ox-z(N^َu2Mj-T@sT=@5N$6 M|^]"p&\>P q.A-ZUQ]1S7_(M*/[;:WJOI3Pj^߅lѪ8 ,NJ~Ίv Ju3'\zf/45) ~([1aďÔӹQq2t]5>,([~fg =Ƚȅ )=d;+qi}kyD`S>N4Cޤk0'fGT$PTCǖv {k('/Dw.7tpg0(REԹ:V@ D 4;Y@hSBtm>N=үIJ.1xԡ G0>֘yr#;oW}v=Ȑ{d떿ggNb@O{ڎVx`^BQmM4ʎh ou1Gh2=-5`s`xcsE1D!AZ-bm̢vZZ]?_]Un0LNF RF{:_Z=} T^}8(vzz$ϼ"D%E5/cTVF1 _<*ma~1%KL P mt/wG#84;3"!Q ]QL0̶}]Kj7hO1wѩ)Lq1Y{ ϥ(Qq7Pχ(5tx3 ]ۅaCЦ X'ыv&yPZ" 9:mֶovc>y{Ÿ'=u6atlU"Ux[v҉0'Cɋ0! +m"ovf7v>9g^Pl-3'kCuܬاcG1{krM&$"yz\ll6b|-BQu-e~%|3ĥzlCyQ4& Gcۉ}E08Y-3){vL (vO4xHq,Q>Ǟe,!դvOf HE:f]5Y8G|_ ,5P*XܿkcV6Ɖ<)ߓ!ƨ1|۬^*oca*X9ZdrrGÇY B#G^!C|2yT Er@Mp&v.0EEvƓ''^Shv?ʓ+/rwf(HxH:TpC])d38#gзE9wοX̻/D1uo!V_H#OW-T*'-<"WmxS-/O -1qV*f*xL;)^ yoc쾀8F%68otbk 9IW9OJU' ۍ |+9KnYFk\`C~h 1&‡P)!Q xaNݏcC\ 2u G+$@]5~O,&빽imRўTBgG {$49SE n<%:M'{U| "EE@r$~bd0+AQӞ2ݺ$Wx%EY(Ppgu]K]g&!'XE!L^XgҘvI7w@R}?0:.(X, k?t 24Qyc'-h'AXG{S*i&ԯFNu6okr;*,]4TyE̥/)k iҭ%̌h[E5+uI"˲R7`,f+,)@֮ovJZ/I\-fBom 7^F0 ^73<]+a1cJsƮǾ+G2]pLj*3w4 9=,mchkK#Q4}tŎ̌~X7ޜIZ(yMB FHYܚ[2-q ?_֝?+EPkա0a4Io3 }#X/ţTrj33~cL^שЧTѶx“BVP<{Sp9b rx_Taȩ%-B0L M]7{[(KY>gk8 0Nz%ϱz֏/&3P`=EzG-UnB$t1#NƦ!xHћF~T*w[*o|G JVsf'_cdGp<| Y۾P:vW>5$q0ӡ=nRKі'F 4ָu4޶iE/A_ Du".5 ˊeXխU6gMA|j#{@}DEԅ [ `N3rΧR MKEb盉]Қ q-?4擯C3;|SG4&)׻*PvWImbQn1XS vVH t쌛5gf\*EbA ӫpsCzd/N; mU)܄>_3X?"vڍ[#<{pD޺F.J5z^9ʀtB1EկHku;vwD[%'aòm)&(Ѻ||5b)}, _gz\ o*$]i7WU{9Crom>x++ \?sy s)<(>! uk55Yr>r7Pmˆ %֖*ҴC])Vyp65 QUs ok}#ɔ-VU;6&`1ϔiL)C}= t W",rGBo \ Pv&]?Ll0K]Cru˄z.& Dv$h!UrhXq[/z  p<)[GzpN1f/XXI fnSB|+6PL[ZxOxIp Q0_(H:gC=S!Kt|-y3\Zos7܉=2z܅Kv35EK\DslH?EFN>ءu'|v~JЀ;,]Ĕ˞q]b6ɴ<]f%^0:H"%V3Y۴ 0p0r(~2x1쌛w&7; !t]>8wb }ld,8% ,@ûiJ"3ѳtRl*AI7Ȇv;Ś*WI'Eָ:W 15k!k6K .ΨA(D\qʊAZZ Q ?' zZGbiΠ*i4![Sx h&x70)ADe`GΞ\X?c\9L``$?/BnhiPO;$շsLuBkAȕ<nq{:u>ޞ^]n$-$Ԃ,B4b n5KeH\[]J'D!Ş,&ʑRg:5j8g>\DJt.)Lꬷ!1594gyBEp^^|T1،9p]y;Y|#Ӗ.gncHE(8ɫꩊpJ|9[okOߕ̦EѭhZ2 -rkZ+Ӏ8ɇU [ɔB=}QUc&-̻Gh#cO.`]VoZo6E#yuY|oWp"H=VҊHuqx"Uxff:zɶ>^ek7pvdZProR Y]`Kڝȑ/[rYk? }~r &#Jcȩ *4KI x902O`zcM}g3w 0C$a䉖ajOe'`_/|gT6:@|?}Ͱ J3Q^8AxlЈ-u# H\nd*%E腞Cp~K#(܍>ĔS":fֿ(5eNS =\6?вjFc1H~6)R6%sЊz]䆣-xxb3^LmS\Vԛ%AmJ\,;(vDO~J3. Jqȫ7_QhoO_ER^> W X5\Eþ 8`xXo\N*^v q)ݭ{ nK}Q0j!NfDFhS%6;LUҲh(`[;N7N)X(l0˟]dᩪV;I< ?ZSBMaA1(Pd뛙59,ob*g~!ߺpŝ͎QDZX_?fAgp!V;CV(H3ÔI@@7s9lϟE:R~ʝV1'q-ͶjMp 񒭑먶YQ WuOaDa-|d݇ݬE!.e ?HheGdwo)xRvY2 Uhȓ~Jprۉν%v?!Հuk^ U ·a pҐl(u08vKc'尘vs{XƁ ݲeB.u\ @h8-vD1p}k?{5_8kt=NyWG_ /{}OBk$_'\T[mc3mZ͏($1kp>ʯqt^ٶsT @{7o~/7'Y6!3;tru'p1!pZ$WXrrES@-P,DI]7X$i+k h`҄6L.&}7u'͑@,6Maz9 #by?rϝ!S$Qg{'m,_Ի2fk|{t)H1Vӌ>I<@Px҅*:GfzEg#:sL}UP&^[>jSu TL^j5YDuAuǑ垌M [ŒA! =G G$x3X !=FotyknXF蠞nw &tUv sFp L#թ6 Ϸ Wă_ ^F& ς,0@V4>ܳSqC8&ڮa_Vϙ䐉pt^cm, A G:\2DS̖2s1q`FkP$$_z+5բiC-f|OǏߜ``i#Ũʢm\ÙãHr@bc$N-$o (&L|^ !dpn.砖aS u(?[f$D!=+`H5AA]к[X4`ǫG}f~\$ Oz.kIC7ʦث゚et9yhp rchG"R^zvn8iT^7(RXw6ehi$Ӌ~/h3PE8`j3@\ |?Xދ3IJ\1(Gpr1bMR~k`o&nSiփ(|kiߑF @q5ժlWx' ! k׉3ɹfD+zgFl>PI8I3ޡӹ,B{! `MsuC/ n_ŽPop0l'sS"cL+Y\wˬ7\c)3,GH8@ۣ+4 &>5 Т4] #P74>[Hoܼ \s\Ҿљ )+@Q|6[rLjۀK Pa'LvM/$p;UqwlU>6XVXB;W Y,vV,@~JՃ.83C/gnvtdq.mX9'n@#%> 󳸠^gI<9ͣ7u2 2))wdpgsT$xypV"Jj?"/bHߏ1ЕK+)\ = (@SxY1"՘YݍV %EpO?ҵ,׋lRmF~[ͥ1sVB 콣a TtIP<1Xo@E"ҶQ^]hև9.r.m*}^ޞEi@Dsp~nɆ4B\ TE*pIAT‡2&= <#n d>#TxT6[4j9%aL+L1#'$)؈]5y{t]Kd21 xa'2M[=qfQ^eH( \ޮYРy#ĦlQO #k*W)oAy/l@!Vh uH{OB -Xnר8>({vJ͎RBJd<9gWBZ%+z}Jô|LsAorv8b:wO jO CKGOwp{0`iLp|l'y!iCU*WV4 wd$xb#,SI^#=z@{ IjH)~l#L?S F_DH*3kr1`5 cy ;u.{RMtH+.=vW/V?r/G` q~\XkY!abʃppYAD_L@Z6(ż67/`ki hL7*b0cqE:5R3Ťxm ^]d7&1fSLCt8f,oc,{c(2ȷ>5So*vX`i)dԓ&L ͌snf {*HUY27JFdbte"7߃0%"MGx yͰ܌LYd}iV#Ө['*ԞKh>z,[d3 =nT1HFZiR܊2zhS`Vq3S'ϗۻAޛRy ^`ZKeNԷ `KXN܍ aB} BH[Nz=9? c +w8Xxrgo|G;oh"G.pLo ?5y}QG $Gs)]bsf&{bf|ϯk:@4V4z۳4 M6 SZ-l|t, E% ܚmw}MD$`[&bBN'ZeH}"KTޢbY* MQ&E_$F˃EiLklZ]=hIs۩{]k7B << .gC/I 7JzPJ(:躈da/4r唗VUNs K:IJnh*l;΋Avixxxi Y[Y+ o*s葨ܵ:'zx=yaXu@qQצ!P4_qX+uZRH ݎn} -m=3tm9^y6C2]Yɀ=ǿL^Sf H&IIU#bCLA'})ia Qٵ|Itgbئ\d8W;u-ߺԔ~CVrxo_UT^K9H:w^dk]>5J3n=m+aOyg3 ?T<̇%WcɈ47\RGj&h vx2W;"ʋqe-<~^г_𐂏nn =jE7BZd@..wϡ , eA_o}7U@#<ٚ lZs4S;NG]4/LvDŽ"CCSul7&4H\"L_f'Ls U'mcHxteTܦ4HNzOL<Ðb0B|y/ A)VFYSbQ[RJD2-9`dضGSL-,VH["gqY5qλTNec|X&n>_w :?[. _v aEt Y5UM |з"6߶JhGq>c sT $*pgF@M봑5?ԸKqNVݤuUPS٩W4ްn-;րY&O JԣGd'+ɮRi$.iu&+p:<<0:Ez~YY{y_u<%e蚦K@]DE:^Ӑ.A(tye sP/h3pZ61sbqZ&!|QdX;t0WaX `22yNt|2+X#g?pQPa}1kR@T*E do@$5M(`BDnX-aTC~s 5-3F/acScwK N_wt7hVZ7"{:`֒#V oJ)8j%ܶ4B;EMB$L\kͽ.EW׬AqߋXc W`dTUR3y>`K\Ru hWht4f:X₂ g;O؞|a#O~|uE@z3UM x"Z \?aGb&(+E̹--*Gt°ʣ }FoAE7ffIWOWNqO{-1)TSw.2$%2K ן)[b.Nc6 ٹ|GM֞jD6f$|?߲s%ho 6~Hb:,}Kr7qK uWDma)7W)Ɏ>KqVly0l j<<3ΰ)ˮ35y4LU ^ȫng9\UȆ0_S}_;J-Pe"7V,8>,]롎[Mw76X̾MvIiXG["x+cQG𑋣"7r,ܽmLBÏcob sb,a;Y^V M~}[c?4~L'@qP,ߢq{R]'Ua1_XDqh֌ P; 2bH\GRgzKFZQ#MzWB>th ;7Z9Ÿ{hfW3O2k=, [A#_ %&Jc=\MIXhe6uGϻ9mvcNr*>CiO9PэCZ_(IV`m T΍+N( 7vĄY>y i-M6oBpTH] E=TsHYeo0u35[TK9L]Xpϻd/g zEqppk`VzL^\*mrHrH[O㣻CG[vѽ?az!ȾSD\{Jy/@nED6ǫo)7?wba}'rߴl4`#e2DwBx,OJprd1_`I-?/u|1K5j+N(F~ڄQ{ΘӅ^೅t[ޖ|lc8Gݹ~]E9,P,2m-pf )9Dq\^6SR0>ozbzS]Ȅ[ tT3u0wҔcDYYVdķٲtt%_{?J%*1d(xfNn~'JMbSݸn )wvPQ3h !Ʋ%,- F@/ﲨ$W,)*fQe{i^TywTfCFi/XG/ozt'dLF9:—k^h够Mp m 0s#zQRp7q,:6 ]u೚ f$Fr˝YQ,S.ax§Z_1ע Qq@s"X3I(08/؞N4f9eo|0B72wt33yo'm';0i4x-"1mLU%U0$lt?dnH(]mr siB 07eұr͜BJp~ME'.^,:*B1 +7EuՄ)q~̧Ů^Gr`-'\}5BՍ]J5/)a[Pv$*Gp8c4| 幄&I(쏨cݼNB1E뼭ZvokkmLI(=a_^76W~y-v$4|"0:wxQ0$dwJ}&(*7 ?CV@ hNmxi1j2FL"c=1kkC5h;EP#uF!G!~?cH[^J_WX*C!,/Xۄ![md'y6(mp{RιɃݓ[P!wsS< }ĮBW^ gSFvEEꫝ)C7e׮eMH[5W59=.>VAٱ&>N^o;/4>Vy8lv'{{ra`/Fp`¡C5RO^%SI%+EO+t^) 8de%=Rިs*=s*ط޸j@=Ө-$#yx7&Qͭ)zi+:gA:]E[:d.b'(@`WzzM ǁ\*Y\\u^Zm ѮK(f PΦZ;"1y,ZeUl/d+Ef l`-^sB "Aۥ&62kd'7LG"/UL=dW\[bgsM~ʸT>h?.8A>2wkuۧ-&|Ⱥ4 FnPMVP͊6B(Xnlb]|oL>huu՚mKn]UCcLs$%"i es͘GQ`"ar=W!Ap$o{bm7d=CIRBLQɏ~VTaG8ηFǛ誡pJ%CAHIƮ_s,Q ιՅHDU#ޔI';cÇcb1ໆ4α>: Nhqpqףܓ`r 7¼ y9|<[> !V^7h:4*;6P8x3CF]CndjxFX!Yd?"ߝG~ (j\5à U: 4˙;_xX9ckIdA.dNoɶ6eȗQ&/ȸnQZIgC(B^NC\_۴7Q5aVF#jE$l|ݣ4ugf{#0  P;(&^wh#9XN.Zs?|!}e|/Q?ט/=`!"{qC\R5`cP$K|rj.s|Axꛪвgu|URaA~^swIT;؎C5S o xW[FI,;HeӺN>^ QAS.% J#3q S>B))P4n@Y.@@paMsC6!=Z2vRJ=uI^A+a4,9Ȱ~Җ FXʰBEּ5:!\[g٢L4 䆊xoTŮ%0x}5; P-88I"XĘ(q( Ұ.u?Rk8SߒO Kx7cqb7\Haf^&mB`uV%>Z"SrSg@Sn%;b/a[/#8udB1~;mhEWkE =\Fy*&ge )bדG%(:z]NcҶAL Sig H eB}0q2x2sdzڤ HʡoGdr]Qdb7 ^.|rASU}!~kW%\'(u.@ z4ueTC!FRuSB5sT 2I{mre[Ŧ9)F2Eg dj|h}[un*< ^p},V)涰ך1~fÀS]ZKXVqm@bqc&N7Rql;6LF)F&|ʼnw_fJ@VRaDXNs>cy[U8JmҔW@Ƃq=j3]O*fzd7;F'Z)R=+##O~ w Ͽ SPvZɼ:Kan P 'qpoR8#A)NtA 8W ZQ#ךeEf*7"E:QBCH}M`4"z_eO^fA,CedV컁eqGZ:EYKIxƈqTiI )CTK.(<^Ua!_Xe{"gGwN #z]A4rkDFX=+/l~76̀sXd[˂kw^#2tt2&4r[ni40N xqel=NRLw͙}SRmd)%HP7[픣ҧlDŽiFoGA&몧?i [XuY[pA~=7ÑyGƉŖATRF;kd m t@{U3/8rȘ,{/˙J]LD.j_Yϕ4FcʳAS .^C;b)3^ln᫕̶v]ɘcznZ k JK$anh=Fc)e;ޔPnW ١;&:U*-\82c @%uM.>@^pVZ˜Kֳş D)CY-kO**?jih<ԏn +2beIͷP07Ҩ1FT7T[^B{*Ħ/ m( ֣d*eaQ J3T9de'r9"e^gnmcry=o--]iyDӚ 9x˴tѥkJ1㳂F{hsS&Uc=I'R[pP؈̫> XTJOj̯'G;O`B _byjj-Ge-,N/H( ZFʚ%IP&,_ߐ8SqtX"Yj4N~+T଱TbCY.נ9 m5/Ohr ~}yܖf3Gw_7&w}h.ӗ Ke`Xi_bm/ʻf+w~#˂KCG mZ&cKv+YY]}4tp,Q<}̉zrU,D`XS(تK-yq!l ^rf W+SLr#h?KNH3B$q&d>b~M~yQfNweK}92ޘ)fiiN@HƢ5Zhb$ktIBBD TÈ[+:H펞_W~/+TF6" $pQ/H1lSA&1~@%8WG!0)/s8O]u`Y]X \ `ki5I$ւ(N=WPUR+g 3/8>=+.vn'|˃n[Ϭ AЂ_..IT:2+-U#ʺ1/@)“: C__yfzd EUe- |w7m.ЈDzfb$BÉDR(xvZ OlQ$ P u95F&C dÑCKv;ۮw3~rVuS ֕K.C`X|x&-=w#N6eL*4j #~Et.կY^,卷S^Sx> G/;W % kC|a;ڝ<'QfUu}aɞU\C? $Bsw*Ez돐ʣ\'R1"0}]̳ ڣ}k/Ѣ seՒc9J,4posU|IJe4 F/Um${OZdꏶ?VttpBQ#蓤قt9 @zek7aʓ oê#+~xi e8qy:YcRdcj2$DX&}%L:k{K>lkB^@.4®PW!tvsæH?BҪ+u?퐖bGF޳[#5 PM_\v:Viŷ JzO+O?oM4%o2Ր= ѺUsjebV3S^O;ÁqG<(EL:jZW Why3uxo)c¹e_'hht#/WhVSi pR5\qZJI_ $EA mBmN`V{2ޖgX>$ 2s[ s1b]m\џV(:dǽ`S<.xZ>Mxnnkwj2Cn aӏ:̙ogfUH8ڄ[ubtB2>;eߣ((/8^ jJSͺ/QPZ8Ip3NVXE0?H̠Eӂܚ+fop82=,oM \4N>R6ںIO#>QTvV 1KvhsER.s~іX`0k9~ߺd a贪Ļ]hnFy࿗ Q HnZ90jdBm1zw ۷l$?> ~ZVz;`=@iJݵGwaMsޚ1z3ؠz#g6;?1 VWACE?gXR_jvN4uߛ90;Gx3tXIYiTKh:`N)&0d.@Il+rd拧qSS RSb) =>,-9麰$uB0σMـ E;(L굜9yŇ2 a݈SAZ,G*ÚoϠM#dp7UqjMTp͆bZ3-劶J*.:BWwECmB v8kkY[ SXd(2n%[aF=7su- KM"(޽YY6q݃},θь&vkoDjԦ6kV5uԖ>v7%yxqCxC$GhmBz\~omR3+BTÙNG~N×W?tL0,t9Sd(J7Ě(7_u9NxZU.O9!ERNJ]Bk`]!3Y:+" U}m³m[U# 5eQf`&ü]Ĵйfa @OJ_.'FWJI{7@-zҞ]ֲN"lBAU_n"/_LnLPS<5}/>~[UX[pHV0er ΓeɮԏN?S6Yf}uJTf 1q4R2 u&w,1/!Ao3L6łMp3:( rS5'1o;{IǦYҥd?bl/ Pl$EoU-Z$&~iTǷO#Ś?ɂaDJG7rխy3lڍcG QꝐBxP{U(l]헎k#V,`]%,\DxLAHę̢pgl$rSD }|J[ F00Nno9Vj-۝I9|N`)QB=}4dž5yLU*6 <$jS7r-e-_><"YYP\r"ƞM=|?M%oR= CXح dFYoQH}wcicےxn[mGjb-uJ9tQձ ݃sfxcTR"A[#os@Ѓ$q/\êR'LpN't+h{oi?jZ4Nh0qMehwgȷ^bR?㇈މ)q>:)}3c;UB ss<'EܐC9! Eѵ0 'X_*7jGũ򚅦Ln%Ź_ a ?<,cc>90iߜp|-71,2 l.Ǧg׶M!1a$?~3@1TV nά8f-(xWLLL=_P+[&C!\e̊vNj)7Fʹs~29wȌfӤ_^#-0kk̩a1#Wɀ'aU%!P'-%AG_`{(hw7.4/NE@h = lfa<9uW^N7'& Ј O ӵ(; e 4| bmY>Zpod:`aNZ`qTǢ 4.Ok.H9 uY!| rE|qax% S굗(%遲eaΰ؋Ce 8t/jDyD,>РR3R]ܬЋDoV1Fҹ1\քw;Xl21 qd>1Ƒ |<lNXVWgK^EoJglۖ2ZRwzCu`}$j lTAuZ)Y`1OHӘiYx(ux}w'u՜i!T'%_ԈJ| n. G_HY-#j}K $>>ꓜkBtQ213/=1^BewV7ʂ5f}.;|q2`LO5U|'9'5HsA+X/\%V.ʹ l(>1؎#VXg!`suΊخA3}Cp197K|39neV x:/C^J1x| GGeUFiv8sv^$qYjoyQPQ]T)|2} y)A+.5MחiDImP-U,$OC`R ``G˃Ӳ53Kcl~+ i,f^^(I.Ճca)SC*p ʭY lDjE6Yf(49F1 yFu})rfrڵM2nTA_׆3RBq /vuz@kZG wv:'XlH@\09Du^CJޥ.5:,/ +ԕ޵6)DǦtH]>k1.. Fv>bDMƮ-.RuD3mShϚbf7|+, &n3lOg}{ 9Pzcm/W 7HE2̼ vBDNsLh2|‡YOnnLK8սpӆ`7"H.!LnG%E9C5u%t\ҝb>}!~#2^lwb9l$lS߻BpFmNC?Si4?OP~pM8NLa v~"@دd\ܽ(dg,Y:%(ƾ7ek4OLfc&˔p[ l,I(.6 *p -1x߻*k;Y<J}s X!b(4 R|#h,OhK1G>)̚>N٤sΆԎ:|H%Еx7sS"+SF/T 1[2Gn)5VgTpfH0T G?HAYZ[( :v+N5eJ[iTx{}Pm=[6BovwӃ;  yȤ׃|yUZkh3Y Xmshm/? 8 rkyOwW;3t(XQbʌ(W!FvӥM $HFY݇oS+//R<68n7gT8כqr]s4WUjnI-˕1rIBL᪭Xhb$HӴ:=̀\u`eZ8m#uXKh>W`ė<ѲEk}a Tp' B1bv>:Cwt3K錐gF ,%Q Rh;Shm?M,>/u D@WfŊ.c~_,مpR(gGb{hɹO%]lDoXC~^[尭i鮍"73 j# ua4}I03Ǚ67e_ V%dAD <<_zxb/0 }ZJQEfxj&"͝jhY |?wV6anewfn(ppWwb("(0&%f2 EZ%OP5 )2Vh;XWG7xICH}fΏ-Vfnk?K7DG "8[HX-#׆c0$Eꖵj3Hؐ]bRk6MAk\N[ 6Р3F8x#:V/ ?NX4SvǑ"F`+iox'XʲO45d"6r6; 4qR-_JF[+_77x٬,9ls"_2>T?sHYG%,D0$"XougDф7boucN:O zzF=FBMT4wve>-tUvT`tz:-Q~GJ >@qկ]E`mײiBId4$STrb|Rlʰ/5"4R61"Qjo=RziLh4aV|tbƨfn^}3m_=CabZ<,h6ym] 05[ R;4.rak|2Bx4N͏}tx󵧘35CXT ښaY#jYheݫzLIQ C}Vgdhr:0Rֈx`7eoњ'.EѐȄ6ڳS,':\c㐔;sd! 29b3%Wb5A Qc sZiF[ژMZS-cؘ,>.RjVu ݛJŎ5BjΓS! ?Vsr*H-7F@"L͔屴 o/mޓ-oYޗp3`i  Ic4y,^Jd OhZbVbel(N Tb%B::.wp]l}tXBwRFBT/GD؈91d:t k"&̐DZjcru<+ض:nnX&Y:iδ3-RZ^Eeɭ{i O(ZAȜx>Nv޵vBE- 1ٕz #F;q/Wo`}vd>mw%m>_4q:tYSJ>up D8-nN+ (r8cXPо_#a~Yq>S$h_To@oNB7ɭTK?ۋ(ܫB$ÐH08ͬ Uޣ!. RWM d8kF1 Fv,:q]qWvE w)VFo%`9Ia0T*s2o i@J0F^#k߻x*G7~rʣDj9e&;aZ@TriZC%7a$!dN GYAȐ/^eݘ+@aGOt_;]w"sL[pMZvc"|mlPsQy l [An% baߗ\v`+rJ\y)cz.⭛x޻£vNL1j P*?{E3 wCU_=S"U H߾);cf#~c۴Fu˩ĩ C$W&%`ܭzZfml-\_+PZWA`mhpM[eKAuuXCn(chgVk: ^ɐٸ@%i{>d=xVߤ$hr~Y )I!#1f<>Ydǡ"v[sGPI5i-h۷t=#̢rFwϔ=GNpLXE6KLݾz #ZeyFtPwĉD/=c7ywu!<] G~ @-DԳ܏Wv},/Y."?#.MIkh[7 ?AwUnD%FCtkw+j-]oQt|K%G(^r6?:BJh;/R >جĭEOjQr FOm4˖tY_I,7"bB+mUnsrΒ;5ّ(.U Ezڣ[XϕOÉjL6B/ VBC ft2w.Xlߜ2v)q,4ƞBޠ{Xr4q-Ax&e5FB-je@6'_rXF)3F10= :e_jHFߏW7<߷2.ۿT -aSg!V(-FY@B/ .VS2x eXmxaAN2 X,mqˀg([av 0 v>GB8(Ŋ*)N;0//+w3%9}1"5\եS(tB^N۟qxG(qj}$i -u LaYI0D\DQ9P`PTDߦC@CI\j]]Fȃ R.JH "hy{@s/ CC_֩k9!Ke]PĦ(UZ$T }p_^;8le#캜~ɐҖeOfK'QɊAB)(󞿂?ѥ\p2RoL0Q?BKEfBrL7h-n{bV+GMd7> Qk0?aK{ω>l,ƹv\Nt0큓ޯ+QsIV4U@(!]8#Nb"a 99ּ) *h]$!ݯܺesۑj4[9<5[IKI8S!:8၇EO~Fha`UJe<>fTArh4E. 5hJ*_Q㱪oAfGȨ}NzgGW*h)6-6s޺ .FF_u1cݗ4yu~0GmVm"BJB@ ^AHQsQ}ex;Rk9Tb%f}@HHpwZ^wBp\y}ļȖ(uJdƐ2$я5=ؚuRkmi CI{kMK+8oSC^_ϪUg,S{V;2.wc$ч& kuڰjAY@ERD99tJ2L-¶8`4b"J<0xfKeO,g?]ۜ>6Al2IcY`:g$,enSlm;R֨g[gڛZV BYN0X`'s~]w~{i©·ϞrV5z 4@({o~@>[[UWbr_>TP6e! uZz%z> a)NZz%Zj&Eu1O4vl'0u 5ү5yXGtJ0(~v^MeOS6jdO(@Fk~p\6;2']*ՙ,-m+q@l|$=&I`bwā+mq6_aQ "f4Uf;vZц.2 ^E;hS>0Fy*S_{>2s,gN<^zgBJK";M^7(be- Q]ug|9]q92qxME!aO'?H!ҹܝ$z373QUQk1扚BNn}} h"ȸɞZOg`mZyT+cWy>뢕l.@6kR2 seH(",tE4~I 6%b+(TձX5jc6 ގS w`UE KPAZY8Z)45í/OsZNLHd ՗ }wᙟZyN>pN@7уvFBTk1/wNUW|t7qS 8:v](ZR%L~XlhQ$(D)tr=KPNZ9!}F!ŕRm-R *&w`y_:6VX+Qp!ˌA"J6̮b0di hi5?kX\?Nht]PG{ EF8R/gz$qgUhh].gdǺE VzT41[ׯGR 0c{ tz! p!닥k/EG I.q7X|PO2nc?\EUKW E +;St2 NɖpL0K1H2ѓR>.s nq VZY7OFzCm&q&ޅzWp9 {J'@22ij4\ {upM̆iLsهKHA,J"d4ls% ?qzd΋|g(}|EeKwt+F~A2S+ʪF>4j($0İגe A < F-{"ʰK}1i4 䯁xBDwia\*dQR2I;me-@34v膖X7*Zaռ Z\tԢ=O#![JcK +e m}u ^%sf7;^ )#C¶Mae7fien8Xl (hN?Bv+%,RRr*Z4P9(tƚ۫{(5>I*LxlN4p/ ~;赚? pq;`ұ !!4Q;@G_` cF ɜ/=t@":  2~7Ŝju>@`ۭ0# :ţJp!xUDE4͓UtQǁ CѦ?9F ,9ڧXʰ\T ۏq5072A 3ʈ&tbCx首VRh5Hy 4{F0*&tdF@]e×̈8Hڞh6q?գ\h 8 a.רVj 5|W?uh:5+7(;`RKq1˙;R yhȘ})!j:cq@Lݻ`ImFQ=]8}:&/=i.:!!}C0움>F0f'9v-ڽ\ >BG3Ʃ3Q<#(ܮٖ~L1`/Hjݲh_R@H,( a)7Rg~Z (Zf Èv@gنeE i ]+}x;~9ər: b &|SKUbߙ<ƕ2VKP*?g8Q9!\qIK,n,4!-DNխ9^$Y{ZۘĈxF ~!+ŀn ysơ9G9oODxN]ojHĘ}7570:("Ul~\i]Ա^W`O;f/т=`UѪ8,~c:93P' AۤcWT+0hjKk'R#9~FuHht5 6͌k@8‹a}\kc^E'̘O6(Jĺ[ci$Y>)ކ.zYXji*$ݝvtk59E"\DbN]}Bhyhn^<{lYӁ_q#w6夺  =+πùV^G k-ZB>|B]h}c~f`uz>uHb"Sg4ca!K=c_2 (FAA'X[TvЇѴ4Mi|u9Gҳ7#&V_Zΐ+#"?3nnv%VեAt.5$AO߃^ώ44cʞC Ի4!Cg+26\jzbN-#>XN< Ń(8ӹfåǒTvxS8'^CU3ˡswEr~[Hh-LM߮O5$-Yϻ|6WN (-E`ׯhX$k!lB g`|Ddal#BJs8+t}@$ukjk"MB:H4[ q Pd N9ZY{E3V3vaw}@cAyrCc2|3k/*hsPBg@ 槜ϘڿQE':qj3Yӊ,"]ZSuh: 9JLZwk@_ Wr#ЍtUcFL\- ~.K;lʨjh$OMʺz"t dzC)/QuCg6li7'c!^أwqe$LMN\:>+>|WVCvH2Cԉg\"2A LS Tib[E\PʮXѰ%    da,ՙ{7gH-4xEumyg56uCBh[]'PZĪ5mD$ GE-3pa9Ĥ'sajR!sG":2QKu:`Y>Kp+O]h56P(ԏ&R% ɻZOALЮ ˎ {7L6h.d BWzKZ7%v?B>*K^:0&/EU}Ҋv 4FH[Q[TX.U;ߗtW&Q[{8޲ᑨvQ%P*:6)|8m/jSX2BS"^;M/Q٣ V@4؄M-O7b'z>fo1ezӃo)-ǹ=Dl`Z"]D9҈>)/X΅=D.\uumY:Z@w_:fFt#`%@WV]G4!i'('J ΚQ  Jg|^#Y%y`|2fZ>zE~JfAtW$s{$4OMs[3:>aL㊂"Z>cPtEo҂D KdeMh41!6@6/BnI;bj%UjxBi/yjiBtjz2>$YZ M.qK}.س\J#ww,C8cTY\YPd-z MP<@GSbEj dۜ<QT|v (N1GN "uBȎ@^/8Oa)z2&&j9.ZʫbKC^/4Ǖ%I"A@.uZ2&M,[dOt\-kywr׿Ϸ8,:"ɉ̌'[*jksǙ` -dJOCu 3OKzEl4k#P ?GթW>$j[7ZSU"$5~aGrj=Q-h#H UXlw1ԦT)vI6Y=iX٤T%#!z ͬZ iϴMX7~YkݕhW-'V%mRD|82)" c0B0$0CfJuqMLv&Pvr2mUcM2rZ&.~'R.s&l3\}[8jmgrbM\3;Vh#{ 1KpU7gx_?B"`oh(5X1V\B8=F;n#7PÓv'aGv6[ {]\XCo:mcO'EwڣObiĈb DDƏ7&'L0ܛ"T&ATnYOܗxؿPt{h~b/cvqiwDHm/nc iIjvx _.9%wvJ2$)[v6&?{ _&a4'q_JOIy=W 9+m vmkҮ/XmvZ ax \ [Tcg@Gͦ@<$BP'DѶ%}?f~5l7c9KrY -tYU@\ '>Ab r/pe{tfb,}kю>wꭶ]!CVeM5m-f<˯/0k'U_,г3T{w/ gpsLzPk!}ͱ\W&j5%G;KU%iva}! +~s (Unz癎1:V)xJ/GN$N\M]f-e '9u"ɫ }"ѴO^d4Z s (}Blc DW:l1iEN &,rS-or6\"#qm|Am@G:r[b:T JH œ\vRD)hw! O1_OޟM vk_F%n|? "&:NƓK^yj @Кf(`TL xdzIcIP$O9?%=dEI,37ѳb2q8(bo\C uW1Tf$׷Ҟ~HYwę]J:'#i%v=j,z-L ^Xl]YaX;ߠ9E[A<,ƽzr=|+"U8Nr4γǸ{>wؼ䶏` AYZRR8)PSeHŧLeL_^ҭJ &kڿu гه#oQg|cdR D +J7gI d5L $ +/1+Xē.Q$ʵk\1YfvvTE_Bfv@ExߔD d7n-d+2,ubSX%+ΘkEJj:x3_xrԽٗ&֩sJ+sؼSJMgV'4N-6 :R&/N\*[C5.Uau8X Hg- ޕM 1EcI-ږGs77 zv#BSMn Dw6Vzl6ͻb GjtzF679?,/ t⎻#&ʻ*3F{1ﮫ٘'Cyt0b:vs.pi/6|Hb_&7=V' -1ˍ C MFvۗ9kWF=G\;\.=R~fާs2“0>LBWL;KϺ PWՕXulrɯa&]9'y !GҷJr)uIKg2~^ֈvDe{v3W.[H(wC)ur"TL~NhppjMoIs`0ᣬ:]k%{ =hbuCJb_!`kj].wUشE(\'2zjzj/ Pxu[ 8U =GKZJƔٶsR)qG8H뛙ʉ>߹)IZKȿ3adhFSܭdf3zq`GV`zUrwJXͭg˚R6>ے[py*IWLRK#Nګ}'eB?GJ#s8:hnGvGPn#3k0FXgѓlp43ֲfh8;Ub{2qT4)#Z-%Wфp7 ]cABNbpj)<1sU~oG1%nU?Z֗}? 룦;uq5vChS ,Y[=#Ӧӱ&:`7)T͜@9uxPulIg4GQ=''񉽲La(f@sR$Z ~2L=< .:O^BMvW` k_ vX3Ƕ@l߁ aHO2q)Gy[ v{kʅ+bu2E-·wc`R0JV5D7+VǢۨ,m)PDfl&|9VW"2E%e@GJ,y#E<9ҭ9d]6E^ueӭ]+#*L5Th:œ  6p.ǙrV%H&pu4U喊6Lx8t '痺䚥1Pr#ʚ'v珞ԏGǨYڦX!$8Irz\M 2~W{_|!XFiovƒ)@6ZHri0֯g7oZbsH^ԴlA9''+z_E <+꤅-1oPhw y5͞RCpQ TK$5=y -.-R#s'߰(`;9d9[Zcv OҗκNJ]g ;}ِHѼB1y.MW4ip[ɇT{"t*:Kb&ոmg>D4}ؚL(煄!~8gpi9Ŀ(w}7N~a&[9;i⤥6:759>pΩ \H AGrVVcthǡZ~j8|V7jq-3)1G.<8k݉;PoVo$*'U[M{e Jӌ/jz[:5;L;DE/K֞hV%O :\LR/+ QK߃AK uP/~}Z\ gr),FO]+E e f6 J;ݷo`L#]/-Li"m䥝}"a*zf>SS3JsQ;9<4' kΰ>d!-n, oѯÐ喭x}=?5l6WO Duuj-Jl97 `>C3<It&±Yh?j9J_1ǎ*m4^tMsȂPgJ 9eUmkw0Cv3ߵVfi^|8\LgSg-\;x9[PV r OyoB9s5u7j1?ƾpKR }20 S>f{`ۄ$0*m})YM˺TvtȄ1gSfԂʲd]KP}C39nլHHqhJfѤKCfPd$I-X$FW+ p7TiNj*osz4W(ǠbCFP' HfhihLf p#o@Ht!WKW'Mbo(,O >mY 1PbI\4«HnJ/%Ñy@ I]'6.PaS]r/Vni{r M 9S hՂӷgt0qcYBdYKوp``8"dp} i(HY) F9IbY[{/mbgV,>1W]\%Z@[ex 8C\w' kDɧ\4;1;gpbgt UŰK7lq%^gЖm{ߡ~/ju JVv5:"3 衇WIc̈DsD|Zj޿$+QA#0D.Z9Q8-'%Ϩ5N-5s[Vyrؘ?x]"XNҎFHӎ谺CPzfmN rY$>8=c^Jߢ 5l0Iz4+PspwJZFQ.5?ҏd֘(o]OukH}~ՕItȀCoZ)NF#:!22RFtJ"[^O'>a  |;ͽ!@6\ɘ"-bk;V-cD+W]d>tf*VnTu!=`{Z=mRDU4q%n@e59 p3IȨe^} )82z~bk@ yR{V? t8_GAi?" Cgu~W@B=V3ĒVȽpgpBYUw~g{ N$;Ϟiwɕpd5A{5N|5^խuS$v 8u@ R3y)9+}]<##z l yy^k=sB631fI%"V UEwsu_ wu_"~=o3<+pٮ14a/$U:bX!@йOt#t{=."mU-p} <(,X84U ]І.7smt˒G]ۖ.Tا2T)cx%=M$a}Q"I%^_JB 8 L| {_GƤ䧤W뿣Sg3<7JkScjI5&+<jĢ}/bJAt(L DL ]? A^Xȋ@/ʁWj& 8oG7Rwh=.1ӎzF+]$*>Ջ!gcZPZ Yf pշ+!«i>ԕd;A$!~avL}6b Wã.N?uܠNaDܥsg 6I .wp'8X%8jf::E쩏ըBkij"9UKd:+[-ڒͻ*}pIvo\' i]<('eBcY2M迲3zŸX4<QM.*ԋ⡣n\e@jDc_X\tq6ˌu'{ 8(F{MO$!VHB1O/o#kyGL2#f-pIYA[2z*lWi R+?8x'M3HTq kPD89;ʟU\|0a˻[X3*Dpa MZΈY@=,3%Yx( eaU\ y-6jދOQn"4Gu T2Wt uNWcǑéIK y=Z\S%'+ ۩'9dd5:c&8Tj:99,W4sXVԎ %\|b ܢ_<[E4{.2+<).I׽`෫; _]V0#~J%y"&^P?/⨮F7++QGBmjcs5jHV2r=#NX!0O{T6Ζ0Osmk ]lRgtA09eC\x Iy* l)sX'P ė~۲badHM w,a-Pkʇ,%!~)|s4~!}Yfd"xM*WM\92y*~@qmս? s˼9V~_;l񲟶̒: s|gR[%7TGQ6ӎ3I6ŭRa.$ ْ"gDqda.VxtkC`)MiN=ˊ\lyZ̦qdh(LZm˷1O뛜qʋQ-\2ʣ!W5-RCs"hfh $)#lq/6!_NytaX\Bg: X6Z ՞n}J8eKJN 0zMG}$np"=Afcy_;Fg 0jƕ<;i(@VGJ$=]T6@ԁ`R,Yb e~sKrL{ qqEi>OAJȿGSu8>:8S sQ| =޾ՒoCc3{2'"1j0rCc6iTAE T 7"Я}gFSNP],o[)LVz48cAxa 1uҶqH$Wz$$:3+Y%]Ռw,cnU Gߴi }ˈn/Ԇg#D`o~ LeT'&M0ZCW%8Dv>JԠq $܇}81Xwif~Exkwb*G2yM?3>\@M.K} j' 6'bt VGeޫY\| wdա@G=8d/SussxdE\/9Ɩv3r:B%`F?36&[mmbwzZ>Hm]EEg0xM+PW 8J5 \ș Nbrc![z2)߶Yy6sL*(t j8q!@xphM51-)A8DK:ŧƳy}$(MWT3ؘ8w,mn0l&j1:si0ow >L bnyW3  Y_ՋXW%^`CBZ)8ho+|JL $IVbA % π^b~9&˾*t+WкA71~ K'v KlX Bq$Dӗ\7πR Hi(y/ejtLTAEQd>咺'~ ]Y7LP8\ _JQZR?VwzZ^n+O[ y5r3Ţvܩ2 R0#n[Uy A{QCThu.YdneKv1k ;}[uYM1;FVZ AOt@P,{uh:#n5i)RNŒ@8V𭴭С]`;,薷 [PO9wQr?tý'3%(U`M3bv[ > xgZ X0m-;b^9*F]@}hV+j:o<ڬ+yXϾ,̜v+NpH{-u假Hv2L +*{wu4&mEX AEΒC+F?z `;8Kd-,ovK)}$48ք`V02f#{詜h,(4\)'.R^nh,餱nQ6i=+xB;ώYC׻;HTH`2ieJ eJڜ439d֊nBV&rE¯{J˓!al"'9X֛2&|ӿyp#&ȏP* \$eG7ڋDu.G{ ŗc0 k7xcX&&ݬ.$~޼']aw`Ra~XC8-][a;{p5e8IOz'hRF{+7dM,V=B\v:=M}"^+e>jkHhYMgscZ8Z+[('@lV܏pϼGuvq^0Ӽ9,G!a\*$Yc~lm;iUUFK6V'?Fx~kj!,U'0Hq]5O]cކ@|3uQ z>,\ee/:zAhxwN&}t9qF}`2/O͖$?7"Z"Jb3e˼Dx=P^_=w7n3}lۖt?QL[7e.َ&fHЫ]O1֊ըjk2ޝٱO}/3$#WpBqS%&?8Qy=yo9+zfya:{g p SvJ0M!U,w5?#D_6 ރ=0 ^פ %)a=]KcȰ_Qcœqv-%gK3c4)Д*H fJ%/yml8\Ve كx5z?*.AZن>3 ʠ+HfuY%]fl0xark }am4-o&x}E}DιX]&6Kb9U8_Ղ)!XE-q!x ߒ̧{n>怄2З4mh EyTIV"Wb[+5XЗﰷM53}/@eX:*6‹ڋD&%u1Ԩq#O"X,_ S~A0'@s$v/0Hjѧ;J"ƒ~q%.Bq8E>Zn/$"k0cQ =Q Mo$Յq-# Gմy#nFgۯ"nKfsnMȞ>˼\^y9CK&QƩx:IeaV!C>(%V}!QD耡y!xK9َa. DX4x#brzw7t6[|!vHCoy.۪_ Ǖ=`zJ! M ؖ[x*1I*@ǀCxuhɪ#Vp%>5e*WxN)i/G.RN/"a+fuSxfSVb~v5iƈiL5}mܮwj8?' [?PCWˋXb5&ףpS\zl䨜K50tTTjJI^ fe]/kn (FGѵ{81yw&!:%+[XTWL݂m̫4p}x3Nzrv$"9ouF{HÛ& iܔ,/FQbFA+Np;-T9 2|H!wlZ^ST?>d;,%%qsC$^XؒSgeg:(}jhOH`@9ff?V6,v70[CiGIYfu9" Ki+R/7ɼx=">Z4f7IƄ?sb *.29P=WfD$hM&$(;g'`uS+BX4XlȆcb\_i{<݀ U, ivx{5$3rb,;&J- KU1A#D437K>Wv HCতtǒ^#UZX?mxeع@9d1ܬҲnȚ`R)u2v6L6HU{h%+תL`<;nYA+0I^=pV8JfQmiZ($l7qCyYF E^@kH˥B^;K:1BݻžX#>/' RC4QBÅo좢5Bۉ8쨉}Bql[WxJv?d/8IiX2bZyE$l~z-V24uPNɻe{؇= @yـY _Zk9ʿLVx:Jk_ݲ¬#x7i;rl2"P&l>Ymg%J޿' V.h!cژQ[g05SVv2=6bпŀ8Y9v!Җ _-^<ͺ:P֚ 'M]PmkI5mzn7*+&4]؛g]80hTB{ JbLikG|f+7&ҷ4e4'DV4̻~K0\6WD1A6mD"­@`@nH[ *m^DI5S@\ H$F٭ejAd !FDoh]z͹4" z,#y=rE嗞Nj-)@0 [a"{bLuyv;j?n:sl[T].d? T*ezl idMǖ!aF#f`MS&ps6-/HҶ]Uım=sh5ѓ'+ c~]sȍ.nBCy~#8v֏^jO^[ؽ݇=0쯀(4X'Oi`0v-E\`o$1/{8Sőxϑ2*CB=fx::_lWMC(4ͦͶ`rl{_6+?iFf d~y!dq>fe^XTb ڦ*Z_^obO V?Ķ9b&L\T_D^/mgJN:!Nmpa$)tdڗhCuRԤ!{F:WZWCum@bm0{VwҳH1=nHR(]lOgH:=xr1Q<-HrƎ9s5O/g(},' vAk_Z"aJnAsm+澎&D%zƬX?D?T/L]戄(Ku!`sWqqg vzγd98LdCNQUrRxG"8MzؒRAbsQ[.ؠz"ROle9T"{A&a,0.p\]{E}or R ʲN e#LYimy}@aibd2Msg%GI{b':߄d6pMbS. ,vV}2"9,Z_[@Yo0*P MbcяZ}m'DeaE=hyܘv+ϡ8%jzR ]neϻ&VϬ+h0VBn]/ +b>) -eC{@ɚtJGւ/UM[ xTH_o<>{gaZ\Xٌ ^0jN3+\'\r>\LbD̕){1 ҡ`2ޱ_<.tI5$xU-师әN3"/sa?uѡ \̤ 4ru+8H0z#qW(Y2k[n\r%#ouճ2ry>*֡k/rͱ޳ԕ:" vtft65#;UB1ҵ4GtMޢN-A dM,?kp,alN*} Ti>y?_dH;{N7tYKE44ݜq"F_Tw>}㡿%B:~1FrL#'F_p`ASU~`|g|hR|jW^HMKQ}OUӌaEf-WD&\P'jiu dշy:l;s}4bF\Hզ&ù`*'*jy?=v$LcŔ$<5ӺjMTUGC]d %㚊c|@ r  2\>Nޔ߿\*񓭆;[K;z܀<' f\GE}g-* cގkv 7S'^HzVhhSW1'\ uɕdI;6I{=*k-FB@z!Vt`xx7X5$֘'n um(&v` cqhP+Ҋ/aq{>k$99Ara7j(ѭPR-R\,Rcp2'Ymي_˜a%V]q8&H:4D f(Q8qj͎skϓ ;=C_=3& ?4I{r*hSd+;_n(N7}C-}7)&\%Aݸ=!k; fgdzxpLԔv漮/|Xr؍>~tUvh]&ya0 WC gIP'X2%6L?2S ~?xw=8;;%P(!#汱z΢-2,4z8獞NAbwABU(6SZ,M Ӄ8;CnLp(SǥITRg?s6n+b|er\Top=;$Ӗ6 ZwL5륩beR]4l-|]^u E5.?PZ!&vN Lj:inb{4AqGMt4yŸ1&݁(g38l>rO1ƯÔ%L YA=ovi8Կ]2jz#t}o4Z؎mE.V,+[*Ss&$gJY(Ꞵrf"Po]2f1çm 3K>Gwf?8]DmiZH'ZF]E +: *H6"U(艸!Ai9!(RŖzx wBX-Xf}e*/i0`}bHo9u}du -+6 ٬:0g"󘦉<[  EIōEaC#AIuMWV_vwj[w>$yƧZ]hiP{ ĉu+>iuTAz@"!9)lCV_ nZveх+F_BYc.5`؋M-z,K>hU<3ξ^˱'NyeQDx4;,u04Ylxka乙DERh&xEɧdnker 0JmmF8o ~Kf#O %LE9UB!;Y27g*YI~^Q!-b¤R|Żoc<݃c[shUN&ՕiJ9&@~јM/i`c9z,;|wŭ \p攜ڂbu_߲þc |9Kw&p|F+v&мH?{x*d!+ Rܭ( +%8D:( UcNES6 |sl@)GH9+moWYy߻`\Pr ^K'~7OZ/= ׷η+ hֹ.|SW&߭zo:֝I|g.=bGXc ^ %|[ |<6'NС!&2i~|A_Q}x򖾋Njv+ ` 1}HIcPWeݐ+~Qj`& h!eޜLM V9|}-$Ƿ 8cEUR!Z9΁Rfo5:2܏5܌ =%?4~1"О۩g?9xC# KAu7%lͲK; {~[`N廸}"Y,Zt蕡VA>l*g&EmAdNUd~s{%Ov# wWd*wC7ä:Mh>?l.wqW|6 J?gGd3,d/eb LCW,,^>58Y=AgVEUwO!@A>&"`{;eѽ:n>s77Cj-G+T-?߰I?$˓feV7G M~T{<r.čAy|s Gnzro A,hxE.I|\FC=|k"d-)Cgظ6⿨x ,f}>iIr| w&d`o'Kq,\}u^t)v:"և^ ڦ\H-Z.fw8gQ4$hDkp[ŲbN4ԏD%)=v}I&y*=]d'e#{ Kd.ǥlarZ|GI ~E_ A_[; YpZdYT23*q}oY\Ì",㟋j2aȝ[󒓈'KفGL"S3Y81T}YI񵣾lN+Udyc9ȝBs'lEd+SzdyXeiA 0$^7h6"%ZE4dwk+_p[KK6VTɾx2)uo PeITPA.a7NPgyvi\ShzBխ6 S@g>W@ЉPIa3.n#|`-03cc) aK@#{im8mB٨tĶNQAI *2=AdXqz\}u'ᜯ|5\3(elu'| A@sI R:r)ګ|7bi](^f FCҲC/^lT0DcκA!gBKY wLg]H`lJIp6tm4fȻPDaE5t= CjbКxz-ZwP0VZiXG&ArA?z9ÁxbFNB2l^'R| ׾d2pc=CH,Ztr=o}^Y>'Ls4tӼ_x}0roqNc/`Xe8bQugliP)iS@IoB~jbQ za^>2bsJ^{l:$b;L0p$6ucC\gE& {9nu\{>4ˢYyޕp&XojӒ) 3J-% M.w%g6 _\*IYuT Rěr9gi'?|} `e0ھxQOiIm86' )Yq@!G0ېi+#Zp>wbnZx,mN6ľ0}-j"*:t#%)Psm_Tʅeslj$@P3K^=D;,ֹ[,G&RK,8Ñ(oøn#aXKjNV<~h42J.utk+!=/p|IU &osњmc&+!zn~ vW}'4y[j䑗iIH.nΟ vfCp1Ng,$;9&5Q$c9?"c(,Xs!z[LC`$fv'sqthJkru]wrk)8vlfm(6PV O/(c2.C ^<w]:P߉gV:#z',%s65nkm &&s_SusSBs/ +㬥a2 ܬ +)}3 1Zm6WC/䈇I۽Q{ZAj DF&{Sjy&FdYg$dg>||9E4IibQ >Ma+F&cu 6JFWa%d'.&Vͬn!?O*60$ɩ ,ח( p@=kuyTi5CA;Ӱ+ m$ŏv\D1csV*?v`05e:GmB7G1rM0cFPNGڼ 먯x)bTJ(mGXF?uoSnKrtsx8aL @94a+1|ZWwM!WFxL6\#)q26l\hQu~}~CRNJJ 2EK8;CLݯG^`A}_5~sh~;KS{'cU^X$c6oc9@y3a-CŰQBV= 4=!Us ]Suتiq0$(k^/J KEZ&֊r. 'w/Jюb lI%yc,dYX"ӘPTp=ZAmV|d)-L# 6tj۔O͐~T"(y ͓'ҝV0lzdi;e{7@ t.GEc7xv@ַ% 98Q[l fs*e;YŌBbPk`RM(äj#N,AܬtʘmՌ T,ȶd|3=t|9H|C.$ gS`a9|)z]Jۈ"ȌE|"eO21~#oDM+Q0P&L4֗DV{Kڱ`Hj 8od&E$)V!u²"†ȳ=^jDtᶥ kQa&ZCL|!&s 6ܩZps<+UЉd JCV-P]+kq騦23JZ?Ou*mRێ萵Ŏ-raSA;ӂcx]fPfPF@lyڰR2oU0OyeTC#+[H != ʢ0@{'{swyϧ6WI)"(0 ˤh~/0|7h}tt]J@* ja47zTVk0͉5%Mtk3*ʞqQ՗X6=[`*̓s/V իf(Z:Drd)^)0_&iV4KnNEEU(GsIhw-\ mp< _wO[#x M)bi2=I?c߇[ZSI0U96|ɫ0-uv}|ss#?<%fLcP^EeZ#w'\*iiI?(m0T>1+߻XָwI_L>{iA E yGk[j(RA@ͪy%iYm\nDfs԰[cLhM9nV+o"A2VX6SwaN;dW_nN^-ܑYJE @ Pn(gEXMϬvPGY =jl`#U%NƝ[tab YY⭉'!z)!oGlrT U]+ `A9"u^V5ݘ%?:sV GNxK 0 n^ H>eIeJ-*7"O6*VS _isq%aJtI'E\Qm2t 93aJ6iRxJo ;iB^WΓqm*-چ:_e HhxRghl6,+7.