kernel-module-8821au-6.12-desktop-6.12.91-24> )lp 5ef36201520ae7296414a7734f8c2a609590af1d0fe8ac7b8a517b0bb8a118c2006d577f6fba51682eb8b976073aaef109db45c4Ր$jU]v1`>B&?&d$, / \     = @DINx|(8:9:::G#TH#XI#\X#`Y#p\#]#^#b$c$d$e$f$l$t$u%v%w%x%y%%%%%%%%%&<&@Ckernel-module-8821au-6.12-desktop6.12.9124Binary module 8821au for kernel-6.12-desktopBinary module 8821au for kernel-6.12-desktopjlocalhost`GROSAROSAGPLv2System/Kernel and hardwarehttps://www.kernel.orglinuxx86_64`Gjle2d6c0b0952d235639b06c62ded32faa372c247f77b6c02adec7ba8214042d1arootrootkernel-6.12-desktop-6.12.91-24.src.rpminstallonlypkg(kernel-module)kernel-module-8821au-6.12-desktopkernel-module-8821au-6.12-desktop(x86-64)kmod(8821au)    kernel-6.12-desktop(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.12.91-243.0.4-14.6.0-14.0-15.2-14.17.0jujtw@jtw@jtw@jcSjcSj`jPjPjPjPjO@jN;jL@jHjHjE@jE@j?@j>ij=@j7@j+jjjjjj9j @j @j @j @j @j @j Pj Pj Pj j\@i@i~i~i~iiD@iD@iZ@iZ@ip@i@i@i@i@i@iX@i8@i8@Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-21Mikhail Novosyolov 6.12.91-20Mikhail Novosyolov 6.12.91-19Mikhail Novosyolov 6.12.91-18Mikhail Novosyolov 6.12.91-16Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-14Mikhail Novosyolov 6.12.91-13Mikhail Novosyolov 6.12.91-11Mikhail Novosyolov 6.12.91-10Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-6Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov BiteDasher 6.12.91-3Mikhail Novosyolov Mikhail Novosyolov 6.12.91-1Mikhail Novosyolov Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-13Mikhail Novosyolov 6.12.74-12Mikhail Novosyolov 6.12.74-11repo bot repo bot Mikhail Novosyolov 6.12.74-9Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-6Mikhail Novosyolov 6.12.74-5Mikhail Novosyolov Mikhail Novosyolov 6.12.74-3Mikhail Novosyolov Mikhail Novosyolov 6.12.74-2Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov - Fix "Zapscape" (CVE-2026-64561)- Fix CVE-2026-64531- Fix CVE-2026-64560- Support Baikal-M Graviton Angara board- Avoid QXL hangs on an unresponsive SPICE host (okdesk#4023)- Fix "RefluXFS" (CVE-2026-64600)- Fix CVE-2026-53362 and CVE-2026-5336 ("Frag Gap")- Try to fix booting without monitor even at UEFI stage- Try to fix booting Baikal without monitor and then connecting it- Tune descriptions of 2 last patches- Try to stabilize EDID reading on Baikal ET124- Fix monitor reconnecting on Baikal- Try to make sound work out of the box on Baikal ET124 board- Fix Baikal HDA codec configure failure due to built-in controller probing before module load- Try so support Baikal SDK 5.5 and fixes for Baikal HDA sound- Fix "Bad Epoll" (CVE-2026-46242)- Easify debugging Baikal sound- Fix sound on new Baikals- Fix "PEdit-CoW" (CVE-2026-46331)- Fix x86 build after Baikal patches- Fix bootable kernel copy in kernel.spec for cycle- Update Baikal support - Developed in kernel-6.12-bl2- More ROSA infosec patches- Fix CIFSwitch vulnerability- Build kernel-headers in rosa13 where they were in dropped kernel-6.6- Fix building perf- Fix issues found by statical analysis (Svace)- upd: 6.12.90 -> 6.12.91 - Changelog: - ACPI: AGDI: fix missing newline in error message - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek - fixed speaker no sound update - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix UART1 RTS/CTS muxing - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8qm-mek: switch Type-C connector power-role to dual - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: lx2160a: add sda gpio references for i2c bus recovery - arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit - arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes - arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration word - arm64: dts: lx2160a: remove duplicate pinmux nodes - arm64: dts: lx2160a: rename pinmux nodes for readability - arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3 controller's phy-names - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure syscon - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8650: Fix GIC_ITS range length - arm64: dts: qcom: sm8650: Fix xo clock supply of SD host controller - arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace - arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace - arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan Pi - arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up config - arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0 data pins - arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on data pins - arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: Reserve an extra page for early kernel mapping - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64/xor: fix conflicting attributes for xor_block_template - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ASoC: add symmetric_ prefix for dai->rate/channels/sample_bits - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED - ASoC: codecs: ab8500: Fix casting of private data - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: soc-compress: use function to clear symmetric params - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc3: Use standard dev_dbg API - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH commands - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: wait for blkcg cleanup before initializing new disk - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec - bpf: Allow instructions with arena source and non-arena dest registers - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf,arc_jit: Fix missing newline in pr_err messages - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: fix mm lifecycle in open-coded task_vma iterator - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix variable length stack write over spilled pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Relax scalar id equivalence for state pruning - bpf: return VMA snapshot from task_vma iterator - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Take state lock for af_unix iter - bpf: switch task_vma iterator from mmap_lock to per-VMA locks - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Validate node_id in arena_alloc_pages() - btrfs: do not mark inode incompressible after inline attempt fails - btrfs: fix deadlock between reflink and transaction commit when using flushoncommit - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: pass struct btrfs_inode to clone_copy_inline_extent() - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - bus: fsl-mc: use generic driver_override infrastructure - bus: rifsc: fix RIF configuration check for peripherals - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size - cgroup: Increment nr_dying_subsys_* from rmdir context - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON - clk: qoriq: avoid format string warning - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: ccp - copy IV using skcipher ivsize - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: qat - disable 420xx AE cluster when lead engine is fused off - crypto: qat - disable 4xxx AE cluster when lead engine is fused off - crypto: qat - fix type mismatch in RAS sysfs show functions - crypto: qat - introduce fuse array - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: tegra - Disable softirqs before finalizing request - crypto: tegra - finalize crypto req on error - crypto: tegra - Reserve keyslots to allocate dynamically - crypto: tegra - Transfer HASH init function to crypto engine - cxl/pci: Check memdev driver binding status in cxl_reset_done() - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - devres: fix missing node debug info in devm_krealloc() - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm init: ensure device probing has finished in dm-mod.waitfor= - dm log: fix out-of-bounds write due to region_count overflow - Documentation: fix a hugetlbfs reservation statement - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - drbd: Balance RCU calls in drbd_adm_dump_devices() - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amdgpu: add amdgpu_device reference in ip block - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: fix spelling typos - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx11: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring - drm/amdgpu: update the handle ptr in dump_ip_state - drm/amdgpu: update the handle ptr in early_init - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915: Relocate the SKL wm sanitation code - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wm: Verify the correct plane DDB entry - drm/imagination: Switch reset_reason fields from enum to u32 - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/loongson: Use managed KMS polling - drm/msm/a6xx: Fix dumping A650+ debugbus blocks - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: fix bits_per_pclk - drm/msm/dsi: fix hdisplay calculation for CMD mode panel - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm/shrinker: Fix can_block() logic - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/v3d: Handle error from drm_sched_entity_init() - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/xe/debugfs: Correct printing of register whitelist ranges - drm/xe/dma-buf: handle empty bo and UAF races - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - e1000e: Unroll PTP in probe error handling - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - erofs: add encoded extent on-disk definition - erofs: avoid infinite loops due to corrupted subpage compact indexes - erofs: do sanity check on m->type in z_erofs_load_compact_lcluster() - erofs: unify lcn as u64 for 32-bit platforms - eth: fbnic: Use wake instead of start - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - ext4: fix possible null-ptr-deref in mbt_kunit_exit() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: offb: fix PCI device reference leak on probe failure - fdget(), trivial conversions - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP - firmware: dmi: Correct an indexing error in dmi.h - fs/adfs: validate nzones in adfs_validate_bblk() - fs/mbcache: cancel shrink work before destroying the cache - fsnotify: fix inode reference leak in fsnotify_recalc_mask() - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: prevent NULL pointer dereference during unmount - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: usbhid: fix deadlock in hid_post_reset() - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hte: tegra194: remove Kconfig dependency on Tegra194 SoC - hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback - hwmon: Switch back to struct platform_driver::remove() - i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers() - i3c: master: dw-i3c: Fix missing reset assertion in remove() callback - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - ice: fix double-free of tx_buf skb - ice: fix ICE_AQ_LINK_SPEED_M for 200G - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix timestamp interrupt configuration for E825C - ice: Remove jumbo_remove step from TX path - ice: update PCS latency settings for E825 10G/25Gb modes - ima: check return value of crypto_shash_final() in boot aggregate - ima_fs: Correctly create securityfs files for unsupported hash algos - ima_fs: don't bother with removal of files in directory we'll be removing - ima_fs: get rid of lookup-by-dentry stuff - iommu/amd: Convert dev_data lock from spinlock to mutex - iommu/amd: Do not detach devices in domain free path - iommu/amd: Fix clone_alias() to use the original device's devid - iommu/amd: Introduce helper function get_dte256() - iommu/amd: Introduce helper function to update 256-bit DTE - iommu/amd: Put list_add/del(dev_data) back under the domain->lock - iommu/amd: Rearrange attach device code - iommu/amd: Reduce domain lock scope in attach device path - iommu/amd: Remove protection_domain.dev_cnt variable - iommu/amd: Reorder attach device code - iommu/amd: xarray to track protection_domain->iommu list - iommufd: Fix return value of iommufd_fault_fops_write() - iommufd: vfio compatibility extension check for noiommu mode - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - io_uring/kbuf: use mem_is_zero() - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipv4: udp: fix typos in comments - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: udp: fix typos in comments - ipvs: fix MTU check for GSO packets in tunnel mode - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining - kbuild: builddeb - avoid recompiles for non-cross-compiles - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: scope conn->binding slowpath to bound sessions only - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: x86: Fix Xen hypercall tracepoint argument assignment - leds: lgm-sso: Remove duplicate assignments for priv->mmap - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: handle rbtree insertion error in decode_choose_args() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - locking: Fix rwlock support in - LoongArch: KVM: Compile switch.S directly into the kernel - loop: fix partition scan race between udev and loop_reread_partitions() - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - mailbox: add sanity check for channel array - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: mtk-cmdq: Fix CURR and END addr for task insert case - md/raid1: fix the comparing region of interval tree - md: wake raid456 reshape waiters before suspend - media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe - media: i2c: og01a1b: Replace client->dev usage - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fix rx timestamp corruption on fastopen - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - neigh: let neigh_xmit take skb ownership - net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue() - net: airoha: Implement BQL support - net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - netconsole: allow selection of egress interface via MAC address - netconsole: propagate device name truncation in dev_name_store() - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: realtek: rtl8365mb: fix mode mask calculation - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: conntrack: remove sprintf usage - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_osf: restrict it to ipv4 - netfilter: skip recording stale or retransmitted INIT - netfilter: xtables: restrict several matches to inet family - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: mctp i2c: check length before marking flow active - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5: Fix HCA caps leak on notifier init failure - net: page_pool: create hooks for custom memory providers - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: fix a return path in get_phy_c45_ids() - net: phy: qcom: at803x: Use the correct bit to disable extended next page - netpoll: Extract carrier wait function - netpoll: extract IPv4 address retrieval into helper function - netpoll: Extract IPv6 address retrieval function - netpoll: fix IPv6 local-address corruption - netpoll: pass buffer size to egress_dev() to avoid MAC truncation - net/rds: Optimize rds_ib_laddr_check - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir - net/sched: cls_flower: revert unintended changes - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net/socket.c: switch to CLASS(fd) - net: tls: fix strparser anchor skb leak on offload RX setup failure - net, treewide: define and use MAC_ADDR_STR_LEN - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - ntfs: ->d_compare() must not block - nvme-pci: fix missed admin queue sq doorbell write - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - openvswitch: cap upcall PID array size and pre-size vport replies - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove cpu online check from cpu add and removal - page_pool: fix incorrect mp_ops error handling - page_pool: fix memory-provider leak in page_pool_create_percpu() error path - page_pool: Set `dma_sync` to false for devmem memory provider - params: Replace __modinit with __init_or_module - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix() - PCI: dwc: Invoke post_init in dw_pcie_resume_noirq() - PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq() - PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Align pci_epc_set_msix(), pci_epc_ops::set_msix() nr_irqs encoding - PCI: Initialize temporary device in new_id_store() - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports - PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Free up Endpoint resources during remove() - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: use generic driver_override infrastructure - PCMCIA: Fix garbled log messages for KERN_CONT - perf branch: Avoid incrementing NULL - perf cgroup: Update metric leader in evlist__expand_cgroup - perf evsel: Add alternate_hw_config and use in evsel__match - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf lock: Fix option value type in parse_max_stack - perf maps: Fix copy_from that can break sorted by name order - perf python: Add parse_events function - perf stat: Fix opt->value type for parse_cache_level - perf tool_pmu: Factor tool events into their own PMU - perf tool_pmu: Fix aggregation on duration_time - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf tools: Fix module symbol resolution for non-zero .text sh_addr - perf util: Kill die() prototype, dead for a long time - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: realtek: Fix function signature for config argument - pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/wmi: use generic driver_override infrastructure - platform/x86: asus-wmi: adjust screenpad power/brightness handling - platform/x86: asus-wmi: fix screenpad brightness range - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - PM: domains: De-constify fields in struct dev_pm_domain_attach_data - pmdomain: ti: omap_prm: Fix a reference leak on device node - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug - powerpc/warp: Fix error handling in pika_dtm_thread - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - pstore/ram: fix resource leak when ioremap() fails - pwm: atmel-tcb: Cache clock rates and mark chip as atomic - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - RDMA/core: Prefer NLA_NUL_STRING - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() - remoteproc: xlnx: Fix sram property parsing - reset: Add devres helpers to request pre-deasserted reset controls - reset: replace boolean parameters with flags parameter - Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" - rtc: abx80x: Disable alarm feature if no interrupt attached - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: use generic driver_override infrastructure - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched/fair: Clear rel_deadline when initializing forked entities - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: target: core: Fix integer overflow in UNMAP bounds check - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: fix __jited_unpriv tag name - selftests/mm: skip migration tests if NUMA is unavailable - selftests: netfilter: nft_tproxy.sh: adjust to socat changes - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selftests/sched_ext: Add missing error check for exit__load() - sfc: fix error code in efx_devlink_info_running_versions() - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: fix OOB reads parsing symlink error response - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: Use FullSessionKey for AES-256 encryption key derivation - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc/tegra: cbb: Set ERD on resume for err interrupt - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: debugfs: initialize firmware_file to empty string - sparc64: vdso: Link with -z noexecstack - sparc/vdso: Always reject undefined references during linking - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: nxp-fspi: Use reinit_completion() for repeated operations - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: spi-nxp-fspi: enable runtime pm for fspi - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init(). - tcp: make probe0 timer handle expired user timeout - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - tipc: fix double-free in tipc_buf_append() - tracing: branch: Fix inverted check on stat tracer registration - tracing: Rebuild full_name on each hist_field_name() call - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: ip22zilog: Fix section mispatch warning - udp: Force compute_score to always inline - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtio_net: Fix endian with virtio_net_ctrl_rss - virtio_net: Split struct virtio_net_rss_config - virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET - virtio_net: Use new RSS config structs - vrf: Fix a potential NPD when removing a port from a VRF - wifi: ath10k: fix station lookup failure during disconnect - wifi: brcmfmac: Fix error pointer dereference - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix 6GHz regulatory update on connection - wifi: mt76: mt7921: Place upper limit on station AID - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - x86/um: fix vDSO installation - x86/um/vdso: Drop VDSO64-y from Makefile - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- FIX GPO Frag vulnerability- Fixed building with bpftool on aarch64 (regenerated config with pahole package installed)- Fix issue in AUFS found by fuzzing- Remove no more used patches- Fix issues found by fuzzing- upd: 6.12.74 -> 6.12.90 - Removed no more needed Patch0512. - These patches fixed a vulnerability where in-place decryption could - corrupt shared skb frags (e.g. from splice) and a subsequent skb - memory leak in the unshare path. - Between v6.12.74 and v6.12.90, upstream refactored the rxrpc receive - path and incorporated equivalent fixes: - * bf20f46d94f1 ("rxrpc: Fix potential UAF after skb_unshare() failure") - * 016725807ce3 ("rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets") - * 3711382a7734 ("rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present") - The unshare gate was moved from io_thread.c to call_event.c, and - the check was extended to skb_has_frag_list() || skb_has_shared_frag(), - which covers the original splice-loopback vector. The skb leak fixed - by 0512.2 is also gone because the caller (rxrpc_io_thread()) now - always frees the original skb after rxrpc_input_packet() returns. - Changelog: - 9p/xen: protect xen_9pfs_front_free against concurrent calls - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: APEI: GHES: Disable KASAN instrumentation when compile testing with clang < 18 - ACPI: battery: fix incorrect charging status when current is zero - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) - af_key: validate families in pfkey_send_migrate() - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - alarmtimer: Fix argument order in alarm_timer_forward() - alpha: fix user-space corruption during memory compaction - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aloop: Fix peer runtime UAF during format-change stop - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for ASUS UM6702RC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx - ALSA: hda/realtek: fix LG Gram Style 14 speakers - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter - ALSA: hda/senary: Ensure EAPD is enabled during init - ALSA: misc: Use guard() for spin locks - ALSA: mixer: oss: Add card disconnect checkpoints - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger - ALSA: pcm: Relax __free() variable declarations - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: pcm: use new array-copying-wrapper - ALSA: scarlett2: Fix DSP filter control array handling - ALSA: scarlett2: Fix redeclaration of loop variable - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - ALSA: vmaster: Relax __free() variable declarations - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ARM processor Error: don't go past allocated memory - APEI/GHES: ensure that won't go past CPER allocated record - AppArmor: Allow apparmor to handle unaligned dfa tables - apparmor: avoid per-cpu hold underflow in aa_get_buffer - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: Fix & Optimize table creation from possibly unaligned memory - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: make label_match return a consistent value - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use target task's context in apparmor_getprocattr() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: c3: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: amlogic: s4: assign mmc b clock to 24MHz - arm64: dts: amlogic: s4: fix mmc clock assignment - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD - arm64: dts: imx93-tqma9352: improve eMMC pad configuration - arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - arm64: dts: marvell: uDPU: add ethernet aliases - arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node - arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: hamoa/x1: fix idle exit latency - arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147 - arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs - arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks - arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models) - arm64: dts: renesas: r9a09g057: Add RTC node - arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes - arm64: dts: renesas: white-hawk-cpu-common: Add pin control for DSI-eDP IRQ - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: rockchip: Fix rk3588 PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4 - arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order - arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: hugetlbpage: avoid unused-but-set-parameter warning (gcc-16) - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: poe: fix stale POR_EL0 values for ptrace - arm64/scs: Fix handling of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - ARM: 9467/1: mm: Don't use %pK through printk - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: boards: fix unmet dependency on PINCTRL - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata: cancel pending work after clearing deferred_qc - ata: libata-core: Add BRIDGE_OK quirk for QEMU drives - ata: libata-core: disable LPM on ADATA SU680 SSD - ata: libata-core: Disable LPM on ST1000DM010-2EP102 - ata: libata-core: fix cancellation of a port deferred qc work - ata: libata-eh: correctly handle deferred qc timeouts - ata: libata-eh: Fix detection of deferred qc timeouts - ata: libata: Introduce ata_port_eh_scheduled() - ata: libata: Remove ATA_DFLAG_ZAC device flag - ata: libata-scsi: avoid Non-NCQ command starvation - ata: libata-scsi: Document all VPD page inquiry actors - ata: libata-scsi: Refactor ata_scsiop_maint_in() - ata: libata-scsi: Refactor ata_scsiop_read_cap() - ata: libata-scsi: Refactor ata_scsi_simulate() - ata: libata-scsi: refactor ata_scsi_translate() - ata: libata-scsi: Remove struct ata_scsi_args - ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() - ata: libata-scsi: Return residual for emulated SCSI commands - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: fix integer overflow on buff_pos - batman-adv: hold claim backbone gateways by reference - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - bcache: fix cached_dev.sb_bio use-after-free and crash - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blk-throttle: fix access race during throttle policy activation - blktrace: fix __this_cpu_read/write in preemptible context - block: add a bio_add_virt_nofail helper - block: add pgmap check to biovec_phys_mergeable - block: cleanup blkdev_report_zones() - block: decouple secure erase size limit from discard size limit - block: fix zone write plug removal - block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() - block: relax pgmap check in bio_add_page for compatible zone device pages - block: reorganize struct blk_zone_wplug - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Allow ntuple filters for drops - bnxt_en: Fix deleting of Ntuple filters - bnxt_en: Fix RSS context delete logic - bnxt_en: Fix RSS table size check when changing ethtool channels - bnxt_en: Restore default stat ctxs for ULP when resource is available - bonding: add ESP offload features when slaves support - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: Correctly support GSO ESP offload - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add third round of bounds deduction - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf: crypto: Use the correct destructor kfunc type - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: Fix constant blinding for PROBE_MEM32 stores - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix u32/s32 bounds when ranges cross min/max boundary - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR - bpf: Fix use-after-free in arena_vm_close on fork - bpf: Improve bounds when s64 crosses sign boundary - bpf: Preserve id of register in sync_linked_regs() - bpf: Recognize special arithmetic shift in the verifier - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Release module BTF IDR before module unload - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpftool: Fix truncated netlink dumps - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: cfm: Fix race condition in peer_mep deletion - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: drop unused parameter fs_info from do_reclaim_sweep() - btrfs: fallback to buffered IO if the data profile has duplication - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix periodic reclaim condition - btrfs: fix reclaimed bytes accounting after automatic block group reclaim - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: hold space_info->lock when clearing periodic reclaim ready - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: make wait_on_extent_buffer_writeback() static inline - btrfs: print correct subvol num if active swapfile prevents deletion - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: remove pointless out labels from extent-tree.c - btrfs: remove unused define WAIT_PAGE_LOCK for extent io - btrfs: remove unused flag EXTENT_BUFFER_CORRUPT - btrfs: remove unused flag EXTENT_BUFFER_READAHEAD - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: reserve enough transaction items for qgroup ioctls - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: split waiting from read_extent_buffer_pages(), drop parameter wait - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use the correct type to initialize block reserve for delayed refs - btrfs: zoned: fix alloc_offset calculation for partly conventional block groups - btrfs: zoned: fix stripe width calculation - btrfs: zoned: fixup last alloc pointer after extent removal for DUP - btrfs: zoned: fixup last alloc pointer after extent removal for RAID0/10 - btrfs: zoned: fixup last alloc pointer after extent removal for RAID1 - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: starfive: fix device node leak in starlink_cache_init() - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - ceph: add a bunch of missing ceph_path_info initializers - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() - cgroup: fix race between task migration and iteration - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - check-uapi: link into shared objects - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - cleanup: Provide retain_and_null_ptr() - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs - clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: af_alg - limit RX SG extraction by receive buffer budget - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel-sha204a - Fix error codes in OTP reads - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix OTP sysfs read and error handling - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-sha204a - Fix uninitialized data access on OTP read error - crypto: atmel-tdes - fix DMA sync direction - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix netdev memory leak in dpaa2_caam_probe - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - narrow scope of snp_range_list - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - Fix packed layout in struct nx842_crypto_header - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: scatterwalk - Backport memcpy_sglist() - crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: tegra - Add missing CRYPTO_ALG_ASYNC - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - cxl/port: Fix use after free of parent_port in cxl_detach_ep() - dcache: Limit the minimal number of bucket to two - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - dlm: validate length in dlm_search_rsb_tree - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-dma3: use module_platform_driver - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add __dma_from_device_group_begin()/end() - dma-mapping: add missing `inline` for `dma_free_attrs` - dma-mapping: drop unneeded includes from dma-mapping.h - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm: fix unlocked test for dm_suspended_md - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm: use READ_ONCE in dm_blk_report_zones - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: always set BLK_FEAT_STABLE_WRITES - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/amdgpu: decouple ASPM with pcie dpm - drm/amd/amdgpu: disable ASPM in some situations - drm/amd: Disable ASPM on SI - drm/amd: Disable MES LR compute W/A - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src - drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 - drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% - drm/amd/display: avoid dig reg access timeout on usb4 link training fail - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: bypass post csc for additional color spaces in dal - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/amd/display: Correct logic check error for fastboot - drm/amd/display: Disable fastboot on DCE 6 too - drm/amd/display: Disable FEC when powering down encoders - drm/amd/display: Disable scaling on DCE6 for now - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fallback to boot snapshot for dispclk - drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix dsc eDP issue - drm/amd/display: Fix GFX12 family constant checks - drm/amd/display: Fix out-of-bounds stream encoder index v3 - drm/amd/display: Fix system resume lag issue - drm/amd/display: Fix writeback on DCN 3.2+ - drm/amd/display: Increase DCN35 SR enter/exit latency - drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 - drm/amd/display: only power down dig on phy endpoints - drm/amd/display: Reject cursor plane on DCE when scaled differently than primary - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop "amdgpu kernel modesetting enabled" message - drm/amd: fix dcn 2.01 check - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: fix gpu idle power consumption issue for gfx v12 - drm/amdgpu: Fix locking bugs in error paths - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix NULL pointer issue buffer funcs - drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify - drm/amdgpu: fix the idr allocation flags - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu: Handle GPU page faults correctly on non-4K page systems - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/mmhub4.1.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu/pm: drop SMU driver if version not matched messages - drm/amdgpu: prevent immediate PASID reuse case - drm/amdgpu: Replace kzalloc + copy_from_user with memdup_user - drm/amdgpu: replace PASID IDR with XArray - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Skip loading SDMA_RS64 in VF - drm/amdgpu: Unlock a mutex before destroying it - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn5: Add SMU dpm interface type - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix signal_eviction_fence() bool return value - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: Handle GPU reset and drain retry fault race - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdkfd: Relax size checking during queue buffer get - drm/amdkfd: Unreserve bo if queue update failed - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 - drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: anx7625: Fix invalid EDID size - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/buddy: Prevent BUG_ON by validating rounded allocation - drm/buddy: release free_trees array on buddy mm teardown - drm/display/dp_mst: Add protection against 0 vcpi - drm/exynos: remove bridge when component_add fails - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos/vidi: Remove redundant error handling in vidi_get_modes() - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/i915/acpi: free _DSM package when no connectors - drm/i915/alpm: ALPM disable fixes - drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters - drm/i915/dsc: Add Selective Update register definitions - drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/i915/psr: Repeat Selective Update area alignment - drm/i915/psr: Write DSC parameters on Selective Update in ET mode - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/imagination: Fix deadlock in soft reset sequence - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/disp: set num_planes to 1 for interleaved YUV formats - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix WD timer handling on DPU 8.x - drm/msm/dpu: Set vsync source irrespective of mdp top support - drm/msm/dsi: fix hdisplay calculation when programming dsi registers - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm: Fix dma_free_attrs() buffer size - drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - drm/nouveau: fix nvkm_device leak on aperture removal failure - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/panel: sw43408: Remove manual invocation of unprepare at remove - drm/panthor: Evict groups before VM termination - drm/panthor: Fix immediate ticking on a disabled tick - drm/panthor: Fix the full_tick check - drm/panthor: Fix the group priority rotation logic - drm/panthor: Fix the logic that decides when to stop ticking - drm/panthor: Make sure we resume the tick when new jobs are submitted - drm/panthor: Recover from panthor_gpu_flush_caches() failures - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/sitronix/st7586: fix bad pixel data due to byte swap - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/tegra: dsi: fix device leak on probe - drm/tests: shmem: Swap names of export tests - drm/ttm/tests: Fix build failure on PREEMPT_RT - drm/v3d: Set DMA segment size to avoid debug warnings - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - drm/xe: Add xe_tile backpointer to xe_mmio - drm/xe: Adjust mmio code to pass VF substructure to SRIOV code - drm/xe: always keep track of remap prev/next - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/xe: Clarify size of MMIO region - drm/xe: Create dedicated xe_mmio structure - drm/xe: Do not preempt fence signaling CS instructions - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/mmio: Avoid double-adjust in 64-bit reads - drm/xe: Move forcewake to 'gt.pm' substructure - drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' - drm/xe/oa: Allow reading after disabling OA stream - drm/xe: Only toggle scheduling in TDR if GuC is running - drm/xe: Open-code GGTT MMIO access protection - drm/xe: Populate GT's mmio iomap from tile during init - drm/xe/ptl: Apply Wa_13011645652 - drm/xe/reg_sr: Fix leak on xa_store failure - drm/xe: Switch mmio_ext to use 'struct xe_mmio' - drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt - drm/xe/sync: Cleanup partially initialized sync on parse failure - drm/xe: Unregister drm device on probe error - drm/xe/xe2_hpg: Add set of workarounds - drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138 - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: net: Fix Tegra234 MGBE PTP clock - dt-bindings: phy: qcom-edp: Add missing clock for X Elite - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix inline data read failure for ztailpacking pclusters - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - erofs: get rid of raw bi_end_io() usage - erofs: handle end of filesystem properly for file-backed mounts - erofs: move {in,out}pages into struct z_erofs_decompress_req - erofs: set fileio bio failed in short read case - erofs: tidy up z_erofs_lz4_handle_overlap() - esp: fix skb leak with espintcp and async crypto - espintcp: Fix race condition in espintcp_close() - eth: fbnic: Account for page fragments when updating BDQ tail - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: Fix integer overflow in ep_loop_check_proc() - evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac() - exit: prevent preemption of oopsing TASK_DEAD task - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: add ext4_try_lock_group() to skip busy groups - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert free groups order lists to xarrays - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: factor out ext4_mb_might_prefetch() - ext4: factor out __ext4_mb_scan_group() - ext4: factor out ext4_mb_scan_group() - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix potential null deref in ext4_mb_init() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: implement linear-like traversal across order xarrays - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: propagate flags to convert_initialized_extent() - ext4: publish jinode after initialization - ext4: refactor choose group to scan group - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: use reserved metadata blocks when splitting extent on endio - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix uninitialized kobject put in f2fs_init_sysfs() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fgraph: Do not call handlers direct when not using ftrace_ops - fgraph: Fix thresh_return clear per-task notrace - fgraph: Replace fgraph_ret_regs with ftrace_regs - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - firmware: microchip: fail auto-update probe if no flash found - Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fs: add for 'init_fs' - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: Initialize new folios before use - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: validate rec->used in journal-replay file record check - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - fs/tests: exec: drop duplicate bprm_stack_limits test vectors - fs/tests: exec: Remove bad test vector - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs - ftrace: Make ftrace_regs abstract from direct use - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros - function_graph: Restore direct mode when callbacks drop to one - fuse: Check for large folio with SPLICE_F_MOVE - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject oversized dirents in page cache - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Require sys_futex_requeue() to have identical flags - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). - gfs2: fiemap page fault fix - gfs2: Fix slab-use-after-free in qd_put - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Retries missing in gfs2_{rename,exchange} - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpiolib: fix race condition for gdev->srcu - gpiolib: unify two loops initializing GPIO descriptors - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: tegra: fix irq_release_resources calling enable instead of disable - gpu/panel-edp: add AUO panel entry for B140HAN06.4 - greybus: gb-beagleplay: bound bootloader receive buffering - greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() - gro: change the BUG_ON() in gro_pull_from_frag0() - gtp: disable BH before calling udp_tunnel_xmit_skb() - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: apple: ensure the keyboard backlight is off if suspending - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: bpf: prevent buffer overflow in hid_hw_request - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: i2c-hid: Add FocalTech FT8112 - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients - HID: logitech-hidpp: Add support for Logitech K980 - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: logitech-hidpp: Enable MX Master 4 over bluetooth - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: add quirks for Lenovo Yoga Book 9i - HID: multitouch: Check to ensure report responses match the request - HID: multitouch: new class MT_CLS_EGALAX_P80H84 - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: roccat: fix use-after-free in roccat_report_event - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hrtimer: Fix trace oddity - hv_sock: fix ARM64 support - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (dell-smm) Add support for Dell OptiPlex 7080 - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (max6639) : Configure based on DT property - hwmon: (max6639) fix inverted polarity - hwmon: (max6639) Fix pulses-per-revolution implementation - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/core) Fix various coding style issues - hwmon: (pmbus) Introduce the concept of "write-only" attributes - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: pmbus: mpq8785: Add support for MPM82504 - hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during identification - hwmon: pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration - hwmon: pmbus: mpq8785: Prepare driver for multiple device support - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (powerz) Avoid cacheline sharing for DMA buffer - hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt - hwmon: (powerz) Fix use-after-free on USB disconnect - hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hwrng: core - Allow runtime disabling of the HW RNG - hwrng: core - use RCU and work_struct to fix race condition - hwspinlock: omap: Handle devm_pm_runtime_enable() errors - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: tegra: Don't mark devices with pins as IRQ safe - i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: fix netdev->max_mtu to respect actual hardware limit - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - iavf: fix VLAN filter lost on add/delete race - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mlx5: Fix port speed query for representors - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix devlink reload call trace - ice: fix double free in ice_sf_eth_activate() error path - ice: fix inverted ready check for VF representors - ice: Fix memory leak in ice_set_ringparam() - ice: Fix PTP NULL pointer dereference during VSI rebuild - ice: fix retry for AQ command 0x06EE - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() - ice: reintroduce retry mechanism for indirect AQ - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: prevent possible overflow in icmp_global_allow() - idpf: change IRQ naming to match netdev and ethtool queue numbering - idpf: check error for register_netdev() on init - idpf: detach and close netdevs while handling a reset - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling - idpf: Fix RSS LUT NULL pointer crash on early ethtool operations - idpf: Fix RSS LUT NULL ptr issue after soft reset - idpf: improve locking around idpf_vc_xn_push_free() - idpf: nullify pointers after they are freed - idpf: set the payload size before calling the async handler - igc: fix missing update of skb->tail in igc_xmit_frame() - igc: fix page fault in XDP TX timestamps handling - iio: accel: adxl380: Avoid reading more entries than present in FIFO - iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: aspeed: clear reference voltage bits before configuring vref - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() - iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() - iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: buffer: Fix wait_queue not being removed - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: frequency: admv1013: add dev variable - iio: frequency: admv1013: fix NULL pointer dereference on str - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: inv-mpu9150: fix irq ack preventing irq storms - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix interrupt flag - iio: pressure: mprls0025pa: fix pressure calculation - iio: pressure: mprls0025pa: fix scan_type struct - iio: pressure: mprls0025pa: fix SPI CS delay violation - iio: pressure: mprls0025pa: fix spi_transfer struct initialisation - iio: proximity: hx9023s: Protect against division by zero in set_samp_freq - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: test: drop dangling symbol in gain-time-scale helpers - iio: Use IRQF_NO_THREAD - ima: define and call ima_alloc_kexec_file_buf() - ima: do not copy measurement list to kdump kernel - ima: kexec: define functions to copy IMA log at soft boot - ima: kexec: silence RCU list traversal warning - ima: rename variable the seq_file "file" to "ima_kexec_file" - ima: verify if the segment size has changed - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: bcm5974 - recover from failed mode switch - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: synaptics_i2c - guard polling restart in resume - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - interconnect: mediatek: Aggregate bandwidth with saturating add - interconnect: mediatek: Don't hijack parent device - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommufd: Fix a race with concurrent allocation and unmap - iommu/vt-d: Avoid draining PRQ in sva mm release path - iommu/vt-d: Clear Present bit before tearing down PASID entry - iommu/vt-d: Drain PRQs when domain removed from RID - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - iommu/vt-d: Separate page request queue from SVM - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments - io_uring/kbuf: enable bundles for incrementally consumed buffers - io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF - io_uring/kbuf: introduce io_kbuf_drop_legacy() - io_uring/kbuf: introduce struct io_br_sel - io_uring/kbuf: open code __io_put_kbuf() - io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers - io_uring/kbuf: propagate BUF_MORE through early buffer commit path - io_uring/kbuf: remove legacy kbuf bulk allocation - io_uring/kbuf: remove legacy kbuf caching - io_uring/kbuf: remove legacy kbuf kmem cache - io_uring/kbuf: simplify __io_put_kbuf - io_uring/kbuf: support min length left for incremental buffers - io_uring/kbuf: switch to storing struct io_buffer_list locally - io_uring/kbuf: uninline __io_put_kbufs - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory - io_uring/kbuf: use struct io_br_sel for multiple buffers picking - io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields - io_uring/net: clarify io_recv_buf_select() return value - io_uring/net: correct type for min_not_zero() cast - io_uring/net: don't continue send bundle if poll was required for retry - io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() - io_uring/net: use struct io_br_sel->val as the recv finish value - io_uring/net: use struct io_br_sel->val as the send finish value - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring: remove async/poll related provided buffer recycles - io_uring/rw: check for NULL io_br_sel when putting a buffer - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io_uring/uring_cmd: fix too strict requirement on ioctl - io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ipc: don't audit capability check in ipc_permissions() - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump - ipv6: add NULL checks for idev in SRv6 paths - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: annotate data-races over sysctl.flowlabel_reflect - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: use RCU in