kernel-module-8852au-6.12-desktop-6.12.112-8> )lp 07d764685cf319b2759a4dfeaa53f96ba16a1b57e34659d4dcb308b545138f49aace85b64f1502517bb36b636281de3e5692d487iV8Jtʼnv<>>B?qd$- / \     = @DINx|(8\9(\: \GDHHILXPY`\]^bcdefltuvwpxtyx,0Ckernel-module-8852au-6.12-desktop6.12.1128Binary module 8852au for kernel-6.12-desktopBinary module 8852au for kernel-6.12-desktopj^localhostij=@j7@j+jjjjjj9j @j @j @j @j @j @j Pj Pj Pj j\@i@i~i~i~iiD@iD@iZ@iZ@ip@i@i@i@i@i@iX@i8@i8@Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov BiteDasher BiteDasher BiteDasher BiteDasher BiteDasher BiteDasher BiteDasher Mikhail Novosyolov 6.12.91-24Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-21Mikhail Novosyolov 6.12.91-20Mikhail Novosyolov 6.12.91-19Mikhail Novosyolov 6.12.91-18Mikhail Novosyolov 6.12.91-16Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-14Mikhail Novosyolov 6.12.91-13Mikhail Novosyolov 6.12.91-11Mikhail Novosyolov 6.12.91-10Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.91-6Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov BiteDasher 6.12.91-3Mikhail Novosyolov Mikhail Novosyolov 6.12.91-1Mikhail Novosyolov Mikhail Novosyolov BiteDasher Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-13Mikhail Novosyolov 6.12.74-12Mikhail Novosyolov 6.12.74-11repo bot repo bot Mikhail Novosyolov 6.12.74-9Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov 6.12.74-6Mikhail Novosyolov 6.12.74-5Mikhail Novosyolov Mikhail Novosyolov 6.12.74-3Mikhail Novosyolov Mikhail Novosyolov 6.12.74-2Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov Mikhail Novosyolov - Remove badly working Mediatek backports - We made them to support mt7902e and have never released them yet, - but even with the last fix kernel panic on shutdown. - Let's not touch 6.12 and try to add support to 6.18 because new notebooks - work better with 6.18 then with 6.12.- test without mt backports- Fix wakeup of Asus Vivobook S14 (kb#658, okdesk#5724)- Fix mt76 kernel panic in backported patch- Fix CVE-2026-99999 ("PwnEscape")- Fix building perf in rosa2021.1- Fix regression on Elp L with old firmware- Fix sound on Angara (and maybe some other Baikal-M boards)- Bump release- Disable vm.mem_profiling by default (kb#634) - For some reason we had CONFIG_MEM_ALLOC_PROFILING_ENABLED_BY_DEFAULT=y. - that does not make sense: - it enabled gathering of profiling information by default, even when nobody is going to use it, - it makes sysctl vm.mem_profiling 0444 (read only) - We hit a bug fixed by https://github.com/torvalds/linux/commit/640a603943a7 in 6.13+, hit it in 6.12. - It was in the profiling code. It would not have been hit if profiling was not enabled where it is not needed. - Patch 0309-mm-codetag-clear-tags-before-swap.patch is the backport fixing this bug. - Made arm64 be like x86. - See kb#634, okdesk#5985.- Update configs for newest 6.12.x (6.12.112)- Elp L update- upd: 6.12.111 -> 6.12.112 - (all patches carried over to 6.12.112; the series was verified with - rpmbuild -bp and by diffing the %prep tree against a git reference tree - built by cherry-picking the rosa-v6.12.111 branch onto v6.12.112) - Dropped patches (merged upstream in 6.12.112, verified by patch-id): - 9276, 9295, 9296, 9299 - lvc patches that had just been picked in - 6.12.111 and got backported into stable 6.12.112 right after - Adapted to 6.12.112 changes (re-exported from the reference git tree): - 0663: upstream 6.12.112 renamed the set_16kib_bfsize() argument - (mtu->len) while 0663 removes the whole function along with - ring_mode.c and the stmmac_mode_ops callbacks; kept the Baikal - removal in dwmac4_descs.c and hwif.h - 9133: rtw89/pci.h - kept both declarations: upstream - rtw89_pci_shutdown() (new in 6.12.112) and the lvc - rtw89_pci_basic_cfg() - 9269: qcom_q6v5_pas.c - upstream renamed the adsp pointer to pas; - adapted the lvc lite_dtb_pas_id shutdown to the new naming - Co-authored-by: Z.AI GLM- [bot] upd: 6.12.111 -> 6.12.112 - Changelog: - 9p: Fix v9fs_issue_write() to update i_size and remote_i_size - af_packet: fix integer overflow in prb_calc_retire_blk_tmo() - ALSA: 6fire: Clean ups with guard() - ALSA: 6fire: fix OOB write from device-reported iso length - ALSA: bcd2000: Fix race between rawmidi and disconnect - ALSA: core: Fix potential UAF after asynchronous card release - ALSA: hda/ext: preserve PPLCCTL bits when clearing reset - ALSA: hda/realtek: Add StarFighter HDA SSID - ALSA: hda/realtek: Limit Star Labs internal mic boost - ALSA: hda: trace PCM open only after assigning a stream - ALSA: pcm: set timer->private_data before registering the PCM timer - ALSA: usb: 6fire: Avoid embedded URBs - ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity - ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling - ALSA: virtio: reset device before deleting virtqueues - arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 - arm64: dts: renesas: r8a779f0: Set UFS lane count - arm64: hibernate: clone only the linear map that exists at runtime - arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc - arm64: io: Reject non-user protection in ioremap_prot() - arm64: percpu: Fix LSE operations on {8,16}-bit types - arm64: percpu: Fix this_cpu_and() mask generation - arm64: percpu: Fix this_cpu_write() casting - arm64: Use load LSE atomics for the non-return per-CPU atomic operations - ARM: socfpga: select the PL310 erratum 753970 workaround - ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map - ASoC: codecs: aw88261: only check PLL and clock state at power-up - ASoC: codecs: aw88261: reduce log spam - ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type - ASoC: hdmi-codec: Report a change when the channel status moves - ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask - ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params - ASoC: tegra210_mixer: sort the register default table - ASoC: tegra: Fix the MIXER enable default value - ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments - ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY - ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources() - ata: libata-scsi: bound the ATA passthru sense descriptor writes - autofs: fix sbi->pipe file reference leak in autofs_kill_sb() - Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough - Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit - Bluetooth: btintel_pcie: validate device-supplied DMA indices - Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events - Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown - Bluetooth: btusb: fix NXP IW610 composite device handling - Bluetooth: coredump: Quiesce dump work on unregister - Bluetooth: eir: validate service data length before reading UUID - Bluetooth: hci_codec: validate vendor codec count length - Bluetooth: hci_conn: fix CIS hold ownership on reuse - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained - Bluetooth: hci_core: Print number of packets in conn->data_q - Bluetooth: hci_sock: reject out-of-range OCF values - Bluetooth: hci_sock: validate event length before filtering - Bluetooth: hci_sync: Serialize local codec list cleanup - Bluetooth: ISO: balance the parent hold in hci_bind_bis() - Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() - Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync - Bluetooth: L2CAP: validate frame length before control and FCS access - Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel - Bluetooth: mgmt: fix race in read_unconf_index_list() - Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup - Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO - Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() - Bluetooth: SMP: reject Security Request over BR/EDR - bna: prevent IOC timer rearm during teardown - bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips - bnxt_en: Don't free the live ring's TPA state on queue restart failure - bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() - bnxt: fix memory leak in bnxt_queue_mem_alloc error cases - bonding: crypto offload enabled, non-offload slave failover, rekey failed - bootconfig: Fix integer overflow in initrd size check - bootconfig: Fix negative seeks on 32-bit with LFS enabled - bpf, arm64: set up the frame pointer for the exception callback - bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() - bpf: Bail out early in __htab_map_lookup_and_delete_elem() - bpf: Bound ownership depth through local kptrs and graph roots - bpf: Check params size before reading reserved fields - bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL - bpf: Factor out htab_elem_value helper() - bpf: Fix bounds check for skb-backed dynptrs - bpf: Fix bpf_skb_change_tail wrt csum partial skbs - bpf: Fix bpf_sock context code generation - bpf: Fix BSWAP 32 and 16 on MIPS64 - bpf: Fix divide-by-zero in btf_struct_walk() - bpf: Fix immediate JMP JEQ/JNE on MIPS32 - bpf: Fix out-of-bounds read of rtt_min in sock_ops - bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() - bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk - bpf: Register dtor for freeing special fields - bpf: Reject dev-bound-only programs on other devices - bpf: Reject key-less BTF for hash maps - bpf: Remove migrate_{disable|enable} in ->map_for_each_callback - bpf: Restrict CO-RE poisoning to relocatable instructions - bpf: Skip unsettled links in link iterator - bpf, sockmap: Fix self-redirect copied_seq double-counting - bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc - bridge: check llc_mac_hdr_init() return value in br_send_bpdu() - btrfs: abort transaction on failure to update inode for hole punching and reflinking - btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() - btrfs: tree-checker: print dev extent offset in error message - cgroup/pids: Restore pids.events notifications in local mode - cgroup: selftests: Move memcontrol specific helpers out of common cgroup_util.c - cifs: Fix server use-after-free in cifs_chan_skip_or_disable() - cifs: Fix specification of function pointers - clk: qcom: Fix test_ctl_hi field for DEFAULT_EVO PLLs - clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate - compiler_types: Move lock checking attributes to compiler-context-analysis.h - configfs:get_target() - release path as soon as we grab configfs_item reference - configfs: pin the symlink target's dirent instead of chasing ->ci_dentry - configfs: unhash the dentry before dropping the item in rmdir - dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds - dma-coherent: report a failed reserved memory assignment - dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask - dmaengine: Add devm_dma_request_chan() - dmaengine: Fix device kref underflow in dma_chan_put() - dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() - dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() - dmaengine: sprd: Fix runtime PM reference leak in probe - dmaengine: sun6i: fix non-atomic read of DMA position registers - dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status - dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() - dmaengine: wait for RCU readers before releasing dma_device - dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA - dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order - docs: s390/pci: Improve and update PCI documentation - Documentation: tracing: Add documentation about eprobes - dpll: use exact lookup for reference sync pin id - driver core: Add device probe log helper dev_warn_probe() - drm: add drm_memory_stats_is_zero - drm/amd/display: Bump frame warning limit for clang builds of dml - drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() - drm/amd/display: Set gpuvm min page size to 4K on dcn35/36 - drm/amdgpu: add a helper to calculate ring distance - drm/amdgpu: avoid force-completing uninitialized UVD rings - drm/amdgpu: check ras and obj before dereference - drm/amdgpu: Failed to check various return code - drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() - drm/amdgpu: Fix missing unwind in amdgpu_ib_schedule() error path - drm/amdgpu: fix rmmio iounmap skipped on device removal - drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() - drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() - drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments - drm/amdgpu: plumb timedout fence through to force completion - drm/amdgpu/umsch: remove vpe test from umsch - drm/amdgpu: use GFP_NOWAIT for memory allocations - drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach - drm/bridge: tc358768: Enforce input bus flags via atomic_check - drm/client: fix restore of partially initialized client - drm/client: Pass force parameter to client restore - drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr - drm/gud: fix out-of-bounds write in gud_plane_atomic_check() - drm/i915/dp_mst: Fix configuring FEC for a disconnected stream - drm/i915: fix incorrect RCU teardown order - drm/i915/mst: add mst sub-struct to struct intel_dp - drm/i915/psr: Add new SU area calculation helper to apply workarounds - drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable - drm/imagination: clamp freelist reconstruction requests - drm/imagination: Fix page count for page table for map() interface - drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() - drm/msm/adreno: fix autosuspend cleanup during teardown - drm/msm/dpu: clear pending peripheral flush state - drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL - drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure - drm/nouveau/clk: don't clobber reclock status when restoring volt/fan - drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update - drm/nouveau/disp: don't reject HDMI config on cards without SCDC - drm/nouveau/disp/r535: Add scanline position support + head state support - drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() - drm/nouveau: fix autosuspend cleanup during teardown - drm/nouveau: Fix bridge reference leak in nv1a_ram_new() - drm/nouveau: fix double-free in nvif_vmm_dtor - drm/nouveau: Fix gem reference leak in validate_init() - drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() - drm/nouveau: RCU-free the scheduler-containing nouveau_sched - drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM - drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation - drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug - drm/sysfb: simpledrm: Improve framebuffer-size validation - drm/sysfb: simpledrm: Improve panel-size validation - drm/sysfb: simpledrm: Improve stride validation - drm/vc4: Use managed KMS polling to fix UAF on unbind - drm/virtio: fix memory leak of fence event on execbuffer failure - drm/virtio: fix NULL pointer dereference on fence allocation failure - drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() - drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() - drm/virtio: fix object leak when drm_gem_handle_create() fails - drm/virtio: release the GEM object on virtio_gpu_vram_create() errors - drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches - drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV - drm/xe/vm: nuke PTs only after unlinking contested VMAs - drop_monitor: fix out-of-bounds write in reset_per_cpu_data() - drop_monitor: synchronize tracepoint unregistration on error path - EDAC/altera: Use ECC manager compatible to select A10/S10 IRQ layout - EDAC/altera: Use parent device for devres in altr_portb_setup() - erofs: add sysfs feature entry for xattr prefixes - erofs: fix large folio race in erofs_fscache_req_complete - esp: downgrade zerocopy managed frags before mutating skb frags - eth: bnxt: store rx buffer size per queue - eth: fbnic: Handle maximum standalone channels - eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox - exec: Cleanup POSIX timers right after de_thread() - f2fs: accurately adjust free_sections during free_segment_range - f2fs: Convert clear_node_page_dirty() to clear_node_folio_dirty() - f2fs: convert F2FS_I_SB to sbi in f2fs_setattr() - f2fs: dirty directory inodes on mtime/ctime update - f2fs: don't allow unaligned truncation to smaller/equal size on pinned file - f2fs: embed f2fs_gc_kthread in f2fs_sb_info - f2fs: fix dentry folio leak in find_in_level - f2fs: fix to avoid potential section-unaligned pinfile - f2fs: fix to clear dirty flag on folio in error path - f2fs: limit recovery filename logging to stored length - f2fs: validate MOVE_RANGE destination size - firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS - firmware: qcom_scm: Rename peripheral as pas_id - firmware: sysfb: Move bpp-depth calculation into screen_info helper - fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT - fsl/fman: Fix clk reference leak in read_dts_node() - fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga - ftrace: Take trace_array reference before accessing its ftrace_ops - futex: Provide rt_mutex_.*_schedule() equivalents for futex scheduling - genetlink: pin family module during policy dump - genetlink: report the real command id for dump-only ops in policy dumps - gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() - gpio: cdev: fix kernel stack leak to user-space in error path - gpio: tps65219: Fix GPIO input value reads - gpio: virtuser: skip free_irq when no IRQ is installed - gpio: zynq: fix runtime PM leak on request error path - HID: alps: fix use-after-free on input2 registration failure - HID: alps: unregister DualPoint Stick input device on remove - HID: amd_sfh: Validate PCI BAR size before mapping - HID: asus: fortify keyboard handshake - HID: bpf: fix __hid_bpf_hw_check_params report length - HID: elecom: fix bus type for M-XGL20DLBK - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM - HID: logitech-hidpp: fix race condition when accessing stale stack pointer - HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard - HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() - hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() - hwmon: (pmbus/core) increase number of phases and add new mask - hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding - hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 - hwmon: (pwm-fan) Stop RPM timer before freeing tach data - hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove - hwmon: (w83793) release probe data through kref - hwrng: drivers - Switch back to struct platform_driver::remove() - hwrng: stm32 - Fix runtime PM cleanup on registration failure - i2c: at91: release DMA channels on remove and probe error - i2c: atr: fix dangling adapter pointer on add failure - i2c: imx: disable autosuspend on remove - i2c: imx: release DMA channels on probe error - i2c: mxs: fix DMA channel leak on probe error - i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() - i2c: qcom-cci: Remove the unused variable cci_clk_rate - i2c: qcom-cci: Stop complaining about DT set clock rate - i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL - i3c: master: Do not treat master device as a duplicate target - i3c: master: Fix use-after-free of master->this - IB/hfi1: Fix the PIO_CRED credit-return mmap - IB/hfi1: Resolve the credit-return buffer through the send context's node - IB/IPoIB: Avoid restoring OPER_UP after multicast flush - IB/iser: reject a remote invalidation of an unregistered direction - IB/isert: wait for deferred control PDU completions before releasing the connection - IB/mlx4: Fix use-after-free on pkey sysfs registration failure - idpf: disable DIM work before freeing q_vectors - idpf: Fix kernel-doc descriptions to avoid warnings - idpf: introduce idpf_q_vec_rsrc struct and move vector resources to it - Input: adp5588-keys - cache GPIO state before registering the gpiochip - Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 - Input: cyttsp5 - clamp the HID report size before memcpy - Input: evdev - zero absinfo before partial copy in EVIOCSABS - Input: hp_sdc - shut down kicker timer on module exit - Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P - Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() - Input: soc_button_array - check btns_desc->package.count - Input: soc_button_array - fix MS Surface Pro 11 probe failure - Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) - Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound - Input: trackpoint - fix the inertia attribute name in the ABI document - Input: xpad - add support for Azeron devices - Input: xpad - add support for Victrix Pro BFG Controller - Input: xpad - fix PDP Marvel Xbox 360 controller - Input: zero ff_effect before compat copy in input_ff_effect_from_user - iommufd: Fix UAF in selftest IOPF reporting - iommufd: Pass @pasid through the device attach/replace path - iommu/msm: Unwind probe state on registration failure - iommu/msm: Use helper function devm_clk_get_prepared() - io_uring/net: don't overconsume buffers when using MSG_TRUNC - io_uring/rw: end write accounting from ->ki_complete - io_uring/waitid: avoid siginfo copy during ring teardown - io_uring/waitid: have io_waitid_complete() remove wait queue entry - ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). - ipe: fix use-after-free when auditing a newly loaded policy - ipe: protect the dm-verity root hash with RCU - ip_gre: Reject enabling collect metadata through changelink - ipmr: account multicast table and route memory - ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup - ipv6: do not let ipv6_find_hdr() return an offset past the packet end - ipv6: Fix dst leak for uncached routes. - ipv6: flowlabel: cap duplicate leases per socket - ipv6: Honor oif when choosing nexthop for locally generated traffic - ipv6: make ipv6_pinfo.saddr_cache a boolean - ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP. - ipv6: mcast: Don't hold RTNL for IPV6_DROP_MEMBERSHIP and MCAST_LEAVE_GROUP. - ipv6: mcast: Don't hold RTNL for MCAST_ socket options. - ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() - ipv6: mcast: Use in6_dev_get() in ipv6_dev_mc_dec(). - ipv6: Move ipv6_fl_list from ipv6_pinfo to inet_sock. - ipv6: reorganise struct ipv6_pinfo - ipv6: Select best matching nexthop object in fib6_table_lookup() - ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST - ipv6: xfrm: use full sockets in local error paths - ipvs: revalidate ihl before icmp_send - KEYS: encrypted: fix integer overflow of datablob_len - keys: fix lost wakeup when reaping a dead key type - keys: translate request_key_auth pid for the reading procfs instance - KEYS: trusted: Fix tpm2_load_cmd() boundary check - kselftest/arm64: Fix size of thread_data values for pthread_join() - ksmbd: fix partial file information responses - ksmbd: fix partial normalized name responses - ksmbd: keep compound responses on query info errors - ksmbd: return buffer overflow for partial filesystem info - KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP - KVM: arm64: Fix spurious warning for benign stage 2 teardown race - KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes - KVM: arm64: vgic-its: Free the caches when GITS_BASER changes - KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save - KVM: Don't treat reserved xarray entries as having memory attributes - KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg - KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure - KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() - KVM: s390: Fix IRQ injection with SIGP Stop and Store Status - KVM: s390: Zero initialize data structures for inject_pfault_token - KVM: x86: Check EFER validity on KVM_SET_SREGS* - KVM: x86: Disallow EFER.LME and EFER.LMA if long mode is not supported - KVM: x86: Extract REGS and SREGS runtime sync code to helpers - KVM: x86/mmu: Dynamically allocate shadow MMU's hashed page list - KVM: x86/mmu: Split kvm_mmu_zap_all_fast() into "front" and "back" halves - KVM: x86: Move the bulk of register specific code from x86.c to regs.c - KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() - KVM: x86: Rename __{g,s}et_sregs2() => kvm_vcpu_ioctl_x86_{g,s}et_sregs2() - landlock: Clarify documentation for the IOCTL access right - landlock: Fix TCP Fast Open connection bypass - landlock: Fix use-after-free of the source's parent directory - libbpf: Reject truncated ldimm64 CO-RE relocations - llc: fix skb UAF and leaks on llc_mac_hdr_init() failure - llc: reserve device headroom for allocated frames - lockd: fix swapped arguments in nlmsvc_match_ip() - mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() - media: chips-media: wave5: Add timeout while stop_streaming - media: i2c: imx355: Replace client->dev usage - media: imx355: Avoid calling imx355_power_off twice in error path - media: rkvdec: Propagate platform_get_irq() errors - media: video-i2c: fix buffer queue ordering - memstick: ms_block: destroy io_queue workqueue on removal - MIPS: Octeon: apply USB FDT fixups also when USB is modular - mmc: core: Cancel SDIO IRQ work before freeing host - mmc: core: Fix OF node reference leak on card add failure - mmc: hsq: Fix use-after-free in retry work - mmc: mmci: Fix use-after-free in busy-timeout work - mmc: mxcmmc: cancel data work and watchdog on remove - mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 - mmc: sdhci_am654: Clear ITAPDLY on tuning failure - mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure - mmc: sdhci_am654: Move tuning_loop to local variable - mmc: sdhci_am654: Reset command and data lines on failed tuning - mmc: sdhci-of-aspeed: Remove children before releasing SDC resources - mmc: sdio_uart: fix xmit_fifo leak when the port table is full - mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt - mmc: spi: reset bytes_xfered before retrying CRC failures - mmc: via-sdmmc: cancel card-detect work on remove - mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() - mm: fix incorrect vm_flags usage when checking allowable orders for tmpfs - mm/huge_memory: use folio's memcg inside __folio_split() - mm/hugetlb: create hstate_is_gigantic_no_runtime helper - mm/hugetlb: do not dissolve gigantic pages without runtime support - mm/hugetlb: fix surplus pages in dissolve_free_huge_page() - mm/hugetlb: keep max_huge_pages when dissolving surplus folios - mm/hugetlb: preserve mremap address delta when skipping page tables - mm: memblock: show all region flags in debugfs - mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio() - mm/mremap: reset unfaulted VMA page offset for MREMAP_DONTUNMAP - mm/rmap: allocate anon_vma_chain objects unlocked when possible - mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish - mptcp: do not reschedule the RTX timer for fallback sockets - mptcp: pm: drop match in userspace_pm_append_new_local_addr - mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 - mptcp: pm: rename add_entry structure to add_addr - mptcp: pm: reset retrans_time when ADD_ADDR entry is reused - mptcp: pm: use for_each_subflow helper - mptcp: pm: userspace: fix address ID overflow - mptcp: return sk_wait_data() errors from recvmsg() - mptcp: use sock_kmemdup for address entry - mtd: rawnand: pl353: Add message about ECC mode - mtd: rawnand: pl353: Fix debug prints - mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses - net: arp: terminate device name before lookup - net: atl1c: fix soft lockup on out-of-range tpd_cons read - net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read - net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read - net: bcmgenet: allow return of power up status - net: bcmgenet: do not skip WoL power up on GENET V1 - net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems - net: bcmgenet: initialize u64 stats seq counter for all queues - net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT - net: bcmgenet: move bcmgenet_power_up into resume_noirq - net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr - net: bridge: mdb: restart port group walk after deletion - net: bridge: mst: move switchdev call outside rcu - net: bridge: use option bits for CFM/MRP frame handlers - net: cpsw: Execute ndo_set_rx_mode callback in a work queue - net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue - net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 - net: ena: fix MMIO read buffer leak on probe failure - net: ena: Remove autopolling mode - net: ethernet: cortina: Ack RX overrun interrupt correctly - net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure - net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails - net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error - net: fddi: skfp: fix NULL deref when setting the MAC address while down - netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name - netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount - netfilter: cttimeout: prevent UAF during module unload - netfilter: flowtable: hold reference on ct until flow is released - netfilter: flowtable: publish HW_DEAD after worker is done - netfilter: ip6t_rpfilter: reject routes without inet6_dev - netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read - netfilter: nfnetlink_queue: hold nfnl mutex in event notifier - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase - netfilter: nf_tables: Simplify chain netdev notifier - netfilter: nf_tables: skip expired catchall elements on insert and delete - netfilter: nf_tables: Tolerate chains with no remaining hooks - netfilter: nft_nat: fully initialise new_addr in netmap setup - netfilter: nft_synproxy: use the family-aware checksum helper - net: gue: reject invalid REMCSUM offsets - net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() - net: ipconfig: bound DHCP option construction - net: ipconfig: Remove outdated comment and indent code block - net: lan743x: fix RX checksum use-after-free - net: lock the socket in sock_gettstamp() - net: macb: fix ordering around PTP timestamp read - net: macb: initialize PTP state before registering clock - net: macb: Replace open-coded implementation with napi_schedule() - net: macb: unify device pointer naming convention - net: macb: Use netif_napi_add_tx() instead of netif_napi_add() for TX NAPI - netmem: add a couple of page helper wrappers - net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports - net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports - net/mlx5: devcom, Base component size on linked devices - net/mlx5e: advertise MACsec offload only when supported - net/mlx5e: do not HW-GRO coalesce small frames - net/mlx5e: SHAMPO, Always calculate page size - net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() - net: mvpp2: prevent buffer overflow in page_pool allocation - net: netsec: fix device_node reference leak on phy_np - net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry - net: openvswitch: conntrack: fix helper UAF due to extensions realloc - net: openvswitch: conntrack: remove 'add_helper' dead code - net/packet: avoid truncating TPACKET_V3 private size - net/packet: clear RX owner on VNET header error - net: page_pool: rename page_pool_alloc_netmem to *_netmems - net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure - net: phy: mediatek: do not report link and per-speed LED rules together - net/sched: act_api: release tail references on DELACTION failure - net/sched: act_ct: avoid modifying shared unconfirmed ct entry - net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure - net/sched: act_ct: fix helper UAF due to extensions realloc - net/sched: act_gate: budget the per-entry list in get_fill_size - net/sched: cls_u32: fix manual hash table handle IDR aliasing - net/sched: hhf: cap hh_flows_limit at change time - net/sched: reject IDR error pointers when deleting actions - net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget - net/sched: sch_teql: fix shadowed err in __teql_resolve() - net: skbuff: do not leave stale header offsets after pskb_carve() - net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() - net/smc: Address spelling errors - net/smc: fix UAF on lgr list traversal in smcr_port_err() - net/smc: stop killed, freed and out_of_sync sharing a byte - net: stmmac: do not overwrite phc_index when no PTP clock is registered - net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K - net: stmmac: propagate FPE preemption-class mapping errors - net: stmmac: selftests: Capture all packets for vlan checks - net: stmmac: selftests: Check the dev->features for S-TAG offload testing - net: stmmac: selftests: Support running selftests on DSA conduits - net: tls: fix silent data drop under pipe back-pressure - net: usb: catc: bound the RX packet length in catc_rx_done() - net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist - net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() - net: usb: sr9700: include receive overhead in the length check - net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value - net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain - net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() - net: xfrm: reject unrepresentable espintcp transport headers - net: xps: reject an out of range traffic class - nfc: fix use-after-free in nfc_get_local_general_bytes - nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() - nfc: llcp: fix -ENOMEM on connect with zero-length service name - nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() - nfc: llcp: Fix race condition in accept_queue lifecycle - nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure - nfc: llcp: fix slab-out-of-bounds reads when logging service names - nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() - nfc: nfcmrvl: validate helper command length before pull - nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() - nfc: port100: reject frames whose declared length exceeds the received data - nfc: st21nfca: validate ISO15693 inventory length - nfc: st21nfca: validate received frame size - nfc: virtual_ncidev: Add missing ioctl compat handler - nfp: hold IPsec RX state under the XArray lock - nvdimm: pmem: keep PREFLUSH before data writes - nvdimm: preserve flush callback -ENOMEM - nvdimm: virtio_pmem: always wake -ENOSPC waiters - nvdimm: virtio_pmem: refcount requests for token lifetime - nvdimm: virtio_pmem: stop allocating child flush bio - nvdimm: virtio_pmem: use READ_ONCE()/WRITE_ONCE() for wait flags - nvme: add missing SRCU grace period in error path - nvme: all namespaces in a subsystem must adhere to a common atomic write size - nvme: fix atomic write size validation - nvme: refactor the atomic write unit detection - nvme: revert the cross-controller atomic write size validation - nvme: skip the zoned limits update if the zone info query failed - ocfs2: make ocfs2_calc_xattr_init() return void - octeontx2-af: Fix memory scaling limitation in SR-IOV mode - openvswitch: avoid reallocating confirmed conntrack labels - packet: use ubuf_info completion for TX_RING packets - page_pool: disable sync for cpu for dmabuf memory provider - PCI: Allow per function PCI slots to fix slot reset on s390 - PCI: Fix BAR resize for devices on a root bus - PCI: Fix Resizable BAR restore order - PCI: Introduce PCI_SLOT_PLACEHOLDER constant for slot_nr placeholder value - PCI: of_property: Omit bus properties without a subordinate bus - PCI: starfive: Fix resource leaks on error paths in host_init() - PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots - perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations - perf/aux: Allocate non-contiguous AUX pages by default - perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() - perf/core: Run sched_task() for PMUs with only CPU-wide events - perf test: Change all remaining #!/bin/sh to #!/bin/bash - perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused - perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED - perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits - perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification - perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() - perf/x86/intel: Remove anythread_deprecated bit from perf_capabilities - perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints - perf/x86/intel: Update event constraints and cache_extra_regsfor ADL - perf/x86/intel: Update event constraints and cache_extra_regsfor LNL - phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow - phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting - phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context - pidfd: hold exec_update_lock around namespace ioctl - pinctrl: meson: Fix typo in s4 group name - pinctrl: single: free the IRQ on domain creation failure - pinctrl: sunxi: keep a shadow copy of the data register output latches - platform/x86/amd/pmc: Define enum for S2D/PMC msg_port and add helper function - platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails - platform/x86/amd/pmc: Move STB block into amd_pmc_s2d_init() - platform/x86/amd/pmc: Move STB functionality to a new file for better code organization - platform/x86/amd/pmc: Propagate SMU errors and validate S2D address - platform/x86/amd/pmc: Restore msg_port on amd_stb_s2d_init() error paths - platform/x86: int1092: Fix potential memory leak in sar_probe() - platform/x86: intel_sar: Check ACPI_HANDLE() against NULL - platform/x86: ISST: Check for admin capability for write commands - platform/x86: ISST: Validate max level for set feature - platform/x86: think-lmi: Fix certificate thumbprint sysfs output - platform/x86: think-lmi: Fix current password length check - platform/x86: think-lmi: improve check if BIOS account security enabled - powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba - power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed - power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() - power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() - power: supply: ab8500_fg: fix use-after-free on remove - power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() - power: supply: qcom_battmgr: fix use-after-free - pppoatm: ensure a writable skb header and linear data - rculist: add list_splice_rcu() for private lists - RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() - RDMA/core: Reject unregistering netdevs in ib_get_eth_speed - RDMA/efa: Keep admin queues alive while IRQ is registered - RDMA/efa: Keep EQ resources alive while IRQ is registered - RDMA/irdma: Enforce local fence for IB_WR_REG_MR - RDMA/mad: Fix receive buffer leak when PKey enforcement fails - RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted - RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access - RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds - RDMA/rxe: validate access flags before swapping the MR's PD - RDMA/siw: Bound fragmented header copies by the remaining length - RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept - RDMA/ucma: Serialize join and leave on copy_to_user failure - rds: ib: Clear the sg list when mapping an MR fails - rds: ib: use rds_conn_drop() on protocol version mismatch - reboot: fix cad_pid use-after-free race - remoteproc: pas: Replace metadata context with PAS context structure - remoteproc: qcom: pas: Guard dtb metadata release with dtb_pas_id check - remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage - Revert "hwmon: (emc1403) Drop hysteresis for low limit temperature" - Revert "hwmon: (emc1403) Rely on subsystem locking" - ring-buffer: Add helper functions for allocations - ring-buffer: Allow splice reads on static buffers - ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() - ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page - ring-buffer: Show persistent buffer dropped events in trace_pipe file - RISC-V: KVM: Fix HSM hart status error propagation - RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr() - RISC-V: KVM: Fix perf-backed counter accounting across stop and read - RISC-V: KVM: Preserve firmware counter value across stop/start - RISC-V: KVM: Report snapshot write failure to the guest - RISC-V: KVM: Serialize IMSIC attributes with vCPU migration - RISC-V: KVM: Synchronize hrtimer callback during teardown - rose: cancel neighbour timers in rose_neigh_put() before freeing - rose: clear neighbour pointer after rose_neigh_put() in state machines - rose: drop CALL_REQUEST in loopback timer when device is not running - rose: fix dev_put() leak in rose_loopback_timer() - rose: fix netdev double-hold in rose_make_new() - rose: fix netdev double-hold in rose_rx_call_request() - rose: fix notifier unregistered too early in rose_exit() - rose: fix race between loopback timer and module removal - rose: guard rose_neigh_put() against NULL in timer expiry - rose: hold loopback neighbour reference across timer callback - rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm - s390/boot: Add sized_strscpy() to enable strscpy() usage - s390/boot: Avoid IPL parameter append past command line - s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points - s390/cio: Fix cio_update_schib() to not cache invalid schib - s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() - s390/cio: Guard PMCW field accesses with dnv check - s390/cmf: Fix virtual vs physical address confusion - s390/debug: Do not register views for failed static debug areas - s390/debug: Fix NULL pointer dereference in debug_info_copy() - s390/pci/docs: Fix sriov_numvfs attribute name - s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects - sched/core: Make core-sched flips wait for in-flight selections - sched: Rework prev_balance() to avoid stale prev references - scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() - scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU - scsi: libiscsi_tcp: Check the data direction of a Data-In PDU - scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature - scsi: qla2xxx: Fix the ql2xfc2target parameter description - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock - scsi: qla2xxx: Skip vport under deletion in report ID acquisition - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak - scsi: sd_zbc: Reject disks with too many zones - sctp: avoid livelock while updating retransmit path - sctp: discard the rest of the packet on a stale-cookie error - sctp: hold asoc or transport before mod_timer() in timer handlers - seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation - selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode - selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc - selftests/landlock: Add disconnected leafs and branch test suites - selftests/landlock: Add missing connect(minimal AF_UNSPEC) test - selftests/landlock: Add test for TCP fast open - selftests/landlock: Add tests for access through disconnected paths - selftests/landlock: Add tests for whiteout object creation - selftests: nci: Correct pthread_create return value check - selftests/nci: Fix out-of-bounds store on thread join - selftests: nci: Fix uninitialized family ID on missing attribute - selinux: always fill AVC decision in avc_has_perm_noaudit() - selinux: preserve user SID across nested backing files - selinux: recheck intermediate backing files on mprotect() - smb: client: cancel reconnect work in clean_demultiplex_info() - smb: client: clean up failed cached directory opens - smb: client: fail DACL rewrite when the new DACL exceeds 64K - smb: client: fix busy dentry warning on unmount after DIO - smb: client: fix create context out-of-bounds reads - smb: client: fix missing iov bounds check in parse_posix_sids() - smb: client: fix missing lower-bound check on DFS referral string offsets - smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs - smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() - smb: client: fix potential OOB read in smb3_enum_snapshots() - smb: client: fix reparse buffer bounds in cifs_query_reparse_point() - smb: client: fix rlist race and missing initialization - smb/client: fix security flag calculation when setting security descriptors - smb: client: fix server->total_read for compound encrypted PDUs - smb: client: fix smbd_connection leak on cifs_get_tcp_session() error - smb: client: fix unaligned access in WSL reparse point parser - smb: client: fix use-after-free of iface in cifs_try_adding_channels() - smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() - smb: client: reject short Next offsets in parse_server_interfaces() - smb/client: send lease break ACKs thru correct session for multiuser mounts - smb: client: validate POSIX create context length - smb: mark the new channel addition log as informational log with cifs_info - sock: add sock_kmemdup helper - soundwire: cadence_master: wait and cancel cdns->work before clock stop - spi: spi-zynqmp-gqspi: stop the controller on shutdown - squashfs: Add dictionary size range check to prevent shift-out-of-bounds - staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() - staging: rtl8723bs: fix spacing around operators - staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit() - sunvdc: fix -EIO issue due to lack of retries - super: make iterate_supers_type() deletion-safe - swiotlb: use the adjusted address for the highmem page lookup - sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] - tcp: do not let tcp_rmem be set below 4096 - tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). - tcp: exclude old ACKs from tcp fast path - tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() - tcp: introduce icsk->icsk_keepalive_timer - tcp: prevent collapsing skbs across boundary in rtx queue - tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context - tg3: clean up PHYLIB resources on probe failure - tg3: use random MAC address when tg3_get_device_address fails - thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds - tipc: Fix a data race on mon->peer_cnt in mon_timeout() - tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow - tools/bootconfig: Cleanup bootconfig footer size calculations - tools/bootconfig: Fix integer overflow and truncation in size checks - tracing: Clean up use of trace_create_maxlat_file() - tracing: Constify struct event_trigger_ops - tracing: Fix memory corruption from a "STACKTRACE" histogram key - tracing: Merge struct event_trigger_ops into struct event_command - tracing: Move d_max_latency out of CONFIG_FSNOTIFY protection - tracing/probes: Fix anon_stack check for unnamed bitfields in btf_find_struct_member - tracing/probes: Fix BTF kflag check for anonymous struct member access - tracing: Remove get_trigger_ops() and add count_func() from trigger ops - tracing: Set the trace clock before registering the histogram trigger - tracing: Take the reference before publishing the named histogram trigger - tracing: Take trace_array reference when opening a tracer options file - tracing: Take trace_array reference when opening options file - tracing: Undo the registration when enabling the histogram trigger fails - udf: Fix data loss when converting inline inodes to out of line - udf: Move udf_map_block() up - usb: cdns3: rename hibernated argument of role->resume() to lost_power - usb: cdnsp: fix wakeup from S3 after controller context loss - usb: dwc3: clear forceRM when issuing EndTransfer - usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition - usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior - usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() - usb: storage: realtek_cr: fix use-after-free on disconnect - usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling - usb: typec: tcpm: fix debug accessory mode detection for sink ports - veth: manage XDP program pointers during channel resize - virtio_mmio: disable IRQ wake before free_irq - virtio-mmio: Remove virtqueue list from mmio device - virtio_net: copy zerocopy frags in start_xmit without NAPI - vlan: ensure sufficient headroom in vlan_dev_hard_header() - vlan: require the MAC header to be present in __vlan_insert_inner_tag() - vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets - vxlan: use one headroom snapshot for neighbour replies - watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog - watchdog: digicolor: Avoid division by zero - watchdog: msc313e: Fix premature reset during timeout update - watchdog: msc313e: Propagate error code in resume() - watchdog: rtd119x: Avoid division by zero - watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() - watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() - wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() - wifi: brcmfmac: fix lost 802.1x TX completion wakeup - wifi: brcmsmac: fix UAF in brcms_free_timer() - wifi: cfg80211: add option for vif allowed radios - wifi: cfg80211: check IP header size in cfg80211_classify8021d() - wifi: cfg80211: don't filter by BSS type when removing stale entries - wifi: cfg80211: don't get the radio mask for netdev-less wdevs - wifi: cfg80211: expose cfg80211_chandef_get_width() - wifi: cfg80211: only group hidden BSSes with beacon entries - wifi: cfg80211: skip regulatory for punctured subchannels - wifi: iwlegacy: fix broadcast stations deallocation - wifi: libertas_tf: fix UAF in lbtf_free_adapter() - wifi: libipw: reject TKIP frames without a full MIC - wifi: libipw: reject too-short association responses - wifi: libipw: reject too-short beacon and probe responses - wifi: mac80211: abort chanswitch when leaving a mesh - wifi: mac80211: add HE 6 GHz capability in the scan elems len - wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver - wifi: mac80211: don't access the TSF of a down interface - wifi: mac80211: don't allow injecting frames wider than the chanctx - wifi: mac80211: don't allow link changes when iface is down - wifi: mac80211: don't offload TC setup on AP_VLAN interfaces - wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set - wifi: mac80211: don't start a ROC while scanning - wifi: mac80211: don't warn when an IBSS has no channel to scan - wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping - wifi: mac80211: mesh: release the channel if start fails - wifi: mac80211: mesh: reset the CSA state when leaving - wifi: mac80211: refuse to make a monitor active when it has no queue - wifi: mac80211: require a peer station for TDLS setup confirm - wifi: mac80211: reset state when starting AP fails - wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown - wifi: mac80211: set up the TX info early to fix failure paths - wifi: mac80211: suppress chanctx warning for debugfs reset - wifi: mac80211: track MU-MIMO configuration on disabled interfaces - wifi: mac80211: unlist vifs when their netdev is unregistered - wifi: mac80211: use vif radio mask to limit ibss scan frequencies - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy - wifi: mt76: mt7915: set correct background radar capability - wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy - wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length - wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path - wifi: mwifiex: prevent authentication frame length truncation - wifi: mwifiex: validate action frame fixed fields - wifi: mwifiex: validate scan response extents - wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST - wifi: p54: validate curve data length in the calibration curve converters - wifi: rsi: fix heap OOB write on key removal - wifi: rtw88: Fix the random "error beacon valid" messages for USB - wifi: rtw88: TX QOS Null data the same way as Null data - wifi: rtw89: cleanup unused rtwdev::roc_work - wifi: rtw89: Hide some errors when the device is unplugged - wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot - wifi: virt_wifi: don't transfer operstate before register - wifi: virt_wifi: free skb when disconnected - wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown - wifi: wilc1000: fix out-of-bounds read in P2P public action frames - wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() - wifi: wlcore: release runtime PM ref on regdomain config failure - workqueue: Fix NULL current_pwq deref in flush dependency check - writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes - writeback: report a Tasks-RCU quiescent state per cgwb drain pass - x86/fred: Reconstruct the #GP context for rejected INT instructions - x86/mce: Fix hardware debug register corruption on task migration - x86/microcode/intel: Reject problematic loading on Granite Rapids systems - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 - xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() - xfrm: avoid RCU warnings around the per-netns netlink socket - xfrm: fix compat ALLOCSPI request use-after-free - xfrm: Fix dev use-after-free in xfrm async resumption - xfrm: Refactor xfrm_input lock to reduce contention with RSS - xfrm: save input state data before secpath resets - xfrm: serialize state GC with device state flush - xfrm: use hlist_del_init_rcu for state_cache and state_cache_input - xfs: check di_forkoff correctly in scrub - xfs: check padding field in xfs_ioc_commit_range - xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption - xfs: don't call xfs_exchange_range_finish for a dry run - xfs: don't stash removename operations with unknown ftype - xfs: fix attr fork block count checks in xrep_inode_blockcounts - xfs: fix backwards mergeability logic in refcount scrubber - xfs: fix blockgc group quota scanning when usrquota isn't enforced - xfs: fix short ifork reaping computation in xreap_bmapi_binval - xfs: fix under-reservation of blocks when repairing sf directories - xfs: release orphanage dir inode if chown fails - xfs: remove the i_ino field in struct xfs_inode - xfs: report healthy filesystem events in scrub stats - xfs: strengthen the "is cow staging" helpers in scrub - xfs: use correct jiffies comparison function in xchk_maybe_relax - xhci: Cleanup Candence controller PCI device and vendor ID usage - xsk: Use a 32-bit compare in xsk_map_gen_lookup - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- adapt 0652 to 6.12.111 PCC API: pcc_mbox_ioremap() was removed, pcc_mbox_request_channel() now maps shmem itself (check chan->shmem instead) - Co-authored-by: Z.AI GLM- Fix potential Baikal deadlock- upd: 6.12.91 -> 6.12.111 - (all patches adapted to 6.12.111; the series was verified with - rpmbuild -bp and by diffing the %prep tree against a git reference - tree built with git am) - Dropped patches: - already merged upstream in 6.12.92..6.12.111 (found by subject/patch-id): - 0481, 0517, 0521, the whole CVE block 0580-0597, 2113, 2114, 2200, 2201, - 2203 and 27 old lvc patches (9047-9049, 9057, 9070, 9072, 9089, 9093, - 9097, 9098, 9101, 9108, 9117, 9125, 9126, 9142, 9145, 9168, 9202, 9204, - 9208, 9214, 9220, 9222, 9228, 9229, 9230); the i40iw patches went away - together with the removed i40iw driver. - MT7902 series: its Bluetooth part went upstream and was backported into - stable 6.12.x, so 2200, 2201 and 2203 are now vanilla; the Wi-Fi (mt76) - part did not (except the two fixes 2113, 2114), it is kept and adapted, - as well as 2202 and 2204 which are not upstream either - 0001-Revert-perf-to-v6.12.90.patch (perf revert, buildability to be - re-checked; can be re-added if needed) - 0678-net-stmmac-fix-dwmac-intel-x86-build-after-PCS-API-c.patch: it only - fixed a wrong pointer access (priv->hw.xpcs -> priv->hw->xpcs) introduced - by 0663 in dwmac-intel.c; the fix is now included directly into the - adapted 0663, so the separate patch is no longer needed - Adapted to 6.12.111 API changes (re-exported from the reference git tree): - ROSA: 0001-security-off-odd-LSM-by-default (smack: lsm_id based - security_add_hooks, smack_cipso_auto_level), 0410 (quirk table reshuffle), - 0522 (set_ic type), 1008/1011 (quirk/class numbering), 2009, 2100, 2116, - 2117, 2118 (mt76 context shifts) - Baikal: 0646 (psp_copy_fw() rework: _io conversions moved into the new - helper), 0649 (xpcs SGMII get_state rework by 1913cbe452ac: re-added the - Baikal C37_ANCMPLT_INTR branch, removed duplicate - PHY_INTERFACE_MODE_10GBASEX switch cases), 0663 (stmmac: upstream TSO/PCS - rework, opaque dw_xpcs, STMMAC_GET_ENTRY rings; kept Baikal DW DMA - multi-IRQ, FBEE/RBUE interrupts, ptp_lock), 0666 (10GBASEX cases are pure - additions now), 0668 (tx_tick: kept the chan->cl NULL check together with - the new tx_status), 0676 (sata_dwc: platform_get_irq into the multi-IRQ - array) - linux-lvc (9xxx) set refreshed from the linux-6.12-lvc branch rebased onto - v6.12.111: 183 patches refreshed (61 with content changes), 71 new patches - added (9231-9303); also dropped lvc patches duplicating ROSA infosec ones - (9096 vs 0530, 9215 vs 0471-0473, 9236 vs 0501, 9273 vs 0460) - ROSA infosec patches 0531-0535: these files were committed long ago - (45cb5fd "More ROSA infosec patches") but were never declared in - kernel.spec, so they had never been built; they are neither upstream nor in - linux-lvc, therefore they are now wired into the spec right after 0530 - Other: - new patch files renamed to avoid apostrophes/glob chars in filenames: - such characters silently break the shell quoting of the %autopatch - script and a whole range of patches may be skipped without any error - 2102 hunk context fixed to match its application point (before 2115), - which removes a silent --fuzz=10 misplacement in mt7921/pci.c - spec: cleaned orphaned comments (kept the "### CVE patches" marker with a - commented example line), updated the linux-lvc block header - Co-authored-by: Z.AI GLM- Fix crash with CONFIG_MEM_ALLOC_PROFILING_DEBUG (kb#634)- add link to kb#635, patch already ported to 6.18- support legacy cmu-id DT binding for BM1000 CMUs- Revert "Try without EFI zboot on arm64" - We would better package Image, not Image.gz, if keep it disabled. - It was made for testing purposes and had no sense - reverting. - This reverts commit d49f74f29adcbefd1d9869ae36ccfe8066244cbf.