ұʩQ"zs'WHT!"R%6j4>+7N~jH8=HhJ]y';*]quf^wƩjK7`щ!I[ #ʙrxeU> ̘*U\w48f*qz0Pc`M"FcVL^Ok.b e¨WҌo4S m(B|ͫL.XP/!+HwVЕJ (.D.QS5W/)ǦJ$| TmIny dP,k.'>dL4cLᜓ͘AjqA3M-4…W @If0꒔&=5᫷4ǃ\'zD?]N [ ƫ y\X(N|}"r!m92i׽_OlLྣ#AJkEiI^PV$3f/(RG_Y _EOδ73M}o@& #\uC }lw 쭏&T-4S8:bf?W6f+PY?sFi$"ɡ.hK;T2d>7O@_!tB''@ 8$c|:2O㔙8 c^HM75ŊSyZvfA1|Ze#Uf &)|~:#PU7bxze 3E60D).O*bP*|^>nCJCRmCQZ6E=,^5j t5~༳ʖaO5.G}Y =ܾu)ign Uz/\©*@tdkUs^Ƕ 3`tuCx c?_)^Q,G4A-=$B`ϋh1r~=ʷ;̒٠N/֥Β>9{ CѢ9Q?P)*΀Av39%f?7qx% m(ƌk)_lPr /ĎŦ#*:Ny@NL5E@MG@Џ5Z[&F%UBZO:~|A4(I2 6KMxMlWInX. pUz\ &Oj7q -CxIϲ+ÿ5~P}[n*I՘2GX`I+M 5BE̞#,7 $Wg46,P!剑Nο2 תH^C\/k.5Y9RSv.TbDX4 Sזp^]6zЀ-]w{j8Y9|IYt,f_gOc5Ya'9p!ΊW ׷p vV)2~Eؓ0bؽF\YŒ,elT]QbC0&SFa[ 3U"j:Ym>x?d};+ֱi/(*ECxoeZS~I(E/im WϾ HA BZ4! oƂ7 Y@}rxnHϖ Ѣ=˟X 2h~Truyno&l"d5HM qOب5>l5h@ڰ8+D[Ѡ(`fk8ϭ\~4MBcI9Mp-h|@OwiNaoM 퓆#NlΩf0Y?鲖D< i,"B{ŵ|:VuEtq.<Ǧ=x+9#;}N[o-" _sCw󰈕eRvCVg @R=-Dhi2 vNGB|БV"' Xomc%,ʫ@G])`!:R!(coXKs#b R1:ɘrmx,8Q?fdjIJ/x"gibfyoCbII2 <-(z"?vs|9[>B N0` no}TM"y`9XAۆZ'~9n,k.^{auIyn`ĺwU=5.]19<2~O65jJ~@a_Y-Is?){i0`[hH5VI?ts*vVq c8TFCOr\}?ֽB|c rx-%jlVO>'.i&&c澩 tIBap6Ko1XR8n@r9'א9҆ik"֯"|H|;\!vFFuL7'~s̄L/pm'MCEvh+9Du#Ge-0r;X}@R w`bU!Yu}5?\37or]I&3+m,_X  5 RͶdnAy>DW&Z!7WF"eV'` (~w@  38tJVw7\.TQνP-ǛՈLgG8mD^<,)5*Wp~7X%fuឺ+Rb{O5KDW| \/%zCY޶E@C5T:a!LzڇO=wG:_71 3 }}S:/エ4iX2\HM?֖#K8%f('7r/GHI`4L3eFrE;0SAĐ^W{ V 4*9R\6~/_zHs|;SX LG9د-$*(P{X¨2W;&a[!%BIw 4'hakvYԃ}ۍv>\%IH˷w &`Hhڱ 7LI$D;8&pV<)blMHX_"z03!:}2Ӆd. :WrtqT8`AfR\(N;RLE^ ςZnLsƒ ќ;|xǪ2쀘w zF3c >k(eeq|eYb$eiKXXj5Ez<~xE]IQ j/k6bljPIvׯxurHdcn.qe u?i~h}ukvΎ uXj'ocO*0tRah\XBTvq ]NBR+V=Ur4h Iɢ;58* V9m6H] C>F!߯ aDBxwEܭ{2fEH+ԘE!͊(ju)C. "u);:up8,DeY(V$E?sI=~`; d<~7װ@dp0 NV}_)E:V`xL[竼0cVc}[ ~ԭhtɄ S{9gu&{ho]zE^{䇁2U)54!Mm0ڐot?Y\r9CPIg9zCl}+ej2(? )N{O1¼jpաԉ#髦S)b|y>eԟ-z<) 1 :#N] aµ0tBJQۊ{YMlBz1ݑ#(z%qBu#44rBlr+SJf;-au:e2WB}NN6{Ork5RQ2˾aOaLV< -IyK= 2%fJka^²?[7vj5FL]?&5]6QGMGsw50zF-Dmky?xŸj 0J=bEö+_1!(v^uîJaΰ5ž0upN@({TkTXWKQ }nwWjp4To [ N<+i!d0[c\FV~VijX؃65ǙV8d iZ;6iսt]&(tϋVnPfk!WѫI7f͸~<#+hFzZЕ$Hc=% @|n|q^r+DI:?y x`NL@=cIT2)ݧ^qtKB4 TndKE?(d~F]L;8-$`Q@NWJ?^endĘ VdrpתjR{}4 2z}Fc o3Q8B 5>olsQ̛-_7xYMEf ѱuK0CXt$u?e^L& E\z 7!u9I`quK[ QqDUrg++Jt[2V6r1 vֳ 3fq~OY.%O+~X9zTVr rO ^Q&tˏ =#^񄚇)PKacݞ#v7+be+Վ&x\%߱,3z!g`6-n 51B0)SJfxo $-R㪶!ܪAڡ'w UŵVOK.T#0}h1RKOsUz k_&-yneC.亖" 9x'PPr&}@kvgjW .fѴP.ۍ|!3)[ĕRy(@78գLkQ Mӻ!!Ƣ~9EF+hFk O9(]*p }A˩F^G2mݏ?Iul $*8uϧQo(<0yJbt-`sVQ%k /5\n8(pԸ ,X(x|;MCmHtJN?fFQh|\Y/C =-:/xV' k)\|s ޲WLą'`OJ8߻0F(gt0iQ&=+f4 Z ECGeTӳ2/Pk9Ț44Dwj6tO5 kyaa3) h.Љ;P"UJk.(զp ;Vbsw;D?DiHޣ+pukω /Su3nrMOVʺL+I"&jxh`5Vxå[ H'kˍf/$Фϕ.*ߊ5[_g-˽:$;IcjKPJ+:K܅rYLxSc3] aq(%55 j1йܪ$$mH\?K,7=@oh6KeC0d.]CF5OxhavM JqToh0[SRʫ= -o>vmvyiUfD,KY= 﫠}2&k6QwHy孲7f9#j腐ŢS 0~r:pHn(, _#^L#7`טT(2+Ev#‹_2rCu9)QxRM=,H8&5%x>͌AҾx)( OԳ;C-#KBbT4hb]1)e-nM?R丮tZ7ԧ8ng?x`{iwOFg$R\!޳3SՑڶOϏB]ܕWBtLߎmm~ 1d;wYP]QKV1I3RERnUNgW\\G?{ tnp{75b}/fW閈ىl,NTz,E RFޮQh)xLw6IQ:DGZ j_+^ǧ &)::<+-;t"v{VG{Ü10 G`|8v"c@lEL 8}/J!'*Lw2[8R{[">1c/b"^}A;߂^b}DR*a>b=g@HCLEdK6ld8}b#?V,Z•박xPxS_rҨWK|!.5M{c2%bid:v>BJ\Ji}H:7wc&]BD0'/A]z{ ɷㇲPӧjQ^Q'P p9DaA2$;>x !\N{ op'. W vt *#e,`oAܩ#TH(@+aFWt W0}I*@I7' θ*G'z-諝$IJ |#b2 u2;:a?Mb`c}Z]# yRiXa,-XhҢ`9^{?J.ϝDQ 9q{](8m= \@3,psqяؾz@¬$aM\kƷ).o<0%b~6x YK3=GKzPPrĹAE]M/LhJX |S X~]dJhy)_@3!b''Pc"CԆ -Ev* ̚0dxFPR]u#\XMF\&|yJ FR&B0JRxq!,T,pոŜҕb$ns+8O%Qdۆ˾-&ڵUhzy [+0.5ޟ={ٴ) *7+W5u%]V5-Ko;e1Cw!xW-9IR4׽D]^e1Q,Q_/.(.TtJDJ+JJr|.yV|)m}i\}OSIB:你ݼ0?ذIu 7@J'F9BxnQy?J6q k݇r[iQZ}mRڄnmj16.]$5睵YӸQFDkiubHd gLJ*>>^ٺvDʓY|ǍӠ#Κ$O}%^Igoc&[,Ĉp]ۂZ˝9Z]VGLNcKc#06҈vH\Gh9{+S!˘:DӋ5N0 @y`1ݭ_E >SJwR/cW#JH@:lIhx=&/؏uS+cE׽jPR]1^nT+u>nI(}i3LAzn8yC=T6 L"HeZ. ?;dQΛmBV}쇕FW淬KLV 54h2]-7eV!c" Qۢ'o uHoi;HR2@vT2Xbz.(&:4 W]<뫑@"gpד{|^.iJk7򦃜HXKS>_UJ.p)zj>^N{T"p O3-<0C%6EJGVg0d!f}>l>8kJ&H./*n۸(f;.R!Giw@vosxAŋ"|@x&gV  qyA`uK?d>%8IP=dRI 0&J&+M&wi魋5Ck_*tK>$I1Q p9X])z:;zzF2]†X\3 $w6mFẃJM{|hckqz(5MZaerܺ:M:A S],d3X+яo/A2P<^(7!ɕ. *h9*+ d߀!VCO\:x#BWH]}YܱZUy~m?W0p"im|Aj8?%R[k)GƀrJn!mb@`04A<ҏP;{+ɥqj\?Q0Rz` +tZ1S䠙i}EU|N\۶X0|*Q]T4+[1D7HV3̻-"'O-׭_C&~::Yzh[@U;HC3P8VOVν$k Ӟ&(!RA,6p@RN'7&9XWI)UG,@q)wX]ŒNu(:%c;;4$MD_At1SA1~LbWnݵu+ h]6FV4=!!xxw%-\<@-FtE. ϗ@yFA0`:{ȴTYPtϡX9E}l`P]П* #tDFU aiꚧZ"lȋLޮTojkzyXѿU6  EJxgMܫ>mLwFrbUY"x)ْ k#ڔ)+Eh7S"7wchFrmJY0d3T#J9GAݞ;)t[QcHrrctBlyJg^Ct"_;{2\$nq!Y$J {D#-Mӄ(16M A0}@8Y%qRQӰOAĄV|d.ä4O29FLb)V839]u`ݑ9۞Ċ+QzT ɮ߆gRKB~gD612 Ԋ}Qa7AHHyb0Oϲ(ʸ[wR/Y].! Ŷg#KavSaCY H;](Ic[oaJWhɁ$6oSe!&TI.R`4An0n7/a0Qo59^&~_O9I%[`G'Hp"a!m.VJyjOS\u =ݗDzB jhhTXցJɿ!h28om:{ĔMukJ(QJTPjsSpҖekA,}*oOޣ> -b>:oT @+[ٵ~*shnֵ:v*`!`zIr"FNk;sog㥸, )vB`g6 2IUZ(n-@VbHO,}[=l@T&C60pn#o6'gtYICiJVxh-pkbq"*`ә]%8]Ǿq4EuW6>,{,L%&ڵ<X<6)1fHԐD ؅1̢҄`!tҴ!=&0^;ihWA{]LݜlWTby_T-N+XuD%RiӔ b,]afm6͑3Sᘄ aŵr[ݔTRٕcD/^BinpuoòcdnQ~H8LȉgaT`LNӀCqQG&LXX)u%igS,4!ʛI%~9! iN ΌY5jw"Y2Cr.t*jlΪld>RO ZkhHyx=64RA6$`Woil4ZcCPJ(ws()D uh?RAUӡc 'w7C;;@!љ!%B#D$ǤbNgG0/ Ԝr&|dx[Jo!b1qLłfs_PweV2# nag|h~ Od!z蘥'K9Eθg"'H3"-`NkB VmSRHT`@;r?3C(5Zm4z-M-F@pXt9"R2GW) FM 261@VHb#xOO6}]'=P )\ ^K"|:NjWUēj5nڕc'XvSd g֬wbĔҙQÌ}H3 5N-?y9|P(_+j{Sut 8HN>"M1HpG$2ꁎNs+ur3pq#x^7|:K22Cv"R^BTZ~J2NF t_+U)MС7[R:R3>h 6mA4\ҋjg#ʜ U'ftH'ǥB(AEF&*!!O٧(Տ/N߇WiP$XR)ƾgψ+fI-ϥ [7}1'㹊0`ƭ(7bkim 1Y/8Rp $y9vWThouN1lv f.PSm+M,*LQs0iOVx6C^ׂi$x[ Zk2 N F-سg^-dW,%R+& ==T ]F~!J5b-(C)̖J 5NV$hyL P8, 2Ԥp~4NLfE"PWjv&!CQEK= ;5 el8֩%3ZhȊLpVcY=,R& S^yf?qWe_]Zϩ.%'W!~Z`-cnt鯓zgY}t%df Cl93IG,׬b/9,~NbVv+4*:bz/ Y=yIc`%7Kѯ-PӰ^=kWtc1M"Sc';\_k۬d zy5&>#uja'$HÊS޾ʑ2/lujfM\#R? ݊Xs3\eo(o @B,UU:ZG}FmQ>*ds),;=,Ӿ Ar/1gമvY(B'飷s; Rx X`mmh 6t'aFU'"+ 7֓m VpALg m}2Q[Ȇg~yn莇eiCR)Ԧ,{*TuK*[zk IQ^SEA8r#c=/HM<ɤ)?Vee8QO5F:)Žv,ijA҂vBU?ӌAb X&:W8&]By%[%1?hm}((x-ڿ.IbyGrpQp/;VUpr~e|3-6ErNႡ,'( W GaR5^ViZ游KB@~VU4tyiwE>U`>jk7RAE~M#S5u('"8-8Rփc Z.,66ϙs)kס6`0]d _Hr-~mvO$KIhט$Or{8_,eh<]>TXʊfūT@,vnEdQu-\\ϒ_Q!RJAThQn*=KMng}>C[%ʸB;ץe$˅#[ xeر$_=1QiK 쬀%Lc:yWaYY̴8?q//wuIo ^x,Y[9||v\M(8'Cf&~$Z Av%qeī]w/Țo0}e;i" &ڈ,)w^\ن]?뛴f"E~9Ny)wkT+"5D ttVsMeC|ŃGiK6Ug@Gpt&3S=9qMb(\:NUu-jQHܟiiNquՔVI߆ɩ0hM2Li=?y{"d\7pE8!Ћ`t XF~%= Vm5"Jʽ[BэN:ߝBr&4m Lj((^:D}*o!k㕰<rKi@5 _w/yd8JO^ikVA|̌>X[8q4UzTߍdO Amxj$ꌶǾ/:ǟ_*[kAU@\0ivYHuʥ[3Á.%08չUcV١_5Gz{O0TKæ?79q% \QB.\ 3BGNy=վ JFnʡu&CP2qNW{FJQ_A* RȎD>%:`aئF2Kw} "nvM(yP4㕑6êw8NeyƋ鎙?>/}Vx>ӮHX*t>]YQuFu e{}w֦Stjna^CH(_}F'3}KN#jeSĊ/IQj1q@DgL=.&&WP4c:G_+ybk7=򸬟LF\))wn_^E>*$z9ǫrmY A 'UTtڧu#dLJ+?Q*y7KPwWḂuxuv}p0OOf0c^1/ ?7NTc55o`fSB %+$30 G?#sEj ()ҁϻnA1q4];PI>S aE푘 ]%z Sx*JM oy*o(${Z(n[[RIhLb$;8UAT"jTz zZqI7ե>x2 " 0b#;ebj?7 S)Q<лt|%m l"" %P̋v ,uPQ~@F֚wS翏x0GS:Ka^sbD-%c qF#K7t۩H`63=9yQkߒ_Tbq3% |q"|퉴]$C@C@U M,`]]8yӨՕ[+@1_.|E Q1ؒ Qa|nTԈ@B7{6-Th *dQ(䔒#ё;뀦w{haD@OO4VT1t· ٽؽ!OX]\қ _)[ԁHQ'Nnrb1uџkD2# &؆הM@1޸H){u][UCDPg6gr~ƻ"'6rQOV㷻zyV~~G=Z 5lsVİ D 9<,{zE(wU\rV=+ɛ绰nWa_Ѩ_G/bE\ScW윓 ec3`Aw+wfL7D9BODa0Ic0O3G㢕w N^ LHEa-*!N81#5l~;lK%Ӭ^$O="m#5{#%/9Ds#h$GޮC slSl6n2{CKT;nsZ8v7+5WZꊂ/@Y@ˈn+;ھX'%1ߍl"y&p {ά}GIk'Vƽ]5 w:}w̔; *Nv'2}S?͝@][/P/Д`kacq ( ӚEbd{c<@->^l1bаF(nұ"ɷI[#ma^OØS{e h&2zjLIway/`g1 TNZhC&߰H-Hl$!r̖Q`q?Vh[[g˞b'"ǒaCж[@X{"TL"I42NcC͵JkN0"?-`A#+P.=%~LFA:DK[+)ZVPuYw2@RauN$i>NeQ)Bnяd` ѕ]M+`C $Pbo%D֍X7x),h1!a׉U$4rNJbhZ̝'[S Tl(+i7Ѓ&Z_| GnzLG X^xA P?dXUdN!9(yÿ=Vx/gS)Gi-MqBO #VKkߥl\4L宸)qHk0Gh6O#~3ntjc0Igr#*S#EL%rHS!,Oe LhU) ۀ)ŇsB~sܕB!J4Sv8 #+C !$m={>DM\D6A=!flX@X&C0h&x=Q}/nD\O&b6t2ڊ+7aȺhy&b cdtm,e*85P4)Ãt/tof"5^:o$_,")0,O?Ŭztr-p_Lŏ3v1^_)oߡVo{,.VDLYwD5J|Zlו#|8X>K2dECXKz>'$WZO ODF"J̈kUJ~bALbٜBk^156Wz褕R3#2rqM@!*k/`|jIX&}j+$pUgӒ]Ji;]̇*:'AZZTCUE폁d?!RGfݳLưr+˫{p#~Fh }@#ѩ~D|{U*ڣ+rRg7&ofMԔțXX~rŃW0pTM5:0=֎<5vnb1[sw6'wը33JIauc<|B/Av5*ynHpWGxB`ævRW| !i6UN_c^DP4?W "mmᩕS5 ҫEɈ8޺yϘy)?.`gѧ޹o} ^OL /lg#HF:B:)J9`YxMy2 mΏ*'D *Ue E_ʓL\@p1RY yM ;$UmyrxSp"SSkmtK{usŐ XB C@*["򈇉ia N p`pZo}TK`xŠ3_ZC8tGuХ$NT. aD׍/%H>p=L5ujy9J{4GBXMJ/1̵MR͘s m?eLLm!D]LZntz[u왾˺p+ou5ZS$ `w>BZX‰|DY Xb?WvފmUx PRNe˥2V%hqH)C#,TD븖l3YUKR5@> qQ}/*,EIMf%гi'j&\jvy^|& j1mVB0pfڇ_ 9MVy?@(po]7, qf4.#JGTP {:ODkd>3>0ӾH)J&}\BhxH\'?,̇ '~L^ [$yFctoﾥb$2AЛG8l> y6IKR7J,+g`|h Eю'R L/)"n>,H nrzJ ^P˜v $LdFBFpT#Ww~8mo"YV&#lTig0.-rJ1|s'=8./Dgaoje e_ Bz}YfW8V[LiɧgvJP,:1.9ioabsjŗQV=\gu:z5pi)k%:wZ$O5؏EX1jȗFim}3H钇6ިBf=\w̞F!J2$,1̙C7ZU.5CCuH29dS %Zܛsۍ*̋/vlx}}k έAW_0*h.IyXԦUn7倚O ڎC{Ʀ,, tBmFzB =!ԧ\^z;BGV PZ^~42,DQgr{2"wU#pDۧ/yAPyCtK#2=0+UӮyϘVB`ػ7vR8] F&_u*9gH'IdR ' ɴ&Qvjc&ZEXWs, m=|x[8!KSl9_xFv)MUmT5QVJTs3YLkVFe:.TeRcs^,y/<ĤthdW%M0c]mฦvav*JO Ym mT%z _5' :jip—$p, aǍ8wf䞚,=0v;a3oFɥ(G$~_ji8ߥKIъga v"? 1h).~G %bӠ汅 l`_Wړl B~ MO^GzvPl |uD!C22B@cD˖.qI8VR] 5tbfx|nSGn/.SmC|ڷe@BO·+l`ݲ/]x%rE{ur5|@P;TBn`%w1]!2[2.zyywyu,qbo&_`'Ջ0`VdY).xs hru9b#Y={Nܿ]ch2H)|Z3B] m*cB¸vTX+JoxX ?ǰH@iu22 Xw؉yS>"b>h: k3\:4죮!6}!TN?"›r" ! up; V} by,;q_R~^#铰fXTf#gw{&EEoXDWm/J54'΋xpl/$@6VO2T ڤ=;cEt?A J\?C>VAc'7}@ E~J>g3`+0a ( Kyc%sFNY=j*\i)jڴɝ'#+bJ܂Th>";.HIzgNI߹w-*h~zpQ J @\)%R)V_4{?آ *[xZVX].Tk=IW(E ( E|z!, cBS+X4_A1VFl2Wo]|عJ^ *#dZ+mld\>'Q Fh dguh< ONހ3wH%;paah>*!땱X4"sPcj՜P_ArPYjj f^6EtEsWʔMe\f{ON,`oG$! ۧmL$jc g$߅n hꏭ9Ds{gXep.bH^!Cf/rgZy:Ca@Ğ52cŋ 11 rk/GMA3Q 0cF*6X$M~dNW<)tė%n]'E%1&+ᣒ[Uxi/2%өmb{xhX{ޖ3@>[";fd2 L#$B(G&d$8^H-T fݢϴ耟dS|A[#;>PU{8oLuoe˧N+e%,}2@9WfsyOw:VӤ!~2u }[\Y,3NNlh~o0B  ?khlӯ>pm黬N4dը0$] [ҋ\"Rs5nVAa Q=/JhoX%N߷vBpcTӹ#wSc#z8s[HxnApwD_FU H> jQȰK`\^W%nfkblDg}nzu~;p\ӤlNmKkC0NK^Ná;2CV,˂حhLfHvLȵR3ƆBaEH]* ->)Ipq64fN +J`kn"I'|Y0sApvPpK60U[+sӥ, YINs=Vh!\'Aiɚg8l+`;CcH}0WO(fRzE ԏ4}VUKr[|c&E)v>`I\ؑzI$/4e}[I}.=QȗBJfO#LK{.nFq+ hڠ*y{gQl1`$ yeZ`wD!ͥ?ݷ:)J >a6ʣa=/PjdTkWjוU1A+ygaJW9_)g1Mf_T ^CV^Gel@Ʊ=lax_E. 2Q}`=p´uwtVE3)G2)N^Jml~̱|!kiSj@!T¡6oXRή|L儏Ensm|{xL/ `8uAeI2 b&NuI~XC8dj,4"]i5y|)Պ.d7d6_e[e9^^e03޴D-F^W}$p71wOcCxf5:9"|Lgo  N󭼂@TV7c~Auh- +KgMbvmʶ@q 01ӖU=+ &Ďx {0̶o ̈'Q  bi}Hk/KH*ev78_6ƒxK4n s܍C|ͯ^9eO1cd8K[bgfJzhȮڵ+ɍWX5m LPnԙʳjJE9(!0[M$A*Qo9cd3g2ΦH&>qI Pm>C>Ц7+BUԍEjыtd4^v[N|q6}s)sw++rf K+*VƈxgQ>{R# lV:_b(ZCk!bNظ9U[qr҉iK| sEB.4P7~YO4FK^4RSke˲wH=Cs/WODٲTT{k ΅o(#Ca FLH{qy<}F/5'Oj.J﷣ʅ[ sɂCٓQ٨IWwѻ_bi]]6f^iq r8t~ڒ)gVrFD<5\yl ϐ~}t{ŔlQr2M5$!@7WwHh* 2FfDB? )#*[O$>y\WI0] : 1CۀK }Qf3pKB6Ы`o~K0бQyGeJWml/Җ& 1ô(fApUג'X`} +6r;[]@]W3~T:<-6 $$媎܋:%\=fu~Õ.ѯePoe#q)s޷ (4%sQYR9;iԫ]6}ݩ~ wTl .[}3I8\Q2A 0M@R;Oθ<;&#yeCTzbnUI@H}6[-WqvbI__w^ DSqwߕ,84 8-B+EYkNW,F }޻ V ,@6e1|3͚U7KS /Rύ4,ܴ!j& hU{*BAq`f{->Hp2:^Eu= n>*)lNSCh%M8}^0kD u[(_[ی%7Uw4F>_Y:@S|Ӱ#̚b'텾by^CC ٤Ұĉ-e= ؁3&kGǣRGWG +pGI;:xdەKD٤ $@RȌEV]f5v1J02t).͵50;1]^uc Gik3c&9테q?3V2R[&+U5p]jv[{Cf`w29` V{v|$^ :չ/8p2V)g]dbWe'9ϳ 6v'leᆓ#VVaN1"v#BRAasU}wb pj*!yqP:!V?_?LN tJrHꄶN5p5 mK {6SeT1ϰ[-pwn 7+hĿ%!y]ٗu=F՛4X?@*r݆i&HDѥiuA6"bP h 9_>fL#:,v#+97cڔveN΋e/62j>|/ɂTnd@H $Y#8Dyvg%_f@VXܷWh}k3 ,!-"{* rc/Ӛ^1E$`f3b Wх)HE/cڼOaswK'1Y\dYu".ճfN3؞٘%о'ٙ~6u3;O%XG W?U 5(l,_n)#CT4[SǤ 0=)FDW-߄biCFyh:ܾ_>J=, sH%cV3Fw~ "]8M Fy[d+&'; |lژ~9rkKw6;4tw*y܍+N Voq_F#gGHye`l?2[V a$a=[z_VNq34-Lylu {L>JxGpǨt1R0r0_!i/ '/2  _$P+=&?a`AF${ 6>7ʢ1 k#;IH40P-a :ߗ{^>4$X@]i ?̖qQEgiZ|Kbd񪴩;+E,VSOok'h葐LS6B䑦z9}XxNS? Mcد4)C`W&ִaǓ Bl5 'NX7;>( &hd>̿kvŃeC٭M9\_LCyKfX“6$Wr (ybZ߈44st8UuRYb$/StRl50w5i(2l xRIXـpTzKJ˕P -C׹͗;kʶvWNYoK p +)KRM:9XS_t) B  \Z9ol"4t+y_,@uz*VΤ "Ӕ c"Ji דKEuґjM$d&|oE8e]BVA|@4Ș gZͦ5C 9aGt4q F^^OUņ~0Գ)m /RdW9"&@ۭBm+Չ*ק} 4$0VPKF m⠡.#""ݘ 'NрzAiCzN=kJg{7AX\<nM{\1kDT 11F=lbƟF!Z$E;3Ce^* @gSaV(Zdz^ u&ޑ5XK0 W*# ˵+Ȼ+ besHf}E@RJW G<~DP쥨mS+kӀbv0˖ݿv%e;kcc&偩%~ сg dBiF7n;pdb wW=*z<aKWc}rF߲x cWa Hd<~`)lI mtu@"'(sVnKW錋ma HܦU'gYJbv QQg)ZNC~@Oͼ'Ӫyu- Wkj8yNg-*kn)n-hɖ̈́ S"d/=iѱԾ6u`Y[~Bޘ&%R;izTAuuY]o%!]7}GZr!E JR70|x#}a?5=<8BMTaOӧz*s܃C&&K1fLɔo RǼHu @2YHZz_Nٜ^M5>_~ZoXy[!1f`bkܨ XhF4ʗ<9Ï6\i2~ݝ*,)G\QP~HZ8GYg9usvʵ_XtkU"Mۀo1`Pw\_`5m(eP,!;RvLmo1A# [HmqxH(wKՂډBM<7qg)vs-P#5,}}]2sji(]bo#Á +P݌%5磠UAn_i$;1MF YymMn"+R/8K1bqΘsÿ(ݨl<4̤Z7lXI=wTK\r k|SYGbpEʥ*{+y }\jEӅ3F#OofPqM.=Zgcǫ])}ciT^LU>5p^9h}Sm>?$e0^y GIxsJ`/a1]X4;Y߂fx6wcy$JVt\tJJ kum|0 lPVgWHf F:\JR;e@ȖC> Tە:e7Y|S-TxlDI дi5VopˍaNNfŸ3l+PJ}>+W_=Hk*R:r.}܈{\N.!5&<68ĭٸey~7-eG~/cŸ-MFQS9KU:OB"9Zd#  (V٠\Nft)fn}8nBV LnȾh =HD#\DbʖSg@2y: )lY8)9Q\6W2At|% U7!zRUwsTL%$Qs`h+z^>C+u=iv_䅽akW6E!}eζ%~;u-_*R5)K ԪH5byo^1JzeL߭'ijz&?J7%۾./@ .0`JjXw~{{{1w"TO8:x_J>ig1jĥrYܪEZ-Уvn ȗMa0W=G/\QfRhDK7dL r}A. ?WWۊX'T颻 "s"Wf.![5V& }6]5ԛX۽,AKwXэFGU1o?Ζ%CsbygM<a <Xf]Pp;[V!eB"Z"5Nh3Ss2gMYX.u.DWVR3Ih&D)\DoW#dA! H]T1&PH(" ”bȵJ՟޵3=aN0jW߾ kє8{9Seb?lC+pTWLs;!jч _߲*NK^r9gW5 Of`xO3(ԵrCMͬR@NýP>;Z'b c!٤HCzt~|8ç?CesdX@ESBf f8s6p+@ZI 4W;TqAMypiaVD9}~pH> ޮ_¼IQ1S3I:ox{n5v`N(`lBv)w} 8mMV/N7-GdAS=΅uF@MY(z|8xeLcCL-|Ą[)eu;>__",+qh7!jf%n vA D~{=*d+}euՊQz=1TPF]!;YnbA5=s/_7k,]\gCکy#>6}%`҆P:"\`ԍ̙HH"ęb'xZ3ٳ_7"@q@<Ӆ:Xsv`jt9r f|cLi6-mՃܥhtПGdEttˏ[gYSaNUxY~nޔg(_n4j!է[y}v ײ fxDuԉ:' kI3QgL{@\;PݸIzl3ZL3=*)хHP9~#[mF7]X 'wd[rvlsiGֺMW»ozFwlF3E@K[ܱ$`&zBEG=ok&"ŪG6$BƳAF:{5%DzHyaݮɺ?Y$߫jfAv"hvmF::uvÆȹsZ0L% +rt516 }ixubR8b̓N<9DP d1ºDU 14Unr-I?KhNшyDJ""TiՊWcqٝ]vq7W\h$|{aa8M A# :L~P1u.nk6 ; ul$$U0oS`X BJJA\_}+(rs8mYg3v¡JTv#\d7x[PȧTY[`bIJ(J܋mQ)8piGnfx􎂄y>W8?I7@F+\ӜkgٺmSkQ}7wN!4(]W+_a{a++ŊX*}`]^ֽO@KDi1(Q|צ"ՉwoV@ e^fXHb`8[=iU+"+@Y쩒5ou?#/Q)9̦huXQ3vxOW*,7i 4X?p?X<T60MFsk=נe )ozQVgyoJO#LJ5dN++C)KgX3pFoP,U qR¯pO7GFmkpfTD HJXU,,VH0qcX'Y22lp%,l-Sh:L?ɇ3I[YÎ:AbTwlZ%zs_FV4*{^]5R]', t,^czЍa'C:fݺClfpG5#`p@n~1JW@ iycRK~:`>5\= ad  ":-UP (<IG rGسk*4GVE269)(^ϑ2>{^foBsԄn8S牂  NDMeC}y E^@,7oty'dbH'I9DYMMVwl7\T~m):^ Ծd[> GX*dG { 3~EB\+N;p 'Dp: :1TR*~J)_V~6gCjrC &bf9wTw2甔B=d"Hgd@}}= L6.YGl+CAwvs7Zt)ovzRUK,ɮsOcQRckRpGTA=I1>\ rN$#zqR 5HWM_}XYD}aq2o?L?ykhPN(,:+lݴ=Ñb8=QߌNJ͢ǢQl@n( h][ַr&p/8ڋR.<1Ň51\ [ Yzg'Gr~`dOg&8@YO IycQp$w[\bAe=@SiEu g3[#+Y 5ʑ(ypuj8@MA-N?!|RS) ?% H(@]=f+EybZmB./G›5+oFηёڔ}DM:- Uf#+pW(?>Δ]z*!+Y.~o#VBk\~Ƣ(N )$=Կ`k`n&G[?zzX!RʹH7ե> xη Q`84q>&xi =Ac0F +٘oGa9"EN 3j<=j>twq.`[Oі,L;tEhm TsM 'YoCpy&GӞQ+Q.xTK}@M(uXu_>mICq:P#喔\@I>*䰗]4K{ik ̵ioA@!M4kY3r2 r ]m+2se|@cr,a W͏ϥ4"ך*Dd=_UvxC-nEceQ$)¸*t^UVp$DS/!QAGJ rWM.{‰̪)I X PpFn?֋:P Zmcy\ƻμ38m֚ع`%\]eu c87W5tNc:2oLMer3{3 aec"\5P :jڇFg}44"y֍"NiL(4vk>{)`'co[5 \^?!kRI&3T}Dث=@v6Ialuq "k0?n/{N= "& V +Ke0!{Ϡ6 6)=DZǸ3=Vوd֐o{(t5[p]jgDVLRvafknx4ŪYZ]lQ'=PX$P,kB#b)DQ 2`*_Fav9Sqsthh_>SMku>#U} pł_m\3SM+ܐ ή,4CQWvgfUgYΟ 3,"G"k4"B2a()hkj\bCGgUip;ouK_!bX)aj`CdXh,)Ɵ1k.ӜkK 6W`/,H߰Fp+A3b$6hZ$4NOpu7w{ޣGI$#>Ǿ &aQ! [Uzoؼim#ŗ3ke=X)[33ײl)Ntp|vs TFvlX_wXR;da1zfMFQ=9ެUgpHH:YthAis|_WdeZdΜ䬶r"1 K$rbi]ūT\4bda Y,~vFĔIj3yYluWosXmyڮֳ+ªv~g_11%eNX/r'IaB[*ogU)*MS[T/#DmjPѳơl [-z=J!6cBfn(%')q6 gJM!@٣ak e~NJBhr]reY9*G ( 1u_xݪ}8KfhlҦ KMBYFnIg\#5Üu&Ng|-WmР*>ts*ZhɜՋ#ND0-O8t Ո:(b{!0 U)G5+AeT']!o*?un2uwQȜx> G7:k+];R¡]Ml5n.p\0n}-Ң+zChu46:egn#ܼm _ƊNUW+H$2ٲW>_p&k; XJY]d惛>lI򅙊nxE qCG' 9b>bͮ_L.\cP5c8o|5A'V U̱,H?[ C2"~)c 7|0[ 5?QYh~?{R 48]_/50Rљ!|JGOu.PL嫍u-lPv@DžDqtOXn1 ϷdSշ-qߙ9d*75/:\ш$ޯgj/:b9č:uuۃo~̗1UHN#VppY8DXY?8qY"x];Bm^Ѷ(m0ȋ##/<ۂQ,p)'2 zq&>1 㵨NEFEV[g, uᠰ'^ V nXFYR)/zAHb/J =MI.$r*ZUo˜C5N#5ٷ75NM?ƣ"cI 2M"XֻTR;9USSYg*-rPj*"Rq4 I`SizMԒ;$Őroe˔`zekTUie^4_C8Nc>TN$7X% TXd[>?$+ E風DxG{yO1X搭d١HsA5,ڰ4_}RMg-V$1Dnްow.:sJdm+ZYj\gw#NP2=TߖT՗]*\).d-{y߱v'`j:8ctxDA$јo 7 2ǟ:yL3Q_fbpEc}6 m|tj8*ܜz "i xlk y6SAnF7C*Wp%jٲ2# ӻ3lmA ] \_kjy8p% Nۜ|N[@JʱE)CɃԻ4u|柌78 =GWx\2k-$Y [Ŗ[Zq?fdxJ(l=C?] 'tM*|i׻akLXC2Vx;v}O5{zrKPڡ oAvR C`k+GFa^[6dPsk:y I^̞Ph_sgn{X9kBW=W:9q +w&* 2 ǀr]e5De]P)JƎ0u g \ :I73%NH?Nh43kr<|`W!A'|5ܒ9Qosq=Ee5K/Ւ5HP*=@yzwzly:툯u*V&ovcٍΥ'܍2Z+Y <٣]壀 /:{K|Pu+crF O華< c96(v?9㩐qYPyNl4T9d|MI8Ucjtbc D7Flwye4\@'qݚu3A,"^Q3}b?/W6:Y-(CXҢxG-0;6^C8n_#YKwdh ✎&LޔM.%uh|@QE@rKl7> kf數ГT8)džpպ36{,lai;y]мo='fyu33{$/&& ꬟`H>Bb8![3s( LiWI/]~-U+^=5",E^M%p}BTMklIv?[k`)oВ I U{A..}:ތ)wƞ D"Mpg$!<,hmF.R FjHBT}u-تRo/8+stnX\\k9a1Uc‚cuŨ3g恓m6^Ag֤i+2Wj+>?Ħ]n _kX#/Ķ>hz %V͜"U5͸dV4V HÄu~6ͯ뜳9+XUlY0m dU@8fv-to@a(kZNJWLnp'O!P1̆&Ogc9EΔ]D“,d3β8q rܞ;w -:MeQkK Y5;3KG~Qa9C4Xڨ. ć ~C K%q<*bc#`;fRox5wIʗ5i2!"g4̪&Ї|kU2^ XRYUZy?F]GCp6٘8 Y}5&rJON)!,Ycxx_6Y0&B&E 4}FQuAB?-h{}- ++]GˊU\kJؖ1^:ek݇֨›0%/8C-{az=uuѺssVlyoaYύA! >߲9aۛ`cyf;a+D{&eIg&l޲(}F['ɶ{q8Ryθc='i zR$vF{1 jM2:V왏ejJaǙm#JI:ἰ2n WyFռP,e*⬵<ԩZ? ,iώ62q">4(^z{`]` Cv8ʊ'*W!Za]Т^J"/ڱ-?:4,vh<=EcR7Ya)qJvw˞H\)?EX{b8f3&<"m;i{::ګs (R o ݰzOeM9=#&ɊICd-8CkwzP˗X &Rj;riߝoU^h3=x7s[v)?N⯽oJ嘲X-']!eҔq Fn/n+] tcO"`7G΍l/ ZT'!+^hei ڽlu8(Hs'"҂cj4r#C-(h!$"s30]! 4q~`(V%sV>w?=qڠ0<\UX]?AV黭W%Mk5q*fGsfnmcqoiFyɸ(NBٔO1$/NKg!h' J7%}T^Kb NS^l &%wO +G<:~? Rf2hj.!TM.}0ڇr8ꕌ-Ѥ敭Ʉ!Egb*{kz#\3r|4@α/LaIꬢ vԤq@OYW$?8&o+fR+ q hC*CKaw;U^ {I'JmPZuO#m+Q:R*TJ}LbY_) :lǡ[ۺ [hРq*H F) w-šݸ:WopùEV8QXҷ{0,v藯K=k3:~͍f.ޱG vHѺ[zn_XaJ;SF9ĚV5t7 3!\=y|Z+[‹@&R4$i:bU|QIJ%HTlo6Tκ6Ngd>r ,^0-*ZYCvS$ Kj rdW#69p0 _5$e?MX Kd]VoȲR5VCtݔO e#U-UjqڐO~LZY[ h_ZC}g7{hZF% jJg7qz^.K(]-JH߈_D-u03gž~4]#9O܈<7?,-g8^eΨ?jǯtrt[UE7#5Q,FȚ[|T\,y7ZQ@NYDLQOw|ZfZ?mm!WT~On nCwy w24._3M8KL)ެD/&GoϳǬMG(hrOŬ ٨GA鄺%1P#|kH ܁Y|:o>010^\deI[@55 +'As;_}l3{u iҖ:6)1p5q49kai۬y8U_*km7PZg)e=i*k|ۙ>fW+_ظ߁T>$274˹O@7UdHY8R-H}BKFޣ;o`vڛwb]}BxXm*aդt_,"/[Sx؜?cgvwu4o2+v"%Ṵ+῅&/&y}ݘ:q51rk$ T)\;r1})Ư׺K1n"t%d` i/ur6_16%\ktnlO]~OCd$h/ykt7O4ceh}Iv}J1tkv.RumMp uILM 2nk4;pxbA-r't;vB{˘abJ*?2Va\R#TX E7[C \_Zʦloퟎ8x)3T$hL!{9W$ (>Svd}FLŸFf 7>)?0 -&'$V,zʇj7AݬWVcgbɔrp'`t XTM'g%iһf#3:24L 95[!{@Mcī?wR|㷹OmLcTM5~+}nߑ@*&:dyCYTȗ=įlHHܷ9ĕ&J- m*u3ƚ*삶&Dj$WJ=5_)F|FUDSBgA vKƩXTS ,+1-lK2wqޅ z4T/M[0{(l\~ܿIUpJ?`aj*/$P[DUOdfXġeQ#`Jy#C{5{w+g?.X]"f+2`QtBI}B^^7XE1- d<(Mp~C`';w=Qk#_e׹zTba9!Ly3J&qr\F[x|;3եifU RI᳞gr 0x'KWPbeڳŵ V*plaDJ_Y>/I~B;ceGGx{1plbbZٴYh?%A;UHF8(7g"OH,RYƉ}Ce%6p}y 7qg~KZ@i)T_JgpBs>N 3=,WfLĞ܏{EPr]4A@bWTx1-,Zy]β}x#YXF]' 7sTkCVĝҬQ(XmDĸ$ɭwDQBZGy9k2FJ'fpnGsA ND̝/9K zJPϣ1Q'PH(SSy2hqLԈˏְVvL$_<v*c;KUy8Ń<i-uЅI1VčTȽ8ƫ- #oOZMcW1VVɲ` LN tcHM=s~.TZRYm1<ۦGa펊gӃ޺(n€jVJFK! N  &5"FaN9sDsUu2 ;zSp؅,JVJkV ?sDza/@U@1 yܵpsc OI2+D@b}wr9%xS ni7z^gңE[ހ[yCv'NGh )*VU nhJolJaaU}68--u%$()%DYg煩嫼5q>n%2Ӷׅ c(R<6v-Z`,~$i!aq]m-ova^6H=p`r\$_0qXjHx euB 8YF˿~5FO@uxmh3y[bMqtSA:tZaIȁel#H3SOjǒ2s%`(6D Z"$X ۬dHlUi o4NIZBr[N)"U8O5AWrIq]fb]K?VXǓEB0Tt.>aDa҉EĂͅZ֙AwTd_H~fMK [QYOz"+(lcv=9>>t0f9<5txQNX`A޿iDj4F<.0WF@mO/n`? e4g V,CT& ~\9\S>N4zvj{~W&6}rZy\ DE]@#`{I5Wƻ2!`.[ŀ,5OD^M2cWsXQ? 3ύ6V5;z2)yӼ,o92. U0EkWIzyU+`&~oXWG¬se1rLsޒ&+Ϸ_Xx5,m̵8Zp $?@\*w"sbf MHփ*+caFٲD:VÄs0,N/aphJ0KRoR}U7ԂȮQ9\QWyA;յ|8R+ǒ˧?EV`{+0R*3dU opfSFy%:tV'oɬě01J=e=FYF(8SOv0TkyLcg$%qEF8a7p2t +<40xK(rؙ*)̀- o,o8􉤖%QI߅ݯ;&YטPv^M V6vҩH˺yZt+Ù&غ;MbbCFAW4UWiz2#ק<NVUy38iBiHQ _QL´df[Ps<%|qǕ~Y` t_9_|Lc0 Z=1\l7=k7nEx@D}܃h՟˜ɭKlfSv; $tԧJRVx#sJ"jq)U]>1} -෶>+䪀pxfW7͂@ o]~ @H.`EUʭ6śtؓMixdZ6ΰ$;QGP-4}6 NpM= jk2ϋkl%y^Kh >83>ݍw;<{;ww i[ސtT5 rKgب(i2iw*Ō2o~cPjEHi.vI ./vEx`MG&`Lp0Uo\@mbR"S+ae()*rrD8CRg(FN8CH"@yVW9Z~~xҚ$φtyZ)F?:3bfj*VQcthxʉ΃Q=,ل&-黈Wk5Am1ya@F.mX8bޅwcs[|[#C64R։{)~mWeCKtYGe9*BǠt,N!`~=£ć1G_!S /;jà4پ|&H0w7̼ N&+ꭴyw=.GmPCPߴ^I''ڭarcwO`tݘNA]7 \;|kf481ӎ7q=И8fDEO-dP7 Ŷ8xJXTJkw:(lz ">hH+iE8D)v!e_+I7^X :@*p\^=vΨ+qCT ݓ3<(3W Zq1EVk=' Іؤ6~2l\,ǣsYBI5<|oM&ZVÆN 2&=-FBQ:aa5u7ͼ׼P6N^;db4saPVHz8t6r˕Ju@BYnJe7>)>2+łGr'Ł<;nM`TJ8>UwI;B( /|6]s*iեXr*-aei.7%ϯ'ʜw6tP'GtY:"w.(rLa8Ϣ78]FZ:ZsRMe$\\bH6/$ڶLXwI!o#LWd"" wـYIPGݒ$t]&F`;^x/rFޜqjkzv*4ظG,jY 7&:^0!bt^SVP]'8d֜([B'6%SA"'K4{x8;Ph2j/;?j8 {qљ؃¦nj:Ob^JʯHW)OOgfV {Bx|'Ͼc/':$I,D*h?+@뮧ad-h!A)GYB$-nE=[\~J Yވ/L%|S (Sq!}q`3G,{B㋻On|yOI2FIU-76I&*D3H\e&Lی Y-8Rp. 5pV i5dvJG KM ab"C(W"~3`Z}f-xo|6G 5&65q?2O6`ɰ)%Ԏ婁ji1*}VJV? [W(oyJ3mO:عFgS)Ij6L V1T !ϠGG(ȱ%.-ha-|hpsw UM/):N5at m=նP%0EʭY}ƪ323JQ9Z,'Bd2 @D& B (3Y\. "VAÈŸR堎,?(V #xI=4d'WrMSѤE4B҆crc"aæѡլK. BřUe{)?,ohJc+ל 5Ku)vԹភ|ȲY(u3@Sx$0Ak)od?*_ gs0Pj >]pLIUtBQfL;~iȣʛ-!<".-m1lNY H&SK 3)\JW'7Qs Cb򼄠BdeꭸoOնiQ:10Qx=*_+D{d+ 67eeki[ SK 勼CxHq/O աV2q\ "@I%`[ph5wL k*dL*}\}Ķ@#Ggoӓ|; '  c"h u"X[\E!Zd:,aAq:!^X=c,|EƫsDrv%|"5œrjJ!yQTaG$U9A:$@ͩ$;E^TԵO3RP%:}YW5rTͫ&hή=Hyvi?׽IiDO{4z>3!cx]U{~!XC@ػ4p3SJX?kڠ`!^+ܾأ4IDn]PyXۖ?C+NoZk n1'e;hWV|3}UG][7l0=kkC^5n4}EJWhl NҺmK q d*Z]K-[Oּ]Z΢0z# o5T怡zG/U.Nu*>9`LNڛqWl}rd{m߻?-(ѝߠ!Ps͊Z-Ya0NSQ]q۾s2K/v“^R?:d/lyc oZDT@*) xW( 0r+f$ސdaujjN> w{?aD6kgessk Av0uJ2Q:dV!CS⣫M@ +^8i('ƚٕ47'[^4zoHF~x `%ӻ=P9\^T?URGS_?*p/x#㬁wu]"_y+*)!18_|# !pbU*a)&ePTй}%AmgwEM<+DՐi`,4AC: Fxv!:gaok.]@0a/StpB7 oRZ?8[El!/0ɲ3I1NR!D]","4rvFiJ[0*K%+IhZ7 MѷѠ D;(z >C}3N-90o1:V#q=|6{Fp0g2[cD`ўD~т?ȯ=owGPEdU~hH=@pXw 뫈e|ٱ: ));՛8κW]IhU(o(W4 O͂/Nk X*S]ևmV.t t@Ę3T:X'q v,9= GojNxLLG(e<E8nYpnSFٶ8Lo৫Bj"ix4(}U]%A(n恍, } +\´ 9h[/ :u$7{0 yJsd*qσqIi)@_G?w;p],\9Gw:q"i=P5~Z4L,đbxX'9S} ?rvch6bVcUgNap:UU\# IV/@F<5 i |i5 $`1н^~T3G*1fSR#)߹(CʬkBqw)*`=P.4aɻM<Ӭ=Uq-[":fC 9޶vNPU `QZ9.2K8*8wVCh#1]ED=Ǖ?nفS=oL 4ϕLq> 8|a٘ZV\N;ؕ 9b,545+w{!z>q7t Lq]L}پun𞉗oUL)9oV-OQU8+|6亄L~vB`AňV7ruUR-~u>|5鰱w=$@JD߬vJk`& J%g~锶Vџ{`#wa:/'nU_h7Xէ 4ۭ'Yϥ Fق2w23=WɒF :d$N ~n|1FPg쥐/se! 9Ax.1pRM, ma}8=/k_$Nfb6Q9^#TOZ WIFo@c<&֧Ҫbn.;YM!-ڶ A~;;TYkf:S2NVe>Z$\]6ٵIC$}zqnlN`oKEl[SaGl"8Ri/T$ִ_jLAdcW?"ە_ Rl҅LPj D4,u +GV}[ϲ|a&h|;V0/bPBϪC^p|fY7#\!CV`|Tn˃! 7JN_ILoU&Om;jo*K?2O׮B,K$njdm O*Z%3d|{E(Zc.ۨYqQneYƊ)-~{y?5äN@s?Gva ?>W׻3/ݞ^pI*ޱsS?m{4UG8(܌78S׺smgqI-E:Ǻl*,">Q_E98"@5ږ6]Kw @qúSJjcA&_"F72z/SAA嫭ok{U3v_Lxd0 hz6%Jf┧`$% 6^U^(.d6˜ff@7]k.$ОS H0XG эN!LYly"ܣwcOj|ʉ6R1Ŷwq)5nJdP%ztmldL݃le?8B.݉ bYHp+1PM >jf1[2X#Z- " Z U/ (Q9-ƴ_Sýg"BUJ#ƃz4ग़>_ӢF}_"vH}H[Vmh;HJ7~#[ljuwP;7TWiq`; B~!9`i>q p{W %[l`vA`?y6{;:Dۑxh_ XA-\12k1j5,2BǵjK 3vyX3L"iMŰhe[Rrۡ[[9:2؂%ĝI5'Uֶ .{6-mU2m=I&Zqޥ,g^bឹF Qtfc1jԼd,ҮqrljV>3DYvҙgl2W ]. POw#[Y^QPIY{',h|@ R.LYX䢻2_o uOz<֑]56ΐ:b^0B2pA!t](_3ۛ>éqQJkF/\˪LXk^OB)FB=W3G2 -?WFw ǑÇT>C?7ZY4{tNA;>Sֳ=e4zsdw}|9><LkS^WΈ& (U? &d-N36Ýg99=w1XIx_6SlGT$`i(tV`IAUe_} wQkEF|Ucb.Qt|\ԍ"Y ZPA9,n[c$$yc&P|T5-]g\nsHXeAǠ¤H?^7Pdˈy`t3%G{AG}87$`E!ρm@ o_<3iZe!6 oj /\Z̻˱)@lk&Bd!Gw5 Mȅ+b%e{|ܐD+4ZdgEoVLIDϔ}b\eШ>}^|婥k'g$v0 njoFyeMw^)A? + cHy^Եd4[Y D;9cvW-"eU_n/nȤKCZWqrEm,>5AF1-%Jp>a^8ަ#}Jy<F'rZD u{j'S+O@Y:j`Ʀ9ٲVrE>&n1On _XuGJӛscaL&! V9}2Z?0g4Mva $:U S.2C9IEc$[(ȻѐNDSvz'{a5!uC.sz6Jн]hUK'Ȧ8\ aYSCsl%{gmc@;Q~LLiw L-j#ȽkU& C~7!ݠ Y@8S0GBcD> <kw!E )&s*T倮SԵ9a:J|!i-s6\$;M/&Mǩ5:2x*Ax)F:{}xhn?BHx{y )hZkԒ eTUŔ@[ F>j(,̠ R(,1+sLS ?J^՛r7a)bE)_.xD M sS,Y[)/*` %7T@KX*K3e9J=aꇃZL݇w m Jk{Ge>e9ke|m66⤒b ko$u] gۨm6T8:4-jN9-3?'+ #K;^Md4ؗנr RGj i7"Fe9{0u> sVs4ȀIN7ahߒŽo%C< BDۡH>8s nZV$[NfG]N΃JZ,T Uus}T-;A0nBj嬔8M e+yq̖J~,\Z&` ޴3N RS0ߋc vUlT)r1RxS7{d*)"1!*<ݭic;rc/! 9^ MbY\)P~**,{N. IpQns=15_P4*;m]%6ILmx? 3gc:Xٽ^k|ڷW4\EimwBN|c~ʑ.%7"ܦ*zU`kXQX+BFl&^_ ,NǍm>[tΈsWב.Tѵڢ1VaPǘ~j$:ǨйDZo67=r'$ Qo< l$ L{yJ_;ɻ$4!rH,'b ߏ dݶq<#We[HJFn?~8>XSo-#Yo7S1+yEp$ -{Omwo۳} W;,N°`&|?i^R?qȔssaS& @/ge<, @JJ+ަ?