ip6_xmit() - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: do not keep dest_dst if dev is going down - ipvs: fix NULL deref in ip_vs_add_service error path - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - jbd2: fix deadlock in jbd2_journal_cancel_revoke() - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 - kbuild: install-extmod-build: Package resolve_btfids if necessary - kbuild: Leave objtool binary around with 'make clean' - kbuild: rust: allow `clippy::uninlined_format_args` - kcm: fix zero-frag skb in frag_list on partial sendmsg error - kcsan, compiler_types: avoid duplicate type issues in BPF Type Format - kernel: be more careful about dup_mmap() failures and uprobe registering - kexec: Consolidate machine_kexec_mask_interrupts() implementation - kexec: define functions to map and unmap segments - kexec: derive purgatory entry from symbol - kexec: Include kernel-end even without crashkernel - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kselftest/harness: Use helper to avoid zero-size memset warning - ksmbd: add chann_lock to protect ksmbd_chann_list xarray - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: check return value of xa_store() in krb5_authenticate - ksmbd: Compare MACs in constant time - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: rewrite stop_sessions() with restartable iteration - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Fix the month in the name of the failure directory - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter - KVM: arm64: Hide S1POE from guests when not supported by the host - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always intercept VMMCALL when L2 is active - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay - KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Allow vendor code to disable quirks - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: do not allow re-enabling quirks - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM - KVM: x86: Introduce supported_quirks to block disabling quirks - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - landlock: Optimize file path walks and prepare for audit support - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix missing NULL checks for kstrdup() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: Handle percpu handler address for ORC unwinder - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch/orc: Use RCU in all users of __module_address(). - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove some extern variables in source files - LoongArch: Remove unnecessary checks for ORC unwinder - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: Use %px to print unmodified unwinding address - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix memory leak in raid1_run() - md/raid1: fix memory leak in raid1_run() if no active rdev - md/raid5: fix raid5_run() to return error when log_init() fails - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Drop min_queued_buffers assignment - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: ccs: Fix setting initial sub-device state - media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() - media: chips-media: wave5: add missing spinlock protection for send_eos_event() - media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() - media: chips-media: wave5: Fix conditional in start_streaming - media: chips-media: wave5: Fix device cleanup order to prevent kernel panic - media: chips-media: wave5: Fix kthread worker destruction in polling mode - media: chips-media: wave5: Fix memory leak on codec_info allocation failure - media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: dw9714: add support for powerdown pin - media: dw9714: Fix powerup sequence - media: dw9714: move power sequences to dedicated functions - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx283: Enter full standby when stopping streaming - media: i2c: imx283: Fix hang when going from large to small resolution - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: intel/ipu6: fix error pointer dereference - media: ipu6: Always close firmware stream - media: ipu6: Close firmware streams on streaming enable failure - media: ipu6: Ensure stream_mutex is acquired when dealing with node list - media: ipu6: Fix RPM reference leak in probe error paths - media: ipu6: Fix typo and wrong constant in ipu6-mmu.c - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mt9m114: Avoid a reset low spike during probe() - media: mt9m114: Return -EPROBE_DEFER if no endpoint is found - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Fix streaming cleanup on release - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: mg4b: Use IRQF_NO_THREAD - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix pass-by-value structs causing MSAN warnings - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: core: Preserve OF node when ACPI handle is present - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: SiByte: Bring back cache initialisation - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: dw_mmc-rockchip: Add memory clock auto-gating support - mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support - mmc: dw_mmc-rockchip: use modern PM macros - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mm: convert mm_lock_seq to a proper seqcount - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/hugetlb_cma: round up per_node before logging it - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory: fix PMD/PUD checks in follow_pfnmap_start() - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() - mm/migrate: move movable_ops page handling out of move_to_new_folio() - mm: migrate: requeue destination folio on deferred split queue - mm: numa_memblks: Identify the accurate NUMA ID of CFMW - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() - mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/pagewalk: fix race between concurrent split and refault - mm: prevent droppable mappings from being locked - mm: replace READ_ONCE() with standard page table accessors - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() - mm: shmem: fix potential data corruption during shmem swapin - mm/shmem, swap: avoid redundant Xarray lookup during swapin - mm/shmem, swap: improve cached mTHP handling and fix potential hang - mm/slab: use unsigned long for orig_size to ensure proper metadata align - mm: thp: deny THP for files on anonymous inodes - mm/tracing: rss_stat: ensure curr is false from kthread context - mm/userfaultfd: fix hugetlb fault mutex hash calculation - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node - mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix kernel panic when a symbol st_shndx is out of bounds - most: core: fix leak on early registration failure - most: core: fix resource leak in most_register_interface error paths - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix receive space timestamp initialization - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: spinand: Disable continuous read during probe - mtd: spinand: Fix kernel doc - mtd: spinand: winbond: Declare the QE bit on W25NxxJW - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sst: Fix write enable before AAI sequence - myri10ge: avoid uninitialized variable use - namespace: fix proc mount iteration - net: add a common function to compute features for upper devices - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add xmit recursion limit to tunnel xmit functions - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() - net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() - net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() - net: airoha: read default PSE reserved pages value before updating - net: airoha: Remove airoha_dev_stop() in airoha_remove() - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcm: asp2: convert to phylib managed EEE - net: bcm: asp2: fix LPI timer handling - net: bcm: asp2: remove tx_lpi_enabled - net: bcmasp: Add support for asp-v3.0 - net: bcmasp: fix double disable of clk - net: bcmasp: fix double free of WoL irq - net: bcmasp: Fix network filter wake for asp-3.0 - net: bcmasp: Remove support for asp-v2.0 - net: bcmasp: Restore programming of TX map vector register - net: bcmasp: streamline early exit in probe - net: bcmgenet: fix broken EEE by converting to phylib-managed state - net: bcmgenet: increase WoL poll timeout - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix use-after-free in bond_xmit_broadcast() - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: properly keep track of conduit reference - net: dsa: realtek: Fix LED group port bit for non-zero LED group - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: check whether the RSS algorithm is Toeplitz - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix the PTP periodic output sysfs interface - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: conntrack: add missing netlink policy validations - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nfnetlink_queue: make hash table per queue - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation - netfilter: nfnetlink_queue: optimize verdict lookup with hash table - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval - netfilter: reject zero shift in nft_bitwise - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators - net: ftgmac100: fix ring allocation unwind on open failure - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: fix VLAN add unwind on slave errors - net: increase IP_TUNNEL_RECURSION_LIMIT to 5 - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: introduce mangleid_features - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipv4: fix ARM64 alignment fault in multipath hash seed - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - net: lan743x: fix duplex configuration in mac_link_up - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lan966x: fix page pool leak in error paths - net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: Protect access to net_device::ip_ptr with RCU lock - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mctp: fix don't require received header reserved bits to be zero - net: mctp-i2c: fix duplicate reception of old data - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5e: Separate address related variables to be in struct - net/mlx5e: Support routed networks during IPsec MACs initialization - net/mlx5: E-switch, Clear legacy flag when moving to switchdev - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels - net/mlx5: Fix crash when moving to switchdev mode - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix switchdev mode rollback in case of failure - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: ncsi: fix skb leak in error paths - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - net: openvswitch: Avoid releasing netdev before teardown completes - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: prevent NULL deref in ip[6]tunnel_xmit() - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: rds_sendmsg should not discard payload_len - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net: sched: act_csum: validate nested VLAN headers - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Lantech 8330-265D - net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: skb: fix cross-cache free of KFENCE-allocated skb head - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net/tcp-ao: Fix MAC comparison to be constant-time - net/tcp-md5: Fix MAC comparison to be constant-time - net: ti: icssg-prueth: Add optional dependency on HSR - net: ti: icssg-prueth: Fix ping failure after offload mode setup when link speed is not 1G - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: use skb_header_pointer() for TCPv4 GSO frag_off check - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: mhi: Add network support for Foxconn T99W760 - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - nfnetlink_osf: validate individual option lengths in fingerprints - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit - NFS: NFSERR_INVAL is not defined by NFSv2 - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - nsfs: tighten permission checks for ns iteration ioctls - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet: move async event work off nvmet-wq - nvmet-tcp: fix race between ICReq handling and queue teardown - objpool: fix the overestimation of object pooling metadata size - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep_vf: add NULL check for napi_build_skb() - octeon_ep_vf: avoid compiler and IQ/OQ reordering - octeon_ep_vf: ensure dbell BADDR updation - octeon_ep_vf: Relocate counter updates before NAPI - Octeontx2-af: Add proper checks for fwdata - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in of_unittest_changeset() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - OPP: Return correct value in dev_pm_opp_get_level - ovl: Fix uninit-value in ovl_fill_real - ovl: fix wrong detection of 32bit inode numbers - ovl: make fsync after metadata copy-up opt-in mount option - ovl: Use str_on_off() helper in ovl_show_options() - padata: Fix pd UAF once and for all - padata: Remove comment for reorder_work - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add Intel Nova Lake audio Device ID - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Clear stale errors on reporting agents upon probe - PCI/AER: Stop ruling out unbound devices as error source - PCI/ASPM: Fix pci_clear_and_set_config_dword() usage - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: endpoint: Implement the pci_epc_ops::align_addr() operation - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry - PCI: dwc: ep: Use align addr function for dw_pcie_ep_raise_{msi,msix}_irq() - PCI: dwc: Fix msg_atu_index assignment - PCI: dw-rockchip: Don't wait for link since we can detect Link Up - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: Introduce pci_epc_function_is_valid() - PCI: endpoint: Introduce pci_epc_mem_map()/unmap() - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: Fix placement of pci_save_state() in pci_bus_add_device() - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: qcom: Don't wait for link if we can detect Link Up - PCI: Revert "Enable ACS after configuring IOMMU for OF platforms" - PCI: Update saved_config_space upon resource assignment - PCI: Use resource_set_range() that correctly sets ->end - perf annotate: Fix hashmap__new() error checking - perf annotate: Fix memcpy size in arch__grow_instructions() - perf annotate: Use jump__delete when freeing LoongArch jumps - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf disasm: Fix off-by-one bug in outside check - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf ftrace: Fix hashmap__new() error checking - perf: Make sure to use pmu_ctx->pmu for groups - perf maps: Fix reference count leak in maps__find_ams() - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf unwind-libdw: Fix invalid reference counts - perf vendor events amd: Fix Zen 5 MAB allocation events - perf/x86/core: Do not set bit width for unavailable counters - perf/x86/cstate: Add Airmont NP - perf/x86/intel: Add missing branch counters constraint apply - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - perf/x86/intel/uncore: Skip discovery table for offline dies - perf/x86/intel/uncore: Support more units on Granite Rapids - perf/x86/msr: Add Airmont NP - phy: cadence-torrent: restore parent clock for refclk during resume - phy: freescale: imx8qm-hsio: fix NULL pointer dereference - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: qcom: edp: Make the number of clocks flexible - phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - phy: ti: phy-j721e-wiz: restore mux selection during resume - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Add code name documentation - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86/amd/pmf: Prevent TEE errors after hibernate - platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: disable wakeup_mode during hibernation - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit - platform/x86: ISST: Add missing write block check - platform/x86: ISST: Correct locked bit width - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - powercap: intel_rapl: Add PL4 support for Ice Lake - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc64/bpf: fix kfunc call support - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: adjust the elfcorehdr size - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/kexec/core: use big-endian types for crash variables - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: sequencing: fix missing state_lock in pwrseq_power_on() error path - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() - power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler - power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - procfs: fix possible double mmput() in do_procmap_query() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - quota: fix livelock between quotactl and freeze_super - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix RoCEv1 failure due to DSCP - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/iwcm: Fix workqueue list corruption by removing work_list - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler - RDMA/mlx5: Fix UMR hang in LAG error state unload - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - regmap: Synchronize cache for the page selector - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - reset: gpio: suppress bind attributes in sysfs - resource: Add resource set range and size helpers - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" - Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "LoongArch: Add machine_kexec_mask_interrupts() implementation" - Revert "LoongArch: Handle percpu handler address for ORC unwinder" - Revert "LoongArch/orc: Use RCU in all users of __module_address()." - Revert "LoongArch: Remove unnecessary checks for ORC unwinder" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "PCI: qcom: Don't wait for link if we can detect Link Up" - Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - ring-buffer: Fix to update per-subbuf entries of persistent ring buffer - riscv: kgdb: fix several debug register assignment bugs - riscv: vector: init vector context with proper vlenb - rnbd-srv: Fix server side setting of bi_size for special IOs - rnbd-srv: use bio_add_virt_nofail - rnbd-srv: Zero the rsp buffer before using it - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: allow `clippy::collapsible_if` globally - rust: allow `clippy::collapsible_match` globally - rust: init: fix `clippy::undocumented_unsafe_blocks` warnings - rust: kbuild: allow `unused_features` - rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0 - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: fix incorrect accessor reference lifetime - rust: pin-init: internal: init: document load-bearing fact of field accessors - rust: warn on bindgen < 0.69.5 and libclang >= 19.1 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cpum_sf: Cap sampling rate to prevent lsctl exception - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/idle: Fix cpu idle exit cpu time accounting - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf_cpum_sf: Convert to use try_cmpxchg128() - s390/perf: Disable register readout on sampling events - s390/pfault: Fix virtual vs physical address confusion - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/vtime: Fix virtual timer forwarding - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/deadline: Clear the defer params - sched/deadline: Use revised wakeup rule for dl_server - sched/debug: Fix updating of ppos on server write ops - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Remove redundant css_put() in scx_cgroup_init() - sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update - sched/fair: Fix zero_vruntime tracking - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Use protect_slice() instead of direct comparison - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: csiostor: Fix dereference of null pointer rn - scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftests/bpf: Fix resource leak in serial_test_wq on attach failure - selftests/bpf: Test cross-sign 64bits range refinement - selftests/bpf: Test invariants on JSLT crossing sign - selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/harness: order TEST_F and XFAIL_ADD constructors - selftests/hid: fix compilation when bpf_wq and hid_device are not exported - selftests/landlock: Fix format warning for __u64 in net_test - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: convert page_size to unsigned long - selftests/mm: pagemap_ioctl: Fix types mismatches shown by compiler options - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: check output: catch cmd errors - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selinux: don't reserve xattr slot when we won't fill it - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serial: 8250: 8250_omap.c: Add support for handling UART error conditions - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - sh: platform_early: remove pdev->driver_override check - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: require a full NFS mode SID before reading mode bits - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei - soc: qcom: smem: handle ENOMEM error during probe - soc: rockchip: grf: Add missing of_node_put() when returning - soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition - soc: rockchip: grf: Support multiple grf to be handled - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - soundwire: intel_ace2x: add SND_HDA_CORE dependency - soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: aspeed-smc: fix controller deregistration - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: cadence-qspi: Fix exec_mem_op error handling - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: ch341: fix memory leaks on probe failures - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: geni-qcom: Check DMA interrupts early in ISR - spi: geni-qcom: Fix abort sequence execution for serial engine errors - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: Group CS related fields in struct spi_device - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: mpc52xx: fix controller deregistration - spi: mpc52xx: fix use-after-free on registration failure - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mxic: fix controller deregistration - spi: mxs: fix controller deregistration - spi: npcm-pspi: fix controller deregistration - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix controller deregistration - spi: orion: fix runtime pm leak on unbind - spi: pic32: fix controller deregistration - spi: pic32-sqi: fix controller deregistration - spi: pl022: fix controller deregistration - spi: qup: fix controller deregistration - spi: rockchip: fix controller deregistration - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: sprd: fix controller deregistration - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: sun4i: fix controller deregistration - spi: sun6i: fix controller deregistration - spi: syncuacer: fix controller deregistration - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: tegra210-quad: Protect curr_xfer check in IRQ handler - spi: ti-qspi: fix controller deregistration - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix controller deregistration - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: use generic driver_override infrastructure - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - statmount: permission check should return EPERM - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - sysctl: fix uninitialized variable in proc_do_large_bitmap - taskstats: set version in TGID exit notifications - tcp: call sk_data_ready() after listener migration - tcp: optimize inet_use_bhash2_on_bind() - tcp: tcp_tx_timestamp() must look at the rtx queue - team: fix header_ops type confusion with non-Ethernet ports - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Address thermal zone removal races with resume - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal: core: Free thermal zone ID later during removal - thermal: core: Mark thermal zones as exiting before unregistration - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature - thermal/of: Fix reference leak in thermal_of_cm_lookup() - thunderbolt: Fix property read in nhi_wake_supported() - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tls: Fix race condition in tls_sw_cancel_work_tx() - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tpm: avoid -Wunused-but-set-variable - tpm: Fix auth session leak in tpm2_get_random() error path - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() - tracefs: Fix default permissions not being applied on initial mount - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add a comment about ftrace_regs definition - tracing: Add ftrace_fill_perf_regs() for perf event - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix enabling multiple events on the kernel command line and bootconfig - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing: Fix WARN_ON in tracing_buffers_mmap_close - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: ring-buffer: Fix to check event length before using - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix unshare_fs() handling - uprobes: Fix incorrect lockdep condition in filter_chain() - uprobes: switch to RCU Tasks Trace flavor for better performance - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb: core: phy: avoid double use of 'usb3-phy' - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: f_ecm: Fix net_device lifecycle with device_move - usb: gadget: f_eem: Fix net_device lifecycle with device_move - usb: gadget: f_fs: fix DMA-BUF OUT queues - usb: gadget: f_fs: Fix ioctl error handling - usb: gadget: f_hid: don't call cdev_init while cdev in use - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Fix net_device lifecycle with device_move - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix net_device lifecycle with device_move - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmode/displayport: set displayport signaling rate in configure message - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: Flush anchored URBs in usbtmc_release - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vfio/cdx: Fix NULL pointer dereference in interrupt trigger path - vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost: move vdpa group bound check to vhost_vdpa - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vsock: fix buffer size clamping order - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - vxlan: validate ND option lengths in vxlan_na_create - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: Fix failure to connect to a 6 GHz AP - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: allow only one NAN interface, also in multi radio - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: Fix use_for flag update on BSS refresh - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mac80211: use safe list iteration in radar detect work - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr - wifi: mt76: mt7925: fix incorrect length field in txpower command - wifi: mt76: mt7925: fix incorrect TLV length in CLC command - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() - wifi: rtw89: 8922a: add digital compensation for 2GHz - wifi: rtw89: 8922a: set random mac if efuse contains zeroes - wifi: rtw89: fix unable to receive probe responses under MLO connection - wifi: rtw89: mac: correct page number for CSI response - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: ser: enable error IMR after recovering from L1 - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out assign_rescuer_work() - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags - X.509: Fix out-of-bounds access when parsing extensions - x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache - x86-64: rename misleadingly named '__copy_user_nocache()' function - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Add additional fixed RDSEED microcode revisions - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/cpu: Disable FRED when PTI is forced on - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path - x86/fred: Correct speculative safety in fred_extint() - x86/fred: Fix early boot failures on SEV-ES/SNP guests - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/platform/uv: Handle deconfigured sockets - x86: rename and clean up __copy_from_user_inatomic_nocache() - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: allow attaching already registered memory model to xdp_rxq_info - xdp: produce a warning when calculated tailroom is negative - xdp: register system page pool as an XDP memory model - xdp: use modulo operation to calculate XDP frag tailroom - xdrgen: Fix struct prefix for typedef types in program wrappers - xdrgen: Initialize data pointer for zero-length items - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/privcmd: unregister xenstore notifier on module exit - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: account XFRMA_IF_ID in aevent size calculation - xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi - xfrm: ah: account for ESN high bits in async callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: fix refcount leak in xfrm_migrate_policy_find - xfrm: fix the condition on x->pcpu_num in xfrm_sa_len - xfrm: Fix the usage of skb->sk - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() - xfrm: prevent policy_hthresh.work from racing with netns teardown - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: check for deleted cursors when revalidating two btrees - xfs: check return value of xchk_scrub_create_subord - xfs: delete attr leaf freemap entries when empty - xfs: don't irele after failing to iget in xfs_attri_recover_work - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix copy-paste error in previous fix - xfs: Fix error pointer dereference - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix returned valued from xfs_defer_can_append - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix the xattr scrub to detect freemap/entries array collisions - xfs: fix undersized l_iclog_roundoff values - xfs: get rid of the xchk_xfile_*_descr calls - xfs: mark data structures corrupt on EIO and ENODATA - xfs: only call xf{array,blob}_destroy if we have a valid pointer - xfs: remove file_path tracepoint data - xfs: remove xfs_attr_leaf_hasname - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: scrub: unlock dquot before early return in quota scrub - xfs: stop reclaim before pushing AIL during unmount - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zram: do not forget to endio for partial discard requests - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Update LVC patches for 6.12.90 - Removed already not needed patches, adapted some of existing ones, added newly appeared patches- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- bump rel- CONFIG_NF_CONNTRACK_PROCFS=y sometime i need to obtain traffic stats- Fix Dirtyfrag- Add new module ec-touchpad-toggle - Also exclude nwfermi.ko, which was not excluded by mistake...- Update BR for perf - ``` - DEBUG: make FIXDEP=1 -f Makefile.perf install-man - DEBUG: Makefile.config:1127: No libcapstone found, disables disasm engine support for 'perf script', please install libcapstone-dev/capstone-devel - DEBUG: Makefile.config:1189: libpfm4 not found, disables libpfm4 support. Please install libpfm4-dev - DEBUG: Makefile.config:1223: libtracefs is missing. Please install libtracefs-dev/libtracefs-devel - DEBUG: Auto-detecting system features: - DEBUG: ... dwarf: [ on ] - DEBUG: ... dwarf_getlocations: [ on ] - DEBUG: ... glibc: [ on ] - DEBUG: ... libbfd: [ on ] - DEBUG: ... libbfd-buildid: [ on ] - DEBUG: ... libcap: [ on ] - DEBUG: ... libelf: [ on ] - DEBUG: ... libnuma: [ on ] - DEBUG: ... numa_num_possible_cpus: [ on ] - DEBUG: ... libperl: [ on ] - DEBUG: ... libpython: [ on ] - DEBUG: ... libcrypto: [ on ] - DEBUG: ... libunwind: [ on ] - DEBUG: ... libdw-dwarf-unwind: [ on ] - DEBUG: ... libcapstone: [ OFF ] - DEBUG: ... llvm-perf: [ on ] - DEBUG: ... zlib: [ on ] - DEBUG: ... lzma: [ on ] - DEBUG: ... get_cpuid: [ on ] - DEBUG: ... bpf: [ on ] - DEBUG: ... libaio: [ on ] - DEBUG: ... libzstd: [ on ] - ```- Fix work on older Macs- Revert accidently merged disablement of kmod() provides - Repository is getting prepared for removal of kmod(), see kb#63. - For now - revert this change.- AMDGPU coherency hacks are not needed on x86- Fix CVE-2026-31431 ("Copyfail")- set cma=256M by default for Baikal - Merge: c9153a4 66a6ff7- Merge remote-tracking branch 'baikal/rosa2023.1' into rosa2023.1- Update LVC patches (bz#19983) - Talk with AI debugging https://bugzilla.rosa.ru/show_bug.cgi?id=19983: - https://file-store.rosa.ru/download/94a69475631e57cda3466a98efef1f76740bc34e- llvm for perf - DEBUG: Makefile.config:706: Warning: Disabled BPF skeletons as clang (clang) is missing - DEBUG: Makefile.config:997: No libllvm 13+ found, slower source file resolution, please install llvm-devel/llvm-dev- Hans's patch has been upstreamized- Remove upstreamized LVC patches- New LVC patches- [bot] upd: 6.12.47 -> 6.12.74 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail - accel/ivpu: Fix DCT active percent format - accel/ivpu: Fix race condition when unbinding BOs - accel/ivpu: Make function parameter names consistent - accel/ivpu: Prevent runtime suspend during context abort work - accel/qaic: Fix bootlog initialization ordering - accel/qaic: Synchronize access to DBC request queue head & tail pointer - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Detect preferred core availability on online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - ACPI: fan: Add fan speed reporting for fans with only _FST - ACPI: fan: Use ACPI handle when retrieving _FST - ACPI: fan: Use platform device for devres-related actions - ACPI: fan: Workaround for 64-bit firmware bug - acpi/hmat: Fix lockdep warning for hmem_register_resource() - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - ACPI: scan: Update honor list for RPMI System MSI - ACPI: SPCR: Check for table version when using precise baudrate - ACPI: SPCR: Support Precise Baud Rate field - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - ACPI: video: force native for Lenovo 82K8 - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Initialise scc_index in unix_add_edge(). - af_unix: Read sk_peek_offset() again after sleeping in unix_stream_read_generic(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: aloop: Fix racy access at PCM trigger - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda: Fix missing pointer check in hda_component_manager_init function - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Enable headset mic for Acer Nitro 5 - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA - ALSA: hda/realtek - fixed speaker no sound - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: Fix code alignment in mixer_quirks - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: broadcom: bcm2712: Add default GIC address cells - arm64: dts: broadcom: bcm2712: Define VGIC interrupt - arm64: dts: exynos: gs101: fix sysreg_apm reg property - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart - arm64: dts: imx93-kontron: Fix GPIO for panel regulator - arm64: dts: imx93-kontron: Fix USB port assignment - arm64: dts: imx95: Correct the lpuart7 and lpuart8 srcid - arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes - arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports - arm64: dts: mba8mx: Fix Ethernet PHY IRQ support - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8186-tentacruel: Fix touchscreen model - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8395-kontron-i1200: Fix MT6360 regulator nodes - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: qcom: sm8650: set ufs as dma coherent - arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller - arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller - arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: disable HS400 on RK3588 Tiger - arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5 - arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2 - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1 - arm64: dts: rockchip: Make RK3588 GPU OPP table naming less generic - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder - arm64: kprobes: call set_memory_rox() for kprobe page - arm64: kprobes: check the return value of set_memory_rox() - arm64: map [_text, _stext) virtual address range non-executable+read-only - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: mte: Do not warn if the page is already tagged in copy_highpage() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: Set __nocfi on swsusp_arch_resume() - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: zynqmp: Disable coresight by default - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on reset) - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: p880: set correct touchscreen clipping - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak4458: remove the reset operation in probe and remove - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: lpass-tx-macro: fix SM6115 support - ASoC: codecs: nau8325: Silence uninitialized variables warnings - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wcd937x: make stub functions inline - ASoC: codecs: wcd937x: set the comp soundwire port correctly - ASoC: codecs: wcd939x: fix regmap leak on probe failure - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs-amp-lib-test: Fix missing include of kunit/test-bug.h - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_sai: Fix sync error in consumer mode - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Expose correct bit depth to userspace - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8325: add missing build config - ASoC: nau8325: use simple i2c probe function - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again) - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type - ASoC: simple-card-utils: Check device node before overwrite direction - ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-pcm: Add fixup for channels - ASoC: SOF: ipc4-pcm: Enable delay reporting for ChainDMA streams - ASoC: SOF: ipc4-pcm: fix delay calculation when DSP resamples - ASoC: SOF: ipc4-pcm: fix start offset calculation for chain DMA - ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: correct the wrong period - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: ahci: Do not read the per port area for unimplemented ports - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Disable LPM on ST2000DM008-2FR102 - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-sata: Improve link_power_management_supported sysfs attribute - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - bcache: fix improper use of bi_end_io - bcache: fix I/O accounting leak in detached_dev_do_request - bcache: use bio cloning for detached device requests - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binder: fix double-free in dbitmap - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-crypto: use BLK_STS_INVAL for alignment errors - blk-mq: Abort suspend when wakeup events are pending - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block/blk-throttle: Fix throttle slice time for SSDs - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix memory leak in __blkdev_issue_zero_pages - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: freeze queue when updating zone resources - block: handle zone management operations completions - block: make REQ_OP_ZONE_OPEN a write operation - block/mq-deadline: Introduce dd_start_request() - block/mq-deadline: Switch back to a single dispatch list - block: rate-limit capacity change info log - block: return unsigned int from queue_dma_alignment - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix BIS connection dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: ISO: free rx_skb if not consumed - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() - bnxt_en: Add Hyper-V VF ID - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type - bnxt_en: Change FW message timeout warning - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bnxt_en: Fix XDP_TX path - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code - bnxt_en: Refactor bnxt_free_ctx_mem() - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf: Allow fall back to interpreter for programs with stack size <= 512 - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Check the helper function is valid in get_helper_proto - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Find eligible subprogs for private stack support - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Fix stackmap overflow check in __bpf_get_stackid() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Mark kfuncs as __noclone - bpf: Refactor stack map trace depth calculation into helper function - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject narrower access to pointer ctx fields - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bpf: Use tnums for JEQ/JNE is_branch_taken logic - bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: abort transaction if we fail to update inode in log replay dir fixup - btrfs: abort transaction in the process_one_buffer() log tree walk callback - btrfs: abort transaction on specific error places when walking log tree - btrfs: add extra error messages for delalloc range related errors - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't allow adding block device of less than 1 MB - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix beyond-EOF write handling - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix error handling of submit_uncompressed_range() - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation - btrfs: fix memory leak on duplicated memory in the qgroup assign ioctl - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix qgroup_snapshot_quick_inherit() squota bug - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix squota compressed stats leak - btrfs: fix subvolume deletion lockup caused by inodes xarray race - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: only enforce free space tree if v1 cache is required for bs < ps cases - btrfs: prevent use-after-free on folio private data in btrfs_subpage_clear_uptodate() - btrfs: qgroup: update all parent qgroups when doing quick inherit - btrfs: ref-verify: handle damaged extent root tree - btrfs: reject new transactions if the fs is fully read-only - btrfs: release root after error in data_reloc_print_warning_inode() - btrfs: remove btrfs_fs_info::sectors_per_page - btrfs: return any hit error from extent_writepage_io() - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: subpage: dump the involved bitmap when ASSERT() failed - btrfs: tracepoints: use btrfs_root_id() to get the id of a root - btrfs: tree-checker: add inode extref checks - btrfs: tree-checker: fix bounds check in check_inode_extref() - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: truncate ordered extent when skipping writeback past i_size - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: use variable for end offset in extent_writepage_io() - btrfs: zoned: fix conventional zone capacity calculation - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - bus: mhi: host: pci_generic: Add Telit FN920C04 modem support - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support - caif: fix integer underflow in cffrml_receive() - can: at91_can: Fix memory leak in at91_can_probe() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd: acc_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: add deinit callback - can: m_can: call deinit/init callback when going into suspend/resume - can: m_can: fix CAN state in system PM - can: m_can: m_can_chip_config(): bring up interface in correct state - can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error Active - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: rockchip-canfd: rkcanfd_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - cdx: Fix device node reference leak in cdx_msi_domain_init - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: fix multifs mds auth caps issue - ceph: fix NULL pointer dereference in ceph_mds_auth_match() - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - ceph: fix potential race condition in ceph_ioctl_lazyio() - ceph: fix race condition validating r_parent before applying state - ceph: fix race condition where r_parent becomes stale before sending message - ceph: refactor wake_up_bit() pattern of calling - cgroup: Fix kernfs_node UAF in css_free_rwork_fn - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix copy_to_iter return value check - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: at91: sam9x7: Add peripheral clock id for pmecc - clk: clocking-wizard: Fix output clock register offset for Versal platforms - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: qcom: camcc-sm7150: Fix PLL config of PLL2 - clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other - clk: qcom: common: Fix NULL vs IS_ERR() check in qcom_cc_icc_register() - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src - clk: qcom: gcc-ipq6018: rework nss_port5 clock to multiple conf - clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets - clk: qcom: tcsrcc-x1e80100: Set the bi_tcxo as parent to eDP refclk - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Fix memory leak in cpg_mssr_reserved_init() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: scmi: Add duty cycle ops only when duty cycle is supported - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/timer-rtl-otto: Do not interfere with interrupts - clocksource/drivers/timer-rtl-otto: Work around dying timers - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - clocksource: Reduce watchdog readout delay limit to prevent false positives - cnic: Fix use-after-free bugs in cnic_delete_task - codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_file_range: limit size if in compat mode - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: catu: Support atclk - coresight: Change device mode to atomic type - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Fix incorrect handling for return value of devm_kzalloc - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: tmc: Support atclk - coresight: tpda: fix the logic to setup the element size - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: ondemand: Update the efficient idle check for Intel extended Families - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpufreq: ti: Add support for AM62D2 - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Fix missing adaptation for cpuset_is_populated - cpuset: Treat cpusets in attaching as populated - cpuset: Use new excpus for nocpu error check when enabling root partition - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() - crypto: ccp: Skip SEV and SNP INIT for kdump boot - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - clear all VF configurations in the hardware - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - invalidate queues in use - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: iaa - Fix incorrect return value in save_iaa_wq() - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx2 - Call strscpy() with correct size argument - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - fix duplicate restarting msg during AER error - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't enforce dma mapping check on noncoherent allocations - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dma-debug: fix physical address calculation for struct dma_debug_entry - dma-debug: store a phys_addr_t in struct dma_debug_entry - dmaengine: Add missing cleanup on module unload - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: lpc32xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma-mapping: fix direction in dma_alloc direction traces - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err - dma-mapping: trace dma_alloc/free direction - dma-mapping: trace more error paths - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm error: mark as DM_TARGET_PASSES_INTEGRITY - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: don't set io_min and io_opt for raid1 - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-stripe: fix a possible integer overflow - dm vdo: return error on corrupted metadata in start_restoring_volume functions - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: hwmon: fix link to g762 devicetree binding - docs: kdoc: handle the obsolescensce of docutils.ErrorString() - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - dpll: Prevent duplicate registrations - dpll: spec: add missing module-name and clock-id to pin-get reply - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd/amdgpu: Release xcp drm memory after unplug - drm/amd/amdgpu: reserve vm invalidation engine for uni_mes - drm/amd: Avoid evicting resources at S5 - drm/amd: Check that VPE has reached DPM0 in idle handler - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add fallback path for YCBCR422 - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put - drm/amd/display: Apply e4479aecf658 to dml - drm/amd/display: avoid reset DTBCLK at clock init - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: change dc stream color settings only in atomic commit - drm/amd/display: Check NULL before accessing - drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5 - drm/amd/display: disable DPP RCG before DPP CLK enable - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display/dml2: Guard dml21_map_dc_state_into_dml_display_cfg with DC_FP_START - drm/amd/display: Don't change brightness for disabled connectors - drm/amd/display: Enable Dynamic DTBCLK Switch - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: extend delta clamping logic to CM3 LUT helper - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: fix condition for setting timing_adjust_pending - drm/amd/display: fix dml ms order of operations - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed - drm/amd/display: Fix for test crash due to power gating - drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix NULL deref in debugfs odm_combine_segments - drm/amd/display: Fix pbn_div Calculation Error - drm/amd/display: Fix pbn to kbps Conversion - drm/amd/display: Fix scratch registers offsets for DCN35 - drm/amd/display: Fix scratch registers offsets for DCN351 - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - drm/amd/display: incorrect conditions for failing dto calculations - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: increase max link count and fix link->enc NULL pointer access - drm/amd/display: Increase minimum clock for TMDS 420 with pipe splitting - drm/amd/display: Init dispclk from bootup clock for DCN314 - drm/amd/display: Insert dccg log for easy debug - drm/amd/display: mark static functions noinline_for_stack - drm/amd/display: Move setup_stream_attribute - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: remove assert around dpp_base replacement - drm/amd/display: Remove redundant semicolons - drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off - drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files - drm/amd/display: Set up pixel encoding for YCBCR422 - drm/amd/display: shrink struct members - drm/amd/display: Support HW cursor 180 rot for any number of pipe splits - drm/amd/display: update color on atomic commit time - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd/display: Wait until OTG enable state is cleared - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: Add back JPEG to video caps for carrizo and newer - drm/amdgpu: add ip offset support for cyan skillfish - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add range check for RAS bad page address - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: add support for cyan skillfish without IP discovery - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - drm/amdgpu: Avoid rma causes GPU duplicate reset - drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest - drm/amdgpu: Check vcn sram load return value - drm/amdgpu: Correct the counts of nr_banks and nr_errors - drm/amdgpu: disable peer-to-peer access for DCC-enabled GC12 VRAM surfaces - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: Enable MES lr_compute_wa by default - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule() - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix gfx12 mes packet status return check - drm/amdgpu: fix gpu page fault after hibernation on PF passthrough - drm/amdgpu: fix handling of harvesting for ip_discovery firmware - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: fix nullptr err of vm_handle_moved - drm/amdgpu: Fix query for VPE block_type and ip_count - drm/amdgpu: Fix unintended error log in VCN5_0_0 - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: adjust KGQ reset sequence - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx12: fix wptr reset in KGQ init - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: remove frame cntl for gfx v12 - drm/amdgpu: remove two invalid BUG_ON()s - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu: Skip poison aca bank from UE channel - drm/amdgpu/smu: Handle S0ix for vangogh - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amd/include : MES v11 and v12 API header update - drm/amd/include : Update MES v12 API for fence update - drm/amdkfd: bump minimum vgpr size for gfx1151 - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: Fix GPU mappings for APU after prefetch - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string - drm/amdkfd: Fix mmap write lock not release - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: relax checks for over allocation of save area - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amdkfd: Trap handler support for expert scheduling mode - drm/amdkfd: Use huge page size to check split svm range alignment - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2 - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/amd: Skip power ungate during suspend for VPE - drm/amd : Update MES API header file for v11 & v12 - drm/ast: Clear preserved bits from register output value - drm/ast: Use msleep instead of mdelay for edid read - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/buddy: Optimize free block management with RB tree - drm/buddy: Separate clear and dirty free block trees - drm/displayid: add quirk to ignore DisplayID checksum errors - drm/displayid: pass iter to drm_find_displayid_extension() - drm/draw: fix color truncation in drm_draw_fill24 - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915/dp: Initialize the source OUI write timestamp always - drm/i915/dp_mst: Disable Panel Replay - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915: Fix format string truncation warning - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/pmu: Fix zero delta busyness issue - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imagination: Disallow exporting of PM/FW protected objects - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() - drm/imagination: Wait for FW trace update command completion - drm/imx/tve: fix probe device leak - drm/mediatek: Add pm_runtime support for GCE power control - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe device leaks - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/me/gsc: mei interrupt top half should be in irq disabled context - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/a6xx: Fix the gemnoc workaround - drm/msm/a6xx: Flush LRZ cache before PT switch - drm/msm/a6xx: Improve MX rail fallback in RPMH vote init - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/msm/registers: Generate _HI/LO builders for reg64 - drm/nouveau: add missing DCB connector types - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit) - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: Fix race in nouveau_sched_fini() - drm/nouveau: implement missing DCB connector types; gracefully handle unknown connectors - drm/nouveau: refactor deprecated strcpy - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm: panel-backlight-quirks: Make EDID match optional - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/panic: Fix drawing the logo on a small narrow screen - drm/panic: Fix qr_code, ensure vmargin is positive - drm/panthor: Avoid adding of kernel BOs to extobj list - drm/panthor: check bo offset alignment in vm bind - drm/panthor: Defer scheduler entitiy destruction to queue release - drm/panthor: Ensure MCU is disabled on suspend - drm/panthor: Fix group_free_queue() for partially initialized queues - drm/panthor: Fix kernel panic on partial unmap of a GPU VA region - drm/panthor: Fix memory leak in panthor_ioctl_group_create() - drm/panthor: Fix potential memleak of vma structure - drm/panthor: Fix race with suspend during unplug - drm/panthor: Fix UAF on kernel BO VA nodes - drm/panthor: Fix UAF race between device unplug and FW event processing - drm/panthor: Flush shmem writes before mapping buffers CPU-uncached - drm/panthor: Handle errors returned by drm_sched_entity_init() - drm/panthor: Serialize GPU cache flush operations - drm/panthor: validate group queue count - drm/pl111: Fix error handling in pl111_amba_probe - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon: Do not kfree() devres managed rdev - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove calls to drm_put_dev() - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: avoid killing parent entity on child SIGKILL - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm/sched: Optimise drm_sched_entity_push_job - drm/sched: Re-group and rename the entity run-queue lock - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - drm/xe: Adjust long-running workload timeslices to reasonable values - drm/xe: Attempt to bring bos back to VRAM after eviction - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table - drm/xe: Do clean shutdown also when using flr - drm/xe: Do not wake device during a GT reset - drm/xe: Drop preempt-fences when destroying imported dma-bufs. - drm/xe: Ensure GT is in C0 during resumes - drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue() - drm/xe: Fix conversion from clock ticks to milliseconds - drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. - drm/xe/guc: Add more GuC load error status codes - drm/xe/guc: Check GuC running state before deregistering exec queue - drm/xe/guc: Increase GuC crash dump buffer size - drm/xe/guc: Return an error code if the GuC load fails - drm/xe/guc: Set upper limit of H2G retries over CTB - drm/xe/guc: Synchronize Dead CT worker with unbind - drm/xe/hw_engine_group: Fix double write lock release in error path - drm/xe: Limit num_syncs to prevent oversized allocations - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally - drm/xe: Move declarations under conditional branch - drm/xe/oa: Disallow 0 OA property values - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() - drm/xe/oa: Limit num_syncs to prevent oversized allocations - drm/xe/pm: Also avoid missing outer rpm warning on system suspend - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - drm/xe: Prevent BIT() overflow when handling invalid prefetch region - drm/xe/query: Fix topology query pointer advance - drm/xe: Restore engine registers before restarting schedulers after GT reset - drm/xe/tile: Release kobject for the failure path - drm/xe/uapi: loosen used tracking restriction - drm/xe: Use usleep_range for accurate long-running workload timeslicing - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets - dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - erofs: avoid infinite loop due to incomplete zstd-compressed data - erofs: don't bother with s_stack_depth increasing for now - erofs: fix file-backed mounts no longer working on EROFS partitions - erofs: fix UAF issue for file-backed mounts w/ directio option - erofs: fix unexpected EIO under memory pressure - erofs: limit the level of fs stacking for file-backed mounts - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - eth: fbnic: Fix counter roll-over issue - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix improper check of dentry.stream.valid_size - exfat: fix refcount leak in exfat_find - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - exfat: validate cluster allocation bits of the allocation bitmap - exfat: zero out post-EOF page cache on file extension - Expand the type of nfs_fattr->valid - ext4: add ext4_sb_bread_nofail() helper function for ext4_free_branches() - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: introduce linear search for dentries - ext4: refresh inline data size before write operations - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages - f2fs: add carve_out sysfs node - f2fs: add gc_boost_gc_greedy sysfs node - f2fs: add gc_boost_gc_multiple sysfs node - f2fs: add timeout in f2fs_enable_checkpoint() - f2fs: clear SBI_POR_DOING before initing inmem curseg - f2fs: drop inode from the donation list when the last file is closed - f2fs: dump more information for f2fs_{enable,disable}_checkpoint() - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid panic once fallocation fails for pinfile - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid running out of free segments - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to check sysfs filename w/ gc_pin_file_thresh correctly - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix uninitialized one_time_gc in victim_sel_policy - f2fs: fix wrong block mapping for multi-devices - f2fs: fix wrong layout information on 16KB page - f2fs: fix zero-sized extent for precache extents - f2fs: introduce reserved_pin_section sysfs entry - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: maintain one time GC mode is enabled during whole zoned GC cycle - f2fs: sysfs: add encoding_flags entry - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - fgraph: Check ftrace_pids_enabled on registration for early filtering - fgraph: Initialize ftrace_ops->private for function graph ops - fhandle: use more consistent rules for decoding file handle from userns - filelock: add FL_RECLAIM to show_fl_flags() macro - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firewire: ohci: move self_id_complete tracepoint after validating register - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: Add stub functions for SCMI MISC API - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER - firmware: meson_sm: fix device leak at probe - firmware: qcom: scm: preserve assign_mem() error return value - firmware: qcom: tzmem: disable sc7180 platform - firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix access to video_is_primary_device() when compiled without CONFIG_VIDEO - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/namespace: correctly handle errors returned by grab_requested_mnt_ns - fs/namespace: fix reference leak in grab_requested_mnt_ns - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: check for shutdown in fsync - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs/proc/task_mmu: check p->vec_buf for NULL - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: do not allow mapping a non-regular backing file - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genetlink: fix genl_bind() invoking bind() after -EPERM - gfs2: fix freeze error handling - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: Fix use of bio_chain - gfs2: Prevent recursive memory reclaim - gpio: 104-idio-16: Define maximum valid register address offset - gpio: cdev: Correct return code on memory allocation failure - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter - gpiolib: acpi: Add a quirk for Acer Nitro V15 - gpiolib: acpi: Add quirk for ASUS ProArt PX13 - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: Fix gpio count with string references - gpiolib: acpi: Fix potential out-of-boundary left shift - gpiolib: acpi: Handle deferred list via new API - gpiolib: acpi: Move quirks to a separate file - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list() - gpiolib-acpi: Update file references in the Documentation and MAINTAINERS - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpiolib: fix invalid pointer access in debugfs - gpio: ljca: Fix duplicated IRQ mapping - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: swnode: don't use the swnode's name as the key for GPIO lookup - gpio: virtuser: fix UAF in configfs release path - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - greybus: gb-beagleplay: Fix timeout handling in bootloader functions - gue: Fix skb memleak with inner IP protocol 0. - gup: optimize longterm pin_user_pages() for large folio - gve: Correct ethtool rx_dropped calculation - gve: defer interrupt enabling until NAPI registration - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Add sync across amd sfh work functions - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: hidraw: tighten ioctl command parsing - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: nintendo: Wait longer for initial probe - HID: pidff: PERMISSIVE_CONTROL quirk autodetection - HID: pidff: Use direction fix only for conditional effects - HID: playstation: Center initial joystick axes to prevent spurious events - HID: playstation: Fix memory leak in dualshock4_get_calibration_data() - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hostfs: Fix only passing host root in boot stage with new mount - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimers: Introduce hrtimer_update_function() - hrtimers: Make hrtimer_update_function() less expensive - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: hold rcu and dev lock for hsr_get_port_ndev - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Limit fan multiplier to avoid overflow - hwmon: (dell-smm) Remove Dell Precision 490 custom config data - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (lenovo-ec-sensors) Update P8 supprt - hwmon: (ltc4282): Fix reset_history file permissions - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (max6697) fix regmap leak on probe failure - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i2c: riic: Move suspend handling to NOIRQ phase - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: remove redundant memory barrier when cleaning Tx descs - i40e: validate ring_len parameter against hardware-specific values - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/ipoib: Ignore L3 master device - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: Fix incorrect timeout ice_release_res() - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues - ice: Fix persistent failure in ice_get_rxfh - ice: fix PTP cleanup on driver removal in error path - ice: fix Rx page leak on multi-buffer frames - ice: ice_adapter: release xa entry on adapter allocation failure - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - ice: store max_frame and rx_buf_len only in ice_rx_ring - idpf: add support for SW triggered interrupts - idpf: add support for Tx refillqs in flow scheduling mode - idpf: cap maximum Rx buffer size - idpf: do not linearize big TSO packets - idpf: fix memory leak in idpf_vport_rel() - idpf: fix mismatched free function for dma_alloc_coherent - idpf: fix possible vport_config NULL pointer deref in remove - idpf: fix Rx descriptor ready check barrier in splitq - idpf: improve when to set RE bit logic - idpf: keep the netdev when a reset fails - idpf: reduce mbx_task schedule delay to 300us - idpf: remove obsolete stashing code - idpf: replace flow scheduling buffer ring with buffer pool - idpf: simplify and fix splitq Tx packet rollback error path - idpf: stop Tx if there are insufficient buffer resources - idpf: trigger SW interrupt when exiting wb_on_itr mode - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: don't fail igc_probe() on LED setup error - igc: fix race condition in TX timestamp read for register 0 - igc: Restore default Qbv schedule when changing channels - iio: accel: adxl380: fix handling of unavailable "INT1" interrupt - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio/adc/pac1934: fix channel disable configuration - iio: adc: pac1934: Fix clamped value in pac1934_reg_snapshot - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: buffer-dmaengine: enable .get_dma_dev() - iio: buffer-dma: support getting the DMA channel - iio: buffer: support getting dma channel from the buffer - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: core: Replace lockdep_set_class() + mutex_init() by combined call - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: humditiy: hdc3020: fix units for temperature and humidity measurement - iio: humditiy: hdc3020: fix units for thresholds and hysteresis - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() - inet_diag: annotate data-races in inet_diag_bc_sk() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: alps - fix use-after-free bugs caused by dev3_register_work - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: lkkbd - disable pending work before freeing device - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: allocate s_dio_done_wq for async reads as well - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: do not register driver in probe() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Fix race during abort for file descriptors - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds - iommufd/selftest: Update hw_info coverage for an input data_type - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE - iommu/vt-d: debugfs: Fix legacy mode page table dump logic - iommu/vt-d: Disallow dirty tracking if incoherent page walk - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring/cmd: let cmds to know about dying task - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: fix incorrect io_kiocb reference in io_link_skb - io_uring: fix min_wait wakeups for SQPOLL - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check - io_uring: move local task_work in exit cancel loop - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations - io_uring/napi: fix io_napi_entry RCU accesses - io_uring/poll: correctly handle io_poll_add() return value on update - io_uring/rw: recycle buffers manually for non-mshot reads - io_uring/sqpoll: be smarter on when to update the stime usage - io_uring/sqpoll: switch away from getrusage() for CPU accounting - io_uring/waitid: always prune wait queue entry in io_waitid_wait() - io_uring/zctx: check chained notif contexts - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: adopt dst_dev() helper - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/renesas-rzg2l: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - irqchip/starfive-jh8100: Fix section mismatch - irqdomain: cdx: Switch to of_fwnode_handle() - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - isofs: check the return value of sb_min_blocksize() in isofs_fill_super - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: refactor pcpu kasan vmalloc unpoison - kasan: unpoison vms[area] addresses with a common tag - kbuild: fix compilation of dtb specified on command-line without make rule - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - kunit: test_dev_action: Correctly cast 'priv' pointer to long* - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: Make all 32bit ID registers fully writable - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: VMX: Fix check for valid GVA on an EPT violation - KVM: VMX: Split out guts of EPT violation to common/exposed function - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - l2tp: Fix memleak in l2tp_udp_encap_recv(). - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-cros_ec: Skip LEDs without color components - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp55xx: Use correct address for memory programming - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM - libbpf: Fix error when st-prefix_ops and ops from differ btf - libbpf: Fix parsing of multi-split BTF - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libbpf: Fix USDT SIB argument handling causing unrecognized register error - libbpf: Fix -Wdiscarded-qualifiers under C23 - lib/buildid: use __kernel_read() for sleepable context - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: riscv/chacha: Avoid s0/fp register - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - listmount: don't call path_put() under namespace semaphore - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - locktorture: Fix memory leak in param_set_cpumask() - LoongArch: Add cflag -fno-isolate-erroneous-paths-dereference - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names - LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Fix unreliable stack for live patching - LoongArch: Handle new atomic instructions for probes - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - LoongArch: vDSO: Check kcalloc() result in init_vdso() - loop: fix backing file reference leak on validation error - lsm: CONFIG_LSM can depend on CONFIG_SECURITY - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend() - mailbox: mtk-cmdq: Refine DMA address handling for the command buffer - mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data() - mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend() - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop - mailbox: zynqmp-ipi: Fix SGI cleanup on unbind - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md: fix mssing blktrace bio split events - md: fix rcu protection in md_wakeup_thread - md: Fix static checker warning in analyze_sbs - md/raid0: Handle bio_split() errors - md/raid10: Handle bio_split() errors - md/raid10: wait barrier before returning discard request with REQ_NOWAIT - md/raid1: Handle bio_split() errors - md/raid5: fix IO hang when array is broken with IO inflight - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() - md: suspend array while updating raid_disks via sysfs - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: extron-da-hd-4k-plus: drop external-module make commands - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: ipu6: isys: Set embedded data type correctly for metadata formats - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pci: mg4b: fix uninitialized iio scan data - media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS - media: platform: mtk-mdp3: fix device leaks at probe - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: s5p-mfc: remove an unused/uninitialized variable - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: ti: j721e-csi2rx: Fix source subdev link creation - media: ti: j721e-csi2rx: Use devm_of_platform_populate - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: videobuf2: forbid remove_bufs when legacy fileio is active - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vivid: fix disappearing messages - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: gsc: add dependency on Xe driver - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: core: Increment of_node's refcount before linking it to the platform device - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: kempld: Switch back to earlier ->init() behavior - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - microchip: lan865x: add ndo_eth_ioctl handler to enable PHY ioctl support - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - MIPS: Fix a reference leak bug in ip22_check_gio() - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: Fix variable shadowing in mmc_route_rpmb_frames() - mmc: core: SPI mode remove cmd7 - mmc: dw_mmc-rockchip: Fix wrong internal phase calculate - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mmc_spi: multiple block read remove read crc ack - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/lru_sort: use param_ctx for damon_attrs staging - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: describe @flags parameter in memalloc_flags_save() - mm/fake-numa: allow later numa node hotplug - mm/fake-numa: handle cases with no SRAT info - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/huge_memory: do not change split_huge_page*() target order silently - mm/huge_memory: fix NULL pointer deference when splitting folio - mm/huge_memory: preserve PG_has_hwpoisoned if a folio is split to >0 order - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix folio is still mapped when deleted - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm: introduce and use {pgd,p4d}_populate_kernel() - mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN - mm/kasan: fix KASAN poisoning in vrealloc() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm/memfd: fix information leak in hugetlb folios - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory-failure: fix redundant updates for already poisoned pages - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm: numa,memblock: include for 'numa_nodes_parsed' - mm/page_alloc: batch page freeing in decay_pcp_high - mm/page_alloc: change all pageblocks migrate type on coalescing - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection - mm/page_owner: fix memory leak in page_owner_stack_fops->release() - mm, percpu: do not consider sleepable allocations atomic - mm: prevent poison consumption when splitting THP - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" - mm: revert "mm: vmscan.c: fix OOM on swap stress test" - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm/shmem: fix THP allocation and fallback loop - mm, shmem: prevent infinite loop on truncate race - mm/shmem, swap: fix race of truncate and swap entry split - mm: simplify folio_expected_ref_count() - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - mm: swap: check for stable address space before operating on the VMA - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages - mm/truncate: unmap large folio on split failure - mm/zswap: fix error pointer free in zswap_cpu_comp_prepare() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mount: handle NULL values in mnt_ns_release() - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: Call dst_release() in mptcp_active_enable(). - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: reset blackhole on success with non-loopback ifaces - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - mtd: spinand: winbond: Fix oob_layout for W25N01JW - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: override creds to kernel when calling sock_{send,recv}msg() - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: Fix buffer overflow in USB transport layer - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - net: devmem: expose tcp_recvmsg_locked errors - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - netdevsim: set the carrier when the device goes up - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix bcm63xx RGMII port link adjustment - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: felix: support phy-mode = "10g-qxgmii" - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Do not execute PTP driver code for unsupported switches - net: dsa: microchip: Don't free uninitialized ksz_irq - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463 - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: dsa: tag_brcm: legacy: reorganize functions - net: dsa: xrs700x: reject unsupported HSR configurations - net: dst: add four helpers to annotate data-races around dst->dev - net: dst: introduce dst->dev_rcu - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout - net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism - net: ethernet: ti: am65-cpts: fix timestamp loss due to race conditions - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_nat: remove bogus direction check - netfilter: nfnetlink: reset nlh pointer during batch replay - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: make nft_set_do_lookup available unconditionally - netfilter: nf_tables: place base_seq in struct net - netfilter: nf_tables: Reintroduce shortened deletion notifications - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nf_tables: restart set lookup on base_seq change - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups - netfilter: nft_set_pipapo: don't return bogus extension pointer - netfilter: nft_set_pipapo: fix null deref for empty set - netfilter: nft_set_pipapo: fix range overlap detection - netfilter: nft_set_pipapo: merge pipapo_get/lookup - netfilter: nft_set_pipapo: remove unused arguments - netfilter: nft_set_rbtree: continue traversal if element is inactive - netfilter: nft_set: remove one argument from lookup and update functions - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix segmentation of forwarding fraglist GRO - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - netfs: Prevent duplicate unlocking - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add VLAN CTAG filter support - net: hsr: create an API to get hsr port type - net: hsr: Create and export hsr_get_port_ndev() - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hsr: remove one synchronize_rcu() from hsr_del_port() - net: hsr: remove synchronize_rcu() from hsr_add_port() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net: Introduce skb_copy_datagram_from_iter_full() - net: ionic: add dma_wmb() before ringing TX doorbell - net: ionic: map SKB after pseudo-header checksum prep - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv4: allow directed broadcast routes to use dst hint - net: ipv6: fix field-spanning memcpy warning in AH output - net: ipv6: ioam6: use consistent dst names - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - netlink: specs: mptcp: add missing 'server-side' attr - netlink: specs: mptcp: clearly mention attributes - netlink: specs: mptcp: fix if-idx attribute type - netlink: specs: mptcp: replace underscores with dashes in names - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: mana: Change the function signature of mana_get_primary_netdev_rcu - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv - net/mlx5e: Fix crash on profile change rollback failure - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5: Fix IPsec cleanup over MPV device - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: Fix vhca_id access call trace use before alloc - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: HWS, change error flow on matcher disconnect - net/mlx5: Initialize events outside devlink lock - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netdevsim: fix inconsistent carrier state after link/unlink - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: add phy_interface_copy() - net: phy: add phy_interface_weight() - net: phy: adin1100: Fix software power-down ready condition - net: phy: aquantia: check for NVMEM deferral - net: phy: clear link parameters on admin link down - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: micrel: always set shared->phydev for LAN8814 - net: phy: micrel: fix clk warning when removing the driver - net: phy: micrel: Fix lan8814_config_init - net: phy: micrel: Introduce lanphy_modify_page_reg - net: phy: micrel: lan8814 fix reset of the QSGMII interface - net: phy: micrel: Replace hardcoded pages with defines - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net: sched: generalize check for no-queue qdisc on TX queue - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick - net: sfp: add quirk for FLYPRO copper SFP+ module - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: convert sfp quirks to modify struct sfp_module_support - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sfp: pre-parse the module support - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix general protection fault in __smc_diag_dump - net/smc: fix mismatch between CLC header and proposal - net/smc: fix warning in smc_rx_splice() when calling get_page() - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: est: Drop frames causing HLBS error - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR - net: ti: icssg-prueth: Fix fdb hash size configuration - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: Change async resync helpers argument - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: tun: Update napi->skb after XDP process - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: r8152: fix resume reset deadlock - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: use dst_dev_rcu() in sk_setup_caps() - net: vlan: sync VLAN features with lower device - net: wan: framer: pef2256: Switch to devm_mfd_add_devices() - net: wangxun: limit tx_max_coalesced_frames_irq - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: mhi: Keep modem name match with Foxconn T99W640 - net: wwan: t7xx: add support for HP DRMR-H01 - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Apply delay_retrans to async operations - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes - NFSD/blocklayout: Fix minlength check in proc_layoutget - nfsd: check that server is running in unlock_filesystem - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't use sv_nrthreads in connection limiting calculations. - nfsd: Drop dprintk in blocklayout xdr functions - nfsd: Drop the client reference in client_states_open() - nfsd: fix access checking for NLM under XPRTSEC policies - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - nfsd: fix __fh_verify for localio - NFSD: Fix last write offset handling in layoutcommit - nfsd: fix memory leak in nfsd_create_serv error paths - nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT - NFSD: Fix permission check for read access to executable-only files - nfsd: fix refcount leak in nfsd_set_fh_dentry() - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - NFSD: Implement large extent array support in pNFS - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: net ref data still needs to be freed even if net hasn't startup - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - nfsd: refine and rename NFSD_MAY_LOCK - NFSD: Remove NFSERR_EAGAIN - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() - NFSD: Rework encoding and decoding of nfsd4_deviceid - NFSD: Skip close replay processing if XDR encoding fails - nfsd: unregister with rpcbind when deleting a transport - nfsd: update percpu_ref to manage references on nfsd_net - nfsd: Use correct error code when decoding extents - nfsd: use correct loop termination in nfsd4_revoke_states() - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: Fix a deadlock involving nfs_release_folio() - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix LTP test failures when timestamps are delegated - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - nfs/localio: add direct IO enablement with sync and async IO support - nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter - nfs/localio: restore creds before releasing pageio data - NFS: nfs_invalidate_folio() must observe the offset and size arguments - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nfs/vfs: discard d_exact_alias() - nilfs2: avoid having an active sc_timer before freeing sci - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme: fix PI insert on write - nvmem: layouts: fix automatic module loading - nvmem: layouts: fix nvmem_layout_bus_uevent - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: skip nvme_write_sq_db on empty rqlist - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvme/tcp: handle tls partially sent records in write_space() - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type - objtool/LoongArch: Mark types based on break immediate code - objtool/rust: add one more `noreturn` Rust function - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeon_ep: fix VF MAC address lifecycle handling - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - openrisc: Add R_OR1K_32_PCREL relocation type module support - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches - parisc: Avoid crash due to unaligned access in unwinder - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: brcmstb: Reuse pcie_cfg_data structure - PCI: brcmstb: Set MLW based on "num-lanes" DT property if present - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Ensure error recoverability at all times - PCI/ERR: Fix uevent on failure to recover - PCI/ERR: Update device error_state already after reset - PCI: imx6: Enable the Vaux supply if available - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Fix incorrect error message in probe() - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion - PCI: rcar-gen4: Assure reset occurs before DBI access - PCI: rcar-gen4: Fix inverted break condition in PHY initialization - PCI: rcar-gen4: Fix PHY initialization - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - PCI: Test for bit underflow in pcie_set_readrq() - PCI: xilinx-nwl: Fix ECAM programming - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf annotate: Check return value of evsel__get_arch() properly - perf/arm-cmn: Fix CMN S3 DTM offset - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf/core: Fix address filter match with backing files - perf/core: Fix MMAP2 event device with backing files - perf/core: Fix MMAP event path names with backing files - perf disasm: Avoid undefined behavior in incrementing NULL - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf hist: In init, ensure mem_info is put on error paths - perf lock contention: Load kernel map before lookup - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: Remove get_perf_callchain() init_nr argument - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Simplify get_perf_callchain() user logic - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test shell lbr: Avoid failures with perf event paranoia - perf test stat: Avoid hybrid assumption when virtualized - perf test trace_btf_enum: Skip if permissions are insufficient - perf test: Update sysfs path for core PMU caps - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf tools: Mark split kallsyms DSOs as loaded - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel/cstate: Remove PC3 support from LunarLake - perf/x86/intel: Do not enable BTS for guests - perf/x86/intel: Fix crash in icl_update_topdown_event() - perf/x86/intel: Fix KASAN global-out-of-bounds warning - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: freescale: Initialize priv->lock - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits - phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors - phy: ti: gmii-sel: fix regmap leak on probe failure - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: realtek: Select REGMAP_MMIO for RTD driver - pinctrl: renesas: rzg2l: Fix invalid unsigned return in rzg3s_oen_read() - pinctrl: renesas: rzg2l: Fix ISEL restore on resume - pinctrl: renesas: rzg2l: Fix PMC restore - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86/amd/pmf: Support new ACPI ID AMDI0108 - platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13 - platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86/intel/tpmi/plr: Make the file domain/status writeable - platform/x86/intel-uncore-freq: Fix warning in partitioned system - platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: msi-wmi-platform: Fix typo in WMI GUID - platform/x86: msi-wmi-platform: Only load on MSI devices - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - PM / devfreq: rockchip-dfi: double count on RK3588 - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - PM: EM: Drop unused parameter from em_adjust_new_capacity() - PM: EM: Fix incorrect description of the cost field in struct em_perf_state - PM: EM: Fix late boot with holes in CPU topology - PM: EM: Move CPU capacity check to em_adjust_new_capacity() - PM: EM: Slightly reduce em_check_capacity_update() overhead - PM: hibernate: Emit an error when image writing fails - PM: hibernate: Use atomic64_t for compressed_size variable - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() - pNFS: Fix a deadlock when returning a delegation during open() - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/603: Really copy kernel PGD entries into all PGDIRs - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/8xx: Remove left-over instruction and comments in DataStoreTLBMiss handler - powerpc/addnote: Fix overflow on 32-bit builds - powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kdump: Fix size calculation for hot-removed memory ranges - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max17040: Check iio_read_channel_processed() return code - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt5033_charger: Fix device node reference leaks - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix the issue of proc_mem_open returning NULL - proc: fix type confusion in pde_set_flags() - procfs: avoid fetching build ID while holding VMA lock - proc: proc_maps_open allow proc_mem_open to return NULL - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add a upper bound on max_vclocks - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: Limit time setting of PTP clocks - ptp: ocp: Fix typo using index 1 instead of i in SMA initialization loop - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: pca9685: Use bulk write to atomicially update registers - pwm: stm32: Always program polarity - pwm: tiehrpwm: Don't drop runtime PM reference in .free() - pwm: tiehrpwm: Fix corner case in clock divisor calculation - pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation - pwm: tiehrpwm: Make code comment in .free() more useful - qed: Don't collect too many protection override GRC elements - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - RAS: Report all ARM processor CPER information to userspace - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Pass correct flag for dma mr creation - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix recv CQ and QP cache affinity - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/irdma: Update Kconfig - RDMA/mana_ib: Handle net event for pointing to the current netdev - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: fixed: Rely on the core freeing the enable GPIO - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/amd/display: Fix pbn to kbps Conversion" - Revert "drm/amd/display: Move setup_stream_attribute" - Revert "drm/amd/display: Optimize cursor position updates" - Revert "drm/amd: Skip power ungate during suspend for VPE" - Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "netfilter: nf_tables: Reintroduce shortened deletion notifications" - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "RDMA/irdma: Update Kconfig" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "udmabuf: fix vmap_udmabuf error page set" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "wireguard: device: enable threaded NAPI" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - riscv, bpf: Sign extend struct ops return values properly - riscv: Build loader.bin exclusively for Canaan K210 - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: pgtable: Cleanup useless VA_USER_XXX definitions - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Sanitize syscall table indexing under speculation - riscv: stacktrace: Disable KASAN checks for non-current tasks - rocker: fix memory leak in rocker_world_port_post_fini() - romfs: check sb_set_blocksize() return value - rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: Add -fno-isolate-erroneous-paths-dereference to bindgen_skip_c_flags - rust: block: fix `srctree/` links - rust: cfi: only 64-bit arm and x86 support CFI_CLANG - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0 - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects - rust: kbuild: workaround `rustdoc` doctests modifier bug - rust: rbtree: fix documentation typo in CursorMut peek_next method - rxrpc: Fix data-race warning and potential load/store tearing - s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/ap: Fix wrong APQN fill calculation - s390/bpf: Centralize frame offset calculations - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/ctcm: Fix double-kfree - s390/dasd: enforce dma_alignment to ensure proper buffer validation - s390/dasd: Fix gendisk parent after copy pair swap - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix memory leak in add_marker() when kvrealloc() fails - s390/mm: Fix __ptep_rdp() inline assembly - s390/mm: Use __GFP_ACCOUNT for user page table allocations - s390/pai: Deny all events not handled by this PMU - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - s390/vmlinux.lds.S: Move .vmlinux.info to end of allocatable sections - s390: vmlinux.lds.S: Reorder sections - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/deadline: Document dl_server - sched/deadline: Fix race in push_dl_task() - sched/deadline: Fix 'stuck' dl_server - sched/deadline: only set free_cpus for online runqueues - sched/eevdf: Fix min_vruntime vs avg_vruntime - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Fix possible deadlock in the deferred_irq_workfn() - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Make qmap dump operation non-destructive - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched/fair: Block delayed tasks on throttled hierarchy during dequeue - sched/fair: Fix pelt clock sync when entering idle - sched/fair: Fix pelt lost idle time detection - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts/faddr2line: Fix "Argument list too long" error - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scripts: generate_rust_analyzer: compile sysroot with correct edition - scripts: generate_rust_analyzer: remove sysroot assertion - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: imm: Fix use-after-free bug caused by unfinished delayed work - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpi3mr: Fix I/O failures during controller reset - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: scsi_debug: Fix atomic write enable module param description - scsi: sd: Fix build warning in sd_revalidate_disk() - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Add support for Hurray Data new controller PCI device - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on suspend - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Correct system PM flow - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: host: mediatek: Fix PWM mode switch issue - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition - scsi: ufs: host: mediatek: Fix unbalanced IRQ enable issue - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - seccomp: passthrough uprobe systemcall without filtering - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Fix flaky bpf_cookie selftest - selftests/bpf: Fix selftest verifier_arena_large failure - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Test invalid narrower ctx load - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: drv-net: rss_ctx: fix the queue count check - selftests: drv-net: rss_ctx: make the test pass with few queues - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt - selftests/ftrace: traceonoff_triggers: strip off names - selftests/landlock: Fix TCP bind(AF_UNSPEC) test case - selftests/landlock: Properly close a file descriptor - selftests/landlock: Remove invalid unix socket bind() - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: allow more time to send ADD_ADDR - selftests: mptcp: join: endpoints: longer timeout - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: userspace: longer timeout - selftests: mptcp: join: userspace: longer transfer - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel - selftests: netfilter: query conntrack state to check for port clash resolution - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: lib: Do not overwrite error messages - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: Replace sleep with slowwait - selftests: traceroute: Return correct value on failure - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: vDSO: Fix -Wunitialized in powerpc VDSO_CALL() wrapper - selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing vDSO - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: core: fix OF node leak - serial: core: Fix serial device initialization - serial: core: Restore sysfs fwnode information - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: remove useless enable of enhanced features - serial: sh-sci: Check that the DMA cookie is valid - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - serial: xilinx_uartps: fix rs485 delay_rts_after_send - serial: xilinx_uartps: Use helper function hrtimer_update_function() - sfc: fix NULL dereferences in ef100_process_design_param() - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix recovery on rename failures - shmem: fix tmpfs reconfiguration (remount) when noswap is set - simplify nfs_atomic_open_v23() - slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts - slab: Fix obj_ext mistakenly considered NULL due to race condition - slab: mark slab->obj_exts allocation failures unconditionally - slab: prevent warnings when slab obj_exts vector allocation fails - slab: reset slab->obj_ext when freeing and it is OBJEXTS_ALLOC_FAIL - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: always "instantiate" inode in smack_inode_init_security() - smack: deduplicate "does access rule request transmutation" - smack: deduplicate xattr setting in smack_inode_init_security() - smack: fix bug: invalid label of unix socket file - smack: fix bug: setting task label silently ignores input garbage - smack: fix bug: SMACK64TRANSMUTE set on non-directory - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix filename matching of deferred files - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smb: server: use disable_work_sync in transport_rdma.c - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: apple: mailbox: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure - soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure - soc: qcom: gsbi: fix double disable caused by devm - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: pbs: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc: samsung: exynos-pmu: fix device leak on regmap lookup - soc: Switch back to struct platform_driver::remove() - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - soc/tegra: fuse: Do not register SoC device on ACPI boot - soc: ti: pruss: don't use %pK through printk - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: airoha: add support of dual/quad wires spi modes to exec_op() handler - spi: airoha: do not keep {tx,rx} dma buffer always mapped - spi: airoha: fix reading/writing of flashes with more than one plane per lun - spi: airoha: return an error for continuous mode dirmap creation cases - spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND - spi: airoha: switch back to non-dma mode in the case of error - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Fix cqspi_setup_flash() - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Prevent lost complete() call during indirect read - spi: ch341: fix out-of-bounds memory access in ch341_transfer_one - spi: fix return code when spi device has too many chipselects - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-nxp-fspi: Add OCT-DTR mode support - spi: spi-nxp-fspi: Check return value of devm_mutex_init() - spi: spi-nxp-fspi: remove the goto in probe - spi: spi-sprd-adi: Fix double free in probe error path - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - statmount: don't call path_put() under namespace semaphore - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - svcrdma: use rc_pageoff for memcpy byte offset - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: cache RTAX_QUICKACK metric in a hot cache line - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: convert to dev_net_rcu() - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcp_metrics: use dst_dev_net_rcu() - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - tee: fix register_shm_helper() - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thermal: gov_step_wise: Allow cooling level to be reduced earlier - thermal: intel: selftests: workload_hint: Mask unsupported types - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power turbostat: fix GCC9 build regression - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools: riscv: Fixed misalignment of CSR related definitions - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: fix string attribute length to include null terminator - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm2-sessions: Fix out of range indexing in name_size - tpm2-sessions: Fix tpm2_read_public range checks - tpm: Cap the number of PCR banks - tpm: Compare HMAC values in constant time - tpm: Disable TPM2_TCG_HMAC by default - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - trace/fgraph: Fix error handling - tracefs: fix a leak in eventfs_create_events_dir() - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tty: serial: ip22zilog: Use platform device for probing - tty: serial: Modify the use of dev_err_probe() - tty/vt: Add missing return value for VT_RESIZE in vt_ioctl() - tty/vt: fix up incorrect backport to stable releases - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: fix deadlock when reading partition table - ublk: prevent invalid access with DEBUG - udmabuf: fix a buf size overflow issue during udmabuf creation - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Don't rename vmap to kernel_vmap - um: Fix FD copy size in os_rcv_fd_msg() - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - uprobes: uprobe_warn should use passed task - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() - usb: typec: tcpm: properly deliver cable vdms to altmode drivers - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: introduce macro for ring segment list iteration - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci-pci: add support for hosts with zero USB3 ports - usb: xhci-pci: Fix USB2-only root hub registration - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - usb: xhci: remove option to change a default ring's TRB cycle bit - vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues - vdpa/pds: use %pe for ERR_PTR() in event handler registration - vdso: Add struct __kernel_old_timeval forward declaration to gettime.h - veth: apply qdisc backpressure on full ptr_ring to reduce TX drops - veth: fix data race in veth_get_ethtool_stats - veth: more robust handing of race to avoid txq getting stuck - veth: prevent NULL pointer dereference in veth_xdp_rcv - veth: reduce XDP no_direct return section to fix race - vfio/pci: Disable qword access to the PCI ROM bar - vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices - vfio/pci: Use RCU for error/request triggers to avoid circular locking - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Fix kthread worker cgroup failure handling - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: Allocate nonlinear SKBs for handling large receive buffers - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix grammar in virtio_queue_info docs - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-fs: fix incorrect check for fsvq->kobj - virtio-net: drop the multi-buffer XDP packet in zerocopy - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - virtio: vdpa: Fix reference count leak in octep_sriov_enable() - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock: Make accept()ed sockets use custom setsockopt() - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: Allocate nonlinear SKBs for handling large transmit buffers - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: Coalesce only linear skb - vsock/virtio: Fix message iterator handling on transmit path - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - vsock/virtio: Move length check to callers of virtio_vsock_skb_rx_put() - vsock/virtio: Move SKB allocation lower-bound check to callers - vsock/virtio: Rename virtio_vsock_alloc_skb() - vsock/virtio: Rename virtio_vsock_skb_rx_put() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: Add missing include of export.h - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Avoid vdev delete timeout when firmware is already down - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath10k: move recovery check logic into a new work - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: add support for MU EDCA - wifi: ath11k: avoid bit operation on key flags - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: fix VHT MCS assignment - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: restore register window after global reset - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: correctly handle mcast packets for clients - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() - wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() - wifi: ath12k: fix wrong logging ID used for CE - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: add an hrtimer based delayed work item - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cfg80211: stop radar detection in cfg80211_leave() - wifi: cfg80211: use cfg80211_leave() in iftype change - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list - wifi: iwlwifi: Remove redundant header files - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: don't mark keys for inactive links as uploaded - wifi: mac80211: don't perform DA check on S1G beacon - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix key tailroom accounting leak - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: restore non-chanctx injection behaviour - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mac80211: Track NAN interface start/stop - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt76_eeprom_override to int - wifi: mt76: mt7915: fix mt7981 pre-calibration - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7925: add handler to hif suspend/resume event - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: rtw89: avoid possible TX wait initialization race - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() - wifi: rtw89: obtain RX path from ppdu status IE00 - wifi: rtw89: print just once for unknown C2H events - wifi: rtw89: renew a completion for each H2C command waiting C2H event - wifi: rtw89: wow: remove notify during WoWLAN net-detect - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Add SRSO_USER_KERNEL_NO support - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: KVM: Add support for SRSO_MSR_FIX - x86/bugs: Report correct retbleed mitigation status - x86/CPU/AMD: Add RDSEED fix for Zen5 - x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures - x86/fred: Remove ENDBR64 from FRED entry points - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/msi: Make irq_retrigger() functional for posted MSI - x86/mtrr: Rename mtrr_overwrite_state() to guest_force_mtrr_state() - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/resctrl: Refactor resctrl_arch_rmid_read() - x86/runtime-const: Add the RUNTIME_CONST_PTR assembly macro - x86: uaccess: don't use runtime-const rewriting in modules - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86: use cmov for user address masking - x86/vdso: Fix output operand size of RDPID - x86/vmware: Fix hypercall clobbers - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: drop SA reference in xfrm_state_update if dir doesn't match - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: set err and extack on failure to create pcpu SA - xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix a UAF problem in xattr repair - xfs: fix locking in xchk_nlinks_collect_dir - xfs: fix log CRC mismatches between i386 and other architectures - xfs: fix out of bounds memory read error in symlink repair - xfs: fix stupid compiler warning - xfs: Fix the return value of xfs_rtcopy_summary() - xfs: fix UAF in xchk_btree_check_block_owner - xfs: rename the old_crc variable in xlog_recover_process - xfs: Replace strncpy with memcpy - xfs: set max_agbno to allow sparse alloc of last full inode chunk - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xhci: fix stale flag preventig URBs after link state error is cleared - xsk: Harden userspace-supplied xdp_desc validation - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Bump release (build with LVC patches)- fix typo- Add LVC patches6.12.91-24.module.8821au6.12.91-246.12.91-245.12.5.2_0_g78821au.ko/usr/lib/modules/6.12.91-desktop-24rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-all --param=ssp-buffer-size=4 -m64 -mtune=generic -fltohttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=ea027ded485cb18bf0307be804441745e3d0106d, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-883d7ec4a830f2ff61d2e96cef7ad7f8de00094cb7b680a53b008ce4a694a1788f827119b049c0c3c0c86f45fed1d30f4c73d7582960c62e2d4cb6685dc4943fc?7zXZ 3Ń!`w] crv(vX0q(գ¹$j KHRH0v*žtFn B@^y [!dqDQxƹYƠ3Lὃ7HKF`٘ʶȣZ%W 9QxP}2w;-&58C?JH%Lܨ)5A=x>+:9Rrw?+~|mR) zJ]s}I 3d2Wǣ rK룗K"C,bP~p;KB}U?v+"hLX%qƳk')xzi\(ӏ|V xfUZp2+Q[DӶɷeԿ5:]kHWe1"jM÷j$t楴إ:$YUnj'<5b\tu*Vk` ؎HG(c jDW?.{^'eK -yLޯyaD4eHxbobr}7ܳg~WٹUYH~v3m=2Et@7nhs3YTguTt`pJBx<4#4|Y8I[ؘ*W_NSVܬ"Aum{‰gB:X of"/$ؤ <[N#f/KFVJۼ}s~hd+jCG!Fva.3?<[] SQ{ 󞓥Y/١oa?sU4fyCs?7uo9X< ngԴxQ'smZb4,ְf')}@s6 HE&OfcmMS:f=ysm"LWֻw#ezn2~?3l,!/&hT> ѯ?;-`/Jr5OL!Qu&CT=_ n3}Wn,\ 84*ic x6ìVTeu4gF)0/X~W`2W?|ItOh1g2 4X`Shn#KYH$QcEQ'|m DyuH$i?*WDK 7MٯJr#'쏣@F)TuG)!Oyija_<ё/k\9 æXugm~6/ G ٛ]1a P憵xyIbޗ{S #c l)0&ZzAoKaOMA[7 :oe`^O ۦ>]1o%>L-T Fqn;PwLN|\R{~Nu){+je+u:qІl'r=}?+)B>U~vj/pM7\k$%7Y{bE^tW]qQaRV< +nABG,{pytNo;%, 0X5?yNEE&% .S+n67%!3s!y엔CM#;YͲ\I-RJ"gCvf8_z+f5^"[S3f2DCcF?5ںO`ɒDIХL04 w &+(bgwqI (|ؚP8\q[!Ieћ'9^)]B>3=/MUqȎ퓣HC[*wk`t4qgbw}e_O~q9Ju9`WbuW1`ĚS (lyGң|It{k``FW:vZ+aI'w\jY؀@-Y}U* ]\d Ϗt)o>0=BRa/6UJh3%eaih'4:"_ ¼kx&cLPrs(l',|2T?+߶=*$MZND]nқD<)uG" acbMe7)j$2q*s,I̐4sZZO%8ٔgz:Sa7Mr V-}{ D!7GVCϣO: ݑ.-fP"f,ȉǟ|> 7)] AHd,x1 |ˡtr?eD/v#Vqy;*hk˂ ݵH B*~pRm="H+'I9[ucЀ#|oSQ8K:MEZ2%Lo^Od ړ'f , 8aY<5,j0O1H$>_i&Ahd#? ]D|dfߴuS%BZ,=bq@D=nTI@dNReU+Gӌi(\ ;/EҖKn2UD/)޹TQ߱OwW9d==P?IرIAfgc,rrФc7pz7)WtPq8C"yё+{eYouR[zۍ Iwn +#2'# 3y;;ilk \{V0+)@N8C +P|L8i)Y<-ņqEƇ1niP5CqA5# 8Wu*GFHPۂ5[Rںl\jI_>^8BV7:J6<5o9.ٟrjJ@Ov̨ب)߬AK*wrS9>lMO}O/`]a aS=&$3@I( es{z'u$! um )ᗊD9'F\{G?-Zz }&!Yvh>_Nv)N}bԛ| *dd oH!@o0267Q+=uP@M%C)mC4vL6TreGuNw 6t-re$FСMu@tAV9twX;Te#Y ᛨU r L+Q _ lSnin8QMcRj1 mV[Oj'텅%} VZP2ɬȺ&K+HQ)0c`O[b-i笨%Tr3E@ŪϺ9?R;oKmZJg6~ǁ8vTiV2vbb*:(VW Bz=@s Lx +SA/znf*G~ɵP0/5IYJFQ8CxERza&e f5̲jqaOsBH>ɮAmL^<-M=;lhuenOqumSX^ErK0 k[=O5O]jhgPi{zI[4zCXZu-"8?3-{C:^Y;X;dn4%P&.7Q8þqkPd#NbgNձ CAz%zN%}٘[ㅪH/fy5_o2d1I6gڡ/FiJ;?m+AB/|F:/)!Tn3B'Y$$J\b"Q7)8oH;IyvrǼI]{2i@-H~BJ:B}Kopu'.TW5DjFG.F~d4]HUo([n7~Ue#/`f(2LPF J^ Dv&oo86@_2_VW"A9^@G vle슓U̢U#Frn%M(mJp߫D9No/ϭ-rŏd7UWF^hg|t%0wp]^<2ݹo4x?&U>45S5<n_s!S%?][a0ݒ#V㾵1RL1 T2Cl5t7䳬πk^0 ٺ@frOtK]sl(7{;Ck) G<эp Y%E4K-L-b;N*]D1-T٥l l{-s4`7`?ݹa  x0!SV&~C(#xTcN(L[2A:~zށ[er_{[BVd!@5xy~ :BoA os&#jO8vս~,M5ydw@Шc.!$^OB-9uhBjij;1%GE@œI/Smq g%6НB~1eB_3If5qtHvkys_Yz7|F²U'&$"fDq}90^LG-}"Q KCwS&,Z4G=*YTl1IՌƓ $ΦO-8钺Aw-uߚXoP9>6y22䜪/ mVCWCGHGWaX!I"R& }pj*Lv\wxAwXaՏa),䚢H6jkqgUp8BbI/gs邹ArJ`geš1Bcq:K.&% i!Ma>m+at'7m}qVWt#^x!ĕ "53]|SeBo:?7:2EHژAP` +ӱ4\~\1Q6bY|oh:4HQZq0 F^؍ m`|4| 5G+Y-K3e ھ/W Z<"',~"Xt=NG$X>I}%X+FlսQ dJ-aFE)RI1CN{&c)lbђlلe)uf]!!t"b$_FEY^n5:+'#m1ۭqLA͜Th] sczp%[KٍtlI2Z$ԙ~=ۋ_gisrYH@rfLGWlx3I v=5qZ!XS3:&oI(j\v]#89ni5@"y <=E!Ǝ v•0Ill.ko"m[Wm~`d#2OZ, 0@T" <|ZP+:/]/(r&țær1VϏ@peKzm %YYEUaFS.L#[T'T f 7(0Ϊoމ~w>)CIsyȮ?R  8k,Vf~ij1ĀNT܀>?9xǑtћK{L&7@ 8B]GRȸQqw ֏Vl~7TQEh"ȒcE켦 zkv,O25vЕJY4F=0_RQ.YbypXg"}DչȂ Nѐ |NSFJs%0u߮:<v~OYL?͝,9iUOI=sqS#į2w¶nբ#w-B%{‚tFSUQms?gCY>Јp9zVtílxxórHBF&$}":ciER\ P|CAc%ͬ!IC7(x2ɟzΧe66ܰ o]O{w! N23 $ՉI!N|^6}Op#msHM,zO}L 7<2ܕUw @Z`6^ ۬g;҄W 3ucGcln p43ݠfjBMJoϜgv<ݛ8.6!4W)!>BΘ.eּeuBdg2L5 )mi GydO{!@k- }v(<=F­A`"})I6P :k&}x,dTt_ƛt}ߝ򜾎vɛ n.9ƐC`ٻWub @`NTNjrrfڢyJwk|nmDK1m) lS^V8AkbΖ+S)Č2mT`.j@OOSNe`[Pka &OP,\2r.;U5`+Zkcc$d؉؟Ay#[yL1A|KJ˥dpň$te7XP~ =o0Q GNJ,GB=ciݕ5T24;x:"Hkذoc`I62oH5hj\^U;u>5(ܼS%qvP!M ҺŶDOPiͬRrej&A"h/{(Ly[8TCw lmr2f r+.' nߐX&]kn4͑  bȻ1E0: L,c!Bc/k 1H<*[*mZz뜊&1ykR0ܟdeX62'[|'Kh|Uf7S6>cC2LSxs[5" fnbv^;6I ;<]? +JvaP>' i%Yhom@9ZXglnpD]+D&PrhzRmC3 *EhZKelےDeWFTxVAwHlXEFMܻ%bev(^F ;dF# @k)U }x^ /K,`X #߆Q6b9Ĺѭ{w;8qv*j~4o<{iʕ _~L~ٱw2xMnZio )Uw,97,8}a,*IE7mr$7yEoѦGRT{T_{9TۥIڋ5_dZYzwQ*9N+vyLp3`(>%}\"BD*,Ӧhغ #Q^+ܦx5dQ}S:Sh.r=Uw6AG";`=;Ɠs=11!*Jg6ФKP^ ATII5]n9rK"p Ti QῊ$k}Yx8ї@ D:G1/;Qx"m#4gu 1ɼ͆h`0' W4q_)$-6=>lT)@yZ%tS+Ƅ]Ot3헠\yt҉HTi %3"7#vS!X 4NuuXʮwACNqGM;I.[A9e1g٤bnk&C9 \`׫ۊ`a|?.%!maZ* Έ,,rV4Qr3%sAr dF) ޜVؐq݋'V Gs&E7ɰ[KڤɊhXٓK}IJ/Q !UIyKv9bQPY Obajt{֨տ2l(6 TO:mNg5%FR!e5mGoHMP#P< h.oV{נ3w>rQ) Ǝ3kEtiX e$ef(u|e9VޓrnlD]s}B%̏% 1c0XWeB/fNۀ$Rف سy2pAWA"~lA CbBLZHA`OIBe3>D9׏ӗ7̶ku <#i^"("Q7i4ĵ\ހ/3۾ .&xklp,aHݣ 2oQ k- a"34M\Շ W8EDCZnjww=`%KsCOӳ<Sgm6l4b f.Q؉hFt(!6%N׊aewwoW{ozF B'!7!(cM ,L|JW##bG8kiZ--z5b N dwۅ9c>Y$)@ŕ{ν DU* xHR#5?G}Ba\ $ƕOMӬQK#G|K_꾤ιczi/6{瞚S`ӫpzqEahk_bv5 !%Rnnϵiߎ x\ bqˉHf'A$[%Ȭx@ĈG[~,hc 9'I4S#}׏CZSWGm0H°NA [4/`~ X6y4 dΑ ȬʩT7 |v6ZxE2KnhCD PN=*}"CyqR?G` 6 )ŧo,`TgK 4.ɇ@2| UL\r#&1|d;SJ4W ABTBLF~#ڱR!? LS 7apIjPX%'c%Y XBްZUgG \#c8.yzژ$J$sm3U!F'{bm*Nh~ŮlxKm'hi=P™G}ݢ? O ]RQ J@.PLLY5r: C])8ݢR7t:}(>#.hg—ۛs&Dia.&&6 @TRn4;CJv7w|dr7\a:*v){^b4ι) ] 9GUQg;Eeb[-ͨqyy /9}i$ayB!:m ri) 4LUCj;a&[e #/_B[Z5H)ojB~&C$ ^a+bzO6jh5}ZE6=]na/MhzR_]~Xie;Y.wyot&I:2Nd &)M(T skAf_8; bzY~Sv)k)Eˌ=Jg$O"md]Rs"{+-tp!D890RdhCzeO*?.U _ T4s+Y.mǏ7p򑪶aڥ= ~)ӈy`>? O)J:%'i@ԧU_1n}+I V _s%,|qv Thq$J[cM5'%ѪzQl+!'PG.컍Y ӌޓ_gL7k\v@pr/|wmFo&b^RKAe?lQQc݄z|~r;패%EU24W?)٣-A˰p?r?ž1{/0tHNQK>-WY%41nu{[ok\;/ Eg¾}^b>:Ty il}~Q"WӼ-L Y @WMbQ?jCI-;^BwxxЋ9(7&~%Ya@sbty/63$Nm1YG!<+E@9@hKdbTPk$!"rz_ O~H/KN|0Ů^fu|mu( /'HS./(-K^D[)${0=MU1U,k9{no&<=r}{w--V󜄧@ :XXhxzdp&rmaOu]Z(˰|t T:&-~~``ZOei$@()se{ \ebNH5yVWxlk"o|kg+p FW'#nO;⩢V,_ Ol!Fet .*_*8mWӄ6xjJ$}"1V G-YVfD1~eӈ;"&=cr/y)sd^w90Y ~S}fEl-z``[ק,YJx+g;ZXt-rFNR¬!\d .aBpX;peR~$~ZhXm='?r$=BβF61[$TL1Z7FYIcXF lQ +ZTb&qv ?حSYrLݽ,__iQ~,UP:Y ]Cħ-S3kֵ+~D̬ Qv NJFh4#O|Sm"_&_v^<_R4 S5bH x[Ut7-/oyЦhuVI|]_ O]:ʜԫ_; :`'αBx̿ 'yܱvc0_;[*z ,o{qm99Թi,d@m"b;O—;^1cpz5*n9.'4r57*K<"W& &޷Lfkjp eqKF{m\(%īΟ>,oM掦h`t=Hd(҈0hτ]2fzv%?ڢ67Y Gls EV>IѫY $>H͝,URk/# $k!ni^# }w|T ԺɛdXA߽g 脿YfEsՠC9jv z&yӌ$(ֳ`xS{>32da6i*:l qz\A>>z%R8jyν5Myj(oXF9%T`p=ɛLp&Riv"*uUb,%>1pxb%6+;1h8~2^n_^%0ꆣ+;DjPN5ltCP0pU.X׀XM֢}G-ǡ_CW|Sbkj<~Τ.4"QTu) I-m>Mͱ@!A59JpEk-瑷oZTf_2`KdTI+.ќs23jUkm4,aEأ̮hC<_.J2LY}xpoCe"de= ʦ]if=Eҍn4A ݠvˏesJ)N-~{&4gHent̆c趑rs'1͠, I,twj=okDX6B:4=E;~o;16S*=OR)" vU!iPNDΝkL<9),FRZM W~a?(,_&4ُcWĢ#ZOaSe0;8h Ay^2m8+"$p(BEBKjA=yn\P*# B0r kTQӋoJ,~U ۸z7'䠆vr!!0GO Tjz㗜<. BoO&-gz[-" v:Wg\9>kܔ$}C| CynAdbjpubn\k+X83g󛡦`}e牦 ^*H~H%nƢBJ"FZx[А*gws~F1c$?cVM8 6Zn9;]:qEȤ sI G=G]Hbi:Nj_!Xn J^E˱Yf Θ$nVڰDN՛̬=h v紫'yKڏHw\W=ۣG &[op zL{JO2 */9 P)=IM GxuzT9 |zϦHlCzRI,-({Rf%ܵy)A}l.r{") i\rˬ{\FpZ}+/1yWsѪv}SHE'l^愮|߫A8d\t5GPn`Eچ!l892oOrF;=$3Yy":4&WB_w%Lo@쵠f0\J֕2Y,Oq/*z0qfB>c 껼ky'Z˰q)R(#+d嫖P*g;ޑqpݚ>C[W#+ M)p_MIFBV}ߧ)W VSEG#5Y*2z=ifP6N<䶫b'Ϥl5C +``FCΏ+Ԑa ]<[5ZsoȱcArI /~F@IphWKTr:CG V{E>)d_>N_JlHi"Kdvn+#::C_{0IŚ0ӯ/S;d/y\'6}O],6ypy^ |aszn72x#طC^.n]ұ2̆ -^)wy7TvM!@=jӌ7 a}Tұ{RmkM&*[ؐ;Ήп1V1a'|6I`qmpdMbLbxMKȃBl<0Ft; K+X/ Ya C_iSEzp4d;R>U~]9򦺣\׀mqsRbit?bT.DfpL$!VkG ̲v94M&J̍}i AZM0#톩wRGn2%TbYd7y 8 {!)z4 |ڢ-Ƅb{$ hxj"4 :ù&m%8S8:-ל~a {}BfUuYE=t6Py3ij?WZ`e]+.??;)Hq$cvB0̯,;Msۜ`cj\M ,B1[9$(AgtKZ?:u&?CkԽoX?fQ|}^-Ic8訦_L؏AM=:$ϰڢFTLt_政&|#VG _b'PYܙg6.t̶OK4]&q}_FHr 9iuD`it:}MS,<68fh.Pp)e0GXJ){rlDd"!Yr=s|G:Ajq̷K^Ȧ?w/7U иЬ=7*EBPw 9[3=J2;ioQ{Cz/[:N|/Z@ɀSr`J3{;϶S%bBїĂ0dKUhQ.3eaI!ND|$t>"/lZjO&Ѿ]SH35"DUχ{oiB6x)Vݹ\uOOdE tG21 ۅ`I=6)lқbwfe٤ycjBTʈҁ&nAHPzMѣg xCh"wȌdcBFFL{^Ղ7p|b%Sm:,Bl&j-{]\ES+Wn3LOV[;]/×K@OzI+d;)w~m;@֨+$n VE=l㒯2Zm[?w"ܨ/NFmIIPq~SȻa6(M& 9%xed"rfXbG<#%vʥnQ=@N܄ZkON_7J:ir-2L&>D.kKIC'4"N[$?ӣT^?l] t+3Eaf*U5+p+tqx K7DGOnkaA6%ryQqITKw$'ؾg3~ܴ4ynOY_~}rPfXD0P1怒 oUV꪿z|S{B'\iN?OD }! ΢ꐧE2mx嵵 r+yxo<',hvP~Ef'Kmu4*?oZ_x2<Ō?Ύ )P~RO28)1 wiYeSFMC@d/yvt(CH9R^#َ(\t`*)VfB-EEE&|sg`тWf?oP-^RWc?bowVYg Ϡ-2Rѻy ݹn0*Mvr WfYFI["&m,BQYNsmW1NN~!p (6?@@I[C'ڮj:{''sl㈧0Iw1%!L9#M b,= ߥG񧒛ӳ oɷ9B吙tm|``w%aYZXY如G2϶EDd#yjWsH۴s'w Zcb!,6Lyx<~uj3$Hr7ć;/WAtzNp{'g7Ll.giv;e l[+Ajg{9:fjtC)1 ګ+X#f۝ր2bcT^9)dGRgJp҆vX Ĝ4q\!{`[oMU>BO23?/ {_ݎyo#ڸ( ؕ1(2fnRk5_4 Cy.¥}OS+xqRYXʼ77>(ybTg5 gS&7 U=/Yҝ,-1y'wB-5fSй.b"  RaRuq;ǯ=EkN%2LO>{ ©s8X ->ϙFR֜>љA}CjGV3ʓCA3>m_!''S2'P;:׳cx>^JȜ=LK?0ⓐ\=y9`OoU]u.MM9ӣTuּt_xv {eNh^!ܕHY+a֋/ϝy*o1A7j 2~'J>] ~H,˰'Sv|dɋmDzJBI9E gܯrij2MP/~pnm.ߎZ;\BrpVm&dIͼ˶`5׳*|_z )/^nZ [raPod [1+3oƹ 5~kG9l4普} 8XˮLT_(yesS=nץ6a5Sezv9ׅl.֫IItrW ~XiSYZtm8yL <NxD4;x} J "73r'@p\}{0ӇJ7[B,1\M稽-43GHkcV l3DՀv,SԮHE<G_zhʷjaAd׈p6?InF@uo9ZNU0(^E<844~D^-kX.+qOs*~u?$@IJ &H5To5'}4mA`i蹆FGw:s;d5x>GJ+nMY1j U,r-@BWq}AM[*g՜YDArRnDٞ#X!q50)+\Cg3+*۷h,r&q$~v/v5!Rʒ8FTڬָp'zZHeZ@5#W&EM'%r 楳{r;K6W3uTAOг (`perPl*'[[[}g΁t I+ ^\C5_8|}nB  .o9@4㒹'lSGHf,\[a{"l!5qֵ֒Ѣ{N#XseJ>n){3vB=9 ώCdH,^]|.9#x! ,Mw )tomM.: m? QZ/9ʑWwD]G2u"i8Taj3{y7XgT, %tEK"`)V1YȠ[S4A-$fP2f/3$N^Z0z!WVxu-X\Q vF4s$i%1LjmQTպ[r XD?T08ɜBc:4H6گqvPB%<]ԧ咎yo] .orX Δ@z2wj-%m8 v.* oCKHdkr]^f*g&y73A4`؞ Bv=e\WAk>ݞ|㿾aqIt'NMTcd㛀>;cZ6?HÙ|yWD:sQ)chnK2DpldhaJf0C)#zgR4S˥$25tlG׾TXdeXDcmSRVHycé0km)w0b5؝2:FxG RI ^ڱ33@yO2Kc2(Yxf-0F1i&Dal t " xw| B<=n{LkO"}K2|=`ÉچzӰz˫q4mz)Q,Ⱦ"г;,mTf,—' S4S! ‘$[DY7peh,`1\boM[5~!#ܺ.)HT' o! 2?>fj!tKj^OϦ(TI"vGlYR$\v͂:r_Aix()d$v5Ռ,beb*n1[ߢJtV'3fsebXK$@jW K]iA,={ŃRI0r~.XL@&Zl36't YzeULa+vo}) r;C̘4Rqܯ~gVN)"43D0dE_TAsXp ezhiv'BtAFty-)G+.諔M~Ÿ!畕=]+LI?{4h͗9aѴ#)ڂB15:輅gR.4N-(~Scן.+Qgajs\uvCաMK9Iȅp[S|د s%JG@^Cm1P~̉ ż+=Q;CvOx+ $}50`+xm`.8\ ֝'4&4S sM"~ I$*V`V 5 4 T\i"]wCh6Ǐ=gpi9d|d O\_Mo𗖛* rQe7jD&3Fܡ ZnLxAzɒ7*Z̊#5?RQ2CHLFH 8CrāyK|[;K uGtJ gqߛ@Hkx뾙LɁ^ ]x$s\< Ɓrwrs`bE~#z.COk Abzծ>%qUAxnKAR#ыĞM0"[M~m8>m o]aF_$nSgph~;/A{n/t(EV23PKb_F6 6AlJnTldPI3iam2֟sK,bB^FL YJd  tGS/aw^D&cy_ kI~ {^ kT-*CE-*X"}4 Cs Nla"2O+ԓ8Pi4~1P d["C`1j|p!u2C2{BY~6B'bzv2D!v~'WFQ~+.ALiX. _x@kxj?zpe?flܷ>El0 dXd@-wK jC3F:Wl[/y,ou%cOgBUN }Vt` ZۊB6\k4JBl-tBOs!pp:L:Z@i;rOy IY' `˕Y"V6DǐUBsֻrEr}RCpD!=mc7W7 ƫBYBqk?=k@E+PDvN^2&҈sj[J{NA1Stc HԪ9|u,UUWSx0`Gg[#*w, w_#I'aŏƥZj0!m *Drҥ#ěөGtWfOBU{U%;I(v A6w6F] 㠏qtWƂ]hښZu}ނP^Bː(W( $jc.M޷=rozl,_ncaC7,0ӋzU]B|WA\4ai]P I6UVeı?/ VEU ,ϿzFNݰjRԊ!ls@9Ug42%WCNQ.dͥXiEP3w>fKE3d 욖刚/X9p D$93<[£".Njfv$cb7M:<;!)r9R΋'EɻCP{;^*mgE!pГ yݖdU`4 9Q|)xae$+-&}˜ZBVQβ M u _*|cB M uRN/-YHoqici5S d 35Vl&tnG1Qy+XnW) tr) ?}P6[!Zqc֢%Z.{`cu:[931ĕ4 йۡ#aAly? Nj8.:?V`Rzic X#'g60VȪ|pJ,|"o呹ɫzݸV\|w#f[ PXM|}d [c?TNn7߼YW5 øύdݍҬa#i/iɊ]g$ uG8L5)yCۛhf7d 7 C$V#;:y) !I M|>Ld@XՀ,q4P*>]A;#K1o)] Q@oufu⨷M4;{t+2*9.ЕAKZv|k6=N@0[wh_2fq!̀ nS;\‰K[{7 GVB@rԟ&헯^-pɗSKӋs"ħ]I1 ]TwAL(5f^/IY8+\x tR'@ζ$u:@3 qQ=+kWSg\&u|`wlE;̃M܍Q;|YHS:q'mVZeSr]Hh"%beQZ)M=*@oyRf"z~;w D0LcW ےV\{H_$ /Ř Hgm}j#kѲz`RPv bz|ੜDrEqvђI?Yng#DU)Y/vxöpy݋*;b6ЅI@)vF:t#[`1d#_% U y)EcqhkȇXEK/=3TS 7,!JO tN'DiJuvMHSz)܏lvܸ-Y \YI 5֞$!pɰ3=%V]2ԣe6YQP$L)K E2`9ZuG] U7n2nB5M߾a Za usV A axR@}Čv>a%4.p/\0.}]2a62rJ!J&|wD3ɑ0" f؇9z6.|*zIc3g!"d>^sՙrϤ)88c@{ܑSm I '&-vTtSr@ǒ˜e1nGU(lt+gV?搌\Br<Ӫb*"`z*=!ƾۣºK%w# 8@jBpR8p0JEcw/r&"7տmsb]h{/5ܰJc_E7(Xt . > ZG5}f}@ƛA9qNӈ,pwc.6 e*8T"0nYҳFx2Fmi!t%5g_xUDu+⮾6>%oKrxCm$V`LE񥐬0'9 vKʋXdWB0We{wrqbVulim(#D jqi$ùDxzʫޛDt$&ӨyPOQF=_*u7PPÐpYJ*u>NqpV|"Y ր=e#atg"Q1Z;p'~pk~ړ iLt*iO@VߺϡWI>5T:rĽz! 2;- X# BGQ#C$^/cUY'P}i>颅M6Hb OԥkN9&H6ou|[gIZXRdJ'\ b)羶}.—$ύH"CUD^6! \h/.kgro Hߊi ҆d.d|L#-"m櫌 &rTˈ%92T]/=+m`ƧD/żĨ')2d&xifNpMj3=c!Tl$x}@ROHQv@>wiW{]2tp@}*rUEQKl10Rl_Bc"KHۂ7B@tLj O`咣O!^^ YN?SѣBa ?x_-'W2W._]9022 v}J{ޏ8(^b % T;,'ɒs9bEWMHӨMtMx7+BhGF8t͜],EX`!#%*xƟ*QlscV|)P!)0x ] ngӋ=7Dd yK5<G&G{jETfXE7lSӇoӬ- {vc)C:m<ܨf^mipu+%^W (^ FU@VB@,^lq V>wqCdC|}UgdC^1w,ފl+(xB[З(a\p䜧 K# ),TA!xأZ m{_?臜py?韰5wd Ǫb\aa:s`:硂8xcB걌bo.3>\Z q(\B }5='zny6@`CQqcC7hXX Q$>T3V O1 u-^5.9eo)R3]Gzv}ұx(n Ox:59\ J#L4FMtF`Ԫ 2nΓhDŽh\Taq^ I0-Ͻ1k%Ho`Ǧ[3#q-J̢|X-9$^B^G0}jv3@ёW`q|XXaZbCc(,D%n%m(UDOYf%e8wʗ5 Dly=yzn(\GC2ߠ'k*_}DK>]Y0Lu^T,ԅ7Moˆ[}/o tʠ4;ZHݳbOD#ҷ>K|Ƈb4[N F+HR;j}ckJuoF~$^$T-poK04̐ɂ)Ӷҡz#q2XlKQʦz6Qi%`JY. B? Jpv kn9 nWAgr]nz2:3[_9\OT2θXns> QAE{ xcߚIPXcKH4zJJnyim&bچ$ Jw?Nt4/ԯ9p.H%mhc9 A9#w\~7Lgt$Q73y=tq6$CرFPieL)#-}G-R= n{rB7KȲa,}ViH>H|߫HB<Ⱦ"x)u2^[0G=YhuX)>Qaƹ=ݠU*YA("G~Z2iJlB)&@> Wx*gwl|htSY#Ek_ס{?,;:3]XfcȸIjReҪԊ,<҉%WySfwCT Es$Q53P@&'q/FD`B[HEC&4z!. krBꑀqLOIR"c}ӵQ00J5`D\ޗ5~07A,ROeVq;`I B 8х20w%7p4@l{-7ҩ !r+ۮSu>>pb>Y `u!(\hH0❗%Bv+pUCaB!>Bu/r~wmK`iFXӑ-m(s`D\ϨPh1tj;+u"jr|.[b%|EWpiۀz32DH7'5^@Ͼ1 mYiHK{ayV:֕zc\NU/Ѥ*O'QQ ~d ~lB;&MŻCCMѿtpS*:ݛ9,R=X 0_4GiI֤_dBR赕lf;/wksh׎$ sgk)w'zJXJlY/4UQTBAKܿ[vEq3޽#۝Ch3U&-] !sw׬.18p??lKXiU@`~%JPr1P!);B\S#h)l;\L p%[)ʪQWۮhlb"DI'KS!|y ! q{bO^*JPJ^tݢh(J\LtQy7.华k31fea8wg l+{M-Q5jL?2(t• rZep^fLsb:6LLlWL0ː|\`dJ!.F [(첼I1r4~Z%v$HngWKu`gR' ~QZ~+4aM 鰰3742q-& [L| &M܏$0㏨Gp M>dީЙiP4_mALL=ŲpIdtS5 X=tFiP2QWDB.(F|:\ʷyo.W]*Y`!ɵʏ5Sݔ ea˓HJFd8B)/x-jzWKn }G]򣺗ž*;B/\| I؜6_QBz刨| Ye(XH߃S_S8OQ0Ƞl Ʋsg[kw)]rM'T=ڣت:QP_0=\-AК\DM V38El|8B-R2=q(9#(W"0-]apԴ-0:F#JvI1v{C;tkS/QYkfgafI 3.=Ryj=#4⫍yHG$ABZ3 U~!L:q^TvD'>:Zf;f* 6M3VZ4Mʺgho勴cbj1)t";%$-jubXY\9.Q)kW`7'BYⶥޫz"{@ZpnK: 0om Qzp K*Wyy>o2Ru`=5cv>ZǶ@4s"_ ]IهҁjSaVIK6ԮrmOTr:ve/gXNu<ʭʷT 2ghL7e9ŧɽ]j*B #A}164BC9T6G^σ^[~]) czܝ.ϮHsm\4gԘ#ڧ\LCMl8VI`:LEJn{ 0RBM>A=x)]Q Ԧ#0͋bV3AtY8WX&.^@t͠ 7<:CgRe 3>b3*C o /'Q|R{v\ʧ dlb7dCBnC1BeT}YGv ޮʮ )^6J"x~ߊUYKa.\l?XXdm?Ò1mɔgYյ6h&%lfJ5OzKx,y"nOHӰéǯ9](",4Et]`XFu:/PE'v1X9SyJG XdۃMs&.ɰN_tDHQ"#bxR h.e:~T;Tpu[Ӝ],auV@DIg"~vDCŮ3rd6- 9Ľ_S{$ =?.{}5j:hVfǷMӲ 0qnaxqW˰(+ ?zҊkT#Tza-ͣ%ɰ\QT _{F֥ZnCЄNHHǠ)B>Vc%9`Qv $k{聴`DS5!#Mڿ0܁>m//5f&#Po?=i!RVs%IxH˷PI օ`7|7'O.tV繛A(w rخmV)(#ZA:lI'9rppɚl=8Trn8EW(5ؚҽfSV0$^ 㨮`+] Uii"Tr E;΀J.i[&p0Z2Sv\&y*xnkI:s ,g?xǭܽYO#Y/M~Քc==EezZ`WKH7%;Cxz*D {E*k#x !NdRȭ2*- ۈYTWt6ԁO8nb3@L0jL+-} 6\yqSD$~"Ţ#Na G>MZP#C]-'WCYr؉'S( /] 'Ji7 {;1ӭ1GHeɶm# yv+Xnh@`sЁZ6,į>&aڹGs`#%{$sQM)5 8N}|_ាFcmolo8 /c]U6zC"6ʔA'3FfgJ[]FF!_m؏&ZmJ5{nm"Tip7;M Zv+ rF`UcAWfNH&qȬs\mcnN;ؠJZ;Ob'(A7&kWx^3TlA5/C"~1RH̼KnNyވUv?O&X&H;iS{B@Z%>l<3k;+ebAb`$۪U ka#sЍ_;p__~f/p-<t翁ݵ`̧PHcSfb(x_K5%Yh*Vn5 r7cJ!wNߗK6ᡔP°bjY dTzx8x Nf{.pEA8}mE*ǔo4bڮ'tG`OtWCVuHl&`frߌɊ@X_I c4,Rek˯8m"m*kse0tU2 .a'|u?8$%`9# )<dk#Bq-/憳T|ɟUnI%zd eTÝ6G;1n"3&aӫ! ڋ$A4䅡fBЫW]`f>r|. ] WaB˽0|*o&S:UzPYMc4+דBS ڠa͘xTXPϑe06 vsZFo? 4K=C#/8Κ]#Z&34fS.Fe_.A5.n`gծm_  >`STy*_{_h30}}nVLHSSKku:6%論g~O;&Q$wpb g9SgtVu :ƯTσ~1u^M#h$%b3J1~H*o 6YX0q3U_7ݸ>W?lC%13J% 6僌hćSgK2c36yg; ZD )Z8 ^EF~'{t$Ef,{eh/h!.Jk_s iMb 68kk9w<5! ?3,ڂ/>gbSc~Y>lo+PdumxbɤdHWsK4\x { 6TMI ˕0p,Kڒ-j:Q(,K3 'MVa$$!BPj̭`!^*~-w|H[w|CxzrvXQJ/VTf}f #,(b!mhBm3͙cM,@-㢚/=9-nt PYn`92?~3E#  pUδJ1:g y \#xpD }jfIEI{\x*X`d9}2^>]Uwo6莎鴂fpMV$ ϒ'M#QJ)Z{[MCbQ ymyZ G0%(Nz8%+(6 3ƣ>4e>@sZZ+=t&GNvGX Cؙs,\Mk(Г'"Kfw\W &~jh@:4ݰeR8x+¸kf`T&Mf\ ۳>a/'I{j:4?X.(7W@$zY~TtTzk #&زa=1tkF\GW{ O2v 䳿tJ?(2U"!jrD5%\&rhWcp9A@ڜI|{Ů4|/ gOsJ )T=u>ފo?9} ͔ۉld=lnf0 ܒ!n!p>G9>S:ѵCy?mp4+@) wF?!,,ׇ4æUUl*ΙO꣝LɚZiR\GG0ZPye}eP=i0ú=vݗ)׈-tJQb6?k hBSۆ 'rSrY]K"N(2Ee-i4r `r/{?uogp JJ^#lSn?=y%f:o!֌5wd*0uKh~]3G.loXY @wH<>2~%6:?̠-M|bF>%vjr qq5TZMRa]Ζɏ{G4W4 \= (r 3[J t":BQ2Hӷtd?4a`E8,1ɘ.aD@K5^&,FRv5ŠMr&j?2oy<Y1zjvB\ otDnoX\aC7*ڋ!DRG6026aA::ʀȊMQ83J.[#Fvs؞AhbjbuQe{(8@ =p֣)7R۫` ry`]#: ?7*b мg4fVLmUGN,;#zP-k<b +ҁXiD?&>LИi&^% 9Z{tfVk ?~n, ,v|:4$BC$zgm5}}yS? nf|dygq گ"Q$uocM\ Qv>G("SqPx,ܧ{ ÿ]kaW/+hq؏rPpKކ9YaE(X=e:) B}\bXlƃ._I .ý9335Y:2:J|3l9_/b1Ps%A1c&f翼 c;~҅^Z 51U9d;]E.9^&:8td d,-|"s#PqvE25N^[\N.01J3^)JEU=3SA:V@PZE}D.e;R1j$`0T!Yչ ,ҍY1 k?ņY&oAJ fYd{A/!90!Bf?~KaYvI +3.~]I{RFbs u ܺ} ˰v N O`"LGyo,!IoP,(WTqq 8lmK͹nxԸP8h².̓S} 9~CfLTj~V$VK$X=Fzk&iBHSOUgqꝀ)\i!ĶYP QBY$V,vn?fP˂V~Lb&嚒v`czC=-$2$rZ >@&mfr\NkKnD,~,J;b$(U_P֬bӆ]*jV MPaۡ06N ob.s~֌8_i[*[gn/@^ZD/~e>&=*=JϖEvʴp,kS /__"XA2l墪N\7uwQ- ʕ&Z~,S|uCvFͼHm )sĈs9u@؋< jgLIEz`PIa5Kng)b-.X|.1HhF9؄dQ?O)Ō]h*9`L"$+KČԩa%{N޹v.4T~i{ȇiՂS1HQ}glbd;.&<.]y-Mz1nzUhV*_$!@h?R]-:*_& EI1 c:pNt;d}K(&䗨"Շexr&;)T "ʻ5&I޶?Gq&|3L~R=c G4L-!Kf.߾2AVXRKg3,&U\(JRY[2@M]pK.g|Yw01Š0-lt >TLaq/cHTX-(S{n?OiNw1δVtw}9ѡ)z] q!:kG43XaK߫.gVϺG뭫Kg9a !R {;z)0]tSEqڽ[DZj̑VbݔE7ܣ.ckoVAT9(bp_`s2ɳJج~ÖՒXtD#ެZ_eJt@#Y Ki| ̪vxo 3F/xm =E'ЇImZ&fǶhT1eMگ ͠DR6 &6KP[ą?i\xC`RQnaEhiRNm$`yi?_4aRms*dhB3uPu WqEi K CW b]~<"lBdp>Mm3j+a  ? :xK n;^/崬kJb3#^Y|aЬBl`~i=Qҽq4ᵑ W ?* C BXV>9nr]^1jzN '\x^:+-Q1_3` Ҽ:8,ͦ-3ȔzQp^pxBRΎ=,lJB=`HFTk$RLlWC9e-_ O/zzg>z xI",&mkA ?92\I:LnVp[랮fm̓EV߼Z4 d$MsJTRpp SF,LAӢMSZfA Y}:e~UKR%U`#}c ;{J3WQcIeeNpvCA1CNTP8m; ?+  L`n EU嵨̐м+gLmDZnpWB6-eʃ񺴬#ȰPd5X3ܸ \RL) C*g0%|b'vU5k\Uwje,yV o%~{H^me,"} C bCK.( gZ3;Zb¨I5%P>0 M*Kg@@N[LƎR& UxQM'@s.Dx!D:ՈbзG!YH&v; #dD^FE'\}909z'J 36ѦgrC cTkyakDŽgr7@"P/-qDI<Ⱦ?j#uXsys=($ loV`qaGˈ"mU?1xɾ!VQ9:s9ROOشA$9X#e߁'>q&W `cjhzhSR34uyFQuG49оݽf|y>F0PDRyv멍A ~rM#, @Q`ӽTsԸ:kȦIފmӕMj$*߶F(7e'y{f^QaMYeV8@/K(}\u\e)>aa.07䌨`bBSOsc_[u*گ k)#z}͐ԙ]ɚ8aqI[U%x4*]W9N^E#~)uAl %έna[l&;ܭE`p5U9L:Qz'F-Dy&+ v?+a]$g IRb1 Tr?RH |F/W~e]n}ץ5x D?qex\_UHgf6*DѩՉ6f;v[R}a~rS |At0 …,T"BY\cSqy\ϩԧXdq!!ge4rC̍1 v [y!x> 1!|M,Xczl 2͟Ѣ}07k7mFw`t|Wֻul7ދYq-.QlH6ZȐ28 exؠo툚iC;D)ʷ,>> }l1쑺Н%[>LV'X]Wc$>/T%!!Кz (O-j!Aumj}S%tQw5v@GR+c䏾`P:YčGEt; 6uFƧ m}^"-/@e/Z S%Wu8Wz*{AW算uܟةŁrFxw5u i'HS*cAm gujᆴ ]irí;nkfi$.d,17e1;N|Ǝ6P̎QjL_;|ᚈ٫6!g4'ӇkUXp87!+k!QI'`# )qJ&i=wUc39Zkx[Of5}?Λt#!An:r'ð=?oYdݜv]6"MCLKP؄JPb2HGdQO CZ~Rr5ؓUJzP<7z=( L>7!yh6\>_+;l4ɽkIx ~vl*c0 jz*Y6 ?{f r{~2bZ)"|)s&՚^Ӭ~ECiS}&~__UMhJn2Ʈ ߓ}`@yuFԼR!F>fI7Y!p_k\T1y|vϦF 3[] $ټËPgTY$[TL|aYmW_* cޭiiVu;vSCBRWh*]Ъñ. dCqgRg % ̏־JNπA?nKQSOwxr ^3uu*{n 48/jdCAPoeRP!FjȦ t ʃvu<v,8,4~-I U]5 :m*?\dK8>h=I]&Ԉ (BKuT8Ǎ1 W{`̆ pEXebZ5eն:N!;2%1 ̟tPzU{/C5TK2 ځڪzw2Z=JwGM6O,D'09y%JIa/cƠ J!p^ܸy0cHv? nȌ@唭`/(UyDS(%t8ҍ1.Ny3:'c1yc.2rFiYFxxV{O6FS1i(@Y*e3Hz~'RS8R8BMF ځv%ƸSte..depG$BbVy@sNUhc x_-IhG2byklkĊ;NeCڄHiR[uZ2ktb%}m1@%.1ާo4~'xx.iN*C +ƐlS q`ݗ87Źo(E>T$vtٽ !yÚXR<[q]hmZ1гcSĦc|ˀJw횊#8:?eA<( ?!|}#a֞N\R?aO(Z: !z)} 6| NIĝTdȤP$Mn_"x 3j]jc[}<3.w~SX˯=NcXNc EXr<1s> gז¹#Xwly1VZZL!<|L2UPyGl6RXfG9_i(q:Ņ+EuFKƶsmرjGD :[H-Ydqn]{18(}(kLH)0.jtvuȏ$\l@[+`';aQVGRk\۸3Q*2(Ph4b[`gh$#uvtY]!'hoj ҴDl d ,/2s asZQAl;2U넓J]Z,c7"wƷ_IqiL9 =mI)b M60a=f:xP̜8a-?qp4%("yAV!E]6+!x_f C|~ D2鋩L5% sآL[k5-M҂Z`"REZpIz]FR[w/[JlXwUAnt JI\('{%}K߻AHq4},5$[roNu[g㖒-pnzEOm3Cπh&pl;7k9+hHlxO2Cr}ފpEtEmS! N^ #s4'见R4])"hP =*2g~Z/x+/N-'(, 4 e7-2ZdgſYZ>4lݥ'[ڗ)Uel`Ѷr_u7[ʤ'DGb,/C܆RipˮanF}J=t3l'%r>>LUg; 'rNѬ3Q+Z.NE78˲HΤ8BF΍]lC/C$;(}P@ /Bk)~+C_]J!iy7h+ ()ۗ~ ,m _KrfćKG7Os u(+y+kG4/Gq:RaπVS|[g&\n_+"v⑶'YG@+`9 &_,;Iyyt}>2 A04VdAZ[. \6L+[֜b~+UzJLs K$h|D}9QJ A7{MQZ*Hl/謫;i]eA.C2o&f#b$- =vxadaHxZ&j6b9îcxa 1J *ZX[FP3|Oz9M~b:Zn&+NP[]߲0"p0)eZרs4%ljgRU@OTX|G+weaH%ۤu7ଙ|2*q) jF:{ܣ /Aoy4SpNjd eJx91CwD7L3'\҅$yUTvIreh(uqg e1Fq+ d| %ꨊ7"LsFW,I*>|QyoXJ7,ޕlT3K.i-JlSĐ9D`\˩ bDkIuȹސO@ִ A. dTߊUx46"([_i@\:;g 9K݅24z_$ֵU\`*"vyJqӠ}^  Qek"ZP-ք77 E$eeV:cO.Lef?uN$K"1k \ =\g{rӮDM"Y?ogxc֊hܹ΅Bܫ&fPQB6e9\.񯄃< gRƥCY/833,f* ,W?KY'߮q$8DVN$sZVx5R `w~wc{Ai pL]NX$A?{D=c^j(UN j3(4ztFJia+pU3*HE$}5 p op?|jmw0Xuٶ4$v1Knl̊0dN@f=Ip9)ck5-Mje2 GYQ`9hv5%8k|GZKc\{^Ɣd~ɡT8xjtÙc#P4 =(򐗶@̳_nU~h$4VNK̥,+ ly5v -}<AvlTP ƒ6o(2Å :_~hTe5V^ O6.RLڍXTu]q{ ̛t~^Q I.Ā}fV^x&MWVf~60-| p׋v:C*vu>݌ƈbKZbO8@vkXo -ﲝ(U)s|ރG|MeW^kRN68{lY6NIZTz*-{krzLI,8ڄDpwx@9gkDeW ]b8]{&ËNɵC+Y[3?@0/| 5*[g7\ٔdkMs[]?@#>cռkfﴙbRE#~AHQB-y&3d5eSPG? O~'aΊ '͙g[$yVƸz[}Ǘ#9!I5D`%6)^//yF PD?U*EߦQ3R?0,h'ΊDxqA!z^ aݤB0 8XCGV} cyۍ>e hrlLAQ{᭴Oer> C 89TѨU…B^aeK+J3IPFf@NӢ~1ymKhV{#h8kƷQsrAz *Js,\0+CM;Z#'JkJ;3 wbdzUP/='`1R >*ZW3E9[m~cC>45SQѱy A5N%n&jYuS m5q{C ȒJu͐-` 怪kYEuF4B8*ŭM 7oU.2{e7R=G*Q)(\}ȷ}T̙!(k`w$=M ╪VW1HlIhXi? ہ/GW\,)nJ j鷴vuwuaX2T[GjEON홙Wܟ`5Fw`_ ى2oAvewwGKiB@]X{|-SI'cb qkTkv #מ7u+IfpjhڹW .|U:Qº&OeCN~0I),ht3]"Y;j{ICJ2lHlZ hK ;=>Y(A9QD ?LkǒC`P`6!g;MVX̞m̜ƙMK6Ï>+h-55)O;4Y0K01wrSdAWfhiVPfv-yW`uӅC;w W&]8Ȝ,]^ʽYT% ^3jZ Nu~j1s;HZ4Y9g$S7AdT^uCsl?ˌ-T٫ϙkLT"k_$i2 #AGX7g4`ļF ǿ9UKejQJR-۠HԩL8C=Ģ+５Y0hښ)sYQ| u-Zn I!>(gby}`n:~.W7}y6`M:ҚմeʡqF0 iK-w#x(~X3V0>GC[ c$~\[3:"S_[/D4tn R74+v()w:rj໮en ?YN;7o_, ;CK0,U( : tdŎЄcWre1$~櫰h즡Oj>u hf1ǣ0b>dۿ.v1dN "ev.Ď./' 9zW]L ;w~1M;8BsvF` adщeY_<`+x:t :̛'Q51˂~Rjaf.{1U!?(: Ў#b>}-_(UAmŸ¾O%<c$uql,͠8ewL^I|TY[i9CYy8.M+Աvkkj/n*i .Uwƹ~Yx20g(q#eixxʬR=QG\LMańNq#V^UDdBrt)~㺦&ԧSؔVU_4gfhK|!qNc*M@d4$꠱&`!1tvw\?8?.ج 6@mGa}ޅz8gpY"8Ge]j ӢOhdx;yu8Uh -,&HBV&T/>عk阦Hp*PLffڐ^G6\4yVW,%0>ޱΑq]H&t\>k6lj# qJފ0,d*v4$6!5iykF;y0߆@"ts*~ikAZ&yJǒQq1BQ\GY qNy L4pv 6_TB?ynɖδɯqH#b;vFP;O]#8iBkC2<ȓoTGU2e][e 9+5. drFY: ߳"o: wEH 0IGa$31X(:CM58dc3'0W VI[BDLa Zsx}eyDpD9/єRVi>9^HewE*<UpӍ4ނv%7| JWzK=.0 8҆tW_!$c4Zd5%9똌.5G[)來+Lk}Q284IrsE\s BFlzv%⮅O[*[Q|/j^Nyxq]0nU&V'Y(Ea]ȩJ2 wB Cվ{/%SݕM`z";9oM=F fϋ- kksYe䬓䟷D_$6-˯5։!iVR+kOb%.*;9kXۈ$=|r׉6ތSi.ɵ)JNB)*B|u3 6E!&|yeG7Yiz ?Un3%bBd=;;2Y8~{|(3ЅPIs#.qL`Gr[+DNMKjRY}n}^NVu4;%4,dx*%@z3 8n0J-X^!u lCGNm8}05B1D4mf@cP6ٛ BS-N:$ӟus٧~C_I%dMjJMLx;ow0/Q @25+7.2j{`[8R  'жQWi߯^i`~|UG _?ZV,gJuF20[ 3H0R2͢)rjV^Gw;V:unGk~S7JPBYc>ױ-,mi1%P'J +vpKJ[Kk ()\\{aKFlˤ+\yϟlVWVK8$,W'1EA$b1HJ~~ZWbٜءYz֍,T&+[9LԴ8†/PԿ[<0вXӜ7TLUd'nB@*.q~W?һ~h^LcdG)" =P5 %0r4}*QoZ[$Xa mZ1#dUy?Y^S9,QS:.$"ɓˣQC,TZT ̶r0aqg 2IwЀ G֞0zde@9@{<#cO%I7RM5+k " ̀Bm ɦ 6Aj=ܚ3Κ u/_OD_zڃS8kG~>-7+8 vp # xS=ocVm3uZB01&zOVQ/cg#:dTu9B>7f% /1d)m>,8k,+x>d:4cZeďT9Tb)!jy엷7Te˼ qJIaw6Q _tG*=4#҆5UlZ~z<TF &lNzk,֤p[A`v!DEn'},6:M.ԪUWp*w}Ђ_§Q`3o+ o-h2g¯8?ڐ)Pl E M˘2}0#UuJ'7>lj79(4EDP$oB}!YYlt0:Qq=Q-/2:FƟEG OV=𜝅8uB췜~63lg#E=y5Hptp@jFY0bǔ/SM%]:MLg  $2pboHe7F#B@u=&=pb*Xsˇg"-S֮XQP MAP=Du[$9;v䔮QnX=5HHZc ȡ% ~ ėHKfaAIN񵽹MW1x ,UʲGy\P\DHy(hؐ u}-K8`ػh/3Y^'^Gp%ͩș Ki!98A<O No&<4P80bs0uR5y:=DCa0ozykЈ OYS6놯 BعlY+[|}d)8S#s=  =W'c =:=B=ꊁ0,:ˌf :-bK]k\(7IZ)׷CXNgva{YA2ѕ%g Q4Vc9)}ғ\NY7+%"+!<4}*R}X.*7Rv5YCsnbBpYyP#)(^͔X0{t̰H1(+MWFBib;z퀚{U _?`qez$SYn2E$X"D8/0m%3`o:[ H=&sVZm38uM;W8@vjc3:T*ckm,}xb-1ML2bڢ+`)t*O c"@GrUp*"JD t=T7JI4C ,9@RFnKB]oh0m OU"9 3¡!Y&'ɳXL7xg I#bαb*%r19 6Ϛ*~lp% 68o8âυvVdp1˱D焑I mēsQV' @ ۊExY34 Fe*P@$e;l?I14/qrų蔑'e^;E/%TAsLG+Ӻ(+]<,Hzy>A\="Bcݱ $y s{E/|=ыr,I= nIu[;e^3dLB[ISP:ПLW9;r'FA}ܝaC|vG'سWbziBW#C><2^*@ )HϐǎIUNP@5Sqz pW=fAu˝j,KJHP_W- PRIEe2f8v&-J2,VЉ3PO,8YIw|cdx_$+Nz u&l%FølxoqR)j[hG"[iQC3Z+t_2UJe kTA*5Cm`j+^uKnKͅeyo\B\]\)-ڢs9&m \9NBu_.Pr0%#yO"7,;7Q#8Aѐ`p4^`+u ;qiϺG$AjV+"Vk5yawķgÜsCWʔӺozM9\FFeLL8$=><@s๬f.ތ*kcSt;[$Uu&Aj .=avyGu #< 6Eh.-\,7W!=  c}YLn@g̹kLFB bFKfU[)1dL..i񗋋 kGR  E~Za*d?rW4Q蟅 OҸ-m&{yfSdDkwp{5МN }cL,h/C 6,T?C8lzq9$T c,bSnᡋoj K75kLxihQLE !y#|;+_^E?XG8RF(kGAc.?@C-2w'){4R;7}!lpFR6u*D,HZ}k!4=@vBXCLL2Eg<Ζ^P9"WB?u9_>L#痟hՆ*"wi1z`xwlqB#"_baK cRk=EVKjN_"{am_oM+8uDߦ~3q-xV)5[/8U]"u͝=Binh%|#5 &S;W dB !O1I,TugǰHY`u؀hԲ\\X|[iv~^^l8Jޛw1a),C  D_t@hWi8L鞎jΜ)>]<2K޿zzz_τ3A9X\>["NI4wt+ QKTjeQ$kHўOt!r^ot8Q۸7w}/Ȼԃh`{.Pca`avzGi6 Ad'ȱގ^\ݔjn$P C1e}@/+4%Sc}J`qTW(B\y/4$ځqN X`q\OnÉΑ4O!E Q\N Npʊ>a[/|OƦ/p\=45 8SW-k+F}ݾjHY3SxavN\/f310ris>,tqTg46Zz([P3(][hu1Lò<{sPǕxuCV4)%HBxb'Ta1: -Ęϖ]3i], ۇ~-v;ު.BE7dwd)*w)ղo̱͢泶ˊjO+w#XV K acF1 ViΖ[W^6H3+9P_-%#VQ3*淾cDгNrг謔;Yuk 1k]uNܳ g7VQA'Q,a]I1w{+Mn)e%Wcg6ֽJwU;tO D u^ӹिOS7iU`5`F 3v$_TP]̼kSHD*Ckuf GީDc.[/V`mP<5 (6^TT=,m [\;XbMGVmǚ3 \Q4À ٽ%;nBa)Z&OM *k$r껁G6T)o;H7$o-^*&ʌ]಄F%RWX-<<#[:P Xbz1lciC¨.%Nk|= [ ;NzgD*<߳-thaȓ}b'[B Өo4"ᬭN;gTh=v0rt 4w4i <|Is:6yBIZ"`z:4> 3s_Z ݎF=-g!"r㮶J ~>= lNx8#RJ 8u.4G0Q"pWf/d11ǖK GjV;cp2,L>1 )]xh!PLUnڲg\`7tVX_Vo'Wc3Ġyk2Qyn^A]צB\\N;qGS@ܕ-}NT.7b#Z3qw]J32xy%#9j+M GJ]tZPMTX*)8u|~'Q{yYDR:޿~qdt^^-]q8V_>[ x^er ɫakx` "410cĥ7л4Huf[-<1 yϣT}k[X볓n7-ӉRT\ywses`<8#ͥOBx##=νl_[KBu"3O0.R)bmgU6FZ|NqP #j 3=$,&6B`ǵn<3ȸok]kɋՅJl©x0eܱ j<=&rG՞5ը!(Zƈc j+\Wі>B5`+^IT{;7ZŮ8A=.}Bcܳ0@{mXZ,3{ -KcVe܀8!_]Bzfvݦv[R&>VBP_a[wc{2T{ { T308>d3TA޳a,  xbLc /f:ME(Az>G`޾6$li\Wjn^o0xknk@54BP!OIGrT}uC-\3Zb-K&V%d b>ٿeT*@ ͫb;Ҵ`/ AdLNkD ۆw!ِg( w!5 AKL.Qb~uDM_R{Ɍ6`쀺+/umX|w6eT*'*X Tݗ E+eZ;UY$W(pEpCtidTFwHNFJu,㶟Cmq25%&Գ׊ |iVYtZv_ǵ>0EDă@bzثL8 i!,xM]Dׅ(9o Ӯ^mlC32.twSN ޑx"=8Iw=Y)I_qO(t'ߪC< d:xUG8O1#Q茦h  z &q%|JH7-$MaWB'+SN}uʷ<+ b)!v=HpTQt΂]˓M !Խ~8P330FDO.Kl6NYG!6ikNUvڬFvQ8e9#+[7@wtfhyVVE|c@v^C'YfOORA>TTc*f.R\}~Δ 2Xzm}1T`nEltUX gz=ͻ`/vrxtaBp͉muƯ?0^"|h?-%VbE?.KF3ݵ>2a( DzVT&YAhJTs+. bVf|9󌢗9?Tu1KA^/i?U<_r2*=7 25Dޚ(]0X킫=*c4!n*`jH5_#+rZuiޯ2J6%v$߷ތjbJǍ* UPGNt[~U{O/C ښ Îaa*ҍvM"Ǟ3g M#gڱ9xdt&iX%/ _Xfh-B7a.TNiѳ&uq=ƑV01aQA`a[?+yyvi0!X<Q[~U!gӽȦA߹{KdȅY $=V~~o*Go^9r]hN)Ư7r+3eA4=GHf۠`ACBH t#{Kw[EZ6ФW>Q c>Bi#&;_/=k˟e4%GcC9>#/d )_X5oRigAPFkp2aޘc~'M@Ũq4brgL"oq7kfPQmlbƒ\a:Ρ.jQ\[B_+eN ӑݒXlLW7ƪx 9(ܾ@9Xɀ&1kr%e%}OcD|d@{/=`is :GE S:]FPzß+aBmS*l2sD`_7QNi{ЃL@921^վ]"!W>l!:&l*)t^mo$_4 z]%'\wvzPb^ZB㟪fa|D+vwzr /.sڐ(xV2"ie0@nfK!^}詗FeLbk:NY g9M/I Hv!۳?HtC ג}󝪚{tpeCW%[Cߡ,U}_0ZfO)bT4_||~@3qkkxV:uRK\.YɈiV`q}j|H}67ԻzR*bJZrӗ"j-QDePs۞v9Y:4wձC §R;-D*Vj Ԕr4apʸg|6I'^N DĚw`TA;}Ȼg5Baj}u7 ]i.ept7/DdLf_>: 0ays!vԌN)Z_mwس!" Zm\LHtb?yO(5D{_H>%nF&_cˇl9BwZz9UhE2m`a핊̾)߃*Q/z ;Ěv:ըo zg̴|\e9*iXHQY`Wy4u[Emm]VyƓwY ^/^phD-w^IcEt6Pej ^c AⓋ+v1EPV8}$͛g0Uh%J 6Bk 8# 14äQ*yhQIERT~+MIvM̲ۮ9B&$/nP}MNh]5P˟'v'd<T[gќMXHpk ⃈sqő~# $izzD)=j0kR1o6;HT* +&JC +e/nU%2vd#Xe9`YΓfYmczЃ ULB"LJ ҾiQu ;(f41thLLFJ@x+gXF%<sbB-`eyzG2ʪ 3kK0n׏ ?h=UW[Jz>öBp}7vڦe L cɌ@ 7T`Ci=Q?;?ak>' Tn%Ee{G*_ )0eֆH)V5L>?S欙!]sʧ*UP$,mȔ>W ^B\g><&ǐH-ȷÄAЏ le8>O@ݡ&nBs1IJR=6 `.-36e>W'Y\,khG oxDm:wWl[XY[ޯxWtid{'׈Kg'u۰2z€!LT4,)mL 3qya:N+h~u$uk+iW9Y5S/tYv RO2qWk6;EL1⧄šĊ̿E=~G~[my9BMH=/իqvxْH=m[:B 5B%vteD? Fש'Tr+|s9ҧU!+ ⻒˿y!,e4ħG?z}vkk:L; 0F]]qT) -I&^7"r8U/Nف)*F7RU iqb, :~HH 3w\/ѾN+ۂ@=WЅs Kn5~a  AӫXUr4Q>q@<6e4f֞ j +njM_7Ki)hyNq+ؠ_-*[g&h.&S"1)1i}ڽcj'\];]8)GK|Kh,O2tg CO*l~8A:WhI..OlWu$̀SpqƖ=_\H |1ŋ q[$.߆y>-~yN 1CuA_6P[ֆ}OeG)ʚUK:s RGm3`acZٕ~NN".:뱄q)cZ۩J>aJ<cH0lFzWNZ阜Kjs3cc!*>kJg#PBfJ̾ =rN*JGZ5K?eD ޱW= !lCS_׼Ma#u,0dux1HJSt4 U"Xj;Hp$) (RObpw9}F =^!zN͒b[TWQdE694 yk4&9wv޻Zi,EgAڹ50"v HTSiǏG:xSe&}{`[z{P̢/WT}Jl:&k]5K"iA\y?g bZPj2sLHuҬ]X;QB] be/c'x=u&BҒm?⻅qF!f:xHi/j"w|B\$l0dM~MoWc_>D IVTh0C d B٧sJQB3м 퍷'K)PD/&Kl/IO0#/EEc-M)4dmbb"!%Cft[K4/~tC?ѭJ75Cv/:پ;r+LGd ѹyאQH|w $I$Tɪƥ|dʼnj5e"lW4in0&5y0SQCĈ+Ɩ u(A^uQUUdU(t~3uiC"z÷:V .g+wD4QDD4FLnʄLPk6֗EMHT^5$ntbnrj,\,< }/a1V=4qKIhxUv{V9(@{zZna7 7[ZSv^VvBe</}.v D{_2܌n!t,HՁFUD c;UBwg]1 2NO?إYHv.qE5-`Dž(i% 萙v՗cGj̪r 8[ ɟ3(|"[ڦ[%曣 7cXr,IuY.J,{uPj0-]c i: XB{Zs kA`y%{ETS`{[D_aN\T.3א(^=ꎡ Qu8nН iNYNquB^XПj_u'rza=' G׻Ɗp Xk遺D1ywc"Buo)??GX 8]ZQth}s@SlcHs|tp} K8JrPgBH jYNUtU؀6t1@VH:~˦o!8uesx PvT:OIB!eN"nKs{!+3fqh%PuJlBX V K tr}ۡY䍿3U!PD.ވϧ=-/o7Eoj :*'?59& Gie{# XuuX` oK*W;H6Es d="B>_3,z@O_׊?Z[K >H:l87y.Ї=j舤i21.+?+m~RуZfiz=ZǨg؆K̺~.x"U@״)Սw7͡"c'XY C*œ QTht`_ży=-Bv0#>,s$c2IXn<>>KG:|{b{EV"<:ì X #tC4;s:3ؼ yUʢ"N`MLS󘨺1qUʢ:V7QDh&BuM5NH1x*<f|_ⲥj9e\/k֐P31v u,]6L5/{ʵx ?,XqF$*Ϙiζgu i L jo5 ߈Dn2ÁJ;eN~GƶXF-PSL':EC5!.3{XE:{%W+DɈbsƘp[oڀsyHVO[CX`8~.T-(aΩk8\c3awhYxEUM>#lf*BqǴ ty/%o{QsCJ:?a"`:V) 6;9ҋ>dsTT7=LP /v i+`ޅIJZ9xO2CJ݈U&/8o@mB^ߏ=zf/:X{Õe%u@'isp-&"-"6%L;Z\vOG(~SZrÞ?Vhm`Do'y=UC <_e;{\%s,3b.L3 NI9{vf 5ejd[{Wdx$ymUNFgz2jZq!wt>/ ?E\×;=srf$iuY_]a_N$#~;孺 >lbaHz'dm㍆~e 5̨@y%1ID<)>G 蝳%l|VbX@XO\n:J dָ1N6!ˣyˊAn T6d@+QA'- fdHiÎn}ФK{Qb4C ZXñ/U%36C> \U}فTg۾9C½\r'PJwQQPf^3\ )fEO|^Ԉ= Pz(->ّn21Gw: k6a[ 2(bß4S۟; `['j&Ra(oO6iɃ}Gtߩ]] Fc!'b89۰>|A|oY,(9>U]\"dU8V Ѩ4 & ;>7$FDɃ]tl*TTnI/&Z8Zc]g2G L+߃\ؔ^4Q]>*@Aae q Vf$ޅ:0];7׮G1=kn2[,>YLvɧD)ܲ 0EoZӗ^#*8Of zM-娝]Lk"[Z,L7mh0TԤ8Įvg vS_Z=lM}Ht)քK'konx>}mzTՎ鈖0S\ʪ3k$t$pxf"U*IB%a k@Ї[w7y~K!cDq+\ >Nᇼ}#r,øQ\yw)6e$Qaer52FXH4Eb^ H4{(盦n'ŊJʀq@>.ZKNy6a8 jcAތ98aDX\źm1}+Bi f7`zub2?)%gRKXp%~+y eZ}D1f{.+ =alQȄv@5'MХ!݁V=VZ.%>ݩ٬W<I 9eR]Syط&:eߠ z/q8ŷ &ĒW!P/Ru sv&/yieD OT1 #a5>ڭTz7)l5DB U*(*:U6VY"c\Yz&`aeu׮+P"^H$A2F':Z]|(K$PϚ&pY to120tN )tҬX,j]̃Ƅc2ҝDSJ]:g uhdWdAΣIs־?xW:.$ G[1\X<]a̙v3~_ޔO*}q~~XߪfE*%,8Fuuv^<Ji&$IUٴkN76V&7؄gv3 g_s"if!xvE,$T7|Fx,CLt2-:e@wp?o i+zS;\e;iUCb. ۜ?|C<`BP0UsE5׮jхXЏ_Va4095fG4Bo۳]QL]nZ_)ͳbK~ңUב ⲜRmW<{Wȴh:]%H%IV\U]jwbSXNʲȬ_~J.|iK^.oŚd"*@b:Tuqέ{`r R߆ ?a>!?m%Fm37хި9Fx*6oFm|#Vv%߮@ LHu:$>:.R6QR"aCkfXKX'[VNX1@љ`ƚfKбY _u7ҎQsɧ('JCR-D`>ތCe_IɫWν!Ϟ^zB`!Q~9tǥz~Wˍ=ZkE-jV&LD&@@}o/ 42Dz[k690,DžVq ^[*=B,U֠V?y}/!]PQb") ҉ `qX x\F2[&nx`٭E&u]n-LA)vEG}Nm {Q?_JۛZvY.s{?KpNdUrkgL"C-x_C;\lLP"2Es't'_1|w1VPXB115)K4xa!#:c:cbW(7Ck^Kn%Y[k:Gk\q)Rp3-v(+/6)A٩XIzyѝ=%!7!А'S^w-.x+wm {ňt!l׶^P̷# a??^I+sWp.-~f*qPf_;y>4ؼAV)#}kdOb~рQKUo a21"'2i8=ޏ+V1=G07S97Л!Sߑ_JT%Vm7N9&ȧCLgᑙVg=u>e;ekDs! >Y׻h=E_5naI(6G!ٓ*R<- DZ*w->:XdxT Fgl(gҙ滧~0+DL# $#kYr5 C㕛 >$Zl-QŜyEQur@Cj ;'1՟Jt^o&RQ-Q]@[1I9})/KU aԗ`\׭Y {F5ZCKjz AE‹O@b6ts= !%dAT%(UV8h!]Aq8L~݁<"w In|y-n5ۦv3Wy~8hBBUkm@? ,I&X{xz bY}2n2;{B4kPp+egP}J?'m-"İS6UtIn&N1eHD(2sG ]8=!\md MO ?*. G#.ڷ;7˲㒭mbGZ }}F W>G4 TC%U ÕAO"cl&c@'݁x9Fx>A.,M!LB__35V}hD6U4uN?!SM\=a)rݥǎ%|U|3\;g=r@u&}̌1;wqɐͭ[m3ے&mKUJgRrO bɱHuTqeJ47 Ī@(CJeyL;p` xX$''8R-5H2MZ&84]trhY^`)8RF8uՓ<⫤Ze` l}Ϣ " ]}ٞ vZU22"ORj[~w=IjK.r^cIHd~c6} qȵ7Zyȡۿ%GP0*AGʎhM/BTA}0sDwsV$lC4a]nJ֣)|cPl'@" ̽p pdR(W;];X r±+ oe8Q|ɥO_7cos*-&I#I·evxcML,cC?tWEːfZ='xBai%:"pAtmYy+ݝhlX:yO-aejD{IP&ҳ[ui0(:(xCZrruG.,~R%A<383[?.Iś$<->h`RLT33n,dgӛ-*L*gcG?4\~Wڬ-4B#l r'e;QfDZz$_́(-!&fH ׃0ܔG6iqZu$b|"7[%l:=.C۬2EXc巧ĥ{]-0hB~ ]9-!]J\Βv^.uDr]=sz!5X6|Ŧ)8 6Q9?БLER8Y^,=*]g^;>Qt3/^6zOT2ֽ"lB\*&%VA!i}lB1p 8Fc䢭JfcΜ'0/vߏ+#X9aL @=V=[93Vk ɡ]X(Y$jwd* Ԯ9wҼK_Fдړ(/$nk38K?Mp*#`&GKLUTBNbnCY!8OM,}^F?NsJz͓#mnHԌs:3իtSk EG&~@8M%aT(?W>/|$sZ|$"k[=%EDSy;ᄋ1<8og:]B͙uȌM x?A-+.%'T0thnb1WчѸsP'lcK.@Nq4Q?)z]ټX&Ρ)7giuF"E#Y} 1bK1aH `+A)򌽏0:$p zT.1rs–+z&ɶA ܍axqivu$e.{nx;n/}V6N܌S}\vh3o>]L'p I}K4;/VL胭5bfq>* װYO-X0xzڟ'wJ@k˪%nCzD3\*֗RQ ~gqedWɒ]6rM nZ5Bl^8JDc(z 'KcVnS'bY]o5 U{jZܑ3|7(MgH1ČP'10mvN{Z㥺ք*/HC+$dڶ9P~<\nK1RTu, kh-Jpiv,7Pk4\+J~GAff(M(fxž1twGĄ8FPN P~ ߥo ;;2u2jqS\|2s}1eXvnQ,ӎ'u:7ف/ͭJEy3} rryCkYo3vb9֜}ݏkȑ"P;3≮3,'ǡA8%E%Ye!͗,^(V!`T` =N ezL\? 2rk>p贚Z[w;frX<慁8(׍S(5k[k яf^QKh^e;P}5%@,% a gv_.VTtxδLhyGrC7Xh Qʘ/-&'d8%#y/c[8?bV3n}YMUqlO}5/Ѡ b1C8[j%Є" OL%^T1/Y]E7kƖ5r ED=J߯߹ˋGz1WJȺ~DfMď#j1yUّIW֌PK()}3ts{pú+IنG"h&{4Sey`l'hM"#C}%@U1'C2f3lr<*W)3FeT! r 2mc}yNޗOK/nxp12E[t9E-Ӆ(q^1/ ųDMJ\!ȅvE6ݬ".Xc V-ב$i֥+e0,&4 Lħ[r?"8pYJg5nBY%/9Vۅy I~F1)fwڹ:|:%2T w܅9plۣ?NLQ^32 Ln״(q]#1 y*LWޑC>t@8l_ABplk$E?E3#B "Br7헠K;{ȹrk[dL@,mO::|g_zXKcM$nI_[XMǛP>&Y ⇡3!j A5ɫF #duWܸT_i u2ܼ JI(8'z[<4(ǃ_:r-ZZG>lE@<*L5DX8#>Kdbwf4)&62MƓjI{^P䡹BC 9ڜ&tuV&rmٴd,6/ B?;"۳:~a^l#`6!J a<̒s9NXPSԝa!4us/1*hģ -n.ȿw'QΥ|ַ )_blro~ǐxCחkJ+\~]w(~5zE5i"H,^ _?+y螽/bZY_&:v!' 2䈂U2ƙMHjwBsEzO(oZw Kba5qrUJxvU@W|>ێ4&r`>BC}{6CmXb {)2'e긨pcQY9^Ia$@ا.Ւy#LGj_mٱuy'ӕ@v:v:_d8z\LKIDLؘ^F!q5, eȌKr qe Et ;s֌;$O*CIqk69#(ۢyvg.X^\meA>\D{Bn 9Hu;$ &!_'>Z߂఼ =t:BmnKK_ B푾ʜ 7qWӐ,E[d\Qa @ԋkߴ{]vBp%_ϖ Jvq;Ac7r]. n"ʩ <߮ TZsR}}8/_ڧ:776M$ApOJ;:C֋ؽ_%^6DGbxb<EQFB̊?x0,Zf'GL:jB.J .[10 uZhjҤ.XW,yQ@?|҆0K;z3u'= Q'X׬ԩ=z)ub']NоTF UZYDh&`Z2T$e1I7Wn^1UgfIe5OQvJӸwB/h,> /vַ胴(<+ ,S҉z-lHGٲ;Ԧg^>e•~(MW 5mL .2:$RoUZgu]1|$?bS+kl] GD:wX  G>=ՕU6`= cR(VM[nPA(/ vtlzsrUyԈw{3cu13Nd<5wCi hg&5m@Y (ێ jk/$X`FQ:}JK4>ujb{&(6|vuwnJQ>"n{mKʽTd3V !߄HL0.8|'6r_zI^ԴO>t1Hf]j=t6jr? qFt~fν2:&x-^#ݛC=o0['H0>XĖh2lەJ9#u&K3Ѓzd kvn_5\粑n|^ SQJ}F;1PͽI۳$ZGd df-Q:%^/{ Xtl'W7pmrtIGLrmI{9J֠zUᇏok8Zs-Gő8}=WZVhH-CFzi}`68 ­?/hn o50r!]@%*زF}Nգ4+:̋(8Iln^B*s6G$=4XGHh![W':ka{T['!SireNO8L}ufX]m<8*Toi:)s8CuObnv*(~Ie͎pJdLa|9K.5Ei; {ߙ2ad[\ߥGYv`PTQ{.gLQү}FL& Z@k~"=w!^:B&NѦJ&:&pd<9V/I1ܸ_,jL^f/#WP|"k/5I1k}$j*eGW@n!I蟠>}98,v7bmSĈijFRCށR&x.On}uJvH{N{:?tY· cp^CG-#=rkxwC (0y$q\ǹ^2~`R,86ɴ9*3 a&ƈ m_@  1.#ֈ]3lk#."_W_mߚEՖȳ]I%>T _RhS?;.o`G5ƗzfY!)I칗DT/sucNj+!9WKcL3HXn=aXiYhC!I9q%W-+:j 5_.I"d7}})+NM6B|lZEC2kCgY>2jCO%pmϫM7=c##4C.~V0>Z$dQPjZj]7dJ4b][ hHX;ě FXadl6 ۄ:=RxkI2.R N(.'IH [8=ĐHV)6C IY)(w 7mq6xo4Eѐt`rz1;?ODȡ60]Lд@Ew6o}fsl,+]((f\X]ԂA|tA}Ene >H `Xء}셨,*O[5Ipt3+w-Ѭ0\q}3i[ Et|@n[tW꘩.^-\CCk2t:w>#Eg2F5T"KGG?%T7כį6HЛ$0{<˥~NjJ]AGz п2ӶP§|^@ t0,zFJJ_:9|Z~̗0h(r3qtjݥKj&{;b 2uY+ [ߎokePyOkq+S)A1 q7o zϒ~O!^Ӎ1}M܎IG1@݊2FL0D[ަ@&xեf!X@>~"<.KM:PIU: `V.6FM7WH4 q!ʒccFKnx3*`X .&aC_P/e bUe  dϮ_)!GJ oDs UEai!\lEoi<:%;*ryl㇚!!\[zp&%k@ g <nq`2U|aPyl&jy0qZOp:C@~pDŽ&;_ǂA$s%At{l㩦s->5`s94bl\tǿ#p w(H7} P"Z_2+)hVˀ|tAH 1ybiM\b;W-uX%dj^햮Ǭhٓǎp* I$Dl)=>[ؔ\)Zo~Tk=X n gߪ;'BܱvΛ~e4KueoS$0U 0K9~Do'AeL=92{OBW剋{ *˨Џ}w xF -b)rP򉺽7.(!.yuIub٭hglz#IřcG>J:K `,yYČ32>SF؃[Lp8I) oq7lW?1H_҅dq?%}dlH+T~`pjx7Eoůz+9(;C0sE(\iEy)[VX8.l{]l}<<} :O*\\δ(K<5Ƶ3ܹ\mɶ'G 'R= Ay%젿&/$%}`ϧ+Vc fmchLGCL7#^ux )au  f榷KаE׾{vs4roz -zpwTwW[RQ}Ī0j5М*1\@7kMFfVg~tٳ1∧kGur F롙w~kLL=N$3W2h)%/E^XbkM@ G\:smawZ؇l~IxÇ.1q[>1DC`OGTyHX~jf6uB"kT‘t#~-/%qaݯ\ C zl=;;/,\ qYl'30"Loh U W m0z X%ҋx71Z >n6~4<l+ jGupmOƭ#Z~nˡ<t]Z~p;/s_@<DȰu,w &mhA!*RY<ML6d:^DO^30kt߽ΙÉ;nl1+w;\˓NzRodF3#vLSI u^+Pej =qP@>(] 1Lx?] s{yO=] I z.0Ka;cv2,SBXe2ۍX8[FRƵ W%ZIx]rV 2U}_c\J?0w^:cKǻ>MHv]ai`.JM,Ui1E˗bɓS8u&v-J|iX'Ko&' bA|bwm했;.J9ݜ p8!UO*4)Tyl+LJRyZs\]aFw!ߕo] *fNkh_Km^k)b{M)]\TGؠq^υ($ 54> ױ?@HS, ۳S;,wH\H"Bo!%BJ">C }N`ǃx~* L&YW{*%?!E 6I[|ۣƽtv<Eq iٰ % [/"x0|H4Asjakq6b=,jId\kMŬ!eyE_\H:?Lb52((\7X35$ %C6{9Mt:l~wul*+- –(%&Âq7 Ha$@3K "!  ,ۤA>5>$ˎ}7PrPXD:NLba -.c3Iuk8cG]XtJ[+R^ЭtbJ ?BR$MܡqFAOS !w&mY`ٍӞ%\dQQ[ ŦFΩ/Kf)t~2U6LJy3@ (ldh4yN I1!wO]"e$GɸwC+873ʸkC;-*Ka'{^sg(b\@ݛm𲩄wfۧoatQ @wq])‡U22z%aj9wI%6J 8Uprt+ot,q{ha?0nfO~FFYIӶp),* z]O/?]X4(4q}'b0dkB+T! 3l)\R%,l~=a`vdɔbyLo/PUUDDPBW{zǬ#K!ޛ>EH?VIg &'Ռr{9gܛ,37,\?禠T-*%*&'4ӂXcqnR5G\=3Rk.'|K =!CG%g߱-c1[0>P[1wN:~j?X~HjX;Ѷ ]"\E!z:ia wrS?sQW Qf61Ҙ`Cu\yN:oHqgtRY+Yś竟/O%RpZQ?/]+mI0.Kg g{$k;SPWh%i6 /O @hRs74ZKBu=f&'R $_-a%cIxԀf ReTEn#VL*aͅĜF jga'['LJ17+Spu0D@nQ/m jYfIEQ8 _Gxj<+_ů}KxEҊx#.$u8"YcDj:tZBO?dTa<5 $@.)҅!Ոɸ fw59 a\_dxIDU V`Q/ڝCa w3s0mY>|3r7[bE 6]4iWۗ3Ğ%- ؛ɀGLՊ#&Ei6ߙ (k8(ͦ:묽Rwz ,,s6%6pK-[Y?â6͈JNa۔03DLP2MDWC]xqeVݿeȸ#3B-T.9#VY3RbQEXǰllz+d [\"ҦRb6#jBׯyf&1][+f{,0+(C]u_58I93coF3m<2$'+DId QH=]7{+jh3 kLg~ӏEb|iІ|Hy9.|:HO0?@ݍBc"ؾͭݚnkf ~p977.O&.9 u';enKzo;Fcr+MI D|K~$N!/@B`7!ד渊R cbv%pj0,H5l$XsCI7{]ip[O4I}#]z?N"b ?mѲ3 W| KVs ]2Vv|l\EưT>oW`&H F)Šz0~cOLؓg1CzQB“@,HH)M -`7CX2BX.__+K+:p$nHw6$ΧgsYƳVW +ʬ9^Ef_V W 'GSy@*? 䮇jKLA6p^-4{vsx~M`*P`Wr1д989ϴRڽ2E~BRP¾̃4Ҫ؃ya2^׵n3jsd(oin3 c~uե=6.Wvy7z 5Ǖj2WƄP!Go顛K+qe0鏥:2? f%ȳ4yNLv# xD'űO m6 hd9A|LցT<23oB@l7F6 _mz3[k+!EaX償l);9ť_5hl&'\NdM;S;q.|4 م`صF $[HCr“6) 䐍hH0B!}7o7@!BJPY4{}j}D!кMeј8UZœĽNR9!LFm&r’l?& ͧQtys݊!Ti(+GG9SOS+O̊OHˎ!F$張hiY[5:*K|2wP+0{ގ ifZE$.4P(K9vd-\ْ1zֿa7 S#QMwR~t[b|cFD^pDΛuve[tljwI=W5pA8k[˔`%%q Auɋ"tb#롊-XV=,րK!ag/%}0E-GyC_?;'D!iJJZ PY8K(]7?-2_C-IǶO VN%k삎몘k [Qm₀?TLuꁄ|#5[JImݙ)ZKmd PQ1H_TlߧC߹ f [l+^|ˉʵa@WhI"\SM|U/&*'Tx{3DbOlS,لzK[h%Sɭ4 gc46HS>tVU̝Ա:k{Xt>NbCD;Rd=sfA`!CY U];1#-f o{z@95ƣ@Ar19k:(&- ,W@BVBv~J ?ٷiB݌L]PUT( }GQ$/(BvQt֞zFh9)Uy k*9ORsD:gWlEP?Gs&}%j\?͊(V|)Χ2ϳyɊu<"B+Ր@Ff3#NnI&2ݙ˙(U*- Eb\7¬o lScy?A'l; uw] ˽A݋SCvf7vacGUr1w9-j@fiCgqaJ@Lo ~#NjѪ_dUT_Ƿy~3f j;eGg92͊CŒ|' (ʎZЏZƉcٴ _A*~檉{MTKDb=΃2gGٳ*`mcL2s{2&QNyI(~Aj3a9#+G:מ+΅@ҳf yҞg=qJvpoƓHs3a`4QAp +]On6!e}z|۱ aRMYA¶2'."`F[NC^N/iYKӶ:7}@L:ޖ0Q ]L;3 KTDtѫߣZ ~ygZlh#;L)w]'٨kh5XDKW8^wG>\RQR8Agy{ jm( (sn[\N a4~0AS΂8IП{g-67hؑljN$ x$)tE2ŔO?t]Ym{VBntdc"^j$j #@S;Ol˄e ɊȦ"2[C}> e#6yNbkk38ѧ‹] M)R⪲T*;JjOXL5._&p&ԕα;PDgZcINv e,[^+^b7wT0Stq+DBt8*ʳwug(/?NW{LŸL`:+]},÷R?\%ДkH PS\~E w\C5 \` ">Ew) ʟ",Ŗ4F{D>")dIc?-L?:ď';߳ W3?@)<U`Ii0"2Fk22y PpH:C7q- V6vJFN=KHK=yYШhCUhdE&%R2'Rv@J*¿%Y]wT8Rwjb¯n%y,+| PLUR Vw9LCR*{̭{ُ+|_E }ҕ`!:'m#zs:-8Qs1|rX|1`-4WeOD-p'c=#Nf}WU8- ~J*i,bFIdz-Jb酑nҳas-k&-̺V3IMLndEůQt"ih4 {X,&U~ףhI#,g$+x: iA=Î{3lafA2^*<< d Ô $yXo2ZdLX1<ƆcT!b >P=F Ú6( (`'zK&ec(Od ǦW93`Mh?j7#0ٗOֹq[`Ds(# P8yx6~rQGlً[Tl#GIuN }N+=(CqߘS⾕NAL奫 roaGTo"rzv3&y=(tߤGdHjWG á!V#Q˄NyNqy"׺ۯb1_J} (ÄF@n⃼_w'tq$N.ftV0@kszU`dB o8 qnJW*uXSoX-HtXjP$"`4৐O"rt+(fpOW\IU`a&0 Gyq8]u ٦}QveFo(G'lTj=R wXT tfWtDZdSTn@H?c v؎r=hd;.TZҩFxe/v۟Ҵ$q4MVIVhm`~qѳ&+Ǔw*6㧴x(3܌\Ÿg}C|>O#4"KJ#457<Ҟ15ݿCtCcHaZS~fmlX=.I?*Ě oَyCĈųrI4 MIw@ z-]*Hf=48 uuiUd@dY{bF>/:U$"Z~R:۰;m`^^bfl_Mǝ_s?Jx-zRYZmhhfМWx9J`kGO0yf\5~cşl3"'ǵ4o<<7l]Y| ֎~ISÇHq}M 9:/,,auՇv ܥcQ {/-m,8=s|4=WlabF꛱A[d\W7.i.%1pz.rUTN4H,U/&~ٔ(pzy9y_tN75>Gυ3u~_um2$SChv ٓ( P7NkvM5eNiheC})2=Άf&CLB/uUΏ*TzNK 󵄟XQD}+<7x3֍s!=Y8&qI=YD]ǿəRU؍P=Y:=v%\HQ|EjPihOZB;:-?erlylCTkSժi Ket igțoB',y>@ﯰ^i( =ʺh;2MM ^^٨_f: 𣻯)XɕAM a5xB=Gm⩍*An݁>~ Vx"pDj7ٞƓ\ӧXǃK[tn1=Yǭg {'her,iXԷ%K¹]Cs$* "ᯀxaϣh <,H;WXQ~*Xu}=kF,'FqX;b.8p4٬7 tt0vgѝ&Y* Ԋ'?@v7j.HvW☧MnW轈UZs@= p9 -5cg/`DBn*՜ ?),vD"aV*, 2> ,5o (jÄ6.^fDKg:N'(`7$Yf3D_#cO w3= bG/%~Gd#H^EjU32qu|@;jcX', >Em[6c.Is^S5NfmM჏ݪ aIU(L ۢMuL@,1X|'w*' z*~\mMG%:1cQ5>xQ1g eQ _I&\{+ZUۼvy+7hT, "U7PqШ'b",\Y?/Ct6>mgvx#R5nnngG]i)Z_nb*Dy|Q"v:sEoKB`V/:L9j:iRZY>\ńMN[!h7O)տ7m!F^p O, Ϊ/'dhB 'Z[C+4LJd7Kt& Km. j]*j;Ŗ)߃ZʮT[':FcPsVظ6D s@) $ ת&dUG+HoVq8RXI+=S -x"IQ40[!8D+j'|6nj܊ 5 ˠiݾ { 佊-[93uqk>Bj(i d+xBj CP!B뜖N+/ꄑ%%W.%㦯ַřGOR`0%s:k:{ZJel*_aܕA 9—9ɼGA!ώ *yg u+!D2{~F6WhF-m]拧{ ՙt4gbY;㹚nھ<,]x&p@9bR걹S 8(<#,\WKhTǗ2Ъwtn&JdK -lw?rlTp1s[VdcL}vOP5ސFe(BP^Ci.o asOk3ٛʯwwf; i`m)dAQB$o-LPc._&At@ **k^0+ +I"2#`p54_Y+Ny`[a9 @ תPP]]^׆?WX:G/V *h#lzuFQ١$5V5X|e}ϫҸlV&vc3eqI/e&_g `҆KY8|ad)o͇V>ڱM<s0eκiItza3oruX0(;M4K+Z ׾IHs1OV0Qp{`Y%SH|HM!WA̙r|HV *,Yh\WaIgYkX]?y2C?8͑//bz/ۜ|+q]nD7֦-&;4ŇQRl‹ FE Sv9W <wЃ4^Nþz4snǞuΤń':kH^Tqg<+xlee#_G Adu ;0/B=^24bhc[$C=`9K]!͗P' G6~K,hύwdZ.A&iK\RjpZ)P}.,/f fNEEIvhAPҰ9S/Y׸Ln jΏWP)Ǩn-c {^6]Os-TGD#^ U0şt$pS8q>$JKZhD[ aknLn.[> 9-9J~`.F@LBh#B=<Hb[5Llvl5sq!&'NRIG`VVؾ$y6<>JHGN_ۑʎ]ҷIdVDUINc-š 0r-3g]M'/xL.}:i<~ fC1SJHтrUMyt:o/EsT Ta'z-Ǵ'G5㚟i>7T\VwEC?{gR@<0{xm5acaMomR 6}Y c6&4m6PT0+V}.YtD3˸_?!6Zae4A33b#JuM`\"STO@z8})T5wnkHs@܆_<}m=DE@֙^3Ɉ}i.o@lNVIN )O6v@[2slUlA>3~ujg4Nz)YVWL{ Nn=eS c86gّTI҄e%l+ [7:¥KHFS>?FigQGD9lk}ͼXB#`+? Jא+T*5cRT(3 kL" kf[ >M<YŻIo\EdAQBN}^ Đ鼒%8o&2ٖy:R k&2/M-spi&7\9!ܨ{Wy1@hRTO*Dd?s9[tǵb=bVaW4356I9Ϭ('I $cY%Uz-\gj@?2.(h,̠VZjbYP%jC*P[dC't_քz&ڑj4h*f5b6e, 7w3= -'ͧ$;}ʚnRALO$j7I˜]B5[>w-}?hKVBZ@.%Ƒ򤲆6КԨX 4+Ak}xrfS[[i2|E9bz?K~.ou8 DFF5G7mjØ) ·T諒O#18v%f z򠵂Pvk[O;+8D]fYǪÆl!#)R8j Ϙ9CS?٧eq3]Lj}̎x3"C}pokX3` Y܇z*=ST}jw;b0܇Uҹze6d/\Î3e)S''Idm"i#=1(SNYLylad`0lX rֹsrXf}`!=v h'(NB[C QCټ|5 `Bg2QACSHm4K5pw j!0iUyf-->{]Y_D"&@;*' E ItWn:ߌ )>cې-LH"dHyL52D)s*1`Ŝ(hEU۝ 0^hn~Ua9 ŊəG6'suLyj\~r "\DT+hk=I/?|`#a-3eLu5eva2qgd )^LGjuyXxVrD7*jYEp%&:U:FviGvz٪3}0 D!ю"Ӆ9"{e2 )mZ:*ٷߦz TvR /e/~ܴeY6Zr!IvW2:PnVlLV9iDLyHO2wdI8M?Q!OrV m<D4Lu%䳗}Жa?jCB8W&"Cwx`gr}l쳟PJ#.1ZIZ -_Td|YC؎&hљ!X6j5Yn&mkZ}Ӿ2ן¹z"H\u1!xHn8+>!5͊&@~Ljŧ2r^F-6|s!#KKƈNKU{I mQ荬PFЮlX:@/,)bP-}Q #/~B]G^w&vMX3Y<X='Ϯ81N\2\s J y+mT@f ZyAyʌP}cA3`SF,F|]2uC͆B'Py[-|*b(5&@=SA.}0,^Z50݇ȃr N. tU#{lȟ!+CSzJ-"/SZm uUIIWuL$x-F.N)xr|)iNԙ.KGјErad#F>W,T9U4dYh{H5jbꂪd8bbLdKE)͈`>dXB=n_J@nu0unMPJ)ھ}j/ A-D .ڬ)b D|r;ӌ/{t_ [wo|1זݏ9a,~D2E}7/ ծzdFNSrԐ8r/%X-Tig[aI`2?=dj3`*g{K;+ Ϗ?@hn։VIkF*{A,4ʠ´/)d~iuknM>~v>~_:Q2_ØǕ[S"3nfw \ԓZ58T5]Fe4{~Q 4H%j/xz&0 Ϲ@"Tϴ"1RaA 'm6蚁k܌.raH\.ϏKdR5 SWaEjRp]oގ$2on\WȹRQҢilAekG޵d >}Ft>\# d66$5B`PGjgWQ-=)ڻv[:^,M(l~ff5uy)%X@Be=Q\؎2U©nU$TP%=Lu {Y K\aKZ zj06(Z$x$B tf?EgQ[4yCYli ^VTu5/lN s<<4a%dp>!:DZ:,uO^~z>!nD[U{XSP04~߸8PPj ]np bo$c) d#r$=Y- NYnE4g0}w5kg}LWփY硲hSoJ6j! t>Mcq=SeqI"MW$~=nhJ7ţ Y `*I'o$ۮ^?x:m(=F(mUpyߧ ǯґD4)%94)Cyg Fttj?0=NVkU>ئ&$=@ѕ7&s9g5ɂSm8Guftwl~{4^bN^S.>+蛚/@`Ǻma5hw% 2>}<][:)H<5V<@{`j#-S(rojF!pnA|V:]g50 |S"3 #l !f | }W!60a鶻#1xx%;G1iOth!&&J,UɜfgqpJ Us,N[Ob@s| Ň=DQ&X yU8o^$FRXnYϫd4KD% Wg,+ݠG[3\sPSږ\ ݦjaeA6 ET:R| 3ˉ|v9m(V lyScØZ-#b\` 2WǦ\D1щjjLj/-M{l4G(ȮgYX VMU$dzs:quՏN$.\f/jR-_K34PRs3D9Z߂%8LEPC zfy[/nS=c?yl^Ep!BS>ߙ|598ʃ Utz$)G&@/|0rB Zf2\ V@#mc/,OѴͼBL$6haE_@*⃨G,eŴH m#6Wj7w tqIsQL;uFL}sV. <&+9 wȣ @<㘵x!"C󣱂&}M!w^/Yʇf]|=;Uĩ,;ҷJH*jkܕٛmddyWXy4{ۨbB üanq 1(R2/Xif$0&nv&֣dj+gNH #=ero5NQo UkA`sNbnpj.UUgۡh4bѺW*DjVn)rnte7/c&ܾDߎK1a?{CD/(qۈYOv)4":C5wʽ 3q%e>i;;L]s$ ,;|K$yo2gOM%hOr89 C5Tl-x2}+(V|"ڿRaȗ۞; %pu}/D}YFmkM ZirdTkFNgelۼ6~E5ɐ(< /vUDhmU(#G2wW[JRFs,"߿N@-^D,bC_=@QSFDUCdv)$3M1bJo 0Ad]lv"F(-g/Ks6!̺BRd-.@7 04v^qUS)o9f*?l)ϜΉwwc)+c=0TѸ! c =/I Q"XXvYr][A`2qC]y );i9،YmJM,DUagoF8PB{ sqĕ?Ƚ3 wgM"PFު=] 骟z^%r?@QkEh5bp/mUiOu vl ݳ|j8@D|U7 jQ1VƇɀߨt8tP% cLPPCȵdXNe@EtU7n7dNiEW"$pUDh{|_I w8";/GDu|z{ƽP-j p.I ?nƚ^Q]Ox%m>I|V{ h.&h491UAx zD Y#c5wp{c;aq8s13,Q83( [k-eYD.APǜd=4Tw4}P(, Աq?AUh[ CT^;o4䵑SSR1{UM_Lulio^$vsT8<_sĦP~u bCm@:vںŕn8Һ5|W?RUc žm]POħcj>.G\y>f҂4bza.e_p~\~,}XA&ˀׄhtS]&x+ä0-OO'*Y>E>q,a]?0P, ps%{$,Kq::,[ȎF(ȓfʒ~_FK\aþ<5u=1Q,E/m'<4(0n5En hBasR&&a:HGJ෨%mWI5R6 𔭛'ڞ1Иmy;GO#c&?c!`$a1M;W^j0I9 9<+325E0Qi&ǃQhEsTv |II[58vROy ~.WwWS Ty> $ʉ#nm+-ZXHhH{u)1otX^G _o),c]ta 6σ}86ur%jMyfv#ݸ CēLUhD݈Ŝ6du"BՂ5T%WE0 ^;WEĬ)N5#"Ju"$ PE_E4x`(F~|}zӼr:Brg qJs7`k!8xR6-8:8;mUx&fֵ}_S{v .hVQtǞ֡+YСV搛g+:7f|#?UgKu4&z'h:/MG]3?G{:7s& jdh[UJyƳvhF1u.l ]vvm>ҳѼuG(|o?Yϐ=`\+naK҄8rq$u*c8xmcjW}`?7I%΋k<-{s{G_=7ckm =s渐8I;2u y)^3:ş< (r'}, J~mdXqY k9FR<-PJof 2]WyԲ{єէ+87:n'귰:"'qV ڼGҖF?SD3x䐪zc)s՛X\3w|.4tHh8iU3x8}ܕ3&]yr&~.'|ڨkC 8(mKױT %]<紣75)zXeh[h 6LJfH~v 6=!_T!G? ^.fBX S~Ht !o3ه{5Vfjsg9Prr]gjl E@Waen߀=3$-kOs6?]~FUXMםpDd,z1$R`wPåh`Y` En(CXT=CnV rjubi*SI̍?+~wɖG*[Һ  }1M\6T oś4MƓݍnT R&ÑC]co$X`\n(dWj?2,^6P6"} !>= 5)9 bAYa!Zӹ>],n3wL]SP0wA},)7ziKoTăMyjXoT4e1ij O ekY z5dfne{ !61%Fsz)[!P3=`֜Vun?{;Tx;V}p˱] +.).p WlMp 92(7:u1)K[p]w&5Ԗ߯[ ,)}]2da֖S&\ `N<[.,QHK׷+N.{W;Eo.R>Ld/\8k;w< z~xPx7Ino1UaLsi_Q÷ҌpdLjHRq=98 ~rAu\I9/xnIADȝWpD+71[UM #u~B],>a٪a3P9aڤKbvLLRma)vh#CO­hwMr2 2 ߺ%oMz"L\_nYќz0i?ٍylDaR!Ƌsݛms4q"EC$ r](, :]ԅXhً $g5}> DP^JM ih!V )p %(mOņ%ᇋ c,й~-G? PK8>Dj*} hK{V_`;Ws>ݯ" cN6?MY<P*Nٲl,B8SuA琄^1io w9 *$`xGŢ_Ea]-W]a/yphC1smSD~XR{݋- y>Saz̚FJWHXþo76oQj̏yRzK41,65iu{lܪB"ilJ^Q4=H: Qd"lh I3V+eb|pԋK(x2ڧy;r&WBjFOe#LÓfZ<>T /G.w,P B{5>=Y;aA-ZD,MgEFXpN-\lޓx{!h(s"^^֥ᘗeis.5#lXZlil}" |pץ ;k|-Ʉ{km$u?zbejEojMo{x }HCDc|zاy]R}6׼?lϖ.ɻ}uwYhT*%bD6NVZjECW>Qh&lKDGz}yDͯ,(;\,}[HJ$ 0f,C過{k}}tosxHP0#^ZeN`k}냳2:!{ ,_#`p?(iDQ4+V3/ch f eiݘE*:CMh[ |2E~[siqԁrӖvɞؙ/)'%E#YN%l&*y&RĂ|7Ğ_30__u;k2'kwPk>.Fے#=x7 ߇IG=` }ގogiqg!)r>wbja`k.Yx,A%CG#>{Gj\aK%*Ϯ[ao- rh j1A ^ߔMXje'xa.^<\שJeFN[Nòi.zR,H†vHXK:7OEd^Lz93bNbxl<][jJTxc?2+OV +5,}!daanc$Ml|cʌ=$=X3XHNZB)ЌU+9وrush:VrXkh}^ `xkbN[fi2v~ف+P"\Y,_5qԼW=8sXV,nJ&JkE/,},@Vn B+=>zz'R;S3? ߏ'`F'0^`Wc5ecٸeZnK0 8Hյ- w_r0-2r?bpE - { kGkz0Xtrb:eB48ot=bc_7N8d|].?F ^/k#Vg"黫?+硌Si!}Z6D!^*._N0o|}]6;=Is!Y742d-4&62^n3yNгaG(ot/7EmiI@4;C[6(&߷%yjFБM]|΁3f# | nxL}0x + Y! ЪMRQ%U=b₠A+OvZ Teej(.O\ ӈrX׀/x\}# gT9\UYt-]{AWk{q@t6wQ ̐>#Vr?BmEpt_dK fuuy=0,R?0 ~'#1cϫY^n5S1cNAN&$*xh\5}E@?{\4+y-eVTMBs9\J<):x9c5=3\PwMn2:FAgEayTkL#}}i`Xyf'vXw ?11? CMzAq㑈x|[ 7f +(rUC!*K+@0 etk$HS*!ӥj!rNɘ{2QGuQ0<""S9> 2pY٢ڃ Q|)vZݙNjUf`&.cv5u[AXS;Z%_`oJ`O `\0dKJ03-)07@GL5vs,~;Iq*w S{4E0>ܬGb2j0+_YDd1. an}//r;5D\+/}Tj2*U4WFw8 ࢬ/[?k9C1g@ЯW(}З xMTF.ܝ1#S}WyCS@-b rN(V,=app.F#ZʠL~3&0={5(X&\nOR^Eo~]qo3)^`\1)ʑPD.8>@s_KctS|O"R.>7q1Q](ښsOH\H!RW8#bgXcuz~𸨖Ӟ?vLvnRV*R>A'v`̰dmKò =MȨ{7zm{6Bdqpl)kh1Zڍ&ટ lu܁l 6b2gT5182:pڃZ(S/ }j1R$ 0FưUd ;,U6x_JX$ћ5,dVSs{Vp3z`'5 !didM״;jՈOHϑϒ,^ +b=R^_ S3+i}NMq=*O:MKsuET`Ώ>+Y Q,X6pDLCR<'p=}~TeG;AgH%` 5%򓳚f2wv<=ᑌoKlx3\#1M[w-ޞPju 3md?(6QM:p۴P߂ _~}lzЍ/13`2mOJȶ4 6ڱA=t;D\ Zha' vq*~V%&zB6q[5!aɡ4ߌ>AnwoW&ϳ+zQmaJQ*8x cgOU!2kFЉmm{R|!dŢ 4gi0פ{O2ϕ nΆ.$3XjЧC]FC@&H `弊YrlbSԀߋn E6e\bHu|PƷ\?ك Xb۩p<^ Gtx>9E-чB(\A!^[оd4}[_$Ҕ6H52'2*/_m[yn1Iw:" oK%E!6=* L.8ȻMǽl <8-۾\7Ƶ#@b-UTa.^Wr%g,+ IkZbQxBۺj~V^˧m ҄R&zGy+DӦe\r ܆ .H{\snrˁ#1ėtZQiG' `]ΐ{t;zSJN`rZyN-s swp zөTM&=*bΈFM\N*Jۥ|a8' <>pDSܦQ&U7YPdVks UX ~^RZ(':u ʸz`j%D:1hrvkqIldr*Է[cnnO!f/v {LяׯԴ4)Jt_(4e;R N;,U*,yhf-ݪ((Uo;*aiSщI.| ꕖdQs-}4μ DisDyBDߧaeHYAm\ށ >;^u,4Gԏn *tQSEE]9XNa7`ݪ8vM! (&q?óS5.˫w]~Eg{4kjR_ tǦgQVIKnds'd"վ.qnC\:΍ 2MJU qB:P^2Kk] H$K`=dR2˜y=N։-*JTi`@Kҹ2 L:8$_>%>v"~v>!6RM ǣN@Xɦ H ~}:C 3;4}Q8R?{oHz^wGcvg307j; }~ iO+j:ˏKdKg?$Bzl&1'QZ/O #@l0u0pB4=eW_ 8RW5XN/*d^/؂c%ߴ6Fm-Vyt3 v{jvZpIk@s;/.:hXa*3ܞ_tTAЈ ߸:?F2*CO"b  ՜J;)ORtQ^5Hk?,}M 괈7~Ц2S#=*KGKbUN99Xrv`3{Sqd>ٷ*gYiU3ӓl2ҙ|Ys0~_At_g@ ϯܰ6ٶ#(}#|eA O m]^ Q(SV?~<ޤCO\PP?`rb='[MbĒz 3a` bř=4 N;׽ M>kd J3ڲǻ NP3p*ǒ#}p}!"WkHe;O$Ym0;ߊ͌kEZ;|t!?-y8[A}FԇR_98!.ƣz5ԡvp55~Vv`Ikb+*~# 32jBR"5(Rgh.pʀ^#ŭg[#3P*\ѰDtHɂp\D.KXЄxec3<!FĕIB_ȎBO$-OQ[AMD1:ڲcwjaDaIu+Q)D;)JD_,v>=9ER/PAon/PVnDc1aW"ċRvUQҧ>˜o οY߱Yef[> O $ɠN112S,6!s 6ȃ4&E]ho kx9؁n:؇f,lnY Ɉ;Cv<#b37f9ޗTll^)P(*Lcx = ^%LD8)< w8#FU_URZuErzh/_zl)m` `_2)kPeZ(~Εܝ${zVO48_6BaƲL"%~( 5e;ө_dMxe.Of>ޔ0aNk4u}D@fsx{MZk~M<^2XQˍb~a5>e":%jӝ̘E2.{b#P_'پn=iE\cCpel]H}j{҄9RTE/9Qդr6Gտ!F <Á axD &gaw"\9YSƊfm4^GnEV+j8+ AD;\+ѯz&G_|)@fҏuCDą_Fi@YPK6Ysɿ5p"3ɈzPozv[LT9M̂db51Znح~2Wt wpVO[߀8.% ØXL%mOU3txRkv+n)~>K%3Cfʀ^UhA7(w8Bsai? !ТIL?2fn4B1|ZRRFut=AC=}w M`)T!-'Xه&(3DH.xQMK35a~fs(E9;/"{44 tH4g?q>E4ݣPWF&l8f !c27N1`7QGKYkͤ ~+>Xҗ)> ɯg@s^X}RU8la`q'",;D$(?D^(1$(IX6fE!3%{[yo\PsGb/ 9P4xN, z+iD ރ"`O¢*"L~A jc(;щGZ_ sEZɪ>T^1 evdJ4Yhtz:ULr.P @}LwooߥG>7 Ěs u'jQeC>HX2)oRԑS|EՇD{H?u u>)xDG^T_!xt0*Y"*>5r~$o&j%2Ai ScFfUVUِv,Ʀc2-|̀v>c?CBYG$(0߼+9}z3jxc@I=pUQzϿ\?E d L whsI{rE$,¡HN/ף`>:@ƙuM%*] n^;9 AaU%J/S{guOjB6`>Ҵţ^nʔ$ǿŘ^S#XGgTWIwK6YIyf.%>oW.νLh1$Z  Xx[B C%z VAR  z[ )|xѭ+~id/ ib7zo!Sʤ_rJ)! z3Ih X;iHL67o~ME2eofl^̋ט @%K\Ͻ&`&V/ )؎'u:no1k #BGe oioC mRFHIhB`ݝg+= i<:od}e!g#jI ]=UDoOGWO|v7y8(##i3ٗa:a%6'i !s?,U^_$R> 9l2LȚet3'q1([?`l?%OQWIՉ(Gx2c#ݠŰPoM\*qZİ\jNQ0#f?Ec/A6]ʆ㱒&6wڷE, 7N dC[Gu4ZkBdﰦìFJhJ$}^T;mca[RN~nݥbQlw@ !s% 7s4>s-YX2ZZXӸ;C >Zz໵?eۈWq }{RjII(B e^0.-ĢJ>Rw8ܪ|=0)ETg[AP/lV%X2g_m Wβ^?"M#5{u+ ZegV aC{aжlD8ۆȣ%rogװ3jrjn~" + ʭذT;UcΉOv6K8Pz+r kg$ bVDamR3l0Fuˮ:~dgyJ 8t-٨iC:aD2> TrΐI1vKpJJIDz1 \̊HdҼm@ WV-3(Y'7'1gZZEٷË́1#ޑ$nG켆аLt7M$cG%Vڤ\t3u:U$i9MQ6BJLZZ*#HէSiJ]PZ=z(e@fSq"7,;QasINQ<&dڢze*^HadeC+`lOgx~'^ o6=xD B`b]O "ijfWTzz?!IT,]7&u#Bޚvs!^";*SFcqo'".^Zwxʋ'Q3GGVSp`&ufN  D6|GVRڤ[ 2α4 {.ϕQ5zi/ܤPSt%Of%J3UƢ>'cŞkʘAAoB,ڹ( B=9ڢ" 8q>5ыh(\,(NP2JD}m%vp]]j:Mxi~gnM \[AJYhϨF2gIn Ětf% eBF`}@ttM1b(uBcZZ+nzmvRNRY`/ BWG5js5^>W4}>qgwL[_)I܍4A! GkaBwPIdVTt>ͧ__EӰԄr 바ZF;އ[ h +3tn iZFe1zH3,wB$ڱhLwblf n<;= 81O.Sha c!8iHq8mnn 5w;\@?{jQqBzX0-6CIaovu2"N9 qOPxxd8D(3&/;" Й3ؿ^#Os}imPDrW" )6N31=ii*z_c_#[6•lM$,P.AuoV8fMfт ~&[Ur}WV_qj2_t}n*X)M8^%^pY>!ԋ|33n[{\~Dr';_GpK0v}Ҽ q2'P8hSGdFʯ)#j4T՘BZJ(4lM҂XtU+Vkf<@qp \-'dVLV/ZjHJuKAv6{U/?ر:Ŧg/g Q"Bc`"ڟɪ|ÈJRF "pd&^iF4)[=Otzc` A2v&}.;W/8hSL]z):hp\L مs v0{$>gd{@J&|]ȟ Mi% 6NG?oF2Hy?W$DhP<9wX<Ƈ-&#+g%誶&B)/oxsz6x|\[G X~yV(֞!~E)<5(*[tשdu3ln ~cBXٽ)}Uw߅4`uxW5k45Lsܼk'u(krקK +6 D%ܰ,yK߸|GDUc:EY5m_Լ^ORlf9=ԻASp9U>lC ?7q⮛>kAaRzPj-9^P?vp 'S>.0^f@B6$ .o 2z4Xb%6Ɲ-h srgc9K|*_-AB&O`ZQ$ S>Qb.Y…] Xv U>J0"-hXuېxt3Qu .Nila\砑,M)ϯa`ƒmQQ[sjS=6MAJ11 J[|iBcae-Fc?a{CQTs\v`.9̓7<.,p4/ ~ ٬4'aPq Ɗ7 )'!ogJ{;ߴ.[ FC$rSn?O9Vކr^u1l\G%on|AjDgxxm Q@tAl s۲(apHž+lk WP!vEhކhԊJD[ڢaٞg뼯9KF OFՇLn5!2(F>:ѦCQvl9M/ ªJ7yLh E8lnu][хibm45MUKsYc3D ˨O F%d(w.~.L;]Ǡ\!:N6zcwbcƦ*g^(y0~IY1&VN~L$VyP­8`bHiɰaeiHj[,]A?9=)i,9(9͈ n_@i r6vObWMmI'_25b92/t7Ic{_޾C6}թgM}]ubjj9E0EJ8{Tf;#ɟC? Q; mXtXVLa", J=}`![p–@Er/s3 +#OBD>jwf%Z+˜utֶ ̤G1́@-.hH)^C<*^3MuJ*"5_vrvvߒ dn"zx-̔k4+1|.Au>N] ʮe=.TVC^IF`3IҶ*#ɛyVYV\O„<Ѭ~20sTD @=xuc^$QFBq 2M|c)5Y˷zO;< %qv>`uPቱG2ط _H?TmSkajk{OsT ̯jl[ԃ 7%hc} Qcge"nC|[6V(7M D߻ӂ>PT]c[ḥD \RbzP%j!2W"2NjbgCH! c;B i!iOk6ZKK,K;Q%]W%"b(fdߢBfYFa#D5I|\8?Maif}"i}H% 3"RufLf#:*W- RN:W=R|̤́L%w&|+CנK3 ɷjWfTYcljբNz9-N{ҧBfeU=5^r*#MP@ SlM^VX mϺzn-Y<0;Ǥ"p|yREm6D  7=>^qH7GhFByۑ[1c063^U| hLx iI|B&vrK|vљ5` _C!~oT`"LbU0M*ւԔrtj |vB m݋@x[K l"Y_ªɭT"cԱB*c8"/(=PAa(*+Ed!BO󿻠wm\H .ؚ\6WªPm|%AO` !?JVΪb;K^Lzp倘FL}wl̼I%t&5خƯ.#_\ Oo!-]{Wڤ-8Zop@R"[aʲvoǾk~R ip3)s.8YBߒ/J LDj Q6ji/w4lXȻfJ8,l i)SF!(L(=se9mAj4~>ܣ @&CTN}(lI#gMmWb!B׶vWȏa'(5\۰2*BtMXqL8sLBʴG) T[ ,GuvAvXIBU3٧(:rs=?