- Try without EFI zboot on arm64- Enable CONFIG_FB_EFI for Baikal UEFI 5.5- Update arm64 config: ran oldconfig, enabled KVM- Fix sound output via HDMI to some "MosTech" branded interactive panels- TRy to fix booting Angara- Fix patch numbers- Fixes for mt7902 patches- Fix 2118 patch (includes)- Fix 2118 patch format- Remove some patches for mt7902 driver from 7.1- Add more patches for mt7902 driver from 7.1 (backporting)- Add more patches for mt7902 driver from 7.1- Backport mt7902 driver from 7.1- Fix "Zapscape" (CVE-2026-64561)- Fix CVE-2026-64531- Fix CVE-2026-64560- Support Baikal-M Graviton Angara board- Avoid QXL hangs on an unresponsive SPICE host (okdesk#4023)- Fix "RefluXFS" (CVE-2026-64600)- Fix CVE-2026-53362 and CVE-2026-5336 ("Frag Gap")- Try to fix booting without monitor even at UEFI stage- Try to fix booting Baikal without monitor and then connecting it- Tune descriptions of 2 last patches- Try to stabilize EDID reading on Baikal ET124- Fix monitor reconnecting on Baikal- Try to make sound work out of the box on Baikal ET124 board- Fix Baikal HDA codec configure failure due to built-in controller probing before module load- Try so support Baikal SDK 5.5 and fixes for Baikal HDA sound- Fix "Bad Epoll" (CVE-2026-46242)- Easify debugging Baikal sound- Fix sound on new Baikals- Fix "PEdit-CoW" (CVE-2026-46331)- Fix x86 build after Baikal patches- Fix bootable kernel copy in kernel.spec for cycle- Update Baikal support - Developed in kernel-6.12-bl2- More ROSA infosec patches- Fix CIFSwitch vulnerability- Build kernel-headers in rosa13 where they were in dropped kernel-6.6- Fix building perf- Fix issues found by statical analysis (Svace)- upd: 6.12.90 -> 6.12.91 - Changelog: - ACPI: AGDI: fix missing newline in error message - ACPI: x86: cmos_rtc: Clean up address space handler driver - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver - ALSA: core: Validate compress device numbers without dynamic minors - ALSA: hda/conexant: Fix missing error check for jack detection - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 - ALSA: hda: cs35l56: Fix uninitialized value in cs35l56_hda_read_acpi() - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') - ALSA: hda/realtek - fixed speaker no sound update - ALSA: sc6000: Keep the programmed board state in card-private data - ALSA: scarlett2: Add missing sentinel initializer field - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - ALSA: usb-audio: Bound MIDI endpoint descriptor scans - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams - arm64: cpufeature: Make PMUVer and PerfMon unsigned - arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix UART1 RTS/CTS muxing - arm64: dts: imx8-apalis: Fix LEDs name collision - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT - arm64: dts: imx8qm-mek: switch Type-C connector power-role to dual - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual - arm64: dts: lx2160a: add sda gpio references for i2c bus recovery - arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit - arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes - arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration word - arm64: dts: lx2160a: remove duplicate pinmux nodes - arm64: dts: lx2160a: rename pinmux nodes for readability - arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3 controller's phy-names - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count - arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure syscon - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8450: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8550: Fix GIC_ITS range length - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller - arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD card modes - arm64: dts: qcom: sm8650: Fix GIC_ITS range length - arm64: dts: qcom: sm8650: Fix xo clock supply of SD host controller - arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace - arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace - arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan Pi - arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up config - arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0 data pins - arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on data pins - arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label - arm64: kexec: Remove duplicate allocation for trans_pgd - arm64: Reserve an extra page for early kernel mapping - arm64/scs: Fix potential sign extension issue of advance_loc4 - arm64/xor: fix conflicting attributes for xor_block_template - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended - ARM: dts: mediatek: mt7623: fix efuse fallback compatible - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX - ASoC: add symmetric_ prefix for dai->rate/channels/sample_bits - ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED - ASoC: codecs: ab8500: Fix casting of private data - ASoC: fsl_easrc: Change the type for iec958 channel status controls - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() - ASoC: fsl_micfil: Add access property for "VAD Detected" - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() - ASoC: fsl_micfil: Fix event generation in micfil_quality_set() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() - ASoC: qcom: qdsp6: topology: check widget type before accessing data - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] - ASoC: soc-compress: use function to clear symmetric params - ASoC: SOF: compress: return the configured codec from get_params - ASoC: SOF: Intel: hda: Place check before dereference - ASoC: SOF: ipc3: Use standard dev_dbg API - ASoC: sti: Return errors from regmap_field_alloc() - ASoC: sti: use managed regmap_field allocations - ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH commands - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV - audit: fix incorrect inheritable capability in CAPSET records - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() - blk-cgroup: wait for blkcg cleanup before initializing new disk - Bluetooth: btmtk: accept too short WMT FUNC_CTRL events - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp - Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU - Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(sk)->codec - bpf: Allow instructions with arena source and non-arena dest registers - bpf: allow UTF-8 literals in bpf_bprintf_prepare() - bpf,arc_jit: Fix missing newline in pr_err messages - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT - bpf, arm64: Fix off-by-one in check_imm signed range check - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks - bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars - bpf: fix end-of-list detection in cgroup_storage_get_next_key() - bpf: fix mm lifecycle in open-coded task_vma iterator - bpf: Fix NULL deref in map_kptr_match_type for scalar regs - bpf: Fix OOB in pcpu_init_value - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check - bpf: Fix RCU stall in bpf_fd_array_map_clear() - bpf: Fix stale offload->prog pointer after constant blinding - bpf: Fix variable length stack write over spilled pointers - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb - bpf: Relax scalar id equivalence for state pruning - bpf: return VMA snapshot from task_vma iterator - bpf, sockmap: Fix af_unix iter deadlock - bpf, sockmap: Fix af_unix null-ptr-deref in proto update - bpf, sockmap: Take state lock for af_unix iter - bpf: switch task_vma iterator from mmap_lock to per-VMA locks - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path - bpf: Validate node_id in arena_alloc_pages() - btrfs: do not mark inode incompressible after inline attempt fails - btrfs: fix deadlock between reflink and transaction commit when using flushoncommit - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() - btrfs: fix missing last_unlink_trans update when removing a directory - btrfs: pass struct btrfs_inode to clone_copy_inline_extent() - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() - btrfs: use inode already stored in local variable at btrfs_rmdir() - bus: fsl-mc: use generic driver_override infrastructure - bus: rifsc: fix RIF configuration check for peripherals - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() - ceph: fix a buffer leak in __ceph_setxattr() - ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size - cgroup: Increment nr_dying_subsys_* from rmdir context - cgroup/rdma: fix integer overflow in rdmacg_try_charge() - clk: imx8mq: Correct the CSI PHY sels - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() - clk: qcom: dispcc-sc7180: Add missing MDSS resets - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers - clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source - clk: qcom: gcc-sc8180x: Add missing GDSCs - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains - clk: qcom: gcc-sc8180x: Use retention for USB power domains - clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON - clk: qoriq: avoid format string warning - clk: visconti: pll: initialize clk_init_data to zero - clk: xgene: Fix mapping leak in xgene_pllclk_init() - crypto: af_alg - Cap AEAD AD length to 0x80000000 - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs - crypto: atmel - Use unregister_{aeads,ahashes,skciphers} - crypto: ccp - copy IV using skcipher ivsize - crypto: jitterentropy - replace long-held spinlock with mutex - crypto: qat - disable 420xx AE cluster when lead engine is fused off - crypto: qat - disable 4xxx AE cluster when lead engine is fused off - crypto: qat - fix type mismatch in RAS sysfs show functions - crypto: qat - introduce fuse array - crypto: qat - use swab32 macro - crypto: sa2ul - Fix AEAD fallback algorithm names - crypto: tegra - Disable softirqs before finalizing request - crypto: tegra - finalize crypto req on error - crypto: tegra - Reserve keyslots to allocate dynamically - crypto: tegra - Transfer HASH init function to crypto engine - cxl/pci: Check memdev driver binding status in cxl_reset_done() - debugfs: check for NULL pointer in debugfs_create_str() - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() - devres: fix missing node debug info in devm_krealloc() - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() - dm cache: fix concurrent write failure in passthrough mode - dm cache: fix dirty mapping checking in passthrough mode switching - dm cache: fix missing return in invalidate_committed's error path - dm cache: fix null-deref with concurrent writes in passthrough mode - dm cache: fix write hang in passthrough mode - dm cache: fix write path cache coherency in passthrough mode - dm cache metadata: fix memory leak on metadata abort retry - dm cache policy smq: fix missing locks in invalidating cache blocks - dm cache: support shrinking the origin device - dm init: ensure device probing has finished in dm-mod.waitfor= - dm log: fix out-of-bounds write due to region_count overflow - Documentation: fix a hugetlbfs reservation statement - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n - drbd: Balance RCU calls in drbd_adm_dump_devices() - drm/amd/display: Allow DCE link encoder without AUX registers - drm/amd/display: Read EDID from VBIOS embedded panel info - drm/amdgpu: add amdgpu_device reference in ip block - drm/amdgpu: Add default case in DVI mode validation - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG - drm/amdgpu: fix spelling typos - drm/amdgpu/gfx10: look at the right prop for gfx queue priority - drm/amdgpu/gfx11: look at the right prop for gfx queue priority - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring - drm/amdgpu: update the handle ptr in dump_ip_state - drm/amdgpu: update the handle ptr in early_init - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs - drm/amd/pm/ci: Fill DW8 fields from SMC - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup - drm/gma500/oaktrail_lvds: fix hang on init failure - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats - drm/i915: Relocate the SKL wm sanitation code - drm/i915: skip __i915_request_skip() for already signaled requests - drm/i915/wm: Verify the correct plane DDB entry - drm/imagination: Switch reset_reason fields from enum to u32 - drm/komeda: fix integer overflow in AFBC framebuffer size check - drm/loongson: Use managed KMS polling - drm/msm/a6xx: Fix dumping A650+ debugbus blocks - drm/msm/a6xx: Fix HLSQ register dumping - drm/msm/a6xx: Use barriers while updating HFI Q headers - drm/msm/dpu: fix mismatch between power and frequency - drm/msm/dsi: add the missing parameter description - drm/msm/dsi: fix bits_per_pclk - drm/msm/dsi: fix hdisplay calculation for CMD mode panel - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 - drm/msm/shrinker: Fix can_block() logic - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first - drm/panel: simple: Correct G190EAN01 prepare timing - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() - drm/sun4i: backend: fix error pointer dereference - drm/sun4i: Fix resource leaks - drm/sysfb: ofdrm: fix PCI device reference leaks - drm/v3d: Handle error from drm_sched_entity_init() - drm/v3d: Reject empty multisync extension to prevent infinite loop - drm/xe/debugfs: Correct printing of register whitelist ranges - drm/xe/dma-buf: handle empty bo and UAF races - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 - e1000e: Unroll PTP in probe error handling - efi/capsule-loader: fix incorrect sizeof in phys array reallocation - erofs: add encoded extent on-disk definition - erofs: avoid infinite loops due to corrupted subpage compact indexes - erofs: do sanity check on m->type in z_erofs_load_compact_lcluster() - erofs: unify lcn as u64 for 32-bit platforms - eth: fbnic: Use wake instead of start - eventfs: Use list_add_tail_rcu() for SRCU-protected children list - ext4: fix possible null-ptr-deref in mbt_kunit_exit() - f2fs: fix false alarm of lockdep on cp_global_sem lock - f2fs: fix incorrect file address mapping when inline inode is unwritten - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() - fanotify: call fanotify_events_supported() before path_permission() and security_path_notify() - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break - fbdev: offb: fix PCI device reference leak on probe failure - fdget(), trivial conversions - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP - firmware: dmi: Correct an indexing error in dmi.h - fs/adfs: validate nzones in adfs_validate_bblk() - fs/mbcache: cancel shrink work before destroying the cache - fsnotify: fix inode reference leak in fsnotify_recalc_mask() - fs/ntfs3: terminate the cached volume label after UTF-8 conversion - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - gfs2: add some missing log locking - gfs2: Call unlock_new_inode before d_instantiate - gfs2: prevent NULL pointer dereference during unmount - HID: asus: do not abort probe when not necessary - HID: asus: make asus_resume adhere to linux kernel coding standards - HID: usbhid: fix deadlock in hid_post_reset() - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() - hrtimer: Reduce trace noise in hrtimer_start() - hrtimers: Update the return type of enqueue_hrtimer() - hte: tegra194: remove Kconfig dependency on Tegra194 SoC - hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove callback - hwmon: Switch back to struct platform_driver::remove() - i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers() - i3c: master: dw-i3c: Fix missing reset assertion in remove() callback - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status - i40e: Cleanup PTP pins on probe failure - i40e: don't advertise IFF_SUPP_NOFCS - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING - iavf: stop removing VLAN filters from PF on interface down - iavf: wait for PF confirmation before removing VLAN filters - ice: fix double-free of tx_buf skb - ice: fix ICE_AQ_LINK_SPEED_M for 200G - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g - ice: fix NULL pointer dereference in ice_reset_all_vfs() - ice: fix timestamp interrupt configuration for E825C - ice: Remove jumbo_remove step from TX path - ice: update PCS latency settings for E825 10G/25Gb modes - ima: check return value of crypto_shash_final() in boot aggregate - ima_fs: Correctly create securityfs files for unsupported hash algos - ima_fs: don't bother with removal of files in directory we'll be removing - ima_fs: get rid of lookup-by-dentry stuff - iommu/amd: Convert dev_data lock from spinlock to mutex - iommu/amd: Do not detach devices in domain free path - iommu/amd: Fix clone_alias() to use the original device's devid - iommu/amd: Introduce helper function get_dte256() - iommu/amd: Introduce helper function to update 256-bit DTE - iommu/amd: Put list_add/del(dev_data) back under the domain->lock - iommu/amd: Rearrange attach device code - iommu/amd: Reduce domain lock scope in attach device path - iommu/amd: Remove protection_domain.dev_cnt variable - iommu/amd: Reorder attach device code - iommu/amd: xarray to track protection_domain->iommu list - iommufd: Fix return value of iommufd_fault_fops_write() - iommufd: vfio compatibility extension check for noiommu mode - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() - iommu/vt-d: Disable DMAR for Intel Q35 IGFX - io_uring/kbuf: use mem_is_zero() - io-wq: check that the predecessor is hashed in io_wq_remove_pending() - ipmi: ssif_bmc: change log level to dbg in irq callback - ipmi: ssif_bmc: fix message desynchronization after truncated response - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure - ipv4: udp: fix typos in comments - ipv6: fix possible UAF in icmpv6_rcv() - ipv6: udp: fix typos in comments - ipvs: fix MTU check for GSO packets in tunnel mode - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining - kbuild: builddeb - avoid recompiles for non-cross-compiles - ksmbd: destroy async_ida in ksmbd_conn_free() - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine - ksmbd: scope conn->binding slowpath to bound sessions only - ktest: Avoid undef warning when WARNINGS_FILE is unset - ktest: Honor empty per-test option overrides - ktest: Run POST_KTEST hooks on failure and cancellation - KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic - KVM: x86: Fix Xen hypercall tracepoint argument assignment - leds: lgm-sso: Remove duplicate assignments for priv->mmap - libceph: Fix potential null-ptr-deref in decode_choose_args() - libceph: Fix potential out-of-bounds access in crush_decode() - libceph: Fix potential out-of-bounds access in osdmap_decode() - libceph: handle rbtree insertion error in decode_choose_args() - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() - locking: Fix rwlock support in - LoongArch: KVM: Compile switch.S directly into the kernel - loop: fix partition scan race between udev and loop_reread_partitions() - macvlan: annotate data-races around port->bc_queue_len_used - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - mailbox: add sanity check for channel array - mailbox: mailbox-test: don't free the reused channel - mailbox: mailbox-test: free channels on probe error - mailbox: mailbox-test: initialize struct earlier - mailbox: mailbox-test: make data_ready a per-instance variable - mailbox: mtk-cmdq: Fix CURR and END addr for task insert case - md/raid1: fix the comparing region of interval tree - md: wake raid456 reshape waiters before suspend - media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe - media: i2c: og01a1b: Replace client->dev usage - memory: tegra124-emc: Fix dll_change check - memory: tegra30-emc: Fix dll_change check - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n - mptcp: drop __mptcp_fastopen_gen_msk_ackseq() - mptcp: fix rx timestamp corruption on fastopen - mptcp: pm: ADD_ADDR rtx: fix potential data-race - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 - mptcp: pm: prio: skip closed subflows - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path - mtd: physmap_of_gemini: Fix disabled pinctrl state check - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation - neigh: let neigh_xmit take skb ownership - net: airoha: Add missing RX_CPU_IDX() configuration in airoha_qdma_cleanup_rx_queue() - net: airoha: Implement BQL support - net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled - net: bcmgenet: add bcmgenet_has_* helpers - net: bcmgenet: fix leaking free_bds - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb - net: bcmgenet: fix racing timeout handler - net: bcmgenet: Initialize u64 stats seq counter - net: bcmgenet: move DESC_INDEX flow to ring 0 - net: bcmgenet: support reclaiming unsent Tx packets - net: bcmgenet: switch to use 64bit statistics - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master - netconsole: allow selection of egress interface via MAC address - netconsole: propagate device name truncation in dev_name_store() - netdevsim: zero initialize struct iphdr in dummy sk_buff - net: dsa: realtek: rtl8365mb: fix mode mask calculation - netfilter: arp_tables: fix IEEE1394 ARP payload parsing - netfilter: conntrack: remove sprintf usage - netfilter: nf_conntrack_sip: don't use simple_strtoul - netfilter: nf_conntrack_sip: get helper before allocating expectation - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check - netfilter: nf_tables: unconditionally bump set->nelems before insertion - netfilter: nft_ct: fix missing expect put in obj eval - netfilter: nft_fwd_netdev: check ttl/hl before forwarding - netfilter: nft_osf: restrict it to ipv4 - netfilter: skip recording stale or retransmitted INIT - netfilter: xtables: restrict several matches to inet family - netfilter: xt_policy: fix strict mode inbound policy matching - netfilter: xt_socket: enable defrag after all other checks - netfs: fix error handling in netfs_extract_user_iter() - netfs: Fix potential uninitialised var in netfs_extract_user_iter() - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG - net: mctp i2c: check length before marking flow active - net/mlx5e: Fix features not applied during netdev registration - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() - net/mlx5: Fix HCA caps leak on notifier init failure - net: page_pool: create hooks for custom memory providers - net: phy: dp83869: fix setting CLK_O_SEL field. - net: phy: fix a return path in get_phy_c45_ids() - net: phy: qcom: at803x: Use the correct bit to disable extended next page - netpoll: Extract carrier wait function - netpoll: extract IPv4 address retrieval into helper function - netpoll: Extract IPv6 address retrieval function - netpoll: fix IPv6 local-address corruption - netpoll: pass buffer size to egress_dev() to avoid MAC truncation - net/rds: Optimize rds_ib_laddr_check - net/rds: reset op_nents when zerocopy page pin fails - net/rds: Restrict use of RDS/IB to the initial network namespace - net/rds: zero per-item info buffer before handing it to visitors - net/sched: act_ct: Only release RCU read lock after ct_ft - net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir - net/sched: cls_flower: revert unintended changes - net/sched: netem: check for negative latency and jitter - net/sched: netem: fix probability gaps in 4-state loss model - net/sched: netem: fix queue limit check to include reordered packets - net/sched: netem: fix slot delay calculation overflow - net/sched: netem: only reseed PRNG when seed is explicitly provided - net/sched: netem: validate slot configuration - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys - net/sched: sch_choke: annotate data-races in choke_dump_stats() - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() - net_sched: sch_hhf: annotate data-races in hhf_dump_stats() - net/sched: sch_pie: annotate data-races in pie_dump_stats() - net/sched: sch_pie: annotate more data-races in pie_dump_stats() - net/sched: sch_red: annotate data-races in red_dump_stats() - net/sched: sch_sfb: annotate data-races in sfb_dump_stats() - net/sched: taprio: fix NULL pointer dereference in class dump - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch - net: skbuff: preserve shared-frag marker during coalescing - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net/socket.c: switch to CLASS(fd) - net: tls: fix strparser anchor skb leak on offload RX setup failure - net, treewide: define and use MAC_ADDR_STR_LEN - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit - nexthop: fix IPv6 route referencing IPv4 nexthop - NFC: trf7970a: Ignore antenna noise when checking for RF field - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - ntfs: ->d_compare() must not block - nvme-pci: fix missed admin queue sq doorbell write - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison - ocfs2/dlm: validate qr_numregions in dlm_match_regions() - ocfs2: fix listxattr handling when the buffer is full - ocfs2: validate bg_bits during freefrag scan - ocfs2: validate group add input before caching - openvswitch: cap upcall PID array size and pre-size vport replies - padata: Put CPU offline callback in ONLINE section to allow failure - padata: Remove cpu online check from cpu add and removal - page_pool: fix incorrect mp_ops error handling - page_pool: fix memory-provider leak in page_pool_create_percpu() error path - page_pool: Set `dma_sync` to false for devmem memory provider - params: Replace __modinit with __init_or_module - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well - PCI: dwc: ep: Fix MSI-X Table Size configuration in dw_pcie_ep_set_msix() - PCI: dwc: Invoke post_init in dw_pcie_resume_noirq() - PCI: dwc: Perform cleanup in the error path of dw_pcie_resume_noirq() - PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per the documentation - PCI: Enable AtomicOps only if Root Port supports them - PCI: endpoint: Align pci_epc_set_msix(), pci_epc_ops::set_msix() nr_irqs encoding - PCI: Initialize temporary device in new_id_store() - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found - PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports - PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support - PCI: tegra194: Allow system suspend when the Endpoint link is not up - PCI: tegra194: Disable direct speed change for Endpoint mode - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode - PCI: tegra194: Don't force the device into the D0 state before L2 - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on - PCI: tegra194: Fix polling delay for L2 state - PCI: tegra194: Free up Endpoint resources during remove() - PCI: tegra194: Increase LTSSM poll time on surprise link down - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() - PCI: tegra194: Set LTR message request before PCIe link up in Endpoint mode - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" - PCI: tegra194: Use DWC IP core version - PCI: use generic driver_override infrastructure - PCMCIA: Fix garbled log messages for KERN_CONT - perf branch: Avoid incrementing NULL - perf cgroup: Update metric leader in evlist__expand_cgroup - perf evsel: Add alternate_hw_config and use in evsel__match - perf expr: Return -EINVAL for syntax error in expr__find_ids() - perf lock: Fix option value type in parse_max_stack - perf maps: Fix copy_from that can break sorted by name order - perf python: Add parse_events function - perf stat: Fix opt->value type for parse_cache_level - perf tool_pmu: Factor tool events into their own PMU - perf tool_pmu: Fix aggregation on duration_time - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace - perf tools: Fix module symbol resolution for non-zero .text sh_addr - perf util: Kill die() prototype, dead for a long time - pinctrl: abx500: Fix type of 'argument' variable - pinctrl: cy8c95x0: Avoid returning positive values to user space - pinctrl: cy8c95x0: remove duplicate error message - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() - pinctrl: pinctrl-pic32: Fix resource leak - pinctrl: realtek: Fix function signature for config argument - pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT} registers - platform/chrome: chromeos_tbmc: Drop wakeup source on remove - platform/surface: surfacepro3_button: Drop wakeup source on remove - platform/wmi: use generic driver_override infrastructure - platform/x86: asus-wmi: adjust screenpad power/brightness handling - platform/x86: asus-wmi: fix screenpad brightness range - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() - platform/x86: dell-wmi-sysman: bound enumeration string aggregation - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() - PM: domains: De-constify fields in struct dev_pm_domain_attach_data - pmdomain: ti: omap_prm: Fix a reference leak on device node - powerpc/crash: fix backup region offset update to elfcorehdr - powerpc/crash: Update backup region offset in elfcorehdr on memory hotplug - powerpc/warp: Fix error handling in pika_dtm_thread - pppoe: drop PFC frames - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls - pstore/ram: fix resource leak when ioremap() fails - pwm: atmel-tcb: Cache clock rates and mark chip as atomic - quota: Fix race of dquot_scan_active() with quota deactivation - r8152: fix incorrect register write to USB_UPHY_XTAL - RDMA/core: Prefer NLA_NUL_STRING - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() - remoteproc: xlnx: Fix sram property parsing - reset: Add devres helpers to request pre-deasserted reset controls - reset: replace boolean parameters with flags parameter - Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" - rtc: abx80x: Disable alarm feature if no interrupt attached - s390/bpf: Zero-extend bpf prog return values and kfunc arguments - s390/cio: use generic driver_override infrastructure - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new - sched/fair: Clear rel_deadline when initializing forked entities - scsi: sg: Fix sysctl sg-big-buff register during sg_init() - scsi: sg: Resolve soft lockup issue when opening /dev/sgX - scsi: target: core: Fix integer overflow in UNMAP bounds check - sctp: discard stale INIT after handshake completion - sctp: fix missing encap_port propagation for GSO fragments - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - selftest: memcg: skip memcg_sock test if address family not supported - selftests/bpf: fix __jited_unpriv tag name - selftests/mm: skip migration tests if NUMA is unavailable - selftests: netfilter: nft_tproxy.sh: adjust to socat changes - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 - selftests/sched_ext: Add missing error check for exit__load() - sfc: fix error code in efx_devlink_info_running_versions() - slip: bound decode() reads against the compressed packet length - slip: reject VJ receive packets on instances with no rstate array - smb: client: correctly handle ErrorContextData as a flexible array - smb: client: fix OOB reads parsing symlink error response - smb/client: fix possible infinite loop and oob read in symlink_data() - smb: client: Use FullSessionKey for AES-256 encryption key derivation - soc: qcom: aoss: compare against normalized cooling state - soc: qcom: llcc: fix v1 SB syndrome register offset - soc: qcom: ocmem: make the core clock optional - soc: qcom: ocmem: register reasons for probe deferrals - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available - soc/tegra: cbb: Set ERD on resume for err interrupt - soundwire: bus: demote UNATTACHED state warnings to dev_dbg() - soundwire: cadence: Clear message complete before signaling waiting thread - soundwire: debugfs: initialize firmware_file to empty string - sparc64: vdso: Link with -z noexecstack - sparc/vdso: Always reject undefined references during linking - spi: fsl-qspi: Use reinit_completion() for repeated operations - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback - spi: nxp-fspi: Use reinit_completion() for repeated operations - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ - spi: sifive: fix controller deregistration - spi: sifive: Simplify clock handling with devm_clk_get_enabled() - spi: spi-nxp-fspi: enable runtime pm for fspi - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans - tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE - tcp: annotate data-races around tp->bytes_retrans - tcp: annotate data-races around tp->bytes_sent - tcp: annotate data-races around tp->dsack_dups - tcp: annotate data-races around tp->plb_rehash - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) - tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init(). - tcp: make probe0 timer handle expired user timeout - thermal/drivers/spear: Fix error condition for reading st,thermal-flags - tipc: fix double-free in tipc_buf_append() - tracing: branch: Fix inverted check on stat tracer registration - tracing: Rebuild full_name on each hist_field_name() call - tty: hvc_iucv: fix off-by-one in number of supported devices - tty: serial: ip22zilog: Fix section mispatch warning - udp: Force compute_score to always inline - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() - virtio_net: Fix endian with virtio_net_ctrl_rss - virtio_net: Split struct virtio_net_rss_config - virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change via VQ_PAIRS_SET - virtio_net: Use new RSS config structs - vrf: Fix a potential NPD when removing a port from a VRF - wifi: ath10k: fix station lookup failure during disconnect - wifi: brcmfmac: Fix error pointer dereference - wifi: mac80211: handle VHT EXT NSS in ieee80211_determine_our_sta_mode() - wifi: mt76: mt7615: fix use_cts_prot support - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() - wifi: mt76: mt7915: fix use_cts_prot support - wifi: mt76: mt7921: fix 6GHz regulatory update on connection - wifi: mt76: mt7921: Place upper limit on station AID - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() - wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() - wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event - wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path - x86/um: fix vDSO installation - x86/um/vdso: Drop VDSO64-y from Makefile - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- FIX GPO Frag vulnerability- Fixed building with bpftool on aarch64 (regenerated config with pahole package installed)- Fix issue in AUFS found by fuzzing- Remove no more used patches- Fix issues found by fuzzing- upd: 6.12.74 -> 6.12.90 - Removed no more needed Patch0512. - These patches fixed a vulnerability where in-place decryption could - corrupt shared skb frags (e.g. from splice) and a subsequent skb - memory leak in the unshare path. - Between v6.12.74 and v6.12.90, upstream refactored the rxrpc receive - path and incorporated equivalent fixes: - * bf20f46d94f1 ("rxrpc: Fix potential UAF after skb_unshare() failure") - * 016725807ce3 ("rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets") - * 3711382a7734 ("rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present") - The unshare gate was moved from io_thread.c to call_event.c, and - the check was extended to skb_has_frag_list() || skb_has_shared_frag(), - which covers the original splice-loopback vector. The skb leak fixed - by 0512.2 is also gone because the caller (rxrpc_io_thread()) now - always frees the original skb after rxrpc_input_packet() returns. - Changelog: - 9p/xen: protect xen_9pfs_front_free against concurrent calls - accel/qaic: Handle DBC deactivation if the owner went away - ACPI: APEI: GHES: Disable KASAN instrumentation when compile testing with clang < 18 - ACPI: battery: fix incorrect charging status when current is zero - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO - ACPI: PM: Save NVS memory on Lenovo G70-35 - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] - ACPI: scan: Use acpi_dev_put() in object add error paths - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO - ACPI: video: force native backlight on HP OMEN 16 (8A44) - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) - af_key: validate families in pfkey_send_migrate() - af_unix: read UNIX_DIAG_VFS data under unix_state_lock - af_unix: Reject SIOCATMARK on non-stream sockets - alarmtimer: Fix argument order in alarm_timer_forward() - alpha: fix user-space corruption during memory compaction - ALSA: 6fire: Fix input volume change detection - ALSA: 6fire: fix use-after-free on disconnect - ALSA: aloop: Fix peer runtime UAF during format-change stop - ALSA: aoa: i2sbus: clear stale prepared state - ALSA: aoa: i2sbus: fix OF node lifetime handling - ALSA: aoa: Skip devices with no codecs in i2sbus_resume() - ALSA: aoa: Use guard() for mutex locks - ALSA: asihpi: avoid write overflow check warning - ALSA: caiaq: Don't abort when no input device is available - ALSA: caiaq: Fix control_put() result and cache rollback - ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path - ALSA: caiaq: fix stack out-of-bounds read in init_card - ALSA: caiaq: fix usb_dev refcount leak on probe failure - ALSA: caiaq: Handle probe errors properly - ALSA: caiaq: take a reference on the USB device in create_card() - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() - ALSA: core: Fix potential data race at fasync handling - ALSA: core: Serialize deferred fasync state checks - ALSA: ctxfi: Add fallback to default RSR for S/PDIF - ALSA: ctxfi: Fix missing SPDIFI1 index handling - ALSA: ctxfi: Limit PTP to a single page - ALSA: firewire-lib: fix uninitialized local variable - ALSA: firewire-tascam: Do not drop unread control events - ALSA: fireworks: bound device-supplied status before string array lookup - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() - ALSA: hda: cs35l56: Propagate ASP TX source control errors - ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC - ALSA: hda/realtek: add quirk for ASUS UM6702RC - ALSA: hda/realtek: add quirk for Framework F111:000F - ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10 - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9 - ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED) - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx - ALSA: hda/realtek: fix LG Gram Style 14 speakers - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter - ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter - ALSA: hda/senary: Ensure EAPD is enabled during init - ALSA: misc: Use guard() for spin locks - ALSA: mixer: oss: Add card disconnect checkpoints - ALSA: pci: hda: use snd_kcontrol_chip() - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger - ALSA: pcm: Relax __free() variable declarations - ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl() - ALSA: pcmtest: fix reference leak on failed device registration - ALSA: pcmtest: Fix resource leaks in module init error paths - ALSA: pcm: use new array-copying-wrapper - ALSA: scarlett2: Fix DSP filter control array handling - ALSA: scarlett2: Fix redeclaration of loop variable - ALSA: seq: Fix UMP group 16 filtering - ALSA: seq: Notify client and port info changes - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio - ALSA: usb-audio: Add sanity check for OOB writes at silencing - ALSA: usb-audio: apply quirk for MOONDROP JU Jiu - ALSA: usb-audio: Avoid false E-MU sample-rate notifications - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() - ALSA: usb-audio: Cap the packet size pre-calculations - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces - ALSA: usb-audio: Check max frame size for implicit feedback mode, too - ALSA: usb-audio: Evaluate packsize caps at the right place - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex - ALSA: usb-audio: Fix UAC3 cluster descriptor size check - ALSA: usb-audio: Improve Focusrite sample rate filtering - ALSA: usb-audio: midi2: Restart output URBs on resume - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES - ALSA: usb-audio: Update the number of packets properly at receiving - ALSA: usb-audio: Use correct version for UAC3 header validation - ALSA: usb-audio: Use inclusive terms - ALSA: vmaster: Relax __free() variable declarations - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 - amd-xgbe: fix link status handling in xgbe_rx_adaptation - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds - amd-xgbe: fix sleep while atomic on suspend/resume - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled - APEI/GHES: ARM processor Error: don't go past allocated memory - APEI/GHES: ensure that won't go past CPER allocated record - AppArmor: Allow apparmor to handle unaligned dfa tables - apparmor: avoid per-cpu hold underflow in aa_get_buffer - apparmor: fix aa_label to return state from compount and component match - apparmor: fix differential encoding verification - apparmor: Fix double free of ns_name in aa_replace_profiles() - apparmor: fix invalid deref of rawdata when export_binary is unset - apparmor: fix: limit the number of levels of policy namespaces - apparmor: fix memory leak in verify_header - apparmor: fix missing bounds check on DEFAULT table in verify_dfa() - apparmor: fix NULL sock in aa_sock_file_perm - apparmor: Fix & Optimize table creation from possibly unaligned memory - apparmor: fix race between freeing data and fs accessing it - apparmor: fix race on rawdata dereference - apparmor: fix rlimit for posix cpu timers - apparmor: fix side-effect bug in match_char() macro usage - apparmor: fix unprivileged local user can do privileged policy management - apparmor: make label_match return a consistent value - apparmor: remove apply_modes_to_perms from label_match - apparmor: replace recursive profile removal with iterative approach - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure - apparmor: use target task's context in apparmor_getprocattr() - apparmor: validate DFA start states are in bounds in unpack_pdb - arm64: Add support for TSV110 Spectre-BHB mitigation - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults - arm64: Disable branch profiling for all arm64 code - arm64: dts: amlogic: axg: assign the MMC signal clocks - arm64: dts: amlogic: c3: assign the MMC signal clocks - arm64: dts: amlogic: g12: assign the MMC A signal clock - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks - arm64: dts: amlogic: gx: assign the MMC signal clocks - arm64: dts: amlogic: s4: assign mmc b clock to 24MHz - arm64: dts: amlogic: s4: fix mmc clock assignment - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency - arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC and SD - arm64: dts: imx93-tqma9352: improve eMMC pad configuration - arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio pinmux - arm64: dts: marvell: uDPU: add ethernet aliases - arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node - arm64: dts: qcom: agatti: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: hamoa/x1: fix idle exit latency - arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of AD7147 - arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm - arm64: dts: qcom: sdm630: fix gpu_speed_bin size - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0 - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions - arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the DP PHYs - arm64: dts: qcom: x1e80100: Fix USB combo PHYs SS1 and SS2 ref clocks - arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models) - arm64: dts: renesas: r9a09g057: Add RTC node - arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes - arm64: dts: renesas: white-hawk-cpu-common: Add pin control for DSI-eDP IRQ - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro - arm64: dts: rockchip: Fix rk356x PCIe range mappings - arm64: dts: rockchip: Fix rk3588 PCIe range mappings - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins - arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from M19 to N22 - arm64: dts: ti: k3-j784s4-j742s2-main-common.dtsi: Refactor watchdog instances for j784s4 - arm64: dts: ti: k3-j784s4-main.dtsi: Move c71_3 node to appropriate order - arm64: dts: tqma8mpql-mba8mp-ras314: Fix HDMI CEC pad control settings - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y - arm64: Fix sampling the "stable" virtual counter in preemptible section - arm64: Force the use of CNTVCT_EL0 in __delay() - arm64: hugetlbpage: avoid unused-but-set-parameter warning (gcc-16) - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() - arm64: poe: fix stale POR_EL0 values for ptrace - arm64/scs: Fix handling of advance_loc4 - arm64: tegra: smaug: Add usb-role-switch support - ARM: 9467/1: mm: Don't use %pK through printk - ARM: clean up the memset64() C wrapper - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells - ARM: omap2: Fix reference count leaks in omap_control_init() - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable - ASoC: adau1372: Fix clock leak on PLL lock failure - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value - ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe() - ASoC: cs42l43: Report insert for exotic peripherals - ASoC: detect empty DMI strings - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure - ASoC: es8328: Add error unwind in resume - ASoC: fsl_easrc: fix comment typo - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() - ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: boards: fix unmet dependency on PINCTRL - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error - ASoC: Intel: catpt: Fix the device initialization - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler - ASoC: nau8821: Consistently clear interrupts before unmasking - ASoC: nau8821: Fixup nau8821_enable_jack_detect() - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens - ASoC: qcom: q6apm: move component registration to unmanaged version - ASoC: qcom: q6apm: remove child devices when apm is removed - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays - ASoC: simple-card-utils: use __free(device_node) for device node - ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to aggregated - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list - ASoC: soc-core: drop delayed_work_pending() check before flush - ASoC: soc-core: flush delayed work before removing DAIs and widgets - ASoC: SOF: Don't allow pointer operations on unconfigured streams - ASoC: SOF: Intel: hda: Fix NULL pointer dereference - ASoC: SOF: ipc4-control: If there is no data do not send bytes update - ASoC: SOF: ipc4-control: Keep the payload size up to date - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls - ASoC: SOF: topology: reject invalid vendor array size in token parser - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 - ata: libata: avoid long timeouts on hot-unplugged SATA DAS - ata: libata: cancel pending work after clearing deferred_qc - ata: libata-core: Add BRIDGE_OK quirk for QEMU drives - ata: libata-core: disable LPM on ADATA SU680 SSD - ata: libata-core: Disable LPM on ST1000DM010-2EP102 - ata: libata-core: fix cancellation of a port deferred qc work - ata: libata-eh: correctly handle deferred qc timeouts - ata: libata-eh: Fix detection of deferred qc timeouts - ata: libata: Introduce ata_port_eh_scheduled() - ata: libata: Remove ATA_DFLAG_ZAC device flag - ata: libata-scsi: avoid Non-NCQ command starvation - ata: libata-scsi: Document all VPD page inquiry actors - ata: libata-scsi: Refactor ata_scsiop_maint_in() - ata: libata-scsi: Refactor ata_scsiop_read_cap() - ata: libata-scsi: Refactor ata_scsi_simulate() - ata: libata-scsi: refactor ata_scsi_translate() - ata: libata-scsi: Remove struct ata_scsi_args - ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() - ata: libata-scsi: Return residual for emulated SCSI commands - ata: pata_ftide010: Fix some DMA timings - atm: fore200e: fix use-after-free in tasklets during device removal - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs - atm: lec: fix use-after-free in sock_def_readable() - audit: add fchmodat2() to change attributes class - audit: add missing syscalls to read class - audit: move the compat_xxx_class[] extern declarations to audit_arch.h - auxdisplay: arm-charlcd: fix release_mem_region() size - backlight: qcom-wled: Change PM8950 WLED configurations - backlight: qcom-wled: Support ovp values for PMI8994 - batman-adv: Avoid double-rtnl_lock ELP metric worker - batman-adv: avoid OGM aggregation when skb tailroom is insufficient - batman-adv: bla: only purge non-released claims - batman-adv: bla: prevent use-after-free when deleting claims - batman-adv: bla: put backbone reference on failed claim hash insert - batman-adv: fix integer overflow on buff_pos - batman-adv: hold claim backbone gateways by reference - batman-adv: reject new tp_meter sessions during teardown - batman-adv: reject oversized global TT response buffers - batman-adv: stop caching unowned originator pointers in BAT IV - batman-adv: stop tp_meter sessions during mesh teardown - batman-adv: tp_meter: fix tp_num leak on kmalloc failure - bcache: fix cached_dev.sb_bio use-after-free and crash - binder: don't use %pK through printk - binfmt_misc: restore write access before closing files opened by open_exec() - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() - blk-throttle: fix access race during throttle policy activation - blktrace: fix __this_cpu_read/write in preemptible context - block: add a bio_add_virt_nofail helper - block: add pgmap check to biovec_phys_mergeable - block: cleanup blkdev_report_zones() - block: decouple secure erase size limit from discard size limit - block: fix zone write plug removal - block: fix zone write plugs refcount handling in disk_zone_wplug_schedule_bio_work() - block: relax pgmap check in bio_add_page for compatible zone device pages - block: reorganize struct blk_zone_wplug - Bluetooth: btintel_pcie: Use IRQF_ONESHOT and default primary handler - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock - Bluetooth: btmtk: validate WMT event SKB length before struct access - Bluetooth: btusb: Add device ID for Realtek RTL8761BU - Bluetooth: btusb: Add new VID/PID for RTL8852CE - Bluetooth: btusb: Add support for MediaTek7920 0489:e158 - Bluetooth: btusb: clamp SCO altsetting table indices - Bluetooth: hci_conn: fix potential UAF in create_big_sync - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync - Bluetooth: hci_conn: Set link_policy on incoming ACL connections - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers - Bluetooth: hci_ll: Fix firmware leak on error path - Bluetooth: hci_qca: Cleanup on all setup failures - Bluetooth: hci_sync: annotate data-races around hdev->req_status - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate - Bluetooth: hci_sync: Fix hci_le_create_conn_sync - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync - Bluetooth: HIDP: Fix possible UAF - Bluetooth: ISO: Fix defer tests being unstable - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too short - Bluetooth: L2CAP: Fix send LE flow credits in ACL link - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers - Bluetooth: MGMT: validate LTK enc_size on load - Bluetooth: MGMT: validate mesh send advertising payload length - Bluetooth: qca: fix ROM version reading on WCN3998 chips - Bluetooth: SCO: fix race conditions in sco_sock_connect() - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold - Bluetooth: SMP: derive legacy responder STK authentication from MITM state - Bluetooth: SMP: force responder MITM requirements before building the pairing response - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy - Bluetooth: virtio_bt: clamp rx length before skb_put - Bluetooth: virtio_bt: validate rx pkt_type header length - bnxt_en: Allow ntuple filters for drops - bnxt_en: Fix deleting of Ntuple filters - bnxt_en: Fix RSS context delete logic - bnxt_en: Fix RSS table size check when changing ethtool channels - bnxt_en: Restore default stat ctxs for ULP when resource is available - bonding: add ESP offload features when slaves support - bonding: alb: fix UAF in rlb_arp_recv during bond up/down - bonding: Correctly support GSO ESP offload - bonding: fix type confusion in bond_setup_by_slave() - bonding: fix use-after-free due to enslave fail after slave array update - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states - bonding: only set speed/duplex to unknown, if getting speed failed - bonding: prevent potential infinite loop in bond_header_parse() - bonding: use common function to compute the features - bpf: Add third round of bounds deduction - bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded - bpf: crypto: Use the correct destructor kfunc type - bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim - bpf: Fix bpf_xdp_store_bytes proto for read-only arg - bpf: Fix constant blinding for PROBE_MEM32 stores - bpf: Fix regsafe() for pointers to packet - bpf: Fix stack-out-of-bounds write in devmap - bpf: Fix u32/s32 bounds when ranges cross min/max boundary - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN - bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR - bpf: Fix use-after-free in arena_vm_close on fork - bpf: Improve bounds when s64 crosses sign boundary - bpf: Preserve id of register in sync_linked_regs() - bpf: Recognize special arithmetic shift in the verifier - bpf: reject direct access to nullable PTR_TO_BUF pointers - bpf: Release module BTF IDR before module unload - bpf, sockmap: Fix FIONREAD for sockmap - bpf, sockmap: Fix incorrect copied_seq calculation - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). - bpftool: Fix truncated netlink dumps - bpf: verifier improvement in 32bit shift sign extension pattern - bridge: br_nd_send: linearize skb before parsing ND options - bridge: br_nd_send: validate ND option lengths - bridge: cfm: Fix race condition in peer_mep deletion - btrfs: abort transaction on failure to update root in the received subvol ioctl - btrfs: always fallback to buffered write if the inode requires checksum - btrfs: continue trimming remaining devices on failure - btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros - btrfs: do not free data reservation in fallback from inline due to -ENOSPC - btrfs: do not strictly require dirty metadata threshold for metadata writepages - btrfs: don't take device_list_mutex when querying zone info - btrfs: drop unused parameter fs_info from do_reclaim_sweep() - btrfs: fallback to buffered IO if the data profile has duplication - btrfs: fix block_group_tree dirty_list corruption - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak - btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() - btrfs: fix compat mask in error messages in btrfs_check_features() - btrfs: fix double free in create_space_info() error path - btrfs: fix double free in create_space_info_sub_group() error path - btrfs: fix incorrect key offset in error message in check_dev_extent_item() - btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found - btrfs: fix leak of kobject name for sub-group space_info - btrfs: fix lost error when running device stats on multiple devices fs - btrfs: fix objectid value in error message in check_extent_data_ref() - btrfs: fix periodic reclaim condition - btrfs: fix reclaimed bytes accounting after automatic block group reclaim - btrfs: fix super block offset in error message in btrfs_validate_super() - btrfs: fix the qgroup data free range for inline data extents - btrfs: fix transaction abort on file creation due to name hash collision - btrfs: fix transaction abort on set received ioctl due to item overflow - btrfs: fix transaction abort when snapshotting received subvolumes - btrfs: fix warning in scrub_verify_one_metadata() - btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work() - btrfs: handle user interrupt properly in btrfs_trim_fs() - btrfs: hold space_info->lock when clearing periodic reclaim ready - btrfs: log new dentries when logging parent dir of a conflicting inode - btrfs: make wait_on_extent_buffer_writeback() static inline - btrfs: print correct subvol num if active swapfile prevents deletion - btrfs: qgroup: return correct error when deleting qgroup relation item - btrfs: reject root items with drop_progress and zero drop_level - btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() - btrfs: remove pointless out labels from extent-tree.c - btrfs: remove unused define WAIT_PAGE_LOCK for extent io - btrfs: remove unused flag EXTENT_BUFFER_CORRUPT - btrfs: remove unused flag EXTENT_BUFFER_READAHEAD - btrfs: replace BUG() with error handling in __btrfs_balance() - btrfs: reserve enough transaction items for qgroup ioctls - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create - btrfs: split waiting from read_extent_buffer_pages(), drop parameter wait - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() - btrfs: tree-checker: fix misleading root drop_level error message - btrfs: use the correct type to initialize block reserve for delayed refs - btrfs: zoned: fix alloc_offset calculation for partly conventional block groups - btrfs: zoned: fix stripe width calculation - btrfs: zoned: fixup last alloc pointer after extent removal for DUP - btrfs: zoned: fixup last alloc pointer after extent removal for RAID0/10 - btrfs: zoned: fixup last alloc pointer after extent removal for RAID1 - Buffer overflow in drivers/xen/sys-hypervisor.c - bus: fsl-mc: fix an error handling in fsl_mc_device_add() - bus: mhi: host: pci_generic: Switch to async power up to avoid boot delays - bus: omap-ocp2scp: fix OF populate on driver rebind - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() - cache: starfive: fix device node leak in starlink_cache_init() - can: bcm: fix locking for bcm_op runtime updates - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message - can: gs_usb: gs_can_open(): always configure bitrates before starting device - can: gw: fix OOB heap access in cgw_csum_crc8_rel() - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() - can: mcp251x: add error handling for power enable in open and resume - can: mcp251x: fix deadlock in error path of mcp251x_open - can: raw: fix ro->uniq use-after-free in raw_rcv() - can: statistics: add missing atomic access in hot path - can: ucan: fix devres lifetime - can: ucan: Fix infinite loop from zero-length messages - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback - can: usb: f81604: correctly anchor the urb in the read bulk callback - can: usb: f81604: handle bulk write errors properly - can: usb: f81604: handle short interrupt urb messages properly - cdc-acm: new quirk for EPSON HMD - ceph: add a bunch of missing ceph_path_info initializers - ceph: fix i_nlink underrun during async unlink - ceph: fix memory leaks in ceph_mdsc_build_path() - ceph: only d_add() negative dentries when they are unhashed - ceph: supply snapshot context in ceph_uninline_data() - ceph: supply snapshot context in ceph_zero_partial_object() - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() - cgroup: fix race between task migration and iteration - char: tpm: cr50: Remove IRQF_ONESHOT - checkpatch: add support for Assisted-by tag - check-uapi: link into shared objects - cifs: abort open_cached_dir if we don't request leases - cifs: change_conf needs to be called for session setup - cifs: Fix locking usage for tcon fields - cifs: make default value of retrans as zero - cifs: open files should not hold ref on superblock - cifs: some missing initializations on replay - cleanup: Provide retain_and_null_ptr() - clk: clk-apple-nco: Add "apple,t8103-nco" compatible - clk: imx: imx8-acm: fix flags for acm clocks - clk: mediatek: Fix error handling in runtime PM setup - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs - clk: microchip: core: correct return value on *_get_parent() - clk: microchip: mpfs-ccc: fix out of bounds access during output registration - clk: Move clk_{save,restore}_context() to COMMON_CLK section - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src - clk: qcom: gcc-ipq5018: flag sleep clock as critical - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs - clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs - clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops - clk: qcom: gfx3d: add parent to parent request map - clk: qcom: rcg2: compute 2d using duty fraction directly - clk: qcom: Return correct error code in qcom_cc_probe_by_index() - clk: renesas: rzg2l: Fix intin variable size - clk: renesas: rzg2l: Select correct div round macro - clk: rk808: fix OF node reference imbalance - clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 - clk: tegra: tegra124-emc: fix device leak on set_rate() - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() - clocksource/drivers/sh_tmu: Always leave device running after probe - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF - clsact: Fix use-after-free in init/destroy rollback asymmetry - comedi: dt2815: add hardware detection to prevent crash - comedi: me4000: Fix potential overrun of firmware buffer - comedi: me_daq: Fix potential overrun of firmware buffer - comedi: ni_atmio16d: Fix invalid clean-up after failed attach - comedi: Reinit dev->spinlock between attachments to low-level drivers - coresight: etm3x: Fix cpulocked warning on cpuhp - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times - cpufreq: conservative: Reset requested_freq on limits change - cpufreq: dt-platdev: Block the driver from probing on more QC platforms - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path - cpufreq: intel_pstate: Enable asym capacity only when CPU SMT is not possible - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() - cpuidle: governors: menu: Always check timers with tick stopped - cpuidle: powerpc: avoid double clear when breaking snooze - cpuidle: Skip governor when only one idle state is available - crypto: af-alg - fix NULL pointer dereference in scatterwalk - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: af_alg - limit RX SG extraction by receive buffer budget - crypto: algif_aead - Fix minimum RX size check for decryption - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup - crypto: atmel-ecc - Release client on allocation failure - crypto: atmel-sha204a - Fix error codes in OTP reads - crypto: atmel-sha204a - Fix OOM ->tfm_count leak - crypto: atmel-sha204a - Fix OTP sysfs read and error handling - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path - crypto: atmel-sha204a - Fix uninitialized data access on OTP read error - crypto: atmel-tdes - fix DMA sync direction - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: authencesn - reject short ahash digests during instance creation - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: caam - fix DMA corruption on long hmac keys - crypto: caam - fix netdev memory leak in dpaa2_caam_probe - crypto: caam - fix overflow on long hmac keys - crypto: caam - guard HMAC key hex dumps in hash_digest_key - crypto: cavium - fix dma_free_coherent() size - crypto: ccp - Add an S4 restore flow - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls - crypto: ccp - Factor out ring destroy handling to a helper - crypto: ccp - narrow scope of snp_range_list - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails - crypto: ccree - fix a memory leak in cc_mac_digest() - crypto: hisilicon - Fix dma_unmap_single() direction - crypto: hisilicon/qm - move the barrier before writing to the mailbox register - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable - crypto: hisilicon/trng - support tfms sharing the device - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx - crypto: nx - Fix packed layout in struct nx842_crypto_header - crypto: octeontx - fix dma_free_coherent() size - crypto: pcrypt - Fix handling of MAY_BACKLOG requests - crypto: qat - fix warning on adf_pfvf_pf_proto.c - crypto: scatterwalk - Backport memcpy_sglist() - crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() - crypto: talitos - fix SEC1 32k ahash request limitation - crypto: talitos - rename first/last to first_desc/last_desc - crypto: tegra - Add missing CRYPTO_ALG_ASYNC - cxl: Fix premature commit_end increment on decoder commit failure - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled - cxl/port: Fix use after free of parent_port in cxl_detach_ep() - dcache: Limit the minimal number of bucket to two - device property: Allow secondary lookup in fwnode_get_next_child_node() - device property: Make modifications of fwnode "flags" thread safe - dlm: validate length in dlm_search_rsb_tree - dma-buf: Include ioctl.h in UAPI header - dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue - dma: dma-axi-dmac: fix SW cyclic transfers - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests - dmaengine: idxd: Fix freeing the allocated ida too late - dmaengine: idxd: Fix leaking event log memory - dmaengine: idxd: Fix memory leak when a wq is reset - dmaengine: idxd: Fix not releasing workqueue on .release() - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock - dmaengine: sh: rz-dmac: Protect the driver specific lists - dmaengine: stm32-dma3: use module_platform_driver - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings - dmaengine: sun6i: Choose appropriate burst length under maxburst - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA - dmaengine: xilinx: xdma: Fix regmap init error handling - dmaengine: xilinx: xilinx_dma: Fix dma_device directions - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction - dma-mapping: add __dma_from_device_group_begin()/end() - dma-mapping: add missing `inline` for `dma_free_attrs` - dma-mapping: drop unneeded includes from dma-mapping.h - dma: swiotlb: add KMSAN annotations to swiotlb_bounce() - dm: clear cloned request bio pointer when last clone bio completes - dm: don't report warning when doing deferred remove - dm: fix a buffer overflow in ioctl processing - dm: fix unlocked test for dm_suspended_md - dm-integrity: fix a typo in the code for write/discard race - dm-integrity: fix recalculation in bitmap mode - dm mirror: fix integer overflow in create_dirty_log() - dm mpath: make pg_init_delay_msecs settable - dm: remove fake timeout to avoid leak request - dm: replace -EEXIST with -EBUSY - dm-thin: fix metadata refcount underflow - dm-unstripe: fix mapping bug when there are multiple targets in a table - dm: use bio_clone_blkg_association - dm: use READ_ONCE in dm_blk_report_zones - dm-verity: correctly handle dm_bufio_client_create() failure - dm-verity: disable recursive forward error correction - dm-verity-fec: correctly reject too-small FEC devices - dm-verity-fec: correctly reject too-small hash devices - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race - docs: fix WARNING document not included in any toctree - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors - Documentation: trace: Refactor toctree - Documentation: tracing: Add PCI tracepoint documentation - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler - dpaa2-switch: validate num_ifs to prevent out-of-bounds write - drbd: always set BLK_FEAT_STABLE_WRITES - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() - drbd: fix null-pointer dereference on local read error - driver core: Add kernel-doc for DEV_FLAG_COUNT enum value - driver core: Don't let a device probe until it's ready - driver core: generalize driver_override in struct device - driver core: platform: use generic driver_override infrastructure - Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT - drivers: iio: mpu3050: use dev_err_probe for regulator request - drm: Account property blob allocations to memcg - drm/amd/amdgpu: decouple ASPM with pcie dpm - drm/amd/amdgpu: disable ASPM in some situations - drm/amd: Disable ASPM on SI - drm/amd: Disable MES LR compute W/A - drm/amd/display: Add pixel_clock to amd_pp_display_configuration - drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src - drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 - drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% - drm/amd/display: avoid dig reg access timeout on usb4 link training fail - drm/amd/display: Avoid updating surface with the same surface under MPO - drm/amd/display: bypass post csc for additional color spaces in dal - drm/amd/display: Change dither policy for 10 bpc output back to dithering - drm/amd/display: Correct logic check error for fastboot - drm/amd/display: Disable fastboot on DCE 6 too - drm/amd/display: Disable FEC when powering down encoders - drm/amd/display: Disable scaling on DCE6 for now - drm/amd/display: Do not skip unrelated mode changes in DSC validation - drm/amd/display: Fallback to boot snapshot for dispclk - drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() - drm/amd/display: Fix dsc eDP issue - drm/amd/display: Fix GFX12 family constant checks - drm/amd/display: Fix out-of-bounds stream encoder index v3 - drm/amd/display: Fix system resume lag issue - drm/amd/display: Fix writeback on DCN 3.2+ - drm/amd/display: Increase DCN35 SR enter/exit latency - drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4 - drm/amd/display: only power down dig on phy endpoints - drm/amd/display: Reject cursor plane on DCE when scaled differently than primary - drm/amd/display: Remove conditional for shaper 3DLUT power-on - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} - drm/amd: Drop "amdgpu kernel modesetting enabled" message - drm/amd: fix dcn 2.01 check - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() - drm/amdgpu: Add basic validation for RAS header - drm/amdgpu: Add bounds checking to ib_{get,set}_value - drm/amdgpu: Add HAINAN clock adjustment - drm/amdgpu: add support for HDP IP version 6.1.1 - drm/amdgpu: Adjust usleep_range in fence wait - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants - drm/amdgpu: avoid a warning in timedout job handler - drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib - drm/amdgpu: fix gpu idle power consumption issue for gfx v12 - drm/amdgpu: Fix locking bugs in error paths - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() - drm/amdgpu: Fix memory leak in amdgpu_ras_init() - drm/amdgpu: fix NULL pointer issue buffer funcs - drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify - drm/amdgpu: fix the idr allocation flags - drm/amdgpu: Fix use-after-free race in VM acquire - drm/amdgpu: fix zero-size GDS range init on RDNA4 - drm/amdgpu: gate VM CPU HDP flush on reset lock - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ - drm/amdgpu/gmc9.0: add bounds checking for cid - drm/amdgpu: Handle GPU page faults correctly on non-4K page systems - drm/amdgpu: keep vga memory on MacBooks with switchable graphics - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion - drm/amdgpu/mmhub2.0: add bounds checking for cid - drm/amdgpu/mmhub2.3: add bounds checking for cid - drm/amdgpu/mmhub3.0.1: add bounds checking for cid - drm/amdgpu/mmhub3.0.2: add bounds checking for cid - drm/amdgpu/mmhub3.0: add bounds checking for cid - drm/amdgpu/mmhub4.1.0: add bounds checking for cid - drm/amdgpu/pm: add missing revision check for CI - drm/amdgpu/pm: align Hawaii mclk workaround with radeon - drm/amdgpu/pm: drop SMU driver if version not matched messages - drm/amdgpu: prevent immediate PASID reuse case - drm/amdgpu: Replace kzalloc + copy_from_user with memdup_user - drm/amdgpu: replace PASID IDR with XArray - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission - drm/amdgpu: Skip loading SDMA_RS64 in VF - drm/amdgpu: Unlock a mutex before destroying it - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init - drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array - drm/amdgpu/vce: Prevent partial address patches - drm/amdgpu/vcn3: Avoid overflow on msg bound check - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Avoid overflow on msg bound check - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB - drm/amdgpu/vcn5: Add SMU dpm interface type - drm/amdgpu: zero-initialize GART table on allocation - drm/amdkfd: Add upper bound check for num_of_nodes - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map() - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() - drm/amdkfd: Fix signal_eviction_fence() bool return value - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 - drm/amdkfd: Handle GPU reset and drain retry fault race - drm/amdkfd: Make all TLB-flushes heavy-weight - drm/amdkfd: Relax size checking during queue buffer get - drm/amdkfd: Unreserve bo if queue update failed - drm/amdkfd: validate SVM ioctl nattr against buffer size - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 - drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13 - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x - drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x - drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) - drm/amd: Set num IP blocks to 0 if discovery fails - drm/arcpgu: fix device node leak - drm/ast: dp501: Fix initialization of SCU2C - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release - drm/bridge: anx7625: Fix invalid EDID size - drm/bridge: samsung-dsim: Fix memory leak in error path - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used - drm/buddy: Prevent BUG_ON by validating rounded allocation - drm/buddy: release free_trees array on buddy mm teardown - drm/display/dp_mst: Add protection against 0 vcpi - drm/exynos: remove bridge when component_add fails - drm/exynos: vidi: fix to avoid directly dereferencing user pointer - drm/exynos/vidi: Remove redundant error handling in vidi_get_modes() - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() - drm/i915/acpi: free _DSM package when no connectors - drm/i915/alpm: ALPM disable fixes - drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP - drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters - drm/i915/dsc: Add Selective Update register definitions - drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode - drm/i915: Fix potential overflow of shmem scatterlist length - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads - drm/i915/gt: Check set_default_submission() before deferencing - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat - drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state - drm/i915/psr: Do not use pipe_src as borders for SU area - drm/i915/psr: Init variable to avoid early exit from et alignment loop - drm/i915/psr: Repeat Selective Update area alignment - drm/i915/psr: Write DSC parameters on Selective Update in ET mode - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros - drm/imagination: Fix deadlock in soft reset sequence - drm/ioc32: stop speculation on the drm_compat_ioctl path - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() - drm/msm/a2xx: fix pixel shader start on A225 - drm/msm/disp/dpu: add merge3d support for sc7280 - drm/msm/disp: set num_planes to 1 for interleaved YUV formats - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x - drm/msm/dpu: fix WD timer handling on DPU 8.x - drm/msm/dpu: Set vsync source irrespective of mdp top support - drm/msm/dsi: fix hdisplay calculation when programming dsi registers - drm/msm/dsi: fix pclk rate calculation for bonded dsi - drm/msm: Fix dma_free_attrs() buffer size - drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata() - drm/nouveau: fix nvkm_device leak on aperture removal failure - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check - drm: of: drm_of_panel_bridge_remove(): fix device_node leak - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds - drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds - drm/panel: sw43408: Remove manual invocation of unprepare at remove - drm/panthor: Evict groups before VM termination - drm/panthor: Fix immediate ticking on a disabled tick - drm/panthor: Fix the full_tick check - drm/panthor: Fix the group priority rotation logic - drm/panthor: Fix the logic that decides when to stop ticking - drm/panthor: Make sure we resume the tick when new jobs are submitted - drm/panthor: Recover from panthor_gpu_flush_caches() failures - drm/radeon: Add HAINAN clock adjustment - drm/radeon: add missing revision check for CI - drm/radeon: apply state adjust rules to some additional HAINAN vairants - drm/sched: Fix kernel-doc warning for drm_sched_job_done() - drm/sitronix/st7586: fix bad pixel data due to byte swap - drm/solomon: Fix page start when updating rectangle in page addressing mode - drm/tegra: dsi: fix device leak on probe - drm/tests: shmem: Swap names of export tests - drm/ttm/tests: Fix build failure on PREEMPT_RT - drm/v3d: Set DMA segment size to avoid debug warnings - drm/vc4: Fix a memory leak in hang state error path - drm/vc4: Fix memory leak of BO array in hang state - drm/vc4: platform_get_irq_byname() returns an int - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock - drm/vc4: Release runtime PM reference after binding V3D - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release - drm/vmwgfx: Return the correct value in vmw_translate_ptr functions - drm/xe: Add xe_tile backpointer to xe_mmio - drm/xe: Adjust mmio code to pass VF substructure to SRIOV code - drm/xe: always keep track of remap prev/next - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() - drm/xe: Clarify size of MMIO region - drm/xe: Create dedicated xe_mmio structure - drm/xe: Do not preempt fence signaling CS instructions - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() - drm/xe/mmio: Avoid double-adjust in 64-bit reads - drm/xe: Move forcewake to 'gt.pm' substructure - drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' - drm/xe/oa: Allow reading after disabling OA stream - drm/xe: Only toggle scheduling in TDR if GuC is running - drm/xe: Open-code GGTT MMIO access protection - drm/xe: Populate GT's mmio iomap from tile during init - drm/xe/ptl: Apply Wa_13011645652 - drm/xe/reg_sr: Fix leak on xa_store failure - drm/xe: Switch mmio_ext to use 'struct xe_mmio' - drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt - drm/xe/sync: Cleanup partially initialized sync on parse failure - drm/xe: Unregister drm device on probe error - drm/xe/xe2_hpg: Add set of workarounds - drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138 - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning - dt-bindings: connector: add pd-disable dependency - dt-bindings: gpio: fix microchip #interrupt-cells - dt-bindings: net: Fix Tegra234 MGBE PTP clock - dt-bindings: phy: qcom-edp: Add missing clock for X Elite - e1000: check return value of e1000_read_eeprom - e1000/e1000e: Fix leak in DMA error cleanup - e1000e: clear DPG_EN after reset to avoid autonomous power-gating - EDAC/altera: Remove IRQF_ONESHOT - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() - EDAC/mc: Fix error path ordering in edac_mc_alloc() - EFI/CPER: don't dump the entire memory region - EFI/CPER: don't go past the ARM processor CPER record buffer - efi: Fix reservation of unaccepted memory table - erofs: add GFP_NOIO in the bio completion if needed - erofs: fix inline data read failure for ztailpacking pclusters - erofs: fix the out-of-bounds nameoff handling for trailing dirents - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() - erofs: get rid of raw bi_end_io() usage - erofs: handle end of filesystem properly for file-backed mounts - erofs: move {in,out}pages into struct z_erofs_decompress_req - erofs: set fileio bio failed in short read case - erofs: tidy up z_erofs_lz4_handle_overlap() - esp: fix skb leak with espintcp and async crypto - espintcp: Fix race condition in espintcp_close() - eth: fbnic: Account for page fragments when updating BDQ tail - eventfs: Hold eventfs_mutex and SRCU when remount walks events - eventpoll: defer struct eventpoll free to RCU grace period - eventpoll: Fix integer overflow in ep_loop_check_proc() - evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac() - exit: prevent preemption of oopsing TASK_DEAD task - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() - ext4: add ext4_try_lock_group() to skip busy groups - ext4: always allocate blocks only from groups inode can use - ext4: always drain queued discard work in ext4_mb_release() - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() - ext4: avoid infinite loops caused by residual data - ext4: convert free groups order lists to xarrays - ext4: convert inline data to extents when truncate exceeds inline size - ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT - ext4: don't cache extent during splitting extent - ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O - ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 - ext4: drop extent cache after doing PARTIAL_VALID1 zeroout - ext4: drop extent cache when splitting extent fails - ext4: factor out ext4_mb_might_prefetch() - ext4: factor out __ext4_mb_scan_group() - ext4: factor out ext4_mb_scan_group() - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access - ext4: fix dirtyclusters double decrement on fs shutdown - ext4: fix e4b bitmap inconsistency reports - ext4: fix fsync(2) for nojournal mode - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths - ext4: fix journal credit check when setting fscrypt context - ext4: fix memory leak in ext4_ext_shift_extents() - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() - ext4: fix potential null deref in ext4_mb_init() - ext4: fix stale xarray tags after writeback - ext4: fix the might_sleep() warnings in kvfree() - ext4: fix use-after-free in update_super_work when racing with umount - ext4: handle wraparound when searching for blocks for indirect mapped blocks - ext4: implement linear-like traversal across order xarrays - ext4: make recently_deleted() properly work with lazy itable initialization - ext4: mark group add fast-commit ineligible - ext4: mark group extend fast-commit ineligible - ext4: move ext4_percpu_param_init() before ext4_mb_init() - ext4: propagate flags to convert_initialized_extent() - ext4: publish jinode after initialization - ext4: refactor choose group to scan group - ext4: reject mount if bigalloc with s_first_data_block != 0 - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio - ext4: subdivide EXT4_EXT_DATA_VALID1 - ext4: use optimized mballoc scanning regardless of inode format - ext4: use reserved metadata blocks when splitting extent on endio - ext4: validate p_idx bounds in ext4_ext_correct_indexes - extcon: ptn5150: handle pending IRQ events during system resume - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE' - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode() - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic - f2fs: fix fiemap boundary handling when read extent cache is incomplete - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks() - f2fs: fix node_cnt race between extent node destroy and writeback - f2fs: fix to avoid memory leak in f2fs_rename() - f2fs: fix to avoid migrating empty section - f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally - f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() - f2fs: fix uninitialized kobject put in f2fs_init_sysfs() - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() - fanotify: fix false positive on permission events - fat: avoid parent link count underflow in rmdir - fbcon: Avoid OOB font access if console rotation fails - fbcon: check return value of con2fb_acquire_newinfo() - fbcon: Remove struct fbcon_display.inverse - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() - fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info - fbdev: ffb: fix corrupted video output on Sun FFB1 - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings() - fbdev: of: display_timing: fix refcount leak in of_get_display_timings() - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO - fbdev: vt8500lcdfb: fix missing dma_free_coherent() - fgraph: Do not call handlers direct when not using ftrace_ops - fgraph: Fix thresh_return clear per-task notrace - fgraph: Replace fgraph_ret_regs with ftrace_regs - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure - firmware: arm_scpi: Fix device_node reference leak in probe path - firmware: google: framebuffer: Do not mark framebuffer as busy - firmware: google: framebuffer: Do not unregister platform device - firmware: microchip: fail auto-update probe if no flash found - Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures - fix it87_wdt early reboot by reporting running timer - flow_dissector: do not dissect PPPoE PFC frames - fpga: dfl: use subsys_initcall to allow built-in drivers to be added - fpga: of-fpga-region: Fail if any bridge is missing - fs: add for 'init_fs' - fs/buffer: add alert in try_to_free_buffers() for folios without buffers - fs/nfs: Fix readdir slow-start regression - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra() - fs: ntfs3: check return value of indx_find to avoid infinite loop - fs/ntfs3: drop preallocated clusters for sparse and compressed files - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot - fs/ntfs3: Initialize new folios before use - fs/ntfs3: prevent infinite loops caused by the next valid being the same - fs/ntfs3: validate rec->used in journal-replay file record check - fs: prepare for adding LSM blob to backing_file - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath - fs/tests: exec: drop duplicate bprm_stack_limits test vectors - fs/tests: exec: Remove bad test vector - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs - ftrace: Make ftrace_regs abstract from direct use - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros - function_graph: Restore direct mode when callbacks drop to one - fuse: Check for large folio with SPLICE_F_MOVE - fuse: quiet down complaints in fuse_conn_limit_write - fuse: reject oversized dirents in page cache - futex: Clear stale exiting pointer in futex_lock_pi() retry path - futex: Require sys_futex_requeue() to have identical flags - genirq: Set IRQF_COND_ONESHOT in devm_request_irq(). - gfs2: fiemap page fault fix - gfs2: Fix slab-use-after-free in qd_put - gfs2: Fix use-after-free in iomap inline data write path - gfs2: Retries missing in gfs2_{rename,exchange} - gpio: aspeed-sgpio: Change the macro to support deferred probe - gpiolib: fix race condition for gdev->srcu - gpiolib: unify two loops initializing GPIO descriptors - gpio: mxc: map Both Edge pad wakeup to Rising Edge - gpio: of: clear OF_POPULATED on hog nodes in remove path - gpio: tegra: fix irq_release_resources calling enable instead of disable - gpu/panel-edp: add AUO panel entry for B140HAN06.4 - greybus: gb-beagleplay: bound bootloader receive buffering - greybus: gb-beagleplay: fix sleep in atomic context in hdlc_tx_frames() - gro: change the BUG_ON() in gro_pull_from_frag0() - gtp: disable BH before calling udp_tunnel_xmit_skb() - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL - hfsplus: fix held lock freed on hfsplus_fill_super() - hfsplus: fix uninit-value by validating catalog record size - hfsplus: fix volume corruption issue for generic/498 - hfsplus: pretend special inodes as regular files - hfsplus: return error when node already exists in hfs_bnode_create - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them - HID: alps: fix NULL pointer dereference in alps_raw_event() - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards - HID: apple: avoid memory leak in apple_report_fixup() - HID: apple: ensure the keyboard backlight is off if suspending - HID: asus: add xg mobile 2023 external hardware support - HID: asus: avoid memory leak in asus_report_fixup() - HID: bpf: prevent buffer overflow in hid_hw_request - HID: core: clamp report_size in s32ton() to avoid undefined shift - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK - HID: hid-pl: handle probe errors - HID: i2c-hid: Add FocalTech FT8112 - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients - HID: logitech-hidpp: Add support for Logitech K980 - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() - HID: logitech-hidpp: Enable MX Master 4 over bluetooth - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() - HID: magicmouse: Do not crash on missing msc->input - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 - HID: mcp2221: cancel last I2C command on read error - HID: multitouch: add eGalaxTouch EXC3188 support - HID: multitouch: add quirks for Lenovo Yoga Book 9i - HID: multitouch: Check to ensure report responses match the request - HID: multitouch: new class MT_CLS_EGALAX_P80H84 - HID: playstation: Add missing check for input_ff_create_memless - HID: playstation: Clamp num_touch_reports - HID: prodikeys: Check presence of pm->input_ep82 - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 - HID: roccat: fix use-after-free in roccat_report_event - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq - hisi_acc_vfio_pci: update status after RAS error - hrtimer: Fix trace oddity - hv_sock: fix ARM64 support - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion - hwmon: (aht10) Add support for dht20 - hwmon: (aht10) Fix initialization commands for AHT20 - hwmon: axi-fan: don't use driver_override as IRQ name - hwmon: (corsair-psu) Close HID device on probe errors - hwmon: (dell-smm) Add support for Dell OptiPlex 7080 - hwmon: (f71882fg) Add F81968 support - hwmon: (it87) Check the it87_lock() return value - hwmon: (ltc2992) Clamp threshold writes to hardware range - hwmon: (ltc2992) Fix u32 overflow in power read path - hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race - hwmon: (max6639) : Configure based on DT property - hwmon: (max6639) fix inverted polarity - hwmon: (max6639) Fix pulses-per-revolution implementation - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE - hwmon: (occ) Fix division by zero in occ_show_power_1() - hwmon: (occ) Fix missing newline in occ_show_extended() - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() - hwmon: (pmbus/core) Fix various coding style issues - hwmon: (pmbus) Introduce the concept of "write-only" attributes - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() - hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value - hwmon: pmbus: mpq8785: Add support for MPM82504 - hwmon: (pmbus/mpq8785) fix VOUT_MODE mismatch during identification - hwmon: pmbus: mpq8785: Implement VOUT feedback resistor divider ratio configuration - hwmon: pmbus: mpq8785: Prepare driver for multiple device support - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read - hwmon: (powerz) Avoid cacheline sharing for DMA buffer - hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt - hwmon: (powerz) Fix use-after-free on USB disconnect - hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() - hwmon: (pxe1610) Check return value of page-select write in probe - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() - hwrng: core - Allow runtime disabling of the HW RNG - hwrng: core - use RCU and work_struct to fix race condition - hwspinlock: omap: Handle devm_pm_runtime_enable() errors - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed - i2c: cp2615: fix serial string NULL-deref at probe - i2c: fsi: Fix a potential leak in fsi_i2c_probe() - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" - i2c: pxa: defer reset on Armada 3700 when recovery is used - i2c: s3c24xx: check the size of the SMBUS message before using it - i2c: tegra: Don't mark devices with pins as IRQ safe - i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers() - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach - i3c: dw: Initialize spinlock to avoid upsetting lockdep - i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr() - i3c: master: Update hot-join flag only on success - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor - i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors - i3c: Move device name assignment after i3c_bus_init - i40e: Fix preempt count leak in napi poll tracepoint - i40e: fix registering XDP RxQ info - i40e: fix src IP mask checks and memcpy argument names in cloud filter - i40e: use xdp.frame_sz as XDP RxQ info frag_size - iavf: fix netdev->max_mtu to respect actual hardware limit - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() - iavf: fix VLAN filter lost on add/delete race - IB/cache: update gid cache on client reregister event - IB/core: Fix zero dmac race in neighbor resolution - ibmasm: fix heap over-read in ibmasm_send_i2o_message() - ibmasm: fix OOB reads in command_file_write due to missing size checks - IB/mlx5: Fix port speed query for representors - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() - ibmveth: Disable GSO for packets with small MSS - ice: fix devlink reload call trace - ice: fix double free in ice_sf_eth_activate() error path - ice: fix inverted ready check for VF representors - ice: Fix memory leak in ice_set_ringparam() - ice: Fix PTP NULL pointer dereference during VSI rebuild - ice: fix retry for AQ command 0x06EE - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() - ice: reintroduce retry mechanism for indirect AQ - ice: use ice_update_eth_stats() for representor stats - icmp: fix NULL pointer dereference in icmp_tag_validation() - icmp: prevent possible overflow in icmp_global_allow() - idpf: change IRQ naming to match netdev and ethtool queue numbering - idpf: check error for register_netdev() on init - idpf: detach and close netdevs while handling a reset - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling - idpf: Fix RSS LUT NULL pointer crash on early ethtool operations - idpf: Fix RSS LUT NULL ptr issue after soft reset - idpf: improve locking around idpf_vc_xn_push_free() - idpf: nullify pointers after they are freed - idpf: set the payload size before calling the async handler - igc: fix missing update of skb->tail in igc_xmit_frame() - igc: fix page fault in XDP TX timestamps handling - iio: accel: adxl380: Avoid reading more entries than present in FIFO - iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 - iio: accel: fix ADXL355 temperature signature value - iio: adc: ad7768-1: fix one-shot mode data acquisition - iio: adc: aspeed: clear reference voltage bits before configuring vref - iio: adc: ti-adc161s626: fix buffer read on big-endian - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() - iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() - iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() - iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned() - iio: buffer: Fix wait_queue not being removed - iio: chemical: bme680: Fix measurement wait duration calculation - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() - iio: dac: ad5770r: fix error return in ad5770r_read_raw() - iio: dac: ds4424: reject -128 RAW value - iio: frequency: adf4377: Fix duplicated soft reset mask - iio: frequency: admv1013: add dev variable - iio: frequency: admv1013: fix NULL pointer dereference on str - iio: gyro: itg3200: Fix unchecked return value in read_raw - iio: gyro: mpu3050-core: fix pm_runtime error handling - iio: gyro: mpu3050: Fix incorrect free_irq() variable - iio: gyro: mpu3050: Fix irq resource leak - iio: gyro: mpu3050: Fix out-of-sequence free_irq() - iio: gyro: mpu3050-i2c: fix pm_runtime error handling - iio: gyro: mpu3050: Move iio_device_register() to correct location - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one - iio: imu: inv_icm42600: fix odr switch to the same value - iio: imu: inv_icm42600: fix odr switch when turning buffer off - iio: imu: inv-mpu9150: fix irq ack preventing irq storms - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only - iio: light: vcnl4035: fix scan buffer on big-endian - iio: magnetometer: Remove IRQF_ONESHOT - iio: potentiometer: mcp4131: fix double application of wiper shift - iio: pressure: mprls0025pa: fix interrupt flag - iio: pressure: mprls0025pa: fix pressure calculation - iio: pressure: mprls0025pa: fix scan_type struct - iio: pressure: mprls0025pa: fix SPI CS delay violation - iio: pressure: mprls0025pa: fix spi_transfer struct initialisation - iio: proximity: hx9023s: Protect against division by zero in set_samp_freq - iio: sca3000: Fix a resource leak in sca3000_probe() - iio: test: drop dangling symbol in gain-time-scale helpers - iio: Use IRQF_NO_THREAD - ima: define and call ima_alloc_kexec_file_buf() - ima: do not copy measurement list to kdump kernel - ima: kexec: define functions to copy IMA log at soft boot - ima: kexec: silence RCU list traversal warning - ima: rename variable the seq_file "file" to "ima_kexec_file" - ima: verify if the segment size has changed - ima: verify the previous kernel's IMA buffer lies in addressable RAM - include: uapi: netfilter_bridge.h: Cover for musl libc - indirect_call_wrapper: do not reevaluate function pointer - inet: move icmp_global_{credit,stamp} to a separate cache line - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails - Input: bcm5974 - recover from failed mode switch - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table - Input: synaptics_i2c - guard polling restart in resume - Input: synaptics_i2c - replace use of system_wq with system_dfl_wq - Input: synaptics-rmi4 - fix a locking bug in an error path - Input: uinput - fix circular locking dependency with ff-core - Input: uinput - take event lock when submitting FF request "event" - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode - Input: xpad - add support for Razer Wolverine V3 Pro - interconnect: mediatek: Aggregate bandwidth with saturating add - interconnect: mediatek: Don't hijack parent device - iomap: fix submission side handling of completion side errors - iomap: reject delalloc mappings during writeback - iommu/amd: move wait_on_sem() out of spinlock - iommu/amd: serialize sequence allocation under concurrent TLB invalidations - iommu/amd: Use atomic64_inc_return() in iommu.c - iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency - iommufd: Fix a race with concurrent allocation and unmap - iommu/vt-d: Avoid draining PRQ in sva mm release path - iommu/vt-d: Clear Present bit before tearing down PASID entry - iommu/vt-d: Drain PRQs when domain removed from RID - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry - iommu/vt-d: Flush cache for PASID table before using it - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode - iommu/vt-d: Separate page request queue from SVM - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode - ionic: fix persistent MAC address override on PF - ionic: Rate limit unknown xcvr type messages - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data - io_uring/filetable: clamp alloc_hint to the configured alloc range - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths - io_uring/kbuf: check if target buffer list is still legacy on recycle - io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments - io_uring/kbuf: enable bundles for incrementally consumed buffers - io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF - io_uring/kbuf: introduce io_kbuf_drop_legacy() - io_uring/kbuf: introduce struct io_br_sel - io_uring/kbuf: open code __io_put_kbuf() - io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers - io_uring/kbuf: propagate BUF_MORE through early buffer commit path - io_uring/kbuf: remove legacy kbuf bulk allocation - io_uring/kbuf: remove legacy kbuf caching - io_uring/kbuf: remove legacy kbuf kmem cache - io_uring/kbuf: simplify __io_put_kbuf - io_uring/kbuf: support min length left for incremental buffers - io_uring/kbuf: switch to storing struct io_buffer_list locally - io_uring/kbuf: uninline __io_put_kbufs - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory - io_uring/kbuf: use struct io_br_sel for multiple buffers picking - io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields - io_uring/net: clarify io_recv_buf_select() return value - io_uring/net: correct type for min_not_zero() cast - io_uring/net: don't continue send bundle if poll was required for retry - io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases - io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() - io_uring/net: use struct io_br_sel->val as the recv finish value - io_uring/net: use struct io_br_sel->val as the send finish value - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE - io_uring/poll: fix multishot recv missing EOF on wakeup race - io_uring/poll: fix signed comparison in io_poll_get_ownership() - io_uring: remove async/poll related provided buffer recycles - io_uring/rw: check for NULL io_br_sel when putting a buffer - io_uring/sync: validate passed in offset - io_uring/timeout: check unused sqe fields - io_uring/uring_cmd: fix too strict requirement on ioctl - io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED - ip6_gre: Use cached t->net in ip6erspan_changelink(). - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() - ipc: don't audit capability check in ipc_permissions() - ipmi: Add limits to event and receive message requests - ipmi: Check event message buffer response for bad data - ipmi: ipmb: initialise event handler read bytes - ipmi:si: Return state to normal if message allocation fails - ipv4: fib: Annotate access to struct fib_alias.fa_state. - ipv4: icmp: fix null-ptr-deref in icmp_build_probe() - ipv4: icmp: validate reply type before using icmp_pointers - ipv4: igmp: annotate data-races around idev->mr_maxdelay - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() - ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop group dump - ipv6: add NULL checks for idev in SRv6 paths - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}() - ipv6: annotate data-races over sysctl.flowlabel_reflect - ipv6: avoid overflows in ip6_datagram_send_ctl() - ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. - ipv6: exthdrs: annotate data-race over multiple sysctl - ipv6: fix a race in ip6_sock_set_v6only() - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() - ipv6: Fix out-of-bound access in fib6_add_rt2node(). - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() - ipv6: prevent possible UaF in addrconf_permanent_addr() - ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows - ipv6: use RCU in ip6_xmit() - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() - ipvs: do not keep dest_dst if dev is going down - ipvs: fix NULL deref in ip_vs_add_service error path - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting - isofs: validate block number from NFS file handle in isofs_export_iget - isofs: validate Rock Ridge CE continuation extent against volume size - ixgbevf: add missing negotiate_features op to Hyper-V ops table - ixgbevf: fix link setup issue - jbd2: fix deadlock in jbd2_journal_cancel_revoke() - jbd2: gracefully abort on checkpointing state corruptions - jfs: Add missing set_freezable() for freezable kthread - jfs: nlink overflow in jfs_rename - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup() - kbuild: Add objtool to top-level clean target - kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 - kbuild: install-extmod-build: Package resolve_btfids if necessary - kbuild: Leave objtool binary around with 'make clean' - kbuild: rust: allow `clippy::uninlined_format_args` - kcm: fix zero-frag skb in frag_list on partial sendmsg error - kcsan, compiler_types: avoid duplicate type issues in BPF Type Format - kernel: be more careful about dup_mmap() failures and uprobe registering - kexec: Consolidate machine_kexec_mask_interrupts() implementation - kexec: define functions to map and unmap segments - kexec: derive purgatory entry from symbol - kexec: Include kernel-end even without crashkernel - kprobes: avoid crash when rmmod/insmod after ftrace killed - kprobes: Remove unneeded goto - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() - kselftest/harness: Use helper to avoid zero-size memset warning - ksmbd: add chann_lock to protect ksmbd_chann_list xarray - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths - ksmbd: check return value of xa_store() in krb5_authenticate - ksmbd: Compare MACs in constant time - ksmbd: do not expire session on binding failure - ksmbd: Don't log keys in SMB3 signing and encryption key generation - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc - ksmbd: fix memory leaks and NULL deref in smb2_lock() - ksmbd: fix OOB write in QUERY_INFO for compound requests - ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment - ksmbd: fix potencial OOB in get_file_all_info() for compound requests - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() - ksmbd: fix use-after-free by using call_rcu() for oplock_info - ksmbd: fix use-after-free in durable v2 replay of active file handles - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() - ksmbd: fix use-after-free of share_conf in compound request - ksmbd: replace connection list with hash table - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() - ksmbd: require 3 sub-authorities before reading sub_auth[2] - ksmbd: require minimum ACE size in smb_check_perm_dacl() - ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() - ksmbd: rewrite stop_sessions() with restartable iteration - ksmbd: unset conn->binding on failed binding request - ksmbd: use check_add_overflow() to prevent u16 DACL size overflow - ksmbd: use msleep instaed of schedule_timeout_interruptible() - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION - ksmbd: validate EaNameLength in smb2_get_ea() - ksmbd: validate inherited ACE SID length - ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() - ksmbd: validate response sizes in ipc_validate_msg() - ktest: Fix the month in the name of the failure directory - kunit: tool: copy caller args in run_kernel to prevent mutation - KVM: arm64: Discard PC update state on vcpu reset - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter - KVM: arm64: Hide S1POE from guests when not supported by the host - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value - KVM: arm64: Wake-up from WFI when iqrchip is in userspace - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS - KVM: nSVM: Add missing consistency check for nCR3 validity - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN - KVM: nSVM: Always intercept VMMCALL when L2 is active - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT - KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET - KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay - KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION - KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU - KVM: SVM: Add a helper to look up the max physical ID for AVIC - KVM: SVM: check validity of VMCB controls when returning from SMM - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() - KVM: x86: Allow vendor code to disable quirks - KVM: x86: check for nEPT/nNPT in slow flush hypercalls - KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() - KVM: x86: Defer non-architectural deliver of exception payload to userspace read - KVM: x86: do not allow re-enabling quirks - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT - KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM - KVM: x86: Introduce supported_quirks to block disabling quirks - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE - KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR - KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs - KVM: x86: Use scratch field in MMIO fragment to hold small write values - l2tp: Drop large packets with UDP encap - landlock: Fix handling of disconnected directories - landlock: Optimize file path walks and prepare for audit support - leds: qcom-lpg: Check for array overflow when selecting the high resolution - leds: qcom-lpg: Check the return value of regmap_bulk_write() - lib/bootconfig: check bounds before writing in __xbc_open_brace() - lib/bootconfig: check xbc_init_node() return in override path - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() - libbpf: Fix OOB read in btf_dump_get_bitfield_value - libceph: admit message frames only in CEPH_CON_S_OPEN state - libceph: define and enforce CEPH_MAX_KEY_LEN - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() - libceph: Fix slab-out-of-bounds access in auth message processing - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() - libceph: prevent potential out-of-bounds reads in process_message_header() - libceph: reject preamble if control segment is empty - libceph: Use u32 for non-negative values in ceph_monmap_decode() - lib/crypto: chacha: Zeroize permuted_state before it leaves scope - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() - libperf build: Always place libperf includes first - libperf: Don't remove -g when EXTRA_CFLAGS are used - lib/scatterlist: fix length calculations in extract_kvec_to_sg - lib/scatterlist: fix temp buffer in extract_user_to_sg() - libsubcmd: Fix null intersection case in exclude_cmds() - lib: test_hmm: evict device pages on file close to avoid use-after-free - lib/ts_kmp: fix integer overflow in pattern length calculation - LoongArch: Add spectre boundry for syscall dispatch table - LoongArch: Disable instrumentation for setup_ptwalker() - LoongArch: Fix missing NULL checks for kstrdup() - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() - LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT - LoongArch: Give more information if kmem access failed - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT - LoongArch: Handle percpu handler address for ORC unwinder - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read() - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust - LoongArch: KVM: Move unconditional delay into timer clear scenery - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte() - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE - LoongArch/orc: Use RCU in all users of __module_address(). - LoongArch: Prefer top-down allocation after arch_mem_init() - LoongArch: Remove some extern variables in source files - LoongArch: Remove unnecessary checks for ORC unwinder - LoongArch: Show CPU vulnerabilites correctly - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup - LoongArch: Use %px to print unmodified unwinding address - LoongArch: vDSO: Emit GNU_EH_FRAME correctly - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug - m68k: nommu: fix memmove() with differently aligned src and dest for 68000 - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations - macvlan: observe an RCU grace period in macvlan_common_newlink() error path - mailbox: Allow controller specific mapping using fwnode - mailbox: bcm-ferxrm-mailbox: Use default primary handler - mailbox: don't protect of_parse_phandle_with_args with con_mutex - mailbox: imx: Skip the suspend flag for i.MX7ULP - mailbox: pcc: Remove spurious IRQF_ONESHOT usage - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() - mailbox: remove unused header files - mailbox: sort headers alphabetically - mailbox: sprd: clear delivery flag before handling TX done - mailbox: sprd: mask interrupts that are not handled - mailbox: Use dev_err when there is error - mailbox: Use guard/scoped_guard for con_mutex - mctp: i2c: fix skb memory leak in receive path - mctp i2c: initialise event handler read bytes - mctp: route: hold key->lock in mctp_flow_prepare_output() - md/bitmap: fix GPF in write_page caused by resize race - md-cluster: fix NULL pointer dereference in process_metadata_update - md/raid10: fix any_working flag handling in raid10_sync_request - md/raid10: fix deadlock with check operation and nowait requests - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies - md/raid1: fix memory leak in raid1_run() - md/raid1: fix memory leak in raid1_run() if no active rdev - md/raid5: fix raid5_run() to return error when log_init() fails - md/raid5: fix soft lockup in retry_aligned_read() - md/raid5: validate payload size before accessing journal metadata - media: adv7180: fix frame interval in progressive mode - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START - media: amphion: Drop min_queued_buffers assignment - media: amphion: Fix race between m2m job_abort and device_run - media: as102: fix to not free memory after the device is registered in as102_usb_probe() - media: ccs: Accommodate C-PHY into the calculation - media: ccs: Avoid possible division by zero - media: ccs: Fix setting initial sub-device state - media: chips-media: wave5: add missing spinlock protection for handle_dynamic_resolution_change() - media: chips-media: wave5: add missing spinlock protection for send_eos_event() - media: chips-media: wave5: fix a potential memory leak in wave5_vdi_init() - media: chips-media: wave5: Fix conditional in start_streaming - media: chips-media: wave5: Fix device cleanup order to prevent kernel panic - media: chips-media: wave5: Fix kthread worker destruction in polling mode - media: chips-media: wave5: Fix memory leak on codec_info allocation failure - media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder - media: cx23885: Add missing unmap in snd_cx23885_hw_params() - media: cx25821: Add missing unmap in snd_cx25821_hw_params() - media: cx25821: Fix a resource leak in cx25821_dev_setup() - media: cx88: Add missing unmap in snd_cx88_hw_params() - media: dib8000: avoid division by 0 in dib8000_set_dds() - media: dvb-core: dmxdevfilter must always flush bufs - media: dvb-core: fix wrong reinitialization of ringbuffer on reopen - media: dvb-net: fix OOB access in ULE extension header tables - media: dw9714: add support for powerdown pin - media: dw9714: Fix powerup sequence - media: dw9714: move power sequences to dedicated functions - media: em28xx: fix use-after-free in em28xx_v4l2_open() - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() - media: i2c: imx283: Enter full standby when stopping streaming - media: i2c: imx283: Fix hang when going from large to small resolution - media: i2c: imx412: Assert reset GPIO during probe - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls - media: i2c: ov01a10: Fix analogue gain range - media: i2c: ov01a10: Fix digital gain range - media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format() - media: i2c: ov01a10: Fix reported pixel-rate value - media: i2c: ov01a10: Fix test-pattern disabling - media: i2c: ov01a10: Fix the horizontal flip control - media: i2c: ov08d10: fix image vertical start setting - media: i2c: ov5647: Correct minimum VBLANK value - media: i2c: ov5647: Correct pixel array offset - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode - media: i2c: ov5647: Initialize subdev before controls - media: i2c: ov5647: Sensor should report RAW color space - media: i2c: ov5647: use our own mutex for the ctrl lock - media: i2c: ov8856: free control handler on error in ov8856_init_controls() - media: i2c/tw9903: Fix potential memory leak in tw9903_probe() - media: i2c/tw9906: Fix potential memory leak in tw9906_probe() - media: intel/ipu6: fix error pointer dereference - media: ipu6: Always close firmware stream - media: ipu6: Close firmware streams on streaming enable failure - media: ipu6: Ensure stream_mutex is acquired when dealing with node list - media: ipu6: Fix RPM reference leak in probe error paths - media: ipu6: Fix typo and wrong constant in ipu6-mmu.c - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex - media: mediatek: encoder: Fix uninitialized scalar variable issue - media: mediatek: vcodec: Don't try to decode 422/444 VP9 - media: mediatek: vcodec: fix use-after-free in encoder release path - media: mt9m114: Avoid a reset low spike during probe() - media: mt9m114: Return -EPROBE_DEFER if no endpoint is found - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() - media: mtk-mdp: Fix error handling in probe function - media: nxp: imx8-isi: Fix streaming cleanup on release - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 - media: omap3isp: drop the use count of v4l2 pipeline - media: omap3isp: isppreview: always clamp in preview_try_format() - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes - media: omap3isp: set initial format - media: pci: mg4b: Use IRQF_NO_THREAD - media: pci: zoran: fix potential memory leak in zoran_probe() - media: pvrusb2: fix URB leak in pvr2_send_request_ex - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() - media: radio-keene: fix memory leak in error path - media: rc: igorplugusb: heed coherency rules - media: rc: streamzap: Error handling in probe - media: rc: ttusbir: respect DMA coherency rules - media: rc: xbox_remote: heed DMA restrictions - media: rkisp1: Fix filter mode register configuration - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl() - media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() - media: saa7164: add ioremap return checks and cleanups - media: solo6x10: Check for out of bounds chip_id - media: staging: imx: request mbus_config in csi_start - media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop - media: tegra-video: Fix memory leak in __tegra_channel_try_format() - media: uvcvideo: Enable VB2_DMABUF for metadata stream - media: uvcvideo: Fix allocation for small frame sizes - media: v4l2-async: Fix error handling on steps after finding a match - media: venus: vdec: fix error state assignment for zero bytesused - media: venus: vdec: restrict EOS addr quirk to IRIS2 only - media: verisilicon: AV1: Fix enable cdef computation - media: verisilicon: AV1: Fix tile info buffer size - media: verisilicon: AV1: Fix tx mode bit setting - media: verisilicon: AV1: Set IDR flag for intra_only frame type - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - media: vidtv: fix nfeeds state corruption on start_streaming failure - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections - media: vidtv: fix pass-by-value structs causing MSAN warnings - memory: mtk-smi: fix device leak on larb probe - memory: mtk-smi: fix device leaks on common probe - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure - mfd: core: Add locking around 'mfd_of_node_list' - mfd: core: Preserve OF node when ACPI handle is present - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs - mfd: omap-usb-host: Fix OF populate on driver rebind - mfd: qcom-pm8xxx: Fix OF populate on driver rebind - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support - mfd: simple-mfd-i2c: Add MAX77705 support - mfd: simple-mfd-i2c: Add SpacemiT P1 support - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused - mfd: wm8350-core: Use IRQF_ONESHOT - minix: Add required sanity checking to minix_check_superblock() - MIPS: Always record SEGBITS in cpu_data.vmbits - MIPS: Fix the GCC version check for `__multi3' workaround - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE - mips: mm: Allocate tlb_vpn array atomically - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature - MIPS: mm: Suppress TLB uniquification on EHINV hardware - mips: ralink: update CPU clock index - MIPS: rb532: Fix MMIO UART resource registration - MIPS: SiByte: Bring back cache initialisation - MIPS: Work around LLVM bug when gp is used as global register variable - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 - misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe - misc: fastrpc: possible double-free of cctx->remote_heap - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() - mmc: block: use single block write in retry - mmc: core: Avoid bitfield RMW for claim/retune flags - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs - mmc: dw_mmc-rockchip: Add memory clock auto-gating support - mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support - mmc: dw_mmc-rockchip: use modern PM macros - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() - mm: convert mm_lock_seq to a proper seqcount - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms - mmc: sdhci: fix timing selection for 1-bit bus width - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption - mmc: vub300: fix NULL-deref on disconnect - mm/damon/core: disallow time-quota setting zero esz - mm/damon/core: implement damon_kdamond_pid() - mm/damon/core: use time_in_range_open() for damos quota window start - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock - mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() - mm/highmem: fix __kmap_to_page() build error - mm/huge_memory: fix folio isn't locked in softleaf_to_folio() - mm/hugetlb_cma: round up per_node before logging it - mm/kasan: fix double free for kasan pXds - mm/kfence: disable KFENCE upon KASAN HW tags enablement - mm/kfence: fix KASAN hardware tag faults during late enablement - mm/memory: fix PMD/PUD checks in follow_pfnmap_start() - mm/memory_hotplug: fix hwpoisoned large folio handling in do_migrate_range() - mm/migrate: factor out movable_ops page handling into migrate_movable_ops_page() - mm/migrate: move movable_ops page handling out of move_to_new_folio() - mm: migrate: requeue destination folio on deferred split queue - mm: numa_memblks: Identify the accurate NUMA ID of CFMW - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() - mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations - mm/pagewalk: fix race between concurrent split and refault - mm: prevent droppable mappings from being locked - mm: replace READ_ONCE() with standard page table accessors - mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() - mm: shmem: fix potential data corruption during shmem swapin - mm/shmem, swap: avoid redundant Xarray lookup during swapin - mm/shmem, swap: improve cached mTHP handling and fix potential hang - mm/slab: use unsigned long for orig_size to ensure proper metadata align - mm: thp: deny