>@>D*Dْrq\3:vͿy2%"(pV3@1=MCLKŐ8z@$ 4O\O,au1`uCƙ&/f!ޱ6kLlIM$9a//=T7il]'դtבY^9K| ONvlC*vXsǜk:^q␹JW=㺓xͭC5;jbe^V=egaB`SptVQT:@Z##—}L~E&(t,7ޓBRmYq<9ƽ{zAIc) qsҭꒁo 8beK-eXf Pt'GTI ټ֚q9 [P`[W?cQXi ~PݚU=fG__+i$LD O,,dI}x,ըV /_|_ I&jplfڥ!c^k (p{xc㗫,aKCa~FJe @j] E.E EΕa`:;uHԩk6[-KkA,X-zA;#S4 ~D %SU*Qm y3ծm^̣G,1p`%Z!g-VDo}鸬n.h2ahH'/a4i s3wӗYb}[MП(N Թ`T~]s7.8JEۑm4 it/?b%:O:tRMlj+0#j@?5d4MO! |h`y)Ya10fƧ]99?/ xSIO6U31sQ>Ņd#"B*Y1+$(Dns>wQkњxs7N65mk=Km!aـ:>-4$pKK}O.D_g恬eK:O[q&N2徼1 ; ! nqL t<:P8jUE`rNT1`[lqhRڃ`m뾹xg3bЁ)h@4PϷOjM' X~ TPve>⦢l Ŝ  .|i/BcW}nQR]̎LJ/O:)nM@ sW .}MXM-h.(![:p#wqލ-i9]bocyjÅ? fGnU^ +H kä7u> O%YqF0]L`՝Fw- >nOV|юiؘ# /A/ JBQkmmUAI+xgJ'/?5/EĻo:դ]h*ۦwB%<V`P,{4@g ,@C4۵K+7"O4HVGࠨd/ճv~ I1'1?@;\@Ո.7-7+D35( [oωtG؍!g!5J4fjbp4'rKIs`I꧷O  Yۈ_?z^=Hx&u))!K! >j#1oY^{|.6Ö́2hk 4lYwSH> <>ۣKDr@kVdZ$v^v|R ׸Ӎmk>+ JqcNtXeڌ{? t}N;~(x*]$QOK3.QæmM_oQ`ŘţtsC?QVۅv%8FS%H۸}_B?&a.J1 ;Գ\>4ܷ%2իAtE}~ @VgY6;qΙ?Ꙝ1p$ȫ*NXPx9 2 ˅ o}q&Uj4,q.a^;S|`$8JOet-fPxԀ,WVp&.DS/0U>T&v5`G ~j*%s=́n]FVk=LBZ $[J j,.cRkgr0)S޿jy80\6C>qtjf{xB)NU J|15Nӵ\|;l }eƻv22o/`_#:E ͱw5VzQJO%~daJ=g\[p,fve3xF~A]uUNwE oy.mҜHEuĄm=Rf;i$|l-W:ue^es>5AcKMe&$H:m~A|>xOG@-FOjJv{*^:mb׍M .mȜdw qe6 ԺgH&yrϚ!s#*,9~֔Dr{2&z^.Kp}2:f*Ҁ]&ΪomBNq~OWJnܙc&$hZY I9&DQ4~.ގui7 ;)TKknZ ޔ N0`ͤjXq]aM ×q4IԁEWnx̹*LG[6S3]P[ A彧}[Z7"q%ZK0y'[^"` R;eR0桵LG ܷyJ{@,荏 (]VTC gC=K,h[g#WDzjѩWC uU 1`m_غI֮%,Ni,NB^m޶żwٚSx3 ݧ[4Rbs37F' aBڬ$=MvK#3;ԍ¼l!S\g` 8@St T nXJ`~JɡCoͥ?g1| "O/ *EخCo긁?P1 -Ň2\2ߛŠJV/7" >Q1h ~ۆA<ĩ0|>%m cBQ.8bJBB%}Mn]K͋lV9 AQ M8?1RtoB9Mnšh{= ZܯYv5KطkS]8C2$p,9 gy岸F h:s5I.zcYM5nrjh^T7T#*YKe@XZg/ 9wo4zv}eqO+ZZQIXW*]tOks_uC+mq)w6;~3CI):e3ZsȀ^]S\.ox^Љcb1v067$^ERj hP]Yp*Rt`!X r}PXc'F,yŠ%o@cЙ+pEV'{A_ (6foHxP/D2(7JŪ]-w;7=M V2`8=bpoᴱB_~o+`~A`pEi2j-}_롆"&O)ɷs=Q/2Ɠ12}W/k޺mӿrH drRiQ@ڄ2 n<k$ ,#Böׯ4^8 䪁+և*q=^{9 N>6Ĉ$S/meaæ:g0k-Q!sؚR|h" 1{ﱱm湂u)_e%OEl!Jg0ꔻT)Wb󺽶|GK=蓢{롒/FU 66/('߅3Z#ccA›Gt䰵Iaۿo ܞSQM6 >r3y$g*d]JK.p؈ &U~YJcxnb̷I7<$})A0iD`CHg6dhY]Մ qWcͣ3g~L^+DP`/9uFٕ⟥oP= 2 "U+r'n<K=JW N5z9L~?%Q49V7uwmϼ~ i*Fv/{N`8WPti>@Er({*~:*`97h0+Sum?SseTt flϑE"xo>X"vOA}} =rEO՝m=ipKg;Ϸx] 1@di¤i?s>_Rtl甾{Qo:Cz{T_)#o㸓 6ju)g̾yVs/T~c i()@kp#Y~ivƑmn8Dz:y)xcBZE"zІ"3֮2eE0"&8)6rr\7!>"N[௕S 5 HnΣ%L?svibBm^N{qKB CNj>t/YԉppW7{cf"ɇe φp_cDrSo[hg0 %IWDU1TBJ# G˲^r4e)eqSXqASӊ-=H-LU7 T-d(c]v½9|jɍFsP ﱰB}KUkK 6^Wg}X->Pw gts}d;ދRsr2czX1xU/ 7`yN|65\ָaxGþj_}=SJsѵ=/׈vM"U=q!%N=\pOSEdO g|֡_t `wpK~k[tycYٷaAn22%\fip5#0E=S}z s, ]!Kk!TĆG^ qh+%]ٴμmI2!?/d^kVUՙF,5c ޡWKua45xCPޒ}=ptm~LpʊZLb2i7X}1B: ׳)lFQS<7uyY1xa+&mo>ʄƝ-2r`0ݞQH?|޸& !> "'w}$K L;RE9mȑxb[UE?T_@u~<o]y﮴_gGRM rF{[Fٙ⼰wA<-]nR\",-{_dI|g=%žx8ʿib /@/n8&cSL=3`:)PpWQvCy"*BJ%Hv=/e6n`ٝ;Dwk*j(Ce]Aѓŵ s0٩-gq tu(In_:NG#ÖjZRFy.P6`Gt p8ispBQM<}L(?+Mc38α—h$=[Z~~b"xMqs%7ݙI gEr?h4 .ڧE) ׆?Tm)/H,LuQ(ǣ2$F`1hE0_5?F>[L_$nr" Ň@{J)8(.@pY歓}Ltk0\L)|_HG(D RA@_*now/ r|)P%FGAdR5`̈́k UlGj5@86ʚ7Bl1>⟆l}$+pS{o􉐗zϒLh:[6F6ٝSCHl{ l;ؿ}ZmdxgRTe˷K{=fO *]Q5jڇg7b\L2† ԟnM+bkvCcާie.' qItڑIw*&ش0JO=Fwy7\f[ftwyՁ8 Q&ODqvER\Fu֐g6Ib+ 8o^虐!{VPJp:?qVk(c] y a ,:5 IBc}rCQ25M?POСk(\G lȞGH&NU_dž!˃PB-ٙvJ03f1y!vzFp tx / 5~ NڙkBXUi#:ǭvۥ yP1OF>AkkX*KZhsdTٕrd `UDYRpZ{ԏ Tjhڊ WmV8\1GH33$0L3aIo@c2|; S@ْ;$˂$5_!ێ8@jB{-Bp @,yʐ%k_|1p[,>!nfI*S Oʛ#2-0Xൂ};Zwg(u lF5 @j Ʃk|^~)+Ⱥ1)*>]^:A15{ژ?3g>Xcd@Q[5x>H[*Ap[-g{{ ξ mתs[΃KH&+BY5ȠZ0acWQߚ251P6Di'b.ClԽ$nyR*\wԵ-pPA@?'~$"hٕ рzR#$Np8 YYU$ݣxQe2unH]Q..jUB?NSr" d)EV bbQIazJC|H3U؇RЉgĩLs_lF.YSVXS 07zcl!MvW%wvN߈`͉%EwnJ%%/ 7h(0f YFfi[Fzl~zn; C#[kgELCHj c6-z+vTq/DhN=b],E!k #&(5ѵ:@Dp|;{aLI\[U @Hu 5It\.1 'ag BA1(^+,p'ިlݭgFg\d?'(bTBj/JtV-^ʋp z0{0 *x~cWe0R:)X ?Mguw*,Iib(8z)-O+ckM-dy LkIvvi_\ocrj a]CbH׌C/U*`7&6Рx-Pm`$xBX{o(шNN¢ݕvZ3fEV-` ]YG)]aPk,ɆM9(`oZs I{@?H3 u r2~G}Je|h17E >p2S^*Dj,@ ) 5^d!- ް^+cSVXRy~`<np=y3'[Ҙx{_Wd eYÝɋHve$' f"R]9XdrT{C*Us[VvĊl&nSܿ¬bo`v,'$ P#e*b|5/Wj0hQ5(/FN'Qh}F\H>oɑhߋeLn.elIK[s4ebh=aמﾠ1TU2?Ud}@WDO@Z}l, ޷̛s%q^_N+ktpNEp2;ۼ{ QfV z5?}q7atW+LHl4/w*'/A"7$,zoiPXPdt 1lVk-?ܽ Sqyn}LB)5QhSDۀF%*< 5a09@2SqB<l2Vj2^MJ &ECZh=Gd]2FNNW pz|%&(7gmW?@Vс'@ulM "*yCaۥW6!to]`D+I9C@_ ǒ_5s#X`[uIσ(nb΀qհ¼JO>Oc1g-PJ$rzĦ;9Q';Wx"QD1H,-/,9-s8<He1QWj|S35 @qE!cK@G&/aT8#=_q@4OI4;~z1Rޝ: Lc!!%BYhǩDCkkb1l^8촛ZrX 3]GLpwq ,*OI%]BO £<_A*LUuw0|YB1vgO򲍌=nBĢ` :?9jzXG@W.PTT}vNʲ7p'ԬH3E[Dy`jʨn)7A.ud8|9 劽NP:{q 0Á3v5SR F؋ 9uG! 6@V(/WUi\xolX<,(̺2:C% 7)euck玫"Yc9ݍXiTU:?\w9r¶ȩOB5KOz?/͞Ѯ28M;5@xj>vqwڄ)9-He%J #)p;ʄ vyJИ62kDC'Lco%'=ʦ mR@>ej-ĴV5UqǼͮOދxI If*vh;] btMMICT zSvrK3{T .Q۔A-cW i7)K DqFù̓m!mk~}z%=XY5;YATw5؈ХGtRy>_'/_}bH6}6xp2eG )m +k1)P$W>s6iV#faqklif9Z!Xp ?u+r;Za|L#՘mVxj BHI Mo;I`h. ^g4Ks],,6BpgϨU0M9yDp14ɒp! <)t2EF9L +rpᶘ=0GX7 ?4@v"X\!:hU:'\kSw*?󏶷 Tn[$+]'jq_beZ9o 'cAyW7#1ZUT:mD;V0Ͽ3^)9Z`S&^т2uǂo{T ڏ m®گiq(aR3yq#\ _<{7Co[leT~x=PL LHZ$`N5AʜBrLr<@uG9sM|33 FĮ8–o(iff8FAƮ |kT,ҥkey0yŚgSW{7+ B\h,"suՇ v/PI&zw. C)lU}KUtd?6L^ZGJnZ)YY53 1yakt?E$͍ᯭj2_C^QYԃI\AJ5'EmaY!45 80[)SA J?g4PHY.\\Zغ)dI"0́}r6́c:bGSԟOm*{vOڤ}_v%[Z;'{i= &`&13_%m5_1,ɒJY"LV3rA^֮ei i61Qϣ2ή^~ .L!JB6DNW0 CBad-}3yP$=*p6B'K+Sc7j_ƖM6v3P|dņ9JS큄 xdvM &}/UK+L[dc-ʱf2ޓBhU@Fzݨ> ö4?.V| _0=$nVh aLeuh*B53Jփ6L@9ɳK(C9SCsx\?4oS4ߒ_(t#ﺼ]1g9'c߈a~/t YQ7;zqJ<+PmQqbF;PI9_KzkM{j $6 ߴ]FOl $+Qmfo&4k[RDs$3Xb 9!y~_y$zeY|Kf;HOTN"~)eY -DW%.ӊHOfOirB -(W,0"Nj)(6T-:Y݅5(IC 1v w&im/1RD\KB`|*17jX;Aѱ36yŔj⇊찉0z߽Q(O?(mJms1t;k(!G:m=>U`fo,Σ";hr_%9|Ndc#C7%PbKN 8(b6Yc5cY8x'&sUx\/]β=e!KԖ:'SPy6HGgnY|Ex2h+raise"κh'3ZczV3 rAYGlډnhBIWCf1Kb9i;3#zg*ƛ^G7wU(s7IX0BZ"{r)E[6J&x)CUȪB)3`u:oN YOm4PqLc+@hR v8g7L${p7颹 #>6,/P䦚h4;\h'Z&jqD~. SI]œg9 @şdGҭ b( p!UH7fʿS-y*y3qΈ"Vm6Վ&#Pxb8A;G;HkfRݎ;Kc(ŏ6$ ٣e,f"ph[4}{ ( %e:,0<jER@W;IkʙbS) [9Nq+ eI_ʖ6} p$b\+$nCġUI =W!6tUμT$|C" e9?z;vqVLfhGy-SR,J=/{V.7>ӟYyI)z R-46DNb[iZa<;NE #nTq$f]Y)aKҮ3m׊`E K #:ҝgJYSK{Z`%6a>I}Oٵ T֨:Ǐ˷nbM݉:j6cA`K_:msчQk`uTI5Qr~:A,Cp-DLMsGJ, E'dnEȇ=m2SJFl8)-IV}F՞-%T&Ӈ.b!o1^D5}&Jk,:\n· :6gX54GB ]ME[g5]XS! CRnKԨ-_+~V"* h|Hc>#]ןsLdEkbK˯41bE8Wie `U"p:8cѕMlO!ĐI/N6f S.N5m܍!\GI|5x$T71La\ X88244_ZTwo'9hve6WO?@"/SMo:tڿ$B 6vBV}O%.Ո}{CVZ.sazs.ɗ 3Mz -u2=)8*d~W_٨xLD)G/L:\hǭT<9WS-3fvQWKBdeZSG>x -7sb46aKy#lC` 旅"9]P]2GJjrVf.cN$ 3.NISI|U{P|UC뎠, xg M:@!b3InZ攡0bg!cka}Қnd㫼pJx7lk[M7آ P%[҆aCn9s:ſI"H,4 ̹qNH.l#PjnO nS[or0 e$sA(XQnPݵgh{ܶ72iفA9S0!h7G}v?ęAkӥA: "f:xMssd6^vq/{7Q`Gh@yGk@Bj̛4jRTD(, K ?jZe- &FIT]Wm]A^z*6^qAٲ<ńǹ(]8:po{iXtl#ǓʣbeM~+>&Wm<.Aom~{^!U8{bcTw7JCE-@(rd.cH4ȃڤpUMU,[UH4VsG' +=N틉sTi43b a~:ښH ,UZ8gTR8/Fz0cuQ&)Iׂڱi^mv|[J̶ݩ[Ñq,TLYP)~ӒN8٭';lklAęu>ьF:ov2|dj&:ÒzP[á۫1F 8I=KRBQձ<9 Zp"u5yr@#b;WAC.p7!/o[鹦og&'CnboEdME3Erf}"]yjq6!t|84v7OH%~ W>1sf8f|Xʲ] fTCLFێQ}/4嗔Ŝ?e(f DOE,σ+1}@Y-g%ǔkzq-xsXX*T7&H)g;꒢咏C0^ }:,Xf/8BYYW@z_<jO0Xgj屗|fT}斗w! n3޶ǻI;rF7 eUOZc^[:sٿOEmA`܈rTE{q`/ (+w >VH &HXƜN 1B"0ȟA>O0Ce09)q2Ϛ|,]tˢ=oy6kw~mo~H{dsA 鲈e .Px Jz+!wQ.@ԣܓ}~uV|f3E+댊3jLQ')՚J@taрb|\ɾy*ZfiruBܓ#kN{y2aj?2|tEcc зT -Jƒ偗~,#|cU1m3GDz ܆gbn#F!LGVه榮Kۈ/'P/ro8WٯGX,݄vLc<#UZZ೾;Ӑɒs %Ղ 뜕PTH%?)(Y EJ͎P#E@ǥ44 4!Ѱ *62Tht\oـ>:oJ<ڌT1DI#N_ȼz$wqsYm$eh mk ~qI4bc/T0ҥdr*ra04[9`̙tK$` fߖi3:9GmKmŖzB݉8xz@` ,äCe"+eЯITf$)|T r{3>nk0OPl݃MC&1c* i-Ws &|_:ECƷe[\S5XdnlI]>/a=QWy F̶~zwڙy?5ݳpbsːd~pWl|HXp cL?7ORh#lcLQ I+pUVM c]aB. b]i)dcG5#4jo3>G"89S;3wyJV<(>A2hO=|4vDaBvqg~T:*r_Zs)MZ[@l3x۾Q[|%w7ʼnHvb}/V0SBFXs,9rheC{e\*E"XPeXN4KJ+`Q +(߾Ҝ@yUu2a!O~vvY{1V[_~Q#>w10#.:]7Y{5NWׁ_X`<粨]Pw. Ԁwտ[[>);3@|{eힰ V  Й>C/N0br[ڶW#?t)"e [OL$1ĎE~DF8a !&ԙ-߹q&vOp>62nBCo*JP-um5D@(b) DMǃA^ ;>k5{rhIyU>(UCE ;F g%z_h\FΤl} $\OIͩ"G.y/`SsJX=C[.#5&fh(zfSo ߾uGejm95Xڢb|"W l XO5hzImyrj]Vsc8V{1W5YD~o.`tߡ쏎q )7T)5^*y0Ax4&s^WĴS%c0|k ]S|*Dس&1q}uK'/U.*Wp@fvy#ZlX~]`Ʈּ C*J-?FfLJ+H;d|zLPXht3Sct f4ϱL81f3a)%b]Lыv !-TI(]] gv(Ehh?##ʐ@j11'29yCEh4L6 Ӫ.[ V[gxB,IՑ+W4!E\F[ )x>efA.c1\Y ;f!;ۧ_)iWr0$Zo2]n.E ^!.t /RcˬXnY]dž`V/$jEbnZmIR_ _,:5MYM2- FPI0o>PnJRh9ǫ'L3T:3DK]?L;CTհ.cfDaNz׈_Ӱ?ɃijXJ0]/H1 "k2Zb%ѥ4<ϱ'^ 7w^YD"m4X A01Y7*{6?+2j1m?b#x,`K J(t@gw']lĿ;ťLg{ |Qg^qw~PH"taG $ In~&$8r u > c#g<n.)b A`/(q#<:*b=b6x>)EVl.sLjי˂Y2qJ%Zhpm1f1U\< p$4cbYCP_S`GvOCuʒ4-ඦLn+*z"ۼqX.bj7סn",X hsVIv]u¢ՏEO&!`qj8‹w;|Ӆ?m'%_ Ne sȫHG:]i.fD+,^d꧃) NItQKS[ͣ&\1i<DCR[z!v:k&Vk6I'qe濩Yo(SMĸ)GRWG%ŬnDyem-Ă!c6s2E<AF3>fSr<\s<ח0.tU7 B޿tzd @*bN8 o[]kCъ1gSJIUsq(>*-qytZ/y1wSo#4^nI0G>'wj!_;R_৮.1˙V <uQr.41`Wu( 蚋;_%mgk:[(k1|yRtA.nxW Ya |Pܖy cu[SdU󀗊@ߜ6Fb+p,Ok V(Zjg*v5Y{} i!⚀hWH"TLI9m"<[MB^I 瑳YT.;_=h\n=Jcb.d_F<j㦏EU \Hx8u ~җ;>&R S!!÷q۟EQ^>rsU@:t]F" CJOٙ&iݧ [ twnvX^A#+UIB]ijJɣmbCpXjaxӺԾGg.9)n$oiXik?7kXOq?aTbۄDo^Hq~ RL|V<8EK :nq贈6^ҵyW7]w:/ ;yR DD7Ffp܂vTlSvy`& 4(-`W\K' ɀKDZ7찎R09O[h7R˔Ca>eZߡPbk۪.45_ !_[\M,\%Wv#')!zjUU7L{^ YHl8ImᕮjjlZu\{y?.8K +@G㭢cn=wHDiCfPa,=SZZ9kpүk . gހ~}V24˕"Oa|S'%M Ip^|S01T:* LLVԳ<x5i@yrxd_e_XRrI}InI49 d7^kDa BS 8m#n_kB\ ! 7;ƞ!By~t6]Fԃ7u嶻)-AɈߝcUBa/p05߇W_Bx6wIW{eڂZیb*b%!_;McVᾀpϔ2ޫ^q͑N'9,(WNOUٮL l O֛Q`:!&GF.?-U{x!(fYXϷP3X=OOiLx)}hG2v@㱎+u,` Sy=ĝ ~;.k׭+D Q}yS=ZoRy hly$cn#U20.P&CX36T?p0sCt]06Z|aSFZTY}7up.dwB{Ln[.|ra1n)#>`nЃYӠ Dc|(ytC5l7C|CbY."J3FCfu~}2/9.O+w,- QBA@iUk]j(bWhtּ7DPvbo拗⷇.8%4Z: 1t w*CR\Fi5|؛{SPJh- Q P&8t6q#|#M"+Ou_ir7bp{g?ZF}h 31SگFuj ')X48b#lm:_p'ePmHTh*jR`O]6q_.)#Hcgz6K}B;U ;{nflWj3f Gwme _T /kVF6FBO"?W%|GDz#GRxe]w\{CDj39q\2e uy*8yE?uڮcm4;pV~_0_Y5LÑb黧޻$nHe^/}GRBm{RJhöFu6f9Q\8-;FCI P2=OYXuNݽC i/諒k~ZS!\kT= fןOo*Q>Lm2Q'1&EYҪDX )Ph#wQ_%:%=xZB|Ȍa6oar@?=F$**Ib'Е{x?~|7jfyA2|uk2DǜFiy(\_bO+.cGFnԸf]Y [J p25W 1n֥Jō7TVP+˲_ʹ3cyv]Փ7RBǃ|u*JrR?BWCnt7OM;*9xGɭ*rB8rտ`-a2++.'[15>6Lif˿~:="|A~XG)IkPALhRy=*8rE ?@u\~IJ㻈z 9N-" %#(|hJ\gPDy^)Hv2H:phZ?҃b‰BV *C㤄 .-a`ϻ(&eT5L\Jh݉:' = Imn)t`N&" mr+p  Ual@ὨG|dʜR ѸsEIOViHNř 4 U+~EO_ km:V0SaȤק2в~ 4 ̼O-?`eiNFD*2L9n0r+:+ (@Qp売"gwbr3{LM=̼-%!%3|H8V9<0HVn$m2YԒ4Vkk>7[fA @_]Sf]yجsÂ\`Z }^<;%$m&i-|0PY#|BΎ}Gq3ZL {><gmu 2w\%A.Q@)zlUR84nK76hˍ6AuB(B%oNnpO,%K3*)| q8r'<,TI#I_w{ʰfC5ַYP\;}UM|Bkذ;*l4Fi"aҟj!(X\2~u#WpH`ʬYR- AJ=t/dax0߂AٸTF 3vq0ߍF)I"^)itD+@Ⱥ-H}_49eG~;}F)Ʃ?:[̃l{$18X See!joX?_T&< xٛ(v/-Z~4뮊caU! m{'/`S-Hl7zդ&Ur|pKmW-3-+!mgq,l 3y ~;*Q uIhtÂn+܊o}Q$}lOfԵͣp~G{UbCa 76䳡n<8B+{l__\WE,p|'.8j]$b /ܙ A \K]Ю W<$B73U*b*݋Юq/JtO̮ `[P,,k Or'bDӨ{ɇB2a+t8H@"N]9b5*sgďDr g7K9w=\墐6] v >% g"益K6G,= iz{#Vgz$}a>![h&0`M`_M(r~)ã;hfM%-%u;Xkؖp0{r7@đLYq\9 qS,bCHE?I"\33)98b6gYa ͉RPиA[JWl&0}`buu@)xUׇ3A /&nm,2C|Yk/cx^vOsg10c&lreejbM)B6%G㘳Y9CI궘Jtxm{o-zz: v& #_,ozWӢ=m5nxOmqChc69|+,ՁV]Lׂ8;QjgXg ᔬ̩Kpf={wJ]cN@<3!# PgjC>{`, pQrPjr@!qB$ X0kTOpɳ7؞-j3uiM`+[ڳi:Evp9˛3SqB'4&ɄTNBFp% i*[%&E==7/>5RSGEf3F &ԹֻW2KdW;_I#!@ 1x ~AG-HO7gRc W żmd^:^TϮԯ7G9,֧9f ؂Fb7xxƣhn* u젹$ Ga4}rv/d?A(|9t4.4mEMc1*  r]B]IA^`< Z{Nofl@cqŮU.?&4f!G2Wͧ( R^#)_kw;WG|Ov:ܞjYxZ3"ܡZ⩻y&S8с2TM24k A@EKF'/q&cŨ azw-4dm_?5UQuFWhz,e2'")$< rvUa\eA땍yL>|o7]I!j= f0A54> mC3 uv-x$D%v2A/rն ':Z\fξMrVBzZn%7sO ߺь:c3* cUm9>B$-bx%~qI9cLr^V-+W"5״/+y{o*'Vhjߍ֣*=Y+AmNOЌ95ǚ3Q?`O%=>Ǿ p;FHGMf:iZ3#*mjnk]CIF򅴻k53 \lux7hGw6҈D@e27\Nt@^ 6[ySWض7U_% ĮwɺZ,j0Z#puU`Q!rSrm5'ZϷ؃ ׮zՌxhY%9`4{>[n\ ;N(/*rluvk6 S5o<̿).[d ! FZ+]QAg7>cq.yeVydsxYⷬv +֖?ͥ^2( ,~8(Y U1?*P7 = Sp!,_^}GC$fA<+Wt5wpiީpDO<|'D&n]e07gr{qP|.Tk"+yJ!JiRPn0GBHGZ/Zf&G2Է%Q + NVjMf/ 6;梹m}5CZîa.e#|;:4\d)|/-J qp;\(s8ZJ`R^vvԋt"GpX?@9W_'I wO~XfFb+f~ ᏁոlK=)(Vq. %ɒ%jG&HCd0AOZQ0Tmh}_.rw6<MXw1o-k<|z%H![|H }l%e 9ڔVK%umpI 8Pf}}AcE;եM)HH3+I}x"8rm*[c ]?<7W;5thPh%S(|h\R<_~_sQ"7y`=Kl\oM+Ju=Phj 6 \6݇'ҚĦ;;ebWt #r#A&2 N _N~`^(*,JxqL׿$V/<`ǰe✞JE`$Zj1E^[ IJX}Z(9u$"S+u/){p "?l\ Bb8%7-nvb%~ffyp ws+2k$7I*[ gp[/ b6)oi6;\M3omADF\R W-ʵ '7PfY9oym9/AR95[)h@*Y6 ) {-]em[.d2 D8!r@ 7lc~dM]}xwH0X.7gDWbjoFNwdM^ܛCk0^5T;%zW$|R\XxMh0ODK` `xGJ skh&8<ҷSX['e VZ.$Z D3@$58&+cF`~$(+)mIs0 b"Wf2ny9A?N６r‗ٚ1` Iik 9vamUù,Q ɱ>@@`w4xLOYcx5 qmX0DS Eֿ+qKWӗ"DL٤ZH%|fkuzZϰ85ٺTfo ^d p>%,[;n^7s19P35> &jtl3["B?&TLiˠ ޕ7!D@-`RQ}BH1m'(T֗nHj g;x͖Q­zRyږnv>zFq3X1¨o]ͦ[-L\tw:ݦm d6g.5BΛې;AY+R~GT$c#j]E1UD@ج"J4AB,L! $P~T;<^E9uLo, Ư:"f*Ei'I/ Mևrզec!}IcJ$95˦AkPoVZv\X8_@BOȔ&T,0%Tlۛl?yۊ_3.}Jٗ>$vw%;һ]wN/|ݻZ1idG%P̸'OS FW)cJ#D_0֚#K oXG#itzuľ 5-3O;PΞrݏe\FnPBz_ J"TEO)qk̯K\P-Z 0u}"Mʂ^(虚UgMqfQϳ3D;dtɳ)],!z֮R%q~G+g* tX+ lnqdY# yE)ALS's~wRGOh"CHl=ψLE4EIlScngb,!8.D i?B XJPJ4 kxg:̼ÊyoŅ nB!4P>6vȎChS>*Yzߍ H9=S ̇a/|-4At](uG+bd~dHi{'B^0(h <ѹjsтa5ϼ.8c= ˚ɫ ++Jncդv?4GIsK.s>JؐHp8ٛzc;#&cո r ,km64uTC0P%ڝERN $;nh~BZ, )So'=,b]w'Qeeڈ)>pgQ/03.F|*6}?[ 9udL~-ª\t݄l~;{ь[ yxv@o{Y٧xT22uM訵B;W#ysX d_E~:9{_Ml68Lzp:`grJ~a~i~zZsƕ2Tw_yuZ6, YR 4DW|XQ:i*e3|Kpŏs$\—8gnbΆ&eq,ĭ.IWֶ aϒԥBz0y֝iB[!WT. _T2R^U 21-vʷy\Wd1- hg%t6uSSc*g3?_oV>u_%FN$݇#N4'Tz̃?2'& G=cxwҩ}&35]#X5\e[i(!Yi6{,c:v]˖ -{ǿ@EgV;?#QcۑEGk>w2QX=IRxY"iN Z WMluSR01 2xD]~2 -97WT2vŷhHLPO0]_!J;9/Fm+]E׾4w/wWq:aH0CLA8qqPlc8M}JY*1R($"$4 Iϵb).TC}0 =t?}ZVUU hw$c1:mp`-怐PI\efBri>j@bF_RήRQ F96ֲA)z#q| B`QiUľ*^z#۽FVv%lztC4~7 Ud38TS8D95#ގB>,1]$vȝ!wY9RZ¢ˇyv–iwK="hA=ٴ-yQ2(o\ !Lq6ש8? O%/> [ 6aNke 2UQ٥(11n&oDZ 鼟1WxїB}rލ] "p1IV;:cC2ȩWwC#Ui/Lm(3B4Ѫ4tפ~Xʹh3uZ,_\2(tPۢA/̖5J!!R\\.f; 3%Rv lW,牸MF[MJL/Hz ׋nH1Q`ƯIЍT[Oc_O=΋Iq i^(B]Bd^~-GzVk!\OT#9P:Zޠ"w }xEVZo -X_c)Inrg?5Q1=>ewH^!ig"gIS_e ~F=1'Z5v1>dnXLShi0@G.7yn} Dj{ˎ"X $5Fۅ`,8(tܷcBU˛ eX e*ZV18Skpy{ ܼJM˒W6sUvhC3ʣbĺ?RgTЈ)1ۤc#d(X"$ Hʫ+R7@JIòr #R2ªn>G* ^􊥞s瑳=H)~}8d50\ΎD1ʹ&K:*{5łz1qNo)k5} vo~#kr";Wq΀.ݎ`ZO0*1Eb?αYJ:LPx~e4DZ.q[hu)[J8 uv8'{4/1~ߎ=GǮpW@]xu;K9F̫,5&t Ts>E=N7S.ZQSYMYtF( L06_P[`E |E聺\9Rg6{ר((д٩"ࠓɿn/TG"d|ҕlXpk꺦_[(5܎gipT񝒑/KXڝʤ~prN8XjLK$$Q 0 f;.vgLu}@̔ ĔFn K(q;w}ez߷߭Z {kv,Wygc1 ~Z1+I:I})v*(E%D-LvDi;dﲽ'&!ZMg/H5@: LT&:Y_*C/fDp`thaf|DC QV2ckϘ(Mkm͵?[eo&t Ex}o͎p:ԝBJZdr-ԸiDnb%…ЀJ#ҢGI)RV?֏Ŧc9PC6xߴ|;K=YE> w]j㍯}uxGnkC@,tQQ5)k[Ay%**/Ln(bFƍ{BMq+ƈ/>#™bnr5G$F_7SY]cҎU7z qx技q&60'txg3 qd?Eo*Nrr6mܨ-R8(->n~$UxY7ٿҢ8:]zfk71kz)Fٮ/ gRs*_ICDYf.CAe?2+2gNB=W:|aY?iظ%A3y; 3 /0 VO\LJ `-7HŽvs1M Jn۲ L TW &P-{/>j [ j('OYG?o%\+.(Uߎ(45iHTAuP%2T⒌IpJ4Ǿ$ bEO\'*44A3@UE*aCqiAп) 5neI.Bgv2\E Hynӗ[}8T'i 2C`ɌknG]pl޿oDiKAa;Z5ujmQ&!7`{!KmeX>$a"(m$5(֬.܌Ww:)yԥWSW^&,$8eLvim%(7:ؖPUZm:=Yu#Ȓp}D|%Ad,ZҘK9W5K55cDvqCR@814IܷnyrT4 䕧GktbޯKzw|dEl VH3&P%M*m>&)%f232l%E!Ȓ\(XYp@u0V\/Iwc;RAW]W@]$=ђռ㾴B[|32 ڝ*l9 ] ϴ=: #]tDC ^.OH8 %߆lt^Њ%0Y{^hv((H)r8f`W$bI GhPqrD%) ~ ܨLoŨcFÇ\0%CZNp80@-r>>ƣ+e&BnʥW28ۇN3<$؍rkzd#bH(5iV&*BpGSb/*+mv͡ Y9ֳT,#$Z)$F8Imj\.jkQpK#. gGlN*8b~_iO'(&oV [$PuGbjѸO}AA bE림9V:em/~haD85̕tEXw"?b^csO0|")`j~i'<G{A5] լ^/y cBSz& qPCLWhRf)A`tx^9H T?MXlфnp#guVкw^;oPf%X Ƹ:;}u n#6*\J_#'qi&rkX*7J2{|E\1߅ \NdwFǩ֭`{ /[X鯍|p\ Z @ԇ T_E Խ%13g9K{wj4L>g9FpQnꅿdUf?g -am48*'øsDp_}aی}U,gP1$8h ԊD>2*ݛ-?B˔td{7D0mZ>]+U>hN Wk߅6DRь%r/yضT'g*>\_D"A: T!$ZFbuŻi)9Qr\:]a;\( ._6rO~3/t+xe4uewU_W>*ZaaނtV3[]!QAg8RgOM)A#`֯QqJB3?)g?6<n2AZފ.C %+b*P3JJͻ SΞ[8\&Ͱ٢ 1"h Z xD[Si֢Pr(jzubZZz%~j@a1PvV%#gӒoQ_v,}ԙnMt4R7̑e< '//zNHɔN%G' a"3Ks{Oh˨p&e.SD +u4GPfmm MH Ę8SL,&+_I9~qBWj[dqK= l:(tB,Uz? X{\w7Q9Lrhm`3oxN%Б3*t@H\ L\MA)+cnq{9(ryWD0ޥ;R QJ?kZ zr揀O vhWVd")LVA࠘(PZFu#ɾUjX? ԒA"]3Vǭɕ]?{sӮdG#i F~f\L/{Mo(ݫﺓ=q]- <|T>Mj/V:MF"}E߭3 /=ze +N__ }z'hnT9I@V< o"WCpa{iP(b{8r.к栰ʄ ˦:{]!찎4XP{ԵC~~5l*b?/=eY9X zRf됑c0bYaf%]k;};?+.$C[<<Vŀ)saBGtIZM=LJY-@ WKu?9QqvJB`R 3Z[Rҵ F]d4?ՌHioԝg~uw*$6wx/D_3%d]Wl=WZ4cAMyVrS0Ks=5+X)!Uw͓[.jT[2c=?[vz8̞APc5fN|eR2O?Zaa7j"6wy\?M+d1\XlPt )I=7 ̷%tSfcl͢hx@ӗ'  TKK55YI|uPgm/$3OWhvPwN2 ǪgT&<VClMFS@zYY#<|wdt {QM FYUg<3^lOa˗ zLEi5ȼ˫Ƨb#T:hK]aG".s}}&z+:OAS c5,GYvH'KLY&z'L{~Z7KeD~CSw7 wB~%Ca\%tC֨*Uc1n UP˕3{}Ƞxϟ=mol2xawc)jqo k"0M.ۃ4E2OC]@WRr0 Z nM+mDICVAfڡDRUՀ[RަҖgs?¸ϬA4,gʯ+QȆ5&PKJQ,#1r4khfb؃}>c wy+7yBfNvHl>=j C!*qFІc6geNԱZ_y$Y>"@G[ـ8gv?>6}x(TPâς5hbsڒjPKdHYajLB1lʅ|kLB^#zNO;Ȗo=wWz2{/G`qPYDeœPz,Fvls-P9ZN.čX-/z>MuBKzqzIoH̄J_m}@}Nl,dveL^a[@ȏ3%~m)AUD B[_ ƭ14.gu@}CK >R mK.d4HkW:sexciFܥn+", s0Ք(.^ͣX©[CMu^JFj׭Qe$2zh{xV4å~..|w#LH` Mw5"K#k^^)뚳,vWUZtجQf-Ev &Cc-9L(A.4CL9ȐgGcĢ NQqt몿ؓm>.z#|݄w̽tbbx_VQ4# W5)V L5hMNIw!nRm/*jA7l)vXd۬4?HJt%X(;+kwuN*$3GJ&n7jh~.UZ*Gk}Ȩe8 i =4_.'ȥ'@F7 =ǝM\?yt% 79+z?] B00Qc̶I+5&:J>RaCRXojM]ss̢E`$$\:)[R&l'։?(*| qѕ |2Iw5$PqAZ9uG1$jqۍD(X_=2ѣ>B Uv0xKWTљH0M0 ɺų0c>4 )<7N͒rQwFx0L2pThPxnP^ GYwڇ=;mHWĴ_z,Uⴵ/5-:VCW+rGlķS] r~i.i;]d|7;_G[jάoGVyʔث$+jpF85&qf -Sn՚Zs"u~RZ^CS ^*tN 4ZK3YeƦm0U[)-_͝%\٢sM jEqV8U H׷z1H#8R~PWF;;^Q}rčft)wr-L7S`\AƶES)"fZ⾁9W*&geأ)9[lMWgXVтoHxbBGi1wZGMgc+XCOQ8Vt)}DR5A>Z ũZ{y#IuK=0#AOF7*9?D]p y5dWU9{UqE\vٷeoO^gX5(FY p8w^)[pikQ~Z  \&]O>P(bTun-OrvIP \/s޾(i nq 3WEr}} miAT.zf+v#4{P)NIV1=Y>Lm!пQ (Ar$"#sςM Lΰ|#aڡmXg[h'|!w+CD#fZPt7jD~XI0/5pQ$)sW52skzjw}QBU*7_ L{1O,[kd4uX}VZ]o7.矤X{ tV1Қ$kך(pldn o][PP6_Ixn- ؗ4~ 0iiM.xP?p "H'5AR=gXsqrO/2RrUf sZuCD>"_G[a*ks[cP@U n,c}莰āBP;nznW[B䫳n7} &ܑNk)I%h$?qH?P1P5 6d+dZ%ްIPM'!tO?P^=xR?:'RT ;C/y`jTX;3T< 7B2 אwJ|lo;'4"{ KD5p${v},8Nh[&~bѩu`ӤCu[)pӲ3<2;/Dΰ*D9冕8vU qFI5=Ԛ6^-d"|_kDO( pL6-vc@߬9oĢhi03Qxݍ @2v+QeiYϰ|j\Z=Թҋ5 @'4 :T |?Jn?wrjzc;X6)ȜN6jsPkVdۃ^rYm]Ltu0M~y{~0^@W-p|##t\U9͂^̜8o_If8Q< ȡ]M{gŸrf]R5!@0شy ;[ѵⰺބd>9/uPBlǍٮogA:bW JŰ2 **#  ʆ[%v$PuFO (_G9j .<sTDM5z0TآݜHK ߞ{^=G0C< ??ůN+@,#ο%3eY  Zf$$j®at _c+i4z`IA]n-ёݏJMXM:t.PdŮͳ~<d%݀Yuo|*YSlUbCO'K]UF%tPZ{hvyWVK"SDWNźz j!$=rO[z%d8*|0u 9lFz #&ЭGQ-‚0ŖzM;pą5)mŀa86:yЅʭ;6BMe T^[,CfDtA M'^<&Wd5ғҘ jhu%ЌT%e:<մF]S (Oe8 dl7S/ FedwߞQzq{lE<Hzz;ZltA7!8퍌'P`*kcX*@(6<9E鐒=g2RXߡQ͡3f&15E" ߃JW8e`kG~Jz.3}xlg 4k g)òܨqd 5#+ca4J&2heBFwiq;lÏjћInhӅ>OIߛ`[K*/Po\ ~y})<ɵs~] O՟[0#[n&{6m2vuDxDۿ$ zxæ)s[ia >ju#:-9]E&A(l\|~SVQ}\@),љJQ!Ź.Ç'Lke9ty]Zuz# ue,CIA/7K\m޷,* RKf1]֭2ܣ=xT,QȎ0Btlcs ?8|Juw؈;16{4)r1b=a.2 cEC3׉\kaKjn/e'MR2="7B$F2u7DC8nH{J2&.ZZ fYBBG0ZS<_\o&eZwsUk7?|c|J"]̺5TS_B:=h,?\ew8%5a㘗{;`SL1(H߳kMn0ۛ/"as|c!4@?#)#+Yq$n~)~%+/Xۈý}P`\DPAy6si4k6^vȣ5ۊ! 9rϩVl G]>D$wXױSAazXn ;+f7C.D 3Ӆ_3>$8^7sU{y;Lm~|_ש&J!'e{J(C(z2@_)kMEr6h10{.&ˆf%cJ_&EE"%ǐڶw[7"]+T v'sM N.UAFH3u \<3^*QPYZ#9DUfDh^1N0s)b2=85j 3Yq~gemoj8<_,Cr0OU!q0c@vU2Z `F$ CVN:*#Dz|yΐBI2&80:xn$qbWzv2e!Ә롬 O 6,~pm]Xq 6,si^[wKIB7(<>~ Bkz ,\TtJ80pfU:}#~c 5{N]V^_M% 813+NS=5i~R~Y'zZE\Ưbz٧ðF 6-pbLD.hu[v_hskw0Y tĦJU?ۍ-toB]Knm<3 h:cGD"uhҏAbb[M T xaRxgġL`UϝK#Ak+9G<)g|;5-so,"Tbul0wani)+R$i`o ې\(.JN"jN<D2kmtR*;rulE!K0bxy}ӥIJP >`*, ޴N"SCN+3yB*Je!6G=l/+O&FؖP{gқa` ٹSԻu>-qr#r)͓e|ڴsIi T1{ږ:l:[a(ʛk_bM;_N5Z$4/:]~ouru]<|o90G㒈=1BbE 0m; DjÑiZMILpo(mWG- \;ݪ yv ؎O#v (_UK;I1"uf?sXQGy&bY*C`"k0\ ]`5@7Y)zXD TvRUI8w2#>)Iv:H4 D) nt+)t. zFkf'&;A):]>Th wv_*-Kô8:_e^?vBv и}X9ă.~(mMD}anU93ZL\k:MJɖՄXF3׏&mپa#eM>]۝;7+ IrVC>gvah K>4z|1ɾ&?b,&>t')[ecl1e$"XE", =t +8(%":w)AJ@[RymCvf}G]\RŒ6m&5mu^wYʢ wuH,[e\G/ #,`~%ܵqbm]RQO[rA0P|JSi$+O vp+B#qpD߳!k3}3'we6B̂J𓁿ڵ&1)30:={4&6k:&PܽuBolqPmh3GACʰ'-Y.ł;@saxPVeϦű,M?h%[@eapL%Ж.;DP)UVErEQ8+Z<-eq.a5 l)aU8aH r$ȝu ]dQ0=:zK]*e~HP[Va lРWf"_ٍyA%Sِz((H~oeT¤7)7Rzw@@<dg*սIהAn*NϛF҇0t)61 ,* 4JiR"`MkIpy@֑<^g>˼ZH9{m3vZgpz&HBPd M!b|+9#G@xiM&oii᠄-xlnAm%C'/0޿PJL a+C4/OZ1:+V؜.. UԔ;| Lb+B6^!v 8v6Nmbf}(N4c7&8E}-K7 (3QcހmNwG0W^7%K;WU^~kHhHj_+F2A8v[%^Ԯj1u0^y84 @! os M٣}Q.UՏ0#؛~&D90LN n`,9׵WVu|6Hb E|Zo mZuY3ܙ^akq|C:X*瑜I)ZM:KTlڤG#]dʭyCy0 Ԫ0Q]}ykXX))P:z17>L =P6+hlw\ڸ[zh&I+upǖ6O.2gn$4]+C2WWq p\I2q{Tu1+^7ke;3aCޔ$*N ֫VC6x0:߉YqwͮKi  P6cqYNi%Ϫ` RߍӟD;J|&2Q }V.NKvIkʌrx22m6e)5 ER3$}l(Tך.|kU W otaMՄh hdM$'H22=w 3"Օf1RmRZ֊^Yj\M Nj5NU=Pa Ç̗~b#-M)LPI0%o6vH0N˿?/)ցuN9b`+cNt'vHåwjWg? ZD(b1W̚<m]Uxл:j[ߥ[ͽ&[FWaЙ?`H(V""/0L4,=XrK aj44ߒ]{pM4z*W+8\+* Y6zlۗks*w*3m̧LHfCWda=#xsUPÓFz:)41bL!s,#pz4ع7#ęܑH/H5#|:A/xO3%r~.K1Y_|a͎r[ygGlMr4x{(/3sq5Hꥁ6x4Dr!A$5man_?Nҕu^mv9RCrņC[3H5IĈ\&L%W2۶MgLԙH}|׹Hf;bKEN7!EM(lgm5/`$r=KHGOփ$k?w 0wKFAT|bBtLJPL}S(NmL^P z]fTToKx :Tm,@p;\72܍J׽YNmeY #Fgqª~*/R)7"a)ja, r&e}y Y0[N`9AK┌) ᒄir_31PYH ހsaN!-Z5A ծHlI`6ٻw|VaVSj^QŹ^FqDR=8S5 `_v, ?rFѫ=n}zWudqSb..1*^aMCA`W~g HY̒vncp{!vDeT}{L0I9+zRcE{\1Pg-ΘoWָ>3ѠS&b))o~L1.|ES/Tdj>7*nQu\LόtFk7(ǵzMC 9öi?I/Q?`uds۴q(t+iqkf!/rtZƪ,lY2"J^֛vŞm)8t}-89y"fIAoM-NRUX! t z\3) ȵϦLfa]Pu^e$T wDqM ѥ̓{y8]l'`'qww{R:@e@PqnK0Q5cnL;w&\ނpsXi\I 2za[.>KS8MgyjT^RJ( .>Mwy+'臽tkoip`XZ]jHN BP{ltLx*́$ ,i!c9sjLd+ \S`: ķ K Ov>]3)T=ʣ,P=[g<&/l̲LP=ch0;{έ.̃71HE#,8, ރGX~[ SA,4f+Z iżL }L i&0/;AX.0V3,!y;`g[5.gV~Ԛx3bMR꧆frIԞ<ҁw8‘pN]P m1o22v\$"D1(|͟Hp'+@3a"ᦑ*Ry;"8Ik7aCMҙN:x&~54$#xXݘ FkS@잸u &Y0? jm懻Œ&iI,JԱ+^|Bi:NΜ!k?,a[(¾dWE n6c>߀u ؀bRsgH.>9| hbu!c\Ntտ]dQ,G37h9Щ3FO&d.mTf %1EzN۔(*RĤ +?ӔʹVޜӢavE}'0$n+oO|3l[3 D 18[~gQ=մp_"{l*XDm#ma<f5lpd6|Z4QQvɫ'h;"K]V7{nx;&W״_ߌל6VNJ07G*h\syt0@`9Iߴ^^ېW` E?IzmG bUxú$6J b%xB/3'/y&V9Z`q8εHegK'x ɩR;(*xA#Is% :5{qәJL4TR{ã>&x:g"=_?R!R$BϺ,W mo@Zb!=if"Lߑ^n#_w?Ղ=`;kI镚ыR)5WA)*z(i$a1oBDݡ# h,%3[+QP[Bݴݧք'U -$'vC@ 33yߨ1wVɅJ䃥ТBaE7~[ZEp2?nЁ1(E| >uj%AJ? ѯqv_5 u:8Z[NoTNXdV2e<ί.vL nzc]n{srL9p+`tVut;CPsӑQAҳbm޹^qzdԺ %C9׵D<`8JQbbѲ=8,j@}"@n]hmDle":ru>ƎU#PNm>MBED7Xϔm; ȶ՞.aqvn2_YT{j.Ğ}Zy;/A~QӺ6p%AKK I`hR¦>:7_ ʃF:,<^XE^JrlU-ajk2`I>N)Jx-L0Wnb 1҃#4sMA*[]vk-)q}D'O`@I1ȽwPR;p( @4`sL]ќuY"V*࢐ehPx-k3zYd y \]a"e^S:7ėTsEa֔bu|x#t`6`1K䓸S wޠCxz%yR؟gwdc+ld)q0xǏFfG{1~#9qI1N>ѦkM*yQ-")4W#rnKpAPu{zC*|ۭc#՚nzP\Q0H'f-x8I4ئ<˨@0FL6Fa-D[бyNA\jU&m` )Vy=пLP]-$pbTvENouUoLk՗k3ω 'UD\pˇ6GL>ɉ=Á@j'E D{gFغ!SP\%CV19XK1,V]% f#4q`YQme V£QCt%<(#azf^XǧA*PWxf8wbbޜ7.@8'Q}L[J7۞!lB@}q}tIOز5b|w^[$`Vƨl "[(` `k^OmiCĨW"qpYWڱJHl@LG:=9%#+Z,=G9whjGkg>ɂCeËCk7XWV=!8@ f T0gAd{p89D=JŨefG ˵ӪtyQTiҺP)g-pD Sޓ6|7?-QTݞ4PүTw尹*=# bf0FU+/XO0׵Poqry`Rh_<%T9%d{GQT8mC{7jϡGv"`Ǘ3^j0"P,B<*B%Z{[, t8 |~]czЈ ZjtH(:<+1.#2h"A_itT4͖:t%1B]QJAB99VʃW, E,PYfwsq=U&{~M`/ ͅ((TMtf_&q:c\t9U;ȿUrenCcВyG60VZl//ύn k|-I ? ~8?b'":YϝaxXE%Rqui9cuP7W, ̡eDUdY2M0Q\>Ch9ikĽl=m8ZC[/i0!45*5'˰묧"lJ.fwW :ER4n1u7>"MGʡ]@)Ktr`il([4ߙ*3aҸ.Pl8Z'81zAxvQ d]6M]anq2 aCl%ҞlNb(0G^}>M3\zlC@NB9 iK^=TŠDNwz3/ c@T7{$ Yt5:Ү,f>Iq(lkYUFUq]G*G'P 5QҎPScv)-QD4dŞ JXDm vz7S/+Xw;X,ussN5ĩa.:4O uV8F7oir45V,20 V;(V1u.8oJqҕm2w$ʼm6sbzW1ϖm "":!rkX֏(_aITcJhSԮ7|pXA<,iO54(RX|tɲp g/Jܪ;ά+R <T.Wgc9{ް0׃!sɴՅH+^TZ×aom,Pے+^{eF؉n[ȲWgHZ''S;eIjtGpQ9ٍi Yc դg^AЇ{N-Ðj@EK=uIs5JP51}xﴁkF 7ҔʈL XdQ.>A>ĎO'欐%_)6tTĝCWIZNCU>?5G}jmz"?e;> uQ;VOceց/OjQOQciM*(5: wC) ٸđJM;\[+ z0(J3J ,b".=yN!F@7#Dd_@`A ;|ӱ'JEnC5O`c@v\K752R6A'o8mqA*U\xPcM  ۧ44hEiIqer_Am!',BnK&rUpJ ݜ~o.-n iW"ڊ.H3j s, (:J좦rU[|Z>9ۛ0!+$1# rbNt$(|<RR^J~xC܎:#_,[׎4޸$KnUhзl$ >;=@Hw|jiL;9LDۣh !6u qcW~']>K:2>qtdq"mrx~((;3j ވSj̢,Ίo<*AfSqs2YK\e#9Yx6 Pɂm&rP(W1 N^H-L,UF&޷.DbI;q_'tхvHK=XB`1K}rwSٹF#]XD}Gʙ}r93VR"R5ZIe3GtRp--=9Zgzm[icO[Rݲu b{q1+gn1]I,W]֛.(sSMi4ﲴ#\ٺyQ{$v+X2j?16e)/ f  ƚYlœf:"5p?~jZIW5pv0u[v,YYCt'XSǓGT9z/Otˉy>O V֋nU@N[6.Q#PI &? .!..V;w=,p13؄ltd}15x>fp>p}90@x߫EzU*le7&̉7C5,J90L\hl|:RP@WH|U !u?Ijө4 =VFqnF{&-3퟉ A|/ZƢ$34.Xo 7?ˑACh뤥6}Bhgo8]ң_cQq22B$- 2Ly>E񅗟3ck]Ʀ{TiM/m>#T CѲgᥞ%p!83@;B90w Dg};!w:bxzŜkvD}G Q0gvZ-9U+y&-LMw43=\H0) kNPχ_T}NgkzB$P# zǵW lPC%L\щJ 'NVbz 1QN?";EX++oOm!