@dz(hy ou*6D )rgڰnrӂzLUhr7 s Qv"׭~[f2Qw*ړ;\{{ͳY6ޝF<4n`Up|Ca @Bi;Ab>~OE8jй9z2hpv)/s}g tlj~rT8V3>}\zTD:sfUQ/; ovA\"ۍq2wjd_r[ѴF]8c.S=C_iJ]7|OhK=YCq)Uvܞ1Y‡cߔ.;VAZVTy-[`" !>732)P롾KRbwlZ* M&Kh'lc L5 /i1NLk{U$cŶ,.qK-LfS`#!BBn5{Kآ@؍$"I#%JWJ1_~ Rco3wgr+vZI?JhR/q}kp5Ol@_Õh-5=\n_*ztx~_kJdqn7#H42yW:?*є P}y6x\vO8+͍*Z<OXȴm@gVGtE81@bzW0#2J%EQkmˌm 'FjvnENO:zRLd͘ym\׫B}FASB^L|W}p Hf8[)wM~(3]dx{Uɖ`,(+3ϫ>bc|v_؍fa,vO}e"\p)ϝPXdU5iMrԂra#ht1:6ҒyGśjLw(weIR0:rl!mw~@Bjxf`.5[3'چ.hvˆ#ç8as {(\ml'KBsJ]RddMskeX=OոLu9d6B޴ipUS4_h2XL2U^n%2si8X6`Y &5^1R?x\A HQ*/[wߢӎMF'!=@ū ׍K>9nn\m͈9 e hOV<`C^IDZy|]1zs|/#DOYzm)xIhյRy+>M$̫D ֱ Ye{O)yLM bO a.[`tYߧץ4J(/]N~_ \١\`akPօ4JjSDystG:Xq-nE^LY3IKo85yG L<;:m.Z]xR mZ?x| d$(~Mo7jۂ7"zsCZ8zϯF< Sѹ0!IY)\ ɻ=q5`.ڧ:#ɻ閯.-"#XJ$̂`l=i>Mȱ^8UJo~}fx{p91lu%¿ƇwPӒw7Ge[M"A݇N҃풦w@V}%CF4eXiy0 Zbؗ32V2X*WyԒ]PKa \6*2[uh1Ljn abz F:݈XR.i7<͏f:BHs.&fȀ Rna|FU$5:~Oᇀq͂`@)Py~~>XA)x^Gp*4CM7әlnz*:4r.okDPt~hi5McԨU̙%|t`FkgÍ 'sRh$](4Տ _Eu̷WÆH=|:ˆ#Zf"|})}]=\%ީߎEei.szem+㠩|ij^VoQ=vOΨ-ɷMسeml _&E1+?M0!6w:,<Xn)ݱU+*rg$X##a)V%#Y@!e%aOip(hDn߂mD›6&04y豑an({# K䇜tvֶ(KKA)77p1FHw D{Ѹ>^ޱ@԰u\^=AHzYa)e/l/.2WQ]vXUFn0[ߤ-o'X%VXtb#Jy͊$ѨMSz躊BM 1iz%,>hh򀁅NH: cyM&fSvD᪉$'=L!㜃2ʦ}ngWX7xETMҡX)%r΅4o''co+so.+;|eL  c(j+T铦&y5%SUJ@qEMWZZۛAF6SKF a>iM,a=SU7qG!ϖWɲ8 3N{iTjMua,Ty&bjo[dȯ} ϓCqNK=?*Y,Q\&y)<Gm=-'@XVYeBSu1\!W}պ  ZG;NQy_owrƁq6§W0˕X(6DRy >jS諚ضh+m?W2k94,K:yM-#9)Sxʜò*3Dgj-qt2Zǎ_ԮDoB|nP'Z0 ];+ES%k?L?Q ﯳ-p xJ^|‡ktiF _?{R҉7bDgU`k=@C~M*5`6Yٮ;zl]z/OZ2%bK7=_F:< L,6@P'qkф jO1kJHj+6qƻϗ3hؘjn>%MmAkgFk%/# c])&KrڈhքLQ&bߢЄ"!~ڷl?yWxFHȜ͞fX҆%H)| &-Lr~2hR—J36e^e?V`nSLH^QDm8 Tg ΅Tq=R=xШO  8&nۼ|{*(m*ŵؒItɢ -L0=0{S_cy Il [A/s~sh TڬdhmpU`"ִ$dž^^#Pk6=$'18E 'kH+]Z^w+R;`wiS"m?cmUЪgJᇻ SWd0Z hgVO .m-N|>Ľhÿcf\ďi~9rzE8H0@˗{R`^P?l@Ƚ݃\[18A+]nsOZF|LY`3j h%T 6fXrJ8n?^`l Y ƨPAC^zeKx|peg(sn,<*^M#"H{c \X[2=Jݪ fɯV] 4X\Oèh$E64NP`4W&i^v6!G/(<ԥfyf?[ H#"Sr7ǁcw rZ?ʌ~&%1_F7DR[lo0inH1'} @ў^k+z%HX'P۳ٳݯq//qe7 N\Tƭ~+z\`LʠDȪۺ1ĘPe؜I0JG0i8TopjhmjO3=f~لj^N亡w%~9]z_-KTyZP\[( x;>SPw9W(UFyQy8=-B l_N J}2)3+>r g/2ࣄS(vˏ2n~ݨ")BFogj>/M.po19FEi1·P:DnFL`ZĶpu&Cl. by D!3(RU.yG7D).|Gԏ>H sjˎ}MkklL.޵e .QnZqdNv);Kh³J2{֗,>͸HJu|,o[ I,aFO^5fIN&q _B*_phw+TܝX̚$z4nu,Yü9ٛ1ݴǥ0?[~Ni%g *uB?!$R:wHs(m倂B@4 f.'rQ]p"4]m~v連\m;2lawuiّΣNHk#e>=rzpR i\J<?J%Xs8h(DWAhXōjfY@.QAL{'{`OoX'hcHT tSFoX\ ,~v?sodCx^>Z4Mds?㲛wj`ڿw!$ZR61rwlR2]/J`=$ҎIu' # is'$)y?mɌ^Gu5(/pKœ$*\B9TP?h,A,yUrKin~>.=ӱpA4>`Fn?]m1:r:G|xШH2c3r\?P9up9 }LRZlT2ߡ-ӊt- P_ӊ華R#%ƨn3Ə*T"UYVAdaPrދFf˓%S1ʉܼJϦUMAoa"vƂ ӄJ]%=͂{YqϢ8#OWԶЯs\Pxݬ2wb*0]+א&Zߢ~d35 ,P-ξ9BW{ib˽,jk.I j[y$U)l S?-53%z/"|b#wLMz+hq(6[;e'Awp3qM7O/w!ŦQU>vj*|Bv`n0x2즖g3[wVIXb4:mGP^ڵ7?o~ /Td 5ݡw.R4n'89$ѥR>>1Kg$!beEy H3q+*VU#)r֓Qa-fn?0p+{ʼQx}!eU#M>9 x]Dp|ZJzUϕfލ2ܑ$Mbc^{/b;Xfmd/Ͽ({13T ش p/yXXSRasg9`p*VXëu1Q)U> 5=D:`+_T~Wѱ:7W(НHQ$I% tn'~l=M8OLS?S?u#Lf ;y8tkþBuIp",TS To1`⒛AwSҟ]&]4{:@ePs"qҲ.Wcpolg(+ xkK@U68tQ}fgiNz 9{;?NdOg5Do{Mfpm4=;wC 1y؉\v%@o{\%b۪QGPNA@,aաoД[?/mc+bP=F͏J0)@G #GCnYQ09ASZp|eƒ~fON i)aJL͆"Qt15@-Eh6E|龮y:%mPnn?;P /ՔTs|ڬg p+w ]X i?Ye '3L\e>Mlea~WP8 ]fC0*iޚchi)հE%{cI0ݷ( Y-(GQ9|jQeu0Fts#L5t)I4kCjhzymإM!ecxHu[oɉզ|D!5\>-HwL@ Ⱥų+Q]GC(LOd')Pqķ-03jyqNBi>4}؊I66dOD -(չ(忕q"fs2HЖӒC=nҋ|tT>2=o4Q@%3#T&Tm)8Dž567EH*Gc0:/%.v"ɴoġ:{Y5PTw)roA8i&zhda0=u U:J;mor/&.k)Qa5 X\#scGEs6O&l0)x=9'JEbQ|NMל`RIH2E°ꬢaȏG S3/:=z!;3`Y/x&鮯 i#Gbq,#S<@#i]0ZP<Bg}-x8—+}GlspBk4jS~ԹX4)L$QHD݃q.cT.J,lkm+#_\uJPk mM3 !'Ը>-l|qjw|{KZWEMp!MYY#qҝnjh6/.4I.(8d SH%PقB3£gEoLT:k~%xj٧8;ӛƷmd gJ`淛<&K/X*܃ʘ Z7͋_ù$^9Ǵ_l5Y`~ɁKɭYr:ivP=.YᏪPF2 5hOc[oTzS%q^_""eC_.- >~l(ُr@xCa;ES@ UF!Ӯ9g8 2io>@OR Фk^Y\T ]uaѤ Ny9BHIU*'VxW5?d+2?|05}`"r. =b|& 7f[DêKE$EDBGiK->qW),if,k6?貮E|Q3J\hoܕ%ɭGr,\kJ͂أ\a"Xe|ElZeL2_\:K^ zbˉ,[[zZj^ #q?Ra ڛ !N;gXG~\LR<7;;U5 IǴ̆r.GLlvsnrZi\knf(rT8|U%1A |Z^,O:.)S1ҬFUK"hx6Q:[t' *% A#rk6/qcۣYUʹW?5B~0"v D Et?Kx@~Xk}k#ɪ^WR:"~8GE :e|=rl I0=m!~j/1rgeMzExgB0@_,4+i;ƷK?"5{ Pޖ{[GD7JM foє"K*_;nX09C>c"w<]&nv2Q K;bz^n*$6$g/=˷#K7mp}/xD1OηѧD@;o4-`_3 Ź1-[g:)W;C~(1m@=Dj ǒDݱHw9:_—7Y?z$D=[_tJM- O3;@)1`Z”Z6!le>R>Cu$rzKȯ{)l<:ܢGl2hsa%|h W^aDuM3u2/͂AC oת5є(3[}XvQcFÏ#eUXT-QDT8p:n1=F]ۣ\W6gd"`RMXg|-M&G5kA# q{启^ HMA)a 7f/Ya!@J |]%GaT<8XRj.eHN""XbaLUy/]Wռs4f4I! LqcF" S!E(e6ˑːV]&;i~\ {ul/? d< Z*DZB:dY*/|bjHnlk%%]ùQӡK, 5',a,(Ð1YDv. }9XcƘ5KrNJ.~ŬS}UfQ< >$ﶀ?䲱 2JvQ=|56qi:J:ez#l$,ǎ{b Ix.B# } vsGN=-O YӉO0uXy~c0RiC7J7 Z7/ RV!.HC=Cr3?{nc "tp8`ý{?oh;x>l(xڈ ?ŏ@i|g_\XOz@ڭp~gs1^ !]lf6e;EM˟n!}Z\cH>䎕]nw]@kGδ>AyE ##[O߲M5ȍAYE2oUeOi^cdT-"vuT3bp/8I2#i[wk2}ؕfAq <$C.\E r{hf I 'y>EʴY$ivч&`@qReFSW#)"PR88uט;hj\Ъ˔0ݲZ'|I%Uܥ>հܬc|2@\ԩ='!r_7 f S:!:ȘP:)H()FⵣD)l^h_<\#U!sۡKBZJ%ng_:;o P?Ζ\&Ikk5RdX6Dϐrù54[y`+{WQa{[ihA@_juM#xePt Ū$&_;,=i'q\G>Wf rv"3vʗt&hwﾪiun16L}Jk$ahfZ'Zg-_"i"')!ʐ]Òmsm=J-{oRvEvOZ3% \O)'%g!JY̥ u$>ڨ8ҝԁvg_3"x}58\BDf!/MǺRJ`VQ?{',ᓫh-`]%9蘅2+:('8T3\]o 5+xL% ü)wyrK^ڦE1՗}yYv3rϒ!K ٘2yb$0,NW8H~^WF ; k`=lfޏ& XV 54[s@U 4(ҭku;kKK(>TB hKbj/kƁ7QBHS wՏDTlH6z{TaPe| =Pzaq1,Wl@VNdgL(=} sOm0JE5ӫ"jѝ*Jt GLf-̻<`kn2̭.A+Fxm'T1UϜ9I]'Cf3P\$<+h?Yψul[{ @]DK傲BM%@ W%4z-m$ v/F^Bmg\P"助?Fv{5xN=$P{oD\<ފlqϦhnj5]_ ӄSQj- qΌ t#J04M- _jl9J%R`+Gccvw%]]p.{6opf:'z.9{I!RܼPGm߷+Ȁ :7N[,:Шt <ԎX'=#pJ!ZGk8zgܬ8+hdf]*Õ"u#ؐjbo6ocBaUEhe- 22,Zd>ڿчAxZ\KotʕYlwd}V;, ׊MBDvnbO;,/ؗ%p:N=|]0 K={0Ȧ,~4Ag9\< VTUW:fk!@YzRpi U( #yQSʺiQɃ&vfNu}ȚLᙌ.Fe XgˀD^I7RCRlGBpWp t<#g ZQ.gwO%<eJ1J;.yu+1 T o Vq(q|-p͔TzƐMc_pʍ3;q=)ra&2Jඦ&&sDgkWChh~b D~i[6"I`F [X"K6sYM͍X{aLW''SgX"dtwnfΫӉԭԌ6]Š3T%^ɷ[xu(w~ڈbB%TSk3)lr9!V J%U/)c7"tfBS7̎0mS n|x+Εcm6zriB <bvI%$&; ]8M <&ζ.ZOVPK\XT:aF<dvZ  6SxU.hPyg<6q@B4E\.G:'.W4-3_Bw)E""Dèn9lk' >B%9ZwMhycJԠڐEmXW 2PC+&q$rS\#L , yº `D鸳0|;a*bI2B]wQz>܎_ r=EDL)GWcDepٵ@H<0\F]z8ɶ<"-$X?$qGOJCm5 ::pm?yFrPMkz ]%.'F5J-4M_լ뛼LsJPfODUn#=f('Ȕ&N*q,I0W(4iQ/( =ĔBcI.8vΫڿg~^*oLUNn+M;ѾG KKf8 :D_Orn҆@t! 9WryCð35~I;$X]JlZ8G7p+,ĶY4xqð"0a-E3r-+=@ ]K(Vk,tpO## %JJQp #-a{ %F!c9 Rr9gѓ=Z_h*P%=P@Oghfi e 6!dWV~2ewq$M}6rkAƛko/HTayU~8992=$1.1ё@?_uNi{_@O7^ nL"l}*>J&kY$3||L12\ 5Mr⽯6q3Kւ^,IK5@\8Z +yVXNO@Z/wop3=Xh#YnK/|S\O7x%mzHNԦP쩱2!:`O_VPEeLzC%VAu:]\/]GؑTZΞǺ% #}_ ̬Wc_3gF`m @yhKmkXN3{u]5Wd/<vi5wD{X9kh*z3&lDb~)F=O|G8ɔ)&iDjkhC38* 0mЃ^_y2K֠D?jf g @[U˞^Z P>gh,@k{>;\\&ln^H!: yRZU~,k#[̞"޵u"4S n pZ<(M~*[K%^Sg֬j}縉d?|YM +|K!g5}&X60dYX9o,}M){j+aP%4+s#AXqfPX|^k28C n iNVeEdŤUNV0{ƟtU17_nJ ImPɚGkeNo4R9d/f}`ᰜlM$%"RŽR"LH`-T_~S`koЯc3YŬZ {kknh.5GڒDْϸf5 v>;j;We== Aie]LHPD<'YSٔJnV8SUG)97sxXky ?/Q[;=>@m0/+ Z#;uLKFPHR} z).?A9aBH?֣m?]"`Ľm$rFl3D~O'z^1.ܤuKszpmZfjdÁ;oNmQzW 6g7PP~֭QӜ rc1%vlYCۂ.8;_f o\9Ux4".2&MZ4At; 9WHER ;Nm@69.[zZrK M jAVުV߻dp2tuf-"E%\z^ӂ=ُЋL;Ɏ} gaih`Ğ-b(O1V2>aiZWjgF28[>Ze[g)ɴ)V 9=]T+f"M~MPN5bqvr§p' Tc!T-+8%br3Z/~KߨEkT2D[2^(B/J! 7v6?_#o]Lu|_E._ˤH<4J=fK7&ԣ|z=0a )KӒ5T*΂:wP2"ߍ{J?@xlj9?4VU & FVi?uc[FRR{\Y 2*G[EiJ3;&^R̶_xo%,beph/:JKn{8^tOhJRG0ιO'd*i uI3l15']e)!b69g*7AG ,.7&{žFg! 7@Ç@tC²C^ ^yw)a\Ƌ/?&+@ycI:$߶u~. z oOmtl<4{"fFX& IDDy鵻BxkOۉ\J,}R}[zTz=Ռ\@uG(Oy=i;C>3gQIIqY.NBb'LAԸ^ZF"͠%KlӓY%b(v(٧Ǯۆ#6tgL.)Η ndajKbuV)0dA):T }zvbmV`:gjYxLjIb  q)^ YzWnu}2cgФYnšץh^fJ8Jo[6dv&NRp_\5"*9H1 VM zixzbY,(%zE>Y+[|w(J`z^Hampn S_pcMm9~2KG# k%j# J !W(lŸbڣAGnKc ǫ*E^f{"ۿXa_ǍWh0Tnir8굇qetŅޒM$~BBӜOٮ3RƩi68林Ż* ]7cU| Dx׮H뎑L1{0dD2ڎ%>*KoMKRdF47x嚈(mJ{ 9n=4bT qۜkp}b+(Y?5+Ϥu 7:6*ORPËQ$B  >byi3VKQP Qf7mXcR\9j~I? }Dpb<Ȉ۲K`\є(KOŢbz9mEPâ#+VhR>f?A$5;W7vRCN?G85ٓD-|Ls@*O[6Naj5CL\k1p ]ڹxMf\IۚӁu]s6V!n^έu1Sk-l07E*Xd8Bq wWٌE&5[6'b"jlwbU0pۯ=+4&3frmU@7(+/q~BOb  [b5l29]0OR:^2A5?fg!KJ8Y6kXx1djR_搬r2?z ~qvfaDc?j"G@CSBf+8d,p9n_kOd:/zdm;i@:oXtN9d{r v-0w#㒻k;iݺg%9̂}n"Zn)nxi`&X9fzgO—uvkYX= eHn7 SFkIYrlQcs EG(J1Y8(ݜ1~w`ՑRop w|0wJwI 05skV!t`/B!H/7炈qd4&?1BIR1up#fIkvCXOaٙɠgeл $S .-w5/1Nn$y8۬:_*5hL@m kYJK |<Bu3T ].Ӊ&8A2Z*xz,ra!J65@j<7̖ߟH`E؟;VLM3 U&f؀2"&wCwɗ:}d Fc ʆ ] gbnl1H6t=T^wT]>&;f"|2HZykέӢ2/=逃z~| =.@XNu\rj$ _j ÿ 9>AK&1>c)"UzuRD>Y۔MB;r.T+hI@-!^& +;Iǧ5{H(K~;޹Z#I5 B <bj|=u|Dy &!;l~. T~FW2u:R/hɠu(KI9[YW4xFpm}GXV$}#2 ܞA!{ݎT5NP~6x\ V[ؠ>5ՆJ-.d= rYjAG_U?5u8BG:@.mϨJ}c$XEI^So4LYHշzM?sڮRfu39gIwtL\lsT}3G~DG!Bd8FCm LG9 wR覚2ahCd$ՉHb6:a(v>K@oiO{rVrVT#}]:"җYiϦB!:[򞱪ou!s;Õ M[KHP`W dɬypAԳjmGKp(J\WxܹbK|E[7:R6۟_;D8eIYPN33J UL@}ezѫ/ƞ9M`oYD2`@TLtmMD4QX=C8L^y׀0e3'`|$v\0*LvslmI >T^Hv|NF!q~\\k SE,NH9'2,Oc~RWAhϊmqr1/qXTy\aڂh>;:V9.(7EpS>`K5} m\H)UVt |o䳈wHsh67(lDlo>NU"2tGFU; SE~[ڦyH~/}&fl A)DX/JL#mt9~W_;a ǣEFxJv!+^cQpcxC4AEF<Rhݤy2YEtyX.7-ZEZcD?+X,X:O9ĺC o"㜞1ޱ˷~"R.# T&Q=Y- aζ&H˹wL$n߉9Fyvߒrc,lJDF[/LqnAw|/'X&^R![Dz?Z)5(>3<λ(W7g s ) "rrSF) 8rQђ\_iPNŘ?Gm?յvV <:LTTII  YUNٗxG!_ƽ3c-8֙<+1?ԅDjeo,o ҄a{`3K;+iaOTHdaV$O)Rue@zcMٯ#l{ $et5T|됭T .g;>um+jCeR-VGۦގ}eI 0ⷥGЖ+2mE\J|MϜVؘxrր8o,IBA\]e!G72K+6O87r-r}. 2 >4Qso [{Wf9C*}'RI*kӦekr8㾖9xr% ٙ%{|?-ZhBY7ri.KkFܩp0)~rPΨ9w [˭D_2mI @fhǗvH)E]O9Szfcl= m5` -nRә6u14 Okl/~[bJ̗,(NKn]()D8iWQ$Y(gDH_It,4H0+$[iGAb 2*w^q[HA1\r'M/ ̓nchU )a>e-tA0Ol4iGs{W݂br*p<@*)'m ؏%@/ס5&kށ|x)M"E+}Tq! !F *]ǃ״VB./I9v# wWr3f{yow4:~FC*]obaTB4=;!`XNQo<)7eP~M O4R᫙w/9ypfKY]S ̿i Xrc4>gx8$Eo>ˢ*jZ/~F]dLW0<ŷ^I83&nxd +Ķq u-'毊M}V@u|dS5;Qwxv5nWDF}W ZFygUC?w YO;R7 U;cZZ>C͐fu 'U`XS\mMRv\V\]ccq=[ҁ ɣ4UƝyL jE7$k 3c+` BݒK<3U_&7P}j :տZ6RbW޸DC&4UO@NN|zT4Yzsk'εj~3MmUʐ_c^Vqb"k9la0tM{)ņ}H𳚐ϺLZp^#eAk_2xe; dl^g-=Nȑ ĢO;)}IܤHKn/!)HLyEM;Cro0Yɡ aSxvB-@#hRsE f$g29ȪzV32sA`oVW߿(Qa`VݷpKPN^0l1i\ O. +MPFFqkƭ7\:K-DPI ~oL3NT؅~kupA{mRvBo}w!g ,^s>(fR}OɁUǤmH bJjҜź*em$nan?U>߷wZm¶ H+B*i>AU2c< Œ@Ea GFHٱz#Z jc>l 9q\E?{/8l)޼]dVCzlΜk/CLp ny_z2.T>r}ܼVJ~ǫZI"Mr-Z>MpP@m E4שrD)3ݯߟlղ0J7mSखpG|eOQn`Z(x-l=y:XjV!ҦKdX9`aH 2< BNyxgP]B1+"aݽ'M3@0J-EɷTۇ?4x8jʸU|UR6Rձ=\x HZoDuX$q0HtEa/ɏ?XQEhnJ. P~mF~)ݜ\Ӽ7BLs8+FQ@LqO#S'bo9I5֑%.onJτ*.x шK|a2T` TJ^KZYɌÇ-ؖqZ#?,bX^ʪ%P=;4 dm1sY7m+lxV2LEX[VG+g#}R\X>qZG'!y^Xpg 6U#=çw*#5Kښ՝!`Ok;n"9dQ{X{{>H 4*M,E^R&I*rDEK%fee#z/vI;{DT 4ЦaErBW_h$ľ?%I< PHL5Z> q@EZTR_"!9Cb+^Cp!aeE~4yӜX%L͕ prJ\o1wa<4x|Y;!+a)N_ #3Et߬𘞛ϲILoM=/ J~*OV Y(yLyۯ1|ϯDž_ J+}a #Qf7CQZ, )ѩNVsC$@Ga8BGFl)+S**@Sԫ&ENXhlg~F:8No_:ub=dc D[B'wy,SC:;{Sså%B 9fIшצ]J6=Hcك{Hr(bWqb=ŹčfF/_t Ҿ尅a2, F\7b>a8#y}"{k.R6cc7V,ڙ #~Oajdea?WOȫ7kV8sZ}/Nh`A$&FNaU)C{;RW ,>-:i(2&%?euYR. W x0K F<ӬH݀3kƁ}ޮtNy$I߉2` ]Rґ(H1>Q/?49r %#I4`8D_stXE8qG;PT,ї[ M_nac1-Gݑx_ ǃK^<{uLX !աf}Yug\S3XcyKa27w p7t;ȐVz*1[]09B^c(}ɡQk=v_Wy`N=ֿ!E j$ഉ>+eaGzwGckCHZ%${`!'VEy0c|ÈtfA9^sB7ᭅFG3pQE| HBZ,UhiP`~-hOG<\\TxSG'3Nȟ?HP؋kH2'V={:H ][6 O~R |qx\@mZũ&~\,Lո*ҧqn;uؓGt)UzԣSTś0 { voPIBwK.r@%R=DoSR*tW؝t#ՍX +9/ 2uÖh" x~T=+ A\C%וK$~U4P/67"[f M4 *run]гlN~tz"o-l'|I|yx`BQrhw)e7=^S6p{(l p5k[9Jr`es+aghNcL C5`g_6!=ld%0Ri&f6ꑘIu<8fqPaB /E.@B 8b*W&] t wGgO+zd;,Rh񮍝ԗXiBO|v;?;\,Ԣs,>#akRuwrӥw0LR5-QipSšEI@"`,YE'U!\)P9g`M¼tH}.m`04GꜾsC|WU>cϧP^A4Dv7[: iiN~M:tB*r/ʮohFS2z7WH;_{U_ǟbN; VPI~:VЊ>di/J'PH3t3BG;UǑ[,S"T++4Ȭ߂c9Gx ȱU°b iQʠ?IzNB=dˡybCXC%R>7,ry#X:?)r!EbuzA7]>A5eEdH8lOpA!llo!x Rn#v@Jul/-v}ȍ8"(#1B#5fHs:Fفw*L & ;6W"αl9ǐ:X:1,y-?Uh\Z_v[VbGw Z2¼g1͓=Ļ^J6 p FhnŐ0uZ"w'pxW`5geyS$2MtQԢOOUȝ,Qk?kn:sVq7ްKrϽkPѬ8Cڃӓx< 6Qvc7eY#$)~myD5ssSQ4 2O6 2s26ثw VBiOE!l/=>N$#e.28Ax'H:/%3f1FxRq[ {xY&jo;kOC!) m(9Wbʜ@ [`7팠}c^nU2MĔ>~*."\k;#:-{}9M׃!wrw Fa+}xޤp#@:?xxQnqDraY3!g7+œv-]I R8ue b[rEmbdbEsL͢y ^:Ng'~υc7]d ʻp+HNP{Cdma\~de !Bt65O6z ,|{ÓPty9~@%$)PhrݵnU}>?x`]:ʚ\>z1YNd{ gM=cg2yA<h/:H ˈ1XYAQ@cFȀ( [h~tNpNW{tb\FÔQ!)xUjNY>Ly &.֣aYO_\7GsxՔ\>E Sy5W˴Pؚʝ ?"4U,ΘMV xZBxT|nH="жT3ѶT7:jԔALkFR΄(1~/( h{j 9sPqX9F+\5+ub0i['jN,}nŋ[h^ЬG)L2_9$:\E,ÿSc1|*k _E}22iAqH?VE{}P\}. 講`u#\$f9q M6 'QO"5*E9/`^@KH|$fh,]֥ܐ=5.F*gf'/UX,@hrZi"'j|~pN{yUN"C!,nuMm_ezZɂ1䌁)*؞VL HP;  . )y%{{`.7\ࣗu^Hr5lB`܎S}6b;m=jFTܢ[!ņxD wM2.uJMc' 2 YjY\[g v5 ɝja'yKq*=-0"܎R [Ouo IJWIIxiT{guGqӯ"?IYJrWuH+kXhdU\ߟ0Ial5)R㏱B]uno2vDR(A-mZ_7`ʾqpvsΎ DߩAb08O'G{d.D )]_pbԡN?;TqaZ͸L |c3宨Ce1JA쩒_0N Vߣp G4FAXS-1oR-;Vo?ʴhK~inj,Sf2 D:OI}P%v`CdՋx1ׄ۩EzJh¥3ۘX3Oï\T>5WeijZKk9Ank%wASnS*xG8Qn6M"w0#=#.KB>c9v[)b@վ]Ц ! SM!Q̞o4DO"ԑk4^00Xwn* Gӆ^.$izݩ$WkesJAB<>$-!ڷ)y6Ю/U6ShD+]}@|WdװN%Og%E'v`Ut8~O]exa!!- B3 yeS P -i\G3zbf0 Sg4w~5ܹ΂?3y"ŷ3M:u%|Wӡ4\|#KǹQ=b~ٰ[3?wNBӑ`XǎI  feaK>r1wLo2II*%GG:S =гճ兓JFz>goi(?E362m˩MòMw0P2`##+jll(5m2 N؜:@"Ol/xbT/4$+4nՔ^ĹǜP3*|z2GlLLid/ i3Zt9 Gy@6aS=1x?䓜ڃO!;ts):i"/fU:Y&H6|*CV#S}=bO]:v&'Dh;?07LPZԲDn\2V$kW$K1j%WB"ho>h ƛ/JKJb/NqG gdN(OE]554~?֌3^F<5uQi&Q~w&gYTjm1ogdTIR Va7nv",8w_CVi]ia֞Y)9VeY <~}JZ mʼ-Y0Ԯm+B{3Rϥp.#bl䋬6 J}q2k/Q2$_ wT΂\FK*Q64Dr7)t@IAc/qX(fY9,&Zn/j/"qe5Kz4[Mjdd"w]eNɊd-NcM%F *#Ayٻ2`"嶗#2e^.g¥7!=ZrAI.FקG-m_QK9^tBfeZS0GL)ٲF`Fa a x;]FIZ卿>D*EDII3k琷=P^]8:();װ@'$64PҨ")^(%;zxV8lq[N'݄ߨUR (wP3+!׾j?|ucMN^!/ C_\\L,]60l爊1EYb\L0R34XMaCo~tde_MvU]6Ј]8 *P H Ep7ctQ{TsM@\UyuoR^ʛ0qQq\ķbBJF22 gN$vl&G%k׎LA4Y+Xj#vdw4#o0Nݒr.}tpf"Y6_9[UӴ_t؆Rǥ:-lBbD6̸y?4V}s,ݡBؿ~t,af؊V0-Y܇ ȡжA0x:?d[&<|arNu1ж-P67a,GivKM v//iWMT%װGHMr3a3_zK}N]'K(sUPS g˞K:D}@dkܴa;؂#l)ؙ4Z_]x{zefg~#L΍ tl\׵#3 ="2#H A lOYG*LEIZ<EB%6|eʯ[`Ժd0*o >s^Ep)#a#85e g}JLʸϜ:OJcOβl4hql$9(e}RUl.l͊&=Z%tYi ]z6im4c?,qU]J9¿Y]XrĐ_,(ҹCHM4y3$?lD**sI$+)PÆ( -}@ 'dڜqo"dN|n։v% ( gCTOJ!Ji8RSU61lEJl#S"Vo:qO1B;?ͥb[BΣFfNe@K^_Yv2uYj SZsH =Fu=#nqYw~<14d2M;< cB\L.0:U#4R#ir1Qdؓd/6h4ߛQB.޿:~!6βIb`3(m1%n{H6qR ?X!ܥ q'Os@}wGsؤ'H8h4/0< e1;-n!8}n_, vZև#Q0L>^O㠳9f,=-2Z5႐b_O"R']r 11]~)z3Wc.'b;ga9lDzu ]xuP03[a7uHpԖ F+-n}Lk'eKDAqy9#qC<=ݨGv'K,Q{̗&Pl C ).Ռ|a (Ak4Ӟ? |]:)hm6w޼G_un,\@p.y:GݚV3FzM[f>7#x36(v=.u/A}aP lh@fduΨ6܎_@h"nstOS"QSAyWxO=#hӪF@N6MN*9+zXM=uUlP3jOǖdۉPd<ƤQX]ވ+ˑAb'_jNB lA6\ҥ>g獆;rkf*\2YrSs[ |"mK!VJ!ɉP<RY[PS Ѭd.$A~j"W E4C/vYQL%-WqNc;+Y4fY *K/NoL# <@-6 *"Do>CO2(G}Tm [7"MZ/`\7B{3^{B-<<}DDg|HKY^ݢA;3^ ѶŘo0^m_e4rNbWBs_dVȬ k;%]_o5m(NKxcЫFTbgOUOvŌڣM8wII!{n62؋sd%+#j}^B"mA>Tatmx.( |zM2T)WCkDzBj),\/9e/SH]SU[JBՃiڨ01ܻ &݁qOBi󆇖RǯK4FV@wdhஉ&?)F!}p£u)1[+=:DG#29mYZurQT"UaPݑԶ)g~xA8WX 0(dn+4fd[H7Dp~zV}Ʒ2,ATaAqE9y WU"~gh/kX ML=7dE 6,'8d>u8 [[sBI wѳ/FS7U|?gb.d̙5.ib6<'8ӂ10eМc$LSNhho+Ap"D83!rf1;\T8%:Y`T R+Xv,NGmKr`Hwhς״Rc{3!Coμ'.ALnጁihZtt$-iW c^)Нa?o%Á]S[s<} 7K8Xs7|^8*C C_c,ma/IΣ'>wA*CϽ0sĢ2&@_w0am K+&fϘ&CBஎ> 7qǷŀni@.snfВlfah*}r_0]8)P6,p@O<NZLP\jGbF KlS*ԶJҸm+!e*\<ȌO|Νj\}].U2ρkaj65$f?Ϧcq X^p9ѿoC`PN 5+0w{`[n*G|ܠŬ[%:WM?n6..B}XWG}JH(V1PvLڎk2R"D=:LpaUS|ZVvAI&wcO~ٟ$hu@(A쨾-D͈ä {.R̡,9"EߵJ.>Ҿ/2ݤ'uSD}yNeeɡʗb?҂?_' ##<=lqiQ -@b+`r8OU交L=Ԯaa䏑"yk!!nUXǘsOJ Mׯ ecIö(EMdv>; SKPc"9jqxl6a5끈R"Z'eʍ)u4/ Z"R b-agzF5 g\t5=abї#0!N7Ştbuڔ 4~CeۯD>y\a 6\JR1ՑHo kC\ Q WBAj,C pn#xp(pD*(l n[ =6ƈg<QY"884'dV/8@'AhMY| $bDvD_P> ku#ތ}@?i_6 qvJ ,MdW(JO®$Y7Ҭ| &q"es2NpøR]}PK#K.bt~GQnHT_14{> c96pNH-]l N299xsdũxXwB|6 שiL %> @q+/F.ϥHܬEu^"=f:d =*?ۅB`d@RP 0H)Wc9p97EO)zX)iYD\bf҇j@_B, _R |CQ1,>Er 9,rtX`X M(gM)}T E۪0#31ImwGⷛPʧ.Wq hx,ӻ垲&:#3.*L+4DmC/m7]R(Dpz'wQ])+Kşx-j;MLS7Y+`ҩ[[ǠJ2߯~Օ?1 P*l.Ջ-( ff^Xl}ˤ}(ޔ[ ?l+g,Npna<2ko_R_=]thA-2u*uB&ȵin͠#+~7! KbA%0{#0YyE؉p^7ɏb򵜦/*3"gԆ< -e}7 WɟدՍvCC+H8Fsm%̎;;W]ھ5}Fae!=Kv_m-^;)LGYP.e{]CgǭW9stA@4j}|pR MYpZh*iMB p6.!lj<[ݖϼ6>XIs TԤ{HT{%jsQ_<둺Hu}9[''tt)+򥔷WW0LIcӆqdP=:*:䑁bBZf+{n=4JPt8NRB\dW~wh(XBhz5?zj w :|94P/?tm-RL O[HFr?wVa- #W}}5)W쎥89مaVU ]L~5QN6+LR۷[Qg]_h%? GqC1'W#W,xXLd3 KSq rl 1#EnKISKdî~oN̳We P5se ]`{T"9Yjwg4A`hwV_st,^@*ؤ-|!<7g @ͧF&RX=hȓ r'߿f46ڨkia^g7p6Yl7x-(x= CwL'2#w0wig R%aoBKtrQGUR V-MZͳˣ~e\NXqscY2҄X}o]-:I6t" }L.m\ 0Ae I`sfv>$b`B3~>yaa'9 І7e/%Zj2]>͆]BpvZ ʍDNI.KisUw lF*t?  k3N Ul~`# |W!¶~ eUR_,6S6jd G򃄯GTK'3|08zޙ@i+S&Sc'f.US+-ONolQ|;a{8\IQ&<zC'.yd~A =E}v$CwVK1~䘵=|?/95,4_Ic~DPU\ κb)վW V5`j+XQ+vۺp@TQ2nVb%*6R)ۿ9Br R}|[C:2 裠?O >Fbm)YMQ (*/Ozݡj`).o+V'8f.HL {řBĸF4Ɖh9P nJ5X !B.],tuEӀA]:## ; ZW3z͝$6WZ?lݠӧu6$Hh/SOSlb֙#X߲/}3"Y4Kjϲ}O |YI۸ 40cN>e uFЛEl1:Ĉ>^Ki4ڶr(x:AA/T̜YJ!yW{$ZL<I˱O޻0o d.= 2uQn$s{<=yޕMĤY~Mg4tz [̬HʡU]u+i؊ }ߪ6]<GfwHCwXSYKTMH"9HvUpB|z8ȷ0}WJ ωnvYP>i( 8㻴Oԏy <`8;1W`LH4".awGLȳ2nJ^DBDH?5¯Cl<U dU$p30цƉ!~Y< 4]eVlOZOiOt5lKյ {u}VZ8;S t2sMւ 3MLF-U:.o2p\َ}41UmLe4E~n37 QyC8Uט߶;+CkT% {OU˝4apmebZА$:5Zm2q{cxk>V]p>Hw'vSD]ZrCDv~:Z$VS 6|Zs٩Xn5{9O*3K/ Z'Ts\PlpP86I0$osoXkQbQVNK^YE:E$'2Э1e)ۤ HiZ<-N?$ع]!;g5~;Q; hd= e#Z孄XC;hvwAD9!б{fP*rcv^(EqS* Or-hY+:c=cth;ϫ-EvCyJzҫ쮈#ZZVup!ڀ;PMYDOs}$+B~j. qg>h(J7jCZYq2kٕw6d=y 8wh]#3$(OmamN 83I׼uoj5ɾg.TÇ`Ovfl?%^O;Ԍ- O~=mj9w݉gˠ,zfK SUTfF]N0 &x1HNȻd6$8X՞'r8Z4W1ưw)WL{hH_Ik=g]6J/?6/w)ӵNTc*E~?}35z^Daq8wu9BldϜDFAx# MW` q;'RG;qՔE>hal+J,p ?<|)9^'=kmYBfs1gDX$o%Iw.wAs*4 uNSb,a|J'өY%:ֱKW[h'fFMQѧ+15yETէIIr$6+(f pM73GE2@9ZDDА`KyQ5Kouդkmw*ctG֭/wN-7Z bIJi>ZdqRH``0"iә1緕J2DR墇kM,Hx]7>M@YvpJf`DC&!)UѠ=B\@LU6@.w[@à'% ĻIKڔ FXmCy)]^Cf{»|bZzd<?IF Y+3.͠U{=mا~OR&'j2^ceGʶWCLCbLqMv,@'&z2{= ׊ 6!9x+ ɉٽ|~>gvldNS;=MʘlZo{, ēפ*!Xh] y]IY AwMlaLuD q'og$܉0 cX:mT&H&`m@WO3UŽ2g]hy1^ŝ$:4s%b ܌œEp"σ^{ʕ. :~&+x`?$l¹|1*orfcf x<"K ' N %K[ݣI*3ؔ=NƮC/UЌ#ˆ™5SG(^gKJJPIXNowHBBCT R@-=Gg*hi@"8"d)1f~KƷPՎHR%k p,Z0R2A-5Ɲ( !Lտ5CnǀE.24Q94ŀ V-!@!{ML;x{$8Lu0S7ȏ9' G˙ƀVߌ -owPy76HjGcf@rXt]~ 5d͐KCA~)EĮM{V3(`ƀoin8 :2^P~$ToCV'@3ϥ]bZ,qwMR;xddzeŨ4us\j;L%)r['i"eC+ڌ>Bm m-D՟݃>J4ȡZH"@+oWrv0/r k;Sǥ<*Rg->Mb@乥wRZ2dGTQw쐳5`A)bE4 6~%!H]^*]]HZI@2>jKAq6 8=R 9%)p~6Y4׮`MQ^ Dr~d{C2ܭS/4xU_U/(|M+V-9G:v?jʿ6(2pP|V QF 8 +٣b4[6NӺI=Z_Gc%JDҶ} jQI7 ؆thѲGkCR$#hy`(euнZU%Ү}ƅ]plv&=uxE$TWhʭ+F>Q` jKN˅ 0z'ÜEIkˉ $hY4lA6ZWHoPn]<@HhndsĭI'(ԁ]b_k:VMK'4Gqh[fNMX8!I1mg$]Ol]Ӄ T1pXނuTo<ےQK.y̬eX#:s^j$΅-`|疭A2 oDȐKTL^A@~L }d\Y0{erw(}ci3qi|JfpLu6=\͑/g-TW„z(]_7$,ao+NkDBӊj;Y3̇,1fH!hOɂ F!gzְP:m)8Xb?`_g*KvN5*{12`t& oJS,c4r ]i/C~}wb;!923N|8Fca°jl^$,aE 2)m޹iװeD)NO'5DD-hH(']D !I4ŜP֒pMs_B:, Z?C(Uc,L@n`kcR4󝅸{tʖo[Y$||*g j?"gjs\u& ZKN.>gRxޓ(DCۍ#q %;=}:W*z?5GbM*Ha v櫨^UwWcH( SGݕ*aJoZf' =ߺ2gVTI'(`Kmߖ,Z\pAw̾OA;VS-h9,Ύ,˗ڡ OOG>en ߾ߓW ( 2;P96H1A0Zo-I.T@lBm]kӝhX:XxalP`3<$V o(lE ᵏ=AáhܚL,ԸڱY G3u qbu`Y[k]RQhBAi\6(lH-*]m/1`䜾́\hܦVf o-F]u9ҽZK|~}쯚z gsЯ]6O)7|֣IU-GSI.̷+Rc t֍llNqQ^}rzsb>.cr!'@.pZzT<@n\Q9s"s%%X5za^]Ҩ5+zt1@ZYASoY+f[8]QI|iʼSC15 YZ?ّb,͹ìUojll騀,wǞKvҗ] mY=]$ޓGE~C;)a#Q ,}yB SπԿD z3\B"**̛Tޭ*Ub^0(P]궲X{{' .#] Ջbn꭭ "ٲYO<;V 3{j{F3q.3ũG4 %E᱄LAVLh. iv( &_#I9#m=ҍ⢥<>dG\;5s`p>W,lw+KO@ ~x<ֆ5//Nqt䛈1 >kAY¾zC\jD>R7JOJc`ZjHJA2.*ax0f#>u[6w .p<2`rZhhsۗ]ni߯W+Teχe闕[RSNى^j3mLegđBrB=X QYUFzIY3Ђ `ߊ6L ڦ/-IiD-D>#߲Nep)8 +U5% *wݰ;wp8A?$pJU ,^oZAts-m|їux\G>"d؍mF_y][%p(#wD62잝dP[Y* g(5#oD@him`vp_e#[;G)X!Ǘ19Z)6ՠY$Bnۤ&YU+F5eRi/|&3jJ(1%~t1LAW r9x^/_RDv\^UU *p[P׹"QE.ʽ_5s-1RpxVUr~CZ>eͼvZҎ_Mi bq?i`Hg/S d1z؄1BA`1Ƨu/Dk%aۼa6ث[)N8~aqs噲!Ջ1>,nC.ND#3n꧱D®Fl'p2i_ Xo?lOQ~ %&zǹꖤysv43 n, 7*fEij=\#Lo5W EctYht9Tz6>X DRC(3u|5 `U& ro<@[yҫI;lԏ犍.WmVm; >-],]*)Tfɂ %&/3>8lmļ+4Q%}8}\))S>;)IgR8&+ߌ ԓ3[nb W1r/G@ˊM88K-dwX;.ae":ٛm_j/D1+{2#sW. :-~I>o`fNV(>9[W0{HO~C 7!y8]S<}n-\FI?M_ųYʷ] `wϩ!o^eTsE| (mY9CK Rf1]uL7$G7$˃j/'z ұv 0o|z%%ˮ_gsmUG<ڳ멖;f3VD eZme;!0^FNۘl cbU@q[wm0}a@!*^e$UR21꿈dA R@;OikEZulk0Q"}lŅy\^ 'r暧Wίi47m̪#dt5G:(rNv]Վ|n21੏lJzeq]@{S+0Ljr~F(1a]SnY7\3+(X={S w$ >DsS*՝nJBbc$Ws]U:8 \ ~Ǖ-:Ӊ4I8r1 H'PE:0F=KÜ뫡iY;UUP }%}1XomM(n ͻi݄,v.K/jյ4a aA sq'.` P ( E#Д&nF8g}K0!]gʬ;5hHA6H}5pj7=9h$p,HyK ޭ0\wd(|ƅ*SyF G *xT-M.˜qN0蘟]{}Oͯ!( ZR.ty@Q 4(y͈p+d{@C֠ ^uPfQ dr@y].GSoV&%!a,rPSe.hLhxnzF24{8 Bĭ8nHѪR룎5{H/p=!8i''0քȞfm:TM0E *U疫?s5jST6_pzx띳h5: ڣl`jT~ϡ!◺"X;OHN}F ۩PM(l Y>`k 0ʄA="8P(};pY >,bgAؘӂ遲Rviv=SoY$I'OĞavz%" +sȵi{{i[z(\gH4[Cq!2\ \vY~;&Eż惹IǕ ӵ!䔯bIp3pf{1$= 2Α.JxOY2u#qư~֚Fmr_}ւ$Vb1!P~RU25@4Y>f:CYȜ#\;}\c|On8RNV:ja|}^< 뇛V `D|nh5}WA-5Q?_0 ۉ逯` wZ8e͍QC1Hz'C/%b]eu9I 5fFe搬L\@imc+S2]EH?FVLvp@` (2ngpo.kxT0۰ʐC0,6YVLP U8{0M X_m C}子FWKZBc݉Wtah|ge~7U|dLeԣOL2>ЏXuzb+ۺ, H;>̫/ zE1R @;rTe&jaکIŮW^15:N1&#Ndnh)$ܲaHvy5tKOm_]{# c4.} V,G'$|qZ6€KNSTb P4F3UEHSօ\*'=1of %n,o%SVO S8ټO$nm.Z!Gډc LH~PO_3A=H=`o-HS[w rG%Zߞtk?u)ZϼIj\m$V$~$^CJP:lyM^*Ti\뚭COT&eOY[ć(mg MS c*$5cE3k gQpN#&0!SPeVu70K@v*6Vl=A~/oH;QCA@l ‚$![P? t gF!Eڶ0rWq М^3xb lޙy-g$gW"v]B˦Ś%"#pFfz7׎UWv,'4!^c#4}1+*s^2=)hBF#rjB|ڟy|.mH^^%ҩKWX95@.mK?o'՟V?~|nzxe=+們V !b;:cJ~K1=#@~s$[2̘*=1_A{?$`[p;QdžgZ,ل:1XuWxp,`JePt%{$6޶Cd{,r;P/\'W#w1$-0uLtBVI @T_[@Hb{$ӾKSGVK% I.gZ4OȽ g3Uku dXCi5 j"S=CN۱I3Nq+=K慎ZY" #jeyE#!IE5qG}+Q\[d%GD}]y} UoݗmBq[H5f; [ Khz@ [5(:@$oM{iii>1?ʒOtj~}Vi4` \<&yWнq`n.VyhPLVwj42XYR9À(<(>K-[-/V' Hszso}%:ڕj 9HWק|Tl%ז(Sf,Zm*EAgتچ2$L9_5Xpo:Oz)'9_v1itX>3#1KK.S+Sߞu9þzvHZ]ᔛEMNj _DW6"nsW "ļƞ_oc"h8nLǟcz/P&F\~dg{!v!#8O±[ӡ wypɣEfZEmtPZKh㱆a1kBI(5N! M[v\@xm^ծ,UTzH'Rր!ω% 4is[ZXِV}]U:\ Mm. %}c^rTd( ?@6r+غ8c0Fsc cTc6˪5K k^滾ÑJ ,6gL3wf3Q?v]@wPjHP %yG|. 0^EH vg*R0,$+Z@bahOG7E?1f0(z@H(÷[KR ::˴EF~xpUwvJ/->I{$4@<!`yǷWw|b?um˒X~!Z LT^5 9gd6[k uߍAT.41 <}Oyu@=gL_TemM5e3ƵQ2ޕY"`҇ ށHXNVLxKk>fM&EIUH29+ SMzZz%4s$B@p1im\ ਒GԂmNVKfY@U 0!#9cӂ jE`eqLd+\nSiv 0uE0, ~noROhn΍,϶d9܁^8*B=5!ZSwT(rVJ "AՌq0x!h:UbkfvJ{j[k֬y"քX)|k"HVn^`o֭ܠj~U޹l΢$SIqc^4 ^,+GŰ>8mu?v[$J\q⁙Fq8(s+G,ה׏/zT$xgu:.vP~'Gp.z(L`sc8$#Kh=>:{DuWgF=mkFC,z7͚2g)JYzidW-3ԪHtipsw?JNR$ ׮{C,þo帱xB1"pO(+9w#q }ϤRq/WEaȀCM^ )̎t$@ ޖ}oI5֌kt%  S0.>%igyL&.Kq u8XdT4FqRUN#3;CetKfǺÉ,ё1/Y!YGQF?z9ry.Ό$S#2_";\5a}zzҊ'釬~` N >*}Xބ$gAYXO2mڧr|S&+ 0@b͌Îd㋓!:O!H3F0϶R_ 6/۰hĊOn#l_5dg+=%Z7#ߌy $6Ua%# ?0Fx%jxT,U=)H2߿b̺0 C'T hEs' lJl g4dX ybC]): Mh|Vq{AOMhCF詵). ś Rw9 9X6)W[UASx˂/MGUpq`MV:4>%hX;x0H䇡Ub2ѼUJA մ|cS#|S=nVx);c[PsC-e݃rE,W7V9؛x;Mt}!ṵWK{`4}%tKN<,V $ \yqMaҵCpmbvޜ^ #YKZ+u.} ?6ʅA>BtljF EտN Jɋ9(SaTTY1N0MPo׳ȮJKUj&E|gp{Oku(J,ё\Y ޢ{D8.'T[!L&*Z{$T`~HZL0 %PbB SB^pOX~prH.2GU=&uuWgWZL9\R / ¦ta}c VaՑZz I@RؿUZɎQr;ɞ-Rj:9Xdw"ʖM6\nӬ p[۔@pZs ˗2 T5wMeʏl4Fd{2}j-X]Hj*iQ}!)i.YtK?n@y^¾#ʅd--Ԟ}_fJcm*ŗGhk[+]YzBzÚ w5#ic.wpþNWa ]"nc%ة4u]5qD鬳NEH&:.!%8K'Ebaa$5+_C՘V4׽qF˸FTY\e=* FIsYL \^wnRJXh)wosb}LsLTgMh@Dr8V;b/v͘7pTsjN/l~3_vtl292cÄJVҾV{^Z $JDqYM+@P* 뒍Fρct&s:lꀞiT3 itzz3{G8З|Ѱztw^ƜA:YoՂ^;AJ_C'àh) ٦C}"SIީ}d Kb[ie6e8/1-tONp#W/Kuq-GweT*w.X_5Xovs,*FX 5$LցKf*zdMP`R>?(֚ZYX9AD{>we;QU+&1]WJBK9LKg/Fȕ~-` PC<+)Dos)r2'Mn^d6!u$>܀o]iT =?{LS\ ɖ)ydwrMj(6)esȶr>Q)hh^KE{CX{`i$|V.Q*+"}j-גf*Q'y.7i$# Atmre7+o|w.޿BAL֮Y27P+raaRUu):eSUW>y-MjjrB+|!r}ܼ:-X}O@wkMjl2h"vHXJ]K%g .I grOԳ%G)&c7#8:&1 iy)C mdM uMpi&<{e@c4 ƪUGg l B [F7`MNO*ފJk:h1ܷoÎx{ޑ*wDZRDҜ"&˛*q|IEvS2L/:qҸh\+<AS.8 ʻ;>#^N󘬾M_*ib*Aw'gs隀shPzQ^unV_;gmBJET˿qJ}}U;r It;~`G9iyr$\U>U܎pU H`'IDϖ LArc NmAፇ\ЃsSmON: W{S;]hYnBEbAU̫*JYJXn7oqieVh`Loox0ބ"X?j R-&" ~~(/)s/.J҉9]# V|l]m%EymO~삦L eNr|s[UK6`"ޤ#6nO,rBBEToŒG[ <쐊 MxsyKi:}+&hR+ :RʿyM.0%M$@nfT?9[hjF6QNJVاX˖r8c-*B3j9a_a\BHp뷤p/e/V+RB;jfYfjTHO n@0/"2HhƈThENwTQPsBE6zb6(IF@JgWz^75& \ިռeGGIm㰎/sׇ&O鲇v!~h{apډKky\  4JLP(@Y(=pX[Vb<  ŘC`m^%+@8*.h̍J%szQb՚I;8G_:!Rl/~ YZ@&i"0L߾1t,7>_C( Զ#M!69=^Yɝ3N!wDkoRS1"iB7P޲`(]EhKu*pz=1S9_cxї;SI j(T=Bo[a. #t|+fjH иc -W(F9p뚈ˇ,GN!hh*x̭mT%h/噖yQ›n,YaСGQK}kA7dowWrzLq :--ѷZ)Rb BZoPH99M,~7XA1&GX&u 2Ÿ6`3& (2gԍ0~34f/7gUzIŞ,JSx6kpaԦ}m~ [-KUBԡ\0$MՏӃ܂F@ЇuQT>B0 \9$,0S{p8|kQfJC-Bw\H% 37zJK6S.߁A!nŕfCʦ"5-鍜o\\cSՌ?p`))4j3yB8DqOZLEWnkD(lPͶQ^>2@g|.˰^U ߕ83 'I! 40d/?ww;\i@"?sWQd^{;C,vo)$f0HC{1 0-1db&-O[04& $4fc3}U7΄;¥91\On<ȟ^W<;@XLM"Z3GTԽ_ ,u=PG[8W sY/*iѫ~wMMM%RpqIdqG Y51Rޥֆ4uS &ױ>?_ QEٰG]BlzYd E`fʏYH$˸)HR)8ftF` ɸTF9:?Cz<fӕ|aa0[qW3"R(?.ED_lv -ϏҎ$`n"L]1;<>A QhTSoM~5O?f{l 4o,kC WGr? 떙8(X{*η`h*ѳ-b@,iL^*-~n3(?y6 H9mD GdXtO_;[X Nq7T 'ˬ>dM {O1L⏞V w Զxg(WGjˬ%nTr?Khz:S~e{C-@L耭Vex˩WTc6n1΋vvV7Tڐ#M=y[]h֤Zss삈YEON_x,WEi([^ڥ4a]0`uHbݼwJǨp↤5td&ML$RKm@{J):'^Pm]z"PԁDo7<5{i2yGIa`w[Τ=~sg9o-R0j=ȡ8DdHCbefLQi'k=mfN̋61apew:cm0 yG}]k^6<xG> R,v`99Pj/C>&n;%:M \n[8sQZ`k}w|Ф 9QpNDJ3 c7)Cf}cNZsEҌk;狾ipexO%4Uegqq-4YqZa&fw:NQ4kBR|"Z Vp .q( ]0 58['zd@̨}uN BG/䉄쏚A>;jԕ.8OcL:Doֲ \%1j;moU%+dEVM)~>rDZ?8uRG͘w9/Z͛Jv-X=W[k2jZ01HF ujoIm G3nB5l:%;][wM6}%CkeJ \P&4[b(K$8[I#q6나i9S=h*ZzT+%}o q5I /4ɲt": ٜ6)c?{k5tҪ//xoh8I^-~z&)5 bB]$ߺI>(yt5OlV>7ªc,jkW8fxEZ&\:&꽤zd^>1r=XKIkWK/XPG^Z&"mgJs *DvǸ|csidiĻtygtT#:.w@z &C=pgudQ#I_bwoOuƥUCKSrqQC&kBR7ugf!A.\f-CP^J7}=C6NiRhf!l1AW~)' Y.pGHFGYLb ,b9 Gƛ/"/aو #/3S{. hsW±%\]_+U> F8L_HTYO)z=£%ùT9.[Yl σqFy\ރbk/e9QLr\qtL4ndyUc}N'ֵzˠ|kzXg`i4]:|\b XZ}J* aGrEdI`;[p WHl99ME6|o֯h&QhܩP3"H"3fvAI=jkFjbCtjM⊨QRѵelDʌx׮S{j'* 8ٷTYInDᥰFezJ}1ԾY?*)R4(r[!ç39awF^5C+43aUH4PaeN8k{/bDG;!DhER {X qcW ;~"”;`(nX(L* F՜+h(PB)c5R᪌h{G0>jp}`'- =YtpjR\i=F0U)dˡ?|p|cS-{Ea !gd: 鳡үWa}@ p\C$M@BAQWe5?(}4Cq,栾Z[C`DC{<6sp)ޏ"-K"c;l[-tvD\˷MRkMTqNɳ׹VZނ.x2y#'_ЏwK̐< goU֖?˓"YbRQXoSKhHJHCYTaĥJ*7CjhFdWyz}lHx`B9'z UׅYpx/mm6\siY "S!A]K0#^LH9ܳAE}}&dMeZo:T5vA&JrlO=- ,Kь~$Ĵ+aJyw@ 7P͖C&@@h*ͩ_]tjǶ;$"`*l='7MZCU-*6(rk~hpi Nb'2D@mrEF41f,%Ο?TR&㺑¼B:>%>%>>w!;6;P~q#QACllHN&|;Z7M?:LA}5sQ :on!پ*> N%\b) +mNjIJYQg^l*=k71805B|NbY 1{yW3=nkC.v6?f-MD e#/'q!"܀ ڼ4G4)NW4MuӃ!=L~n~{ v,w݃m.=oc*ƗΜ4f㰌‰Ӣ(o;7"뉠FEUnˠ9`+#)4T9skb W 嘀_œ7KK6XQ05$ ʒ[yfj9Jb[vy4Wϖ@Kk ~TwQŰDo͍@/g#Q LҘNq:hi1vL+Ɵ}PAjaзf.ݿ!_!u3ŧ |$AoX'ڣ6ׄw7܈ n7j:RfԿtvEBgE9 9yg>- vO1C.S(#ETD_ VBMS`sG( PMvrhbK p9[y?M@zO$g[ DT~n岗i6'_P2'-76R'4zC#CnRȚb5P):U?DH7YٌC2+Sm`I"!Ǹu,>c>Fý)j4@,n4 $,4֟ Wjv#}v_NTF=*:n-#1H_/q25KķZ%`0}ҵY|$ 1)GhNKT: *>`0cx%X?KKjjlqxo <% G`ԨrDi$qO#*LmEq嬥òabc `WhZLj!9!_: D/G)ёEِMbA)%yVf ?[B4GS0K`2g UXt`\g#p48KԾB:!` 1g9 uOkQ>Q̹-#HiW*s -[QIxaIS Ƿ*i& 4U['("ŮVD?mlx`~Hʋthb3{$Pf k 4)vF5Cb4 gijȇqC/E#RϦS\6n0XM8y gŶcuE(Jk3>L`DQLJ\%zAӜoe{y0PtDguܤ]e| ;}_kl\}# "ܪp5xWp^nI$Ywjh!<7&<pDH}v>xo r0&U:׉ ^X4) خ= ZDGE)G+ u0>[A)I^ ҠE;2B,d m'$ӈ3 ,ef;`G ?(xi7;:X"81F{i N1Ķev+;Ec;Ñ<=~p_/]mh%Z:(Mξna9Md ę^PfZƪ . O?`drϫ(NV_ysN؉@ǗfgP.b7!uEͅ:} 9CӮ!~+~mi4E\OT@9XaOpdz<<vjp-r#PD XG9Z8"º=aҖ2jz>[>hNE;iM:-qlHw-I{\f߮ s'YYlrZR ?k1u˦jnɍy;nYC`<{ "gQ.\_@D DsgH*6<VVuXѝ}\TlP>dj7#Yӗ՞tsW|_RmHl3,4 9Q AL9*sT>ٟ$Q;pK?6Gk_ )MZFF$h+QF$VOO>!@7?N?MYD?4|`{ ?&칇&s&{2bDyt}ӊ An^.~ /F BBب5zvO@sxS+¾SKܺ t-6RG`/7s8JHզ&Hx'ٹ`ɛ/"Ywlqr2ʌ.ZwQ$;&tTG&-@W>ʧgW \4߆=?W@b-Eǝ5ẖi&M<)K/aVz-օnRIzژZn`'Qo}-9Yb?*/e4Iqܡ Ps7>EՋ }J_+W="okD1̩L(o\TL+Gfd1\7:SKUpڡ'޳YPhe#9A*@7|ezk8i @QXeMB~fFܒ|(^ډE rӋrۻ*,XjX`"쐐!5*)$>5!]g~Jgh]6z%W)%=p r dl'tXs%-ȉeax׉΁]Cv|')M`"P q˱T 0-pRDabWZu3)fhc(śzN: `WY{K/AĭB[mhguj)zkp"_WboʏlR8ſU 6U+5(" z[C JktusMtIJR¨bN'^p,b&VTq#I .| Fգ?2b 84)9.00!.HnC3L=~IVԿ6Dg665l.nlIsWpXhfQ eurne|O5׏ TEI=U0Kl;vΒL|6ڦUwCblKT@B|2# &rrBLD( c֛NxGӫcT3dC AvAʣOFbN.@m`5S5'+ԧ2 lR(evY=SؽyR&^#1ۈ'${~nJZoS H:;Ƨ4bGrlC;hGXk{a Yz3'3ٙdQ.=24$w`'&khP:>m`;:飏A'י.Lڟu&.[sQHKnY]+,u:h#Gnt@e~8XΎ +vnr$N2E#A|@J[^5"eq|藦5] 2SSN/fԆQ8PLgV9$kWrqޜb9ξ"N~dxa^r&8D& c 9&Jnp&%r'&_<ɔ',6{zeAVNb&u_fLN1ZYh#)(rq0:ћ4~Dr\mtBŐ(Ҿ7Jzl۠u44AtW އZ2G!#{|H~^i;+]܎2Ts{)R6BaX,^jߙbXRRP_t]{Sjӂouypt`oa5ʀ``3kj2uRK`X0xsj4;+!oOr bS/U*N~ZHޚYMfiVKL5i$bgc;`p?JB u{_qT-s-KҐ?~9Obv =:n v}DQWs7 z<=\gFj">3w"\#ȱKyn ^*Q mC4 !zb֖K.̈b.y,t{QXI'ĝt 2Fc[s b#?[oGu#9*8*:%|qξh*r:{T5wS=#ڬU4?0}= /G3t[ 7gRtaZ #AGU; IkF0qaw>P?Dp|zܺhs 5 7:tKMѬC"LMFS)(6jFuuqHRCcȊ9^ dhۼ+zyc"ֳO6p wr¯]uYare j_O1cOgZ^G ꚕ#^`;-eB|< 7ppc),ܼv#jhRmLj a * azG@V" (U N|ELC0F9$#qm:}K6$$}0'~x X[ սhט9<[AnEmT_|zkL]zx^&!O |_2=XDeW:V?x}_m ~$@TɊe\9L՟):H05h. >KǪb6D)]89m U vc:{j,[ jok4ˊ2 #EU='Z@WwmdeKӲ ](29NطC" #{SmsC㥘;ς v8T?,W忔ArQT(hTK8 G*{^*ƥLUѮ$D~KB:4>UTesNNB0VՃ+a^FpcpPUikp(*$a#1R>IBO3)H_ZkPfɌ>w |YG?cD)aOy6`7L҂Han9=?و+k9s&FRq~_̯m"#X^:z/7pmb[f3[zc#I@ؙ X=$ɛ~O=hI61rcx_,sDfx34s|>0m'PQab1'>^XE CҒ[k`suCKͥ 9nY+fbV<h,*V.rklPIJ8:QrVb;/hѪ\#MU.p( %D}tRA}z_Tqn)Tǿb'pkAۻRl56"^q9WGDYiht7)v<T0 &u+TO_46AK.O@FJ]G5y! rK7DwSp[>Wys;@Z?aanRY@>J`gy4|\n*Yɭo Aos1mspƶ(GVqP c6#T-䷄hHN#ʩwMoYQQtVQKrERCQ`H՜; " H(SB7CIsl> 9~3"kM>m˴R8cry:5LfqGx&e|n-ɟc .vU0:N9^3pKwv,NcU" sy : 't6۹EUu[*f)c*ryN=@:~Kr2+dy}V![S# #g0OCF󀌿J-#aIA>!,0j &Ui@\S7*Jfb`B{+ pS"t^i!f܂銹kCrK*D=]L%>vz/@_|.ҊP@?Bf!8J/gH `zL@X"o 5-n"ˑ2IdرiNbpg(Ȇd(t#y>*/ ˍm;% vͱZ"q&0+ŊL|NW/ "mbbǨ )vvt]כ.h{dhVQLz$ЋJLFo23KqC/8{{G.'Ӿݐ8PwILXJy -ܞ]נvkHyoP[^0M!Krэd޹χe9')˵1<:G}֐f#bA? tlJO ϲ4+Ȟ/p_jc7-){ wyD='Dpiq t/ ܸ7>)W럙W,EZwf M(O1ICvfp$7޿gAͻv(F%-z5x0kߩIƉnkK,@NE"<yY~xʾ;H9p-v*k4WÄ6iZ洀6.?5C/<dN0;~9eQlz` E˱i3ɢ8ȧncL8q0J[KRibOWY^8snpQ<^㫫 wdVsy1AXTp)ꄿ8eꉢ&C e^T ۻ,>Ddƀ nWtNx]bcl]ϓ^Me 5im/ KQ%Fq_#&hfpT{pcIXs=®뛑b"F wS^~N\zGuRON] ̝-| Ts0zAC~xlP^.3fuиY if/Ct(QHhU 5Q,nSCA`J3qBS_es?%ng~.~P;J$zXM0" FKX~HϘ+z&phtu.,e$ ,4bS , mlJ| :٪˓G2Guh} 0Z`#t'1PZPMt94N&eʯ^V~?!AV&Pw!r(7`4F~'I3¦bJrC;Â`rYpN,Heo .8aS*%x)^okaTcC$ E0_JwVE֦:N!vKJ]1\?^!)Ӫh} >#$JGā"3@wB╠f83.qNS[&{\N~u|UM/:zRlރN9p2 q,}oL.ˉ yCd$r6Vu{ v9dQD<u`>zVKGy ETH7Or</K*y}$xwQ4:fdDEܧv0sжFG&vBX Q%z"5>+i8)(kԐ @Ȉzy' X{!^.yRE0{3ҵW%g^՜ 4fș.Ețp:z` F.s9GŐ-']/G!A4<,+jF =Gy 1~9 s=Hghvy !wgI&=K$ʝ<]s(Kqty!/4QTǚ9%rf+7Dy΄=~rW"KTT  ®oܧc*¹e[ QX4ߔ.0v60,q׵nѰ.hK[˕W18{-_;Z.Ւnz+3-%{D˾r\4a%%޼k=B:z S r Fy`srE'5m XN6( .H`>]>ö'vMTjs|VS"Z Xڑȋ7MȢɯ@~A[4&U,1(ie{'etbfލ 3o DqNXLTfji%_~0z/+S~n+WT7hYė}0Cudpdy RՏ:N:r# EVdcKѻ6"bߜzZԉ[ 5EeJDJed÷Ťܗ"\[zv5ٟX(@XY-UEdO/_0FA<_ܛ(u@+?/bf%HFB0oCn~ U}Mpvs?g6)n18E#*bӟ[USrϔCq#訳xV?A[[ր* 9Yؿi:SDVU3]-ݩق.Wփ#t8 ']]$S*簌|o6qὍ0L#VU"&ڋ}ވJ\핾06sRa<a|Y+REdg݁"N~{=;(TZ+{}0`u0Rc\HV|8*,JC()ig+MGtīlSyW |N8x)i8:] \_=O]))x}~IʘOޚK0[d KĮۉPszي94 zt;dIeK%sEd@pޗ O=IUjI 7Pm}2h7Zl4<(]Ƶ |_+LW[ˮχkbp:WfLFAoYxC;i& VAUT97lŜ=a~$>Qyv/@} y}$_)sa%8'92a'S#bݮo򘈺ӗɶ=(n P\iCy9x1w|De[MmRJlIRU!H:~ 4z}8NSg0l=T%vb# м D)9f#" KގM??\gCJsgve[-h6mkun x&TG4~H\hWDO6rU0 TmHs'{Zۢz[$hYYgkÒQj!5#x?NMu] r+xR.6@pLvUUS7:/5 腯CaI|vۀxNATF 3ExNĻn LSڨLDVȫ$i.6.w&܄mGYE#FN6,Sh( xe{'ٕsUL(T`Z ǚZmD]>>[&SڎB?5dY bh9ujF~$yށPT9JDd^];Npf*CwO0d[DdG 9U&Ɏ0,mWsGI`~@#Ok ?E K0m.@f#3UZ2ޑ;ₕ0c.Z/EAIhzӫK|+aR=82OepŁBzX&& _5* 8\m}FK}m?@oj(Vk+fǐ-B4rO5BoV>?q-$ B8J\Yy0zK!(נP0\ ZWRUܪKo 7?h8k!D{vI,> OJV곀g~7aGh qArP}boV\9j?EmȒλ@P0XNã1Qy0 R遛~78pSONdnKj9л?1En X 1܀lBd3zf72겼$.mz01V>ڙ_g| j' Sݚ4!Tf?M+1p_&e0r1טjuun@-potkOmzd.p(TPp<*־ܠ xy?4Sr{YTﲼJi&l[TNP V <J\O:7َ 7{"xb6Ӄ^ ,4Zߕa{hݐrw5Ys^b)~'m \8Pi5 =\Ed H-ҝ־:ɏ#J2Fa8^A̙o{]g~b}~19 :a9?Uc1(?C9eh'sf<= !ռ?56<* zgJGd} [q)/gGuS[wՓZH%ugV4*6d؏w ۯkJ#X|冁%Y"jVÖNkj̃'NCJnN1UYnOfg9R5(`li5tS&c_ G؅-ftMM,Sz #\o?_v~[cVQjXM}^2vfmM708|bC3x>ӶXQTô6h з'AgT}7pNF~la@uL{ IdϦZ~v:4zLH#!.%O1{<S* fQVO&Z9?Mz{$},&qzf:)a8GJFm#؎%-}@ X3{酧?MY{i](nؑqkR 4]+T*?~AX\Xe Ō|qP{)9U+ ݳ}bP>= Fq]vH BU UbY_ <]'w_.6#w&kR<הd`΋CJ(ct 9aXP̅m'DC.,QXY&WuFQAxzd& )l遇1ajx3 T.NCĺ XӾf)R=90jd} y9}IKK-b<ф#:8'R*SsODP=[#-AhNV(\;aq}4@o KzW{) ebF)A[Q OdoHcKm:-Tj)u ti]ѓ_J›}RR0xv{ …7^ճ),ybLP ENfC{NeX`Iuӄ(Xܼx轤&Պnw̨rIU2W~3JjJ9ieE5~|Y8Q',5Nܡ;sÁ$fVP6)/XeSg)y&n!s}nAKVpdpJڷnn7:&J8clk.B]<}h93ic2iyu6CC B"bZ;\& p^k8U"$>l $;u+Qw C)'z O&R 8;J2`x5<O)og(i,t_;gXtJha9M. 5&Tl( i| @Wq/a^amp)DGk1+ŭ?V;YNR;,=,- !l]d,݉5r,[QqpʲcDdYi`!l2tqYz@_} 쿩:~T"E!Dgn?M7ЉY٤ٿLY m8$/Q'KpkX-XŮd\ Z)_z3s\J7?9(&CU2˸ƌz~xTTRxXsʮ!V& XͫN!Y(&;K-Vz Ogr+Gl7;nhLv7Ofh?XOLrGՅjô\ҕs $΍>4r?%`_@3;j=%(TW𙢇ߛy|]`n/-P_MIɈ86,}]-+60LQBֻw\ܺ@ߔU0 g/i㗾q4=kPSRz$BL!BU[>ȑG~EQgab炴?\+Č=mhQ Xh641u:sJ] ܱ425`<X֔AYAw^[m/Iwl6G_`\@f %$wѿq#*G$w':% stO?Q)ojC49PX+pɱF5tfY 0רz2Nߏj:f"H;h^*%RS۪!F~ܿFL#%pYTCIљtќ7rp_W\T~{Cp-CǶ}FC}D#>WwqC6<gQ]pAԗB^I)?\_RRvԨt)ɸ;8\îkN3mZ~Zn,ĺWbY0r=q@N ڠƸI9`kD"Uf[%07wIS=Jttp&M@M",rc\pW׿$;ݡ'ѧ(J,) H jF3 _W ye2aPYiWHy.%қq[EEJcCwSzfxFW/D\3>(DW"9rVN.$ϥ'"nǙ{3\?.U$XFp6ZGwldNyγ-dp3l'ZA'+ 8yZW}`;pJj:9;5`Eo5=,AA؏Q%=Pb4\a4S,"ňKd+.HUYşv5§ 5+@ړ-Ԧ'],>2Xbȅw3iR>eZ8@d UjdWܣ!2)? -Im6>G4xqЕ:0/qnri`eVluS}~Hߑ@~p/+*k@,SSg7D("?*VqeTpv^I*SR8+kX6(i5A B@k~q1s @z<7Zgr3! N2'Q1w1r/Y '/0pfԫt؃zSmD.Uep-ym`8b9FGHbjщ};\ fL  kkϰA[EwUj2)x@&O) E?Ue( L}ܑ+;SKZ?X a"Ke&ڸ/ l+ʟ́ mkiٰo$&2CYikf4MHTE.RarOΑSHg `7"yǍW=MH 2'*M }GaH3|jZVٕ."$.SӚ}۫lNDħEmZ(%);,8ӻB^>(PUɶWbZrE#U J5X`죂+q:J@CsR)Ћ`TcB,>pq!(|u[Yr0< L-/iPrWTC% 8Ko= THM oc/ư(EqDԽ7r|VyUA(B3Q0avZ3U[!#˅ygv;3@  \ε'`Y"A<}5EiX,dCuqd/x1D6 C~%_(7jl׳Q;/ɴ91iхiHW}tJnnmlܡ㊦ _A*]kutkCP7vTe$@/#<{6~g᪛NkE4L8X~sҵGByB˖AcvCЇCϖ8Er/5h2]=Eh.+Nx |#p\h6m H׼A!mVEY\ٺZ jْ560{^AVˑ/g"R|i`pfEk~ DŽbN,ȣT#kGբX׸[[:Ql{l_$'y2s#+GHP`/s- Yܠum]|!׌3t k371"vno,4iw[@B"M4n0Λo-{]:3$LUai}E_!ltG2geU["+xDZs @UE6bXpvNX^dQiUk^5YoW8N974YW9bACuӢ :e/+6M^Y: g"nFʴKC4.vO&WNΡQiz裬Х28,vALmvm/Jhɋd- νdY{tz`d8:Wơ,J]AY-00?R46xh̞KSw~sRc Rj):AK`ttQq(N՚w'-tbk[s|6CY&ҕ|I=H撚} vo> 7GdSXE !LvL&|=A#F?<¿ v}550 _ h0 lj(8Xn^1֎:fY~┈~u!`RG$$\擎QAW&5GL,\%]Pmk+կODgQ,G2mH0^sg!7$b:;%|= %Mh {kz˘QX?ٹؑ%ˋ)S>P -MTM㖫2RqwD.q[pw PxPBXB[`f5^gËD, s3 7WA \*gϯyФFibz)ٝ*XRچT@M),^nv+9'-X0*4ݕ+5NFzBXb%2׳R+0wr1,V@A|2h]S# m[|P$ W ƩJ+xSynBS5oy.WwgP|ttufhP4~v[6 ?s!Dgaen`5l3@ɇ-xu@I t'uOGm(' 'ⰸM/2E vc q2 y`e(cqp >'gYdeƖ1BAVcBG4Q y'ؐY}x뇺 ؼӡvG_^v? MY %`)w BV`JG1N?Yeͮt_PLҒ#+;eKNv;<uT2E e*:V\iKvN>W=HXЫ^!s.cDŽ8$(QOjGva/а4Yd0C6uPLY4M0[' 3w]o"k2R;YDcH ]Iw9="lv[ $6~Rg4J&:Cwv6;Όq&K"c7w%A\9`Gr%)!AdfaHJ|>6`|$NzrՄ aeCFOIbN$o4')WubZ7B%%  vzpy xV+`f~{M7߯$mG SOIFJͳn&H ;P>莓aKnx.TG*{W4qvqOPa$Me1*f.`Nbʰw^+},[cQR$˙w4i+ZR`b-]"fT$.qŭiՌm9_e!ѢM #ҩƫ2WxJgb9vYIwvjAXI:o y\' ogm!UDKyZ>*C?@:TuO)H~1N\&7|`cyJmܧ¿Dz{WJNC=V>c;k/q;,b.r,Yi:Cn`9UhY}#,&UuZϯ%غ.-5˜a_p[ h/xV?=Q|f_,^Ñ'_MVQư<|ܮ,(U>xB 6E^,pNxj[hQH]LeȌzC0&SM)/gzUaж[B c|MPA䔫u9y~*D#F n;ԩg٠=Nauoh3p1NdtqQSR]9DBA ̫,5k!WR@JAlzܵRj<š:6Ͻ6fm+7EB0K\@ 2EjuaZ"sb>!"XQQ8Nd!fdszыiT5~zWuQ!B&;Xq p^͛,>yA]9ϥY3,H7(E3h%)J<?D2IJ:b YjaԦ.8Z fpm܄b-ex|Oo%Msy T`ז3u/BN+2~p@{Uɰ.]DrVdј",}ejD]Cob\چ{mf0JiߔH]c.Od,$/SڷR!!'AMYhDK0"#8w' x?sƢ;蹬XĘ(oUu[QxG&zX+f "K;9GܱU`$7n*r @N UkQA1{_wF &}UP'.7"ny^[dO_sI_6v qf1MJf%u&t'TK*<l$׭SE}F8]=9q,QȡOnGx1Y0ar4nhfR94,O(y2jۭ+h].W +BޡI!uE;Ŝ":^joVNFYG%8j$hLx3l3n5".Xzdvo$%apQyWoX-0b@"B6cZ ۸t@ @uSukLHl9zyo]{􊙼&6Pn4thLnF얕}X272%[(²ԍ%U1_ ¥|lMocv/Yp]mJ˷b r_+$om>Ó Y_PEH(C4 7I;@,|1^ф[MEƨ<;6}g5a;VW(f KeJM7[q/8c"i|1%Ł\?Dqsr4HJɩ$tf9*:<݌KAs 'P@fp)&븈3~[ K/H5Ӳ /yJPe1,iKsTn"dwDi1{LFxQ@3sR%߿;K c3˨I@|0څ U5?RN4H(@s Ov_7u uHՆ&$Iy Ku_fgf,@& wv#&:>> Wxc7: TkzZ w Fh4D ̰mvk-⁣%BC\.s,`*m◢v@8C2Be>LBKtԊh}̏L'x]W8Dѵ,7j'Z!nbj NZi} i)137GHg;3mP:S$Ė#.w,A)f4:Cav~/;sۿҭ EzkJr_ u5' )*ET,w:N\v )ahIxmQ:<r(fɴ#qqtAɏk*r%ZPc$-+t NrbHM& `H$5z43N_Й;":e&l[X0f܎^|-mXB)xaD!mwAV*)v1`&Tŝ$LU2 aC'S@͋4NքPg[Ҽź'YЇO-eKb3z*/c.6)é%d< %ˆψrO)гױf`Gu<otS;]KNp\csFT : [-L*xjㆹrciGaJs ƭ 6T5a; }So46 K6 RgkA)bU )ji O'YL((糚 IxC맕\,xXZRR.`*Ix"7K˔w)Id_èd |XO'&uܥ0R4ddvސlT6j'Fw P$y-+!Xnx}wRƷ*=|<` gϲC$η#qB ^uH{ɫu]WDɡtL9ؒe57eaK.*% Vrl_DA8eS$YZ*C&xq0oJ][+AYK[ڝ?oI5{ c7Lhwsbl}NNg/q. sF⡉374EmȤIX ڦvfzǾg.%6zŤ(BZ&A+sSɃ;2mG_&S *h9^[o;1{}-̪@T.ADY|gHVku̶kpu"S"C[700=M,WU<@^c$z%=j(EӝT[8/1,iS:0N4P6K~fs϶x ~@# b(Dc)_(,XfSA~i, @֜d3ېz5/cIצC>b,n7rf"먛|[:OfȮa:k%:4K! {_)ȗ1r1(XPǕCiш~d"tۑUn To=?fz,^wiSeճZur]`l,ٽņamE OȾ`x8*&PM8xΦ9R#0ZT%s ;2q=g CD@g\Ôi({9EQbp{}Q uƈz϶~y 4d?$i_ ;AR4Raz@uDJtHN] Tviv/b qs0IFE)ô$QHNyч1 v㎉Ac0uVhlRJe'֚6Y\C$V\ڈeS|qTyZkٜVY zzƑmPMq1LcK4/yKL$t2sApMԼvĕ+DM;A ܱe _ O1KKN2Q?iLjr^~]> MtW>7+{ /5BSoT~e3KR:&j(__6Dƛéo(0Av*3_lǿN6# ]>q:j"#qr@ǥ^{ ]AspO,A^-ϲDa"k$KsrN<:@Un5uu[qghvDruj<3Yye\\kC)5 Q%:v2Oi`O|Bp>)5]O, w٤D! -_~n(\ۏ ,]ې'~w]3ՔevANzd7Fpcdu-rz`3}a†;aP(UEAWe`ܬFل9޺Ic<%SAܯ9j"b.ELL4? ΐUm$yu}v+bj:f/D}Z-^SXgsމ!S@ΡΣ:I\oTk+XQe/}PȌNpRJhb>Se3G*ۃK};I5+\]L" "W\)陒0#zmVJ\NT<r@ #֙pYSID]2̋@ S_$[IǶ% ~i4>i;fA|7zu+ rV< TFIf&P~ 6ZJ4|8Q'A*Eb]oKoD_©.'Gb.3/XJ';;‚xx5\R`hBhϿkdW_s_-e"?>(*Z&4]=ϸ|s虰 Q7{cч'^0hsv84ͷAs prKbC"4 JќvOhcpi#3' HJ@^L'w/JĨ& 21 n1Kj,.ܾߒD}]|@IN+P)JThiQV/7 jM`wNW|e~.j8>Hzp7u) țUІr ?j}geN*7[͚Ƶok4IC %so$ GE&cIe'*(>%Qy2?f_5Agw88[Qov'0ҭ\=>_ych7h^MnϝS{%&[HKDEXzeFS ZL}%nD,//ihp`nc2`5MU}78KϽ҅|IiX9A@LbNtnG +&3ᙔ^Ɠu+4ujyyqr<Ug8 ~{]\V> 4 (P1/7E2JP07zP'ǀ@S`"l0/\Hi\3W8'\,ҔB*[R ߾؄<|Jd;C|2ȍa /k&˜Wyեj="%h//1֮$*kxfڕGƸxya>pOw'cw y`T6cf\ Dq4 GQ>l٦2m"Lu8k׸s,5in$k8[}´jkXP,k7uEokhƾs^X'x{:fP[Oi!: fLc9}FLո@d(W*3A/˶W6|;xhe$ סg<ק=qL^&K)[*FpR}feq }ծoҥ*ᙓ4ކx[}C8e(6d!xUٔ \\էi7H)%2ͳ4ʉPO)ɇc[76V"%1"8[O OA w`-fIQ< }Y]CuoQ'U߼]J 0,93n(*V㴁S2Ʀ״a75gdluu} 'CƗ' . ُs[ģgEZ~/kJTСQ%zt$ZF\ af~2nKh-r朻OC%\`qĦ->;jVZ=_6.emU@~> / Zwz:!@ɾPd}ˋ3 96JuZ46 u,^8lAӍfsm4DqE_D*6 @kNϣ&é"mG5m 3رLݰyRJBC?*q\+ .@rk7't]> Z e>4db2O0ȕ8hHsUw. Hhw77.ԓ,BXmxLB*jY,ІF\q ןA*N51^.Y t -"E)PҺeD?JiDnkV=hH%TQtߓ/Ս`jτRQ/b {M9c,_(e6["F!!b:cN\4:lgwz(Xtq#4<es#C`ǥl':gE= |ۜ7giiP$گ'`8ޢL&ȣνPZ OVca۶C]tt*?VxNu5E֣Ԝp4v(!91лZW?(`/Vsmg$Oe jWlIzΨQb@F>+s.4_=#L2L_yDwR+N9.(8thr%ɘb-O,i`S#%9+7|4BQjr ¤Iv?Kc;6); hWܟݱyeT^}nul/)X6Qe&EgaR 3y+@al50s8-1j\DB\Q@5'IܜҕÈW!^ "츲&2g0mDv|nғ ڼ-bO)uclt)(_ lբ9yJ5.֞rV*𴊱w-A %70'^QӬHxW)rZSydE{+|?[JB7=QC]7#r-Fu(b%FEeaK\,>WG9Rz( ?]E?rjv3(',I>/'F/D,U&lXJj}PQD#'=BzᮑS> Yauȗ%X󍽹ɖjpQqw&6g*i#>9M 7 ѳk-<9;m%Bʼ h FєB=h+ce:i*xEe&J-k(}c`5=CjWZxޯLU"jPaȾZ++O6508-9"kWDV\&f{m;%Vk@ #r- ܓ;JeHeu~Mn_axgWEM!&]o%7Nybм6thPE>%1Uޛ@N=qBd#mSX +mp1-`Z.&:b nf%B.Bp {밑K6vm4 mОLpP~kt > t8UJucVy_v?N$n&HRq8P'؋hJ4 ݇do5oq0>k L*Db}LZ=v%Z[y˵>cۗͅίJ4 e,*W~eXYdҷf]}0NUDiko'ܨjq2Uo*V%7SWqΨS${z h<'Wóg -\)!=#"Z~ul}Ny?u~>i:VOߣ C .EHf&i[kOGWG,RKHM~ GAzgQ4ԯhܢBh/+Agxw)h+gCHDr +#1V!9uAo#WXXk8E+pkcF+YgyE3cܞhаmZ[[9ɿY[_{94},4,KSW"~f%$W* epЭL*/pŤAqDk2L X/(@ x=WxJ,2:!Hã Wŭ @~!۔I T[:{$pJ\uͿb(+ ޗG`]< ق]QVIޞ<{"U)Sǯ[G=V5}ʼbܜF3's:cr}Qj1Z 0}sWU4U}T,d'\4* xs^QYofmowlSfF刀qіQVq^,KXpãdf47Ȧ؈WTE5 M>{hO.qúj!tp* 7~dԁlآUP1ke`/A΄7MU+NnTw-IA(zaXh1YA`=\۴TL|A7Hq]9m֝\4 e<LK^Vmjnoj ju@ܗM 6 <6D8H0 ,MށrVo:5BҞCdsD&*-xoqHĠ)[:zΤ 7$侌$@Q"R ܧAG|;&breTvK!oCҸX$@|׹Hz`m oz1( 8uy%ޗ|JE2zh$%J{˱9D&Ä3~hsy&grS{~ W0"ICJ$4JyiXk3$x{3!.e ]M@83Y%MQ_Y?@6Rȑ-A9M5[! VJ#p r?`%j[nYN`ΕTl+t$;9ho(LoKJldAFt7ίE2MK2\|Ido~Cr}l>rQ oIZ0gwT1":UVrh-TĴ$IߟT CY; U|Pv$ LڬB$c0?PGZfHIF5(xKH8}v)s m?m hPV1ɮ`{L"Xma>(1`om' z7504[ MHL٘khEξ/U$L|3p ;l_[|}U/b9ffCW& J5}~wKVyjmx_ۊ\e1DtisFo1›n ^2 pTuddfG* h1R(,~ c:`O ތ-~QM„7j V l> [Ņ`ͤ/TX(C&ékj]_/ !Ӏ-1Df֊pk)n"b e Vp֔]ɿ(P|n>b;).L2Quµ&NWrYzEW6S+/ 󖜾*#ID(&p&6Y1ZEXDrM B:) OuD53Zd`iY9W;}u;dK2x,Tq\ZFj74รR\Jۂ-#;u*C;JʉBǥ_;5؜uEE8Żo<$t hiKȀ,hm/~02FKIw7hB:ju,W6Ņf%4=Dvc\I-Zp9!3;38uNQ[# q P=GQe{$/P,akIuc^vPM?[e`s!Aܫl+d>f&!g3V7(3J~f_#i70:kxcrGck1 W SǞnۅ[xaoB ȵ Zf .{IAco3G`cAtZpא.Q?a }HCe\5-gնVns[B/,FDy$ۊws$q6nZaK)=OhƈbdHxyaPn+_37V6j[ \zޟ}2#@nPc _ AB/驐5x "~qh~L'ߩRA2!*}AyωxY=@.\m| 7D xNyh]Z_(_E^^gP7'(rzLPUo(Z(U3O-}d."?0 '2wR(7A﫿=C`z3(}PKLxLyfx h=_4!}#E ŨճjhΏ{h=~5~'@ubCX;:NčOkYG-;~I IEa L ]&0v- *R ֦ƺK$_tiOHOH`f01my-˂,0qn[{6-h5qH} ]GF zXG?-Jɇt D۴(OǠlJ_\s0臎dIӕ= *fq$9;">OJO rr;9zsWj5{60v׳.1!^5 a|刱}Q}]Wi=i ?ϼwl$.l![ԶouPbek]5% fZ7'nps77TE8!--M9efrB ^;*΍j-A7MєS"$[5,-pnA:<#R \|rܾpd>EVQE k01u')1/8ԥvTxZTt$fs<po7L4VoP/ 0F3uA7 4?'.~b(kfƛ㊾Yธ'fqt%-B:O'hjₒU PA)lO*OmfڵTrϴIEziJD =/Wi=-d_Jv0yY aUeԁfp**X^ wRnSPTS(0^§gJ[jb#iivp!w)gmf}3;a*3߮$A;عۮ`xa*'^t#e.kR2-efFڋ#vQGqdMʳnH!d]6ӌ$: p n?00rflIʴb_ ;&@b9sɠCvut]3I#jh, o<+o1_5]\/BH}nhs,bD 4pX,7+clVt~VUوz/i4ELn_gX"kx   m򺘌CY$IW[L&$0܉Ph)^'cǴ .y/P+W8ܥbA 'tȦ[D2K〪u=[ӰVm\i>%"[=a(E|RG76W?Q,j!)PpL,`J<}3?$N_L̆W)qg:U^3%Je6\,@sh uў9)lB_`#/dE!NAXпw5؂b0 EaPM/0z,0B6f_.>k4[%Y{'Rr0e xH((WU)F82!w+SaM -!RV"geW4آ&Ts@MBYyJ*o&UR5JlTF0d̆l9~k [z0ů0=U a,8j&K];C ~'=ooVXn4ACҕVɊyl/l{NXb8 {:l.-_hIZ, ln2a5ex,rۄN3mdqjZ7l9~Ȇw{"}o@ʹ1R踕Qh~Dog(^#BDoO7O?q"K4Q@}$;i0=! L'J[ڲ'b VR=t3k8>AM$J!K'?pg`ޞ빓dUbbT4~$ms$,%-]>Lq;h7r3iZʕX??}PߑVQAz_j\{EK@\@IʪH t~ȵ6| tHuo; Mnad2bik*l˛6"7ڽUOD/h‘AIbQ@I_HT(-5<=+;PdzxBgZʯ.zky꣤R+Ew]F̠.S ^}[?#v # (BOJz/U'` Q^N*i"9na˞|+!{ϧ.V|4onMuƬyWMk+ᎉDq> ;׺կ&$ Æm @绮r/oaɗ=@ !+Zx좫Úc}:|͞ X3"e5ȁhyb]g}E& 6 Wm?#Oq>K3PᒗwO\n1&tԅrc9a@uiMl҂B zCW;Ĵe/c=,h!0`hpysAJXDUfOmr.@+%!o8p,ܳmJP\r-'˵j%+op:o6%B*)Lld;ܞ#1ܿ&M#5] #0#od,E~;yxtWaCe5B[πn\.T-˭|B4IQF T1Y_7}[S/7d0)D|BA= =5E{%8ZmL,]9"I]} t>3y̆d;o;Z^Ɇ:Bl2 rrA4\bd4`&r?6q7@@w"{z9hXS5hr/l iAG)z y[9l3RiEYv٨{{ N&nOu@`qp Tm3]eC!;aڛ$^JLO)/ڸ$," d^K8FnjH,A/X*8:Ҭ> p63 Iet>ZOzk Y|y.YU|!`<\ 2+)ECǣ|Nw":M>#ݣ=tibMj,G# u |Z $oR gI9g.[<`:6Byc -:g0ud2|[q_td,zLk[6[M3#ٌd]RJIz֎zgRdv&R'IE*eA%5ͧ_nU~#PAASi4.SS(i.pGBe\%+ mA6h_gvݿOe6(NjБP`VJQ#66__]t:_UQ7"N=VY4oxNQм ä<>E='X"|&9&NWl]y9jh6P\eNuQL+:1A9׺~EMh_pR' 5h3O],ĒMV|6_{-A , S(Y#ŧ8ˇB@ T6]ZC؊xm&c\3B@, Qe@(X]1,dQjw`Wi%O\u=Q# EF/8n'{;q?O<c^Wp};~|KbժU Dި(YMx%~NU!3ݫXv'*Lr7fڒ k.ߕ;.a^doM @|% M?]48 'MKմ({P&ÕpLֵ;iR#O`4!ϧd >Qs3d'vn{ ϖ|I!Q/t"30;x81bgCDV@j?Jl#|ਲ`_+UOHd|7Xi'RRhHߔeh('âKUcR$w;/;8kP8 '\{- t`dz6tPKGV(݇(qȀ渺ы*t.vlka~Ğ܄8 dC$j4 Pө:֪F$$-5(z06W ɢ"Niy+Sc0>lm {qH .1;" . ';aV|ZT0\ |Z`O|Ps ,g<=@;&D|Q! #K&rGy>,@}>//L{5M#tΏAr1-"YT.`tAn/=u#5gH4"c44NuA*،)˸M*z1|Z[1ؙ?cb:D ںH&q0hKbFzWѺ"cUo)fj(ݭcd)Ver%{i驛k,&KVʋ渪 7jo~Q9jY#Kl:0H tϼ-呡xi؈Ja h蔲BǖIskj+V]y^}Y)L8A`}ze5Q,=i̅8bU_%HZEg'tm #U6&E;"<,l,u:Fs2 IBd+Yq(}\}ψjc*ؗy^mSy'fYU X-YηD ڬ' s_BzՄRSk2=hT\dzŘmSm&z;KCnP#;JA^k)vn_B-J5?͵Kee]-'cpϾ&df*B3{$/QjhvNE1%Pmڲ.Q[ze מi}%Pe#f"X^JlH['.x"ވ?^mˋ!,ۀ{SqWL!(J{nLw8D+D4G4N}+4|Qyzeh;nyQ@rdȒCp _=}v3'(ϯb߬r'B4.t:5V,%^wIoGP?8\R&0t%`'01VkI,3pe-7ί9{*~}}$E7|8+phgB{]Vlw.r G9Hw ̈́tDa@J?Gk5gү&9 N|(&8 s`2!C 44Gf4JW{Såe&ӍQ{=^:wL!E:O N\>d]E-Ž&(]&,[W-k*pݣvjo(G@9ŸI : }YЍSVH*@ pWEȖDy!J$QlOR ,=a4iz>ÓBuT~K=mc6X#Jsȝtt.-w4]f 4vz"wj:IIs<d (BCJZ^hǝ4\vW0/)zp}J 5~[(l·v'n$ߚD{>R=rKX!K45Go%H\ӓ NEѥX2HK6K ZsAxU*)OMҲz Ba6D9H r/,בrfct5?<“Y6 Soɺatu>@ۻM"Ťt%#>HׁePbDl4P\Qi;Aр'ld Z.>aT6nI¯"Gf)Z 'x+iz.ONK7(HlY~s⌷shK.o+w֤0Lt8+A墖KI!\Gn9vugaZ?Mp359!ФҮJj@}{gH닧b9Xz* ~T%E(iKۤށ1( ^eVT21]4z9a, |, 8l(kwaʫW:`i֨]ᳬt~R/$tM儠(i|Nϗ[젗 yf 7RtJuՓX>*Qȶ虁䗻UeFjz-"7V'||nyQ?Lի{SaT#Ɔ4Xa` }"pk)rUjɀLi%SqŸX5k8/!2J}Scnǝ䡊eECGj |*Ll7/1G' &~F;^A9kU6+~1}sb7Ho͎[ά\?\5{3ES8* ŅC4 K#*.6EOD(ӥ-_\o 8DN1""Ju/_՚NҽhLVT} 0/n%$.I$;U~αqXL{wV<,E N HȿhyN $c嶠'hGkpS4_= %$\ͧ0{ouϣ<)1G]R@J[ȓjPvid<7uv*cNmd1j,#ڥeyvbtBS{O oiV$?y` H pneuWz$yFVSeZ:ۆ~ L;5 }0v9weEQ> ` F20P?uۭV,^]ڝh fg.|H{B aa/vUx!8Cn5oU4˔@EZi??&k=xn 00s:D #2/\{;;\ywy1Bx ,WXY5D.ae9OpWB|w!wLM厫l\[ek@>XxkA~Nx2}"+lA:j5 'XrnWG^{0b.q.h<3ݮ3~hj*Hd)sHrCKG^[oQ)Gϴ.6gh!%um?-G8,0h6r.;C\ \J}IbkpWfTh;"K\>>>A|ֻPwD}?D#e+{TZ'{aRdY.E^̼RumWW1]`?˗儹Bf>u:6A00Vchՙ6Su0(d=0:m!2"}!uZ4dhW]IT%LH4C;̿lBs xY~@¾X+BvcN&j1\$;ۻ f兙EtH1e=d}{&n .1QyѮagE?o|pE74Qx",zwoWTaSb?V[Qg $H%4k\X]٥3OEV.H| @@c.a^6 R'bEDuˢg;ЌAm0i;?Ԛ,nAE)lYMQ4kMT.DS;yR2!m\R.(ej^{ +O:si7kMR\ڑc- Z`)Gem讍FdCy!d߻1b7C 8ʜڐQwʟ(CVZ}%sX)$O9'7I{p6:N#eE> YAq̲<[,XYIֻ2u?kRI hJ 1U:lKX5VٺfW.z GC?oṡN#wtZ<9_[9Ckɠ.ަ$뺠H4)>DQ?z;:zHW쮤zє 0тZ=` CLx7%BkOAe~|(7/&M)@cskaw-Ա?2`*Z~Eڐ4HxI#tbF^쇠HBa.FVT\ i-(S17#B 'CrvtYS"NK>592OkhEINdU^bǧ}ml`b տF\ 粿@[9t^3 \+}j4lrp/8$Sqtotp:h2|ZJp8{CZVbö`b})#ܫ#/ZMXHX*O=p`n0>}5T#砇nTi'Xk~dUM~ysO9f FC{>3Jِ8.yS* 23N\9q-Rm,!1<8p'i AofL0D hJdxy!a |i!)5I X:Ϝg3K)ex R+K:4S}Ss";g?H gJS0YYdfSB x I׼21mlz ا: Ä́ -E4 I Ws3@߉e+P.Q .9=Ό k|äV|e.BbI18"QT#5vkTXYmr'+<Ј2cᆘ@h!=4w}6 AƏ̻ul2j*(#)_):m3!&O(EFx" 7)dИޚ:`R3 XQ7V2v5WeM + H6Z_Bf=5Rdoy?ގwfewaBD[wJYThK&KI4 +B! FY|󇾉4ݣZ"p))TH8Rz8{hD0] ҡ)Z 8NF/جe@-j 3wZYn7 m,e(ɪse^<I8hs$wYNɍ/,f;eohJ; w/1#^*0F f c\ngbϋ^x,ja#Jn5%u$(j< ':qhOh#GwOB}K$2mW1(5bs/f4R/("[ON @{Zr=erP,s)f\2%MFwX8oP?x9dN thQ.7XT݃‰i!(E(K·A%/R=ֆ,t@5x5x\&[.aã le#'e W,g}pkGd Fru{[4ȿ[L/Vs؛Z^9,s9vQ:j% (oI@Ag5Uno~OuMrs2M#\+ߔi:nyP > zW|BkA;sm/% u>9ҷ]4fpFG#Xk;@Ov Os7-2EZHjYkeߊ)7R*-G;P` Zb|At[kg.957NQGm|F\-6b@Ln#qOX "r{أ#E6r;4oMJAhoD7Z%<ȯ+QCtmpbA 6ki|Q(VT8濧R1dX/}Mv8R3kWi{p +/}KhOFC}]l<)5FN.!>ѿoO,c}ۗ@8^h=hd:⹓ONH_ hkU h*8|ۦOE=J5cY k7v=J8>vԘ6E#`(АnנL > 9X !7"1x*86?<(GbPtڽI{3{|2}zҳ}'cKe%P Ps@-qI׃{mCFuc*2 0ةM[QB|l 6pk$wtp^! SJs_Ps瓙&G.]_8ݣkA/) ̇"nіd=}>m[쾹bXnS$Lŝ@&X5 Uyj9!K?Py3u1 .9Q%(H! \@i.5U2zԤETQia@q;KŽ+>0Ӯ'+}sNb*E M5#D6~&-AiBD(1ٽDFVeiOsYerv3za]x2ujGBգj>`&X:\KNe5^UQ6Zb+~ 2zU,dQI2eͲo΁@ifr dNCwÅ0S25yk!@ }hн&/1c]hO6H<‡`|]mc1p36j!|P }І94yQџyisr}@@͇vLGaTPzlmmͤS'GGD:Х7IF@mRU.%0V7,yA_MaK6NvcQouSq{H=(BxDmg5YNRş0D|žνY@XJ!WRDDyŭ\@JG-ܶBhH{R1Y _7t7 y3$3C;d;Ǥh %yn*o$a3&K6XȗW?̗A%_j/'fB "rͺwluÉ#gܳ/`VkkOAo)JNu+Qie]LIO!jɉkd&:QO9;EyDS%Vgj0,2_v᪏/MWkf&"}ąE8K4@#Qv9I1=$}P@7 +vce8ر)/}Y[bM¸|fy |K2E׽<,S+';L8W 9/wP#tgH"R-Jc=Á٫OVsoUdzG f IYKZ;rApT.fKsw}Tc.H;z 4O+.DwL&]y Ŕ~vH||BNԯžZ+ r2P>$Wښ!rKw 8rp7*4g',S}_0COTa;AO᥎zXd&e8U螂UFLPXYQc'̫qwW(Bn=D`+1bZS:LIIlCQYݖ/ᮺ^c~ngCJІsUltÚ)oŇEw P? ~ +̩8wwZ`]k޼Vj9CјB(sDvg)ubT,9۔K?W Q]5TN@}-&t53&6#28 ^q NY6{O3f%# W"ptr"rh i6gͻ[2]KTͤDdXzeC)+. 3X mq|:}o/:_?ջ<;sJ}yqi2;̆- QHڞכ8>KIWٔPM4Ov10TS7oXժ9%Soǜ ἥ:DP#FRM o{l}vL! .r̋]=ĥnJGgQc_r"?}Cs!OE_iKVlP]ciꞹK&*ԯAP+^/.jC3@JN3-$("էvߚ^VYv^Y#;c5d[(I@I+V2'Hg 3ggTlf{ jV}Xܡ@^o.,q{|b3E6"0x y2| DO+鍸 A nMgAo>)MOAp>y͝N#&왣yJ\8q'åV VZR71րxzdPi*K=_;wCSeJhTeBc b4E]0b4PRd9E$#\v-SŇ"ru=A!*w^I*''e QMv]zR BJyMƔ#eb>E_ -#pâDYYn-W vs7;`Qw=uA6/J O áu؎ΛkW:>J~0≅M`08Y8;[|,=歮,@y|z֡2qZ8qw`LJk7 8c74Tg`*ԇ]O<%^Jń.w8EٍStotH6Vj|! f<ڽ&uLFCKA-zi4hK .蠆?%6br760^2]E՚=DC5Ss(;*ďM]wcJͼP3\=Ql}֙zƼc씽I]Kw8ґ SjsCM.QAc4& PvVj{iT[xnP ݄<YҺ3!,a7f?5JFdUrL#\է~NI)jg .|F CEsd/9'Iˇ<$/ -M"3L*-c. KU~BxW꣛^qݙALϝ^׻}jk@J2LJS,^f_)@gQdlEڞeG'XLrYժF6Lp laR##2dn 3hdBt~3.X~" j) &8oDj b 7֡և=r9P.jg@e< r&Us gk~]WV1FvF.)Vv_/#7Uß/JzD {S#*kkk `gGo|tfGB&#hi7x=}oLrìK9@u/\7"N_! 5X#kYdd<&6zƜQElE&2%:jq:6 8U9e+[ov5h2zf"|9݇ڪU\􆛭QđI X r ğ~8n)w`!iTU_'kA:舓 x=I<1a?|AZAXHf-#Qsz\̈́wqч546ҤQ!49?z~RǶs %HĶ[ahKu&)[^fs aҊ$2R;NM8vDL; n*ak8ܖr mn4ج7H6BCa':Q(QIgu¨WZ?#2\uMƦ/9Y{om܏ VŽ͝|Y]YAc23&_|˘!?%| K \64!ɣ\!"xP#YqZrS-p5N{=e7)OŬBbq%w5By5|w8Os`ss.@ lR3&st slF4!T7ɥt>A$Zu]b6902԰ߡ_eR+!7}mƑ6\s|cXaYR#+1iRF?2Xq|Vy`_6x.X WJBOo(O=}b+S3Gk\_c}Bfch|/2 suAatpȚI?|w;ly7;,17P6DHHi8Ko]a ࢿRIq4{O]y$P- U8 iUO*3s`OOgM`a׻<kF9.rK;Ib_Jd;K{kTlT|hq]Z7)ؗS͈X=03OlC^B߶s8F$c[`zh b]qiױ'Xdx} ;Ӧz٦GMTw%e2&%㙉LZHy؏" `M1{K60Dl4'+' n`(1T] [L8kf .dQ;D[(cLUJEDr+@i*aڽ_zA{ag&_~DlrS唲ܦu%y]"upS|?y&GX\(GUU_:IҢҥ{ꐌz 6.Mf[Rf܀&n;cȟ-̫e;uJZs_3ׇN_uԡ*.YhαʟH C$\N F FN]X.|7kLVMv<rN9M| X~1dOmZAyƚDnԱ\kd_~geIXNU%gjw|J! wՈ44e@_zpwVER*ĭ>߈a?}> i^۶ Y[V3).R7,:7MA#4؊1M{=CTíl@ ~PE . |u˝#F0[|(Sh,^,riTQr޸3*3LU5뭡ύ^c:N bcȻl\lbN^J/"u>˼u?h٫)vs Tem);eqi幓 ݡU>w8L iZO"J1P3PG#-|R%88F[}I('TCa=AJ3t@׈==g75TukN*a<񡦤Y"ᯮѰC/ uExLq=nz^F4%:e>DGrd-EāF?S6[uÉNJCM>d7Q>m%B"Qn 16u˜lF~ӷ \i'٣[Ʒ+ he xp ?I8'Lyg>1`"ze"FI|.5G3蓬uU)NLT~2E|(6?S&S;(}~$@|?Sv#}ZR8kAmMT`?sADe]ɾД9!:ҹUƃ,RaFQ~A|V]rk5Ǧ  *np1Nφ|D&/b--'[8\ʓa_Fl͖ uR:dl"\=He3dѭsW'sIpU'ooF h,+,^`ă8FS6 ?ZO2Y:\e"@l43U%:e"T&ʚX"ǎ6 UuՑoT!M#~t=3Obj`nG u*_LQPF}mP)K5䦽3-'#(bUѡWwg$8R6%j9W j]u$y{> &np#~SJDlRL,+!l6$¶QJDa)Ny\6:g5#|ŠȤtCCr tѩҐ}[+[ߔ-Sit8o*VY rwԍ:;(NV,dP9ȨyMn3B&B vZ}m_(ƙ| `=H b(NE囘'FdIo7Z[4~GTzRD {Qq [T__֋sjoÌ3Uo4vm쌃̉"pk($ ; x1DLU/wNkϋM~,:> DV*k2(X649rWJ??^|d>W'隿m>?`W4 YV +ryo} ue5m=@i <.3ae*`-i(õt(]^#?X0*ʤ¿BՋfUwlX="7h e_q]ZEa_b]ie} _vAw=[@1}).5I>)P*!f*`XAE6{\EdhB3fKW)Jg'Rp X'o ю^+@sU|m3KD]3R]8.MSjps#:գ l/7{-(M>95cRe[(IP7;#] \Ljj9N8V 8&fMI[uŚ $/)?LqNhCbpBBWt,Qۅ !D_0w1A)-0^b):_X`՟_v1늆U0HW_̩Zy}ITU2Z8)*LlC\]nsbʌP1Sf@/R6Te\fO9Z]p80oD#е8_*p@8Ϛb :My}.+tRwL2&Qg S|-n(D.zU C\SgUI%z, Edk\^aJ*B4CpbsCѥ$}yŮᘱ@PH72Aj:Aii̜ͭc)peRG,ဧ75MLǒ&$_Ú,{HnmЩsF#qK#:,u{nhiݿO< v@'1<)΀`39ܤᏆw^/vHI??ϕǹ.Ek %y&-LԳbYU`YiĪW,"tEr:P&xĔ~|U6zTvɔ[bh$mfC;(0BڵWL<,1͎s!.M%oUprUWWp!{CE<s^P0Ϣ1hZ /ưPifXWYKkw}H`V1YAA8w-af?/*9MEK*5<l4޸:tfgk+S0(orAbfVգaxẄ́cM6dddG67BG{Ina4>v {X-N?a_3 qp й۲+o?HRhdeוh t0Ja5aBHFRV~٣WM cQ*;;%]@rWh 0!K.T |ž|҃1iImٝd'@tц(nDkMݏr{ x l-c8cOG o 2T;Z\v3G%- ^UkmÅZf(18ݟ6}/Im4b k1:ԆY/C"^=f*G#|< RZC~cl`R"vV0;LwgOgbv_ЕhQ43t!K^NC,Ґii׈ ӫFcyJxrmծ$MH/Wut=9(-4*-f4r5wl)Wy/J4PKJTBg&*^'-)߸=n @TCuV JӒb /0pQ# k7S5|'&_XF[&iyǒs*a3GDyC$?;MU*FX7b`0%‰U7_j,rLuɩO;qQ-Bvq^xX>q hocL)ɉSCqvlATDwȑ;v =Ɠ%\_dTG6>5sj ܙ4aHvY7ԜqΓXA\Z\e{|)% .q>+Wt9\ 2"*?$"o<>֞RwvF&K2Ğ]GoUNJa %s,_Ϝǖ%Gb9[MGQG J1Rl0Y}Q}}+͞NO|c$8eM5doޤaxVqVLz|c ` b6oFW1pÊCRlٔ=HR5p Wv'G,WpSjs齰qDڋ#O.n(|p=Fg(uZb񑝀șL<Bc|I/yt\ tЛ~kLbq2P;40ķ,T`ȳ/ mIa;X1Jꉅ.506NDGѯ,'n6=5UdgB#<%.B+Gt}*"0PBdMefE||#=t/:%<6nc tt <$$IXܫIСwkwFw ,:agh2KOv;єWBUfuOaL{O |sS$c/_Hrjg4=Gܨ~:EƋ~W+FǕ6 qxU7R7 & $uq4v'(GQ.Tu@"f>wQTTo)sA C)$i!j80Rb*_l1xAABPU2Ns>##{q=σ+U|#VGz[:'-4l`{8R wo9_}.oq!G[k:բ|l.ю)Dl6vQxG}<Nw9""3 >gcKhj筫`KAb]oW7rpu<n[(]vG,9'e 쵛Ⱥ btŘ6ĊFR\rG)r/2"bў}.ST hFuz֣! _e+-frq\Zo^ALoo:Ժ.0H@ĥw%]KeTbnD3R 𤅨Қ(|*֫7 YXB8'qP } :A Ĺ~GIT`a ,(:͛c̶3P)a>g9E6U+ijPd̅E6<ն}Z6Y%E׎LI,]5T=Ah3L? }쭙19,E әHJ|qj4GWs/ܭb ILxx×I#1v|]$Nw"Gpjyvzp0}MAr>и%|޷DjQJe5͂)6Wp 'spS8&~юL Idz1,GHŌ*}Ak{tAYm5JZ90 pT_MA?_8u`u:T.[Cϼ )|/QL|WES2Ӑ^d; ;aхV2~[@Aqp:l< R79&sTZnr{?*aG㴜>@6-=,qDAߎA/xτ\:6IGʙ=ee/}ף~#Qfu4=7ϋR>s>t+Vey!i nyk8Q@w]1C2nUG-aԜWN=Vo-9&Q_ q뿙l]o}a{ʧZN xna$+.?@B5]fTE,-rL- ^pV;<5D0t tv5ؾz֮ 9mĄ#}$`PIN|JDqT/d/Srt~F>u@_p{8b>@*w Hl+1J 18ѶeBIt'CP ~1Ni/CkN>ڲff5๲(XYTX #}uAo_cͳ$Q#BAGgiBL.567o:] b_9aѭoxڭWXzi[b;c&lD^UZ21jbŜ˯f2S401÷|5Q3tm:͟ q3AU?O5`0',R;O|`:N <ҲaM/+hfV3Zf|;N[HA-" Iyg_>?RXS?CMMAɅdsVצ0zn\Nr͉@Z!y\Q>/eɲt{fNىgT9/lM8/7CLzz8п4Bw|UFK) P9N\5_ ys«6[Aϳ%TϠkZ=HItUëBflgC=G7ͫ^"R`f0FF%Ǭ<>:elP&`R#LyQ$Gu 3aQЂZuI:7RBe5'{ @,ہbz0!G1Qx$z ;mӈdWV:(y~ZbkdֱōKIW.uqӍZd, h%tO5"L|/e$͞_IQ?~Λ*0*u#"Y@XfEϔ j+A-Nڹ?E'!ZN+2AJd2>N*P%usBmY#^0 K-حGF ݵBnl G {{)〈濤;7VpVs#`:$̎8:ljӾIG{~jʋ099cռ6rwA !jM4 R6apTjdrux?,~̎^#j@qp@\JߍUA9!U{F{D"ۉ-s4"&8`‚Mvd„ӻ`OXjX KfSם&RPw\A3d,Ӵk(g 斩xز,L'/w=qPykJ |4lo@~7r1?}ii~*r-G5X5{[2%'C `R9.Rįu^$>-醚EG-sL`%FEh2GzP1-X\u؎^IhJU$~?}f?(J,nCm:v=SCu6 pS`t&'h>w!+M=Daњd.ZlW C1I|y_^P~ @3os`Ӭ;$k'}~"PA_w݅㸍% u)kMܢ.yQRj BBҨn}*?zpHJO7%%X ،JT R6qcdOqkWiQ+y Gf-뀓TyDpliL1 ԲɠV"0y\jxJD;(B^dJ>b!A}Ư3c>3wPʔ ۓ!VaWꦃ?_*rf8k(y$pNƆehgɋivo*\q4NfmR·GVTTjGC$IX2hE#`gbH+-j^r8OS 5#؉ݔظxɗؖ$yZg;ؓ]uDZ["f85m˔*^a &?<%#D[%[\DuQuʚ2 %*/'TSlf" Nf1VcPU5X\ [%Q Q`iRu?뽃;xGCD~0T$=$z\)´vL5>&?POق)κWaD~rĽ0R4PNfa%b*PsC"w_1H5 !K~B";pܴIAe+*W٫HIϋ.`>3{ȽI-*>vx}}ۀ}H5%gHOSMWF;2a6զbi;YiFnF9V&o0+kK_P I9MwgFO"9yX~uoD7TX|b) F/166>lq+?^TmeUBw\^% #ZdZ 64[Y8Q~dmxk.6`rB\cZfT2?=* d,ZIƱLyzt.ᮤӪMwL3ezgyf>փ HoyAnGdx3۸Ҡ/_C-:wɞrSĔ XT jdեu!%ZG>hARm[|qT.|o~'PeсpVՓX/K9&ա +].:1]N&=%jږ(fj';Pl(uLgyO1c'J~uFD`q<* 撶g=De15*A$Oʩ(rCi\] mӅ S9}6w$"S‹輎C(h| MZ>׺2*g2̸ HX#L[]v䧯Fu Mhcwu<&uB{|ɡV;ȸ-J:4pw+ESoB]5B 2膺tHtHgb85DJ65@hKC>9Z: ^ uzTZ%dgf#%E@[hNvQՇ\4J⡄m.}r~tKۥqe"4Xn6Q eJi(g ˭pK v>}. ލ5;ȕGh5Mg+(\k@8XLMoq!MW~*e*,Fd3OxaXN8lI6xQY<84̟6`u`VOҟt ʹ FԤ!]c8e!jf{s':x1hŖ֞hȜG#n_.G‘EHR%DtH8ј;_>e0mrD0BftV2ؕ+V^ЏcGi]h0*b-{ӎNaMbg4E֝ɶF-f{1QCc`"@s%HC#j >GOh2ͩ7H4n*Nh~X,3I*0/1ۃٌjo6'-$lʤXZةv;S|L^aaFOn1p3F`#z{Hj$چj>u.T<9 dK'rm%T|A'^B{do~?Uʥ`#z+4ô4CbZFrqu=]|9[AP:l3DfЌN 3aG6< S{0(7s/8_1Qcßʽcno 2<ۨq\Z I>;+K'`B*lڧ^{o31.epd e;d>.m յ2iX}9#XBTxp R &BSMiaIbrS8 _ z{Ӡ'_~ܞ[?(3e059 ʘPGta֗7%~ G@ ̓uT0zCX #7FDl82Yxm O퀢 ?|?+/=9N=N>+Wm ph)tWnlHw &k>ʠn@"oN`>y.YҔVqQƝɰ-쭺SV .s'Iuoբ7ߖXEs,^xS˱2HP:y[ivbULAuӈ2Q -c/cFblU8zoPhȢ6 Nd8:"& B!>b<l2mxά3;>Qk}$4a(vH:dR5X[GK+joWot.W4 E_ "wN¢77KhIrw4>^NI͋PbN O&p?F .~f[؄(Kͻ7R]UUvSrٵtYᴋƚd]){` ҆²0LrrR.ŕ%d.*2YR; & rsa 8׭;gTZC2M~SotWa!(dU[ju_VbA c%3u?EϮ!r]KvW0WKCC^quK'd 1 }vbnFҽxZMMN OdGJyfb0_Ըo鉎DQ"[]cUʁ0Qv Qv,R2c5,V?/^68֦-#^1xϷ'{7tx5 Wof~LgLo$p})Ī,Z=0[Z0/&:އ}zeW9Vjx(?Zitx3d姦\fƷ6&^ƴa[EcFY1?e)<9 ϠQ"Vƒ]I/yBH[lѭGCWYɅB;|1 Uzf1< 9q{~ :U fS,ሽX!pexSoDr_f/r)|>(FpE'kq0O˷8'k #e] #f%d?zF|if x1ӿˋ' 5Jj9펅" *se|)lӈ9ku Ǒv::o!%3"T5(Nodv BC\+tczs$_Kȣ}#Y'FUgMXO6_qD5 bG8D&6ZMy8ܼSDV.Ofʨa-*NiG;d{CH[UMQ}J\޽R!Y"FDpTuSv̞؛֠k`F9{F?6e;I ;(T(f`XkΈ4xCvl_|@m_C(ZQbH|`.%w~Vk's',zA;iʼm)u|YihYk(;ֳmoUsioF-lY\B5tpy; Fwi&y٧sx{A^, `:l-a 4%(SSb 䝭5ܩed.E_726cȴAvaA\caf2`& PH'vv1jrޙ, -;ذ/_(SrV:Lksde2@\*,AiG /Mbq^66?? @s)b>DoأJdPamP3ĬRTYA1v%!WEU_pYoB P3`#?Fʼn/~A/cD75^Pb}\+ Q`~_\^pnZigM`BFKg=A,MԮI҇B1T ^(>dw,y0btLaIp'SLSO8=a'.c@uHb41_0B(C';S;[ ;a!egp(Q,k7*W4Ltj 4\13.X.@-OGo*Ob]3kGKM^"5`R#E ȗǘE0 qbwg߮$,UbY9P)-EtrL`rYdЬJG T@B ^o6 ;ttz#K# [NHMž&oukyAg./wlDC `><0C94" ;cϗ;BrVV=}nQH_Rߠ3 V yJfa !w/itEY>#EMf~"Fn_-̷F|o%S'#*(s۶yُ0{ C[Xl)7ۓ *$(rwxEmyɽ;~NŒp7FW<5X\譮!d\k3mkFt%m&p$&.BXB|}DJʟpEpt U띐9}BO'0l,m5Qac߮% g? E/!cnϡb2fޑn9H aR z"Mvpz"\y]V (O@$;H' ӓ)ߟI m/. {N-L$6\&hir.b0oDZ#GpJ=w"H"P@D_%᬴Ψ"陀6h|m}?A>Z-Pf| 7UWnJ'Ǎ e5@Q}Tϵ'(Ż9 38uDWx!.zG4I"zf 8gW‡ޏʒLUS5yبME:GeBN`5{;%ݼ/tMО`xomiٷT/5꿮d:#y>|[b]xw{l; C}A"!ӑ:JWt%I]Jp13i0&tBE|>I"9K*CZ$N/ lVWp zKi'ۑ B <[n +%K.$5"X?bag8w=Ӡ23'g\ټ1.6" \_2IvNύJظP{~Qa%7 Kێ=}BP ͈&VJZ5zU^QVJL7(,+`4b8Eǝ֖]) l,1hÄbz]ڧc8ƛ5 i^{[R)YrvY*d|0o+c D|sݏoS X^Jp[0o'R/w ڿly4~nc"N@tt:`s6 );E\梤w9j[67T!y)y)I _CY+&i9"oЊbk S(}0W89|Nϼa.-_G*&>: X qY谌Skyi6Dqs3%߶ >$[Gh~e1e%V4?IUֿG\7[htK&OR U HFMKV6|vɎUjTկ'XBYeK) UUXgSZw4f?m@}:dwϊmEڤ ~Sթk`]^4vJs=?*bIK(J6cFu_tKo[X|p(t@R,jon jIܲpEa+sMaCX>MNjT HD)MؠX)&lpy&lXDz5j47cӲDzlԘ˽pGhjlD`pƏɉj=E+L,Z"C@B}S 4~Myp 4)sŮHPYtKqEr;66tAW=?J1?|-i\"'0@i60[B}Zzܧ´hcO%`V_[f.9-_sd v)0thg%ɗ\sZsh2OBB !Py[DI^zrpM"ȚdZ#Jxl ӽɔ7#O:{?3D%O? t&_~M`Sl':C@a8}Ip-3~ 7,il JN\' FaIPkK= !ȉi׆'o֧aPsg7:広SZp;:؋W(ͱ=HSQZ%O.+  kKomXl_NzmS_ _NcW-1+O1–Z*ĄYۆrKgX_0!iR: 5͵bGKUP V9:΅@4U͝Pq:oeRXɿ@Jg'(v3]R֔xTY`Gi%,g_ԵftjYy Nu`u8@mgvx CqEOQ{t~\E̫Q>. bhjjJQpfcvjL h d`&ub"ܓ)DI.87Ox1@\lاݩ^S;֞Lj-d?j8Xe>8o[Rd\UsP9FqO~VBn D<&I(P]ݞbJ /P NGp;z[WTN !.N/{F~Ni K(dLXo3SRWID WIy\p7-nĦHV/.ZlEF6nQ]^y 㵪1!S^YCk@f`[y= ԳOK;3O%AUUË|7,ذUpg1 VH'bs32g{ w=԰_zbX]C2و+ـbpR"Bd7Vj#1ra,笄"5=F49[Z3q9bV{8sMě$Y5O,4kT 8ez՟8 QR^4ܨ TakNq=]TY + = =^jLJht#M4+E8&͐*lj WqBzB-] &v۾.H,sY:\@m@ 9CGl@d;)~Qrncc/1IkUR|eT7 xݼQf (v2(Ƿ2YS&w87\d71H/+WJT%=u-/Z b/ABULe/h,`njuN2n- /vaKz"\Oe ySF`WslXH#u#`Y5+p2TCRwawGDUBR&pk1ϱr"5k%pm12['PM΂E[r2rK'ڹ*#5=./dgĄe$YsҩK9` Ov=ZrK6tW{z4.UeB` -[KrF_w#-פyNmR1_ h1`{(3z_V=~s ~Z&#ߖo[xMwC.,&s&ڏ^k2p+N $]䕸.خX=w4)%J-Ыޅ9ճ]t|wF})q6wh+Ub2k#CUZa e/+@(%.PF) s({`:l gJZ۠nb71zZqsU:h: av|pz+hnz5.|q$3.DnHUx}w/ӫɭr.ԋd}Iѷ_3߭'- z\)Z ox6c m%l^ffL3a|͆uZ7wy ;( xOӤuO% U[Crp=W\]ўĂD@RB-Quʍ["8fZF~ ?}c!VIveĉhquJ bXPbF$)O]J%J‰*R#kDFEEK;DgӋs GCzPLQr|{eb25-lE yܮdm2 ;6 i&IÒ bVN8/"9OwÔꌺ}@{]w9ȣqvQTo cBpr ֽKt=BWQOStXJ<4+Vd FF~ b^8opT 41^hD4^!2x)CW#T:4 @8'% 'V[R|} O7=n=1~N~`W(h3g4c? @@)eZ DY9n{Wk얐RO9pm"uCM!G%`YHN^#ܢrԭBxkWn)ڷ{Dzxݢ@aK2r nxq"=/DԽk$)<'n͇ϴS26֪R%Nb>,#i吏[sEsA/ L9;iuK |booixzH`smR V~YD=f&g݁t@O҉;…!7teE HDÿJ@bqБvvI3- n6A-< dL@SM څUA穉o ;YK!#[$,ܵ$j?mfwNXrۆe&ߐ@2,M.Bwprx>dVb>~Q5<3jPM89 quˀ<8AܾjCñ$|^kQ /]Vyex;e-t*d@x=~i'1fy?%:Դ21+M S6A(WA~G߄b E6T1Z&8N-dS9 +iGćd)nq$ٷsc7 -02^5q]8&XGc~QP6IVΖ'ymHe.+ޞ`jֶ͡tStFw(r_S0 Øf)7H7m)0]*)R^eEl5,bu4ZfՓ=QPZ(ވ6rySߖ.zt<,h{} 4J pۣxpY,7#ho%P] f-%Sz81_ BkGPt9bm^sj0S*rX_pYcgڕfh]7e2t:Tx"ŏ=UJy[[3b0h#MUSXhɡW79{t=?)Y1dq]6n\I_ ?& |W Ͻ^2)@򕵈Fu õsf|eӒΦ+bٯԔN׈Z(-?_9wL TrCgDf$<2NޟRpިM7L9<\_ˑ1krr*`L5VCwi :a]R ($1RZ߿$볚wΛvw1bOe5$8/3l'>|֌v<+}uVY|p>Nl/aAYHmt}O2 IPKW lKje)D1?d/ e&O(>bD8c[6fhY1UƋ֟N)8*rvGD|$/{ۻ=uiPw2tzo-s50$m6;ZR ;r '[[SfˢBA ?j:%/ ss)ʏea0`& ̗{v*b{5g0̡+Jqtd1dE}w-@Xa3MӗYŏB"ɜm5]5p+t3;$Hs&'Ye5\w;]>4qx:V>>Aj#(mjːgbB}ўܒM\z#3[hąfHE\\v]o޻r_,ȓHUUdX򙱊NyDɩdl굤JG: d1!&[}b JFJ*r Tȷ[`'jqK uy F.1WSNqmjَ4;oK4»913ÖҦxw)= s}TJ\H-7)W6N \_\Q]uCkx+HӍ&tAkGPTU0ma7+4|,d¿qb8HmLpЂ.9NU;Ms`S9Y sڦAs(7J4W@Vv6W6TWvPk{j,w+mCR{-径FM I꙯ME+԰)GH;ǒSx-ؐwu_Of>]R7$\_=Wؿ?@ !3.%*.#n'9(y$h?O- {k RAPmKr @2+)~A4+BNHm2٫lKFvt\~BѳX1/ѥ])$YkC,F- 1d ~I42$Z>K5L6g&D_0`Oyͤ׈, ՠ]$yuvlml UDE!lt-E˜LF9hԼvźL;缥 !ֳfxB3YR2s3\TOaa3"|Z;CsM:: - JK|B%J<,n kt!$?}tbox?bEe|吤ʻFi #.@Vu[ ~AkWN%3fKb{/=*K\}3P` s<r|-0a ˑD~9܆ .w" >}Q<˩<ٝAuLwϼe(  ?[,yO2r+-q-lz۶ROU>A.F1 sldu4jg6`I!l}7 Rv#QPF.bs',6~uDȩMJE^xKsy)|H,[좐2X;E @q':)]!M`ȉ˅0%VN R5ȑԔ-bjYQL 5 Ck\bKqAjړJJ{A6YYBc9Rp;Ps^R$kl'X { 9~=@7P'>n3FWT1r'TԐd@U\IqG hE6(Qk :v8Ū`3xe׷mwYI(Ł R*\[uTl{w݂Pi$jx49l8Iehb3Kdi櫯=~8@tP$K>g?Vfa%^cڎYA[y-C[,*RK'¯H"7wәFX(mzm>CX$(0@Sd~7]wY>1Ofbcs]nό,EC6Vad4rb˱JL %9U*.[w y;Qs"U [Hp"CY3Z3~F/ Bb0#u HOO>8z %aGB1+UqB '_NK%. BZDjUdwbun˗q㷌qLe8]b+7trn_.)3yѳ?lsC8[a/&4k}br`bB^T W4U*LQCg B2c,rs 6To2ݸiJ~E ׁ}(*}\R2),q5ѵ4~MRqrQEA!K2zqH&{J9 ϛ6jt㑴W;Ai;pp'm*Bwǫh?]P 'IPl=c)K2\>_o虡\4J;F31g.WJn]4 */0zbI+,~kFjG@7˰Z 9u],frJ5C4̇X Ru;GMm](#-m'zym?h \8~?׷w`%Fte*3y2G~`"r4x BPPm|.e2`%Ȩ"ک"њ/cpz.)oZ$7\"d(In9v&{`1ĄiBS\aD 6<p4IH4H&2&:J0>[Y|r|O>H5)U6*AOnSק-}544w]w&Vy]agD֨0:yW51jh}awWpHܰc2jr rPRq5ieP*}1@iϻ]F{ޤ^YMlqpV$GΉ_Bȩ4PRp  ˙+[^ٚ ڌv!Ĉmo$%mCVJ=_0[K(38qofj )KGW/$-(̪5U!+c5;Xp!%Y(?UM$J÷w&.%,A)*]z,#J$h/&xyN|ҙG(ygOx]iJ*⛔ U\̻dLsg'.T5\Z`_1y+!d:g X@h}KYJeݠᰆ%_P4 eR-h(_ HrM`zQ '矓~Q'7 0fQl7nn/FJ2 &%nkʭaφ-y*^HQ]UBWUN!w؜#'+PX #/)kaejk!ؙ+W2׫y^ Сsq 256o#5Oؾs6Kv AFJB=Zm q r"yQ|NyF[vcGF\VV hǽq LsZKIb# - ^~-׌'/Q!d{wUS8?@O )QRC\>>ƗcE{4`ż-sv2Ł[IU/BrBv:?)bqqM}7*6Qh=#d!As5}鍺@\v\Ͽ!` i'%àa- T1PS8lJw{MI(#yh(IFS~(EQ祳r~q6=vrUzUpA,LcS|=`j(?h?#Qư=^&C@#~UUxNЮ y!P'1ǧRVvF e7lݺmwx+Lt}Nø8?Z&68,4D. #Z!fp1~K5$,0r+Xq6yMTu d#Z55h]n4zg|껀Ҹ{vyWq΢m#P^2brҺ,]| 7g:llfB0%$$&AY `+z ڤg:e S/+r1APcEUfkƿ1y%{)t0WzaZ$M-.j^d/s9vQjޗ o,"oдITنV O/fP 'AxZPr/}qo~@wqYHlbpedQϣ#Tw(@Pű lٳ=)EFH/}GqJQ3=*h ފ~ϓWs3Mn'[g1,}9񼱄s+0àq>KrBHz}KE ޿Ac[v k-7n ]6 3٧V F-*t,$rHr##@#1A=ƼwLVVa8x9-)`5Zl1哈y@߃S6V+נZoE#Pg\4~ΰKSbC{(>s]!6-▨Dl vvg xI`ѳZ=Jcw#jMMh" Eb ?)gv8iE]#㞯5I%vUNx5b g}8;E M@0.. ay^%b̲xNƴn4*r]"VX0'?^6 Q9+Wڐ|-oos} OHؗ&MFѴ6S|:}EؿOD!>Dc$v647`=0>LM9jfCP(d׃# 2-l's8o'Ix [nF?W[d\tW<,[SaZ#A-(~ \E_ivr?uec.=j\trw't'౯n5%4o['v[Y2&dܵy{#MP%rMx_k,:6U`d% zedHxs0 ]1}zϾyMc51Ug׷%U:9b^k7%sV)d<0knYQb|Qp%9kFgIד+R)OyrZ7fhyGpxeb,zX<e>&fzװ X.`|+}V|iӶnec*jeyĘ b+$Eq$N 7`@0lkSS}|C$o`.{39D uCG_>pe1U-Ց `z"HK%5ȌG Dp0*K7ݚPc: N2ٮ5I&Uޖ`?ȇ4NF%OǒoSN6o1By,U@F^>9[٬0TWw7HP.I~ǺF!c^U 5&6@Z8\?nQ} %&T[]y0.4kf^;I@|KҍpP[^7kgO gzJ+ 3iuSuY4;;-/z+Ȇ2}dyB@v}8nwbnXE#w"@B"iQ9e$J7p8DCF$f6>ȩ&AEJ YFZti0l'ᡦEH"Eo g፯YT~?3KDۍS7a f:^'3v;FwzOCiJm@Sޢ\KT]pq_ZRSA}cyf&A;90H/MY QO2`'߾ Wi[H}lCqw*6,}| tF5[Gl^Z!"d {C}pi kslQ/HڑV֫>CEɔP$JhȭѸ=`V@5+mÕʫJ=6b-1)rլlk'DEr3C,tl/J K;hJKj0JXsyP1+`Y"%(B_Jс7jb @iL/9X;Weg|b<' xlR:UUJa薀<qv~/ɏ膣 Z/$FQ9S联3ęR!^Ix̰k]TB&ߐfVL?BhvD @`MT!Nċ3Ip߿.cHztn4֍zo3/zG Qۮ^8a.1uuN Rpس@x6o!{׭4WFɒq0fnIrD^@^Rړ6"]6`ֹm(L|䐥j-ߩ uXbn K"7 ?