THP for files on anonymous inodes - mm/tracing: rss_stat: ensure curr is false from kthread context - mm/userfaultfd: fix hugetlb fault mutex hash calculation - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node - mm/zsmalloc: copy KMSAN metadata in zs_page_migrate() - modpost: Amend ppc64 save/restfpr symnames for -Os build - module: add helper function for reading module_buildid() - module: Fix kernel panic when a symbol st_shndx is out of bounds - most: core: fix leak on early registration failure - most: core: fix resource leak in most_register_interface error paths - mpls: add missing unregister_netdevice_notifier to mpls_init - mptcp: fastclose msk when linger time is 0 - MPTCP: fix lock class name family in pm_nl_create_listen_socket - mptcp: fix receive space timestamp initialization - mptcp: fix scheduling with atomic in timestamp sockopt - mptcp: fix slab-use-after-free in __inet_lookup_established - mptcp: pm: avoid sending RM_ADDR over same subflow - mptcp: pm: in-kernel: always mark signal+subflow endp as used - mptcp: pm: in-kernel: always set ID as avail when rm endp - mptcp: sockopt: set timestamp flags on subflow socket, not msk - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure - mtd: Avoid boot crash in RedBoot partition table parser - mtd: docg3: fix use-after-free in docg3_release() - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions() - mtd: rawnand: brcmnand: skip DMA during panic write - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper - mtd: rawnand: pl353: Fix software ECC support - mtd: rawnand: pl353: make sure optimal timings are applied - mtd: rawnand: serialize lock/unlock against other NAND operations - mtd: spinand: Disable continuous read during probe - mtd: spinand: Fix kernel doc - mtd: spinand: winbond: Declare the QE bit on W25NxxJW - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() - mtd: spi-nor: sst: Fix write enable before AAI sequence - myri10ge: avoid uninitialized variable use - namespace: fix proc mount iteration - net: add a common function to compute features for upper devices - net: add proper RCU protection to /proc/net/ptype - net: Add skb_dstref_steal and skb_dstref_restore - net: add xmit recursion limit to tunnel xmit functions - net: af_key: zero aligned sockaddr tail in PF_KEY exports - net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() - net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() - net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() - net: airoha: read default PSE reserved pages value before updating - net: airoha: Remove airoha_dev_stop() in airoha_remove() - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() - net: annotate data-races around sk->sk_{data_ready,write_space} - net: arcnet: com20020-pci: fix support for 2.5Mbit cards - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() - net: bcm: asp2: convert to phylib managed EEE - net: bcm: asp2: fix LPI timer handling - net: bcm: asp2: remove tx_lpi_enabled - net: bcmasp: Add support for asp-v3.0 - net: bcmasp: fix double disable of clk - net: bcmasp: fix double free of WoL irq - net: bcmasp: Fix network filter wake for asp-3.0 - net: bcmasp: Remove support for asp-v2.0 - net: bcmasp: Restore programming of TX map vector register - net: bcmasp: streamline early exit in probe - net: bcmgenet: fix broken EEE by converting to phylib-managed state - net: bcmgenet: increase WoL poll timeout - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled - net: bonding: fix NULL deref in bond_debug_rlb_hash_show - net: bonding: fix use-after-free in bond_xmit_broadcast() - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled - net: bridge: mcast: always update mdb_n_entries for vlan contexts - net: bridge: use a stable FDB dst snapshot in RCU readers - net: caif: clear client service pointer on teardown - netconsole: avoid out-of-bounds access on empty string in trim_newline() - net: consume xmit errors of GSO frames - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths - net: dsa: microchip: Fix error path in PTP IRQ setup - net: dsa: properly keep track of conduit reference - net: dsa: realtek: Fix LED group port bit for non-zero LED group - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets - net: enetc: check whether the RSS algorithm is Toeplitz - net: enetc: fix the output issue of 'ethtool --show-ring' - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() - net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table - net: ethernet: xscale: Check for PTP support properly - net: fec: fix the PTP periodic output sysfs interface - netfilter: bpf: defer hook memory release until rcu readers are done - netfilter: conntrack: add missing netlink policy validations - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() - netfilter: ctnetlink: ignore explicit helper on new expectations - netfilter: ctnetlink: remove refcounting in expectation dumpers - netfilter: ctnetlink: use netlink policy range checks - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent - netfilter: flowtable: strictly check for maximum number of actions - netfilter: ip6t_eui64: reject invalid MAC header for all packets - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() - netfilter: ipset: drop logically empty buckets in mtype_del - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr - netfilter: nf_conncount: fix tracking of connections from localhost - netfilter: nf_conncount: increase the connection clean up limit to 64 - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH - netfilter: nf_conntrack: Add allow_clash to generic protocol handler - netfilter: nf_conntrack_expect: honor expectation helper field - netfilter: nf_conntrack_expect: skip expectations in other netns via proc - netfilter: nf_conntrack_expect: store netns and zone in expectation - netfilter: nf_conntrack_expect: use expect->helper - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case - netfilter: nf_conntrack_helper: pass helper to expect cleanup - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() - netfilter: nfnetlink_log: account for netlink header size - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path - netfilter: nfnetlink_queue: make hash table per queue - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation - netfilter: nfnetlink_queue: optimize verdict lookup with hash table - netfilter: nf_tables: always walk all pending catchall elements - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - netfilter: nf_tables: reject immediate NF_QUEUE verdict - netfilter: nf_tables: release flowtable after rcu grace period on error - netfilter: nf_tables: reset table validation state on abort - netfilter: nft_compat: add more restrictions on netlink attributes - netfilter: nft_counter: fix reset of counters on 32bit archs - netfilter: nft_ct: drop pending enqueued packets on removal - netfilter: nft_ct: fix use-after-free in timeout object destroy - netfilter: nft_set_hash: fix get operation on big endian - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval - netfilter: reject zero shift in nft_bitwise - netfilter: x_tables: ensure names are nul-terminated - netfilter: x_tables: guard option walkers against 1-byte tail reads - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP - netfilter: xt_CT: drop pending enqueued packets on template removal - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels - netfilter: xt_multiport: validate range encoding in checkentry - netfilter: xt_tcpmss: check remaining length before reading optlen - netfilter: xt_time: use unsigned int for monthday bit shift - net: fix fanout UAF in packet_release() via NETDEV_UP race - netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators - net: ftgmac100: fix ring allocation unwind on open failure - net: hns3: extend HCLGE_FD_AD_QID to 11 bits - net: hns3: fix double free issue for tx spare buffer - net: hsr: fix VLAN add unwind on slave errors - net: increase IP_TUNNEL_RECURSION_LIMIT to 5 - net: intel: fix PCI device ID conflict between i40e and ipw2200 - net: introduce mangleid_features - net: ipa: fix event ring index not programmed for IPA v5.0+ - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ - net: ipv4: fix ARM64 alignment fault in multipath hash seed - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop - net: ipv6: flowlabel: defer exclusive option free until RCU teardown - net/ipv6: ioam6: prevent schema length wraparound in trace fill - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() - net: ks8851: Avoid excess softirq scheduling - net: ks8851: Reinstate disabling of BHs around IRQ handler - net: lan743x: fix duplex configuration in mac_link_up - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() - net: lan966x: fix page pool leak in error paths - net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE - net: libwx: fix VF illegal register access - net: macb: fix clk handling on PCI glue driver removal - net: macb: Fix tx/rx malfunction after phy link down and up - net: macb: fix uninitialized rx_fs_lock - net: macb: fix use-after-free access to PTP clock - net: macb: Introduce gem_init_rx_ring() - net: macb: Move devm_{free,request}_irq() out of spin lock area - net: macb: properly unregister fixed rate clocks - net: macb: Protect access to net_device::ip_ptr with RCU lock - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume - net: macb: Shuffle the tx ring before enabling tx - net: macb: Use dev_consume_skb_any() to free TX SKBs - net: macb: use the current queue number for stats - net: mana: fix use-after-free in add_adev() error path - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown - net: mana: Ring doorbell at 4 CQ wraparounds - net: mctp: fix don't require received header reserved bits to be zero - net: mctp-i2c: fix duplicate reception of old data - net/mlx5: Avoid "No data available" when FW version queries fail - net/mlx5: DR, Fix circular locking dependency in dump - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery - net/mlx5e: Fix race condition during IPSec ESN update - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query - net/mlx5e: Prevent concurrent access to IPSec ASO context - net/mlx5e: Separate address related variables to be in struct - net/mlx5e: Support routed networks during IPsec MACs initialization - net/mlx5: E-switch, Clear legacy flag when moving to switchdev - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels - net/mlx5: Fix crash when moving to switchdev mode - net/mlx5: Fix deadlock between devlink lock and esw->wq - net/mlx5: Fix missing devlink lock in SRIOV enable error path - net/mlx5: Fix multiport device check over light SFs - net/mlx5: Fix switchdev mode rollback in case of failure - net/mlx5: IFC updates for disabled host PF - net/mlx5: lag: Check for LAG device before creating debugfs - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle - net/mlx5: Query to see if host PF is disabled - net/mlx5: Update the list of the PCI supported devices - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper - net: mscc: ocelot: split xmit into FDMA and register injection paths - net: mvpp2: guard flow control update with global_tx_fc in buffer switching - net: ncsi: fix skb leak in error paths - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry - net: nfc: nci: Fix parameter validation for packet data - net: nfc: nci: Fix zero-length proprietary notifications - net: openvswitch: Avoid releasing netdev before teardown completes - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock - net: prevent NULL deref in ip[6]tunnel_xmit() - net: qrtr: ns: Fix use-after-free in driver remove() - net: qrtr: ns: Free the node during ctrl_cmd_bye() - net: qrtr: ns: Limit the maximum number of lookups - net: qrtr: ns: Limit the maximum server registration per node - net: qrtr: ns: Limit the total number of nodes - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure - net/rds: Clear reconnect pending bit - net/rds: Fix circular locking dependency in rds_tcp_tune - net: rds: fix MR cleanup on copy error - net/rds: handle zerocopy send cleanup before the message is queued - net/rds: No shortcut out of RDS_CONN_ERROR - net/rds: rds_sendmsg should not discard payload_len - net: remove WARN_ON_ONCE when accessing forward path array - net: rfkill: prevent unlimited numbers of rfkill events from being created - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo - net: sched: act_csum: validate nested VLAN headers - net/sched: act_gate: snapshot parameters with RCU on replace - net/sched: act_ife: Fix metalist update behavior - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak - net/sched: cls_flow: fix NULL pointer dereference on shared blocks - net/sched: cls_fw: fix NULL pointer dereference on shared blocks - net/sched: ets: fix divide by zero in the offload path - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks - net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset() - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() - net/sched: sch_netem: fix out-of-bounds access in packet corruption - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked - net/sched: teql: Fix double-free in teql_master_xmit - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit - net: sfp: add quirk for Lantech 8330-265D - net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta - net: sfp: improve Huawei MA5671a fixup - net: skb: fix cross-cache free of KFENCE-allocated skb head - net/smc: avoid early lgr access in smc_clc_wait_msg - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() - net: sparx5/lan969x: fix DWRR cost max to match hardware register width - net: sparx5/lan969x: fix PTP clock max_adj value - net: stmmac: avoid shadowing global buf_sz - net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz - net: stmmac: Fix error handling in VLAN add and delete paths - net: stmmac: fix integer underflow in chain mode - net: stmmac: Fix PTP ref clock for Tegra234 - net: stmmac: Prevent NULL deref when RX memory exhausted - net: stmmac: remove support for lpi_intr_o - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() - net: strparser: fix skb_head leak in strp_abort_strp() - net: sunhme: Fix sbus regression - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers - net/tcp-ao: Fix MAC comparison to be constant-time - net/tcp-md5: Fix MAC comparison to be constant-time - net: ti: icssg-prueth: Add optional dependency on HSR - net: ti: icssg-prueth: Fix ping failure after offload mode setup when link speed is not 1G - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption - net: txgbe: fix firmware version check - net: txgbe: fix RTNL assertion warning when remove module - net: txgbe: leave space for null terminators on property_entry - net: usb: aqc111: Do not perform PM inside suspend callback - net: usb: catc: enable basic endpoint checking - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() - net: usb: kalmia: validate USB endpoints - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode - net: usb: kaweth: validate USB endpoints - net: usb: lan78xx: fix silent drop of packets with checksum errors - net: usb: lan78xx: fix TX byte statistics for small packets - net: usb: lan78xx: scan all MDIO addresses on LAN7801 - net: usb: lan78xx: skip LTM configuration for LAN7850 - net: usb: pegasus: enable basic endpoint checking - net: usb: pegasus: validate USB endpoints - net: usb: r8152: add TRENDnet TUC-ET2G - net: usb: r8152: fix transmit queue timeout - net: usb: sr9700: remove code to drive nonexistent multicast filter - net: use skb_header_pointer() for TCPv4 GSO frag_off check - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() - net: wwan: mhi: Add network support for Foxconn T99W760 - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler - net/x25: Fix overflow when accumulating packets - net/x25: Fix potential double free of skb - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler - nfc: hci: shdlc: Stop timers and work before freeing context - nfc: llcp: add missing return after LLCP_CLOSED checks - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback - nfc: nci: complete pending data exchange on device close - nfc: nci: fix circular locking dependency in nci_close_device - nfc: nci: free skb on nci_transceive early error paths - NFC: nxp-nci: allow GPIOs to sleep - nfc: nxp-nci: remove interrupt trigger type - nfc: pn533: allocate rx skb before consuming bytes - NFC: pn533: bound the UART receive buffer - nfc: pn533: properly drop the usb interface reference on disconnect - nfc: rawsock: cancel tx_work before socket teardown - nfc: s3fwrn5: allocate rx skb before consuming bytes - nfnetlink_osf: validate individual option lengths in fingerprints - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache - nfsd: fix return error code for nfsd_map_name_to_[ug]id - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd - nfsd: never defer requests during idmap lookup - nfs/localio: eliminate unnecessary kref in nfs_local_fsync_ctx - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit - NFS: NFSERR_INVAL is not defined by NFSv2 - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir - nf_tables: nft_dynset: fix possible stateful expression memleak in error path - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep - nsfs: tighten permission checks for ns iteration ioctls - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut - NTB: ntb_transport: Fix too small buffer for debugfs_name - ntfs3: add buffer boundary checks to run_unpack() - ntfs3: fix integer overflow in run_unpack() volume boundary check - nvdimm/bus: Fix potential use after free in asynchronous initialization - nvdimm: virtio_pmem: serialize flush requests - nvme-apple: drop invalid put of admin queue reference count - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets - nvme: fix admin queue leak on controller reset - nvme: fix memory allocation in nvme_pr_read_keys() - nvmem: Drop OF node reference on nvmem_add_one_cell() failure - nvmem: imx: assign nvmem_cell_info::raw_len - nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 - nvme-pci: cap queue creation to used queues - nvme-pci: ensure we're polling a polled queue - nvme-pci: Fix race bug in nvme_poll_irqdisable() - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set - nvme: reject invalid pr_read_keys() num_keys values - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free - nvmet: move async event work off nvmet-wq - nvmet-tcp: fix race between ICReq handling and queue teardown - objpool: fix the overestimation of object pooling metadata size - objtool: Fix Clang jump table detection - objtool: Handle Clang RSP musical chairs - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline - ocfs2: fix possible deadlock between unlink and dio_end_io_write - ocfs2: fix reflink preserve cleanup issue - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY - ocfs2: handle invalid dinode in ocfs2_group_extend - ocfs2: split transactions in dio completion to avoid credit exhaustion - ocfs2: validate inline data i_size during inode read - octeon_ep: avoid compiler and IQ/OQ reordering - octeon_ep: disable per ring interrupts - octeon_ep: ensure dbell BADDR updation - octeon_ep: Relocate counter updates before NAPI - octeon_ep_vf: add NULL check for napi_build_skb() - octeon_ep_vf: avoid compiler and IQ/OQ reordering - octeon_ep_vf: ensure dbell BADDR updation - octeon_ep_vf: Relocate counter updates before NAPI - Octeontx2-af: Add proper checks for fwdata - octeontx2-af: CGX: fix bitmap leaks - octeontx2-af: devlink: fix NIX RAS reporter recovery condition - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status - octeontx2-af: Fix default entries mcam entry action - octeontx2-af: Fix PF driver crash with kexec kernel booting - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky - octeontx2-pf: Unregister devlink on probe failure - of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy() - of: unittest: fix use-after-free in of_unittest_changeset() - of: unittest: fix use-after-free in testdrv_probe() - openrisc: define arch-specific version of nop() - openvswitch: defer tunnel netdev_put to RCU release - openvswitch: validate MPLS set/set_masked payload length - openvswitch: vport: fix self-deadlock on release of tunnel ports - OPP: Return correct value in dev_pm_opp_get_level - ovl: Fix uninit-value in ovl_fill_real - ovl: fix wrong detection of 32bit inode numbers - ovl: make fsync after metadata copy-up opt-in mount option - ovl: Use str_on_off() helper in ovl_show_options() - padata: Fix pd UAF once and for all - padata: Remove comment for reorder_work - parisc: Check kernel mapping earlier at bootup - parisc: Fix initial page table creation for boot - parisc: Fix IRQ leak in LASI driver - parisc: Flush correct cache in cacheflush() syscall - parisc: Increase initial mapping to 64 MB with KALLSYMS - parisc: kernel: replace kfree() with put_device() in create_tree_node() - parisc: _llseek syscall is only available for 32-bit userspace - parisc: Prevent interrupts during reboot - Partial revert "x86/xen: fix balloon target initialization for PVH dom0" - PCI/ACPI: Restrict program_hpx_type2() to AER bits - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur - PCI: Add defines for bridge window indexing - PCI: Add Intel Nova Lake audio Device ID - PCI/AER: Clear only error bits in PCIe Device Status - PCI/AER: Clear stale errors on reporting agents upon probe - PCI/AER: Stop ruling out unbound devices as error source - PCI/ASPM: Fix pci_clear_and_set_config_dword() usage - PCI: Check parent for NULL in of_pci_bus_release_domain_nr() - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value - PCI: Do not attempt to set ExtTag for VFs - PCI: dwc: endpoint: Implement the pci_epc_ops::align_addr() operation - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry - PCI: dwc: ep: Use align addr function for dw_pcie_ep_raise_{msi,msix}_irq() - PCI: dwc: Fix msg_atu_index assignment - PCI: dw-rockchip: Don't wait for link since we can detect Link Up - PCI: Enable ACS after configuring IOMMU for OF platforms - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions - PCI: endpoint: Introduce pci_epc_function_is_valid() - PCI: endpoint: Introduce pci_epc_mem_map()/unmap() - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete - PCI: Fix pci_slot_lock () device locking - PCI: Fix pci_slot_trylock() error handling - PCI: Fix placement of pci_save_state() in pci_bus_add_device() - PCI: hv: Set default NUMA node to 0 for devices without affinity info - PCI: Initialize RCB from pci_configure_device() - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken - PCI: Mark ASM1164 SATA controller to avoid bus reset - PCI: Mark Nvidia GB10 to avoid bus reset - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails - PCI/MSI: Unmap MSI-X region on error - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails - PCI/PM: Avoid redundant delays on D3hot->D3cold - PCI/portdrv: Fix potential resource leak - PCI: qcom: Don't wait for link if we can detect Link Up - PCI: Revert "Enable ACS after configuring IOMMU for OF platforms" - PCI: Update saved_config_space upon resource assignment - PCI: Use resource_set_range() that correctly sets ->end - perf annotate: Fix hashmap__new() error checking - perf annotate: Fix memcpy size in arch__grow_instructions() - perf annotate: Use jump__delete when freeing LoongArch jumps - perf/arm-cmn: Reject unsupported hardware configurations - perf/arm-cmn: Support CMN-600AE - perf: arm_spe: Properly set hw.state on failures - perf callchain: Fix srcline printing with inlines - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD - perf disasm: Fix off-by-one bug in outside check - perf: Fix __perf_event_overflow() vs perf_remove_from_context() race - perf ftrace: Fix hashmap__new() error checking - perf: Make sure to use pmu_ctx->pmu for groups - perf maps: Fix reference count leak in maps__find_ams() - perf test stat tests: Fix for virtualized machines - perf test stat: Update test expectations and events - perf unwind-libdw: Fix invalid reference counts - perf vendor events amd: Fix Zen 5 MAB allocation events - perf/x86/core: Do not set bit width for unavailable counters - perf/x86/cstate: Add Airmont NP - perf/x86/intel: Add missing branch counters constraint apply - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events - perf/x86/intel/uncore: Skip discovery table for offline dies - perf/x86/intel/uncore: Support more units on Granite Rapids - perf/x86/msr: Add Airmont NP - phy: cadence-torrent: restore parent clock for refclk during resume - phy: freescale: imx8qm-hsio: fix NULL pointer dereference - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature - phy: mvebu-cp110-utmi: fix dr_mode property read from dts - phy: qcom: edp: Make the number of clocks flexible - phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() - phy: ti: phy-j721e-wiz: restore mux selection during resume - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() - pinctrl: equilibrium: Fix device node reference leak in pinbank_init() - pinctrl: equilibrium: fix warning trace on load - pinctrl: equilibrium: rename irq_chip function callbacks - pinctrl: intel: Add code name documentation - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) - pinctrl: mediatek: common: Fix probe failure for devices without EINT - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition - pinctrl: single: fix refcount leak in pcs_add_gpio_func() - ping: annotate data-races in ping_lookup() - platform/chrome: cros_ec_lightbar: Fix response size initialization - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen - platform/x86/amd/pmc: Add support for Van Gogh SoC - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug - platform/x86/amd/pmf: Prevent TEE errors after hibernate - platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow Z13-KJP GZ302EAC - platform/x86: dell-wmi: Add audio/mic mute key codes - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data - platform/x86: hp-bioscfg: Support allocations of larger data - platform/x86: hp-wmi: Ignore backlight and FnLock events - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list - platform/x86: intel-hid: disable wakeup_mode during hibernation - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit - platform/x86: ISST: Add missing write block check - platform/x86: ISST: Correct locked bit width - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 - pmdomain: bcm: bcm2835-power: Fix broken reset status read - pmdomain: bcm: bcm2835-power: Increase ASB control timeout - pmdomain: core: Fix detach procedure for virtual devices in genpd - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled - PM: hibernate: Drain trailing zero pages on userspace restore - PM: runtime: Fix a race condition related to device removal - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races - PM: wakeup: Handle empty list in wakeup_sources_walk_start() - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN - powercap: intel_rapl: Add PL4 support for Ice Lake - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check - powerpc64/bpf: do not increment tailcall count when prog is NULL - powerpc64/bpf: fix kfunc call support - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() - powerpc: 83xx: km83xx: Fix keymile vendor prefix - powerpc/crash: adjust the elfcorehdr size - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o - powerpc/kexec/core: use big-endian types for crash variables - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() - powerpc/uaccess: Fix inline assembly for clang build on PPC32 - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user() - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write - power: sequencing: fix missing state_lock in pwrseq_power_on() error path - power: supply: ab8500: Fix use-after-free in power_supply_changed() - power: supply: act8945a: Fix use-after-free in power_supply_changed() - power: supply: axp288_charger: Do not cancel work before initializing it - power: supply: bq256xx: Fix use-after-free in power_supply_changed() - power: supply: bq25980: Fix use-after-free in power_supply_changed() - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() - power: supply: goldfish: Fix use-after-free in power_supply_changed() - power: supply: max17042: avoid overflow when determining health - power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() - power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler - power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer - power: supply: rt9455: Fix use-after-free in power_supply_changed() - power: supply: sbs-battery: Fix use-after-free in power_supply_changed() - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() - printk: add print_hex_dump_devel() - procfs: fix missing RCU protection when reading real_parent in do_task_stat() - procfs: fix possible double mmput() in do_procmap_query() - pstore: ram_core: fix incorrect success return when vmap() fails - pstore/ram: fix buffer overflow in persistent_ram_save_old() - ptrace: slightly saner 'get_dumpable()' logic - pwm: imx-tpm: Count the number of enabled channels in probe - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size - quota: fix livelock between quotactl and freeze_super - randomize_kstack: Maintain kstack_offset per task - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() - rbd: fix null-ptr-deref when device_add_disk() fails - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Refactor expedited handling check in rcu_read_unlock_special() - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler() - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing - RDMA/core: Fix stale RoCE GIDs during netdev events at registration - RDMA/efa: Fix typo in efa_alloc_mr() - RDMA/hns: Fix RoCEv1 failure due to DSCP - RDMA/hns: Fix unlocked call to hns_roce_qp_remove() - RDMA/hns: Fix WQ_MEM_RECLAIM warning - RDMA/hns: Notify ULP of remaining soft-WCs during reset - RDMA/irdma: Clean up unnecessary dereference of event->cm_node - RDMA/irdma: Fix deadlock during netdev reset with active connections - RDMA/irdma: Fix double free related to rereg_user_mr - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() - RDMA/irdma: Initialize free_qp completion before using it - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() - RDMA/irdma: Return EINVAL for invalid arp index error - RDMA/irdma: Update ibqp state to error if QP is already in error state - RDMA/iwcm: Fix workqueue list corruption by removing work_list - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss() - RDMA/mana_ib: Disable RX steering on RSS QP destroy - RDMA/mana: Validate rx_hash_key_len - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler - RDMA/mlx5: Fix UMR hang in LAG error state unload - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() - RDMA/rtrs-clt: For conn rejection use actual err number - RDMA/rtrs: server: remove dead code - RDMA/rtrs-srv: fix SG mapping - RDMA/rw: Fall back to direct SGE on MR pool exhaustion - RDMA/rxe: Fix double free in rxe_srq_from_init - RDMA/rxe: Fix race condition in QP timer handlers - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads - RDMA/rxe: Reject unknown opcodes before ICRC processing - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv - RDMA/siw: Fix potential NULL pointer dereference in header processing - RDMA/umad: Reject negative data_len in ib_umad_write - RDMA/umem: Fix double dma_buf_unpin in failure path - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path - rds: ib: reject FRMR registration before IB connection is established - regmap: Synchronize cache for the page selector - regulator: act8945a: fix OF node reference imbalance - regulator: bd9571mwv: fix OF node reference imbalance - regulator: core: move supply check earlier in set_machine_constraints() - regulator: max77650: fix OF node reference imbalance - regulator: mt6357: fix OF node reference imbalance - regulator: pca9450: Correct interrupt type - regulator: rk808: fix OF node reference imbalance - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized - remoteproc: imx_rproc: Fix invalid loaded resource table detection - remoteproc: mediatek: Break lock dependency to `prepare_lock` - remoteproc: mediatek: Unprepare SCP clock during system suspend - remoteproc: sysmon: Correct subsys_name_len type in QMI request - remoteproc: xlnx: Only access buffer information if IPI is buffered - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option - reset: gpio: suppress bind attributes in sysfs - resource: Add resource set range and size helpers - Revert "ALSA: usb: Increase volume range that triggers a warning" - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" - Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" - Revert "drm/xe/mmio: Avoid double-adjust in 64-bit reads" - Revert "drm/xe: Switch MMIO interface to take xe_mmio instead of xe_gt" - Revert "hwmon: (ibmpex) fix use-after-free in high/low store" - Revert "LoongArch: Add machine_kexec_mask_interrupts() implementation" - Revert "LoongArch: Handle percpu handler address for ORC unwinder" - Revert "LoongArch/orc: Use RCU in all users of __module_address()." - Revert "LoongArch: Remove unnecessary checks for ORC unwinder" - Revert "mfd: da9052-spi: Change read-mask to write-mask" - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" - Revert "mptcp: add needs_id for netlink appending addr" - Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up" - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" - Revert "PCI: qcom: Don't wait for link if we can detect Link Up" - Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported" - Revert "tcpm: allow looking for role_sw device in the main node" - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer" - ring-buffer: Fix to update per-subbuf entries of persistent ring buffer - riscv: kgdb: fix several debug register assignment bugs - riscv: vector: init vector context with proper vlenb - rnbd-srv: Fix server side setting of bi_size for special IOs - rnbd-srv: use bio_add_virt_nofail - rnbd-srv: Zero the rsp buffer before using it - rpmsg: core: fix race in driver_override_show() and use core helper - rseq: Clarify rseq registration rseq_size bound check comment - rtc: interface: Alarm race handling should not discard preceding error - rtc: ntxec: fix OF node reference imbalance - rtc: zynqmp: correct frequency value - rtmutex: Use waiter::task instead of current in remove_waiter() - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size - rust: allow `clippy::collapsible_if` globally - rust: allow `clippy::collapsible_match` globally - rust: init: fix `clippy::undocumented_unsafe_blocks` warnings - rust: kbuild: allow `unused_features` - rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0 - rust: kunit: fix warning when !CONFIG_PRINTK - rust: pin-init: add references to previously initialized fields - rust: pin-init: fix incorrect accessor reference lifetime - rust: pin-init: internal: init: document load-bearing fact of field accessors - rust: warn on bindgen < 0.69.5 and libclang >= 19.1 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - rxrpc: Fix anonymous key handling - rxrpc: Fix call removal to use RCU safe deletion - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) - rxrpc: Fix key quota calculation for multitoken keys - rxrpc: Fix key reference count leak from call->key - rxrpc: Fix memory leaks in rxkad_verify_response() - rxrpc: Fix missing error checks for rxkad encryption/decryption failure - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing - rxrpc: Fix potential UAF after skb_unshare() failure - rxrpc: Fix recvmsg() unconditional requeue - rxrpc: Fix re-decryption of RESPONSE packets - rxrpc: fix reference count leak in rxrpc_server_keyring() - rxrpc: Fix rxkad crypto unalignment handling - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets - rxrpc: only handle RESPONSE during service challenge - rxrpc: Only put the call ref if one was acquired - rxrpc: reject undecryptable rxkad response tickets - s390/barrier: Make array_index_mask_nospec() __always_inline - s390/cio: Fix device lifecycle handling in css_alloc_subchannel() - s390/cpum_sf: Cap sampling rate to prevent lsctl exception - s390/dasd: Copy detected format information to secondary device - s390/dasd: Move quiesce state with pprc swap - s390/debug: Reject zero-length input in debug_input_flush_fn() - s390/entry: Scrub r12 register on kernel entry - s390/idle: Fix cpu idle exit cpu time accounting - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n - s390/pci: Handle futile config accesses of disabled devices directly - s390/perf_cpum_sf: Convert to use try_cmpxchg128() - s390/perf: Disable register readout on sampling events - s390/pfault: Fix virtual vs physical address confusion - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS - s390/stackleak: Fix __stackleak_poison() inline assembly constraint - s390/syscalls: Add spectre boundary for syscall dispatch table - s390/vtime: Fix virtual timer forwarding - s390/xor: Fix xor_xc_2() inline assembly constraints - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute - sched/deadline: Clear the defer params - sched/deadline: Use revised wakeup rule for dl_server - sched/debug: Fix updating of ppos on server write ops - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id - sched_ext: Fix starvation of scx_enable() under fair-class saturation - sched_ext: Remove redundant css_put() in scx_cgroup_init() - sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update - sched/fair: Fix zero_vruntime tracking - sched/fair: Fix zero_vruntime tracking fix - sched/fair: Use protect_slice() instead of direct comparison - sched: idle: Consolidate the handling of two special cases - sched: idle: Make skipping governor callbacks more consistent - sched/rt: Skip currently executing CPU in rto_next_cpu() - sched: Use u64 for bandwidth ratio calculations - scripts/dtc: Remove unused dts_version in dtc-lexer.l - scripts: generate_rust_analyzer.py: avoid FD leak - scripts: generate_rust_analyzer.py: define scripts - scsi: buslogic: Reduce stack usage - scsi: core: Fix error handling for scsi_alloc_sdev() - scsi: core: Fix refcount leak for tagset_refcnt - scsi: csiostor: Fix dereference of null pointer rn - scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP - scsi: efct: Use IRQF_ONESHOT and default primary handler - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec - scsi: hisi_sas: Fix NULL pointer exception during user_scan() - scsi: hisi_sas: Use macro instead of magic number - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() - scsi: lpfc: Properly set WC for DPP mapping - scsi: mpi3mr: Add NULL checks when resetting request and reply queues - scsi: mpi3mr: Clear reset history on ready and recheck state after timeout - scsi: pm8001: Fix use-after-free in pm8001_queue_command() - scsi: scsi_transport_sas: Fix the maximum channel scanning issue - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails - scsi: ses: Fix devices attaching to different hosts - scsi: ses: Handle positive SCSI error from ses_recv_diag() - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() - scsi: target: Fix recursive locking in __configfs_open_file() - scsi: target: tcm_loop: Drain commands in target_reset handler - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend - scsi: ufs: core: Fix shift out of bounds when MAXQ=32 - scsi: ufs: core: Flush exception handling work when RPM level is zero - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume - scsi: ufs: host: mediatek: Require CONFIG_PM - scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode - seg6: separate dst_cache for input and output paths in seg6 lwtunnel - selftest/arm64: Fix sve2p1_sigill() to hwcap test - selftests/bpf: Fix resource leak in serial_test_wq on attach failure - selftests/bpf: Test cross-sign 64bits range refinement - selftests/bpf: Test invariants on JSLT crossing sign - selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary - selftests/bpf: veristat: fix printing order in output_stats() - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled - selftests/harness: order TEST_F and XFAIL_ADD constructors - selftests/hid: fix compilation when bpf_wq and hid_device are not exported - selftests/landlock: Fix format warning for __u64 in net_test - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs - selftests/mm: convert page_size to unsigned long - selftests/mm: pagemap_ioctl: Fix types mismatches shown by compiler options - selftests: mptcp: add a check for 'add_addr_accepted' - selftests: mptcp: check output: catch cmd errors - selftests: mptcp: join: check removing signal+subflow endp - selftests: mptcp: join: check RM_ADDR not sent over same subflow - selftests: mptcp: more stable simult_flows tests - selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl - selftests/mqueue: Fix incorrectly named file - selftests: net: bridge_vlan_mcast: wait for h1 before querier check - selinux: don't reserve xattr slot when we won't fill it - selinux: prune /sys/fs/selinux/disable - selinux: shrink critical section in sel_write_load() - serial: 8250: 8250_omap.c: Add support for handling UART error conditions - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY - serial: 8250_dw: handle clock enable errors in runtime_resume - serial: 8250: Fix TX deadlock when using DMA - serial: 8250_pci: add support for the AX99100 - serial: caif: fix use-after-free in caif_serial ldisc_close() - serial: caif: hold tty->link reference in ldisc_open and ser_release - serial: imx: change SERIAL_IMX_CONSOLE to bool - serial: SH_SCI: improve "DMA support" prompt - serial: uartlite: fix PM runtime usage count underflow on probe - sh: platform_early: remove pdev->driver_override check - smack: /smack/doi: accept previously used values - smack: /smack/doi must be > 0 - smb: client: add proper locking around ses->iface_last_update - smb: client: Compare MACs in constant time - smb: client: correct value for smbd_max_fragmented_recv_size - smb: client: Don't log plaintext credentials in cifs_set_cifscreds - smb: client: fix atomic open with O_DIRECT & O_SYNC - smb: client: fix broken multichannel with krb5+signing - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() - smb: client: fix cifs_pick_channel when channels are equally loaded - smb: client: fix iface port assignment in parse_server_interfaces - smb: client: fix in-place encryption corruption in SMB2_write() - smb: client: fix krb5 mount with username option - smb: client: fix off-by-8 bounds check in check_wsl_eas() - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path - smb/client: fix out-of-bounds read in smb2_compound_op() - smb/client: fix out-of-bounds read in symlink_data() - smb: client: fix potential UAF and double free in smb2_open_file() - smb: client: prevent races in ->query_interfaces() - smb: client: require a full NFS mode SID before reading mode bits - smb: client: use kzalloc to zero-initialize security descriptor buffer - smb: client: validate dacloffset before building DACL pointers - smb: client: validate the whole DACL before rewriting it in cifsacl - smb: server: fix active_num_conn leak on transport allocation failure - smb/server: Fix another refcount leak in smb2_open() - smb: server: fix max_connections off-by-one in tcp accept path - smb: server: fix use-after-free in smb2_open() - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching - soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() - soc: fsl: qbman: fix race condition in qman_destroy_fq - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() - soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe - soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei - soc: qcom: smem: handle ENOMEM error during probe - soc: rockchip: grf: Add missing of_node_put() when returning - soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition - soc: rockchip: grf: Support multiple grf to be handled - soc: ti: k3-socinfo: Fix regmap leak on probe failure - soc: ti: pruss: Fix double free in pruss_clk_mux_setup() - sound: ua101: fix division by zero at probe - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) - soundwire: intel_ace2x: add SND_HDA_CORE dependency - soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list - sparc: don't reference obsolete termio struct for TC* constants - sparc: Synchronize user stack on fork and clone - spi: aspeed-smc: fix controller deregistration - spi: at91-usart: fix controller deregistration - spi: atmel: fix controller deregistration - spi: bcm63xx: fix controller deregistration - spi: bcmbca-hsspi: fix controller deregistration - spi: cadence: fix controller deregistration - spi: cadence: fix unclocked access on unbind - spi: cadence-qspi: Fix exec_mem_op error handling - spi: cadence-quadspi: Implement refcount to handle unbind during busy - spi: ch341: fix memory leaks on probe failures - spi: coldfire-qspi: fix controller deregistration - spi: dln2: fix controller deregistration - spi: fix resource leaks on device setup failure - spi: fix statistics allocation - spi: fix use-after-free on controller registration failure - spi: fsl-espi: fix controller deregistration - spi: fsl: fix controller deregistration - spi: geni-qcom: Check DMA interrupts early in ISR - spi: geni-qcom: Fix abort sequence execution for serial engine errors - spi-geni-qcom: initialize mode related registers to 0 - spi-geni-qcom: use xfer->bits_per_word for can_dma() - spi: Group CS related fields in struct spi_device - spi: img-spfi: fix controller deregistration - spi: imx: fix runtime pm leak on probe deferral - spi: imx: fix use-after-free on unbind - spi: intel-pci: Add support for Nova Lake mobile SPI flash - spi: lantiq-ssc: fix controller deregistration - spi: meson-spicc: fix controller deregistration - spi: meson-spicc: Fix double-put in remove path - spi: microchip-core-qspi: fix controller deregistration - spi: mpc52xx: fix controller deregistration - spi: mpc52xx: fix use-after-free on registration failure - spi: mpc52xx: fix use-after-free on unbind - spi: mtk-nor: fix controller deregistration - spi: mxic: fix controller deregistration - spi: mxs: fix controller deregistration - spi: npcm-pspi: fix controller deregistration - spi: omap2-mcspi: fix controller deregistration - spi: orion: fix clock imbalance on registration failure - spi: orion: fix controller deregistration - spi: orion: fix runtime pm leak on unbind - spi: pic32: fix controller deregistration - spi: pic32-sqi: fix controller deregistration - spi: pl022: fix controller deregistration - spi: qup: fix controller deregistration - spi: rockchip: fix controller deregistration - spi: rspi: fix controller deregistration - spi: s3c64xx: fix controller deregistration - spi: s3c64xx: fix NULL-deref on driver unbind - spi: sh-hspi: fix controller deregistration - spi: sn-f-ospi: Fix resource leak in f_ospi_probe() - spi: spidev: fix lock inversion between spi_lock and buf_lock - spi: spi-fsl-lpspi: fix teardown order issue (UAF) - spi: spi-mem: Limit octal DTR constraints to octal DTR situations - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end - spi: sprd: fix controller deregistration - spi: stm32: fix Overrun issue at < 8bpw - spi: st-ssc4: fix controller deregistration - spi: sun4i: fix controller deregistration - spi: sun6i: fix controller deregistration - spi: syncuacer: fix controller deregistration - spi: tegra114: fix controller deregistration - spi: tegra20-sflash: fix controller deregistration - spi: tegra210-quad: Protect curr_xfer check in IRQ handler - spi: ti-qspi: fix controller deregistration - spi: tools: Add include folder to .gitignore - spi: topcliff-pch: fix controller deregistration - spi: topcliff-pch: fix use-after-free on unbind - spi: uniphier: fix controller deregistration - spi: uniphier: Simplify clock handling with devm_clk_get_enabled() - spi: use generic driver_override infrastructure - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - spi: zynqmp-gqspi: fix controller deregistration - spi: zynq-qspi: fix controller deregistration - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled() - Squashfs: check metadata block offset is within range - staging: greybus: lights: avoid NULL deref - staging: media: atomisp: Disallow all private IOCTLs - staging: rtl8723bs: fix memory leak on failure path - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure - staging: rtl8723bs: fix null dereference in find_network - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() - staging: sm750fb: fix division by zero in ps_to_hz() - staging: vme_user: fix root device leak on init failure - statmount: permission check should return EPERM - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths - sunrpc: fix cache_request leak in cache_release - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path - sysctl: fix uninitialized variable in proc_do_large_bitmap - taskstats: set version in TGID exit notifications - tcp: call sk_data_ready() after listener migration - tcp: optimize inet_use_bhash2_on_bind() - tcp: tcp_tx_timestamp() must look at the rtx queue - team: fix header_ops type confusion with non-Ethernet ports - tg3: Fix race for querying speed/duplex - tg3: replace placeholder MAC address with device property - thermal: core: Address thermal zone removal races with resume - thermal: core: Fix thermal zone device registration error path - thermal: core: Fix thermal zone governor cleanup issues - thermal: core: Free thermal zone ID later during removal - thermal: core: Mark thermal zones as exiting before unregistration - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata - thermal: int340x: Fix sysfs group leak on DLVR registration failure - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature - thermal/of: Fix reference leak in thermal_of_cm_lookup() - thunderbolt: Fix property read in nhi_wake_supported() - time/jiffies: Mark jiffies_64_to_clock_t() notrace - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG - tipc: fix divide-by-zero in tipc_sk_filter_connect() - tipc: fix duplicate publication key in tipc_service_insert_publ() - tipc: fix RCU dereference race in tipc_aead_users_dec() - tls: Fix race condition in tls_sw_cancel_work_tx() - tls: Purge async_hold in tls_decrypt_async_wait() - tools/accounting: handle truncated taskstats netlink messages - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure - tools: Fix bitfield dependency failure - tools/power cpupower: Reset errno before strtoull() - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() - tpm: avoid -Wunused-but-set-variable - tpm: Fix auth session leak in tpm2_get_random() error path - tpm: st33zp24: Fix missing cleanup on get_burstcount() error - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure - tpm: tpm_tis: add error logging for data transfer - tpm: tpm_tis: stop transmit if retries are exhausted - tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() - tracefs: Fix default permissions not being applied on initial mount - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() - tracing: Add a comment about ftrace_regs definition - tracing: Add ftrace_fill_perf_regs() for perf event - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs - tracing: Add NULL pointer check to trigger_data_free() - tracing: Add recursion protection in kernel stack trace recording - tracing: Fix checking of freed trace_event_file for hist files - tracing: Fix enabling multiple events on the kernel command line and bootconfig - tracing: Fix false sharing in hwlat get_sample() - tracing: Fix potential deadlock in cpu hotplug with osnoise - tracing: Fix syscall events activation by ensuring refcount hits zero - tracing: Fix to set write permission to per-cpu buffer_size_kb - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G - tracing: Fix WARN_ON in tracing_buffers_mmap_close - tracing/probe: reject non-closed empty immediate strings - tracing/probes: Limit size of event probe to 3K - tracing: Properly process error handling in event_hist_trigger_parse() - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros - tracing: ring-buffer: Fix to check event length before using - tracing: Switch trace_osnoise.c code over to use guard() and __free() - tracing: Wake up poll waiters for hist files when removing an event - ublk: Validate SQE128 flag before accessing the cmd - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() - udf: fix partition descriptor append bookkeeping - udf: reject descriptors with oversized CRC length - udp: Fix wildcard bind conflict check when using hash2 - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n - um: drivers: call kernel_strrchr() explicitly in cow_user.c - unshare: fix unshare_fs() handling - uprobes: Fix incorrect lockdep condition in filter_chain() - uprobes: switch to RCU Tasks Trace flavor for better performance - USB: add QUIRK_NO_BOS for video capture several devices - usb: bdc: fix sleep during atomic - USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen - usb: cdc-acm: Restore CAP_BRK functionnality to CH343 - usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() - usb: cdns3: fix role switching during resume - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue - usb: cdns3: gadget: fix state inconsistency on gadget init failure - usb: cdns3: remove redundant if branch - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change - usb: chipidea: otg: not wait vbus drop if use role_switch - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() - usb: class: cdc-wdm: fix reordering issue in read code path - USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam - usb: core: don't power off roothub PHYs if phy_set_mode() fails - USB: core: Limit the length of unkillable synchronous timeouts - usb: core: new quirk to handle devices with zero configurations - usb: core: phy: avoid double use of 'usb3-phy' - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk - USB: dummy-hcd: Fix interrupt synchronization error - USB: dummy-hcd: Fix locking/synchronization error - usb: dwc2: fix resume failure if dr_mode is host - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() - usb: dwc3: gadget: Move vbus draw to workqueue context - usb: dwc3: Move GUID programming after PHY initialization - usb: dwc3: pci: add support for the Intel Nova Lake -H - usb: ehci-brcm: fix sleep during atomic - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer - usb: gadget: f_ecm: Fix net_device lifecycle with device_move - usb: gadget: f_eem: Fix net_device lifecycle with device_move - usb: gadget: f_fs: fix DMA-BUF OUT queues - usb: gadget: f_fs: Fix ioctl error handling - usb: gadget: f_hid: don't call cdev_init while cdev in use - usb: gadget: f_hid: move list and spinlock inits from bind to alloc - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() - usb: gadget: f_ncm: Fix net_device lifecycle with device_move - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() - usb: gadget: f_rndis: Fix net_device lifecycle with device_move - usb: gadget: f_rndis: Protect RNDIS options with mutex - usb: gadget: f_subset: Fix net_device lifecycle with device_move - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling - usb: gadget: f_uac1_legacy: validate control request size - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop - usb: gadget: uvc: fix NULL pointer dereference during unbind race - usb: image: mdc800: kill download URB on timeout - usbip: validate number_of_packets in usbip_pack_ret_submit() - usb: mdc800: handle signal and read racing - usb: misc: uss720: properly clean up reference in uss720_probe() - USB: omap_udc: DMA: Don't enable burst 4 mode - usb: port: add delay after usb_hub_set_port_power() - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive - usb: renesas_usbhs: fix use-after-free in ISR during device removal - usb: roles: get usb role switch from parent only for usb-b-connector - USB: serial: f81232: fix incomplete serial port generation - USB: serial: io_edgeport: add support for Blackbox IC135A - USB: serial: option: add MeiG Smart SRM825WN - USB: serial: option: add support for Rolling Wireless RW135R-GL - USB: serial: option: add Telit Cinterion FN990A MBIM composition - USB: serial: option: add Telit Cinterion LE910Cx compositions - usb: storage: Expand range of matched versions for VL817 quirks entry - usb: typec: altmode/displayport: set displayport signaling rate in configure message - usb: typec: tcpm: reset internal port states on soft reset AMS - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs - usb: typec: ucsi: skip connector validation before init - usb: typec: ucsi: validate connector number in ucsi_notify_common() - usb: ulpi: fix double free in ulpi_register_interface() error path - usb: ulpi: fix memory leak on ulpi_register() error paths - USB: usbcore: Introduce usb_bulk_msg_killable() - usb: usblp: fix heap leak in IEEE 1284 device ID via short response - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl - usb: usbtmc: Flush anchored URBs in usbtmc_release - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts - usb: xhci: Fix memory leak in xhci_disable_slot() - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() - usb: xhci: Prevent interrupt storm on host controller error (HCE) - usb: yurex: fix race in probe - userfaultfd: allow registration of ranges below mmap_min_addr - vfio/cdx: Fix NULL pointer dereference in interrupt trigger path - vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() - vhost: fix caching attributes of MMIO regions by setting them explicitly - vhost: move vdpa group bound check to vhost_vdpa - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false - virt: tdx-guest: Fix handling of host controlled 'quote' buffer length - virt: vbox: uapi: Mark inner unions in packed structs as packed - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 - vsock: fix buffer size clamping order - vsock/virtio: fix accept queue count leak on transport mismatch - vsock/virtio: fix empty payload in tap skb for non-linear buffers - vsock/virtio: fix length and offset in tap skb for split packets - vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating bytes to copy - vxlan: validate ND option lengths in vxlan_na_create - watchdog: imx7ulp_wdt: handle the nowayout option - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs() - watchdog: starfive-wdt: Fix PM reference leak in probe error path - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 - wifi: ath11k: Fix failure to connect to a 6 GHz AP - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session - wifi: ath12k: fix preferred hardware mode calculation - wifi: ath5k: do not access array OOB - wifi: b43: enforce bounds check on firmware key index in b43_rx() - wifi: b43legacy: enforce bounds check on firmware key index in RX path - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task - wifi: brcmfmac: validate bsscfg indices in IF events - wifi: brcmsmac: Fix dma_free_coherent() size - wifi: cfg80211: allow only one NAN interface, also in multi radio - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() - wifi: cfg80211: Fix use_for flag update on BSS refresh - wifi: cfg80211: stop NAN and P2P in cfg80211_leave - wifi: cfg80211: wext: fix IGTK key ID off-by-one - wifi: cw1200: Fix locking in error paths - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() - wifi: iwlwifi: mvm: check the validity of noa_len - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() - wifi: libertas: fix use-after-free in lbs_free_adapter() - wifi: libertas: fix WARNING in usb_tx_block - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration - wifi: mac80211: check tdls flag in ieee80211_tdls_oper - wifi: mac80211: drop stray 'static' from fast-RX rx_result - wifi: mac80211: fix NULL deref in mesh_matches_local() - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. - wifi: mac80211: remove station if connection prep fails - wifi: mac80211: set default WMM parameters on all links - wifi: mac80211: use safe list iteration in radar detect work - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() - wifi: mt76: mt7921: fix a potential clc buffer length underflow - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr - wifi: mt76: mt7925: fix incorrect length field in txpower command - wifi: mt76: mt7925: fix incorrect TLV length in CLC command - wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() - wifi: radiotap: reject radiotap with unknown bits - wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config - wifi: rsi: fix kthread lifetime race between self-exit and external-stop - wifi: rt2x00usb: fix devres lifetime - wifi: rtl8xxxu: fix potential use of uninitialized value - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() - wifi: rtw88: check for PCI upstream bridge existence - wifi: rtw88: fix device leak on probe failure - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero - wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() - wifi: rtw89: 8922a: add digital compensation for 2GHz - wifi: rtw89: 8922a: set random mac if efuse contains zeroes - wifi: rtw89: fix unable to receive probe responses under MLO connection - wifi: rtw89: mac: correct page number for CSI response - wifi: rtw89: pci: restore LDO setting after device resume - wifi: rtw89: ser: enable error IMR after recovering from L1 - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation - wifi: wl1251: validate packet IDs before indexing tx_frames - wifi: wlcore: Fix a locking bug - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom - workqueue: Add pool_workqueue to pending_pwqs list when unplugging multiple inactive works - workqueue: Add system_percpu_wq and system_dfl_wq - workqueue: Factor out assign_rescuer_work() - workqueue: Only assign rescuer work when really needed - workqueue: Process rescuer work items one-by-one using a cursor - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags - X.509: Fix out-of-bounds access when parsing extensions - x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache - x86-64: rename misleadingly named '__copy_user_nocache()' function - x86/acpi/boot: Correct acpi_is_processor_usable() check again - x86/apic: Disable x2apic on resume if the kernel expects so - x86/CPU/AMD: Add additional fixed RDSEED microcode revisions - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache - x86/cpu: Disable FRED when PTI is forced on - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() - x86/CPU: Fix FPDSS on Zen1 - x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask - x86/efi: defer freeing of boot services memory - x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path - x86/fred: Correct speculative safety in fred_extint() - x86/fred: Fix early boot failures on SEV-ES/SNP guests - x86/hyperv: Fix error pointer dereference - x86/kexec: add a sanity check on previous kernel's ima kexec buffer - x86/kexec: Copy ACPI root pointer address from config table - x86/platform/uv: Handle deconfigured sockets - x86: rename and clean up __copy_from_user_inatomic_nocache() - x86/sev: Allow IBPB-on-Entry feature for SNP guests - x86: shadow stacks: proper error handling for mmap lock - x86/shstk: Prevent deadlock during shstk sigreturn - x86/uprobes: Fix XOL allocation failure for 32-bit tasks - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set - xattr: switch to CLASS(fd) - xdp: allow attaching already registered memory model to xdp_rxq_info - xdp: produce a warning when calculated tailroom is negative - xdp: register system page pool as an XDP memory model - xdp: use modulo operation to calculate XDP frag tailroom - xdrgen: Fix struct prefix for typedef types in program wrappers - xdrgen: Initialize data pointer for zero-length items - xen/acpi-processor: fix _CST detection using undersized evaluation buffer - xenbus: Use .freeze/.thaw to handle xenbus devices - xen-netback: reject zero-queue configuration from guest - xen/privcmd: add boot control for restricted usage in domU - xen/privcmd: fix double free via VMA splitting - xen/privcmd: restrict usage in unprivileged domU - xen/privcmd: unregister xenstore notifier on module exit - xen/virtio: Don't use grant-dma-ops when running as Dom0 - xfrm6: fix uninitialized saddr in xfrm6_get_saddr() - xfrm: account XFRMA_IF_ID in aevent size calculation - xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi - xfrm: ah: account for ESN high bits in async callbacks - xfrm: always flush state and policy upon NETDEV_UNREGISTER event - xfrm: call xdo_dev_state_delete during state update - xfrm: clear trailing padding in build_polexpire() - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete - xfrm: esp: avoid in-place decrypt on shared skb frags - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path - xfrm: fix refcount leak in xfrm_migrate_policy_find - xfrm: fix the condition on x->pcpu_num in xfrm_sa_len - xfrm: Fix the usage of skb->sk - xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() - xfrm: prevent policy_hthresh.work from racing with netns teardown - xfrm: provide message size for XFRM_MSG_MAPPING - xfrm: skip templates check for packet offload tunnel mode - xfrm_user: fix info leak in build_mapping() - xfrm_user: fix info leak in build_report() - xfrm: Wait for RCU readers during policy netns exit - xfs: avoid dereferencing log items after push callbacks - xfs: check for deleted cursors when revalidating two btrees - xfs: check return value of xchk_scrub_create_subord - xfs: delete attr leaf freemap entries when empty - xfs: don't irele after failing to iget in xfs_attri_recover_work - xfs: ensure dquot item is deleted from AIL only after log shutdown - xfs: fix a resource leak in xfs_alloc_buftarg() - xfs: fix copy-paste error in previous fix - xfs: Fix error pointer dereference - xfs: fix freemap adjustments when adding xattrs to leaf blocks - xfs: fix integer overflow in bmap intent sort comparator - xfs: fix remote xattr valuelblk check - xfs: fix returned valued from xfs_defer_can_append - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 - xfs: fix the xattr scrub to detect freemap/entries array collisions - xfs: fix undersized l_iclog_roundoff values - xfs: get rid of the xchk_xfile_*_descr calls - xfs: mark data structures corrupt on EIO and ENODATA - xfs: only call xf{array,blob}_destroy if we have a valid pointer - xfs: remove file_path tracepoint data - xfs: remove xfs_attr_leaf_hasname - xfs: save ailp before dropping the AIL lock in push callbacks - xfs: scrub: unlock dquot before early return in quota scrub - xfs: stop reclaim before pushing AIL during unmount - xprtrdma: Decrement re_receiving on the early exit paths - xsk: Fix fragment node deletion to prevent buffer leak - xsk: fix XDP_UMEM_SG_FLAG issues - xsk: Fix zero-copy AF_XDP fragment drop - xsk: Get rid of xdp_buff_xsk::xskb_list_node - xsk: introduce helper to determine rxq->frag_size - xsk: respect tailroom for ZC setups - xsk: s/free_list_node/list_node/ - xsk: tighten UMEM headroom validation to account for tailroom and min frame - xsk: validate MTU against usable frame size on bind - zram: do not forget to endio for partial discard requests - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Update LVC patches for 6.12.90 - Removed already not needed patches, adapted some of existing ones, added newly appeared patches- Fix PinTheft- Fix memory leak in AFS code- Fix CVE-2026-46300, CVE-2026-46333, CVE-2025-54518- bump rel- CONFIG_NF_CONNTRACK_PROCFS=y sometime i need to obtain traffic stats- Fix Dirtyfrag- Add new module ec-touchpad-toggle - Also exclude nwfermi.ko, which was not excluded by mistake...