@:E 㭘ҷrŗa$-}p0Zf5iWUGNc{tA\?OEv#[7Q' oԢO\"KrQ.͠σ"Z%"!XbC:Uis4k ZeAF3j)#qy g #`6aeP2+gY-W f̢u}ߺS2; t!MXy)1vW Xig|w7 4/#VF=GfAV% b(Y(/Τ/#`!hIfF5 nwEkt ǛȢ1Nq֖afIunCM{꧈p>E˄ Xɚ-GM*kxp|HwjZD43(I fP&]d-nLm\dAz"~ 8mujGX27Ø͙k2cz4"fɏ^N@] .!]b#SΗI[RoOj'gfnX(ÓC ;$ݠ|~|dW6<.O)b@wKQK'fAAmqT0j7);"U\c!ߕ&T YKl=ҥS  #<v7Ĺ_// }`A21յG<͹pB4 HġqolləAQԳG:rHpƪF_ v:yiF2v H|J%.̋c6 M!#u+B"0?JOmKAcڠnhh{6ރ1"Gf/U`-}K; @OL9QA:@k'ћI.vx\Cʋ f'ۃ%z t;N+'g&Ɓc 5Fcti{Ŷ&IM`#QyD BДv\f4T{L]*BGm'zsx?EuD8pgއF+K zO&,@۽` >HHVսZ(ww CteY2$aڌ/\*  i@0||cS 4@bԔ[q(30][\,Sjwwڛ/dєg4[W v;N3 +hp_GK.SN omҋ+}(/O{O60uG/O]ՆJu?G֠0x(HE(m 9^{DtM|(W5k|d oƽק7oˑ|wD=:Jl;(tp֪ZFB#0a#(oq-oU58*dAGg%%B |;/`i".gXDaśєy;'VEXɛ]ߦSlSKX:-ƇC!F}4a%ꋿA3(@cMeún#2 dVӗud\+*s3݊з4C6[f<xnc׉ .->S3)< խ:QI49Dշbna*ASE{_~ia{^|>b.i!Fa#2·L kp)3UW/ xRƜe돱ՓQ4㐶_"e@Ԉz5"1A#-Gyu) =oul"ۼMJ gI#֖5NךlLB qz^[>ϜoE'>C38yfk).GXzc\Ǖ>xcp I@0˅*,jo:k@h0hF:-ק'ŏdVdvR䕇UHbK`\E$R#WͷJBB(%*JrKXLDhm(-=^L}EyJt@cYx 53}-?QFkxBXYR!\;v));&1l]z_iWoʜlg\p4Bem 4l>ω3FTQ ,r&9{.׶FXש5nِ2*Gaw/MWBGַBqjbF]"&t3{.Id>DrqJ;L5)O :G9.:>]+ѧدpbU]ov;v my%wd^0OPp՘:ŵM'0膭'I|WeZt3|!(sc_/Q7/CGbL";ԍRwF1YtS.t%{ر_))C 6Aț,1|{sk۟'?~ snTzWto̧F4q}6O,To f_RB3G{CgbHBF|#72M II+gU?0oMwi̡yy=̖CZYq'ʋm864~ +<˘xNˮ)&瀸ETjL-fWqoFmI]}gL$/]:cȵ|Q#g@ -ph hm13'u$)עQO(Yo 0W0&NWGRݭ6Mԅ0$"qY}ޥ6Dph|E#)ْu/2B(Up"^=GE,0 $DvWBN0Ցqtٛ|\偄 &4#*񎩼B@/z C3r8rx4gr8}Gv#SD_2hs*R]p=^d]r^zfq55-H.'D\]u}N:1ߟ F{g02-A-|[(d"P#ufyq^fV 0ܙfuy)m >کΔs# xMljLDXKݪPs݄,noWO/T 6/[w^ܾMr3髈f| Ю3]n>Ae/F7jO"KK4d"J^ ڮ/;4o~6-J DbU@>:T%0~/ojlN#^Y;12n>Ա yFC҃X G`'Bsv{v蒧6gnV ]sQh;@DkRq Ć.6/ !gB̒+oi}n^bKkeXkMtf }+2ImK& xBjG`Eܺ@N垮Υls ԇYzMZ{_r7EW(?'zmSe =]3 >T9@xM,Zt7mCeeC,;Mkv!7T*J4)$DQCv# ҃iOq˯Ph$a-k8aFirk~BOญ\cvq`F@hLX@7r"KȾkM(EȴKeSɬB2R.!@:Wh*maixbFTqcBbyOp"XU_WEν* H()A vqAȐ8v9i} zjٕQmmxtVaH VyE ;.݌غ <sI-"ֵ8F[& ]GBLZx7Tțpy)8r)S 8[Zs V`pHp{n){5NEh-VEXU֐ZiFSJlݝ55l0d{Cw _Ymihk=MPgU'p8jK^8.[rűǒ:;>sdDG'&I9IqcwΩwhnB;UFs@2w\fn^Eڭ"moaF}%a1L V47Uy`tDr #UCįxfA-_4w5R^İƹ cZ:L?̉2r;TF#D)uEˎQ<%o*Z} \4^WT[H`Aa}oE;/BRWGya/i54uiHR3AyiVWW;F}p3Y) ^KM('G@mcA֏Lڙs -*h VmdYVMWtSFV:+9.eToI! j8½{grݹ/cSf;mt˶qS{T{Z9HˣLӵP؟{L A|4]Yś@sZ:@v."TpZZI0%a½ҼF9x6ӆM~O3$;,+4,!ОhXmve9 ;5_Kar,fhTP3D捻AtGPw P,jI>'Ib&ҨAN10b ʽ րBƼ 99qzSK09P8-Jôն.7Ml >y 䚾(im;Ewn[wG^X&py4v&Ed)oosj2s̘:a09uJk >؀C^0gOP)(m1"7}P&i{לX+vۂƳG[: <З?5z;2׹rO:28 S /,7jy;DхO95 G==,Ft6jVt tX)1 ^\i* 90ϩߧ#05P B~` abQ vFa\;p:j[e-)> HI w"G>󧇙b4Zu\.Tϑh9al|1_72[ecUgΫ+ X)~aL^vAZg/; 2&VBJ "HqkD".jl9B~^&]21đco5<+.Uau~<9kS܈wU7/N=Zʸ_PZQUP';&Za{DՠvXma!MW' xYM5+T%pDh;L>UO˺3ybS4])I3o)^}?Kpk~ldbbS_b=|`+iU12i@;w;ojĵfT]^ZY':6Y@ʋV?)OArd|@UԵӐ AԣI<3LSE]73 Yĝ&k:(e M`Y/` FgS|G?Qh!ٕȏAC`k(-a+R3XxNop,sh~,4lO+bt_(ҳJ3oeN UL'8; QqhNk惆SQF_f1ZH1)6v{G 0RJ ()ٍhFrCD-җ^:p@UQ 1Eߪ@ ^oTByyPڵ\U{>`x2VSg\wP6|Ćv"t>}311vνZUF$PC\odM] @aDE]bDmu. ;}/#G+]MUGihނ50P/5aY#P`sz|1P[1p2J=~$W tlNDX=%$@Pöx3הT*ds*+c_z;R$X*iO`2 o4uQ;g>b4Q;|ED~c J6-[X&r;iDFF"i*4W@3f?&\Dt*kjTOcM bS8&V  E[ƝcdJ@C07c#eK\)pe` ;Z 'Kal&VP,yQ1]wޜ F E96z ͨFwrXj6B&i:i@ 5W|s!/wӜȚєbxu`Qp_~=_f:-;7n\똌T)dEiTQ&ɲ(WPd We^=^ 4P pM޹h=jWŊTJ;Q\uV꠷?HRVdw>YI+;8fR.vȿDnϯZ{"1^JQz"U.9;oo즿g C3,u?#P>^9 `)AנriY>!G) ^TOJK$*' /NkNPk&l0tўZyZ1L/:~T8RPs+ԈI;w/IJ{_=o!erYIɻ %$` WkIK 3 n =WA{6˄8s_ 9$/9.Wgn:*F(MP2iDzbYYo ൉o&#mt.Cw_TX >GΪM0P 9vm"5j>wo~ DA\Ir2<2 "@.9L~1"<9[(UA$hYB65>Z95:(zd;dc; 'u9\U%lCP&kCll{ ұ]YlV^E=9 鰇/*5?$TC}0C=zT;QiFK3%=Y"C`K}2jH3E T:/>{b"Bv侶>' M^4h I) F= ()x'5 ae\5k?N4tA)Io^i(1wl@#:{zI]ޜ c `>63 ۍ.$m`k$ Pkzr6"m6G?vt r{J|ͭ\~oo5 ť UԜ$ O c ߗ/}-Bv,hO$b/ۖTabj9 F[ʂs_SLJDcy Ӂh(h3n|A1/z ?Lj:\Bҕf`jJ[ck;r)eNٝR7_0$娭1H![ߐ=#ȓw(*9T(LOh N;WUAzG_Sχ Q9o}lsDL%_f1T@S~#NP ibt{y Fq͢Sf1>d0rj#iM`HRݦ5/Qg?n{f"Sqx䭐#Ia#Vjt'sn~EQݍ"a9m䉻Oв9T:mxUbRrE\@M[mYLI]2Hڍ0F ]#ۍpȇ98|<*]}*tRᶰa fS x/PeDNZ1O^w 7Jpх]MÕ׻|qtTOVj` †,Ш!??~Be^|ai&s5T݂C 6:]|N8>m3׃L↪9PP?j *ȱIL1_b/ɮ\sflr(\pcwAkuO$yZNog qUt!>ihEtx|F8*l}JxUh}1W~mj oxk<^/E(zfoưq= Eǫ9^.ZB>as,Q7""I&kkm˄Tx@E$V ֝g>;fo*uި'r؋?ʺu>y tyc[19$Y? 46:,},W.>sB4V+o;Η= شR0lmU:YO\PxDR%u\#G1`uMWATFHư /~ETqX5 ןLO9ô8RQ|Klap >Ź76U{F 򬴓^HþuMPgs vl;e67x/M9w'{S|wH~OJ(g‘Ą={>Tqx?8j,5n~U͸<Ҿ |pXR()츒]ae632{$W,(2nmWߣ4")aPhRG:0޶ҽ1˾.ȡъcB3v_0M$v*)#Ky$eRd׉nbSo%i*ERQGu@!ɇ~1OɕI, WJ^41W $!EspVݽ+GB$ɣ 6.1/D& Ƒ{jK&쥲g5\.ӸA/ߦȜ{rQsᒆ77 S&FZzv\d/?o! `(~26z}uh/jiX:%\M5+r]ˋ IPő!r_L^(<cĻЮ(Ta"1m"S{f.G{ ʄ><'m -2Zԩ'sFx%< rq`hZɄ`"BAl ZEfޠB2J!CjstU0`!5m)Ъ|y=aAFoCh! \鿀cS "]ǠQ45Xexiy]]žYv2 ]~rMJ XI`x4{` 5#3RM#'wUWoU:sCHפ;˱@IDkf^:~U09)w.ylKqX!kzkyڠiq꾗:L$>xj(n[sQ ϣs?{ l8{>(=A*dbԸhc^?[d"꼄.28CE%Oj*}ziI4V Mk>:}Mn:asicuwَtB\žg%syl|,Tn ^V&kkB2ߠX1xIY_cpFNli*:P@I ےOkB),mHKē%!7 3aW0ˌCnw,])wU˨E(#D$V9ʈT MGB҉U5 HKQ]I ,VE08%6p{ sv8R!ܳ>j|;\4R} G՚LyQ-O;+ rMf]13tes!_ XjNR<=ՆdJ&9/zrXY<@51;[7ZKRDh2=tyH^VO`j%IB3 8D"xwV _!i#jN: *FOWiQp![^WΓx'+n˖y##a -a'xYN'+@(ۘ3RK8*/ ,n>zg9|kCTIH4ȥ`kqk5gǥ_x~U8u$AQ/ a a*H"!p|KA.ZT#* /1 1YpÄzj-e9T}; ~EJO qgqԣ-uc8D0v =H)|5h;-`y9 gL1RDQ:NiRmOeoeEVRa_7s.q'bi/z\O$FEJؐYۆɉj{/7N&GB [-ob&NGCD"vl vxҗ$(XfN҅_嫉YnXv3c1&\׶saO'C =䳱+jݲ@8.irc٠Jb&b ,L{Vt|]ה8O$(QG8Z0K#b>AU6Ju`׳Uj/UfL񸇨'*l2~I𺇀W'1cM8,z~F#Lgv"(-ǭTc%ߟf!jϿܖJ1Z e/ʢD<:ՄI~R$wm5d# ڱN}~aSLd) vtoZlzd&^ A_lRȽ6Lvƍlf,TRE"s춵&jH,2š{yojN?W 0Bxj8Z_hA6_b\z3eg"Qgb7-01qYeY:E L< Io] dQptc>UDYa\c,Rm:@`>a'ؚUPϹ)i3tz۷4;D ] u2g )B~ƆBJ CQ q6Go[a1O߁w 4mD*|I m7T!( fcjO\xۖ!4LK *,NxfkQ/`QjcɃվpMwrcصajs`mV\.EŪ 9ϭ&l]^Zd/jBhoU'A[D<}j^.\1Ω5BfE%v7q :Ql9T0)nN`DrtEK2ß~ 1孙={N?:@C '3ɨ2k8i6Hh1  脾ӀrcAװlBuʟ2qPC\xMJHAzkjX < u lzp0$t.2cvݞ(qM?GiLb fMmsxԣ㕙vJoۥƨɝZ?9+{5#؝o!{4#R:؝m ) :w`OW5)r_\pt. oraB}ߨ[ZH3Q @>[PL_fzxY2[=8Ց~RF^{ױr %79f(Tad)agSbW0} g nD~OϹgZdޯ&}~K ;`_YZ>>j@M\8>0E?'vvr\_(iFCx{ӨIݲ\TP= ULZs먿dWaqyPu}|SoRwF rwK *vI_DR\4 YBj QbF?H؆.T(֕B+>[Ìs`ӽNBЯZ7ۅ/W\Iy$;(v``8:4p6 m.{ 'smIP]ꅚ)}F H)j6Q- y@2RٝJW>`#͊!CqJ:Ze{ 8p1;HWE 9B;ZqK9[PO&(3b1W}@?Vx (ϯOxh†$.9XRw$ Fv*+[JZ.}}kPO_(T < gspκT:/D&8D9Gg.j{Q'\ YccTpcs6ZX  @an2,N͵|Lz)7Lא) `}MO `hhAѨi>01 .ȯ53c#c6NeXJōWs괃nCRz# JWN$ xu[ ,?[EnAW9; Z# 3h4enRmM::1RWYH7@KfH $Yw=SZS,ѢT r)6Y7bt_[9 }0 *8."M7ٌ뫅G;>'; {,cGyRqşЄ]ꙆH{'7x:yT!D@=/8Cƛ[$`x n:Ҏ=<{z$Х> 8xuc讈LA kтnspl>G~)SuөIizkGufW6-9m +.ջH{/вtZ_|V #~<%M!x(D5<:@v.|yM+ގ|߬D{A 3~5~݄ӎ;2"NhJٲIeA:6A vt801:݆V%\ ݓwj/DX kZe@ȴL L9d1QcD2HX@i }PEughhwbR%wFhk[VG{~ ;Q \Vjȓ]p@X8xр0, Ѷ5'8dI"q8!4\*z~qYM 1-4j*Iiy0W(#IQf2ܲ $r&JRZ7>?f_P '˔|wlӱyrl.x~+_W@}p%d+g0n:3w&0k؈ x#ј1r"@o:?˅ :^/?JmSs_}S]e+/0 b&7JxjbI-~ag:q6 =`f96FƠR:bRTCtl0rW%lq%\b 1iAIPx$[,l#"S<@R g+kB uպ -i'ij}cmEuFypQgk5;V+ $U\7Imf?ϹȆdIFBxKo񣟰ߴ]c0N[: I 2Lry:6%w̜)w҉YS]v6;K?lHyM#UB㧵НG&IIҡ)ts}#ӂgjʞؠ^ICnU.K72‹XT#D؀(JlF:P ' !ĉE.EӨf_G +Gr'TAs-]ǚD1J]a1Xv rA J|T$n6{}Vw,Y*fՁ Џ.d%^QϾ6LROmJ4^ޫjjhPrDe~V&ʀM vq& Kja/g{8E ~t,Rjv4%}ّ$247;Mj0XN$KMY.c*Dr0dEM`(aVѽR}Fd wYD e!F2G0_Ema cCN"G]6;#${%'o'|² הjSFsPU/2 zۙY8vL̕[}W86Qdqrq^Sχ4ynDf_i S. -Ά)̣V( Bt{1ED-i.ъ։'z6rʲ yPS$'{ItwbDh@?TB/]U(JmcaBb'ݶ,ġ Zx}?H$D.@ irߙY,S6u GDI*e~9MbkR#3EД"!`5uޢwwI1T&U% ωV G[Y.T>La&>!;x@rǑWY8|93(3L9LiSK T'/Edn[ R#@";j4Wlƭ:2d3ñ?"~KoL&$q~oսRVĥ~<6 `AL?4=\մ ُsFZ8;'& aFH{;w&'LXFŚLr )?V$[:'KZX9jjt Gxo6_%_*@'a|_bmMjIIS!!Y~^n@6Р`~dSh6VjC' $9BJ8T㐧]M.mݑa˅^F0k}0鈚I]}ZHG:΅ކ%ˁxNjFT&\cҼ7H%C=!fTf~=|sL[z9` #] 'p )?c2GF6U7 N(WHruA Nuە0'=891Jg{}^gUΙ6;r%s6&]?ĵVVQ=-Z)|7+?nd~ a3z5R93D~`ʨ1n6%]~KI8q1Lx.FBՠAOPS9M˽@^H^".,V-ƗӖ{E/3{ |ˇG '31ϘkZ/pнYmLgmdwb#G:Rm0Jc7gխ$(_Red;8/n˂>:]^]Dp]C9~+*ٗ3 ҽ*r#)qq=}Y:N/>Y*%(Eb%I8mҺTe%pS7U ғ#<eX b66UFנ3kŮ;>_N2hT+Pr 6-y(3Y牵MHCJ5^Uœ{/$tl _M׷$=\B'koQu+wZ%38cΒs:][?dUC=!:uȑl.%y-=, Zb ]kRq{?c6,9ly6 jBv4+U㤠ki}c{](nzG%԰ 'CS!APIylPk$ ĝ>y^F K#ko4!WP =8=׸#t-r*qԑ7/AOFЬJaRP+B%XĐctDd"Wv WE@˅ qUQ(âJ@#O'}90晿R$db:QָmD]JԳ `Jy^k%2*[3M44(ܨi .© 1qvG5p%r)]=k'sIoIE{mt{reUjQprXM 0iZ 0^3Q@zϋR0G79xVqes:-3Fuqp1E_КF3>|oB>ʫE4|JDXyTkʭAb՝e"{X:z2|nQ :@g3lk$-ZDuـƆqsHz6_%mOonˡ@kЮk=fY7peB~^(ZQ%.14Ek9$pf葾0RR̩S= ҷ/_ԈKN L%:qt7%Ux~qeJz"GSxV~qaРֻ?y 85yM+vgRvXTܳ]fn{4haEc8vE6C(# N2sPu|mPi%>?b9WbB;nXe{hBsu_(IC{(ЁR3Hny0 5ΫsW5oR} #Im@+E5{` lhTzeJ5**oI=!L,oHSiUA-G6O]o-9¯gM'R/N{EͲA_ȩaA+($D$wdiJg^<<5dKT;&v>j٫M*TKEl$ia WJ/#J%H:*[]BU^:>`e;q`q,<% i5TSީۨsb cJGǰ"9Gõ1p[H4?6iNa"U!&ѳ`7`t10 iΎv-&Xel|C72r5z+e9& ߋj\ 3*r* |CEE:3e`0oU _*ӓhV:uKB]15+M_tY0J>l]4& cfh5R;]iAjFզtOAnn~r*VhI&s>9h~w_s9Um<ҖԹKH6PIEtXkގ>NB b0!:^3}6@:j9$ee-%e@)5x2 _jm# =̂'eu- 8p1xba^Tn 3,e6z|͝!K@@獡DUrL`MK8^E?F%8g>q+k\jZ0WY۬'3*A0uPϥFvg9(E UX;̇]>qvxNjAtP Jv(?.ֲgEun@P~BjT2l) z1 W_ʸgo؅e?$/pk;u-ŋOI~#qo\ iHcW39##Hl{CBUaUnk* YFasZ cfDBA+ ]dE[ۢxy\U+-"U:p#D۫lVṵcڹgfzF{v2߁y%L,+4!im#Hym7+ks,J%I' [wpf҃jft骭~Ghp\ݮp!k p]%di(np֗1R>ϵ ~E Q+ oR'})|WNHnنnO1q$UpZரDϜܧ- q`GWkY-ש z8YڭG~)C4HTyD DҸ~$1Bs^QG [$Ov*Ѳւub˞"' ?0]}pKNЛ뻆OuB6m&~$D|o$i>82M8R'01Z_-D5h)E_իо-p<iѽ_VFp̀82X\4K"<{%ZӬ}&Ou7lp˾۽yd5(6r$Z qLhS_e;p:o;qY7 e|<>3鱉߱I0܍b| ]oVDtyu'bZs.Ґ%lnc ܢjĉ X<6c"կJP=JV0XT4бYԅpv F{|&Ͼb#}vpϔ8}]&>vx\KL+"%E$]DcT.-ydyo;uѡ0`/Ȥ= AVQ8Vi0>*ZqBRJ`F3/߼vdK)z ۜ.th)pbt k|DKȇs#ݙSyTI\QMQ(3VSE6]6BϹ9;3*FksfDu;&] {rb 1*9CNd=< M7{#vŶ^ێ93"}E U'4cv*1g4NcIj ƣ{*nXGVqIm# Փŝt9gJ>dɍ\? 3, ٵGPSHFژ-k/f-U,SN "4cxp]ƛ43n`E|/ B͌(eY]ݨ_ :$¿dA_ GkC`#tgX5RfL=oԎW0,ir-L[p'[yDgM+C6b6EzcV0CUg;Ts'2,YJQw>ଞY Df[ u?\|g.M|? 'mI<9fI#G0\ Pw"v`6! #/[^"3q,`)OfdR&r~'ʚx OZĬmDp4} :߰xvIG wka:s]GULJԳn `&hwCփDC뎠H1 2e6OZ]X :Y2y+ 9$M|7fMҰ'M@BT"dsmA_n87avPpN4?xt\pd a-WN|Py(w5(2`#>4`'27ըxkK|4>^n0Xl(.ٍ& !rP 5Y@>~JWj'PE2lq zM#^z7?8Rچ}v͔GբAw1L;SKMAo E$sk ?6'p"ݛ±櫫Ŵڰ^-=nf{XL #cb8X.H6}+R 1RTF!s-Zh/~vV{V3g/4ϰQ'yܮ%wqG[yӓ/ՄU3XcFѰGf>m.O=>$ϱEo$fG1KkG/О#E9aš]^\ .G:0pﲙ6#KO\QOp1MR;ݢ,j TZ_rgsfO6ay3V,k L8W5e V3Sa*_ZBO9Ͷ. -44(Z?D1 TWH9H&/qICwqnq`r%qzSa닍BY`feȘ }o@0Kəlo3dјU Lͻ6wŌ>uG.O`ֿ$B+{Ao$ +@Ju*sPHִz;8~{_l2+r.>x:E` Ehu2P>x lԙBG >s锊"b{qzFD ф;ӈtG,瞬se#!Sd -?_蒦{9A>dƉj Zc7;X/vEV1Fl+ ̩L+THYg mOK,tЎදP"R~>zŵYYQ!bzx7rEg^-{ ̋ۦ h 49hL1;CTS|Q)# (-Ry2]W.o7yi$}fPQH-NXSZao"H\g@Q0jr16#)@>1;P@4!ui j_k1܃ӶRhb-mqq׼LC7/9A?s\8V@Bt1`Sek򅾥== U.ӢJ1G:5l $.HfhvEcbP|2ݵh[TgO%(*\cFs&D9R;ti 'J1[:O~UV1xbU)H15IW&F@eEɿ&Հ{}$3! o1շ9k&n5"wB7o5 &ۉ. A7 QX 抡z Yɉ(ry];[ 6mWGW<;Xdn-;Cm5G&˯52eИd)J?tq8]S,6vdq.!!di0WC/ǩCEH+3 A4"i^I \|D[ )=N ̷S^BU`RIЊ{}lҏD68 6p5]N|V}7XY;hCb.ī91 eF83N_\geX}$aV+׳0 M7ɃdL=OEX>X]>hւV`7]DIn&$ /&l+ =ں3B8ö9'RC uuw)ʓ?=A^|Dq#kB$BFm{'z̡6YT":q h*ѐ1e4ࣙmOQo޵@kW^08A,֯aHdØٳ: PN:v .W!!lv[,c0d8b#^ҩ7]d78N>2[\ymiزvrϘi~BJ ?dtOr + ,2"LON?mxf1?j^Qd=9SL{.Tg[+~b#Ů.7)0,sqv^_nt`c{pu^Aʣx-O- +z\.~<@~ Ӟ42S\Yr\r~ILa, #A# EknU#OF~ Q:Hz) 5" #RB6}V?NO$hV$4wo VUޅ̇"},">P9Fa8 ϣ/`|V}vLOGдr\4Xd|mǑ0k#Maԡ&}7D\-=i紑,]X_w|$9Taݽ]xj+98f-8`pQ<-S)͉R"\=neL2}ys}O,+ H[*?I_'sZԎ`jM@ RzTs鳝|JOIc5Y%cFPf]#d Z!A;W3  *\tS;Q@3U+4竆wmEۉXa^dxgDR 5gN:j@Ƒ'"rz3T qǠ)>\~8^!kA3g ))hƉlֱhbr-[:0h@Z[{>a п,^Dk<<(ADO˅$/!S/{%~rޟƿr/ݽ4A2]O q_VGkq5n}Znrw lw Ɓ2mYe !!{rkfYW(e?)ʊwI?#9MaRجj$ʢ;r]#O_#ԬiWUѣVEi\ I.q*,.R'{p=G

h76)i?̈ⲵisEpSD $R/^/;ίxHA-in^$/m^<("!I:+gbg'9+!0P!;z%5E.\iT~R\e);p4>ȁ"_6t)҄ó_.9ˆq/y<ĥVZ#iL8m;Uy ,~I]l}xX8v۵(?Ņ:WhLReJc }݂ր!j|$<5cV?-IQ泥_h4E6*e3KkqЂmpt`E=t@&8$ k"XX|3}.ά"Euж Faq{[ Q4og1]/Ȏ4%*r}B*›a$ ``7!M_%X~=D6s&ӆz6R$_M~_@`#[d,@4@-PC(Y.*tmDR2Grfэ$џ7ԗm.h dNOjjnr%Y0ƻX`k2*+/u0Fުi=IL[ޠKQȝ\LPv.2 Who4X~Վ;wyo!Y /D`c^vxDƒ9bw㥃ݜM#ws$إc"*w2;Y<&fd |#k3iq`Jjv%tx#molk0r x wOLomxɆN5cI ӕL5o`??PFe\5*7-[\2?[u$y;oQ;@]Q]0CCԚG/!6)&gsk6_vj3*݉: ?λʌLjIٯƗ[gK=[Y~@hnGvU"2S6 u}xr^H'ġ<$KTq)\q%#'I5% }Zq=gwx~BOQm[uz({IŰB./uԱr~MSlyھ0<{RD>ȝvE)n :G/#S;HE$>B:.ޝg`Kѿ݊)rOm}WUΏ<] OīӫɄ/O͈et-YrN':3/Pgbߒfmˆ-zԛP ;\G3[ lcfAZiw_u.{>z "m:K/? !퓞4{swJFþrF(ڙi!ev-,>6+yhl .F89`m )WL돎 >+k恷qn\lNTɎ}j AGX㗸Ozx ʍ'XX8 Y*(AS^.TAE)o?0 S@iऺW7Opxwm/o# jX/M4O |/ RCU?7-kdZfyVd꾝WO´O[H>&%vA_S_4kIpe)l76%c+/X叜n5IE2zE}rE5YضT|-s Ebܭ/Gƥ?q4w4ma[ۇz|5 P s eԑoA JA#v <7@TQYs#  + 7^~T\H²nw3Q2ʰ&i\1ׁ? 'ߧ+Z$fR[;u%ψ3ٔs[ ٻbU/Z "l߭g1 E#mŬоa-kG{ 1_y&2)Er@%^8# {ԡTl*w>&&?WޞX8b7ie`H]w3^؇VE@\;@9,2ߙ:ۉ$chlH0 agT;AP_6n16f.xGyMUڟU|F\nO}p,>{аڢJ~\j]=zZUFrM'\Dpk9v(sgv*) CEVR ~74P:RВ]<F\;.W9';x-xĻuº>c,@SsJV?QI0 Pږo-g0i<2x՚PlkoV?@wϢ*%i6eDhJԮF8M` ;+-o ^}B2xGCS*o {y"(pie9Fvψ㎭3#F!5?45^rHz{u =_%cӵS"Zq+>݂Qt2 y}Y>B75WBME G8r="u-s8X>=͏\ܢr[9Fn X D0( dm݈H?.|￶6$6ʳ0CeZcu'"@`Fa?*y/0܌m[RFԥ6N\zQ+w&aQC#*Jd^"QLi{~0ki6<[a iOCE!O Jqs>|0Dغ^V\uyW@"e{:1 GPڕ)r8m{Ip8bNоSa ҷ}o!q|SKStvT ӻm![vH.Ь Au ڢPIwBF;ܠdBum`8"$6C&D*`%%LJԆ".sL)=( IEՐ+Di3ޜ6iS^ziҏ8!K8Nn{w&[kUxսv6 O|>@.px #'in|"81KXF&,D+!rtTx{w7ȓʻj_Ѷ5-h,i* {07;Ab7Wok c'.ޯSZ 5](`[ ؖf!״҄TG*h,|S2to sۜN" x)]r-YK?ZI20<Jkj LƊ i;X1YF;L˭mSnEqfk8,ZsoF~ՅN@n:_% uM?(+Z?ᙳ<f;+mqA`t*l#* +h5j``F?n% غ_sd >ͫp5z ړc@X,my3b M^\'"KأXMaGadֶќvYLxn}\kS9:y?û8a4FB^IM*"kMr^e!Yӳ0"Ɵ.^X&> c SL*+BXTpR_ 2of* {B|FID?:v3]58yPԨ+?R>w^ GWR3ҭ_hֿ˂G~='Y4NOZ>&ʍN~6L4QҼPH@dL)L6/:,,JPpəumO1δ~UQ8bFC^Kaìq1M _N b)FcUP=L!&N[s2Z~q-rg_w( Ji ea7zfavrg:pj \^ dai1ۮOh(3P[8lܶKI2uf +TJޭy(cUd= %4q9⠃kpY)Y)ae _Ur7B߼ı;ow"۽ۡNh`]K ˋvIFH=9<v,-l,]]u{f EĶ@1P9tYOn5HS~ÉPt}ȑݴu't2-'H rALj?[[1*f *êڽڮʯW<]r^"O+( + "jq)_sW! 8ѿbAph^Hwv6x gV.:rVYgeO-ǼP}/芔!}ӉPxyks%hgT!IՑJɣuC.BoG#v&q2I.̱PkAvcaa Gbֺ ԭAj6;f^>L߁!vg4^lb=FFXՠ1LM:H5 Ѵ #)ztT6ߦ1PSޔp}E#bC,#eDYJP^m1ANm,nk#_g0g_I?AŚ:n[X:v]ZUnM-'?{FpNDHm%wQG%^ch7,tP=?>5x`ޏr;m$>b>͉ (Un =%$$)J9W ʀ?I# -Ui1m&8Jce-0a#x}+ԈMsZlhI;Y=imEOe, }2F4MYAAcৡ#f{ )SP<=bgm^- ^b؉ݢB3ڏb >TrC1tbHT^+. (gK2EӻKHk,)뷠YD-˄H^Օb i+0Lcwp^$6o% B0w>Ly؃FHxtt#^!lֽT4$!0H;X!Z`PKg DH᛹龤Z}͝qOhA~LfJvޣ14^nE4'oJ/rEg{.~TB D &J?|߀jȸ0N+sӉbCLU2ڒz9G#|=-q.E>3a@ҋ^'%7T5!X2U/y1*' 3$_bLc.F1I0ROGwK+qg_V p$DOUaOnUO8Cl^4/WXyAy,Q8݄ b'>ɃLoύ`6:.?/RP6# %ѥa^(}'L {sZHޝM 6A},K 1##l֭ozc_#[SU};2$9Ϗq P< (VĨ #&'FGR<=TFճBJw,/iX²zͪA;1sq7^GSG0g3[Y ;[Py>~}[aat7)LSNLwHT #rL= -FY9A?ͯ zl[*^gX*Џ!w0ql@"5AʕW<ϔo$G.TG,2`wev;&O;#ԭ w4'&jTh[Im<0:LwT`1*%$1|9&!O:R *rgjpJ!}GT EqCE ZX'$o@K.]}<.1]};TɀןW:^gPj@:-45liG <\j^PMnY{ i#*s.e㸴tC8{K9h҉諌|L-(TPUC-O] [+ +7"9ɁB&G(,#TqwOt7 )sl~۸0_ }Z5r:R.37@@P :`?{fp0L iju=DU)Qb\\~"58CS/ p|*%MtRɃ5p Kt#U^֊_So`>+gL1sLuܚeb=*k= p)qfm/K NBS+uEt]2-UL)h] p^5"5 }+A6OӨrĽ-~%o]O=*oPv"&-8)ݵ?wPypUhC*vsn 9nDϸ6ڑtx~+j$ű]{8-}{N0G Q,DӴ(&s7Qi O/~jZG>sp71nK{}<cycFDX+!~mb Z +6{'Y\E-z bdwdqBw%X\\U?n48sc 2 ZIլ [/,O+iȥq? mʸ|=QJ`k3c~7_ŴGH}  [ss0STfk*Eŝl8^LͿmPXT1,Y88 S Lt2!ٳZV"E+UP/u2k"ޛ3o'y2,L>KrBTcX{ܷtTW$i=Í*}?zxdnZ"៛`hE\O ֱ]~նR K,CNe?eTY"Z_tH FPNsu3IArzK(d$,H%dHSL11J yeDE=|挈(\N 0Q q,("k_9%Ʉs4@owe}!ge eB6Ã6Ǝ1״(r|m:~vSCm]5]'XEJ%f4Goz&[JSC?Wݶpiw)JϏ bٕ'o3Z8U*.399^ /0xMOz> Ŗzt'I< ɈeTM;fEo<ɠTc~֬,7=Q@D`ǾE|95}htmO_%J5~[m|4hGLo4,%kC9}RTPE$sJmLW1̥f:kS9GiO_ϗ-yIIl0v8Q,OM[YտJWpų+c0 sR<$e zafE Krr 5X< f{ig|s%&@lQ,;aqN_6?v.d=TJz>Z>i~5-钾 $$T!=Sh a 8ȸV2]*K 5tDؑw[[=y9e<5(|4BSLcIQwYdGz}@>,1eARYy_x"kN"u~3yb-" dH"o.o:wpt O%DʅLln0d#e} FF-8i :Pf1PߞaZVi`Zi3dƅ/~VPTTfۆLLƨ&{E`E>sNSfue֊iٺcˮ8;چtKBH׀"Yt<J9RZkf5`Q/NBK>| m>LS@nj/G|Rס` }KݡD1a#.Y?Gxq?o:D㡇ۋ>Z0agBXhT^ݒJq Ljr %t[rAI :Xe_ed|Yp( vKDp' 2lUE5eŧ>Qosu'əgYWԴ+w%4Nk3oJdӢŚkU FZ#uQIkJaM\rpTpGNr=ǵ!1 l*$R[/O JY9v)HAJ(ԂQ%BC #-C&Lѻ5vc{ĕZ'>[hJ`ؽq:ּD!T\(xJ-Bm7QڈzBê׼(hw &^94Z#'EHnB"-1EmiAY%k[c? Lװl=,iԟmCdr,KV2!h $W G40 r$6}}4qF/] +mJ3$BJ2{I S&S1lp|pO>Ii~"I:#~Yt/'.jR:e>Bs9ƞ1/I5W[ ~{և5dG/tr:)6{ yIK< 6SSC򭷚31o:EAøA16iפ[dF8M A;"&{U 0Wƪ<|;5_ݧ^ـ+TR2b=ׅlR:@*R5#ڨ!Umt O:-3qboBsɾo,35 Ilos7^? STb kA.G.BӽuYWc3Nyow]܏uQNomҿ)=0<5-!pJص=n:.v51[I̚bM];#[v {"64{ViH *d f@岼|vSghd{ן>h]1!`ZƸFI-\k(Z9ңޥMH|P>,[h}PHg7a[=UYAZtMoi;/3Qێ'k 1ɴ.xkD“ݒ>shipcY-`!~b%g5JRUfr+dXt x}*77{<[2BP$a#TM;J.%4,f5zpyC몷GH˜d;T̚>+I=_9aASr&ݺ1˟Wzqd<?H/ALrV^u63M@.yXQ$tAa bs IG_,ۭ~J7~wCH96=dZmmPxO%wػY׾`:Xn@Zq?׵\q 3.8;|cG۾A<^7myHQԬ)5/_'~H;}K-72cGy8V@+/ KԂ#"+/įih(JD D0iOw`W.EvbT+aD6ۮ UXP=VIL;i-=[7WdǀM u1EJYb)qHh! ;3} lW]V~SEpY )dfΣ!'+L4b1-6 So~IwUd؜ ̌jbXiyT =!EHdǬ/ޣ޾K< #9wo+]#w C8mH҂a:.d̲آX+)2 ƺ~-D,Vӗ:jFG6)/͇T<})W<'y?\0n &oع"($hxOu1?&ܝexeE)U{~x6!TՑm"P)~szx20U!-qD G]GeEe $hVmuCKTsH8cX/MmI&.;&˽*JS `V[]XSKدGl`DaW<$)%{Ye`61?kOd7qfyn6z8 +'(?vhaB7|@,\{(8Hmo̝ʨb6,ʀ rœi|7( *8yH4,wE@('H9>BY۔^~:6j݁_3*rwcl&wU;Hyk +$y~뜍Ua9^*'t`+5"Y/鍶mq[ro#N! $Rt@wJz4v<},h(?p^wI#տ}&WuMM6fW343z/L ܰ .qdA`n\_8~Δm3eO}[w>}liQՉ4x!We|$J#/}Tss'"ev"43:5s+GI4KB~jY'`u+g=4(Hн$~ d 9~p[Ү#DЉ2@ۏKie [?#,碠 *g"F{ըCl:)@/nYcD[ZSwr+ vFGNW&\ayOl x˱Ɨ5GG ^Fu y==,vz|7!J<) ^K ƾ,t3cn7,y5*d~ԕ~]P3u(+:ytrꚬƭM$)yQaHNbbN k _K)>F9cH%63VΌ4Hk~uvl(S!}ǪÐx]苇[ޖ* =>rWz}C;X/rh!{Z&}al`Ì{P6 I\y pQb9`&=X.*6W,iHG2C&OY rLٖNJZ/Ԛ"odk y)*xዌt$0?k?N>ǹNKPا5 ڎDj ty"JXtk9/H4|yGքUJ(,$z%u`c(L71"G3'_ˎbKc_;ؽ]]w.ag v~W>(CDI_gbҀ|Xsc.~J6) D0VFu6D"A%PUv7E*v8S?ݾo͘ 0<&Km6O!V$'8\UA X-mf?Y0;^@2FsHl-[E~U6Q!'ax[a*hI?߾R!MQq(/}@_,(@Wt/A%>HD0k qIaޝmK ǝV`[Ab>4{cMﻢܻ"Sɴvy/Eܒ5)<=BJ Y^T]ٶhx?m^IDO:Py(pMEbOv> o?|5z6H s2j 9[PNp.(v&֑e/ 0`~R!Cfȧn\:&%Ԭ*-Gg$dz;|խw9J%"ubsf(dpֻ K^;|A֋#\ÎEdK,aqT#8.guIw_Auh,#{Hj 8"aO#_|<%KMG`Z{ (Hkz r8AYT>,"%Srd|#dFDp8ak E,{$ Ey]?z}d$ B({y$4#j5mmLBP$7S k|9KDm;=Iw.Щ%H#xuX#t [Hgk$f'f5]N)~OaN70_Hs@bAS\WT҇?._yVi)d}Ƀ*  6ML.Ij]R|2⦏OYjL~*)}QLR ؘ]}SzwN16KT,%s~J\|,"cAئfvenQ.S=u ֦8w3yOsąp:Z-c#k7 ]vU;1lDU'z8ڲʗrff,Eŗ\⴫e5ڬPz,qj4]+z Azf 3* í 9QW4@ɎڛʞNL pJ1xo5$P)0G$Fjc8 u)kɵsl!z8Y T1j*љgTB 玨Mb&3*H N4j$ ENA"DkiCIiTك_K,=?!r7 tMpz1̥f6},kƏ^6<$o[Q;m:]僔ЃO߉^965X&rWH=f3w5ݙ6El+Uuv+j.٠*ŔfAKU fcQbb=z^8$ "?ANC:18m|ZWw eDI%bا[ߎ< QF~%WDxBAXTݬWS'ݡq-P$'uGTkیm>rI~KIaZ-Kqcן %]s^cQo8d#VS!43y0^&d;yLo "QkIڴr[K{TT:d^Xœ:Ƒ05Sm{vu4A5I$ wnn/qc pg|ØyG%UK X__Lkc4'(sň\q,>?Z, ev׃%ǘ'Mǹs:b,&$]adg0i,ړ9D .&O }-ԺD% N|`?mY$2Qq1lJNt5R´ŁIBOR_f#wXЈz>!]'30KLu7>TKm5=V ~N9;ZLЬ]t?Umro9f&I(&­l!.,ڮoh*f?Y%R3ʶOm# rbLb9gV#Z-m{b ,;PmtE:[B췕stFt%ZTHѨȇ#|s-0`k0nj#ꐫm<>96qtRsx aWp|oT`gP^>n#_xLrLIei귭sXfxo"0]7NHJBDq uɘwk:^EIǗ٦ @`ey!-9j# /ʲKIIVg PF^J L Zv*7]i£w=8u (*"Ivo!U[0MIM&ǻ%g5sA^Ҝzp (^wAlQGxߥ+@9d=%()J,ڈ #X0 sCa"'aV)H&9nҀ:rw?z:f96ԾWF;X +_/nY>ᙉXFq$Nĩ&ju54g^.Ldsew^&F% cg %HӶܙ}ƫ5tc~Ig˕H>j7 Kl>U ZHfS?' RL6c s9'~@%R_ӄ |Mmu~a1|.0̢E"rMx;sбH qyjIr ZN%:O& M+(?saVtf{k[8=@Lx~,^:ltd7atwwyɌF'h2ʱR㝌hƎ|/4<{Fnjq/9H7ئABBiuH w]&d׸}Qȣ| R7#" ?΁ә׊ =v4`!V P>|C>IMRTf˄׈DVwl^w#MTc0e2K+ԕ"cS:#3[;2CDPȶ+gxw䙃p| r.Zn>{ȱ\ /C26Wx#ʍP>|bȫ5FR"]] u}TCK<7=qPJ.Ɛmš0EKw ]nC C}s x_6'Xy 2[HidPPp P=+|Z7ߝ [M 5?j»oGmfVv큧H $P(V\! IO2Q xpw) Gă'AVV속g͈]-w,OtL-29Rj'tkH;1ʰm EݑYK,i~7 v!Ӗ?g56*&AMȐȏ`jsДHfS YAĤ R /:un'bH n{W< tGw=%|a@\pC\'z@ԮB<m=Z8*hI܎d{2n`U9Ho?3 ꯰M#c<_!뛸[FFOjXh@jnz_Vn2嬛`D tbG VB_e''- P~T.Eϳ8WS1i$~(u7ch#8iu7rS䘥!i JkxNڸwiKP6BQMSNg8r+_P/MQWe^F fz;>ָ4R|1xLOT5%"xl0 >F"n"(TkYfءBa)zs\l}}Hv 9Js˖? PQMϣ.GH2f>.:I* wϸ*l;3 f1:X\TJ~TPboJ H©DEaзnVo⸧d]לl=ESz9omk", D"3ҳ.ls99nQ#`#al&oMu_zi϶={i^fsXȂSfoox6J g۵zJ|90|p].uW)u}] ԗ3 @e$u2W ɰAE玦!ghBBb@H >wާZQolDL([ӰƀgY(}\í[s/DF2!}ۛt;o&= UD'+:h(k`o ic8;Y;;i]!=EŮ곏AnbOnקY3eu D/. n7LphT4XFPkJQ@'zL%kD+-HJޒV)ecK|v=X6hfl9tK?Nݯѥ ~l48弫oBNL!mNk`æFzpBP;,5b(^MVQ<L={i n1xbHApY5gJ)ovXAltYyw VSH_)Ѭ*CLK AcBb6;30I>IaKD(:A:SDT(Ba)oF&uw[]Lצ7wh2#v 4%Kӻ3 s"ɑ^d U-PL"jS5ŀ To2 (+/ռ" wKՁ;AimY<r 3=zsw!2BO%h%E>?= $ūFm6& E.GsS3>X8Ԟ8T݃}4>|dy#ގEVAm 9ڑ<2%³m#ЀEY<ݜ|L=[h}ȧ~':Op;6dbXT(TUq?|Okܨ)Doq# 81d)ī8o ub354Im j8D_ u ?2o :d.7NmaFWn r[w"Hdn\a>̱pn3Nx.?c0sej ~o׼@=6{A5!D WYVhY6%jSei 3ԡy9|и*0!@Ҧfpк Y"^EeF8~X Y #L*G -˗dB-eŖD)wG67|KA3Ooۋ7B5QyU^ Cy'U'p}&/,~.Vѧ,+љ8tӟK *pݸZ'z/_AUaH᳻k=䯇G]3.ƛgmpvDK>8&tV}KTK56@hϾtG`ּ'|. N[ieK @ExS9ܷyՏX1!D4Cnv~X_ZGR(W%__trX[%W8"1l "c :H ЕŗfIPP~f ;YV65'E &ӧG$Bmgx4<,sC,,T/:|R(SCDd@epw%(}h& s?( (T=:o&9ۗ%Ju["_7N}~!ײΧEcj>t@Ք9Qle~tqJdb[үKGI2:o%4rmd||i?ӘF*T[le]e^n&LuScSK(#<%]b5('h⧷? z!Ԁ+ Lz@ȡYgqC ɯi夔=)]DxfJRa7t_Wjч @ |H뢡I!k,!6͝d3_!j㔶BxqZ/X.8[H;6ityeWhF}G#Mu#08fٮ8.[Zt|ZϾt^\)<Ѹ.`K_[p`F4X=*vT1#gs,0r//*̇YQ=h>{H51y$Y 75ƍRyvjMyHuD ew,ŧ׀[ ⱒ="  vydnQnlHo9/qVjKYU3MV4Lhw40J$Tbδ'E:1#>ݏM X_@n -ZUY^ {xyC/qTUm@55<Ԇ,9Yy[lm3Ke =͌ 6ti„gs0{RRGp\mާ`ڷ2/0_[Ger;㭮z#J).@5>, tWԥJaB=]uzR.Pˊ5] 6 g2&'oxeׂ#2K%LWǡ+u)8OWʓsH+0֭2MIg\/Vt9+ľ$ )hi EDX<#*_ڎJ756rAAc/-]،Z%ܾ%O82Wf G#LB%lLcb3syolvÁ8aLߙ-ϟ[ID4T[q VΌެ+X2^M?a"Gݛ.eI„RXOLRE(&@p>CpM!2@ZgsK ui'E@\ 7"r8vJ-Qp@P 4D s,@m8G핖ί68[[㠤 *e}BDKI} ~?NÔ "e(B$P?99/8I: S$#j-?ĸm}9}+ D*'xR^u7jub9 h2Јgck锄e54]V\tZ7rv6UX8&xz%Y6/"{q[>g|~ʷ>~&fC$.*ڂY*̺Ϙn̒+i5u&r^#u00ޙ!hA mVEBn U8,mmb+J g|AXVĴ|BӉ*r>oU?0K6Oh￨0kfo"M )FSS0z!D;R`c'y.>w5&`蹮jsТm|jI~ڵ{Eeq7K8{x q ̡8q,s+HѐM{cCU{D*ݨ[BJudAiUCצMI#(yUa YnY^1DY-v1ǻ*e2#&W|kM+ZD5g:'#Z%7ҙ^ϵ7*&<7v{H֍Ќ9⌠#L}2{.:9)5bM=[ m/# H|ITop /EkTs> >jv3| L4|mi59f}叙jqAƬY7]D.(Puhl=t|-9ʭzdPgPxorq*R%yr{@eRa'KvW{~NMTqBNEwsl2 #炉(,,O_.xN4tnz/CY*ߒ͂m#׌ZODz?k@l ƴB4S%g],%AzL5K6C`Td Wm`!ӐB҉&.G5%Na?ej7-W^+w~$[c/֥AbgBdlO \(Qc1V"_OƾGqDΡ:vKJ谶 ާ.)I6#~sY]g H/veIoO ǚtt]-=`bmUVn)mڥFFM>I) 0) v[SJKJH0-;WLoT}m׿@+JK}Սcc@o GmnTfmOX$-×Tp:d`1sj,NC#D2J[(A E"eJ{;q\6mO ?mY ]B3$˥{%#›P((0[W9aA04H׆ Ӝβg,m=ܱۡCP?xf{^ "1e!8%A@"(6JlϞxnd|sVQ _(܍bkf/K;"ZV"⹯AC꜔U]ӓ6~/⹳F}򠯅ޕWʠQֻxT7)FDg LXX.zC2[= PY}v'1^'9=t. !J[Iܐ䛗2l!6`,;.XFW4_a˺1`޹+TYmϒ>FeC5^3JS<ҁl6)h;9#==/x~06L0[߁\&TpmHp4SDhI9غt-w5Xvf?վUINiuu;si +Y9˯16G6#tLThqTX'@Sm{a?)M 8hWB0GayK)+s^" uTJG)TK9əϳ->E.QB([ >o6{!dyeNV ѝ#SC^@kLMd Z!^?:س1O-xTFSXStB/z#L2WM[Dfs ǗԶ${f1b\g6'!p㜢pyH NPbDB5٣#% `yACOH" oL4nzT,L[|H5,U@~Aw(:ғ@$~hoozE/KM#ρVxdU~~wOQ:Sy`[~fhtx⢅>wmv>Qdڞj]YZJ<ɑ+o$O*vhJUJ)˥UF t P}Xw*=*L\]]H2(R\god@^f<_4M\"Įry_HӐe:-fkq}lQ]떖֥@ʣVwИxw83r̹zӬ-M\⣥Yjx葆6;Zl.2Tj(dNVXe"H8 ;+%$N|SʝNe9w|vLJ¿^ZU3܂%:b<\2բܱ*:>cv!쪁WU%=A4kx~>,а)d>^B*XGH-`+?p){Y"gsO@Pl90*{CY*GSiwIWx.֦C9}o'VeXh3YeWaQi,I_<<- Y+b; E<4Dr0C!c7W癃Fh⒬ -g{|XiEWLUՋ]<@(/>jV jAk^V#NWzôsTF$&sqqyR:v?m{M8/'".KB< ˅l ȝ8$D>ʮjP$[ p輧^-30"ٔ?1=U陸 읂FXneP#hoX>%2HVLHJ4' =GH_%$mW;LZKѫYӿŐN9Ғ~ݻ)MaS&/ħPGRL| B۸4PBvȈD7 AE|)]i=̜QpR) sZ,Jx{$N?^(7`GCUZ50 skgE3A}g6kXŔv/;>RؕkvȆI76 g4\ĭrb38%q뤠vY`"R h`koג8uכ 솦=}j??1ebÅ>TK7X3iNA3z%6NXPFBCJ?\[}7W'on1M#y,MrD3v8RMﰛ”E w~4Ҝ]ji0[%VUmӭz; j:n;Ld[׎{.=(6[U&ش.2q?02kBn)4 t$rAt`DE1h ɮ%olucCT*p Gz} _Ng% !g r:rṚ߲3FUVyMVZhF1J3+) tjCY UdIpi|iҀob‚vqh݅f4bI-O3 Ƕk7Ϸ.eovEɩ 0mP¡ 1K?_`g J1g'smN(:)CfzL { )FWg_MbԔ40lis 'PU*h, #ך% ]Oag(:߫ƔVkf*'Wil}!Ք KS~'$Yf@_L36DlzA>*)FMȹEIF)\AȉǮ]%Ct1 # >jut(Z ḲX71֢qzʁZ']0i;6`c& q_;%b ѵ+bsdQb@Evf4^9'ڶ?РPPVP5N[5PM\gd-)h T/yh.K>mE!cJl3G0o@mFÓX k\f8zX>i_jL{!z~YmS66a;^4,u݊}yTp E:+KpE躏}x.5ͿBz;B(PIA@:I0;&Q\1r\ZN: }ȥҨmSamD/.yZ~{+c/"$fO-P̟ScE2ʹ){ݺ(M8.SkE͠3'3+EHyTg_FJEAQת#Y1 %Sj+IRB˧LϠq~qf ;DI9Zr/hގosr ?)Hb?R'RaRlC`I Q( ^eigla s!n1"X)հLz9M Z&/qleQgod< x.7kLJ<'ԑ1|b-&`c՛R],c@"5|_/@ 0{(;֤&4GLo<?' $jɆDHPsDlrxgc@=p8mgOEvr'ʾqb:Qȅ.U0Lu?<HP_,쉴 Y̞]R0XH* XXAˠl}چN'+uFJ\suM`CbO(˥q;YG*%sVg)@^{X&*69*نDp^Q*j1^XK$jVD!IcCދxnߢiKE$x a:"Jn&H/O3ea&1HwT^~w$]IBtAyAĂ!'r8qXueql/u$C1q7vn]t!Lk --i2Q6)Բ9ђ1k31X僔k"9G80#>3ApOyʟ AJG+>ahٺث Ѽ efWR=dO#!c+M85ު tSqjɧ-xP)1P1:d"鼩G2h23ghth5>4 Ee'2eDz@Yb cP9X ~;8HUbڊ<_Ӛ$ zw#βAd!,tzLK/Cl۱0NP;:8WT.HMYNR& rв8ؘv2 Y_!PZ.