^Kj/7ob/AT O!Tbq O_@JM(qN@:f٫2B E7P"iW(dm L|o4oιRD6+c3U187#v/oJK|d̆\ߎlb6`r9UБwLbd֣:DT|}#Nyb)<#_ҁ2gzke7BG1h΋I컢f=ŜvAYg`]òsvR]ЊQ_ JpVDYgrlPu F"7pPmyoc|%s=% ZF5XvxI~mo}*Jd;tQ17A3Ͷ 0m5g+k`ę] RsKP= GJ<^%՜ԜN-R\IUޱ9;'$7ʺq-t q)'LnT".{CUo02gd:^ǦJ{KXҶKý)t ο|wWUz]!c:,X8Ac~HnJDOzQAa1Y6AGH_}/W> K'uNw#]j}ΫOoZkDkƞơ;EɔNG2 !Y{W[ʡ/zR`%ԗ7?ea}BZu/Yss/g|NX].Kj>gd#V~du.OƁ05OvQEɏH0,FNI@ _JEU`q;/Ӏ!s)y5 HK(M=0M_ XçǸ!}<]? br.]dT biřYLhJ.a*kQE!% Oi~n>&ZZOaK)^c6'nWs@IeR-'IU}ޤG+XG=S֫q-X0moZږpBVUd^ЮnŜ'Nz@Q(`.4S~KlY+/j:Xhst8%,#@F2K3M֕cFD>EX(Gnڊ,*Pøsv1'G/}@ 8YhOByJ#KÞZ^z;+iy CFwT h$2PΓŋ +YN͊ޙ [DqI̕{Dj|Oz9sU)JtcρC8::R]Vc8@F΋&?y"w> V)1.إi8Fyx r 3H{/E9_%þ 13 H-l~ʍ+* @)G*% 2B",#LY\̖ hQT.K)ȋG"I9;V÷u"3Nh^AOكtݺT@з17?eq'dQXod>=cJ!|[8j[(҅yY\uh(ҝY>\B+E̝ JIkqR.qR*"rA>8L\ovn}CH*V>Ь6A53Aoהը.-v=~Ѥ.#>צb`EH0P`cAnL y5C'pv.W-a@J،{wMF`-1|r1Y6S #pݒ\Jv™>ݝIc00/-C[ A A[_!J~*9cKchy]wPfy5zj \,xcփ(C\ÝbP_Ej!5Y1*O졧:eu+Sb'D};[ 0\_ e:U^ Bl6tb'~>!7fʡ(kv.mbwTW"y̖*teL sڇ_;d"i!eGx٥Xp=$~p\1M~ǯBJ#?JF Y5%*7Һ[/ԩ>,u ֕t0y}ЭZ\I,:Hg'@`҇~\+o=aZ5ݻzU)Yuޅ?A7r*-HFɕhBMXz:h8N& ݾZz.6A>jh!0iczq?Dt>_Z5h.^hr1XZc~ z B޽*ZU_i)fdŨ0r"zPrT37#j-|_'^%D{2exƦ򯷠ײˣgmg>ڭ$kgT0X)O4@Kܼ?{\RooG'y#;RD=^%# ɇ]+@ƒ .Hew0@8U3RMy3A4Xp/ry"З*=s޽駁ߌ(.5F'|YV2`QTxvDP;'[7;)_ q/x8Y8! ,WN0:sݴh]y*R> W0pOcVָsbπF Wy[=T XdohFp 釆t;IPz1c1(l_ҽu2q0A>CTuMد*:-?ej"ʰk%HLC=GrkGknܽU5dEMӥZ[0vO=C*WE^ÞUX ll角KQ,PC#T4~Rp܍bCi6T!H$I ֗Uaǵq)n H.A)Y'N5&&**g@MNPKC: F8ݭSa\DT|I J5g{j^H{рejտ5Bv6tZ~_&txbt>j XȾ=;-T(@fM T>N'5vz=˜6/b;hu3LpCzƠuO0:ˆ7k"aۊwO@*)r0\>'ih<bO'e m'{N~T!\:J,cŘ͋U9~]JqҧG#\ŽLie^/y!_Gu_PArVQ'~tY;d3'474f䤉dQuD+C (}iT!o,feRiӥ#,B q{2s,*cQڹ׬p߂Dם Qe1|*S\OX-ԊF\ tUp^Ӽ'MAUЩBYdp]rerRQVgr T#Vb&Z`xHù.FG(9Hu Q4$nX!;0) |tJxsNFXRp-Czڑxi9GE4{DW< WolsY""tiȔsܲ8VSNvb/8*:5  9U  ^h ^'K_¨̍ gy=w@ RKNo5Ecz6ɞ[&8ŞsΝQc6.fف)x˅]To2ZW Wl݁6U>T(N98nRZ&8ryj\2k܆^j{BF ?X}D0h ar?HTGqى Qŵ?%w4&)ƺdpp]8ȏ}uv5$>Qd$ÊXUɪs/XLeܙYɧ Ġ&`d# "vx ͅ`iD~q"%)دcON@$X/}Wf04 U:8@ye+ڐ; ?d޵xS9taz>g_>ymg<o5|;銥8+jjX`v@浙a^1d-#֒F`\H`iiXm- *̎柌kD.vJ`*!Fl~0L>Z{pa&<uًMPAh`-Q}gS` 4p_$U$0IORsF$!Xs(AyOъ}`lRڐDZϪ>񀭟u J⡌nѸfzXȆ$6RB&0|4dqxFfwP EG])~ިIAp`.UЧ-83=fX_|?)XLzR4Es3;msx]{kX &Uϼӯiu$Q*i&}$v`kZwB͂t:)u7-ԯ{¹R:'>1D20a#E))q;NG~$Fɀ*AZs뱃U1芒zVj2\y2AKU9*7i~7k kECj ԽV9w2/rw#Q|ԍj7*N+ mJbg _.Rއnu4a 䓫3)ԕ8[_v+>B< y] v{\ s; ,w?)kxnL}nDb`Rt"~#ʇ㶮$Yy-\_#j-.:k_ga$ E{r5*2_ _uʈ1("!zwLR[Ҵۉax>n*̒dd+(wI*94wtCD0B>`~hHN$n:b$k-D\f2)بqhT4C4](WreЋ\% M\ CKP$U/ؑs S@5#I+C {P[S%Nwt75 HGT ,87;[a2#FT-:Ҳ&Yʪ iAJ-G6gipq,w=[k WLH.g2Rj ֒+]^5 ggC7:0iuK a;\U#3?9HϮ/fU\ۧ>.q3 R+ 4,v ߾4Ll( yG#13^A&) JlQD(@s wdKZ}۟!Z 0cWSɤR}`x/v.⌐,EY,*dLl2P#h,a|~(P/(8cϷ.>>#CM;^ѯl-X;wT|<c) >瑎1w˃Ě;IؙN*.)g-ŢlbDg6\!y MUȿ>g1{{ۿkcбQIPF͢GoE"7,tl/u 9Ha 7!ɨO '`@+LRYJ.~h۩`h'KhiH1uDIXag[=Uv)AaNB`)%;:z= \еNKn'Jd94p-s ¼ [z_o-6c n++t6 wDUզ+Z.k̜|Mbo?,XrF N\W0rr% |CWqk]6:R$:KGu)+8=s$g:* ւ_-1 7 |>yqw d'RٻlCbm~Cs=43pqhwzb_m ( J*05NxV`sbI|I|ȍa".ϡgedgbdkI8#8R屶Rb=ZMx![9u{"9IB`;e 3 ٷ0yX[lA&4:EcH)NB'A> zIp?: a)|&.nFeНdǫȹ?gM\Bub)kA=L^7 9n@TR*\I7 ֘g<`Lt05Rw 'S UyXyAU!xj-4;~ >- 25T)@ l>>c+@ELS-&];p?Κ]BRtbf ڪUG{~םg>o9‹=r:?ܼ=ejԄ*o'f݊gNN)ԬEQoI;h7gO!F?HMPm yfŒTQ[VEh D`"bh7Etn%Z1NJ'p{DyG\36x46Q"_:^C@ak{1b@lןO 0p-9HS|ǃ!:yFݐWf xŹ*B\<.3y|jTmR&O]^k' h,yj= ݙ& ^) ѓ%89xeI--6|"r[sT7Lxu8[UҺﲿ⏚k&;-> l %Z5t!'a"gEVJLzQv*G%!x {&V(ל~Tvآ;;$%x {S3|_8PV`~jL`O;?zzO]cCW5[u|@̹;X-0xF;*?ڬg"('1R; q b<ۈ2D!wľ}66hU'6 mZ3G3Xl8FZ]}Y]R/;Y r)G=?1tC9KE7i MX ()^A>J"L':5ɸX{IaO$kL5hofއ8¼x С1OR򀒠V6;t[J`\Ƣ_4zJ)h xoIqݺq*`+0y:y+tFA^{".1WbwG?$ HG S`|ȆFŏ3b&Bd..4)+XxR7Hj˜dOVUh b8q]_|= mtԘȃ9o?JA+-JAЮ#/ޡP*9z(yuཤ0/Fɠx E\2R:@{ƟNuCZ[;wXל uR&s◯'v*iۂ3E:|Q6FR*g?o2 -\DNKRuXZ <@WS_r%GN.oJZ>]ܒrYFNN9IbbwBnqorޱY[3QN}i% x4gryrӿ6Px}rypسl[tGrh3nUV J@1߄SQֿ(#YTg ǣAp"NX?-s | yP3 |NxF㬗PmMg l,v-2QƔ@uŰmDz-M^6U7(]o u(L!N0ZH[mnڥν{!gp) x.Mn~)} (4^nz*0srIZ-,)/VǟO@gۇ` :0@c]~ ɆPԽwV:ډN‡P!/H[,.i+"`n|l$mrJ}1#܅bWxhsWo"8N<͌p$o8eDTw_]F3#700{ bыvgpjDob<_Nmֹoϰ$1}ۀ}~6)^TҐ>=Jnx4 Kp4MbY'Z5 ܝr`'cI8'aCe]UxdfOe\ϲ26ʛUyKi_>&JQ $5nT9ZՁi "W!u҃n7~PDOȜnQ]κ߮ \AɆzf{$"*㢃أG)MgP)1{>6_sd2w g RcbXtƁq ǔe<< 4Fꅬ#g}l9-\5VzG_ֺ{_0&1!x8nVjeuy6Xf1|#1b`nr5OnHAt.I8;lV_Y񡆭_Di]`)w^_b;{'F<>9+&7#E|\7Cb_^}k 6q]"lirLvng1 qݣc1a=utPl!Rxm12ȍweuURV0ľV܀Wn=a.)^MTLِ{)؀+ .L6߸= VkqPKtĜo\i=MKV0ztPi 7®L.2g(u;J|I΋'.Pu6V,yf h5vI6#M$'"O9‘H0Y9 W\>><+/ZIY6n&z&(5俾_;HNUo8UiLc>,||6d]6f/_L`v4!ĈX@$!ڹ ¬%++뾈y(C[cR 5pUbs7ʛZiOOϽ I^Wr_~3KpR{sLouj}N;glRO!@\)d:9ow< yL9|=i}0FL4p?",7̵[c&}Э,ok TY6eP-M m; ĒaB '8 >'f>K5?`ʱ%-Z&*v% qPLŔm{ַbC{]+/IL&R1f+I"~Tkʥ{@Pta ~Y=ZtyDо(R/.>K⏵*ܡ`[)>b`e~5ųv Gxſ w$)d{;&KI;*CFPD(MFE.ͫ7Y߽K@kp $m*31fv{,p3Z5s ']DᰩxVk{;!/J-LH\bj̀Y-GH`~|K2Tu蘺*ML1<"5l"uٴ6+s):~6h\9e[G]G6cs~y`Q-muˡ4-% QЖ3zz ()|.!7a9OUi'qWg@G'5hȹS&V]>Gfy{/Cr}~[ÍOҡ :,QA@scu/ePHw zn *:a5Fovgwq^Q> $cW=|B9%޵(BOSRdOmƯs>YIޟO l"{9-d+{;;l[”?#okQA U$[-'AW܋C3QibJl߼gVϋ*˄j]")Ol\\h7u 醮t* Z-_N.w*JIPpÛ]#hd#` z'2x.L~;Im _n~u >Thb]Ρkk#وn. ]yrWR2_x-һҀSˎ$ l#Cv+:f qwT1faxx-Z5T\ d2!鋅z=Bj)L󃞖*]41*&8[WeADC'W<]W 8j>Gkq~;,^M4lNdc j @yucOڀ:)Jkhu}y1i@gЉXv;Sr%e~@8!'buV  ["ə #;AMoOm;3akN.O & @-ES*X4B6XU&b4Vz`Lo 6WbQt4MWA3KVlnMh"U$B@>[R g`q҂,[p*u͂67vuCgܟע@^Nc] q')_0|h p+ks-A.Uݼ2U*}kksZ]8ޘ-¶iCgAuR0Wׂ[ yQXOu[ٮiA7ELbЦdi9L2zIOF_D}RZ+;0 e[Tgr 3IE&dO}9Z~#:SdRdXmtJvuNX"`gwiкq#\@놙 b-zPϿ)xnbH191jOeu Ғ4DF\fMoyTn6̞9 [*j ȍ7JKnHjE|3MUYO*Q(/A}Xe^"c倫FEehĚa9;E:e}]m>7ұ ۼNAaR VPSP| bH*~7 Һ }6,W?0R3%J]sWvhq͈\^5 knjb?5R }5xxhdi Qم}+ p?4]Q&J 8/JN\/arqmBQ!BҾRiF2Ax@[g%r?Y6<8RIGC@㩱K>*' OaAT;Nt^Exƈ:9HހB:0 O> ?[_>4M姞 "zp̢R)kRfQX˜a=P @r1"smn~ەivIzM!g!ػ yYx()o5fםzL[*rBaFtg,D7"T tio:.65п1n'C bM;(>:hb|q #W8Xv9GL7CR7/񝰡ÆDHr,D}dnp~؞ųICU"p:1ڟfx-e$hFۼc|@؀!ޝZp*K7)|sS4`vjqB!iQGV ȭ^(B@_U Z9Y+@YSN:S=&>} nܫ&&t!?|؞[ ԐZN6b?_B)~s'v,֕ 3WXx|3Fy;|Au6{6[ڂbH;d>S8簼R,`O\\Z ̷?Q(2u6Dؗ-cMGLh7.SUKD5AmfӐxLjڧ8+@19Bvp7w].6db[9uQbK \JKD#{<C*2f(jpO?,%?ʉcB+"j7xVBO缄NDNp.L;ڐ_TLPs=j%uF-IQ4J=  جv%LOu׊,&VfY*$"t㣖r|J|MR~B,y-H9ư6G"]Rs\nxp^gbi^Tc]-ErҘ$hY&O5^L*52 0YL~MJ{Fd&#dU4y4"+ L`stT 6fo%?Rv6Px)-mm6#m _zcB$$;;X ҃~  >DrQUDbTᯠNDz{DN'T ݹaFC/J&z+=mR:Efb>Ny1EX;t~P<`ٔb^!Њ`IfdxǥKJ/,G2xQf}Oߪ,(; >bYg䓿."@ "i%%ӴN}(EuNGowJ%oc#)J\ %-(Yzы:3Y&i{جz G1YXzalZ$RAŷw/&UD> QDߞw%jz —~E0ne `uA+dqD_IZH5S/sYk:Ԯg]d'!,@RӦQdX.mRlWqUJy^j) 1< %@_7(ד2car2h;_e; ^6*D/gHQx]&ISVQXڌuD:8V[L6-9NǸ`F["n>•Q.Ҵb`jLj X}}anjY;x/m`!4 Jr7>ƭY'G͢k_:;`"1%'gIExzPy+`.]"4KnA)VAh()xBQ &D̕ڈNS̹ {e$cų-k]y+cj"Ue(o5s?Xzl!lRAR~SM=a]*X!RaI%<3 w5!}4.O._xo ^MH=ǏqwHJYٱ(5#Bfkĩ+9a  9}{#Lvn'$gؐQJl?-2t m'1VAL.b4L ( L]_P\ԼhZH7>'{k5(=_67}T-'+rH#҇>r5@i-Z|[sF\=/(0 ֢ { v^H# yVe/bZ CqwW'l &۽^-ʣ KB4Rt> .u9ÜTω<տ͘9a51+<0)0ȴgyVyrA(BVSԩ"aUظtG4i+? G: ^뜚(2/Hc=vC0]Y2"-m ]= <#gIn,"6zzَ͉\Z )2f뗢 0މ~1w@_CI~ȶ/K>I+T/0+Tw  6cqyw ;u)0U=a0PkG %ZR)TA/PytͮSXܸu f&"qD Bpt-gz{6!+#`0ﵵuK3njh9/'?_lƥ``|k6:ָd^u =G4jRBcB|Ϸ۟K:4١hDAH54(IfA߰`k9>㺪vi;&ߔ,zG<y}Y1~G.bs\ ϓ\zٲ 㷖n_ăJVnLz-u#8;ȶ]RF[=ucD%TCcWjyq9Q͘G[vTJsyJŷasV{gs<R|g07 e|[t/}Eʁ*)HR e`P33{>hA8ӏOGt63(`)O]ٳTw1lv"O9tEr$%VH] s%- ta2Xʵ2PYbB'VzPn'lg5Egmc 嵦ANVZ&<Mg A!nѺ H.sޘBOc_e[` +`pqPKL?O?Dj [A2@:rYER?) z~`Pl]!wݰ0WGxa~Y0O4Mj剎 rpf 蝍yx] !̑fԸ}@}7j+8CNZu{[wn/u?AÌ\lke)!h|gN,ߒ 1sz:$c,<g~X`Vh ͣiTz*o =b^:k<+.+ƺm3\ޥ-Ry;aT5`s+O4*t H=e5C^1kȜK9$DN`(C(dZёQ>SMpۗ4,ɣ5:N |{-EN<Þe&Wn4xۿM@X-u{_۝MʼxBw lrՐ=@jAM p.n;<?3yl$ bՌPRz$\Fhȸ{8eǮ3Gb- (8SuZ;(%Xcd<kXCwv nh cY!Uiki =g(O9DUQ 5 ~ Y4wp: 4 :2Z$`4qu0M$d +ٿg;^~Q啥CG 3V#B^!`` }UguyY5p_H3cD㉛4I(YiuJ{Cva֎@DE';'F)K=2tlO7DžnײBEu\RYg?߁wQ:r\DWض^W/G D(X oBE n3܄sA'98'v8Zt &<Yrf5MqJm'}f7 O{Ê &f+D3n:dS8M{Lq):p%<$BHl"2aN$tT',v=d: {缼c] Z_P윁զc &c_ŝ# ]4y4p% Y_J=sN*<*&ൔLlLC0ވ?c pՒ?SIX?s♪cq_hX』_4)pkgSN~1:L]3> \ L&ԙp^8wvٛU -@{Mj[sy*~}wAs.-ޚ<@:ރa%$풀48Bg(? LJha~,Ѕ_.>G8h'DF$>wQАPTw Yλ :(٦{d%Yf_Cpy~avچA%/ qeq:t}1|b-Iܴ,VI%%'Bʍ7ܼۑe‚VZuh5s_ԯp@;T<*5$VkT@u>}5bP6~ SSid;C鲐O2Ԡ;?X 0熯3YtyIMj +qN^ 9'k;"uwBmCr(?0gZ߰QT'[Z A],=C"5Ɓd`{iK*Fg3? = ]H*4D%8ʃWQi%=C۬cݸ-So%#D ؑ[/ڦ[Lr,)' C/ . " }݊);?'!/dt3W.Z ŗ"=gYi5fЊ1(j}9IJSU6w+PhXAPMYm(%jL`[ H5֟{i⒫{i-z^'Ȇ-өvdc\'f4/CeOXhY}x ,Ac%-|*V#2 s ?XfHQ>RƇ^{9*l_Pdg5J`Rd$Y-JQ|M~︕a'7h;%"%R *yZ4h.Y$Yx^Bŵ&:St=I#q]".s3lG9GavEr*BݐL*~4oϏ^CCP+dqbh/'GךmDS[G eJ1>9y@ ( dd$Nq<$NJӲa=i?ò{=VTŝE{!O"rS b2MY20I^eSA1,t|5.u&`yeMr`^SLm<˿?JbV3 uU U>mmlJqhҰB(i@>Yra{kP58(:*yWoOvuowrR3hy.l9׆Ŷ[k͋1QPM4uC#ߝ 1S9$n71VA)~TG aXQX ~PKV.l A}?鰮gIK Ahq@y-&YG3x`iև(^Tl{c%m!;I؏"UnTB55[͓v-e3u2a"_5fҨRfZ^xL[NEL nj^J\<= g$[Ш/t] lwj g̩7G;Y!UlB -|HD!R)P,["1Q|Ud7k({BYhE;dVo2? ʖ C,^tSΔܯ-|sw +и,+ aD0dYU_aHF(I0[9zIHv-"6uN썮kf P6,(*` k| :!鹖)i * e?hm`/C̫r1F/XOʣ8oZojYELƿP8!=;vh#X̅G6˫*i[9{g&}Zb~c[5΋^ifV.iCz(zHt&!Op9lXNՋ *EB9AAW !_%Qf\hj'JD\=B)6]4} ?<6 *p?;&n4f$ 1eRY}W#D;>Z]~M,/.u700H368/oVu[f+M0"$/=)F ;6f,'4>nS8N^{XDC̬(S*hA!0/e9ʍ(B^t-!M&F,-"{j7,ֽ}MPγ *S/3H >wԠaqM7EJ̼(Aomm&cfsl,De|hbĺLZH)E`xJޢHdInd ;;G`DH1 uWC骨^o @y!p(9Ӵ"cّ``sέͿk1P?b\yyhD̄DENq=.ígri ^"by},?*HTwƅW_ .V 3{ϧ*>؋׊d zn5no RC;2w4GiUհ/b-7 ~3d9 |<"ř'iҚKif T] [&88~0/Ѿ#%J,}w^i쳈OKp8E9{3C5Cȼ ?5=[Q8b>*% ݹ %a,~h؂l['NH5^`xu&t/e4nA RLgm26jQ$kU,/AbsOSN]@s@8h < k/. XchY<OALxK@ROs p? |vP eELxiNOV KYG$0&L]6f3h1MB1ޯp]1: xw"¤DЏ#0Pj NVs*H; }䩚 ie;/Ge yFK 7„,ї))ѩrp?&KېW "h8-?8@.aӔy056^Z8\16 WLpe gS)1YsİG=+E)unT*]>gBJ5^s+uK(E|aK>vGks,3ÙR4b iRjFߔv`$$*5muϹj~YaOym"~٬b <z;W;0Ut@(ښsK 9]+i.3~s,C?4%W+Ud9aǦ *1mSKK6М>Wlx0Y}{YxwR«xr\2 BR _."Dv|xp/|fA+*e^ [2o} XbFT_g  xњ xƷsg > 'A~_<yzA]j^kO6IWtfR RDY > 2 \zdn `bA@Qh.a!ey8;ϭ|rỎ=8" 1pZ>Չ xa u{(fH9_fMWsJŹZGht Ή ]wmCb +@qSguD|CS-C>F 8&Xm’_<]=%/2$`FYiNO*4 ]IK@}Sf.ZThaeK? zhI]wN]MrmH雀V1Fuh"qc O‰:M1l $FU5d` C5qH{m̷ 9}'2m!2A] OF_u D78-X*`]NR<Ҟ\pFhx f!hʱv^K+b )$̯[*uMt)$HV {Lf_Ķ=+7(rD1@Awni| ܠQHl|UH G$;9(11VE]mPձASiZT#YFJю(t}0R=QK<$p!%}we ۈD 1RtW2􉮫R-\ydצg`gl,@cK%hɷELgJ/dg!ùNyW'5Ҥ-H5yr"63R1 襛? xǂ$S_BC0v a9q0 kއ?gQbX1 uk5;wߊJ/9;ByLBX%\;N_R^MYLqXFoQK^STڟUW_U:4וֹô` D2`OECשaq\<͎*tP@θ[oKѐ^fhڐg h*`(?h /`(L@3F.t>4VTd,y\rh!]V4b/F[YztmSozwva-0vJ,6@uDFʲ#iY&,V.>Xhve)T:R81Oy zWBGD4vKV/x&٘IX4Z9@W!S\2"Eڮ)J%ط_9sBp>+tA'SsE$CM&ۊ~MxakᘎAJ q!SgBA:XZ'^e\Ff JrO~EN /F$Ji@z6I hBV -k7_KNgzhIcԭOԢOGȓv΋Ye<{Yt9 %(M8>nuP Ǖ7f'UM PFR7ҴlV>n:r^:W`]%Mx4"Ot6օ@ 2{9NR{3>xDI-UWq_flfKcVvrZDtEm-BW$R=_=3l/Q;2e|{Aʩ,? zdPX"n5@žvٝ ;=2zG8P""}r8襘2rUIWb1_ (qpsGl lCtI{Q_zp(7 Y 7 _i礨kF}UQ2g̘I]p_sSMQ'G#7f!eJh7Fw ىV'"Z̎Y!G+bZM6Sj*WL9H,o)һ$xE7bTRՃ=]moO R@up3@իN=.4?[Tz+&Zt"287/me7_u|BY?UL8uNSXnx!%Hp^4 ugqӔ6NM9.fP5:F=lVlxH7,}lw092e9R@F3׍+CN0:y=:Y= BNlg`U[NI9RȤI,IMPʱn'|xo%y0=뙩8%t@nL;:;%W,I=pH.RE8(uN°)o3(UKKT f0.};ت7SEGȄ.ǰx6TUt_*xުcũW>pڵRN jW22}{6<5-MF#Ol%_? YM+*Xzaw`AWR47j$*𢻡Zt !T^skgΧIeUu`ၣޑ~7F2ET=F!/W–{cTC]KnY,&"YAAF6A{Z_8,C(3Lp[2xW}S4߀.jG* w`}  }1V#RCMaxQ9j͒*UxA$Xnޔ_%VQR3E=ʫѳKIb^g& Ʉڧ8gs[}P u܄V8A xea .6s"l|O"RdMX?=< SI5P](Tx0:5A"װUW3Eґφ39C82kMnxwo~"U> D%pgҙ' 1nO.6e-!C7.Cs6<1Gsf;IcG`Id3"V^A, .1sftRhNm׋c:'0џ &*i*9?[dogOTRY Wg`Mi͘iX'__z:; WCc3gl7;Y.җ><8;Gv)xit0+<znw:H۫ $ۥ y rd}B4h^+a"fM*mWVJWoHS~vV8ۜi:XcUF>%%NpE}4{fފޕNF0;۬Ч",\vWXϸBa kN _oZΊ\++v]AJ*\v@kJ}jyNnڬeX m?ZIQM0Գa|ttT^L?eM8T4謈s1fu谒-C 8U9`2Mx?< T ,m5tyIknTtgRH+a3t7Og̖+dsJ wb1o) d-E4985f8ϹV0D('ԫPUZnPC096z+e\V+y 2CoW)McOT- 8,3Cbm^7GNT .@(1MqORr!ܤ^ &z(ČK/7 ,"!&*nNg^M"U=.FRwFV|m(:$:\Y~0q 7+:ʖ^ex͇W%Q?-MuE3mKD- @Q n_B9՞Z 2}N0Mbs362<"sU"[0Z/.*$9_'%销zU#h׊c/YO2Ad׶N1)u,;q$]?\{ڎ5I-S1P]`%:jQyY'ipFqxA&$z{&piP=R@PJ3H4]00ppy.6H z!L~*k^HIv?/ ;]yܙSs! Βmv >J_#ԡ@hi*}%ekAE{Tw%Nܭ3#Sm3IxECF]쓀){.5=)-^X;|;%Է NN+砈{83c=us֋7$P\?d 2NiI$[zϠFö1>v <$9>քw%0mhS0BfC H%E]2XJ~)BT:ayv&Jx잫W3(X:!n}Uv3 |'rUEL(Ú8hE׆I_6W@~;x]ݱ=aTf0%J›q<胒·ˬ M!daڻ.ow?}9>]SxIg!C7~A@qŸ$[>~/o(I<]s^k_DE]+/ 7n?h 100HTQO4# ~MG!I^z:}l/a~#%_w0@u! zuZv@a sNjaX%jt}`Q hlIB?)6kjk4>Rƌt-oBNR{rXuaxj{·2dQRozd5挵K('97bfA#uh w}$Iu[dB#[nHA$^2 Lē#?)զƸ?Mau)d(Ԅ$唎]/dYeCk"]gī0'L&5UR?)]cGt`}s+QaLoH!&oy_WCKǐw%=oO"ۏcZEm搅zn=kS˂l;a`U#xsLwuJv8*k̮u=E8C] Ufrӊ@GU;(\aP`fTψZE"Jb-dc;*]|{,dGw7J)($ %ODjja?dԟ^J coY\#k35.yML廈,GAu>RKr{A- L*)O%UAg_>k,ڏfr=",W'DnS&Ν 1ױ"IAP̮ˈ(z64A L135IZi/Rþxޙ#?i .Jb-X:IֽNUW+v=>p$o&9˰nl{JLRKV+<y<|7c+)-`>&Gӻ-eS;p GK%'CoGicهX0my}d*ʋ{ΐI?`#TSZؘKOP75\9aUxMR㡷ţ7FqL04o<Φ%9/^h ԣp>v &,0.01\oi*kK$UtGs͕ 4$)V"ãѠi]#Er扔 vm{ 77h,Vm Id^Ook?.qq. ]n7n>MXlma= ҲUG?ZV&_kCٕo>`~~4C(4q|dr=s,4N'QqCSPM$xa$&O YVn_=k d65ESL1neҭBTC'_I )F] =/z;'!M6W/^cz;'܀gU}j25)uy'H/r(h;fu5):Vht[$)̨%o>Fꮂ8 P]zr@G):g^-3Q6Ps|gMe\rU5ܟl 7k Yip% ,^|f@N'?\zĭ_idAu˞2' ˆ1T@ŐŬ7]=f-q,I)B,MGz0s6 (/tqR34!398=t W)#SYȒVźcP0߰IGnbCCe$ &NdHDtJvAm7ڠZx\Җb/IZDZ_O$JƁz $/&l8gJk\ƭHpKu(rnz^O+ǰE G ێ6Ћ>9bS0$zDM C]'gck8h/i|"ZHpŇLw@zJe5F&`I^SZp.ѹ 2Iƣ<K'@r7xZ&Խ[jI|D l}%DiF7+Ss6޹$ei%:cHЊ !C47 /DEohRX/$qs*@L:,Kp3 <_( S-ȋn!nZi?NB?v U(TSJ)*M#{Ӈ]LƙY4^T!5A[RZξ pzHܵ({eoVQN`rf Cs_;_'2z)n'Kq^p`WXUQ ىLji в"k!l8Vkn+MFZwȯhv؉d9~cWŢP˗) m{.?zHZ`2ot*^FVA(Ic ko=VdzF6n*Go74 _Z/4恡Fk .Lʚ >Tu,Ŝ>N C|o)qǣ&lgUӠib3 qo R-i ߕ$͐gPv- 1`0r1@-t3zT<NBdzvꞎ#Fce:p%YMR6x|0 K_ rA9)=D tm.5GX4e)@4ǏTiB&CɎI}DH(`{_X9jeSԀP'46aG&iLZw'h I O" <0vI seuB@ƚ XL򲌭| 2{rV8M_|+Unt ]Z)}3MЭ`kNI+%E->;5xyƓmSLuJ[DA z|_IA)/ U'!S[on'M?\y&fOo8Af?qҢ{Ȃn ^aMg5kd\S( f88EEQ/q%G=#0SGђ ZQ9ޖ@f 檺xFrфSI3iIy*\["*Έrϝp>:3cA={Z["DF=;祵8(ӇS.NirÕ`bz\1Uo!}qk oYfu^8$i:EX 1ixiIwVs?#"IxD3 IFj䳚׸@\j/EU' suKm*xԭh=^~L($S<5.bI<3எp8[W⏳=M gdl7nB$= &սmP8I;7|ܾDg7w~ Xejf Swŵ.M7DH8UNA53;9vػ;Z`ZZNP\bɰwejd9-&Gp@Ν^Q,NM1$bу+ҟE*H=[ntTQHOp.ތ `<&?>xK}u¤z4C 9dL #QΐqK:Mi"@|B0k7EW _6K>`\.Vi#SF`>( %*ŕ"|6")a++mXjEoc\y9KT|c\P|Q,i=b՚b4DuG?0#h2hX,ČZK]#Bֲx)wa?2Mj 47r/+yGOjy #w/!T66pBL~ Ls"qo *wQ-Vb+)Z(W!U8 P/wNO]F0ĸ=h*yj8qj_:v^EP^'uX-環J (q֑ql{<.0LEВh@i]ڌ 67_s0*dhK\@߶JІ{oX6^yNw'](P{ e&vY%@|<(wv7ЩECҢ9UWNvO;Fu@EO dz܊TEKZb1ɳg' YiʐXO7y<)hs´͋$ p zѹSh8vh.6^qݜgLWMCk9:H7ոO Hl ZH𝰋:<Umy'k;|?@P.' x<Xh^ ": 8 >-BZtQTǘؤ噊R4=]K8.㑦Ƞؙxf"G{g7\0 TDZtE8ܘS7%h Vu| apqF3N?vXWƿ|uO9/jL v/ƈZR2TtK YmrAfnf=DsQhTHoh<3lh QVyXM3 bL%ID.l;=}Vax/$&{2ńcs3? Nx ` akt91"I %p$XG֝fXAp{{uf޺/Ǒ.8ϛ :ڔkw(>qHEFjDQ `}VHO?0S{T kl 1]ohkiz&.ڳ/@'fNzt\ߩ>y(Qgt}u>\KZ:muvy7|e\ftm1831gn2PX2=3簗mO@C5-sHl+97$JV[U.+؈R9 ԤS0W&K Sq狰Uu $g [ͥt+Uuk<3E+]5E2:EEڋ cpp)oy>QZ|֡&I[rB9Wl֖-5_k >NFV >_jW~, }y 7zEOOI"hWbjgQQ:")h._m2 Hv#^xJ rXcqGh7P>`YJ {R6r! ' i 2S]cECjtk񠇅ԬA7p1Eg[A 8wEcv0iE3CxtP#Id% S @֥$ S)د.ĺ%[@Jt{"2*Ǧ-ɗ"1XW |B;+n O%u JTc+7uIpx3$sUj~;MY,A`0՚9#CڮL!*kFyt8RQWo!t"{4alc od iЃ{Ub3 m_Ox=Tdx@Q#zߣ57Ev{{L?hQ.ȣ*Q.p\$+N}[J{F2ɬ0 L2%ql (f:o? ڼ7x w/כgb3?u,F푉EsUTt\\;Cv88,;Bg! 1Ƈ<Z3hL^! i5Cd>9~_]; ~i=!6_57[Ii8Y$G7BAUH:a!h+kjဵ)[6Y3ap?yu3NN*[bqxֶCGfVqwD)Q* Lm{}ݲu4TtUUyF2=>a [_U.,6vl1 ;9 $UtdWڠ_ DzLN3iAJxBs3Gс"ϸ$w.6fWU{Yvz< ?:ThV&w\{Sж+B%'c #x:o}+y7?[ann7>*´ ! %t~!3N_eJO@Kx74 9Bm_5.MLMsnbl1DGhL!#49&%".kzmO= ^]6Y<~wǚty`qkp3v"{}yJtQ.6]YRl0[?Nn$P wZh.8_|в]vPHarPy@K(eg!4XI)2Il%9m=KEP!3&fPZ@q:/ A"EuE6Y:q n?ZRRL&;xws܅GCƕ^:gnXP40qwiHj9_*x'dX)Lk܄bO!P?Cs!ުrO I[ZukYY#%po$ݑ"m)ؚUU9ѯ>ޱ}oj=\$ Y_1@c­ꐢv ]̇.A*s$r*nxAu_daju!y*~G@ŜAK3REaNƸLGԵ""!_'W>7~&^/rpzQj&ˆa7kdP"ER057:g@?c|UReO+$\}\!ogJ|v6!hux(]~&򈳢St(CwTɮ Y\bCDZA* i=$箭kO:hp.ޤ]_r\(m۬^kr" Bm?9+l]|n 8q aE0d7Cv@*A{ /\L1Q9puD,jw 敘vW5(ӜLTOF)ۇ@N+n.%ʽF Bt;a6b61F_"CGM]]a M#w`5s3 !j#z szXe| im׊D1 P@NIq2 [`G-\QA`Nm'l<+ 6FVgrP2G}y {@- Hdkjq6*(+N0vAطE }-17d#JA|0Bh\rnDZiy>D\Fd?.f4''^!9CpO0MΈM{p sB y&KBy,}ZMi3PQZG^``lֻWG;K4HwdܲRt޵6~ZwY sㄞ=H-+ 0=$q4NHT+Vh5 XrycM8Xt;@>*^D> ]f\3F~-j`)M.4.D1ǰ~˷O^[_Yv:|}d׿a+RS龛SR:t|<1nQpAR\>,Tuőp^í*`u;T0K)OxE/Wp$R\_3UE˞_Ƃd| T ehowħs:l$Ҿ}2j#Qǥ} AT'\.D:^H9P%N"$JUMڦ9,ȸiTfQlҕCGY){ﮌ@E"AJ <\jLCg♖#Ib ]#(eY Gw#H۠]|_r/[4oϾ7{W"|ocgNoA!wan|WVjÇ\U&.^&R}E`Ӏ5Ej%)[<'DJYcu>҇;3کS>jMˉUtyqA"0t2 wq 9Lsj)χV9ө5sI'`X\#8ӧ) 7=+a3x(<9^%9\_=w-HDyr 8tO5*H{G{U F##ug'e'F:rQӏ(Ne5 >uaFGq1PH.[k@%5_ {o ?K ~[4L?#GEj/ѫM?_O#t!U7 ~vC!+nJ6:RV2#1ld`EAEfqJ呀<.k%YxP $ue]R@bM^/r b+n8k%&-_-2G[仑H|.?4.SmX[ j>;m*If7hCgQDs/YJޜ<8w#Gh ~箼PK?qC.ĥ{+)7Qqr37W37&BU"B>ǰj\!gM0 gexnԸY 8Pp|ñ+H>-he8jѴEV~ut&1+{|?GloT5g% d< Tu%g($ +9hX?90S(zHiO< A (2l4Nep`>6FK|_C#]$I,ؚQ 5BD#a+7Orb;<.l¨yFaǵ5HEˣ^`3@r0q ux%K [#ۯ>A J~ ϛ@mX2@*%L\pшV }/X:Y$o!R҅ݔ-CV+m0KT{*f%NIk0O7/ف.:[8cS>=~`'`x J3=J'$yӟѕv*&]9[ʶך76Fve5Rp*HOV]Fh+bܿquъDaF )ۨ”͉rDv>7b%7TJ6tDv*X 3b2|-̔aN>k|,*_z`@" wkFf(Ay3 /"GG+S۪tXۉwacdԼ/ cj.IWu%~^cvУS15a iϰތCoS?va._mYHZpb#,&J0җ XJ\'ywڿk|'b8>?[U8QFfzeCD=O^:8^z%Dbd8mre BվC/4Pgf#uBHQ{1 mhS^\n I2u\&ahHGgN6M SM]i"bh*ߘ"ZTH=)&AoMAo^,DVƃv/z|g^TV֫(9rл&yҌy^K)qd~zR׳8 igM#}$U6T滚89yޭ`\ֈo 8PSS9Um8Xqkd6] ٵնQȓ Q:i1y\~P]mOy|͏UN=X; !qW"nzWnYW\mIL9R4F#)0fwDtMeRK`tQ&!ye!W-Au7{D?fYC+3"W 'OP>wD>ewf= gOKD4#>JSҦ>P)l˜\0} ,10wa#G=y*AaFtI!We+}˱' lDG8M/wfj{Cwb0˦j  XE}g(ǼѬij~Ga4I3E((c,ו}3Hq S34OLe; 5X3̅x֩R0hKInAng @ ,?2.A<}7`8ı9H䚿h[C\,)b:=a_$X ٚ.A Yy1GTfqUTr9Ce?W]bӱQ=Cߛ"g2t{/#w"esJ€@@Ia_ZK6kՏsAgLZQ?T*FD^{{ J84kjFRJ ZY13bgQ_Qiqj#4ϟʢhnoZ+_0!4B=A" F6CoZ0TY]yJmcwFL*YB!SE*C>J]QxKCTo"@g(oètL Nʟ Szt C t쁰e#ȚI+~73i+j|v'bD.^|TQ-@ &B@y{8"Y50y97 {S6L[߷Cj,iO<2K'9ѥk, ϱ;ghghߧ _XՏFޯ<1>ے:HIp$LrLSk򴍮٢Y FuO $-xdʵ-:V91IhܙmOk Y]rCan . MwA쾘pNuNt5B΀1'Z}ɓ7TV,KDG9C v!lf1U(Hv*Z_4L"jҰd_ŽX.{35&ۑ&^BU~TZIei3ѡ*@֑S%Ryzdz6*Al~g $Q]'[[b Omt797UՔrM4XMaUm.Ĕd쇤r$pRUx{#Pqקe b~4*"SqDcTkw |.]9*\l)W*A jaך*m2!2Iq`#D86U;17*h!Ŭ,,s2iG\H T!ӈP3PBtʯ\2 EUǔ@ŸV9!4!Ja=x?db $D?[5A% In`9|V%z;-`.^OBqSM0zQ⿍Y"> wxႳoCN;-l5%x? S 25qrv&5 lt!I k?=m{:,6Z*䐡6 ,!`&}s@al­wQB"`uNo"jMN,QE6fAޅCT ,͸tqFr.͕,G=Q&jN%&[E0ROVԺ].歚D=(*.{Ègy,'QQ~H\6#9U75h'P_r7sW/>#dYoNq,]̰s~_*Etky#kd =DzdUZ)5S)Kac*AM4Gۜ.̠@. 3}ab}kZep} "qO։w*?^o(mČws o)‘big.,_$=87c>gk;tXjܳ8X(,kcYO~28aNP:mQZpfdC Ω~9E!<9lyZ,h'* YTHj_{:@0nCvw.y%]Vy 6{!RdQbԀOCC'b-8\qQldhk24EZ~ gC *@4~r;baD1gӎDJp#C]Z@yGjbObp~DԧV I[y(\G06fۧΣEWKXVԝx$EbDM;҇sh|+J0 n fEP gղ.>}j:{G֮Dz/H,*7Ƕ.[x7>OX' Ya j#5B} ep-c^Lz&LA81m쉿T4 xL+Hqc5<ɉvS. <?u`.[gݛK"HRg5U=2UyApFJ&l<qX2iCvw X/* ٷ,otu mG,5/ճNLznVՖ0z+>Wk5#6)tVr=rPAWd{˔_ "h ^L HƏ1y)= a]qGqyJͲ%NuE'z)՟/9Վ%vevy9Y8GȜ+/Rk `ږܙ+j ԩ燚I;'E`ycaշj;ay'p@^{'Z"9yc#M`-deRU+Tfy bc'ض>;̀n] «ف3U%Lc$p,̗3f ۭ'Vf=[$1;t{^*mMtH镺pncZ&JwAQZ˛# *l^/0cR-!5tK_ N#3#HJHxj'wzsn4%}1(j-GVf e0pl RKCJ@1/'n (H!k8Kdwb_@td5tSx -oS[Q'=[TN%G.jH0?.uI}ޛv?b W g >{ ̔!'I&XְL0cjLhk旳S! bIC:<6\,+5/r@m\\~K r-)6ukEſ~ t\AC76'ovV'H@ZIkWt\{rCS~:l.hy\DwͱՔ۹q (th'H6Մ>ctXJ|n`h׎|SUT1NaJ* ڙ'C¶jB΅ټh /~^a0b\Sg;x&5eN]W= B =m.M#Uopu_]z_R%~lP:pkؑS st4Wrx:\|ʼnI7@qn HK TnQNudyA1{9)Pޝ=hIww|)fƓK.wdø0NMcҹqӯ<0Ly J#I&!W]DSm3^ۿ6 e C⢔an"pOoUkƉAPK3CߐhH!uC<#>viP`z㑨c<dz4NGo67E 66zDYưXlp@[J(Hv)/<Mk IVx|+t,~`drt ߢ\IiqN C4){^t"rq1A3X^)Xkzx(؏2?=ar7j<ۈ?ҶӓfH:4Wt#++_8T95\y"-NCɪr'[ʓv;]ם2`Ȭ+aGfw~ڱD엊v/Kzu C[xu@7t jႏtz"(*],61Fp )eDX2%,R4>کF0Ņ4ieQcX\1Gmėds9]`9v͞Xax)1$W^qk-:ɦ=iYjTfNO%qE^iaO:ODM:U 8KMduD1/\/bc.S,lǦ#J5< JR4wj2It|Inh6axހ?+'ܞ }4~0|( } |";cdO8Dw}ÊI8xH*ӼsIY_G&1RXŇ[1'2#q6hRt/n+|M{o=VDQ4LMqX;Z;vq^f9egI 44mTkߩ=LOhlRiCP=tQ]t@/(ˆ5|i.w?*A-A`0DzLYzxO8P9Q/gq[iv%2*Di)@Gz֖̖sj=A!6yk>V^yQ K'勍M&zu"#Q91nBTAABמu31+wn9< I6qm O˕Dp Ea(Ub^- G}B9 h}]RHa<,WW> uƥJL[_& gؒC@%c[(+ۍ{+yf'S>WJ(dNx1X"ƯVS*e7rVW( G *X?;ks6v<k>15Sڈ/\*zpp *@v}vl+J9_ ZI'~n 7"8YYĄ:CkGLDFHITP>S5KB GڰP!sH?}0,QiXsr579qLԉy'k)Sg%J DVh/p A,}y/-ZE<6].\?{ Æ.o, :›G|`#,t܊I[$PSJ@Sp^K>g O|5AӶ0*<ӟd y\yEh>gږh+[+HMxÃcH5XfYvG8d;F$4ŵ"U"6C8!<ѳYZylcy=\;2T=P]θ'.i Z)ut:ױi+0 qu~i=aU Ü@6/9so<Wo@KZ?<^ @YM_}WQ~qdL=mz@/Z'ziՍ!S6sAAjT s 1Gǣqqd'SF@u#_l]4MT94i9=/699¸E7aqι~K'Z̝pN#j=+'y-0}8 m/AT!< YEezDj>.(lQпC)y؂iસyxTBk%-Br#$['v6c4? -֫ %șß(Kck9tMNvUL\XMӪѱ)Oo^ߏVtQ@Tn?+drCg ެby5s+-lh@'KV+-R>I+ヸ1*'Ծ^IG ] դ b:Wܥ;ZESj:v͝_%jYj3."mUgJ:Q\D)fb_E{C$G4i࿺v-qRC}=inߋdS煽Mѥ-a ur.@9/شdfkz'V #<q?nKW[8>ie(-ePjKOL@;.99}LQʟ΋N8.8Aq.?Zq7./ˣǣsed!r&e1@1_S~6_jJsm_I6dyՋ%|w3n} YtV-aHm;0!6jw'] %wXXalۖ]ڿhk&`LJex9 ׶P4W epRP'N>Y?߷.2m6 ^)[??É*_UAaU]N$ʜ,3u[kbFNvo0OFQe$ [KQ;lLOY| j@S8&n%g\!6y FXhk]eH/HEԮ`͏e(HIcY6lFɎ=IӽcClWqt׼N)vNd7gT36/tR@*S$\ٲ2#04Xa1`)^ҏ`H#5›ەFFX-*a1W0gŴZi=;hTƛN6yۢ΄'a-:V")kr!s0 5\-a TFy HW#pE.H3`a_aD8kfoDEJ?y6R4AO0pUIݎ25HB4i^Iz);nTcd8Q{e5{&m1߈ N>by0>g>=GQJ"=õε)"hpV2J_#wrZ@sVn-V$pJ0-n>n쯝޿%Y"?Z?zHt:Y"II "2(0 'Xg8 yW>Zjo+aQ_9 64OmJ^r` zyZkʹȩnM% <Љ}eCW$s |WGvcL`pQmY3].{ӑْ`Jga3N,@qn7h.G .<\wݠWy∡h *ާZ<YV^X&x3n 7m33hTppIUiQMƙܳՋЯb௤2M͸Qœ3(, c}җ"Pv$ ة0pM> ?ıNXX-dϤyi"<2AeCZ?30Dvdp钙+}u7p@G9m +[uΕ :2ZB(GF?뷱;taxY=8Zˮ8&`Ĺ&Y1bBc$MtjW.wX(/y<azGh9[DUwF=J~Բ]fy t1 ,HF9ޮR&y{励V|Sd.^?lŊ -E認f 2`ƪ&#~=Buhw &Ǘ>I)Z,džLvAqoùxSՒ~C"sZ/f1ZcU9eɆoQBu71'ItoLs2=D1hqqa~$xWdz݆1Dkq E i"c 7J/v-2=n<)֐+s!Ȁk8mnY k]~=~{߳.(" OδΐIZgьVȒھao4 BMV"deBrfO̠00I,撈] nv-Jv#1ɖPr "]S GK})_ AML@` ^QCt?Ք mJp{:&$^t GG*X0MgdpW+cB9f\[2FSQH(z ޱ;cQN} X[Zlq_xXN`_v3݂q;b0] O(0I(gэnE=\$J43j]׳~ߍ\MpHcjfl)kv{W1VwT=woz_6`<-`x:N/xFfw] :4i+grJuGAtOr"EoV#2RI?3 %?C^fDIg,Q?©a)/.Tl{b׹* $W/ Q./?g eh9F8 PVu ]C_MTh1kU*~O3ZaҼBJ C9&kkZ9p.53TkhE-CנDWrݜϺUL(dtPyF2VDk=\B} x Bz|!G} ?]* ȍEpfhOY`8N\ko N)I?п}kloOp!?xXBZuURP?2b<@zvJ$n2T ],>. ]$ tvu׿`t|e˓Ek+,ARu<3v,XճUsU4 [@n'j@a{ P^o<]OUJa|8 KWPU@g@ޔ`*Μ 9!z/Fw'.iHm64@Gsq_'?~Z.}uNWjkjeIaT~A2Gal5P) ƍ&rP=>dV ZזcP EGMR~4y *o<~H-xVV$ҹc]mÇ}TFqX땑wv]R9XL%:} AЙVYOF,m߳ U+-e€zᲓ>j)U$8ޘͮ#=e.~+4ǤҞ G#/sY ٭!'@ IFSB8Ѣw"=~bzo?\âS8/3W%! ǹ0p͌=3)35w)r ʮY/K +_{{{t&Qp-%*-i=,^âJ[;x*Mϯȕjt0rBQsRe poX?{AVQJSN/##`߿8OTuB; 2)9&Ftl PH9*ծX} nY&W.An}Sy}(0CJGt0Cq@kmKT5̸P@JVWv(l..qTͧaQU^?.`+2Йp`FC^=LdDZ.'D1˜7=dg݆|W9p tC-PޏH#}ʰilhx%GvHif`V~$e[CWW'd/ ZL#(ʴ⌌rd(&7ZإdmXLhSu"jt5d۸r/81dwtž7i ˷uRN*1^oF">r%M4m>CRYj"e&27=@vl$%z +5-s e^sM@:bjcZ;,'r<iL?V=@CR `|2PJĢ eqh$axŋo˒)$ qWMqrwNE_g [6^ Xevy6ʔٍp-)fHVauVW]5ɭ.{܀XWNljȴٖ/?aNWٵ`ld`E4'iʹڲGp&c +~42*Z\$@̫xߞԐ^OEkG%(!ohv@u^ +wdxmz!Q43kcEAIS92ɊOi9dShG[ds8DHl'}p݆̕z*'REuw4}z9-Z7Ɏ1deHh6xUߥ|E#k+UbJ"љKl QL~/Sa)y/$á@^fQ6.V֖9emkSO:Ρzt'ɕ_Dvűh9 8wv`Ljs2sBOngPH3 %bmrҰ;*Q2k*1?Vf.*٭'}4s]znLh֨3K'%̺,޲lV FMldSXc:@IN# h _@ @iVkVGw7JsIjU Œ;H 2t"F}{RP<)'[b~~F'YT;'}"IyM!bu U$sBڱO:$ܱ xm`[D8ex]w`0}C?J9wP_g-./Ty^u!UςzF5Bu^Lԍ=_2wVhòx֫> !K&d?35uVIMA1U0qn!TL lͻ/~čn޼KC]gPmƆ)A$$ h9 PFe_? |4lnIbdʫ?hgOdpR9 Ni15 R^΄ؽPVo Ktʷѯ]=wO< _L|qBN!q*B dKhl/[ BhIs%|B<h 9)w-HL?BLbh h9eX$9jwef/~rtS8ņr嚝P:ӷD <6V%3R,S}K8WaϺ1A-BXH L"ɞ!7CN]jɉ6l $-޽=R8 qYBΨl}ҐT"C}rb0 8.Z@6]y85.E"kaT.s)nWd#i{>t#QCXm"r ?rLdn)Lzwne6w$+筫blpGFWK9T]T3_6?e (q+WG`%4"K_yiv2TW<%!Q|9ݞ.)_{,myˑ[Wd@]ô$$̣3ݫ9 x6Л)xw@!~@N }rE~ |4҈+D-Y1:WcR 1ȹ%VS#n]M`t/\L _4'7!*8:.KL0ӓiUjD[nDC5 -*4JNX>ӷF ,8Uv'"JАRD,HM$+`JR(ʋpMkx`Qrn_~ҽ>_|;"CKf!98>`q;+X~$dž?y捡2B{h7? zK ox18]O)L1&!$24KiRs=0rեvDzۈelep|/Otgwf$FkNgg0ûԥV4;1@ʻ"2mRi[Wgvfy~RW cPT;_=~Dm(T=)],'^wJ a6jV|(0PU3̓Q+(pnP_d}fm.uX[qfeVS҃{zפ]fvA45QX [}!17iPKxrr(,0x>SN^k=@]j? &2 &}du9H·r/A|GpOU#|7p-3=`# 3w-fX;Cyzɘ8guS Oj *s zaEi'"]۬'ˑv@7:2!y̿k].ȶ^-4^/u7 .3<~Hw>?p?͍)K*GW8՜1V34 a[jd~۲!>YJτ GZ,o..Dgq Rt)r5Tl%፻=#ӎc3U7ЇU]hs\$E;p2+d?7)1h!l[m Y'H3#j0c(8\#$k M:;H̾^{abdc`yOzzRe+(!%+]8+`-i#l7hrQc89yoy;wYr2Qfڝ0UnF59;}($ 7"+Cbťd#:ף"a|酻//zSd{΀G}YH-@i |aوk S4t0-8oվ\GR#X>{m!Y"z}y})uՉ֧Y1HʱTW) JNv4~4sTS 4) AC2"79ma&b<1\  )-bnfH|a(DH%)gOx<=^.aqah0Mg9s.:m%{Gם.NFVյ`jڝo w,s(&)u4XN1aq0/a (oo"(38X2Sg[ÙWzg ӋXG+ )$Mk#NC_Yřz)(-S)B0ī&C5s-.\#? & uo[c-?`oB0IMN 1#?Զ>PMgYhvP\(fn=QG-3[Dcļ;3 _H R-Àb6^|Ǭ: rߏ腩BrjEF`G5}'2;ȹ ;zEk>ŧ`$0P+ mh3Ps h:5$y,ZdLP'eX\Y)8ǡ'gŧR@{1!j}I{ZND_'ok&M\o-ȋXr? 6-SOKn6@7hH& efS2U}Afl@5D>ɂF\nQԵZOm[}<% aF1Lv+,b`XwyѼQQu&NǦEG"yFH @uՍiՇ h7aIjW B?4<3[7ʮEW>/ dJ֛I[{nJiI?Kz5맀Ǽ^B5@gRlHDW"9ک 3V=g7A rq7t8lG@_Dq2==^InM;%㒁rNluTR[;̮\^\Kp)$+;4*R梁)-7pU?@3iLyRI)=o|E@ x*XXM3Dm:}8V(4 {ة$U&  4ޢѯk|T$+(CO8ՠ`:p˅.!07kk7SD>\`il4 2G%3( %Ӫl"{o!VBS)~1"[-`;^v :}'jOk㪃F:F,^) SR;zLJ͋FqB_N"9[Yuzl>UDb52{x|M6OՏF偓f?-b:>2.rBv+m۬O׈LG{yI]:RѦ;rʿaGɤ{X\?yVAr>9$ 𿩩Qho)2N^ Fħ|b|x}!r8&O }`z(FFt UuXe[ThSMC-̥5tKgѩw*t{&{;-zn!_ĖwPoű!&yQ}NLǽɊ9dk\\\LrϢFvt[נP "6Yz0r/Vz!jgd*So 1TT҃G+YI2" h<OW<:W,zy?\8ZـÏKu0|W %qK3@c8S4QcpΉ"<~ Y$S]'$q'=i :g1qZ,7Up/ M;L}5`].02#[׹Lb:",L`'M! 8䣺bն\9C,aOc:tzzKlnyYܗ=ʒ_Ddo .C-tv*)XMP!gJQnpNnmo`#zt8q_xKp>Q`1Il8H@k\2VAႋ-`"s3IfJSpaMNaÃ׶߂MZLWk8rňe1'Bm\:kgݐݟ,4v忮 "@=;]vj퀼 I`,j?Cvy )g,-Džf6dʏiy7S/*^N:$LqW҄Gn-! bܚ=?m==%nۣ Hk ~W6Vnjzq>h Σa-2, m<錋G !#WT1ETƴS qɣulrўe|3+cK|s,2;pF鯅!\߉I%K 0lD<Ǵ{t@`d0샊yJ\8;THqv.3䣡%Z?qZ(}O$4UR:I:iJAZNAVjm''eDZ}Y!w<3ArC| L0L~ncpm6&ɛ}XN;&Nw-z i531Lm'0*Ole-[{Mt!W%a o bu`*~ά[ICca{ȺHЍtܤD򡋆Ӱ(g\ YV?>/1GW j$Dp -_Ƴ|bE_ }nhWd (E6֔ς٣Ǭ}Gq h-җPDqZsJyC15|E|$/=Bд=Uoigv47n,HpJOqѷL]G%sIbv^€kfb꺹Pg;?ߔnWbPݵU1Ƽ#C;iãj)Ms۱)<=U٘- e c Uj,oO/.L"%T,HSQu u9$x#iKߞ{ iV$pdm~BB{T|LKbnD΁;џ7L{|2kk/ܤÍ:P(Qhn3%*\<$&s 4AcVsn>xD$x#{d*։'{p_^ەr /i o8$c  9~Y{/+}EJ"4k4*G ?D۠;ӟkc2{&3u8HhWa]dPt)5i~6ndNq29-jE9&gWl9ZhwQWY∌ն`r`4uz S82aYdA nƇ`Fk46jJpmY3 #3@KDD%MɣbǛi71l/=t:-m+L]y z[O&XR;F\>| ѪtP"-9#9 35vm>7+RԴmt᝴Ն|˴o'n0*Wzao͑W8qRlCfZUwGНwp z'#"wbqF>iQU)$IWy\nHZa5bh\͛yPGۻ9t/ރ1!Ƹwh~([]r)E %n=*_AryNFv3 7jf7R|Kܛ'.NR8"/k{laEKc4˾l;+ !h< bTb*Pd7.$9Ə2Lbt+spD oA/OMtwW9y> v 43#3)75,VS"'&|sUb/a!tBow0%Z ؞),KA1y6̀u6-2.GEwoNQV˟ FfhPlL_!zUy1*zN2MFݼ^X+۠YDВF|0x{jg6nw h\8l6hyݖ,q#(qQ?aZ}!b }"9 [r9 J& 2l(\3| gT>#]]zE\=v|I<~e1̹M+0U65ZGWϑ[B-}aA Rn2.#l7GA}=( r+P hNɶDWG/q a LJk,L{sVSS{}ءH3B)Ų":â:)n祷^*as H4O)kS gpJ|euu5pc`&b>C:}Hk⮄H.΀~]aeeȩu|5މ|QDKxuQҳ$=n5CX0{Z[} iDmP\/$ hpdOU%@Z7(|ۛSd$BRxra&vj$4" {*q|adB.xtC6 J;f[?/iܥ_̱Ci1فh6.Hp+VC`f~`SRH!~`vͲR6/4+i`5~j2 ,JΘ'?:- *uߓ@ST.!tu9ٝa"lQ 9gw"Yd)&\',{s9U@M )xLgk9Ʉݺ_|9R̪5iL"2)͟j~?<,¼d A؀QxŰC !p.ǖhG+ jaņ;6|(!89-C~ukx.V }Ry NGhCE.W=~:L=]HXp։p,VGImr ͼ{_}sѫ kFSp1 Fk_cQwO9*E~'kɹm5M%`,T@?5|lͻuQBֳR("^)WL[Srƴ4lQ"ET 900FI6' 4 Q!넕:a_.E/R+Tn9D6ʾ={? S„*H[τ@e/4tY|WƑMy~}c$8c$$O )* {:kGx دΟ&qQw4W$@{&@NϜ; ⬲7_{!t {̈́]e wn;X0ce ʶ9Md>#,^)cb̕G@F<,Jy ': : IϩցY_9ayYE P>L6BU8լ1?' @E;0\g2mIizv !`h4W3W̖8}]zPI:JM@z>WuHEUU-BReRyl: %jN&\ݨVWNuđ-iq( x'%C0;&Z`,\ߗ+tckYJrb{e%Ƣ_-7$7~$$ۨ( Á 5ИT㨗Rk޷&=ƹg| ȿ0Do5xHg;k琡DGϻIKs ZroޯhxQ6e_RؙN2E0`x6e?#%(gQ (C׮AS_3, 兓CtUDu}t/o6G3ZUj/c⸺UG8tZ`C؝D{G9"`Qom:~*,H-#ȇy<`S+O\GMAλ(-wy0Kݾ[mZS R]b>~ T!cH:P^s1 aIռ UQMo1ř fʄx5h.IRXcLxw% 4Õ8':4ۺ$/561GD YUyg85FB)xNavX3ǍQNǁ೒eT+M)>!.4Bi[@UQ>Db.5lWnH<ǯ m4evdoLMYXd'n۴\Ƿ4*]W 骪4`guZ)~u|g^Es4ڝǜuv2ȶJ ԆBAx@v؟I:&1e22Qo7|wbkTC`6CP9B0ʎ}7 tjiu@yg|״-4IS/Ӿ6(l-R ;z.YϦ&T΁g W()%J3Nzߓr6O,׿+HN(l][y\:(E->q|c gF`6L4a$;m0J}Ԧ4O}R$| H{{8 Lz+S(} s3sFulXt^ -0o$+M,?~rw8}b8nZ* * ouvUVNzrL+Ї8\m_5頩yZZ [}UYEP#CKl{}9LNMQQPV5+' za( P%Ww$fH$])g)lYȨTt 3\Y&ơĕ3v^'`u-912&|.\QM,F>nRj֤Yzu/f~0ʴ J ~h~l E3QygAvh0'ܾL݈ˇ7OSd&$f{i 23\Tݪ`"t5hbXRz3z[A7of&؈=Щ+r@ZFd:DW6.x &hh#v'~VIL_KuK6o_x>Şq;*lQPIK~dd:6Q)cb_4w,V7M6F:"<.5pz*fn3 MC1XG4<(#F⿋o19ˁ Cd` g"c|  /oRlkrSu/ WxE'\J,,!$7wozEZK2 /vҳsYYʷ؎[a<`P,,^vJK*qGQ /S=׶|$ e_Ch++\JyF L:o'ɴJ #y|y1^FŹ(jSkG*׷iE1B/''Cwq9)O8\l-Cڸ :BPdRByΫāW0vDcr,'{6 ~9Xw\B 򀸒ϰL_է<.۵:OWl+ MܛNyrN<]F%3=6֊+T6|V4OI@!%V+xrHVkM|;0-RPHF}3/ ͝0+{A2̕ +s7_ | $_C/5ȄH5ZjAC,\hUKάvR㸖sNZ '%)f"p\c/C%)FBηmP~.n0}b_ MpeCd5J '9a!YXm;Ng U0!E0) t畇H0`)sg燵[KsR 8A1U5 & X$IYTb3_DKzENzH?0r V]V}b ??r^)NYfAX1_ZCNKBu&EXlMR<5(Gzì\>Xzv&\eVg-MG~b w,`*3MH,lk0k{WӢ--3gft{je~Ugkي zS9`ARO}3)ў}5Oz=+||tIde4A%c0Cޏh8 ~\YO*Wj Q>.P/^_`Q+ci'RaR2C_(5 tO5 8:;t BqϏUX*ώ3 <.ތJ" rl3 ⷵDQ`uˠpV+jO7Jq@4D.Z/<<1^1ϑ65 ܵ5t&ߝ'םIL 1sYG0<͍Dȵ>r-}pOJxgu7j;]s"x5g,aU|NRѻ}NLOL<D}C`(pI+Hr`y{M(o@ xބ>/h7TVz/L]h4^ބf$j2q46E9ήCftLXG!y±]y|saVl0ѩx}@fԼ Ҿ5VVa:"Bm[X*Ӱ0 J%uEWQoR0I6ls_F^M).)[Tz wrJa:K8\gЂHi1ڞ0C\[QFێ)/KVM-(jX9d3o6=ޯzB=Mc[O n   6o~`%ss@< o?ys+u~a8u4I܊\Pӽebų!J$n)kaڒ 8ѝJ y?h/jOPFiR٤2WqXRfxjL{&ڑAcRa% {xb3uV`&*AoTsh}2H$ ?`v-àc StC3ԨM٩1-Om^Lu 4/b ȍbz'-{>pC%%&GI+hv@ q?vnWnnEEPƯRtemN-o GO^נ;E$ [VѳGF@ ;/m8@ 4`Sh֮GdxXm` %n, nm=nhӤqe^GO!XnT# 5+qlt@=Ge^5np.fݏ;A :zD2-FKΥy V"KKD0xKFYBL ?w =z f0QI|;Ȫdc]P!f1 |R>$$FOYW6)tYՋ{ŊUZ4^~-ifIԴB+#' .ku 7Ҁ.~j?[G PfXe־@=^սD,'BtҘz IeKh%tD&æy R+|ZP= DA;3 ң[~-C"6 ԭa&&ridL\4 ɼ QmHx5FU3zA%A !]pA4)'yeM:vU Nkj4Á ZB"L:a0[ ZD~Ki9'( uyG;&&QuM \?'ݶVvjiHʔM(\x~J3v^n2;4gFo D U.[\E*]qƧҀ8E]o VǪpfdDF^OX%;srB>g FJQ*.AiV1أeuWP*nQr6C q~1l>>_H(y?HִkH%(:T9N@>߂>>j#8@הrC( Yvbj\2.ϫ%|u Ҷ'2Ybc՛qfua_3a.Ftبm/a&+lLcDTن q!iNSAs&Ͳ~țj".Jkp;j]-{(<32sTk5<'I}}0͖84dBdjTו`-!cooO9V5ycyCBޢ qߌņAzdT+`GՋg>UW*9m WRDaZYc6t4!*?gBb;'sN$4qP橗u_ľX2+v<$I (&w:䷰Ud_S܈/PH'7ܺhLn:M ю EQ\m!%4A6dL_]sJTvrRxsg&;WTs^D~-H"&NS7E/DB(8ztα;O\rL!KoMOKDLwW_U]1J$8J}@:bH5^$0UB*TFAͿέ@l+* U#-'k`!xbfpz1U2c;}9Q {QBk Z';ul̤5ï vsh*4#n_ WF@a˃˓'rVˎcCNhs#GEp(i5T~}߹&Q\&%nſx!R:4ɽ2Z#tp֬2*$ '6's0 Hzm 8©<['s^THdU']-@V\#!Un2zATdnf55RInA~8ek*XҼ{H^~tt)R(bK-`b 0*-m .y71:m}yntݹ:8Q2ӓT\ !r7=քjRW3;T`nVEg>y"llG@CW\*i*B<٘ .(վSs#*oA `AAvS7+>I_tN-ot^WN#2U2TƔ9[?Tr~ Z(G߬gOG8"q"f n%NJMK]wi\{lK% ~9hY2oxpO)$($jqAj ˆKYVV2vCuXgwry@Ul8 e]?8*[9MYC(&jX^0JNttX,QI(*,v&<~3#cK'9ʽk]5snX# 3zY{4A/ qCvYn?>i64Wv*ޫa4ߧ[nN\ka Sv_Z|PUXf ddNr`S7 FBfe.mU)3gY8/ Yȸδ{FrQR.0ڴM Fzϔ9?NJG"ĈF5cn7IMӦ}>VD2ۚ$n#CFKpX/wq:6{Kv #;Lǎ.J-j\) 'b#)umj.@d7#˔$|"'/L2ɏpckbQfCT[3ﵜ&J+KjZDG' U}DiU"r)jYy7K{C DmXy=q0a^e2S/ʬyw0szs.6j-L1$, KVQAU-}F/MkvLqde SxtKFV:uS*R aSҰ5_)'Y;O~zsYS ޸ݡ vb9VNIES7Roy:k9^ ,(Yߧ% XF5k$$CO Bakq-gKL%}-/CVUN˾@cܒ YMOܱ)E} LG)COGTOyj`},'{)#ٱ- ~7W#^i4݊!V,ÊS/- ^zm?FUj;%CA:Z3pFN h4E b J*@hL_J*Ǧ+E$ MRGyIpX(-"a=&y 1BëIGZi !p%#dvJz ]xeRKgѭ7֔Kkd` >[Bo]~-86v6*jg@KZu"P52B-eτE; s0JɁ=w,OPMOITMWӫ =Q h1(k',Q gj2z\/t=FZaȎ![!ZvbAZl~> S!WT(W|FI^#Qr#΀o뉛)dM"q_k$ϴmb**Z'ޓl++G3I.s 7h1^u݅" ƱjH ^>ړ>}BW+6S]/М zk-L7ƥg$S @rf@(Զ/ oA|ZE vܔ*#%E ;9-삏/.s/W͸۳ O_|Og3[|} 9vA [^ -KwgQi sŞ} `* lˆX7TʻԊY&:jCM=b,e ѩm|<*)Q2&џ *5k$n7hfUGaU[ BNis L4ow |:t~fTe:X_4ݕRrzI]P!pm+IzKH53Jt%:% \~]E{A.?"$N$÷u9+=y&*ZLKJoo ц3]YCe˱ѷORF}|^(ĮOdhxk>Y˦3JScN!u lK3pu6rMnE{U(\r"M.L20=_<pAHV .eCYDz<[4]NشncDmCB_3ϕQ"f6ǧPW">TV41-Bt5+N,]ydވ1$sqk|lv*ib }-60V:+%ɾy5@ԅu mOyYlG- lDMcA/f"yWѰue;ʚYgbI_܂y]9hpeQ+fs>q }Ti[2$aۡi3 0kº%l 0QRDeq(>嫁[$ޑX]߹T_;-<Jio /y'B;ęk8Nq}%iUв1D,;,g6|>b+02 yvX#罊2lGjJ9?ftVWL&֙/Eo ڂ3M "c&ne##Qcf*&) tp"J&lf:̙E-Aa:vRmH(d(x@QXr^! "w?L Dd5mjo(/\6¦rOo6Z;Ksnzrem[ۡ)ezN[Dw$^ÖhO Tpd3ns;]?\VVMtHCoq!}UvLS6 IBV{D% "&b`%nuՍ:dH:Xx^4=V+Uþ# 8f?[FPwD n)AO =9J{@-3ozI5]&5a:uPoȢk}i9: v0 [.\Z]z) 9uH#a1xq"oND _!:AE5Q_ξ-F} ]EQ>mx"xX0]aHصT1bOjT^+lLz#e}MΨ`ZQM9R؀$G~KE+>7?1}Up#I08qxip&4aAr.XjM5 OU.J%!RLfB[QҨ -^1g^\HCPBҪ.[>B~[pmmu]TF%*?I71; l=hR].@Ӭaid>)P/vhFGܨ6XxFT"\ u>T !۟\L (𽀙oZ~Kwi!JTEgRC=5!ySUd05O0:Ğj)v/gS%%=)L͛ f6K~o !vfRĄa,ÌǽJ}3"9̕@`%nX\A,'ɼ#&ͥ&J)4]%9Wjq 6].y}E'T߲DVxz/'TryH#Bȵ7=Ue. f$%2I}ᡷ8444z%ytzϓ\E.{wIKmxD VyF%O2) .=]CncOi_k(Hy}-ZE翴ܧZٿzRI࡟Vu@{ߑKh5CuA DEQ؊N!lF0.reė'(4u/'òTRL[dűnr$jApLjMT#i bY?efωl<))`3yWkND+zҽc  ʦTB+^C{k:;(,lM؂5d͉A=~nh1'%&_*#S:J}#K=@V%P0VX>0;|\;eH:d"Ve}[R)6UIۏP衤PyI(4c*[>y"!\m(#=xcw9O RMruMN+`st1}\_}]`i$q>VLVTblp|>XP\%ѷ^9+`Ź0G#˱F%rrT~Hrѽev> hM!#N ^Udqăsw3@LQz%zQp2OB xz|>%`+qk&o@`wuD9=\</ȋfP7UaFLrWAcϮI5\H ZH%ˑ .*6J}ȕl`A# Iv {'ƒw `lѓ Bk OtۋD}EYl:yԺ>Ha+"_©&6aS׸^H hb#K3'KfyBIZY,n ; 1T6! 6…B}1Jpo>U:gw9P;d"Ӑ*H}(I! c"WNAK/kNuhꡎs*[<qW9yvq7%~?yY۹(0Ԥ6E%3; lʧumnfu+6U ~~FKu /)H8Yj4[IۻW.cD(l.)"9X=I1h熇#1vݍ͠=of^%t%mOZrxxr֐3;R͔a j"l:ƣxm%Z0)wky쉝hbs*,b}~TCSVBLV5< G%`.bqwN1Cć#Y\u/T Wrs[}_P>#8Qݸe)yQ`M*z^{# 翀rjfgԋ/O/4K2*X PMD;+4Ǯq=NT] 01bpr`!VgqD|9fò6D52ns.;G])d N4H$jMcq fwzzHF $U5.:a& ;c9΁9{_j^޼ <@߬Vj%.='S8jZA+`T3d赙F_6תO;!f=ٱG stp"ePwp\Z &i[cĪ&&g+P㈥0 ։ڎ8pWgO yGXiY#P)2Saލ|,dFo Jfo JwᇒTY\eL$+{B)o FW69wrTv}Wwj6lLUs5}5+#H\+ݓ&cjuktDߓSeŊRMQ]FHro(Z|zRP9PM^ M7bwtJnI 65M+ah <VSgj22HnV;!zO Th:39v0^9u6Ȝiű$㱅4@)o.{4kURNV|UR[D`=f ^|E8kZa V PT10TK` {G1Z~q(JIq2/r0[zz}3)-R{~dntU.oLKS0}~ )RL( i Ϋ&fi5-^iy\ڊ%@36yzJW]Huv)Hy0_Yj|*wlv#ʫ_BiZ%끄A3x.h:7t#S5Uj`| w~ew H@m PqΨsr43S4Xz`+CjSWQ8Xdfz5A돺|mf,F?լ<.2#lLSmRMsZv9s2(=f㚒? E#&7I"wnX$5 rGܤ H s&m/7P; 555Gˈن-]dPѴ^K$).3iě`%%X^37oR,cAнi:P 5h Q:dѯ}?pNdX¶$OneO*)8 }XW\&DbwTRVE_lVJQTZ-#dFS DiDeq!y?8@ßZ]&" ?`r؟|(^#?_\;~euEsd 4I]<$lJq|[j˿%RQ]u_HWKKz]W☪r{x̮ߖ0cp|Z(ȓ+?S^`la3~mӆ܌°UUi[FQ~I@D[>)h\b{JYsB̢ߓeW֨iw2Ȳ:9T=񠧪BZWk Hk?% *i!Z`kgPy3fx[W}roٹFـT<a@+Uez OsO8ւ{pD>秞U׿APq | (ȁ$6~4٢2TÚf8Nko`I+TR# MyZCBQC;;F0 2qkfQωV*}ڙM>$5 \(:}O3GkkB`!vgH=#ތv(TU, JZ'Iu,^|Iz_4B"o G_%$Y:{;'T~ya軾h=ݜmߝ7}L0iċ`NR~+j WQ}*;}u`{w6, sHKM-4f<`Vn!Ƽԛ5S5mj^u57|eɦo v_ Y)E.Y3GXԿz&s*}W+zO\tq%s$y(yR1_=PHM"Ú5\Zo!c}q߸~Z|2@x_Vԏ!wNǐ"s~~rB'# %`lYp|ןb8)Fiި؉ X= Ӡ@W) ̪vIJ~6$G;vH'o~#4ڙZ R%:OJDyp JwJr}O֗އ\̓؎;u<w3 (kjS Τc^w+J-ZBu(k|M $<|EOQ2jN(s1PuuD+`n=H)]Wu3q'0 Ov2H ΩJcU&tOt:^6N qf,0}R@1mKu4Eln3lRs߅V;Έco9vF*v"m݋RZgAnFZUQʁ0w0Lnj:_?rhR !" 4vצ[`fI:=mS2RO?ȡsڽ}'eroekP +PfDk2t(I%7 ?˄2̣'n+X2@uz?jX 4/V疓 M¤HÍ}Wjw{Dk'"]\Yui(Cy m]hLR4Hqco0Am35Ae+䥶m{q=Қ̅lۂ7RK&|P*m "D>yRZ4QUO'Ge24Pp!- I8 ǥtСڦD7qm$7dTiC=mZr26*J,*b' 6D)5%fFv#?꜋2d 6%GEY-۴Z SOz2Cihܚy$N`ah>()Fhbqmm𣱬O)Pe0`!:`Xѣy25 KcͼK-smtT{oSKԦa[J$Bb ~=dfE*˷T2TܠTp"Ru+}@,li3xqrhG BQĶNϝ _-[GDڷ)^IXTv &{ߔW3W`6.e-6v7Wa Ju$_W"nZLS_KG'7)n9;-:W CLŸҘ%K1IsjPPa`&{N] 07j-ݮnԢ)JHrOl"9ggC"#>v;`OU !yh?O"D8mTŘJXqWM ." L/e,^"'zԿ( NCOuV;* .N[#;*2^8V5;kRm}Un|3.,9Pub*U-kuiNVt&H5ҳv-Y=Ƴ 1Ypʽ&UJPgyZS+:?ޅCQ@yd1V`EUhXd=nPSI^/9<_ xSA{Ʋ0=HѲv/l'y4s56mc eAsF;E1 T3iU5u" =ɵnҫ_Їo-Cmj%$P n^rE LqotXǺYASʻixqZ6or햳Tb؆FhO1$Z{jlj-s6r7 3>"p}_ E=& uvnD{lAcjުm^;"쨧oڷu|hw֗okBzdz=s}}fWegW+PIb@H!͚4t;RB;UA"{u#,;7O@jwȺ2{!4AtM{cdN‹& qj}nAS?:'m:E%HV3$zӨ]9w5UϢZ|a1- zU`DxF[I N?\oMP||Ph$[ s]nx y5\//$+6ƾ잴mL,ՄOАO1Au}'ыE>\޶e>'% 8~m*s2Np4ۃ4 sS,Q%^Ґވx.^bVl ʷU g_iN㛦D Ȧݽ+lUo mP<k5ޟ=^2& |hdG~U o_ѪCnY,d% IW XÃlbϚG,;zm '1/l9VEpJY -@l, jg7-d(Ő RbNz˞l*$ ReBhIT`095*۹׭}GG%ԵcI1N*@ VnR#tC+C X w[l۬nٶ \.|em\ep>-W2w+Ns8vS% da?M7[֏B14cjL^KL#Xg[:ql? Xʀx&(*y3k[/!mAZ*㎉KF[ŭ"*(e |T q <"*헩–:P+\UtY5+@,[R祷q[WqiqdlG^!j!_lt3 oj<tc{]hYPz};2) e1c.ӂ z}NUv,ai|ڄ͆No6:B*fU b]T#H ^:p'eq;Oi aLhMo"= ]5TJ[A56gnŚfB!o, \˭! G] $h*kMkn]x\aO 6R r-oc![ IޑmM:mQ [:>Koc@5CҒڌu_5[cFrgbr~b{=Cܢo7ؽUgg2Ti@ό*';`4`1RgZ ^B3dz([RlIN]Fɮ$s3I+ckO 4WhYay}}^JßnYhV@ħ6ysێZ^*zhP_0L4.t0z3W I p/$_zӶ l*p9Qsg**H,˱ (^ѝ6-"Z8UDYu*L <+Y1c`1 k0 —[ JP]a]A4s;K3/%>$699KCKc"3>0"*e ^)kZzΤ.X1QBTjDW?\5`A( >}mBر+F(4ts آY2V0ɔUH"5 јgk (oeZHl({NXXz{ D kO0--znmNGS @M*emO_b^ֿcuDqV@.R$#tqф2+:!>ݗkl!wd~R}.{'mBz1Z>bցdxW!1(g|KC-6j& 6@8v?`=_"UgRLGw' _ ? uQf{Q%RtF3۵|G̮tyBz qH-aXYWsa힇} dCƒcH7]8mU<$ 0d/uXok"6idIfrw8=aRv-:UBH<u(C shٳZRV/>x~0K H2]ڵ޸DoVi*0q3?%H< =;C%\H8rՏ>ksg~^ +,t;-_NNL;}Ub={-j} Jr:o$׫#ILyr}$~=tjOdcR*w3eS*X?+l["czw! OG cˏRXKq(ͪHXTl}*ъ,LBQZ(DkFYfbQk.nz& QAУys?OS%b}yCGRCnZ΀\&Ħ?%EkΎ >7Rsd׶_!#%ψ}.tv"U}fY+g [TbwD>?SӨ2q:JQ}5uQq7k u#c։*̎b2 sj`4Gj=㡰|Dw&R YOt{W"CiM%NT͍y2cbP ƾ!]~X[IheଇKDҳɋRy2ߔg*/~ewTRx0Xܠݕ˯0㉵5@ jhClV2K bscjz/  ? "ȸ餀_yb>dY߯Щѫ6㕆6)M%Ws㠬үR)=Pjjz b$Q;*2 Xk(Y>뇞HT0Ҟ `]bwAtj7˄:0/ o>B2qAU|ހ d $}k+}[sf>erc K 6w<qxӃ>]3l;Dڗ>\SӽhqB3XD dB$ F_]F%,h]y_8.xuDP+, D08ҫ""ۛ+.b,XJgY;h]JE={"Z̎$zr6؛6pu8=xbZD`!ɉvUksZ^K8sjf(q&|:PgYɹ4(QQǬ4ej=EE| >$^4/j83 + # C 22ΠI9+D#(^yJ.FcxD"iETeM_qP겦_Q؛紣  Y@ ?Q7`!ȝc8 U'_D!(>)S*_}t:o*m\aT>(ߣN+T"z_<,Հ+!?O[**/}gk<4N׹n9fȾin=D!YT(K`:\!Tj" "XF-Xk]χڽ @}|@"յn>yb8SlH57Qa4lޤ8NJNC '~_y7sRrXIOzaz- װ3!w [,{N^^d!̠j9*V@[C_=@ȅ#71BHKBxmM=\{(=Z7-o R Me>ԇ.]Nq6aiGL3mዩE+=bI̮{?M_`:l) MU&gd: d՗2/`H3ݟ-h@jԆmb-ψp֨SJ?\QݨbxXXүB'ד37]wR&h2HRdʣtɯƟBzt3MNP1m纉?1sr$KmU5gs]tV"^v 砠[&|X4JD !(W2-ڒN` @ om{rJ$c pK{{^·F{E` 8i 5?jLWy |~_Xv8=Lq$82_Fۦl_bE ]K_٭S>x`wR$;'^crA]) bv6{:!^w1-+yؐnhoۡ1_N->ZE>@6]h.7Z0H¤ljUטWQ mc|c! #ϫVcl8fSt:7.gy*u?a{uVdh+u/Gbym}( f1T_nȈ.K܏\U5!Lh+]g9s l{AN$鈉AM*'QmOgm2RV!#IJ!tFMى .bE-,EV%KI 7r,^ZxP;:h; ϲ ·N\ H1+Cag9Q=9&R;ԊEWt<|[ }kPmYlY-ِk3%(PpC|+ԯF1ADxf~jC Tts23"zܙ"͐[zrT"v$[X!{άڲ*tC#BPOO ~.N 9t=MR'  X#P jV1=T/:… rW<Y%ԦRgHƷޥ<'wf-_㧷ӖDGq8эvDIez;!׉8>]8ib-,upUC 3TpU8p-B!g5'i4(N"P)iIҴ?@j˥@:89?@(k2M T~z}qMW.yCeTW`W^28B60Nf[:n6%Z`l71oNgkp x<;zӅ2-3'180&p#m[0w0j}F@r\nR傩DಐIe#-D~EȮk)=8C\?RH(ܧ^5;j\TxX"~>˺K$qP9dx W+k ?h[F*i (Qo@YnɈd%0+ ]vB}.ώ)zc.9*pUxl}˲6 m K J[Pdñ KI>շɁ,)@-lр@SnORI[nup.j&1K \O{ F'2vзe -U]OaiiZ7~?MLg; A[ g4 wR1j<@4`4v&5|PvkA)l.!P7W2j5fVŷ >>I78]ʄu}"X)u&P]_ [N0  u'],h>,?݉%qTEJ_GV[^JZ^ `rO9K)4& 1Fz zwvxwY\sJlZſp.-Dh{6Ѡ7̧yÌAWf@L\ 5j?ejהݐdHbQro.#[ ]hGq,w~@)t)$JAmϊXE8!O_ F82 \U:D+=qI:f[OI+ߋThBd3GV"HbVi NBV<&(#cמ@%mCl)o[w|q QMGp%d^|j;e/cB|1txaX" (2^{R]=fĨ* ְҴN&]9HZ;%9 %y2:/xF|5ijzj3F^_ q-oZ[1$%nW,g2WH'\.YkɋD8˭k&5$"_b6Ϟl֥/|ZT]ڭ|/^Ҹ(Cu gӝ K*x?" &F`:Wi馗iyz־抺Yb&6{:Hj+,<"HlK2:YY0o>?MӉųYc&Q uQsuuN\{OZt}_: :;meB8NhcP#e]fa45B8ʗaAl/#T߽ڼ/իIdznde8f'CXAA1%:V`ڢP/?@6Ed7Z !N\7F|>фR/sIdA|xq;x LD(~v+>>V9gٳ6B՟XOMS`13,vGzB#Z:Gһ@Amr<@)Rz;}#xmpGdL] ;=>bxИ H5|8G+TO,ϵm8|5>T 7|1^qϻ@2\ Q>GޜL/s ~I5z"I)>V3>jCXɤ?Üf2&_#VL"*,I=;sr@~ZywNQFtrZ׿AV=#ӮbJ3Z i$iFnK}0m4[51Sy0%\~(eM *iB * h)N쎵z"*9#a6(6K( TQ~4DKgL"rP[ (.}AHWY?Y4Qs+{U}FZ&DiCۇ F[6ĩtg%@#<"Jmm8F\~\zdH[`(x; |l;į qgr 9%D6@<#0= UhlLl76_(ݾ&FXK$Q8Vi ۙOE(C) PoHXN$ە M{ȬNd,R<ӄE2e yj L~d.fș0@VeQټGa]r:mgGf" Ak4VU$&;3CaN$ƬBvP])d6l?5ng|_UJ0L/|"kkč*َFq(^b\f]V5.R{K- ~E Z^T/s揾'na]rl2i9L2'a V]! Cb,c'{dmOi]u  [W^}y=]f DYɸk jPh,2nHMЇ^;we=A/񚜉ˊii:^&rX̛H#9z/&e`NqƢ_f&~^eE~3mo>ѱrrhȷ^sC˕p<ݝW\wئE.#pԽP"%7׳5uh (Pzק,}> |p()y:s9l/=-.8}39ʮ{dެ8}ݾy¹aO{ jYE@f7DEX*<&QfnKK"AVz{sAS뾁^|Ri<}&9*__Jz]2mA:dݞ[}ɝkp8]K#!ސ*ZYVGfb(|4@#\:r×`dbZ=jB40{Te<5NtNF vÓf@'nFOv1@jU,}!d۩] 7|(b0.{EK ~/}/"%HRj=7'TsP;ظ2f@L&5VoTv Em@ I +7r GC{{Eil |-> {{30r"m>q;Yܦ=2Nd11m2CG}ܔSKK~IfG{skq#( aNo)fKlxq8ng}Z 0!e$mpruM1Jvw=ԁ&tXa7Sx1$꒮g5UF] z`0ϯh_={381A-ȋ#QȄ6R>TCaFx@F%jٖE РGW/6&PGJe`y&vr|)v<*f! 5&sLz~idжLٷ*pxUO].~^b4ClH|e{ox$x[7Mކ͢'%+ala`^ ovo2Qaqo{P \WH ,$<&rh/R>g跏 j1,G6ѮBrh("nr<㥎d:-c7^g@_`4-bS :z/F:0lޑ_rWd## P+NaJk G"H a' nϝ|j&/?h~ d)}2,sVo㨒<)߀n I[+*oxg_<Ӫd,P).Fմgǎ^uл'-i($"[K{x 얙F5Æg0a7eIL7A"n܎n=rk$IQ)_ѝ@>ZU˚eOiW9A 03+ɶ]b_,Q臢ҕ ӭ6t,aTxJ:o3!Ak.nJF)+Uv{0ns#4jt7j0wAϑO cGV҃LcK4W|Y^]?Slw7NsW@enU967[ ٺ$OskkFaJ򫡚,r˯͍ڔgHnj]Qz- f<4^À ܫd9`[),TOZ ~Cvxc'mRQ})w]joBctk5S: s̀k{nkA{[vRsOP=&N CP3BE"3tI uƪR&RiG1xI7XzчmMͲ/@?][4#,T%]RMӫQ#):ː%_ѯ izo\C҅ޏio"\`AXkΡ~)%[@b`"Hۗ |;Ώ!ÐS.w*hz2X){8mR*?K",ns=T{r#xӠ ? DBbz9=/Z2bO4Kaz~0>h^1`Y9GHtp M&)X{-p-\+żUjt͗TcӥQɘJ*B;ecG֞ژ݀vF ]1Y37^)}GӻC_K9c,j7Ȯu JD8bԻfa,&eUwI_$Յ"{XBɫjѓ(laq}n7&} *#‘渹UB@1E>򆒰#P$M֠WgsQ4KYs@ޑה4c^1'&=p4%&#L\;"nn}]- 5&:p洍:v'"8 1jgRQTRtZ$<'$F\+KKT=:̻ az](]csڛdz*E*]G(!N͟#Q?+e0پ 1ǨbTArV'a&}B k4.wRPsmcFǫ5W@UȐ|8=D"h nu,_dQ~f+-݉;8q6;XlY<QYΡatu%gG-Dŏhi+<*.x휌ؼ?|b#wxY}tNȴ s4A^75vBq'5ؼ{KYE9_bxc6J4YoAQ7Yp@Ot+˅\װrV{]K0&}kDe\k"7f\Ԏͧ阼{\D3i/Ip/m2ΟKfF<:erK1O) -r9i7d$7get9LzG'; L]\ۅ "Ph! 6`u,H*=䥻tfX~us(+*"9@Liq,$W{jsѥ]̴/ټ}4κ*%*(7Xk5J_KCn$[ oڏ 3h3q$AДf)ZRM<M:Rl%0jU/E&AW$.}13s!CT<9 %ܸ;aA=D͘DQۧD ^slN(S_SK[F%Ka|K~I#Cm \&kdk X`dHWu~ 3Y(:tyX}Vwr {da ¸݃1ߚ^M帤/>Q愃s(k׆^3.mp08ҒP# {uBR:CuGhĨq3fMC,(gl=Ñ䀖O3s+;2qw2i`z΂DŽƐŨ Z(A-x nA}<%̇ow#4,Ew/Ŋ_dcJ0 Sr)6x\$#Um2Gԍf޿*WLZC}$yRnP)$(rE3Vc([/el<4-v0<9a=irh38 tCaRBq<ǯvILPx緗33e۾+7PV?1%K%ј?[P/ P {mbZ!To"\n=i9΂ YBUxUeUJSo4x ~^;1ҢߗsC T$"޾ 1i\fSa<$+~(F(Nfwpk=?7 :XO@xȄ kj"rydX2*1K軡/Pr4ӣ2)]?SFkyulU&R6 `іQb#1͵N }pQ /٥᪛5n~p[%#y-sqw\N?9:3eSd JCZݜy=A}`8c ۤbi_e!N=4O/kX?$%MS"ۖy*q bt7%FY@4]T],.2qRI(7'Mq?<*4gqx=:eӾUD^KP;h6ӡ-l(YD]T=&VV>+i΢m6oCF,y[%(ڜ ]k=WhYr?H/G{4=^4Tr51 $tRw-7[".F c hC\Ln\vt1ʥGzPs7ɰE庲9Q!5ӟX^?Ȗ_Gj@]8Íz³NH4p6F4^@8QO5& 7TQpӰtFѺ{q{1rv%'BZLeqi@O[`={\NN2`R*VXf` <ׯ]AJ%g(L6}$4=\ mC6=.uu"G1`KI~&z]{"U61l>5 5.d3*xiX)KK4ah~Dy (3 N32=PW@+|WiSaq50b7o'gWA`{ TvT=Or8DAa=L*y\1[C3sd9Cuzmɝ== d}z> I^ f4MVG,A=`]m6#0Dۀ77AL5赩HRl > A #8{>^!Ӏ*~q{ڲRdoJ|i l~ (eOPB8(77'E!E_Ĩʫ Jq7%dB0b O Cy,QR4_qH@TZJptHKA @Dsy?ͼڃ j| %foQt|$Q8]MdP (vt%KO~IL~`pz{x֚Ca!:$ y^7spN߃Gt[;&.dw#'Wio&#bDF}56]U@\ۯ汜9&[*bhW`Vq4TTMa5/,j#*ҷ’sMϛw,~8T` ~.p"$wsSE}6v42X{P5H^ g A[9iesBrWf'|nPJ℗(^;w/YU]ޭpkMO1}5UJa~m2TεsB^vӢ\_gĠԫx]M]C~uW9K}˜S$Ef)?p=drh.*~0f!~ c; ?)p$9sе gMV3H-abXz9{J~{J M(IQ쫼t>.A鋏yn|-F`1[.ЃVfH+*`VBTiT8$b3W "cp_ ;{e'F8o<^h0VF[NB~kM( ӝ}KOI+RO+Uvuv 'eo^jؿnt-0X&2g {4iZ:Oֆ̵QɟkA5|%l+yx7gMObw)>5ip"qIhk 1h܏z}{'^RzA4-.V(x+(zLuuR Sj7m\3+bE)/v/deVVK\ecnS; Ƿ.\Ϧ&h{v%Z,d7>F\!s |! ϥ^[FH*?;—;qFSϑ?ӉMa'n(ǫGƫj* (8 踂K2{3qx&r3 m fK jª1:0> 7LvJo}wr{/74D3S.C MrL(U\tsdQ<ӗ6FH hᗛbś'CZ7)AyWֲ.=C߭U!&3,I7|Hl\$/ԡ\}K~|X__ej *^>}_ 9z9_9ý D݆fzժDgְ1E- C6e#Idd@FB(H]]1~8jzK2S~?z=CG^g*Ɉ]|Dn_s.w O(ϒMmU\f(7i@3M rBVP45*:T!A0mPhZ`aFclȼmx5}]`avXR\Q7 (EczEͷ@8۞a Z략jnҎ2YbIԅ$>' 6 zӴ3_Wnh„$ʄ̛uj0ޜN Y`>L̄:Ysg.9ox)x3at9/6^5'Kг .o7:v՜o@'oK kx}*T]ƽelc,_7'=e\G/5Ya*Rgp{F_#pDGb $ G>F}s+Y4 WELBߏO|͘LhrM=oZ k5?)0h s];"kTypH߿Qnz5,'m<R)0kk^s}!g.d@ZۢʠUӄ`BE=#)> R˳+rp]Hn m}A? |i3(7TyG_ e,O>؇A-I84 pLVS?W`~LyMd_s^]1[S82f򢵯dt&CMok?idLjlkz?p&~/| *$S;"ƽWл v2yMZB8-Yv%Ӳϛt#̩jgkOt½m7qO}_"dD`ġ@ijBUhG {!,ص09e9_~7\vuU$J=T|Nz&Cnv'ĘZA?]'Dm7NCl5C&Mve ʰdPu/߃kclYR¿0#MD&znt;`Nj&*N&AS~1nlBnTtܟ uyJ99po*='sN0ʂm,7I`ϔk&`ȉ]|^ӆl+Gj"fk.zBtd'lS"9'1 *M4Xj%!^rx!@34)nS*>zlFT\Qa(z:0kR prȢm@U\SO,j K(z"*tD VWvV0JdV `?{W4N !kCwG I"2YLИ\> R۪pֆFN8HZ!\Ɋ*o][ҘSv=υ&1W&hC ΚP4aX}+1Fë1/,֗lm; :H{ΎE'2 h'_ Mf%b?(xAR̪Mt_jpƭtF/`8'{p!􎾨%63:x9Yj9WsbAB{I Y,rFoӺ(iRiz+f< @ \7s+ \s75{C7T>o%"vnq Ƈ9NN@%jܸH!@'}VpusjS"@,<04@QXJ jS[GӸ!o嚥VgO.U+e= ,_>Hq"d1PdH=0ϦA!#0`4+i BlSbp1vy(iRӼ3SktwiX0Kn~-\ h'AC.gR]2uN#boc~Hl{S2vO,'+==qX\ Dm_ `Ї|^49 /W6i~Ţ:.E:c2>O9$D]uSrA:@O4|VvK$xQVxm{w㼩㗕:1g_Ⓨ&[VaaP/: Y*<5Ir934SZG#)0yF/cI Ao0SQIpCWʙP$OE4נ4bdʇI"\8 QL0MfxWF| ;C*FQ/h\n2oZ1Z=N߅Ew2#]R01Fɧt5W=W4~JXU#~N\緒,=L 7^;ećgi/Qar'9kȊ0 XbA]=p&1 40i=0"*C5[O4C_LqMNY൬t-M+, ;Iګ ziJ3bkK Am٫ V=hA7P,>_8vw-`=TZW&BB)\wbvkWʝb[FeiSwULͣ&Cx1%hZBFz@z9Fy$9 &}OU>aXpw;OH*YR+vWp7b3g 6e|J>''%*O ,c7MxLuSeU O%+b~rֹD32-VPE=Y|/]KrǘH~c)0OdCa;c)e_wh]|A|)p}_\PxjC43q)Pf|}'# _3SKt3`BB{!nUcޕso9 m"78fxK.oGLԶzb./GR](YRCȉ/'>Sѓ;?rT iyAf#5@aUJèAv6Fc EPQWzAaU0 ;\|W_|H*@c8WN ʺ)!Bz2ugꚉ8IGble[ŎX %PggL$C/qP]v⏋16F`H%z u@ri;WH;cT!楧%U~^8# \i )C+'KTܒǸ10EۈLC6-Q_ } لZ.Ѥo+o{ rޛ0"-tHB,rQr-)vl52_/ ']Ec$Ұ5;ڀk{jgshVby=֏39fo28"たF-Q%,┼>iYc-X: OE ԴЗk@O07'Ed i_ŋ,0 tذdA=sgQmU4~ȓv5IdIҚ*I@iG.V?ܸ$:8M > NJ?.sk䋟VeHX9\+ BfwX5]x.p{ znv?Jqf|aNj]f#M Y)w, / bʒ:aH=ANc_x4 7SzR)YJ"Sot+uygD8Y~Fܮ;P7Xp|ƒ BboSFl/2Z.j$H_:C4sujSy9hت6źbpgC_h8 WEUTK #wtfLzYgKɟ$oL*LkzKw*^m,G4]oXWCv/{/idpFlRVLK5e K;m2qky9@sDr+S~2uJ ;e~*bQD hCfp+j)eEq%PEY5nmUa `6L8NH!i.8C!lC T3W>KD9SNi 1[mY0e)2ƽ4Bfx١u1A+,oB8GuGCv ?-2>@at&1ad=7;BpqfVt|½]ʬRx+זdX\`gxJThO֏'3>#P9{;8gn7apFr#Њ( 5n~ӬpNb>6<2k/y#nZ# udn.Fa]tUt-u.EZus87{gYDU|qq5IRKA+1d؍QD=]).f ut*#]a-WOf*X E&/AilZ*W~iт; o #06Z` yk9q]w,R&n}5VmZ>:K JXPtlX||zuo/kڏ HY-=~u`i`TLaP,y.P5JM_Ը' 3RbX} ?gOoULWa @ - r; :@XHrviœkE*J;:sڼ"}YTmc='1eJI6{w?Lk;UIbwgVV-m4&P94O:#]U0%ɹo?(yN@$:e΂9St1o(פb: ^'W5u?X;s0-_պyƚ"# PHGb WvK?M &2"53C޷4xeUp8Qpe֨ yy1y-@i|܇y Q8T&ӑiEUm* YY=^ {{FSzB-A@6m$1lq9,H:L-mtl0Mz> +rr tmҁFЊkfHb [@Tn[VheUI*g;MрỌ[{%f/i,z7q5vr A o@ȳ x4|l]# +'°[Q0KL[ A)IRχWeҊc3V44oXeDuۊ*J#wH_g^{lZ%\hݠr%Gp\5:! 2 n$Lw4ee(1d. ](P6gam+3FJ[3@"FF?!پ7n~&8I wn;Ǵ<Ļ"nZǠ QEǃXr]= 7k #Ն窣HG dz=0T܇/GUӠf$WӠ7Zs%@ o YcU"%g%t,2g* MJawyVm}8պd ]a..{Az31iv`pwQD}2d N]NneA]_Ǹ+}%}9M_jGw+i0S78xZaҲQGY|t|mI˵8j:o=( xIqn_^(BQH+^4DI0"oNxg=sk{ ?] ?^xxvߎ"ra'-9ˇ.|FTBi_Ml)C8y RaFKVɣf" ob< z+Ø 9/uDF{ ژc'7-|2z|ۻVk}~!š*J0LjQy|\6䴷8Wٍ%r觖z߰frhv,G~9Cdϧ^ @肑uҶqsrLƓfpDs$ x7&T)&/e7OX.ʍۖq*";6lv0b Vt,W*tdz+);4!cBZk5x+;MdDEH&:0*# V5j8 b: Mx׍ ߟoƄJH{GPK̴l:4M>Q/NR؜t-Oŭ |eSvtZ媔kI繦y5Zg5X%kzB.BXϋ3O=9(lj=+1›nf@҅WdqԃXX*; mG:UЩk2||Aנv2K-RAѺ9!Wj|1Bˬ:DfGR/[OhilZc"v}$`T3Rۛ ͇1w5pF񡬺.ت0ymd@S/l TM!JDBeǧm?E&1~7[FA٬ r@‡ta|91\@x~3SN+vB=IB$&?0ӷ3@+yBKɛOu&Ȋ|@?}vA/-DתYq]U="ԟ4FJJBg (&^#Vn#=JGNY=Svҷgfߴ@e:Xe pk:$MYs,#JhP#ٛR"_`C{ȦLV|`MbkB移&Nv~^!;jf u+afD !>\8ǀo"J>*fq6"-;!չ[ʑhU &67SVw73墥x&h@"-ȾyS9SDNKCdzMZѧf@o)88B_Y>s " ˯v[\6N8-c~VYqY,yykD;K$i"/龢 Coݮ@qxRgJ*љE5.M}p[тI;"@p+{; D,bm`GC*D @:d^}_XBr84PK$u$f3m:4b,yPFA=TP}\*hs"Yw#V >AGIPE@HWxz9sjbHocLdD+\Fp0{4TZQ+i腗p͆aj`-V.}Ik+U+~\2a4 ŏlTHhDmgO(Cf(cvRl Ie_c^P0hSIqt$[Cά88ᯆΣ/{ $kNcGv8MfIL4~}9T-*fpI:Lx@o ޓ&q\&[UyB1"olN^ yʤyAQ5j-U_(:f=]N=2.GT=GĨsAr5Sw2LS\P N3wzJQVsv8Y.jy8I8%R32BߘG)5F@k@`/>5IN5H5a$ QJ`:;@-Ұ}S\ʨ@%g QӋ1qnI< 8Ekjrzyϒ{ya5XQm&,wk9Ua7e57ǣh\ ''}sņ40X<< /U[%Ę}lbM`4ܐ=g칾DkDS0{"@L9y*T>}(A9_nr"GJpzxa%v(u"?Cǒn٬UNy )-3QEߞKhao{e6"{D!mSP&J(XB6J538oYc/Ipϯ{:/7ӌ븪cC+-ǭv(KpO#9BURL) h9E] th$c.i {N#*n*H2QĩV\7u-Tzoӑ\nG&sx,o">sW !#[O|*W fO(\/r;4 G mB6wh "&pA ܏^oO>օA.7Q|DB9a9="K31Hlӭ ᆢny[!3l )F*Z~DoP^j>$.gHex餅eq3JE`&؎2vֲgCz̴plf}Ђ}ޑO=5u^N-f`'jW|Nx:gVO_,/tĨ, b#8@قS.?O;@T -WÆ}0!ycRu2q\j.L0 tPOhTs>=ĀPx')sZy9r<dB (RA0ܺj<xF-Mlk`nΞQ).XsfNė2Eښ~ a%,J}T@u40*L^KRBv@>Et/]j9(^k{ yӄ@yl9xEӈHC@t4<_؛^"i+(h *b>e=3M{͑|"Gep73$ބ=Ɖ !*!YǤ&Z7OaV@08hIBq񉀕?w@@X'9DOw-F_Hv|YBC;Sg_ŭ$W- yB7|;n1$e{k N o$u"|]Vvdb$&Vmw~W$.v>/k849=4yĭ]U:6 Iyse?O{\[Z/V`hv_?Yн݂f? ʟ7_y\jw`tDQ'2,F'f%rwFҩ~nmO%K̝׵6S  z,4_&ƀK5Ye:E2 G{ce3 DFWVk\9TĨk8*t"XX*H=GLVOZ(H!lXv(g(h}>Ȝ~=f{O$0Iܨbewu$gQfkYxM,qAz$# 44Iqř$W29p"׬4y#̩tB&ЫT^ouxݳ9jBQ\єXd40 _PQ%6Ti 1wa yy:Gg"NUժU 'dS/@21aj _ny`#~bD7$ojs-6I\g#e"峠 \LwWIlwvu_wz*p :jTy-`R~/ m@(.~8(YcIˮ*4M,E 1ŽH4BXK\w^~ShƶUrjPʜ4ݩu#HM\Hs8pҬaΦ0MO7a1YP2G~w,7Sr>7{䫊Ɉ9#bofhXC˨ocB;QHW#2?qxBf#>j;3bCAF.⹪,آO!M}P!6vq`yFT?hebkc YvX0=H! [YۨH]~r~RW# WSL̨s(%)˞̮]?bؓL ԶȹW[*;$c_A!]" mD5јKkQܭp o_,?ݢ rl^32 46zM~*ƘD(Eo6n0$E:`QSZ^7SӚB.}0 2vhܘL/;꯸ϖܭ8DgԷ߆^s6oJ)(1sw.ws#|wI㡾(0v7\ 7E3 45>'KMh8u@6֙.]8hXFw{Y:$Ck#b?H1OzP!~ɝuW[I6 8HE^*FA-^ 4H5GԢ>(A/DA~f>|=6"a@bп_Hक़E6?`qHx39h[ 5=$A^%YIA2!ga"S&5&Sޣ.FSTDcUc0F̐<ѭ3+ Sz$˧(]z40/6z yР9:#` F3-t*QEeK,IYZd!UH" H&X%ktսs#dn7.f eq8_Rm.>dqv@u,u"} Bse֩s}n : 2&}!g/1s#`M}5F)4+cpMyd}!GE5!6|G|W~m!Vs@=eQP2x.&|yW_7v>3;ͤ'Ħ@7ձC+;^XVuˑ'X~>Ag Dl)rk8,!=l'.뉆ۤJ 0EH4]EQ'8#P#2j6mZَN9E9{e1KJ 2EMNRS%ó,m̧w2&dis 4Gۆ2F0SI~ZY@x_sOa{xYBPK͔ ]ջuDAsN iB҇c趼&>F VxUn7\eŹ_؈G,7v~nC(*a.W5ꑣw(9l ]AMx ste# EGؙmhY[n:_s<36)[6!XYs!3 f}~_+GpcܡCQTv,x=xS;Ԃ• S5!cF'}=ߌXmM,y5ӵtsQP'ЊaZmfХò _`A\ce$vκU*᳊ͥF/YKn߿5`ڗ8RӶeM))׀HTst?zȯAKOzyIR/?7^I !b3!艉 5;1BKnK(gNڥm$jaXrR$\)#8e=w}l+ʯTe( |F`iF΄2 u8}0 voO"VŠ#0 qpzPLFf*2 [>8 4N-&Eŝ)}=$sQ:ˣ.OtG$M|SWÓ| 5UzsVS~j,PGBNDv@#Pg*Nw]8bW ._ 4ESM+77:]9r{%ie҃WHwVn!#[qsI61,۾Pʎ vX|z$ףkEki+ֹ Җ LӸK_`oL 2if7d!~Kw(P 8?Lm us[e㶲R , !8 |/Bgb)~R|3dW-80({ѿku@%,S=HKFƷc"]vO,'ؖ\_73Iˍ0>A2'Ƀ ayi2!@Py ^ <$Can:KZt$Bj1$E,з0IvbԽ=g:5漪>%eQM­9\^"7<.i !q7թFY2 <^uo;E.Ֆ^n1Y99"av=#+OMGxXr} 'yKu |ph3΄q+xIk3^\o3.Zօ0̙?,U(a"3chmEk98@ں9?F 'Ո}K}WwL1 .C*6}V. \ ΁RgQ~dQ󖵑Fцd jeS7${~&},l34mtB9 2h24oYp R(CEbgJE sfoA A<s `C;2]L"θ4\%=:YqFva= 2Mwn*2fndtӳd>9(Ů Ǒ/M"h_it-9 7>sElfnN.ZIgZKnuã;<{T0TVKB'plAR.39o"M>HМS~䕘FG5MS1*=jɞ'9]u૲ *0/KP'YVgn9u{(*΋ '"g*ʼsĵGBi?Z *-^9z {+ 2pa]V ~뭎 *gO <`sC~s, U =KM,[u2jC;G\בd2$"Of16C!D 6a: k8IB cdQwwN(D5eHLtء{T;oWި(V8BLjFZz@ʥd`9{S$B[tg)mx?&:(S-uD+{el+ycM_K⻬ÎAG WɟƩլ H>O@MuO2akh+t;HE_ ݛQd@+zǝgZ䄽fg {%IT.)Scp,}}7ȩv{ѳ@! EL'ؕ ɱ*F8]b4y1xwܪDhX$iI`dĶ'{|YY?pW䂑df_DGLS+2kvȡu&DPPs5<'CWN#{56[?P`lZ1&cL*Tʤ>|e.\DfDύ kpMJ IǸ@3=ceNÕZ/Jy w=լDGt ZMo7}YeEHBk3_KNryw8eҰ 9irIh?UD@"Iq1¬r3qIw[jut9 ~XErF-#P%!^#4:DpR _o |~6 Du,p X jL`S xn}9tA!1a%{vo"1Am-׍X ZBLԝ(LAuհJL"ݥla.Iޅh]'xȼH xwQVF_M .;Ce>DQC%B/@{ yoF7L&1n׍} 2غ))٩%)?uGhRWd%_wY_xP>ӯg.R:aX#\t~Ú WPWU LQ#~$v f]H0(z3,#\-tCy[gaDoƃ/K<ы<$Cf%fgȢs[ݓ)Qժo/@r@D¯k^ORz |*f>"=;uoN8%We^~KJ@5\X:#[n .?a lg{C㗒~ FW2ǡC2f%u٘T5sF9iԖӒqpY/#a Kb9x[%~Ew.xo锼N > V( ۢp7ne9 w }.Keg}VyP?C$ڏĖkJp5~.VT ԾIy jW\G(rJ "]&6nj$2r;KlClF ^w\L C.{zGX0UNOE}K+@?fߠ DZeS0#b7@0W5w|tYxrolSȕ]"POAݿs!"MBp+Ķ\/Mz|R / ֱA3g!aG2}I^k̼73gڋƆk3F@=Pz[OtF=W!a\Э`{GLz.0MpfXmsfv,ic}NHI[.P}k& !TO޽g'ښ⁝/B;uWAn0d[o1hKehע:7p}df~._=uo8zmG8}=:^!7++tS~e:0GlGcp;WyxW&~%d+|I_>V,3kޝ$jwy7?GsoO "'\&`yqUn,^=N-1"?%6 :rRx 0YƢPR.+60c!>K+{0 ](ŋaC;\#qC.)fFl j0UrdgѮ^z?`]B: QƑ'6|[<]v yI?"y"ZSǤ,= -$GnT#@l1[J/Re>az P=7,}RQ[F[d/Q3NЌPO g8YꌜE/LM$!06-tSa]@tP4Xy%7 1E+ Š߭ҧbX z94U-aQSRy._Z\M #|* z2\"Ub;!kط >'^0$iFwĎ{ɛ3!`F&>3CXmV.[AŴ^%?~7R4F:!{3kUxIfM.3DQw"lӲ  LtEeq^w.r`=jܜc f犫!Ea`Rv`zUvY V!:r\gKOaH$&ɹ_85@ꖸR.h?^⬔5H3}\m:Y~""Eb5z.MO9 {uz"P{CU]4ob|W"bI㦅Z! K|WzS煈忏 k@|:Ln܍)h0fTJ>C6\ry( HgZI):a_ci# L@ܔBaϚ]~ט%v,iKomS;{ɖG)7zx8+f14Vj1P(sp\?$2S>*eiBdLsSl}"5uh.Ij~4F1+a' [OEUkþ`=QbUOA;7:.^@QsX%/lJ h ɹ2ꩂ W.UYkqWj$cF/B}IfP b捳+B .JnRJQ~-zNf6xPQ4 %$b).,2SϚ\>|PKimY@^H$:֣MfR^Uf7Qi, [L5\T@nWHօU| O.98f2ULGLt3qؑF543-aws]2j @δêj\^Yx|5k $ĸ>P&5@jAΪX!E- sA'|K48&pi$yHfolbt~nĶxn0[bvWf}:WSrmrC62Lmê$q:] txo}quŜ`y`j8 ʞ4pozRX} r818L 9 8n/bȚw+O6./_kB%R>}ȾMVJSMV",`QXR! s~ vjI8NN짫%bVpiqmX~%9X"Gڌ1L[(t Ԑڋj6'7¯ow謟(9SsHء3O PI >H7e6 !N#V;c4,FKHRRz GKpE5e{\FCdR]2SC斨p^".HnAVΚ^?RSO;.T%)TaOcLN E*ڦ-gKvhg* gR:AkfZw}$.d | zD_53_f[ *D9zsl Լr|fB(]^Y+뀣0Y$mW$Vb}lu34ra?wi S8J͜l6"x*֤qcBij .Z)7PA\XJ`ao Q]N~ ? ೚'gݬm99}Ęl޻@z CJ#HI8LErÔnfbUYmBy`e~Z- y3jjz_9L׋r sYJ3W7lݵ.IYf]ς, ёl?%pk_ UH^!;4BOԲLՙR:qGaY`j(j8CQK r"MSe)orI>S:SsT>8n-`ў*i pԈ?p}̐ػ?# zK|f iI|Q}@Rh,sl,:{;/J"Ak}$3*r[-jz5>z43?wޗ\'klJG -\4W̜"n!TN]P?2 fV#mET,>T1*l8͠M򗪢1/%@ lasyszh2Od[#e9 P?wRdph8u7dԵ >O`{(BɋA|b?Cli Yʡ )/ =ǵALU[*2 ꆱSDQvWXΓ: |]%*C>$k|鄓{ftv#5K<^(4 VHxR:n,;:T @pZzs;}~&ވdF u}0 ),rVM ʼn |KV#m<ɬL%tF,7:K[-!vvml/V@qߤ}:J" Gf]lݍX^^q*}!7'tPTybͻxW";.W$5C/#[t< f䷀zDkoCT0[ΊjbIڏηFNJ9[KBʹ-|]UQU!h ̍X0Ic٤p3KGEƼpg`> }姂|^K0ނYu/>Iߺ%CYAJɓ7D)x$܊$79RP3d5agUɗ-TrpM6S皉fQI>*'ӋzE{F=< _|4L/8,ML|:'#9$ĵY[C!aDŽ@9'u1(d&<53dVgL3忊?diϦBD2BMebZͦ1]X4GdS,p,׫BnƋPUߐHQdRZҕ(QDFRjJ,KƻDqDoSghdz~ӭbqԥc X`#JyH\5dJt ⫹s=Agx9,jw6U}e [Ϗ6a߂5Г".c>zUVLӪwm[xP~xBP=4s)fJ2t!Q18MdpmB]zJh䀚.K/PWQ <)/Nc"g ocF;ẏNaל0h= ՆƖdzvWe`6m?E9'SFIڵrL yg|*!M3 Crdɩ2pj*ܥ;HFvW#hS" %ۿԶ2\A IB6^3D  69aJE~!uc:@י,N/.:~-#ca'V}Hl/X։AH4:·T=vA.ہܠK$UoA:lʗe{4[UىD&QPĘFJ5ܩR?FYu֠>ٷ7 &Q0Uq$]U}Z]uTi4`ҷ3=*)mw[i av27u&gWH&uR$/ü t9{j7bS^%ŠyPPH5ӼmaYd\T \#PQ%}с)zg6'> `4eѨ!X6FREiSlӧ K(^灻{@/J0]UԚZ C\\'rƏ2mzT%O:fX(Rf羭k5%B!>7لN ]YPHǃ@U_)Y%*ξ?-l/W;(?+u6SFnpU6T|2֖ {:%GY_0 'ԯN9ۀ@X6|EQZ$upm>kJj,gAP5o50R=EfI͊ˉ׬vӉZEQҖ۰P l q#JQdN*J?N|#c)$'kX>BBX~qc4w|lAi/W;RCaz[b~G+̯c)C1:EyZDF_IΠ+{侥0J)03'ӯ.Nyj77E4]p0\Z)NyՌq2|,O͏[ AN C&BIyx9&l53sk3?^,Ǟ_V[ԧ~IiF>ӘaKDN:#(ɶgae(C$Bͩ(F mEkv/7CDxn@Hjۛa*H*,W±ڕ~j0 +s#;?M=+? |XD,?d_"yN/[!ju-ު [QUdLD#No%ibY~y;EŰsޥoKԴ[KlHV(B?|=W&S 3)Z|9~}1_b1~9ݬk ;n7|B8pcDcW 8zP%\gJ 1F1-خ˝==L-7\"uY I`zɠg  t%]"~2)^Bǽ*t,U[gKř4uO"$럪% ! Us]ίٞU_2է]_؊I  x['+[NUUIBCg[u# -H[Ial1|Fuy^9u{HeƩ-ɚMZ- I%~-Ux'Uj1%fx̌g2?Z`D֏ #V]Pr4Op48D=70mi9XJ8ʣ#@KEGM6%x?AJ1.?tI5w~~X)8n~gE3r0exz^,L;C.>Gwh-@sAMDtEhuB&|6/xfmhO^.Q Y`OpR~$#~@psUމ0 |i':LHs~D"r[ f5,;4xCy~%jț'Ģj{@0 NS!fGr ֟~jTs@K5t0WkIYGˡnLW읱bA/;^Y9IpiV<%aг7-*%m=s0.ֳ+eåF|5WZvf]&uW2po 슾y_1Erk#ڿ+foa=^Ru3 ]zhW'6%ҽlUwsm~ V-LYZʭF櫀Y\6__YL" @[r1"$f=[ H[Z[2nv%d`tqKQshKMKHv K?NfGuNkuxun9AҋA067 5@=v@^({ e}\̎ÙC&52!4O5ܫ#'vr3*i.0.VDwt K}W=2dp5'9ޕlG \7vDdxs!JcSPeV0CgB>a`U?Wpy"-|/(&i4&w_CN)| TC (}4]=߉ݺ?v |_AuER/4j[TH`&+4iY>&,y ɺtT4kgyP 8rœ&ӄ/^}b))}lY+d_aaQ`spDnFe5|&m8~PCn*Ik*KehĆ4݇# 6S . 5GJӶ:aPddVh6ERKhOqsYo ,4iLzSmpO !mAA3+HjҔXnu ' 5%h=a[v(BMc?e>/Jv?&5BD+W>ҀԁDL"SlZ5/GghIY{=!/fOaҜИˁr?;)F14'>6"/Ņ|;S|b[y ե\:k`ŒS[:BcIo~#{u@CvvsKžM/a{H;9}1H+! (hlP+L6NߣMkWJ'=Ǿ$7HApo $;I75O>cu4xjMrC{}Ib#8u'-+r_UIQy&_IZ$@i- t~moT-qM&'[ZC1甚C[P\a_J|Â圕b$Їoa26G](Vk`Nݹ]3Q_2Ҭ ϡm#נ\>\GMxb'{|>9-DP<\*/<,.2Un?}0ySSt*cۜ^v~Ws@qR$iOYIlHVŀg3hX2G#5XkQ'TīIߓ9q]k*?=-@ή#R6'v9~ QGic^C3Bퟩ!) 9 {g̛j>d7]uw1GX;~ ]F "YBp@T7#I*NB9F)Ypɤ$\az 3G~oUY鏌Q9)! kFr[36G79O?B6XMm7mV}پ(r_*!-^|{^$W /@zhfm9*wən5iv,=}U3s-8[߱C`{Vz?X{5, $A|-V&K؂+yj U[\\kIQ$TJ~s,g}<0׵Ϊvxr6钱<ك$|ӅU\tDfO}nHhpkI:>U{ʹ%ZV㎼zr^u_erٍaQV{Yx)+7(EsM6KyCc+w\^1<rٛbz8;-G<2ziQseHx5* 6@Gm$¡qC3>c~k5/Y 7;kjg׎YrP sM DFVǓNLSr`r+֕vKL>_ :I{+i饱G[Ll-VIe} R]KMyGs1H'uZ$a'SC*C]!(^QEd~b>z (iduQ =Ռ7AҘ01SvzG պBT@+?cJ(6P3ꨭpD zԍ-]LZ蜔1Nf0ͥ A4:Mw=J.FDTF= ڞs.n ˆ-;Ynr8d6<&.KZȁjUkh|t*C =dӓ9mgQRp^A4fd%mx®xS9Cg p-)+YܯIϣ~H|؟C]bwVgǔݣ|[]=yE|V ili;7JOD:JP,KvAMv"|pNgM%q(.\Dͦ"] v&d{?OBp'e`RaUAjnG$^k ψ@?Ï)U{ ?0Tl*ܧ GLn80.Nr Ng. ;–<4-3UTD⃾ġ;MS4JqXeish:^)zwxS}*av9JMa;foUn6XdPKJjG}[:T+as>̅O䂫AIo*atcDv 3*K%Qya:B'`̜4o u-yek :ɝI{颴9^6`99jK_NOk){*F nSNYaNHgt^;f<{bo1/yKLˈur yhiVBbr)n5ݎv__)q~Dw*+^\YjwPcP/#0}nWֳ9!YPYZA& FE*2ĕ9;P:N"4,Ϲ!"$]oD&YT+ 53${>Ҿɢ.AnH0%3d.Cr~{(V]s C.G#pHRpK8_wn*`/vÅE?Ks\C2Pv=4 _C7=,݂ix4$*nJM.ZtEO1P]kq"S2Kcr@ v_D29N]igrDHK)HpB 78K,i5+\ѵ(fA֊YASZI , .S4PB:SKFƖ* AܤRl(C_\8Bo(ȿBmWBLY?7%1UOrF=UI$n#;Hu)Te\w ҙ?yxO Ooagj;+Mc8ڌD#HGܔ(7 IQ+2qqbJҭnd(}ϰa.B?%kRpee.ADAuyntX G?T9{|Ć쌃,ָ.9M[?e+F M.7̫+.n 7 )ҶWxx"e5-' F/PYe)z񹉗Nz {T#_S#uuڱéb]հI =j*h>$OoйG[ZC3IXx:dg(W¾AdFum MFvbtཊS K-`kbqtW fXl.[8 T5p7`2©EIMfޘ$e.YVp4ʩDjj_o{,5id[-?TI$_$1=DvjHg)*/Oг΄>kW𚱉̥:fQ6K4wvM~:R3䩮 膞<` ,E4ѩNMy[]N[Inq@p 03ԨJ/I|?"3PBI53c&마^"aIF#NCIE?yo:`o֋!L~F"qzD\*%T\bkd~38OJ;CpVu38gMd Ty$:UP&|$Gq3$=sTVϺn K_Jj GN>2&IEɆiuTX5"UEJFWLdelCFtGDV)j5]`|*2|:[G[j%8ƿ>( >u$ҖGޒlϣ_ںX?EPɅ7ȟINm\x#wDjx^!uG1pHt5AVF5tOiä U{2|T󷸚oyTX~ 4 Л\P?% GH_+42g.JNݑcdDhHD:~>l!,4vپi)q<ҨBG}j8E I![l{gbg_mR;b>`# &œk!~d`D]X]Mz:,n,bݩlQ'J|P.q.δ-]qMm2/ؓha`b q+(: 4V8}~{\h0SXĝ5$T]Ryx5ɊGXE^R)0V+ YVycY?&H8_cŒPj4VtY?@݇asu2~ԗs$6Vݲ|,33-ʐi5zڌΙ13ҁg/uWY1ƜH{,~U(: a^_Drϒd u(ץm!dVxUZF`[#![[G4=At D'- ۀb/PR\6Hb~+:'`<x>Mn&ʡ `ݱnF)ti9$b I{T;,L9)+$\fADb"%wC@+nŷV\r* h9U@zNfihmNNEhOoaU>& Q`j74NxJBbGl`sC1jS[ z[Y`_ :f`Ј_N JlӾ:*P3+`bɶٺpSX_/|z$>ƶ^P_=6נMVg9FGlJ)p&$kUiZ if~׎>4Μy_)BvӋ?nV0wu_&@kUf}[R=1n kPQrqTgtxa헶\6>?fQm OZ<3UD,9V tZHb z|u!Ƌ85,T?BxWTJMP-t3[cxhp742@MbC'fk6+Cp B•AU LmpP #ai#cnqKW(g :"G, KIV31A6<-e] /91+`5Gf[3 :R1yk1EoOvU=o⇺:G|i^p5.:f>#Y4G]p҉k|2k"`ḕG Ejw]e-,N'&SKgO0kZ%04 g揋Vm@";En$Yqe~,@ 9DzޖļĆ݉Չr-ljҜwV1sbnew6kV g&NN^5 c ~|'\}&s#s(qh0ukri Gyy#,5RmWrV%LEBaۻGu 9Ql+Ѝy<XMn1i6J|LctRrf%ii*(/U~pNO^6oEޘh.?Ou|㒸:iM9v|bU; YDn5z[s6kSS+_`Xr\7 Ij1}'AW7;>|70^nvK).b3%P_ƔWZ8/ ]]>JQVi?X_ùD,z )rד=HzWGn:-3 dX9\yzev5a$^m( iňX6ED=%@f G_2~V9pajSs!%(]zorP!QP BxjpSgOEdwvM7KƝ=J{3* zDNQ jLJI`|>)Eֵk?3Icw]{lhtGHg kAߞ(  6+<qVxg53j{Vھš<50[ p"S.uU9ƾi߰Bnq-燻H|VH4BFsbvGz .8w>P]:bV3h%pÌfqCTw?֟Xdז^9-sf# I%VȓJKv=*-]weNGG1g;ű!uTq3#9hmw mӏt$7lY06čǕ.L4Fo>6*K3i)LWhqqH a"]/<86r}\+s9K-Kz.3{ЩIӣRs+$+K&gPݝtjғ "kn"kMF8}fg'Vav=,]7{{giq2~FI=h[* 9CSՌ֕uEIJQ0|)8NN;,Э^*6\uiϿ{{WbS\hE>iHwrvpv~QJkLV?Ķ*ʕFL{B. <ۇ*(Z䞒 xSaعu+k{ 9-~)[Lb;Zv([핓^rj/_&exdx1N&y{GE!wK1̠UPyI|hfòƤJxN7Y 6ZpkZ]Oտ/r6Ǖ֞} Ka3g,2j\ö?4Iž!H}`5 iJ|;#mlIcSS/Lq;+M~~F=QZB+̐*‡ '_»_3qf:LKIv5z(aß"bl'Ȅ̖;S {<ErʀV}B+y\kT#eY޺D@&qVkoЄ0㓧Kx`׋Vfk;1v~瑾2&FL0˨ŒUp>#8*Ǻ!$ AE4|}4 AvV[b*5_*]hW ~(b?8`٩@Dٵ tQ!Q\eٺ ڈϣ\/kCrYDS:tN0j"!H޽A 1 , _In3V"Y!F x{%!}QyJnoS"y`>)4Oo͊>_*Sv]4M~`C8@IP˗,{yQP.0um~|x.֦W΍p#ǟJkLgً5+PˬhR d+tljM-1{3PTQx2Jcm4оiYacf]1q@^tG\UWJ`1"ӓ5ҙ?%#Ƣ)\`~_oK٫T{T[_=P!==>}=& ek 2&,v7ǨOѰۑHNWm}% ~i.ېv[7KaO 3@(Z1SmӦVxs5MTUJeFC'4ы~ۨibA> ;U, 炰]+Fs35Tby[^ll@lExQ` G]齽2`5V9fHO^݃swM"K^&MLKh7& p0ɦvuE QO_5Բ(/x#(Thqʛ1*ahnoj~ smȿXaa/~\BuIF.ϧ5e.Båՠ,o?Hfqd(OGMWD:܍̆#l+/ZILL켇hTELP&.;%K#-:{h|tMG$3û#=JACtL6V~;%I 51Kg$  -&*|LD(fWMW&Nq/hoԄDSJV`*hyTَCrFq@26a=6:{tK5(78ٟV6橰[<Х:'r-2"> /H=f* >:V{*n,*C{du(lI2"Yb.pT gVMnލ/R3EOpK ץdYaeE8dߕҧ+ᑀKV? * Q<4#ץP-6,5B";$bk(,0m=,CI'~JN/\3kݶK?)3. ٱ!%/`7."mXyDFY2G\Ka/#4xK]*3S( W /z,]NL;X0mAmsaU#:| Iק\PcX_r/=%Oz2QCJhmtNP03 9SqrspofqR@} k$`o9Ϗr*)JVQ LُWB95uRٚ׮,cA=b+䟊zu|)bУuwkV&s@|(Pb.n7mV2?N68*RI  H^*=p߅  Z|.|k(iwϗoX+ G¤v͑^5č'MiTZnT{%hPv,~ivzkWtk><.?o=U .8 L-YѬdcô?>` Af)tye;PrWrS]k.ߞ46jƑ[?#IcDzAC"J\LN4 gzrؙmWjAEaj tiʴm.ϐʥ9im#3-oW) dSsg:ςdgzc 4=:A`:p[=?]V K<Ƨ#ɗ";6>*5T-D$/od19ͱL0Si JYZǾkcNlhoRR[ X4=yWԒ >F nmG7GBkn?^}ku1Vt`杜uQLd+opŕ[j&aC)k? %/Sg#2Q(V͘b v29*j}t^ۃ_ :%, -l &w W>hN~*-fvigৌ .w7@Rdp!Q|jD*F9wΕ?̇)O|S:<\ޛ,[91H ,9J_\0E*4qOg*~덎Ԇ/o6MV#UPQ~+Pɲ@ aP ^nz^l<12oq׷0؟L\Ք>'=C[2~KS*f(vl̊/fAkl]#5w-JSRv͸UܷroN^9@m$jET3^_j`%=t ~kp rGLR8(JjaU`} pNe+_>r L\)FxzQ:J\&3Lag>!X|=(TˉNj=R'H_LO-iCM$:حPh5ͨ{#>JwӏeS-WXclT }J[Uv6Bп %m2tCȡpH"ԛƄ1:ݴkF 8dp`_=Yښ[*)CLܖ&FkcМ+uMrP=4@׀I_2pK{D;`!"5~,Ù|!^fʯ_"$ 48jAz@lZ,A;"S@N˷c$yz܅S1O 8 [\dU'"r!AP]D]o7í.ۀp[qiQ#N-zwƚ*Oܜ]Ę@1#w#u燯G+٠Sl>R%YNw/emS]`SƋcO!h^f/|SثS9~(C_ vљXqX͸˜)8YhHP-00ӓ#W[ (V+zIk3,@QhUcSȁ@`ǁӨ`"qj[ XĠA# !j"gIt>Ƌ%< {vLZoPsvm_d_\vF֥*Hs$3r88C /$ b%Xf*SE thU{^4-vX =q}+bH鶝fa1Ä ^<0 z&pa@Π%n`?nuA9t]/p'ݨ KTs2$Lmf K~MUGRWGFč޾IsKp9=0L7?qB*Xg 0e][A6qPD>tH=Q|GP˫\.3J~H\ _*Vk[q7]3WcPMm) ْ95JQB(ʒLk<w}8UB߃&I2qnK:f/a|zdԕG$7_ kKv͠9{=0S4NAZbO8yig<Ƿ2H:uDƼW8/STw\ \=lZ:O&Ju#ąLaIɁod~=N%b(QMC`]t5f,:gH6>õ")u=K=˒#'C H$='ICkHyj4gPq< hmhAǩ;\/YWHMZ?)>PrJQ>Qֽ%N3';EA?V|Ɋ+F'Drton/TAU_>na[yČYNq!7/Drꠙ΀97>1Rّ%u[(.B!8ai {[b%~mގ$[hy FCJFvk2y"T\ueB3&@fΐ\Cذ^'!9z]urx7 Ɔr)P 6 RuiTA)CS]yo )yA@pS8xXيgi1iTYNrasJ lMӍXK4.\BdTw"[|bFJAii:\&bߞl>o.hU3fΝD @+17ʌgRF_&Ⱥc(|ދzQKqʣh}mUupT urҲM|k*_~ajDDuU+g \YwLns Ӑ^EA38[K۽@ԅjډ]H樜׵ R{gT@BlIbwob ]щ.Xt!w"E؀;W'AH%@gg-#";iEvBWϖ2W@ EPw(kDLTPXxKm s]Y&*c60˭KO658M|5$1<:,eJ&n<ƷAk7T tD(r^3ʩHdeV6$P*PKĠzr' :i;#v|"iIXz]a)Cg&[tD]tY3 @7U%CB^JJ=NLgO -@ T2c)u5^Q$g D?NB*BFW =u:nS}($w9Ff?5жI3o6k3\0ҥfz$]1+0bP)61}Gv=[B^@Eav*E[ + iw8w2B;]{#[[=i@٫1`wi"]FԠ:?!_ª1U CԿ_FR2!Eݘ;W*mI-uC6jlT;Mq282*(Z0(:Ƹ+\wrko+[lO1WTIRٯ =n|CH3zj/'<*jJ.ޑfL!:TIq|G*G0FhĄj򧧍2]C's9J:*{O'E3OS(tz-[N=.jfA9( coJd-'@ek Kn,}0n1q-Lu۳ U}C!mz}mT&|3v 9bbunP1cE^5%,G²#Dػ )S#,?ڋ`bSnЧ)9g-OΖĥ?n#UD'0r!`b̙.xa3~ [ㆪt쌀!=OZќ{~(FǻLJl4ތ_n@0sDE=*Fn&-uC ]7_8#rU,Dl`8190\t|1DjQNWT~Ŧ$#Kא򾏇) m8J^cKi ܎+im"Ϣ9ul+e9k׀Zץ&/,wƂNʚX8f}^7J bC17GHzv⛬@b`-3A2fڒLT1 []r?N nA\#hh=(|gDJE*PDK%?&=0 ].yk}awn'-r_q}@^jW&;{E혍g[j!xB}EDO1E\Jۺ?oc FSJ2ћ`-%h(c^e'8rsKO[s&hY,-?<-3e >O<Ы5T]7.XB1{g%>t䂅-@ +:+mJ`P'ȶGRC$K v>ap_fLhfgqZ&c=-a|xqZw#CKvb `E>wPpBɠl)% iF H՞B2mm\pd}{2BE;G ][cP;[9=|V:g YePe9r3wŹ!y6c 9%?