- Update BR for perf - ``` - DEBUG: make FIXDEP=1 -f Makefile.perf install-man - DEBUG: Makefile.config:1127: No libcapstone found, disables disasm engine support for 'perf script', please install libcapstone-dev/capstone-devel - DEBUG: Makefile.config:1189: libpfm4 not found, disables libpfm4 support. Please install libpfm4-dev - DEBUG: Makefile.config:1223: libtracefs is missing. Please install libtracefs-dev/libtracefs-devel - DEBUG: Auto-detecting system features: - DEBUG: ... dwarf: [ on ] - DEBUG: ... dwarf_getlocations: [ on ] - DEBUG: ... glibc: [ on ] - DEBUG: ... libbfd: [ on ] - DEBUG: ... libbfd-buildid: [ on ] - DEBUG: ... libcap: [ on ] - DEBUG: ... libelf: [ on ] - DEBUG: ... libnuma: [ on ] - DEBUG: ... numa_num_possible_cpus: [ on ] - DEBUG: ... libperl: [ on ] - DEBUG: ... libpython: [ on ] - DEBUG: ... libcrypto: [ on ] - DEBUG: ... libunwind: [ on ] - DEBUG: ... libdw-dwarf-unwind: [ on ] - DEBUG: ... libcapstone: [ OFF ] - DEBUG: ... llvm-perf: [ on ] - DEBUG: ... zlib: [ on ] - DEBUG: ... lzma: [ on ] - DEBUG: ... get_cpuid: [ on ] - DEBUG: ... bpf: [ on ] - DEBUG: ... libaio: [ on ] - DEBUG: ... libzstd: [ on ] - ```- Fix work on older Macs- Revert accidently merged disablement of kmod() provides - Repository is getting prepared for removal of kmod(), see kb#63. - For now - revert this change.- AMDGPU coherency hacks are not needed on x86- Fix CVE-2026-31431 ("Copyfail")- set cma=256M by default for Baikal - Merge: c9153a4 66a6ff7- Merge remote-tracking branch 'baikal/rosa2023.1' into rosa2023.1- Update LVC patches (bz#19983) - Talk with AI debugging https://bugzilla.rosa.ru/show_bug.cgi?id=19983: - https://file-store.rosa.ru/download/94a69475631e57cda3466a98efef1f76740bc34e- llvm for perf - DEBUG: Makefile.config:706: Warning: Disabled BPF skeletons as clang (clang) is missing - DEBUG: Makefile.config:997: No libllvm 13+ found, slower source file resolution, please install llvm-devel/llvm-dev- Hans's patch has been upstreamized- Remove upstreamized LVC patches- New LVC patches- [bot] upd: 6.12.47 -> 6.12.74 - Changelog: - 6pack: drop redundant locking and refcounting - 9p: fix cache/debug options printing in v9fs_show_options - 9p: fix /sys/fs/9p/caches overwriting itself - 9p: sysfs_init: don't hardcode error to ENOMEM - 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN - accel/habanalabs/gaudi2: fix BMON disable configuration - accel/habanalabs/gaudi2: read preboot status after recovering from dirty state - accel/habanalabs: return ENOMEM if less than requested pages were pinned - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail - accel/ivpu: Fix DCT active percent format - accel/ivpu: Fix race condition when unbinding BOs - accel/ivpu: Make function parameter names consistent - accel/ivpu: Prevent runtime suspend during context abort work - accel/qaic: Fix bootlog initialization ordering - accel/qaic: Synchronize access to DBC request queue head & tail pointer - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() - ACPI: battery: Add synchronization between interface updates - ACPI: battery: allocate driver data through devm_ APIs - ACPI: battery: Check for error code from devm_mutex_init() call - ACPI: battery: initialize mutexes through devm_ APIs - ACPI: button: Call input_free_device() on failing input device registration - ACPICA: Allow to skip Global Lock initialization - ACPICA: Avoid walking the Namespace if start_node is NULL - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() - ACPICA: Fix largest possible resource descriptor index - ACPICA: Update dsmethod.c to get rid of unused variable warning - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 - ACPI: CPPC: Check _CPC validity for only the online CPUs - ACPI: CPPC: Detect preferred core availability on online CPUs - ACPI: CPPC: Fix missing PCC check for guaranteed_perf - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs - ACPI: CPPC: Perform fast check switch only for online CPUs - ACPI: debug: fix signedness issues in read/write helpers - ACPI: fan: Add fan speed reporting for fans with only _FST - ACPI: fan: Use ACPI handle when retrieving _FST - ACPI: fan: Use platform device for devres-related actions - ACPI: fan: Workaround for 64-bit firmware bug - acpi/hmat: Fix lockdep warning for hmem_register_resource() - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message - ACPI: PCC: Fix race condition by removing static qualifier - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 - ACPI: processor: idle: Fix memory leak when register cpuidle device failed - ACPI: property: Add code comments explaining what is going on - ACPI: property: Disregard references in data-only subnode lists - ACPI: property: Do not pass NULL handles to acpi_attach_data() - ACPI: property: Fix buffer properties extraction for subnodes - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() - ACPI: property: Return present device nodes only on fwnode interface - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] - ACPI: scan: Update honor list for RPMI System MSI - ACPI: SPCR: Check for table version when using precise baudrate - ACPI: SPCR: Support Precise Baud Rate field - acpi,srat: Fix incorrect device handle check for Generic Initiator - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() - ACPI: video: force native for Lenovo 82K8 - afs: Fix potential null pointer dereference in afs_put_server - af_unix: Cache state->msg in unix_stream_read_generic(). - af_unix: Initialise scc_index in unix_add_edge(). - af_unix: Read sk_peek_offset() again after sleeping in unix_stream_read_generic(). - allow finish_no_open(file, ERR_PTR(-E...)) - alpha: don't reference obsolete termio struct for TC* constants - ALSA: ac97bus: Use guard() for mutex locks - ALSA: ac97: fix a double free in snd_ac97_controller_register() - ALSA: aloop: Fix racy access at PCM trigger - ALSA: ctxfi: Fix potential OOB access in audio mixer handling - ALSA: dice: fix buffer overflow in detect_stream_formats() - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings - ALSA: firewire-motu: add bounds check in put_user loop for DSP events - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() - ALSA: hda: Fix missing pointer check in hda_component_manager_init function - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 - ALSA: hda/realtek: Add quirk for Inspur S14-G1 - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again - ALSA: hda/realtek: Enable headset mic for Acer Nitro 5 - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA - ALSA: hda/realtek - fixed speaker no sound - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. - ALSA: lx_core: use int type to store negative error codes - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer - ALSA: scarlett2: Fix buffer overflow in config retrieval - ALSA: serial-generic: remove shared static buffer - ALSA: uapi: Fix typo in asound.h comment - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 - ALSA: usb-audio: add mono main switch to Presonus S1824c - ALSA: usb-audio: Add mute TLV for playback volumes on more devices - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units - ALSA: usb-audio: apply quirk for MOONDROP Quark2 - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks - ALSA: usb-audio: Convert comma to semicolon - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks - ALSA: usb-audio: Fix block comments in mixer_quirks - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() - ALSA: usb-audio: Fix build with CONFIG_INPUT=n - ALSA: usb-audio: Fix code alignment in mixer_quirks - ALSA: usb-audio: fix control pipe direction - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free - ALSA: usb-audio: fix uac2 clock source at terminal parser - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() - ALSA: usb-audio: Kill timer properly at removal - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks - ALSA: usb-audio: Update for native DSD support quirks - ALSA: usb: Increase volume range that triggers a warning - ALSA: usb-mixer: us16x08: validate meter packet indices - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path - ALSA: wavefront: Clear substream pointers on close - ALSA: wavefront: Fix integer overflow in sample size validation - ALSA: wavefront: Use guard() for spin locks - amba: tegra-ahb: Fix device leak on SMMU enable - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw - amd-xgbe: avoid misleading per-packet error log - amd-xgbe: Avoid spurious link down messages during interface toggle - amd-xgbe: reset retries and mode on RX adapt failures - arc: Fix __fls() const-foldability via __builtin_clzl() - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() - arm64: cputype: Add Neoverse-V3AE definitions - arm64: dts: add off-on-delay-us for usdhc2 regulator - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map - arm64: dts: broadcom: bcm2712: Add default GIC address cells - arm64: dts: broadcom: bcm2712: Define VGIC interrupt - arm64: dts: exynos: gs101: fix sysreg_apm reg property - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props - arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl - arm64: dts: imx8mp: Correct thermal sensor index - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 - arm64: dts: imx8mp-venice-gw702x: remove off-board uart - arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart - arm64: dts: imx93-kontron: Fix GPIO for panel regulator - arm64: dts: imx93-kontron: Fix USB port assignment - arm64: dts: imx95: Correct the lpuart7 and lpuart8 srcid - arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes - arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports - arm64: dts: mba8mx: Fix Ethernet PHY IRQ support - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value - arm64: dts: mediatek: mt8186-tentacruel: Fix touchscreen model - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0 - arm64: dts: mediatek: mt8395-kontron-i1200: Fix MT6360 regulator nodes - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible - arm64: dts: qcom: msm8916: Add missing MDSS reset - arm64: dts: qcom: msm8939: Add missing MDSS reset - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode - arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider - arm64: dts: qcom: sm8650: set ufs as dma coherent - arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller - arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller - arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0 - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A - arm64: dts: rockchip: disable HS400 on RK3588 Tiger - arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5 - arm64: dts: rockchip: Fix vccio4-supply on rk3566-pinetab2 - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro - arm64: dts: rockchip: include rk3399-base instead of rk3399 in rk3399-op1 - arm64: dts: rockchip: Make RK3588 GPU OPP table naming less generic - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A - arm64: dts: rockchip: remove dangerous max-link-speed from helios64 - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1 - arm64: dts: ti: k3-am62a-main: Fix main padcfg length - arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator - arm64: errata: Apply workarounds for Neoverse-V3AE - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA - arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder - arm64: kprobes: call set_memory_rox() for kprobe page - arm64: kprobes: check the return value of set_memory_rox() - arm64: map [_text, _stext) virtual address range non-executable+read-only - arm64, mm: avoid always making PTE dirty in pte_mkwrite() - arm64: mte: Do not flag the zero page as PG_mte_tagged - arm64: mte: Do not warn if the page is already tagged in copy_highpage() - arm64: Revamp HCR_EL2.E2H RES1 detection - arm64: Set __nocfi on swsusp_arch_resume() - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock - arm64: zynqmp: Disable coresight by default - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106 - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() - ARM: 9468/1: fix memset64() on big-endian - ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on reset) - ARM: at91: pm: fix MCKx restore routine - ARM: at91: pm: save and restore ACR during PLL disable/enable - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY - ARM: dts: imx51-zii-rdu1: Fix audmux node names - ARM: dts: imx6q-ba16: fix RTC interrupt level - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property - ARM: dts: renesas: gose: Remove superfluous port property - ARM: dts: renesas: porter: Fix CAN pin group - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init - ARM: tegra: p880: set correct touchscreen clipping - ARM: tegra: transformer-20: add missing magnetometer interrupt - ARM: tegra: transformer-20: fix audio-codec interrupt - arp: do not assume dev_hard_header() does not change skb->head - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled - ASoC: ak4458: Disable regulator when error happens - ASoC: ak4458: remove the reset operation in probe and remove - ASoC: ak5558: Disable regulator when error happens - ASoC: amd: acp: Adjust pdm gain value - ASoC: amd: fix memory leak in acp3x pdm dma ops - ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 - ASoC: amd: yc: Add quirk for HP 200 G2a 16 - ASoC: amd: yc: Fix microphone on ASUS M6500RE - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec - ASoC: codecs: lpass-tx-macro: fix SM6115 support - ASoC: codecs: nau8325: Silence uninitialized variables warnings - ASoC: codecs: va-macro: fix resource leak in probe error path - ASoC: codecs: wcd937x: make stub functions inline - ASoC: codecs: wcd937x: set the comp soundwire port correctly - ASoC: codecs: wcd939x: fix regmap leak on probe failure - ASoC: codecs: wsa881x: fix unnecessary initialisation - ASoC: codecs: wsa883x: fix unnecessary initialisation - ASoC: codecs: wsa884x: fix codec initialisation - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel - ASoC: cs4271: Fix regulator leak on probe failure - ASoC: cs42l43: Correct handling of 3-pole jack load detection - ASoC: cs-amp-lib-test: Fix missing include of kunit/test-bug.h - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe - ASoC: fsl: imx-card: Do not force slot width to sample width - ASoC: fsl_sai: Add missing registers to cache default - ASoC: fsl_sai: fix bit order for DSD format - ASoC: fsl_sai: Fix sync error in consumer mode - ASoC: fsl_xcvr: clear the channel status control memory - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put() - ASoC: Intel: avs: Disable periods-elapsed work when closing PCM - ASoC: Intel: avs: Unprepare a stream when XRUN occurs - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping - ASoC: Intel: catpt: Expose correct bit depth to userspace - ASoC: Intel: catpt: Fix error path in hw_params() - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion - ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down - ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity - ASoC: nau8325: add missing build config - ASoC: nau8325: use simple i2c probe function - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit - ASoC: nau8821: Cancel jdet_work before handling jack ejection - ASoC: nau8821: Generalize helper to clear IRQ status - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface - ASoC: qcom: audioreach: fix potential null pointer dereference - ASoC: qcom: q6adm: the the copp device only during last instance - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed - ASoC: qcom: q6asm-dai: perform correct state check before closing - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. - ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime - ASoC: qdsp6: q6asm: do not sleep while atomic - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again) - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type - ASoC: simple-card-utils: Check device node before overwrite direction - ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead of buffer time - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message - ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down - ASoC: SOF: ipc4-pcm: Add fixup for channels - ASoC: SOF: ipc4-pcm: Enable delay reporting for ChainDMA streams - ASoC: SOF: ipc4-pcm: fix delay calculation when DSP resamples - ASoC: SOF: ipc4-pcm: fix start offset calculation for chain DMA - ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer size - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size - ASoC: stm32: sai: fix clk prepare imbalance on probe failure - ASoC: stm32: sai: fix device leak on probe - ASoC: stm32: sai: fix OF node leak on probe - ASoC: stm32: sai: manage context in set_sysclk callback - ASoC: tas2781: correct the wrong period - ASoC: tas2781: fix getting the wrong device number - ASoC: tlv320adcx140: fix null pointer - ASoC: tlv320adcx140: fix word length - ASoC: tlv320adcx140: Propagate error codes during probe - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007 - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() - ASoC: wm8940: Correct PLL rate rounding - ASoC: wm8940: Correct typo in control name - ASoC: wm8974: Correct PLL rate rounding - ata: ahci: Do not read the per port area for unimplemented ports - ata: libata: Add cpr_log to ata_dev_print_features() early return - ata: libata: Call ata_dev_config_lpm() for ATAPI devices - ata: libata-core: Disable LPM on ST2000DM008-2FR102 - ata: libata-core: Introduce ata_dev_config_lpm() - ata: libata: Print features also for ATAPI devices - ata: libata-sata: Improve link_power_management_supported sysfs attribute - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() - ata: libata-scsi: Fix system suspend for a security locked drive - atm: Fix dma_free_coherent() size - atm/fore200e: Fix possible data race in fore200e_open() - audit: record fanotify event regardless of presence of rules - backlight: led-bl: Add devlink to supplier LEDs - backlight: lp855x: Fix lp855x.h kernel-doc warnings - bcache: fix improper use of bi_end_io - bcache: fix I/O accounting leak in detached_dev_do_request - bcache: use bio cloning for detached device requests - bcma: don't register devices disabled in OF - be2net: fix data race in be_get_new_eqd - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list - be2net: pass wrb_params in case of OS2BMC - bfs: Reconstruct file type when loading from disk - binder: fix BR_FROZEN_REPLY error log - binder: fix double-free in dbitmap - binderfs: fix ida_alloc_max() upper bound - binder: remove "invalid inc weak" check - bits: add comments and newlines to #if, #else and #endif directives - bits: introduce fixed-type GENMASK_U*() - blk-cgroup: fix possible deadlock while configuring policy - blk-crypto: fix missing blktrace bio split events - blk-crypto: use BLK_STS_INVAL for alignment errors - blk-mq: Abort suspend when wakeup events are pending - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx - blk-mq: skip CPU offline notify on unmapped hctx - block,bfq: fix aux stat accumulation destination - block/blk-throttle: Fix throttle slice time for SSDs - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs - block: fix comment for op_is_zone_mgmt() to include RESET_ALL - block: fix memory leak in __blkdev_issue_zero_pages - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL - block: freeze queue when updating zone resources - block: handle zone management operations completions - block: make REQ_OP_ZONE_OPEN a write operation - block/mq-deadline: Introduce dd_start_request() - block/mq-deadline: Switch back to a single dispatch list - block: rate-limit capacity change info log - block: return unsigned int from queue_dma_alignment - block: rnbd-clt: Fix leaked ID in init_dev() - block: rnbd-clt: Fix signedness bug in init_dev() - block: use int to store blk_stack_limits() return value - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path - Bluetooth: bcsp: receive data only if registered - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset - Bluetooth: btrtl: Avoid loading the config file on security chips - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF - Bluetooth: btusb: revert use of devm_kzalloc in btusb - Bluetooth: hci_core: Fix tracking of periodic advertisement - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync - Bluetooth: hci_event: validate skb length for unknown CC opcode - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind - Bluetooth: hci_sync: Fix hci_resume_advertising_sync - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work - Bluetooth: ISO: don't leak skb in ISO_CONT RX - Bluetooth: ISO: Fix another instance of dst_type handling - Bluetooth: ISO: Fix BIS connection dst_type handling - Bluetooth: ISO: Fix possible UAF on iso_conn_free - Bluetooth: ISO: free rx_skb if not consumed - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave - Bluetooth: L2CAP: export l2cap_chan_hold for modules - Bluetooth: MGMT: cancel mesh send timer when hdev removed - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete - Bluetooth: MGMT: Fix memory leak in set_ssp_complete - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() - Bluetooth: MGMT: Fix possible UAFs - Bluetooth: rfcomm: fix modem control handling - Bluetooth: SCO: Fix UAF on sco_conn_free - Bluetooth: SMP: Fix not generating mackey and ltk when repairing - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() - bnxt_en: Add Hyper-V VF ID - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type - bnxt_en: Change FW message timeout warning - bnxt_en: correct offset handling for IPv6 destination address - bnxt_en: Fix a possible memory leak in bnxt_ptp_init - bnxt_en: Fix potential data corruption with HW GRO/LRO - bnxt_en: Fix XDP_TX path - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code - bnxt_en: Refactor bnxt_free_ctx_mem() - bonding: annotate data-races around slave->last_rx - bonding: check xdp prog when set bond mode - bonding: don't set oif to bond dev when getting NS target destination - bonding: limit BOND_MODE_8023AD to Ethernet devices - bonding: provide a net pointer to __skb_flow_dissect() - bonding: return detailed error when loading native XDP fails - bonding: set random address only when slaves already exist - bpf: account for current allocated stack depth in widen_imprecise_scalars() - bpf: Add bpf_prog_run_data_pointers() - bpf: Allow fall back to interpreter for programs with stack size <= 512 - bpf, arm64: Call bpf_jit_binary_pack_finalize() in bpf_jit_free() - bpf, arm64: Do not audit capability check in do_jit() - bpf: Avoid RCU context warning when unpinning htab with internal structs - bpf: Check skb->transport_header is set in bpf_skb_check_mtu - bpf: Check the helper function is valid in get_helper_proto - bpf: Clear pfmemalloc flag when freeing all fragments - bpf: Do not audit capability check in do_jit() - bpf: Do not let BPF test infra emit invalid GSO types to stack - bpf: Do not limit bpf_cgroup_from_id to current's namespace - bpf: Don't use %pK through printk - bpf: Enforce expected_attach_type for tailcall compatibility - bpf: Explicitly check accesses to bpf_sock_addr - bpf: Find eligible subprogs for private stack support - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K - bpf: Fix invalid prog->stats access when update_effective_progs fails - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} - bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt - bpf: Fix reference count leak in bpf_prog_test_run_xdp() - bpf: Fix stackmap overflow check in __bpf_get_stackid() - bpf: Free special fields when update [lru_,]percpu_hash maps - bpf: Handle return value of ftrace_set_filter_ip in register_fentry - bpf: Make variables in bpf_prog_test_run_xdp less confusing - bpf: Mark kfuncs as __noclone - bpf: Refactor stack map trace depth calculation into helper function - bpf: Reject bpf_timer for PREEMPT_RT - bpf: Reject narrower access to pointer ctx fields - bpf: Reject negative offsets for ALU ops - bpf: Remove migrate_disable in kprobe_multi_link_prog_run - bpf/selftests: Fix test_tcpnotify_user - bpf/selftests: test_select_reuseport_kern: Remove unused header - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN - bpf: Sync pending IRQ work before freeing ring buffer - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path - bpf, test_run: Subtract size of xdp_frame from allowed metadata size - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 - bpf: Use tnums for JEQ/JNE is_branch_taken logic - bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress - bridge: mcast: Fix use-after-free during router port configuration - bridge: Redirect to backup port when port is administratively down - broadcom: b44: prevent uninitialized value usage - btrfs: abort transaction if we fail to update inode in log replay dir fixup - btrfs: abort transaction in the process_one_buffer() log tree walk callback - btrfs: abort transaction on specific error places when walking log tree - btrfs: add extra error messages for delalloc range related errors - btrfs: always detect conflicting inodes when logging inode refs - btrfs: always drop log root tree reference in btrfs_replay_log() - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() - btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() - btrfs: do not assert we found block group item when creating free space tree - btrfs: do not skip logging new dentries when logging a new name - btrfs: do not update last_log_commit when logging inode due to a new name - btrfs: don't allow adding block device of less than 1 MB - btrfs: don't log conflicting inode if it's a dir moved in the current transaction - btrfs: don't rewrite ret from inode_permission - btrfs: ensure no dirty metadata is written back for an fs with errors - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() - btrfs: factor out init_space_info() from create_space_info() - btrfs: fix a potential path leak in print_data_reloc_error() - btrfs: fix beyond-EOF write handling - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running - btrfs: fix corruption reading compressed range when block size is smaller than page size - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type - btrfs: fix error handling of submit_uncompressed_range() - btrfs: fix incorrect readahead expansion length - btrfs: fix invalid extref key setup when replaying dentry - btrfs: fix leaf leak in an error path in btrfs_del_items() - btrfs: fix memory leak of fs_devices in degraded seed device path - btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation - btrfs: fix memory leak on duplicated memory in the qgroup assign ioctl - btrfs: fix memory leaks in create_space_info() error paths - btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE - btrfs: fix NULL dereference on root when tracing inode eviction - btrfs: fix qgroup_snapshot_quick_inherit() squota bug - btrfs: fix racy bitfield write in btrfs_clear_space_info_full() - btrfs: fix reservation leak in some error paths when inserting inline extent - btrfs: fix squota compressed stats leak - btrfs: fix subvolume deletion lockup caused by inodes xarray race - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() - btrfs: introduce btrfs_space_info sub-group - btrfs: mark dirty extent range for out of bound prealloc extents - btrfs: only enforce free space tree if v1 cache is required for bs < ps cases - btrfs: prevent use-after-free on folio private data in btrfs_subpage_clear_uptodate() - btrfs: qgroup: update all parent qgroups when doing quick inherit - btrfs: ref-verify: handle damaged extent root tree - btrfs: reject new transactions if the fs is fully read-only - btrfs: release root after error in data_reloc_print_warning_inode() - btrfs: remove btrfs_fs_info::sectors_per_page - btrfs: return any hit error from extent_writepage_io() - btrfs: scrub: always update btrfs_scrub_progress::last_physical - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe() - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() - btrfs: send: check for inline extents in range_is_hole_in_parent() - btrfs: subpage: dump the involved bitmap when ASSERT() failed - btrfs: tracepoints: use btrfs_root_id() to get the id of a root - btrfs: tree-checker: add inode extref checks - btrfs: tree-checker: fix bounds check in check_inode_extref() - btrfs: tree-checker: fix the incorrect inode ref size check - btrfs: truncate ordered extent when skipping writeback past i_size - btrfs: use level argument in log tree walk callback replay_one_buffer() - btrfs: use readahead_expand() on compressed extents - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() - btrfs: use variable for end offset in extent_writepage_io() - btrfs: zoned: fix conventional zone capacity calculation - btrfs: zoned: refine extent allocator hint selection - btrfs: zoned: return error from btrfs_zone_finish_endio() - bus: fsl-mc: Check return value of platform_get_resource() - bus: fsl-mc: fix use-after-free in driver_override_show() - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state - bus: mhi: ep: Fix chained transfer handling in read path - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support - bus: mhi: host: pci_generic: Add Telit FN920C04 modem support - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support - caif: fix integer underflow in cffrml_receive() - can: at91_can: Fix memory leak in at91_can_probe() - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak - can: esd: acc_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak - can: etas_es58x: allow partial RX URB allocation to succeed - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow - can: gs_usb: gs_can_open(): fix error handling - can: gs_usb: gs_make_candev(): populate net_device->dev_port - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs - can: gs_usb: increase max interface to U8_MAX - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed - can: j1939: make j1939_session_activate() fail if device is no longer registered - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers - can: m_can: add deinit callback - can: m_can: call deinit/init callback when going into suspend/resume - can: m_can: fix CAN state in system PM - can: m_can: m_can_chip_config(): bring up interface in correct state - can: m_can: m_can_handle_state_errors(): fix CAN state transition to Error Active - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow - can: netlink: can_changelink(): allow disabling of automatic restart - can: peak_usb: fix shift-out-of-bounds issue - can: rcar_canfd: Fix CAN-FD mode as default - can: rcar_canfd: Fix controller mode setting - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI - can: rockchip-canfd: rkcanfd_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb() - can: sja1000: fix max irq loop handling - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB - cdx: Fix device node reference leak in cdx_msi_domain_init - ceph: add checking of wait_for_completion_killable() return value - ceph: fix crash in process_v2_sparse_read() for encrypted directories - ceph: fix multifs mds auth caps issue - ceph: fix NULL pointer dereference in ceph_mds_auth_match() - ceph: fix oops due to invalid pointer for kfree() in parse_longname() - ceph: fix potential race condition in ceph_ioctl_lazyio() - ceph: fix race condition validating r_parent before applying state - ceph: fix race condition where r_parent becomes stale before sending message - ceph: refactor wake_up_bit() pattern of calling - cgroup: Fix kernfs_node UAF in css_free_rwork_fn - cgroup: split cgroup_destroy_wq into 3 workqueues - char: applicom: fix NULL pointer dereference in ac_ioctl - char: misc: Does not request module for miscdevice with dynamic minor - char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor - char: misc: restrict the dynamic range to exclude reserved minors - char: Use list_del_init() in misc_deregister() to reinitialize list pointer - cifs: client: fix memory leak in smb3_fs_context_parse_param - cifs: Fix copy_to_iter return value check - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 - cifs: Fix memory and information leak in smb3_reconfigure() - cifs: fix memory leak in smb3_fs_context_parse_param error path - cifs: Fix TCP_Server_Info::credits to be signed - cifs: fix typo in enable_gcm_256 module parameter - cifs: parse_dfs_referrals: prevent oob on malformed input - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points - clk: at91: clk-master: Add check for divide by 3 - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register - clk: at91: peripheral: fix return value - clk: at91: sam9x7: Add peripheral clock id for pmecc - clk: clocking-wizard: Fix output clock register offset for Versal platforms - clk: keystone: fix compile testing - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags() - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other - clk: qcom: camcc-sm7150: Fix PLL config of PLL2 - clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other - clk: qcom: common: Fix NULL vs IS_ERR() check in qcom_cc_icc_register() - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src - clk: qcom: gcc-ipq6018: rework nss_port5 clock to multiple conf - clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets - clk: qcom: tcsrcc-x1e80100: Set the bi_tcxo as parent to eDP refclk - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback - clk: renesas: cpg-mssr: Fix memory leak in cpg_mssr_reserved_init() - clk: renesas: cpg-mssr: Read back reset registers to assure values latched - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register - clk: renesas: r9a06g032: Fix memory leak in error path - clk: renesas: Use str_on_off() helper - clk: samsung: exynos-clkout: Assign .num before accessing .hws - clk: scmi: Add duty cycle ops only when duty cycle is supported - clk: sunxi-ng: sun6i-rtc: Add A523 specifics - clk: tegra: do not overallocate memory for bpmp clocks - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled - clocksource/drivers/clps711x: Fix resource leaks in error paths - clocksource/drivers/timer-rtl-otto: Do not interfere with interrupts - clocksource/drivers/timer-rtl-otto: Work around dying timers - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel - clocksource: Reduce watchdog readout delay limit to prevent false positives - cnic: Fix use-after-free bugs in cnic_delete_task - codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext - comedi: c6xdigio: Fix invalid PNP driver unregistration - comedi: check device's attached status in compat ioctls - comedi: dmm32at: serialize use of paged registers - comedi: fix divide-by-zero in comedi_buf_munge() - comedi: Fix getting range information for subdevices 16 to 255 - comedi: multiq3: sanitize config options in multiq3_attach() - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() - compiler-clang.h: define __SANITIZE_*__ macros only when undefined - compiler_types.h: add "auto" as a macro for "__auto_type" - compiler_types: Move unused static inline functions warning to W=2 - copy_file_range: limit size if in compat mode - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) - coresight: catu: Support atclk - coresight: Change device mode to atomic type - coresight: etm4x: Add context synchronization before enabling trace - coresight-etm4x: Conditionally access register TRCEXTINSELR - coresight: etm4x: Correct polling IDLE bit - coresight: etm4x: Extract the trace unit controlling - coresight: etm4x: Support atclk - coresight: Fix incorrect handling for return value of devm_kzalloc - coresight: Only register perf symlink for sinks with alloc_buffer - coresight: tmc: Support atclk - coresight: tpda: fix the logic to setup the element size - coresight: trbe: Prevent overflow in PERF_IDX2OFF() - coresight: trbe: Return NULL pointer for allocation failures - counter: 104-quad-8: Fix incorrect return value in IRQ handler - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist - cpufreq: Initialize cpufreq-based invariance before subsys - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() - cpufreq/longhaul: handle NULL policy in longhaul_exit - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency - cpufreq: nforce2: fix reference count leak in nforce2 - cpufreq: ondemand: Update the efficient idle check for Intel extended Families - cpufreq: s5pv210: fix refcount leak - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() - cpufreq: tegra186: Initialize all cores to max frequencies - cpufreq: tegra186: Set target frequency for all cpus in policy - cpufreq: ti: Add support for AM62D2 - cpuidle: Fail cpuidle device registration if there is one already - cpuidle: governors: menu: Rearrange main loop in menu_select() - cpuidle: governors: menu: Select polling state in some more cases - cpuidle: governors: teo: Drop misguided target residency check - cpuidle: menu: Use residency threshold in polling state override decisions - cpuidle: qcom-spm: fix device and OF node leaks at probe - cpuset: Fix missing adaptation for cpuset_is_populated - cpuset: Treat cpusets in attaching as populated - cpuset: Use new excpus for nocpu error check when enabling root partition - cramfs: Verify inode mode when loading from disk - crash: fix crashkernel resource shrink - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx - crypto: af_alg - Set merge to zero early in af_alg_sendmsg - crypto: af_alg - zero initialize memory allocated via sock_kmalloc - crypto: aspeed - Fix dma_unmap_sg() direction - crypto: aspeed - fix double free caused by devm - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id - crypto: atmel - Fix dma_unmap_sg() direction - crypto: authenc - Correctly pass EINPROGRESS back up to the caller - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: caam - Add check for kcalloc() in test_len() - crypto: caam - double the entropy delay interval for retry - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() - crypto: ccp: Skip SEV and SNP INIT for kdump boot - crypto: ccree - Correctly handle return of sg_nents_for_len - crypto: essiv - Check ssize for decryption and in-place encryption - crypto: hisilicon/qm - check whether the input function and PF are on the same device - crypto: hisilicon/qm - clear all VF configurations in the hardware - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value - crypto: hisilicon/qm - invalidate queues in use - crypto: hisilicon/qm - restore original qos values - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs - crypto: hisilicon - re-enable address prefetch after device resuming - crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations - crypto: iaa - Fix incorrect return value in save_iaa_wq() - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode - crypto: keembay - Add missing check after sg_nents_for_len() - crypto: octeontx2 - Call strscpy() with correct size argument - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly - crypto: qat - fix duplicate restarting msg during AER error - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() - crypto: rng - Ensure set_ent is always present - crypto: rockchip - Fix dma_unmap_sg() nents value - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt - crypto: sha256 - fix crash at kexec - crypto: starfive - Correctly handle return of sg_nents_for_len - crypto: sun8i-ce - remove channel timeout field - crypto: virtio - Add spinlock protection with virtqueue notification - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req - csky: fix csky_cmpxchg_fixup not working - d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier - dax: skip read lock assertion for read-only filesystems - devcoredump: Fix circular locking dependency with devcd->mutex. - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy - Disable SLUB_TINY for build testing - dlm: check for defined force value in dlm_lockspace_release - dma-debug: don't enforce dma mapping check on noncoherent allocations - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC - dma-debug: fix physical address calculation for struct dma_debug_entry - dma-debug: store a phys_addr_t in struct dma_debug_entry - dmaengine: Add missing cleanup on module unload - dmaengine: apple-admac: Add "apple,t8103-admac" compatible - dmaengine: at_hdmac: fix device leak on of_dma_xlate() - dmaengine: bcm-sba-raid: fix device leak on probe - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate - dmaengine: dw: dmamux: fix OF node leak on route allocation failure - dmaengine: dw-edma: Set status for callback_result - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure - dmaengine: idxd: fix device leaks on compat bind and unbind - dmaengine: idxd: Fix double free in idxd_setup_wqs() - dmaengine: idxd: Fix refcount underflow on module unload - dmaengine: idxd: Remove improper idxd_free - dmaengine: lpc18xx-dmamux: fix device leak on route allocation - dmaengine: lpc32xx-dmamux: fix device leak on route allocation - dmaengine: mv_xor: match alloc_wc and free_wc - dmaengine: omap-dma: fix dma_pool resource leak in error paths - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() - dmaengine: sh: setup_xref error handling - dmaengine: stm32: dmamux: fix device leak on route allocation - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure - dmaengine: tegra-adma: Fix use-after-free - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA - dmaengine: ti: k3-udma: fix device leak on udma lookup - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing - dmaengine: xilinx: xdma: Fix regmap max_register - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent - dma-mapping: fix direction in dma_alloc direction traces - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err - dma-mapping: trace dma_alloc/free direction - dma-mapping: trace more error paths - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map - dma/pool: distinguish between missing and exhausted atomic pools - dma/pool: eliminate alloc_pages warning in atomic_pool_expand - dm-bufio: align write boundary on physical block size - dm-ebs: Mark full buffer dirty even on partial write - dm error: mark as DM_TARGET_PASSES_INTEGRITY - dm: fix NULL pointer dereference in __dm_suspend() - dm: fix queue start/stop imbalance under suspend/load/resume races - dm-integrity: limit MAX_TAG_SIZE to 255 - dm log-writes: Add missing set_freezable() for freezable kthread - dm-raid: don't set io_min and io_opt for raid1 - dm-raid: fix possible NULL dereference with undefined raid type - dm-snapshot: fix 'scheduling while atomic' on real-time kernels - dm-stripe: fix a possible integer overflow - dm vdo: return error on corrupted metadata in start_restoring_volume functions - dm-verity: fix unreliable memory allocation - doc: fix seg6_flowlabel path - docs: hwmon: fix link to g762 devicetree binding - docs: kdoc: handle the obsolescensce of docutils.ErrorString() - docs: networking: can: change bcm_msg_head frames member to support flexible array - Documentation: process: Also mention Sasha Levin as stable tree maintainer - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path - dpaa2-switch: add bounds check for if_id in IRQ handler - dpaa2-switch: fix buffer pool seeding for control traffic - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero - dpll: Prevent duplicate registrations - dpll: spec: add missing module-name and clock-id to pin-get reply - driver core: enforce device_lock for driver_match_device() - driver core/PM: Set power.no_callbacks along with power.no_pm - drivers/base/node: fix double free in register_one_node() - drivers/base/node: handle error properly in register_one_node() - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() - drivers/perf: hisi: Relax the event ID check in the framework - drivers/usb/dwc3: fix PCI parent check - drm/amd: add more cyan skillfish PCI ids - drm/amd/amdgpu: Release xcp drm memory after unplug - drm/amd/amdgpu: reserve vm invalidation engine for uni_mes - drm/amd: Avoid evicting resources at S5 - drm/amd: Check that VPE has reached DPM0 in idle handler - drm/amd: Check whether secure display TA loaded successfully - drm/amd: Clean up kfd node on surprise disconnect - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream - drm/amd/display: Add fallback path for YCBCR422 - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs - drm/amd/display: add more cyan skillfish devices - drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put - drm/amd/display: Apply e4479aecf658 to dml - drm/amd/display: avoid reset DTBCLK at clock init - drm/amd/display: Bump the HDMI clock to 340MHz - drm/amd/display: change dc stream color settings only in atomic commit - drm/amd/display: Check NULL before accessing - drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5 - drm/amd/display: disable DPP RCG before DPP CLK enable - drm/amd/display: Disable VRR on DCE 6 - drm/amd/display/dml2: Guard dml21_map_dc_state_into_dml_display_cfg with DC_FP_START - drm/amd/display: Don't change brightness for disabled connectors - drm/amd/display: Enable Dynamic DTBCLK Switch - drm/amd/display: Enable mst when it's detected but yet to be initialized - drm/amd/display: ensure committing streams is seamless - drm/amd/display: extend delta clamping logic to CM3 LUT helper - drm/amd/display: Fix black screen with HDMI outputs - drm/amd/display: fix condition for setting timing_adjust_pending - drm/amd/display: fix dml ms order of operations - drm/amd/display: Fix DP no audio issue - drm/amd/display: Fix DVI-D/HDMI adapters - drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed - drm/amd/display: Fix for test crash due to power gating - drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() - drm/amd/display: Fix NULL deref in debugfs odm_combine_segments - drm/amd/display: Fix pbn_div Calculation Error - drm/amd/display: Fix pbn to kbps Conversion - drm/amd/display: Fix scratch registers offsets for DCN35 - drm/amd/display: Fix scratch registers offsets for DCN351 - drm/amd/display: fix wrong color value mapping on MCM shaper LUT - drm/amd/display: incorrect conditions for failing dto calculations - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration - drm/amd/display: Increase DPCD read retries - drm/amd/display: increase max link count and fix link->enc NULL pointer access - drm/amd/display: Increase minimum clock for TMDS 420 with pipe splitting - drm/amd/display: Init dispclk from bootup clock for DCN314 - drm/amd/display: Insert dccg log for easy debug - drm/amd/display: mark static functions noinline_for_stack - drm/amd/display: Move setup_stream_attribute - drm/amd/display: Move sleep into each retry for retrieve_link_cap() - drm/amd/display: Prevent Gating DTBCLK before It Is Properly Latched - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 - drm/amd/display: Properly disable scaling on DCE6 - drm/amd/display: remove assert around dpp_base replacement - drm/amd/display: Remove redundant semicolons - drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off - drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files - drm/amd/display: Set up pixel encoding for YCBCR422 - drm/amd/display: shrink struct members - drm/amd/display: Support HW cursor 180 rot for any number of pipe splits - drm/amd/display: update color on atomic commit time - drm/amd/display: update dpp/disp clock from smu clock table - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() - drm/amd/display: use udelay rather than fsleep - drm/amd/display: Wait until OTG enable state is cleared - drm/amd: Fix suspend failure with secure display TA - drm/amdgpu: Add additional DCE6 SCL registers - drm/amdgpu: Add back JPEG to video caps for carrizo and newer - drm/amdgpu: add ip offset support for cyan skillfish - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma - drm/amdgpu: add range check for RAS bad page address - drm/amdgpu: add support for cyan skillfish gpu_info - drm/amdgpu: add support for cyan skillfish without IP discovery - drm/amdgpu: Allow kfd CRIU with no buffer objects - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() - drm/amdgpu: Avoid rma causes GPU duplicate reset - drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest - drm/amdgpu: Check vcn sram load return value - drm/amdgpu: Correct the counts of nr_banks and nr_errors - drm/amdgpu: disable peer-to-peer access for DCC-enabled GC12 VRAM surfaces - drm/amdgpu: don't enable SMU on cyan skillfish - drm/amdgpu: Enable MES lr_compute_wa by default - drm/amdgpu: fix a memory leak in fence cleanup when unloading - drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule() - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling - drm/amdgpu: Fix function header names in amdgpu_connectors.c - drm/amdgpu: fix gfx12 mes packet status return check - drm/amdgpu: fix gpu page fault after hibernation on PF passthrough - drm/amdgpu: fix handling of harvesting for ip_discovery firmware - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices - drm/amdgpu: fix nullptr err of vm_handle_moved - drm/amdgpu: Fix query for VPE block_type and ip_count - drm/amdgpu: Fix unintended error log in VCN5_0_0 - drm/amdgpu: Forward VMID reservation errors - drm/amdgpu/gfx10: fix wptr reset in KGQ init - drm/amdgpu/gfx11: adjust KGQ reset sequence - drm/amdgpu/gfx11: fix wptr reset in KGQ init - drm/amdgpu/gfx12: fix wptr reset in KGQ init - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff - drm/amdgpu: Power up UVD 3 for FW validation (v2) - drm/amdgpu: reject gang submissions under SRIOV - drm/amdgpu: remove frame cntl for gfx v12 - drm/amdgpu: remove two invalid BUG_ON()s - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled - drm/amdgpu: Skip poison aca bank from UE channel - drm/amdgpu/smu: Handle S0ix for vangogh - drm/amdgpu/soc21: fix xclk for APUs - drm/amdgpu: use atomic functions with memory barriers for vm fault info - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time - drm/amd/include : MES v11 and v12 API header update - drm/amd/include : Update MES v12 API for fence update - drm/amdkfd: bump minimum vgpr size for gfx1151 - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace - drm/amdkfd: fix a memory leak in device_queue_manager_init() - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() - drm/amdkfd: Fix GPU mappings for APU after prefetch - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string - drm/amdkfd: Fix mmap write lock not release - drm/amdkfd: fix vram allocation failure for a special case - drm/amdkfd: Handle lack of READ permissions in SVM mapping - drm/amdkfd: relax checks for over allocation of save area - drm/amdkfd: return -ENOTTY for unsupported IOCTLs - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption - drm/amdkfd: Trap handler support for expert scheduling mode - drm/amdkfd: Use huge page size to check split svm range alignment - drm/amd/pm: Adjust si_upload_smc_data register programming (v3) - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2) - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3) - drm/amd/pm: Disable ULV even if unsupported (v3) - drm/amd/pm: Don't clear SI SMC table when setting power limit - drm/amd/pm: Fix si_upload_smc_data (v3) - drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2 - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3) - drm/amd/pm: Use cached metrics data on aldebaran - drm/amd/pm: Use cached metrics data on arcturus - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) - drm/amd/powerplay: Fix