\(Ts}gr=)n}`mI2 vևČ bj2UX*wVM;m=To4 vun=":&h6}< ɢ.-Y@OE <F|?[Paj"dk2&6&,JQ p1-7=:YP˸APyŤʄ.HbB1ph=Zȭ~+^GbH;(7.l!4YsI4>_Taϋ#zIM~I#jkE@"Sj;6Ӻ5g~hkRE5>c l74iz$ cH`2H&tvO GuR+%uŢ%K=?X%nf?q7W+(^jim8̈(kU'F9\dV .Z60cP|nXKF»&+=#0j,]ͨTB(uŬ#ž{4@OÊj,FR"lgH9׽gn"0V\ۭUU._aD~D>[CYvu%bHaC 9>cT8!f8:%c ٴ${,CM4ZOttCKHplE/$_ļeyC^F A)C]# jrnW].V*>u<lrΊ}pbcN;.5kg!]S+0-H(Ha6%0 Y8HsB(C/|aRe; !W30f=2~􁋘q*/\V uXfwj#?|-AQk|>Knڄ5ސ"οÎB2{{( Ÿ~8֌Xbjzh{v̛kerG|fw(4gGH;Q\t]djw2 /n#"`h!@}W3%7xo>d(֯24t˷b-_2 H ԟyZAa. wρ$iA&R7n }}/톫p(j_ܹGR[%FK,?q@g*_CB3ZIwcӀcqbnAo"?POK&K Ȯ(\q0ˢ<67UM!JB f@ VCEާLH _W)#C|Q9fҺmlh}B@8gZxA3*22mȜC"rVR~֒ t7YΞ8Zly.d_^pQzkW{}H}j=ݎi^߁R\ tGuL jֺؽHY'mXx7>8\$lYsPAm,a D~u(|wt9k*.*}|Wj_>2G63Q16q6:nr,e 3C9H5W]AdIMXǘTx~r@)|)1Ӆ0 (+psgn>lvbD]r'w"ȪPzbo70I0:Hw!&2  |FM6{231^N0a o$,-AN)^D8/D \#S+vqt,#_X`SyrIA\\du?^GKA-\\3Gw2 'Jw` VZlρ@7%Mj[d>L?@1Q&L٠5.Ne1Z?K{Zaq˟Glv ԤN2CP.JT3/Oyq+sL9eRQ`&*b?m'x_B@,xJbV+IAvު^*O% |Q&tPZr<O0Hf4§Whaj9H@*@ @B8U<.8Bbfo&-wӛ -'wb"JZ\b]Ɔl!CoE~ǜF:ێBCPL\9# i^s;3bŕ _i.[gH3u]fP (XCL*~wKrrg 3L c񒲰O۾P]Chr+)B̯6Dru.ߣh^t9(ou1A<zKub-qiԲo#[+v^>:Fz/8R*HbNbA%5001Kjy8)3-2_XAotWBVZl@yy""xV>S8@a8@L g o}?j`uĩ5 [ k9ai]m'8;&.ģ-i@.l6#{%D+x`&G Cyy Qė եH}>7YUe򈏋1bw7OLfж@8ܴrKFpW ԮL4%m3侕tWVߛFsi2}fǧ=%scd4uާEY)AJȧP9@ᴞaVt }o~{hVq 8o ܮz:VguH˰V -P:OP!݇>"{9/3r Ȍ%φK2JŮ|R‚ 8}<怗m#JR'H؉xV*xY#R- FEa^ڝ؃h1Md"[U r>P9w\{NV+T׾=4f&%9ϼQ&9B J ḧ́& ZJA\wme,0R0[A+1i(뜅j2L,#B"0?wz;͕krxjRߩ/`wgjRoU^ڠ"l9X%.M,l=fz*9W'^$MO\Axw@m@ٻd lj&AO K? ?RL#f%$bb6VE>Z{\ <-5mZ ڼftAz"=?h;L.* *5X&>)BmLis7־ 4KN 9Qnު\2Al )n!$~TԱKc/ Kd^̧سf7Iʎ!*ҘH[t&!Ehn=W,W5yck\"ubU2߅jRu,_5 jH!l@оF=ÈHAed+.ZiKlwꨝxe eqJx$4D /%UhC`u&ƙz~e] ]6B wJ+@P]nlǹK^(,06tsM5=3 jAx ֶ:B&651mu5(PMl :-B^XO{!Ixrp pBiju35CEm`LwN?GY>SkVua>B 7$#CQwO>n08蔑$vBLxqvQbP,/J @oAn/Vv>Pj/RZ;ϋƹ8Z3:#,Qlkе9`&HPѿMt zߒ! 3W@+Icm?H`Y9X ֛)ᥴM6HCw*w7f׺Ϳ"JƔH.W"uĞ15u~9xhY ۻO:;^}41 ܇kQ&~IWlt;/=b|q%'an0uᬓϭSх2h}Ա98 zGh u$CdPl\؆8GzX,T,JfJ>f#+m {4de a7(S>(=Q)4_ʋrwwwkZQaސv:LMj`k۲ :p<5ÎZx"‹ǖ|gYдA#zIR%竛xYGa3gK$h%$ߌڑ{ %MbCpGvz!Q~ō!Rpr(d 2"4*.]j Khc=ҽIGt‡#R:o= (Kտ(+K^\*9y`Ff2!e[ǵY_jse]O>GޮH=[OzW \SLcnt!&$Bҷ׺eM pgg^#q.mrl.dzGitDKKX Y7jǾ8{w#{p9J A5X]ReRCiCCve &A:ߺ;z}##(_y[ɫLt"ȌwwvL+';p T}ƽ'\Sd-k?#ëh\v>͙/472n2'1MJ?_i}Bsj_6 L_KpԂtZ='Ga`Z&jI7t)DC\S bSSh)@9r 7*7"EL.}xÄg} ćXKGܱԚo wVԉX1\VtlvWI2)t%w^{>!*I@Nܛkxj^սoY7=3Lص_&=؇k d %論]@e~wn;Hy!1'N d4/ppXتp8Z~gz,]/½VĚ4 dS.9K~R=\.x[M,A!k*Y+YGP}Mkv\jtHbd|,wcp? +&MX$ kvAvhj%{ hxloZe `[Iy8lVKN^$a4֯9Ttd{(ݢr0!jʲm24TB rLHIjs Aϲ|@Q'2FI&CmyfU*Dfذ &8;ڜE4/T;]"HLbTQw W$9$WO`_<>/]+l{e ۖdFno$jڻ\"ς;t|i]Լ|g5jsQO;T tr| J^h?0/Lk"c4|UrHJsv7r4ARF h%c̄.1bȀLQ [Pt^,_SKڦLi"*ޕX|}%g g%?b N$J9EDe?eГuxضIL+>L;0 ~' I2f.%KLhn g+Gu¢}jt7KI@0,NG k |5O,!m#^Bw[Ls4#"vT[ݏ(ftD (fb_hr'SeK~D%Bx?"p x텲^/sfM`ja9[SKtA/;yXiWou2"7dn}D'=Q|B DmQ&jc8Ƶ;0=WI\ȟ[:o'G`rG,'H8.~0lj#[AOB 3"x7Ig~r㆑x RCϢD5O>:ҁX9pRYƚ8X>+,x핵emZQ,e9-SyAOZ- MOFz 3}~SO5+J jAQ䊽-jLB\?Oe6I[8ܝM C=,G_&)35NdSp$XM.Tt^tz8: zRn+, /t«н--! &Mu TWrDFLa'3= AFy;T&^6Jʢ_%J%v,.$">-R'*!EJKʛ'3宂x ZeMSdOB dtT1߶}|Ԣӌfer6}vʿj(r)l}c!sEyW2-5pHԒdK'SYGT~Z/|nkR5LDMHSLKmLAcM+|ƵӘ|{bs*]#VW`RQ5S=iC?Z }_ |w\]"KPŵg<w] _ˬXY.Do0eT&u< !Au}p jO ѕp2pkA'oq_`{LeՄ*c \r" EKSEG Q3/#IV6 |;LJmQOMM dʪ(qQ۳2݂ jX;Je_t9s77V>)Ж3)ds ~95ծ֐M kNUMQp\i827QP#44#rpʉWEjX&,w dт̜ bj<$M(߳k7Gr /-z"R@C4j \4_ omȎ8>.B(Oǩ z5'ԊYVP׺@סb {nRnQ+[ɝ U6DϣB3Ǣ][:hw'\q41awOAYR@W$ZoD۞/F\J[g|"0)Z6 ݒV$()EzrPK0?[#>P{t ]OׇܜU0/ꩲzB챿RZ\#$A?BC|DO!$\7 1mڍ[&kNuN cwb5TW#^6dt긭L˒rkG$bfxa ʴ)o:gmP_.,̤}un71>.2g<_C47݀e!Э/4 m< OimpZ0s{ocuTAo@*;HY!6vey;{zY 2 ZP (D6ikc6}RK*4^jLJ9up>F8;^0er %QN71E&]J5'n5q:®.X"D6L!J z>zw{ OM_{i{8sZ~5zL# OX0@hL'a8lm#G.%]|ߚ#&cWcκ̅8!vx.}̩:$=Lw\pV; zV,>q iyojdgԟ6+L0JKcC ħ9Bօ>4٪{*g sQ4Ir)wp8K{I1v4 t?꒑=Ӆ|x.cGj)on 3kN-~QuG-n:#≐*}ᴴ dDKa?w3ϓshuטߴ^p(Y\N欱Ixt]n> ^rn\0HI3SiY3VnGx $8.'KCO{v\zԙ%Foj̼)ZO_,JfϨ Hw#HȊf֣^F!Bɩ3S i 2s޸n(GQdsqvV{S,%xfR|MQmKIA@n⥿>La0J ۫6p>ᕵn$iƑg&:+Bh:s)?.&`&!jl>Qq/\/k.2^t }^84 N`3I+ =GO@&ZeTSfco_=4 nN^6ݧ ?S(qV}w? }g xj_`|Fo1b =p_\VsH#cչMh{a`^2Oޔɱ0r%' U2 (Y_ьJ"c sH1>v.שvCw zfn~INЩY**nʃqmׯ6v{w]Wd-Vn@\<'kȤ 2Lofc /c.oY3uH~T_-K }`%_1ꍟ{*cx(?m\Eڪ6/'2EIZ)$6Cl)v^X9'R|Vv/*|ŒA8=&lʊHaC`D]{cO t 2]||u\0fOMXټoOԏϱW  OFrM~c. ]3;57* ko|G`0fE}vMzH&[DNPg} ] '"3؊\,O~1\i},j?PճXT=Dmͻ<]d霧qġK u{^W{6p:XY0cÌmND@zN΢#kـM"rlMZDZg&iT7ץaA>o ~($(v+Nj 36#aP'06: qKB‚ӋUN=$mDҹlQ*H= ̒C5tfQA!<fBzkBa+=ήL# ōV}ƋKRڋzc؛^Ʉ~;߯,.Æ7]i~,u1wQTfn#wx̡17!N%hv˲9pJtS( ozLݔݚ Q0 0r1X6 w_)Jc4̍,piɕg4'2hNyYwns\t !!'@< lQ 8MaPi]K9 EN-]2k؛I_\;^\[S|SGiw 0 oǖb5bmn Փٚq*%x CIy=Qg%V-D"S7V-_I ^7TB  "^mMYAGO7}vZӷΡJx$<kde +rٯ߶?dhXVzۨKgMπicl䞇_\Z:RSzk$2fUVmr5L)iK o]a9*QTZh¥p6ȁ Z_Yr 5 y.m-7n>يWu[oRXvhB`$fك]88Toqr#6ozjpj4@X}**m /2Tfi7MfNMަgUUX,,/vC! D~ܒO1@ˇ,9$̣[>0%h:'\Af*S&Z4#ݮFbh3 u2 Lg` !"sFO4I&b v~5żB ޥ)!4a!$䱪'# E(ȘhU3E$+<#R^5Y7t/eqݲyT(*@o‚/kMyLdž#i!# !(pCpZ?E擯^*^W8lz]tGAI"ۆQ]R4F»FKڻ z'w_8~/32U0sU+2Fy6u[8W n"OEC\پf4ِ@Wɨ?{/fW:Z2@J˚S *F)-8Х0gJȖn.W0o9 |Vb)(G (yavQG!Hŋ•X6lOOaQc,{ I+?Mv]jcx %sHEYQB'q3m (B,LA,l~e7rxH.E[ ilR#2Ae6ߚ|$48 5 4#{;.Z?fdQw56ܞ\$R{+&!ɟ8# vJn&~7YQ?fJ*~~:HjJRVؘp6|6 RL=p; 9D.ciPsȽr@J,ZuMzMU-?Lx-Y@ȟz7Y@s765K/EN] "L:f&~&ͮH2"!) gMLg^A_ El+W_ ߕɻ{'ܠMt?o qhzogp-):`45neW}ƈ6LWt?$#ta&B| ;IacZ ~Zzr祓,3?5Q]+Q8g1,Uߚ.ܳuì Kjj"P7u.<6Xy(F }#1M?Wz=RCʮ|-i2e+a[Mrʐ"RÎ]'|dB~#P*e |ƘA+ Jn{ h|[iD+B_nl>:Zi7%NGeUzTE S'BÅeYw,zr<gSm/NovS8w-?SlGqhF֙IňE gۄ ٓJ=Q?x"v 1Ep͚o4wz0DEL_s3@APNijkqYE-ڼEI[s/]̗[LRt.Əp}ׂXG) i2+dì<^_Hl7Hk&.r X TT_*^AzO[u¯-Zh  W;4 y4-yI{揀AM WJxY;]A }1[Aޞ, 1 /q BGLF6$u®%&JVAB;sL7ZN,~zʂ/M_= ׼ք%>H{I݃51+˅w 1Gx?f8V oQEfυܳڄV̆k7c.T"0SN?a)4@+d"DW <˜U}@S&MТŅ b؎h%)/_T$R9EFqNLSZ=aؤ]Ǡ- ھ7Nǜ,ݿRχATޣgh}At褌 O=' Dn m(m\&!G=+.UREĸTEY Oھctks҇ V]mv(q zI!FX_ 8mPm* gKLa|h(Ib]Mn%U| RQ{ HЬU'RjT$R$ haB:/E=>u#kTOc?-p85bݱ2[jx#t 2U+SUSF,G $4Ff=> ٹ 9-dՍ|e3`K [pUu6_%?RR̪~/j:vrL/:a4z>1b;OWx?pMMN, R.Lrߺ|= Q_Yg4 GXB/8 J6'5,P-=c,+P$i5qT_ 2dtdqC] *|u[\/3xM s?_ Sø6P8Tw;K_u~ЫG6&iPi컧6;#H)\ZEP`xo04x UG+iTgcÔr2LX1]BEݽHL3bfzƜj)򖼶GU`<<@8ΐSMһ@dz7{7Pٗ#6CHi Om bV?4/; cR!&F-x]v4}"~*.P$ MdJhQ>'%kA!}3 I2|x ATt`xTe[nRALHD_4M(^K) @Z,gy? ͣ$yAuaH23IGGOky4ț8kS߷;'pm2r IB\uEb5y/q$ol'սZrPڊ"oI1ZԜ,!O2Ox -tIsżb\r{'%u%]5=UXY}Hո0&Q |?$\MmG餃<2Wb6Hhz/GzkÀ?p Uco W$q&b(/!>@%w='0Br,'}떎~Y/~DqEHzDvaӄ&RPץL8.z w^\=L+ڍłD,Z>hod`"fJr^ۼp^ jw-I( rcNmbW wI8<|YR 7.?Օ uڏ4&}WP5j >dVRAQK`$3şY~%2_3+ވgם<3 a0ZsC׷fQމčietץ · h!=ܹ׆_gGo2SLxJO夛h j?s.Teߘ,'n?āYqt! 74X%ls5j;_v+J}1Z~Im45uБD(eIy2^K7r0H4mŭa$YUõRK]E& ع57øyuTҊ䒙2"{+ QC ;s#,q,Z]F?:mjg!,%[x#BvGPdI!6hF-Bw6xUlZB~#XñL|ۧ5@5Tb{|nE$G?|sQ.!fd4אw4ט_*%P#p %"=Љy@ٓHYR-Y)-nW/aoYfO l3[<#;TJ\KP%~U%}VmqJiHU"<lb͔CS#J{ѣxL' TAriycPU{:rwG*R׋`\6tu l@-@3~'=('$m݋\I XB$"v8{*YxYgZ&a3?H'aDr3XC,3Dn%ر+knpL:E7o.tI9DL6g?'C@>d _wQV[(=Y#N b_JІhPBp)ORvR5 ʸoyj^"OJ 0,% 7 M=NnW'r9FgI7¼Zd2yo`="I 慄9ѹ((7!LVJ6ūGd-T}VJbq렧}lB4ٱM T49ns(<-ۢ +ggkRq߹3Dcԛxq"W;w $P3)GwE2]*>Èo]w7s N&3֧vGeQixE QV&Ba-/0ւ%s6d;Ǭpub*٦A2#8ElTXCVUwn0u/>2{_ 4cRVib0|Im/aD 1w:^E&+{HƞKqUa춿p*)vYttGL(O*C8oǐ5#9 ƔM/:P^A :'0P'LV|Ní-n%-A Y0vbyfUత/`pR0sۺ yO:Cpʆ넅2o}E Q"hCx n3?hz`fqɖ,q,Y)ڢ{ϐm5#m}ƽ)@L1bk~u J|2K]+Q~iAb 00hR ON}HRU[mNrɌF)מy$߭5etߟW)RhR6fA _ 8R뢆q&Z߉3vtdn5 7$Cj.GQ sˇ]<~>cy"ْY8~!ˮݽ0ijحԥ dzRP\= U"B*z2>aWpQiگkƱ'cT>D.N mK"fa9"I\QдI{<{f(lb-fsfW T4OyOVkﹿ=BnOaٌO;tIXÆ`6F/ ~%UZ%J:| Z(N+h;{鴈#[Rhs["noK&UmZ]Ӭw/qo&n/}plX,4Rˀ\NM~ffu&L%@@˞vEd_'Q9,񅷵rNsu>иzn{ ױ|Z% cHc=mQ.N;5 BdLRhU|<9it]9\_GEL) ]qZxᷮ]6 Y\ %8p`Ney2oMI )0IJW)7.|),xr\2IZ%uyt( F˃"pv"ʛ*=#:xWyȉH4+ p+dcŶ DڹGHZҳAXt$Xm섾F&:Ngr>̺NNj3[EZmZRTnR@%qun:G@^@Eٹq[d:OMp Z!s`Zt^!9S1^VRبzp(Jk꿁F׹vn%pkyͧnZ6}^arǠVExmR_ʻAV2 .¾c*:H| 5YB:^+`3^~:7ZG~1M1R7U$=tw;6R{7b&XۙqéxRt!&Vp]b] i u8چ?H-uI?҅-ĉP7h& sݨ2);akm%LSy>)tK]|,g~i$C.sc C' ~ֿk-2m/@"@O\XRC7.J/eKoB!f t2-XF6 R}<.R;mqgb*G9 {HyA?ҼҕֺM:ژf5^kpn|3Nӻᒘ.:IFƛƄf38DkZۢuˡM TT 6u.Ω}}Byv}{S@_ 5V\q@Om0b(5eKc6"B ʲ;[4յG#H1lIqwįȔ/\DŴL<?eL^$gD}.ɝiI*)/F;\~j٤TP;1AԞ9eT.-__2*pz8HrϼgJGM37O(Zdt¥ՌӚN`@ZǤ_5 RVuD7l^)~PYPdQ]<QwIӞ[ХmRKN`^>QUn_脕N_=R'bNM=!ӠW)O\N4|I<6mgi3*4ZFͯܿe%@Sӧ!$`4̀i |,w|12͒0EC]O,,[Pg]+ ʏ4>'DDJUB' YK '30Ч@lϙ>"Zy,@ T+*`Sq$Y/OJ֢CSU_TO"A-&fnu^nEaOK$-?R/[y}ozoK Õj>U$нPk 2( vxKZ>ѩŷI .u=]qy󓲖[+f\έ}bX*:kYǞBp%/ SѾbR1[bx>b"`Gȓ[SsM͈$"\YT]*)T姪^KQe ?F5 rBKlM)@R EQ2]"ݱoy!P՗-NUxdn5duu(ɾ}UD'\ߣ ;_U-HQjXN2—[Ч٢I3&@' ϪF9.֯.o^̖y} ,OBʹ }2C= :lGxSęTG$>[OC3!o.:Ħ˟]ƱAL%78A.g>XVjc/~4Q^D-ͥ@[%PJs˸H,N/H73kV 2$3VˇmZf,f@5XY=kFi2Ԡdc   6';kz!PV "*(f!5BM3Tgl|4Dg׋lru]mm!ﱛ 9X/9 z(qV BdV<Ӎ:J2ZV`Ñ< +}5.,ϼm4TDi^Ssvs4^88JrLrWBhؘ(1HQ)I*MEtfȅ|]Ъ_bRXCݠ?qoCu %e JdCa [IA.7B$%~Fn8bt&eD~1 ڂhM1u-Al/X^+J #Xziٯ9k5L͔Ly gqnu!*mya0dMD>$ӕ7YwLv:2UmY_i13`2U6JNu0=rj7ӁT <LDu0eH>v%O k~uoQuzhۺۯ拨k$fqAԨ2ok{mp:+Zo1+h7vbclcIruTJ1VXZFhcW}r@ 5OFZXַri]߭\,c4 \PGmXneq%`[ZrfǼb]0%)&q^7DUj rK∶S۟(+iZzMkbg)ꤧ-惴[5KX8ĥ#_)D/ ۄ=#qqyø7D,dtxAq- A5R4k'8d)>옲I}$m#Oe{`>$6өD=s⚧T&H Y[kdGXudh/pv/SvS1)EEsLE{pBc.3.XDlcޘKy{e&Acgq=F3.q:K,:_҈r63'b,RJ-Fm춆cGaʼM:T A@QT5Ry,A_!=<@5@V>:4Sma[0+|ֱ?| %;+D~[\ȔtۨUJQdw.âIڢ3}Tω+B{+rA/x\Kʽq#B`|>a B2/TN]$@YnT%@+ yfAXX| ux cˣNn Ͽ5Bu-(Y[W~,dqM\c;˽8!~M5 ,] )U??|gm\ØBN8w#'Y< 0G'#3=rF>MYX-p=~_\@y JɮQ蕅jOɣ\* [>dЉxUMfxl?n^ SoY+8t*]+M %NF S($( Hk&=@:!¼*Yi#4 x)_'33\"?:e2-M{ٿ =@x܈ļX[62n'2BN؟@(ǃZUQ*^ kplA@K;˯͕~FExBgL!%uJ"XpN~܌EE"u`P9L9>.`aJ[3+b4Y/# s,&U\>- K5Q7GKRHqqMy38(3&ch7,PACcVR׹=Fa5ݐhd|qSRէ,FS6b)!oao褞ٚf(Wp=j[@gKQm$:qilf6 h?s5^ ۲m&aVIП$AF\P XDU4,pSyMTR?TgTkʁ`@;eEn!+ t˽6)Hz izrQ 6H[?3v3[ňlnWXkөM.u+1n.}4@"y"Fgd"W5q,Eܪ{}@.Zj*#? `Jp0B ɑƔ{@_Hn{7GQ+"al 8ܒ,-LB yy+"ոg|+26jUq2P~ s& ~DY6Nh9p:2(LN,R:KH !T0\dqSo}OmɊ܁{sO°n3-r$ } u-%mF}[Z_v-ˑ IЦ nL8:<}wp;i׆9A : 2 5@\*;P#q5 M]\gc FT lp읩(5Ȭ UfCgٖVqn%&;nQQ)dn:TUduTYOwH͚XQu_]JtkXw6.a^{qǹ7}#s''{Jw+0/^ʨ?H9kWdNj6S[muٕ5!~rIY#K/zGr~OK1n̩3ij2(SA=5J1s;-NGlVRj/G2 /Tt8)}a`nKA] ;NZ^E)wɐY 3 #?XLt`~daSEKC4|T;}lLWOH]&0р6%;|H_B6 Lب:/Qhᡘ3CU0${nddqXxk* eUfo/{Q8%,V9sȁn$b{B^4JA!8nohۦU)Vw_%4Ne~LVN^Dd]{MadclT/`lI: fOՄ6u?{z{FQf+$EL![4cTu]袢J2(KYj92A"j)cu$2YS6XEtJ| P8R 얆&`QS|!v@ rw7DGt(Z{,5D7'=6<(I˥K8`cwEMa/g>hD=YCqDI=XJ:xIR`%K;;uر ( kJKx!@~I1x' ЭT3*9/V 3$x}se;TU98BZ`5#9NS@e#{6pkneq R4ZgüA@6zO{koI?.Pi~UK~6XvGoU.i %oW'@C]O;Ri٤)iR&ޡs-$^,``DNM!{vp{&Q ~pgBsSp54ObD0WlݙXZ:7D/}bC{+/~;q.77mIĿ̡k[K^F]ni,#t5-E2 qTXT3vk 1n?9`-G+"}=). $7*tE--7:̪^ \t\{\TDDpm綺ӏJO\ ,Dwoupsn;@m)0ux({݆ә? `=bB{G(bG@}MNeE1i"ުM,i 6b16|.`K`!~oׂHM(!G4G!Ǘ¦X.[{-h0;pꋬYO IyP\aHd_"i`(CH4X_:릥YXm! gj)SO@1RZA?]ĐmtCJ"Q=n6lo,d|)^LuK`'Vھu㡉zcUԑf젷jF0h ](7I<(;V*)PT#+Br=P^UjWfW͜ ;udkI`~\eI̚ӎCg#tpn xv6}m ~+ Z"GZ]4kk_ #_e=_0 5_nh`> i}.81[$B?psC6`Qi@V}rc&7IoY+@?~ / fo xX>S/g*sj`ѪW|g VlOn M+iEr<>iVielM[*hEAm ^H=C5/14zl:FЦ,gbㆩ>qVpc &u\]JhH'f\.7HMfQKA*J)0uSKn cwtɋH2wat=?t4 ˴>fwVFNJ>۽5B.%}gYa \P&uPg6* 8=CnlL? aaiQ2f%Ba/F=V!6$:DݵDxU5P6[?7vn #3X}iypEyiqS]*='h(  *5,tTꮼH)Lg>sց6ͥ/;s^r?fDa ,wEȱ D{MxRRp=r^O&x@Pyey@!(ryF gIA((ENe/QLi zZr5.P(nA TMl<>$y{CZF $BGFꯐR4ȹ:cq UDfr띮vjHǪ,LUwֺp gZ9~v$fW!09ᘺAdy%[xOkR\L]B lEQE9hh~Iُ_b2cC>z./kP?rj .w랖Y[mAt8,sЉ-{EG'v4`f=n_Im`g\MZb6M*75ޱRK]N3h@AҞɘ鄋=Zaal+ j6|5-a3B6! N4dz\(EKKj7hIRw `}XǶLB+yȷ^Is1dL^'E+}q/ ښP0P8~d7`7(2{1-K≋SAf!D~@Fҕ\)j5cpU| ^ު%JDNjѸ!:̮Qxzb6XUV94÷@kO.6̡RD,9\cbQoOTϊ S/eWWF%WqT D< ^(j7p8-1Zҡ]?2яW.k֩n7#C;&Jצsu}6\EE `*۷Y")|K$] ߕ;07!@dOIj֌l<<F -_gCFoyN] /)'B)4#8EhJq2HjkvDCو͒Alyt SBΡaI0B$"|b>Cq띫y_Bim,b@O>(KP˵f+Z9EgZVDJ\O|SSasأ|R4=dqVo24ͲoWvt3TG` !n":WO|Pӕ; #C)#@? NXL{{dvCn8H Bx*W 6ZJ !)4A`0W9֕Bԁz$F_{#Mn9x2nf7]z)$@8aUIH1vV}k`Bn4l0(~o !bDWIl輐'_-:"ׄ?!JBEqmWCU 4DuJ&6ۗN#z.\M!+Ⱦ 9W:gq^ K*%ssQy܂4PO3uXQnj.)>up\?FaiNa+;t;*f5Gų:&m1d=Ut"-U($ ()kش`F3+'#o`h + 35gjY:#=TZ9fsGqc+۱kmHݕ.Z 3B8)=4֠.Bck 4>=' ~~`*i($ >P iûyfαT9L`8pWΌ"`86bFqydtL3)fޞ/<(sTVW̮=e?E, l {hp Prf1!TYʾK )bKX X[kUvH2BXٻ}_;\&.dױ~ŝQ f7 p튻ҍB6;Yx[p_MC1/2PBMbXNaFxMA?fF0? Ơ" 'c1rL;NQ-GoobČ`Eq1'0]57{k%or@E;L l*۔*~/C}ݷ]=UD%-3{3; G*I%e y#zY4Bo(ư->`ч-E`c1pSD[ * a>B+QR>J cAZ^nL\Nl'W:NY5< +: bZnıX$x/%CtkUdhR#34zTvCOb3`֌W%?~/̀nZ!7g#]R m=֤ EI SZ7ʘ`G_-M3+43'6[AU/UX˂3` ns +5~L,K=rr*Qg -'mUL|$'8[݊w)wWVAnɁ>&<6k-, 3cP;Tdr"[֤[B2$n#&ΩxlO]TJ?_4R#ƺʫ7w0sDgٙ}-ׁl*]˻tNtmrlǜ^sՓ,UP+rpcyJU^9mek;P;&w9}<&Ȳ.Չheu!%so^J+tIk?}A]1JlԀ&\#r?u>w,껄:ƒ3h"?}dE)JdD;giq8I_/y.w6]p 6`j~;a1a#?F}yz]?}Pf6ȉC/g='kszwgv]֜01%7^or(0oV;B* +֥Pݭ*cV[4g$_O oaҘvvF0覃aP\4-P4iB i IBC@TUS[5nOy p=}:pi{ao%Wvş9ʳBwZp:}Fm~ 59I9}])v^N_%^p)g V(NVgmFaut߅WCKdJ o16z7pLm_9Եp#whAeq~@X/0;U<@;Z)[M Nk@0FqWi+^{= ~Y1 ʲPcb^f_tFq 'gU,䝰 $CXW[g__\B)f?v$k´Wj0s~P&f1|b*3j/h3xO YԽ+LңIrJ< K!b3ʝ{.[c 4Wf(fMKon\{ȩD^ʧ|"j{L !a)׫͢< mス }<[/?fo8sKLN 0"t!aC`H+i*a"0E@)Y)JA@P~-3``ZB={h6rל^aTk(borF`u- }|5aGȪmLEeHwfG k9m:`p̆yu28iHY+)*fV ?j\y2H9QʏIY_v,_epaͪ鞗-QIH\cKyXҮ|GAG*9-?e:s 8aĶԥ+d+7/k@8:sӡM@-'Q ݻi~)3Ju-aި3Z./:zWz|wo ,1ap܊KN|v) ;~q3#$;̞ʓK ?E _t(|򫂱FJ*CO}vǀ/*QX/(%"xK38 i]޾m-P.0I]R*p $~A3!nS(9+2Bz~G$XݫRm[ @ePe-DO$=Snm%bUȵ "WQyc`$N|"= JFTAXʦK+.Dh[c Y5|6aB7 zC`ymZsp^qu' 8_YjNR15-_q_Stk`R9˶6Y;nJ2;~wxMkAm&-tM{|ۢt4)]7SH&PFfhJYyH~lr[^~?gHG5Gl:MvPZGЇM(j@fӲ+tR4ގs;!-NTV@|a1@6=^ cRqG\2R\Im |ǵ ;0|_.'jJ8f:)2?ְn +uԔܺbS{NHQqu]KL&pz2jw;%%j<қOVw1bRS}}o4NݽY3;iKO٫_mzHvL) ة|>TrCaπ2XG ikUS=ۑl*رG0ė]+Meaک>\,?[xpXnt/}ܟ}L:!9^>p23}z{2GI a  FNny美僭!M/vHh^Z%\gfx0|5P709qovyy{40ґ%.m!~sݠ(-bP`lm 4 g%f~.[od6Vbr9*)Ũ~8k\# BhV&Ə*\֧5 y+VQK0U} 85"||;6]yh5pؾ£haUqnZ.8晠oZhcX j';T_1!%~_}S1gя0UUkş0bj11[d _'߯mCQ%#5Oӿ׌( Yaأ[B %H}"0&SQ"Ҁ@#o? ]lǹ>>9$R(DKHPoy"W_{h@8t2ebёq|@ F-t y^U@BdY &ː*AA¤R ~|hS:%Qz22T'Z8td*=u9g< e}byc+ځAh7M O̘n%`O*L18p@G)" ioQkL6J ] *l Al1s(9Z_[-0\cHr ?HA <ioG#Mյt-iܶ7&ʢSiHh\jQZ1F\`9{/y=ƚzgtq-חs}‹#JAsh2H $%> T߰VK\=Z;vFnU7K#g+ćHfκ[ ɹ LAt~'҇;wGuD:Cʮ أ~RN"s@C,kQq6*'5mT`5#}G5i Qr`\87_U’,e fʹ֐vٞ=4G*fm !v|'QP{?+{&\Y9sY<16Fе9{IĬ}^$?9o~Cw[$Ty[ :浮NK!k%r([>4h-T|zG}z&Ue6乆G9*فքOY%&˵L&CR΄nK?1(Wy\_QU/Rco4s"xGr\ H~t\ʗkMܽRw1~Ôz;ܙAVcI KY'`m T }5 {Q"XQ{i,|n[.P^ذdn(nYMQZDWE`8u&jň/ue.hGzf4;e#V 溄HIQ6{B') VQ AXpꍊ9Kpo:Iy,ݑP? ggX-G>M`uE)_,NsZs@6e:GgMt+]Ďt2XΔ~$aˀW:GٔPL8 Kew.k<܇ɏ{J- EP! G6B_w5r_T^EO1%a* .;,¿bt #L{:wT= e S!% OcKF-@ 'YB{FJ˪>;DG",ɺfս )!I&*#(< "[Uu"D~#먨1RffO+-O!͢Mߙ&B*JYEJ1MQɎw)mk?~!c݌KD a a][ҙ^٭ xn'+ʼV1J?KaM$cgW+͜5/1tU[­XeVY󆝱3r" $FHm{RZiV> ;Ξ)?SeL6e$Vn d81Bpcڠ%pcsw~vԑE?ͣFRL2e>hD&ٍB6j7|0ƍ^;G#CCw>jSH9mg(T=_vӈRNA?Dˮ0bvjU 0;$L%m)0~5RdOxD '7n/DzK^ ` 2O5tKI(O6{ϛbh}AܧBիSNC-4>pf?'mB^]!PB[5KhÉHakؓuFMVv^cKSN +qi1xP\^I<{Su PEAD@R2\ sHCKbq*=ǬnRc˗= {e}jb{vZG "KsfGH7xyOLsiRs=ϵ8mPcwcYOZ;:Xu8[SCMtA_iQ*BMxy?X$X޺W#c E.RV8[ m7ȚY|1t>zw%ҲZ}!K7O۾~GMs4bϒg[76}ZjŒp$9Q&N&sHYp3E`;z&cOᗎu 7?N b=ˤLo\p\;W<%R f$YjtO#7hXVМ ve[',"G_v8yuZr2_ItVm2n"'qwrڈq#$#.}&ųyTǡ}=hZ8|RG9)v<8|S"wγ^4!ہYj.i]PbY J)K.ƺw ~w70@rQ[RRH :DXF~V;y.Zͫ ϸTb> {}/ vKԯZ ^/k# }Ò;C&ID# }A [jUwgxոOpi>bEo,QfQFͰԆ6(L?VPW64tEDʥ>LsHv_׎ml;4mLUАg؝Ն7'MN6d:3;݆p L0y{>q +,$xy8r7y+MvNNGM+[+m"2T ~nn_ru:QK#B%\9x8iĄ*tSnZ^IlDLk:[[3L텲72]tFN7}&{xk"r+ڬ J & 7]"ta$ۀI9-hd J7 s9Nk?M\nbp/*xfeH0:>f(MwF8̴؅=q55X|,FARK. ؑ!s!؂H*7JLM v,26m12f*6#7hcd}0A7pMA Ӷ!ecv.O'yQ܎~0SWԻ`_-SRM0O{̺q/9nU+P3YnVP~L io!= GBLA5WR`j=S ;eD+Xnil5ƧT9hh5VMג.͚CيЩly+]ihH?YLi&`G&IEKPGtEP3XLm&p~">\U27@MBTWmJ}Nu2c 5!B;M'w.5}1SI2O} PJ1ۑ6 #ǝ?(`}=pl |U D1J'ffא 0%QSv87Dl\IpZ4J]dɟ,$n^;7[D2 Kk0"dA"+Ϫ {*:LR}/D^3:9Ob˶!⫅Q/ܼg\L'L?t6Tn# > &(I Mf gtZOd:<a"޲ހI Oz dLS5V&EHFKVZsZxr|- E\5M2fJ4Wx.dS}ɟ.C5VVпN2;yTG@MajҐ&t ^iZ)Y`v%Ӛ_ 7dJQe 7aSS6!IEzC?CE(im$%Ȭ~Pa)Ḻ!2onO!b D(pT0kJ& YT88e<et,DV)Ol_QM'=^1"-$=o#ܧ%P aZ# WGhbhBbN=}^ zN j/uPRʱcXC$YKp=ck$3nNo{ze[ܟh%t|98ly^v &/CXcRrUPܚ[DR}Q'LGm͐߯IE513eⅿ!Lk˿kYU4pk% ,E\ Qy-#F]F6)b/A_n5.e.C d!M!ɴNTʶH b40-(NH"~+⮈?qzWh {Ƙ=&3܂ SRBe-i {/KocXo6rѳwjOهT~$~8"P0v`{ym6N\K&+J4a*?Q]J܀ܣS7O OjۉBD%'wvه5&Zpe41) Y2qBpg+CcM)D֧[EwgQݼ)0}YDD"oxN ]82R2TX`ƥw :t VJ s:xfɻJw {O IOߋq5Ze|dz5fa1/QYL6}6p2ʮs~\J/'Y9 j㉆\iavT\rj(o@:&\9G5ԇJgc|p`CƸU%D%SdȂ~reR秽΄=G=JoFiNZ-bͥB)*%ID5*( /"(9kWkVKBZYX'ꞾU}ECGF^6=NnpM{{]1'C~l2D6JGFw/) 8MJa(es)i8jg!Z,N2d{}Aw^Z=j'[m?҉\?o;D{}!DJ٤t5% F}~rDZt2bK6D4NUԈeUnד>fACM½{AVJabRkƜ4hSPYq7[ 8k LrJ=5n`إ(l rOE6= @VroL-cS5yЛ_XNAR(%&>z@\8hO^Pt"xc. ;qX*&H9x]TA=a#JHdpy Z2=;%B@HxO|gNZE% <X5у(HD[F! ׳"~\/K(UFG"ϦyN'V_,TVA2UY\{n/<>|P`Y6KϪ{>ւ8'O={φL7eK}k8Ԟ_ k6I>FQ*$tAmS.s5Xiݳ$ }/H#\ Q.#:]Y=,tF@oBi 7f!@*sa_zU/2Ww$w=jDAs+I9 DE (~AąGƭk]1ry3p6ϋd6( {-l; S(zrq5gdV>߄65~?`\tUnf ٕgąiHyd:xu"E4h"[k;}԰v▌n}!_ @{2ǥO?SaWDگLp=(&; 25,fmYKNt2_4b!EʘK26$3=?9) KۍQc~SSl'ɭ Jh8!̔Q8Їgs|P*#/{ 4(ϰnk HTD:<4 ?h, dSڣV P#i A(aj,]1-71JȬ,KnCK(8CpUYK'Ҕ Y.G |MH Rhgؓ;p#ت'[s 9۞1n~\Rh+u C.Xc)ݾ7rVj_faXPI@By*E龪 uAeI>[+6r zld.bOuInH,i>qLFfij@d4%eb{6[R ZΛ1.;021U}L4<=C}Inc8 ;E;IPjD1IGtuKH+{q(OK5OVa3 )FAmpЗv;o$]Lg7 XHE"bԡU3rA"KoETSBVTCisr/Y5ClY÷ߠW)5#^hC|i)M{@|^BD'rK㠔Yʘl6$ SQ_b ϡNVvς_;49̃;f7T%J6DV!w YFϓ=?Se;1fg ̈˾5֮eIGsrRCOhY hnhе_ OTœ*tw630}PV̢HW*^64lAΞJ*-W32 /31 :G +j:{$YD[>'>(cٽ!L uN:5S,hȥM0zA\*oy&5R r$!w#bIJh@!إ* @=R(65"$V  D`o cuʠ L*50BKƂZO3k_Wp'Ip 6{mH"w[^/o͛ w@zUpi8Q/OդW7v2CSϩƇ-}ʑ(N p#d$UZȧ(6u*:#jB}A:~O.ŵÉP )SDNyY:x5n 4ߟ3]fϺRZ74-Ux4LRR{o0Ȩ`!u(//2W['TڢCFӒUMD2 .T<%n%+ 7׻PhWX[TZ6p Q\q6,a=ӪmuflH[,fdP WmNv^n<_93wD{v U!@_`x+-DfYb~ ]D>J@(ڃV+{ r^7 1-`NWN]oAC؈'V+8m8l(nFwe sϣBȖޜo}fmk|p|% ׻;HvNعdj.^XVvMA"FK׆>g-Zr29jn$ӈsnP1mf%U|RA49l+-)&1pE'Jy?V$v, \K@h#Kq8jؾw,(;K˃t(oːY 9&5oכvp'bX7Nr?543|)4.Y=Eڪ[i-.&IQ}&$x_>DR dQ~ߓfw#q+9K` W"dabadž=>j¶#`|\#ǘ"OZ7/cZ'zndB>KiNE}G0W?/K汿Z{ gDR$7CxOBljАxII>[CӨbyi@< 8^$roT= W(x0ڄtqvIE&Շkӯ,~NOb bq;+: u9W\(2ORCcF6+5(˫^+Ydޟʶ:rPh=UD+Ξ`VPxo PCl ܎MPMxodPU}0^.|if5ͫ`u3;8?IjF<_Lm:l]Vy!\M60|z. _'*tNJp@Qc+8nC@Ϙ5t &Vՠ 9qLoajXa:zJ.`:I>.'m/@絻bD"(R/h侥8w5剭,ˣ/my)s3فLYW@Cؕ}'[lP8dryn!h|O\1}d؍'hIL)G `&&_ &h] :LB(e6}<<ݧa*qU4vK 1x f?ھqPɲso(DHиĥ.4(`jDki Yt gB&ٽpc(Cx#E [M'^mL%q:ն6NSZS&>c%&o\;8ȫ,MjQ,/2DWbC,LNIǽBcK"jIg] wS ϕtRd+O%nuJlpJ (YmW7_ĉrxX_- cL9i1ʻr&YߧO*8qMmG9[Aܬ>8^{~$̄:)k3 .*uҘdHwD &$1;{9,e}D愧r "O/ksW6' Bn$|W6~=Ң7P+;-At.r7a)C崽 .`.j9% Ҥ6ry2S$jXiJߠY ;x)N!1Zv$i*ICPKU-vŸF+: BS*/Kȉ@]a-qCZf5U2w@GwZ~26ݾy%Ȼgx^ D^G0l5H߳cO ݣ)٤2FPB;anس)H6h+LЊٕhk9$|Åu茪-cidH5>Db2ִ5jDg`|iiK{K#^gs)pG’*a۹͖S2֜vlm;M:pJ_m$j Kp񂚎vZ&T+'#_?@W=g?Z@*Njѫ8/<ԏY'XΩ1kKA$y{Wvf'bJ}twW3gY/&z65չJ9Dޚ525i"@SB y閾0bfG]0 Y+6 Y30oDML]ڋO_AXʰ_ӡD; Z-v3-Ig ;'d}%6x)츏?T~F1qMd[vԬcog CdY?}]y@>TɢΦs#ևMKUxd |SkDA|n +BZ^A<[p?f»!Qj\5Q{"vr_Э ֯"3G$7N|w޼8Le5,KC; "{6 p ՟\p@ޮ{=dT,NǸ;Jh0^T z,K$h/$E b}=i7@"e6 l:&g2j]}0?9=#im t!ƙ @M ao=! ҇|$g2޸R\#A; JQlj~Nlv]$% v Nv8`r+~wzF Ę ]<6m=|o=cvqE~%sʱ3\9AoW g`)`;J=@6J TEdvILVI dkKuxMAE5iTnmcӊ"5$Пk4Xa/ Ѻ37ZGiV)"훃!lk[f`cGnZ>r7@LDR0}oj:5묊Cf>s)bGO2p04Wm<)㛞> jTNʲ;TV"p5PwQʙŘi`O+3΁@-=T]L{ oE2~3lɥ' у 9-˹{ J?7n ߖZ Wsp3Vbѕ|CFQi'ĭTST)G ] gi*GM$ԭ$j@4?pEkz.e_mӳ$bnt7#_Rհ/X̻K,3/JF*@~р9c;1DV{錻t^ f,lc- ŵZ :sqC룾d2? gGmsΎv)P`{. o0cQyC٭GX+ Ugb55ߋ>di|̷+.ܧ.tbtYv$g B7$GT`]lCIGuц12O=㩾jf~-EEL(+lFzgu]U':ojXsc\`9L`XnL *D73qRtC!fsI^XڽCcf!NsFZAn튒^Ƭ˗HK8 _tZeR#G:ˬ$JF+vrmʳLw8,k%&g2)&+# Yjrw.TzZzS BP^=ӲbMZ&ͦO( ^m19m: brdkE 檶Ƴ;´:4:$P7Cy*>0sIn7Ҹ?ʧ~Eo#֡|^hv1d?kecgҹD9ӏ "  +ȕh5uVvSW JJ]}18cd#g5s֛٣/b%+'ʒ=#w)''dyqx3`! #W(C0 ަiqW;t5_Ӧe)u"67\S D{f0$S\.X"kqI 9nEvd9hla>H>iMS}g1p7$`BKNHd鮭ϸؔrzj|r}r{!k~nlQr9Ȑ{oHSBJ1xvӠGƆ6ep+Z ?]tZCtS, )2 u zFR:ͯՈt҆ij@:oKI~c޸;l\x=GwǃP9BzF&v!\3>[ ͐{}kts3iu"ъd4RkgSFKL9)J^Oظe4YW"zM/-VX HidNF&w5pՌxcY H]IOκ]d@%b*Zng|oe&聊>l{^ڮ7CN6w6dAUnRٕ΄;B,>k_bğ =i!kܗQ Xw.5u ^7f`tOAH 'DFZex)LV˻]) (=>nM@7,ԒmZxV4$paT ˲DgILYvU[wg؃m'd?9PGI&OwVpz>K4ͥ'.A8jݝh|knP%ܤIp=6F.%{"X`:_@/"<\[)ڟ>rk(UP8dj#(9DǦXyދ2>yP 8Npks"R3.ӧ=Ϩ,;Ԅ`z\,I|JE8u9PMTqJ YRߌd7ve;i3?A#MŌ]0Kj?_  3fIwZR#%d.^+/unj\M9HC_D=zRM߬N XcN.ݫ;)tÔls!>yK9#qW1{9ys חsSDjG %P=wXHb9te>L~M`5$GM-w g q.;M 1K@6r=)A{Y)ێ u^jۥ/MB7Nib(9H n#d/&m@ICVht;)FI36nӆ`މ׉"_1z"od\d"%Eϩc7>B|a^3xRQ.L_emb"ցk@fKYLWOeSWӽl?+od%+v$R 7fȝ' YnM"EǺ ZF:S*jtJPESW(Qt0j՞80K!rtF[)QŜ`[%|Cp'Rfy$JL9${kQqE,ޏ:˳VA+T;-M_mʧ ATbLJc )R\NйEmb%S2FNϝn%gMcWY>qY^`t}fp[-d&s KP ?-;%Wbn-aƍÒ!0sD:\ ʫQ*W! o's@ V]Z{_ء<ǡh=cZ!z|ǐ :0ӏ*we+^AXͼ$"hDS 6Gv+C–>>FЁ%uCsi:>]7Տ,1R-ԣe4@NHS+'OJ9$> T3aK3C &;zSAr&>݂AKi}#3r;=*[2TZ;o_$*Yݏ$ e?1_+2/̨ѣ0c4|I8o=/ْ#& QͺvGSbl [.?l"Y#Y(U:,1.1^BW[<)D4%b_d#9 U$$kU/}MlCP8څ_R`uT&q5Aߦe=ƦFT̽FnkPakZ6mHv᧖71o lӺzӹ gLyA>HN?c*!o@#H(e+q)$Wpo=pqe__PnE&vSfd)$ǕCxTgTRRAdPQs`Ÿ݈#{Anp:w%WvEn0a,.j1VE9vBe䰘O!d'';VTKB^U7؟˝r{٥㷔j~k%m|p+7Lp%8H&(;=4]" 7TSh]}&jXh_` ~-x}P=/ckﴵ/*nXCeC&B}R[z,jiK{Sܵ&5e1S6UOd4>3`ehbynhTYd>n KO%FbB魦pIRyh&8O6;73¸GC%Z.UaLMЎ)#iTiRUä$Uՠa9ȇvvƼfLO Ƃ͝Pœ$`a5 Uwc/ɫEq vC$76.BhB!ʼÁvл8WIהir;䘁|g1zRu{ s-p|lR ;ŕ#gJ.usۏL.C77/5"Z,A6:w4I:0D`QEwt/M?=djLH߮[X0L-많 uҷUѻ Pga)eЈ~v#_`bleT]5zFL֢b|nPԵO1,,; d-LEvӼ?HKocwK 8g*{zmF@pVM+ ?1S8{aCALPZ\| s1Ӡ>ox%6 =#@h$u~.x;*ǿar6*5}5 8, @ojoxrF+ot2}^M"u!}#4z$kx>F4Rte*vOk4}!&" li)@𙋶Z9\HL1JUX 3=1 [j?F9omAgg{ xU]PV3*Ru\hT+8;='8uJ. E7= kC;=pA-hK hv_1$VoK O&||,hżkթNw >%7[œDx-ܲR9Lbeڄ:v*nʘ=mBCgղi<fL DOׯ K qn(3|"K h#(Y̅9aOWw9h 6W)4+~CĆۧ÷r\kY, S 3/@ ;=KYqО .9prn?k̪˼z^rdo _O36M9}\CTc/6ې&}Q_ƚop$4CCD$5_4~ [t}V?Sf**Fi)؄G NfS|BcᒹϙڀJz)L[p"a}d.|k~ @Y)WEᝓ}'1 ,s*^(97֛花:z?眜JMk4 E8("իqUzR*ܻ _:!cAEOBT3T,r~cmh(ÍbE%`YAF{V=`?@I |Tt]S۴E]oDxDV (#`sK+Wx54c .[r Vh_ s>hi|%5Xc @ԛ~a5_|hO2XP ™Jj }o"Y>3tyngYmh  ᮥHx'fp> Mׁ90o+$.fXgs\ 3F-A[B%4x#T h+ۛ(kiolT/ΤJZz ,C*UdJhRj.]l\r8х?aMj&S`= m!ZhNfw__m 1 1h,I MW՗lTоYtrLzj0yїC.2>0-mgd x<S1j`!rU14LwIXEvZgu=ao+( YHvmk+8*ȶJZُYkcRH&p.aqZáͩ[F7—[@^x3`L Ƈ,n\Z/yy"z LCȎAO*>E¶Rn*T5H:"ֱ#B̪IE$w<۾1 _T"n 2!|B, WpEy 4xu w0&}Y?_#ې𖸼iX(J'lZXw=”xr#H1cWyߨcNqxw37)LOPᅯYLNbX}@gY‘6c{2=[}y!+˃=:Z1D[8hPitŰL$>D>kڋ@Gcsb%zXU7P ŏ]@vQ4i WlZ@!ȿGo9GZ+ˁMD #{̞*.mO"$m9Fy8-ޕ3cjھQZ&aKiLh&F^PZpO%XM!SmAJG_QkX2m]?ScNlЏNVz2l#88/Sv6=ZVDcO8OC bMVd).G\HV[U7N@ p}$Me^[Ť\NЃLU <,[m}/dO=]P_qg;cA<${RMK'OC(gÒZS`f2۹"+(k_ß=-Y!.osJF*+ !e8$Y۵]|&L0zPN)qWŨ8lj\*Fa.-hQlmp)d5l>W^iRRlB棷k:};P08McY [^X{raER1+H&{OR욯:xAup5X}Œj|O!5Qg7?S'BȨ?Y<]( )Zf"q^֞=1iUDrw}TWx38UnnB@#NsQ8?˝lHϚAh* nƈ"eކcrnz'KD)>9V :I&?݀+/:DA$)B,'2tl :yv c2W\.oVh ڝο撂U©FOXೈ=x4,, bco6L941D.x\H^!rߟ[gN%+jZhfRf/#1B#o&Rx'=ˡS(1uCJRuLC+٠dg tdͿdwp4awWF4 dPd&&kZCn_Y&1$yú٣Kn TP2ؐb#ĂRMHBD 8 So . 3[ê+쁭^vq쳔Lfo7 % Yeʖus󜖪 e|gk}%eS1݂ٴVXii\jln +#[*#y8po!54z.h5c}BhB(3*#%M׆xE E&4湛niBR|˜HUmug)G؜<[|k)es^!eB{R5FvI5`fZ ,&ȞnS^ gY2#?:bկ]uQ_%}5ۊ}e3-ƏzК?REF/CL rBYH L+m[jnfD1_&b:;wD4슀/yJ~ ѶYQOGGZ7KNB"I#Vf)`Sl@핔sw[@|S~M3萾i_0A7(|zPyiwvsNcfAF҇_ N{2:j4Y0#ҬG$l~P䖭n5s{o(zJ}`(JGSybGX%=ju1DFKWOK{XbZ|mKto(rOc@ K7/IV[ݿ4.C8 ӯmVYz¥raxwk /3ohyvE_ a)X NT%ӭ#Kz8s0~{  `w"gn2PGWQ-lîO?'