<9aq5P11F=4V>%\XT%COB|p{bk9*a`02 SE992:`1o[ sOZ,AVrw'OF;B- &1tږ"qy?Ȕ{|'t.!$bJ=E|}6J,_:pڌ}}LdG8!#aN |Wz @zՑj| 9Z k ?NO=U~p#@P<;&Ȑ&2շq6P=cq椻,K]im,js%B:9Túɲ@ xښ4##\NrKT;Z1W#G &=MSDbFyRzeTxU ;/KgN5~b E1| o't?jyFir!x)eNT<2S[,pZ4P+j\]]#\͞G2{KՙV67m:dУ,|8Ư8'G8kv#Չɿ6U?7̝+}52=9섴1BFzѽ؉op)$-0 :PhӼWVޠ8-.i}M!RHQr]f`c-RTlc+80P"gZ Da}6Z$dO$Ԩ/Ovfn0E,$LYɽz n'M[,` @ aU.7&?_<|gBx@1ǹぞ )jE,0}/#o5FCpߎ:m|ewT#L2qz|NTTb!Eni6~YUuu[?}n-)LTəȆR(;&U݌Y+aXy%P&A4S`aG_~Zmhyθq^_} 7 H,ޕȍp\8rnHA#6Mr; ^)돸\P])]aW7{vEEyw5G,ERG,}"K n.\Mf;G FOq7xg"U viT4p]F(NBpL=@pG-JuQWUdɋٰR*L'H]ִ0jt2G"QAk}'ƒ"|9AULe[][Λtta {Xj;2u%YF) ^aќ"cP"f{d`>8woi"W{1F}#:O=3{𰻯A3 mE#t ˾ P1ɩ8Dmn$PYJAaLJQ~)f-k lOgχgQni yěO`!q[{ rlUvm9q jS|G*QOB% <Qw>Z+BRZ@$]aZKm1;EIT[i̪1oQz^ڇu(&4-g&$J;Z_炉6/VmEPо4r떨4Dz`Ngs)uee鿆ʓfK`?Z&ܕ6^C|\]`{JH0;vgr\}q(Ѫ"$,{jKU̳8 HǦ"Hu7,(KT᱄#MȿGcxbtb]a |-V6E7d1>6|,kRx^`C̿X"0'-䀱w`NއE7}4-ƅ`f)812fR\Z ~8ƭR%wA<,u,W \QUrL2qĉB]Z@A!d6A薎A2IEV FxXBG D' :3F;˧c^WP=`f=F^ 8DL׽Ѕ!SUBSY .ztYE7i/hi|=6MU.?iѩJ 8[6H_1OOhAWkMor_ikJP.r%.Ie=x?:WZs&O2GJ (w煨={UtE.{gb||;77 2 !ӕdUKvi9pɇ֜#GDx !|BW"i▷|PԒRM|qPdI?~c,ZP-hL`Fkvfv}zzC؛!ӳnt~w`Lwؠ f;D>x=FɆ}ɉpVm Fo)7\ZxAfL@Y.>)nY04(cL3!dфcLj5o#Ѩ>he/zĐwW87<& Bå؇nK3X$n.AxmeuKi oD#n*x~Qv Li4o_h3 Akc6DJ7]Crr]Yᔧؓ=H3wu< vXd!E sO=# fXvt8GpE PgZ[)<D 10ݺT YNw0`iDaSbYԇgo 6[j!D /,L=~ tlNQ{}#D{/ ,5Cgt'IPhGn+SX +X@uTk`!Oې]f}h YxspqRJ\g|0,?5+%b4An%Y 1Q_P7r{ fH㎜BӉFMEI ݲD I{*Oݯ|C. kFzR2 $-ghI s1mxU' #&|O. }.yd ̜:oLM*ZpSӮsle8ߢoIuȘhKlFoy}EV/ qMˁQ^8^X [1i&?7iN)3@GPj/sL/=/tr N޾*=+elt-gWW_ ꙿ.Ik9r`VcJKrޓkj4sʇ=VA=e1+e(^O)|4sF'ϱ@'EERg%?LOR~LTnw|*r-ELLz g01V .r2A T'CWbS1fځQҳ}f-]&U<^H2$1-XrsnU.N]rcAьe2[|/n`fJۨ+ow0jS^P6ݥ)(kWZv7HB:z&(j^CkB.έab3{/Gm˞d*g/\ 5\Pv %|hcd;zIO^)Y>x>K ~yO9ka*wŸ1Z]I ,Tڿ AD{l˼{%i/uZXHEDlIY1 j?|’~&JTVHmf50y@hdte^ݘΣf)Fw9նlȮXx<djvIZ̒ Dÿ$la6rM_"=B[]wߢ",5!1&͗sCvux: Yg8Dt1#γA8${Zx_V8ĠZ%y{Ɔ$ -.'[b[+9ym@uӘ "&mam0+ O$58 c?J;{N?ث~(vUy6SZ|oӻ[mk{LZ)6;WVW} w엉6^/ȱ,җUSs*S1y&2{ΨAy÷lݏt͹pq{KaeCZuYʃapM~Ln: po-㜪4g [|ƟmV}S1)qv ]t4 9jݣ=h59yX.DIbΡg̑4?|Fr{ȱW˓kn 4pwq>f~HоP W;%"H/El6 sr:V; ^*W`Q 0E/tAlR>"Hزvv>98}PFf,!@G2}a})xE{V4#F@^¹v_>e gq{?fH23ehU<}isZLUa{-/QHm/ba/˴ٰOu/wx]@S% ( ^@o8 rc;Ofї/BCxq!IAAG‰QVDzjR4gơlzZEr I N %LN l%8'PZߖ6я{-0*>]׆ʐE+X5NMPċfU`R.Hc6[:_jKQ/s![&=<i)>AUC]\8ɆZL'J都>T3kzR l # ^tHoU3q)f^C7Z-8,D'|HYk k{fi$jKR JN``n3q/(՟a;tcA/A'|r =vUP]EPE&EDŽpF-ՉGO;D{(zD+x+w{aYctĦ%z'Q44} OP#:g$s8.}!ӵMz18S_gVaCŦ)`bXv#|+s3 ~NA^նpQwϋ1uk;0Eښ@ xn(S qSsa(*;Gצm,/- a&C0f<60=W*"G /żRXmHb8쓜=w#!ua^- &AZhg u2 WR2K~AГz-u(9GH`i6MK+N'+ZզRJ:Q|Kد<@)p+N;PvLՖdInMМCAyy*GV {a ؕfnsTu!k?ʬ =]PmI}?G3{ ȇq'7'EK27*I%S49\0Wb`W}'tԇ.,36Ut#NK~N2m3rB#QҼp2x4d%EA53Q] JFӂ9C[n0jWo1G$Q't¼A@6I,BݏW%5wrxt,BPI꿩'YPN@Iצ~pL-x簂үzTAo}dN"KŁ=♺E7Dᝯ# U)s<B>`a¸6gˆxOU <AYXcE}!HIOJ~ k nAql"PT뺎;۾*D״ɺVdb#ce}F3Og ,RB->;T~%wA: AM"J8dݯrRC;kO6>,6z G9j)vY?Sȗtê-vC4YϝO٢ZuVlTgC4X+/_0lM 7K iO{ɯ@}{i+Dlȉ6sZɚik}Hf?O#0L Wz_ cM35f{JVX@^8~3"&aү/U"S)ij:ʷ^kJRyRf93ekխPNX)paz&Wӹo.*-Q麳ȕ{sD1)u$qxP͜3qu .u%j~N唷+VAe\/;VZ&@muMYu%y롑{.Y1+/\R-<7β.$ &P\2^lk%q,r"9K'<9pWt٭MjxLiyR \V|z2jk , 4n|uH\`[Xͭz Qis>ڌԥԄ(;in|ohYo`*QrLL fWU9;lEe7( -}XNSnTUH"قeV `lq혯AuiKC%Jh S#Dڶ\k=[L4qMbGҒxyO| "O_g=Y^Qh'4\XK-gFv|06COM!_ ĂR\u7, n-)(1۫i؍װ.Wp΀ʼznU?/0"<qHm;4(Hv_dߕߤbLl'Lۜ)@*Mư\[OnN={P9x%184ȰQGL67\2>#dqE4ѓ HD%4`D.}|Cڞ3.Y:?[@d ;7C;O]ߴBXHs.e[Ux&Ld:^S#vsscJ wzxb:; CDrs]<4@{_ǘhT* Æv.'= ݚgй]FhiDڛ/fWcX38S,`&!gEnVe$EذS\wo{^^/xgc7<eo\\Rg|<ľv9 S !#T,;:)فˎMFFf%o@Ųh -zQO ~Z_xZVR Uj͔ơEݠʃb\nwJ-&Np'2; SM؜[ս:-b?!0Ϭ=uff#P35vޠ8 Ť g^ 'xK}±&QYP.)O꾣l7I8eIuG#Ę 5x8rȯš7/VfVQF0p'X@H랟unQӂW,/Z cݯsZkJ6dnl&s[XJ;x,v70ޓ[+g.f_QA M!}S Jk}t}=,Գũښb(a|7Z[2mC{K!hY]p(Zv^yD3 4i*X\Zj"Q8R}Tҿa ~P,ڴrW$@S*@0T#|Wƶ@aLZ((}_SE#,5&1; (,Hqz}RBFmpaCӠK|u^w8hC; F>?z;n˅|kҦPgv]_/㎗Q^lNӋ ^^OƉ2Fou<" ls[{kȠR3׹ 뉾e&UGE)_i:tȻ7l#KtĤï`ɝ*ziF^DŽ@tg| II,P:ηkV&eAXLU89K> x+@TjIrjBۺ)Xm"CJlP˾dj29kpK֟_")͉tN=gDxcĕa?A*<9Tꍌy; f`πQQ?]g#Q;s\^N36uz{0$RW+'ToﭥOXġz7KcV8ݾ g2=+xÇ}KB@= +&I&޳{!Ci 7`X(kj%i;^)%Z@B2|Zė[%!+UXhl75O5Hg8/%Y=vEir@-<`6; 4boe%~1c]>BޗoaǨ:-0סUgLƚXT щϰ5`vzCT6KiĶ9w:樟Qh`,~21Gl HZu1#VW?\ǽb -Fl4dT~q~O ]_-zW ᠉pŗ& lD|%lOc'VHCUv%ԴSXx #2/i6U+{f{]WkI*\6J[m\}F`bB6vePGœ,Nʰ#ɕ}Yg(M)CBX ijS5j^ͱ0R_-)hn`weZZ2Nⷍցmh yC:~%9^:VR<ڞ2fy8-5HֲI=)PpY8%h]Xe @w0YMHƧkZF΂  {]HA9^wޱjݫ\J ;S2aDgXSu tfc+)v@ZMuj,c5n]oka(흾}p+u[Ƈ(uURDc)nW߬!#OvHHatASvY(Ӹ7#r?'!Io_#$Qug)/u&tHT('͉ so @(Xn%I3;'>5 ԞL .Sܖ&g=`շ/s+H+j*+- Zt{qq6wE { <>"q)272M go53=epETD)a~+sF_*N;Qউ|ӓx3fC7C8yT?N?r!ڏyˠJ։_[q<,D"b{!#,ޔp F-WLfIz0X߹I]yPvHP6Uݔőwx2WsH#&OqXYZmq $=B$OlUpikk))xYH84iU%R;k%_}#'zS-Z2F~VB*]T)Pdq@蟟h@Iuݻђv#Q{d;(KـPmwś9GKg n\A&5>VK*񄹏iuɈ=-x$XqUX[i:p۟]炰W2$k\xмB{à)HS-H5&b/uMݿv*_dV<4Qv6b %}ptU *kݢ6/]R#G_9)W1صJu+}4`ԴDOU YnQ9Ϡ5Mzq~" D>cia6,G LbC`2_M4cX0J#k2nCUS`e0Z؞Р*)m,]{2MmMSKT7 ?\V:n~ƅvzMυ#gAg0U%en}m-Dq3r[syWǨqiWZQ, f-\grgzZO²ɵÎҦ{/aG3?}LcwОŬ5X R7W Y9U@^/q=[Q*d R&b1԰@0*ff<d=5@ ZCS>dR t K GZ\!3'ȇq zM Ɂ0Z٧Մ M\_k/ eV(}Q|橋Kb!h߮K<ÒuH %m3yu.t0;f(Ɨ}LK=|AZU9o& 椆$K+ Eܦ'jPΜ ]0o"i6af~q/zͳdq {EV9\UesQRK e iPon @s]N<U Z+rۑU t :aXYP }2GYO* [nj#e8f8LT:_g +a/f@;''pಌ; Һ0q^:I16V:LRɻߞKOu.ëtS8qh*E[EAuItz76}Q$}-|d#4AT4` {J/NLs_D@ͮs2d˖E%=='ȟ,T7Fm D%8z3lL0efrڋ J6qูFt~uSFUC܏CvrHωLa|Y7>\1buiC/RaumjVnt=>iK C)a#iCu{7TA3 J2y|bL%{TMRnݒwNQoK%$ 6oc)(zx mA=&ܔ781, TE9w}m~Z_WKٚo2D-zGB[a\5Hm=Mŋ9\:xPFbg;ǝΓ:@7{iw3y`N˪|r+AOqHU_(Lh^E'g}9U*8}`cuߧIYM <^^NWr $ k3ȯ|=RRg$TsޔM"&7"RЮPݭHuQMaW@zzQ)(9HnPw #$S6AyԤ{ }p"sw!1LlA _ zs/pіh٢2*M9Ql䟽+ƿ<}YG$DGdB\iOsfjkS %fpN_)\]45`6ؿ dhdoL"X=jE=3 um\ uPgߙ6~*K1 cɣjQ6:t[(c܌"\y dBdz&l{JwtyA%l'm&))Gj Omi(v oJԂuRi}i nfQv3>*5[]h9NJy%ؘy3l6AX˄^W(P!̴b] *좳&OY8߃bp'>n#sL }+n4gBAeb) y)+aO-/3!t%%@"(V*3)$j[A~G?4ٿPQDZB/o ʙ.shv7@|ǸBHJba,-E@lQVa-ԣ4 oD@,Rokg~jt|nBնP7Mnna ISpMT]UJ |{X>҄fK<_P@I~/h=9;Edߜ><@,mSAո""mHuϚ_OGw?GZNQ/k(gOomt(U3}ID&Sl~Ǿ+ةGs_z# {l`U=mu6yyɅo#.T0Cpysn̢ rWGIfPt7P}<+ Q0MAi-I|[yȥ&8knCh^DΪȰfԤIq3򋵥tOirt ˃/"ɧXssϏ++%0J=OLR6㩄*%z$o2߁Ѭ .쩱İaSC:QaS_|1 _] ƝOb(`T=5tBK\/1]qlxĒ U籡\.ݻ+Ќ6\ a5x.'E@JYB$)66>:y@^*A9ؼdnVmG'>ݼBVfq墱]Z7VK:BġYKq.T_zyHOٵyY.?9dQ IfZ1wo7ˈ &be :_Nwx< #m5[ u RzC{XT_8%mǮpկ]hKOLxǭrN'Fu0cH D7ߔuU7EA *G=Z Xηq e'XyOjtldޖ.82I?0iZH V1տ r9P0Z"j(ztϠ8@$;ktz js!gNм1؝o6@.f)Tnߖmv=zLv؜{rWmJ $Zys=K%h_ ɹq-Tƽ5y^:+ W<&,~V4&Va"s&,n!-! Z2]xy$|rq“k{!s<~gq<ݥ''+ʰ[\DL=vvt3N=6pn &' &)ұ%?d(/7CAa6-j(qܶL(hq*i=ų=C t`4.oW+%@ՒWY9Աw,$?mVȡl7od'b|"‰ HڭF7̞@e֍GIp?{rz7^PkbfБNyLִ؅!o/@/m, zgV]{PHk"GALƧ5}O+B17Rɓe4ZS[,u*E|ɤAkE%zt+`ː"祰?aLD2Dx5[@#sլ}{Crh!ТkTXRA'haD=Ax!j5mCB" ND'Q&vӿ|ib|i?##D0ߋ8fn)~gnoAF#ŞSBu0#Jxc=Wץ-] qEv0/ f͙1v*mEq:, AXUB*53~yV:{6vxӌ>gOV0Jj W@lzֲdjxQ4ڗqCK)w.Ҳ^(X|퀎v%LJP|\N 2ג?E{Q.Ea=(G{ł4ƙqgWWșpI/սZO C<6ԲÒhd+P%gTّY _^j0,h>ps ҟ$, H;%q؄<7 (׬7yxe\y-^S WE(+z8Zs#UOIs\]s5eRR/_OpƮa%I[rSRtmx%]ۧW2ſ F0Y&R*N௧5SP}x( 0{8r Av nٖ% %d,4[ϋyAeM1P0^m]ol]Z6]F&::۴cF6 5?$$_IYwH3OӴJ&0qյhe%a|y8QxFRs!% sXr]sDZ~IRvbT4KѐkFnʳեŅ+f9 垄Ñb\FwuҾU' æoCsu2[_y p5?v7%mޤ?]@+[_e"׶h]L8ֹѪGǞZQB.T>lmYeEͩGɓ`cɱ { ʹxDD?ՏXpY) FD2Xag̽_|ER$$W:'kR[ Z Ap鎑AQA 0PD(ao|csgץN2  &M0@mXoFFƏ D*L~=p?@WU-=YjqhTs*; )7+()Ve!x?v7zwc*Bm{t5sD?Q :MUߡ#ldt"eUII,ƍ&!}De}Gڶ}t8S\Gga304Lu8 MOgՒ>d l(1{۲@o3>C1 tײ*S`ڈ`kS{X,Q b'5:OZGj :ӬB6g/zC9磂ho[gE< {ĝѲMT_+=S]d(<ؙގŸPҽk0'iKzuA 3% 8 ,YMQ.6n b[} ~vC< ht\ONĿ&FzI"@'|>: bBm{JfO\EKH@\D64fyכ9ٗ2^GsR 24\uݺx<ľ`ss!WgCd 1jZZ #21KWdjfkF!Q{v]-/h8H)lAmĘ_<]bRoWoՁId2f^ާ?YCrL;CXS/ 1Z$AARxu2 V+7欀ݭĤ.aeKy! d'-߿)h\#Ƴk+5ȇ9}ҳx% '/1Mb dp졝rg[Ț% AOL# )ل).\.z,[M}Rngg;ZƁ_bZ"9~0w$1Yfj$O*+sbT'3EvJgVÑ:2&ETŽֆ>Ҏ4 FeG'G$w ܀YtFGlu؊m` P=FE<N%*7twf5K ?3aDn'N qjƦ1I{9ߴ߼%a瓃VoX+LH x_Ђnz.SE"6f%_L@Yups,J9L "\L KupeG7k# 9;f[VyFL#cg*-u-AWX9`p!Y@I~:bL񑓬/i? 44\)&iOu؁wc}ё.kQ&D#鹗L%\FN,5Z鯔?@Ж=$qbr?5_$My9nvňd%:k`Dl:SjeracViNc.FsO3qdfG}oȖ;k{&n>ǬW)4SGqOݠJ% bH%ذfZۯ uR9S|F~sm8C!^`1 ãB+2on]Qʫ"+hΠ{ x $Oxt`-wSOK-xI+o/&=Oǥ3uIfݴT V0/=A@ܚjqlv45TDuRDe`h!T-?AF %.{E|VKƃ!Nm7:zg1Ywv`Wxu"thLx9ʜ8<_t rW rz-M׀w#.r ~yȤq8"#Kxf)Z j+ۿm$r2#zp;V8zӘ"{Җ;x#!nx«4V|ӭqΞs njK8_+EJδL-q-&F`\ }O١lO6pő7<-DxX6} iVdr yd`Ȍx=y6^h=-ވLAk?WYr:L 6Mjjsc9=J2e,61 F7ûfmI٩bGP*뗍msVLMkmBuarJ$*aF|dUyqjo {N\1SآG,XF>ӣsy\5MU~bHcݑ%{ `YdvMp8Ǿi*Ućze&vZ{O>1Jb)Ѿ}b@} Pf%B6/SP*M!ueՔU^N_f>Ʒn#kᮀS]aIRo7g!r3MҬ2EQRx~e~mWq/EQKf1Pę6~Q )8{Ilous坝Kѧ-)ׄ]v̶+yFK~Mi_eca.GM Jqk]/Tb{5kIo_A`1_N!N(2xD NMLcC <-מ0 &%l onUl:_ ̰Oϥia{+&tk0'*9Ф@W4Uo-Qj(+VjVDw}鿇b@.<,˶ b=Hu>SI[]5X&!4:j;i?^BV̚䟁c**WIoZA a|71P~(L+z,΅0 -H?͗VK R1woz5SK,ܮskjQnuBׇ'vQL92O׀4s酕,0/=XZG}-Ϳ%55yIFTG` y/w go/UYɲab!wS_۶VDX:z T)ћЩTeTt`\HxO|cE|~u\+~Bݠ)Zfu  bhBWP&?OEQq׌6Ќ,k_Kw~4BW#U Ce BzVlb߅uGA;78ߣPMU!u \KMǎ?LOBST*JJ qMs?#t:feE2+˽Y{| \t~(؀jВAͻLX;|l *hɤ}B'u8[G&"\+A 0Z?eFa N9'sYW7y;:/aYVICeh&i8W@y)*@B*/;CAZ3l*V[!7W3AkJGzcË!,o<(ۥN# B/:I}~=Mj t+kh%7&!a :3ҪW{[_3mMF`QߛW%,".) pAx4/:p$cHPM1:|dв;+ f'[o?j)58]fdF<|HT~'#xUw$u2Vk$4B#0Րu=6 #F!jB AsKHHL{O@f?W៙\h,/v͙h5KZlLt]Xu˝ɟ O^OJ1GZ[i.+qc٫>rǓ ;5jm p}| MckQ&XyзƟшڙ͊+T BN&|ԣi H?}8n39A᢬:T/Cmx93|r1G"kc e;yv! tht\Y 1{wjsػ?Y+ĔWd)Ư4򴆓8S#J/i4ݝcD-_!*8LH!ryOׅ{44gr ʃ,s>J%59dӢ("HPBԉ$KM̗@9d03,΍s#c',Gu+*\z3oj{:5vv5ePkj%MB4Vx147@OSn3ygRSH&AAMgA0XX j%] }fAX3Q6M(_M{igQDq0}%UK_$=,%_iů]])?-XOv:)&a;J%c#v!xBfԫ#'Yw)[\n Ca6@MpO;$z/`zQ`#@?KlmH+9E^0;YZ+fS<4C>;F3iwcq."B#>E)hcE&P/%ͽ7#u,}#WN459o;I1V.H] w/[W' O{˟:#PH+ .~h[O@fc6Y#}`RzX&,71{~$RP59 S7cs5)ᖣ{`{xL:a):\ `{XPhaDT͍WQ,]KlB9ѰD# "-X4Hշ]*O@G{G?YAzۆ=֙I;KmDmY7$4*0c7`g FHuQr#)ɟ/g_w, k2 tWe'{]!Z5~핥;&FD0Dfx&7SăIЬ4xʟǎZY\:,TqD̑t' !r fw1##3ӿDrI0rT>%IaoV ut6`ƴvx(79 ^.q} .G06Ls,-RS ?=K ئDx YƬ|Frzd PU.gG6uc2>ES'ZW62B|~;8\̒]%F-TYRt| KhݰJ|b *Ce*Y1~q"\gd6YfX¸1(*%gSxbea^u-K'>` -%t8)Q~8< Ox+9qڷ$  8} \͕/*Bͥ ]ն:Ek. ig\G;Oaݚu+{Ȁc5H!,2j6DbIL̨̟x '" Ն ndU1ˎ)@1}R$?1]UU5xDt1e8&02DJMFY^j7xEmp'-PWk v3%bSԇ a w ͉`~'z7.51.݀j.&!ܠ,*b7;܁5'Q$GJiʨ6=HǒbYj( .}e=-Oe;ʿ҆!VbWh>].k B{>bTn\NDGW| .H9eWA8W:RCK#Sr@@ 1A!;ރYo@]˳*pZb0T:J z64xmjCeʠb*y3 pXZgXq`d4Q3gb&5WL^~0~IP+=yy£X)>.DIO3'}18Ԃgp|~^#۷Ec# OO-Hto4\,캨ZoY) ,+Z^.4RǸTWTGT'LGTo lxt}Lw4H٪}&NƠJ4ԩ 7EPGlguQIg S),ʉ tE67.-mxY_Ls}c :֎NֲPuSԟ-0LS9Cj\.ۿSS=Ajs9ޛdo ,^#\0 Ժ;1jCO]A&^FSg<^Iw6efeW;jggM[i[?eN;j#{ H<ߒ_eм<st1̽ДesQ^u+ GLHUIPb83b:K37C 4OEVvŦxHْQ$P/ 0UfO;U+'_uI_yy@rJȖGlkLw'3$_TR(&(UI2c f@`ۗsifs7`#;Ole/6AimrInc%M2MGTzhPTW$Ƴ&e(;p~Nn8HLu۹z*'<:[10ayeRkt&bN؏ GLWM2bWCX EIØ.~OV+䳊rZb}`fj?¸S|%a3R0R7$K<f©NcaۥE$9#Fsrꓓ=\bh!ha+H23O7λYk{xCKNo^Q ~ѩ%|Dy*5AJPd7Ƨ5xUuF7| (LB,+0d1G Dp&0|VI`D_lXHu?Bi^ /Mdê ))Dw[VMاD8ᷖ tM d`Iҥe9U:I$/_HYL3fG:([!F,C$`|v Johȱ.[Olz!*޷EpAfT&͋r8S}cHdrJg >>~DWR';cHݹt 7.qgq .3՛;dž+݁Tl&;Uyj#T(H`f/oΝg[.OӶ-JOeDM/">op7/\3Vk"`祄¥2%-aXb=’V)# K&<Ԁ?`NlU#*j3bݹEki`nG^-&:/i|K{_cRb)}Tte[@d.ROm!SGVOp(iu ,M9cu3d)HoV<꒚p ;dF\뼲*v()R jE~3uw.#5 #=ye<&$hPQ踅쏬1*O w4c7Rh2? >_@.Q\0%q?Lu0H7]bELR CjA 0^Jm@J>Y:٣Tx1qӖ7}}F8?" Wkճ09=A3үֿT&݁Fn+BBdQn V(^l(GW:մw.;H~-K3uNV@yv+aXZ4&+6;#v8#OQz#X,2Yr79`IrVss`zJfdYI=QPvZ:&!}$j(ToI~O껧t O 'N:#sΖ>hyCê@m PVJB/y(,yHa%z*d!+ wt`/^(]y'y{;9N"&Kz.yI =;" AI lCpE; REl;@%0)tbmJ4T]R,)0M#MYcr8w3*VeQHş[NSJ n<kl[]A↭JhcyOeFzW`.y9⹣w*Au{5O ':7 Xl2ϻ74Wn*,`(ЗZO/44B̤akTC[':(vTo?ߟ72|*5LI+t#!=~PQhmD}>:x 97x&霻|S=#pW#5(F yVs[qCG$,@.ȋ^E*I2:R!?Or Sn[<2"zvjRے[v&a9nx?!/Б; cy\@a]^8 0%"d)Śwgi6qC- n~+7jP²- -#5Κv9D0%IW7 B`OFBPi4NM<P`nL[ʮm+&u 9pF;ܹ,6J2MiZNɕ `'dYG0nRZ]%jxA cR bR_=rdLOP&WRi԰())uf$mϙnEt9I%i}NGl H1OLz#LW@<| [gN ]Az(gP%)X@ Y 2AnϽrB.b^n6RE:w#ӑ}X˝6k([b`KGZ@hFum}oYf{ݳصHx.|Y'6Ưho PLiE] ̵7qҌI=m4?TpCjJ㵆cVVIZRst0~6}gluP-s+g2ٙYRPw8$XQS e}9c-o¤} L!&0q\c|@om lTJxiKb ƓF/vqp@F7r.q;6OF˭oT(eE:>J8M_8}70TdИ8FyQE8tS3-*wMNr#%t;p'/2!L6bA2?TIV/ R4햍YBr ~p"JpV.#U·$6s=w  R" Cɟ$`Ϯ? zMYA7J)7q1~# rZ"d\^af@?~Mvg\߽IqfcEۮL=؇޴޸7SI%Wh̰r Qu>6'Hi2?%ykSHYFAwQ`bp$鞓&;ڻ,PT ix/biӜgm_ 7[;&rSj5DH?3fy/ĖWl{E| gT1j7Z2YuRjyv)"jR\g"rP͡zrNW R&,LFܦF-2`XwT%Qn˓r5>_(UҢ'eJ%5n $$GlSrzJQ n;ȨlIoBfLL>FwiQ> `{b7PB-60AҔʼn`Vl/y;)ÅSj r'& x;D}e  uA pdNL T䇖!_gWt&XܿG0$NDFnxų9Ic}K@糓J&$P_SKIG>>0>(+h'y#@d',x_0:&:( t#9v*uqo[} \5! 8cW /2n\m8cc˳O#RΚR_]VT ;'#!,K0dq6]%Y4M 6l Rg4uŏb՛s 甲rV=SYs` FE 0hMݠVLʪ}qLov̤Ff=S՛bF7pQɖ 5:8ƈ,~/xRw1W ]Z_RLj~ AXոg ߕu.KW3̩LFUګ$f1!EV.Owl@|j[2zJVLFI7q2WM5#)(jw̌V@MwCzI:b lݛpwn*ʙ9JF @*E1tn*u>Mܴ_:yC܋[2mנilw~K')UISGBKYɛ,:@ qF,+PBX,$-UJ56S >`CynGpnҦtӍ>j ^gYMZJ RqPJݐDGaPA OȠEŢQ YD36.a'fwXTgyOV M 4 ЊRda4 XoL2޻ BUQX>C "âԆ\+eմK-3(Y޿OjI}:$7p|fOѹر(B?wsc]n X"Z #p+P%ٟ@ Wj|y#LPDBr%?~B O= ԏDJ?a?ChCz ӡ W*[N2-m(,h?s*NJapF͟0R `-g{#c\~vc ƊO(#.!81ROY@"Ո[R~8.;-o3 ! FL Uv@ & f"y0t]lC;QPfm6:7(3bYh"k^oo;:m1ݟГ+wX}/T{!5{p L&ʠQuLiDbԅ|tMHAT0iyM}Gl|Hh.5Gf3Y).޷ 94ox@7A7|{/2)>7 ~V/HӃ]! r>ă0tL$hU"w8`| 5R|1I2LJ3arJHo[za)6υ4aGs# >lNʦja5km~b'ٳޛmbN„mUdtg!F9v|0DkBɈƽ31ӢJ Ye2/])r+!bcxo)8dD4>ƝP)A<(eۡ)rR ѫW5#HzI|)VҼDv('}J B].EE+׊b<9=?@b{kgH?O@IRis k mils7%,R٢WieI;[aFo:$Z_h)h\G#2d2BnpMj/9:j}f]6Z@I) oJP7 7:xE-L3)%Ұs]A`#ڡl8ٛZyR^煩\6MkaJv|D6="y;(q2FSQU1K&= kq/K8EbSm"\xK+H0z9 o'1-m(k<$ y0l*.SstjȽQ@R&Y;4G!VFU;N. ܕ%.pεn I8Ya|ix!ut̟!OީQ;ƲL8r~lɾ4Q{P^jQ4%М?Y:UU/p)QDB 4yvbt~~pelvViI>/eV.a>v t㪈Z%*H:bz6s9 {vi;yŜJdST?VWHF~YJQX{9~Up ٪sKʳ\`KeYH[Ee"Twb\ņ0M7S>x(K傶QCW))ߞY(#e6Jˊq`,Rͬw2oUPNL5m$Z8ɨj]pVGv }=`oIW1 )A%. Cy[3EIRӻ_'m[Hۜ󙎑q@c>kǎiE=if1h)3M]fL\]v@u(zzm٢Qa60ȋ PveK2Z/d|/êH)B.F١ L@J_3Sx:AG۲w ԇ 3G;mۧ^KI0NH\.uo>4X,D0)3 5Yf XRģG 6DC^ *3#nʄR\c:U2V栗1̺/M.3\\.d kZ\L^9O.O WvL*2anh'pR xZ^/@̮ѻR6&ŵa>Dd]J|sp^r`U ,&c p8c=o׻T08Σ|fבJ<?ihKW'}I/"0VA袨,51q'5 A.K5]V!oT7!2r]O뙣B7 C$DtQG γiFوp@dzӨQs?*wqa=6*Gr_RtRF\IxUk{^>[0yS CEQ_oCxL.P.BD?=\: @>:>\B{j%haHFXԋ]VG[&&Z(ZVO` )4vLgbj=0vQP+,#f"n͠vVMQwDil/c hʮSV$,/x6uLc)?Z:D~3j v\]2ח']uѩnXWk$NۂU0f )jh"0mO@ G<̒צǍ;+fd"QfkFUs")`57:jI .[Ҽ'_t5}0^g1j4]k5w,CݴԹMT*U[˓hpYyIvH|ݚ!g+hybfSG+"mawNSP'a}T KdU7mkWR1fV߻J}l.xGT;`-Q$ I5Wsд WЙSP `~ɰP2'Җ?XE;#RZ/E2 w؉~N+?=}X{hy6[$iNT#i`,5d/I0Gj ̲D J3,.\j=MR>$ϪWv򪴞k۩|%#iPUrRo'ڰN&B?\תGDE`jy@V4R<{Z/(?KJ0%§Usʹm0"6iqh96-ѷ-lD}eBkֺs8n0R%_ӻ]`|C%ȳkno}jZ!(d0|H3>ƃ1Lu{i9unWE{VM3 L-sJxqձ<[l[j'kѾUt6{A~I ]*OEB `I,f> C0l:5 #NGeYκB-o_.&agBG߭t^2GcqQe0o"k>49c_l]w(b:l1-d-n>BP 1<Dimn G銺ެHRèYYIdE #-i` *_6Uf蘶k̨>|-]!-a3~gʫ)٤nR @ ꓣ;4o]\¯DhRBS,0k{xfbKd D6;c]<N^\%o`Bݿl 8VFN:I.i"p>:1DٵT z f=ѵO@@$L 4`@[QV$J6V_@䱄4%$@Vvb%tP`|Ny33Xޕ9H8bP=?gY~Лna%I6l&/*ѽA.׭r =wQNz .uPr|gNE*ȐTv! ձrc? z1)x ;r>ρK#k15ݺzCNzQ64ӁWljE`XE 27 oZJ /jkWX)M>~hq+r }E&0|emcϏn*bxt=(mu(A -vJ}ryM&ԗ>}E}7 z8-= TsMFHnhQ?ܔH޽Y bd8lI0%ZɆM/We<,ۘQ_]Mmѱˈ6\C-;V}:Gɹ)«>$4g߻mҚt|5УWܶQ6Ĩ,ܧH}ߜW j큍ZǂgQgij(iO祲NU}b{p/L}L*hv ِiZ3o+ME i1ܠZ;KI7Q1#֒%k 4V0Q'Mip7ց lNTu7\t d%jlȈ(wqTcc t4=ZCoɗtඍk~*bY9lsJC d3= Y7Q_yRhݱt]U=-̻.$R'9^SG΄;;E[S,o?_ֺ{1ѱ ޚ/ϵ[j]{w/n@Ar)=bӗ쪤0eZ}N AEݭÀ1:A06!dG@-$WKeEm#ӁUc Z5J|Ҥ>&UPbõ]̢ Qnɳ~q ϼ yvjo  d~8+RIxcmP}_uQQltڳQarNNw3Qgqk, {ȁŘqag7Vyq0"pI80ߛJ~r( GY&ۈ `heXzE?&1ZQEզubdAg'cbhB»)lg" m$Ge'ͣKN6nX/y>#@eANF, LRq٩E{I<.>9L7&ݜ23&ӢCDXqnkaOWX`٘>r"ׄ-_NpDtOuOרRҧxRGQO ]6hJPPYz 5sA"].8E)x>#z21&%7]uPQ,#U| #`I5hC4|Y9S@]n# u0Q\AQ'{p e3byګ^XN')β1k*?"`h=VfUG:5:.Q> Ls <%yĦuYO r}|~c\i2.+KsD] D9~:H?{/v(t3TS|>O~Eo#rD֌gWM }]wŏpG6p?H@^mP˘2Eu]wQUWuKqԜ?O%_rf^DC(p>E1kJLVb\ٌlRBc/p/k>:NYamDRT>V/J8sUA &s65\v'P xkf uGVႨh(񍵡LF\U\"quY V.e%N÷֍hFnY{Z0$5cD|辤h-J;"ojΘwkP"P*%H"ldl\1РoUpr)[($U:+u8hFsb MgkP_YCc.oKdV,,nCki8K sp>NGr I ">6`R@N okTaX՞aE(6p~(dF9:ɋN^.TQ^Y% vbڮ@GЍmY(optD}JTDl饎.j <ƽh~Bq#%90^9+v ,5MȐO (8XD[g0$!׺Ѷ hu/wkňl+T%JT zB[I2uLsfFܑߦ PHWyVXRpZ-@5πݸE Ȃ6 Ա%8M<6'i6Isnh<ٶ "% ㍾;G!c ($ zyLpʛip?ףJ+ X?g~^f\w.Sn "ff6jSyi_d{p'|?a0Πg*) mr5貆{5EI$apx7p`BRYIYt%$La/jkɁ=m%ﻣXNA6 }#5$z:q|p4$WV"PpɭGOc $sޤu]GĎɯv'M=a\8t5q I%RMk?` D2t0uzcTS74So m0ٻLTGwhS _kx,rsNt+ X]"'oE5˼ؤ#bIbN_Oұt)yt=+Iiځ&TpbE;j cWY3ND]!;/d0uC' 9R6gJ.6";ˠ$w9VEQJ RRi.Ꞡv3@ aYg'+4|s?'؛{GFL@;\t+QiHDA'd̏Kn$[ >#DX>=䛳מ!=>% *n2MݍjkCV"uL wWj)6qsBh.$ D񥠭Fۗ%+{.AjR<vG ?j+ Pq<{8~[tǕPŹl:d<r811;Uzf}6Mn31ha+/n0NWݫΐbb24Lz3AkydwPpd@j;SP&ߴ"{@6' 9 Pn`%"1p[f+DLp<`n!b8 UN뚸L4-k[pkFV Qh䁸Nv6A>O];cM=`Y{|w6Jadel[ʏzO#[=0)DDo}6e0+N萼 s) ;vv,9393-b-lBRd/r SKv߁-puQ}@˒B4Z}˒ck5ͽZӄ8IQ)6Țs,z&ѐG42~sMs%v/AH7yt#P fNsܣ,%H`zcH?xfxRS6Q2d.(l^7l_G 4ߓJ{VM`0n+òrkAR[)^+sAi+,αI+!bF)ڧ3vG2my3lL=_3DOp!  Hͬ}IY#f7ElOze9[}p5oQ|-Eθ1w`B4$'ԥ!o>i ^v^}Uzeߴ>= t=4vP%hr1&*iiRtH6`BzwWeP! [vMc=QĨM%Φn?͸1dg4L 9%CFY#9|tZӳѭ6̀YwL-K88¥ ÔnV͕d:y?wY o$9gGL+lj*Ŭ2Ȳ;-X< _ b" ёY%3-Vs}>9ErSNSd9ÎSfּE_0^9uHs~a~OY`2.5N^*W@@W6cQ[OTx. RP{5?*r3MA;R|{Lo@F(Z-| !lPƔ:fB/ |Ƹ3gp2dn9JmLpw8ԔFNrD+Ag^y& x!%L o INSPUj%,-l[GI,q3M1JR3֠ wo \U pV% RD,\zwA4슯5Bhnr#VaV8xI/hc>M>2ǧ%1mFesZ'Bt]+-KI>HF`Z SQʄC{:׵->PJZg}4]?]g?EA{ql/UkD+O-æ>xjH֖wǎ s˲2IpYqVo˩ H7/9U"CYf~I;_#6kw7)+<61MŹn[I0Bef8fFW#[KIe/ Xz+J-:6/K(gЃsbڇ?fgI-9l̅\ !sVAhVXӽA݊j*AݔtiS1A>ÅDFD.^J>; [+յ{Ͱ|_2DV$ɱ|/0~M.L+N|z? I|Kfki:Qbz$|qTFߤv<ݦ@MPgi:N؊Pn))i_sk6kl~|θ+RO33u{ /pcBŏgfZaQzWy?vu9?<+yӞ>&^͖Q|ʝֲ&8N咗ȫ=p"lzR!%_[ w9WZ=>rEy-#b .`YUހeXyCg^*5yl-)ćLI&i+;ۈ-,#-~ uhV᪾m6@*P4@)мx@hJO#9h]yVFFLFCJN']h5.IP8jZCPz+}t7-.9pK2F4Onw@juKz@FdL<WD޸S~#{O 74 ."L{bbC !h> ҃_i-q6/nӃVG;VO60`@㦞g1$C9Sӆ}p[-Jԧoz[/]SrБ0ѫUx1|ܡ8N7*H|VͥCs'"o\Rw@tr2xLm}.ZnmAhɄcmJdvJVUF"0"!n,G9v^!itX/7`lط:>͵*I8Iwpہ1D9^g|LaoH;y=mJΦf,>dM.?;N雳NտAYcq!vrxa>4-iYA4 l ^ C=g3V>eDtxS:ͨ`}-W$-*[U;~qb4ӻ]1c;6e޴WmnD @vUlFgnX4lӐ‡N8 >*6D yuUʛ_owW k WJ cyF+@o*[ &M*䎆Bp} ެϾ~^z+c\]_z/[t‹v%vRB5`b4POm@bb`f/ oXb cPJ FHps)i:#^q=հfRs̕y&՗0'/yEqYwvbi&w*|d𕕨QqmiLc8KXJL(rH:2 `QL㡗"sز伖t[}vm_A'~UՁvb12QYHU BF=O#Zб\Z:ߛJ6퇎ܚhF$|Nkغ1ِ@ s1-cŲx"qgྂ>=0`)/E{B@t+fV$m3=qq&۠]+!vi}[9(ՊMݦbq9}n9!f '=?8~&G>#DsaL)2.[_8"f[?V&*FrgsUSV#0²7:Ti}{ѩ仲}YcpQ+Z&T 4?ϑ ۬LK&vol4p>^[%7'Q$ <XhwQN5{>lELsO7 ^HoqLmi ٟ a$6nc%}!VFA*=z&9q KA5Bu\~VӨ}vuqؕr|f{f>ָ^jByN{n;L+~6Er_$`q0ٝ{:yd" z%$7 [ ׮+ H@ǀ(EY &|X-J̫ }f~xum0x6{;똼%69ZҝO9?!ބ z̀Y[rXvf + t\qeN 4_;缕-\ ,J WdCUICԗQ6+"cFz4PN"ѭRI)! kK ~ȋ/W?"}%z׷ H gfsmF o'!ai,Z>i)LmQQNPujgE (wHhsa;Quh6Y8~ ൤Y=ܒTha zsKgss嘝5G̮9ŎL tBp"GmDDZoutcC".7ރ':)2z8ؘ8W/<Кū8j];fvJRZ\_ةcA JK^DLYfU:z.joh_QxJncrwUvK?E=(AasD'd6^j)ٷ{O E:/ R^iHߺ[d.߄-OB}Py;J-OJbܭFH,I&Mu ewrlnʤ\ⶳ6Po4$  prp…k@ ExuÖ0d H8.&L;ƱrJ:]FqɞjJ~BJZ IޙY7vԐ3+;Kgj\Qx`cOW2p(>R_.y5BѦm6x`=1,X\8Kѝ6$,3 CeGcܲh@%1* P9f pS0+@erP VW{%t 4!`X^^吷Q|ˢ_?UN QFg5YO*hם5TUwq! PuQ;B N'c_KGƲwC?6uC۵A|7354\w ~ 0ǔݛ04QwGyʓ4t!XD.ѡ"Fds@4퐮\!ys0R7?7b!8h(xSmxDmJ!%Miҕ $R4M="$wJw^੪?Kt_ %${I=ެ'<Y'MR> ԕ$pI ӜfEԅ3+εkR`WVz;qQ']?kB s.`ϸ\X|S{yNa9mNxQ26HcH' nĩN̜![^v2nCAf^c -$`/1LnKL\S_.&) y̭:Qn!M ◥/\:.(ȭ\g-33j#J &i:)~GnψI7#HɧvP1g5jYR@J}LL1?LT:!m0%<>nyus8h|Aå Pz ^=ԹVn"#]nYtuE\\i},+BTFmT;Yu]1wsgtuDGw3p"ߪ=Oii@Gk0Kw('Fק}!&ֶ1 (HgFqŚNRƈ|NE-ȵ<܍`8\•UA&6T؄FfdyyOrxWA&Ws4򧀁4׊A͆~|h,SYi8' ۀw3ҸI"LQ`S/k8d<Ň;{h$"ʆ5Wroa@.g}<w r@ }DhJQH)K-4diwu=Ks—uƂtDHy>~%w {wmfo46&vL?'M>$ \/ʔ_5>շ"u60aiڨLTCyJޭNTFsN_~4_`ɶUR7b,7S2ߤ{TlE1 /v}8 fԥ=)4z*n(#n9ʤApp(E!65P:Ox1Q9S:gደ]aزk( {/ NΟii?m02%oPPN!h|D+jw{f kByK 0 PT ԏt5ߵlX6';_qƛ[+%$!EB?=Lxqqw> O܈RI-p#,NXcgfygc#IExIt8lP9]'Д0\{rW~avQ#C'W_]N3PMQCֻ s0g jЅ@9`Ӡ%&LsTr$;7 $]޼;n+)TnRF<}^AtcǧMp3!i5}C.Z', ٍVb 1Ҵ X3*kC⹎EvϏaQ)ѳ\87N8YS}iS :rdb"TN:c9rE| Ti +ou@x S /M%wjkK\U`6SP{E&6KADD7mc$Zw,Өf'qbqd+θ]lծоS%-fd<}qp}ǀ/_T =hӋu8ჺOI{B\}"D'1,P}BpmZJѷO`=c̨R 8 i1sؠtvj} HgqVi( bݸN%EX,v6RN13*&C杓Cc+yH6\fi <K'V(9fz΢3ttySZ5Uhyy#N2y0[JR qBɭX  @A8 ܗG˚EŴǫh`}jڿkP?$w`Bf"jĿ>hQ3VV:(XrN֕(·~BȄqiiF oe߉'·"{QB-bTC{j׳jK5.Ol&o2s"Q+ 8[/GR{zڪ{]mstsNwMEE&(Ex >:7|ߨ4 BO*y)̮l/ԆAzQ#K`q]t#T[ςQ*/ǥ9xJj|lՓn }o}rB<+M"XߓeX V5[#zʒQqp ߥ}РOWl<$e_(=YnE^Vqew_nx*ZmK%,ꟈоnĸpGi?¾JAlºeDC^Fǟ.T]0ڼuKK(f"\m'Rh3 A/10fa6b}hx_ 9O^ $+hcՀ@e8O \@X} B3w Wh{:C"=eCyxYxV3KeSe~$N$YQek4/4rIg~ FAcy% 6IjgᆄA୬dy ]Cln?W;i䝸qY-9mGβ'E$U_v= YXK&S= OL(_/OeqvSpe"Q8زBQQȋKKyh_J !ſ19%=v Ȭzay 6nˑ0#Lű'RG｢nl"M0>'*:Թ|F\Tmh9b5ĩ9ÙZJQ!C$|+y? 55Y&KffżMҒҒ' 1c

[2Wơ* pN pNnBV#'?MhKSB;Xk4._ϡ]"*`.zEBn8 ᎾrTW7QXq]UkV"ߟqRYd^= >=Q 3@Az7}.جPʱOvNǢ]r邋.V2ۺ8V\K3ΙP&EI|'^V3 ΀#2N=Bn*WxgWײup {_hAe"!rv.K*(Fg%nԡeQ^@ b.Fa#iOYR&zvޅakeO/c+~*x*/: è?^7>6uوc@XRlW3cOBwZe*o追8*NkqF|o(ҵ8k*X&ۛ!ܼo0Qq{]=`+ֽQG_٠)da_h7Mp6=fb 8CcQ% j}eE, #DQqU#'}uk h@^pь P=Pi6{'PqbHAsJ+[53el%=Уw`~^ 9kJH_Jؚҵ)CZDgV(AsREw}A,sVW=^/cNR( brhp'#x]e8ۅsunp hRtI%_0n+wo 7PQ-fAWOSFrggS1)3Yv60MpIc)oY`i8[LJLY+0QUէUlnԔn٥OKM%®#+̎s 9- 3Y]r[aMRz.|]ӳˉʲɰo}wU+ t3 U_So#6 [FVU_= Xp^IfA7 KERѥixKs6G W-R2| ã7iS ãU\7>_yW:%te*ȊTNev?z'l$t<_yVbe}PT2(R!ˢ[ WlcT_ Р>]<73im5ikYuf[ZVsZj(q(9ɱH.DbF]-YE &+ a LX5BZA{'nߙ4DM D3^LKvC E2HԨ\@;;vv.SLw!YiKϭD 8Jcؤ;,_Mzls/lc$Ⅽ.$! v+豼-0C^hu s>H9}:D=T@<²Rt%12Y~B)/ٷa5Bc2*7Pt pgLxdmXr b+v7C8=9Q3Xljwʾzrݢċ) N|#qt)Vp[{χѺ6fCLQ&'7% C]=t7U"|8edg 5LPz{"᧘`64e'KH`&sڌ%CLS@Kh[ϾR+OS ~ 3k\O5g& 3_wtٶa]e~dܑG([ Eh|Q2'lz%Sk~ $i?]չ`0#AsLA5 ow ˴o޷ yr#" p6Dg(Y, Ov˭Q ܅bBqeP1<&dGU#pJ֍XWa 0Y7x2NNސ eɢZ x\ŒBkjeRU׾r=.sĄHRZM\c̜3l+A[(WůSM0{ C'^h)f[㲼I|x6IHϡ|oqWgp- Amqp1mx\s$`7ŅBA3~%{,m7%u> ouxv>:;9fa{:Z#ʕ J._N:OhOV;`g!IǠ%GF"=L5`@tb"JJAy_-pc̜{[kAl/vHE<É|֍0oKPf;<>` Gk R>PV1-3U1`?q ,)+]Lڬ J.P "Ά#pƃ?TZ4GuALc4ȹ pZSKg+\0ӯu&5ϡ}4tRcObuF6N~"% U%$uk+ORl*`I:bo. +\YL7RT4RTؿG_M$I0s5Tq4LJgf;ښE=*ɦёJ`uz?stCƆ9]-ZxZ}SFzd,<']}/&kL~1A[3!%ߠ`%H=ʪJ(-]D&-8X28e)d$ $ PMBWf5S\< }n"g'UbO=}F?uO!i!\t\*bOJDϸfFUʸ+MS_h 6xSQjM=/t6s2 (o;z,^@e_u-YGqbTOF(,=+":#G ,j ġ+lmSHTO)@kڍJ5l)=ä]z1HP9?УFH"aQQI9<6dƼ 6gi'ה!ٷriM%v1[(XmAMe#P o )0Eif3RJVu4id (.|Cɟ['d~s,!+V>~ž^w׼5iw(Au>O~hvg=NȖ[wAG%P!i~|  5/MG`||E fAui͇0}f(P&I5fӸ2_eX|5GXl(mZI]6ŧlh =xs(6gޣ{ZCٹWy9<լDJ?SDWAHxH+cV+Z7G"xmtzk:( #JdBi>#` ɚv 6b=d[c8$C' }r'_ON2ߊ~c H/=˧$ud[by R](K$69mF #H1b~R,/%ٕT,+5Ωdy{ )Z/y_o=P[Ǎ'ś{>Ed bՎOܺWRG,m6Kr0Lhcb&#BwDBžvo}ΚLX11wLO<+ /ѤZsN;ph+<__! 񫭴PpMbנJ4GA5h);6?o&~rFHIMbpFL(>rJ~L!~ {KϿ1,M ֩6ۑ-] o)eb mtOΌ,SPmaPppC+/ntST!RT%H?1AIs>c\PG&P]3YC)ӁOaPsǣ 0' zT3*~j`c9)sbZy`s7ra'Y\[n +ZLd@,o8\5SfZ0 6r󥯥@I.WǭWea.7^kA-0YDNsj s@]z&oak/fCW7%n5~QA=gWɧk1f b_߷|vbvHē{:TՎb^V-|nTN3X 3  4r8- 0YG'&*҅UB9gN|z+e|DgkYeL܇۴R1/z4RBˡn.)v=Az-  "4榑7O_fJ6j v#:WPC#$Z%`n*$18)F@2a˹>$Y_,?sLj"1[ 6sp >dkkZ_3Mf&"#`(r qu0*e&U3@eDeUd?Z;HwSݘݼE߂zZs;;[dXX0hge,Gn]{+jws߸TX-ǽ)e7svpv'Waד$cqW?vPHmwN<\₭J6sO"H?xpg)P=$lrR H!~n{A4"M<)Ѷm'/M9g-=̨>:#LZ E2c: *񖓾J@6Ç h`p Tլ#tԼ^dDkl>RYw۳93)b}?MٶRepa:4Iu~eGH{d™FHHyu~I ?"JJ472T_6-VuS˩/dR712՟DGbLϥK*`QR0G%ZB9Fx;Iz61$. Z3=sBm5h)dkXzzTi!]8=Q)LKM:U5b fbh=kkp*|<)RSI PM ([,uY-ҁ׍! =h3VQDCJbJbF%7j%M1s\>?Or nr/'px\fj-s3 _cVj0D5'sUw>qzu5J흉0 p$cd{uTefǾ1XoF}0c;~\q9?:h+U0(@8iYm._c&gE̼xA"rn25U !kƈΨUGVܮ8@Rn/F,XNQa"{ݚ6ȖPj图EG:1_>*[s/޸gH@߷Fc`Bё>dzoԖK<-! zt@;rig=vr nQP/!jPDyr%FV^SR9\MG-ѥ.Z-:tPwG(2g"b8ʰi.j0#}N6/Wa0@eS7Ii]W1{OemCG60VO) KK<RKNG~VK# C*-~[B i_Ӽ5vgkp_brx/o| 2rп)"xY̴F;LU2+b={i]C%x3"JN7'lUNf%om{6|w j#L< #k.䛹5Pq\Ϻe̥ o{Mp#A `i IYFv LU`~$)awWhS!75k6RwC~."MnmqD+peQzk efk.'Be8#gPŲ-@-=TmN@}U ?aԲuD9#|z՞K|A*U.N ܋|ϻ3ީP:"h('M :AjSm= ~FMY~O942x3󄦛?,; T7V7wfzcbV*Ry zmR!-wvv(hi%R,nuyK'8WЯ|ou[2S KJI#qvbgICE؁Z,-Ot+m G^j>w&:p=I Ӥ07evIII;p˷s6(j CqrRV7! ^|m=7. 9p2:L;x^T - &\2A#u,;+$ՑM!UA@gW mW>i~;2i!*9}}aӠY,Bo\ډ{qO:?@`Y{\ j>>#ȷdCC{`f7`҈ev]L)T/>կ_+ DutE-+>FUFHjKS eg!BrP$XX A%Hx~S0^-lҽx^|ab9y(vev$4Ge8voDZQ˽90yHUa7M}wD˵ڥ "͑xf9 n7>69w V]%= H9p&RS%$މk#5^r-6 =|1Ȃ;Q"5kVd-|9tR{НtXG "/V#Nv0O>m&Қ&\ͺY2Gmw6S"AqI 9V-4fS %)àDU CɯvԃuZsZ'6L Lz~zMTndQ@:408K,z"z_cmMٱXj1"i/-`1Sjݐ]_tBZ>3%7Fb=n_QJ@iPt"ͪ3ਠ z"4Y%!YHE65mߙ?=>pm:mf\{6 2"&Uo3ݻI^}xCPi&_rsͨOKc7=2w9Jy[翓^KxIp".J4\}`j6>1YE(;5EQs2Vox6/Ea{(MrI~2E]RJSR~ ܊fjB CJ9!!7X)Faw~j)O ZTlG:JcKR?k*3Z:w1'hS\S^B谁2g2¬>ntb;#E DLLsexyR1ٿ\s "=UxKV54);y2en`X–ˢUEI%'E=P:Vy2QaB8>/ b"|zU-][قv-WvL/T{RTikN'rk67I5>} Nj7yD۶s2\$iUNSwʘ$uCCAi,F7Pul_FKHH+S*x{[rF`1IJ|f>e-^lt~cj IjERCLäSλE=s=e*ГrB-6t@+I76\͚b c&g苲 `,]U?0U1YHmryܸX~0nzD,@ljQaTjMmQcs^{YvڼbKtdGG& YӢ/_a͖d.ު,O@ksc0q0&t~7xhB=LrM"H-GduG6<k@ R30Nvv.7ש( j]Zn.Y>g{`4zqbRL;Ae'8V81,ͧ%"0gwM"ٗUlM97x[m ł+?u75/י">mrzbKxD恽S.'aX y_4Jozn1ۙku8t1ЫUԂ)oN_dE ρnȰs5j,u@t$pqsdCPv)]߉ ,ڪPFAWTQI6CWX=dwOM_"ty+ GHQe-*s^Ѯ]Kg0 tD>Wd.aռpDT̀]M9%Dchxd?X$YLI3ӱ"qWE,ôLdAbpsxXF 3ڛQU+J,;ZD?ntV1WWv>z-RZnZE9Л=urJ1V9?V5L[DP"!ġOxjBNυvo^JJX` R=qOvՏYnAJ? <W}G$c18vX vyrKvN2/ek^B@+TBqқ.`EWl#ltzaēYڱ|@Ӱ5X; ˄TO2rng+e[Y,[p]oئ5"{y~H([0Xxw*l.Jwt+1wƥe]_cSG$9Zv/9{'}̲@Q3ܶ,~?BTf\{A4tf(k o#oE/]'Hk!&b.ERF0JC@ .u٠:㴡^hjBalDEeylCVN,Ң={Dhn"k˿6?]-ˉ=䜏V7Y~kGfyK6!M?[!ސz CBΘvGz#*6R~/Maoɬ 2; U1gKdga_qD-QwsOY:$Lox8qzxl:h@n֭bݝ|97F #bp G f4t9tVyϽX)^@N0=<7wbL1W턘H/@K[AHvǮQnX2*-!9GъzF^2߄n+xn}^lꔥQf R8kº„" evYgOtEi4ԅܺL˵.ST-ow\mr{Ϥ5Ł\z t!r*ВX?2(6YuA2aO(aI[+7Y+@ujm. ſO3o"њQBּ1Ǯkme\ #7ho]" Y/|+?WN{M|J<yU@[T"Xj Qd ?zO.[$YYbsVUifft\ȝr߯*e=}u]P31Nh:yFiny2HA( ,3fyuşN[wZcX5Ѽ!.{,(Babґ++ژх{Y9J%Q/1Qf墊dMItЩ Zd铉;ɥm`yWz1VC 5Pd%=ذ)1 yjVC%L7-Fn]#oNae#'X,%xH,/'<^N/ T(eL쌫 >bK&O[솕.PT }FGhnh,f}S ^uQ$"k['vXW$ݤWoУ G_-vφIyf;;Phˮ: yaUGRbglSoۊ+ieДbB )ِBBp}a'ZC9h؅>~p#TKg)`> ) `>t˫i\}/|ee8B"#`$zLM Cl [;Fv|6/ܓ&cek25(28~U^ ߢJ z(Eۊٶ Z0D.:8i=b-G[Oe&G GDİ8viwo mQ{Z}%v5-+:TaE,d n";"eY @({J1s[Uu'!*]Ϩaw@\2`nP,ZJ#Av"Fﴖzkk˫0 Č*6Q_[+ C]+ʜbBˑݖr=S!G/eC!S"wz2+g}k;oX.H6z^Y|I[^EM{&=HˆmACg]NСd]Uc5r H-hHY,ʛD\ᳰ@]@NCEefyhʀ=eH;տ2uw\; ԹOL_RY0Ї ?(6NWEE̿rӲ#v6OMadդg(}Ͷ@GKU/Q0:pnUo5V])f_ҡ:jD/LMO+:,Xַ I>u;[f5&3.*' ܃L;Օ7~钙 [>k{Sq>PDY)OXjc;~7@cVh^ďu: fTy ^n-|a= :Y}z5p'pcH451S*o"XR'_EQ4_T W_ DB)+p+$]"TcGG)XsG=HJ~Ӗ7NT9tJ4G[2^iZ٘^1ze6\>i&ac,peRx'+ TОX,sIw=13_U~nw,š;MaVڟ) ,uKal…ff]W#~3S"IkU,Ol{ HMEmAw122 }yv'*KbFs?PAZc`MSu)~ȝ F9D|*IO{L:UsW&[@mx/тYo}\ZQ͘6m1e5WЫ.`Zۂbgz2xyűy#j.vut*%<{qN z4=!XV}X]JVr-i7wyRQ+dsy$/4|jv71 F'r!~ʟ2s ȄexxM(v ǚdX<% 8a>;,I~O-FWߋ<&"QV5/, ?p}SRprօcIw%>lwNh u6@lO`J~|f2.∕ϗ Т*_9_:69ۦƯD=C@{(1( [,W^ṧJv[S#hĈ Qp BtA̩Ww s>bI 6fHA6ttv9+ ^FðXJJ@ Z(z T{ Df瀜F=P[ Q;+8)".}i ,-(Y:PEj= gZRzʢTH#̧z мp*>'\̳`MY>)\2]!zr(XiS|+>*K,-c\a"QvH8SP{~]__$"wx]ե@@"bh޷P-9u͐J7 ~ XGgS3x?vfމ TR/5v}9u_$1NM/s³ PC*6M\=R[[ LwP脪 3lz2hҤiC!ʿ"Nr`s+.[9!!ĕGs}$u\fT_ 7-!!8޶ {+ƴ /V0_ 2?YBeBb°/'Jq'`0qErGAus}C`~AԠ7hq zoO+O<1Xe*2 e!L hw?M%`w_=>ڸA)(ϝ# U 9wT^`Q)D*v/RhA4&uMpoP[ ACl[f6ޡT0O oEȅ)U E?WzYMs8[7A*f6ͭR4~>rQҟ.6(3YR٠]=3)Sd(?U*ˌULJ,(&&DBQ̊DX-F⁉s4Jl" p]ba,CF7D| YN{iCVB>|ۛDrbpkXd$ĮՀnv0)Yh0`9ZJy//@\d>aÍpc;J74kݺKh9^YiNIZlFO7Տ+$gՈ W w q5D( 4KR6*]¬'tY` 4!} Fh{/kR9:͜)*ʹ7+D2Ԕ1x|?U,xLPUUN9䯧sFPWDOg%l!&"P-D&Y 2R-x܈neK XY>kK8 HG`;]nkA}Vy ~5gn3} 1jfy8LDsDcZ*_\$xٷ<-Wdj#,}K33v$6TCtNDF.nĻd Nm x$+'n5'r,Gb0v!iUZ5UӺ8;Z Rz q]ɐN_ϾWn?X.a7<ݞyBQM@0h 콹)ufi$ʚM{Ӱf 14\ `לּ¾S4oCw|j˓ 鷩t+|j“p2v4GG*I+j5ykq}\׃8U~W^ֺ#EL] yrd Ɋ;,+Pegqwt-)ށL2t{ #owA/ų+IGLet#@aaQ.F)IZKbYI2&qA#\:MJ)@@bef5>8q 3[DZxA|E{8GajfAOa R|I&ԙKM0$P+[ G{;Nhِ7찛LQ#wYa.Aa5Pakyc=x8֗炽rpFD:fWke7:LLsjs[A`Dp_Z*ѫ.Y}+Y>Tc4\׎{]g$S\ٌ46)'Z`Y07vnMӁ= u:su'] dMpgW!EɝhPnaN0w Hz~H m} hXX$u;! @ڲ_f_I C&")bAWWc ~k-1<ⱎ\#A<ڿ8C?jqF✲_zGJz2 %:4Y^2#^~W tu;K  LhƼn4{Wrv9J뿲H'q1s[E]j>+(Lgส4WhdL̬E\U"%SG}Eg^UN iud\l[+˶Bz(V4d-g \*] 5 @bɋ7<ȕܔ `'bv~gNHѨKΗ(m2s17vbo K2H`Zl]4ZuyL1 R%9d߰+bY֫BP2g^ 5dVG?<,;Z(F$Sd.﮿uZ8~>([d֯#ɎTaQen[}U TM?>P/lDk] |<[a;5ܧL氇m׸:*>lv}7lTg/Fl_.WX'n9ˤX|1v?)}C [xٵJP'\BhR]`#6tb5p2hyI`j5Mw!C5c Q{V \=ձl= d@F8~'ٔZ`-po薙d1:Wyv?H3.=}Fx* }1 $RDbw̔jaQ60BQL>QQsZMyt5a~GmΒb +k)F=$ UDGs ,wb2d&q<c9eZ>$BdyZ@މ3MC@l B-da.LBzw׽Z c=躿4ޭe6sj} 3(,H."f0Dr_{4m}Vthd]B<}$'W5_Dr%8%$URg.$~$E0kQ p 7fŋkrCbbL yV0*s\*!sPPsbQ*#u;DEβ|TX0JvF|CaSȡb%aؿѱ(%9@p Nc]ّ̥cM?;~f="-ٓG8&Gawoͅ4A=Dޔ= ?ĸcM4Z)f(x*ͼS=|γ@9Xg  uO-neT\Y :.O:fs&ME%u+^ͳ|79ƛF§&)J4U9%0JNy HxݤBWt_ u=R 4?̷5/F/aYA'sUKW, NF_̊qhY{!'ǧdvo-&E6z{DŠak q ZAXRc;V>0H%˚JNФP #M\)pdݵ=&"x g&ӡV%?DRҟo| r. ժ Q n>S>;)TIJ `%W}T9Bfg?gw% "7 8@n}_Gt$\h;(69M$z5iJf>3SFFv]8/¯]2u#Iۚ9$`K\pl%2j.EYPKnЬJH9;biO%3]BάS/L_-,$msK0fT9¾ׂ<6 &Lɩ&jvLj$Eί%S?9Ъ>jn.Ty2W|jSsH ^i5 z+xUD+!WNdޣE[R>AϛC~3_&{raCdt"L7P춻">ZMJmg:|3 -CzaQx|Rt)\+w}2ybab?.z枧D5};\ ׯeka d  ;|4Cv Z2a'IuA!3iT뛅)3>nt9*bͩnD޵>9Pńiw֮rb>9S+n}z:pp*{uM/=GOJK ~ "\&xrdMw{9O2,b$:Lhj~baGu"$MN7Ι1K_8"dk/cN??Iҙ 4J% `#㗾}7vv,RP Pp((-اRGKic# +_mK!'h1/TN>JQl1}ė蘴|Ʈ-#L@-H~ y[Q{qvCb;Ib5u/,l󳿔B_DmsPFp}ޮͨ0-J#GU$xszQ\m 0ғ' T?U$7\C'WH898΢h$5wSK&Zζح36g Wi*|/d7"T}{mt)Nyz7w(aHP*Zӡ"U8BM\)F#ٗ Sq F~S}ϿPk !,)d?mN*vtI1p=*9NiJQi_RsX ׾(u)YTؘaW֭TVU%+Xѽ0c(EŇ_ٚӹgj;M|YYiA=-7%qfUz'hL$x;JZMY - /uo?*qB| f}4{({ V;V}7u-'c, jfݚ/&q6Άᆝ"| @-H;6E)̘fpt&VݷduL#*D;@rdHTZr_V13Pkq ˜81W_N.t^F~@Â$L˚jx%FHIN$+zٓ gRZO ine/E@bl敄0aFQ>.\~*eAumЂ<`\B'gCơsF]Hõ :Pg%5 m5Ps>~(;y.@Nh>0ScA `6$.[ÇH9XKQ~;Qy|2&T? a5#٬/ha$BīQG%?'^Evdظ eJ\)ȧ@bwx[J|R+ne@վ$w!|M¬⍺~nʧ@܉Ib;C#pRglۡ}?-q @\8oy :o$$XZ] )үɷY WK_uQ /_fv؂7C{ $W,8CD#ύYe.RoOv0?Fw@<@Z'$ߴ.'D>Á"s7|E1(eubJDr?ӕ$ TGDivoԶ2`.:,Ksi"9P4bv[5[ie 䮇MNN> n ڎ EāJ.K8욏$(̖T>';Ij]7M$-顢UAJT2#@QF~8)%ؠ5yi3"*ZkR?O,ټ4~Uq3sh692?LG\吱چhb'_߲(T ,_}ҊM*&í7AZv6L}0 {WG| 7+`M0hOɈغ'\Ofu(y>?lBS^p﫥Hҡiޑ$STG^RwU9HY>tobD6Uz0fF[E[G`RUCۈ?8 lOAcr1xcxBh0;_J^"hn(~])^ ?3\:E"D<<I:>Jkp}P]~*˹|Ggг{Qݿ{6&FY$8M5Th)Gǘ Y弩G:bi.}W _'d;t/k4/+UfgbPׂ'}ri7֘v!Ws@h<^. ߐs zA{7mAȨtgM0hv)zs\̆@p,#`0ܣ6vaTԪ'(~* C .o:QA^{U93P8365!=~\ozgWrrReG=Y瑗Z}V^o+R=g4c ~M Y2QE9J+xy.b+ZB̂ ټtRS?/7HֆmP"炍zW[a+NS{W *㰋T}x-6L{xE1 :gE#Յ$\xMk`UQKN (?u6FQ_qXmU[{/EHwcoIQSPUfdQдn{h/NP][l<`#qQ.Mc'5b-;sIͮoWwt;7)8ز*YOM!+:j>k.iFb'`SEBnd9ű6xi'g̥!M]ZRNS/\O}X6VgOAͩt:Q`W5bӥe@vc.锥Qʋj8>M8Y41X ve|°hGCxolD;YlJ<JJ#ܙE~zۑ+pec}ΞVdm'Vs(*cص^LYcۢ _G˨#;F1T！|6a+Hg b\I.^r8h鿡lڌ\\ E7ţm. {_)J&jhM^ʦ!tVPqNdl>Bڡ*TSJpqҠ0>Y6yKj,AOXGS#_ac"S,L t"ʬ<~6q[koJ>bx~k;)^h$E")M ^~VDC6GYZ6LٮHۇszexڍF"Bܬ"!705% n^d3(yPnf:S2nioWIo[AP! nE)YBUԀ ;Z"8J\LppxۆDX HdIUvrq3? C8mȢÇ6h:@Ϣ _GMtPKuØR \ fkd&R0JccvM,3ׁ`Qh,5Vz~02S@tH#'R{9~@{8]\H:#jb"+#k;F蜊hQ0d2 .s_XĜLʠն@<"Ӑ%Y WVь~1 &NN ٗY~=׆ ;/:4 Ka9'Q2PYsHn0E*Žtd^,86lͲLy+9-ve;TN)'ϼD3-yWX5aǝ J|><9QT&(p D\29* %&*6Hv,sڬ 6EasE:uc-dT{Y#Yl? WxlO)5\9sé#zA̒ C$Quk^;8%&jGqRR-IgmZ ^,i)p6זd&Þ?TJnl6ָāC?&'uqL{sc 9M#]!p}.\b&  eD NEڿ By`-o_eEuBna5"}V3HHsT]xZ̪}@@&K6O m,hPz ]Ԋc +Ji:82QQ};& m/ʳnU2'WU٘K %ltU_M~ hɖV$?P;u ,Lڱ!-|z1뜰(ayE|I"X>* iY{w$: E]=ԇƔ ?8DfOnbo>YƽX6KSkl _KܽBfB'R,GZ6٨]}rsCyP]&@.:Z[KW}U账O^W'rdqhzv"eB JxM/s;( w﯐q=GŦ*1A)dHӣ_zэUmb\!Hkj ? ^#&0A|kfF1䃓 {,5Gx`ԿYpşkXbM>P^gg]ڑɠ\MTunMJh+20Ou_Te- |%Q 7.iz9Z.Ux' 3Sdzvіg ֢gWƚ€#;w~WL d0}hUm #R e*DbY J@ΏQb$#" ճ;ybx dII Iڅe+oNTkk "U+_ pӀ>q?I" Uܼ{nNgyGkĈj`eSD~yr'foW4|"ܚ=hiӯD+unZ>$` K q/H\"Nx4ܤL+&_tr6)h|3&l;C|XDws }CDҿN23{ *֗/JK Y|&-XJGeuhPnt6bիGyL'BGX[%tcQoD/ujsgԝp /_#FlrTF&e4cU[+Sⷆ$7 %aR,1$Rv`"^ D~հg$mM9=Vj\V&\" 8A5ҴTyjO oP,TiOG-o}㊰tt:$!NOjNYQx+Cbj쵃OĢELzK z9DX7?T΋^?'8.N?P(?~jW&tʦ2`yX^H=A&RO" [UG Uzg謏T;Y[{Zac8&ߟ'߃qe]3s@zyl\.p-xЈQ.@;P38P;q@svXlaFs cfQ3|o-NgT)T'uP8;)-⠎+,V)Y!]WISMO O I2KP Xo͙Ȣ',%x/RzCCߚ✽L#SĎ -f)hCʎx٦F@LlCd}"gJ4p"mt=P[fK E7GXsHnBłf qg>ɠs(Beb`FG+ :NsKenHq{N[ؾc"͡ Oa`#1Fe1nʋaoOX|ᕄ[ jPA#uX bk l IO}A\N @[5u\<]`19LӪC+eOALO4ϲ0#b\jo#"UáZV:X_8ԣ6ֺqb`x gZ.PjVAPT'85SfzcNP0|WxA@RULjMIrNY;lK9h3 /,H༣gklnjE )ownNCDEVox'L`pF:k1a #m6P5O5 ɔ Y֬ e&]qwBǬ﶐*W Nupy2k ِA@/S5M% 8CM*Q4f3*R^M'e ,_IA?| GL.,V17Ł-(P͎/x$gZSנZX^w/ C?fdp}m%96 م* a~<7'6,c^Pa5?*r~Գ`NU30?rb)ȐhԡTv)udȽ۟Slڭ:A\)ˉ`{P"2 <A|p~#C).~uUs+Eg:z2hg]YqyNE $Fk9ѐQ^AP\_EDA yt`<){ KK9췸)}Э??7A l1; ib$Wȶ|M3.b=@_2f=ȵ ؁dcmL !z_N\(x BN9g \3$¶Ɣ;"Nj5)qBɎ_kN!+b5A6k JÀ m uĔRHvEK%1G1|2dZXA+[Mܱ} JaFQ>}FWR  *U p(0%zzyv[>&_xqzE`MPikw k(r v*ZD' #g`w:șBgyV]58 z[1P: ;6]9%&+h//xM-?&oW{J[el}kiԑOZ`$ZíkMi6^M+18̅J+,b~H*[ZK{jQ׏k:AҞ$5y^H9hTBF}C 7WZӑ"e!MAPMi v쨶bR1ޛail}(Tڒ5H2pbX %1˧ Ĕgg]~&xY0TJj|g928{'#z~g֓hq\8KkvΌi!~>|=K7`\Raj4"\fs_"/'n@sL W&Ndos#E[ T.rʰM0#^̔w;/ H` D/q3xּ]+kjhL%J q"8_ʚ+Gqڠ]p\tA2,zoDYW?b >&p096q@5Olzj+U> y]=lI `;Ha `Id'RҚ4Dt-42-^1fgfw `A}8+m_raïB>0?2J0:-`5'Ri]f+P,. qҐC%1m?V%6\{k p( c@D# EnN_ @9kWyMiS1RGxא;b#5ّ.R+bFxTv  .o&PGrdywxR%y¼VjR'~t47tK#g4p7&x h`GnU^/5ڒޑhꚲIg7Mm8ě$ᦓKAt¾qy8nbͫg4>*E=V({f.3OmA=$Qca{!Ͻ6"6K$".Q«Aխ` P',{ǭ-+5L„,=gZCa:81f&v}EWɚak[sl@ b<~ !oZ4+=yvQeX GtF?֍M=g*U);|Μگ(͋vݒ,{=r,Мu&@6EʴѬ$Seߑ 6rp5h4}]F 6"/dI1]I.:HVтw?jNg8_uߔA&Ə@ؼ65=C#?Y*b|,asҙi}c@:f_ݻiMFj idٳ요P!aJ>Q|ETcB1e]%P!>o.Yb-]ZuU$SkPm{FQ$KO>'OXr  A^hVuqj*־dղ,Eapz/KZ4&MЖ_bMp}a_i.3Gh_;TZɰqRZ{961ơZ,d} ϑ8\ej)0@0Cy`SaYeƣ|~H I=#Z௳DXܢPG/^xX[W1o=wqz`FbfvF,A!xmIV@˃YNU܅sX< e^m0t{-+Do%ݱ;hNwv>Z7:;q&2}ߴbT:A-(x..*XwZ"lv@(#? Q;k34Aٿ.udz;*"t[ H ; Vwͭ;B7haN:^%FȋᔳXWMVy6HH|JD?Ԇ  ϋ' Fwj Wbf-7Qjr#upr -D bxzK׶_{\/wl#%vy~..Y~)QWpU=RMn)I@ !`dA)B][GH j:k2G"2mz݇J޻%Swx588'q3x')3ނ 88'BSnk'%X7mQ=ȟl55=uݠ ,,= 4C<V* -L8q E;ҍIj/Iƺ}=o 9SN~JT-N\ކeuR5J^x6¡j »=>1˭Vm;(|kEoMC}K=VF,V^DX>*XI},Z!3eѱم1_*'޸ a'wsߴ:?ȓ)׻ȧя/H*8fł*hϹ#G= q#Zn bJm::~)NW !%ŬL*` ֶI|y 5QH3D }6s\*r3=4K.u;MPhn%?ͥl"66Cwצt[ڼFZXלJbWl~k^:ݥksz+FV{ÔeLp"3eu OÐ-0:YJWu׸dԭ.3#ȣpXbM{K!U t+eC*izf 6BgJA4Z5b֓ 8?Uj4jhRQa~lP ފxXFypn>ek}[6J$ǍYs2Np`!ɷqLόއ $ݥ՞=/dzHyGW&~:]d;f~VBNuzCyu4'.F7JCc¹Ŕ".>GF)`JW['n8aWDTO**`^= cQ}k|4EyYԨ#8ǍCK.pbT5Dɨ1)Μܚ:Rxw5:m 2qNHٿFLaoG@;ӗ`IŽdC7BXiyE:iEڑ[C2qj~4>h>9tXhPwOgchYSG ߳qɽ?Y@Ԯyc l+\Y 8ۑ0heO?Nud4]J6/[IIܘ~c#yk#>KtF3s=Dk2B?mz Wab\jWP lx+o jJVy6k饧3;@. BH.3 .`/.j;ʖ>&L)/H숀lsr`0Tn~wbT64!WTE_ۨW-z]&nĹSe{Zp7MB(j4ø&׹~}ccCس4aSA)la5XTu"Cc&$v>b_z&Em.5w&꒪:;N4J| +N'~A;?%hdE+ɮ3(;Xd q_eTn_xUtcIbԨXp"IMQR|4[E@6@,i8,9)7@u)yyԆWqs,O2/5\}6l;bv/P"οc$zAK+50ڕ738̈́etS qP+ɢ)P24G~CGBRyK;AXjWJb}hΑ$*&xE¯l?iɢHh[Vd-<Фs@At~n4 1u-.fIݑƉ>P\=\GVD'*交84w>QoCS]h,cd-3fk :/&|{lc}/ ަeVSƒ je0$ƗN ;h= >|n>!PhREhXxGPgWXl.U^#feًP׋dB_ (>}M ٹ|{I ܁pr0ۑ]oz ZOJ균w-XWgyLaړ1@')ᒗEݴ KHh3o;k#~)a$f#4G^/8጗80{. R3i֌j8bnrsYegFp(gzVԄ:.|\6z3[BkHsPgsV9˓WetHkPaȔ eLO0!qy1n+\)Md=Wů m4 ` Jڱ`;ra{DL)"%ewfzS…doA53mt|Emj+/ ̹r"1sAKգbȒ-S,YϲA^WSm0HTI-/W`+_">b30R4纍7g}H5 һ'Os\l;JdK{ Q崒{MF6/|B7Y=H?lڽq,vy2XĆLr]AHp)2ѥGvURSLmn&vP*ȼk<8E=φIȳIvɯMau dQe5GC6KϒSPkBLC_5p#A@ Wamd3#dPf<_ mg01Q@X2x=gg*ƨr98-^8|;q+}VNX[t)ZSyxVg0Nϊ##WUX)]9tFy`}ֶT{8zFOÔ4`l8B7Sn\*  ?ܓY7r:+-S][l7ˇ/9 ## lm*I~`>jR}\ЬߨG pj4jtO _k[J7BZ?_,[EG.|yk HPWd2+ p$8:˿;JR˞ȹZeڿ6{a_]TP$FS7y ʭ`nI[dڄGcQeu~ŷ8<6F&}X:aA_GKmX1'p2R5P^n#:Sl]<<* U !ޓ`c5=' 40nEa.LaH-*r ٌ|-7wŏ~m6w!$>`8 )t;N~'K"ȑz x;_>2$#ɥPᗋ_cmL-fݣW#n2ACdzu!fdZUPj V9ZxCj&P7MQɭkh *`)? *C'k%2 >W,f ygJ?(Ҩ5K+CO,:XM wXe͏RbY0Dsx*#1i}΂ᒬ3/0Ab툉 s4ׁ*aNŇfg8g,ΜEOTZ 3d$E;>݃ʪ%b"$Y݆i]TE|{RjvN! =c] ЗKݲDYu_dprR6e@?r~F?c35܆֩)c'gKfW4x-bJ~ m0!b 4c34dM޴*X̞ Re}3a,8ekWl5Sr}jpkx _a?f!MzMq2i}xE;y+X֖㿬Ê% `F {a4# U'%.dpqd@bȡ-Q(ɯ3\nWpf~Z'֍gتG{ZQ6[EO qusF3Г"튱Qʹpq,mj'Fz$ԫ_.Ql.+%Uj@s& Xq #b)ZtWA6q*Fݟ%+GvYe|w*-1hEr+v+{ ^zѺ#[L+D㴅 } qHȀ1^6=gX525 KxOҋϥ.k3`a2On% sjicϫ:70KmgTrYh0х xsC$al`uS.2[yAO_Xˋ¦'N". FD>dNe,&P$08tu,վ]Lѣ<1f\k,\E9Vιj$|F>[xm&:T jL2N4W Q>?/=|?x`4@3ΰxtވSϘ .ϛ8&ϯNe0:ppi- 1?8hN5#Tބ/V`ae@f^>Zݞ6K<,[G1ږZ!KԫFjb,0k.#jmCSHpx1kHеn.cPPN3E)eLRqX_;Qb񰎗8jFdx !ŵYǹ/}{ (*o_F e%:z'abeMX$-TC\@o7aU35h=2\⟎/NOonACzuo+i{JUvT[aFFUJ^ J+LZ,3`BVpAςG.i<=jO<d _V]wWHrk:#YȱC.{6Ҧ{V )5yNkT* &bP^K!h @lpևZ[rxwf0`wWaQ#pk>@qzvJdi+)m#0S"XM=~FZFJV}r)Bf/׸uIaxS#0["w];ו?#皾mOJRbŜK&ҒIlc,kYj#v}1-*7˽M כu2uuEkw1x9Pz;Ng$ v-Y0)V (eIJSƾ1.Ja1w2rK(D$vWݧ[v<ÞK< 4Si_'Vn)Ǥ_*Fh|&YV#+3|-xw%!PpE-0.w'}ݰ#9Ģg&N^& WrWGٝ"̓e02h])SQ'z>|f.42RBXXG%*$ɿtfO&?LD>90J*:u]r6ˊ(=^K=)Psk]͆;+%bLTD[m3C= WLv~ pGƒ8&(9:1M]v |*0қo5]1 aBia:\6mmOHѰzv/aE뜃r伡FQo1A8%er/#} &SG6T UyE_p YT)M ~̀sB_ @Pk:/NUoA4B*'E}"Beh!#P 0BX4'S?^bȮ}5bCR0Gc#bMlzxT+Yo.MI۸suzCm7Y[!saג6̙wE>OFiJg3VckCe$hO nx̻s i9Riq7~1S]<}ĠYcF=.6,<<5u*Mm!h n5Y&㋐ \ݥvwTkl7!?!z9\Yy mJ]!1[&8Rq!y$[Gt*_vzՊe~j+L+)e_5U<oq} .b $gsvT'Ř.6&ԟtlYbrxnmzO ^A* E{c"`2W1I؏DDy*Ή*w﴾EoUM4k4eտ*Y㹐LYX x{;6A_MY@0Ty8yZ~9ܽm֗ WUaAy e/iY֊ם<>14>$%νp4nM]7dO^*ȟhVgpE|*((-+[P夅Gt͇Xδ1"H?!N(wQ[$SסO[,H0l>xb5No`iZXbWn2euTZ<Kt/a 2 Wڒěb18)jl]Xl+*]]`_ `d<{E9 s2 JK9:px&5_.|@E]323v/@"p˯z r_Q1CFaox^L^ٖwjZM;8`wHa>}tE.vX ,0١f$Pg;{X%> P(h+k\X^y } b5T8`8؜Q*_Hk`)s`!Zǹ /)/FvgƌQ@K&oMʸ/!vҮDzmcSR v#m:efWpN˲X^0VjyC hf!(Ymfh!{\14Pk^Qy^j66TW O.9EI/{I mPK˽UT# ㌘]gz9{z+ 8lP $qHW<=AN]Zmf$[&<ɭ3T!f#XJL+(J֙JӬY}!KTSl $@ i.3̕˞'P5ÍICrPR [Fj.v 8eO{`i*\*(5},f:Əg=B+`dp~D"!13wHW=%4Ǒ#]H Tx)fP(Ƕk'-L#8㩩g(0Q7 ّ-*.ѬNDqJﺖr`tyg<,O'69[ֆKANB`v9+f}K?A_I i*}p`o@H=0@IJ_rL1MNе6fzewAŌ!MˈzJD;fXhCxyQ䇊W)l{''+f _kJ {_"@KwpRZSer<<;W}sf<6;!lWAR9$x.>`G2 6֋LVKJʽր,=ěq3jd~rm{tg8/協νDMALfhb$PIUǂkt?h61m<`7+!)F X% c`[͘ EBt};dR/Saob#2 U+bEL`R[?FqNCs)TSqH> x뤙7pNzmz7_HԶlF %08$> O?+V%HJ )~xb׳c쏜6-}ş5WXrM$PaSQd{ۻh{cqT#G7~ps<7T'eY-.\SWHbI!^T䙦/,Z,=d[7+cOJe-"2m2 rAe˭3va0Z_2lliK'qLq4#v# _+Ls0^|QSrMG Zq6`̂s=kMp=nˇDMՀsB?_"4jŘeߧm=#P6v2&O-^Ȱ@WY8Z 0`Z.^m#F[vC-coZ]:x).9pE9%|HarxL-? .V2BE<{0J!9,Hg Lf}CkFK҅U O %x `-4K!_ Y#= )@X2X8&J;+2?AcMQXLLPБ2{|VL#XX]Hn:3ྒĈAyjӴj8Un,?|E'g:lC#p/<,ţ ,OUDuOterG92vuVKY (,IG<|<"SYL(8'Ds|Mi+$WMcNW m¬v^)دf {tc^>qjŵxg4/0g(Qj: 'Ng`șN։֟*ܣ:ahAD20!+5Q\sr(7m`H{U~(pѨPIkN Ɓ6}. I\H׍'{Bl9@L,:CLeY/ķôaF\zrxOdKQvQrH0\$G໺Qျ(-3)AGbwPiKɟH˓x:6;ߥňROv]h`w]M:C7ݮe^l:`:*(e0C9D XH/xؕpjb1,Si;Rb4,p1hD?4p><_u~0@;T]MVa:I )2;ʥzC.9850kt #W'݇~mֻ#!f!;d0oA!E.IX\C113blY1p,ZރU@RvFJn0X˻kP@Б$qp ̲Ю.z,uA; ni7'*l̕ig-Q6n|Uc~@ ~˰-EO$Z4QEY/)e MW˴NtQiԚ)=:儏{ rP h /H/ o. ;BUkƗY`X_F=ۍu0ҧq?=R " D&Q6X{1x̻IY{[U )`@PMXAiƒL&?$9\g@0x&;Iv@$YqhÚ[+Mf,F?|JM~++gBl 2wp,̥"AOos/> iq + L_<{:_ٵpv0ۘrP:QgBFm _@y{՗P'BbNgaY.8ѐ ¡SG{ޏt9薲ҮRѬ<aߜ,#hu0gQoigFk 9v $heQw#iȓ 8Z CIvuͿUmCE4Nr{/8ŷ7j9RiD5g=#%Z2i5IvĖ|[_$Gɐ]|Em`mqqKŧ:$V1 VI[] C3D"uͷX= (d+R[o,+q=9t+hW >qu>als5=b7:i?8 gx"̬(/u, ]ڮ_Uk\<,V3x<`I{JN ߰Eڤ 0!~.4ъ/h2|aZN'JZ~q^ vj$EJN#KY:<'f+ÔT?~5Zc(0rxq' FJl ?KKivXX(5~aҳV؏ǣ_6q.Xӵ89ށ ؾ_B 13ǃy4**BDZCab glD^8N%0SOU0 Y`lZ&Q7ŵ缭*v pxAGҞzx獵L~5w!;K-%/8zpab ;cw3pEFPíVBoEs;@\ShZc{#=fLμlLb8M+9ϰ"(Yۼ3G6h"(q+SW෠5J^U/jIgҔV.R."?p%,`ly˗pЗ99`U9p\% |]2lT\v" *. tM S7jbfuʖx (E)%{\׼'aTB- j 1X%o]-_<9H |)3?.dof~vŽe oGEpEƓ+_~d57OaYrE,f(K3 ;y`ua#3 \3-tA J*L=i WEya택{bmDhe;B,jf'E5{$v?ٜDR  /6r4z0:9E*c&$:Ik١4PWL5틏B1p KES]s!/E77Pw;3LC~npVM oQr0 ~ǢpZRm};KSRVPwv)CғF,[>}G4o`˙O` N;L_<_=$%C\3Ť=ֆ9c)6 F ͫg"]]S8VzR+aG74Y)uђdPЃoP/?]&#*P*rϚCw\+۲eW\ڬ`f%,PXj8 Ⱦ<71vI,׊$06UYZ[=fesz-|,W.ASJk2lmᚽq_ٴ@/B96 ZJupG+3lI\ԺbbU _ JE˹hBSdq%@^o-kUut] _=U[Ɛ<љ{q  Y+IyիF䣀n}7)Teim?=Y] Dɺ!ĭ-ݗS4/*1d]i_C{︜zp]4D6;?okAayZKc-Ehx#=hu rm1:Mr&j&vA_Wd+Ȣ:L8nFg*rlg0O0f &Eb 3 :vAסFiMclFA0At,<L{dGxe'",@dD,ћ7;֏=ORUՉoMy= lHGZ{H?K]xSٿ#> |72WyxKU  \V\d@F@ҮS$ڢ!gt^m~Q̶Mx:#˧B}:7G'o+9[/v1aN Rqtw,dR RM%%_ C0feT#Upc/hdJ5&mtU(vk-rBm4=JsC7j5Q0I57xOMJ\_(k $:LvhE?c""pC׮"7 鈡bl=P2,?w[ !w+\_"4""NxVOӘU`$2孿k*\ Qp{7Hkc|l_rD5!YܟD^., &L`RT.i5~6< h#\[Y>%p}kJ1Eź t`/rsDubת=y!΁%ṕV7"!ٗ3q/Y0>+WAɹ>ݎJŤ 7\L8b(ȍBu7z^evq`ٹ9v/BnqJ;ݶ$D4Ou h_/[.$jrVUӥ#(ۧr<}GPnqՑFtfSw¢whAn7 icޞ߾q>ww ѿp8"&-yx6nvηAK K_Hx|H a iH6 ̄9[Eta~`uj,Z/ά="/bfp. ;)֬ y^eUX%4=͙b]jDӣwJ˧:8.Y/F|{ AY)6ݹ&!j K>z6-9?!Uӭ"FvE!Ҏޫ>}%d-ʺ6h&6ߙhc804 oѻD3哒dx<^*?1)XIuUcjX#[T!ge`QvW ~8He4Тn i5X)ht?.ˊjJ?shl]*ELo\V[3[RM`mJf{B֮xj^#&2TE֟Q<&"NA?)(0]\LEeC.P;e-=u 'Ad$b0/ ={bt8I2$Ȏ& \k7mcQԤ-#d'A#I6T;D)gX 7E[ 2*yz[1/kڢ,);bmzPg5jk"jDB:'7Nmr'yڊҶ?YVva 2˳k },>AfGAB\#:Jt/gF~jKx ,呞0Ls 3M0}>o;5H"i "lS [ou>8c^/vޯܹ1g}ʙsDdŷ-<۰#E#z 7p&"٥[\y$Oߛ7?ZDFJvc9[`kϡ1tfi?=߉drSgZJOj #R4\}:V%zyR!3̙t 3zғI@_VX.|z0I  ; ر\TB|P$6^/&,Kﴬ-DJ1eY8_i>Zц/eʹ nGnk ZrS|$y N74%llnzZwH^l>)7-'('FY!IX[xҏ*q ps#'D 2V ~, l>:Wַ&Ag}ZsjɅӱBW#A8,?gZeqG A\HDW+74H虝qa 8.ޮY3ˌJOZHb B{Kޢp`>O@SjSc@R4 2ꖠ:QASRoNay57}k/ 7q~H_@uU%0; iAVImTZn[<Nrxo"7`59Dȗ"<Ӝoy yCBln 08Iy1FyϐjК2 Wzlfƒ4eRZ#FvkC wxqgL*xxzށ0AQ18UC{K!rPʛ|>1#ީ8 i*vMRAW s݌!!b7OP b)w*Ο7RM eGG.6$1,SRS|$x`(RfMq ߛ$f^Ĵ#?1ж`Cidm,!rgG_ 9i!/M%%NAbN7; Eͽ$I%G/IϙO}cu;ʳ[AAUR,6,ldH)J$PQMJ5m|L "m9e\NO 'L1*+tظjV^[|x{e Wy)}*fZ$&3S MoFp'HY*%"[ oT(;\2:,v#qIQ^RT8nn}[+@#IzzW~W%s(bIU(tg~௪bo܋%PL%OߎDYj_,{S&{+ׅQ\=į|c:R+@o|Di\ޗӲjh j^2˨.G&=^(… l WG#AHf$ QyUKsE]- ٌ(jwODBAh)xC5cެBK X)ԙw댘rYY (^0x?IyPTZ0I;6)s/8EED--H(z { Gz"5|L@A*mχcגf-j&5d_@j-m`uyb=jcүq4Tt'PG<`%*Ilrhߘsc-"Yz_-F8LCĒ]YLv65Mjw^ɨ[ۙWɖ ~8SNKȚ)o~Is;vcUt|+,.Ԭy sU$н7Бgim|4*@ͤR|_3猊X,1eyѲ,u؅ƹ3o'`po Ǹ5^xK9Ž=/n\SB_Wx1MEA U8Jpնt<90q点5\IDWzХ E|%rX܋C^Lm!LUVw$_+uqPns ֍Kt9-81!Yawob謴3'lGZ3J655PVϴ@ ͆ ޮ:pR36,X`&Hg[etY |؀0.o(-75\ӌi?/.5Vт:|}ǹGltT D\bEd[FO8X;YF[.9e1+>4[cwדi^*/ON L͠OɃ$7Aw~6M-˼5x*fkö*Zk/;_7ˊKnxQa\ Lbtb*п)*m\s/L% *8nE۲XmЫ3jT 1+;vz*qdkZ *M3.Mאj4-*rr@(cބOf%Yů ]H  aZ NeUDxZa 31]0N7rsX.cw*',]=^^(Z&;C_ uVuz: ֪;_v7L)de}C 蜣(s) sJ_t040(6N0\wd ފyMGZ{>O7vBd'&>yl crdQ])[%p>YVlB'1NDԜ<<)fX%}>{Jlm|͌ 0v[?] ێ1LmpG\޻q<'CCu:1"4lϫҦ2v-;_&bEm""[L*'t€Jl:P j[Ґ?S+a)Bydz5_N ^f:&:Y8sOkl* R`_ ‰E {VߛP3D.˾䉘k%JDЊXX!:ǾAx,(S#'؋DnĴh+c#Z>% A>&S|qYq<>lߛTae04t@:YJ0|WNО3ΓPC^vU~ͩ\c:>-NlBNkv1X|htٴy\%CeuqUTOT2b@1 AP-YBIY^I[eHHjCb6M-]` ?{1c4?WROggL n ,j&٨f,48OR |4%?=g7sn.JmFZ8$w@3vm J9ɼGT #eϙYe"U4H%v4wd".q!6|c Ġe&A_ZYIs`sӑ4l~#XDۓPo-AmkWbU.Y٣|iolR#8mhEy!o#g{EEpy|2irLJv%Vpjt*rXjmP5?,?V^:ς }}FYak$3pZ8IJ +E'Tf7?dc΀zM$Lbb1)^w9 ; IMM$2щ/F|9㋰ xkwoI0 =]Ƕ\#Y7FJ.%y4Ss3)pkVVz݈6X^tKuJUzb#GrE@߂z%Y`m7ak{"͸j8Z'|""%J3hTIu˝3ɴ!f!1ޓ ;JGV55BT+)5$$\y zTUN[o`A[z' s^V&> fl[Cb[`H[6BrW\ck[e[X6ڪhiZJO Bm?.^TѮ:?.2Fo)߆4(+U%16;{ ޺c8e)-MU_ךԂQ!4,n4 6[+o=.}Bǽ SF ;8-4,}7m-<(X*3frP9]8fVtz|7EBaAHOcA{, ]UD"-iwBP5.9ԸP뒃g_@='08 lȧf BQ[i}w=dajR{ڂ1 W#N]G'T,ջK@K_l LxD]}˧qbs/ۂ9"HQQwEӪ-BzGLծLsgEnM7f ~0N> }(A[Nzll.5Ovx$@Licge)8Ӄ* \ZW/pUxO6y\QW,]7w8xD뮈݁<0$T:^eItl,v{SlX-\R`iͨ8Bg85"NվLkE7Iʳ$BT֗@Tj_pv0 o@tP;gʻdy[f[[ń֩ Ya y'qY+`:>K#aTӞk=˜@KFlO+m׽|A77J&BA3é2zakWOThVo&YH<ɐc ǵ0(Y u_UV ׫|En*J}miՠp3˨dv;uцa &`M 寳CʤZ/8uYOGBZ8?lrz35T`m^"p:Ȧ1h<`5 hmB {ƀ7vPqSp܇*IJ::c-,#-wY%nh9&貎tuhns#,`!PVq2Z9*LPyQȯӯ覺q9`Z?CZݖDB1)6|+f1EOX`9$aX)&oTjh6QP!qmZItuq]IfLjxFpLZ\#6π|gKXŘp ,Lֱ|/X_XU>Z Oi~5- ;q ю"Y[-Mt=:7q|?HOh" NέRסf(EdMG{9;َDF )WҸ]$ʇ7BU/uNK [YIiga U_Ξ@ (;GpU}X"*} ܵg,HtS6^cCMnKX-H:;jxS`6̡nnҦ)w^&7#bQ`-6s(n.09Fx񒵼|ⓤ^6DM>>%_:4A}PCpuu`~ {,΋˔6eu߿W4sC%AEO|puf-7YuVȴ,%5.-Ƥ`VkmE:Ȩ;vjW8?>nch/T?MX|"5RVB{Pc٩oy,ڪVpܞvoPl25ԇ-zA"'t7w*3YUƟFRL׬r.o4Wqw=A(|*vKlx{s-G0܎+0 U`!V%)m;vw}û;i\ S8tXzaܚn IQJ%7>IKAFY=Tj;-Ko9Y VzN_BVXgOkﲲRZ@vsM5t6<(lYWլwsoݨsz&4'Mv^0wMHf7ZMy ].)l;m>Ҟ1sRNDS8M5N=%%$_G~BM>Uyj9qY- N|EZ=_nJPpO?h܊iD>e-:W= > o&jZU*c@li P!5,G M:F$I*ڽp)@˯eҒ&n {1j2*'~xB>Q=HK2F^} 29|O{:%z[EĩҫPlAbC.*|ɹ8O@es6spii\^'s _T&~eMan$aH~??g灍!v[:pBS}B0̠ LET+Z$=67ҀZ/sЩ'u?Xlei3 vw✉;d2j6[//O%nf9{-*=2 K,"@wv")!1UDys28`~rVI{0kp_ŀb 0O!q Ђ+%ԗO!!.Mi&tfڄ\3p_S>4L_'`z(ׇT3{@S(旑x~kcz3)v~aHs9Ǩ@+)^ǥ}C`}F%_blYX/o1Al%6{ qH㝻+l/#8M KX8k#x@#j9XrO!槲P+w>q6 i@*8'QI"sQᇂ>n fIk}~}1x VamhY*A91iB2_e9 (ACAFYz{WsK]hh &P03k ӚLfwAeqàM p}Lͽ;n7̳YCbWiX|akU/5Ks?$t-xzBbsG~v.p֦gVb,J#W~  IqR"l&ß6DC )ja\s[3>+>STp9jƁḭ&>D7>H\0gz=HNF;?rűbTDeRL@H V=>AXr;hAa?3yhdy@ݺNKCǪ0;Xh1YQ'R{( &1o#tpGDzJh0L,bR2!.i#7@|鲹^-*L1!8:/]LFDSGbyO n|#{bw .vɇ^A| vD'r_6ryפSQD]JSB%-jnc{`g/}CL':nfn]cQz!pQPEC{ru|S%ŗ.SK0]t'J%FᡉѬ~ 薇va4NC0kLq~/OS1O(ղi-v6BMdaHTj8P"˽\J!AJܤ/%~oLw8\{dH5'n $ } WVn飕yU>w6]&>m׋Fmx~b0:؄T;̲ @s򤗷0R=vg,f\J5ZAh4]%vd=d1F`5W&w׹Q0p8qQHm"EC&. xYث~qܥz I $7t4O)5wR0{o'16 ɇT= /Vp"uc=NjC =<-[V!}˂ k}O~G ˧< Epޚc;^-c7 %(zyvTߠ}/[<:ͥrek/10W+R}/|?xPZSm"BA,8#u?b/!Oz2ξ.0NB#C@ c7ڞ1n(ѭMl> 1xť2#T4E V?fly@O9>#Te۔-*}Rf"„+Y)s1u{A†VX#IM B_ޣՁ@SaF\q"}">V^ mJqC]ͺ0Ak4l mځfNBeoߘw\lR- w[SA狲 pp=.w6ߕCz g#@:ɣ4-Ygʕ. })p0\ϟGe'(+ĸTץ RQ?!QϞ30X O NK ^+'E= sev<A힇ZQsUZz/}[x /7goa97tjPʔ+3&WU`QI;xsr^kI),Ua !L:)mBݷwRP+N D VҜ$ xgA' Nf1bVBj8To /N.δ)i~5* }ϿNsL>ĸl!aWa(NK ̧;^u6=gAtf' |)Qj:>ufF:}+Z'P+gtc%gt Qm#Jss‹,'HK퇼$BD:@NJ X޼80#5: kCI&Zc ݼ"He@2gQ$-.;(amבKf"ǠEyFlU+aFdwu's Æҡ<<Ec?uc<@hc[P=z6-qFpvf5i*k&d[ ut}i?< κe4h]#_{:=Xl++آB@V M쒨'ehDA7bm>86#.i>Ȉ "c?11Baoh_Djʯ3g5vQg kĈ-㣕#Livъ>)AM6,/]9;z.\{eh{"g&k{BYZ2 2\Xt6yUPALJBR s ,g=9(sQ*;6T%5K[ ]pԀ+!u/w:-B ,jBa% ʀ 0r&XkS-͙A*~ 5!>1={xfa@ޚ@ejKTvY+(s+O[ω8÷YjI<_V-vkhӍ!VuëC(| /Euf?-!3y q{zkn6y4a鴒22G8KLYƒGym64j6}9\*n U |KY_dbvM H[e=Ί%gjodXH?E}\*نhZ%D .Ǟ L%! cf=V mNlXX&?WD9~q#凈/~U2bVO6 n/AuˣՃ+h.h`k1鐒㗷-1_2Qw/!ڥS[Z}O .SUhbɹ_0zq8w8(چu~h[I~uɸCc@)Jkɦ\ w"K|2R™%;ۗZ@+?Sgim经-(&=j xM}恴]BIrT'?p">h3FTD[\İI;cdO=J .^<>&;+rp ʡĺ˿m}jRy'ؼǷp+3MUX~gqê™P6wU:-NUI=l88=zjfh? P^ѣ뇔5~p1nW?ö1{`z ߶zjENK"΢o,5b=t=+\y7i>}𩕼V))# ~K Pr5SR¨C"p-, b+K dVh|9iiaǩɜChHtza0r݌>͡x (gTg~=ʏš;i Tĩ,{l ]a~%ӱA*LH;mZXCSR. *'?*RBq?g֔kKzľma~TA_lT/2@EJe4LjFgcFYck9C\n=ޔ$4,MJq]vC*XRjwĐ@zOw$60oJWG!!qdzPoÍ~ioPC"elZ懄l}3$*P $*64x5el^hَf ^ pHKt/2hkE/,Q84imІOۉR?ߝjjS!04YlMR%z7|?L"5+c߸JT :+X9́8th-P0N\M"%~Ŀ40,IpXMM.cΥRi9-.yp@A6[_}۝CNiΡ]NǬYPC L=W^r7ĿXޜ(l*ƙu (:YOru^kepKw‡~-q*9%c1?XU)>YGq`%HUę鼈 -uMy֍ G>v#E2.qNB ki+Jea79ְ"4?=H|"C^EΖp)luJ0b<]hr{I )qv"4o1(zbfo!bU?'"*bH=v~Fb!uQNz }0L1nŴj ˆR W|t2;ɒF"'Ao$(dO$֎nnP+pc(a7D2ߙ\wG'5 /D*Y+T/gv~omX:rhrM4Rmj BݲbT|S ff bQK7%sZS׻Lz#!gې{a1TdS=n8Qc׾i)8,)EM2m7( ~*S_ {lDu \xN[THOϒjadi1 L1 *f. !s1C3IٜHl]ޔx|,L gS.MR{F zĺ%GVo|%[\h:|>#Gb.er PNR6rjdcQDdE0dݨMU;}z 5I.2ۚ,9RJc_`xy9ʋ!~Q KAhbmmm$",lS$T55v\Cy >u~'N!JŊxN8b+R?at&>B$L'=/&b rd(ejܟW*n7!Vq&-j#Ю>vݒ7[iָ͒߹9O E%䪈]yܘIKdw?R/Wec /o.] hqLh!6ľ|wtXa!"<`qY9lZj"|-IcavMr o-!O٭x*0NƛHU?vj{гLYyKf7P!);fށK3_GR܀yI%òpRD}X~dG 'NF_RXqYܭG d90D7)ezd2#  dW9~kjE~ ި_u 7v(cUH49w=$~p`u E\8#N?M+9 b&ܽp !ܮ첿8<M ߾rVQfk>,2w$蟹ij^İ#v4+ɥӽq42:%Tc w)3ߒRr;U@Uf 8~JU)^UZpimڤ{7f'#`͟AH\"V9;Ĥ@Բt4y㺂6"8CAÛ ̭+nAC]/bb]x݆V P-?ƽ-sD#aKP^ٲl0Q+x$}+D5{#<JN:9o`S|U!f॑De9o_!9hDY@۬b=Yx3C-% )'0qHR,֠xP$IK+ϮPmllkV1'4KE _y}~W^{E.G*SBe\e?C\~hi -.hw@mU &=V;bgWp CcZPf_%bB6*TjR/ߑ%[ީ[Zߌ 0NͥN&T(w`z;]t9R-EQtq7;Rl W[%}EΔ~5jҲJQσd,XX,*fفcbΣ+@n`Y66H)jI"z?#Kr)$\ޓś$\Qam8 UzUʚJ*%܄B5灝_oҬ^)7 ؐ cۭfEyQAςK@W7˜fmHb!ԎoC,Rl/ʽmF|@i{ȁ#f7H"W=%p׽ע5}ZS !bQxa *RhKW|J‡Յb]ŇvmpȐv&5yR-v#kP8̼.B%??W#P1#>23 8<76E qI\˻wmɉC dҳkB\;xV[Hj';٪#jM'kvÍ\绤̖n1.OkvTO:x,,wmĵ?L"czO*7o>_.NsŭqdtS*4X\Y Ә]fG'j95G|#cI׺)͒@CIΛǮ#k6 COgG7?3B~tjvd7\JxW8-%}XGXa{,y]I)o >!uռN|ܡXe>y6OZ24IQ :CeY.;($"F$%> ڞPY!B 6)P{H#Cp{Qn<2|"%:+*G;<E}䪻Ago!0𴥁_4ـoi) Q!mhwPR0Bt (yz$bk514+~ jpP˄t&#PxVvYƐ#4aJ\ԎΔ? ,c].sGWnH .^e9 WzA`@ߤ e!ʼ=<ىqPQwi8[ <ZV/yB9NuSODҜC=(dt?U1j{@j}y(=4H=MIN @IQ Pkl11G9A&&eؽ(wx5LPHg6T.<_}=Zb\Yޝx.#|WqKh# . K+wy憱#pV/n#3aL@ڞ{p)SQ1Ϯ Iܢ){I\<ʑ8I5h!rxKl&%ۜVS.UFQx#&Xi'J&P/z -D܉ݶ2Ճ)>㱽G g9=+ j2X'Zk1Y|P@Ϧ hA$cX.eysn.w]"PVڌj 0 pvP$ʗKZK0ԌʭMjuqlڢIbގ[R &/ s(I^S%nKQͬ/QS*j'rRey,?wE.8?}Z$B`GN~BڊCiĺ'X>ëakWћ0}fH;ȅB #@& ')NuQ*}sSt]_ݡhu{o-QJpEadvxpq:WPFY8OѮLѷ,YH̤LQއ'<1|\]-xe\R)'| Hbԯ~ttcH Gi)cu>NEo;Q2Srx8"$46$7 gdߨY?P??7 aE<;b$㢜L9&h$մ3<3Na2 \AXsq)\Fb],wad|Κ_pA(mckZ҉O/ͽ/$fGﲿ< }{e<{i]*Z82*{Gr ΑS|[l\ Uoa '525!jV\$bo?XsQ.<MVO!}z%IRjߥ^ts ͎WN˧)]7#ːY,B]"_"jR2" $W\@ 7UQ~%{jk ġ=0FnR۝GQM4eĀ4|ݷKk tnBIe}?i W I9%f?c7jbH⩝84Öcw>VI>dfzKg('avmY%*Rfq`B|ax$dߪ&AVUz]GQJ8!֫!?]UGc-{a7JQ?} (ոK7lkQvʍDe=:y3{F. 3؋( y-3AX-eg1E%gvK04a.3IY~_DKB8sRיwn[p6"=ߑI^%GY!8nDIhi G +|cGv 04EHtv,J_&;t>]2)_]lwHΐS2i$tדelX!J[ <->jyNԅM@gA˫7Pj}TyiJ \:޻ *{|B4'K~f<}D߹y%&L37DݽFet,9Aq2r//۠|V̶8 Qp~W UYÎBȿGJAZ@ɗkJ.BH1f5$*>UR*cI &e66ZG>YDl5W~XI*0PkKĬ&SFp&C]v]^x[\‚Lߏ53Y$'].cd6dGz½^X(;Y,Bܭnˆ$u8e yF" hBZCi5 5&evڡs1QNs;c/GL3>/msXEF6>î&w'2Rc}huZJ"M4+Jiyj3<MX{km9ȪQ؇{J֠wAzKN\( 7>e3C)\SU^wL]'KZIVвyr(IB*q43*dy|ptxw02>7 &Qib?'}W 3phbE@b-{.ܢ_Wozy@ԗƚTZ L.om/my bE%0x"@v2 5ֺH|KC !_Krd< k$V~koKub+ަCb.}?=kEHFD[r{P(2QTLz"o䴝)Bskf5os((eA8H0DLry}QBP . < FqG+L'\w<\Dfp1nZf9_@k\Pt2H(oa-3F'M۽UV |?Ʃi@BW[`Uҫv̛:윾.N)(/+"2(Za,mӵKX-'~ }Bw!1hvs |Um165J6r䮱u$%+A=CB!iϴf#GA c8^_H'!P 7T21}rbƫh g2(ssE tw2FV}n}:=ŏdS >ݎ.ADu=XF18E Wi"D72y; eEWJ5> #iLQ(zlwOF U!l'+p4:5^*?9Nc&ILQQSͥڿz˛'lK8$*R"`gU_!ȩ1s'rF՜B@_d0!}tV5S@5&?.avFC# Fr'(rPiΗ LFA^34>TsDj Mgf5`ֿ!xlm8PI!þuEttP^';&xZ+!a lɈDaL֍Yxqy PK;Ylw.ñB 0Dž5MOKmEVkQQl5ݺo`՜{~Dy Y]Z(_Tq0h'K=|^kVT7C%q.|5!d ksL0u Ŭ)୷(+^MkZ=5R Ŵq֒\`0yoϕŞQ@ɛe9ۉ\;Yn-Ƙ˜ySQSy43' ] BY62_L _AMh)@ܦV$ iW1SU/6DiЁwKB,>9C!T]ĈcYWR/80~>|9 !7mF.8 $[q+Ƒ.vp:m)T#EgXA8O]g ߀ܠYC1T}Oy9"| hv$Ԩűs2/h*ٜ]2UNg6vǶ[>_I2yT- _o{E2( S. ;ӼCTc,Hea9!C (MVK +>WR0%2 _j~ >z[+Yz&]Q-GRELVvόU.e!GbTE +4YF˃pyrwb̌u:1#2 sUK?IfY` su3&Ň+j5KU3y AѰ(fPJ1pč9xKWQq"WsD㒟RBr$υV7S} 1U=d>Rq:ݡ3e;#MYag!H6~%+h>5n/% z,C#٢g):oXsR;2iWFW)!G R'(wT4ُF3)BH-9,';_.a%LQ)THT%l)P$'a(FɉHRô3JTQT2KZQn.fϦ~4* SEAjy+$@}Ń fI~cc=93|^D=&1N|!sKc%S0/89xBUYryS i`'.ɪ\L<ĉ"&e+|iZi{FNaST[Q;%Mo5\ee 3ٟځ+`rJ8B[MѪYFNg^$8siNkXQ;X*H2zYѱzTT`8s#u7v2f ɀ_GQ ͳq]+odžsc:u9r҅}1¡RJs늏y]XrB/ÛۂXA$gzw>XAm hMN#kd3Xw.ǜy)*+W iF+WتU o<>jhΞK\-87qcdD@ղ$OS6C(!`DRqNXp]ߍfex:hChլF#d *xu]5f։6BѼ#oS0閥e;%F Y5(>Z1"QMcA vUL`y{IdP=i뙐VDb㯋ZKBBϒ|hRrrƵC? ӤX咬Sl`+I]; _H0^,E'bt2H⹏FD94 !MirsBsּGN[c G9 `YiA}BIx%kژ~W۽E^m[~-3CL&"-q<|c$b+  >46 'u#e`ˎc%6T R>bZamgcYyr ܿwرq(,dWCJ .+сraZBa J\Cʸ1V@-o1Wj9+A[}5 Fs"i1 REv>M^hDz[^;4ΰ=#g0%4'}٨ψZ<ΗE OC;۷QS N,E6ru]}JQ8X+ A.i}ȓL,㫽c-^SiӖcC7<H)1C锶O֓DɎ<ި=m3h5IB>_L9`Y^H[#v?KrR+[vtka‡d~رQ$\/o3!  34tUC{B fkّ[wkp,veXoW*_ h?fk -@eKg 'vګdC%J,4ZBܢ_;{B>_+]AսFz# Sם.+0 ڡ8Yxz)TWu1@jgےgb(k"/@IWo =X'T@/n^/ S%&ܒ7Grɑ#.S=\\`0o B$uHVd)+\$Y xB(T΅YUf;뇇@} c9>2h^uaw4}uaO=*,VMad^vhsYHjyȘۋ\ll0-A[lиf1X}Z'|gC_`W#WM=[A8v <]_\d[t.;BR#W4/S;/ifFDO2 ="ڭda BaC{;'(?!ơwj1܃b7(Y=Jm1ᤨAfsb/ڱ2i3ueRf`=śaSw `vi`bWzcqj[hyCm;6A!*dn E ͅwwh)y^Bp-R cL$r񘗛!pah͇vh\%蕚;e"},d&s m Op3vTppx*PIex:%9qYrOMJq6<0삂Nҡ:} jyr(3c+֜t`8*>{ MQLr+)P:끭C!tv;uY%0FKqPh(3{QTKSpc8{/{O- ǫ2rۋ߻ª$.(i*\ Hͬ!*> lQ_%ѝ x$sVr7UuՔea^/г cjր~=V6>?oqfa1BDCKu gEg.ݙ*8','Nhz B};Y 8RA0jOO6h&=iē5ysv mho[oxՙM֜d؄DSRE 3K@\+Qr dOm:j ;6rvë2qWv oD؟Nfa5л25"Tb(SdBe"b:hnKɌ_둷DHTGIX\H?XV@BA畻wES.&"9ɲev ڢ뎚,ԳsC_Rgڗ5BJl/ۖq(1^34+/T3IחHєpZ/QX?Mɷ>O7cJ7_| oy>.uRdoq=U>pL4[a4콧nzۃJؖh,Ot]?}Vk@y3>SΡ^IY $/ՍJhv4Hkk_L||^HkU1צZ](-PV[iZMR3%_x.Q YL ƜNPL ŽF{«Ewb5`qjVչ;!dSpE*/5G f{|*0M} Isj u<-T9!))II).}w)U*N&^F.hnÄ NjFmdQ>(1DLn8:]o_P:T*R8st0]4 & F4jldJDۢ{6+q* f" @n WH_1@jIZe DQ*^ 6j9FH4ՄU^֢B5xБC|2 P94Ia4Xԯ&zJ~~ v[5mq"#j]GM#iLpS#- z0Ck|/ >>^5'ʋFb:jtuzHT6vTnU5œw@&9.hh7fFw2!~n $9|^G.egZr3ֲ=6XξĬ ~ [b0r׎$6_X]Y|))0-:2qN)G,FgIJFhoi -UѬttI,ggK Eu6 .]bJߎv-HXK9S?m;E8~1ȍ%j'+Rhޮ ^} kΌ>pgIY5HR?*ABYX|:͞Atp 3F5vC܁XΗί uf4S*?!E]> |7,vIYyP ՞ꅲd %iI*G)r%s#$I{A@2艃 F1VDAN @gܔK7U עM,Y&jcw+'GLъ<!u HS%ۼ q5V5L.}pFnŭ +&NwwW,j뒘(ZZh| 05,BZ< HL LtJv_"gB\MI%rR'E߳mNwf&a @I3/q {r7-a"xEJ(ղ0#Xw6i+S[层tvTp.i^{B jǝ>2Y̥HUC>?*Ӣ:P2r@a1~~|:( KmCwG{*E}}+-r%~bpUg#m5as7gVkK^U4eF7 [Ǿ9+$ITCfҮEBH߻bݏ.gxg`f^ܤ?dX֖H2hAFQ׌dF)$HC?罐55r ?"V"&&5nParN )aO&hr=~yl䦭F/ C`7&n!ݶގґ= T !頇;bwbVkip6f|@[V0ݹjzs -iVPe =N&!A&" >Wx: J(}m3ѝ)1. Q!qFA](k5^ȓ֗%5(nQSҊlJB0-BtEE1rHDˊvn_]"" 30n#5?#X,P 36aִ_q}IBy@8%A.h/wI3M+R!57v5a{~_r\ "iai &_?%c`T6pl谟ڔ$삹qR z* s<~ q;t 2{G% r4"ͫB2ؖƭl&/]vM9L *I|^M_샸, [u9EC1EM՞;-9BfN] ǥ-]Ļ+T76OKOY!&GtǓ !lޑQ-KZ"|ŐEЄ&O(<ϧի~љո2- ّ@yltc&= sfPt(ճ0ݿWUWf:qCLpVdjn8ٽ5/NS.-I*YcnߙbĚemKÍ(+|/ĻD?XQ_O..Q*&AXо)|ɆӑKP;烞n#;KW\gUZf/?; 'Fǁ'J4y-FTMSєg$;UD!şpX_+'-2D 8!fR9#P(_ ܒj֙m̑+;Ay.ʘDGjiGO3K,_lZ6EKI*[F"b^u:5j94Q/\[WMn^~R4%XwF02IYqOsSHAzxx:R}2κtpRUQҎ\WBW%4W eUf"-3l7u6:zmExԾdJumڷCtw=--fp.rbC-8WK }^^['39ѯ~ /:qr=(mIL!Cdm(%WBdCD2oÐ:^禩)! ||*2,e #dʅˌ%uW|=0758%OJOg% %%2~DqCMF"t 2'!m\ v|{"I,)"Slp>Dc1r5Hz5xR6f#޴{-qwVvK)OanSX۹<{#%ﵔ᜽ AnpG6-Y#R}.y-"'LE06zf-J fvn9 \4i)z|()bjD޻t~hx,Ս$`R6$ϓ>Bk;z(t4Kqȃ0}EQa!?vY(bCN!ȣjiUyUEl6c#"Ɛd/鯅p^Jm<Zbn g\x6Bno%O2+ !Y)H\MI6́)PXH)#E)Rleq+)͇YZ̓VaIW\ND@WHGH%zGٺ QfSoL9zJ+, >B!;a|'ls0=,mşB_;&%zօ-ϾSpK.΂g%n&%86M+C .?Z2 L6 dcjo3L,WJ:gåXJt숨˜ͳd%8q c4&ZB܋ ϔmu rՀp|ǚV%bmL# sAQuJhP:SRWe c9`sť9FOgqq Mď}T@L[ j1¥Y s&BƾW۫H!(|涿QS:!:.I(Xil} ARDx0o^Fo4m󼰫c%~z*L j^wc;~K i)Wf{iHø&mžcM[`+8)pUc)*qn) EYqooz;.*wEdZa]+brY[qٱ3] H>D}vvnp꿤NrmժKܾu.4Ⱦ$M;OwJX`Weң/)O\i/[8z>; @A*V) OQHF(#j*$v͂Tӱ]jE* qׅˌV,et u1l,(V/Ϭz\vZ܋"%,۴"gNg_̓rjǺ ￔtQAb{FQm%1W& NԶ4!SO_ lac@gPC>$ ~׼ <n ZHDjz9ڵ62E,Ml[A`?^0 ט8[ glFoWI_tL7'1 Oٌ_jPXS=` 3a-`>&](:(|;Bgz(lTYS8^ XX*sazRΏt<'gCGͿ&wvD̕(kq֨TfkTHWHNJ.sƂt?yfn (.{Ќ8v~kzn³] %އvHPj9C: !bt?yhBb.g;,/:"H c8h`g lC/XSe GFsX\?@ ({ixb)Q?C@U]OYנj|m޺důE6m(yx 2ȠR,hAԺlbxnnbɚ.q~ bIU Ɯ8n$o5?CkxWMAW.q*Nx3KīlǙM hZ|D-b $Ff^z}e?FU0^ t 8L?9O`ɴ!ŵힰĈ*>R\Ϙ՘QGmdIߵI]o\[zW7R*vlU*̄.-ՃNdz8ÆFedO'qQR6,QXa+gc>xCZHw : >piXF#[1&"xxauu#05 ژWkK=CldJּ'/iG. ?<´-86)x!2'%~l!᭖UY >aJc;rMXU+eBl@/HZFwkX?MyX]49'nRqxl]yq3h\v{9}P>|AYG!pE42YD]/vc%Xe3 9}cosmytzKO,Ć V^'A}3v "Dr`ǝ:jg9>7aj9z!'|*VMx{aR|fKE*ea\/BC e!)d|Z<؜.G板ݿZi `̀Dz sK I!FA:=,ofdElnPNdrW7 [͡ܤrEfBU2n3_QIP1H͍8>۰WgWɗY+] hxy=w{:3ғtnm2$REDD:I%+V֞oA)vf񑠍 zt4\(TDaVA"Ft^e%/˹vwdb*;-"|PY {pVV_>#E|-)' Jl[&Hxyn7JdUE^F}Dxh*ƝsGhMuweM) ]њܼvjZ<FŢRdw3Gc25ܭw%.xF a2U[` Kt~<D:K_讙lI?LQըnx4)=خ 4/ע _06qf^bqu: {䪯%7I 0;FF$dmon,Cw]N;/&~uozh޻؝ so%Ur$J hƱkLM`7 B ! ȌĨ]q!,@Qz/PgPE:F^lAB2ݔSm?/1 93  8UDd{2-$4Bd tĝާ:agYԱ·yދmԶOz9IE;sc"vtZџYClHph8Ə7fslXGWf:6xi HRd$P[[6CIsìON΍tRøFn~U .oVrH"p4(ʻBGsq zNy+ Jg8 ^c0)wK_O-7jp\6MCs(,T"<0< >tmX-Z Ґ\ZBA3 a$/;f5YނfÌŸ^w~ܯR1n%35w:/&c:\r70{ciKW"ei7VSeX qA ZX&/CWƌ߉v{q=;+$}_yvl{'!+9Bָ$|*]Ev_حj!- 8HZ%D!-`}g _)FGFS_|R ݝXy&gq$R;pS}XW+AuYfd/ȵl򫗓BQo@sAQ]6>u}++_r CQjz+&#C&!CiID[4 ",=ǽS)7iG ~#qPR&~BMi!W9Go@Ƶ} d0"s8\Nw^Cu`5,3KTzqPlZÒRzLcU9Ąj{cB*ԪVҸ6(ZCv~Fl_EjQ$IQFpC%h ˭`_㾯&ԟɢ,T#uh]ʚ³v뛣G5?g!CZMP>2hߗFzVOcd7wWceXNJMN/V'sNF<⣘&BM *Ek.vh^v+!x%%{&<7Avrԧ .>WYkC`ibYݠFQLn&+׻ԊtPRܠ!j|t##1c3)!w87^M(5D'@g0Әet*d\h;SoS|Afټ#~]{|k5 J!7ږV jEW;S+A}OAYombhm68vgr)_ԱoD`U&yx}-vmEP(h+s`\FN@猐ܦ?ѳ1=Li gVg/r7Ϡ:ÒORƁvi5xEJq;/EBMOˆ޺jf7(7,rKt}k~ 4sQ>\x}KCʧy}*2y@L}!Xb:hTF|Zgssgwȿ{E_1I10kW7bya! (cZ-AZT_iAj#8nvW2o}G;~QoZ /* R92g-f,kT:4ז-cVZ>olC?4X| ,blQ±~+"n\<ly|G|&Ȅ˺Z7z4o6n&T6iR3QŽj{OHHe2%\`(a.y/Sh;ĜF8~nۏn10޿JHxզ`lnZ\mds7זn+lԷd=ǚ48vDH\BQу@}Wf܅b O`nEcC_w6(DhJDhVT`XM06>qe9O|fel4~NK>Ƭt|( ~:H1W@0 j2$FIUtRfxɣ\/0@4(|ݸCp-a/;8I/2-qe}Sb^Ghr^`ۋnZ1ۀqcK͌!@&1ENK4Ʒ~C&ɘ51 :|828INȶ/)χtlyCq3Y|PGρUAƗDן^b(hN}^7&;Ss):d8%xۿ(ڨX B=zE} l,/oԯ|+d95E<CT?Y/3H{Ɠ Kк8k6ŔeeeOz|/ ( Q(kS ۾2жx 7~(QN7Ft~Q"^]0-*^ҦSsUPz([x0p^S܀…&Y3kJf8Z**5Kc'"* ɡќH;5;ԩQѳtč_Α =h38( Q~'qêšu=IH1;]mlLzP_m'E =QͰ$ [a7rsot: >c RS9)9V;;NofhH)ޡq@JYui6\LEkiWc5(m=%LqBZL!n5^"S6n q%z)tV[" lM7 3aX_ۧ %5K:' ԹېTFT2h_b=9>W:xxd- 쿰A Srȅ"r[Q]=wG4S*# agEɌԇE90k=Eݚm7-Ѵ/MB* H6`g|ōhwkN63s Z縻Zs{5RLtD2CEB%c,m&l%$GVLdLvT?!E8IZCߐmU߈ /4!mչW?Ƞ70KZ/A?G4@cRrO܃Cӿt2.֔IElCzH+u i8F*/@wr^y Ƹ[5Ia/#UcZj voZAm(vih5FT!=A[X͙T#:j YbR  kDV_e8F1K)+*~9H|.7Dq$n@u. d!sdSd[5KVX'߄(߉·`j7[P޵:fr6PKT̜ @i`[C~shDEo ) ơ$8w [/)_jCs9j`@` B3ŷ9S")LjMF榁1et&ḪRśHk; c60 q4rпTOp@q];/ch'f TH6)4]Gndzu([o+ ׅZ 3j]7Ie*sׇTR#f%.Z>\fhMq*ӊTEfd\&~Wxp4:0[Mdyϊͮ*lg yإBttk,* FËxiNXfIr I *O^vRD$)wU?J0:TMI;)F ?)y\|^  q/M*0P0r<D/{s'"c L')o܃ڿӛyy|Ne."uυx~0Z) ogPptf)X5g_NΆ]3\82l+}˒|׶0IO@Cp_|~PVZ:和?R:#tGFN>ką<15ӭWz7Gp h9xy4 u5?.nl &"ezC"r%͍ND(x6 kSt{1>E:;!0:d";;8V|[YH/ fjG 3.MP7:632u%agT3g)ݞ6ᯭs_ ة o9N sE%q@ݰPF3/{"/oNtD1TwG4I_ ޱk1?5 .ӯ0:P X4y^t/jKQ$5ͧaxz런'ZP^#Sg~Vau ׄoI _].L0\0aBj9QYnE~X5ީz &d'ۙ [jGn\jdN:yHhEdjPW>K,M13ÆAlҞ;I0l,diiV?ʼV6DtF;/z#˿W\}s$8o5Jzc=_7"7'dYSu~: =jRaHS;O7`f`P =2(j9QDW{4 m>Rl3`zw19ݓ=L~0 Ui0E-I#:1vԱPMbBAo= KkK>쪺H}jB ']BDJU nR&ƆT`v+O^u} (Y. r>Ɇy]H-tAdywՓn9b` D>r_+pKUCWvfOs'rC?4SP*Z-z<9BΚ\qөq򵨰~'9x_wHS|rP Hlէ"l္~c@趁YY+}5;6SOZƇJU,NwiDGmC@)5/,~ Q%5י}y[jWfvw{JTb8;odP6Ly( v PLK־T 9^F](ơch_7c%]#?wցzp]996bdC=_ؑ*nƎXa>q;25s !3CeYܺA6"(ՎU %-7 lpqz&O_R-%q .OpƿKy$s?_qZVnDYzD >[*|s306"]]ki]x^/'{IysW搎7SA.IԀUlXğzڊiV~s+d,Uxtv8]A.c:#_h<=jiŌ-).(U %w'Apk;sH!K~uӿr.󂘈i) \$ [/_3p-idv0[u{1~U09 4f.6 dn+#RSv\#0ȃQ&3RR#o8ҜZ}#(N;gE<Ɲ$ɔ__Y_^d;grԡVkk$8iE=g:igO>mU BNiη+=WT~N?pǻ[EfU;=2Ơ:iQ=e3ڤ&e)⮩1%*9FyD28gXMnLPcnrܥBOpL`b65G&Qd!f &ĈEHdoxք8!Ej_1TbtBS.A|/gzH(^5\Q0xHVPZv>+D{T 䣽lq'_"lgβ6[t?E*dAbTL|P^Xq*_u]b ۼ:p (d!ITV8qNQ\` ?/@Ɇgjcu-FpzTL/оg{(/T=8> ؗʊ^1X+^.`P9V,jc}ug[Tf5NҘ7bתU,gSvGi'*DS"u$I?`v@Y A}zhn芘w㿸2h>87ګwq T*B*F7Λ4BVhoS݊6F85C*ֺ"K0c/2_x,jTv0'un eU5=nasԢIhj$Q8S|LCQNr{*dYGxᩒ'!쓩.gYlo6D:UOs;<Ԝ!9>stJt0(EG\!W)%4[HJ!Ax6'{O%{Ըxx<]U$pϡ{P~ʓC' Һev7"[ACdJI!dtFA-Kg'qb@=4 :@9%P'ކ: \;0Հaezo4h4tzH5ܕ.ť;u7C?{WAng8'@p܂BѢ-Bh{ E,:{/oVR=HP=E:‚2;o~6 Ucw'nD/+ Ro'}S~%ĦPh : 9d>s7Q͒ӺĔT'X,JTQJ \lO"*k?q}EmqVZ@nx,ކqnZo{p-f;_ -\#$ ^-0}(r'_~Tp56eUK#l jݿo?S~fEZC[q|~13"A&oVϴYEmFvɾv}d聡^\y۬E |mj͏!Ex_P_ߞa)'G4+gE｢ 쯴׭< ՉdM{@r3VI_tsO-5ElUu538O" i3ղl*iI Oq& &L{.%u 23:JL~rzlP6hթ2*tEe] <f'ф#ۜ|2k5bH߲ga}_]m.:"yhC < {SA!vbk*^EFR⪾¥\rBʓԦSoƴm@+FpP(R"HZL2o~%4퐤Oy%sVAIoL$8WM g|h~XPJ{1v d w戡Gv,; beL`RHfO<-)"s6ϭ?:LLPK >}I$T@ Zz!+/jAz` ۡvv=g4f1rIު"FnPw~ϖd)\!dS~2tiyĮns>kw(%+VAToӺuVR&;$̝ͫ_8rňӬf7+YJlN%;0K颐Zxъ=`E\RUg)Ĕt- ?cH_ fg:Yg̥jL- Uk<6WJ"'Y)lYkG9>/} 5FCj# U XzVPzRG[C: )폳ܼ-z #ΐCVW;Ŕ1qֶH Ph9U 1 DEܑW!1Ei3ˉ<(J( S]opx4Ys([ 1!Vvp*~"{E}fnj?[aJk:$lr@C̯~;)4 lN.*t%hP3;wFj<&b*w^tH?$a iOxuv {>EқcR!zkԪ >Tm# o7ΥCd XJY.tf.+|h_fmE| H\FQoq!  i_sd@'kE xHx. \kg0B WfldKM_?| H)7j, [㰮G9k #lfLKF|pdǐ[>ǀIjy(gHW;8Tb/L7 <8Rs=1e7)Hcmrp-{TnƶpƜ 0e~3F ^1Lb69([>XG&HRu1 \t9IwN.D&l$e4;ol: P]I^xa^y]j͚P?'& OGOR>giԿvO zLdY emLa.:q0^9Jc7ω0}[|!m1BJ l.Rl޸|FVn/0Qx~z)jbPlrլb) ֺZ"Mhͽ[ߨ;|E?cŒ(x[&+}|| N\Lef M腇R٨XR`yh>c{_WvS5RK9 31atUO0fW #6M^8c{]vxfX7>#nwŐ[,(37i1͛&q+7v _X6Nja? c&I Tcd;R{˭us#'r=BZ)C6- 1_hcy'ƏK Ѽ&I\TaoCƬOߍ]?_n0Y=5H>ya#c((S{,l"yso3u_0 К< 31k`!Zș\nJQ`8D$p#it.OaYh61 :fsyķ4 L:*@*"d.cmKxibc!o!J$KPr4I%Iv'E}M!=ZGDU&hlCQ*?0't!_ r{t'iw2k56<ħDO^Q(W%lkw86XO)=mPOˇ<ⴗgf28vqYogdKse=Zu乳愨܂$n/vYAl`'|> ՀCP p ,qm8GjR DxH"՟ImuHv]!`7 8ɴ,ʸ#*!B' =PA|2Apthϗ5ըfTIp[ݬKvnjIE;=rsx%@k6NUAB-)xc= #-$I+x!ޥ\sdpmd:"S*;hX}MFR4 53QnW{* \LMZwoOof{gh}&Rrs?3[4OƼUnMO9N?@h7V*I QWn2uA[+sWsR7Wbݚua:8d7c&7|]ln<*u!g cvchHMt[NUwI/r_+ЧsԢqrib)$$HcPRrS[7[fcSGvߤ/ONDVZ[ܖdSk4z+%:l$uP;ٷX$@L7Nsp3`K\1/8Q!L:ȁm{:dJ,\gyNJ4&Z6мuH_uf ٗ#Y ]+106xڊdk*4o 3n 5:Zj6u R}g"qa4zH5.fQz%0 ĶaA@gr{߮5? i׭ ײXF0=UdRbg&1!8ӏU'˽$Ό*uhQ( gz4ލٞ>_Ö~&Jq7ӉYJ=f4;˙emT yrZ CO .RpPc!hw` tr7]K^cH W;v]h٣]Q$>du2ioג(l|RF;t`Q@,f/y$iK2ہt-01^$x (RN%yv9dy]^,J7H%àv3-HAY^,D`(S%7& մz_xLFU8Dѝ\ [o+ۻSPCS1S.8 Oh5w|mկ/ w7/(PCےoMxV>6[I!