CIK shutdown temperature - drm/amd: Skip power ungate during suspend for VPE - drm/amd : Update MES API header file for v11 & v12 - drm/ast: Clear preserved bits from register output value - drm/ast: Use msleep instead of mdelay for edid read - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts - drm/bridge: it6505: select REGMAP_I2C - drm/bridge: lt9211: Drop check for last nibble of version register - drm/buddy: Optimize free block management with RB tree - drm/buddy: Separate clear and dirty free block trees - drm/displayid: add quirk to ignore DisplayID checksum errors - drm/displayid: pass iter to drm_find_displayid_extension() - drm/draw: fix color truncation in drm_draw_fill24 - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident - drm/etnaviv: fix flush sequence logic - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions - drm/exynos: exynos7_drm_decon: properly clear channels during bind - drm/exynos: exynos7_drm_decon: remove ctx->suspended - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup - drm/gma500: Fix null dereference in hdmi teardown - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD - drm/i915/backlight: Return immediately when scale() finds invalid parameters - drm/i915/dp: Initialize the source OUI write timestamp always - drm/i915/dp_mst: Disable Panel Replay - drm/i915: Fix conversion between clock ticks and nanoseconds - drm/i915: Fix format string truncation warning - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer - drm/i915/guc: Skip communication warning on reset in progress - drm/i915/pmu: Fix zero delta busyness issue - drm/i915/power: fix size for for_each_set_bit() in abox iteration - drm/imagination: Disallow exporting of PM/FW protected objects - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() - drm/imagination: Wait for FW trace update command completion - drm/imx/tve: fix probe device leak - drm/mediatek: Add pm_runtime support for GCE power control - drm/mediatek: Disable AFBC support on Mediatek DRM driver - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() - drm/mediatek: Fix device use-after-free on unbind - drm/mediatek: fix potential OF node use-after-free - drm/mediatek: Fix probe device leaks - drm/mediatek: Fix probe memory leak - drm/mediatek: Fix probe resource leaks - drm/me/gsc: mei interrupt top half should be in irq disabled context - drm/mgag200: Fix big-endian support - drm/mgag200: fix mgag200_bmc_stop_scanout() - drm/msm/a2xx: stop over-complaining about the legacy firmware - drm/msm/a6xx: fix bogus hwcg register updates - drm/msm/a6xx: Fix GMU firmware parser - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers - drm/msm/a6xx: Fix PDC sleep sequence - drm/msm/a6xx: Fix the gemnoc workaround - drm/msm/a6xx: Flush LRZ cache before PT switch - drm/msm/a6xx: Improve MX rail fallback in RPMH vote init - drm/msm/dpu: Add missing NULL pointer check for pingpong interface - drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype - drm/msm/dpu: fix incorrect type for ret - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL - drm/msm: make sure to not queue up recovery more than once - drm/msm/registers: Generate _HI/LO builders for reg64 - drm/nouveau: add missing DCB connector types - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare - drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit) - drm/nouveau: fix bad ret code in nouveau_bo_move_prep - drm/nouveau: Fix race in nouveau_sched_fini() - drm/nouveau: implement missing DCB connector types; gracefully handle unknown connectors - drm/nouveau: refactor deprecated strcpy - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() - drm/nouveau: restrict the flush page to a 32-bit address - drm: panel-backlight-quirks: Make EDID match optional - drm/panel: novatek-nt35560: Fix invalid return value - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel - drm/panel: sony-td4353-jdi: Enable prepare_prev_first - drm/panel: visionox-rm69299: Don't clear all mode flags - drm/panic: Fix drawing the logo on a small narrow screen - drm/panic: Fix qr_code, ensure vmargin is positive - drm/panthor: Avoid adding of kernel BOs to extobj list - drm/panthor: check bo offset alignment in vm bind - drm/panthor: Defer scheduler entitiy destruction to queue release - drm/panthor: Ensure MCU is disabled on suspend - drm/panthor: Fix group_free_queue() for partially initialized queues - drm/panthor: Fix kernel panic on partial unmap of a GPU VA region - drm/panthor: Fix memory leak in panthor_ioctl_group_create() - drm/panthor: Fix potential memleak of vma structure - drm/panthor: Fix race with suspend during unplug - drm/panthor: Fix UAF on kernel BO VA nodes - drm/panthor: Fix UAF race between device unplug and FW event processing - drm/panthor: Flush shmem writes before mapping buffers CPU-uncached - drm/panthor: Handle errors returned by drm_sched_entity_init() - drm/panthor: Serialize GPU cache flush operations - drm/panthor: validate group queue count - drm/pl111: Fix error handling in pl111_amba_probe - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock - drm/radeon: Do not kfree() devres managed rdev - drm/radeon/r600_cs: clean up of dead code in r600_cs - drm/radeon: Remove calls to drm_put_dev() - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] - drm/rcar-du: dsi: Fix 1/2/3 lane support - drm/rockchip: vop2: use correct destination rectangle height check - drm/sched: avoid killing parent entity on child SIGKILL - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies - drm/sched: Fix race in drm_sched_entity_select_rq() - drm/sched: Optimise drm_sched_entity_push_job - drm/sched: Re-group and rename the entity run-queue lock - drm: sti: fix device leaks at component probe - drm/sysfb: Do not dereference NULL pointer in plane reset - drm/tegra: Add call to put_pid() - drm/tegra: dc: Fix reference leak in tegra_dc_couple() - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used - drm/tidss: Set crtc modesetting parameters with adjusted mode - drm/tidss: Use the crtc_* timings when programming the HW - drm/ttm: Avoid NULL pointer deref for evicted BOs - drm/vgem-fence: Fix potential deadlock on release - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() - drm/vmwgfx: Fix a null-ptr access in the cursor snooper - drm/vmwgfx: Fix copy-paste typo in validation - drm/vmwgfx: Fix Use-after-free in validation - drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions - drm/vmwgfx: Use kref in vmw_bo_dirty - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE - drm/xe: Adjust long-running workload timeslices to reasonable values - drm/xe: Attempt to bring bos back to VRAM after eviction - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table - drm/xe: Do clean shutdown also when using flr - drm/xe: Do not wake device during a GT reset - drm/xe: Drop preempt-fences when destroying imported dma-bufs. - drm/xe: Ensure GT is in C0 during resumes - drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue() - drm/xe: Fix conversion from clock ticks to milliseconds - drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. - drm/xe/guc: Add more GuC load error status codes - drm/xe/guc: Check GuC running state before deregistering exec queue - drm/xe/guc: Increase GuC crash dump buffer size - drm/xe/guc: Return an error code if the GuC load fails - drm/xe/guc: Set upper limit of H2G retries over CTB - drm/xe/guc: Synchronize Dead CT worker with unbind - drm/xe/hw_engine_group: Fix double write lock release in error path - drm/xe: Limit num_syncs to prevent oversized allocations - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally - drm/xe: Move declarations under conditional branch - drm/xe/oa: Disallow 0 OA property values - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() - drm/xe/oa: Limit num_syncs to prevent oversized allocations - drm/xe/pm: Also avoid missing outer rpm warning on system suspend - drm/xe/pm: Disable D3Cold for BMG only on specific platforms - drm/xe: Prevent BIT() overflow when handling invalid prefetch region - drm/xe/query: Fix topology query pointer advance - drm/xe: Restore engine registers before restarting schedulers after GT reset - drm/xe/tile: Release kobject for the failure path - drm/xe/uapi: loosen used tracking restriction - drm/xe: Use usleep_range for accurate long-running workload timeslicing - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets - dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml - dt-bindings: PCI: amlogic: Fix the register name of the DBI region - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp - e1000: fix OOB in e1000_tbi_should_accept() - EDAC/altera: Delete an inappropriate dma_free_coherent() call - EDAC/altera: Handle OCRAM ECC enable after warm reset - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller - EDAC/i3200: Fix a resource leak in i3200_probe1() - EDAC/mc_sysfs: Increase legacy channel support to 16 - EDAC/x38: Fix a resource leak in x38_probe1() - efi/cper: Add a new helper function to print bitmasks - efi/cper: Adjust infopfx size to accept an extra space - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs - efi/cper: Fix cper_bits_to_str buffer handling and return value - efi/libstub: Fix page table access in 5-level to 4-level paging transition - efivarfs: fix error propagation in efivar_entry_get() - erofs: avoid infinite loop due to incomplete zstd-compressed data - erofs: don't bother with s_stack_depth increasing for now - erofs: fix file-backed mounts no longer working on EROFS partitions - erofs: fix UAF issue for file-backed mounts w/ directio option - erofs: fix unexpected EIO under memory pressure - erofs: limit the level of fs stacking for file-backed mounts - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP - ethernet: Extend device_get_mac_address() to use NVMEM - ethernet: rvu-af: Remove slash from the driver name - eth: fbnic: Fix counter roll-over issue - ethtool: Avoid overflowing userspace buffer on stats query - eventpoll: Replace rwlock with spinlock - exec: Fix incorrect type for ret - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector - exfat: fix improper check of dentry.stream.valid_size - exfat: fix refcount leak in exfat_find - exfat: fix remount failure in different process environments - exfat: limit log print for IO error - exfat: validate cluster allocation bits of the allocation bitmap - exfat: zero out post-EOF page cache on file extension - Expand the type of nfs_fattr->valid - ext4: add ext4_sb_bread_nofail() helper function for ext4_free_branches() - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() - ext4: align max orphan file size with e2fsprogs limit - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() - ext4: clear i_state_flags when alloc inode - ext4: correctly handle queries for metadata mappings - ext4: correct the checking of quota files before moving extents - ext4: detect invalid INLINE_DATA + EXTENTS flag combination - ext4: fix an off-by-one issue during moving extents - ext4: fix checks for orphan inodes - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref - ext4: fix incorrect group number assertion in mb_check_buddy - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ext4: fix string copying in parse_apply_sb_mount_options() - ext4: free orphan info with kvfree - ext4: guard against EA inode refcount underflow in xattr update - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() - ext4: increase IO priority of fastcommit - ext4: introduce ITAIL helper - ext4: introduce linear search for dentries - ext4: refresh inline data size before write operations - ext4: validate ea_ino and size in check_xattrs - ext4: verify orphan file size is not too big - ext4: wait for ongoing I/O to complete before freeing blocks - ext4: xattr: fix null pointer deref in ext4_raw_inode() - extcon: adc-jack: Cleanup wakeup source only if it was enabled - extcon: adc-jack: Fix wakeup source leaks on device unbind - f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages - f2fs: add carve_out sysfs node - f2fs: add gc_boost_gc_greedy sysfs node - f2fs: add gc_boost_gc_multiple sysfs node - f2fs: add timeout in f2fs_enable_checkpoint() - f2fs: clear SBI_POR_DOING before initing inmem curseg - f2fs: drop inode from the donation list when the last file is closed - f2fs: dump more information for f2fs_{enable,disable}_checkpoint() - f2fs: ensure node page reads complete before f2fs_put_super() finishes - f2fs: fix age extent cache insertion skip on counter overflow - f2fs: fix condition in __allow_reserved_blocks() - f2fs: fix infinite loop in __insert_extent_tree() - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes - f2fs: fix out-of-bounds access in sysfs attribute read/write - f2fs: fix return value of f2fs_recover_fsync_data() - f2fs: fix to add gc count stat in f2fs_gc_range - f2fs: fix to avoid mapping wrong physical block for swapfile - f2fs: fix to avoid overflow while left shift operation - f2fs: fix to avoid panic once fallocation fails for pinfile - f2fs: fix to avoid potential deadlock - f2fs: fix to avoid running out of free segments - f2fs: fix to avoid UAF in f2fs_write_end_io() - f2fs: fix to avoid updating compression context during writeback - f2fs: fix to avoid updating zero-sized extent in extent cache - f2fs: fix to check sysfs filename w/ gc_pin_file_thresh correctly - f2fs: fix to detect potential corrupted nid in free_nid_list - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page() - f2fs: fix to propagate error from f2fs_enable_checkpoint() - f2fs: fix to truncate first page in error path of f2fs_truncate() - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks() - f2fs: fix uninitialized one_time_gc in victim_sel_policy - f2fs: fix wrong block mapping for multi-devices - f2fs: fix wrong layout information on 16KB page - f2fs: fix zero-sized extent for precache extents - f2fs: introduce reserved_pin_section sysfs entry - f2fs: invalidate dentry cache on failed whiteout creation - f2fs: keep POSIX_FADV_NOREUSE ranges - f2fs: maintain one time GC mode is enabled during whole zoned GC cycle - f2fs: sysfs: add encoding_flags entry - f2fs: use global inline_xattr_slab instead of per-sb slab cache - fbcon: fix integer overflow in fbcon_do_set_font - fbcon: Fix OOB access in font allocation - fbcon: Set fb_display[i]->mode to NULL when the mode is released - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds - fbdev: atyfb: Check if pll_ops->init_pll failed - fbdev: bitblit: bound-check glyph index in bit_putcs* - fbdev: Fix logic error in "offb" name match - fbdev: gbefb: fix to use physical address instead of dma address - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing - fbdev: rivafb: fix divide error in nv3_arb() - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() - fbdev: smscufx: properly copy ioctl memory to kernelspace - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() - fbdev: tcx.c fix mem_map to correct smem_start offset - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init - fgraph: Check ftrace_pids_enabled on registration for early filtering - fgraph: Initialize ftrace_ops->private for function graph ops - fhandle: use more consistent rules for decoding file handle from userns - filelock: add FL_RECLAIM to show_fl_flags() macro - firewire: core: fix overlooked update of subsystem ABI version - firewire: nosy: Fix dma_free_coherent() size - firewire: ohci: move self_id_complete tracepoint after validating register - firmware: arm_scmi: Account for failed debug initialization - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver - firmware: firmware: meson-sm: fix compile-test default - firmware: imx: Add stub functions for SCMI MISC API - firmware: imx: scu-irq: fix OF node leak in - firmware: imx: scu-irq: Init workqueue before request mbox channel - firmware: imx: scu-irq: Set mu_resource_id before get handle - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER - firmware: meson_sm: fix device leak at probe - firmware: qcom: scm: preserve assign_mem() error return value - firmware: qcom: tzmem: disable sc7180 platform - firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc - firmware: stratix10-svc: Add mutex in stratix10 memory management - firmware: stratix10-svc: fix bug in saving controller data - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc - Fix access to video_is_primary_device() when compiled without CONFIG_VIDEO - fjes: Add missing iounmap in fjes_hw_init() - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read - flex_proportions: make fprop_new_period() hardirq safe - floppy: fix for PAGE_SIZE != 4KB - fou: Don't allow 0 for FOU_ATTR_IPPROTO. - fs/9p: Don't open remote file with APPEND mode when writeback cache is used - fs: Add 'initramfs_options' to set initramfs mount options - fs: always return zero on success from replace_fd() - fscontext: do not consume log entries when returning -EMSGSIZE - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink - fs/namespace: correctly handle errors returned by grab_requested_mnt_ns - fs/namespace: fix reference leak in grab_requested_mnt_ns - fs/nfs/io: make nfs_start_io_*() killable - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() - fs/nls: Fix utf16 to utf8 conversion - fs/notify: call exportfs_encode_fid with s_umount - fsnotify: do not generate ACCESS/MODIFY events on child for special files - fs/ntfs3: check for shutdown in fsync - fs/ntfs3: Fix a resource leak bug in wnd_extend() - fs: ntfs3: Fix integer overflow in run_unpack() - fs/ntfs3: fix mount failure for sparse runs in run_unpack() - fs/ntfs3: Initialize allocated memory before use - fs/ntfs3: out1 also needs to put mi - fs/ntfs3: Prevent memory leaks in add sub record - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist - fs/ntfs3: Support timestamps prior to epoch - fs/proc: fix uaf in proc_readdir_de() - fs/proc/task_mmu: check p->vec_buf for NULL - fs: quota: create dedicated workqueue for quota_release_work - fs: udf: fix OOB read in lengthAllocDescs handling - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() - ftrace: Fix BPF fexit with livepatch - ftrace: Fix softlockup in ftrace_module_enable - ftrace/samples: Fix function size computation - fuse: Always flush the page cache before FOPEN_DIRECT_IO write - fuse: check if copy_file_range() returns larger than requested size - fuse: do not allow mapping a non-regular backing file - fuse: fix livelock in synchronous file put from fuseblk workers - fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() - fuse: fix readahead reclaim deadlock - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write - fuse: prevent overflow in copy_file_range return value - fuse: zero initialize inode private data - futex: Don't leak robust_list pointer on exec race - futex: Prevent use-after-free during requeue-PI - gcc-plugins: Remove TODO_verify_il for GCC >= 16 - gcov: add support for GCC 15 - genalloc.h: fix htmldocs warning - genetlink: fix genl_bind() invoking bind() after -EPERM - gfs2: fix freeze error handling - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote - gfs2: fix remote evict for read-only filesystems - gfs2: Fix unlikely race in gdlm_put_lock - gfs2: Fix use of bio_chain - gfs2: Prevent recursive memory reclaim - gpio: 104-idio-16: Define maximum valid register address offset - gpio: cdev: Correct return code on memory allocation failure - gpio: idio-16: Define fixed direction of the GPIO lines - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter - gpiolib: acpi: Add a quirk for Acer Nitro V15 - gpiolib: acpi: Add quirk for ASUS ProArt PX13 - gpiolib: acpi: Add quirk for Dell Precision 7780 - gpiolib: acpi: Fix gpio count with string references - gpiolib: acpi: Fix potential out-of-boundary left shift - gpiolib: acpi: Handle deferred list via new API - gpiolib: acpi: Move quirks to a separate file - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list() - gpiolib-acpi: Update file references in the Documentation and MAINTAINERS - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler - gpiolib: Extend software-node support to support secondary software-nodes - gpiolib: fix invalid pointer access in debugfs - gpio: ljca: Fix duplicated IRQ mapping - gpio: omap: do not register driver in probe() - gpio: pca953x: Add support for level-triggered interrupts - gpio: pca953x: handle short interrupt pulses on PCAL devices - gpio: pca953x: mask interrupts in irq shutdown - gpio: pci-idio-16: Define maximum valid register address offset - gpio: regmap: add the .fixed_direction_output configuration parameter - gpio: regmap: Allow to allocate regmap-irq device - gpio: regmap: Fix memleak in error path in gpio_regmap_register() - gpio: rockchip: mark the GPIO controller as sleeping - gpio: rockchip: Stop calling pinctrl for set_direction - gpio: sprd: Change sprd_gpio lock to raw_spin_lock - gpio: swnode: don't use the swnode's name as the key for GPIO lookup - gpio: virtuser: fix UAF in configfs release path - gpio: wcd934x: mark the GPIO controller as sleeping - gpu: host1x: Fix race in syncpt alloc/free - greybus: gb-beagleplay: Fix timeout handling in bootloader functions - gue: Fix skb memleak with inner IP protocol 0. - gup: optimize longterm pin_user_pages() for large folio - gve: Correct ethtool rx_dropped calculation - gve: defer interrupt enabling until NAPI registration - gve: Fix stats report corruption on queue count change - hfs: clear offset and space out of valid records in b-tree node - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() - hfs: make proper initalization of struct hfs_find_data - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() - hfsplus: fix volume corruption issue for generic/070 - hfsplus: fix volume corruption issue for generic/073 - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() - hfsplus: Verify inode mode when loading from disk - hfs: validate record offset in hfsplus_bmap_alloc - HID: amd_sfh: Add sync across amd sfh work functions - HID: amd_sfh: Stop sensor before starting - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) - HID: asus: add support for missing PX series fn keys - HID: asus: add Z13 folio to generic group for multitouch to work - HID: elecom: Add support for ELECOM M-XT3URBK (018F) - hid: fix I2C read buffer overflow in raw_event() for mcp2221 - HID: hid-input: Extend Elan ignore battery quirk to USB - HID: hid-input: only ignore 0 battery events for digitizers - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() - HID: hidraw: tighten ioctl command parsing - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() - HID: intel-ish-hid: Reset enum_devices_done before enumeration - HID: intel-ish-hid: Update ishtp bus match to support device ID table - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking - HID: logitech: add HID++ support for Logitech MX Anywhere 3S - HID: logitech-dj: Remove duplicate error logging - HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL - HID: multitouch: fix name of Stylus input devices - HID: multitouch: fix sticky fingers - HID: nintendo: Wait longer for initial probe - HID: pidff: PERMISSIVE_CONTROL quirk autodetection - HID: pidff: Use direction fix only for conditional effects - HID: playstation: Center initial joystick axes to prevent spurious events - HID: playstation: Fix memory leak in dualshock4_get_calibration_data() - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 - HID: quirks: work around VID/PID conflict for appledisplay - HID: uclogic: Fix potential memory leak in error path - HID: usbhid: paper over wrong bNumDescriptor field - hostfs: Fix only passing host root in boot stage with new mount - hrtimer: Fix softirq base check in update_needs_ipi() - hrtimers: Introduce hrtimer_update_function() - hrtimers: Make hrtimer_update_function() less expensive - hrtimers: Unconditionally update target CPU base after offline timer migration - hsr: Fix supervision frame sending on HSRv0 - hsr: hold rcu and dev lock for hsr_get_port_ndev - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr - hsr: use rtnl lock when iterating over ports - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex - hwmon: (dell-smm) Limit fan multiplier to avoid overflow - hwmon: (dell-smm) Remove Dell Precision 490 custom config data - hwmon: (ibmpex) fix use-after-free in high/low store - hwmon: (k10temp) Add device ID for Strix Halo - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models - hwmon: (lenovo-ec-sensors) Update P8 supprt - hwmon: (ltc4282): Fix reset_history file permissions - hwmon: (max16065) Use local variable to avoid TOCTOU - hwmon: (max6697) fix regmap leak on probe failure - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems - hwmon: (occ) Mark occ_init_attribute() as __printf - hwmon: (sbtsi_temp) AMD CPU extended temperature range support - hwmon: (sht3x) Fix error handling - hwmon: sy7636a: add alias - hwmon: sy7636a: Fix regulator_enable resource leak on error path - hwmon: (tmp401) fix overflow caused by default conversion rate value - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU - hwrng: ks-sa - fix division by zero in ks_sa_rng_init - hwrng: nomadik - add ARM_AMBA dependency - i2c: amd-mp2: fix reference leak in MP2 PCI device - i2c: designware: Add disabling clocks when probe fails - i2c: designware: Add quirk for Intel Xe - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware - i2c: designware: Fix clock issue when PM is disabled - i2c: i801: Hide Intel Birch Stream SoC TCO WDT - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA - i2c: riic: Move suspend handling to NOIRQ phase - i3c: fix refcount inconsistency in i3c_master_register - i3c: master: svc: Prevent incomplete IBI transaction - i3c: master: svc: Recycle unused IBI slot - i3c: master: svc: Use manual response for IBI events - i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C - i40e: add mask to apply valid bits for itr_idx - i40e: add max boundary check for VF filters - i40e: add validation for ring_len param - i40e: fix idx validation in config queues msg - i40e: fix idx validation in i40e_validate_queue_map - i40e: fix input validation logic for action_meta - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path - i40e: fix scheduling in set_rx_mode - i40e: fix validation of VF state in get resources - i40e: improve VF MAC filters accounting - i40e: remove redundant memory barrier when cleaning Tx descs - i40e: validate ring_len parameter against hardware-specific values - iavf: fix off-by-one issues in iavf_config_rss_reg() - IB/ipoib: Ignore L3 master device - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions - IB/sa: Fix sa_local_svc_timeout_ms read race - ice: Avoid detrimental cleanup for bond during interface stop - ice: Don't use %pK through printk or tracepoints - ice: Fix incorrect timeout ice_release_res() - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues - ice: Fix persistent failure in ice_get_rxfh - ice: fix PTP cleanup on driver removal in error path - ice: fix Rx page leak on multi-buffer frames - ice: ice_adapter: release xa entry on adapter allocation failure - ice: initialize ring_stats->syncp - ice: stop counting UDP csum mismatch as rx_errors - ice: store max_frame and rx_buf_len only in ice_rx_ring - idpf: add support for SW triggered interrupts - idpf: add support for Tx refillqs in flow scheduling mode - idpf: cap maximum Rx buffer size - idpf: do not linearize big TSO packets - idpf: fix memory leak in idpf_vport_rel() - idpf: fix mismatched free function for dma_alloc_coherent - idpf: fix possible vport_config NULL pointer deref in remove - idpf: fix Rx descriptor ready check barrier in splitq - idpf: improve when to set RE bit logic - idpf: keep the netdev when a reset fails - idpf: reduce mbx_task schedule delay to 300us - idpf: remove obsolete stashing code - idpf: replace flow scheduling buffer ring with buffer pool - idpf: simplify and fix splitq Tx packet rollback error path - idpf: stop Tx if there are insufficient buffer resources - idpf: trigger SW interrupt when exiting wb_on_itr mode - idr: fix idr_alloc() returning an ID out of range - igb: fix link test skipping when interface is admin down - igc: don't fail igc_probe() on LED setup error - igc: fix race condition in TX timestamp read for register 0 - igc: Restore default Qbv schedule when changing channels - iio: accel: adxl380: fix handling of unavailable "INT1" interrupt - iio: accel: bmc150: Fix irq assumption regression - iio: accel: fix ADXL355 startup race condition - iio: accel: iis328dq: fix gain values - iio: adc: ad7280a: fix ad7280_store_balance_timer() - iio: adc: ad7280a: handle spi_setup() errors in probe() - iio: adc: ad9467: fix ad9434 vref mask - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver - iio: adc: exynos_adc: fix OF populate on driver rebind - iio: adc: imx93_adc: load calibrated values even calibration failed - iio/adc/pac1934: fix channel disable configuration - iio: adc: pac1934: Fix clamped value in pac1934_reg_snapshot - iio: adc: rtq6056: Correct the sign bit index - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register - iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains - iio: buffer-dmaengine: enable .get_dma_dev() - iio: buffer-dma: support getting the DMA channel - iio: buffer: support getting dma channel from the buffer - iio: chemical: scd4x: fix reported channel endianness - iio:common:ssp_sensors: Fix an error handling path ssp_probe() - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed() - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() - iio: core: add missing mutex_destroy in iio_dev_release() - iio: core: add separate lockdep class for info_exist_lock - iio: core: Replace lockdep_set_class() + mutex_init() by combined call - iio: dac: ad5360: use int type to store negative error codes - iio: dac: ad5421: use int type to store negative error codes - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE - iio: frequency: adf4350: Fix prescaler usage. - iio: humditiy: hdc3020: fix units for temperature and humidity measurement - iio: humditiy: hdc3020: fix units for thresholds and hysteresis - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume - iio: imu: inv_icm42600: Simplify pm_runtime setup - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member - iio: st_lsm6dsx: Fixed calibrated timestamp calculation - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK - iio: xilinx-ams: Unmask interrupts after updating alarms - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr - ima: Handle error code returned by ima_filter_rule_match() - inet: Avoid ehash lookup race in inet_ehash_insert() - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() - inet_diag: annotate data-races in inet_diag_bc_sk() - inet: ping: check sock_net() in ping_get_port() and ping_lookup() - inet: ping: Fix icmp out counting - init: handle bootloader identifier in kernel parameters - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD - Input: alps - fix use-after-free bugs caused by dev3_register_work - Input: atmel_mxt_ts - allow reset GPIO to sleep - Input: cros_ec_keyb - fix an invalid memory access - Input: goodix - add support for ACPI ID GDIX1003 - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table - Input: imx_sc_key - fix memory corruption on unload - Input: iqs7222 - avoid enabling unused interrupts - Input: lkkbd - disable pending work before freeing device - Input: pegasus-notetaker - fix potential out-of-bounds access - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak - intel_th: fix device leak on output open() - intel_th: Fix error handling in intel_th_output_open - interconnect: debugfs: Fix incorrect error handling for NULL path - interconnect: debugfs: initialize src_node and dst_node to empty strings - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes - iomap: account for unaligned end offsets when truncating read range - iomap: adjust read range correctly for non-block-aligned positions - iomap: allocate s_dio_done_wq for async reads as well - iomap: always run error completions in user context - iomap: factor out a iomap_dio_done helper - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() - iommu/amd/pgtbl: Fix possible race while increase page table level - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() - iommu/amd: Skip enabling command/event buffers for kdump - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs - iommu/apple-dart: fix device leak on of_xlate() - iommu/arm-smmu-qcom: do not register driver in probe() - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables - iommu: disable SVA when CONFIG_X86 is set - iommu/exynos: fix device leak on of_xlate() - iommufd: Don't overflow during division for dirty tracking - iommufd: Fix race during abort for file descriptors - iommufd: Make vfio_compat's unmap succeed if the range is already empty - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds - iommufd/selftest: Update hw_info coverage for an input data_type - iommu/ipmmu-vmsa: fix device leak on of_xlate() - iommu/mediatek: fix device leak on of_xlate() - iommu/mediatek: fix use-after-free on probe deferral - iommu/mediatek-v1: fix device leak on probe_device() - iommu/mediatek-v1: fix device leaks on probe() - iommu/omap: fix device leaks on probe_device() - iommu/qcom: fix device leak on of_xlate() - iommu/sun50i: fix device leak on of_xlate() - iommu/tegra: fix device leak on probe_device() - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE - iommu/vt-d: debugfs: Fix legacy mode page table dump logic - iommu/vt-d: Disallow dirty tracking if incoherent page walk - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb - iommu/vt-d: PRS isn't usable if PDS isn't supported - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() - io_uring: backport io_should_terminate_tw() - io_uring/cmd: let cmds to know about dying task - io_uring: correct __must_hold annotation in io_install_fixed_file - io_uring: fix filename leak in __io_openat_prep() - io_uring: fix incorrect io_kiocb reference in io_link_skb - io_uring: fix min_wait wakeups for SQPOLL - io_uring: include dying ring in task_work "should cancel" state - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop - io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check - io_uring: move local task_work in exit cancel loop - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations - io_uring/napi: fix io_napi_entry RCU accesses - io_uring/poll: correctly handle io_poll_add() return value on update - io_uring/rw: recycle buffers manually for non-mshot reads - io_uring/sqpoll: be smarter on when to update the stime usage - io_uring/sqpoll: switch away from getrusage() for CPU accounting - io_uring/waitid: always prune wait queue entry in io_waitid_wait() - io_uring/zctx: check chained notif contexts - ip6_gre: make ip6gre_header() robust - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() - ipmi: Fix handling of messages with provided receive message pointer - ipmi: Fix __scan_channels() failing to rescan channels - ipmi: Fix the race between __scan_channels() and deliver_response() - ipmi: Rework user message limit handling - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - ipv4: Fix reference count leak when using error routes with nexthop objects - ipv4: ip_gre: make ipgre_header() robust - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled - ipv6: adopt dst_dev() helper - ipv6: annotate data-race in ndisc_router_discovery() - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() - ipv6: clear RA flags when adding a static route - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF - ipv6: Fix use-after-free in inet6_addr_del(). - ipv6: np->rxpmtu race annotation - ipv6: use the right ifindex when replying to icmpv6 from localhost - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() - ipvlan: Make the addrs_lock be per port - ipvs: Defer ip_vs_ftp unregister during netns cleanup - ipvs: fix ipv4 null-ptr-deref in route error path - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment - irqchip/gic-v3-its: Avoid truncating memory addresses - irqchip/imx-mu-msi: Fix section mismatch - irqchip/irq-bcm7038-l1: Fix section mismatch - irqchip/irq-bcm7120-l2: Fix section mismatch - irqchip/irq-brcmstb-l2: Fix section mismatch - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() - irqchip/qcom-irq-combiner: Fix section mismatch - irqchip/renesas-rzg2l: Fix section mismatch - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume - irqchip/sifive-plic: Make use of __assign_bit() - irqchip/sifive-plic: Respect mask state when setting affinity - irqchip/starfive-jh8100: Fix section mismatch - irqdomain: cdx: Switch to of_fwnode_handle() - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() - isofs: check the return value of sb_min_blocksize() in isofs_fill_super - ixgbevf: Add support for Intel(R) E610 device - ixgbevf: fix getting link speed data for E610 devices - ixgbevf: fix mailbox API compatibility by negotiating supported features - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted - jbd2: ensure that all ongoing I/O complete before freeing blocks - jbd2: fix the inconsistency between checksum and data in memory for journal sb - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key - jbd2: use a weaker annotation in journal handling - jfs: fix uninitialized waitqueue in transaction manager - jfs: Verify inode mode when loading from disk - kallsyms: Fix wrong "big" kernel symbol type read from procfs - kasan: refactor pcpu kasan vmalloc unpoison - kasan: unpoison vms[area] addresses with a common tag - kbuild: fix compilation of dtb specified on command-line without make rule - kbuild: uapi: Strip comments before size type check - kbuild: Use objtree for module signing key path - kconfig: fix static linking of nconf - kconfig/mconf: Initialize the default locale at startup - kconfig/nconf: Initialize the default locale at startup - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths - kernfs: Fix UAF in polling when open file is released - KEYS: trusted: Fix a memory leak in tpm2_load_cmd - keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal - KEYS: trusted_tpm1: Compare HMAC values in constant time - KEYS: X.509: Fix Basic Constraints CA flag parsing - kmsan: fix out-of-bounds access to shadow memory - ksmbd: add max ip connections parameter - ksmbd: close accepted socket when per-IP limit rejects connection - ksmbd: fix buffer validation by including null terminator size in EA length - ksmbd: fix error code overwriting in smb2_get_info_filesystem() - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths - ksmbd: Fix memory leak in get_file_all_info() - ksmbd: Fix race condition in RPC handle list access - ksmbd: fix recursive locking in RPC handle list access - ksmbd: Fix refcount leak when invalid session is found on session lookup - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency - ksmbd: ipc: fix use-after-free in ipc_msg_send_request - ksmbd: skip lock-range check on equal size to avoid size==0 underflow - ksmbd: smbd: fix dma_unmap_sg() nents - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size - ksmbd: transport_ipc: validate payload size before reading handle - ksmbd: use sock_create_kern interface to create kernel socket - ksmbd: vfs: fix race on m_flags in vfs_cache - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item - ktest.pl: Fix uninitialized var in config-bisect.pl - kunit: kasan_test: disable fortify string checker on kasan_strings() test - kunit: test_dev_action: Correctly cast 'priv' pointer to long* - KVM: arm64: Check the untrusted offset in FF-A memory share - KVM: arm64: Initialize HCR_EL2.E2H early - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() - KVM: arm64: Make all 32bit ID registers fully writable - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot - KVM: Don't clobber irqfd routing type when deassigning irqfd - KVM: guest_memfd: Pass index, not gfn, to __kvm_gmem_get_pfn() - KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying - KVM: guest_memfd: Remove RCU-protected attribute from slot->gmem.file - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits - KVM: nSVM: Fix and simplify LBR virtualization handling with nested - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2 - KVM: SVM: Fix redundant updates of LBR MSR intercepts - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active - KVM: VMX: Fix check for valid GVA on an EPT violation - KVM: VMX: Split out guts of EPT violation to common/exposed function - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 - l2tp: avoid one data-race in l2tp_tunnel_del_work() - l2tp: Fix memleak in l2tp_udp_encap_recv(). - lan966x: Fix sleeping in atomic context - leds: flash: leds-qcom-flash: Update torch current clamp setting - leds: led-class: Only Add LED to leds_list when it is fully ready - leds: leds-cros_ec: Skip LEDs without color components - leds: leds-lp50xx: Allow LED 0 to be added to module bank - leds: leds-lp50xx: Enable chip before any communication - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs - leds: leds-lp55xx: Use correct address for memory programming - leds: netxbig: Fix GPIO descriptor leak in error paths - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM - libbpf: Fix error when st-prefix_ops and ops from differ btf - libbpf: Fix parsing of multi-split BTF - libbpf: Fix powerpc's stack register definition in bpf_tracing.h - libbpf: Fix reuse of DEVMAP - libbpf: Fix USDT SIB argument handling causing unrecognized register error - libbpf: Fix -Wdiscarded-qualifiers under C23 - lib/buildid: use __kernel_read() for sleepable context - libceph: fix invalid accesses to ceph_connection_v1_info - libceph: fix potential use-after-free in have_mon_and_osd_map() - libceph: make calc_target() set t->paused, not just clear it - libceph: make decode_pool() more resilient against corrupted osdmaps - libceph: make free_choose_arg_map() resilient to partial allocation - libceph: prevent potential out-of-bounds reads in handle_auth_done() - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() - libceph: replace BUG_ON with bounds check for map->max_osd - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() - libceph: reset sparse-read state in osd_fault() - libceph: return the handler error from mon_handle_auth_done() - lib/crypto: aes: Fix missing MMU protection for AES S-box - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC - lib/crypto: riscv/chacha: Avoid s0/fp register - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit - lib/genalloc: fix device leak in of_gen_pool_get() - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map - libperf event: Ensure tracing data is multiple of 8 sized - lib/vsprintf: Check pointer before dereferencing in time_and_date() - listmount: don't call path_put() under namespace semaphore - livepatch: Match old_sympos 0 and 1 in klp_find_func() - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure - lockd: fix vfs_test_lock() calls - locking/spinlock/debug: Fix data-race in do_raw_write_lock - locktorture: Fix memory leak in param_set_cpumask() - LoongArch: Add cflag -fno-isolate-erroneous-paths-dereference - LoongArch: Add machine_kexec_mask_interrupts() implementation - LoongArch: Add new PCI ID for pci_fixup_vgadev() - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled - LoongArch: Automatically disable kaslr if boot from kexec_file - LoongArch: BPF: Sign extend kfunc call arguments - LoongArch: BPF: Zero-extend bpf_tail_call() index - LoongArch: Check the return value when creating kobj - LoongArch: Correct the calculation logic of thread_count - LoongArch: Don't panic if no valid cache info for PCI - LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells - LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names - LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells - LoongArch: Enable exception fixup for specific ADE subcode - LoongArch: Fix build errors for CONFIG_RANDSTRUCT - LoongArch: Fix PMU counter allocation for mixed-type event groups - LoongArch: Fix unreliable stack for live patching - LoongArch: Handle new atomic instructions for probes - LoongArch: Init acpi_gbl_use_global_lock to false - LoongArch: KVM: Add delay until timer interrupt injected - LoongArch: KVM: Restore guest PMU if it is enabled - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY - LoongArch: Mask all interrupts during kexec/kdump - LoongArch: Refactor register restoration in ftrace_common_return - LoongArch: Rework KASAN initialization for PTW-enabled systems - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED - LoongArch: Update help info of ARCH_STRICT_ALIGN - LoongArch: Use correct accessor to read FWPC/MWPC - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY - LoongArch: Use __pmd()/__pte() for swap entry conversions - LoongArch: Use UAPI types in ptrace UAPI header - LoongArch: Use unsigned long for _end and _text - LoongArch: vDSO: Check kcalloc() result in init_vdso() - loop: fix backing file reference leak on validation error - lsm: CONFIG_LSM can depend on CONFIG_SECURITY - m68k: bitops: Fix find_*_bit() signatures - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse - macvlan: fix error recovery in macvlan_common_newlink() - macvlan: fix possible UAF in macvlan_forward_source() - mailbox: mailbox-test: Fix debugfs_create_dir error checking - mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend() - mailbox: mtk-cmdq: Refine DMA address handling for the command buffer - mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data() - mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend() - mailbox: pcc: don't zero error register - mailbox: pcc: Refactor error handling in irq handler into separate function - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop - mailbox: zynqmp-ipi: Fix SGI cleanup on unbind - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call - maple_tree: fix tracepoint string pointers - md: fix mssing blktrace bio split events - md: fix rcu protection in md_wakeup_thread - md: Fix static checker warning in analyze_sbs - md/raid0: Handle bio_split() errors - md/raid10: Handle bio_split() errors - md/raid10: wait barrier before returning discard request with REQ_NOWAIT - md/raid1: Handle bio_split() errors - md/raid5: fix IO hang when array is broken with IO inflight - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() - md: suspend array while updating raid_disks via sysfs - media: adv7180: Add missing lock in suspend callback - media: adv7180: Do not write format to device in set_fmt - media: adv7180: Only validate format in querystd - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() - media: amphion: Add a frame flush mode for decoder - media: amphion: Cancel message work before releasing the VPU core - media: amphion: Delete v4l2_fh synchronously in .release() - media: amphion: Make some vpu_v4l2 functions static - media: amphion: Remove vpu_vb_is_codecconfig - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove - media: cec: extron-da-hd-4k-plus: drop external-module make commands - media: cec: Fix debugfs leak on bus_register() failure - media: cx18: Add missing check after DMA map - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() - media: fix uninitialized symbol warnings - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR - media: i2c: mt9v111: fix incorrect type for ret - media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe - media: imon: make send_packet() more robust - media: ipu6: isys: Set embedded data type correctly for metadata formats - media: lirc: Fix error handling in lirc_register() - media: mc: Clear minor number before put device - media: mc: Fix MUST_CONNECT handling for pads with no links - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() - media: mediatek: vcodec: Use spinlock for context list protection lock - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain() - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release - media: ov08x40: Fix the horizontal flip control - media: pci: ivtv: Add missing check after DMA map - media: pci: ivtv: Don't create fake v4l2_fh - media: pci: mg4b: fix uninitialized iio scan data - media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS - media: platform: mtk-mdp3: fix device leaks at probe - media: pvrusb2: Fix incorrect variable used in trace message - media: rc: fix races with imon_disconnect() - media: rc: st_rc: Fix reset control resource leak - media: redrat3: use int type to store negative error codes - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled - media: rj54n1cb0c: Fix memleak in rj54n1_probe() - media: s5p-mfc: remove an unused/uninitialized variable - media: samsung: exynos4-is: fix potential ABBA deadlock on init - media: st-delta: avoid excessive stack usage - media: TDA1997x: Remove redundant cancel_delayed_work in probe - media: ti: j721e-csi2rx: Fix source subdev link creation - media: ti: j721e-csi2rx: Use devm_of_platform_populate - media: tuner: xc5000: Fix use-after-free in xc5000_release - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID - media: uvcvideo: Use heuristic to find stream entity - media: v4l2-mem2mem: Fix outdated documentation - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() - media: venus: firmware: Use correct reset sequence for IRIS2 - media: verisilicon: Explicitly disable selection api ioctls for decoders - media: verisilicon: Fix CPU stalls on G2 bus error - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path - media: videobuf2: forbid remove_bufs when legacy fileio is active - media: vidtv: initialize local pointers upon transfer of memory ownership - media: vivid: fix disappearing messages - media: vpif_capture: fix section mismatch - media: vpif_display: fix section mismatch - media: zoran: Remove zoran_fh structure - mei: gsc: add dependency on Xe driver - mei: me: add nova lake point S DID - mei: me: add wildcat lake P DID - mei: trace: treat reg parameter as string - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe - memstick: Add timeout to prevent indefinite waiting - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup - mfd: core: Increment of_node's refcount before linking it to the platform device - mfd: da9055: Fix missing regmap_del_irq_chip() in error path - mfd: da9063: Split chip variant reading in two bus transactions - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag - mfd: kempld: Switch back to earlier ->init() behavior - mfd: madera: Work around false-positive -Wininitialized warning - mfd: max77620: Fix potential IRQ chip conflict when probing two devices - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path - mfd: rz-mtu3: Fix MTU5 NFCR register offset - mfd: stmpe-i2c: Add missing MODULE_LICENSE - mfd: stmpe: Remove IRQ domain upon removal - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() - microchip: lan865x: add ndo_eth_ioctl handler to enable PHY ioctl support - migrate: correct lock ordering for hugetlb file folios - minixfs: Verify inode mode when loading from disk - minmax.h: add whitespace around operators and after commas - minmax.h: move all the clamp() definitions after the min/max() ones - minmax.h: reduce the #define expansion of min(), max() and clamp() - minmax.h: remove some #defines that are only expanded once - minmax.h: simplify the variants of clamp() - minmax.h: update some comments - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() - MIPS: Fix a reference leak bug in ip22_check_gio() - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits - mips: lantiq: danube: add missing device_type in pci node - mips: lantiq: danube: add missing properties to cpu node - mips: lantiq: danube: add model to EASY50712 dts - mips: lantiq: danube: rename stp node on EASY50712 reference board - mips: lantiq: xway: sysctrl: rename stp clock - MIPS: Malta: Fix !EVA SOC-it PCI MMIO - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow - MIPS: mm: Prevent a TLB shutdown on initial uniquification - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup - misc: fastrpc: Fix fastrpc_map_lookup operation - misc: fastrpc: fix possible map leak in fastrpc_put_args - misc: fastrpc: Save actual DMA size in fastrpc_map structure - misc: fastrpc: Skip reference for DMA handles - misc: genwqe: Fix incorrect cmd field being reported in error - mISDN: annotate data-race around dev->work - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats - mlxsw: spectrum_router: Fix neighbour use-after-free - mlxsw: spectrum_router: Fix possible neighbour reference count leak - mm: add folio_expected_ref_count() for reference count calculation - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() - mm/balloon_compaction: we cannot have isolated pages in the balloon list - mmc: core: Fix variable shadowing in mmc_route_rpmb_frames() - mmc: core: SPI mode remove cmd7 - mmc: dw_mmc-rockchip: Fix wrong internal phase calculate - mmc: host: renesas_sdhi: Fix the actual clock - mmc: mmc_spi: multiple block read remove read crc ack - mmc: mvsdio: Fix dma_unmap_sg() nents value - mm: consider non-anon swap cache folios in folio_expected_ref_count() - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function - mmc: sdhci-cadence: add Mobileye eyeQ support - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode - mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level - mm/damon/core: set quota->charged_from to jiffies at first charge window - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() - mm/damon/lru_sort: use param_ctx for damon_attrs staging - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure - mm/damon/sysfs: fix use-after-free in state_show() - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() - mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets() - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success - mm: describe @flags parameter in memalloc_flags_save() - mm/fake-numa: allow later numa node hotplug - mm/fake-numa: handle cases with no SRAT info - mm: folio_may_be_lru_cached() unless folio_test_large() - mm/gup: check ref_count instead of lru before migration - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() - mm/huge_memory: do not change split_huge_page*() target order silently - mm/huge_memory: fix NULL pointer deference when splitting folio - mm/huge_memory: preserve PG_has_hwpoisoned if a folio is split to >0 order - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() - mm: hugetlb: avoid soft lockup when mprotect to large memory area - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0 - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather - mm/hugetlb: fix folio is still mapped when deleted - mm/hugetlb: fix hugetlb_pmd_shared() - mm/hugetlb: fix two comments related to huge_pmd_unshare() - mm: introduce and use {pgd,p4d}_populate_kernel() - mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN - mm/kasan: fix KASAN poisoning in vrealloc() - mm, kfence: describe @slab parameter in __kfence_obj_info() - mm/kfence: randomize the freelist on initialization - mm/khugepaged: fix the address passed to notifier on testing young - mm: kmsan: fix poisoning of high-order non-compound pages - mm/ksm: fix exec/fork inheritance support for prctl - mm/ksm: fix flag-dropping behavior in ksm_madvise - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork - mm/memfd: fix information leak in hugetlb folios - mm/memory: do not populate page table entries beyond i_size - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison - mm/memory-failure: fix redundant updates for already poisoned pages - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory - mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn - mm/mempool: fix poisoning order>0 pages with HIGHMEM - mm/mm_init: fix hash table order logging in alloc_large_system_hash() - mm: numa,memblock: include for 'numa_nodes_parsed' - mm/page_alloc: batch page freeing in decay_pcp_high - mm/page_alloc: change all pageblocks migrate type on coalescing - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations - mm/page_alloc: prevent pcp corruption with SMP=n - mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection - mm/page_owner: fix memory leak in page_owner_stack_fops->release() - mm, percpu: do not consider sleepable allocations atomic - mm: prevent poison consumption when splitting THP - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" - mm: revert "mm: vmscan.c: fix OOM on swap stress test" - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage - mm/rmap: fix two comments related to huge_pmd_unshare() - mm/secretmem: fix use-after-free race in fault handler - mm/shmem: fix THP allocation and fallback loop - mm, shmem: prevent infinite loop on truncate race - mm/shmem, swap: fix race of truncate and swap entry split - mm: simplify folio_expected_ref_count() - mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single - mm: swap: check for stable address space before operating on the VMA - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages - mm/truncate: unmap large folio on split failure - mm/zswap: fix error pointer free in zswap_cpu_comp_prepare() - most: usb: fix double free on late probe failure - most: usb: Fix use-after-free in hdm_disconnect - most: usb: hdm_probe: Fix calling put_device() before device initialization - mount: handle NULL values in mnt_ns_release() - mptcp: avoid deadlock on fallback while reinjecting - mptcp: avoid dup SUB_CLOSED events after disconnect - mptcp: avoid unneeded subflow-level drops - mptcp: Call dst_release() in mptcp_active_enable(). - mptcp: clear scheduled subflows on retransmit - mptcp: decouple mptcp fastclose from tcp close - mptcp: Disallow MPTCP subflows from sockmap - mptcp: do not fallback when OoO is present - mptcp: drop bogus optimization in __mptcp_check_push() - mptcp: ensure context reset on disconnect() - mptcp: fallback earlier on simult connection - mptcp: fix ack generation for fallback msk - mptcp: fix a race in mptcp_pm_del_add_timer() - mptcp: fix duplicate reset on fastclose - mptcp: fix MSG_PEEK stream corruption - mptcp: fix premature close in case of fallback - mptcp: Fix proto fallback detection with BPF - mptcp: fix race condition in mptcp_schedule_work() - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). - mptcp: only reset subflow errors when propagated - mptcp: pm: ignore unknown endpoint flags - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR - mptcp: pm: in-kernel: usable client side with C-flag - mptcp: pm: nl: announce deny-join-id0 flag - mptcp: propagate shutdown to subflows when possible - mptcp: reset blackhole on success with non-loopback ifaces - mptcp: restore window probe - mptcp: schedule rtx timer only after pushing data - mptcp: set remote_deny_join_id0 on SYN recv - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN - mptcp: tfo: record 'deny join id0' info - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() - mtdchar: fix integer overflow in read/write ioctls - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing - mtd: nand: relax ECC parameter validation check - mtd: onenand: Pass correct pointer to IRQ handler - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands - mtd: rawnand: cadence: fix DMA device NULL pointer dereference - mtd: rawnand: fsmc: Default to autodetect buswidth - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer - mtd: rawnand: stm32_fmc2: fix ECC overwrite - mtd: spinand: winbond: Fix oob_layout for W25N01JW - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips - nbd: defer