ނ1E [~+'E_$F{* p(l &mAi]2[ Oca=`gzaRT1~7˜ xrz=l% YE.)73A.8ltpf-̗ ׎5i]{}gZ 2D}u'Ի5$ E++T=}(;ؕWfo]`sҭM>0}gAŶ*fh5A·l-l9 iuFH:}:3bN\j,* sm?2ΦC9 9M}5nf/[R:Y(->Yw;RL5tf)ƙBs F SJP͆YLde1Bj.T7'0$I&QpLU^Y}!  TTהhR!,r;ȘQdi!R*6Zt& Ⱦavi1 Ok۹TCyٓm\eDTFNvzʍC|L%֮Y;F(G|";zO1/04&) =Qr|vτ~"s[#e@;Iȗ䋺i+"fDⅭBtYs8i7;nJfώ;OՋ2EW9y&K9LH٢juܜKIxrȾUr6AՊv9J^Q4rgYnjF&s1T} h\:Wbڄ_B0M|&.=lj%Nz=jL58f؞'0:Z!c;l6̧GPšQ"7q4'8$_#w:q3$仦,5^vG8dyQEaўd҄ bi5篚Svڮ4WRQ6 skx!}oĉ;M oEGK9\ (z-lQ9gq. uSES'NC:<#i+ٕԽ^@5ʀ/4o\nGZ,9.dk!S(G4COpgH nE+62ة:.8O!5T[TlZ** Ofm^c1wrp\NLD;}Ь*bؿzh5ߴХ˂uݳoB O=ػ%AjV^ _)CܡǸB~zz̬%וY}Df+˶%\Wԓ ^lgj5ܿ*ܗn`w`|{E^gߗADH)ER.bz$WcI) K-Y 3M[:߶B\Apxji̦sǖ&Xf:EҨ:F`;MnZ!h QS]i0H݀YnPDs@Ro)6R\F+#ea/l|{3drC3y -exPa \Z7I@77"7}e_!c)S},[Jsd˜x܇ckHzxX*IW#9Pb?LZsfYOs)9˷8)GYe=j~WCAQkC\+?t8~.܌I 0u#BM<ߋg?*?G-?2 ; x D 'NDw3bX= G kw=?RYyl0_Hyhd;> L鵿`kƏ.y諣 i7@ mhL|wlc %Ǒ$A_co֮ٱV;[hBc?ql:ol݃";[N POnF̦J/p$tva%yd{m+L}SF|,~X_+}> !E,rкQ3\-ĺn49HZs5p ,^f,-0Լλ_hz9=ZQ\f3l+'D1ݠjs0J6B,Vy•vr}i\ňCg&]5D="oH8#UXS恑*`iߕG2;Ƙod;ybX4w0/Ğ|?2<3d ">ce_ .|!0w<|J;KzY>[cј{0n]O>9H0s;qC';~,4)zkLwlYNRK\q5XeF:]iGj4KK{] HgМݷ9r jD]6ԤRi`Y֬,WqM`fOΧUm!te'J֔M,kkuMXX? &gʁdm|iٽ0Le~+^R"bt&+wgD+x=u=@_R1:RK?{[`4$m[xWq1Q;Iu+~GTs٧MA[Rg7i $8 W,T񃁏*@<'OrUf+\}0y%u|~`%9@%CS3B|Tgy=ݹx{VJg50y}` غ1q87Yܴ{ܡ"8aA_% [t'[ŌMX կZ/}itQ0v"``iD Gj C1FA"Z1"˕0%E1dm}1-1YުUF0G WS?ʹw(1f念srYd:* GR`ߌښ+O$Ph2 o0AI sa X罹GQJ6">>I"WH mc^5uOsh:x;oZEmn ! N3{saJh=Htvc^ AqrS9 LirF/ۥOJֳd6XSIMi$yTUW~6yZ&K\= _2 ^?]S:.O#%|ۮ&B&m%6Yx'e Ǐ'iP0Kpga: 0#^h}hcxV,tp)^BKG .0!䣏kMj (XF;ήT<SKM.Q|)&GdDd8؁ϠX6Lp:vEZm4PYzB w1 x')-#*0[ꏥ_J/MiJ HkJ@L(|"d\n^~z:yNcWzd/sEa%.'"Յı=KDM]DL ~O*66$jȒ;\6ݔw?v%KeЀcxnv>G^>}Aa4KW+K^UZV6}nh8r-kBtwGZ0ŃO #M9%faY5CY .*~y-`K,|K5 vA=xbS}rr 8YZ#5£Yh{[j:ڶuՆǑ!=7ۉ&n݄I8|`̪N^6;dIoO_%_e8,=FNnЮ!y6eǍ)*+צO|Eiu'I:[iҩˌ45zM#Py5 /1{AwNe6aK6Z¢"SSa%`Wڼ*,*cimP%Dy,ŋM GEch:70I/^T%KuyOEaĐ\ 7lsP5l6_+{EH묛y, fb R)%kA8:3l{5W8Kjz1]!' ikIBd8cI-Gw^)iڱ ~G>#!zIHZZM4lfbl;auJ*!+/ c@oa=Bk]SeMlB t^׫%zl;IaAN'y뿎ԖWT+rxg[ans{zK.ܼ+T6[ L!@)%Gj>W4_$0 {EBӜlP߄D !弉\[B0Pv56ө~W@aXf)}@8y8۴3AeA\g[={s@UjبU69ZkO&4RaM܇37s^CyKCO{?aB?'!!ڞs1`]ʔTQzb&Xx÷"`FvH&9Nbϴd2neZ$?2eRjex-H}a71t`~PN?_=ص0x^Ǘ̫ؤٖ'Yk" nRZYS*3&B ׯsqPݧuf˫ډOZī(P 2̼lGFMۨܚves;Z\VxbVS;TpUTf 9 ^ۺqY?ČB)"Me` SEóVx^Z8QACE\@Rqi)Ƶi lO1V@aPW 3WUC-u$]}LRuYWnFtl#p] dV5L헯+bh.MxfycyM?ڍy[^^mh]LFR)@2kn1a[.䲦PͦA+tpRGJԥAeTC,I0Bjn+f8MȉJ~+ pcr;3 \T@~WB ETCVqڔ">_cbVgomfX:Ə0߳-]UL_rCSL 9BJX*SIJIo(a2,kvƐSMr&pO?։^,2ݖ|C] <R*F C(zTBÙư5U&]ļ_dH}<4x^_) ~ g‚:,*Z[t诽؂p ]kS_Em-s QnY߾)j27Ԫ6IQȇ.`#Org9[J -ro׷m1) Ca4rh0f, Np*HĻTb#E4ӓԽ,?~,^e? Mg:NqZihiGp=dbr-<][-.OE/)b>.JW{%)됓ocS?έv`aȔF4)jQr,ִ̯怶fH Դ !H{ܰ_͏ڸCFWsiyfo1dʊᐉpI_ȂX[Sdw B@ n H)QN7a!G%ߋ'M53b\f*;Z V.~%72l,wy Q6^a#xU\G4@W28pyNcKz(Z`+(b:=THY~6!:װ'n 42RX>_$anT[&ET;Tf.M45؇a`~EH+5oY/dt^WbiYx@B:\#DkPqhߖVe;N)nx;U9E:(u\s3sYEHgjU?F+D[T}:~ `8U;nrj@)udn]MaSͱ+.P'O,N%zMzz SCqFNgf7X &N#$@O|sWB+{7>%3T/`b~*?Z\(]Gmm^,h]UPҺɫ9ht"Ӗ~z˧_09[NS9Å΀_ `dHLP*jQ{ 6!'5^ ^`T49ҖAS^_.4E%BW7i$rb<Y oaeaJ>zj`MWV2oqU]lN} nǭ'^ADKh|s]fsUnEcz`z]aūr;u[xx,#0UP%`.64Mظ>.!ܲFuӔ21gĺkG 0kK̼^% PsbjKBf10Y"tJwuxJi ~R}dwV;N)w 69bqSt˄rcp'7?Gi_TjqFM@q&!F5jHGFHG03_j=ktJ̻W$u9RՕ"\g-%:R;/Fr!Pv7)aoH,SeO]Ǹ8vf?atR*-%Oy2TDN[KfI`1ә gwPYB NZ݀33cwkl]d4>?˱ 3xC 5թ Nĸ-o(ϚqGeĕ)p;BM1%0buƓ[1u\E! W3[-0aAI`NOOr~,=AO&.zhoM5j{G1]&7dQGG#eHQL,2Z+TR+㲱WMq_SH,[$=ov!bM, 9\ ey'Z,} q;F|T6OÐe=_&$rq( ā ӂWϠPS1ȟ‚O{6GU ]3I^r!f#gA?mqS⛔:,ٿ.f}I<( ^bLݗe I#j 㹓Pr6-2G,P);id}-%1st".HC?!Bw(!Kd,:@j~WN\Rtjm2r%-gmg+P f$oq7UެBȣ&rC>^W𣖅's>3~WMC>jz):\z)gK&vfk% ^}k p_*w̕Y;$#) 1 |(0RzMc<'`Y/{6Wra&9_c 鑣[U/zr=B|>7Hi |P!oV[8` 7MUJV`qbFu'˕u/^ <~(F NbYVp{<+ ?OtO%sf~ :{[ĜF 3Xoض:-eqb-y۪+%bt}+A՚Yp-ZS##P 9Sl׵Jn'1#NZf7 MPCxHʳ?Z/P(ra2#Rr Cen*QG5CL+2?zS(X55\{ķ8$l28 1^s#??utdutwGXefo8)D$s3(̈n̟rɦ pTmD9B'A\B#|B&vzg$֕Wlq7GkSE:cU^OT2=2Xye8cǎ,!¨ "łB ~qSzRf]!j8yU/Ƃ.B1Hex}dKq0U(r5\N2`|LLI桘88ˎ"IFFu.hr Bip=~<<%7{β!dlmaKOfFvx58$pfe~v[ lR1pDA ዾ qz[l`))C*)r1Ϋ 3ȧi]/dUҔq19ݾhuc_SV19Dc%)٧-uޣ>J/ fjoh= VK$:7YL,WEl,xҡ,yLݝZE77B>zeN XjO_'jUaUtI<"*5HGm܆gH>tґ)Pi ؞\qHhh981WsѬ-?oZ#O)5MO(H(|~0s1Sz`gV1< 1^^θ9O>w h)18쳃MbP!ihbrb_A'f1xH &ɨrUu OHB#Eh\t. A{ {!Yb{#K,AŖ}n[I -)DAM +gRagMjAs+l⾤|[69B(.%`^wK- W숱!#R «FpZuue&A>R~&_W 5HGX)k 0xm3kwPܛfq?qv1I8$5ꖰ=1ؙ \˭a #h: )? w e5oF_R7:.OtyCK ܡdx(\Rddu)hNdaLlF*mM:&*l.x'{"!T"$Qx$rtѰZ(ԻIUK`l"^-)uN{|(c&cQ}e2RȰik+A4AUmL%ץ2S_v`ŤeŧM\"/"Z4} z;Y۟EvՁXՂBh\̬W%\ϗe@$߫'`t^{n iD`C}<%'B_5M~Țp|Q["|k֪mڍfZE G߲ ĀPb*a*&7Itlr]5fp3ATkQDbpLguԏ&B]V+fmH@Eʉul);u|H&%ـ4VM_\8}>ѳ!1 |sܮvEI1~s3TC}RMMg㑲H,,IU~iI=@WBܜ.s§yxfX˘eNޙ2B.Lk(`=-PIW ~t~KvQ90J e-*t?K_=[ZǨE{|:Nj1rX$BTzz=4]~y!"l fWϹgaX)Œ~ $y Ȇ`-E3/TaSQ'!g;#!Vi)$,A@|JwIʈ:h?3mWveFp[U|.$Ɛ^Cd/QldPdZaHFE9~)?N Ń [T<dk6z5t {!5_CV5_`/N9jx43q(a]u@ ܽ3{"KXA }=% {u" }}dnp{p<>5rzf$whi͑C ۰!跑$$A"woӠR!N~AX%.cX3W2ec~5QMh$,;P-͗RN}<1v3J툖K}#>tiV֐(sw&;*⥉_Z?}6K|o*奌s!g3Zon~kJ:Oup`l~7!|G!{ՑYRI}ŷ8Q5oCkWB9+dFIv77mA:bTx`zfFϤQSX0SqşKP.)ި'1!&k]#nq|[e>rRɽgb'r SM{tz/,z麳g%wT\:!,[z>%<т2|%B35mшU{k)]H2,w+hJaʭ.gWU0TV745' ^$ߟ+Z)-6Nl?9KwI.HL" '{]NC_0Qdd UNU;\.#c~{ghQP43='*b[1_z nCƛ-}rƬlm)jtz4 _,~V*`:E/ƠA,x:E*3oz&ɿ_%M\(TD!`"V6 / %\FKt/QLۻKj]Ym7H%ߊ~AR6aqF EOR~`5 1AʏxWgoVd+/cqZ+&,S<#/#vx/C@XZf5>@^& M *dMGz_:*@ Mm<*%jc gkTn !/R/) "\mGT#µ`o3s"&=iDVXIpj”$n;@4-TBBg @'\4TYa5kӾZ sV4f#\ȺTS~{S%tv'9i:}s[ wp2K94Jͳ -B c&Y@х!.\=QZUacXjZ2o[mgyqǞC(\7@y?B 1^R/圕CU1:yҥ:`#D."*[:{5~]#r95&xwh.NKžnm1N" M녞Ǘzk΂4,&~y}<XZKcn_,]P&]NXeN0n~;A$XGY*St?Һ@7 3= < ya#-1G3*cpU2:m,7+% Ъ;xiC0@EzxdxQ|;@b0^37\E8OD{F Kgd(GL3!V(ZQ }k`2Z]+?k^?iZCBlm)!J%HCX{F?d_k[J FI KhYҨ( _,m(,W_̂jW2kA\}#NukRrgǺr u-K}ℤ[dDm'jb톜vg?l< uno,ݱL] dցYu`1WR.үT(̸3aA<)˹.PMf}cln'+L=PD<PDI"A]+0l(G.<'Erڟyw-Nl &5+hPl(>$’ NL@tаrdUtX;NvXlԇ~LE,1~'Ɇ.NLc`qkY L8j`,햴rʳbw=9I=hb=q%Ӏ^ߋIBGyB{Jp VD^UʮN9# T3|ĀVE H 1:aw?.OzKV iQgneMP>&&i} ZK:n6;$3T+oRSQV4k(QJV"ku]]8"$tɐmi'Jg1f>L+3tdnԸssZx)Aw?P ^}6AupUEy>ck; YӤaŖbZE/XA?D^a}HQ3,5M>$c&<{h{ N$7R>X}Xc.܌6jߒr0 n >t6,ّKd'.o4Q65CZ}66# ժ.l2-ӞO0k Ѓݏ$IK&#?`Zp5)$ 9s$R7>u w5 (ԛNEWmdjeOJ:Gq/p[}ć})R5H>a` xĐ <JʚSEqh4FKn=Xx;tIw PJXYA3H0fjhq|;`2EA+ڄz2l|^бG12ivK}":vȞdíރQ1vHKߤSK#9LiF}exGS-o"H bsZo4^=hPDшgzJSր=#LR/1UͲ Tr98B ]~5 }8PWN3nLfleE'Y6|zP^}=N[d8vD);V*A}*z806  ThG&悐JbX֢֬wbv4o*_Czq-X_5WHs< bk+m2:L}+dN'zUв̪tY 9uL$l)x)NLJ%z nʃOӒWe[?R!"FGh2jO ZF6p09܌SvZ'HVʘ: r;> g5RɁ dшۂuT3\ORM [ͬRmڽ8C@)H ٜ%&-:bցI&,SF'8nX+?PVVs\bM%`WmPhdR5R^u"7>F"5ӣw`1éΟ>'tõ{KcygFȃh/ tW-UpB TUW{V"?| 0N -GRZiBkl91,/IiBɉ_T˓s(:&GޢkrT\b^$V&;[( 8Q 嶑wP^`\UZytD9ROsfPl()3.bb<1e< M" 04sXNU!(  ZcPKQ6kUk]A|vC[;ZIۤ39"hX؛q9AcO$[4ȢdhkUC(o䄇-фS"V?jZgPXs[Պu(Ǵ"ĭ䔬MS8]VIČxR'=''-:mtt|M> ./n!5M|Bwo[0̠h͓x` :ѷD4!f=;>KW/.khљ2P;:4SeR "SZiRqz.P>+ S֒mIw^6v$iSiќQÌW?l(\g~|Cp\ˤƪx$=y'+ަ>mD)2mUM&qX ѥݦr3e=33Ͷ*0mӖF,\%LHe&7/qT92B乹W%FVO\TU 8[J[n-EK*~ ͣ;LUˡ~E{>`z%IV"vdH|Q4k,H1,;Q(w}muP=@菇Tߗ:fZk(;bK?˫'7_҄[R옯P;5;rȽ5I X[R;Xo I>9nRH｀$sk17ꗭr|{`A"_1c4*VwD$(P+q_p{*Jw*ɘPjxyÀ^ DYiuBV}g~ ҄CYg/o2X囗pg}#)&w0Sv=Ǡ1cufZ59= j{5P>]k] Lgp'l[9QjŽb_8@앾M \NSɯh c]_6HS  qF.`'t2pNN-- :m7e&y)8;迹z5 i,|p., f:f˩v)eϿBxL)M8zo c:>ں1QPzfIPXȋ'uLCzP>4Lʅ[2Q%KI@nTX1YZ>` C^_X"ͷXzevL91esSѕ@%͖»`tR)]D.z ;7BD*~d7X\)(ʧe*<ިi/cU좬t!RO 0_,/LUn#T)VĘlM)̒|(V! ºK 埪19`"J /hvZޤDWc%4Cc7[DNz2d>np<Ы5_=4)FxqIBWCxwt[c $.yF1δutO@͚T  ;ԥL$bd ȗ rgDOanE)Q6c{TM )VR<$NL+Bc7Ma6| mz%]fղL[Z>8rPɳOZ:xH"KPOP!pDbY;ڗ.lRon|%[C߅N}N+T B%p-?1)ȥ~5aN02@Tx TciI!ix]bAOMrUh/<4]B| N{YO4XLߠ1 qA>z">XK#uzma|C`XXĂAf-s&ђۻ)Rr]%?8x{ےRx|nr(v~iӊb琚"G,xRZ>`:J`Q[UOwsoD/E1WYIkV%TNڐ^|>Ar#1c^NlQCl SeDcn@ζeAٵͬZ/h٭'`˲Xbn'L-b9׵h7*D|Dk$( ۈ8a}k#Aq2'ad 2̞V sN^]'rں}ZnfbU̙\E&.K g& -|-?@=i"Lo?$t真r֥Ηq7]*|åW.$;y4VI虩 LUQݖ.p!?=HCw(θm!:D4mٱx;B_g(FpѪTc6$E%'{A0b*oG9? Eܢ "1z R|7]{1a4'7*d 5-1H;0IJi` +*>cW'@%yU4u:2QULT'LbIT 2+ g ]%6pg0{bR[Ory:>7iB2;]-/xc[" 4ky^!K] "lc,_SlOq4S#V<6(N5FF7݋+u-/ui-~ߑL'~VӁnŨ!C>{>/"?ԩvRُb.,ZWM"&†43ef,vN1oO iu.zHgecc:,z!8n/LE$fZ^\E8lT! ]oaoUy >A'KP[it}B|aW} [oMx(0ݨʐ,%j wF 9|ʦ,m{o [\(S:Y3SqS=66P 6&%ǡc=i^)GcUM9Hf{{xB,(n*VQ֎NvZi+i' 4q\iAY>7bFs|KPA5eN~49f|vS;Y\&c++.k"H?lS ꤈O>7RUS֝FY^NJ1ձ:P5gAwW;RYJs@a%)",ٚ"f[sE\[bG5YL"3}(B޹I݋,Llۨq%s?|s֑|׺/$hۢf'b@'4lcyżd_4V,UQQ,:*gnyɮ99Fi8!0:CU1arLY5^o8SUYBV:+PkYeWtEup Z(\v+cO8A6YyKA=A|"CVHGèUT̶oѪߝ7qT߼Dsy#u}IKL4'2UXP.RcёC-iZp& i:bqR}p^Z׊6" ewI-QL^z*|$VBzQԂ7I=qMc-5 ػDӸ5FeP(E"\jΡ*qW3q H"z };Q/2NIpFݨܸ9C$}M !EJ=gG|[OIA- z{Q@ mh4\DލSQ`k"b'WUùj;#NqTe+nƸBm2WM.]U qD1HàUbkvMotzqQ<p{fAN i2M đ_Ɖp>!".Zv_J3ZFt46.P{)QŬGO==4c8u!!ąd #0Ji39 dl[o׃eMl 0ګXvVgϪzd5E*^Ѐꅬ필qM@XP_῿8;'49~媏 >9m456"!;q1JGT3q p>[`ΐh5 &A˻^#< ̏8DiQ+\=]tϷk Y>S,fҨVI*M*aBdteq Wr+fbXsAV(4[h_#ɤxl/dMQP\}x`R} ?T@d '^#issdW 0hK-u|%u6P’l[#.MNP\$%7=}y]y. ?ڍ̅a".Jmg5 X;PPW?&D[n)Іw} sSS9f kyeet;`ZТJXe,rPișGaX#2_>0S,HչUj+T(XQ!}՜{JB$aXꊕi5iC YQ"&ڝ.VgS#}T 5>QT"󽥎95fu=c?v#y>2zFK55y_T D nb3b7Rƈv$G}|Q?m8`B.*Q)_AKm\pV~<? n@LtE0Vlԭ{e bp1QAi}N>.w0QLs܈?Kgښ8 FTs:wp̔[ F'U>@HR1gg Z~{e:I/t5av]|b4\7"0LÖvgG KIZGG*b9+w(lˈ=']@uxvumMDy},6sf\xVmKscӊfkc&F%X}-&KCrW2XA]Ƌ"~BnSV@˿c *%HEd7>F*#B7ھ\Td}s<'7<ǐ C;#ʸ{sH  DS[5/hSـS8&#퇪H6+D jL9Ρfa !h%_Hԡk7k}g؁m>tZ*TH6Dl63RP$8]WR{9†;w&*xZ8"KٲR7I^P$ǹKfӨLi~m`;&ոr&(dr@{su;Jgy=q_liPn~LIL{YqZlg%wi㴤+`)p=aeJhN1|Lby 5//Ѭ@9Ol^_ bmCQJp9tj*&WΕ)Z+ƌctL˩̴e?HMʫi'KxZJ/ U1˹rdyBg5;?N r S5"e%uYC*ӚgKA~`\+cV2Il% w iq8t#3]'3- `KBqGi3N$_ #Q%NodvzOd;V¬J!b7_Bӫ#ռ_#FEe3yr]S@QvZ !t]i$Q e+(vT{MlӇ̴I @X7xcQc$֙2 IBO\x'MKopQ1(hY ъM#ۍj)`MѲzX/ B9z"N&+iLĈuz(? Qbe'Ӟt_pן`CmޜlTjID ɞ͐rֽ~Q(j}K͊nW ҧ1@ ;I~ABK1A)t{yqnةv\\Zm`8zdz"f #xӖsЬ/Hwr}PQנ-,L[( 8xZP6aTC`~(5 iu46ѫth9i!Ub`WMԔX "3%]FxVwlY8dϐ<>މ|K:" owOFj\b1~(Dǭ {|()!`ythgBe+/2#SZd0=!}zz ,Q;ldm˪(?:׷vg!& .R O*kJ.7J +bWSFH !X6`$ /Kn5p|ZeXF6[=)%[\,7=dHSd=σ %G'f wV!q'Ǝ:!_y}V4o@IN8I8 ]d ZKB߈ЄLƅ:[UsFz膗\HP皲Q3eJE4TDy |AY1,6A^:X3YK p^~=g̼4E ֺqGDw+9 fSz3%ξ8~;jf:-p(90l4`B\1 ni ̤ ,*S؂W(ܢb(=jL9(<*^E.kͶ-؏d'ݜc>5f]7 n$4&uH&4TfxJ ;|{X=bH)<Y8t/ʞ^7"G&NEoYL,![œ@dr =YRTݗH B':3[\Ci1^a׽G+WAкV\HJj/o!4s jӔ— XNsXml#pGJBY ycx=V7OrcNF<ńKf&.d1̭`?ug}9nDYo}Rdb=NgFEeᮈ%dȚ*oe`9v[5CПϭʿ'n~Dh;>56~Oy8VЩ!@jŔ8GP`j7jAHЗM2?n擿0>;uj=Y?\UᰉD9CQO]Я!=4FJ<=THj:b]SXnYƙC#ޠpɦcaeδjBdO/bɠz {ͪWxnU?/jRēaD(#%Kch"j)+C'^qi__=5r9w8 2<. b}爌īS&eb=l}%m,4)Rs02o]ӱu-α.Qzoc{E۬ F{}Yc.u4Ud>!=M#fu>T:?5OT4WY]2Yyu$ᯙ?/R]hI++}d8~<'`/ s<~,qe 3g)yNLʇ{_Əb: _2%wo6^b]0'PT|v7$UX ˕]caR]NJh3|[Dm=8Fc _ fh>R#I>nOHnyioz?LLguw:E4Mv'~Ї!VkfZE6yfl%=z R"]tŪXR^k* ~ @z?0n>iQ[Wž ӾHe#$pLk՟B8(%$¡>!?h͡oTyLvCe$f,v3C|ak,iM۲n, uZN7(U_؜&ce8V^z2Ӌ 8r ,산{@Gț`4zi78Ø0Y2%^p[m@ ܺN!HzPfe|߀S[8i7{HV0^݉+t&þ(+ܸo9ԝro偻Rپ"iomD!﫠g6e),hsZː6…R3'!8t1/*Sa] RR-&sStLf."՞c/qk?!z =[5](YZ,e\=T|0J*e*U_{s{.lo.(sY.<8)x2ȓޞ87̜Ch`=U:Y ',g dQGPz).up ƊQUD^!aI\0pM@rՋ֋zxQ_7ZjRj: pۮiWȱ%c>%=7(3 /Sƒ^d7Y90E,&.$5QW8<^]-*񙹐'^̜J攞7&D߄q$< >R`ހޅ<_'W::X̶̣bl̵X/8?ALkw`*dd|0DgT@ jP)t*o뵽jAǎlviX "t'Mb+ }Gy#0yؕV`Y%wH-+P`Q Q᳽(?V)j-p%yfsmTskϓn@9Wu(z/-K3XMJ9a3LGn8`MRo$dk)Ӧ# 9#gq4[ 0M|S Y3Z'uD0`\#<3ȑ̙Չt0)E9MaTZ>;Q;N Z?Y*zH\n+` (׳wxnD~_԰x (;=KmxςCdx ɉ8YoPL" !zD`x(JZVh[34ZcJ\! ^>Zk!1 ¸51I_530dZDSlQKg $G0#jHA(eyuyTs<|^'24WoiT?nB-ڳcΣN"$]d㊈qڙq^l=ςmZ-;K D&p#I`'̳8jOHkj&/}C8CSl%w:hJJl&nG+}џ=ta HHc9\4؎$8V|F P773(/yi'gr-:l!  $6/< Ӓ#\g~YMxSl^7OG]dQ-y7#۞4~Tk\|éi aC폁5D/(H;HҶ黝A97!0θq^ T@3`=Rj} R)EXM|Ao+YazCRհ+y~V?7XOE4ԺW0ԑtDpMAs{\GEit(ϐ Π9Aכ\ !z 2p[E0`k7j_(A osBBj+3e+2ip]*1%\LE_c"Jm;&%L$7 򃵙V״hi XmaV5֥嬏;0)xHYNPm|vs]ftLA\-NγABꉌ͂t-0KCqwz:ުtZ'{gۼ܄ߚY/юU|}˧<`0O?yX$NWm%8f`KwBǗYûCeߌ.k8Rf`]:omɾukh/mhK+5O4g B kfd}ς9Qw ĀA7s%J& dsGdS]/nmP{Z?TXUͪmӡgЦ) #R?9g; Eq*gkR?̪ eRس3@qb-5׌XF#`tb!|}h#q쿑Tk:9p1N/FDPHҽ̈ kY 0j>qAzW } KƱipR) (])-*ir{Ӽd}Hr+D=M>xڝU΢SvGM-4D A]$@{fmƓ!I,3QstX_d{P% F0@M4 (_?UFZmMyz\$;\I~iek^@3=.RpHOe`Fĺ>-):%K[΃eˣcU2n{6gI:~%=NJ MXU|!SB%839OUYQQXOc~{VEԂ !؀a׾ m$OmŃdK*5Ǟ\a2@W5JRp| H8M[bW>[?w:KZ>3'6(S[Enu}~bo\%F>0m/V*E;Ccϓ{S^`b?I sPs;e5bzś_uJP(GnVE'ƌYMztĀ-Hᇠm?GE*"솣xbǢIm&բ~Ԏ;ty*Om QrG^gږJyܖ59ŃW߁|Z!xR2ᇃ4$n;vIK8>wK7S*P F?ÑhZ{F|ót(?{͠.Y.Fv誎~ bM@Aɂ3?Z;Cݥ_#ot[1DfGhnStu{.jl +KSV ٕfzIkw>O廫|ߌd7j-#evYNš~? qo$%'W@/G$EXIgLaBoҎDmuRbBA}S&~h:BnP8H\fV , &r/{2.Yd2n<1fK,0T!Er[':G%|CV4 +`. VxltNn]7wAW=L/IKJKm /Jj)@R{7 !d 'RFqܘ#:zGK @& sQi~ȣ {d1xi^r"4dc>U4}?A0uyԌ6[kْڍ\7Sᑷ6FfR}=8^gkJ!3=:&eˋ KeYKx\v=jg-M{d^hƒ4XmYzJ;!YWVߪB,Yte:WNь|oۑ'h2=k24N@0m,D Ëgnb޾+|ܳݦ23_i [L7h#3UXk(D/':5\`ILoBDðJ+N$(,f`!hW'ŝx UR>Cĺ}cNMaoQO&X'i6B'OoH l9432h^Ya Qq&6jТy \h_IqUӲ[#+ @lL+lxjL +}Vwij?^Vl Ģ ox = 0`p×,G 27g(L]P&tk=tʘ_`1*>8?%WVT@ ;LmP*u^@'hL^>UT#2.oq`&TC{,N:1{`cAnS$ k6$GK%8q9۶&)wd$hP82Ε)v.ee!NLwx3lhK>`J_HʉG5~SGy#!Xlf[!/ <(/ܓd l5)q>bBĞ_`nh¶Du2+=K'O@~Xi [r??VRC@"%#ICmaWgKimHFdd}הP"-zwSk5ZWYcw7YitiB5X9bELՓ,!1Ƅv=DrmSDv.Dڻ3!]GCq0"jb.Ob',t~wɥ̢>`EI݄pEo ]Z)/ҕ6 /uxlV]xr!Hud,{l[Idh WLũ{*돳l bq={KXutxX>al"e8an)Jд+5̶dk f^rw6ҁ] f`T J"bMЄnOoN8R_iØ;8tzK Ո&_lrPI 3$.uߔaAxKvi0޶3KQEh b`fYv; 랡ڞ,&0z_!V2VAw Z-Ic,>(ᶓ0;vQJ>B6o*;>|QNh_J#>]? n鈪(1l w";g`bf4Q{ߟ;|.PCfw{p9!<9G2 z6o-dwǽ]v@C+L341llO]}Lv#1=dyF%ck6BДy1~)n eݱZnfoH8 sA }P;x"55j7aApznɩ\S9$r_*b>G' 'b!}# o1;sQw/ѻU>AX 9ì?w\;5. \&+n95Hp-)c u>M)bA5\5ǝpvrw!'hXkUC1-Ӏئ6iec۽E"0dKA*Zu0>2 4#Ĩ{UncyeZO|EJNJ壈6{q1av#{>6qceBaTp\4P͡ye,' he{"iBהCBU5qe v>-=gS <(Gp2ykM1+Hn9L84(_[{cg3GdEԊ]L!>sNTJ9.M89iIK#MX\X 3\N s{~l;xۡތ<-KX,]tɕ-4N΋ qDH3Cbp y!7>LӃͅb!,v~=Q(7ADTnkJ !;Vxl_*ݲvU)vGwk@¡AD_OuN0ȷ@ihV}'3] LE9Ӈ}c-pCo? %aԧ\)` c˽~(pbqUHqX%!,R&3U|>J[%ٮѤҲ~A~̱*;s7Pd"Q5'.Yr%#].G'$EhhtEmJ47ƥQ]U62"BZ'*A vx['JSQHm4k3d낔8FHm^sɿqGauLH܎nދC/Blgˇ<G_Ȣ[iˠ \zc]T6z{{_|_F̙j1 IzȺ&*㖮q@c&D5zw=KPqA>ŏx/e1 ]OqiL[-+LJa]p?%|bGHo(mC+P ~kcf4onE\_$;s5@R]nit|*p$2d?^eO߂4@T;xvrk! e+;x9a˜>Rv̜IFڶoS q;f>dX AdSI@ژ5ǼdU2-գ*Oxҵ4P_gLyME 8kY{\kό罢kܾGYg͐0APX邭黚XKd˷0H9q}?˅]}∢>WA Emo:>3]ᕆ|~JZMEyE Hے:"\J!97{1H.P(mЊ))~+612t  j56+z;{2Ho9h _ŜLw{dhYE+48ri`޾#~5CCO*X6>2L?:`w؀vy{aD&oAxn)T3݇DZ =|4qp*|Dhx*ΛܠH@R\#Lur8}?tdhLnaMP';Y5xS`; ml 쩄jLI{qKM 2vW-dOWmi(~b|_, tmƩ6M>pːWR$1idl:2ݑWjS_PpYQʍt1a7Uk j?cE` w;c:j*:"Q̝ d }aAzFӔ 2[F2^In-\ rmztUA}jӑ]0ѴXVxC |Jh7 ޓn@zXg*j7!{=3̧lMIpNÛhf&H|u3vGLݷ(OƏƦQЧ r M8GNKkvT#J3./Ͽ\)7X}@ܙp aܼ7Jk`_G,ty]i"G C"MƲmj#=v`9 C_n1V dkqDs9A$۱ 4v+hFQH j f0J>`1kQTۍPwOܾB)u; gFj-I_Z\ s倾<^p7^k?\0l=.-Toy~[0Jװm#i <>]ІyF_R\vq/}jCj;Ba N%8#'R6 ԇ?|Bܨ,{7^a| 3d8 (Ju!rZd#]4"5WB˘z.O\u RӬt ӃY .,RH,&xC?TR)Eo8-cdt7F #cb^=~I 4&r JX\h5yH^ ī&.cS5- fT|::4w0 =M˄(M|4ppLa.H0GRgki׈ZOۡ[ϗĭirSwD=I[YXA2*O?!ͩ*EI+i(mi+ (QQ9aɼ6zv۵7# Ġ{ W:ݣގdi_P^Q`KW}{,e`DAa__o~btkGU<`ik^O$R[|B#:tsEwW]d'dfP&BHP_̍ ${dyHy̎:]?BW;91FR'|$7mىe Jonh@ Z<3Kc׉Ǫ|IL#*Ȳx"ɪ~Feip)O2RB?x!ƕNة}YhH$wE4 bKK K9L R(MSa];.ewC*ms qZb9 H'ήx|4I^k):cʍy4Qmj0 RVhoς.޲P8eRv.!v ׯjc;x> EC .t-AJdP**nDkfs˙U箇qZBjʗEHTg!xRgb B q*`$l| QFh*"ֿJJb߻:b3HhOx;htC.{0n'f_Φ5bp?+<_~x0qj@G(pb^͎EE,%./b#O^K.)}N4}ޱxf*Sv+9 * Ie ~Z֖c dpU|u9_v1L㺞A+H8̄L=CbD+Ӊ>G#{ #} O`!_YsWP"(YivrcYI{r>m^e 1Ax'd!RgP'7//3_?_8-f`؂-ZwҾoS ~] i415X; Aӂ(Y)=hßr5Z\1i-ɬVK 5{^K6+ kcN17e( {:\}9e*qr5/*ʃ}(N(/nפb[,82c $1=0KnB_Af4ٹ܇KrSnguhoc,LA=Wl!awO Ww2r:̮tsm>{ >݅yX o>s-$~yՇaN0D>+b oM/qKyҬ@K)R!yۙgQOR6/ɲ ȅ-` `A:G1Z㪲O"T j?Koh|miC&J HTNǝꂚ,-y'ڃpmE#F׼S%ؽh6YE'|yتU6}[HAi/VcK_FZci!-skQЎ!hzh~Z`hA(i&, ߁bQѫ*$3)ҳ=S(Z7[<3AV:Db;W@TP ֤!H$5x1'ALF<-G\j~)@mVCq0, ,AfeL6K=KZ4gԓ @ ]X܈ ,UN#Tam0Fo:mtJJXMv8gWH"BVbCi6u9=;/T /} {ʽ ď)}i~'cTCMѵ:ohχ6⤐crt=^<|Uu /R|bىءg? G<ߞy:.`'(OMTs+79Mv|Pak6~W>?~M! .׏'/c]0#Pp-3Fn!2AXIEH= &5,XeP 0͙ 폣^lsޟdӗ-uLP [*x*N'7c)8 忤uI9 ?`At~d̰ CXsefc}fFz$[i'Y>.0;npGbsFvȋ] Ep rp@4SDc̊WLC}7 7 M+?Mܹ,Y?ZeOI p6W$u`"#ڔC뎝؁=QlLBw^T0G8_.v04 rfz@ $ x)v9I^>/eSm,O$:46JD5\4n4u,[8VU}t4Ddd~8 AK(ՈJ;g#r o}llBݦ $wVxW% ˂^E2Biɕl3sôM2'2 ZsH'B# t/t;VSg^ίDpfo,ן; )-lj`-;9>M.Nl&R݂({2xUG- 0JI!w/n{8a@[felޥ7)XDK10ޚ񻧓Y Z3#C؅sQk|ޟ5%mUw(@!=)`/:uK~e >gv׽:Ћ_}gpybpgEmL9Dv^okuQRqH4'4w=;D%/RM!fKb3@G9ꈟȵ6ږ 0ɽ. ki- v 0~_7iV*00hpꬮ[p`"oCxs*Z3o7SDŏB>7ҫ+ #꧷4^X6gx9οM.A0$,=ZE+X ï!E\9Ϥի-Y]Bv JMwRD5:dLhfBQ#ѵu]v-L74AߊKŇ"3L%DK DaÍQ1X|<29", +ѱVu[-ZΣ䣍8$\Cff&BC@ڐb#FwOOɺ[.H740xLD*nk ͩuƁb.7W0G>.sj>y#b^ 63*ePyhH5W=n,0MMެS;dDXtȵk컀Xxlj*W[YlY%CVȋZoc/^8-1|Wz7yb@-;۵{GepGs௣>g,}[UD/'/>KbހbwOhO~ctzg$=nռ: $@@\lV6sɫo::\=&ƞ(DUgi׵9Sm zݵ#t5w!ԥ.dž;˶\y 337na8"˥sˡZX̃q$F;!K`'M?Dؠg6" >M͹4]]v(҃֊PC=>7<uY^ hRD٬nAwEF|'(Hm[7 r Y4vCvʐ"oGzcRHA0,SfWm:Q{o\tg Y6ʃ| )No נXFZBnxp`̍{& I>p1Z5oآa% "WnT'$b~`>^;{ |Dǃ`n r΍&[(NbJ7 f30^Uq>sԦ*#"適//}M&Myə529zR0j(z1:|6`~hBN2\!%^8u?pM)ɻ@M^XA JF- 8p?OsO|2ADBw?Y7PsS=Jw'",/U? )hEɺEmGguZ0iZZTk:7DN*Y ؾ~/6pd_Z;k`:s'utiDB8rfJ#`#qM..-XG~.L"hSĩMx/} 'qGq&"1u>>637O@6WOSHI##KcG}T]Yit,7A9غ 쉈X(x)X^Jb*fFS֛n7RQƋ{Mftڤߗ {? xަs#\ȬU]*x֦۲Hv0cR,Pj`1B6}F۲2# QAd!tgWw|wG->ړ%]7#u0\6ls=o"ObD# %}mhTokF\z׍vݬ`l\*&Z?N* jay}N'Xx)n/@[n ꢌuk@ڧ7˚IyV-+j%IkךG߰`i?OSNHJa&Ku,d/%mgĪy^HXlGyW %pfa46,\Y6Ȧ.f/2臘]bи8,Gр4a=EamFcD3ee$pɠx߮Iu΃%?MfgRlw*vYIc$YVIfzGR1$J;I.gM$ɣ7COjS%a(4qY7ov?PzPY(cu 05/&H, -AE|X0L A9_ֳ 3 .N<ٍ3ʿHY+j ]gG۳(9JtĖvt]UR||DD E\XMBϟ KBqKhp$RcR0<-y־OC> ǽu&>;s&U3RO&! LY?"ݬ>5Du8mk ]#Y5|;Y6yv< (!/Оظ\Fz`빡3L[|cn2u%fXbԴVwpTbff ^? J/fF 7bN'̩=I N֣))_ zhR`/'drjbv{y`Kql9ypSB \I`nZfbí:9iDt"^vw/&8X&!#f:쑁_oPC6 B[INb uF#s?׊*u@ ] BJVUenMVhQG YݴxEet8zȰ;/T:]}dec/Ꚅ > par^9Ћx/VSlU1th/sdu 6fcs"//~IE14RY/:"֧5X[#DN93T! 13 jL&d}G{ƍ.Wiȍrk;Ca)9O5Sɂmq)X-?۱ρsw&i Aa(|:.TӐ hmq>Z|ɻV:P\<DN1C\C*"^ 4" ñ K>P;d༬}U,8INwT? cHb]u]b˧N6αjwZOJSdrƾpj` 2Mr]R1AyMSJ涃7XKa.hnFF%O&?)h.ݡnq5(W_ F46حyC&ln5 3ϬB"ȖϜoc~mT.C nb+\/qߧJ M,PW.%XB7E7cÊfP )8Īu^PtVX}dH: %Z_jΤf) VNBT.m] o vC4;0yx,w_3^DkmSYada0eږ5x7E[&ِM2w M#$ E w8tf:b3̀81GY4ьkwmXz*CM.A}w"&6ީ̈́ =䌏L$Vv {ח]!!c3:m o xD:iUPyPH;ʛ* 9$KXբ{6]K(J[P6q>ͪaͅi;0ceȚEP02l{~Uڏ:uضbߣj\Z=[&kmn"KR>8& Hɏ7)!\(,ohށ>SQkYKt8 Zp?c,#i_[ Hiș\Z(pBrИ']KLJ&#ۛ+A&H|&iO Z xKU;8ט]66~.e0 y|7A(V31w?Z +XM'+ NBiSz(S_K[k]0bKz\or` ;}<}Z;_g _.r`߫N7{XWQN``a7;cfr=ԔNHӢGe"vpmr@izĊgXaP) D*gdL<G/6N0 hJLsG+R3"K)"P=vAY(0n;&T=C=6zdض4la6?{'$ } GbRRf%" mk675Wat2ioN@`sq^{2Ӫ0]*dmXwX%![$MHS~d/r  [RՁB=&T3$0 a63Zt[oFrb̘QU O0`R҃{ ]j- 8<ǹ 縒M!0aY'DG&ˌ:XEB`YQabo?䎇q(fOB&BZg1570= ՊD!8>#&QVrPRo\ (5B Th_mgo8l=4o؏9 ε #]hIV_J_}˓DzyP֚+VˣYJ1N紟fE-' }ӅU շ5Od#>!5|T}_s:3"TQ²IF4Df)5aun-7ZBz^6 1gvk{+\^AD8 fGj nD9K+Iw7s߫ɳST(~+0 :Wt\u)Oo|q/O Ӱq9;y2)+ڔZ&?(}ҔƤAO3́G?%%v V(G$A:اv>rlX m=O.>Ctiw;TvzQ#+&^tws)je=ę](?d!3]=^98#(p5xkH1uQ\˪ZQ :1qدeJV%Iڣ`TԦ_+<ڭڄ ?rо. :r0[+UTl%busc/./BE. ͺ ^MK}<Yɂ=Ln,2zATʢ ˏ ^> ] 6b;zIՊ l%3imF}&t ټP[at,i}P2,l }|$b&?j&ILGw~#6IKeަRJa:XYQp i;k;id*tA ƶ悘=nUM)ˉA QMu'O(lufjbIEkp}N >,ǹl&cisnt"ez6dk^ދ89& 7a7rX=Y|v[$*#<|%3` %1E .~CIf Rjgnr<}׼, oD 2ݲtD(x](Ѽ2\#?/,&jʶLe?3L0z^CxMI5D> t*} V1"w撈î5HX֯rn>9XB+95[ڑ_)pb'jHe*S4K]^Դ,P6%SuGZ@q\<Ų!gpޓgWJ跡jsXNgT5a$$.ݮXT\CuOFN-Qmd` DGʈ(cqz/C#qvmLJ#W'0BI ]݌wLf!NOR3*41KJ8 5dަeG =Rc ͅ@bykћ(f3ai`@oe%HFhCHuOk 1T'08j61#1,?FϨlv]"uG{h~\ysC 1&H3S⸵%2pm70.>.IZY8:qSQP^u 'a~^9嶀M]#?-IIz>KpHv> n=ٺ/_"Ad=uE8;fnR(âǿl+&ű[x#&;]vs)0#f} [YIZG>sy ]ppIYkOi FfDd_C0iqȫ x9Ca eJje>%#/#bޡaiyb_X ?-ї83"0K=/gKs+̫s}n֕Mr /m^O>T '-(]D7.}7, 9ɒIq!!mNB. hd)zwrt4&^=kQ/(էd Sا>>| U{s9 ֜Z\JhT94NkOY%6I,0-;ժ kq^|2 42A^n/^d Iw-\YW[7J&ѭ6lbzbv3w!G[Ĝ@J .vNX8~-e)VͰS"ŢWW>.tDC6͉{#a„o2B0[SLNEzgx8ZWGs} XՐ! iL,a! rNyMX0 K6I)rF(j =MIs= *"Qu\nV ZxEK_+R3M 0 ~C.Z!xƝzY,|0N! &@;j@UyCyfN9r__/S\z[TۉmK ŷS#3|GwB*YAЦJ1!}/ЂI m%U yH:Ҧ\0p@g$R62;9qNl\܂S$$]uP>=X߰Ni $NxɀTvqshbC53$dەۜEc;_gr'v?g=fQK;v$ \铞`Z e@L 140PN!?@s1 e˯Ejfax$f )WJ[ohUAIw}uyZ6sDGrظ >`\kvĚ5 F:yoT(L =@dl*vTJRT% $Jiz5ֿXpF8fGT[ HKp--4 !)&lDidx UTX彘X(%V:%/jO-(]Wxݵc6'[CTAƴ="x]^?CkɖQWJ8)쌈ԉJļb6^[5>'`5'.%( VL6ycl˅5Ļ(ІjZ][_kRʬ޼sgYy| uKȪxZΔc~p\Z8Y>Q6Sb##9E+ʴ)e@6f;0J#zL?ˡD r<n wzZ;vr M-6|L zng-Q`b;3C!&KMa@!C_$ @mg%b0I2zNmV\cċIGrEjNR`vBq#RiQ~aF+!j , =Q:@PO% =|'awzv58]r!7 w?OvÊb{Ds8?ȗ'GQvZ 5j'cqBU ᰞ76 zOsfU{leXxڣ9wˢI`y3!<$Ex[{=ن:\V"'ًz%(ITuXr@k Ek:_j zG0tL'Y[^@kUW)z Lir<(TJCU5|ߨke8G50r)6 y7;LA X,HL0Xt'_iXkhuޘt1L rtSXG]:s4헩Yo5Rۯ4AÔU1wld75*󸝷O-Vrl;{#n^dQD0y[10j[kMcl)nBWC.ocSx׍I,̈DVh: UgR`ኼcM2׉3%H,.3fO6̧fy^ah3PsgR( Eh}\=3ŘJVFLLliS45e>].xЂԯt jH6_Q.0=b'h8%Y(c*_N̈́;pvN*ʒI300Tr/_+pNX5-}IY!>$=q.'Yik)WZ0Q7r;w 2eunLeZއ텀TA YuP,)8HgBQ6Ab,]fAZ)%Jl8 PSږ+YlL<{].) ʣT'.>.7nnc89U_]YXGHA0ǤYSN׃:N`sSb㣌 >$*O0G p#ёؖp4mK!FC-EX. Ls qhi`|v=4K.qj6;VR|?ToX0DC1 uL6O^)Խs$$}E=-d`J#E019Vr};'bzJF爤?_yPJεO0լlG5FH~mNU:ʔ:mkQ7HZMkYP *\t 0p5:GeRNd 0O~7`LbWo73rBH{B"saSŮxz~!tUWJ +MG6I f"Һsh=*iVQF2#a4 TcF,0셊>U e:&K~v' u3d1K~cW>_FtxOgC̾LQ}pTf^CoN30F}.x0>n.{(6k"? 웕M(͍lx҂K)Whȋs_Z2@cSiXI{Q rDz>Z~K[WC4BiMͤ>VLd& PP\sO`8l]{%YYBoVx];t*yPLߋDYh ⒢ʺ;o>{B>YhDHxܖb- 25 |,pF #[E @̳B^eh=SIԓ~,/`.B( ++Wɭt'yC0ʼD/aD/=wlDauֶlh5DbsaZ56ڪM!e'(di<&f!%z^"6+zTKdQU 17"i_JzNJX+{Ec: qi:BP>?28΃1j0)#c `77a}3~kп"B, K|E,Ǫx=VL6=U 6h-D&|Мe|'`Sj83ګ Axd `E r)wwȞ BS'\'Pqm' m󫈓0(b^GA`i3Vq<Φ nmL^Y_gC @6eco7t6%H=M՘H],')%0hn~W0)8X7%Q3 C P[?C h Y(l$I!W( Θ^Ӳd:frQkǃJ"r6}oT[F,)a]2ajKkHR/|xy<5}_A\/\k.t*ݍlĂ 3*t'Eѣ؊9RNYpo.nD08Ռ0vL߾<$|͸ }AH1!h@g&$nYC&` :rǧ_?#Gqc|TW7_FaGIʣ0X18^`Po#xf鞤$_B)}^[>&t ր BDg od_Z 7z*xZNW<- єZqW)NC-X}൵n[(YAp;Gqoo˼zLeVY>Bę-mS{!S`;ݘe#1adaPW) 4A>!IJʁJvOSԭ#sHeDstkǏo뷵Wo (lR2hl|D¬s'$z*ѶS\JuZ2ؤk\QTV>E.bb"C\Vr؟ uC<{X qoPscte6&@˫pd ' SEXkVɊh!_TmŮnoL. -YF HQ;=}T mUG"PL"@ce^0:'P&)}J dDx”5X94b-*[A8uRZH?E<+FXaivy {7;H+ls^h7KɁłP gcDw8q|"Hf'"]$٪?)8b[S!԰ݔM)$*߶^#A*? &hi4r9Fi ;UoỠϦwy<֢C >WW\(Oc\GCpdElN;A2<5FF~DQ։Fs\ cTB>2ݐz3f i,7Fֽ]Y,~K0iⱡEAdgiA?pVw@إ$ӓW[!3B?/}#Kmxo4@"zv+L{Gte1n,+}Pmu`kwXBŽ7E\E# 5&~D@v=ȁk1 DbDbuYO2$mR=o/P zhgp.%`G9a[0bI 9b8p olW}_p Yl>"qn G+B#zC6yl"]BM3-;;7<}7|kIA,r TXP<jߞ. ١7yˠ(.S./`H[}L&6n;0F㫏~@Xi,I~~KfQ'}^#-/'O׼E9[ĝ؂bk:Dɠ~Ő[C6b fp%jN,MuQKɯkoVlTzEPPyhJ7"$wH[߼Z9m%k oB#kxz;դ4;13ߍ/AY"a%GtW(8-oz뱻-1:(%|m|1.EQt*s7믤o]^B5*o2Y_Fl" g7M?he$FN?! agvŬw0.)7Mh[bb2ILy0>lY*@ P3-98!T&^F[0,yEy +? `/tqneǸ,zw`&)>׈eWTPRNx_t"^zpz$R!RޖcGre2TCXn %2l9T.dIR G;PB EV(o y%P?Y}g-ӥɠl.5Y6:Vdؙ*HIێe`}$&5Ǚ%0\ =&3Rѷe[Ckʑs"əIvU$әyV,6jF˳?@?0O װ&y+8̃Q'v+?A[kF)AI9A&}s(߿7W=+#:/iErz)'66*gVyuщcbٮ}ZdX$ٛzՑ^0p!\bF^ ) X?ʞ 2_e# e}xx{ r[j=;S 5ðr^uVXܫB̥s#YŔ #c4Ч^FǶ$.RnEEt~6pK|̛]<j?:`] ۨk`dFYFJ^Ns ꭶtT5@GC:t5ӯҍ!};Ing*>tS{֦si!#Nb7H@#_3=WPkH2 ~z|On pX6=ޤA2`᜶DA'.V-c?Iͤb\gZ"V2Ln09yX@s{&kD0hjmBz~MhKNLl^Bz#y8t1/S=kP;i(D̴ U`HDVFp1Ff/~mCuI\UxwIJTh. t霖ba#5! sU a_4G(R#_=k` Qh>*$wi[_Rbp_ibx̜\b^ +:f՞?;r q|DHD#؞"dDR! ) sv406 t;hq3&JrZ(7bOJ6,gV|r_&ڠzgcQ78/jLNX=;yja; K 23jͨI u}~-%b(,2L|FVۨ2#ϾZ*kzm#I,i^,?הhwIW7iסkB&$u VunUA gyS jC-Ğ ]/^unpzҼ .hws%CcHfY͍|ޡV|v$#_B. EM] \(%tX}06gC."3u?uR\LJD'ٙ[Le㢡ɫFT̡(d&CW>JKE" !Ff: ȕK+KFus 64HM+wÁ_ 韜 Zz7'%4XG6,/2Kْ X| 1->BvVs38,TcgK`oT==Y?