^1^UB^sUk{SQԧ@P'G+9]g/7xȅ-x;@>jFWuٟ GQ:v 5rP-팇@΍ z,N}cLgS的abo`әYPŶI) !uW,N N& Zb]/Gt?*dv 8L#&ByJD4 fX}O!Ed[5t4}Co8Vt^;?rO/GsxvSbmoʹpѤ%/R(psvcFB81SjR@n .E/c㰼*`z1N_C{3+{[$pA~鉮4/xR1f9{?{^LHSXZ D<)B}%Ȫm5jLk@]∇O%21%I>0)"B`L^TVl2 uoumt|AK0 {/U}5{}mi1>Q}g4~x9< a{g͟ e5bﮠnw_FHɥWe2=L|-8vvR$>Xeb|JxP-B>HboB\le]bEmNpT }9:9r&᫔ǰvqJV.}w#}|eؘ}3,{Z#; U>$|E1iCtL-<-ZcNAlUsQ O ,68,۸ʚdM꽳䣔z6Df,aq1A XW0QEs=7zv'o3 ַ o f,X31znZyzz"g#$4j\}wa' <ڳF(z)ech[G.ety`nVq\ Sn;`nG\+Hvֽm i`!>ww 8h0ʐf͖uZǞ~3Sin)nh"?,յN5>x"F >J\ٯn)iJmV#1|%Mt"JIYpЦ J5 9EJܽ;ŸYJ*jʑ`Ъ .ZW5pcc .8 YϤĠm/JFx!3P7e}"&7aRnVc;N-^B$ ^|j)- 2,+KZkNĻHc_!`<9 fr M-j=$^G,nIV ̜0QEx։ EfgV(ظ# Lg .Ե JIb8a`57g3}7cU twX`qάMF] ~1TH>:3uQ}XXv{. e&L'i0 jmw>'嫞xk*ӜMF Zsj.W`D,o]05_l N^$++·@'Վ[u svVѳA?mf|6m*NFuLy1`u7Mmn\%_{`駹 X%Dst+rf&Gf˗NF 2z'd[~´,n5 iQc₼s$U맘Yrlqe%i0J9mfשTZU4pY|zOg"n7 A6 n780Ӆd?dR40 +ʟv@lDh_m;H T'}c5yERO"2C(V$.#dtti[p@nd[(\*5Pp;4bZUt~2e+]Pc\,Mu[QH% 5Da1R^6vWe璐gͥOы׸"mR*& OpF]XSAX{=ɹˌotEBt.~\S-Yv8ke3*A111 dgA țGT]1u>pqX=M!$zpr:DVkHUJk7AJ}g,nwK3b2@Z׍E+Kzǟ:څN-HNRm|pJ|\Onj,WAJ^t>9^RO#kiuxFgQSZ`PJ:g@ӽ۵4#^}(P. MfU ۇ4KbKwf97h0s1ݮ#KkK`%ڜ3X7ʡOdɀڿܶO`[.%$) zJDOt'?I2{AR\1;w+eN ?xVmnu3 yLC3:OkÞz!XT'EvT__煰yW AC6\R3kzPPZ$4+nnxU:xb?x<P2di-yf.F@Nu!^q>S: t&(P߮>Ө<=TAu@,[),E!hѠ؆W*_ik&I!cFNP+~>#4 UR˯(X#M;0y|eEzN{FOe%vKG 2|VF.xDy!!B B'`aYu7^&NC:ah/ &4Xޮ|:fM5ftNoYX.>}B9p7_R,D@?dIoj"m$CB Ύn>j+T*}bg4L[W[Q_aEnHڛSlq ^W:M]:1 JIclk!6sm}h*|gMaҋa] )xW؞2s"K꾑ɢsV5'vuJ&"S7 qU$@)fiG/i.u8ϖ-tQWj%RKU*.zvqg~kAB%;b-`29)&;ϒeMLsS:X oE啄6ׁҦvбv\"`,oSg7z^1Sּ0>#3e3t>,+a,Cxqm!AWeX }!rN {Wfw` e݋XNuRVĆ$=f'Z|6]]v͸h7Kb:M4 b/, ǂCz;I "һ8$Q3e>Kʲ|np/VPq ' /4+b7).boB5ȳ,mfxk3lqe҅%6{#.3$;PJz}~=A<>=jA *a q;\AJp1<{&\0-#,sLi,}O{P`cG+d%u2ۦ}sQ{p*9A?r{F!̿x4Lu ڑ$>#n[.eUq3d;qCj '{d$ Jp`ԃ3\ OAS{_VSoњN݌+j.7,s4dUeE&4!ޝl:u~W,sTs8E) hq"ew}害3zyYkIJF{2(X`X)ɈJb)i; j*suHέC|m #`3NhԨLadQ޸$ګ z[6&aqEl~i.J5B 9;u,6;GMQGjȤ[6%be-XcG@ &(ƅLv}Y$Ҝ;I ]!gC2aJݲ>d8)$U'te(CN+6sd G 3*PJV)\֋S+9d^lM4Ћ4ݻ˝RHڔ&LOJU-rA30`<-uM'&Q)oE#vm[[uj^,3Hy8kI-`˴s.$9*֠({/f9}Z΀Vg M%Kbb&.ey%gS*7im;+sQ.Rɚ,wˡTٔZgA5gh|>Ly=L^[ʼnmY烑İ7O߃`fy4~:_D\+}ͤ`#݈NVxs6I guFNr9N8a|Aqkz,sP2K>9ĊJ=Ntc\;om~9G>.hHQ\nD9H(Sㄇ tE^QeIQ-R/bdAKN{`IVrPl}@5?=FwwAWn){:RD]f{.g;zӭ^ \s͚Fos#\kS6ԨCvP B\ hL(H$GS mpj)D)*גK4~:yN} dw숰a܀ HzX5+8fjQQq NbgQ6跚>.& ;.C~dZ}!$)ǦB ft%m O9^h䘞VrLmhl o:/~XPU \Ylzt"OG0R ;/j/r :+{#FĘK6#ikwF57f{i+iB[,px `CG,raݘe\ƬF2T y)Բi6paMФ`3<$G[$h7-x9lu!RH gIІrQkW 10%]Z}0a@xURp-?i;:p@ɦo^P'J[tEg?Ѩ)5`>R-JH-Z/vyj-1 |M^QC,,M\DBrzTN<n* "= <2 tyL" 5x7 Vu\$uH=;3'US=hV?1(6⎂Ngvla>h)\%%jL0bެ ;# sx.þ|<_b^)ޓ+%`r" s|^mwCH=F_mA(&Y#hfi鬧C3bRӾʼn5ȘUOA ]fnӳq3LNu0ލLtM{Mَ0Dt/쮢.npLe/M=_RDs1%V#&1 /2zw?M m|YMaIr{vf"llm~3L%օ4ae9 z5 TgO5^Oޱ0=Y O+uӱb1FV3u&_U@F%(}Z\Y4K0٫YHÚ_<[FAY@GĹCHLG]ԍ$ڲk_<$Np\'|IO8,!2|*ڒPU{ytF=}jUk=g+{eQ\'yra *Awc-81xmL9KbJFFel-Od\ 6'̂x'2Ɍr.=cto؇p`9|жPyCH 80ـL)<#"imJL(,I.,rW^2w>wd=RU<`92ZBKk!,cQ,Я[&z^ N .)8m6|@ËRcԆl.X@P$/ʣxmpO dvE:NbupK,p]hV)<93:p&Q Igb5GcZ7hg sdb[-A;{қ``y'O쾓i^pNRiƝ+ii_G.,츝'B( &T_EEvxty2$A`@(EiM]u6-Pt8_tw/m,%0 j $R6i-Zc*CExDL?t*b0'.UZq \T\ y۲v ǘe }tX2c4vNp:^MAns@;TY)XZABdyذSNݕHL Dk׻Ho W 2{TqR1&Cb*-r MĦ-ɸ 2Vl@r3a0Ft (J÷˟=WTOaǭ"oʇZHk+se>8=K8W9@pi' Ұ Q#_ lʞW|4;ͰJnG8L PbHk?BR>){f&Q/VbfdZ7nk2F⺽mx BIQ ĚN =r XI+U4oCDeMM/gb/kޝa>-_ ppj*Pjn5~kܐ2 ,|飆>(\lQ1( "_!kb L䘼((9o6k_U:))ǚOzY`QH4Coad j ?W湂Y(E'E\Qw IU,v+rۛ& cӽ!LA,}֠ܢbwJ+mc|t㙱jEP/n(N[ĸ線r!r"\$#ͺ!lji}7|EeP'} FG!dqCoBD8!5 eN L*C@CG{ zgѿ F7y[q킌bZ!G tu: _a XA*7RX(>5"$B(>_2\{ ۏ!sUKDةU'Cdg=j}\{7rM wJHE _.! <>C-c'%ڤBsHQ$wfХ`oQ0", iDVƌyʏ$]2HJƯ4KF|'2ncUvH $Ʈ8%+XS0➔,vtz6Scu7͎zkPM3.PBPSyܳRʀ)"> e]38ooxLp]2+jnnќP)j|xqͲP\mT 걩r-^? :MdɫE!inzz}Y{Tc ': ܡFET=d-34IJ Ӡ6B"~ܶ9Tg$ n;őT.1̪3BzlR"5˪KG x.܋&Yr(J# z ǷP =YStY-vi!8K[FDE2Q3~ ?EL֛/*~`Əe_AmA}6VUT.=(m4/V @qч #**PF7&u#/LJ!@OmWF̪֝Ş}ϱ7#\6dO*v ] YMaҕzA53R@uGH߿y[/*N鏭Vw"ci7x7qiW;%Qmũ/uU 7ŔIum<2|n$≈vYfu3gaQuúJrf=H 'jGFiR+(NyxwprNL!t\,z|kЦ$|WN+NA3T!KLnQy!Q#iC73C&Id"TnCLXԒhhn qSF.x=e)ul{[3_k0.ܿƸq.tW0Hl!b 5LNKu>dBr9:0~t68:JD0?x+kd#ʀ";+>IN=!O0:N~ơ??-oym$b!)at3R<Ͳ/P2t=u$9UUyΗ"NڸTW`.c/=M(h%]ڼEly?ȎCN @̤+Xi@S>x>8j HA,ZgHoZgvI$7>nZl]_6#cս/XՐJ9HL,NtĻx L @)>*tCdj6mf+} ~U'9 E“:LbCkΰگRqH<; N;j%8,:6}/Vp{BY9Ȯ&/0UɞLy^0c1*PifȝLDPQh V^Z0zcOo^͜E$,$WIut ! k+:v lD$ )U2_S1C"1 wX>䦋D;]il"Z䖴,B @TݯD!7ڢ ^Q7|u'B(%aQ췁K͊^;<{W|5kr]0r- +R.Xεd7/~] e=<,){{MuC]JCTCyEpЊnF<[͵ulʸrp;!V:PD6[D:~ĖolHӣx BYTf;M}j(P]0Ydp'BO n}q"[PB/R8ݱ.!&"N| 5ZL3@V{Fe(1}8gz>_fԎL|e@RTzj @tGR#oo~rF<9= G1]л@?#&z9c$.[ [1,6U1'smI SFX":zt6?3.bާsX?S]>9QSTtS nIO\kdK "!Cn+zx_^)|,tYwIXR_eLu#y^wD'%8/Bg6]( uPv*~-ʳY%TޫgnBeJZzړ +=;9sgKUҠ,8 MGQ->)W*4VII>b/Z T*%B藦Z\"a1]@ӼRM\(Q=XBU 8bDYY@o(BN  tIh$'1x=!GV3׋岐eBbivd d%9J@,k ~5vaS >*zO7;uq^hpÖ@pű6QLLԚi2M&`O\kɾ~r'bh~TKَJ*.r2XSuq_Ҝ\۠ ΂aC[&\[?W _с 8XB+fSA_ I&P>5a/6_A(Z^#^OpGaGVeDg`U"2`?0c/986mB {N"nq*Len =-z4$#@KlZ*?<1Ai4-!#~-*?)/Ԫ8YwLy}ؖ4ͣcjXˢO  r*sE !Uz{&{B-QaanJ&N;:nm%^S 2rpDx<9&`o̦)₄o ߞ[-+2[֦ءw͞z2'BPZϵnWPoC,_pbce ~;/faZd?#HR8 .R#:dGj!0iDm="@AY,<򣲀ioߎbl9 Sta)ҵ(m!7nЖb \뱏D5# ؙLӿkn ^'Ʈ#J4)ؚwƾ%}ǘY,TO DɑkRހ<]@2:_#Ec\dw&xASpw%&t 網A/k2*}\jB&ßnENh^7)]LfĢIX>WT!\Du32&AMHvkR;2 ֚~H3*/c 50*qgGri]{']r`O܆A}p&ֹ)$D8fEh{i䘅CD#׺EI6lB]6H MҜ]C&I]\[BeR7kt8g Sv%>Ȋ Ӣ"ˋXeI㱿 K i4ydsIEC+2taꞨ$@0A]by(!y>SG7G[q?M 5.ghy%O|,Yaa^ԟf4a?D|-]k5r)!o_,4=w!TKl ΢,0՞#{ )g?l&D@=ULB`I5]оoM^&P%6u`6oE7P?+W6% dGK[; bBS쀍x&[*|t%yl {#ެ>> 6iMԅ>C\*ޓSt)jlSY[ryE smA0 ;sz楍*D_M -6C}3D( v ,jFDmFa}} m^Bp҇ ȭ,c'?-r*}N ٷ.L<堑<(@J$o_{\j lp1@?WDCoǞ}R^F; I.8'4bp$^`ּ<)Mk. QXOQdRQ~(P6hr90{Jӣ$m9?ş)$D֐'a^9B 4UD?*ک7CƪӓlGxI%j9fKtsjj:X 05IJ~@ i: 7[mU6r%s@5 I}u;&?~HGbʽ/tA t{ P { EGkP5/@w!]Y.nvz!SI$Mӯ-5碠cm 9G-QFFTIWRדm%SaT5O-jxޚ*vLj}7uU> =3EYԟvLUKX&=oNPR״>w!BQsq{ƍe4.Ḍp9Uh$631~"J#78 ) Yx BSФ{ !0ک 8."u;<;ZҞ$l޸2K?h^  &1>n> s&B]C7kvhQJ@ 3E3KhA4!J "y |սX}:RinVd|]82k"(%'!=Ɖ1ǟrAl_6v#=#dȏꭁpVx I%اr=;h=c3"BOpL{،ڃcjۊ1(<)@`? t4ۯ z2MS#"b)5YZh!i0dW|7:Щ|-3&㍅V?|*žic^d]drCy94ckZ9a2&A6{ S?*nWhy]/VG4-ƣIVB? R\2Lg|i$"v$ 3 uΊ00KTٵ4%V>5~cg9GTrrZN>|7ijL& DoHaAD\u_}?ZFK|oXwj}E H\_TIJx@ @t@%#/Efd#/&.`qS p=x6>k^r1I&HsҩK0QUĩU3ǏҐ,ϝ}XM?2y?ĜB?Ij*霡qQ=uXY`P _pL*ѻ@ o=q 11{j?g펂pՙM)6٬eDzSC5-e|`mf~-(\{yfs~cM^2c)ݻhl;"s/.ceҀ{ 7CܳR"`M1daZGj{c:b)ّX*v çT6`c1+iDk#?>뛨 4*TN>e3 l-b.O}`!pڛB4KS,*:hI;ЯD IXTϟn{JCl [fV:ňy&I@U%ZDOJ0,S4n_#s@y DGH[he-4 U\w=3UWr ";02ԋIs=nuʽ->e k5]#X`lc拦X=*AfrWbX\o8pYd8+b1B+.[(U'~f+fyn==ңmv%sx?ĝLOoΘ0lC$*pCy<nC_tܲ2Ne4Lr2yBړ +bwLY؈۹z/,f٠φMY;([Oķ[ӎu㹊A\v-SJ6+^1#'@)ef4@)ߘ|LuId?+ʻiH~Q Q{$Y(: |]xZ|w8x6}yʀ`@_Е YyTI D->f5d12bDFdsK/+JeID^AF>ܬ%C˺UB7\GGtu;>`S5ǘ>Fn$W}tvOz FG޹ZӹyS>Iagr o峿!K6?Q|Dg&X: yY_p9͐0,Gw'}eWgު0WDA7W(]0|U,{^xn WH #kLnE]5!M />LIz^0)B \FljWv+Xy(z GxѠ_jYl4ӡ}Zaޭ'k❦~w`؝`XOGE%Dp)"lԴEOD$«:ɢY(_B4\VY$" kꂱa 6孙4D:J u6Ro/+3igu9`_5؆V'E?%!㣹n 8MFxB~K O1:{"jT/ G;"5A-{P0[FgÿT?J좏؀,C7u5组{횧uxu5^6PiڂIji0l/A KlŤ)&@ %(3"ftBaZ<AHis4uЀx@W\6,8K' Mlvļ*^mw"g4iA*,4>tPUIp;ԵmjCֺgOq&xfyVbN.rwnSq55&2MVTP(O-E-)UqAFzM&+5({80$0T)ޑ.AgDI^wϿ~ e=T_ܪYC{YE:d, 875WH_;v+$!ޜj#u[5,Kϋ~ u}:1򭧩I>ye+J ς@\Q[!ud%Ҿ|ҴnJu6[X c2RkyrDԏ~m52QtšeT0,/H2~SD8Q $j 9}hrN׿ nUHny=1P0 罛vԝG`v~E+Yq'o1+Q/?^X"vg5۷tZ(MeX@b.WsKjH$bvXV2aIgc~̜5 !aSa7զK%.PLBKӊw7 {^o yB+Y$R0:ld(ΩpV1!\)w|U}&U:ݫꉕݿ^I5]rX~n)J/NİK,LmRqINelp/KS߃B? E!E"?YaX|ov菺԰qg=pECF7pZ>C :8(N#82I-0VV:!H ^H3{KeBGm(/ˎp&:6/WpЯ (ɝ~jƏlQ9 4sd goyR )ANIi 5" NL[80HqmIb{x$%| qSO89Khaqbvj.qwi03SN6Tq׼{R>+\t`7_#XAď [@]xٸT uƘ,sԡ{HT,s0QtWW^LoPK~ _=ILcx>.ꁤA+]R&2߂6=ZLˑwohdESI?LoeGfmۙz[R!41U7[pHX3}lQkU; 8;rQ=,K^D(l!4l \ ;I"*=C0xSdy Sf,/C(OypaH"`=!ULx]Jx$=nv/`0 hj¨5\Zoof@' ڸ?JG_ Yϡ (ToĪdV['[jd!k 5˙r6QjH,)f~p'_`d3u7)eùc#W6z!z%#J SU /Y%(MD%_-i+:b|!P'rB{> Kn.IiV̻(Ū;0 ۞h>U%Lh]z'N!%hPj>rWEQ k[bT&Zd;B?)D 8k<)uMjƕ񵦔 M߽Y@6:F?<'Zoe5A5Ϝ$^L(kԥ/>"X=S#1Vq^4p0OI}( 'Pm? *8q2^7tMO7:y`Df8O Կlbr=_^_YِSE~ɾ%˟%O(ILA=QE#.cݮ&Ԋ'UbOoQx!{ã}<^Eܨ#hi~a[ﴖ}j4̹0Jvg EF0GvFRsLQTrf0| L ~+3Dxl2rWW}P4^ _}ɑtJ4 5$]A8 e(}H.X?% {;ḪI} K2t$ؒD[t+⠋Ʈ@=U5T6nkh!oO zinz, $"X/5Z }e^4AlJha,:j 7nL!9n %u}HE8K4, uoy]>m6QT ^eUW'~['C Y8Sy B僅}^>`W/VKGG7h<'4dž(W~y\J ufNg6r KS)aSya:vqZl|[S3 Xh_k2a5f0S'ERH3k&uGG,"'%S!l3>g,A$*KyS>tU3D,ӍD6%rnVXZ>!6@mq~1ot$VqSPAVSw?bTh7}\Z$pafZ!cxU H ىP*utqhٗݱ{ђ(Rjv[ob4?f%02F"tOo&8cݝ"f M@g4ܱWC\₧)oTu.W-AlŻH*xւp~y7(fh3~+@s WW5k2:yeKRATճ;4k,*VٝlX!pd艀d*4V3eP(ssiL[;kADLiTsmRmYsA gTS ⥍h37 ]c͋p'XZcށč_iTͺ6UdXf}8̒?,dL%o>OVV;ąIjFsݭe Fq^ɟX&˨#T Foy#qTdS?JYEGFbM=WE<ĥP+b37ͶIXT2oeICQ+,^:A瓋.1za{\0^|[SAׄ>fW)Ƌ\bo48hSD瞧XŌ Z&3< #Ȉf@*!۵PԮUHhE9h뷣Ǒcٗ_Df(zQ .,Wvg]!2vJcaqGMu(cs]ycSǗEE9uDNeVbr̸^5o2Fas9GŞ6q8=1oIݯeltJ. 5vm{Y_cZuwP6߂!i(౯14^k잉mE•v[ˠ&rs/p ~YU`[vt%˝.T@DqpW"^3I."N04J ̢O?2T8b=C# u)4w!H.\ ,P7^Ie?&MJճ lu\U c?l8wʰ+ZfQsʸ ®H@U>A=ts=6e\WvrAhI `Tsq|LfR㗡Scy_M.@;,eٟm,0`4"!) 3`{c_í }뻮P,xJ=wuZ6czYO16QU |@:4AkL hKr^*Hn ݌W4n2ۗ"{P,9s5w `=Q T UwCᶝGGЄL[ j+o# N2jGZdtz*'E&.qQtd$RobI|_ucoaӲߣSXT qic/SES1ˀ#].VSKn~-vlFKBtX@J.pw!eIcYuS E4m!Aр$/wT;}y []!%9ߕRbPv*(Y.5!?`WWs-{{BkiARiEH gZ]Y}Gc֥$ I;<' rf-m%r+| X{B&j[]ݺM1*wZ>Ijljt+pW\D6_ѝj?dE?|}@3QEo{lzW]NA"sdkDFG}t{+1 p5y;` ]V)rm~wC!MHeJf]?C1v8V;+|\t >UX@021;ͫx qA+"`mRG*KWvZ+~AQkg,(Ί:B[AR;ȯFo'{h<9Pk[+]T{G#B?Mp=zs$~3P#Q5Ɇ0 ZTj>'%a!\mbjpAjD{Bc3if#L#Z $h+5ED!^G f]PH{w>l{xDFd[ MM\hATPk*]S˼{Х3IUz{{檬&/'_[v Hz I/SW!2 j/_#ٴjxCm ª[<Ҟ$ͷPawcN( sr3Zr «kjg,$@[Qڸv9\zzmAE' 0 II@:3}'Lj[j )[%A`/ EÚRy[?yg^O}ABՂh2}Т4 zP@_I7G}HQ1_E3ψ^B/YFxe Ԧ,> ΕZ7Y8:L}u?sxKQ~8\hA}aA+G w߱*r߬6[asoׅ݄n~m( 7O~-E)ãa7YuX9E޵dJ0 ȕaӟ#~ { A~߻!09f(Sjn/J(֎;̫sP̚ Oxɹ8x[0ӝlz5o(i(7\QkQW|≠hq7+A Ԅ+I~Uaf,i# t_ţk ]{ D:S#yi0>hN5爛t zv'Ncptߪ֖d;*9[9`o[ȋOemLjvo$&{D[C?kChhNiɬo ~Ha_.&s eU ZH9OC2v7rh+xQJ(^4.՜1xO":Vlr `sEοc>-B>jRȾ@!0CH94 {: u3GF6 o)vÿ06X؉u,MB-[-&)N؀Ŭl>b%1 p0!>:J{,o̮oopt61"|J#MN,+D!bvT s/nb(Jȇq]^Xzj3ηY<\g*LjRYk4PExzczN0]KxT)&s'"ExT Mv _#Pě[('ngAJ rUy½XSؾ̥lWh OJl:TW\g잲I'}(jC3O*WI\>LCl7(вⷒ%6 ,{<@GF|RvAꖏҲ"_p;u; `EQcd3 0jvb,8ꀝ#Fs^?Y͸,k6~LnBfwɘ WIϥ3C(?F4ʋjq*&0ay[귿vj_o`/9`^ɵR+}cL3x Z1>Ҵb\@ Q/ND,K{߱[vCJg U%&RH<p󆖉qmgwR ,WZη K8|Ȍ PH_zU ]NxJ*|Z(~KyQ_8҆ R:Nw^#-WU z±Z07L\yۨ t>d8dSB%J'IWD\iyt8Y{XMrFD!: GJɳShx1G^V_;L'e ܵS+-fyDY&W#S~ ߽Lb!6\7_SךQcG@lԕc6AyTz\IAzc%3!@<,ˬ"Kpo~jQw"{R`o͋;x1r4c_X`5COM0…5x2u Xl ZWⲍr UՊ7Ak/Rw Ca}CU|/U >`ҚvwF^KseU8V*KV\!FeI#ʐ3̜W&=12^mQ3@ZrqcpW+Sd;\vD05MI;41tsUDIDU=Ga*: .6.4E3J-&MtXkfǻJvY}5m(jn^p{A@6 B~Q^CC k׸DbǐPgJ95^]HaxAJA x4̀&{ĵa h_ X|XbP~#'0yWb }nW& J䖲>;8Ac1,Q mk1'F-v)̮᳙3v7b_YMwW1,aiFZ9ds6Nn)cY1eW,'.4@DB$^$_oN7>kE: *F0d1Y}Tjbd v8(¼t(+ԑd:w6- ő滑Zc<$}p]ߢZ5b!rWMW-=`OsBlBu;eyێ;cX[Ί9)~XY%̩mBM$/Ro{qc%H*ߏO&0/GJ5r<,&Hv 5ݙ|I@wU/{:zyY!0a&9_L->Ճ"0U.P'.IBc{/c.%38pRjHUpya lG rX`mJƷ\[77 .?Z-..D7(1‘F#uHqsvKZom2m85לǃ?NgV0YK+̏*3  6hg-lax[5_qlo'R߉pᰉ#O|7[}(z~&򽐙?JAqK0m=@U6ϟ#8Yg(Xz)B`ͨ1NϞC@j1}SD*]^Cv4"D#Cy /S7'̂iu$2bVcq8z =yD{/is}FyDu"Xgw'TKRdӄe.\'L#iFR2l y"z{ڧoo=a|["w0eW,='vh0ݼ0(zQ^BW8b+{- q?I5Bz> ե'R{zh5!۠|{vY~L l<*+o"bmhy^^:J{P7nԑ=?8)|yTW|l-7jW;o=5#8"n6<ok} U ra> ' "8'_BD/uo@UwP"`;~ #Ȁ]]])H4jΐ$ ڟ柴A:_4%&tVXhx.K ;l_+IbGh6+ vU AST1sO]/Ccvd>~Ȉ *uy޶E }Y9w}Bn$+_!257ayEOhG"[]:k3:V[Hɦުz׸&kC }~XKZQo+ieYc]Cǘ'_^NhWM5 |KS93et͂%:I@nRʵz=ध\*ErPѼ Ď[; jY[VH]fȱ~M{/6gKfݮL,V-vwαy>$+#Jc0?\ƥR*N}NjVZ9W8 =3?:"ۑQws`,Ձ&4׸YS4c,Iƺ~8;Uӱ2*r14DߠcInUrG2>ٷH_-{ G'jaRDZ;A2YR~r逘-V+bFnHS ևE$*~U7L}b 6eemS@RIDP p ^6AΙ?.Y׈H!?4{nۧĴ.a{@M، @`7d\pǞh;np$ſGKCjI6p}TKtCI }Bc[L4 F!}UטZX~ My/쥋){Qh -6êFJV{V\}'_V(خ pJB/CIsS{nL (lXeh.2%%,v;U~ wg3Ԗ޲IpPYC,6 #6 dL3Ie`Lޔ|*X&)7^fI螪 w*n-Ch qĤWxt(fr>Y{!BG#yV9X"j=KKiy=}X}_9xQwN|@^7[)@Y \v =`} Ie-S|y_ v7~ $! zRȆte̯lR 95Q̅"\c#[\YÙN$,[L?Vܞ[Doy)@$hA3L-{[cB0^BT[r&|+>hXĭ 0 [D* '*1l%: Hr$r[󱝱i(x~JRKK}{Tۉ$ٲq[=#}ۧ9x >W\fS;d6mCP[HUD7|LTaXcWZ*ʆ0#)Zd(OW7YdH+\=CwD3f1ekU]Aɯtm)OdZuzvTZLa*+$4nԳVm!MQ'-Èsaa|Bvbn0x@sJ {b#V@غ}o"<(VcH0Pz: *PvjcʴSCzAp:!%ZJ{ie 4Eg1{KOSLo%LuWT]m9"Z̑-R>&DFI@KJ};sݲ'fJJ+jl̩pe:r!A7-s=.ɫ1B@"Oq=]:%uBr('O qu4sM48(V[{H]ƌ<MٻaB4YhB|U搓d,ŜW"] 9p Rper^7`~\~[R Mm'`"c L%8%T–7{R10Y#Y6DJ V q k#'Wwd侶^&'O)C:Mo ֐ mJ]ՒN;j?H.wfG_T-4)3?Y[Z\ԩAiGRHDqUn"M+5~-ѯ ^<(T;~m iV~V$r@ҵm&ii%=lMEy0ZH%3|6 z190X$YoנB,+ ҏCr_7Ӗx"n+=xdP=vfByjfO`X%PU@ӴF@Sm_F3Y)b}P*0KPҷ Y+Rsc S.| ፥i>7ΧiUְ^uwvq8$ӽ*w^G8m}6hbw 'cEڙ$oplݥk )IcnI-~zXN +n`pcXy 5Z'%lh\]?';$Mæv ;n֭3 Y.94_8?cu6}>뜜ϺZ'޴Xtn&ejpxE^fCѝ5+m+kD{XBt&VF'$ZDt*mFO_oG%&9-5Xӎid×WP[lO8i~NvF(KK_I4yyH Xc۵#RoKiA%d!$,G$H= AZUy&  /.f'@r3ykᗮԻ]:2yẺ^A+\@B >m^T(ou47T 0|]Q@M]>;aΠnHtoYvQNKvN,X$ da]6LծaW|q{?$av9 HiQ0 GUh/#EZ7E!DF-Ȅ}QctHK:~ژ_zJ1$c2l_F𜤎 xMGuƥ>;9MEGmt(8_E ,`׈؟O~4,|)tqBg+'2MQ_Џo.`< { w<#w鍊.s qU2%W[ vqɈG\̩֬38CE~1}] e0oΡEznZaęC9nG 0Aݐ ,Ry1'iO# "O>y _%{>n4I}Cw?I@񔀷!mvLy͋sk=h֋shCF&82Y.HP*saoc$ozLqb$Гz97eq[>j-'6g2 a8EXea\PCDѥHv^cwNpi%AD6ג|xӼwgBy꠱Ubc<a5NUkE1Ә&Ut|G;b!Q`ItV3&K_I%۹+nVHr5Y{f[NW< *~Xk֯gyrYWT9sO-na%bs4ў>9o]VŁt/L|}۬%lhT(¸I,OsyCmLPj]mFE8\Wh*n(6 o)KݒO6)8:}*q¡bӺd6]`hQdZ 8-ESϱΧ}Fau 9긍#zJSCPtf> BY?{&UbMY Mvn:0{kSH-i͌W[(eE n2ʲiFt)2+*;2< Ù,1FѲy(+YKIZtQ-5 sPrj#WبtY[MG1EzR%|3Ū^Us7!;3 m0`ǧ:/ URPMb Ĕj`f5>ŠGBIch5Ec;fjsSQh6t5{v\js/{4RhԄxOq8N}p畬sp@ '2#6=y (YZW]v<O$׶qM28`5]^#O)xa+MT{Zai;MCXHʈcH0ECJ&%ޚm9650R!WODKI_mnu{6S\(=V95P/;'%7 O Wa':ێO-ip,!%B=SLDb {suNz /eO$6Y2^ Da+^l֑,.U( dAs w2=\fZ(tr|#{}Mm& xJ^>!J1 gIlWyU()10('35m7߫&${) ܭV轗;i8؟T[ug)R[u CAi~CKzrb1ߨX?3ԩy'gU $-f(  `\$cZJJksbnqr9e<1D)<0z-r)˗,J+lJn1Kx"W|ȩZzILW{{:đ3-͛-S㙜-{!s(z}>4;_oyxƖVŪH*fpKyNY;]YWT\'AG޼aNߤS} 0qss<W"2/=O"RџWDz]n֤6fyxCƭ s޲`z{;Z. wqiݣ+>(HzEq? iHa!jqT*Ʒ1km=a;sw{(>~MskVp( TZ>uұ8q' ( GRS-["|!-.S&cJy]:ja~'XufM~J)׸MVc&{"!7c*0?qW3{3-\*}} ͭ_.I^wUɗK0DUʓ`{yKY+ v$sB$Z (u̪3%clH'DL y||$ﮭ.|q؍⮩aK8ַ2a6i(6~^B*y싶Z5)O)CIt.Z)_`*uU5^H?)a@$;D&3fK@tL@`ؔ K,cBl6GǷu0+ƒX 2F3fޢ_LC!t1Q?xb ۚN;Rd[{.^j@OfzM2ف[PBgVQ\(H~hy%I& @57~*<kQd1JfLW}ԠFiSч!v|1PGiR1ΐsbɔoF2tD%'DnE?K&Pus(Us'g Mi{I-"ƮB@.u`˘jM*/NCA1MeC+_W?H /6p.0R C$KT qdzؒ)F{x*Pώ0ZLCoW&Y۶_׸h\.uNnAQl4,KVִ&shXVgB>e$h kC,Zz E6Q7ZԌؔ]t_}n+ ,Wueo;o70d`[g_Ģm!+q*Ƭ@>[9!j/g o ubFd8_4npzV,L4e*38@u \{tB ae$msWd j;%[4% ϹB2 r jˆfb(` ]:?12H x9A+p*:#K F0S1"M"3a|b$ ~=&BPYEpWCp K;1=28[BUTmk9-sik *U"'RY<21SLI1g0bqP"ߞlN QwI/q;p*Q`5V㢸`6deg˜W- L9lEP6ź<ŁЛ YOJ?1ae@[ ^g۶Z?"qJGUG^oհN?)͌1.|V coyڪӁ6 $6p{I|X#d)T'? !;HjrNG 8N[χDM脆IKqH)=&YUQL{g9ff<݉6mF~,*v7$ az%ua> b4zȸ*h鼁}0b-c\e&tlILb :()/ ]ZΝ2JFʚѨ{ קj/"+ -6ayVSCJr'TeO{ez;20@h=܏ mN;boQ9$FZQr:ZclDuQ>A?ťqo'"/go.ʩ*bHw&g Gh#*X 9LLgnR*F}:X֩BDAǔKLjk6h [405ђ3R쇤6 S4y-\K Qz+s]vW@0f!“oIhvsWT#y<ĥ'uGaܫe/eq8/6fhnjAf7Qg" Z-'Nbqjb\=NF%V -uDMS Z,\/wf5:& qcg /[-k-|[egGjQN#S)HUeNS{%18h&e'լ8Ƨnd*Ш|`8q$p/v}X#`'λH\pZ[Cy@]M9A ?rδ?&.k̓][Lϛ KKeG (ό¶h~M ' eVn>ߢ'knGCur_K4-d5|GL]oH(y-e3X %r#T֔a9bA',GŷN=";j5\NCP ?7{Oo Kv6a U%/:kA he$aCoD4D9u<"ٹ7ي1 Тr aD+]![X1Y&0} Bu%Jn Bx>exrzb+H3HMֹ pAGִX$eIN t*7\bǶ'؏ >Lq폺 3kB‡-v,TWaYdzCv<>LةQp_kJ͘˿/Cw"4FhƊ2 aCacwZY5mG~z )Ʋuh;37ib=` -ߐ xH4 `UNZG_JN[06 DŽG+A5*nSFpy婑_'t/~2c4&JV~\]Tc{E8l,N+!"A,TÕ{V# `Gv} d,t/X{,Up/q1ar F7ߞ1S_Sah> BՒߵtdjUZO[$g¤p9I0,v!\Jwaj>7 tT$Fae!TÙf*Pm y3V`Up׈rg^z.d(㏪Vp5b* vޓ/Ëo#{ي K|V;k^AdGkqm(e v}g&^N^lWGEN6eJwZ",Ñuēr.3+)9ᬕّڦgThxV{KA|4¸!J?4 Xu|Uy5I ~_ 8cQK}.hN-a\ċae/ء3fe3]7v'ttyHaPVoa{E\/n7ZKu mCT*Jh/,KB XʆN' =t8៟ge_%M Gӣ@𣒤%l#ƎLr;~3>sG;P>5JI>9҇sW_.rO=⡚H/oMNSƊT2_cɐ*Ͼ,^*<z|Ee iؐ' 1-kZL(\\!k"Zz«=C\'|Sˇ4jZ@}H?{khx2a#T[r/ta-wM6 z|Dתt23tf/XLl$%B1zGʮVOדSe4OI5 o7>E%#\j3P]`oS~- ,Wn;KT8A),%2 ezMdBxEqw~ZJx+s!22F lvfncg%VJk2.둆-P"(ĺ{G.f OSY9_-/Uy^b@o%`nl♵c6~9cI272M'TC");EMpW~1%B9btS Ch؋T .oD^T>Z@+prD6ɸ?Adq @~fij?"V@7tMrpVJ6sûАJAwv w^d1a= ܻc%,^k&U쉊|pWyںȬq}gE:+?HT4(QfH} o (b帳 ?@1c'VE A%yHG8=P*2$o5J#Mm#r]Ћa׀ .}71\ROuܪNO5`"OŕHHO',z#+Wjx3A_nr_FJ]Uo$i2?!uV1!] @XBJ``@M uҾnЕ]ZRKA0Yp2XI@H{soAF4 ;h7ܼ46W.<eW..Fz>R(CījOx 6^&Kx򺢼gHpY\>/'R焧TZn ,n"8j`weH9w7{1hlhT6v ;kIP\ (S1tR\7 ոQ#nK)P%S!F_J>;yزvv*2&.m>xH/]pK z G>[Ƅ$gP.'[ 㧹Y[F)]z^6+YBgu"Ε fzMc*-?T-zE7q#Ąd16$'g݅cg}Y!c3m2p^3Dl9;q́*4 ҭ|aP խ-'(uEàu,3QSr8onq,)uxXH Wp}(vҎ9'ql-D7ɀ4 ,H\18uhŨ%ASԉ n:9`\5SA{>]k F>\6rPv[rjk,cNiÛxt0Q^ͽ$g? M=bO@gf?$ ]xIQ ql `hؕ Z:^Geb)o=st Gc?KK1h4gN#,-]9 ``!CTh<As<~VLanWC(8 21ݟv>m@c'݅!1SŘ.?dmPrH}fajnӏI]4P>$@klͽ8R4H#])sۧlNV&K>ys7b]>'h4n1$$O )^H%Lg FJ5te6d:v, XWFQ˷ɓ)܏ XT  F!&H?kũ J*yW wM~#1tEo`\}sN(^%6 \ڟDɛ?-rPݵ«ëԁH3 WBjbь Z[rq@_G|Zjf+4PdX+X{4&z.D aL㌪qk^9n/L_x ;]ԇU^.!r!/4"-C{݉1f@0/GO 2M*ϯs/`\ccy4sm6×Nu;T0qt{]܄;ʹ'[s >$c]a-/mѲ1ບqhc5jg)[/@ ڛ4IaH]o/0nfS(!b_yK"3/;Y˝>}F&C`UG"/=' Z.'ybO2k $9/_f~BLɌ Xy>0M#i#쪉(@l7mcxӢAyCTPIxf|jm|u$w9(Z5w1su+dQ7!r ]zH30,aPy#mH`H?[Ȩ'@|lai*f>0glxR<%tzvCF*{;CuŒ%;ksQ6[T-6Zm\u}XP)r5Hxڟ 7cyQfw3u,@tl~F,[=Uwzi 6H42(@\6_Bi6ےpMFP0B+?"mC~/9e]o +x"^_$ I4Ő@~g]TԀYg"#V',El" )l[>Z4<>(,f$nQB7A:+ ʩQ긙H-P? <; lSLfš}j1Zaa8Xim@% KȻ`&V騭~Y;ȧ-;2~E AzS"B_L5YȠ=hHö"8Uk7,ɭe/_-'w1#_i] 8z&1~)7jjr&BGj3ZoEbQxa Cjeqi҅FS\n l. xaX6VL{X!IN^cdZ#['/.%sGXJJ| H@Ƃ/f7A6ѭttu dЫEYUH 3ePWwB][>_l>g sJJH|c![b3H EG1h mC(2Hb%jEXB{b2ѕ;d yV nrTɖGʣUct); soAV⪾N95m^-MA_IV lsca}Lj~㝠B¾CqrǗ Yg8B( ,&u)<jH.#`^jYZeRGz2X]$tWVa2jH9L.-MD}ڇ -O۫?osEo%ܙKOeC^$Q=$%m8pMH( -D?6W݆ɩ58/VIt%OtZ(hla?S-60iɹG_XrCQ%T8G"Oϟ ]k4R^ȒGm܊ڡUI)pQt˕6 {?>+4tCM٥q?^`){'FZC. *Z'r¤>F;5~#iZ]N -Gvw_.wE,E'Zna Ѷ 1-mrnm|c I9i({`őQS MԏtfˆL gbUb8vdI[oӺSݦT:;d(A)Ipk2=`:̻`XX"s'oǕqG&.ϨBm2mPOU|q ]1QNO7^fa4ePDX`g$ @nu4rz@n[]kɃ;aY*$gM9QLbUcx{>}7mЬF $,ێ&:1b[Iy& l[3 xU7Ġmx">9XjI,)3Ɵ!`ZMn{@ς]/|f,o W~@!(1L6r6lop8|>T65OuRvۅHs/"$`op*%8%_oS?V'd I I\q\폩;c1[6coi'F*K:&2اw5u ~ _Ƙd^G,o|"p A׬ 0wG[NCYr ž̿[KMj8wHV}j   ϝ/^o TW5w'wbbtQ㩔:v>}a'AbS?ܬ/@ j؈u{@PՒiP(=J,*6% }f O$peGEG&U31bqC^@M*iǷ%+ƣ} `G֓J?V4ibgc>*yyt[Y/ȬIU#cKc{v>w_6/taXwޥYac Uu{1?NDQ2]X]X~C)k`߯9?N,5inL^"9 2MU`I;C&o7.[<s֍4u$6H$#a==[EɣJ-\8ޔr f̖UUhfR=*r4pzzy,bq%]՝Atz^T3L0$Z1QչбAz$`G99#Tw9̘?2}a75+Vj(-F{ ]?E0[ʓOB?!,>#TrC IjuL[Rqh{y_ʾ[rej嚗̥wQiF?ERV%ݑw/O[mW(@\˖0x"x8 ңQqlb/4ogH.Bg<$DZ|~{3/VCt  NLOWbгh:\ʳ2lgS*Tc5R5\.lj#o=l\bںM(ˬR+G콄 }=-%A7o$ah"˲*' |6R?<¸Pe(!Wi /ـa (+ə+kZaY(@ h`G5oI]fYoZL_\)2 C6BOF":`K0@_m?Pa K"U3d=wW΃.0x5#5rTit u;| b"_xT rm$FpR H@ &`1A I.L>AU6 CVlOETXI|Zbf)ruSxpyXhdSҘZr+}k09b;lbsR%|\{>Ʊp kkJȚfmKW#nUΔlqQF7!߇V>, RH?sy056XEtH]Y!-I'$77i)7֨oЖ,RRO~ߖFd-|"vk, #d0 6E>2f8 ħN__r;1A>t{My7r0Oeۨ=˄P7FV ,.Fgal$B};X @09]ڃZmx/+/mTH=l~bIԊ/AvFCAT;`iH?/-Q#Ou:Hj i胵V~Kxk~!*|N4ޕ_j˜ ENv/e7n7@wu (z:.ҁSՈ}Uߌ,M< 2qovdZ3n}-<})C{pk0bAF-n jHkߧEOqa~ o\ 0}LnPᠿ*1pz^oI$d*q In|Wi!w|~T $t+7NWy4ȱAt0ꚑ/Pu Rҽj3 C҆274]a)9 eNz( \ֲUL#{$+DFR B³ptoA)(]sY }C}N_`5ODJ)8CC1dS{Kglieh{ԅQT#jzrO6`L ό9csQET/l$sNd#bZ:E숳q\jl. |']&T4,eSR=spz3}@ɾ-NQ^RKh]ؼhYBHqb7ޫ&:U<-b\5U&wN^FBެ`G/Sa^",lvFk)EWmTF`i}K)(y]`  LЕFw"o&/3@[px֨qg>aTNd^V }yG` _n+YAsK{c3z!m!ӨRzYtݽK4(3r# jn|0S(:)si8hD$%tc."9q֎ OY¨䱀y@K-[MuE-P@%4[w :.Du(޻s*kΡN]Ed鱅VU|R$Jh%%1t!w o_2)w\R;Zx>'g:VrvdAkP}Ǿ?q4-V_"FxX!A`?{bk)`Ӧe\LP ܳq-1AUc|qRo|\^L n#Od)O}}G/yWZ@ar\.qBf _u3ZS{Td-7׶9mZgmՌHqx :+.aWoL ̴~X?dc9{~L'-֙Zaʈ'_n+ AN4ŧ?'xmnP jfX ]08n75#E&B<zݭ-4$ c(,UI߇fT3HlV>DRjZc*g f'Ue{+n]BB_>Vw5^_h 5B4LzN_͎!Qd1zy#Y[Ce8ӥ3 >lgAWޮPE†5uL~3IxZHXL*9ճ4دU':`MF ? =＇*f{ Q}pa7>pQnbzٵ[^K6oG%'븈ՠǓOp+稥>|; X$umBId;ZnT]!.:@g:ﶕy*ђ;R,dzU@N-68 FQB5b1ǵdkMKT!4pV|/̶(^U{vߩOLfxs'0jS*t5c^Y-+=` 2'٠K 8kH,6}-[wJ`CؘD:,?mU-6z?@3h*Y4I'˺ DCH ":יke5jN1<7)xZO2ք(HBwRohQ|LHn4<ЫJy:梱]7v4wYچ<8H q\qNĤgkeUjjq*/B2#`jKf`B!_u^n2-34Խ 饇PzSa5hFtCPX%M)la6DeXV,` pvPB1xo`85 Zl {z$9_yNda$M7q0 w~KeAS'Fd^]ٛ?8+d Fb{%U Ԣ C(Ŗដl|3<n눃 **L/)Ў Qk2Թ͎*8-c{ViǬTRbwrn04FӨ0-H,#^[?VAa1|b"#myй9Žߎ.7D(I$*Q&H+LLq_Uټx y0̷|5)׵1ũ_P-B%MWww~695.$Y_T̀uR+q"4\ɵUJ?#>T7k +{|-?G+I/[ub(iSycVu5 砥e WJ(؝y+g7[|y[Np1٢Fa2wl.DyH]'J]Zzh+]͘ו&v$h&m/fʣi+x@[*6h\.̦<P2V{gLק qD<ϋ{- >:kQ1̈́=.}PcgOFScm. r`7:I6欛NIQ7/i.kþx Z\d`0lcѡl5ߘΉOAjʋoiOtx2btB;G3e[ hͱ^X V8S[#5њٻB]9 /Jl%J~0` qaىxrʒ܇~^ʹX װp#k2.) ުscR() !\eBHTvs b)=Y96uA qJa*iiNq: ӧ,L;SϷUyozϗM3g5ڎHd<%Ϲ%ByK1PkQ Rh0P㺨Kf׎w@v԰MF&[$"'B,ȿU U,5eoat+`նiDF8A$>nywlCTFwEvhUWK2t;(=j|poUBΙl |:,yhWFTT&`=){ؗ_1I\y3 [pE iAM@+Wk{)B J(:$=M/T]Ӹ[ǂ 3?l$^+O>C0^jZ\I9BO*K\Az.F@m"HW@]0< /XNʉe;'kK#ҧ\[۹m z0yNkM.cT"o- @` J2r#u@ͭxʉ V@/!8 2bϬw!S_@(Cr{R^a1K\:hK>"I|>7cA._;)\ } O Lo:/' 0 [bGq=1;EV9yEtyXѧMdq6gg/K4'FY>rNXMC{GbcE[/pi-c1YĖj}R Qc} è?8OYp]V3!GdTQ-w-ˏ$ʛq4{źWmŇe|"lʫIK+iޛ6D F@KQ౮89f`@rfy[ꇝ~*4ԽZJaZοpMo^`J4e*Zh:JK%h^>ƩoHU brF9pyi$z CBTu|M!dkC?eosI¦NNN-aɔ*mA7G ;@zn؇ VJDt_Y.%RP(騶p9ļέޅma>`(ZxbEӻH5Ua@~D;9Z)dzV $c?FW7v:ܧ/ 3ĭ3&kl:KUvn-%D\ՙ@&+*[0#Y2x,d*mD3^<l(O{Hh1{{ glB(2yQ r馔4"VUU+;WOXe!į2PW&؅ r{!34ŊYM c>𳣄Sn~l F`GӖxs"&9rx >tP5nt|zh<͙.glޣ5_r7m\43L4Ҷ\7PuMEAiq|9oHC6] $&wg,*1&3Y~sЕX]oKn^g"0.z8 Үǹ]'-Ԭk>;fr y+}8TFٸ ?2^\B9mS\d(PἸؓEyĨiD9ϛM;Ƃ h(.G,frq ܝuI#Q H:e_X\bV/uY;)iy.ÐK/nТsp@jrꈃ d7:kkI]%c\~w8@Gqةp3<ѹ9[Jn!FᰗCzۖLߨ+d,Ƶdj]]o] J*{pplzI-/FqƟ4Ў >eJ@U$^Սtې8`>a"Y .qdeF b,r\=Npn*=@ ̧8 L0V 9Sbl4t_{ ހ]e^06x*-[;ӵ6 +#4@S) 5|. -$#4ݜÚ?FSNjy06\79S%OlX;4RR6SQP'=ӊcZڽl O7߃fm_m=OU؇m [;*5DL ׯ<<V7&E s"ӗi?2ۇE>а3P! 7+mW%UUѦjkrP]J}az@j9,~iJcv$ܷw9e[@{51-%Pe6aN:t*T:1;*` mX%iF@0[NemXwtg]I:] ?$qٓ"[;~1p;hعY:>M;?cH@"5&$_y]-7i f"r}P/oʡȂf M\ǧvҦM U'PxDw8.5Lѱ*@<撌!Tw`|(['~6`)iK{nVݝGzuݛoWqO=m5CA.0[-lNPB5b@8]eb̉ZA=0Ԙ!j/C! XR&,~.wv-)#ԉ 3[1-R /5>{^ 'u 񺢋 .hlB<1,Q[I..L7 /*rg8f#YVZ3aS?mbZa3W>wC2M](vx߮5g)EnqR)"Օ1LWiJB-0o+)Gyz^@. N#fjv+%&hNdѦXX*3ٕi^Քv9ٝ!|rKfX4 [/(o%ծ%#8]fP-4Н3AyvؠϠߎ`1աgl-ڐ3-F"yQv[Pz6n]_1,OMeCc  @Uo#K ڨ*Y:\:m!3K-b/fRn3-A,5y?"|~ߐ=]PU&]%G?-n3B'Rt]w׈; ( C*-#ɡ "bوͻDC /:eEw|K 6E Hd߄Vޠ(:뿸ƃp|5!}8iH~cjn'UM)a "1iV'+m~srL6qR6>=po_5Gj"y@qJ^`6G]nHy|a 9{<5lUp; w,2MYu3?* !15`oߜ^@Mi|0:E -|O.Unv *6 GpyyD?,Tp,9"Ä1x!&K2v >4ՈĀ00W`cuaxHVE_q+B_TM,"( zr0@Ľ#%{)-M⊃R_N,4 Vˬ #Q$nbMG|=FV| +`0 "Όbtٝ%ePٞ,va:T4 82GŦ]5iO29툛46-7q;Zm⼂I{GUBʸpKxu j~*s 'Z'y&*da^c[[Z#AK'(wޑ&lVyP ۏx PB{To3Ձc hwr+ 2krNÙk$ |9`&L 2q#{ YTPz_H2ɐʔ<pzdqtO8m ,O.iu1ٿ7'u{pcu)A𩸞 Kri2S;,/'tZ}6s:7.PQXt#hrTv͇B⤆X[G2VYKqO 'P) 5pUm 89vK"l>;اdեAq753Aewo|;wJi)A|uuTid'x;X~z>+֥?1fR$XV^v6/T6訄F&eIwʚ J}y?ͺά.d̙[(F(h E=qBohB.a5D:тMq7K҈Y6-vXJY,JFlj UDSU-}Wk^޿% 06%_*;ˠ<}r EQiw4mE%t;M">  E diqp&ԣ1{&䷜ i(T;r*o͗8KpL̈*^p}c*tq|D6 (ԞhÓ^%ky8j"3QpYxraUNq~E3F0V(l跹cjgtBO9-GI1k!Ԗ4'dK9?q|&oVb0D"srs,V2zEKPE*PufAMa $T5X.`ءϦ_FdօQn`9ks-HXLQ08 ppћ 7N߷K1QV1Ve=z3SA޹ټC2䮁5JH0>IVSXrbH\y>HuV춍Enz9uw5 E˙6ndzwyG}O&"w3d@Q< 0ۀ s֦J0h ՊkrzGӣq#cY!YmMn?a6)½e*"[yCao~ZWy-47v9uvZw2t},MxI.<~EIX#Pmq<1ᮔonCCoC˲<Rt2^^Mur=K,^,t+ɭ:,CJ{l?ldgjfR/ysTO 6[[eMɐ:)օ"UEN?y83!jgF0NOjl$}@);hXX >A5;G|IJh8^62)"ФA3ٓlΙC ?6ǛXu ̤AEko7EjrCca\h Pvhm\rc/okѐ_L%K[6MM&n{]>SGt.-=v$Q4dΠ6[`k̐:zSE-M!ԺE}tl z ]ʋqÆynm[= yM3\c1>V*J(|1e3TaεbWH7,!ZJX(xZ 98;{ q=g*S#~5R6OHFn>t4X{an=w f _ڠ0VHrV~Z_YHT7;|7 vA E(oћ:œ5te fKO =B#bqKnhOw;Zzf Y39}d4(m->%לeBs"9Z*T?b i#8UiP2UE|{(~9r5ɯ)N#C;vBq,k=)UwoYu;%M~8< ?ݤȥO}eR C_}7lOXEԇ ir#xP4]$zTQDΛA8(ck2`0YfǓWq =Vyn9ИSJd`jjG%s@/u DO6iݱ Fj@! $oEciUk.֑Mʓl6UL\~BU ȞaVVf7 NrѤ9y0&97@H Ba"-xTc#Yb\b &W"3_3sjIĠ(q7]ەuxNo]FFURπ6j[->C&s4 [[< *q g;NPѶMJ4h7us~]{8d$: Σ♹:CM͆Q#G֠2XbFZ«f4Dx=.%pܥQvi%px!Q ZtfVMm)܉U!RЗ\sۣ_e 5iQ%>y6oZ!Vϵbf|_VNA.*N7m0'K=t"%¸`dGn%:nq~< rˆKxќx۽ v+3BT5y}i`.eYÿvB S~-i7V(#| %l\ܤ +حa6 >2Rp~""-O[̊zhc*{h4>#h|xsFi}%L g|T]wv )tHޔhR:qo/V>΅ 9ڭWz;Z3g <#43M'N\?[m6lӍ-4LEoGlPįpFƭi1.ȸ_JԷݖ:H}T0<ৱ+;/iyr? 3hQ1F>xC$a]i3zPT} H\n}BK'y1͈S9➭\45ŵ"s!&ټgKh>b1 F4_5v\mFOr3خh{*" g-S/]"eD<(o@nlms>jRZ>F> QeOv.?iul(F4(%ꈻز܇.zp *2Յ{ >>0_tG&G`5{ӻټIt7 b=رE0k6'F4_DbPCq>'3:vK";[U MZVe,}L9bQS]H.+هF`LrZhx|wxYx qunuKaݏP4H,ik,HQ(+{^-@n0tC\ֻ$ѻ8cµM&])!MQ5Q{KO$<6(zPsH.lzPV;<XCzvgMmLTBR_[U`ktah&C5AY]E&! q;%Ej;]%4'ݤt(WԩYVcħ_;S”[2<*7vL8/[7I]s=v(R3W>ȯ*hz$QЂ!\;5!WǺؘ#13L]ݢSЬ R#gҥy]gɠʵ Vg%Yv%Dir$D14 5jvæVE^ r>۟74NۉseCBV &;8%/wcr{}A-:y38Лw71{TYGtA'a -A!uP{8!tr.9\SON-ưƭ#\m=91h՟-v'Y(0hw- kK4De྆SNP[!q93 gsmF'5cW,KH'}]qF l:w-+pFi -V?ݻǻO92Dב N 'Ҽ$̶5.6]\oK Jv9")WכR֕2_Z@Gz$PcsZ/+53Q_DSvқDrEudD@αk/f_jDz-j D{5Ab^7j4@|3nx.ꀝx*c:>mS(z; Aʦ6eK +$ZUUVZB(+$[UhQJ͒siWXQumM~e͖ ̫Z0 W)P+A17@LĀ-3eգDm~fgi>V8&$u:p+Gw78O P(@mSph,2 S45*Th zFV'yi6}zħs_ev6.Ϧy̟\bGo)7}UM_j< z0En}aQ^G =02*Mz ;Q *{A ? NqYJHC Z}5U*y{HPwpZ>icgհ6jQCl{Vѵ|~+Q E ;:@Hp+H43LʡR2+Ňvn3++S7Lt:3z{ImQ%e(P9G-^i")״4$z;@%=X ()QA)0ssl@4|o}ǮDj0y7:XS`ڶDSDSa7E-hhbbAz<O`hbo]Ywr:1a*bpi"fjݢWowoԽnjcm /< ,E3<[q͗j,k!n's>Fp?V6>K/dZ/pR̻oK 0vFڔ{?! ~+ebݒ\Ѝ9v%YRx"z?;U!Q) I~s|U'?YSNpz\.Q]T ^l}-&(4c?:G C:DZTb' a /9C -3^&{ 2[&zAKGw_q&G,=:uަ4#geͪGHXQYdyH6NMw7{y>-"k:D k^5C> U[%ۉk87^%]9A]\WR'zs^z87i3l: 恅M FL'8E>rկH|^]a? ~Z~3#4L΀|{'DcyS c` IȔ25_d 9Ӏ#ڲ^F9nx&ApyUR!N6BV~#GTvBczn@ f_':e=~i%sc=v32=2[Rj6ɌxtxVOisw$ԯ2P @=êQ%>?9I; rUCudzԷQ ,j6ju CŢG`&ػsg@=ǩoGV%D_dH #nͬcO&v cԥS/eP_þp /jo6cvF4}0G9Wk)*83k @p7͞P Ĵ;;xvdrDZF ڒV^'FHN~XK p atoZ=}̉@Q*Ф%eO!~g {OKc2yp$Qzv Y#%16H0LEDX˒e}GC}Ѣ^+B\ .vNSOhL'ɽJDx&C̃jB%(M7SwJa}ߩVeӛ+9*Z'AdUdc>ck MCk*<[DʠhೃSU{N+wuذv{ N<'HP),d+6 "eZHoZOf[T,~3ev*5)x#HnYaw[EBD45E- hF`s]  WhcmGi/IRbr#wETrxH *C5 \ aG!x=lC(^ :avDl%n~zQ(+M",W'[ڴFc[; ;)&zP!0D:lHǜELRҠ2@h׾Kɕ 6]`bڠycz 2.UOꏀxD>#|ާRDz*Q n o##udBnѲ:(<{H]Q}=8~؇]<9V6>BvU(UE LroeJogʥ`jkCM!iݞVG_. ~Mܔ*:J\Z4t.7cz[.WـڎwI$*#+b3`>Cϝ6'k!jl2Ր?g{8g4x G0oPܷHF3e,Z*oewq#zgLSq8t>+Du3'RLZ:!5sէy% 2!v뮐G4́{Dj tJQ+֠o[KiC ժ=%q2 WrIUBNŹ\ܥƹ8g-,܈8 w[޽v$nP+*ԅw?qɿ>Z$ `ϳ^}PڮBTAmn]lg)M!HdqIeHv=Xf;\eV- gF) .8Qr }*A (n7`BM|B_O_։zy,!e&<r6*f[h>^iGJdGs9o5$a[Tȃn%^01sX;ށnyKA(z844>2ǻ@Fk@[ %S#]q}(sO(gff#J$I?jhe/%*Npp#?C,glK6n2} f>FLX vڔttEB Kx;؎}Vewᝡfo4G lΗr]]f-YbF}I=yougr.>(Ճb*3~ gj N-Q7eQ:a}o 9gƓ ]Ut'r-Zm+CկUwMS'|6,>ӫn0ŨqݤxّH-2fs ::מBNez *yklqJ%>Roo/k4dr,l JîI4[Sɠ1?rT*' [ bJ9|riD7tr$yS |N10PF0f!rL,mY4}Eр#Z{*Y%t0$z%⥻jg `eRmdD 52C Y鮹p4|  HnO9Q5,:!0ӄcZ(6Vz23D ˽\AoM.OdFxwZ! tr-|u|١%t)ˈ‰\KB^7-O%õ˻:[> {ZXr k>6|BQΫw[VկM(D~\gmWAjָ;k2HD@" ͹Kr*C#+~Zf2qSR)XĸƜ/XmZ=2 > X4NE`hW$NMV 2O#"&FR]2vfk bcp@sl"b-^Ò|.޴ms ( '{\q?M&K JפBP(,Bk?3laQQ}G͛?nE3O$z`p6DW\ c=O"?\5*1L~kzSTb jEA8L9 *Nl+9)ۻ/LjGHp S.|Ӿ;ҤI\}" PN 46ʾm}uy䁏tW%֤tb.7,\Lt_Boe ʈJ$yzO[%+k4uAcfdۭff|Ʌ2ww"c0S"}*|Yh7;k W?&̠l'm{ĿJ|{]5^=g9Gn*ٝn`,=*P 3 [T+Es7+۴&x;ATW B5ɾߟB1`oYMRo']x:LĶXu j>O4PGylVO@կb`y0cpl(1> 2p"9UM%i59n\ DX8kD:%c8ِ>(je XEjp]V3#n<'6@o;Lm(~ᕠdeN@,g Ħ< icR4: TۨG.U^H 9*eYE.~}bo}eVͫPD Nٛ/MEJ2җQiŲXv;I }\Y(YYtpKe@+cK}Aaz$[V_ƴosm.7`[8D Pw+؆:V~F2[˛9;Gu?/l|cju fʬ14a8!15OhK@nC6`R-)j*v|UPĔre#SpSFE nBB3yj'ߡ涫 Vp46)1+_H:g5IԳ ] Uۉ_V)ӆ%[LZZ4KbT\N'WGPK d̖o8nncAHe#L Gs,$ f|MR& w!ȻRC :dKL&/>z0wps0${&[@\v<}TpFfx<|t"J"#&j7.&q bFpZ !EpRv)/o`ur0"Mk%vr{:Nmpufܫqc ܵgT6O.MҧӀraɐQ2 h8{/s%Ѓ);kv0#jLbT}G: aOl%L!ʭJx ԍ\xO͂GkJ& ^*O) g:bR?ʫFL~)^Cbǫ5 S4 CZKjρo|NL/P"VaDŎLSBFMJM;~?-"p`1֧S_+9OKōr f|z<0]֝a(2:b#72Ѕ!40دy+/%$U9.WeuCǵȉ 7`Ăqd)jMgj_bhZ+s4Y Nih9;0]%>T;fh5;բ}'(6e H׷EgǀN9~Ww ox=B|3o,B.-м♰ߊ<ߠM< BrZ=cl fgZ`4'kPӟ\w͐xDOP<ܑ͇ KdR`/4TKp'^ J7qL|Y8X0 ShQ a>M,X0 3i5{s"f176LJRc(t}Lbݟ_/^*\ӤTR4(@4 +=^"f*o@L&KJ;h8I(`I*\G3@-|S@nRm$3ݎȬqm~{ɣ(<٣Lb2 {]0LlȾ9)|+(7i,_auݪDo/nAi S ^)WY>늲@ ؿ5u}9m'pߺY`oZJιR6닀N)a釓os?z|98Ɵ?:%/E5|LwNk%¸VV F'N?*@-@C@A@1C&F1)֌8Ĥ+Ӥ[c{|/*FQPspcrrn'h;23CZ7"SF460{.PtT;^>ftor m|n SIq~`zC$2:\Ta ZLH:5x=B?3+v&ah ox尝-(S׼8 ,峃-q*Ǖ}b~0hT_|DxF7 FkbuTwMG]ȰVBa*0d 8nq/cEWWvUO ; oS#,XY$ϙ!o$$^'$cD( X*)PC@gwvoW1/U% 8B3/Feu}'OԮ2HЮ Z^c,/Z=&DF-0kb2~B76NƠ D7nw;a ܾ&m g]v%߷:`zԺG-XyC(m[r$F"4cz t\ws 45;%N <_E@Ρ.AEpJkZeL pO?Ȅˡ\`6ؾW[ɝL!ࡎ_ Vhw'ĉeΆvq^'hLM19+? 9 QyGdSC^[X {ҢJ*@=kNd;@kI,sy'!}uI;us>޵r=dD.rQ 4|UپVŒư칓ڍpk[ۀs)a #FT^Z)A\׈5p|/8̈́m{pɺ$6;\F D, 3Oeoˋx|5y^唗#e,3qy Qd MN@uOQ!uCXXK!/,e^[ (&2 v TB wluDUqZ{њ.vťA(:t .tչeoޯa7離*Q;+nA#tM7D!f\5 ^$N} yuË}N} \B_X[\DWQ*[P`^TV4ܹrEzAr:VJډ`NG>'?l5{2{r2#j N`̙y /ė!oUWPkce'\.Ȃb5_e{Λs'RRR-.b=Y!]D2*1Ka&\zx`b>+BPGN.fLۀH'c]d@ÔmrVzG^$o 7w^_ܿK׊ցMt2#il0&dJP' ;o # EI佝.ihx UVs9ɵltT \Cw5F\ˆdHQp̎kc] vըT~R*_Ѻ~wu)_piJE5=WKV)D@O @l``"eS2.^iL^a/uX"<"uK 茇M*zv?[tT 9E^{3?t+8V-ΐyG% b^4_Uz !NIT-Aմ,E-\Y|hnKQGSM vf)ߎ6k4*}b{-ߵ$@UD ݼZ/*p =r Y,җEUoT}4-![g9_wp76o j}Օ% NӳP4cB#2ASK32j _ wb6Iz'"lG151J@c߀ӿ)ק–!˽y@)Hÿ;$*1аj39?>cC'Qy0DU=Bu3"lkD7+,͊%[{!k1@p n}hu"i׌U[|} e-N淚[Ҿ.~V~m8].B3׹C\恑&Xx= Q%ϔlKBjRu?pmM!K㿣=,ʞ.eJ%C+m U#kF7鍤OeZ5r.0>uFQ YQ0N:^7-RemWȯRZVWv װ$epk 9Xw$(gqj+ࢇ ,WD{g}=YBI.MFH$E5-~L6E/Bx20]bsa*GjO#_HE#t;";Pc4D^wp|= k+{dsGBE3pM*b߇* |CGI.]i\z]-)o,mѧ[l=Z?e6Ԉ +̞'(zm}jKbKEkwZ:|LYmj$m/L2K!"dS#Ct+~>ɘ*PtvUf \|^D B]za t]PxI݅Kb.ă0CFK# ֽ+5ǿY,,$iz/}QؽKJ(VUpЁۈFMAzWYҐA]GK'&q-,4ҔZ"^2`c,[g3Xl&S:,8O⦖l?a61hy_Ză`eqMJv2Ax,/X;sq^?  ].tM"F3`ZBҔhkYcL!']BaJQ87ާW瞭vPU-,/f]A76#킥K Ti=ꑂg,NGh9蟤WsOpЛjU?C.[tԠ}yol|cӁ|R PJoxPs)mZJ[KT=Bv o?\#}E.LElm`ZhxerMZݖ?\;]3Qu ɒE[($港8#"zq8j'A-heO\⺆m]$u*,Kd?N_?c&Pn#ܐY$BS'#Gc;@% г ) aKL#4ׇvvUؠ+ᕦ YAUl9cUJa 5*p=FB|2bӆul܂r`B29 >S#XԥqkEDү RP|flBT$Bv$?t ulU!=7֦P(seɱOVcæ=Ld%B+&.^W%M$%0a+ilߗ7[=10שjH\f+qA{h·5pTc30-Hq퟾2L,Ԃ~_Z@V;_XwNKSкgFy/YmТ4tUo2Ie.tnKy#RƸrw^Β!l`K9'\y5DՊF T6V%2E'e|2LP@pp34>3hq Jk_Jƞe#XPTDdUy q ;)M]=k[hk?@TrU`HՈmr.|/Zzgu8D6tA巠] 5Ej3xk^Z(-ݹ, 4 N<.8ACܰճ7WWձ@NVv^.߈`c?9f6%ƃ.͟X]:=C kؽ%Nf RmH%zW=T-liq4a+oHGuc@k>0 9bI@Q8Β:nsrB, ԝNo&/O(7`#asˆέ+zu_m+||gN?=>۰?6vLT$ΩH 5+5]B$_jE`rt$^ WJxgͳY/nJ{$.tU/h@Y4;j<}_(bx*:hW,>skL*8פ>mmݲYțܷ~mkz-\N15dߐ=ryE&ٟ? =JT3Ȫkی/Vt.Dng3,wQ.KN)#U#xז u&ea}{bz-QYSJGD5 $Au1JLI=$R6g PQVkӜm着x!e1@bn!g'RQ %Я4.yz GYZO9ea4[AoSy%_0X~0EVڂ^~}'fٻ+>\_UBD֍Kւv` -JDDu924?ϊV,/QN خ:nˤ/=KzoʭDXmeU^8y67Y.狈;m4N褑~ %~CКknTi*Iʴm[FSN^KcǓmtV2P3geI .yD~ AH2Iidu/4S6,h&9sb(nKWRVD𹭷zĀWBYk\vkNQïˤ"P|(-f p- Xr\H06E$5r8s6Thuse㡬`jX^/L(\@Ycjg'3 vw7lzS! B.9b Tӽg."_72-t&^&f:ۧw8RW[˃Жl\-CApf~W98]u``^j}#FPǖaJՐNeO}WUcHGzɉ,DDJGM :Lk zNl5q1;Iٺ`&xBSAODl)|?y:thEvD%AN$3]aNjW$C|7z&EZSݛ- :!> KAb,7ecwKbo@ݎeAw̙mmk,DrLaȄm"E -rgsQa<&C:G[ DT̼*#ϡӂpYZ+rAQX,<04\n,k>ck3 Gjo_tI!$_!HIҝ&w M]HBB[꼟P^ﹰA}<5q4fP#v-@ G'#<%+焇4B9YcS.4XdVTտvĊQv<vK zS`҉0#up<~Ɵ%Qq9kO! ows JF3BV2a0YZ)Jq|3ЇVt}LSu?SRB K"ٓ'6(n7|1|Zvp]i"Tp kjM0 ﵮ|+F@U(`Ȍh$lpq i[y>o6^wCl$#I ɍz9Ngknpz]-rz%뀊4A؆Tj7o>}˶(ДyV5{:S57Ӯ)h 2BfP&ϧ-mg#[qZ6~ÔfiLk #wUk JYo$ M1J[bnĤ8Q8&5T}0= ʸ% 2ɏz~e0Z_#c.Q$Sr'5Rj`U@̓>\}BN{r"]yvVgJ:s! Sw=A-g畘{Ё7[KȎ t<ȝ$D=R&/ԢLnBgec;7?/:@tS׈bEpi9hc>̓{$;D}qm^Lmx.z\`qʵ3vEVD%=;xRx)Sv%) ړhze=@M J(rH䊕cm*C65E7u7|=:>nUY>e/30s X4b[ i:Rt| 0}SdO i[&'8'pM. ( ~\rm&+* ؓq\`]ؗUO bOGXg#DԌhI-G2a*&MȆ%-)청Ǭ^  ߬ͶƟBŧo; <E@:4/N6WļFmyjBEYDy}7 !^К7NvZKE *3ҒՆ l`S[obJ}0M}0;B9!HQu 6 $Si*uϒW]AF3e*Ű&Qv&7|Š?rDɗNA -Jnӎ*s%S;Th]8ySAz>= 6Ýo{-NH0Xv=6:.2h~Bl m( :_4+C9ޠ$t+@ &}m_5꼇4ig]F› ใx+$`v %[~)T.2y3$ XuUR> wior-RT#8:)7L}I8.k)NϠ} m} l{$tWs1 YMTmDUnH)mkѥk,YXL2l,Pco?ToIw{ 3UUv [4  ~b*{Ll^uD%=DL%qM~_tMWCUŜ܌g=u5w޹xJ{ޙyTڄ+3a1֡>ъ?br[l*x/Iaw9!R Au40,l9CAv'Hn=ȁC]dy/ﶠFOR-O|jE4N>q`FS9tx3M2 + |ظ#!ϗis%4ak6€q~)1c~8#q낔 KpfmɅ#RhbmpE35ӛHٔ.eg r+ [ku)٪sNhoℍЦ)ǎ{B:\̩JG)îf2AIG';mMTy/ԣAOgtANkˢO*!\ޭzP #Xr\(mIk+;[,ݔ(_٭>HcYphS)V'XgUoYYG306ĘLc6kK3| UWYՏ]uPݖ', =)_mP 0tVޯ޼Y&nG!1Y^ro(bD2@#0W &$ p$!(5) tMkmP6NH=ǪxـjiDSm'fȩڿEܚMOď]U-]b?Tyrj:$_dB.6| ě>COPc8VA2A"[ZV㪓}]SgkW(5$5>/XFF٬GWv؜o۱#[*%O'/~3Rkݖ3=o5|*$]"0XCjEh6eKj0?qxa+&lEx/W6 ntߍ- 97C"i!V`qS S~ ;AG@wZV{Q%.(, ;_]%ԾP㢀VL֛\ wt9[>w7Y'bhzϋ'Z"$4wgy3:$oP{[^Hj+JON$f_ >$/X@4#Y<#)Kn;]u#AZv="y9YXhcUk2EȽJh+Sde4N$oԊL аV* K7qROF/oJCJGxV*R֣ AX($=jGe@}\\'b}\]Ej8ʢx-srO+,L{'7À@(_ jnw1's#-V!G#s2U@Z!Eh7OWэ2W{iiv60}{b<y:K;[[fQjovʭdϓ%KuVSjf$y=b"ѷXJ5}fyＧV3;f`x|A0Ǫ,nҌ3UߕZe9ZkUjD؎/{:0x]^eb+z2nN 'GAيqGQKXqIMQVDʀʋU&0?mPmSs+K!>*ވ`W;+^hYlGhX9OsBρ6k8Y<̈=ni19^!4蛾Ӡ*L="<;Oג|: [Fӥ?Cwz)# <{m27Ĥ ʧ'Zyd TQmU?|KМ@!;?zdr*n^#o䦕-+;||U319%^Nu8Pdha hH/Xv ]:]h"VǏy>zw4{;.ǙL~]C9GB||'9D)QSzqZu a[/>d닋s$xV<ǦUMO皲*EIzS _v G<G=KXJ3F7Pv)xJ;25_.WE 0TۭYDY O@iO9s+U;uAFf{i/8Q*HJC]^iHuܲ}|.K ޿iFt(Xj!BKVAс(SeéBPR l(Z 0,@'P /nF\.y\/:MjմCє)z kex+5PLZUKnXa`LˬR p>Uֽ{Ina`-;A1C0[L?#Xub7X",_Y*ҢlL'K_G' +O7U "\9ڞOo" 2&`O!a )L:~2,MNj56BQ>_- ևr{B s&:DIE"pI;|~ƫ?xTYdk%@ {`Wi!jީV +-JD۝P>+,]q7>e o;;ޢx=$m [r.:6Xfe\si&vLH*D4Ng>mR{ .6pB1FKF^&O=Y8>Pt/mq$dP5D:^ E~w1I}o]w/ 0[^>r(l1eι]aE~p(, wA=>M  *PbKh<핖t IꭍYIdI5%QQ &lp%\$>VT 2i5=N܏Qa(Ƽ8')t"U4}u>f?z2,6èV& xt05qs6V ]zU;x k %_yc 5T*J ߱亏p}E_-#yƝ*"H p!#o\MobpR٧sutM20憄Bر W7 [AAcB7LFf.yE=n~[rw((Ьݐ㡡@4{%WЛ:J!| "|飬Ջ"cufl/8Լ6W2֫&s,$-R~$os50'oEn78Q# |JqcO68-P}H,vkX [WEbh`eڷB.9dkIAŚu /$4apϊLy{(A}Mc[C3K]~4ֺ'rTbq4mG9 =1CӺ.PS2H,P}0EfLe UAǃ@wxmQ %??IiG2f1SN,ą/,9̱,Uܘ՝?K^q5Aگ,MM`.G%iˤ~ɽ!D1 r{/: {*s8A_t ~%&^/ u]&-ET5y!}¬ҧ)UͰ-ֺY5c$\0[Щ"ϜC8k8S+&(kۗoM$0>`RtnESꑻ4C70c_n["rJU:KMTSɿQUӆ1t=䥡q{lMiW P_(6wIqKK k}g9#tAGR XF^N;%q?;:sq)/Z1A8T.Ѥ|jW}spҹ>}Spz,AAJr[޽a1IJ> `Fus5 P&(L ϸr*'A{vi{'j9MmWJ6u{`,ե>z흁mP(\zZ)žuC.zVΛ]g5ZS.KМz:pL!,OxÕa!n8{,Su+.HJaq#Zsq"15y|r9vݠk #Ԡ&4wJ>c=w.poU L=[ \ïVVTˋTqvLVE*ks]3oTw"zH*\Δy=j#'m6 VzZZ:r񔯿0q̂TȢT@gr.p/ :UI BXck%*ؤ3.1ɔtvJ d7":8L~ ٪LtB%Y嚎Qb8iưbayw.ng(U!o$!O3\DAvW9Zp]qK XM4%/&8e0(yZQGQs#%NCí?wF7N|mI7!yuhҫWAJfh,ktI,vm mUi~Ug%ozj=\:5cvLϡٌ$Cr "ZHi lɡ{ts6uw0L$igv2l4jiul@0fL@Ŋ~:dVR>LB-F r-e.H*"?JS-XBy0u~ n(AiB?2wFҀi+j  wH^F()i +8Ax-r3tz{&(|'+^QMFrzr2lEXJ4sJ]Ǥ~XgKT Y$pzR<>Up T,kaxeϣ0 dfYrM 3Ζ7Y!Ct`id߷Dy:9WZR2VrO?Ix7^,y *5.6 Pfօ C[@NL{2O c+ҹ|}PmPK8BI,$Vb0Ϧ?nn[Fg@fueCa%&z(vx_+toYS46u[icSM*֎Q_96loo>5'R\Q&:Y\r%.揕 ,-rx#CPk3,؅p`$'dcGp5f#͟T^Eccآ@K%}zmOWatx4Ρg/ 6jPhjC;\Рɰ)E^TyyD}yv%$t<@_dqS!;nj/8i֟M]C,ըYi}9UhYB;ע ڎJ 43Bzs ;`u隈 X1|ěgF|4 ÀQX6c@XL;" )旝qv`1d+Jl=hY ! ~}gRu5DA-#8VնD8K_iNIL?yyN+j}#pLn8]!}H4J5v&:PP&>LЍgl5GpT9Aqb$tDC.Ic|=y.# 5`'UK~Ul<_O ٧1ZU0FkP)_?l—Z1VlKbz@iW;ƀ4XL%LI |0kz.7#}/Âo]1GRlà)SXLƨ/lTbDx$XuF5 u{)=c[W_5H.7~KX!v3#)5- DEBG]/%s}L P'ӫo=VIg\ϒ& ͯ@ДV 0r9̍;DU/WA(g@}Z|mi7 '~j4g+:}hDjӅ1i92KYKqFp`;TD8y(ۖ+v&Y3U-p0N̼k\mѤaQX fq)|F̪}[NCZоm0ӽrekNwcdj `̫| 6 PsIvfr(9 X1F0)Nk`΃d_ ҉$¡#]ka>Z͋ڦ_˚ٶrDO^JZnوQ&dd|GdSa?l)4~=HLؘNR+U# gkquF=Ϊh=>,wg/qcq/z-yfĚyAΓY|1%n-޹ 5VkT/c1HHdHe(k ĎPX.`K-z1IgjvXX O\Q :EP$E cZ)S&}h VL:ZRҎ*:s%vwVAxFIwM:*~s/OO=*v=cOMÇRSAL("a; %O \\ʞ0w 8iBFDt|cϸa;ƌ 4$n1n Π6<[1d+w^W9\d{3ğ ab;Lݒ/QYPya)B^[XSriYɷ%OFnnd#e. O S:mr謌BStΏW=sC'ۗBkfgZ#9'V& K bwK;q.))=L'ۑ ! -HWLk -u,%Iރl>]o!@UU'8~ Qn52QΤ# -,Y{j ǛxBŅ%o4Qӣ. ߝض?.'8} x~-r`lhb*`Y>fATq)at4.I)5*+ f"0!r^UAui՟>o\D^@;'\D]eQEBXu ꦘ}r7**ŞWpVP*әڠ1z9wceq$da$[R-lR =v5Joh8bSF.baQ"t+$bIpS.~uBjxIF?Zp0z[U^lUf%cT܃sŕN4:i#٤,++:;Jx#1ho5XD歼)5[ L'rw_l0^6l)83績zCFjdr҈$}vv;P;W,4O)?'=3#7p>f7Q#d *d,ҡ.nTcv\ֆ'=3/UM^nWUhtn%f^^T8$%n D@؜@F58W,*w?ٔ@MvџepBΉp c!_Hʺ5Lj8Ɨ귳{85xocE `å[ubў'mm:"S3VXV>;o2+(y .ۍzh'%IvsUx?&;u3\e_Ra'"ɏ7)aҺwuUӊzR AP" #NGEm9=3ryǪ{<}+VNXk oOݿb,!_[5;o(1$L]ibSIJsPc6=MM6z (E\1َoeSʽ%WIBfoY9|V}D$ ұ@)o7CF16`+é\60k@3~>|wLBRDn"dz*ղ}"Qq{`Y:I Axb8f 'F r s]8А",nу5v,p6Kí߼0ήΌz5#~4͍Fvh^ X)g=8|^Ҭ(OT{U񯮦djgŜ&( %9lϔ| X'Z1uؽҏd(VRY$y+I ZXlclhBrvB6soH \N&b褀َFx.{әԇ|f怒VyD(\׃o܉66 Df;J yWrrNC+<-'(9^gUIO/(ǃ?`!ޝ? eҫ+ rOFj3<ݜEO6Km( YGT̙}W1@U^LcR H^Trh)B 1P=ȋ^TM Й)H PkZ.'C}uLYpF0 ^.=-VH-SՍ mEy31 ك ؿ:I[2&/6lOμ7F0L ] ^)'])b9L ǺTQ [ \b]G Tu­^f;GISKA;xDg~s8NudS=L載17[dR҉ߏ"IYD!8+2__F̧6[8*]b^XH+es6 pE3{boF+3  suFHg]$9D󨫑M'bQD+FJA 1Hv]w!E\@Q!l}efmWf-ub7` Ds:<ǡ2̐]d5م=}ߞ%{-AVExObݙYNY G^D׉|i :{ح參Ԅʤ\!UTȫ3L Xw]z@ X O><D T$ ˗u'vQ𛭤.'<DӖeP/[ԃs/'t(-bY CZmbS_H@svaEVpF5T{2^K~}~LZxC5m!}UCrj PzA@ v9^ *ـO9m;/S#g6S7Dk:2o2ȥ+$^}@ͽr82S>™w{kJ],2C1FoyW4fxujʞO!9WD~J|-˳"=1"tB-R0ѽ /_n5A(K/WXHDll_)L;&524)-w`?&LSERD > AO|+~tLt %pYY0-La,99W}#yPrg&vW1&o+yk8jhu NJ *ig`p&!Rw<7P# ?)kq0Ms: 2ىau0Ւ'%$]<^ymj}Zrzn(GNxv ::OlT8E;/3$ֵ5G%EboOpm'4K~;V}I,>jyoL] tCƒ}WҚ Gc׿Ċ9a:eu.4DIS2-m?R V/$f fim&@-r'LC$Utc Rә@-{cH6pZj.wzb= ~J9ɲ, MAXQeĜA F٦o*,aqK4rsH=r/S/ГdP(X*$ФT g /ѽ 0pJ>Ȳ OW> J$p<.K ] d{͊(kR py?]\%ߙ/|wU$LbJ~Q!LlɻREuߐÍ^tE_#3/ߝ:pi"ODrL+uRd(^ǿo7Gφȟ!дLwm@φ\xI:\ 0c|1ikyC0@Hc%^A%‡3q^ӃB%zyKPވM¸\!iXIV2 l_l[+&]ͳ Jj3!&qQ ? +USZSP?$3ʀ"f&! zVQiRm.p2UF Iw[v%:ƬSt~',& x bd $OărZt]C^yQvIt %o|!d!0|}0ddsJfΨ o^V=-`ur*Uu `q`D)ۈK}e;s×pyI!o5$nXG``a.щ5+ -md=\ʦU`k'Sy 4wn/ =eRti1dZH{+^0N 6 x9)O,o!<ّq#vZH&t hV(yPvD\+ВNMw6b䉭U3Llo0ɠ3gNp8:JXTj/BKC+_Qvĝ<+Q_`OUwGoVo1Xtd@g0=}̺xsU27f)լa> .(qb8sM/EfM:eTzGY +N#m0)#dfEHjCK:j,ƹ~I>2D9! k֗&t3vރ٢3 pz}ݺ|;,maϒLo۝Uc91Vt|Ү MHUIjTnNO5HV*/+HC!;2R@z2N]XJ[%<3˂O{uK9w}hqF.>Z{X.ů tkrBJRdu;AYyJr<Th jՂaX> yf2AX mq(WVauʹ!`bd&B>ڳ)OJ)RX4*'<֚s3UU3=61ȉYnn n'EGZS+QRtML5/#]ܢԊ*#Ή]UZڟb}eRG%IU?GHl5Ve(Y{S1uч%% ؚL5_7ts[H=ˋnӀ8.& 1;t~ ?6I7f1U4"4U<=[QA)h uD u& и ۃdcq_3$)Pbq7\h ofB8M?@e?wa:gWvEm@*mk_:3Z^Qj8]a8~lm [/pX!kuJX :$绹~apkBd(7>7dJo%k  */D٦(A4Kjlcn!޵;#`5_]^zٍ17c2laJh/jk㌾-F@ Zw+;(hssθe,P/ޱ{=zǥgZgsU }(X#x(1 2Oytٛ%^vvt` $q[ |eN4Kϛ)au&;O\v5}VnůQUЇְ6YԷ+LĖi )9xlKI,Y(klMΛӝipvBZ.uz`t5 yoE=5~L nV8+ Fn-XwX4yh \44J !Vו3*;1<k Qࠛzrt8Qa+>.фg+-1Ez:-g Ww)Hn[4n 5C'6 6sK@/#y `띵P(yט#s1rw&$3"PfIg -8#M;T7ş,f*R1ҀCmEa\~H2eٰũ Ŭ_K@ij[Z!\ԃR8xrܟ΋ЕvG|pK=O/k `|xDO غ.7~]f\KyIc0LL#6 kTD?nn++>^aȔG)<9@dF3Zl[a{_]0^X|EXρ]S;4m\u3!#Tևdi5ɠ" V}+UM\W4b.}Hג4E%[z3`S5R MXKwtz0´ \^$t@0XB)Rnr};n~ᶟJq~5p *fx _ &,WO kUI7ChPėk d|䚊.'h |lp 6#?hq<8bm:VV!{ ["S:S5`yN2zZ?vkQi8a S(۪DB/hUHq<>Y_T@^3(!iC`w4y!'6d}4 ~f?A.>̴d3щecbm;x/ХYg6NI#--x݈ӿ t1kfdULf}&M"۷gUsGh YptB*^1,bV|0RfjlFjZU Fqf; HxUC`ЙtvCF+ަd#;z%G4a}="Y(b09ޑ(`}N}V,IR}h`49P3;Օ[;^l&HG@~L<Ÿ];0ǰ?CA慌<"P @' SzPd/V$X1(SO7_Gui~2v`?NcL&v!Au^3#v23 ӟ0V?\{!C[Nl[!@-1$#w2yRKٔ…p O/A;=#Y/}¹7F[EzpF$Q L"B/b 0ܐ?1 ׋$FNZC2OQ,lB Ҩ$xuɌn_wo떨RyHv|/Rl(ˆ۫ʯ\Hۨ%uOSK;&z( HB):{cƮ8z_WN`|8#o۩ı}:UKlu=&  o+&y ?{Ed9Nc,:D$'E y&;ϐ "3.@_1K_L2 RF8ir7~/c7|:uL͆( <)<,r T2k%ةl6.\O:'8>Pat8G2qzW6uԳrG"*.U6 RW~1-ÐHXt=%Vd6%kA*hN2*HM;cbt.24ZBeKzPE'Jm0ՒB蜺H׈GpK|kgʊ j-4S O/31|@ѾZ컁w~$F\^B8X/(&'2b6c<9H D(&R'o~"8DžHЧE%_r hGԭR#SQ);MiЊo82H+{ΤϣڥX_/ojWGC{e' N1ȋ-HUS.6qɘ|t8UY6V^O:yd cvKN`AKd(oP܉Khiw3V-6Ҋ'"G OȪ>fOz%KJԍ<=#E Lч2 W&t3 ЅS|F5}Ψ467/|:3aD3I;k9?>B gzUL'lius?,א %zc m"CMu!2K݆~+I8rOk5 DZt̲ u FxP@ž%;^Ӭb1OB(Uqӭ~h6͆)MVge "n+B81_YSo1T{E*lxX|h߃ Әa@ЄQԩh|}.f<,Ώ!MiHx\0rk$XI1-Ԅk9bLh* c4:?_}l.֚>x 7N48Vu'gk_ DK\o=%@?nS*r[V7)?BXԅ3lzx&PMf+ ҼtF66/jݖRٜ#ϰ* 2E"O'"IϘ_S&"(LeY !9']$:y,  yL h\5ud;(AE8n) W$!`<1 X9^,,reK.{؇=CqR W5/h1,2c3b3ljďu4J1*2FD>s(!3 Quy.%)f}1 & l :+FD\u/}TB-q?EtˀJէ vmmqWٴ``? jDUg&-@G KWI7-zYzCW@AfM S<fObw$lwt0[8KG«R&LpKIvm `LZ6;t,rօ@#Bz 8]Ԍצku1Xu2)bf>GB陳zdp`S _.|[!O۞O<{}օ`=:4si r;uw`CN78.l`?͹I>?d[MI_i9jf)܍ųkp <ѥ/α*\nт\@ :JN"Dff@xT#fdbJ'D  .Z5^W⟱4/񄎡-SUL1Bd1& ..Chx+F'_Swo}C{/jz1e55VǔƠl붲~#9=b,-䳰3fƍRXTk(nF! !6lױKG#sD( G5W4:7~j2Ð&=Y7 u [[VG4q,vw̵'-W,Z;o9ʆ]7Иwz''&/@Pӄ.˃ߠ(;S.7,/$Ր9=/ l1&?o ?F;oDn`G˭Ո؆a'_N\# S,!qB"oj $/9wݿDy@Dd]nQf4wKb|rBNH&ߩIڠZm!=5XĻKa˰Z;\Xl>3u3 ߃aS@Q4 zm2MlpH3B㧻z+WnL\a&Εm֚|zLUIt>s `je8cpX]<^#h|]4/RԌۢ3Sd4> H5xTv0ՂI]H?G}sOg"lļQ+UgwX#oj#aL?4~[X3rE `sJ>w'+9U.:/VGue3~6&HЇbWlL6ȗgNh5 >EH[Ou:.zJMzSKagf&DbĂ 4<S:ԦK@.4sQ}`TU`f"` ^_*F@ҒL" DyLm_Ry2s$-~ 7KO8bs0Ɍoml{9M ,sрKˆ9c5B 0izz)Ieg-+Pݛ&i^2YuoפC=ZBN[C+  PߒFUqzb%-nX]N[Xna\Byث'~bH jY } i*tZ)Av[c'z.KS욯'%. !φ7]bwx)@it,9&A42)(Q<.WA5/jr(;[*lѮF;_kaa|Xm 7~~#ot0V3bK1dm_bCMX- ׈@/.>Xklo KydA 5Djo}Ƌ #6aU^`cSZ=@Ma!ŸB(pǜĻx`s无]f{QibEͧl)ĩ8~*AUtυ=VJ#K>?8x$SEp~ \Fma珇by#$SKz0_h ^3c7:c65뭾**oV`?  W| cEvگnei^qV1 whiڿǭ 'W6||bRtB A{ekJAEyzȆAjl3|P골.bkmSĠohqisVWUW Ɩ]nRT/nC=ȼD@GǭE[څf(1o&,5?lfKec՘rm`yc}z`WU`ChHP̏vV&bXI[-;突qDG;#T] -y6-џdg]oh* #HQ ]zw0S9vm Xx'V~LtbAUi'Ġw: M ͲKln^ytu<ǂ?DTS(z몌H.CWUXVwiMB:A҆WE ]@΂Ӥ^=|WTfcv,'>>CO8yT+ eH'xjٶe5R_ڳ3WAm$妗FXQV#fZz-s*(鸞ڝ#yUoQ/pװ zg \R!$fճdM wq)!N@@ci溲$ʑQX|M{S7i0cTtfQ:١YDy4 kC%X :c pqDQ>k8)x-$`{245˩J@ضGX1 ]Yzd{䍱vȫF;jO jhAn7lAߨ4ؔkBNSS3h*_ 5],s2 )ĜQ c/q!b㳿ؕVw W'D P7< cr_/*v@ DNI%C3:qW5VޖWd|˝sJOgXl<-+ 41{^Q#, 4Cdbe*V}i.y5>Rf3 <Bߟ@zs(y~Y(^K.:? )D ,{iOuilp/fZ BLG/@ġ+f(AqS*ΕORЫ +\cSsi”r+TܠC}͋m";n]SɶUB~۳YݭbiF r^U?m:iZ &A#!^2iAPP+9ΥxLfD8ҘǕb(jphhC@XbMj{DZ[3 ߿)^ʅd ĹFټoatXڭ͍)yY&9V>s 8xFwU>Y-%1ZI܄X<⚀ UN#jDNyOŠ{.}iZsR&C/'  NAJD[M6-'EE9rWB&S!Z+zӱl4veH:'\X+B++Gص㟻5R3LM"N`d_*#ǪsqaaΔ:n[z"K8yrX񧵍G0t4VSlA4klR-HW Ն{(s+#/0 _T6c pm=wX!9 ,R|ڊ]f- U/5fsS<|T)6mJ)_koKN+E6K#Gfl_9$ҟMeiŁU M Čk!g;DfSq]-.ApZ_P1BS}#a\قZ e䰳FrMOZ 6c{PG?Ubnw-p{ѾiR/BwI,iS9s N 0?'2G}__B/>:4HxOj^"(뿞d)+- BY>z6xS! cν0,+WqC6dK#zPf-G3?uɷ;|"^TXC^CwJ0sY@Y bRK7xC%;fȇN v-7+C1RĠ,! KZKCvۿĐm"ƃk'f$ k`'ycVYSa`Sk5 AlwA%8<Jvm0uVUS{bz 8Y en֬y6`_ 658!kNP1 EKfd) OD׬^ͳ_xw'(fq\OĀjѸWM,mj:*_&XO2Vj% z^b^)ұNzƛeB[AѢ14SHU#ttc)nF߾ܰA~*>J+{ \Y%-`_{ ?WE>y4KBޕ;vZ)0-j?YeUFMxƖS:HG>%`VЉ9m G }l.oЙS:8 - ">P#TA~O!|[YC>%J]Z&aCHiR4aiǭADy+\ح+bW3N+Y7B &="&ǹ>:A <"E@o*x|~Ip(ueڭĥ7nQG$JF,9rZ(,bTT(C7q~|N3 7(0&(^`TGO8Q-`j)R4H: !2cUHh" Ó]ja&P6/=zEťޕ)LJ9%4n-t+AA~˛v* {B0TVd.O!gbt1{NYf(޴&l`&%>^ኾm^*On@x@2 rܐ)x®妭Qlgb<'Tj]Vi:KH/nԴ A7(R.fV'O`ecvgp7ؼ999Dg_bx+3ÿm(8'P0}9Bp`Ew:('F %AIhbf@TyVICy\V~C~T+^Un\1r$ĐajՃN,FBzGi`Nێ1i\ǂ|QbN 3O] ,Kstťpu8eys҄RXU "k&C;KWQ1 C /dкHq [d1ޤ~ #Y pCeQNM*Z=8^QӗP)d}n@d7APbigCНlt.RVw :͏_ۏx3exp+c'Fz R]vɨNe^ mg%Ӹ􋟴]$|Kݷo(R[]%1LJ3d}]/Xzg1.u9q-ٲxyI57Y*@3v$'b95@t"GÜ\Q鼔0rj5`l{]I"א cGI)( a.*k0t@;,R;=? /dT2}5|lIׅ0TTgZysQ,}HjLwP vZdY;^jH,΢!G4gd\ Ac$t)=uNne{MX!ˌ~8Vg5N[Ae}ڰ͡,xXӯ)ڠ5-O +) ,\{1%%pZ:ؽUr=yE3uy '[b //NR Ȩag{9[o4k- CiDx7";x_E E=v;e?\3| pVa.q*hL75n@8sH8W@7f $p74SUWjlj.g#E5.9C/rYdw-Jσ V9 \MxںIC(yRL-rV sh!:䭱dcv}uJ.GE%Fc%]6Uj2XLq7\C4nwTP;Erx(bcY_p||Bߒ_<g6[_6XV{_(%_DO|13Ng+zgBl]tQGw|yfKtSn;e tGE|_fUU<#S224Wjpetz9^?EGuDLHL9Ilʒl"l7.82ރ7F*XA-cOި^o Aѕ$۶[Z>qGE"Ȑ象<9)k }Z;1i+坈_|Y;4X;ǖ֒瘆3,܁k/}LOOQӇO Rh/˅#4T=AulM Q銑2&0<$4%߃rL Ɲ-[m#܉ı&niuJa$Ek1%Pm(ɤc..l,%@>^y]^Z!pH {"OHD$Ŏ!O)򵻧pd5 P2F]5~ۘF◞ٵG'βPyOۭ"ULe A/R"u\RlsQ4M,6ҁήMަf6HBnc?rvp/Afab%2dcTS6^/qL±=laKQQ)%߆Qi%)ꦷOɶh@CX`;HBl׃{'^ۭA'܎ .1 o8ʽTJ)IK}E~PEF*;w*K}mEf yP*/P(X4 j|ٜ'}9[j]zvZ`CO͔V1%U*Rߌ۳ٿf.2cKGݰZ;!E~$*h_Pv(E7KϪY@;Lj%3{g@G1@bPZJPSMQ摣 C9PWsN17.LWb$paCZWX_a"FfrPR>sK)Rl-ԡ%fxwZ5\ח|-\ ᢤΌVȕ̋OSHo#o !wga!@W_-؜= NXoO#0UGoLa_ЯNwNt|fŐ}NG`'s6Cv]~$>ל_Pvqm9"ˇSճ`Z~Q6 jhv8hi(X,Kw2~*BIO1G!Jra=*`L̞V^DZ@\6td>zlZIUŖ d{dtKF$Ӣܺ4`2S\9>%&kG YhCP#& X0е0Wt,DM q?dU^^GZ&DHZ ZU ~wEHmc@ۙsg+\G,ӈk|:AЄ.(P9|(qvEtexL[چ.df\.͎l셎0$lA[> RyNIq7oFuW~٫^Ogއ,o(6Q={)~u(-ϣag<`8UnB{s =`@D={n{FpnXD&D,Roy^ 5:xkʻߜieFMg=X7ЕuDȹ-UI,Ɖ1LRPcHS2bJ'N"ם.>-{Qp )%TOR= ?MbYA$5r.%#D,:w\)W'-op_)L2ɣ}JZ y .]CnEKzddN4f #cy ^m)]uG Z7|-q F$ՎZ5\EqKUOIqh~yrDs6+Ṣ_WMDk2 %TW/"&`: }KpIW8j@bgN8SmH {h^av,e+سM(ա1zCtݻy_ "\+Vj¿2UZYRKL 'f׵(\"/hEzn&S I9k\ڿ-zwew_5mCF]p[ײٳ6(c*6u>H_2&edTk 8!MKDOi҂~aիFcOp:f #+kU9t./jR@Yс^gj6Ċgk6 9gI^SdUYѩ`0o3!b`v{'*OhgD ~k q/#|y7ʖ.ỲS]D8bDoql}ĻC2 IՏCiL/wCKA+~=5qhڏ@ 8A;}Y׊,lp}੉| )NF2qj$caeikEzV#}@f|6K]?;hyKZ̿tX&o=IYhp5jPaNH_mđCZx ;m9r-[N v%Yb@NWh48i̶p5n&'&Z7=om+ԑGl_I[R :!:ںYby}w}L I_tH.HRZ۸`CmrOeSIf sH2ڸf,V2yHdžH$l[7da%('U4gf;Q<* SLoa$QGrZ͝*ͳG$;9)ZX$mAm-u{n8CkTXzHmh.4@v9KjSvTYuK+P)cjK$u$d3}>4F{FQ6'0Ha:G ?W)֒hmRZxTqe-3n&K5z'Z a7ќ"\?Nm߂2ht97wBGV)gp@VUk#΄ KYi隟 M$.V"w}n iH-ƒ)'3i4o4r_PT@j]P8~Y2n/]U$Hg+ȍJM}ocM k {՝(Ø6#S- gN69eAh!'Խ;V2No?oQ5[JYlr< ƮpۦTV@`PgBozS,Gjkĺ oBc*ُ#ᅅ!1uaP__eUuŔ<[Tv)ЪuPh3 έMBʹUm(G=?%4I MLJ/سEYz U*5={iGog?rX#;}x3%,M27y!9l 2¦0x0n }GS'"Cgkh;֯LulSJCZwa>0[w㜙s{PUsN(>#00PymmZgg1`KBrtK kL@En3l[nAr'Ϸw-+'3l&ޙ뀦ct~о.&9^)l0Gp%n5|}}sG0RG2?^}V{n!'(MBf#ox3@",::Aa/ ~)XD+ m=wpdoE>ߑب (ж[90 mijUU όa\-Tmm\_b&y.uwVP2}tjSkvU@ՐHo-v~SْL[bzD^魏=}ms@q&ޅlj_@D3~̟L*GC];=dXU:I  u_ ņCÚ"z}Yxڬkі*NnS:2DJzw@2E'$j DL2]3 /nEoGqh[?0X|"Ч#du7QN] u]Óa'b9&]'==3Xk,UᨨpyH}*&Fy3[ĕth8?~PGYP|B%'=/*Y(:)_3F`@K;ړ}w\ZGj-Lev~&Uդw @%0fFJN^3[ ^ªgۺ~z~ u%׳QCo}E`e*wrpy5i|wRXloe[8S ?Iob"N:[b)[{Ҵ!Ӓ2p,2GJǰ۠G>T;1ylZ4Ư?&[h(.bdOR8.nH#3/Epto~L?LL o&i5' k& HN},1vdݍ<DI"#'삊"H!W{*f<崣YQv8Z?{Šcl-fD|^nL 9(>eD9X~թ k(ϹtvOTh# p)>Au"Vpś"]NÍo|}%t_U9c/;_\ǗHC6V6Ǒ:]K%4"_ WƼ^v ]Ža>Y&!F'{+k(ul- )~j;L[֍kv!: sgI]WuMcvF7]d"A{ͱs^`"A5̥8_2GVj/gu){3~.ek$ L+Wn F!RI\J̠Ks8%?+C?Rcw3E-gE{ 4 *hةp2u1.~/n!9@7T|\k]| u:])*;3](H :yNG;Ȋ>M36躸}uhi4 q> #LX?2sv l+6gJ hIk,bR2">eKl/o5%%>Yn\5`4.6gt+Jr`Һx_=8??CiSGW5QN/b1G"2+Ԧ] ;AMc+j/4n:7bxMҼ\27$pT3dltLЈ?bEȌ )G~J{F L=6tX짤(Fi8o{B.p>uޢ;@AwuF!:z5xn &ƯE7%#t+GhJyڞkqV o 8Tcm9^ðy?RH+N@Ȧ@ĸLS8!6c@;6GU AmL5@ [ #"lT}ͻאi Ҧ[/@nS ]&e96= %~i9*lGFrHX AO ~s c!NSS ݲe?`Jjs(#b?O8jI5ˤYwpǰOr^6*PŷN"k2Wt*n7Wٞkߧz+)#.4i+\0c::hޟ,)"qX10KLJVΫ^1k20PۮQPߵ8S-OV"7-,rm{ Km} )~);I[M,[WFT1ҙB][;c 6W+S b1x0g^҂mYxp2l55i%\ɟ5i10(p!.L|hD &^kZ/-Q 9 XO~Rv$}e a!&fV!8?HeZQGvvW <E(^?="&- چv!hfi9q 8!>¦:E>X\AV,}71HfChAқ$UdE9lMne ,3&_fg)xsCͤ7t^MH*kֻ)D->c#[H)^ XZ$\vRϹLߤ 0Y v%T*emmLmkTQ7Z`k~Q=8e)׈X|Rm?[y^<sahcGs iM;"_E@A(c7L,~u^y/# !,ݯjX1-ʉǸpdH£'b `C{s2mӐrJ*ڈuH] 󉢜&zQ= ڔ${&I;LOZ:=Oj:'~k"E1N._CDzc>FDz=2c PX" ]Aj;Ҹ:r}9_#1FݺptRCPZMs` BEU6J邧"a*S>!)њ# 17;ѿREKE_#k\3?8yBl{%/MNNDog[&rz$ךo PDMi?½?/(τY~ɗ|8m^;SܯNn)WN/ZQ6J[6?VCrטL6J$0 j-;gBgMgH1rR5B&p~NVNEp'65a{|r}LB!^$HI<\/r\5G:V¥@>uago%umeRmSK:4M|Vq݄O @f(Fx6y@tև`8czAH2YLJtvyjd;Țb7Fhi;H\2u_AE%⋴A%QnY-V#KR`C?F,xZ^q n;h uwLs׻Ѽa፪(y/_OymjL׀H%%HMp1.LGyu-[xMjͮD_< _b甕~kJctpqPD=t[Cs%tv] WL^eGC= 4TM@vg@̬UB@z\'2;lղmh/L3@f%+V Xi| ¨6SR]-ADn_;`D-߆nB6\\/[E_U;8袋&,jO ,pf(H0Ѹ#)kF]t@/Q"_iUٽD;>|=F(fBLFSU+ex8CZ.1N 0宦hO2j1/8-gƨJAT &\/om^~*t3ch~z.PvC)}HZ 1\@c7j a0N6e|+u tL4)7'ڋt 򕹃/'sLyg0K4Ƅwdk߸Js OOv:b$+:|!PUkp"~Ç枰MOG)P*ȕ$?@/9V|Apv?nPj [#MVɫ+:񤿧3{, `6\gQ|L!h},-BˋxMDbvV;D4Ə5ء5#}z21UxY>[UGikah+.PCa!wuLAxbij$5\H1z,$)~XnAі>Ӥu})ZOl:X5 H_/5Liу>P);kgU0 ,E/7~3n7ܲk"f:59s)|l?T*| GNXu^lu~ɇ9h(5j$$a,= +@g*ĂqLJߊjWtdՓޑ|sIa ҁq[]"$O-5]Pl)'fJ-R<>3\9M*wcx!; ,N`}I#=8;.*h)GLTLy?K Bc-UbǺ̢,HR`cjZj`@ژj&Apu`H9lTل80#貎4)p&˃[K9R|G CiӚ~|:$ԶnSKm$w:wnT*g\itQEtK|1'VkU&u>a+>l8Y*R BTccOZgV4/V )=)؜s3R^8r6Z#*i75#%6D'q9}Jr}Fw0<} $ r/e\ɲƬs4!wֽ9 PDr}M VW%ҨaLhٳcti/GԆ8F 'qK8RO(ZREp&bh;nB%j_sw)ٷsUi|r:ptL0W̮X V*$@C-xMOpE:7}6NPX^%+=)vc;HɮyJߗL‹JcSQ`)bu ]9HߢaaI@$m0'GcbhvK֑^}Idn4GLd97xCc,wCd$zJVؙ-`N,-8ТE!6>{P/YvT S=Qс%ޒ@x.jd~$1J60ȉjIuryM,e*LެT{C?(/SEl) $gp<D^s$BLd*}Fw *vGiε@;KB67l!1:=*B{*D%Z#ڼCoD;a ^S|+LIE9'fMwLs,1M'8fhCm2Cz9 MRFk;XǞT4jsw=-/u/B'](AA~:;xcE -;+NDHH,]ח4 Lqm#- pe*/%.C8d/L4U+fǹԃ!78H+ Ihy7vv~"+/ X#R:^#pN6Jꘊ>H+tV nNo.q.''LR{mo]+p"GM O&ZIl-(Ijf!dx'e\h7TײTzaƁiG|:(^[Lv೥_ֻom @"^'i"wmnT|jC!EBI+bI|H#^&0ӻ>B R2:V}o[5(OkcUDWJ^aa>U0X0~8f"oM7;>Y|&$(C.4ʵM{кZ&ϝæ;qov|nAs$%:)6MyY dNefO!ؒ Kn$o#X/Iid[ zy{8M4-9hIRMnIM:<-ۻNHc=5.)myiaMq7QHZ3=2,+>) y" dZ_`xdnS;]B2NXOlv^uLZy5}؆V L߭@f8߽ 5~HQJ`uiC=^f6UQ}BS}Azyf1dwM6UcF`c-,?sLJlb.5*Rx{NP=UEZ!rm8Jh;{,eT = ˣi 9Jwr&b˹{li"ThG*;0ByF4y#iҦ® ?o=7AŬiPRK $!`Y |S^,o0|E8Xwt>ŪDm%i)RZ=[P)} o3~UUQ$n#t^==&xm*"[b91\Rpn),{< q%.qe5-+4ʍ5}e|&xwP~ʺȓFb9|0 :©f4(_2+(&2 ΩEsϬdi7CiZ-O5X&(&A+-g+8sFcE6݄MzddI%[Fs潟$FGi&(jNl.&옙f Ω-! +{;QϬ .OE޳"S؃o i>_ti*+"gc/S:S/lZ>ޞ;'?5tMF K~A.g_uH-F].Wrs1Gw(mW$djZouk`V.(IUVStI$ELfPJ7s.f)x!vHJ PHpvhSVE\Oi{+ /k.ySPFy ItƮbiLxy VY ׆}Gdbd*2ҾJ]D^{3Djo*,75ygĂzk 7j lt$y=zV)@uNCE>m%3A=@nݷ/RoU 'R)=r>ym©ߟ޲Ɓ!LMx?,UeIy^+v¤|f[B0No#<#:>䁓u&^sH~dW:σxygыOs' )` a`S%pvӁ-P.OC-),!.ݘ">HM8|;?h2}n2Lа"}4D)Qi~ݔPi5:{p%;>3}޶rˋ(UQV(ρ'm(ZA R"O5v&\%s&p3T͛R3ԂkФ@kdZ6ȔߦtLki{ LG<4D0~/;+ZVE:|Y9~][9aM soZOu0 _ r2 8_wG.mꋱ}%%`W@&.  QLfI{Q9qݐRBӺa<(MyYp]Y l8sb^@ɩ@FȂ؎ z=Y7ҙ08 w)}%K5ѐ'!+,qemF|zh-9&ޯuLڎ(I4'ۿE9ZTcikvY?.9L /Dxd]D F!ݍȻC҈=mRuzW0(IUF(3d=yIʑ;[, 'mm1K[g@},i{#WhrS f,:_ݖ<$# K:g}+B3zyZ/NxltnjD2=T1jU/a킓G,,E̚&/!9yd*̪*ui`%:"0/+F[D;NGӞc za "D%?œjRA7pE3Nc9"˫?h]ksw߶˼U'/t-2dro`R lYaL$~6+V԰bJp ~.gu.4^v5 Mض9LZo fs[)?""vK(GˏwjVnQ.KfHeK]+"%9rburF̀x˫eW۟G'[>T1 mHuUjl:ƻ1./X;JYeޝ=LH[@jGB,aBDpKNm s_ :oZsg. n^'iWw)@7d,RA"CʚO%(7;6Re [5+וlj `]{ kuABx;Xe/ 8GݮiÕ3J>^ﾍ'0BLYch0cr񜯺kآKn~+ra;Z[dXѓ?0i9ly:R7]C6>ƃ"KeT}68,Iܸ9k\y7ҹ2EuBNx3^of}QXaF]p=s_ KKCFیJ^Opr຦B +m!Cg1;&I r?Np$:SGь@'fX*ċ0c5;J36ھ ͧXPڂX(}˯Jజm+x mO,3M +v[#ޡԽzO6KxI'!$Q6KKV'ɏRPA@%+͢> .!lNRv0 ' zu1: +U<8gBA@Vk DrS6d3K|YEay,]`Bi6a,e;ٽOV&;߸kpOm5hʛSL73[LOeF.b|gaCj4&յ(4Sc EZ}bt,gCmz \+PZLڠ˿0]o. 26sjv['~ v1KB[>sW;rtXݢiJSbƀPȭAzeHf*OceQFe$`8EŔAe@kof04aĄ@AB˛̠}/fQz;GZ="u$_F,c\g (waI-:ݯO7ܿ_en51~uċ|rhjI7[onl1;$sks>} vuQx0/\$^Ĝ}=ƊNoT9 d䝻{-ㆪM6qو)1ȳB4jΥOi: ;PB$~DZ`>Qoo0ZCc% CX)@e z_ mjI`w|V`8 %LTXdIYLArhd['dž)րp-ng[0 # n,fﷇж?0sçSVzpjsn[aKWnFFG^ǥ{~U xS'd0qHQݨ^cjzReKA|Q$g$.O2 $U!\_A7."F`~xq8Whreڡ,~(N_*)% _K$g|!"=Zi h Gx vWȃ$hK%h wDMil홵ח ~6#t)4-(,Higs8VL9jn/"tjQR 3Ms݃n@^h}'TAu9f2kE0Axj@j~T VúLzn،H G,{O;s`| Oos /lܪSU1,C΃0.$wDҬ&JJc@5` F>uvt%2Eo0^U;|@H@",t@e;)}ƈg*OwѬEЋ`([[@xRv'{;Z9k,v3)>MJV>^fH.Jr?@(JfͥAٔBlaH҃Z1k] [Q(zP,Y5x͎#&[״B,=phrAL2u2{`*ɒo< O;es69n Vg|mMhߋ}pnbKVģ*# LhS9 ,;n*D'6L mR)EտFWUSB!.x?~ƤUӴ#ئLBCx!d?9݄-xީlmĎPsA>!` _j ǍpJ* =r#t7k\NQ̦V/;.`[x7_'O*zw(3,䄨F{zMBA`؂~*]bm't[g{`6#B$ ">F 3TLn&US,6b^0F`D4_Ck -$E-&d+w +:Öh 0T4*2n֒-ܿYT!~K2[hn$B&uT`x;y`e%3s-U,1ZFm՝Jh2NE9 bX/5FH!m:>43nu/t񌤘1\ArﴎMaXb]ԲK;%טCS5&,57QjOwqQUH=b]#ctEN?4c4 D]-Qz>Acj^oKgytV,aֺɳIһU&O "ywvz6Pz.Ah:ѬW?u<*o@UL֊:_盯(+pҐݯwKG*9 0 e:+5.d[I u‹Y0V4ܲZ}T-0Vwq`*=8ULpkS/ѐYQVT0H$ϣ1Z’7)NZalDIbҮ:UHõTm.\0):;L=-<.crK|"il`'hfͪ!2(My9͓,,_c7zO)wtQ"A~f2gPH4"66!3#\dT_i-tWڦi bgz"l@k%{8A t"/v H᫮A:4*:m'ytݕ+E5~&Nm*ө *1Q:CET8Wء& ͪzyHǛb* [b@ Lp>%ˏG›yO+89v4QQXP5HE2f0b#xMuRW@s8lג=)Y=])D.z J j MgÞ!pթuwqPX)DSbu5uca*CJ:$`bIQ~Fғڿ%TXJ7aaP9N!oQeL?}Яr1\ίOET;GA Jr_[  2柟j" lQD8[0m~H#Kek@vH^!_9Xte:/C~=-68_JS'] 㾪BEP4PeN S?`Zkޛ>U"~tH X2+e;M5/SaM.I- VGwI/*dC'j,YH8+Vx5 %_wف~]:Odh͈x0H^[IF.J$:mt9ٖٶh#[iNooo_YC'8ԉ4sg {?y{n#aճ}g;~IwC҂aAzbN$If8PI!lERIxPmno{ qU0')8)mjH=[qZa)'Lľ:|Ɗ̕'uFk^*X;c/` GI@aЍ" lJf"įܐ̰iZchXwWk-jIz rJZ<4mѣf@ *K$mkRWDti}-Ƿ&@|mAl߻JSai.D/).l} ,_֢<t"CM]4ucy^n]po;YԢUHӫV]36֞ l 5i}ʇ`oNtXjkgSqHix7hOL 4B=D~D5zRmI||ykC=_Mgޏ\t4yJA ޘ!iú>R<4}).l ճQa`pq bx_[Ef'Ji=o+~Q}T1/ lU5PAu3BX'@3*rT^DW_i\% ˎU9p^~쒈o9rJiR=`(:XSTZ =?1*9n>1xm".&@ݛAP\k")ʞvk OO5tؼ *!|MOkԚ;:%]X#Bgr)28-ygu pCI^{kQq)*/ju1Dt>hXBeAMHA]ZTQY ګc?߄ Vׂ'|̎a}ՂֶK,pf_ч`WV']tmg 49NƐR kiy|Ԣ%QCwJL]D}. ˨Y`c"! .pse Y<&)Nhm|j^,].xKvLƐGܶ:jOaOM~$:cbWjmkGƕD#EL蟕A3; ǝ81:"!Qa  zQ\GϔM!D$Q=g+sԣ;P"K~ٚ)ŀ %к2Yk^͈ jY5]B{%,G x) |Y+qMj8脢W^BWVRmpChmM1(I95;08 @2l\!}ڃ>yh꺜z4'ވiy;0Fm4pdt5:Cl!GbmG wR#5"#O[,t_QPsrU&~*@(@]F,}hWTXaP=b){nFs[oAjxPKQ8I )\<:k#Ѿj|WpJ|á;^hj>mziIaBTZǶi*ؑM5"kA]U lG%2Pz0hN2?C5ԫH0BfH OP r̓K)e4v]k =&niͪ:7؍>F0Ф/ jƆ$v7Z;2QR4$4ތ'bt#L!p@|My _ZJk;m#8@cտ뉸L-=f+NqDŠC,zɑ]N56|~(p}cY As✙+3ynJqx̍sa${O;y1O(OXW efh2ٌcxnEj.bYry-jNn#$gk8!-`n,Q &q(]YV're?PHEW >aBbzWskS •HWE7VȄݱ&ȯUѻs7wm;A~Z|'_,8UP򳘅 guN ?j?_xbvͦZW'7pq" %_D4%TBE$x僕%ءHSeYO k߼P2$nV=ϋv67.u@m6c0 h٠:cS|s}JH.ȧ36Հ:x}_pEE-R1y~]/1":O=R. -mҁÈPÊ;лEDR&L~xg !+k85pd䱫3-<0gI\"BIP}5sOrHk],9mh/̥6IxoZ@D}1NC'X}eϝsMCհﵴ!q |g[9Go~, 17rԎ~t7f ~ϻ=F I"]gρ`@AdUs?ZzbL@o>H[ :Ý8ŧkkيC釓{-}|^AV!@7qLp:(5!kٖF+i\^i({#H|`ezLI@D!PSU 31~wRI'P] ENK dM'U n0v"nRgS*Н әwt|(60xPMծ0IC$._gC?Rz;;zr\x<3n/?s>%;U!|>_`K<~e O/^XRm)1Bt 9 {Wy9L0r2V~ 0 Ke^WvoVsm);f~63!~]^JNɩ8$,̳BhkWU99`m~_G)On_Bh͞@=Ƴtw1{{k:K ѡ:A3_J qxzmGwp(?HpVP{z4 Ŵ4aXqy.YV!O%t9>sq>Nlf38ƐC'E ';+DJX)i˖c.^nң;cGLrv>a? 80v,j/9oeCLBvg+cS,EM4=ś@I[{cpp R '=E9SlHSD/dw8EAwGiOC~սD0+?E.hʲu[t ϼ^HQ &>MSeRDq[7Ќq[|kWdV'G]g"p8h)eHKckWV9(aKNdH_X uyPg42avt ld:o u5unN 0**Gؾ疴mI`R\\}eEzit3h&(b`g.߶k2D0!wN5ewjqc7A%b} i8_g <%DC%^ױWnwtpBBT }ۼ-0'6!dG?#R2ؼt+edǙX}*L=:(b^.?}֮i?aOA7BR1:Hkeb&>XTZ Z:Ϝa=~'#Ԓ0QDZ:p rƛ5%) fl w1 I ՀgDTb/!藽:S!c+ 0jp'T'js!n׷GDḢ[tv0:n]Bh`'Iu%cźt*ηԊe>p'L4R A/gt8QK8݋%H F {N*& ʛ@3~~P .7+h,;T")w苳wQ'X33cbAN;7M Ogp)` =RZ 5&b*W̅l2i:OH^t+}d:cM'zxT_yE݄z)yAiPf/ՋMx7 l~[w4d}U^AmhZŽƴdg<+BhM+nL؟.LZ2:wXL xn~ ;fmӪyC%DžcĬ| 7Wlͷ&&ڋE&.R'TUQbEh(^k>USO q(啀TŭW$AHU0𭼏JZdn 0p]xaE!dž)X/*T9U0 Bc;7D,k34闤22Jgi3ſqe 8;Vǎ#,'G8ԭq=&YQIm/`@(8o)~RO>V,[@|"ѿ7~Cܑ)`M?OXe;^n8 J\sƲ&:R 0[ut{nz-.nH)ENC@/R|ZKBc5Q|P Wrp{jYܴA/?S"Zr{iGFuni3)m8H[HOSF1a(e'˛"de_urMsՊ=P>RKNv w [(pR̟U'W]=y@V}BpdmlwLݹM1/'IHH+;lFRw20ZT!f`JLQR%LVxC-L;+N;#3yg`V2%MԓnFlHV g,h2zu%NˆNQm)Qe1kqL!Q"J%;x^xMD.&C]&y"Z5:'::o_LdJ*Α=-=ȯ7CKHУm-I#0mo/WkZ= Nayދm<ݞ7Qs}Ȑq".[ȷ@Σ_n;^69š雛zI7F+K/d$2G'Jƭ$J|.Acv('h{P41K '62\YK(j4!UR7\a p3-,;)P>0vcCluP,]6Ĝ~n7yn܎&UhX@ *dSH%MnI%4dfyH<B&,U츊M/xh I+`pp tej7S96+k/.}Mƥ$4n""ϧZmI#ldřbt,>+ ϋb e.·5(ژLaJrju}~ .ytyZZ%%h%9&ױpb׈va(nhfAQGѲ~.Ё3ڨs%&z+M[lbpV`R 8\}PS6\o673ZLhQUSdп+"܇jUScgǎFcZaY#^+r6oǢ>wYXԼ9Wd.sgJ*S %w$3գ׷ߗ';mnqR j:X7OYgßoBޏmN+(H9l|w*D> !mlnsځm䭊n+Qkumr&fDU_ 4f6FD;|rs)5 hUfI2tCAvԱlsyའv#C7j}I;lJ DP̋PH dfIĕKK<0<{T!>,uPÃwkk(\UpCjPĄ:!iMW0 ,W6  0+m g^Pgam>T8!H&w-gg4-D0QLO3*"8 bI0^z7B_"f%1ǠUWA<:遈=4 sPܪ5N27V|ɗU:~0[\ZEm##=3% O3,lݾC@qiώF]kY 5& `ɦxؒռ' Rt7Wm ɱa8/I*j^ǷLɫw(Q*SA~[ڡQtEsL PYHxR#m2xK˪5//w!YC%X>El7:踶0:g[䠐pZ"E&[贻-s ٸUZR =X;twP[ϛ;!ˊu(1Ued"0 ?~6L݄GEK:29fK&*'T{IxI >-E'o/'h_5a(!]6}̭ģcc? \ ):|xNt9[uKL[tB!WwZ>>Qu UDX2NgVb3Q?aiյ3`iEVqJc;c{+|/#ܚ c rN0}Q /9lb~(Th"= x%=-ᶆӓǧN[ gY}jt8ABCpLv)A|pb SrX*򊮿UtM`'6q{#2dt(:;:K("N.熷uL3B4M/(jNFW\90 $Hch7ѥ-mWpywt2XPW\N/,Z?kUU|vJD]#Wp,XŜE/,0iFp["um)1443A7L!|a`xEָ)-55.H%u$q5 U~&VK2Gy5'QXN-s9 q4ͤ8nمSE /GR)\ Gvx7L#[+k$ iE>&ws-ҳܲYPM =3KDuqZEu 0pszز zUOsw,ld|(?j ŒQ/ )d[F{ wN 4@X"?cYAl&6?Dݟ()=͜fΩ@tT h3|>m+ʥ0Ӵ4/av >e% sO7%&&|qOpm'8]K޲#޾4dtDfL/ks7ų*%\eeס:c[b@|[r vrBg9*~q:>W NQcC{W:ʿn|<(] /Vs젏Xf+f{E=MUJ`GHܢfvL$@^~}pYIO!rD1^D3;lS]d mgXceu<6qE])W;W}yu/BY>l'/~'s7wﺉNxiiĐ3 lͬc(AKln[홤ct _֢kʖ9QjP4<YF0JvMo6mp\!0HPQKoʥc]"G؂goIѽ$BiI+&Ǘ y?C* d nk!.h{\'lR#!6=PgvvgTZ4w)*G#uS$?ԥU =UǕJc, 0o%v_1MPupVM< Odt<bM#D.!oٖ(;e^Wq Z.odj; l$2&8w%x%*^3%Q6Cӏ9D. :6=kImvvq !UPpsv pI{ ]-vgXtsO( pSu:B( NR-5SؕwG<ƈ:`^({(\J@|`ɡ \|8.[෤8&r@`6粛B>sͶyK΂y1R֘C~%-bإqSD ?uS]F$.W_eoDCGB^TN=~Yv.h)2ɤ#-l6qs9" ݏ ~r{M(XKeU9sс|cmdHQb8m[*"Jtw"#/ϖ|ZGh`W_`40q%ag1KꘙWe?txe| ݻzmrh<0bE'OQ}ʾ͈yӺ4C;]Vϳv#B( 5/"]Z94k;PT56 !7kFޥ?o,xn3N~6y{ (Ϡ#!?ҾqЖ!U~R hKq_ ('րAѧ-dQc:Cj0VIIjoǓ gpd}Rz$ƳU [+7 3CHzdc8nh123rbYn`9Ϻլ"9`4BQ2hZ\pS-!M5)-3~x!B!^_x$WoJ t Hw5 D|(3Nwgٽէw0k 3Zl(/bt6]\0*iU` ,g5 8c3#1nUEH?R亇x~ OY,"Ui?}g)wAXb^%Wnr!7\n9/~%DzYLCݿq_+\S i*ht ֿcsEᣇ %q |]+,2mƭj+`IӻMoqF:¸;Qd3'=t܂;,;63=O{`19ѳ {d닢4=%gR%ļ23\9K=b$ѷ€)i|3#jPIϓcAM9*}L(|47<Kx{4R6f)HXԸ@%:lT8*u"3[s@YtAGayNQbR-i:A01 8d=faoDhG'ZW|-f6^\.fw'~~nSBʬ7SEO`>q+27a= !9دF ps;OPyIW>яv%=-"$+]t@!ci~g7u"2ki3-{@AdrD/wluo 1DL`=8WDoxxh8IKa}BDnw`6_uk K' G[;tkl Jm0z#VT3Ʌt^ =|0= 8߯P{Gr;ZA24,zL{m5 Vbd TuenlH~ߝ"T@O>x "a !t(b1K:U0MrǐcNwouPsCӎ3R 4L` -g~u]N B %lh*)lM6i>wwVRfṈ;;{Pp{վD~UQNzFS.#R-$OMEG:+4.B*`^n _V7=xm.Ѕֹ["~4\?.㶈V+-OC>F|+kbXJ~b<Y .D1QOUH0(_q>)Bɰdvi-ƽeC$^B⿗,+#T &@{e,øsZď:V}FOg\=L"{y9ɸ@m^2_޽ 2яgR],˹Ͼw*8&*9 dzgffB[z9y1d!o`I$*/5]~ȱ6۾ydzR7aȊ<ױdgu0ş/M*+-f=}W]Ӂ@Y@Ub;vR)hMR@;iU޼/l-i &$ 8M7<'DhBT]I aC>,J{RƧ0lU1':?$Qd-՞;n قY]ꐯPzVK*EWО̿{;i̘C *5Ji0R~K+h QsB^ @:A5ӹ2p{lu/KB*?ʈBX<cA6K3.GB;I)3 = BiG[uEWVa8+g`>'R), 梣~4/yu$G%a :  i-ͻRUtRmQ y^5ER*B/dX= NnZx}T䃾VّQ> 1J_%]|J-7PZEZ*׊aػrLE)L[5%IOcIw(Z̙:S`*^IU 4)k?$1psRkRL%+WO 15n.[¨ mT,*)_VIN_ \mdVf]|jeʕ+ 1@dROɋ1uoxb*.$rפ2!-.ԘD;4YeΛ馁H2040B6iȅ36Fm~<1Ùct= Mb"u5A'ŷ@|1ݘF_c _^ЄV|8:z=ɻ&纱7d}&}jZRkN#| 56X=JT?)*,y1ib=F &\ f] p)ݏ?ƽ0CmO}kn8U;V{sEMJK;x;{@$ZW{9n>"ܛ#Vפ&d3/($ LW8a*W']C '򣝙ܖC-GrydVDz*ŒvrALFkL!4]!Բ]oqUry:TSj 5?``S>95^Z:%1'X .|rsƌ^]%e= R]/)VMPzh,  329!`ؼU'eG|q&VGindP!flyC]әMꨮ9.gS`H!vr~[8baSDtb7z@bIvw}Ś&SX (>4{S{y0}"< +ގ~rݙ5&]o["5b.FiY.mĻB 7JfztᄗnOX%'x@=sEx>u'%&5FPC&&oVTh P&!=MJmBgnÞ>1_Gspzb6VQӡe|x⼥i.gDHo 8ɪa m{y'+N퍂N^"c$7/g?CXwq(z5Tp=+3m߆1Dq|\HT wPm{= Ϯ[J$Nr؁XAUT=usg#G /S$`*8 .m$ʙwgjrhX˟7Ds5&bRTK lNGGN;#{đ cٳD,3^"uDlHP}qs$u֑.PHtvmlh#JEѨI)ׁ+d["AT.z:Үxf]n[\_9Mc@eGJqz}!?PjH=8J<{+8^O_"SEw>'Z952/:=43,F(E!XUe}K UK8ujބsPh8};MU;SׂBAUʎwxǽl$eRzCBLXEE`&bGwgV-Mi6>ـ?3_tI ,qW6:b(tG ?M,֐hW{E 9 sAu6e]Tt-ګ̐>"HJ~?BJh>NeS&('m`,n,0N& u-aSԑ{nkJ59tPoCzӪMH2uِ)JyD Y- T}`HKPBJwN#D UJi#9 ^mމG%G"zPLk;,&H`U;AT)~ @x:% s6R1nиrev9LJW,eGHO̝Q |iUSMR;ΰNJ?PAйȖKo<ȣV5Q'0l\d pFW맄 %..YE *@k# .vnG$)9G}<7Rɧ;])7t {h `^✣{r *ʐ%!W9ܞ?l vjq~"ՓhX4"(|wiy>Q@oŊ+4϶^W4'^ֲ!}t+xMD6vP[x@pdSUKY|hgx,DYϑ[\A 3_10>*P1OAxǺ ,;O 5!SWdrCs-O~?@6,6k;`zӓO6$OBT ƛHFrTd,HOADߙfjo{% iR&`~ڌ^h]σ;ZxZ{]1/f֊*w)G 9$Fk/fO׉\⒃uCxG"8\9?=&p{ҍiaEbrpj3c$lo&(^k@"fkʶ/T,Ì`v%f蕒"Ӭ kO݀"Jw2) 8*ջDޠ)'G‰>K4Q>ںpAkG*$x9Xrd=O&iJ ".,K9B,\C Q3\'DW_T 2uP78hGLON_))K`$\ S"(~yEH:_ 孰_^|~.V=)+_PLAyq, l.Вe6xļC ;XLTiȞ E(E-vf^mal=|c"%Fأ^^Dh zZ6)}k?8뗢Iҷ?8&%h?-^_X#|i)0zp_Wv&:IaZBSpG1fT5QITQ)qBY4&W|(Gwk+|}fS/vf='kT'fF #s\.'G]L]zb̙tn u }n11Pj-hk-5Z\"m;AxydR*8  ,!Z1hBƢ6~@E,8ZC0o Wh.ȒV9 vJ\Pb uR2b}Go򧧜Oc\Pk΢y>щ!OULSV°b=t^Kl|hg/j] l$Ѿ> m9a~Ȳ°dӕoQܶN߀r0gE~8Mg*M@9ެi|$*@ ]/=gWP|/¿)Ph*Ej.m[#spe4b]f6<Թ,1&f_u;3|7G9B{m,c5X\5E?܃ocw GMPƈB%>s!b]v+ vX4 f@reQ8kC"P7^z1+I0M?l4qs_bW*,JId| Pu62u+]`llNcl9Z]O,(d.s\ .)>BH-EB=?憬XWx%Psȯy;+Z$HM&knRMj =ط+ B10J-ކ .Z<`+Vǿdlϲ7/wY?>+^<桄iZlfEz&o0`=!WP0 /%3"Nȷ\ n`{xEQ2lJEry],)W^6]| C'ug1Kn`kЕ0?Қtq:}cGmI{?9;zoƹ Ac,]~Q:G Ü,ս ͌ȫڣ"uz?DSWdx!Mfn/HU9#]`#6@^Vè Ms&SYz1#%r)i'@ȡ^j14.%vMBT859**a/͌Ejb2ц&mo=;"7Ý@,9c-#sKۉHJ)ӟgjit?cZL++2rD<(bȪL*iStLE}-ק%hpA":i﵆NeqK~eSщ ;%I ־s`?,^Q wb.X]aQ#TUdt,i IʈV0nOQз\smtȱj6|a:@aO0&^sn~p X8FA МaD1v!C4K1q.Cj܃7ܵg_φ~)"}yIu~*4 `Tby+RA=58yHX k6?ms7o-?PӯE TH=4>rkП!< hrWIb:5wLO.ޤ@Yj/9K,gܜK9;Hq5 &h=R^%eڍ7ɱhZ* AɑYi @"8=g/ҍç|J!̑;fGfM˦e˼fЀOc\l%y)'񡔌,X]it ӔXÙwؽژ5yٲo.Ͷ xh:c>Ihq2h.yv=h W_6o=DŽdc$&5ʏT)8hn/8 >'Mk*!>UVX}A-u?/4P\Dى&3b=,=n1LU48b3 G z ",WG>=P!354E9?"X|x!y("TԊ,UdDG,j>Jz2)s(Q>mpּX_.CA 5vLTi K^Dm $!)p,F7O?kgYVEM%<8% U`m y=N[9$6R|,]$ŔP,bKdn)FVjZ9Ύ[azQ0U&3uڰΠiG'gLMV_e"@"iBE9]BKwu>Rd)ȑC;h`` MC/gӋE` :" ]DW ݥc H @Y=UTq~q9s8_?3'C@IWyް"k  NDŏ@ M