_j3$uj+pmO}ضo/>@)Xv[X+eNU_:.mЬ &ZWerpX_}v-z̽sNOrGN8%_k"/Pa۳ QHy} ٌMj{#[ _H#qZ1zDG Ov)Uqo<0_3,K+G1[wį؎գ?>D![;1]#qoE|IقD`uNۤK\ծC0®:MSg~.l +bMHN3[Cxä/qLX\  -Ҳ,ւe[đ6wnh. ]׀&>^MKp`&gyMMU^] t%덑O#'~Ÿ#FǬ UrmcK.,FnFP}zό7!d(()t rPٳllk.aG5' gү`ƼJtc5%%`b&؉~r[`膢zo]n<6aӏjeN*Lv>}O;>jDu06":y9XO)k܎{ƹ{lnuVger~#3 0F=^[zR \Iu {F;?hC8&b [l+!I}`3vЋ_"l hY/7.e^%:Hb eJNlRv9xx}PheS&(6M;TXq4G6G*/.euڗ- ^A0IfPlVdФyϽU2j?Rw;2,5hxC YG.H 0vX=^].8)JF-[q-K2_eyLHtIwP_iFz툞ZR'0&4"EG)iimLayyN%*F*|zգ0cJj<y?b$+iVZSi-ƽJ8)Ɂa=ZOVK~x.v__t vQLe7*ч}Vo"Оoo,Âd%?myyX>,!l撌W~jJkCrW%2M``@avwa"zWL7F] =XvY`YHMD\ 'F̨ x !hP3!8}D0B>T!.l E2.ŗ}%G`MBG±Y8׫00h؞,_"_ rt7pX,v؋.ؓ͒ܟ:ʖ_)9)@~Cc77> TxjڞY=)گw--:ʉxlWbUbwi$umbV_E f.a:C5Ro8E0x+ tVF q|L.0iw7gp LXg5w%&Qz[4]ZG8y9O`TdVxRiZC $F(7>1ுfJt 8vPs&f_M{\@S90cٴq3^/&Lb!A^n Tej^">!kz`r팮ch!@J S|.%  >aoxue\`_*8 vG\2a4ɕ'TXh3(3|[#<-'T؋YȋÌ:dVmXJ//)&~i^j-{³%htՋ5kō»ۇ^E Lbe݄ֆS#j?淜⓾1kZގ\+ײjt);AB_: ^ex9ҍ1(p"͍GFd}WN/ P|[U+Uu!9h'e7d1~ xLl\uDy)7AQRTp ;tР '4DB˙Rћ5VlZ.$C0wOA{aq@s,{O3=L9hD?YˏL⃳<+fQ횄+S=3<_$OT؜E|崮T^$fG>{G0rll !~;5;XՂS]I3.v8@AG^$3tHJU;ӵwM[ںsz2~frfC u ˞J%gj0bI?hD 8MqjUYo "k6[𢬟>8q ˻tvbhUMZh6|%)EG [_t$|v&$o(9E<>q޵ [[HBlXXy]. gX?2_-DX\0(Ά ֤g:Uざ]e!Gٓko-=q'߉]"#}X`gOTb)+/5dJDZ,uhBn1n ]%gG]>m\%%])4rspSmUR:8S=rS(:_W<׿(O6-h?79y-ֽ,oZ䴤{3]&Zs/v}@X8M#77AmDm=W5ɕc/}Yw`*g碳Ɵ)cя dtml6GᥤT89W;?vMXH&qK*;,>lC}$0#AÛ&~6e}CO% nR&.~yXf?M%.( ޖj?=0d,$ncBBE]Sv|JH4H O"ZMF.{/J-کB魒WI,@7rz0h2{൵©θ1܋HEer X}f5)A<}.abiPN% 9m|}Jtf+J\؎ >՜4kVa`XfK=>;?'<-IjB'5KYs7WY,!9R;:^3P# ΐ2YLzw63TQy Jz#Gd3-qB9tȧ M~hK9?$g A?&fQz1$rfcdB,0JBy B:8o$;gHS߈>BNJ3 CE(˰p>mη+0gs}֎^(j}%>:Ī]33ɁQ{؇A~ 0p5*A׼2T>,:5n_OsO0?M; mDז<45٬sQEnZ9Ggbxi]@yDߍ:WH5^ WZ !`,{:AhfL Zt9,sFS˂CTtWnGNT77bh"y9/&U a}fn[㻻*t6QH5Ri-Kbn(Ȭ+`b':VϥS$ b`ffl\ioWEq1n:řώ|zmuZx칎)N t6G..HImZml{_6 *uWҡ<'a=SPic/֋xbjs7~DG; )լdc^DIgľbM.gvMy_OeUM^~l.1Xưnu576+v(Ne[xM@ԁJsg]QwOM+/A/ 3 7>2Q&l%Vϻ{ApP+['t2?eAyˍ&d-)Cjt y]SYQN(xv$)9]a wj5yc5>A ^ؠ~[#1yrqNQ!] 0ØP|ֱ螕g#n{ 0{Pk %sYiWZyCV~kX)yN6=ZA^'U}My^'OrN{Xk<)wi3xԸn|Hwۧ;(ß0*G۪Lke!"i ^\Xdqje$wUa㼫?:L2 :SkkiHSo7VL@07 7%@' %GMF:ּC1nem++[Z `_[d2ҹz,5 =,( JkrnEc0c0TlkL>+lI4@;! sܬIiO"ԇegr .Nr {Ÿ\{q@ioy6o~ex xP:a|K*t2-$o\2 ?{ӊaf/:ӂFmZ|Ѣ+.Lo@41ZW(1q׿Ff\^]I13ż:؋G?"mw2oWPOt;rcO5`p9L|L,K _N8!RŠbUn8>#_j;+jxyH-2r~mbr"v&_;!3NYe@+OɄ/UMFѱgad}1_F7şo(KAUU^ӎ <M+ CT*̆ijߛ H-L0)_<Ka#M4rc$ nRL; ͗@c~AgiMjeW]ôFҩI|AvUIvxhS9Jiz^͗D,+ֲC^GA}*OҬ сDO/@o]8$ٶyg{ 8g&?9* `&wk^DA)dyP45k,f(`s/SlN}_m{c)oR`Gh,!;ud/@iEz?t`rowƅ We yklm)oH>F:soWqp%?==UkGxӛL4;}(k'$wlojT:v+_3'Ww9Cy 0\k} qBbs 4 ]X#A\V1Fj^WsH#L:@2!E<δ< 9̄S #j/?S#Wj H_liFIV|.Izzט=+g^A5(2Dc8ȟ 7o60(՟r]%\Az %H|22,&7Cʿ cp R5-~Dmj4K8奀c[ n;g]jT8ꉞrjy'VHT`:ł2L!,'ĒT5y>#*:TR|/Q[9B6~g*Y..Ǥ0^92ٷjܪj)ooڤMDhku3xhP+`$poÁ#-6!R,50߆heqq}=qu esS IrwKˡ3cB{4yU y2 =@Un.qlbG\.w27[zjНrM?XX) LT{e/y#uZ=e'&upR.\H1*2R^Q+9yP*~iGֵǹ|\x!c-!mǚuZd`:, ʑAlz2MsSB nhf7zGhgDSwztPP!6N{|W4r9Wd2(/=bVzU ? BGR!X@LEPIRҡP& M+0,l0ޮYna%l]_2* &u2a. ڄ6մxˊ .> f5RMȝ@yC 5&𾝧wFA р- /ohۼgϼر)OI d5lG#شދ# )ꮓJIQȽJb 6J]Ȭ ,=[xGQ\Bڡ3A>#Ydx.oTCk@f{!ld Z4pyx?cUrp3~}3wgm6g:a70fHf3&4RG\>60{}JV qf-(FE 0ʃ|(2 w'Dʵq&X]"`G#2[R/ymau (ƄҺVX{}m=Cѓ5Cj!WǗ2G^iv&Yi+W Ӡ-<`w6N#35 ^ E HB<0ֵ̻Y Kt*mUF2AR v+qy<߾ Q8u= di0$islyD?jxv9]`lWm?v7RS)>'V/Tq=>>8Cݎ1x^_0˭a)O_W}dюDcWi|#寿P|f7W>9xqeH &5Z$ܵ pV 4l 5ɫ4^wԋ׉Yᦣij_u8@j>j;F⁛M* FM&G?-Xk\y+qdY <̿nxh)Qh)Y%+{T8@'(B^0l@C64ŅMWtɖ ]PgXyA?1.6.sh-tS, ^/t]W:fu^kߺCݨ#jN~ eVXl3O!6zG8} &q cRkqI,w*f)cCHwٵ&y|>018AiHRErґܽ߷I먏pPe8íOZ N.2 ˿Po>+MKEPə0>ᇍ~;"ⲛU\nFA:(׿Jզߤz3m[% kydq ʄM*Tf^êo-!k W9p54\:AN,S;æ^~DnR#~Nut't^,(7^rR|r?4P梮K#PͅI"di!؆NF H Ѫr ^B) OǺ䴎Vu( \QB} [+.* 2x:~":V \g4. (}ڗAA韶d"(qiKKfWzz]&\` je8W[_PkK;F;$OM _u'5&3`$TizM[~p!ϲy&x*!ky̬ Ut.4ERWBv\@0Q?㚿ֽ̿ +}:5?NW]VC4E܎%9ByqT,FͳZ{ZtDT!o+(ܬn/QҹQF7L[H ז.Zw . ʤ战e2L V߹H4Ԑ \pr~/]Qe&%ȶĞglJ"A ')38+b8i]zKՓUR j~"8 s (nvK-د/BPI6Bn.금clO*L(ZFB$w/͈_F'=:6t; 䋓,)tC|&BC1mFlfě|v:VAǂe~bo%IaQ:JyOLH͵%փlc6xR|t9SHW!`;vxǣ4"3^77'XVZVzG f\3 j?fcL끯.;ә7$gօ~{XF eQq )Ey=Zj-Ff~\`S@Eaau%uGpƪ 0K3BVad)}Vn*c֐?6~]A*34RREKӏW䖸円tܞNpC.c㻀BY qgAψ/'_+HU+ [iNsgTӘ4HeRq>) ̸c*&۩iؙްI9At6VG9˸I lUPG(t˝/= Ҵ?)<%,ML6X-8/Ug-6r(#M32yz{5==zDIyKqO}fƜZP+꨷=7-k|38sF7 fD}ƭ5xٕnLm暘J}4 rd ڼ.8X7Oˬf*=%uhj%­h#22B)3jAWeF&zvmR)ZZq:V=؊Y +x{ǟ3gAgυ$[f(` 'On3Fc̑<<9QB *&?sVÑ].dI?8MD!HO29v7!9ˀHyBsWMZ,+"Z?_vTwv|ZKK+t|GzfP7ʀUS  (ze*ү0!}#bmP̈́Z|Vܕ瘽W&4JYI[=;:L\7k4+6WGپ*mjy'0ӊ߷L~G"Q`^ls&5SD:'qg_4w˭29zgͬ@|/yn6@R2>4gE@O5EfU2 3L, 6k,fξjG Z}i%`GV#zֲOw [.ST(s#43 vAZF⑼8@5DJ;{44r)aDw~WTaV4郑#}әDT; (I o=f;6 $ܱ؄gEISlQ%bvwK)5 ZƯnv陔~Ըh^\~^] *tF,TXX.Ė_tYmĹDfT´Ϣcw.p8+oDŮ`& TNgS+,DxnBu`hH 6k" ei&}}Kԕ) 7rM{ш2m 2MMϭKn>o֥ SW!\jnbT%i!KAU=2lcY.3=l J)9? \MX[[;S~.ZÛ],Ca(5Dܛk&ԀYkY0b C,1=i%XʑhRd4Җy& O#ɬy5W^bLY7u_HfK[!u,lO-JWV9jY<;\p @5-OҢn0GZbZ& T ~r0SQc'9xXd Լojprgu&5b^jQ&[~EU?/|N+ד%Z~-C.ZGQlXoQd`׹Ύ(09hG)g͉>:#l mB@&:O),C҇ ) Pd 7nzz։҈ݮK@Y~ y5Ͻ \?MKuMڄɥtsc@͜%"؍=u' Or|?G W `h1ǻTNXLyκE7y~$6J#P#̠ɷT)2^cFrKW-BNuUIEK`cwp_Rkv>g6VUq.1]Pq0%hȖweEֵ̓y/P o挄ܓ&.UiRbၣ;E<)*a>25i?ׅKb|A-#eX=&i>ߗ5o=Y6Q T}+,D^Uϼ|QneϷ_g_wnf!dsWZK0&dC(hj!R En&COlv|ɩ앎 LK@ *u)Tt3] x&GF\- TJhxHL>TN FߘůۣƿmD=ʂ)La}DQ7iA*YlI3ŰlZ->Ιakf9oҌy? y/,W }CPO *ayvݳC>X*f3tep5,M]~+2=^gQ q:T5pf&qDDx FI4z >G",?T+`_ͬzV}qn>%#O7Qb>oR%HKh֥ҙ'T>ً/;~ehvÜhȖfX0WAgzI^L#2d#a8]5ɇaDRx/C'*#'¯jK!|HA,k%x @Jde eHp-u lG ZL.HVfhI59qaVJ3,ɐ졞$rVvmuQ ||I:'m_x'vb7XACD[N%U";oA{nOHw,>k'?#{G"a`9S_Wyw /D;e6o{ c_ kl(*{p]S"DBU}L }%Y-Ico>kpFC *cE|A,Ҵ9}G;C".>^*sasf>?+qMXV.X|Ӆ,Xc<~u ;W BҸUT^ [;\Qq{o ݾlt,X1z%ZCHA^7Z&'!}7K@| pz-z!V"趋* )ך{R`0;5*Қq`Il7~wpAN ^=o*g֪L׳s‰@30#JXbY5{S[5871<TqLb:.'mek~'u0.Ő/ڼD$_WLC|(g(I ӧB>o’ H.EN_ěLPz/&Sd;E ϩzvq'))T ]fu`  묽7Ae I}<qw9(=00]ŧ|=wJGςN&CR:檊S*N+BB^ 9?=Nond2MBeᢔ UZ_. {)3ip ggQP0K"cى_sXtjHQfPI+!27PX\GkaeIŐ;4R$#O}4 =ߗ *F+˵;^{du@<}+6.\╌\99SfqY;88l>qUڥ'rذ Rq"5[p]f Wzivrߧ2hf3Ͱ'6hD `)+L*])Cm:yEdFR~gZ/Bv r"I_\&t?uq"E Bx=X 9JKC["o f+JO f@ۤcۏ{xLW/VȬ{gAd\$a5qa0';Ԁ"xBEx <HyTgmvY$VU jOa0Oioij;Rsل&"![Rǜ 7Ley$=(߳O1iPWQe@2c(Tz(RXv Si%( 4wvJELHo;@}B 33FI`G: (u>_(AvMg䏱O.4yq#-''uLojW=x7_DIA{˶T8 fWwGݔYB;mNgn/0#z0yQ/|cz(=:`8p",>\)7kF𜚇Mf_ =9){Ff#hp4>D9/OqY0o%LX)t$zCf1H%cz! S)=sd,޸Gx'8 V({Q3KY&MV`d)]+x$GL_}!H7;~[.*8ꪬ `qsYt%WcbG>f0Fo=Ѵlu*tL%7 Pt!J$!ڤ*rBv|ρJzch9NX}7ǍHcRnҼ,89zڋ37a JIXN-!W`Ca %]YCSe{lX{Ҵ F6CbsͥI$o2̄ZGFq͠lD׈49L.$YOԣYwhZݨȱVBɘ'b5;Rz(jh 2z:CrE7h"=Ϸ*ALH $D;dVSu yE%\o"7* M8SY6AK o,rcK&c1Ug_A<XP9p[OOij1jm.5iBo)s '͜9Mt_ yMvZؼt!.U$;%7rd~:&)@f=INyoGkU{Hthz۲W,9 #_qMe E-PfϐJ*w}&-mEXv@gN7$R]V#'4{a?3XWLu,y2ͱ) A9_c0 ڞ o][XGxc$mk٭h:kmѣÈƖ5^9cR$Xu ՞TLI5qLn\26ZH"!bX(yvwK-6פzdjtzA VJcfWM]tnڝk$o a`l $,«~FW(Z> xvW`wS-'7vn0EW ,'{ 38.a)IN@N!S)})u7ɵ?4\tkPio[ZyM/?J Vp*$0zVm,iz ȥgBbLEsM-\vk\~Npotⷭ+!:G/yoVjnpJ{T>v4vC6x[׶gY!{3iiXws81]LW0 #i(=DatfErb|Y' PJ3:C#P6lMZ+͒Q-h,s<75P]y tԾE.aS^ <]g2a)Is6s03ʼOB*4:Xm '^q9`+`:"e7T;u Af0OEfe|A&(D_o #~18ڙv7a\`S^Q3u*Ņ'e]m!m%[/`kDn L4 ,%gL(jE:%phH r6VUo:P3d:0zEаmL%+\{k[,NFHFmYFoň:Kg1;tFi:t~> y\}]fm¯آ1(b פC6 i>.჆z d,3pSg$ g&J;x1|čRw)-!KlɐK~rT]"k;f}^WRN]Bf*4n붮xI] )̋3FOF4W kPpJ $:hanc0jM?2ʻHOCkCRh?+ iC%Y_3i>;%{`e S]&!X9>Dk+$>Oϗꦌ)v'}@BO Pwd9H. Z\XѠ ZcFJ@r=C6wJ[y"+VfE'xIքn(L!y -[=rHEJ@ߤU!t@ CΌز>ڀj >A^ܪ!AgDn) ;C<ѥ bCp<>7"L)X#8[I% 7 @<|oO*+o Ixdn8>Ί/sn+4Z8.g s,dsAhHζX3{ zj#XEh؜;ߚ#EEY>~˵`Ϗp. &/$w{L+V?!dY xRw) TوnkZلVEDgpov*S؅PBDWBw#aOhLzJZ=:\ \g iִJ&ɅSE/FU背f39b\dž~m@WvJy ](׼leĹy@ :54m];DЅ?{s!NNjO=jܦo-VԻyxBE&Tk j\npgr}v܄Tx_^gqe3smMNl;1>Qu c!}C5im{P=\p3 pMw9j-]^2.{_}' vbPG*ڛ.3CLQfDXަ0k* !K-Xb,ӏ@׏KaaPݖg8VR/XVXL3ߔzC5" t|u?qG{#&:X#JN_?\ > lŏfi5`Ye3WY#u|"y@TUByPZ͜; Cז4SL 6 x4yň34&_-xp (ӎCp=iOujB@#w= 3@7r!P>+.٤  i9[6iehqu>sx_b?(*f}d /n  \wR 'JD3; `G*zY{3ҾJ<jY>'uFc{m'-a =z @!K.;p HF a^u " a1>zAXXՑPCKjtsHơǒμ2~a+%~VT1BՌӖ@Moֲ"rrvUJZ%oWTRFyOTi}%('9l@ZR pѪuGYE8qjh۝{}Vny0ț0hk (mF9Nb=>Sl>e 篢o6 P݂ɞ/8 A tm:=׳fp0#2659SE=S´`GN d8n4iN !X(Iqbreh|=,2'C{P՞}>i ?V򥫥մx┇ iwfEP W dDFL<7cJWW;7X?S wMȧj珕fd [йXg( 5Dvf#h9ɴASlTIbL97QDUG" a@ZܢdoC 80J# k'c-k?5Np8G12٤*5@b Rɰ0:ԙ5&|r6}&T)#s^0A#Cxl|#Y b3rT駡4kd<Řs=q]횾*2φ_ļG*:"YZ:$UWlIR^6G⨚@ih YYfGwz8,f3r!@Z{86GJPi]Teþceke%<:辫(&C퐋(xj, \c'L3ir(4vO 3`Bz-XUXZ+.&Z#1ŽOQ%88ΚX7t[.#_HԡHL s39$LT M =ohv0MZt+;%8 $m~ZQ.Cb?pGEGץE CߐR{S`#GD Ldwfk5i3 Jzu FJ)\=qupkF`tm=y&юo*qFF R>ܦ'jRbcu [O;IZIMՓK{+R-JUݷ'q'v7)z<_xǶImcIJ]#%(\I_%gi]^ dqWqL-J5 UAc-9ĉhj|2 u]L؊1 `ٻ XEK_$M`?V8In}쾄vw+{z2Oc |ؘ#UHŒwΪEJLN0y t2y8i*_TX=B/k%6u΢;f%Θȥ-R0^(y5I+h<\y 05 c-A T޼<͡ %.}T|,^̊JDDk0FUE;+ΰ#SZG*-<\.uh!Aؘs "jiG ș1ݱMhۋ8% s?ٵP‰VarBvɴ¤҄k~k-z12 (4Y\#]|!I԰ԑK% ]kt lj{4|~)/]0na0fK j:z"1 +W:X潓a3>EZVHY9ss >?ig8/8s!&0aR%Q8 e36(ý!JtfmA,g%渘neRpmuZA]& JkUG$ȸCcV "qhj*\ E&Oɷ 嵱/>l29JAM'I8/C?OSOQ%2;shC֗ktV6OTlzHyAh]9GCnxh~XlSggFh`KRM_a2eQDd_]mZ t.J4,CѫX+#a[ZuA„9Μo6&煬+7I XJ~,V1GX}X9etm_LSd6ilx6EA> 25[W2|)5~]zΕ"&TȏSk*$ۈE#{OᰦJ ѵiDQ}tgSRk,ɱbj:::#h?M;ީֻ^bJœlEf!䅋6縅V5QkB]ujzK>s-[]aƶR>eTҷAKRۺ&p0zX0Ji3NC=/| mAVn2aT4Cf#?&AR)yÍ~ oZ$_pg{Ube=yDmmOָՙQ|7gyXOYw@J~1Nvь|u؆p葏^^yYV.BZ%rcD|1O9E\lrWO\EWBMRqe6-#0<'=@Ֆ jc e~$8,>OtA*/Β`Iۍs?߫"&zJ!!$VAGs2ߕm>G4$9gC̤Je6q?MBRt'j*N+~xYp0< UƜe~_$!ENI&3JJVGFg&o4NG!Zy峤C {GnM6%D|U0SӼ @n}ٯ6aIsHIwL<)( =#DXx|a.5dUC 4dݹL NÈE3Gh~]켳*/^yY=9 l'` 3xax>PC~ށCj ~9nd[%,ǁ#Y SR7HY{Cu/!L^1؊iGEFP\S:_OXy!S!jyHiX [>^.%H|(Fd攨 ] *+FTg0!V.o՝ctCRDf2(rVQX, ݭC|Rum:jauC"#W ;.=~u%50zP?eV^7 (Oc;6j0: BvfP.F8RNkc+rB#êWzYk'8vo%%0+sv g]5 (i!L4T"y5kYKnZ0:扌7aqأW@(c;HuVhVJ&|>x# A[؍a-VAn&+QH)( nl.`/HS!)n ~X6ɐ~ȋtG7b)C=,$5qi83™طj>[.TpeD)5ET#BEe^X Wy뱄D7݃.P8cWR}$I12tV2I}քrJ>gNB?Qd M1x܁EP=G>-i<ZMnu 0ruVn ֳrGGnͭ;MbXVӀ7Q^$_nYqE eOX;8='Z$S޴JJ)^a %obQ'm'1arbX$9]9#;bdHSB¤KdD e䏅ONjeCcMw:w.}2|hC!&lE!,zLWX[ƚ@ys"SaD<)>N1K~B8ײ2ZљZYٙ?H~z|NRz[TrgVa;vZb_]į-3l6""Hb; {:~YAw+e)n$Q2)yT|7JT#tgJ+Xk`%q/zp:{<#̵$sJs9 ҋ6{L::1"IiA#YyպY3jz7 |=PنCɣ?/;x;r,n!/_Ly #>*i|6; D= ˒{,kGugdNf"Em|דj|Y|Q,X[z6*[ iC3]uыI Yq="t(6a/K2z(&gZT 4̇Oe2T w~W.tG:C 7952a2KE4#J)ڐ ]j~ z-b"d>Jڬ01zuUmB> :(V(4E~R`w1?2Piw^ iƜk*MjZQξe$ R֔o$Z)z6X%jGB%3="$[PRe{jCo r` J0@X75P7R&!f.Is9z*\"=fYx 9 dSY \(R=i{ Lȫ,|8bP< "9!3wZYo{kȖf lbT2*xLЯȯEI+b@ (z|}gЁҚVejAl >ɼv8hLJD=K;k\E]v2[DPClm p]lffebxS&,emIaiUM F]@YY#=3&&Ǘ0FtKԩT]sY*-yszw~:Si ¬M a _u DL;c0K1N#aZ )-K _jAAKEMѳvDc$ d9_w|Oo$E@%!'6.o4! \ڦFYiJoʸl+Yա9퐔 6+~J==MnSM1m4Ga3APYtIbtyx򨤚%=f`lЈy'V/1FV| rD>Ͱ?tG6C3I5:;Bfi$zS)S!d5P_35N{Г+ҠZeONdۉe2CUy7g:Sq*L'x G2500^!ѐ3y.Lt(UVr R;NĿo~1Ɵ| R>p*4^_F#u!դTH#9-K <3J9nTf,6!R/7@Ѳk\\8U/E r}Xf1CCR?x[6 lK1׎[#3փ\ē24d'HTfd$dBHX43 i0Nr_2>yZ%~ }1 DV`!@Mʬ3]m]ULzmVEԳSvJeșr-5ڳ>T(sbߩ;j/^% /4Fr.!ÃH92pwW.u=]|P. ~{,[wmq bV*8GN4>^h#qt%0MtYȗ7E{L Z&&3ZA?d3ל7n^@Yi| <Gv{c:˨&M2S%ylunNAxx#֣kR.”7GeKB0`:QݽHm*yF՟tkߌ1v?[&!$}M}6K%~;2 :Pw'x7 c:s>d3jکQXKFu(Yai"#^R_ #-bhs fΓm%Iqaӿ#+J3hZxH1ARM0`}ÁF ˟y2+N%Uw2Zc.B:~'Q7 P-3"nPM|&l罅CèRr$QFnHK#L(YQ5x4]Xi^Vq_z.??$$|gd`J8{7Q^|+ZS3V`wD$B*W;\p// `@\ұ'iB"WBr;% M%ǹfQL\NOnS~WCVDAD&ENxZy:oEFڝNPPU ns 8x,G1t+M-bB7tIYr(l~ݱBXxi sn^c{a}mg4;rx4~UNI2 A=m)N-%G[& ]Y:&PऌRv>A[>PD͠<v3h>Ӱ|]YhMֿuV]U76. ,uE#rhX]qbwe%V [}#Z6{}c;y>s^=%0UI> ~}y`[:~l[ڦOo!=} gr8I ]f?Nfn9ܫ.Y fS W Hpj=-Sw-wƒy.;ڍ!f^98XNl*-:ʹZs#nӝZ^cUzK,AM%a洰m&PYTz;X+(g߃C h(Ѓ%OoeƧWpA6&E1̄-BEI8Gт&rIU6"ͫ;b]e{[N4暄't& ꒨j*>`pijdٞM6a/AM!<&H!%1̏9ueѰ(('- K 9uAVio-j"ٳ[t8o?7{(} (K>]apokB#ƫF`.u-+si\ B!#Eq繾ED*9g"XQAiUb`Nb1D>(<(g5>jFoFl>߀MII(r$#D'yyuI.XӻE1f89`a沖MB 5i2FR䆶{ $CC3ϮCo1^驕_dGY]!^5Xs]<e ͽ9>k!{'n*7S |<.7>vߥ@/)͞򟋠9fOn38!& ]V 5+Aڣ-xEF6zuڏdWE /GS7E ,&.狘uYGB@/ 2yb9/x,2o*|g9qgM[ф}MaeJJSc9gex%>EVV֝9xED>#y>g0d2905}qpq8|0qH{%?@L2ؒR}BO_aRŧK{Icѹ .ƭT!{E*:qdUJ|p^tyP5Xh_ڗPht~=AIH9P_ 0CZLwЕ.Ժֿ*N$;&=xtҤ0_%oN=W%?)zWF/LK}Kf}D'[>Z,?P)HP:NZ=5WCytgvI4# oj2$ϽVp3U(2U? ljtS߿a4CĊgZ#͈wEN{A1݅ώ.:\Ns)wdNn2N'g#20Y+UPw)],<4-RFo#؉*\g8G`De_!{>gGutlk~ rqg(q%WtY}Ƿ5wjk'hIE0Pzg$#|05m__(2O|x]jqYrzoKvҹ?@Q JK{`ۯjZy fݨ}Q F@޺e?Q}ׁ $aBG%- "va[Ol='musܴwnWsaϚw^xqۦXIRӋsK\컞`Z>ͲNSx5173Ik I~3..ВDK&~OYb؃x`xȆP}2`'_ۯůTŷ+U=(Y迥B=R[~W

T'-em0viwGlf-RTW[+Y@ b?dG-v!~sXCqiG9GrRtOqrKyP~K/ktHd HdcQNjH_Ӎ5i3ۜYlͅ(hsSCyxB1VQ_+a4&P&5~ ]hM1ZQ4br,5a~IOVmaZ@(.Kr]9Iٚ6ˠb 8,GQ 5bՌV)ehaCx?tLP=;ީ <2Ц0ܝٝBS>&S|1{$h)dC.8Z_O磕ϐ F_.U:mqVƶ<ˬe]Yqf3 d_!e`1;'x0XcgB%ʟg9Z5aLjr̆Ghb7kϞ{(\{s2Rmסmlg1NMS !:v'$FHgb)..B+gBA3a glc4q_j|-Nv|Q\yG[Oy:ĥu1ldB yLΊx=V-@* Wv8 3MZ=گ&ZS $ɄgˮeDzT1[rM2dIFkCC%ؓěC&\ON6Kkj1ٓ:aGE =<X⯬NjCu`?_ژ@cx*<!3zWCheWDRD8&<щq3y)Q ,t-΄Cܰ]Ѡ98@9f凿 'oZi(@^"mzJ%q&hfMD_ kMOԔ7̹tEspR*]9Mܸ_*k~1Rϕ`/l+bIz6VӶ$S1vmʹІ|%d]q(mdX*uOyjZ49wE_A]Ix/BwOh+lxK iL,-aVB ~^c}UuhI ҾИMm=Ofn9ijR?0GD!=!*aމّ ͺ)# ݤՁebI%$١hz6}g2ɝ-F:) .9 E&jKKGt`EiD['Z9}@oQ#r'x)a"IH<ϔT/O)׭âʚ؊|'lå޸R552 3tfa}4K {(3Mm}eKQVc9:yBf |Wo! HP^ɳx Oj:[$dmetPSNQkӘl'~9+ Ê=S jU4T\uuOX&:M;2u{vA(?)F~X64ڹFB8l=[%St^_2s\i_~"gXć;.r흐#fm>ъ4 K ='h'׆4&dW'Nld_>7[0fID& I ṾŢ%rST-jvpQ'戠I̸bǼcgd݋2TΉqnOx|RP07="ah@Ed'{oPcgg4z=hzn^os#k"dtf#nd4Ͳm`Ò%hWa)ջ1YAAE ,*Y/]493{ g:A}Qe.?vXK's.V *_*` t=treH'vVG0|lÔ2Z @|^-imylCu5jz^$OqǪzE?Τ7~bKFP+t`t\6z+ |2} sxIjhDM/ D%b6OmژWA@Xdth1-iViLL 2""ӛtE ,OK/{5dCnM>W@P ~=Q0IOe?}C3iŢݹ_Wrtgcə *` prvj*PwZUuRł$<ŷea4Ax7.:綣 >:=.?'

677{e߻}lcq 毤6,Åj/-osIX* ڱ0|Qސ ϑmh?۪i.fX径?$wnPfٮoU8o^P]󎜆 ! ƥ$xWo&!R M]]+GW=e+9N@MzY bcXGoˀ5)uQlYԐeyk]0FRC pejKDohUHѴsIˉ3s&,ق| |ЧnpW}ēX'J"Y/ǕEz;8YQ^=j(ZJ^q0{Ϗ1kWpJ$4X?`GK?b-ʰ 5BКA9x^Qo8T/<}_ p9^iA`F|VmqJtTD '\'5#܁[?HY3`ϊ^z!l*`#9 SPW ~k|&Y؈.ԗ't@D[ _ 6?B`Y"`֚n(Bw*g A*BaH[ڔYc'ޫD5[[\x!)Ze,۴G$0SY⫣ÑU?[ hPuQ-w Ab2 TBf_݌π!xXR#>ٛ2r=K뽡 f|Pl/҆ʔV'~NC4ZX}ML~5P|tݿ0F}:1ҳM1 ]:#!I/Ƣ(N U_-sD_GK̰JJ|WQDJJ=n4su?Gv HRsJ5"gzl}C.i l7G@ȨpGue0t#80 ?.,M[@ :T(6tND wDԂP$] y0]ќ+-LdtOXPCr-e֫D~ZS.*){^}yb3kWr I<d2r`2+g\2𡾇 2M,,ycAfOSƅD<עz*Xa% |,.j֩݀b sASuI&ǟ}[S8 H`z1ll4/$1(#l?NYMR^9)D2\gL,5=x PBW 9AOE'CS1E4^Ǹt_??SjXȏ Kؒm]i(4;t;Qd]Ι2 UgՆ""kEh,ǭw`8:Ҿ)碅N;M LfYZntNB)'*ePvc+2^ƃ,m/p\IMwY۟2,'-И;9fOçl.۷1Lk^Upxq?wYн*w'Vl/rhStTHo8ůu ̕ʘظi0^K i%0}3C+!pq+'"uF[C8dl7GB,X-)qN *}) 33Wi6_O>^.RB ̭ov@,_usI:#@JN1&,tPE6s)9GvgX`Z1in^ sӐ̤cK`\fԭ x L{VkgSUuvIQ\t\t7{šbũ{xBpC1ˑIRꕡ2 Wa7/m\:bwAI&4TV,Y_\TDQbׇQ/ &mQCŋéBG?cpyo_+@we#,+#7O]b;i6V&x) .tLzSdBUK\#buA}*FNW"etKmrF/F%.ogs|4#,!Ғd/X\m `ɏҥBJ4XͤqICTꇡDGk e~YxZ/ru\,f'+b3Ha lF% Y|Z\xcBhCa@D'BZpa{j›LIQ*`qQjF-?Wdbw-ZN z|_KHof+šX=H3H[φ(J12:߬`*68AMuҴWHbTn Tú{7zWe[0 4NX|<[;kPAY~>..qư.8`<Ow8kY /3Uq5W-Y˸)Ee(Ȇ3-~;N_FF5ifMA0=gʫZ=w(jEh*m&*nͤ- 2JnV&= ׁmv{$}a)r9D2yW!hq5$@ ߄(_Gw#[dmWRc@a@ +@k9_V'g).׻-ƀuK5K#q+>5{\mny@ѹ'yE[e TYaK&C)Oՙedx( },Q?[W!Rh:Vz%'č~(VYQ[oa3tT9B"SV46E{f5;/qv|ζD? xdkW:_bzՊYy5 #uf)az^< ‡`i%f39E+-R@)+זJVf0BEBߋboM:Y2 f팒xC .KgNy>Ff@qmv CV9Jr<<}A;+B+Ý / ЭRݪjn ?NqByHP?wfōBDed^Xf|D.>X"άiKgbLmeCčL[Q5$ChhLflW!,tvQ/Vz_3ܡ`[[Jzns_? p ^tXɯm0Un$&QkuS]2'|<~4 Hw3_8'gk?0%&kM",Bٔ ;8O"+O* gf0|zWC~;sEH"%dAﴍt}$ѮMM)Qxh@V i?zZuj_̖F!n2Xo#2sDw^8j9+e)I (=CJ?!\Ynm ɛyJ8mDg.hi)Gmi*yVj&5\ Nm &m"oAZc=d W=r>ejs/4 {5bԦGll\qۣgߓYuFnLR?_ Yrt:pV>U}vC6 ZG6]-!m!ͬ{Y=WXvc.dEkF`ij9?F3;mo>8 6֞3n"Ha#M8\~>ۉt A97^NUo>Vt2&ۂ#m+y7Bi-j+^ĩw-f<׳I|iAa'/wJ\UtR^S*Y& i+ĒGt( ABHߚ3u?NjAhn}R$f" q=u䁚(\ :=cI4o1{O$jKWesּ+g J^?K8S>Jˡw#{Bw9,WL0Mhn:")Ttެ{u`XK؟>v>+e>!@ĺn-\' a y,ye-)BHl ?@[$^&p"!<GSZ=%R1a /JXp=Sa4(ƫry} goU5#|O5_H+a4rո.5pR~NIBIL̴?wS7=I⁸۱{ZF7kbl]ptm%^lwPl5`Az=^p'jc`W̆^ߎ_mxo^•BfWDtWgjZV3䚞A[=c'eaH!߷2#P_8F]\‚`.ƥgy$܃ f`9]-]\ 2L\ IJKe.(0˘kkG暭 :/<[!@b:)# Hc#+9Oo?utPxsuv4@H\uZo 1O'1,i=| Ap:O\_* GF'v=m%1s`PQ{8@#p D}>9ڶyyvQiNIYh;Ӝr*qmsy2E-vO(M@P\Tvѓ3dgvβzQId]䊺SuX檏|Ny`W yOx$tF9Ȉ4Rޚ>abzC`Һ|kMI^adr0jɞt8d#4Uު/Wb`^1ṋ]C԰E+8p4;m C2m%vT{7oNM<J)[s?s+qr$Km_h\\Ovˋ(Q!&~QN΋2wKI{6$ki KgȒ<>4^LEsl/ }۴&AԏYWW|{gU;TSV G=,wCVbYL[nANf!F$ aQ|j%׆ #:L&etqd Hqf~kw%6 VΜ`x#̌B*FlU}lt׃Y .LPh)fVn7mhY"•Bu87B;Ss #'3Tчs (+ÉG.u.Z0gTvT Ė47ٷq6!O_C'XjrBWs'Ye[ k0 m2`p3_ }}!0>2ƫhĎ>][<S =&;.Hr}EYˌE`Bx2wY%: yլR6s\`~bn\O{hYP>[_-Gdѱ)3 ղg23BWݡ9TO !PH 4#NBaS/T\KQ,JEkôg8JR<[$W\= C'ZlT8~;` $^4e66n=S~T̮5[0RAn*]klšElGsq9BlgêfdespFTɑɑhc(FeTHJ0(ꤕ5DM^)4J P bV]#ϔWb{šwC&ދWJl:b8(r6a6*\%QӕM-+@nisD<5C@tăOݥáH%\~+u,dgF!x=+y??2s!V}"zͮps4+Z>TR<,I>DZ-*Z{Y KdAڰ}_ [Kgsykx-W aO_!PTj]u fȽ|[ DP/ۆ)쓁\09,lv@Mn0xSV7Z9@B~{Kʈ僽D-:5|' *aC!f# " kjžHG+(1y~o"{h 9kA|*YHo ]h $xځ+T(#9饳߰ sT>SFu~=ɿզ%1Oɱ}OɻY!(H^*\paZ+AFmБHgZ(#kqxU1Egm50끞@쁶IgB;⫔veXBO+"AzJy[｠qN 2a<83T u@:vשQ6`Z!$qݒ'JY)?>i`2I?ɲ'Wȝ >?ȏDO~@c$Np[vaNmPkkO(4v F a9q[PZ4}rUׄ"f6ö:OpI P%2mOȫ}0σY-6m;ʤ^3:S֌*_ha! z_-MX7qW}]foՏ{s?*U[bu b;WNunpI+&R*5| j S0f>CN ,fO{Ǿ4Ҷ/7E=ϺP^v~9 ˷ C<>z I?+U uzU'H1^w {JQj m;>`ʫܡ˹er #ݲ"E0((tY?ᡃ S4%'+:[wmiɭ߅7\==} %5߈䜼9 aⳬjRُ(bƀZTǶ 9wKvEtʘpJ=Ҭ ݽSWdMUfakultjNC{aͼgȠgmDDw.Uxe2J1`P(2[t)FUas2Zr954.*|0,JrF;jՋX&"anLڞ'xX =rS/(F--rΠ<(a Ep9ON$-Kd=Kt5K<1\6>\[ߓ$/<w)e {7g j$9=H3zŔPPHWಿ?&kQqFTdmu0[sN'U^ `%/,2&=ŇW\R '_.||?1ǡ\hOi3r_l(0YJܨ`P$Y:' ?ozZKgv,좼,&3KqLbLRC@֚x;bK V:g(BExun\"8J-pHẟha4 J$y컗*rHĢ]FüN8`PܑRx$?ᴄ{IMW=?U+8fŠHܥ{k_TTz>vrb+F.!;2B lAJ:SwZWv=ߨ|#5*}qnr]cwk@dED3NHRгߡLkǺfu~r 5Ow^}DΌ $u/ܬ8..6x&Qp8d̉\z5c^UR^9%ϛ)Eɯ *ޤi#2`1& :GCȾ~!B|rgZt:Ѭm$v{o\Yz~Mǂ"x g:Jp'-ȵe6rGy+뿿 2yۮl3.h8Q^ ~+UzXU2m:cH Pu.ۥQaM7 /j0r;$Ͱ|1aHCETG@ژFrXe%hy$~߾@YG )æ\X^6ObM Fbyޤ PFϋMosz -"@haV\w 駚pemUW"_dS 5F {E©H'p,Z0R %nxa9`"~@.%9c,N~$eHqӬR 5? p4z з>L~W -jjo=xÁ(x-7h">vQi}vA^ 2Bc  2gAebޤ.Su3Brs0-QV` ٳ>ʯ;:޶uۯFbQPƟMbnXLcM> 7nWG;"֟Z w;∧(V Zy*F"_S]odsd _sh;~\,T59X-D!EɣW^7h ӌ#, K ֫9hvr8V\J<? 9-FD2|!+3`R,h`:D:=IEciݺV^?E@Ǐ7,{ӳ9 Zꚦ_0fޞ*J%Z>kUC1IavY-9#uMq!KGd;^?Fu?42o31dN df[h5ZJAH m2[@+J@:PLyj,̳}o{_ˋԅ)WiMZ=LUb8#H@yՔquϮiN("/_ 2܀5`C-Xcv-NWlZ̦edAo.X4bXhY t<'d.G@i)ptb=fD3LG_)E2mc0FQ(\7װ;E$AĈ Rna[RYi;ji7M $2Xf0*]Hu/y40H{HȎvnɨ;/'?T(#n3`XmVbfD xD%};K<AK уB͂o8Pr+p-|[ MpLK 9w z JsϐkC+~58P `gV;eglbYg=e5>N8(9Yb IM"MD4eFk]HV9阀:vZ6'T~56g:[e ;Sr sIF`8G.p9iUL7 *`J f@#Fqڐ &āAMN\ Hɉ/cu%ֿ<%Em;.kL?v1:Dؚ/e~1[xvEfMEuJ'3wSD)コ_,L`O&h8y{3Dy,R۪6U> RLDKMq+0%5w3a R/3 ʱ%(c uZ'$gZHIE7Θ4>KrV[9y2oXCU[|h=0`ANn_ /'qƧ :TLKSxHɄewoP)T4lΗ/&X`+&9I\qq?m!ʳW!P|Cdl*';8&f##4k2l䞒CBk?uN>ơͩ߯#O3/ي-tx)ʕ~.bc PPj ~"6?/[ck.r/cvmzyH%O6};_G6LQu~}irJD.64S\Goq/73az -gp˜ph^yN.xiJgР*Vt9|Mu.͂>6Q$Wɠ1 WUm;D=.tI"ܭH5SY &# /9#Jc~'n<8쒅唠7G"$ib4Vrz{8CA㥚9jS>+`'KFE_$МJЂbz~#ĄtM^n=B,ct佩,tߚSzl*W3Of5z6~q\1Xwc4Ka6PFuЪhV,5SF4ԴI̋MrkM`gUlصox5ܭ ϜrP\<,ާ~.@\ajJ*iiwΘ}+jc9bO.c?v{#C unaS,IJW$@(>BtRSD5{^|nɕX_̲r LQ3o\5:[nиcU Z%;%b_p,H^KmSK'O3!2f,:=Iv̐ r~W񵠒@Y1G'MO!۰ab삼K*łJy}a V585֊sŘ0C| ߋUqyH.cS*A=} : r1d1sWs][/Pv{RykB `:6_sDGNWbNa,z4wIen j[H~bRWfm`Ćbա\jGkKK/1m8΂I V9Y5"UxT:7e8Xe)Xbc!q]/10$O}J.>'m9< Z@yE-T bN]HSLiu]IkR>G[|i ,Ar|VD^"'tK*F`y-W,P#Vm=1ު Jl==ihjfU2*$i%BqNoqUn =JU8Zb5b!2݃a :ZÝ#*,)s-4lJ5G vVFx$ q%dv(Cnh+!qnq Z'z6#:63*9?+Pmqc0h,$#(,c6Ėc+bċkVk8EWEJ+Gk9C*3ϕxYM>1Ow4vQ+9b$%8`G&?zzBٿ"L (\$OkFf?DRN٫&D߻Ēc*L$< v\NӄL7ʜ(+30HolSÖx!2[$8B"U.++AMaoK7GveoXLx9R(? |T.ф؝HnJE$@ ]aPUDHJKoE~ DYq'E/aRN7elW?S{^/-5Au\Ը8݃ øpe  ^<+ `I ++ڴ،P<2B'~\S?+we U`I_@F%^(di\R?ej :_E fK{yK).7T.zY:^Β;TCJ TNaENTe+Pe Zp~g Bj 3Ub-M s@`rE<~4Z6<<2PT1:vMN2Tw&WTƬفE$v[(e`==b}^'h!/"vrE;Wݡ5]fWo5 |894g]7Vzq'%:lc/^#k :WqIpjg?  pfzƃ>z~jzG1%h$i7(;.zN7i鈦?ā4LkO\SS#y-M Qv@X`i!LV/ۈabs &E~\MZG牘 6XArueW²ݒ\wF^`d~GT5t⃑g;2"eSALw˜lTDeIQ?gEm[Ss8z15d-z!~>5SU-y]j?w}aF~7@U-9#U/SzPvmHݶ ȻA{ִ2E \6GOg$Or*NDhOP0C dښv,ABRRCE+O'SDNKzr6MjFs1|zϼ@MJxr[{5 cg·c>9 zgڙ`]͂O{ P]zFdW`:\n =ڗHXYGPe0Ą"hբCȾrmI=l+:H7Zk΃u]b,S%|GT] ldX_4Yo`cYX4H20aK`@4TqIJED還u 2澴Q'g Bº)lT$ &BE[wiΖ.*l$I5/Oq% ( qDOJ$!3q1'œ1Gg]ߍ`mb2 ,1 FFP Q]S}Y\{4Duї%=f?=rY o ;Svm(N]LȘ{DYΏa"06uDqT)kzT;H~3diw+ED78HիCnIfќ{F#0ʵ;U8ox-&Mbe\>3Pó*jF9:'rvIaZ{uдt:bpi8z#p=]R&4N-&$r.`+=!ߎ ](i>2ou |v27j?oBdyט8+P^%mwdJP7!Ipkd\ʃ @NČܕgd.M 3;=Z!B5 qN=_DYFpt>vj(I{zi-QB;芫Lgɍͨv'R?Qԅqb)%3V`O&N"`]4ajU…<x-92Qqƚ p]ox*s'VdzT7c#hG̝IE,EZNqWWe^f@B:8AZm<<},xSf~h^;0I])T$b?LS*`J[5]<2h7~mckO*<ҟBOdC% >tnYF?J0(Z_zVMcg$rdDřRbgސo2RZh/Nud?3ta3 3?Ak)zfprkl'v8?Y62YS7k3m*Py>eP@W%/8oϑ|$ 3 s)1R!Y{^5_aQnar/ic-K(l0LLF9xo~vBj(+;Yf'IB*~ ~/eXU5C[?s [Y ٛC7+35;?$C.OtKzp,[Y|ΘҲ\d)yjxŚϕH|;]H+9} *EeW`vSjbHLG|9%:)t%+p9qb,kr^Im)zу*Wۼ\0zYCݑsbN)"6G#2viYxq)j}1m)5Z*9ܐA~Jj;X-PϜǨ/ $Ȭ:n%B-}9ߧ-S. ~DW.O}X&aynU'B :$;6jT# 2}\D@7Bʹd Vݚ8ŏƉn/[92Nau;țW.$1;Ipj5߁7p `bєQt~c5l~jtu5+M-6mu6)N}P͍Lm#;Ak -q?-}.=1]E( {kώ? nU-NmrO9QdЬE )J%'7Ml:zH9ہF '&sV|-KGn}CȌH].!/y|h+u&0"&Qrά[Qնۥ_L^( %9i :5+A~O)#/n>'B[nFwjmŅǦӄ|U֧>k^mq'b>J:6+ŀ>JܜFحQeHHm%莂/W,ppO5;CBr 偠 ,,_5h o99і1ehqwJ@4X& [+C𰈛YAՈ;zKCw恞bٶ\>s$0bؖ-ܜ0c6!;qs,mgqq(/v-)q;-{؍dIJd" iwljkAGUY8Adkɴ~$D w~q8I|I aM{HFr3XVDNv"ErPF,ҏ ZM -pMInq!'6n9u[x;~a9??NQY4`)j}/TJmN,>pЭ|8 Q] b{; =ero50Q+ÊˁQty2,BtʗQx C'Tb'Ï0ŵ@$H0EQ`S,Z-:!^z߀,.]t5Y3\Tu_XrzQL!|>_(:}PJMNs[lt!`٢4t~\V[J8TfW[NGV<Ş30>eXSڰY5'c%7ډUv0hBJTG^~qEEE.g7o9̡7T4^DgA}w`Xm͙@h/bx7E4h/opB~0oa#W9\W&"G" Wd XP@m$\Qp`.n[SNYXl9;o #+Qa,# /ۣrӷm|ˆJ,WmSeۖ7Dڡ' k%XkyeQѶ!uA6vƸ>eq$%"/A#LE2[[bװrT]ʩ8hsma|'Xw/`^N|#N)tF"U#gFړk}H_.kVa2AXG*#.IQד4t`/u4Q"T~ZF0Tll_9R޼,c<Y L{_a}Zߓc72vV"uSQJQnUD &h},<1dEIL Ɓ|@H`j$5ls;!ݐKGjPֱ?I"峟-'>hweƜBoAwR;.~0М鏲+dbZWZSW$QF ekwVAyyLCt6'^O^@P>GVa%`YA~`R/_XTt{e;T.hCcT4 ,D]^cF^ FlNWu䐜R@~cQIg9)5V.R /|.9ȭ>jĘ ZAm.ԕb7´킲?<|XH)6֧|vƀwwIN]ԭvʨe,C. C!o'A ":KӇ R`#yKSjL~%k଑)>tW>:̰^}N_X/tD5*f(_OꖛT^lD?25  9g1`:DA먲gFêjfũ`|1szW߱,pʵk@}K]K_?ݢ0٫W&3c&'CQLIur>R+'H" $B,6\TIh9Q_\|hd _9y7&+e/QL˼UӼ F[AUx:>0٩|?[8$FŜPF%uPoJcg@&%F(+NQq&mi6AN2G\V-+LXiL4\ښ`濮͡~W$A_ftKv8 .5}fbDz%9]]ڔlz>A_U\"{6W&c9,hZƢK?G uzcOl)-/rOCج:;jv0|_QiEuDKm.Yt} dp%ac4-%p喺#RDy3},Tts>yhȃ%M36]{8l.tJY'TCMLkf;杁FhvR}s38Qhi%kD_0_`e䦤mL*RgZnoǭۀ-aɇ &x`\/gjtMSo*rhI2:!5eڃwl0VJX-+=U=G lebHhhǔDڑ cNM<:Sc$'+-q9x-@]1QuppxqlXa50ny}65gcFr?`?f'Ij fΪmj.(䛳~%Xqga8g*( n $xBIyy8`贳L[m}Pֽ6%v̋ bӀ/!ހrIВ@TճOfJD7*LhyoꬓE$ib΄'~~]t!Q**_%#y>jkV<:}Q]mD/I0`RfuA$H6X[N*MAߏ(<Â6j 6@$#{54iޚJPW1d^*WU24 A!'Zߗ=%d:Pz(][(`(bVZ&e[lIYV&ř~ mw9Р]rZ7iAr!æ#d5i1:L |w);TVa/%Yl&Нõkitcq#(TQhƇƹǒ8Z8ff,^vyW#x|/ "}@κB36W?~^._? uC R+~?5nUv,* p$mP]Ax͒w^>``+,[M#غދ'$ 2&)6xaG=ykX\b>JS͸L8ߌSQ]WG% _rrƴڹh_LI^eYW;pPF]m3&調}KpۿAxhEpBs^C=OȇԈYy_mDV]zD%Ryk1}# Ш7ȇEL@ O plx!_0Q_/Mvq2©\US6F9*ôg.[D"E&Iڄ ,9 ZC=>m2ե;)+LN~q}%t ~Y18T"E;4`Nv9Cup׿R#^r(hXϣ_ 荭5%k 1f9؛x`DsXݨeܑR(+|:H9jqYʴ$[Uub{1LѢ.kBOiR̫%…0tŅj}B>X"y&:l2mi6% PYnbh ]v 󌩸ͥl(ϟոh;%ST/7Kfr1YS5. z%#hHʄ&|ih6UX@%$yvr{q$ "Ѻ|+etw v K?Rc: 15$'< 6F[ 0lެqdɎIG *fǬ :xl)t'Wܛ !GPHiOCń?kќܚ~~I2CHP֫Lz^4\P;\@v);M9W j qle-OskMCc߸9_R-jtٵwoGvف@BYd;_X 쌞<$;kUf,!wíZN2O[?MСTwn ׄ22 2M}DR`::lNL-'ALV1yl#q8jNrYU<=C&􉷓|E-ˆ]CYa櫃 aQ#i¢tqy-ںasg' @9,§yUF۝i ]62ئʌE:0A&Q~CjxSpNhke/ M4𲂽,VmZ蠒6S"`Ä~}puS@'@|ΣWF)\d$06 ?\NRF@ZwDttv+t#?~}NֈaA5dEHiUsYԎ-# p7{#K D0yJG\IVy0HD^'9}sDo0˯2[YY{%|_TQ?UGw]h"]^+ R:=ˋr5wf'Z魳39CH92zXetˉbvy?ڹi +Sy$Kg@e?<;(< |rndj#r7%A1o|d ݊SbPuE"%2x(@b߼b A #^\+;eEU籑zF.BTӤ?XPڑ{h Tkm"*Jxew@Ȫ%/׾.۵Rn' Ƙ٦GndТru Vl8j"ɫ1'hptJ0rOfsdvW7?mfQ 0| $i*G_gJeOTo-&')ۚrލⷳJ5`zX?4i][01LBUÿ8G*O¬Ҍo'/(atd`{ZTM> O0:yʂ"^\VQS-9 %ߺX }eŊ/# [۹1|$Ρ:fC\G'g0F~nZ |]S;2Jm0F[RL*@ eT%o'4Ks")IBbV0`uԠ)D2<}zP d@NaH)BڃQ>1QHtt_[)9- $`C[LD* XVj@ܡ0r:u1I`] ЫӘQ"GdPK 9eT(:ZsLH% |nޭ%֖| i@E2}zB6un1ӃuBi'ꘂeH @ mNt@ץƎ/_4>H~DW)/(l+Xc dCQTNp>C~F"w?WUHgsLQԷbeZʐ'{,qڙpSP ~ c B:e/W%teNJkf; M]Z-~S=X{Z ab֭ [ _c}eעQ C=KxVL8aIc/20waK ]>-J8 c̻=o2[7 %"sLhS\肪hO } c}%dԣ>X5/vQIA0J ll Syhm1s @eǣH4=9/قKَj4G[^v =QC+5oQktOc.=?L]:Ԍ.lޠ#bPh΅C>(<-FQυ> i?~Cꈮ(j͠$KjWgA/{t`Ђ7uQwl ȟzpN.wN$8_؞파ܺ.]9!AJ^IJQʊŏ>b7]\ޓ Gz3d[Cg/ii/œx"sYb<৥"(qpF+B.qpFv´*`vͺ^OxZRB;@shoѫ Z}Taw .ֲciȋa`k2@usCrs fb %)"4z`|O=u M V(a[`/*c`Ф>ϋWk'2]ַ8A{@ofQ+h\>bs =(b1.0gTh|(AJ 4 u8tr:D|=83I>8&"oh}8anT9ij?:?PN\0&,<dzeܔZ)6L܂V}'F+,%G^]YvN b#oi.E;@8<}Y3]j akL,+6 S8/qQ{9^ɉV5% [G'BMi?kr&6 X|M1vle\$=:!Yy.NޥCAJE^Kyac,{G|Oz}^ȆT5(fA4) VͿ LYOGda?sc$w5R4Z ӎrC) vA5MăC%֒IE;Nvx x2w UedDՇX3sF׋]~w0nĝjmSãLNuQ$]@FU80Uf #ރ^eLe4q<ɛX67:J|p tPYQEVmc'#::jx=>=kdۘ.&qÍ$ ixWqz+lp!>Db#iR !8.yJY^u2vڿEt_6!ckf(fpD\=6qN(|Bg?a-Y9pllCt쌓 fؾg~¾dɦ"%~f刯mB#f_nnf50FR#l PMO;.ZBTN"`ăwIeL[b<Uo3\>tË&^X#r0#[C ; t)/"/9`ُ c"(0Qr{$VSMI>$h!?tosړd􁁥l6Vp4Y81jR~Sg֮Bb8YˆcZJND[ȿ6烵a:RTi'Cah4} L/i$FC+"U$3kwf*koQfĹYѹO kSIP`!`/naC0h=BվU[L6x*P XHX?x3=0C"A~1N{p3OP1zA pFP)$E"rBL܁NUx\ '0pF]P;\jO}3'q8Y{՛02mM8kFD`_ҸqH&\3tǎǜ]qxDGG_bj8Ͱ5{1K#ۥ³Pj':d|P-[{_xaU==U$W:&kx I7kY.׀:/}?0^IB;¾ʴ-yu48"!e8@nZ:h37R2wG孲( >C)W2ͲU3@W2hZPE5ދT% Q:|tAU?CSHctpl?>f¿ ,}Ll{ M$P!B.S"lT[V0yQLOBHw>x Rv8K5l?XW;$'X5P d!v$ףzͷ"*8g]`|OprW__2GY(j˨01*Q_W2ˑAhq !1cC}/t*ԩi[{GpU7yFv 7bV&(+ROzjj}w0TΑ0KnUHH2rqeo'Q-0l0ʠ6D'HGlkXf3`*MV S]UuoE?]]Ґp#NĬ'iprrOFdcE+mdj\,Cm(ӜU Ֆrozsu~:>AZ&ĀX}[uCmeҹǓei_#+'6)vO35*a*z h&`t^žXלq8,`.FݻTeظ-@eA oLm<|1&M&dBӷ_31CXU|hƺ8v+;<᪯Ψ~gGٗ7E ̓E!ΔW5߉U*"suk0=aNy2d8 1ݮ(vU{K@d+Nq%$, K rÇeM\nyV-g]߉_to-Vb^6Gdz`ڳc7IYxxu8=b4$\;R\c4Kѳ>#xS>r ,cdZ & n{{3n_O䕖.M0)+?Iǝߐrx {Z2V㕿̝8X3z|^7O'd(ۢ4?{51sCK f(zF6YsMsT=|Y292(JwO^QT 귦{ҘuZh 0tβM fr@+*+#9 )[e_rHY]ֻxvީ:}mk7^JIT].GoV{.T)`wo`N7@r-Sf4NSH*ӫ8}5(+Ȋ6fn<\%?5EW:gT27RW =g;hρtll_ Z89IfEX8ѴX|U||[ KP,ZIfu/ZpƄN Pxdut:ѿ.Z+u]Dm:m(2t9hhH zСS5c J~J4{y9NDx:-j!([0tZ=5@(55y鸞GyAW=_r 0F*%Y  t)0$=/by&D}Y཭п[;45f@ doTBDaݡZg  a Pa͸C6P@{t0ڌ2S$g{8)Q6G17P&ʐ{uDB ƺvk_s&DF (?LVݪL-? ^(3<{ ;V:秲&AoVHv5 k;y99g- /PJ=y7Ⱥ)|j$ec=gɤL=Rd\.G#CcH82QKytUWiϘ*шVUanj̹#~l;X=br'0ΝpլȩT@`dwu'`tC#t|.qj tXvQaOp3V\u[խS[$--`-٠W3!KQƼIuq񍯹ˢ?6"1!$g%可%IoeZY !㖒ƻ0DŽMs=D ixj~`Vr´PUT ^ٶ΍j? R]\OZP#2XH yFSigK^Eo/D$I_~Z_@awK84N=6+>;ȩQW;tɂ\-x )Z0 n!>a*CQ_X51}=:o^ w8(d`N`e >u_&Nۭй Ek`+3lt_tdYKW Hl;G};Q'-vdeNJG 4I0d@K邃|a}dQ&MnOb <;*WSMjL% Fi//>qY*8q${o#!Hj8z˟idҎQUb Òcjn Xh+o\8u\Ovm{WtNXL~Vh) v-Ya~]+]ps⽔&'~"LLb3p!G@}'M PNVùvKwa VHh8;E(#s̲(Ou ۳׀?~4ةT6FݗJBfA3$'( ϶H4%ĢVFƆׂ8+ |,Dk9zWB0Jֺ-d@ѯ?LJRI8{dW2DG 9Cmxl ^gWY-e5" m{D^]+o)M'r9HC#9|juҠU|FT$~py;ŬjPcl=JW%( ަ@Aܑ7?u_|~Y|r / Ҷ6Q8s]a˫OK--r?GwsEXxWSݾYo$KP-P`7_n5Y͢'Ө 89/<]Q/$%Lf0k@hjQN+Uw}TAR@寊0}NQZ((Jk-I# :3$8߄s/\[?) ^DwcQ6LYg䋁Lu胅{,6Hug(1% ;a#ĤFP^lbo V&H1*/lw_P?i ݧGK#IһPȵrSw3._[Ul:w} v4TM}I֦9T?B,&tNb'}'h|Y5䉫QV (>YLh'CZdѼ*11đS;p_Z;%1q8[‚i2 jɆiu.i3̉;CTjS)#/b>=,)5xuZ^Nvo탐2іyT1d7ڬMI?a%DOm4bsLN4Gi|UhMnϛ,>u=Gܹԩ0ȦQ$<0';i9H>egܥ,KlQ~ HҐ{dz9Z>lC٧dž%LZVncVOʧbHY(_G\,9c+k 3n2JHpfؖrUQ Nl!V QIH^ Rv3#r{yw._bsn=-7S Ю {O[/&۹/~=tTf 'lj33<{I|,FvvsQ7dzllT?ei"Ϫ 'w"Ut'  %|q! =(#zUMojl'Jڱ@;9h|ktpŽ<@UKg@,>X"8 Zlf9_,9FOZ\@-D,7\0 wGOf;wϠSlIzIBF4S'PմACWGR K%RC aSƢ9VL:]f-[nU1AP4<20?ZYAX#i'Fn0Y|]q^YkvK:pfr%* /a`;)=U5I%siyqPM ꧐Xۦ{A8!cӀ?" y&Ԥ#T)#m7@8<uÑ3߆[vDQOzej܏@጑H0p@_\:T"2L"dhݚ-is!8I6%c(Yy RDŽ>x8jF*CI8brS9TڕL2V 0JFp>ўVrǯ]lz4Jzаs3RO@spz?wZnh-x}e5dd<$SQq}G RUj4j][K#1M]XW[#-T+`ۈEQwld4Mt;-bF@`tI uy Ҽ {h%HvKvoeXetKn1lhpJJK +e| 4+x(192/$X+]<J~ue{L_3OѱB?IAB̃a 0p6|@7AC1w=t.K,`Q2ܬd섔E^)j<]t$v|c"S\vsHFk$;!#Y[,0;s[-,qeKaYI+mKv Iy83&5) kook&]Bj~7`PHZHB'[* DIg!u4ȩ u]ʧ"V}:-?o<Ő)R x0ג^94=ArM^F0/l@l/A8euʸHE0"Cr6hS^ tt쾼>,P}6-]\Oֳ فx 'H?޾0ljSG`ExѸP84rtvJWR!^_Kb8 s4=bIð6sYT h ]uyAȶK5Ք#J h ||S;yxAͻ!>/b5 U{$MVV~E{v@o#V?6"2ITYZV$1s @5 :%;tʹ9*1='9x-xI +#u(d@( T5%r݌}'szpgd^grS})r>]&~ nU,븩:C5{'<J`^p "i%۟m^;&#ϯy@uZ,_pk?:O%l 6߁kUL^[ ~b(X&3=$̧s!ZQՑoJL ~+ f"N2s/ZZ&r7L>R TV.HNI遻nЎhv-PPGi]w2&mQo*?X"œcAֈ ,Mֶx A+e#z>p1=5$ [ VVJRomڕtD:"I1!zx眷sGlSYb|,xˌȠ3aN)9)[0 0~a&dd9@+$0plx%Tg`q03 IC,˨S,ej2~cad84fȈ(߀yUXA jX>+f=r$4ok'M%H.NMM̹Z$՞OJ Х6 ;uQR^^}xvM`87!b$D̈́N;+ ;/𴷓&4U+IDQ"Cdjwp VKMassOGܬM.H %xpq;iVstiYpy"}W۽ hZGL0\ &oc?}roZqM$"Bࣳ4; ׄ.u9nF5HY-J7tA *zPgx6$Lj|rq'Q]l9vFAKm Z]|HsT$-PLvoXG(*r"`C:² BQ`s%]>k_Ǡb?̻G 10U]9蔐^٥I}UW\BU4;^xNsa/H¨|Ǥ7tlH$c8q+9B4y%nѪ"+~>*jz_bMضoF~IA#Ypv;PL>p]l#0Zf\t] {0LX1gyq-z'%w'dt.3Z';n/ SW>b (SW ,T%e$Y:j`/!+MޑYO߮Pi9JԌ ;>6î(fup31ڙdOWDN;nU X:# DҲl[ S}gG mD}tq7g `U8ԸtZdth67v^x; L6$ x##CyBZjλJ O%y)r3׋7Bp׭UR&9횶hWTX`08H?6t\]$VN+ǎE 4#eo b=4[*b/vUB9PyMgGWB{8|gLGs`1 t+KZrT%NvHt|!4B-Kp<#GTJ@:yrc x\䶤(> C]ܸ.T#}2GClYNj@ܧҐO}ۧZrTf$ ֒`ӛZ6|5^#aR)pҫwxZ=t*qW͜ƭ]e?aF SLf5LW|@umV&#e a}"d \FgNi/Se1\NN35[k +8jʵ}Nҥt ҥqXJ\ tFC+WHϹ?hݙ+"Ju7n8c}:4 6BKitbJR)FOSnȩE8rN2(ε-Kvg,:k3V8<U팘I:ZGP2jInv w@9 I,JpR̼b3J3խz㤮 SW5XrP|"Du1Ҧh;,mE'Y7-i!M$u@0rD`z>n/w?WF!gߪ21;Ƒs N_7(m^'u6@U/k'=K Q@!7_d&_4u)O@E wŮ}bUјƢhs-) F$ ~lO{@*˔~ث4z~V~lb4 In(C}$vr\i5j$;fe3{uQRix9ogN4W.cvzQy*j䧍3qL/v0;D[Bx+W^?B;~4їrkQ) XxӹP#Ɂz/\yj$U &k(mءviJVaOYclB7̝iP7<)r-m[^UQi0PW^l5z |2r┮ 8 }P/@:l&W#;E{$SW\q(C%15 A18h0ȩQZd7Rx0NROpDΰ`ر8Y+LWYM?1u/$̃2LHE7"wUБ'8rj^aWk(ANLR8jsaϼk2ݩE*$k"rڰQڕ976`& dW(eVC+Kj\2pX8%/[ƹaY#WqJB/ x97#(ayJO˼SVMYZn5^{W`ݵw)Ⱥ~ҪbG. F㪝=1?ȹȍ/N |Z#=vDطm:3o9 Jf- CUpc5U>P?L}Hs?mJ,E!9'm - wR8ksLCd=|"{!愠b*S}ArWaaU~d$:bPDtW;|Zi6O˔M5^X6Y=FxhJE5`sz;KX nL{M.BlR-X@) ֒@s 35D^%$l?a:JQ: *TqyA݋(ЗX~94ra~|Oj-<BԍN}<"鎃鱎k/{I !v:+]b,ȝ([/;q7.f@0߹zkk&F!YRA]#l@Eb VTTWZh`m@Q!Ϥ;"ٴ bhBHS̀DSg $XR+6O媈Pr&7uEM-dS}ZNHo,*FnV@G;Ѵ75h> vt98t8Ή"'9XsF^^ E9c|4*[f5,# ڐYJb 6^hzo\baVfeۿs@-$Z07bHeUp‹~]x>R'Bܢw.+nxxj^GNC:'ُ׵2z=D⣲e T;Hj_O(y4@.ʄzO ?u2rF>GpAF 4`O ~wrH^LqZMXbOF[c՗/8ϔ_gX֐hnie|Lڹ'vpHe=*~/Z֫^T'DMkvւ8e찴LU·5J Hxr+13s{{XgLm#͍ޟqRm.ZW^MS&R=Ѥx¼;!b5Du+i@N~$\qX@Z]Nq˧9tC@C;ijוהhepSʀzUs9}@M?*MSoE2x;~cu.u _}vwg="8C֫u{US¬t6p'I##S oE'WZ;}KjdSL wߎm$/"#rwreB=B otI/xiu! Ϙ*ҡFݹ}0^EM%Q85M`\*cŨ2 78S3]E@qb?(8Q~rkt<"q ;=^4gӐ1xҲu^85{R*.MU:b f*iu^ԓ9=0bԭ`(zKϕ rzْ7RoP7DOSt^T &F(g`-c1I]LwӃ!5\7zQhVrW픏bT4qzXƈ*yęa}w3Q:8vXqKYsw8v:{06S0FQ!8i=?GaNQ82 ]N\|x]}>NpuθAk; b*;EXVJ?qhO5RHҢI?L6P(q; 1΂\OR(WdZ$\F%N\ ޮMFe9[Tly.fb{DsW2}nL_X^%N%~`V瞵6E$~^ahI Y$ -lnjD5;c{ "SnQy 5E0 2_[_v '[8k<рTTӟ\כ̓T[>+sHoU^ O'`x"wu<\hG_'P)L K- 2:52Wb |*ԓ G:I}vPpy2xLzq-x{JXZv֝Ol0٥O 8G ÎZ5cn!= D~HHؼ6.S[c 3R$7b>=# `ӏc+4魯? ?Zo  akiTR:[v~8Z * \ Fsclu_.4jOHSJq&4濟c !do pRcH?;\:wdm$070.בϢMڡaܷީXa$@KR0A^Ag\f#P+ Xl&&̚ٻB/_6SMLhJo1z'njqt3QMkPbm-Curv)sCfz9r( $'<0'<{߯Kq$JR33 !{¸|?Sxi d ƞ8X'jV:tT5dui-[[Beí(^/iQfQ(zacryw(~_qQ!5<TкdWM2'$J2[lV\Sk nmx3cuDlg&4aK=DKC\7턓_@QFJzz3 C`%ߖ v1.tOew!ͿxVt׭1=YE2L{9R١'F顥2@ \G__(ƽV{ᨣ`cI<7bе %Wg!woS iCy949׏ް5mZ; =Xl=G,;fmuXTw&Lsa:~{/nh>uNd`/* v9{r_g"]^DE(C9S_Ʒ+o5>ܢ0-<+G_~&}@1HҲR8ǣ$X.(س]"[TP (#)7sK58Y#!$/LQ2#*~Klwv}2Rـ8`pL_5P`oyX([-٢YJD.Nr}"Ԙ2|r_({К91!U%xsqҎ/Xb_dGJEYU~5Xw/Ye1 ‎&V*w3 uWԻXwwD_Xg"Ttuմ!:K*J a.\7'˩bAJ*)'B|m{E-rܭi,P#B74ۢ43"3M2:{E@kǒ;&A? !~fNn΅QS O8+uFl/ +iRـ3[ï9!%IHZ-0;[Ć}63ۥkwv4)UC0>v tZ9 Pdd+ŋaHv?Q*kVʉ }.kUj.{3kz8VBS"٩&$RE6^ 4~ /yq[uM?"P7-)RFOJ`i&VjsTQhA$oֿvlK5p S\̟&ׅ- X`-QQ:Bd]MZ&` B lLTI6i;9Z]uP?yW]c½5L;4p͜X:;zLT\mft9rxI)͞|o+PBd<tJ"߰&q .yόߨM ꉗX 0={t@О4*XFĤRnb2#5 8D>8z~Cط*ZҌVj #!;ztdGO$F`[9 = 5+7z:v]"X>orn.l *vd̫x+h# !&1<?91!p˧8HRK$Ww `*DF0S j`%)3ycJӛ^a^x3ĺX__l;s, QҒMĢ/JJ*vJH3ͩ\d y@9bv\%봅n`w=^L-PpKeȝtVqMnnԑGΞ-DBi`N6ğ F]Nd$gNnP_?3<ɕ%\Gmhf;ׂP^H86܈yM#HY D;\ 4,[ d T~pi!z2l왏m]G&]1F4)iE-"0 EB_꛽p+@i߽vƿRZx2MƂԜM(`U{ ճ}Q th/ Dz<-L.8Ѹ2}^\4\?UXk$9$*- q 9>~~WBPCV~avR@<;&FvrvTl|v;|T(!},=ղWG|$aY~P}"1j96[RwS=o Y͉j=|qԆ{|W~`׳CgPw}|~!aWi!@Ml #T_T:)b?4 !:W("܇vq@DV ]_p iidMOKv~iJt` fx{:;y17T}9l";2[AK릍 jHAl2>嬀 D8Pb= 7&Z6,r5 h H;m6z`Mg`,*]ҋLE5"x$Iy h Ɋ%`-hJ\D;b@maCU7D`0 =;c 2 a~4ٰ c𒏙!/qffR>/OS!Ga7{rn(/PG&eǭt vf7r^h &&~ K(2#\ Rd}>2#Ҏyaf͟Nd1{q%x!Ϝ/BŸαrꌌ\٩@UT[/~4׻j֨`u-@F*V0g]="~CfrW5q?Y\Q\E)dƖ1ggv/XVbQIW-.;-׊定ǣI_ɳ|Сt-lL⛧[XfWwde9%ɚ.듎4zc'lͦ Pyc =MhӇ]q@>pWz5sKNlm`Pț٥Qĉi.\kw nMMh R01: &qc9C5F@}0,v>4ӨX@FKJۆHwRB\ׯXBro( Za'$צ~c-~XeUvgOID4yL٩)jK63"//1s͎e=`jrrS)8m%؏\wS6Kln [;!Eg !MJdT?/E0^7O`(@:!>:&GF[&ODcˣޓjֳ c 8M&rv׍Tm g_R;T<뛿<;4=(#ڋ({~cT?(߰Vz&(j4<ֽ /ř04. _tQ@f[{W|#팟t|yoAv6/A:3>X"̷mfz &/bϿV=VS 4(A,BϚg?iuawh\ ,58(UAO>*^0T U24 ~Ն74 ta[vԳ$^8|g56ƞYED{itXS>fԃ_ |@D!AD"$Uņ`{ZS6$J G'bۚό,(` GfxcCĊ<أX~e迸W6hšr["D.&q_f 5t)ħPma)S|#@]F}"w }IPkyWMjĝ0{;;(^=0c$7fȜOQt(S0,vX7TLvv)H^OqR7} qv$VoC'NzVkۂ0@ R]RH[ n=,M2c5zDab'3k+\!FHSߵxg*(Q`ʩ8hI Ti"f[0&]ԩ|QO+:E]e3DҐUj`|'fL"u .w|?ە=M ΰoV5+f< {8 D)*v%a 8պ\K\6] p) ۄ0 ajԄxY|RbCѐAOzvpVt&VKw k>dlH!ix,ΪDbp@Nw.Ӧ0Q&^qWnc#΍VO3/sAK("-<{]ۺnDȿXy"$6rct,ӿZM=)Ynu8㘃5k.Z*P{LUVP4fM)U(p-u-.Zï7كZˏ蘾,j"ܥ譮rS29{?S q6Q`ċkp@Se'V<@cv baLO'@?N 4Yx k\)X|HE%\! 8zE>aؑrx֌Ī# 񱆅'h:<'Q*DAͱ !&"5 Rv8L0iIi`|:-DSA"T|CW4k":I{kmw51nE֫#D܁ؖܠjgL:PH~:$# G+3Lj2cqʍܜ?\=VmEeʕM/.GGzOʸ[5vC^' ߋ ^ s␛pq;8VW8ӼM ͮaG |*d[ F|{J9b\ ĊS\[Q? dVÅ%|So`cȵ L3 c%QchȺ;q ""WNuDFBMx~>%xie;^FASF=KTi5$''j;q[8hXx7D_mQIpT~K-zABw5]^xӬ mZ$6 -rLc35]r:=z ɌDi]%uvOp}jQ9Ҥ,b~)A{֐}",eF1 SiY] H`EG,٨6U 2Ccu©& TCw܅I d"m-3/0F<% z:7@3Kzk ] vVr/Ym.plh &\_ŨNDG@T)+1}Flo m/5x/Ǡk@1B-|fdӿ#1 GrrE!,n J%IWvCGP.fw;Xˤ:V7 c9oܙYfnT)طq`N~ 虼a# i'x6pܻpZwsvAPݖ"#DƝ#O3Y|IYd _%I9eJ壢d""2(CCsm[+_a’wN 0ۢC`4WR_Jo)V IFD:f8ŦOξ;M /[_YrbkrG;ld !z -wxYOu8}=yEpw|A(0u@=ݼY%}|J˘+(!C0dfr5OElxՠJ/6OŹFC^9`C_^))SKS 9T # )A(և\sg.m>=$=\@O'OQl*Q6B#>T^9,](vEPv_oS( 3i&!w?\0)86ni?|IhKrjÒuݥDeAf\k41 Ք ||qvo=>LB"/AÛC՜ㄬj'a-uu^)*n3h[ru"iAѤaK22s\ tV9_e2+K5^sS O^$2mۖOB?Il BGgȫg2]W1ИgKv䁐!7!NBd:5]}F/ne\2O[[Хbt ͑9d^q@ ސ~׏ٿ'=ZHI ̔d'uN:2M*k_l"^%x6jZk6|oKiQ%f^t@SrL(sؖԤ@T9a/Q[o `z?,Iju|'. `]("]:c|ǝ&˨9 CB-zU};)MR) k;~"p۴byzr]&"if`%4;_N3K&Z<ʞ22.!GN&˲߆ɃZ؎. %=ij/_4*lUJm ү- R)KexhTՔʗ`e1?g*Ae_].OROd9P=`WVV ٮqGbGO"-ը*Y/hՔG -aQLNOd_NThנ;JDlN ~ s'x9wGFpG}*>3DbT-)M ڋ $Ь$ A!{[/l}k,R1Y㫀ԉ) {"RE7ǢU>őjHcu4eS@emQ'ҥ*jGdCovf2/梢?|>߇N շkbʬ )بZk) Oυ,V˄Vd8DІF Osjkg(;BؖtP?Ÿ*kPX )W+<5"ƼN~!D2N73 n,ٶÏhK"Cy2CP" [D97R!y"Α®I>+x ѽGLƌ!m~t+1ʻY ht65Lsy&C?aTȬۅiUD)83\N ]c8:ѽd3ǀLԗoe]:ɴÇ*q`ﳞ75( ]"S6rU~Q20q PYa#Jm$.4IQE4QS.ku,+43"M؆RTp }8=R0 t'ohq8 `NՈtVBȅ)az-747.nn%g#񛏬DnNPG]*T$b^Fĩk44C=S8Bg%XQ}_@Fo t@ߐf#AD6!֘kz#sI(BK%eklDKڱ,j@μN3W*7~l5Z+!C Wl$\oD$ Y*1hMM/Rx76t73  ZG |Y2K2.f*`i4HdDªœub_rdJ֒(+/BwFa~>ƓrGlTP!+<B!f<ɜHDEBT`ڢ`4Y0\1QdpEX⚽7,b?b][}$ێ4<5٬3QuaHLИ&X>v@![NA.@`WF{thd6Ц9.I%X=#F8#oG<u՟~MٯNrQo8呲Ⱦt'(v~88cRMJuU HA7L/Ȗ-Bc&$@9\x-Ep.Mlt U!Ӟ F}TR<;IJQ*hX֌pP(]Mhĵ$~I#tcZD8l?FtŻPP8߼ح] _Wo/wPMNdl\ \r Mdw(rx\'  Lϯ,adx pTƃ+Du|n'wm ! "_RNS(]"',h3#Njq[z\k!%d~%Kt:nؔ)Z- @2&D!7 hKPXLa}-EpfY"/E[ZMbV(rq8V7cq 7VhȔ4Bѹ92SLT-jpplvy_v*gG5g6]EqM7ހ1slNV|ÏKD!so5Ƈ;g(5nͶFl P]aD Tԯ姳’ ;<׷$B(ky枀nC*ӐHU5dG)苘}o{(`lu}TEixxҵwQ g4w©|etM(.֍ի" ɁJu`Ukߥ1NcB=}Ml_yB/42Ou eqqaֳ(O^ A(zVZMy.mbJ#vEŏ5D?pFCNdb _\] K@Dis[EZ=7J"<KOsNKXYA O G *9gLd޾5܄H]v(Au+6&^&B,9[!e4Փ^;ms烊M9yk\ŹgT ⤋J9Aa Q+1x{P/ ?h?ӴuQTbZgֳ=sFO%`8jh3K#0ǔm~l'OA7ސPl P:cJp!S>k骸9xˤE7#.sn+tכ4:PE[?}l3KoEUupYڶ0R04 >.r|)*I6;BK Ige(,#c4I2f}\y/vKqMsRE5;VXG|QFs 3iWH}\QfU&tan ,?dB^w\ғ{^k<@wȷ\B?"R}eEJ'^bœݧ# R~B@4۬$LB_L.)jL&ǟ$,\,f|p2f9$Zs91Y Չۈg7<.{ALĂB+ӧIC?A-C'Hah ˉ٭ԺħՈP? UR r O{VΪa_l[Ȍ|8ss N2my̥q.(18q&K?!sbV Ǥ x5j/@#\rn"x\fE% ǛD#{2mKgF?̊#EXR%I {ipba4_拭ʔCS/PT'_KKb=,)0d󮌑$6K(S5l^fBT=_ U/؞,Yw}+G>E ZW3ggc)7. TUXK?Qb 7'5,酈 Pkp!d"F T*3)WA:DsX kq?Xj4rA$_-UwOJ|9'ôEV^Xh5-[Smsz⺢l 3ﯓRĒ"mr2t51.Bw+@"Iœ# Դ 2v //} K'Va4XkS놁y\$D-]U01G_ӰYs^ҽ>2߼3?Uza~]{7(B&'Nұܕac ܷI'Ϣ]'3DI@٦T> KOq?X,}[Ա.8BnGW)_XNnojRu& mu2f !@n/fu $8=zw<( ڋ)(Uy,I<[QyiZ:>!E.R렠ڤ{arx{Jhp6H7/{.%0ISgO~P(I7na˚B &,zU '`weL9 MY^4vtw25Dگ^,ASg +rfM~/:̀qw(NwiDYϐ,N3xh{9HD"35|{Xd.~ήgqEV`;ŒA`pPy#)&A$Zpxj=TgcI Jb2HK_FFi2}]]#ڧ$o{M.I)szDTcvh/LObC+ާXZ澓6 CYPMYvy HXcbYY{s_.Is >дMcaS;1mEa|g]VՆ0Vw4]с'ܝ}*{WV1Ƚ,tH;rF(A y9C2ʠ2TC>vSoAj 넜į#{%q .5:̟' 'i_Wă˞N'frfDlx@3F"yUf]Iaت=nZ8P*ȠuC.kZ&>=!ebC9_:'5iP֨gƯSfŖb'9~`rrR*G3 c͘tXS`g`pg7wa'TJ wC[_RRU ÝOK}ܒϺ7p5ݺx񙉽6{8_vb3: )~с^ıosJE>{z^AJi .O_tH%k+G >gIu$Hжҿ'T`wxFAҼQVl͈@ݱS'.vY49uiOv6elrl|bZP)Ǫ)ѪAMMQCI*8oU9RwLQP:<{.iją#7\Ėz`1rj8xsɀxakl,WLgNRkwb7W+> ZvkW{ҥ)_@-:'L{fA3R5 OA!IT^A>ӷ/N\$\wo^FPqF`T`聟1GR)~u<8&$ WR}rk2wɕN@EHIa!^hClȈ׺Q +}vc3 uąP:Vu]}'ZHK|$vM6b&K|NʿFodf~po6#u|y9 A)ԕ+m4&Rq5=vI̩ K=kɥu&Ff(!>kTUd136&B9:O+xpZ 0\p+}v<ʭ,@ZEhEM;MAzV{ Ke0poK^V>c ?O ->8yHQ_x)Kc.&r^LR$CM&ixRFlğkȏJ.z2o{@(EVZVJ"4-#+;/[I`_V)_֐_V-)xv{@)LdG~j+iSxoI 9/~< d\I2ꬹMURٳ_F3Y:g/ls3hMJ'6lOqSkS瑭֘&!ɖbX_sfX)Cׂ2+=4K_ [g31%+kn^x=x!(n~]1%M[$V핮iۊcCkS[_C$*uẂr^+yV!C@5~Hwn|_QK~yN\'a 6)1I?36W8U\, Rwl$?$21V0(-57 h jaceǁ=C  `t sŖdViJ*p1tkd  l˧R~#9Jqj\i67w_ CQI&gGH)o[fDQLrRB}Hײ[Ĕd`Q~N9[k4C s^[ns<<:jP+>^NJ LC}&V3#Z o[N Sd-,b',2Ktu:nLC#˯Sn-arJ3ZD GtͮaX|Z酿*ăިg^ܪW:as(S]+$:&[#V9*7Q lb frqkNO~o9*vsHt5 `~J[ ^taGk 7Bjz4 .TE 1lfxdzN 3gTh;ՑpU4CȩN(ِ!פ/ F}Ц3Oo^i]: c'UU@;e F QW PC-jV;[g';c wKxF{i?ﱠ7%9 +-neCUdQ-P}H'jY(Br^Au寞}v7 9n_اK wqYňE1&m ( kWJ{Dy2" :-urU0Yld+oȻ߮oeNcp%Koa:$Fm<ss63jA|Z衑CR+|mp[@ZA¼6PCSMv*H\<p7"c5,kÙOE!-$w~"0/#݃#n n&yߝeA0>6 IĔVYoyHq߽YOX]E _ qljߣS4ßÎ~7RΎ1pE=?eOI]'2+UdΧs눿q`(&ȲTL,VJɿ\et$>G.AG82yMg𣏻@CӜi%lASPKZNԓԳr ]Ϥ*SJ>|{܄-g)}0=+ITfrGOA!b kY-:="KH, O 3=SD)ܫg}h1uiڕ&bw4P~$&G5BIS2eM ,ء5L1n᝾RO.)~hN 9&w' V?ޚ 7mGQx?O!ߛukL6G:+V59Xkt ZEnnxp`uJF \ЀRdƧDE#BsX'GVM◣ܘ,oλt_JX#I鍅suݸ`!%QFBQ˳L]#f^+Ȳ]S2t`>-f*6m T`=*&o b{)p'snB1 Rz1mljsCF}"i00S 7P`3膂ÝGm}#ﭠYðٓ3IyMrBfh~؋W)mmh?+t姫3,(շNĄik(K3m1k‚ ;k5_y7!RatTJ&FFEZe¦f)f%3 񼓸җhzDaV pD F]$B=۸݇Mի-oR,n<&/&)"ɤ|Mu*q{գGol}I>~:ؿ참ww7g`ppy!<Ö> PUxNiw50Y/b҈xx)־WK|!\9׸ D" g(mBeg*CoRS xeЃ,QgH!ͨYO<þ cq{k ~G?@iq 8p+-eJM-w&]50#JVG"%0;3C;KZ˽\׋ƷGRKM!E=!їa ,;WbԪunl4fi>][ ދ)4 *7O-D/ xkGL7V8T#d & [qf'/{ћYsږ 9!3/*yߛa&n|xVƱK;q᥁Q80K1hTK:DS;wղRXA4bǑqS?`v%-H)Y=\o00g9EACODlFK_S"^5s^ةV"t+}A-8D3.įoݤkFjj!c&Ii 2y?[S#?riT(FDa^nQ(8 Z4u_2uRbF"d꽖ox*$h=D!Ԋ{׹R6|W΢US9iᣀjCw=%WfF%#)U2ğ]1d<֜i }OC|݌O빥}ݔd ɍ TI"3 [{=*$|`+SP IJrGCUY\ys@_mЙW褜/a?K]߂i*Q%)pkd Iˢ@gOL#Q~=eřJfڿ2AMRkr_o2/S=0,U,b&SF\U) 샊-'Aڏ]:ጨ]Ǔ:/?5^Q6h}+t#Jɹ^z}2|S`{} zVO[ƘP^ MEc`]X )C1Y'U~Iv3GKC%w?I\6Rz˟ orxjq\s,:$#&$WhcdoV$ݎ8XY(9k6#APԤ LC 7p]Rd2CRgIpBcݐ@Rdn]De]i'(;v+\xd1+8@n4Y/6j IUoV5& _G>˳'>5񺋯j!̾듬hGV|*0#e'8x][{#_UP^ԃJ@  ᮈ=xL"ONҋNjuҗtS}_\2tWu4g04̚Mt Kc7te?˧26x1F1dߒ` ĸ@/9s^=[WYb ^668滖!͎zW5˃sBW5P('zZ_.PBJEBїsDe.b;╈!={ܾ*Pֺj 2 }B(~RX,iWDߞA۳Sc~!E((h^aQx8E9 FڮCb]vXB0}ǁ˼<;ܦ`|kXdY~yt fLeG`VhaPg`׌)5ؤ.@'2g!h*q+D8)zt:4RBtf~U$BQ㲨* H=g1O"#]lV'+{Nqv2@_z{BU~K^ٞ "^iHdFA^=cVNd DEYk.dH;ky A?ْdMٹ Tg?ONٮGZ ѓeaZlp̐0>u(8, $ĝtZ9Bx HoS.`A9"]D2/ES9 ܳTf,-[v)F):XU~zd[)S֫HjE@&}rrڵ P+b5yeK XƙLj?koxC?}ƧJǁ+\ڰF)fEo} <4߽?[dz/@f/@rt^̄b7 u dU#ǣGET]թkk.+TJ9aC]T תY$]H:[|n4kh ~(;T y..= ֋e= jz9,n:.4??| t$w9ss[L ;p,aNsV*{`aU_t-a ;v2!Iq#]T!J\ym,e[\F'M'@Y-z*T}9- Oak >_ۡk@pizgT3eu`+vҿZ>*ޟV j|9S^~K*Q~(!$~yHq A,N]SO֡ %d+M%`{t8Vm'wU'Ƙw`oNf";_IkYqF]}5Cg)q AS^ϖGfel +J;b(]O"޺&dbG+o ѭ@bC&o>Q`ae*Fz]..nfwTBTzW|BȾЀnLNZsG VL/UH3my!Q_Ud0/\?AAks_gM @rk\kgH4$ty$v,Iw".lh$ slb<-אM Y(-D @H<85VÁĥFpIqx/朜 YP2: heQ}1/I(n#[c=?!s\$+s[UyPԦϫ;%D! o6+H/Q4) tFqX➄)9b$vD y sz+jU n_m41YYPdHkp? :iZetxnr؄A@Ќ;}Es6)FBp7G0Tpq򐔷H"K F~ :kh#dUBD%ǍoIFS|n1pkֲ#a}j O&\攔<1=A (Fp+HQE6rg"wVhH3O͚);MO7S[Ky%ٍ͒|kAX2i[xt,I T+Y5AwH+ؕv/P% KؕMWM "T VAG  ;I' un̓!?ι 9 89a7r#nu -uU0}Ew ~%6r1kJRQE"f ʷ|R@'띀0d~[Tf.@~j ]u tM,b͛"p89٪ϔKaH\#@v܏Lc@7JLcTypsE[)ghWF;ȫuƓB0;H #빱/aOVbB~#qb M5WkJczʘlşWжh)ۆ6۱uDƴ 0^qA<nY=hl{H..EÃޡ-|D_&GLa:M51XG6J\N؃Ϝ9eϼ 9FEպC_S&๧éFX \;vUw|/y]8R/ F ȾОSo{tA u)mKou+ކ: Nj)JfКş5z`8t G Zm9ҨӺi I8p B25`=ҩ= 7IN"^ ;S>6y ^E&)Rz+q%?{9)FH;DK\s:$^™Qrx ۃJw鏄:aQWi ܮp<=7-b5x ] Z`p(>?/i *-AwO~88$ XMRlUB-|Ys/=D-]B,N7NFW16% /pZ* 29<cMOyK TZTp:V PJWk,ew>KS ?{ObJ զ筝b֤pZx{X]<9fUJt N;'nȱ2R\$oWA}U1Rrk*taY1{Hcj 'F}i>dł}{U[Օx\ނ]׸o3QYn d>v|'o f*ػU{[jڟ>~ A1]>V%p DlI|~.jK |5>z}9CfS:ϙgu ~\^T SmV}Umݏm i r?! C#{);a9l]4M.^ЩR11DfJ2u(ʭ#j#kDpD!H>332N;K^p{?%B_WlgL)Qϻ1utb4ۘ, 賂}&qo.UC V)bB*hZ9E6[QNXU}$7xDi8.r$<& sjмp\tO֐2^u@PLwۢ0= sE5y|Qǵ wm-2+ĐuG{/ʩmC~s;~ҏwJL(Īfi؁ꌹ_?쭥&u4^ O3/<^g%™d%$ġVũC\rUuXfAUXqaq˱1  {[^ TF=8`=R?t^q$c3CֿLrzfu+J̴8ZG GT߇'3SlRelo>lv3,^=‹(qstIEYo?\ e5=Vz9Y=Nt\8>M[YI!:ݵ.% ~OԚ\l/zM Ԅ>oMh-=#mh?hPy+"l&V(|TZx.g%HnCELěDjg!P+< 2c\,^Z9SliP;Y7ၹ1 >Y+:X\L^Q~TNbهnH՟1eu,H=Jwl~feOUo/?*8YD3v"Ы_69wSJ}2Y1Rdx߭>AELg0[=xV 'uS*T:TA h{ƻWWs3*b|FE|Z:봹1]u _4Pf A $n^œ}J;: mFjU4{!5ٜ9Cs|KQGv}u*LlޛC2y ЌPCQ&(MHU<59!hYդH2qG:c 6Nu1-(@)dE茥@ʌ$#B|

Уx`T1dʓ㠪_M"B2ޡ;=\Ncs=\鸻ߓ +i_@ /8&eq(偈=O$].F\.pӰC&ڂ?4Gw9\2Z, Qpi9 F/$[#J$ r_j-e=Iu+N]@D bs /D"'AܡZzu<}i5(u,7R;'#g3(B(\4+K)1k6j}im?_~q/_4_V{9 s,Q& OopiQ}pSeQҙ(ҷgGc!@qj9'h|y TAzAjp 稉AjCDe4RdCֺ E:ZNAo..1&*c2|LPTi$4]FU)xn:a!xPZ]0pwDZwP UW.{ԾLP)5Pq sԇd帕uF1RϒeBL)Con s%v0ǩ 39i\_%} pYQ|5тb@ID~F(WJV;5?1dMlj]úI:՞@ҽ=%>̜9TyFQHy&&sa OTNNPۓ~٫<'R~b^CqiΊ#<,7 5nS! L} /oyb3z"ša%ILZ9wҪ+? Pcd0LK=+<QAkϯi=0jrX.dU8=}u&fznOT5ÄC4Nt60q3*= v%uwIZc9JD(ʹ.]ˣ-oDw U8r]Q~P>BVK5͋L8~r=7s,vWAic@5lBy/j5z(E:'Eқ]&p`ӓo=*M36,QD ^vfOKPBx6lC pA |"i)WʗdQ{'{-rn;X4=m쪪vinC1u\+`7ix̫c{R>@4ʣKҾT$Z68˒9 'B)H4)[h.C#*izyք_[2\'`zD#jݚ&&bm pQR>/D9K{aڂNFUpPTBkRY>2ÚXoN24P]SLDQҌ1Q%=~POv@@p*-/ѿy4]"xE1"hdIb( E^1 ,*՚tI$w'17)^JSh-=*O褲$$Gta1H(KԽ,Fop<{cՎގJ]%=Xe|SoNWui's|u{ H{ jffJ՛.eMxi\(hѨ#)r`-㥇o E*nD[=R 4#wtuǵ!^mb1Yآ걸e 9+.oZ.*f)r^EnQw w gϟw+i(^cj}6^0謆]ICY6-0Ew {T/Q)Y%N9߾Y9LA7 [e͌gyo$OAsy36ƀvTV 'M.e(e~֨y )yRRy9<#$IL&¸ROBS($q7q{oRr!?FnDx!z itoQjemP. Y[lQ;c'oLG&hY?] ;[}wVK?a%NpjYge,FYFʐjzd¡neK*] [ι[nsLPaJ3:KEFrp:t 3nd4o/ޏR4Z_TNhkcbWA4!mQoҩ F+6+M\Ozҹ?s/+Hrg%3Eضb][Gq\RQݴ0qsd+/ դbS[/>Rv)2f;޴G&Kʻ۷j}tbEL72JvJ#|oOp~}oxBl"d o_cM"wSUꖱ@L1kI/6Zj3~+33r=3:Aɫ靵j$F‰nɵjԗJq^D"Cx]"tC 9g[o =Ɲ2 MHL cV\TceG(a-;VDU-H?ʆIwS8%Ða>2ɈbᔝyL#A>E#re]o oW! cwt]rө<B$nhJ|X$>,APT)|[ ZB[[1ޏCKG7ܔVK~Fނ30&SNRHSTqO~V.u@TGC\\Cn\ a|ű`vF,36kd7]"d Du9ĺ:4]03~=I#s ٹB;E^(jz;D}ҙIȩ ÒY_wJň ^'!aW<,u~y-NE4Zzlۜ#ҝAGaW3=Y>{ `">ZaOSVxxbHD[z w]~.IswJV?ޠY˫6K*qGX* @!T=kHoة*}ln ikMTGx~ 9#yM]W5l=!"@!~3]/C #vH6V|TotqQ:^*ﭠ3 2KvBB0'q\lQXU*6[!: :+JNFnWcΒܙNqR[[ t,qQyޜ9U8,`V0;קpõ:z4hƆxt`7ޢt'/*Vf0/QcT^XO 6 N@rFKH_ςvtC"#ah ^$7ڼ9,}'Bbȯ.,K!Ns§ isn+_6oKA%c";)`0j\UB{ϯnF_kDyr:U,%!L*_Bx8겒p{b# T9gD@hl*};"4L-BM.bf/l8+s4ם9tCaOF; }c#OX~*68HlrԞF1ݵeS'C4f7X7"WN[2,͊C@s <^zFVSr@W!Qym^n56,ro돰fLۄs0m$/?V0[P3^EW[E9᭶!3ѭS].va<}9x}}&%poz;m<1B+9,pwV-Y K"Qd)7ŋW4;WT71Ä{X L IMKũCnr]*"Х[M>pd7uB<׺GZVqh ]ԣFԏCB%,ȵy(bz$ͦ9E^$mAKdHm` 6~30v> =n2s|tq]@!܇p⟻Jcfb"oP}94CgXư$֏Qyy}غNzi#J7B 2 VZȓRQr!fCUYP=w{)V@em)VNWC\UF k)#K-347QwqQaYLv惣 #d6҇Y}m]ȶ~Xero' TNl;]:fl+溈)$;JAIj<˚Y g|T7EgheALUbkCenh; G` I'[a 9ԡ@uPǠ*hW& jKѿ 5JX{b3͐hrNX=ZEKP/A`ܧYkcH38qCȑ쁚]5,0pwSJW~r6"j7[/@o<&cpsԾ%z1}fҜϜf7*tZ6m:Ɓʽ"z%}MvͤRht >Hs{;2@%to;Iٞ%۩h\,V} oQ  g&fğ'GCv`6q>k-vZ̊0hz>6q bz[!BF%]^-zLpnʻTۢ#äpGyPMx[oe,6vk.*%ѐ2mY, xn& $}0 @vq?!M!:$cen|osYS~>?y"ɬ7CTD`#2mpI|=oƷ/&Fq{lBZLDg&~R`r^/@KDǀ3 h);y)C? Hh:F Q&qv8ZzT.o3ByHdeBÖǦt[ kcwS8ujgœ"WF fEcMT^)tY$~V:a?v:\L[w7 "J+HX`W7=sZy ˏ[7qм p,BA̩iO)Ɠ7Aw^%*F I2E.J;p,FXލ#EmfsL㗘˸1O9Z?6AXݕ~vjg3oU|}8g\A^9~ڕ\ԹiҸjݱz_Rkz^lPK3)sYwWIM0rHsWRi y`VU?~|Es Fn(uScrxu إ돩QSr,銮 ?XIaga ,Gb]wJXǻ;Ocy | b#,jG8-T",;vov-|5O.nCz52I|τhW-豏:0 C_{s NSB CvEcgC,:%H}>gV&` q#+tiHC!) `;#_oTUQ'5{r=\4#^ۉj(r8ve 0HKS gdOzXI8$5J\a \1 Bvl'7YύiHan֭KkSkل^q=h}K1K40@#vX$Ͷ-;_`y-\Ӡk ( S?u ORQUjl\U$/`$PLv+qˌIq,sX/Ϥ$]pH.{e&hrAM4y;Ŵ`j{icWRt1g]>;c,5e*$XUd!X(k!=x!h]R8H)݉+r3C03W 󹬃/V+qP)ie8?w_YAS5_ɹu;gNY߹1SiQK]]=]҆f8G4`Ǖ̃!´GO/i r@p oޓ;`8OM̬Mj_')GTx/UaҲA=fW"A:O_| zVT+A"An ͇uBY߉c)EcAHp}g*丕oM0ni7qfPӑ2#,} YE- +}EyfMt4>N";Q}fI?0WM͉,V,op} NOڕwuM^/i l;z,=8KCoɄ;=w*ۚݫ!}Ebb!)8os " +B1\N9($?y 4MMcF^(Sxbբp?X&+:]ÊK]hWrqHG5Bg|unGHVRġϳwڨ~PN_ M*#j)udB1Ǘ03E] [FgN93nyڥs3̽S{ܚ"W_yO;W  N8ԑiqzgCՉOO$UӕcwaᷬU\ňAVgi91\XZy#|Bj] ʧG&|Z8`* d:,xOS+Ay[M%1@K.mi]c礊Gʧ#txE=m& Tvъp7 ) & qUѳBUiL`$-_~T un#+u5 amߺ5e;|hFLO4Հ(Heٌ^h7_phHdzd@6õxWA-j1Xl(6WD\;8N6 P\mtA2|$Uw7I &NP/0> œa<˜"R@R?L[hw]˺BideeEⲹL9 "&ۮ_):ёfߖ+>b!22vOTO3Bړ TuF(M5yL , fR&[:{P$ʱ&fB;{T5lJ|^mA85FBbUCnYS x>QL8[.jO{!p嵰lZĂ6я-Z:("5~^ꀺD0|UzD,|Rw@Uc>kBềΦ @@C3(]e"k/dk*% ) )zrbMP(ՌGqěy1s;j07Wa|c㵇j]dُS{W޺lAXW~! (4MI 4B% Ej+oŹh/@w4J$7եx"u<4E)l@cGA8䖷 ]=jx&bDzW.]LQB!r|ɝ#>pIkR~ylCGO%[ J`axY"b-BBOOT#K#3 ^ց؜{ZnSVLOD目&8sfu6 )sҁ P xقf5I`+ԯ/ z*N`srlMȹSfQI 3Uy߯7y=낪G?M]d@z߹k79&&Ӽ~B]XcK}fvb}J"wk0urzz`/ >S/pc_.̢DIO6xÎH}tYnD4ܐ8x)}Ypi!. >f چ)pnW$Q{3C{I!z=qfYp0 Mt>C5OdM- Gw`/H#y-BH4R\ThS"].V}C#9;0d$g%I$ԯ?/3PIGYG~s?:'ld>(F'+M3rܾI!yvPwcM1բUc2GŚ/hG1ӆ[ș}g:8Z. :O h |kT󌧋țwn\4^'+CYPN ~I,l=L7N쯩i #AYnb+uAL*\Vtా~![-zH8=J\%5XvF %LXhdߣɕ0jº-sm2:ls)p,)q w[1 >.6b a7m~u9SbXxp9& QҐSc2yK&ir'&#8ɀe[:i >`vOzv@uR+1MWULWfdXdY gx*;F}ƪBy|ؠiǭ(Ѹl\y^fIC)`L>ALBOE{|F&;0IWvTEXh6Rn/'ր[4Q8V7\]Y@ԾeLEĪ ^0 cC@n/!~Kf8 =z1~& [ *8?I~&rpS$;,3,L%3jVc8y[k }]p1 }fC-M{/u19y嫈ҥGl'>՞T,y;?z+BA*]NEklOVӾ2=(bD9c]yx'~+R(5:f APw4cJ_DR ˗ZsK,ZtvA 6'&KHpi-)zuO@|7qB#0Mt4g}@r{DUÀXC\C茪ϲ GLieR]z@6)fEHVA7T@}B<YdؐVDLɫ{R IU.}A\y|ʠoU/U6[s0]X*q]G! n9ҫ.*rS`>6ZXc*(V@_DT"p̾l_46(ҩ ̴s( ]pCdmeyKek[$tBC<I<\L,#=vEE6Dm{@s #?v]p]NE3oŢ lAD萻| dZqIRf&pL"u?cyd. [6B"*K:M4;j-~5۬oSr_&㥂(]5JCtϐ`O{x}TL'#^Œ+HXi_\onK"$bwI#d.4eM<F${ʟ!!I7"] (;+/S҇xϩ#|[p"k("=Mo3+{v.$fD;`{B_:Q1,}bmFZ`bAlBgx܊n&廀ܳ/B$,*7w ^RA5nWa,D\Rja5cb.Ǯ<;!lRnybP㻅O̓.1 >(Bղ4L8*{ﵲ$`C>ȴdt" Շuwx)dKHp[vbxO0H!#;?ѩl0Hi3f5ﰦ=؟2c[TAѱ׉M vMJ5#!]܇txwYVhZ/)9Qb<5T*S .RTPD#lrf)s?%I֨|>;Zc zaFv@VȲYkn΍r8-A3n_17Āh:QK@ec.zCۿؓ4 h={ͽ|r*_V?e;u#uAEUX΋֍MrEY>HF̒W3cV"HTOz+;_)ˆSr,!aؿdfj>ca戛h8uu\&mIoXb:ApXCI{4H=E.Wq}1C<g}=H Ut* )fΩTB=Vz^>.s c*״5y bš)PGZ;U/ wWeaB %2(c!e;/p`6G8P$ >\?qRR^&DtXJ < [bHix#$n ~ Yi ̳u ϛɎ@1rBNGw ,8Mlx~#W< 3ɝIeրٯotSjUqEWdʪلD'G/5=Ll=*A7y..e+sN'!jNI#\KG_H6+r\+V9kt;ĒF;NGJ|s*!,{85KfIJa_ E-8v槅92*J=nZȯ[ʰG~|`"QMle?V9"J?dF&$ _jd8{u<%qD`y2sͿ~#FWeP84+͌UV*Nc)!"W d%n7(-r+7|,gzp{aHzR4mN&%}A=pjȣѭL 5iݔ #Og:EE񜞐J,!z(Vz ШCƏ5oٲ*ys_IC]&DJ8 L7۝\8(1~#lmm%ߎ6 -d e18)ϲ ,- {Xlc%0%Y _ zB91MŵY ,JGnbW0Ly@;gf9!`4YS 7{Rki}H)8듃1= LdTC2݁$lQjR+W~d;dj2g(Z X2 E廦^=<Ϗ{ >`ala\EO7D*CV]  >[p_iC r=箍^6$ 9 ~Ǹ5vfJNX5V3벎oJ]Y׭AKgTdHEmyf+%LNdjt(8 3z$B|p{YYw6m-7 ^"OX1!|:!B8dW]#bC5D[_qt 1s5/cLNlt'@ԝC{1HӪ*:wu/\41XĹpHFvWU iB7Gן _FBR\|CI{`mԨǨ}s/b`ҹn%gJδwQ#,'8Ô׶G ujQ*Ek$v^9%e0c!: YZ