config put in recv_work - nbd: defer config unlock in nbd_genl_connect - nbd: override creds to kernel when calling sock_{send,recv}msg() - nbd: restrict sockets to TCP and UDP - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() - net/9p: Fix buffer overflow in USB transport layer - net/9p: fix double req put in p9_fd_cancelled - net: Add locking to protect skb->dev access in ip_output - net: add skb_header_pointer_careful() helper - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS - net: aquantia: Add missing descriptor cache invalidation on ATL2 - net: atlantic: fix fragment overflow handling in RX path - net: bcmasp: fix early exit leak with fixed phy - net: bonding: fix possible peer notify event loss or dup issue - net: bridge: annotate data-races around fdb->{updated,used} - net: bridge: Bounce invalid boolopts - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct - net: bridge: fix MST static key usage - net: bridge: fix static key check - net: bridge: fix use-after-free due to MST port state bypass - net: bridge: Install FDB for bridge MAC on VLAN 0 - net: call cond_resched() less often in __release_sock() - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts - net/cls_cgroup: Fix task_get_classid() during qdisc run - net: devmem: expose tcp_recvmsg_locked errors - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates - netdevsim: fix a race issue related to the operation on bpf_bound_progs list - netdevsim: set the carrier when the device goes up - net: dlink: handle copy_thresh allocation failure - net: dlink: handle dma_map_single() failure properly - net: don't touch dev->stats in BPF redirect paths - net: dsa: b53: fix bcm63xx RGMII port link adjustment - net: dsa: b53: fix enabling ip multicast - net: dsa: b53: fix resetting speed and pause on forced link - net: dsa: b53: skip multicast entries for fdb_dump() - net: dsa: b53: stop reading ARL entries if search is done - net: dsa: felix: support phy-mode = "10g-qxgmii" - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() - net: dsa: fix off-by-one in maximum bridge ID determination - net: dsa: hellcreek: fix missing error handling in LED registration - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port - net: dsa: microchip: common: Fix checks on irq_find_mapping() - net: dsa: microchip: Do not execute PTP driver code for unsupported switches - net: dsa: microchip: Don't free uninitialized ksz_irq - net: dsa: microchip: Fix reserved multicast address table programming - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() - net: dsa: microchip: Free previously initialized ports on init failures - net: dsa: microchip: lan937x: Fix RGMII delay tuning - net: dsa: microchip: ptp: Fix checks on irq_find_mapping() - net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463 - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic - net: dsa: sja1105: simplify static configuration reload - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx - net: dsa: tag_brcm: legacy: reorganize functions - net: dsa: xrs700x: reject unsupported HSR configurations - net: dst: add four helpers to annotate data-races around dst->dev - net: dst: introduce dst->dev_rcu - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable - net: enetc: correct the value of ENETC_RXB_TRUESIZE - net: enetc: do not transmit redirected XDP frames when the link is down - net: enetc: fix build warning when PAGE_SIZE is greater than 128K - net: enetc: fix the deadlock of enetc_mdio_lock - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X - net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout - net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism - net: ethernet: ti: am65-cpts: fix timestamp loss due to race conditions - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error - net: fec: cancel perout_timer when PEROUT is disabled - net: fec: correct rx_bytes statistic for the case SHIFT16 is set - net: fec: do not allow enabling PPS and PEROUT simultaneously - net: fec: do not register PPS event for PEROUT - net: fec: do not update PEROUT if it is enabled - net: fec: ERR007885 Workaround for XDP TX path - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() - net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan - netfilter: ipset: Remove unused htable_bits in macro ahash_region - netfilter: nf_conncount: fix leaked ct in error paths - netfilter: nf_conncount: rework API to use sk_buff directly - netfilter: nf_conncount: update last_gc only when GC has been performed - netfilter: nf_nat: remove bogus direction check - netfilter: nfnetlink: reset nlh pointer during batch replay - netfilter: nf_reject: don't reply to icmp error messages - netfilter: nf_tables: avoid chain re-validation if possible - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() - netfilter: nf_tables: fix memory leak in nf_tables_newrule() - netfilter: nf_tables: make nft_set_do_lookup available unconditionally - netfilter: nf_tables: place base_seq in struct net - netfilter: nf_tables: Reintroduce shortened deletion notifications - netfilter: nf_tables: reject duplicate device on updates - netfilter: nf_tables: remove redundant chain validation on register store - netfilter: nf_tables: restart set lookup on base_seq change - netfilter: nft_connlimit: update the count if add was skipped - netfilter: nft_ct: add seqadj extension for natted connections - netfilter: nft_objref: validate objref and objrefmap expressions - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups - netfilter: nft_set_pipapo: don't return bogus extension pointer - netfilter: nft_set_pipapo: fix null deref for empty set - netfilter: nft_set_pipapo: fix range overlap detection - netfilter: nft_set_pipapo: merge pipapo_get/lookup - netfilter: nft_set_pipapo: remove unused arguments - netfilter: nft_set_rbtree: continue traversal if element is inactive - netfilter: nft_set: remove one argument from lookup and update functions - netfilter: nft_synproxy: avoid possible data-race on update operation - netfilter: replace -EEXIST with -EBUSY - net: fix memory leak in skb_segment_list for GRO packets - net: fix segmentation of forwarding fraglist GRO - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe - netfs: Prevent duplicate unlocking - net: gro: fix outer network offset - net/handshake: duplicate handshake cancellations leak socket - net/handshake: Fix memory leak in tls_handshake_accept() - net/handshake: restore destructor on submit failure - net: hns3: add VLAN id validation before using - net: hns3: fix data race in hns3_fetch_stats - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M - net: hns3: return error code when function fails - net: hns3: using the num_tqps in the vf driver to apply for resources - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx - net: hsr: Add VLAN CTAG filter support - net: hsr: create an API to get hsr port type - net: hsr: Create and export hsr_get_port_ndev() - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() - net: hsr: remove one synchronize_rcu() from hsr_del_port() - net: hsr: remove synchronize_rcu() from hsr_add_port() - net: hv_netvsc: reject RSS hash key programming without RX indirection table - net: intel: fm10k: Fix parameter idx set but not used - net: Introduce skb_copy_datagram_from_iter_full() - net: ionic: add dma_wmb() before ringing TX doorbell - net: ionic: map SKB after pseudo-header checksum prep - net/ip6_tunnel: Prevent perpetual tunnel growth - net: ipv4: allow directed broadcast routes to use dst hint - net: ipv6: fix field-spanning memcpy warning in AH output - net: ipv6: ioam6: use consistent dst names - net: lan743x: Allocate rings outside ZONE_DMA - net: lan966x: Fix the initialization of taprio - net: libwx: fix device bus LAN ID - netlink: specs: mptcp: add missing 'server-side' attr - netlink: specs: mptcp: clearly mention attributes - netlink: specs: mptcp: fix if-idx attribute type - netlink: specs: mptcp: replace underscores with dashes in names - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup - net: liquidio: fix overflow in octeon_init_instr_queue() - net: liquidio: Initialize netdev pointer before queue setup - net: macb: avoid dealing with endianness in macb_set_hwaddr() - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() - net: mana: Change the function signature of mana_get_primary_netdev_rcu - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure - net: mdio: aspeed: add dummy read to avoid read-after-write issue - net: mdiobus: release reset_gpio in mdiobus_unregister_device() - net: mdio: fix resource leak in mdiobus_register_device() - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() - net/mlx5: Clean up only new IRQ glue on request_irq() failure - net/mlx5: Drain firmware reset in shutdown callback - net/mlx5e: Don't print error message due to invalid module - net/mlx5e: Don't query FEC statistics when FEC is disabled - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv - net/mlx5e: Fix crash on profile change rollback failure - net/mlx5e: Fix maxrate wraparound in threshold between units - net/mlx5e: Fix potentially misleading debug message - net/mlx5e: Fix return value in case of module EEPROM read error - net/mlx5e: Fix validation logic in rate limiting - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps - net/mlx5e: Harden uplink netdev access against device unbind - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv - net/mlx5e: Restore destroying state bit after profile cleanup - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ - net/mlx5e: SHAMPO, Fix skb size check for 64K pages - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload - net/mlx5e: TC, delete flows only for existing peers - net/mlx5: Fix IPsec cleanup over MPV device - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() - net/mlx5: Fix vhca_id access call trace use before alloc - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect - net/mlx5: fw reset, add reset timeout work - net/mlx5: fw reset, clear reset requested on drain_fw_reset - net/mlx5: fw_tracer, Handle escaped percent properly - net/mlx5: fw_tracer, Validate format string parameters - net/mlx5: HWS, change error flow on matcher disconnect - net/mlx5: Initialize events outside devlink lock - net/mlx5: pagealloc: Fix reclaim race during command interface teardown - net/mlx5: Serialize firmware reset with devlink - net/mlx5: Stop polling for command response if interface goes down - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() - net: mscc: ocelot: Fix crash when adding interface under a lag - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure - net: netdevsim: fix inconsistent carrier state after link/unlink - net: netpoll: ensure skb_pool list is always initialized - net: netpoll: fix incorrect refcount handling causing incorrect cleanup - net: netpoll: flush skb pool during cleanup - net: netpoll: Individualize the skb pool - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write - net: nfc: nci: Add parameter validation for packet data - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy - net: openvswitch: fix data race in ovs_vport_get_upcall_stats - net: openvswitch: fix middle attribute validation in push_nsh() action - net: openvswitch: remove never-working support for setting nsh fields - net: phy: add phy_interface_copy() - net: phy: add phy_interface_weight() - net: phy: adin1100: Fix software power-down ready condition - net: phy: aquantia: check for NVMEM deferral - net: phy: clear link parameters on admin link down - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write - net: phy: marvell: Fix 88e1510 downshift counter errata - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration - net: phy: micrel: always set shared->phydev for LAN8814 - net: phy: micrel: fix clk warning when removing the driver - net: phy: micrel: Fix lan8814_config_init - net: phy: micrel: Introduce lanphy_modify_page_reg - net: phy: micrel: lan8814 fix reset of the QSGMII interface - net: phy: micrel: Replace hardcoded pages with defines - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() - net: ravb: Enforce descriptor type ordering - net: ravb: Ensure memory write completes before ringing TX doorbell - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer - netrom: fix double-free in nr_route_frame() - netrom: Fix memory leak in nr_sendmsg() - net: rose: fix invalid array index in rose_kill_by_device() - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak - net_sched: act_connmark: use RCU in tcf_connmark_dump() - net/sched: act_ife: avoid possible NULL deref - net/sched: act_ife: convert comma to semicolon - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak - net/sched: cls_u32: use skb_header_pointer_careful() - net/sched: Enforce that teql can only be used as root qdisc - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change - net/sched: ets: Remove drr class from the active list if it changes to strict - net: sched: generalize check for no-queue qdisc on TX queue - net_sched: limit try_bulk_dequeue_skb() batches - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop - net/sched: sch_qfq: do not free existing class in qfq_change_class() - net/sched: sch_qfq: Fix null-deref in agg_dequeue - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() - net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick - net: sfp: add quirk for FLYPRO copper SFP+ module - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick - net: sfp: convert sfp quirks to modify struct sfp_module_support - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module - net: sfp: pre-parse the module support - net: sh_eth: Disable WoL if system can not suspend - net/smc: fix general protection fault in __smc_diag_dump - net/smc: fix mismatch between CLC header and proposal - net/smc: fix warning in smc_rx_splice() when calling get_page() - net: sock: fix hardened usercopy panic in sock_recv_errqueue - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() - net: stmmac: Correctly handle Rx checksum offload errors - net: stmmac: dwmac-rk: Fix disabling set_clock_selection - net: stmmac: est: Drop frames causing HLBS error - net: stmmac: fix rx limit check in stmmac_rx_zc() - net: stmmac: fix the crash issue for zero copy XDP_TX action - net: sxgbe: fix potential NULL dereference in sxgbe_rx() - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR - net: ti: icssg-prueth: Fix fdb hash size configuration - net: tls: Cancel RX async resync request on rcd_delta overflow - net: tls: Change async resync helpers argument - net: tunnel: make skb_vlan_inet_prepare() return drop reasons - net: tun: Update napi->skb after XDP process - net: update netdev_lock_{type,name} - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups - net: usb: asix_devices: Check return value of usbnet_get_endpoints - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock - net: usb: asix: validate PHY address before use - net: usb: dm9601: remove broken SR9700 support - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset - net: usb: pegasus: fix memory leak in update_eth_regs_async() - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup - net: usb: r8152: fix resume reset deadlock - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast - net: usb: rtl8150: Fix frame padding - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure - net: usb: sr9700: fix incorrect command used to write single register - net: usb: sr9700: support devices with virtual driver CD - net: use dst_dev_rcu() in sk_setup_caps() - net: vlan: sync VLAN features with lower device - net: wan: framer: pef2256: Switch to devm_mfd_add_devices() - net: wangxun: limit tx_max_coalesced_frames_irq - net: When removing nexthops, don't call synchronize_net if it is not necessary - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() - net: wwan: mhi: Keep modem name match with Foxconn T99W640 - net: wwan: t7xx: add support for HP DRMR-H01 - net: wwan: t7xx: fix potential skb->frags overflow in RX path - nexthop: Forbid FDB status change while nexthop is in a group - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). - nfc: nci: Fix race between rfkill and nci_unregister_device(). - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() - nfp: fix RSS hash key size when RSS is not supported - NFS4: Apply delay_retrans to async operations - NFS4: Fix state renewals missing after boot - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags - NFS: Avoid changing nlink when file removes and attribute updates race - NFS: check if suid/sgid was cleared after a write as needed - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes - NFSD/blocklayout: Fix minlength check in proc_layoutget - nfsd: check that server is running in unlock_filesystem - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap - nfsd: decouple the xprtsec policy check from check_nfsd_access() - NFSD: Define a proc_layoutcommit for the FlexFiles layout type - nfsd: don't use sv_nrthreads in connection limiting calculations. - nfsd: Drop dprintk in blocklayout xdr functions - nfsd: Drop the client reference in client_states_open() - nfsd: fix access checking for NLM under XPRTSEC policies - NFSD: Fix crash in nfsd4_read_release() - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() - nfsd: fix __fh_verify for localio - NFSD: Fix last write offset handling in layoutcommit - nfsd: fix memory leak in nfsd_create_serv error paths - nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT - NFSD: Fix permission check for read access to executable-only files - nfsd: fix refcount leak in nfsd_set_fh_dentry() - NFSD: free copynotify stateid in nfs4_free_ol_stateid() - NFSD: Implement large extent array support in pNFS - nfsd: Mark variable __maybe_unused to avoid W=1 build break - NFSD: Minor cleanup in layoutcommit processing - NFSD: net ref data still needs to be freed even if net hasn't startup - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry - NFSD: NFSv4 file creation neglects setting ACL - nfsd: provide locking for v4_end_grace - nfsd: refine and rename NFSD_MAY_LOCK - NFSD: Remove NFSERR_EAGAIN - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ - nfsd: Replace clamp_t in nfsd4_get_drc_mem() - NFSD: Replace use of NFSD_MAY_LOCK in nfsd4_lock() - NFSD: Rework encoding and decoding of nfsd4_deviceid - NFSD: Skip close replay processing if XDR encoding fails - nfsd: unregister with rpcbind when deleting a transport - nfsd: update percpu_ref to manage references on nfsd_net - nfsd: Use correct error code when decoding extents - nfsd: use correct loop termination in nfsd4_revoke_states() - NFSD: use correct reservation type in nfsd4_scsi_fence_client - NFS: Fix a deadlock involving nfs_release_folio() - NFS: Fix inheritance of the block sizes when automounting - NFS: Fix LTP test failures when timestamps are delegated - NFS: Fix up the automount fs_context to use the correct cred - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() - NFS: Initialise verifiers for visible dentries in readdir and lookup - nfs/localio: add direct IO enablement with sync and async IO support - nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter - nfs/localio: restore creds before releasing pageio data - NFS: nfs_invalidate_folio() must observe the offset and size arguments - NFS: Serialise O_DIRECT i/o and truncate() - NFS: sysfs: fix leak when nfs_client kobject add fails - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() - NFSv4.1: fix backchannel max_resp_sz verification check - NFSv4.1: fix mount hang after CREATE_SESSION failure - NFSv4.2: Serialise O_DIRECT i/o and clone range - NFSv4.2: Serialise O_DIRECT i/o and copy range - NFSv4.2: Serialise O_DIRECT i/o and fallocate() - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server - NFSv4: Don't clear capabilities that won't be reset - NFSv4: ensure the open stateid seqid doesn't go backwards - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() - NFSv4/flexfiles: Fix layout merge mirror check. - NFSv4: handle ERR_GRACE on delegation recalls - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid - nfs/vfs: discard d_exact_alias() - nilfs2: avoid having an active sc_timer before freeing sci - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* - nilfs2: Fix potential block overflow that cause system hang - nios2: ensure that memblock.current_limit is set when setting pfn limits - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot - NTB: epf: Allow arbitrary BAR mapping - ntfs3: Fix uninit buffer allocated by __getname() - ntfs3: fix uninit memory after failed mi_read in mi_format_new - ntfs3: init run lock for extend inode - ntfs3: pretend $Extend records as regular files - ntfs: Do not overwrite uptodate pages - ntfs: set dummy blocksize to read boot_block when mounting - null_blk: fix kmemleak by releasing references to fault configfs items - null_blk: Fix the description of the cache_size module argument - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() - nvme-auth: use kvfree() for memory allocated with kvcalloc() - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures - nvme-fc: don't hold rport lock when putting ctrl - nvme-fc: release admin tagset if init fails - nvme-fc: use lock accessing port_state and rport state - nvme: fix admin request_queue lifetime - nvme: fix PCIe subsystem reset controller state transition - nvme: fix PI insert on write - nvmem: layouts: fix automatic module loading - nvmem: layouts: fix nvmem_layout_bus_uevent - nvme-multipath: fix lockdep WARN due to partition scan work - nvme-multipath: Skip nr_active increments in RETRY disposition - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk - nvme-pci: disable secondary temp for Wodposit WPBSNM8 - nvme-pci: skip nvme_write_sq_db on empty rqlist - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec - nvme/tcp: handle tls partially sent records in write_space() - nvmet-fc: avoid scheduling association deletion twice - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() - nvme: Use non zero KATO for persistent discovery connections - objtool: Fix standalone --hacks=jump_label - objtool: Fix weak symbol detection - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type - objtool/LoongArch: Mark types based on break immediate code - objtool/rust: add one more `noreturn` Rust function - ocfs2: clear extent cache after moving/defragmenting extents - ocfs2: fix double free in user_cluster_connect() - ocfs2: fix kernel BUG in ocfs2_find_victim_chain - ocfs2: fix memory leak in ocfs2_merge_rec_left() - ocfs2: fix recursive semaphore deadlock in fiemap call - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() - octeon_ep: Fix memory leak in octep_device_setup() - octeon_ep: fix VF MAC address lifecycle handling - octeontx2-af: Fix error handling - octeontx2: cn10k: fix RX flowid TCAM mask handling - octeontx2: Fix otx2_dma_map_page() error return code - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() - of: fix reference count leak in of_alias_scan() - of: platform: Use default match table for /firmware - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify - once: fix race by moving DO_ONCE to separate section - openat2: don't trigger automounts with RESOLVE_NO_XDEV - openrisc: Add R_OR1K_32_PCREL relocation type module support - orangefs: fix xattr related buffer overflow... - padata: Reset next CPU when reorder sequence wraps around - page_pool: always add GFP_NOWARN for ATOMIC allocations - page_pool: Clamp pool size to max 16K pages - page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches - parisc: Avoid crash due to unaligned access in unwinder - parisc: Do not reprogram affinitiy on ASP chip - parisc: don't reference obsolete termio struct for TC* constants - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace - parisc: Remove spurious if statement from raw_copy_from_user() - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak - PCI: Add PCI_VDEVICE_SUB helper macro - PCI/AER: Fix missing uevent on recovery when a reset is requested - PCI/AER: Support errors introduced by PCIe r6.0 - PCI: brcmstb: Fix disabling L0s capability - PCI: brcmstb: Reuse pcie_cfg_data structure - PCI: brcmstb: Set MLW based on "num-lanes" DT property if present - PCI: cadence: Check for the existence of cdns_pcie::ops before using it - PCI: Disable MSI on RDC PCI to PCIe bridges - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() - PCI: endpoint: Avoid creating sub-groups asynchronously - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release - PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan() - PCI/ERR: Ensure error recoverability at all times - PCI/ERR: Fix uevent on failure to recover - PCI/ERR: Update device error_state already after reset - PCI: imx6: Enable the Vaux supply if available - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV - PCI: j721e: Fix incorrect error message in probe() - PCI: j721e: Fix programming sequence of "strap" settings - PCI: keystone: Exit ks_pcie_probe() for invalid mode - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths - PCI/PM: Skip resuming to D0 if device is disconnected - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 - PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion - PCI: rcar-gen4: Assure reset occurs before DBI access - PCI: rcar-gen4: Fix inverted break condition in PHY initialization - PCI: rcar-gen4: Fix PHY initialization - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock - PCI: rcar-host: Drop PMSR spinlock - PCI/sysfs: Ensure devices are powered for config reads - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() - PCI: tegra194: Handle errors in BPMP response - PCI: tegra194: Reset BARs when running in PCIe endpoint mode - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation - PCI: Test for bit underflow in pcie_set_readrq() - PCI: xilinx-nwl: Fix ECAM programming - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch - perf annotate: Check return value of evsel__get_arch() properly - perf/arm-cmn: Fix CMN S3 DTM offset - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() - perf arm_spe: Correct memory level for remote access - perf arm_spe: Correct setting remote access - perf arm-spe: Extend branch operations - perf arm_spe: Fix memset subclass in operation - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() - perf arm-spe: Rename the common data source encoding - perf/core: Fix address filter match with backing files - perf/core: Fix MMAP2 event device with backing files - perf/core: Fix MMAP event path names with backing files - perf disasm: Avoid undefined behavior in incrementing NULL - perf evsel: Avoid container_of on a NULL leader - perf evsel: Ensure the fallback message is always written to - perf: Have get_perf_callchain() return NULL if crosstask and user are set - perf hist: In init, ensure mem_info is put on error paths - perf lock contention: Load kernel map before lookup - perf python: split Clang options when invoking Popen - perf record: skip synthesize event when open evsel failed - perf: Remove get_perf_callchain() init_nr argument - perf: sched: Fix perf crash with new is_user_task() helper - perf session: Fix handling when buffer exceeds 2 GiB - perf: Simplify get_perf_callchain() user logic - perf: Skip user unwind if the task is a kernel thread - perf subcmd: avoid crash in exclude_cmds when excludes is empty - perf test: Add a test for default perf stat command - perf test: Don't leak workload gopipe in PERF_RECORD_* - perf test shell lbr: Avoid failures with perf event paranoia - perf test stat: Avoid hybrid assumption when virtualized - perf test trace_btf_enum: Skip if permissions are insufficient - perf test: Update sysfs path for core PMU caps - perf tools: Add fallback for exclude_guest - perf tools: Fix split kallsyms DSO counting - perf tools: Mark split kallsyms DSOs as loaded - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL - perf util: Fix compression checks returning -1 as bool - perf vendor events arm64 AmpereOneX: Fix typo - should be l1d_cache_access_prefetches - perf/x86/amd: Check event before enable to avoid GPF - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK - perf/x86/intel: Correct large PEBS flag check - perf/x86/intel/cstate: Remove PC3 support from LunarLake - perf/x86/intel: Do not enable BTS for guests - perf/x86/intel: Fix crash in icl_update_topdown_event() - perf/x86/intel: Fix KASAN global-out-of-bounds warning - phy: broadcom: bcm63xx-usbh: fix section mismatches - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) - phy: cadence: cdns-dphy: Enable lower resolutions in dphy - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine - phy: cdns-dphy: Store hs_clk_rate and return it - phy: drop probe registration printks - phy: freescale: imx8m-pcie: assert phy reset during power on - phy: freescale: Initialize priv->lock - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it - phy: mscc: Fix PTP for VSC8574 and VSC8572 - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path - phy: phy-snps-eusb2: refactor constructs names - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend - phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties - phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() - phy: rockchip: inno-usb2: fix communication disruption in gadget mode - phy: rockchip: inno-usb2: fix disconnection in gadget mode - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568 - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 - phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits - phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth - phy: stm32-usphyc: Fix off by one in probe() - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 - phy: tegra: xusb: fix device and OF node leak at probe - phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors - phy: ti: gmii-sel: fix regmap leak on probe failure - phy: ti: omap-usb2: fix device leak at unbind - phy: ti-pipe3: fix device leak at unbind - pid: Add a judgment for ns null in pid_nr_ns - pinctrl: check the return value of pinmux_ops::get_function_name() - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe() - pinctrl: keembay: release allocated memory in detach path - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver - pinctrl: meson-gxl: add missing i2c_d pinmux - pinctrl: meson: mark the GPIO controller as sleeping - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping - pinctrl: qcom: msm: Fix deadlock in pinmux configuration - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins - pinctrl: realtek: Select REGMAP_MMIO for RTD driver - pinctrl: renesas: rzg2l: Fix invalid unsigned return in rzg3s_oen_read() - pinctrl: renesas: rzg2l: Fix ISEL restore on resume - pinctrl: renesas: rzg2l: Fix PMC restore - pinctrl: renesas: Use int type to store negative error codes - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() - pinctrl: samsung: Drop unused S3C24xx driver data - pinctrl: single: fix bias pull up/down handling in pin_config_set - pinctrl: single: Fix incorrect type for error return variable - pinctrl: stm32: fix hwspinlock resource leak in probe function - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names - platform/x86: acer-wmi: Ignore backlight event - platform/x86/amd: Fix memory leak in wbrf_record() - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list - platform/x86/amd/pmf: Support new ACPI ID AMDI0108 - platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13 - platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led - platform/x86: classmate-laptop: Add missing NULL pointer checks - platform/x86: hp-bioscfg: Fix automatic module loading - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing - platform/x86: hp-bioscfg: Skip empty attribute names - platform/x86: huawei-wmi: add keys for HONOR models - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic - platform/x86: intel: chtwc_int33fe: don't dereference swnode args - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID - platform/x86: intel: punit_ipc: fix memory corruption - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos - platform/x86: intel_telemetry: Fix PSS event register mask - platform/x86: intel_telemetry: Fix swapped arrays in PSS output - platform/x86/intel/tpmi/plr: Make the file domain/status writeable - platform/x86/intel-uncore-freq: Fix warning in partitioned system - platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() - platform/x86: msi-laptop: add missing sysfs_remove_group() - platform/x86: msi-wmi-platform: Fix typo in WMI GUID - platform/x86: msi-wmi-platform: Only load on MSI devices - platform/x86: panasonic-laptop: Fix sysfs group leak in error path - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() - PM / devfreq: rockchip-dfi: double count on RK3588 - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate" - pmdomain: arm: scmi: Fix genpd leak on provider registration failure - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup - pmdomain: imx: Fix reference count leak in imx_gpc_probe() - pmdomain: imx: Fix reference count leak in imx_gpc_remove - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state - pmdomain: samsung: plug potential memleak during probe - PM: EM: Drop unused parameter from em_adjust_new_capacity() - PM: EM: Fix incorrect description of the cost field in struct em_perf_state - PM: EM: Fix late boot with holes in CPU topology - PM: EM: Move CPU capacity check to em_adjust_new_capacity() - PM: EM: Slightly reduce em_check_capacity_update() overhead - PM: hibernate: Emit an error when image writing fails - PM: hibernate: Use atomic64_t for compressed_size variable - PM: runtime: Add new devm functions - PM: runtime: Do not clear needs_force_resume with enabled runtime PM - PM: sleep: core: Clear power.must_resume in noirq suspend error path - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() - pNFS: Fix a deadlock when returning a delegation during open() - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS - posix-clock: Store file pointer in struct posix_clock_context - powercap: fix race condition in register_control_type() - powercap: fix sscanf() error return value handling - powerpc/32: Fix unpaired stwcx. on interrupt exit - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure - powerpc/603: Really copy kernel PGD entries into all PGDIRs - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format - powerpc/64s/slb: Fix SLB multihit issue during SLB preload - powerpc/8xx: Remove left-over instruction and comments in DataStoreTLBMiss handler - powerpc/addnote: Fix overflow on 32-bit builds - powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() - powerpc/eeh: Use result of error_detected() in uevent - powerpc/kdump: Fix size calculation for hot-removed memory ranges - powerpc/kexec: Enable SMT before waking offline CPUs - powerpc, mm: Fix mprotect on book3s 32-bit - powerpc/powernv/pci: Fix underflow and leak issue - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION - powerpc/pseries/msi: Fix potential underflow and leak issue - power: supply: apm_power: only unset own apm_get_power_status - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery - power: supply: bq27xxx: restrict no-battery detection to bq27000 - power: supply: cw2015: Check devm_delayed_work_autocancel() return code - power: supply: cw2015: Fix a alignment coding style issue - power: supply: max17040: Check iio_read_channel_processed() return code - power: supply: max77976_charger: fix constant current reporting - power: supply: qcom_battmgr: add OOI chemistry - power: supply: qcom_battmgr: handle charging state change notifications - power: supply: rt5033_charger: Fix device node reference leaks - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() - power: supply: sbs-charger: Support multiple devices - power: supply: wm831x: Check wm831x_set_bits() return value - pps: fix warning in pps_register_cdev when register device fail - proc: fix the issue of proc_mem_open returning NULL - proc: fix type confusion in pde_set_flags() - procfs: avoid fetching build ID while holding VMA lock - proc: proc_maps_open allow proc_mem_open to return NULL - ps3disk: use memcpy_{from,to}_bvec index - ptp: Add a upper bound on max_vclocks - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. - ptp: Limit time setting of PTP clocks - ptp: ocp: Fix typo using index 1 instead of i in SMA initialization loop - pwm: bcm2835: Make sure the channel is enabled after pwm_request() - pwm: berlin: Fix wrong register in suspend/resume - pwm: pca9685: Use bulk write to atomicially update registers - pwm: stm32: Always program polarity - pwm: tiehrpwm: Don't drop runtime PM reference in .free() - pwm: tiehrpwm: Fix corner case in clock divisor calculation - pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation - pwm: tiehrpwm: Make code comment in .free() more useful - qed: Don't collect too many protection override GRC elements - r8152: add error handling in rtl8152_driver_init - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H - r8169: fix RTL8117 Wake-on-Lan in DASH mode - r8169: set EEE speed down ratio to 1 - RAS: Report all ARM processor CPER information to userspace - rbd: check for EOD after exclusive lock is ensured to be held - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() - RDMA/bnxt_re: fix dma_free_coherent() pointer - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() - RDMA/bnxt_re: Fix the inline size for GenP7 devices - RDMA/bnxt_re: Fix to use correct page size for PDE table - RDMA/bnxt_re: Pass correct flag for dma mr creation - RDMA/cm: Fix leaking the multicast GID table reference - RDMA/cm: Rate limit destroy CM ID timeout error message - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() - RDMA/core: Resolve MAC of next-hop device without ARP support - RDMA/efa: Remove possible negative shift - RDMA/hns: Fix recv CQ and QP cache affinity - RDMA/hns: Fix the modification of max_send_sge - RDMA/hns: Fix wrong WQE data when QP wraps around - RDMA/irdma: avoid invalid read in irdma_net_event - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY - RDMA/irdma: Fix data race in irdma_free_pble - RDMA/irdma: Fix data race in irdma_sc_ccq_arm - RDMA/irdma: Fix SD index calculation - RDMA/irdma: Remove unused struct irdma_cq fields - RDMA/irdma: Set irdma_cq cq_num field during CQ create - RDMA/irdma: Update Kconfig - RDMA/mana_ib: Handle net event for pointing to the current netdev - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count - RDMA/mlx5: Fix vport loopback forcing for MPV device - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation - RDMA/rtrs: server: Fix error handling in get_or_create_srv - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure - RDMA/rxe: Fix race in do_task() when draining - RDMA/siw: Always report immediate post SQ errors - rds: Fix endianness annotation for RDS_MPATH_HASH - rds: ib: Increment i_fastreg_wrs before bailing out - regmap: Fix race condition in hwspinlock irqsave routine - regmap: maple: free entry on mas_store_gfp() failure - regmap: Remove superfluous check for !config in __regmap_init() - regmap: slimbus: fix bus_context pointer in regmap init calls - regulator: core: disable supply if enabling main regulator fails - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex - regulator: fixed: fix GPIO descriptor leak on register failure - regulator: fixed: Rely on the core freeing the enable GPIO - regulator: scmi: Use int type to store negative error codes - regulator: sy7636a: fix lifecycle of power good gpio - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice - remoteproc: qcom: q6v5: Avoid handling handover twice - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper - reset: fix BIT macro reference - resource: introduce is_type_match() helper and use it - resource: replace open coded resource_intersection() - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" - Revert "cpuidle: menu: Avoid discarding useful information" - Revert "driver core: enforce device_lock for driver_match_device()" - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" - Revert "drm/amd/display: Fix pbn to kbps Conversion" - Revert "drm/amd/display: Move setup_stream_attribute" - Revert "drm/amd/display: Optimize cursor position updates" - Revert "drm/amd: Skip power ungate during suspend for VPE" - Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)" - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader" - Revert "gfs2: Fix use of bio_chain" - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" - Revert "iommu/amd: Skip enabling command/event buffers for kdump" - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" - Revert "ipmi: fix msg stack when IPMI is disconnected" - Revert "mtd: rawnand: marvell: fix layouts" - Revert "netfilter: nf_tables: Reintroduce shortened deletion notifications" - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" - Revert "nfc/nci: Add the inconsistency check between the input data length and count" - Revert "nfs: clear SB_RDONLY before getting superblock" - Revert "nfs: ignore SB_RDONLY when mounting nfs" - Revert "nfs: ignore SB_RDONLY when remounting nfs" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "RDMA/irdma: Update Kconfig" - Revert "SUNRPC: Don't allow waiting for exiting tasks" - Revert "udmabuf: fix vmap_udmabuf error page set" - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" - Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" - Revert "wireguard: device: enable threaded NAPI" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used - riscv: bpf: Fix uninitialized symbol 'retval_off' - riscv, bpf: Sign extend struct ops return values properly - riscv: Build loader.bin exclusively for Canaan K210 - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors - riscv: clocksource: Fix stimecmp update hazard on RV32 - riscv: compat: fix COMPAT_UTS_MACHINE definition - RISC-V: Define pgprot_dmacoherent() for non-coherent devices - RISC-V: Don't print details of CPUs disabled in DT - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id() - riscv: kprobes: Fix probe address validation - RISC-V: KVM: Fix guest page fault within HLV* instructions - riscv: pgtable: Cleanup useless VA_USER_XXX definitions - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro - RISC-V: Remove unnecessary include from compat.h - riscv: Sanitize syscall table indexing under speculation - riscv: stacktrace: Disable KASAN checks for non-current tasks - rocker: fix memory leak in rocker_world_port_post_fini() - romfs: check sb_set_blocksize() return value - rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table - rpmsg: glink: fix rpmsg device leak - rseq: Protect event mask against membarrier IPI - rseq/selftests: Use weak symbol reference, not definition, to link with glibc - rtc: gamecube: Check the return value of ioremap() - rtc: interface: Ensure alarm irq is enabled when UIE is enabled - rtc: interface: Fix long-standing race when setting alarm - rtc: optee: fix memory leak on driver removal - rtc: pcf2127: clear minute/second interrupt - rtc: pcf2127: fix SPI command byte for PCF2131 backport - rtc: pcf2127: fix watchdog interrupt mask on pcf2131 - rtc: rx8025: fix incorrect register reference - rtc: x1205: Fix Xicor X1205 vendor prefix - rtnetlink: Allow deleting FDB entries in user namespace - rust: Add -fno-isolate-erroneous-paths-dereference to bindgen_skip_c_flags - rust: block: fix `srctree/` links - rust: cfi: only 64-bit arm and x86 support CFI_CLANG - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target - rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0 - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects - rust: kbuild: workaround `rustdoc` doctests modifier bug - rust: rbtree: fix documentation typo in CursorMut peek_next method - rxrpc: Fix data-race warning and potential load/store tearing - s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR - s390/ap: Don't leak debug feature files if AP instructions are not available - s390/ap: Fix wrong APQN fill calculation - s390/bpf: Centralize frame offset calculations - s390/bpf: Describe the frame using a struct instead of constants - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG - s390/cio: Update purge function to unregister the unused subchannels - s390/cpum_cf: Deny all sampling events by counter PMU - s390/ctcm: Fix double-kfree - s390/dasd: enforce dma_alignment to ensure proper buffer validation - s390/dasd: Fix gendisk parent after copy pair swap - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP - s390/ipl: Clear SBP flag when bootprog is set - s390/mm: Fix memory leak in add_marker() when kvrealloc() fails - s390/mm: Fix __ptep_rdp() inline assembly - s390/mm: Use __GFP_ACCOUNT for user page table allocations - s390/pai: Deny all events not handled by this PMU - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump - s390/pci: Restore IRQ unconditionally for the zPCI device - s390/pci: Use pci_uevent_ers() in PCI recovery - s390/smp: Fix fallback CPU detection - s390/vmlinux.lds.S: Move .vmlinux.info to end of allocatable sections - s390: vmlinux.lds.S: Reorder sections - samples/ftrace: Adjust LoongArch register restore order in direct calls - samples: work around glibc redefining some of our defines wrong - sched/deadline: Document dl_server - sched/deadline: Fix race in push_dl_task() - sched/deadline: Fix 'stuck' dl_server - sched/deadline: only set free_cpus for online runqueues - sched/eevdf: Fix min_vruntime vs avg_vruntime - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() - sched_ext: Fix possible deadlock in the deferred_irq_workfn() - sched_ext: Fix unsafe locking in the scx_dump_state() - sched_ext: Make qmap dump operation non-destructive - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU - sched/fair: Block delayed tasks on throttled hierarchy during dequeue - sched/fair: Fix pelt clock sync when entering idle - sched/fair: Fix pelt lost idle time detection - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out - sched/fair: Forfeit vruntime on yield - sched/fair: Proportional newidle balance - sched/fair: Revert max_newidle_lb_cost bump - sched/fair: Small cleanup to sched_balance_newidle() - sched/fair: Small cleanup to update_newidle_cost() - sched: Remove never used code in mm_cid_get() - sched/rt: Fix race in push_rt_task - scripts/faddr2line: Fix "Argument list too long" error - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep - scripts: generate_rust_analyzer: compile sysroot with correct edition - scripts: generate_rust_analyzer: remove sysroot assertion - scs: fix a wrong parameter in __scs_magic - scsi: aic94xx: fix use-after-free in device removal path - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() - scsi: core: Fix a regression triggered by scsi_host_busy() - scsi: core: Fix error handler encryption support - scsi: core: Wake up the error handler when final completions race against each other - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() - scsi: imm: Fix use-after-free bug caused by unfinished delayed work - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted - scsi: lpfc: Define size of debugfs entry for xri rebalancing - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup - scsi: mpi3mr: Fix controller init failure on fault during queue creation - scsi: mpi3mr: Fix I/O failures during controller reset - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue - scsi: myrs: Fix dma_alloc_coherent() error check - scsi: pm8001: Use int instead of u32 to store error codes - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod - scsi: pm80xx: Fix race condition caused by static variables - scsi: qla2xxx: Allow recovery for tape devices - scsi: qla2xxx: Delay module unload while fabric scan in progress - scsi: qla2xxx: edif: Fix dma_free_coherent() size - scsi: qla2xxx: edif: Fix incorrect sign of error code - scsi: qla2xxx: Fix bsg_done() causing double free - scsi: qla2xxx: Fix improper freeing of purex item - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp() - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled - scsi: qla2xxx: Free sp in error path to fix system crash - scsi: qla2xxx: Query FW again before proceeding with login - scsi: qla2xxx: Sanitize payload size to prevent member overflow - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp - scsi: qla2xxx: Validate sp before freeing associated memory - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" - scsi: scsi_debug: Fix atomic write enable module param description - scsi: sd: Fix build warning in sd_revalidate_disk() - scsi: sg: Do not sleep in atomic context - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls - scsi: smartpqi: Add support for Hurray Data new controller PCI device - scsi: smartpqi: Fix device resources accessed after device removal - scsi: stex: Fix reboot_notifier leak in probe error path - scsi: storvsc: Process unsupported MODE_SENSE_10 - scsi: target: Do not write NUL characters into ASCII configfs output - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() - scsi: target: Reset t_task_cdb pointer in error case - scsi: target: target_core_configfs: Add length check to avoid buffer overflow - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() - scsi: ufs: core: Add a quirk to suppress link_startup_again - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error - scsi: ufs: core: Disable timestamp functionality if not supported - scsi: ufs: core: Fix EH failure after W-LUN resume error - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS - scsi: ufs: core: Initialize value of an attribute returned by uic cmd - scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on suspend - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change - scsi: ufs: host: mediatek: Change reset sequence for improved stability - scsi: ufs: host: mediatek: Correct system PM flow - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure - scsi: ufs: host: mediatek: Enhance recovery on resume failure - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling - scsi: ufs: host: mediatek: Fix PWM mode switch issue - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition - scsi: ufs: host: mediatek: Fix unbalanced IRQ enable issue - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() - sctp: avoid NULL dereference when chunk data buffer is missing - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). - sctp: Fix MAC comparison to be constant-time - sctp: Hold RCU read lock while iterating over address list - sctp: Hold sock lock while iterating over address list - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto - sctp: Prevent TOCTOU out-of-bounds write - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast - seccomp: passthrough uprobe systemcall without filtering - selftest/ptp: update ptp selftest to exercise the gettimex options - selftests: arg_parsing: Ensure data is flushed to disk before reading. - selftests: arm64: Check fread return value in exec_target - selftests: bonding: add delay before each xvlan_over_bond connectivity check - selftests: bonding: add ipvlan over bond testing - selftests/bpf: Check for timeout in perf_link test - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 - selftests/bpf: Fix failure paths in send_signal test - selftests/bpf: Fix flaky bpf_cookie selftest - selftests/bpf: Fix selftest verifier_arena_large failure - selftests/bpf: Improve reliability of test_perf_branches_no_hw() - selftests/bpf: make arg_parsing.c more robust to crashes - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms - selftests/bpf: Test invalid narrower ctx load - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh - selftests: Disable dad for ipv6 in fcnal-test.sh - selftests: drv-net: fix RPS mask handling for high CPU numbers - selftests: drv-net: rss_ctx: fix the queue count check - selftests: drv-net: rss_ctx: make the test pass with few queues - selftests: fib_nexthops: Fix creation of non-FDB nexthops - selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt - selftests/ftrace: traceonoff_triggers: strip off names - selftests/landlock: Fix TCP bind(AF_UNSPEC) test case - selftests/landlock: Properly close a file descriptor - selftests/landlock: Remove invalid unix socket bind() - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled - selftests: mptcp: avoid spurious errors on TCP disconnect - selftests: mptcp: check no dup close events after error - selftests: mptcp: check subflow errors in close events - selftests: mptcp: connect: catch IO errors on listen side - selftests: mptcp: connect: fix fallback note due to OoO - selftests: mptcp: connect: trunc: read all recv data - selftests: mptcp: disable add_addr retrans in endpoint_tests - selftests: mptcp: join: allow more time to send ADD_ADDR - selftests: mptcp: join: endpoints: longer timeout - selftests: mptcp: join: endpoints: longer transfer - selftests: mptcp: join: fix local endp not being tracked - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported - selftests: mptcp: join: mark implicit tests as skipped if not supported - selftests: mptcp: join: properly kill background tasks - selftests: mptcp: join: rm: set backup flag - selftests: mptcp: join: userspace: longer timeout - selftests: mptcp: join: userspace: longer transfer - selftests: mptcp: join: validate C-flag + def limit - selftests: mptcp: pm: ensure unknown flags are ignored - selftests: mptcp: sockopt: fix error messages - selftests: mptcp: userspace pm: validate deny-join-id0 flag - selftests: net: amt: wait longer for connection before sending packets - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh - selftests/net: Ensure assert() triggers in psock_tpacket.c - selftests: net: fib-onlink-tests: Convert to use namespaces by default - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel - selftests: netfilter: query conntrack state to check for port clash resolution - selftests: net: fix "buffer overflow detected" for tap.c - selftests/net: fix out-of-order delivery of FIN in gro:tcp test - selftests: net: fix server bind failure in sctp_vrf.sh - selftests: net: lib: Do not overwrite error messages - selftests: net: local_termination: Wait for interfaces to come up - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 - selftests: net: replace sleeps in fcnal-test with waits - selftests: net: use BASH for bareudp testing - selftests/net: use destination options instead of hop-by-hop - selftests/nolibc: fix EXPECT_NZ macro - selftests: Replace sleep with slowwait - selftests: traceroute: Return correct value on failure - selftests: traceroute: Use require_command() - selftests/tracing: Run sample events to clear page cache events - selftests/user_events: fix type cast for write_index packed member in perf_test - selftests: vDSO: Fix -Wunitialized in powerpc VDSO_CALL() wrapper - selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing vDSO - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported - serial: 8250_dw: handle reset control deassert error - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 - serial: 8250_mtk: Enable baud clock and manage in runtime PM - serial: 8250_pci: Fix broken RS485 for F81504/508/512 - serial: add support of CPCI cards - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking - serial: core: fix OF node leak - serial: core: Fix serial device initialization - serial: core: Restore sysfs fwnode information - serial: max310x: Add error checking in probe() - serial: sc16is7xx: fix bug in flow control levels init - serial: sc16is7xx: remove useless enable of enhanced features - serial: sh-sci: Check that the DMA cookie is valid - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready - serial: stm32: allow selecting console when the driver is module - serial: xilinx_uartps: fix rs485 delay_rts_after_send - serial: xilinx_uartps: Use helper function hrtimer_update_function() - sfc: fix NULL dereferences in ef100_process_design_param() - sfc: fix potential memory leak in efx_mae_process_mport() - shmem: fix recovery on rename failures - shmem: fix tmpfs reconfiguration (remount) when noswap is set - simplify nfs_atomic_open_v23() - slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts - slab: Fix obj_ext mistakenly considered NULL due to race condition - slab: mark slab->obj_exts allocation failures unconditionally - slab: prevent warnings when slab obj_exts vector allocation fails - slab: reset slab->obj_ext when freeing and it is OBJEXTS_ALLOC_FAIL - slimbus: core: fix device reference leak on report present - slimbus: core: fix runtime PM imbalance on report present - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves - smack: always "instantiate" inode in smack_inode_init_security() - smack: deduplicate "does access rule request transmutation" - smack: deduplicate xattr setting in smack_inode_init_security() - smack: fix bug: invalid label of unix socket file - smack: fix bug: setting task label silently ignores input garbage - smack: fix bug: SMACK64TRANSMUTE set on non-directory - smack: fix bug: unprivileged task can create labels - smb: client: fix cifs_pick_channel when channel needs reconnect - smb: client: fix crypto buffers in non-linear memory - smb: client: fix filename matching of deferred files - smb: client: fix incomplete backport in cfids_invalidation_worker() - smb: client: fix memory leak in cifs_construct_tcon() - smb/client: fix memory leak in smb2_open_file() - smb: client: fix missing timestamp updates after utime(2) - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value - smb/client: fix NT_STATUS_NO_DATA_DETECTED value - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value - smb: client: fix potential cfid UAF in smb2_query_info_compound - smb: client: fix potential UAF in smb2_close_cached_fid() - smb: client: Fix refcount leak for cifs_sb_tlink - smb: client: fix refcount leak in smb2_set_path_attr - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path - smb: client: fix wrong index reference in smb2_compound_op() - smb: client: introduce close_cached_dir_locked() - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) - smb: client: split cached_fid bitfields to avoid shared-byte RMW races - smb: client: transport: avoid reconnects triggered by pending task work - smb: client: validate change notify buffer before copy - smb: fix invalid username check in smb3_fs_context_parse_param() - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() - smb: server: don't use delayed_work for post_recv_credits_work - smb: server: fix IRD/ORD negotiation with the client - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() - smb/server: fix possible memory leak in smb2_read() - smb/server: fix possible refcount leak in smb2_sess_setup() - smb/server: fix refcount leak in parse_durable_handle_context() - smb/server: fix refcount leak in smb2_open() - smb/server: fix return value of smb2_ioctl() - smb: server: let smb_direct_flush_send_list() invalidate a remote key first - smb: server: use disable_work_sync in transport_rdma.c - smc91x: fix broken irq-context in PREEMPT_RT - smp: Fix up and expand the smp_call_function_many() kerneldoc - smsc911x: add second read of EEPROM mac when possible corruption seen - soc: amlogic: canvas: fix device leak on lookup - soc: apple: mailbox: fix device leak on lookup - soc: aspeed: socinfo: Add AST27xx silicon IDs - soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure - soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure - soc: qcom: gsbi: fix double disable caused by devm - soc: qcom: ocmem: fix device leak on lookup - soc: qcom: pbs: fix device leak on lookup - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS - soc: qcom: smem: Fix endian-unaware access of num_entries - soc: qcom: smem: fix hwspinlock resource leak in probe error paths - soc: samsung: exynos-pmu: fix device leak on regmap lookup - soc: Switch back to struct platform_driver::remove() - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups - soc/tegra: fuse: Do not register SoC device on ACPI boot - soc: ti: pruss: don't use %pK through printk - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter - sparc64: fix hugetlb for sun4u - sparc64: fix prototypes of reads[bwl]() - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 - sparc: fix error handling in scan_one_device() - sparc/module: Add R_SPARC_UA64 relocation handling - spi: airoha: add support of dual/quad wires spi modes to exec_op() handler - spi: airoha: do not keep {tx,rx} dma buffer always mapped - spi: airoha: fix reading/writing of flashes with more than one plane per lun - spi: airoha: return an error for continuous mode dirmap creation cases - spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND - spi: airoha: switch back to non-dma mode in the case of error - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors - spi: bcm63xx: fix premature CS deassertion on RX-only transactions - spi: cadence-quadspi: Fix clock disable on probe failure path - spi: cadence-quadspi: Fix cqspi_setup_flash() - spi: cadence-quadspi: Flush posted register writes before DAC access - spi: cadence-quadspi: Flush posted register writes before INDAC access - spi: cadence-quadspi: Prevent lost complete() call during indirect read - spi: ch341: fix out-of-bounds memory access in ch341_transfer_one - spi: fix return code when spi device has too many chipselects - spi: fsl-cpm: Check length parity before switching to 16 bit mode - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization - spi: imx: keep dma request disabled before dma transfer setup - spi: loopback-test: Don't use %pK through printk - spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ - spi: nxp-fspi: Propagate fwnode in ACPI case as well - spi: nxp-fspi: Support per spi-mem operation frequency switches - spi: rpc-if: Add resume support for RZ/G3E - spi: spi-mem: Add a new controller capability - spi: spi-mem: Allow specifying the byte order in Octal DTR mode - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency - spi: spi-nxp-fspi: add extra delay after dll locked - spi: spi-nxp-fspi: Add OCT-DTR mode support - spi: spi-nxp-fspi: Check return value of devm_mutex_init() - spi: spi-nxp-fspi: remove the goto in probe - spi: spi-sprd-adi: Fix double free in probe error path - spi: tegra114: Preserve SPI mode bits in def_command1_reg - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA - spi: tegra210-quad: Fix timeout handling - spi: tegra210-quad: Move curr_xfer read inside spinlock - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer - spi: tegra: Fix a memory leak in tegra_slink_probe() - spi: Try to get ACPI GPIO IRQ earlier - spi: xilinx: increase number of retries before declaring stall - Squashfs: add additional inode sanity checking - Squashfs: fix uninit-value in squashfs_get_parent - Squashfs: reject negative file sizes in squashfs_read_inode() - staging: axis-fifo: fix maximum TX packet length check - staging: axis-fifo: fix TX handling on copy_from_user() failure - staging: axis-fifo: flush RX FIFO on read errors - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() - staging: rtl8712: Remove driver using deprecated API wext - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing - statmount: don't call path_put() under namespace semaphore - strparser: Fix signed/unsigned mismatch bug - SUNRPC: call xs_sock_process_cmsg for all cmsg - sunrpc: fix null pointer dereference on zero-length checksum - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf - svcrdma: bound check rq_pages index in inline path - svcrdma: return 0 on success from svc_rdma_copy_inline_range - svcrdma: use rc_pageoff for memcpy byte offset - task_work: Fix NMI race condition - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. - tcp: cache RTAX_QUICKACK metric in a hot cache line - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). - tcp: convert to dev_net_rcu() - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). - tcp: fix __tcp_close() to only send RST when required - tcp: fix tcp_tso_should_defer() vs large RTT - tcpm: allow looking for role_sw device in the main node - tcp_metrics: use dst_dev_net_rcu() - tcpm: switch check for role_sw device with fw_node - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() - team: fix check for port enabled in team_queue_override_port_prio_changed() - team: Move team device type change at the end of team_port_add - tee: allow a driver to allocate a tee_device without a pool - tee: fix register_shm_helper() - testptp: Add option to open PHC in readonly mode - textsearch: describe @list member in ts_ops search - tg3: prevent use of uninitialized remote_adv and local_adv variables - thermal/drivers/qcom/lmh: Add missing IRQ includes - thermal/drivers/qcom: Make LMH select QCOM_SCM - thermal: gov_step_wise: Allow cooling level to be reduced earlier - thermal: intel: selftests: workload_hint: Mask unsupported types - thunderbolt: Add support for Intel Wildcat Lake - thunderbolt: Use is_pciehp instead of is_hotplug_bridge - timers: Fix NULL function pointer race in timer_shutdown_sync() - tipc: Fix use-after-free in tipc_mon_reinit_self(). - tipc: use kfree_sensitive() for session key material - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx - tls: always set record_type in tls_process_cmsg - tls: don't rely on tx_work during send() - tls: make sure to abort the stream if headers are bogus - tls: trim encrypted message to match the plaintext on short splice - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). - tls: wait for async encrypt in case of error during latter iterations of sendmsg - tls: wait for pending async decryptions if tls_strp_msg_hold fails - tools bitmap: Add missing asm-generic/bitsperlong.h include - tools build: Align warning options with perf - tools/cpupower: fix error return value in cpupower_write_sysfs() - tools/cpupower: Fix incorrect size in cpuidle_state_disable() - tools: lib: thermal: don't preserve owner in install - tools: lib: thermal: use pkg-config to locate libnl3 - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set - tools/power turbostat: fix GCC9 build regression - tools/power x86_energy_perf_policy: Enhance HWP enable - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage - tools/power x86_energy_perf_policy: Prefer driver HWP limits - tools: riscv: Fixed misalignment of CSR related definitions - tools/testing/nvdimm: Use per-DIMM device handle - tools: ynl: fix string attribute length to include null terminator - tools: ynl: Specify --no-line-number in ynl-regen.sh. - tpm2-sessions: Fix out of range indexing in name_size - tpm2-sessions: Fix tpm2_read_public range checks - tpm: Cap the number of PCR banks - tpm: Compare HMAC values in constant time - tpm: Disable TPM2_TCG_HMAC by default - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single - trace/fgraph: Fix error handling - tracefs: fix a leak in eventfs_create_events_dir() - tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow - tracing: Do not register unsupported perf events - tracing: dynevent: Add a missing lockdown check on dynevent - tracing: Fix crash on synthetic stacktrace field usage - tracing: Fix fixed array of synthetic event - tracing: Fix ftrace event field alignments - tracing: Fix memory leaks in create_field_var() - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference - tracing: Fix tracing_marker may trigger page fault during preempt_disable - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs - tracing: Silence warning when chunk allocation fails in trace_pid_write - tracing/tools: Fix incorrcet short option in usage text for --threads - tty: fix tty_port_tty_*hangup() kernel-doc - tty: hvc_console: Call hvc_kick in hvc_write unconditionally - tty: introduce and use tty_port_tty_vhangup() helper - tty: n_gsm: Don't block input queue by waiting MSC - tty: serial: ip22zilog: Use platform device for probing - tty: serial: Modify the use of dev_err_probe() - tty/vt: Add missing return value for VT_RESIZE in vt_ioctl() - tty/vt: fix up incorrect backport to stable releases - tunnels: reset the GSO metadata before reusing the skb - uacce: ensure safe queue release with state management - uacce: fix cdev handling in the cleanup path - uacce: fix isolate sysfs check condition - uacce: implement mremap in uacce_vm_ops to return -EPERM - ublk: fix deadlock when reading partition table - ublk: prevent invalid access with DEBUG - udmabuf: fix a buf size overflow issue during udmabuf creation - udp_tunnel: use netdev_warn() instead of netdev_WARN() - uio_hv_generic: Let userspace take care of interrupt mask - uio_hv_generic: Set event for all channels on the device - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe - um: Don't rename vmap to kernel_vmap - um: Fix FD copy size in os_rcv_fd_msg() - um: Fix help message for ssl-non-raw - um: virtio_uml: Fix use-after-free after put_device in probe - Unbreak 'make tools/*' for user-space targets - uprobe: Do not emulate/sstep original instruction when ip is changed - uprobes: uprobe_warn should use passed task - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call - usb: cdns3: Fix double resource release in cdns3_pci_probe - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget - usb: chaoskey: fix locking for O_NONBLOCK - usb: core: Add 0x prefix to quirks debug output - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor - usb/core/quirks: Add Huawei ME906S to wakeup quirk - usb: dwc2: disable platform lowlevel hw resources during shutdown - usb: dwc2: fix hang during shutdown if set as peripheral - usb: dwc2: fix hang during suspend if set as peripheral - usb: dwc3: Check for USB4 IP_NAME - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths - usb: dwc3: keep susphy enabled during exit to avoid controller faults - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe - usb: dwc3: pci: add support for the Intel Nova Lake -S - usb: dwc3: pci: Sort out the Intel device IDs - USB: Fix descriptor count when handling invalid MBIM extended descriptor - usb: gadget: configfs: Correctly set use_os_string at bind - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels - usb: gadget: f_acm: Refactor bind path to use __free() - usb: gadget: f_ecm: Refactor bind path to use __free() - usb: gadget: f_eem: Fix memory leak in eem_unwrap - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. - usb: gadget: f_hid: Fix zero length packet transfer - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet - usb: gadget: f_ncm: Refactor bind path to use __free() - usb: gadget: f_rndis: Refactor bind path to use __free() - usb: gadget: Introduce free_usb_request helper - usb: gadget: lpc32xx_udc: fix clock imbalance in error path - usb: gadget: midi2: Fix MIDI2 IN EP max packet size - usb: gadget: midi2: Fix missing UMP group attributes initialization - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors - usb: gadget: Store endpoint pointer in usb_request - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt - usb: gadget: udc: fix use-after-free in usb_gadget_state_work - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup - usbip: Fix locking bug in RT-enabled kernels - USB: lpc32xx_udc: Fix error handling in probe - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs - usbnet: Fix using smp_processor_id() in preemptible code warnings - usbnet: limit max_mtu based on device's hard_mtu - usbnet: Prevents free active kevent - usb: ohci-nxp: fix device leak on probe failure - USB: OHCI/UHCI: Add soft dependencies on ehci_platform - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal - usb: phy: Initialize struct usb_phy list_head - usb: phy: isp1301: fix non-OF device reference imbalance - usb: phy: twl6030: Fix incorrect type for ret - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE - usb: raw-gadget: do not limit transfer length - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() - usb: renesas_usbhs: Fix synchronous external abort on unbind - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable - USB: serial: ftdi_sio: add support for u-blox EVK-M101 - USB: serial: ftdi_sio: match on interface number for jtag - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC - USB: serial: option: add Foxconn T99W760 - USB: serial: option: add Quectel RG255C - USB: serial: option: add SIMCom 8230C compositions - USB: serial: option: add support for Rolling RW101R-GL - USB: serial: option: add Telit Cinterion FE910C04 new compositions - USB: serial: option: add Telit Cinterion FN990A w/audio compositions - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions - USB: serial: option: add Telit FN920C04 ECM compositions - USB: serial: option: add Telit FN920C04 RNDIS compositions - USB: serial: option: add Telit LE910 MBIM composition - USB: serial: option: add UNISOC UIS7720 - USB: serial: option: move Telit 0x10c7 composition in the right place - usb: storage: Fix memory leak in USB bulk transport - USB: storage: Remove subclass and protocol overrides from Novatek quirk - usb: storage: sddr55: Reject out-of-bound new_pba - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() - usb: typec: tcpm: properly deliver cable vdms to altmode drivers - usb: typec: tipd: Clear interrupts first - usb: typec: ucsi: Handle incorrect num_connectors capability - usb: typec: ucsi: psy: Set max current to zero when disconnected - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer - usb: udc: Add trace event for usb_gadget_set_state - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. - usb: vhci-hcd: Prevent suspending virtually attached devices - usb: xhci: introduce macro for ring segment list iteration - usb: xhci: limit run_graceperiod for only usb 3.0 devices - usb: xhci-pci: add support for hosts with zero USB3 ports - usb: xhci-pci: Fix USB2-only root hub registration - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices - usb: xhci: remove option to change a default ring's TRB cycle bit - vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues - vdpa/pds: use %pe for ERR_PTR() in event handler registration - vdso: Add struct __kernel_old_timeval forward declaration to gettime.h - veth: apply qdisc backpressure on full ptr_ring to reduce TX drops - veth: fix data race in veth_get_ethtool_stats - veth: more robust handing of race to avoid txq getting stuck - veth: prevent NULL pointer dereference in veth_xdp_rcv - veth: reduce XDP no_direct return section to fix race - vfio/pci: Disable qword access to the PCI ROM bar - vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices - vfio/pci: Use RCU for error/request triggers to avoid circular locking - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() - vfio/pds: replace bitmap_free with vfree - vfio: return -ENOTTY for unsupported device feature - vfs: Don't leak disconnected dentries on umount - vhost: Fix kthread worker cgroup failure handling - vhost: Take a reference on the task in struct vhost_task. - vhost: vringh: Fix copy_to_iter return value check - vhost: vringh: Modify the return value check - vhost/vsock: Allocate nonlinear SKBs for handling large receive buffers - vhost/vsock: improve RCU read sections around vhost_vsock_get() - via_wdt: fix critical boot hang due to unnamed resource allocation - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 - virtio_console: fix order of fields cols and rows - virtio: fix grammar in virtio_queue_info docs - virtio: fix typo in virtio_device_ready() comment - virtio: fix virtqueue_set_affinity() docs - virtio: fix whitespace in virtio_config_ops - virtio-fs: fix incorrect check for fsvq->kobj - virtio-net: drop the multi-buffer XDP packet in zerocopy - virtio-net: fix incorrect flags recording in big mode - virtio-net: fix received length check in big packets - virtio_vdpa: fix misleading return in void function - virtio: vdpa: Fix reference count leak in octep_sriov_enable() - vmxnet3: unregister xdp rxq info in the reset path - vsock: fix lock inversion in vsock_assign_transport() - vsock: Ignore signal/timeout on connect() if already established - vsock: Make accept()ed sockets use custom setsockopt() - vsock/test: add a final full barrier after run all tests - vsock/test: fix seqpacket message bounds test - vsock/test: verify socket options after setting them - vsock/virtio: Allocate nonlinear SKBs for handling large transmit buffers - vsock/virtio: cap TX credit to local buffer size - vsock/virtio: Coalesce only linear skb - vsock/virtio: Fix message iterator handling on transmit path - vsock/virtio: fix potential underflow in virtio_transport_get_credit() - vsock/virtio: Move length check to callers of virtio_vsock_skb_rx_put() - vsock/virtio: Move SKB allocation lower-bound check to callers - vsock/virtio: Rename virtio_vsock_alloc_skb() - vsock/virtio: Rename virtio_vsock_skb_rx_put() - w1: fix redundant counter decrement in w1_attach_slave_device() - w1: therm: Fix off-by-one buffer overflow in alarms_store - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger - watchdog: starfive: Fix resource leak in probe error path - watchdog: wdat_wdt: Fix ACPI table leak in probe function - wifi: ath10k: Add missing include of export.h - wifi: ath10k: avoid unnecessary wait for service ready message - wifi: ath10k: Avoid vdev delete timeout when firmware is already down - wifi: ath10k: Fix connection after GTK rekeying - wifi: ath10k: fix dma_free_coherent() pointer - wifi: ath10k: Fix memory leak on unsupported WMI command - wifi: ath10k: move recovery check logic into a new work - wifi: ath11k: Add missing platform IDs for quirk table - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode - wifi: ath11k: add support for MU EDCA - wifi: ath11k: avoid bit operation on key flags - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() - wifi: ath11k: fix peer HE MCS assignment - wifi: ath11k: fix RCU stall while reaping monitor destination ring - wifi: ath11k: fix VHT MCS assignment - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again - wifi: ath11k: restore register window after global reset - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() - wifi: ath12k: correctly handle mcast packets for clients - wifi: ath12k: fix dma_free_coherent() pointer - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() - wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() - wifi: ath12k: fix wrong logging ID used for CE - wifi: ath12k: free skb during idr cleanup callback - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 - wifi: avoid kernel-infoleak from struct iw_point - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode - wifi: cfg80211: add an hrtimer based delayed work item - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() - wifi: cfg80211: Fix bitrate calculation overflow for HE rates - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() - wifi: cfg80211: stop radar detection in cfg80211_leave() - wifi: cfg80211: use cfg80211_leave() in iftype change - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() - wifi: ieee80211: correct FILS status codes - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list - wifi: iwlwifi: Remove redundant header files - wifi: mac80211: collect station statistics earlier when disconnect - wifi: mac80211: correctly check if CSA is active - wifi: mac80211: Discard Beacon frames to non-broadcast address - wifi: mac80211: do not use old MBSSID elements - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice - wifi: mac80211: don't mark keys for inactive links as uploaded - wifi: mac80211: don't perform DA check on S1G beacon - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands - wifi: mac80211: fix CMAC functions not handling errors - wifi: mac80211: Fix HE capabilities element check - wifi: mac80211: fix incorrect type for ret - wifi: mac80211: fix key tailroom accounting leak - wifi: mac80211: fix Rx packet handling when pubsta information is not available - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup - wifi: mac80211: increase scan_ies_len for S1G - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined - wifi: mac80211: reject address change while connecting - wifi: mac80211: restore non-chanctx injection behaviour - wifi: mac80211: skip rate verification for not captured PSDUs - wifi: mac80211: Track NAN interface start/stop - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work - wifi: mt76: Fix DTS power-limits on little endian systems - wifi: mt76: fix potential memory leak in mt76_wmac_probe() - wifi: mt76: mt76_eeprom_override to int - wifi: mt76: mt7915: fix mt7981 pre-calibration - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 - wifi: mt76: mt7925: add handler to hif suspend/resume event - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device - wifi: mt76: mt7996: Temporarily disable EPCS - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() - wifi: mwifiex: send world regulatory domain to driver - wifi: rsi: Fix memory corruption due to not set vif driver data size - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU - wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() - wifi: rtw88: limit indirect IO under powered off for RTL8822CS - wifi: rtw88: sdio: use indirect IO for device registers before power-on - wifi: rtw89: avoid circular locking dependency in ser_state_run() - wifi: rtw89: avoid possible TX wait initialization race - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() - wifi: rtw89: obtain RX path from ppdu status IE00 - wifi: rtw89: print just once for unknown C2H events - wifi: rtw89: renew a completion for each H2C command waiting C2H event - wifi: rtw89: wow: remove notify during WoWLAN net-detect - wifi: virt_wifi: Fix page fault on connect - wifi: wilc1000: avoid buffer overflow in WID string configuration - wifi: wlcore: ensure skb headroom before skb_push - writeback: Avoid excessively long inode switching times - writeback: Avoid softlockup when switching many inodes - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 - x86/boot: Fix page table access in 5-level to 4-level paging transition - x86/bugs: Add SRSO_USER_KERNEL_NO support - x86/bugs: Fix reporting of LFENCE retpoline - x86/bugs: KVM: Add support for SRSO_MSR_FIX - x86/bugs: Report correct retbleed mitigation status - x86/CPU/AMD: Add RDSEED fix for Zen5 - x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon - x86: disable image size check for test builds - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 - x86/fpu: Ensure XFD state on signal delivery - x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures - x86/fred: Remove ENDBR64 from FRED entry points - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers - x86/kfence: avoid writing L1TF-vulnerable PTEs - x86/kfence: fix booting on 32bit non-PAE systems - x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT - x86: make page fault handling disable interrupts properly - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems - x86/microcode/AMD: Add more known models to entry sign checking - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo - x86/microcode/AMD: Limit Entrysign signature checking to known generations - x86/microcode/AMD: Select which microcode patch to load - x86/microcode: Fix Entrysign revision check for Zen1/Naples - x86/msi: Make irq_retrigger() functional for posted MSI - x86/mtrr: Rename mtrr_overwrite_state() to guest_force_mtrr_state() - x86/ptrace: Always inline trivial accessors - x86/resctrl: Add missing resctrl initialization for Hygon - x86/resctrl: Fix memory bandwidth counter width for Hygon - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID - x86/resctrl: Refactor resctrl_arch_rmid_read() - x86/runtime-const: Add the RUNTIME_CONST_PTR assembly macro - x86: uaccess: don't use runtime-const rewriting in modules - x86/umip: Check that the instruction opcode is at least two bytes - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) - x86: use cmov for user address masking - x86/vdso: Fix output operand size of RDPID - x86/vmware: Fix hypercall clobbers - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall - x86/xen: Fix sparse warning in enlighten_pv.c - x86/xen: Move Xen upcall handler - xen/events: Cleanup find_virq() return codes - xen/events: Return -EEXIST for bound VIRQs - xen/events: Update virq_to_irq on migration - xen/manage: Fix suspend error path - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added - xfrm: delete x->tunnel as we delete x - xfrm: Determine inner GSO type from packet inner protocol - xfrm: drop SA reference in xfrm_state_update if dir doesn't match - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation - xfrm: flush all states in xfrm_state_fini - xfrm: Prevent locally generated packets from direct output in tunnel mode - xfrm: set err and extack on failure to create pcpu SA - xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI - xfs: always warn about deprecated mount options - xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails - xfs: fix a memory leak in xfs_buf_item_init() - xfs: fix a UAF problem in xattr repair - xfs: fix locking in xchk_nlinks_collect_dir - xfs: fix log CRC mismatches between i386 and other architectures - xfs: fix out of bounds memory read error in symlink repair - xfs: fix stupid compiler warning - xfs: Fix the return value of xfs_rtcopy_summary() - xfs: fix UAF in xchk_btree_check_block_owner - xfs: rename the old_crc variable in xlog_recover_process - xfs: Replace strncpy with memcpy - xfs: set max_agbno to allow sparse alloc of last full inode chunk - xfs: use deferred intent items for reaping crosslinked blocks - xhci: dbc: decouple endpoint allocation from initialization - xhci: dbc: enable back DbC in resume if it was enabled before suspend - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event - xhci: dbc: Fix full DbC transfer ring after several reconnects - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host - xhci: dbgtty: fix device unregister - xhci: dbgtty: fix device unregister: fixup - xhci: fix memory leak regression when freeing xhci vdev devices depth first - xhci: fix stale flag preventig URBs after link state error is cleared - xsk: Harden userspace-supplied xdp_desc validation - xtensa: simdisk: add input size check in proc_write_simdisk - Updated by kernel-updater-bot (https://abf.io/mikhailnov/kernel-updater-bot)- Bump release (build with LVC patches)- fix typo- Add LVC patches6.12.112-8.module.8852au6.12.112-86.12.112-81.15.0.1_0_g48852au.ko/usr/lib/modules/6.12.112-desktop-8rosa2021-x86_64/kernel/net/wireless/-O2 -fomit-frame-pointer -gdwarf-4 -Wstrict-aliasing=2 -pipe -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -fPIC -fstack-protector-all --param=ssp-buffer-size=4 -m64 -mtune=generic -fltohttps://rosa.rucpioxz6Tx86_64-rosa-linux-gnuELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=e9adc946fbcbbb7db856e1a4d960f383f1b638d9, not strippedPooorosa2021https://bugzilla.rosa.rubasesystem-minimalfilesystemsetup@@@utf-8385e00ce997c93f69c83aea5ebeeb4af864b7fd03fc4c35e4f8640991c6973cdec9ec0d20a3f7ee782b4aa57239ab9a4828d7720873eee56295d977801d7e633?7zXZ ڌK!w-Ḑ] crv(vX0 &6vɐɳ{skjz#F*nǺkƌW{c({u7c;ˀsfG;rMI^ W|\AhJʉmjTS¹񙻶'Kk8,@/R3=7a^|5m:g+:{?FsHW^U4?>Kɞ@{¨w5cy:OYk/@pvc^fb'xNc+r 7‹1p2o2LpR>~=~ _PΓX%XU9麝q)) WwGEs6]x,d;!ʰpqJ ;cwT}0IJʊJl.y'"z1>u%]סKd z&KokŖKTPw]Ö5?/I\^XH7b%^kV锐Q%\eLIS̙ ;,[c ae s3ײwO)HK^yЬU1֋tbz1]$EP;rܞ*GoY7OP@pL1\sV#Ζh:ݎt bˌ0)>A:ĘA*4^dEx+g rBp>?~VMƥN9${ys]7_eyJsjRDh_ol]9+'mb]">̿E[,K 4^V1sfx._+r 1:ԫo ؄ >M頲ze^5[=fb0QKVW{,Hua^wtXBI05i=w/ //^mXAyUe#y8v_ E n5TV^ [n!"!k{"7uuL`,W(4Wdazi.ApˢK20c'{-ŘAo)Ct`[+[wavMAnNOA}t P]%-~ Ys;_|?lfɩHre7Wn7ۦ{،l!'ϕt]:ǵat_u6C=3ׅ2BanbS=ZH q X%&Q%'%>^lRƳ2𢨵3aE{;O9oM ޻CFxȆsnYuwH!seUxm0 cq6Hw^Ų{mK*M)KǿkCq%&&_NNf Shʁecjm#MPdobv14bk^fBؼfLN?n-PoK}0Q/gsyCްC GN:R^(W.h@ QBa_djV-ٲ~j;=.orgbcHZ]t23B1 q ("MMиj՜t^Qʂ#QMvG8f̨FOZ[%}eWuVYRVk% !jB۞)k=3=-U>+2.^m/h{,o&! c6+"Ѣ`2RK[νvz }+c{],[_sb ncJ!ڧ*ar2fj)lgS8#pUȜ5O8BTZ0N%ݝ4 zH]ꋄYU(Ru-MR@blx7鍻v Z`4Q"|ÜK%[ׁ19KpQ[Iۡ|v"Q΢Ѣ-"jmmg} C *.eI5XrLz6Weirq8T!'n0* 8dm5?ۖ!b0D{94~k6L,_l*-6A5?apR &?L⒀[Dx5{442Gs_E;cLJooxFMXkmd+Tȣ}>0HюS߼+=*ֶevp(é:$AҦQV]f3yJ2*WcT?(֒qC 2/'5n S,w V?'?/}5|4r _9@nʎN̻P@Q3 u"YDa&S]%d~}Fy[sս | &(ql7.}cgpq/a(<8M+R-ZloXiC_ao;DjW fĵ% 0z2!m#O \3}R8;JFD 7ӝ[1)IdQ)RJA'b.ޮ2\z8^b:<_2xL 03*T裍uUo`0߇y cDGO a@{E[۫*SnlH?D,;Zg3GO%a,'7Mg^(IJ֧`_ HVEpuO{V|M`&0‹lEDJ0UIx*%3 E8ym,eۑ"ǂC\܍Pse=LТ栥陸 yG_Ws }޸ɭ@Zm~ N)VD+Pn?jlx$-Vc[+T rʭؘáYf˿^B%T-ED6〶Yla-! k`&b%چ'1Q6ypkr{E3`lrt>T рıKL0R>Yzu:ĵ!o~>g䃜[(=Q̑@#_ލffhH0X>_y<"Q:xhڡ'=T}%+sW[ÿ*f k)oJgC y7]A}IDC!G8/GZjN} BD  n99_nK!Rv3uqJE2M #lqV^sMcmf9L͡*&Oq6Qy't8HF:LJMYz8fPC߶Wq; N=?{gld-sD-$R$| mv“]MeҵugʅayTDњ~jBeMRVyZv }_u{W{ 5ԁM-w,κL1^)zUe!NX'+={ "Y;>Sڧs@5#jV6J2Ij/ۋvj1NtLrhjT8x+~`CTX WFBc}R\˿&ɧXgJU5 LOn[ &37(zxtnHiX(s2'y?2(6zu^ɴ36Qhm7 O MPS83CD%o$^Vaw8Q<ܼ\a]X2ύTNԴ6">_K ,=|"cWA^G]O]~]q 9Yk}`XcV׍ lB9F{fup~G'$hӰo BĆG |CM6z|3bP6ZCu'[(CK3!X ]dΈg!`oiqf秃@ki]Ɠ/I*>fxx r(ƣ$ aR-fj]rwtO7%KZ%N\&מ} # {XpmEX:vB,(fERS~ . } (ðc|SŒLn/_٘ezY^|o {q&Aኜ~F vTmZ '\jy͛>C^Z؎A!盡@ך':D,pr;:o)eWk#B@_Q5Nb-ZH"pg)^Jߺڧ; (jvl;*'8"!+ Q3ѽ3 0ΠƺEykqjقOzM_F$4~#cv*eoN+wќ w? AzN79*~o# g]Z73={SSf,h[OGlyTߙdۚiao|5 UdzD;(i~SqOgp(ƆO!n p".!C)tZ"99L{_Izo ;ՕfѳsH4A2/3iHt?=+̺"ܰ7V '/IorEDݾ"d gV@a<u%ydIflsS4Vw1lڲYpq*D>M1}E,x+E߆ if9)}z:tq,fhmev o;>po( 8JǠ]mw D~,bKP(;z8wv^PjSIXo 4$2ݓmQKOσI^'R҉(c_ _?̉xZDe +om"X쐓_y`Y`#**ߚ \.<:sZ8bƵZ3,> Ljgv-xpL)ҋڸA!!c&LÔ=}iSy($~`=r׭@;楋!2,DT9y<z2.ŝB8,0}/vE_x`":@W:G73oD 06UP` kG]&Q*5EL vxYNTKyHH|%`x5wgP9%p .\{(<ZPPhaHIy0z%fTڌӵHVLv2Ѧe3u)!Ԯ. oH4\C`͝5aV\pV,̚"yN'=nCr(ǀ%vB) ]8op9sݼ%{_9:. V0[7(rհxtem e2A|<͌>?B Ehs{A2:j<"s )S7#6e3*3Չl^\xxRox#S(+'[ucPXKg圧_/hTCGƌV̸e3~Q F,kNs d0A!-bZlkI} IsR;!AXqwoD GpjS8uG2>^_A&hVu0V׸|BTEcJZ7HE~;`&nqy6j54>\QEKɝ^(EW`}WSFn#&G\f¼Ұ.)n0^:0"9>tVoKp*I/nJ9fY8OW;T!o Q%Ւmn`lS+'LZ9fcJdE݈Ic맭0Uˢ3 Z6&AC5,Ω5+=0ęnx\ՏEb~{_$ϠAȷyFaRNCAK*xɑ7A6u 23iu[RRRCL"7}~}z%eR;rfEds$e}NfZyMAF ɠu9ԟwqiw.$]mO=&BHtNd@ 7 GFQiݦM(9$dĤ${hdВ#W 㡗:(d_69r$\5#rU~'p.wmCRq(\v/c\3fgѧDaBxNjb&?_ԫ٨e0<&~@!9 Bvb79 Rb2C w{5_ *,7)&V=%3?ȿb9]BBV+vA$n !ˊ=h @K(5i_t<TlpvϳQGd$̓˓Hy~7;(tR9`)b'&}3'xm_%wWZxvcj)%j0T!T^ûꑂ5 $u~-^_ Sţ4+'i<KJJ_ćip#?ȻkGXKDwݾ s1%2Tm SÉkB2>Un/RLU^08ȝ %D_dK>ԵV^C%:WkHXUG=Lw. IF-#liMJ_LT$f-ѣw(Rk–k:>Й6U͑aoE#Y1 ֶ<6}/6Uُ>%8Eeh~mg홣/}\]ӑO9gPA5UYǗWQu e86kOFhٲrf-6j6@Iq98S&Z_c >.qԔ^ οwGHdh^p8H E/Uއ ZX[xuY WIYGb7Wj2tl4E0z&Y<}8f(ncPO}Ҡ)|d? ,"^PøeLíbN\$J^Z9Me6%ZgHg% gUuS\a5 g o^B`>R-G?#\ y-y۪_.@ ř> #|' eD~A] A#mvR1BoPcVF|tz_y+ƒ0$i!C<ê2iZvA8=-"d#F:T#8 > r\9!K_2nhKA{G_uQHG\[QAaM%$]k[:@dR1Jg8a6\m'a@[]:R@8_}z*?mF9\5WP4C >Y[NcVգ~Z؆ֲ qu6a9"f/Ȯ&\|v 1Ib7i,es0fIHvaYH킒yĂp|Z|td7sČTFN=X-9(gxcP]$jXnuӥ(!ݶDM=@Jz v~2DBiR+;xQm5 qar rN.@)}unY@$KP-9m'` gUo|Bi^Q, ۡ u~0B[@pLNȍ 3uudkM&ۿPbL+m z_pH NEdftz`e%Fe47kcg3 {E"0R^=0]  aG^6elРHLH~!1^#2rXpS%WjAgeQ=%*RkY>k1WVMkZ$ |r+3r3uE%cOS;o#jk1nN:dlh0Dr#]d S`2esfX"tb7v| ЬrтOVk!=|<ɊՓ2YGqzo3R;l!הaolqIUm-ٜ/\M0*S'1%>DG[/8\(OqcTz/%p48hV5\%zjbfŘDOwXxݲ<`狝08P22A;MפHV[~q]+DdK)^jeȼwl7"]U >AtZg%Ai#͟Uc8MAr4~d]Q\y4P:6ČTc/7Ezɘw+2Z}hRZP+;gUo!Kg Q,M[\5\Tf==$lL@#n&6ݛ@ (Ϥ&'ؗ+.^h7=ڭsB{'"uC7iELIIhYȠSս_fnGNFRVtjzO 9gm,JgS[**)) ^ŷ{v )005Uh!!p0ک" =68M{5S.{+Fl̝iXL贈˹!JNsg+w ŴO*ACF($4/:F_jDnJPS'd7y tǚ\A{@杬76:ɅƮ0jS 6F+e=+Z稤qZۖ,Pߧ꩜h"tet)W*%,c~ਨ{wjos33&G"V3ؓi..gsJPKYBܯ?)@ 0mq1ħNMvw*o'c[3öFwuk$,/MU]&sx$A"1oYES~rrD$n Υ/f@:< 5ầԹ2l[MBB{kuJn~:JTMru48Se:8zRQM[uYRQ֣y Wa=zǸPhE,Gkˁq &*P0_$k@u^Pı`.]8c߻Y_eD[uױs[M}M|F2~ye^Н%0`74Z?Xԓ"IǪrZub;mafF/\mr^>S$=q?%s NЀڈl/}d6z` 97}}9âGs>s(_Q0`Iah9'~0\ÔDt1j]1?9.35*>=ȏ +wQ5c.T.a+?"@LNX} ) o heb  (e2H7ֺJs2ҍi]T#-m/s t lQؽS輄ϱ$Hm.}3Ci\jtMu9K@d5V[Mūh,bvۣƉ\wK6=3!s}egOL,Q0Jt^q3)́^LjKR%˰޽/w(=`.8\QRZ2L=ODW9f*ț0)VC܍PBQtVp^Eğj1A6o)ѱ5 _2%1H4w (T;uH,Jup6;`Djyd"Sr#d$Qxvvtt2e!%//!QQ(zvI}R{6,q\Baun%㍵OK B/z]=B4o T2vjePPO ruGylx͵E!g_{=6{Hߨ^;P08{\Q9WގڴV>D%'槗=ʼn xln-jʶm#6S"=fCzACQ}};δY o 03ʈқ22LwՈꩧ&\y#ۆo2ʖ&,.)~'M2gE /5eW tLzYGsQ|.%Iő㩞 \ÛmݢX\.Gq<|Vgp#Y@ypF`xƘb{Cq_| `~}*OT|ހ}XE<SXm@ gt~#UJp4XBió<)7ۚǒsobs04T\ &>=kܹ9[ҭ) zH>@hi *pOHXH1j)}Hr^LH/^9<}zD*|} vn_l in{T2xQkj r_GCdPStx5vRԇḩ5pl4#'zbeȅ.6l?N3GEfv f= !F'0KSVV^p՘k-C+}k˄FP\f_|6 c4R榾$8^-**[+Q2ieavUґJlf˃uJRtc}x%4e[ 9`(CK(;e.Á_s92TGoRU8؆z{}`- h 9<,+AüU1-py-+a, 3s='ZZBQ:~(LXɫg #R60%-&/ Ryrfb&}:p7TU- Um4J؟wps6gnk<ZX+%\JR@󆶄ƱC,bz+EC ȃJǗ{y=oQ[sݥ:~]Zވ2yq)RkF VϹq:,|fpD3-1ŭ+똋{b '?H>)G-uԷK\OS;etcZJGlG0]a2g0M1cV{{ڲVp󛪔gԮ''q"litYOXtnVLӬ͜ EX8m}&2#ۮLC1U^yq[ :5,0 x Q H1V6$cKQHGOtSEX3Co(J-{k/ r0 œ'4qCDq# 5Lý[jDI3&&`y&_+3_19v"_#%|@UcFپ6Qj0E GU# [DǁotZy MnT%aW82D)(i6?čd#S[ePJN%i0xtܯ33:栙4e'QA j.J3t]KiViVª \m0?S|S xeƍX\t(>(97%Jyp0̽^?K `17=6q5 *uHT*55(&·N0ijMϜY#Nn y o P[vTT3㮰z]7Að1hG?H~)B,0{nZTJh4q:cOteo976+=50EHZ2tP ~nI$9NlJ 3iyy;BHfFfH S״w MOgTtM;51v|pNa"2I@Qk1M*YG,FiNmmöxsH!glxLmF#1ptY:G ߳>>B*|r $j)vk60\≮Bg Q9\/ !~?m~s%Y= āoŒ{ŔϚ1'QDaLq nJJ3m:ޅt)_1n&ǪUyPzل9cwq)x\U-7gU#thlXS| OJ<%ƿi|L6z|2yb:1bpșuG6ʟxfe ɣA'/VlB!"0ܺMWaccj ]v@@uI'ެhSIwK_u8t[ߺi^fNwqnoM_QuផHI[-+ l6;DΕ0ωV'nh,l\dY逢sZVOk^U-1X5)64#UEloRqA@ϭ*B]>}[YE-AV7/B@%DZKHSB\Zl n I 8Te\_d &լڷb`uspaHa7"0?`) ~i\+hhkxveڲeu$R6:Z +  '.jU%)0S7YK 41/tElGi*ư S^Ogc^ 'E{aSWaSف$>|u4]6u z] +܁#iZ4- #]?v*{$wg(Fu;Ǽ[w9,=z?m? 6bV![sR6}F2m;;M;Ҕ[J.{l%EpF nvsV"gv:/a(K/mRI *_ B,r outrtCh/1ԝYI4b,eݚ$1F yMrt0mb֠蟚1+QzD !auU;k)ϝ#w$IBo>#INvJYg$jx˫ eaP΢I.ZF]l LDk@fRh`~pH{5yFtb>b ~8VNMS/9#̺[f |EZ_@)trO[դuiBᵭTOƍ9$˰׆A4%ɮB굲.\+2֣ NF;zۏeЗY R2⼂s3Bjre\ocϟрs":nkiYP~n1>ZVL/),TAZf`ߙ1$dvώQ=7tVYL[Gx!qlw~f?7g0ZJx~l,)Kiv}k_s- aCFd5 )V^-4KVX5Q$9j5(9& B1+.| B}Ncu'v87xoV:lN &I.TC=hmPxXVS,:xtpR[,C}Y.0"AgS2x3!f:;T(bI@i)B,Lh־y!(`IKLa?JkRz+;n̘d .UEIG{3]z3szn9B_ʉ*$inUkp1*B4Q+Z"+7 W ͖5wY]L us0V텎Ұ 'ئQPU o;Dh }A|&FV .0Fɬ RՒ=' "{ثl`+CeFv]:H|D(4u b\^gsz1j?'OX5ZKZX׉K9F @E}h7_=A#!ep L^?9[Ҫ>vE&ySK+L@NG!VI'xLmM2+%?$`߲hC6yФz^Kҕ-m0i@ufhI''Na 3νӉ ' R6b XpxW4[ow)z6`:>Y.0ɫm[|Bv!.՜D`VCoRKU iwnwQ j0>@=9$r4l%Iuⶨi?VܢeLdq@VGZF;ܫdgdPk cu`֑ P4xlvM*|6b Cr[G2 * P;$: 8xU~,bT3/Me,2,<b~P0+2 PZt+nedhO&tx',i[mjz7LR +fZ&HR6iMZI]LzTP"*h!iYv 2{4Ս!Yz{CY[>(z"?`4HXM@=$$"iI1'/lEj!1r/HM=JJ9!lf;Ob= DFVH~Y*t3q4`X,KNzU(*(ލ{$61(y,[>{CcF1],Qo;Jн0MxN8sԚ6JvT^Ϯ -Xu?]M}}J?ɫ|B0?~م1RscdEJf#;A4{v |N^NNT5j#QSu=LCe/yc{VV7>p/ Xu=P ^ ͟3///ʜA{? gT,.QSw|whעo8KFk?nK_@Z@U{Ps7=驅6Þp*n~.)U΂DQ`@,86Y% I1vGVfAͼLy7%oIzǍ@a c[ȍAz}D%K§cwb!Q*w xK ZGL AM0T$YhVkRJ!b=FZ7;՘j ~  "H0XM0} BȪZF::"=ߞ+Na9Ixbzذ]}WĖdÛv!* puhtDM;V^[h AGIP!4dܠ-ڑ"=Dp7 NۋGRP$$kIo13|_\0߲~ס{LcZ- ]9J>]/2xpl/m3w."]Ӈ,\Okؕ:%6/MUFW WشpvI:,SlϧUdv9d`mK>~P@ |U1n8zbamESBnK,CGËgۀ2f'_K"^\W.3 g)W " t1=$Egv}q7v.Uc}Gh5"hG(FC _t-\6,>6P8!-⃤m5@*b2x;Lk'B_;  ZQmփ`)缌]YYh<4P BKlLWORqьsdc&R{__" t۟f?g@`Z , ՟W:4,wli >Ir|Qz1# ϔ>u6٘%(5I"='G>2-=."F9ٔю;âO3׻@ ˇiO+uk *~:M $Y4(AK IN-!G;\lRF6ɡBQ~UH]>:^c0Mʈ->QUwK{C5A ~lbSoLi?\`v=(E!yBE w!(t41.mPR)]K@{_A0KT( lUA;`^qNXǏc;`}}M|ONI!\/@7շRc%Cw;+<kv9NJM@6+X!+P֮biTBs@eUU\d7RgibP%&u2Y5 `󳅍-dwP/Ti(6Lbu#S!D4U ~u}I9g gÐmk[l1J6!6j!F-gGqm"367e ; X>;-I `u@ ϔzEf#F4ܞV.?׊!>; +ʰ͟n~R*)lԠ!u;Q3ojIdI& BaiTJ0P<$QE鹍K-zUnH'Hhhxy+!}fIћ)qN$ ->4o[rx.GcxqevKhfS‹$,SX_i UF zJ<;jT8 Ě?í\ J9}Z")(@3[\ 3aݲ`%/5Q}α(L+=A/֧5ˠ(A`;NR# 29ADŽGRsC5w}[JKTZgl=>r-w^gvgHvm!9@PO;_eiYt>@^* #_D`X^LkwvgTӌ$f>K#s<.#&#Y*kAbq/T#We|B_M+}3\(E8Ʈ0օu7sxWSe "~ *ȩw6Myĵ jbyM!ӴK2NA!Ov~ 6wl)ntb-qQuGPb5M_?Lt[̨y,),yat3K*CMr` `SCjxyu`no؁kCCC5h\+Uc*jc-B(]$8XLn=>JYP Yi">TڀqNss$qd"çLAiSnB%V;fO\&%3`H Sr-.HBi_۔FxowqKݎ74A6U-^vv萟av!в+{κPQӧ&;iJr ]PgؚY; &~=M;nA;Nff7' }„)H]-^kFu,|ETCӼ@o[j9j {R? қ_R20*?hȪ%!J pٝZ#Ta>^9z~}8ע1]d$oɀ韅Ԅ O%Hǽ a&0&Dn`=b*ZârF $1GC6bE@%4z]*Lpsa}COL)%'ԠH(oi7ʞmǂL5=ˏgn,O{a"r:WYkjI}tx6<t8xűA+ʝU'J|*r Ɠ{UZZGf5HBd"'g_?b7F4X+<!ܧc67.z nzԎ*RJ +wG)]4xUuWSNBr5g⾽q+cLQF'[Ut$ƳF)Ԛ,_#j,͋Y8q rJ>ڧ訇Q:9S?7~t:&D_(0޿iD\ũ^h=T\ c[LA\0/#D to(F\9s0Nߊ#-ZyW}=_>3Uhz ޕ@LRKPi;ۏMK }rўgY ykE(g#d2xZ(FQst Hƃ$v[䱴s#[AۓקITTv2Kz5AA *aj{<)}HF,{Q?+t:ji>XF.w>(mǰ#LPAon B)|d9 /RGހHjiӮ1g4صd?*CIi <qǖ UT5̪V)ޔDJ0U}=`֊K^ N xuHpOTe[WRQ׭ yibTj!n rP4r%yD Pڪ @"14ѵ S~" ixyw7&]C}_5M1n݄[K@~CM2涆c$DYq"?uʄ(A9w>s!Wéi!2NGaNY(nL>?x; 9YYqH4O]*?#YI{OALl .|#f-FہuEǦkF `3W\E5mfu(Yь7&̳@NPL x}/}ƾB<~x`^KwS wBTYa"p!ͺm誕_ȽYd,_.-UeW6y2 t($=AZkl|t(bGCI1mR5dO}FwKrZ/Oj57A9 g,1gjy=]FM*|=Qc-&-%谅Dʗ1ҘLAeEWa2h/`ǟ7.A{nwj>w96LJxNpp! `t\ZW"xN=2+S?rΦbDÌqc&\%Q.J]|HݬLd+I HD:=w+XAL z,7F3\t*R :y{WթmHJB~]6eK5}xm*NEcO|M:\PF mW@X!-Zn!XU^ƢXOڐТEgv(k:C1_ 5X[Dzۿ""v J4v;}w\o4=:F P1htm, 4m"JIt6HtA9)T0"!&9޸GUuxYxYsHŲ=”̀GywqYDt'f홦Y<W6j"x}#'PJ)D'㚢m@y]]9J=ǯ_v8ၡ:ʞU2qRI$RЖ\s9 1! \ >CHòI:.C4͉M(F|%;քGVo<݄o TQ1ZqU!2l->`pJ$|=h:XZGT=ܹ+0^fZ`PrJtڪ&`l!!fĬ(ϒ)V[djޭdZU VGլ{+D^\e;==B>dk(,Cq.o0YE{L\$ie:\ 3kӦͶB-c̏ Qx(7Onk'gEاtpb1 SH1<ǩn>N qo7nW6!7?3-cPyJc= mIr UJUF =Wq" KypI;^w+At]krE7RMR4K֘LIron& 87'[&6ҕ:@7($sc뀤v x{b&Inr됡*5= ?#2g< 051kbG[gaC" p߼?@L҇' W!|^I|;zqkz?'9T(w C0Z#T>ەJH~1s9իcK :~4dU Jiw{V <&bZS(6)`ςY6Iѣm%L mW@g 4$wV /n9KyͫxYOfk+7Y=#0J < lF1TyӜ.;Xtcյ:.븇o$P0InYQrgS&n^4#"U`#\FVP^s0b*QwjSflE&Qp<?[ɏsm O0£uj WBqQw*gD {8uOi2|"`FxzJ%KC3ʇŇjM3DXй8(:y[Vz8OW-ϻ |Ȏᘠ~Ŋ瀜@f!Ž6YǼ4b#}#F|u)Y`{&2fUzጱ=G I;#_҉6Z4ɍ/Gt H*tW'J[L!PId^:RF(<yكNx4!y+3l,_<<]|8!捆:gҐn> 4|ruwWfħGT$IZѳ_'A wօI}~Y[ onQ]='Rxu&j0Չ z#X_b.ߡ:=_ʊ])( Bi2=Z{*Ci"68f2 30,{ne|X_vW?)JJ"MZ, W,m[[LObmXֿ*-7=Y٪\%Ҝ $\Ppd3hvU<0)0L9L;]_\^nQnNbn/ ce4)dGЉ9=1KD]Ϳ8 ~PB 1/  _;m WX\ZhÜ^`*Vw7I(׍Ԃ%90%|9W{5u$BDyQo<2Wˉ@q_{DPԂ3瓓<$Wl|~tqV8Nk%R!x =+Jnv~PƩۧCqAй뚑4Z(}quWO_Ur~Omʑ#p#)'Q[-=apjd]ίV8^=k+0YnlQx:Sb텠ƿ4+ Qc|79*S=p(YNoOw {KMAhW`Fȼl$Knז2]ɚɋQ,覱 bD% ޭDNVH7DVN!* b5s'mCI{ԵBEʭֲ4jmhȲQ /YU}gW%`}YIJUt'B4l DS| މ6fIYZ>w̤yVQM m:=tOzߌf\D:E~H&>gEۚKl5򴈟O)úCfר.Հx"^]W$&;i`~2RAMo1Iz*]9FqӡJX`>aE8>BS[ESу濥f3+m5 xguǮlrwR';8»[Ђw-':3Nt+6@ !nx9>&ifgwY_s`JJM|.^l>uHh0HN`-fͮ"U#PMc }ƨswnvHr\-zIWU3Ĭm/fm2RZMigh^~l덡ʆB\vq&ȏUE֞5fEUD/ [9ƅݐNeq0?AOH29L񾋃($ESheFu@%]#(j'3,1 :5""awhnG *kjR7_t\FKߵlj0|F]ji@h/7.C2Y V@s@E_8;l߉Y{A1 8< Ǻ|Ԩ(Ǡ)eGܕ"(!I%ʖ<5cC/UUHV%AUu6vt*>r;EӅ.4Dqscմ_8э_:B$]F8IzzY DDF/8ɏd6U3͟639?RG@ B4 $yK49N6; <$o:5Rfcīr? \aX2&OеRW>9&r|B(oSഒe(uF~֙;4;ewI{Z§ٚϯT"_ļ/{XIh 0 e p? \A6kMf߁6=/ZLR[e-g'8=Ԉ[Z~QըuܫSn8яh]ðCɮL@XPBՅe\M_4֩O\t (JRpK$kj  p LZew j@uvQ u&qҵNE Bb\[K*a_-IST7ӫ8żFD\]Uo>xr5FAA/qɈ*}ցE:%}(qTpecfS*^e8bh`Wyqĕ&T]21nw)Osd !Be4.OJ#=R|ᄬޒa@hȀ-}mWmalHޚGw0A :~׮pۦύM4G2i/<\tմZ#$vstSKޅhYʚdM.;AVneO" $ɓy̜eGy#̱s_K-b؛!CwJL^P b%"Y7j'tcV㪚vw`<T {Ma a]@FM >-j5[߱]5!;rҁ]]MU )me%dT\={F:(6K]k1:|a$Xwp &IcLcG4|" %vN m29~- k:Pg:)R]8t9E$ ,oj;rSǤ/,C, 6r5I3A7tWuy"GOִx8Ņ@WܵBݙcm pP6_ Pn`4H|y%ځ=$ޓ΄k/yigAqb{%#"vƬ:żX->'.ug,,4"zj4_%?䱤2zGݗab\ ^H <Fi?(,xPإlazc1# X:y^կlzYzZ(cִB ^)d:Q0{:KG><IebBQn 5m_'FSʃ?sGM+/8dY 9{F n4ɞc8߀v;eT̬޸.F%}E17p>!\vS9zigXVtb f+gbJ5 (hsbOaQ6ZH۲ȰA7OZjέ-@L4ϒ&2?&;eշ/O 9x*5sȄdu'ާػ&6ΞRMTSxNC$[uRED )؞ezD,?m1JZ$I14VTR]h8"ƾWR`'m'x,"*"P|L -%;LpVt:6ʼXa*WZ,-qE97iH(!r{p)߫jv؏^Z8;Hbk;0#RGr+k?Jކ/ƶ1(N>|bn3Bt3FH00fĶ~h~ӻ(q٨sdEvDD:Oh*ʑ}̝@3]!{GqɼL(AH#q$Npo}|M˽hu@8"Tt@'% O<_B5?HV+2/qY^jlOo]FΫڟ`-liz ̎8e.@U0k"'H@`{] a-ڵ4з=rZb*ÏJe$ɮTG{(Y̷#uy~E!ԇB^3+df(Mo(S2v\ʓ%'Jn*JY0?w$=zw'S|-^b<=84&LVaa0Zym(E}оl#d|)?p]S ㌟ک!'k]LMAD2Ň _2`Ө#X^q3ihv$ӏX#Kc,%~"JL%VHj!"{qV 8]dM6)OVMHέ8&% T[=0}aM>pAH̩]] GxsYF+AP`|)F2;/NrƢ/mDQfؤb| ,#S I^egq2=8|sZ3[O8H =D+4L}!cMx[d͓ch. ˫+w'ȑa="{ľ҉Z^z!*UE"cðj0vz'\ <=KA=$r6[>BG̩uީ'n<ǰ9=#bM֠6ÙkBɞ4Zh؞/^8ޓxq’NE6J4[GDEs+ҷf=\<)9'cvM[ 3w>xmɣ3/h7TNpaI x!ҏ=2jb@TLVjVam5^;_UtQ/@{JDVpd\OsJUAbLErG/SV2FPv#ڕ6޳ Eb ͩ䊗[ \Jİw>z%~/D|ЃZ@N/z5 PtA|m`ȿCbdӈPN>xo}.UOpxy0w?EԔ_l֜[cdܿ5u a6-fyٞ Ү_5jJN Ag‚;b*fcta-Eע&Xڠv6aWjzw~D6?VʯxtY;dڎb~hs *NU[O{PVCt/]*CID [m%1=?uhx^sK  z\SնUzlr Ma͉Oė((L54ڂՍlٸ:/Z[Y2Fr GJ$]@ FAb:ߔ /ǭ '3t2CwW9pRVCƉlOGuц0Me*=d׈rc@60TPNtyU: qX_;ƒLU||B=ͼ .@WnhvsUzL8!گ(5}G|^acawFhygPxLKWhJVln_rF)|)dy [f#ؕ#y,{AwHAʥ,=8@ L4v cA$)+mݣ5ʇJ~\_f>.g75_Xo 5p62UiwŠ{hg\듳16QNC!u860z#{ipt!Փq<*VaDs_ƼԐ'[/Au w>eoLNV^vZb!JuqPz<{(o5GP ;;f_>-.]U#R̹P;Ͷ(ɬc8hb3YՓ R/Rk ?7e--){Cf(#@.R]~ B%~@Ā`uBF;/x c>$ E{8A oRVّ~g_usޓJu &n9kdO[BPd1e%e},ZR[Ggq">cІdJ|eC&j:SQ_7ŞSç}EʜZi@E2r!Ɋ&`xdqF 2If -}l0_Jk^U]QA/owKhƉP5:df+b'3pXzuƥ 4µD'!&֡cc9zxPTh הp ց6jLڏ2Lg15KRi,ᕎsPGZ!_^C=c/w&0.'L4UjQJҍ>^-t!gm@$ciͶo<Ǯ:!<)9T/7)fqra)~Jϑk'z;Mڰ[g: mYVr`Iʆ 툺#1ϦLZpRImA+&,_`#J : 6 ش%C5#'-SR I_YU3To_ k x 3B%iK2WFhFiG.RZ^&:}R@ N!jF[@/ 4=FpwG=hv?EMäT..WB=7n]vΤ Kw*<S/G4PaVҚv ]iTZ|hck1ضJ(ރg3}9>paO7(gȺ}޷}@ޤ'|"<|$j~|f̸`$w8~9XOF]1\ƐVf7:?*d/U JD)E$ȼS=n1m73:Găm 5ȭKhnUCAgvSJ>X5Y9&tv."r|~b$aW\[9j5mPEWl>oL>`8Z2kCsx\-80_1٢#rRϷ9FNWJѶ\8qʭ8SX&8A,%v)eO Y6kߎރ.23 wT}P[QChVŰA[Q%ay#QjeoAd ˫7f ͯ# _E1~៬vO=yT^3pb4f9 {X?GOGO~5g5,3I#f1A~/ɺr/w LP@>d9OcPoB_)8 t Ew}L6:ppgpAFЖ[UzgqFk2{Yݴ ^W )˛3'Jf GRˍ2RW- |y_nIAJ]u!G8v%voG1l} DN:zQ`, ϛP(GjNId_ZnG! Ы`zLoT9ly=% \Sx́̐< /sHZ,ωJ*s\la#),)ԥW9tӈܕ$;@~\LRøFMxk,4`}'xDM,EG,:NZVVv8Wؔb,$9cH&h!2.;֥]{}SN-Ɣ.X@o()ZiwVmUK*d|2p$s56 C84`1=5uu!0aMh~)K0gCZI*;A`6B| ?ڶ|z.M{REtDv0 4'Y\F&`'y.Ox{ β&86,\ѡQ;K&v_4I\`C k$[?#"0< f ~qzZ `>u$4A<]2BZD-$kUѰDIl*{V8>Js1-zMӠ@ƵjLȠ%/nǜ~:8͎hbP8Ye]GUQ,d5j"Iq5{r4SY_kȠ;U2IHȾn0qP@zǞ'޵ wLk'4 RäGr<:okaGxwK8@u#+7 WM4|JGEdͱMdH{_yeȮN~j! 35%Z@e@zCQg-OFa%ۅWSE-:e]g>W=mX|[ŮGcL-4 כe'+u?9J~"9 NEVɣʎUGoG&aq߯L)|If]*p&.7[0P>,˜Rl<| ɉ0'K~0ig&0Z~!^i(kdh܋as}=+KҖ.hB2H>Y̴şM/ (5Qf!vFwTL T…9.KEУLOcUՅgD@9Y[g.W52:C'q f,=U86~Sht:jg_* ,ݘp8fyGEzpfdcnCt~y 9Jx Dpa&lA* 61A{TLCucU;xV\rB83[ a]-|@^arfw;BU z%\ Vl JZqe"ꪠ2dy[2#8u쬧A|[y+ b)`_9寢|S.x& S&iŮrz^{!)va) ^n`Φc;dt/X@V)%ZTM k<_!M#DnxZYnr/馕$hɂП E!E#2iq~ɕa,CBXs C:%?#/Y^l5hk2Q}#wXݤf>&o^H @Jb!nsF>4 TMgECal؉ J}ubqWtO.wk4`:(Qij}ip͎W[Vށuƈgӻ~_{ 뵙~l<-'~-LQ QS5eW7ޡZcvMC Bߦ}~Y\$ Yr9JdNs\_4T<-8HZU&TpAJv^?T2ӑԜK])\U?XdxYM;e<;%fTقζW_U\x8f9m҇-aYyj=XU.wTf*7LϾ5m3 }J,2: m@݂Q>$`qg6p!βSVĬE?JHϥe3;E= 3sܕ^L`mu=I @pбRƳ2UaNFM4`<7٧dM:BVȿ~(`h"HIhRsDPl}Q op-Λ}qagX#4|d]x_ye(M.y__hPJi6~0"V -Nۋi4|hiNo4?r/G B ̫N]*Nn3əykiH1,LdsR"33׮l;SK@)u4nI7֛D1(T v iX.zzop *qS]7_1 ܧ9Y_>0&'rO&Tӽ6u.\ ?dZs;<\Ic8rG[_0Et&E%ymU'B#`2*\5UY4|[}Xvӷ9s9#ogdD*a#u}Z E`wAnKQ{wb* Pbl1;8ЩنY-^4" ^rPio΢SdJ۸Po!#XYڷ8zo7v$ξ0F&a?//vL%cdžyMr!kj 4.59;% H>ևQsݍ/R{/K@$cF_M? KV.olF~B^ZؼU8i+bY-4|\ÈW?P4)b "35_ms4g+V C!')f+ Ėqn#w@{{,B2}Jm{7:U^/Rg3qMiL>V. ȍ? ,Cq'Kt?V#W7,{)(v[B=!%/5EӂNFꃙFS)9BOf赖p[IBAIh n38ȋs1LJ?Jio)jׅ⴩-_iڜ;&'6F rM Y_<+8 )+J\j(5EJBAh &$ Ţ1M%vk8fH+L ˉktkIёr@y0oњ|tf@z.~UJle&[/xjб~輆.m )8)`ⴛmuZ{*i>*e50w[,[UJxr޸玞Z##+Sxcx-Eްt w  U::| { FW6i`*ԧ lKx|&M <0ny뱾z*SnA)hT{&i k Ý}Iݨ>LSjH];P&_hFL`/ؔm ک6cp>I!U 1\NrУ ħh"[;3ǩ@;J b^@-a?*F)M76a듕W,d( Z"h~.w6O X~\$/)x[Dz|K;ܩ&aKl(*Uw"}*h1^HՋ>$aLٓe2l8;̯hԁۆm3-7`ۘ7 qqZ+ )Y ]MذZ@B3Jr_,m +Y 8c1.gf[ b /[2MUz>^C[zdqj@9dN18G FO2v콻W ;QJKXp > kE#;39z hN ci:b[ek7NkZ_Hի eaH8}}PH`DSaNkMslbFk?@ьDɫ=Oc`MO^vWP m#UY Տ!Il|ѨkN&jOQ} F;¶gvywDZBODQYO+&V)Br shT՗t#A^>GWP7Zu H(S￴RX+ˣ`Th;h#'5Qh9LT;F}!7aU|xI2y"0Od dخ2dzO͢Y0qf.k 0ԇEUGQn*''чG(8u"L~pBfGrR_aT*ءT3Y*8=F c0 +uBg'91smjW&Zb>Eh M_T[\WQ}lRi+`m78R>5A)D ^@NuPi*M[ \Qݏ8K<@ցpL@C/R?b֝sԹ:"PO&ǎyؤ(ZnT< ־+b˜i8emH7"PŽEdzO~(3;=o/]`)ӖV e%xtd愎l*yEPۓ)z.EeXtj&`{ԳKhOq\%ʐ:ZVa/?^خ+ hz&B#?3fz)zq}l4WRiгldI`>mA1fanTkd܆ Ey-}Lq< 䉆қt)Onj38`]3-酺 =4YKkZ YӐ_kxCm RkΖ'`)lJg*^8bey) $on\ζmo_zD ׷{:g׬JʺM `# dDV,J}Lge')cv I@› ^ux3|cgfQ>KmuHp6)`qU5T_r(:H& U5S@us,·6sčB׵`aJIi|s[)1Cx dmӤ? e7 8cbk@ed;9@*Nx-$]qCd+ >Yl$یۺG\o=ʑm{.F-G,ZI4S'IB ̂ByQ_V IÏX.~7ЎS&a?GUBzJ8cd˕Bq?,ts~sӨ몥3~n(ΞWQ_ i7TfA`*Ի p*ICeK0`w՘7:kXGds =8!bz;ÒL&ڭ!{K+dPae:Ŵ(osW.n#Afw>AsgBQ)tȦ#@y:Wq*P`zx:^XZ3n%y!VMoyBmz y4qO9Yuθ"cUK B̸mJm9WZwsft=|n3hjpC9ѐ8Fnxw?D\+xZLO_fqIYBt665b*g9_l8&=LYYs_ GHO>jt}ԭЉP__,Ǖ9epDa dqr'.%|m$Z{,EtwNPys&Iك ;Y מu% DBxzSmnU^xkusEI>f:2zjq]f`#'4xm v$5Wɲj$dfUy]Ň=WI!DwfjOCnTLN')lL1A-~<_JCy~dwd<"UkI۰bJT-kFyt lcfVŲTOeOіrayF 렴b%:}.95lGLÆL}zk w|W}@ >O a >bOr#)Pe-s%% C3=f4T[g":uh7>Çq867QӅɅ!!ĒEIo9*_Z$l9NߝD k/N Vᖿ= v^Aݨ,q&Ӿ kbCzBўsճyAR[܁2#$5VORYm >sDKnl/ռ}DWx P~%Q:NZMy9<{X Իn/sn@>'񓪲TZj3?߼':]yB :1S9!aE&ӄnL $wE95jR&A!kZ܃2*qj0~zAyz^I|jB<{7= kE3!5;LT‹X٢aFɡi{%zHA9;VN.Ą;glwYcgJFN&m)<X)iGp}([lzTD5A x|)[Z$ȖPuGRG&nE |i2/`C[qQouV"z6}t04 xعXYJCc1ުtLθoa A,L ^j@\l{_IQ>x0$ {Ƀ,n`,QxCϺT$&-O=%Y &۟_j Z >L}wx} qVs_{ۊ4"# Թi%u݈z|\j YK`Im@8u[T[.fSz1d6Ay1.|*Bƕ)Y#"o-F0@P<$˯ֻirL70gh[5G(U5bZTa+cIr,S &Z GR{}C~wwZ#R 2kA6?X*]_.YF۩`eG7!2 dC[u x}Fr=&7_^yqA E k[eq4 maj%K-l^i^]\Kn1I½"zIK5E]T"G^=ofI>8;-,)4[Y2g ^j?vP3A& cʵlE6%G{m%ŎT8Le*5 T;,BEWgyLٗ|D 0?*GZ<ϠoD~ґ~RU.biƸ#AɳʮV[W0iD{2 ܣ<ϧ,er𢡎aiueBLHṭH]>HƵ97g0AJehXv;>A<~m#ӎ)Ϡ}jnG{[V|OFMPdwoeB;2li2Tzp<e!.jiC*ѤFnp$f=LTP%πю@p3"~qJ\`B$O=\sTҒm;\o =b$TnUvl"d#tG[VsIf~Is˞d`ssL ta6k~4tBKP/qN^Q| ;/' U,ZMS19T~۾ȘڣAMT]9%x&g?TEIQw~䲓*>j\rGfT8nlCUs NWɠ՞#\jȣ7s@#TXHJf@M)$D/ %B%O)WC3Kkc1{LlBמB7-0N\5Sf/k#κU 8) ̲EGѾ22 do4w,d6\yK1;o]:v5̦Î&"?Qt ejGkbbPN ǝ"bh0-XrL0S5+xrz14-A"~( Sє'af<6o x|1] ~쁲16-!XT#ZER Ge,׹ yKM0ivi\JƬ_v\_Va+!!?iT `Ys$R:gpKy}"㵯]' ݠC no*V`XYh20&TQPptAA$y*JR,l8 pҭi]N׷]n 7e{+P%I.Lm?9|/,'krʡ 0zb2y ԛGӷtii;ҝTyAY\7 I֡ S/VR{-?9Ԡ꨹ ޗx.]痫VT3>L-:ct ꬵEe%/YYgt*QPCm!0KW])SjمkMod,nnK@cz'"RkGZU+@"/DLQV,cjwoi۞TgJW:Rm1 TdC_)(o 6ȁ}ǾPxjԍËo(ZN9.ICωöbS1S9)'2zƳA1TڮI|cp'<":MbWim԰}bNݣh KiڇdfIſ$.mIGq@L7k!v"ne3LםG?W%|`ˆCbn?) /(v$3V$iU۹v'o(TVrm߱"~P6cO'0N.a;eV7}47 #b6|eq,&G ՗aeJM+H+fDx!3 jPI^dUD(t/p _@\24 ?K Kf(j}6n+a2IʩmsVۣ.y=?ȖEkyEQfmnOghY^ jIJSmL`9aIvu ]`Igc#b?=m [SVX,sk/i #^ ʤ3zS83غrAC2(z O]7ԁg~X{uAS7 P1([,Cܚ=|RͿkۭ# IJY*5^U}e``k@<|>jRG[xOdN|Gۮ`=y' \.sw"ANj|.άeD-c؜Qi7Rq _s+V{ԘQh2^OhnF$wBF̓Gt_lX VkKm񫆍џ+WNu B͍c>;Eb?V3NyMD;y%[9hk/=uj oI {WMu'[~Jkfq`oBh7k[Mn;o"GpX &s7fr}M[xpArߵxfL)-Q %I7fm]+x\HgH/)Q+nsԞ( B o,dsBMO5{7o}p Iy D[6AW eR:=e ӢRǚgi@M v_4k2Tc0Dmˌÿ_A'G|_0d4#ŋ ]ʮd+#@5n2 ;)KLKdndDrѾhIBSN#֓IӤ_576@kPˤXANl7&j9E9j4yľ PS_NWC nLO]:"kӃWV:yuCMvD=JޗUZO Q2) ̑zd.nzKAS9Ǥ&=3 Y Aj q:F@[[KuGf c3Ӵ&8DZhcRxWfr v+"qqN?~j镜ǘdj#MhL<.jzEuQ8p@y"7d37c[ ? :I-dY +_g*H$Zcl9 [W4o#(eI= /øf%$_ 1$yJhaxEණdHd{/1UOZ6ɟ򞾦G^din2s6[tr ԿgnHpc?~&ymV ox8SsHI٩x;m K;5#Zӝ>9{yqЀ%GnѠJqHelihvQ-SM)$ߙ|qYM mVl9yYOF-1%K@![/P hq7+o$uyf.+ TV3J)|/CaEv}L5^?}xH6]j&7nf5Z(YKlH3Sgg{r RAwS`2U{:#\~< V6rSI?[2P2nS9Koh[b VnϐuoZu^<:XǖГ* l@B0 bj>Tu8Cl|hU\r/ZrdD *)md^R& ̋_^RCvޮn^rr-oB1KP 5'Kҫ?sC2.&7ü@&(Օ /<@@=qۊ]}pΦ&&N[TJ5o<8/<"Y = $a۬~u QXh,'8W6PlīEn~yhei~{s5ju77G SE$&tf3(u)43?^%( sE W$r]I`s0CHJ{6hR(2%0@г|ݲ-3k^a'?C56:쥫#Fz cBP=ԡ)qRU40[4{pIBPZ8Q|%rWqEt2V2pZ 'S&,I2zjyd^IXOmtlF?ajgˣ܏&z%to"u۰j2ȭ˟iOua=~$dڃ>gDj,iU1c~_"Œg2#53C)Qjcx]uUicjL_r|<x[EG4vUMMÛo&z"l[Klkʌp&/ˡRnOw`3L9rV؍y=zbo^@v3L0{dij\?q.:) ,A@Ȃ:n1ʪQs@PF~nk.KM5wd#fi! db{IJFRN/W)DzV$-Qb^UNH5*^ڼVi\Toq2xtu^lnweFxcNYl= urת#N8ۨ HR s]8@ |vOD-/ΐbnd9Jfӽ42CTH?p!JYdM/A]TGD- Uضs/Ǯ>_DiU6fr % ZwK̦ 8P{<]?mP,TzI T4Hs _NstaNIw'Iw,+0qK2oQ߬\Ry2_ָ,cR5di06 ߺ-pNTr8=Gu>[A^Y;fܺQ ʧ`z$*"=:BX"j{&!G>OLn)O%z}a5$EIAU_"HH^J;n~o.=v&$%Ca ?jOqVs+Oݜ<#+1d#%]/6/)fxvJus9n7K t68W^͹i/!'=(JRUy7h;ЎNF;k?JK[V g<թ ǩ [ۑ!pHjY+rFkouC !cRC9V|0e2!3xzt(bjzlY4DZN hI^;E6Ҟ 'K-_)W8><^Ac-][4?%Ȋb9$s nݟ(̋xnt$gHZU+?ߐx*gds2k~t4v:Sݫ97uYӃ\,k2~0Q2z\=ùza>Dϊݜ˪@ku֢ȿ#JԠF'P1+U;";pQwj|+lm33FC!N:cG@ӬqўAY@G[Qg*+`(k u6\O;DH&q}Ov؏ OzJz3o OG#V/"W*:J]UِwDkvN5Symm<w(k7jAic4Fɴ{gu_fyj OxR@!RѪcWWim Ǹؤ%oZSQ)>\Ƃ-e]5tl'd~$%V5j2_h4 2'\RWM%H~XЙ%/3eC ;B.UAM{5/Yʼn_Fۢ(su4{1Js<0߷Y 5HRj4tOy4x7QV khN/ӌ:a+|{_NןVS'sWڏcۆdž,;<쬢"@HS˻95HyG0NdQDbt#76ME5 Nj u9k+sǜP/70X֚M9WaS/Ϋ%=V[F`dE3S3e y *RrQpkE 'L (ځ_Jè}x&8d4Al7Q]I߻fGm$(>nE7\ (eшJ2lHSwք#JE,qE(xOLa*e[ޡiV{69]vl^Sȋ7aw8828;?xJx >l xReP}2K.c1/ƀV k[;psZ=8/bG raeh^^ [@k:P!ҦA' 24ۃ%=55.S ?vD7ʲ=POW43h#5da7. `*ߔ?Wrc.kׂ4iE&40Qw>}gӹ c1=fI@I _(yg o.D5"kdw4TVn%nCOWاGa}_  v1x5BN;lh~{9i˷]׍7C Юsx^)Zdz32pma- ɕuD]G' O|S5Yd%M : $ؑo@lDOQ (uu_ X!z SMq*TEL~WR_4z];2>u~oG >$A\֙g+..ͩ{gfR<2oiR[JG%ZdWCvRXkѢJ_ٗw(WxO`W0@u@gKExIZ^{Ѣl}Eڋ rsib'{ +lGaUi8tn5T1 \lXNOvLJހh$ĵ8%٣8Tna󉦏S8آD{L;gu{y攇/9ODt;#׭탐>w\#?Bt4ޡ9^WtJkoD<Y%Xh͎QN)*⛸:Jcۺ/iGVGSm>VH536 $8d}Z50qS+=eySlm`v㴯M8(3L7@ʙf%QN3e};Kh(x{:][BJ]D|a7ppbBtZڮfa&xFI}ٽل``u$;(C.W#%,10b4lPHWj93"]atІck>p"zX$Hxг"! `}l'{x@+!0`׆n!a^hzOhs"N7ul: (O*Of外{@a$c,g^p%`f{XT{NKNgn–;d1Zѭ4WcO]G|&ZU%C"Cܫr$be\#L ݆)V6l3`悺G[Ta&[zg[z> Y/[=@՜$qSϡ'ǩ\݇źt۔eׁߢFW9V1eDz8p&Ҁ$qx1QM0|6,]G3d=uADsn9pDe;K%ҲxLd7jf/ɳ +E6K"s9ؖ6 օg.V² b;UdraDŒf+"X#8 tz`Fp$ȔC?V +5W|rvO&=oߡsAχKe?C4"`^` !yqqapb{`/y-ąQHI6UWؑu߁Rfo*q o~ 趀d9),M2߰VBt*6+>!i\Fڤv|> gQWLKNBW.O$YU {QӬQwY7kI~kaB}>b0[ ~"!HA01A2pP`M,?E۱ʺ(^pm8T_N&)o5?$r7oiBjxXpp`J{`7bH2X7Isjٷ8ReLr8p((YoT`}oc>Bkb$`A @D 1©mpZ Eg)T[Ι^G5c/kjpW z o $"  #RG}ox\Bk]Fz/2a7X@JKӨ]<\T< yG06L</Uͺd?vw9֕+羆Ewa@i8gkf ,)unju;@4b%7x.cWOwY?𼳮VZs%/Y;",-QMj`ZznZ. ::"kЅj\,7)L]%[2e>l /\'t3R,Wά+qªaJ{q;:H 9UÐܥ6?!Cc~s#%ƢٴV*sn>}>ܴkՃI*ɿD$)OT!ȃpCuIST>.GPl\E_B*ˏw٨3PG+RYq%Gp*9pjדJ:i$̑n7z:.5 iƙ`(v8@gNLP(a,Tt(*4s~H帿42ꚻnIsW`z.b@g=daS8GN7?Y#cn,> Ɛh$@*-S ^_jvY?yy؛j=cFf{^ l#^TeY ّ~a׳|P2G+!Fcp 6}5\G3U;,[=QUڮzŀ<UK.v#br@h[;oIxb Z0~F~!ZC$܁Ĕ tCKGTQh7΂h^n,W5/ > N<DR#l̼r@sA& w9q>Ox *j.bGB-eϟjɲ&rM֎hȯHg;a[-aG()Au0~ ~/Tk_aZZV4z;G#1»_`Q?o2Ԙ5OmȄD4.&~X|}6<'pBoYg4Z`2ۻ eA)wFy{ ;!^6d%x'/j&_o{ZVVmnʺjFY YQt}n:wZ*H6L B ɲqZ6NnudjOm;At:ިkNDW߸e'M~F^E v;Ҥ `@vETɿ<5Y;,U-HѠ%+p-y?΍e(>ۆM; H> ⏼u@s1H k]d2)迚#tqT`^ ^[NqU'c>7Y&╌ys؇ki KZ5DhKN  ^|=m14^[d*ٹ/pLyP^F#,$IHDB%Lϔ1q9,V4dǽ\{:U`+oFa!Ui2 \ {,m9LpOkl2a:Hr[_fOqJO:Շ /r:Aֺ􁓗|SQ ۰Ec][nSk߇u;nD"#%1R:f!7Pޡϊ.2lS'M8eZU EkțU<}f;y򯩩[<{DbQӂ1-VJ5Ny2\K sT`DT-s:27F(vE?8 ^R+NrnC@ (W ǮNXAxr(ft9HY$/:*2n015o"[|t9NRsA>S[˳lnE7fim#Cӈ9|˄Z6ӰfPpegwK­Ꮪx͑|Y9'em"m'B0r#pŅd#(lfP^;Iwjg798pJ#KaΒ8dbd-N秓M%E?ވieY4nol^`ϰwʾq螝g fJ5MRʍTON$2D0bVyN~K 9 T;F<<- $9gISMՌ @Y w *1&FU/[.؉i/> ]}+ͣB (jl٨ʤ u7m{֡SGOٰH.uYAcLOڠ;̓c? H`v0bME%adhIVHFxEA+(Э4475R)Sc5&6f0Ko53i.G!b\3$}?g^|#{ׂMU<>Nû~- F"[+ɒva4rH i ϭE,~]. W3DN$t4  8UN`OHwP`UC`;K0<2 2y.Wk0jdtRsfWG(}vu !: xIY L$u@3[m$P{}M=oZ \ruBs6\IFwW<*nfs&϶D($F*4&)(tt,7~:n֤0Ϛh *VML[8FKAUX-M[]uixm15Vz?L%AkNy=S5#"խNhRWVȿ{pp!/2PDf7vt"I 3XO O]0$U#L)ÎO ٖ%[F'zjEZ9J֯EZP077, 7X#^!jhW&tgN2YrAKVlϡqk$%<%)ȿ[_63u+*Y)ioM|^PXKwZ]/ OP*̘ې-B' ^-i/GR]ysnX1|DKY&w[H4ߏnS?c[hLd_[mfSFi%QXZoQ U͗'3[ C\ bj0]_Z5Eǚø̴s\;[~ɀ8jY#*q&b׽e>xFB;-WaGJ7b jXmP$rtj} Ԣh%xU>&ʶ~qȳQ@R\ƨ㐧\N IWp[pƒtQIs~ƻ"H:vJk,$.#y/WJ\9@k̥mս_B;Ry~]|u$c@4"ec6D*M 523C9p,b^ty{kP߿s"zר. ւÜ#&SvOoqdT%IMcu;Tk2Fפ:9 B`:T~ _,̋,+3D7AJyx"7}~pi&j/Hݔ 0Wva$ l,,QV]Qa?\XT!䧛.e=;$/yUH7Ḭ̑7Du ;6뫠u!Oraie QZ\BՁjd!'p~ܝ;7v{eFpn/ڿ]Cxޱn9&!` &{P_loެECQ$[r`NZn'Y7B Г{cv :P'mTQȎy WEYӱQVg0[(b<ǴxOij@\1C nG{֍.P|#ʙ @`6慜e]%ctShZ66~M}]c/ * `jpн3?q(glI|GRvt_$mZm7ʿk{!'Kpš 蛂#*z13C1$:ȵ(yY?{9:o{ ˹p&=/L uLJd&5S׿#N,.љH5hѪ90k綸3ܠ*./]wBw8P:>^Ӹɲ UBl_3*JNi6o=([sxDfZ]2=Y=@6(2r|R6l>(*txބŢbN'W[띦`[%5=0i(s̋F.xnUlu \)E"5*q`${uu&v /q|?QE0%1i) /kmuܒOǗw\:ngՐ5LoeKfp_7NKO cj3sa*7ڄOԙtKRu=v`3 D`0Tu&Ұ! gs֘ʿ?ùd{|",UM"x$aSP TZw,T*ZҬT{ytGʋ4,g7oZ?r ܶB 2 c3t18!t넭-iA7ޒZP [,o)<ۜޝ $+v<֦&}Vgd7)L# l~.n6z8pYf ߾gW,%6p?8dlGXI*nV k*̊7;"9o!훰a{۞e?RƯ_}<8) C{ 熙U=4G;]c l\"(OK,x2\( !~7GQ^̙-'r!I4 Z`UG1*2u_blR*#1=~?`*4|kH9jRoPv45N}7DT\%1q9K݈WСE‰_+7]ih/"1(4|tȫ9#dKs`@Iy(zQ^g;іQj҃aS*95Y z8H( Hm׍yYc@ajf-xؼ^U~5^cmc$Xw hͲeEtCxp<[}k+l"ftrP74U )\RN#A%zo\WRxDd⤠eΠӆ(?:̪]Nz8_Nh!'\|OPpb:rCu^\ⲽ/mR{bo8ÐEցZa,rbxhTG %jR2|z̑%4ob]+WQl,tR\Jc>ق[ƨשՕ*%JD\wMg71_ǵFz٫ \/#(2#'3 I%Ӣ?qo+6!7`#gt DD" ƹwkV\)sˀ,(p.R?܇ϒG\=hB7H?0Dfȥb{OO f˽MY8Tg_.f N#[w5eVp Xi025VmeV0}Z̆= ;9rFVϿA@׮KY"1.oe8-݈6q1GAWe r}"~1;2cvր3 Q;%5,?5UIS~H λSxGz`❞ݼ}#)Ȃ{Z=(6$N}_.orŬzظ7Rg϶=AEMp@H?Y{8'^}i d/zY"H =t`~6 MNO|ݼ c(JF"M朇mRfaVWķо]rNWa2PJ,Y2CLoTPSBͲEbd :[61Hw-B]]fnU֞$:륅B"?<0B'.jTh3-C^#xʍ+r7᩠S3!mUxswv jk6y+z*V/wPʫGQ [&}|3N"Ͽ-ҽG4^Y6:.zF9a' H#ǣ߆~7&B2Ѫ?UvUJ$y)j`k?Vh-t\9g9b#4tRɔzo/a"O@|Ǡ hAh3 quO~Qpҵn &b{-lNQ6+&c7߬HZ^}ol:δ\֬1zJoֳ+]-2:ѢaoI\/K(gmr 4'VIӚ**d Ɵr9(sZX"ŸX.yf ia4_G؅*l^fڴ< < 5Rg9\xqAJ$r>eF(EQ禚- BMNNoX}]Gô`uٌ:-o]B^E0mS # 0%V M}vMipߧYPOoISo9afsGS8 U Km;-`mӶ72Lnu>D4< $C(Z ȳ5ח~=9l;Z__X2~43T'"3>@)~ =: |k;jWa| ]9>}>#]uAZ>E[I1-5xE󭅢CN Gi)zM=1^wij}?O:o>Ivoe2,]^ ~ub Rc췞<6{ jet|N\HP @Ía;bhj7T1UyiH[шE]+%T]2emXm{0NPA/<'3 vEk՗#3מSNt%x\Ȭ`"6Pe2߅| IV$h}u%qLFnL]Bz~u1LxU1!Z7Q˯ ֔i&T/RvYDIi&pR&Twތwג;9XOxr6<-Canһ[ߋSq/Q.CU,Mb[jQ`7ªQ=p~zʐqNē[VU[7VlEOӞFM}FPr=ƪ yb-,P s8^/k@18pUݭM'Ҍ#y"aVb 9ZڂP&q1[ѕі3ZO3F(B^VmI3S. PLFTem)r!sUAgSm;7dt;;s+ܰQ^W`+}x %@ci }ʩK'?fP NRG}oϧ, /- Nr͔L9X3O$_ӵت +4)e 'q=tt q;L¦^k ;>t05D6K okA-3pU;. ;UǦֆ2âH`!1QlPu VQNq&֡9ptz13EQ%?Id`K2',Ujv7YM /Qqi+Ly-B uw- rƈOʞQbuXN|OI$oX&]C2̻nszuU"嗁Ag4KmL|(>-H*Y+ϞyrNWEqhz +G\憻oJcq/1J҇]!5+ЛK]Pf6e(l~ѢDK`S% J5f=0/I|@܌WpgUUN_p(K8ԸNn#Gq1A2<<~hDb׻R 09gNxI8+ +߭1n|nddZuo &<ܛn+2V1-B㇈i$)M*%g%`olZhڲ MC}X-wKzki.E6r^Rɢ·68G_$烈<Btkd eD-[gjS0r&w?Flͺx{Ǘ} ,zFx.AOPoQj&%ii~ɢNfG%n،Y19%&=v|x⑌% R{&5E%q9i:h ʉNr= ;WwxPPOй@FnaWtC6w;V,$ _X1E>@jUtkLmt]T, qrTbc1KpP(k\%.WQe;@!WU ֡XrSYUuU-\pq !?2]9oQ pt6xB q=/^Y: ~0.`ck(}}T CL[Jf,}' Wk:EZ(J( ndS'ݙeٓB6{qo) yWMVeẆӴ0q ;|W-EqYiP:7?a#אXkqa6xRs I+SR|VkDTGuz;^Z[w&6|0ItXfE6+> +7-D4X$g7Cp3^DOX? +T1.']k&ф6k%+/'J}n}Wy }&|V|1/ ߯H ''g=:G 9;τN%tNʽB fƎ&82uS$~j )Es;u8 Q)\ƒKliڃ)pCp*WV3Ni) ]͢qtIg>ƌmيUM Iw{X%f7M4I9Y^y$΂ }!13X7fjҘe0e/.rfވXw5p( ,Y#p$|N\R1js_e-G}$YX5qi!zps7#9V f>U( 42lx_nkbls=P;V‚N28+5ie/'fY j|fn tFX ȬpԷs2UeN +>&p̵_l*pxK#8͊D|Gfc1F5c7"dJК쭾HR{r~׿Ƚ Q ӫhg`ˎ*e o)V`sOKbu#x3A9\SLec0pAJG4ICkɴ=)]"_x10gmKRo9yaU1AVCm%!"_ȵo) nr"plV܌oVwAvt$㴺U6 kxx~8WC1=z9i\5 m ۊT57-hܶwmz ztl0H1yYUVTVIj1t~x(p b`&;;كӫDZN0w= ƬBbVK]W8$V0a!er DC#9!R 6G #VV3Ӝ-$'uԈO>dsn y>PHGAl-}?E>ql4bݲ|]5oGdzffU[a:ɢL{÷>]qJ[s:wެj{P ˡT23p1a1Oz*wv!nhѭ$<ؼ"-bAՈ1 l^Jc67/L*6 `h X'2}tmmKn z{*ucۀu183%,:y.?u mdy ~z(qٛs7E;fr1-S@ n^ =83K z]Ӆ]Ry1LBM1 N&=4 _AxINMWJcL /sޘ.`a֗@ DSXR5cyd*7Pm&i}Zx 8^Ir\i'+E΁˾tVPcb(Oj$ϺR^-%V>{ou(oӕ3$A$߱Erʆ|Tric;>p#䥖u-%E509t]4|;9Kc.5B5έܪbhߡ4+Tx.>uVHc8,XYH,ϑvt\4=-Nѣ͵ &sY|gi'te#A }45$;-2xK ^YqQqځ ~"$gLG8؛O;Ix4q~jǾ" d(<(i%4t>DMj.rE=gqi&=q ËѿΠ eeiud]륑V=frZu?Sd (^x=v}ݬ;UЭe^oEKV=|sXY0vl9!ڛlʢүW+1=Z_Hϗf\)O07 ~iehygߩ檪N| epX=8t8VbY||cJ!랩L8qax; ]4EBgNЦ1ZMꅍϴD ]WviON))́Wܷ`q^ۻa14G`FZk:Hyw:\sHZ3"_J0_c†OrJ6!ǮWOV遖& -@^9f쯁ȺaQ,25DCLY!*k 3+D d˔ER+dEg{ur~k@Ǣ\׮tZX/πɋjւei3j/WB:J|[g㍏ MA\bUq s2h0xGAXRD}&跌&N`pwfZZNzW0K*Ar8_lִMż)˞B0kYn拏✨RS]yahKתOc_#x}nbTe {n-A߷nd1\89H/ 8 +9pxoG66$S|Joս}?ӸރWe`jЎk{)xHfpee#ƅ$/qw_NH(g0lZ((,{?UA >ZˏÜ$Qig n@_&gqژwn*.<-G` %a"Ejfƨ"9Q)TELK_ dJ۷7E@8k8*D07[ &ܧBQkL67*T!*"d(X(sV>CxN ^ҩn1vb2xWAOhA,!%jİ(+`U- >jd;7FUxg;pQoK ,{`,ʙH:8"q J`'3,M B[:NMyW٘v!D[<)4b ߱жY+m玲a4G`rJk19t)mq,anG?1{<=\z^cEhŘT.=Wl3L_[˹}p| N;Ph9?禁XX2>q ^d_fR~ acϪ/drhJZzr]5(߇h\hWRͦhu:8SUˡF5`-ųAF #)Lg:vVFce 1H׽1DZY{S%K Bۮ&)7؁ðAw*5Ok0[TY:"QH<*ĽNMx}t63Oݨ΃^A|&%gXmQ| ċ`L4DSeء@`yjc0~&!tx}zC))24GeQCKO_M E!` \Dұ7q[7 e!xuWGTmf;q*3=r3qhRWz|!8k<%PmG~WTtLX볏zt; #nb,t6ϓY-Ȍ/\Uozq09пk>PJ5b%14r'X|Ⱥ[L26IBk/I}nhJ+pP-f}^7%껝[%I8G,/k_1d]ѽ2C½1:@.8/4Cum{¢a?X3]A<;gB:^:P1ލ{mj4c1J`^6de7#qOoc015GC k 4j뀼{u{mn.mQzf< )eS I)`  j{@ވ,lJ*u%hq\BM92rGTze=\V:DfѸI LU#ΑԠP|JR`Xj}ọMIvK y&<5JW eu w)'_Β/5TGu;ٕ mzSDր ܛ])oEi({KNNq$dFH"62ґ]&VhlJ{m Qᠹ4ځ8͏/sWI֦ X]8+jf3_a #062Br~ Ff*OhܟҡSa-l%c ɏ.UGq'VzldˆwRx8ˆe:VۿL[޿8sx0xw %׸X9]ixYE?JaD6lIƖ9w@RoVkۊ|erR#:_mU\ށVYɈB8[dYy|޵6MFꐛቧQⷹ/z"x/9Nk;j5Zum&!B!Ug457Bl]GJRҘupř<X,YWz6-,qyݖ&B7=Zm) 䵖*rAezx!)䙣_(}٭{b `|I0HE*Cb`12Υ7å@ز|*5RyeDH1c~Qm\O^9$aLC~ցd } l鿖ɴS CbL&:l=h 8Y^PNJ1EW Ux3k?G0xOK70CLѪ >|%+`l+-w3/3=j\l[.]R0'x}jpB)9.6WR&rs:SjidwN6úb*[Vy`x;N1*,%/ , MȄt'`Ka=k4*ޖ~AKS-Y5_e"0"\7T5zWϦOX_mؓ a>ɩk'z] ?o`[һ^'u=˭PCl*;O&xLm;x>ss%_Br)T;^[Dsl>5Yēcs`CMv^\Hd+6ܳ ԣ ?6Cp0IQA;I;{CpJv aYy~U -pFSK0|.!^k=;0O-Xá;3ۺ~p4d`[7vX7 a ~ʎ Obh"EOz7tuhm2J&t?Һ3#;_Ԣ!Wɶ(tkzF[1CNO9}g(jȯ5IHHy=.P̅_*[>8$;By*|^aw46:nn2(+%S/ A}R)(Qr(*Rk2!zSba}{2]nL(JK{2goR֩uZa/6̸H*GǼI2T2nfU-ړT>dXtv]4dv󩴨9Z^_vB- f(x rm8,mPP E_3J$[A єS?MXJs a A8B&v Q$o*ęcx͙ vt@A q9fsOE)K=ˈkB:(p4pX$l~fEn8־,s4 lǙ|υ) Qn(H?)&O}">ޡMYir;';/qmj% bm}چf8gtg'8$e*)-R< f34 q 'uqa@z0cnW{?^KR9 Ԍ5+ G4St*iM.@2;L᲎DqŀE ե+4#5<CcAV 39ڊ֒9Im]Y-ͫOF=`Ĝ(U 9U xA9^S.!m+Y1ϯ_޲rrrR쉉 w]ZNNRL譼Kj LeoJSI}+~ɡDЯg𭝶s S27 <ߜ3IYc0q?4hvcY?*Q4k0k^j\c4JQuIuw !Zha¾b 4i}K!FiXhoi1'dNxc4e8TR?1cr2CAښNvT_xw}GA]G2=ߞ;bO4EU}1U;:x\A+Ar]p.XQ-?78j MSFh—H]rs.}$2P  klv0*+\.kX8x= rbsR5S{djlNJVĽCA6;SrC|& PF,AS3tܷ2#b؏H &i!CNlO?W%ׇ l*7Td848U~{ YBR78}8D/!"!3嶏`^ Bԛ 37*7VS~`{lKucBe X]nrW{Grzﳆ[#"+rl=#^6ݡPHH(;۝?`wPOÙwS#44UjB{ȫM;;À01OdVe?XT&C42 n5B~<3'z+$5 أ^BxI&Dk!Jn'>(j6u\0 Phs9-Mc;"_Jg6zq^j][ZpʑO %h+)}'$R@j~Of?t;٨>q<).|! ohfbCĘ^tWc0JuZPby$Q$A|oE"ʰ#8 dNr ٰ8'ݏ줖\G0wTm3yI޴G}̆Nj2 .C%&ו6h?T~rpk=}[*pYN~] Rwd企zkjl?K_Pϗس:c: RdH ;IzĪ'JBbgFW@]qv^#q ũ8mWe>mCCse7v: - j6ȔZ6+׃9%">nטF﫸OHs,퀯;IHWKf#]ֹʆ@VkML(7f X/ zA(B g|/K*V 2 , X(ĨV0Ukk^,sѩ gWMhOTp&Uy=NdD|B K`'pń_K،JiP+Kbqqq]ܝMo s-;͡΄-yV+zK2ƌ؝28V][oõ }%l⺴0] L&Y@mD֘kU܍Ҥ)t蹦sZqT1Qi&pNX$C |M& [uIހ;Gr 8wAHBzH )}\Fg?)aL~yDܜ%I(TY`eMR,ؚx!wƘIL]Tcw)u;9޶T緉ֵi;i+jmF* /,Do=ˠȴ|phȣt)$+O^iK2/qmBXZES"\mLafն8s,ds9)Mj8ʝjL*B9s2Gu_ͧߩcn+bl%6$xv4$F|(qK#YB_ h޽|=Q }ΜV̄>V15@twLuvs&@.geZOT@ҀUGV@1}|:w5RLhŪajԧ2!z%ےj ~F߹9Xsslj`ܻU餩(Rß G*=Lmu׻':C(:-v۽zz2#n4Nv6WC68lKGR<݅j[m"Mx* ! 4{kB0 {`4GKd(]%e ugX 9R1Q <j%:HSCVs ջmfmHrBlhcvFcg6GƼ˭Zj'D"Ojҏa&r#~]$Dۚ:8$>QZs={`sq՛U0KBjL_d%{n"ÀO6?|3:{'?JW{9ANs;Fdx% =y.xSOJS `0@ OMlށ;A ?vIfhc'F}KLQ@:A9k8[ QDDT?IӒNVcu%'|(kF07Wq8&qRd)*eNdžiBSMEy{фψ_ֵjx;?(Uqͧo% v+I.N8p>opY7'@;(CA/cl~۾ą&sR>ۑ hۀI(D[et GH\@~K3W޶g96ezIz5sKM. .zsQRz *2 B!^ĄBr azӊ'D[ǚD^QjLz_ r#D 3ݹ>zcL;<;nR=( [xΥXVy@ʯ3dF%Nˎ\8 Eyiq{ n\© +E<$хi>@Jl6e73o^ 0yTp6,.2wGg x9:Wu\lH(l{)2dZs )9lJ Ea+F܋o 1=Pvjo I'OZmw!8aZXQ3SᤤOPv$$hB*GdA!ZYZ -Ѿ < =M>!)mte.&^j,ϟ"O? t8b?Fe#d'iLC7T}JvW"|3Uc Q4#RLY?זּpW^UrBdC'st ޾,]RXێ[YPT`bKzkx*~)|9s*PF6ñcFS8B{"kYWWf?wZtHTo {ᔓV;w91=@W(o;`ksOtO" X4sIG:0m Sq),ԗ?vў+^2,҆قR2N>.[ĶQ`32,F/)JA)l)zJ=yiWLM?W͒WkPu>%V6PM?AyP/\Mi8'_Fg^.R GS(;lb_\ vM\\@Ŭl3FSi hQo;xkl_t,]0 P"hCma~ 'N< Z9>B+ ;RsUѴn9Zft%.yA2V^Q` $kQbQ~S]!A]j:䑆ҥxӟ)?%ZfMK{͌(~7Ua'{\Pv7GwK]_;M i6:N`YĕyNM/^lxšFlkR|i~Kcٜ'  H-{T!r*: FVTz-T'')i` 2J=Ǡ~IyrY7ED˔USὒ'z0#DTk~ސˈA9'j'ud |LFccDݽ&C@LN ݼy&wd5c&sn5#v R8)KUJل+p T0!~yrX&ⰸpm{8n 9%7`塣rСn""ѦMZӰ ُ.D=pҪ{~Ӎ_R3^m7YSďq"j_`k`'=*4)+Z\U?溳vZx!~Ç'τJ&/q$KҰHT*lj: aP\lb sv+[EI 7n2.2/ ԭ6 )ڡg v\vDo^#8z\X2 LNz6;I~S.|_(x+SL7Bb-]*c P"Fifx71S.z(8T6 m )ax=]'Vg|6&$涔8ƬJ10؝ݎ<\ /?^A9_je)R0%}8 ;C l^of_7<]7ht' h}r B(랫)'fˮ"M5[:OAʸ:xzVpH~yr{iW,C +sBi!㑰Ga uƾ[k*:v!7&kqt:yt11!Mבs!MKZތ`iv.1u P?\őg^h@Φ[SQ!0GXQ9cz@BQ~i1\|{F9BӴAlτ\BG0++|$ӆ³WL{lڧ^mW/#ޒNBk:iݳܡJ•Ed݋="* 0SEBRvB㒇Bv=vH~Rz= Sc +uN`7C۝{.4=<|*3'ؗ%\c[1i.1o(Ѥh3LB|MhiCXO!6 Y]e#ePQQ6:CM *QM y6>$  ¬z^8e6 J[{H1'??̺Xr7ev+ ^ꂉO圸!AQ/a{8ֳ^fRv! 3zEc1"MT hrY"/ƻ T,.@I:"C/ F{Q& 8n]w}<Wy7{aG u( k9h͢_GeDW_ERpMd ldEuu)Bţ@|ZXH4dY΅QIGMѤ{S*[Lǘv}р% Sx_:=Y~|8MűM 3P!UwZzJ(>y^*K1ay-]. PQ:F#+Yd5=&<j0e595?v8_@0&=@u <KoJ|@x\KT߯w@fHVQRQL,9jd…K0<>kobl qEՕ&p&zy?0TsSWKV͔Bd\~(#xÃXr2Ç\8[_V ۯ3&Ia>}m;hq2WwKuYpCg-4hN^UT5΄3IJmy R Y55pWEo:%請tOuB?<%W.x'Y<>(Vd"4%a0Ϙ:*ݠE)(2j:uj!wF¾]QS+⥼z௘sLstS58+1#_7= K8`095A41%v5oVZJ=Q0bPLP1 9N:uɤR&t|1MӘ3P"FռFrNn=.ֶ8%b^ Q۪tq[|1'Avks{w1fSTN $`aV.f~P M4L6]u~dD}D"2caԺ0pۆob%C!|wDdrV^ )*P/ͳs=$ zq'z@3иVp4od`){Nڶt^M& k/k#"%xcBas?q/ jLm,y@ UfQbۤoD _.ӿ6gMP3$NN4ý # b*U瓶33Rm!#4 9mxkvd"<FX4؇Va @,yhL) wrwK+cQ^8]ZNԖu9>1vx=`(2TOBu2i^֥1BH9?"BM9w#``eY蹩߂f kF K{ꩬJ5ڝ4[jhj`9bYuKS ߋ8\\|Ok(2h@Z o*XÛ W40˲PpP_/p9NPS}q3kY^,O)]@ C}ԍUTA0#*Xfô,PЅJ瀋Eş -[6Wq`ʋ 'lrc+u[DpJ9B]!NzW-9w`!@Z׈32Qݑ%v97ڹ$<(첑okTMc✳ w&$4*WLěSҺZ麥ՙAp 5\k >ѯ+7"ǧI贒2^Tף)xAgq `'_-pfSXW8;FDG"c+5iPOE xb &l!MtdGCMH(2c}rػD(Zao9-/}jo 'BèFT,(MDڊm'O>C} _fP},^=iWP&T@փFw:7wnCfKfKi@ZMօ[8}Y$E"k݉:{Sꧩ`ooƹ[?:= 3 #EP͌4; ?= ޔ[zk2QO"Xh~%͆acB`?u ^̺)pqv=YHS2JcmP(>N'p(+Ɓm"?5Qy~υuOhB"W G1jU ~[6s6+ ݾC{UiB Zs[&TWkzIN7a3`ܽ;<])e,Fxɵm*RW7ggZ2uOxw1IkF]H !=8t?Nbz[ f b 8?ШZʇGhy\Û D}'%I^K-z}O~l%ĆU%3JtBfwPJx Ӝdb^0o+8<37s:阅;VYꗃQp_:Nyua@ ir-@ hY,wsW1X&X`tQ\Q+1?hZ5/qF' EeR }^@6 >_ZKz 9 (ȩeeuRpfx?¤lhX  [ҊbcHv|n΍"K¤(ʩu'up\zCFg&=.RFoig>ߤ{(ŗR$OdFqZ@m(\iQH[sQ ?k*dd&Q^xv*d BO{&v2KMC؝3l/9kz[kz3طu@.:i}t{acX Kӓ^ؒ!CB$ѬU9Eb/zx 5*8uC?\2>?9ܢ, -۩ +jIXY;_+ `{VBX'c8z"4Ko{C #6}PvBmM"zYUPhin#q57Fr7 G*ebʨaGɲ.D_f@tuH4{xt^#cSfH32I8/Oo.>Y0]۔#kS&E˦d42o>uc!!xx}lq v nȟEX/subQhPplIdtco]ڀZI].}ޞ]EQ2;Eq͈;4$KqI]볁;;|e״c/#o||p C6v.[~P+.6ԌrAtԚXЎEvCXҙT2l !'CSeGt <"`5>#v<eI(?ǎX c臌K=OZ'S^gLO>90|tS+_#.S=+qo[ğ%ۅ JK @EXr{0= n ފXq?qI\_;CH}pJ40'g*Tkktvl¸m{ }4H&j?$&fN*8&- ^߶>fFntGpDs/4u!]es7q0 {р7+ښ6e(T3*l#|v|i,?egqwZ >cea l֢q)S͕Ɉ&W xL=1zF6j۱32Ƨrũ6p9D+8FmgY 55֡H?N +{t(9˲]LW(8E6x[׊b 5^B~&\. 1oCbl{z R ?7\~,Yuk^ tHʗ%h>C V%%N_z-DuO`yyŮjDݟdVXPGyL4+Vy|z{|e13H?֨bCzm jC4GCenrȭb H$* AMm"Z9uWSW8!+'tE* BjqQ|e/geWgmE#~հ(3( {9]([ xeJlR Au>ܯlp^I@^ԙ5xMh\EY/52kY~fp5_KOtFdxJ 9:bu&1]ls:Dw#-B@̯PFSU6hV{3R٫nƔ!܎<5vfB*ߢ  YUi EYi(ݽn{6vz jb"g*v^AԾ@K X`@ɱ-Ƣ5W^ y ߡLXCfSZM4F$5SkƜt9~{# .Fb-iUC 䱠.H#RGҺ͹/- $Z(9VS2@DfAzqq=6:3$U<0Kf`9YDm YY$> |\Ј6:^i+(!䅷p*f "qo, 81 gUkh\hq"vAd_1_^ {b"$~ͻou=ύ$H2YؠGvggeW,nGNEG!yIR0&)UVmG-C! UJ+85ǵw׃v@SΰܽV+)vnהe7l `CЬbgdRcwp4&͟)S1$m z^P.?h7!wrr}B`(IZk-IƣS06ܟBAnШB_d"h6yfBQ[SWQv;DpeV͠]Fie|:CycnM?G]%{axobڻP OAˬ f#JVti;Pz *d&GCW,jO3{ C2?M N@¾$.f^X4lټ}gHɶ.Z\BX34KK1h{[?/iVa6MO񫑏s(L4_»>lJ?Yl#lA唨moSbm}o;|sR!O䌧 ,3x>ĵKIAn` ;xVQnQN!GAh:|HO'9V!"P"Yd6tD?ɳD HwVn4-"}K$ &ZN@DZiӓX%Q~8UTSрgX5FNk 79>T郬\F[3<6):0v'ʼnhdB e胘ܡSmW躻'n_tNc&@0EXDt)iFj˔25 :kW"WkRůFAN?Wd3釤zI 5<5g* )uʃܴ7~!.y̲܈ۭ3W7b UΘ&o[JhP_EmHcRxN.>Ţg!$IJӳ7?S lN$T +NO4誁8p>kbg|D揦:z\ tC-wl˜U? 2^8Y emPR#4t+E/=g5GyZ81xrkl<D+WL,kQP,epl!| aH NOt1q8}!ʟ[rd"~E,?M}n58N/$\o <=8 hipVy?ߤoi҉azu#;]0.5hO$tPE8M'nt]cG 59#LJU8X]0a4%Y_q zB[˨ D2@I-4B295}ԾjECr$kaihi\'teUx@˜+_ J(].xUK9}K#OǯI=VSNC|+i,.MV{FNH?_Ixn|6p\өBV VOd33&nE^8&y9`9ScWzbIri=QFZSadGAx! {㿎rPl˯"}7' !?F+r?{/츗*@jBz4S eQk/Z $" gAz}Xnt8L^=:{-\nq.Yc'#u24aB&(s{1tiIjb|ރ~Z Q#RۣV`mhB*/25 HƹWa76kH޸m/atR>Dt97'ԁ"#DSrRpU f * j͕x?_/S׭:-Ѥcw)ҵ, hm%eÍDejU}CHiVuomѽ.8辜sϝ8PM$~#`z/WCYROl|} a^K~0(603{+>"qτ i[.Iaq 패qv}0ĴZ :"Lr Q 1T[!^zCۺŸ* ҀSbd EfϰHRje+gZ'zaEhVuf(ztb(QE3( oj;<.ct",Hd`b qض$( \LE71̓l*o@LGǫ%]/xbn7x %;`-@~㭪mB0ƌ+_Ie$5dZN|stvYH[Nr 8rD~'jH[1d*$65{+D~; hV/49IDކYLo8Q$Ёq~ƫqAϫKVl|s8y!k`#! DzU=ZqNg.uq,^\i{>V>gsék6EGM"t.V鍷5z[t>ơ#6&$}pL_ZAM9 2j VsU@ԤaLAcq7B-zcKS 4,+M3{uƐg 1|"Bh̟[`'67MyOPVnܥu?^U.Zs(;\fD.2ZQTuBh{H,&;KTW@8i-J!]JogŴgo(O">pr[dlіz1N,ͽnyoIsj(^E? A A ǣŃd~+4e:D_ʝ6-؞g[X-BaOFp7:@]5p<"JT<8$cy 䮏b,|ey3qXT:.K{D֧ع{N8,l-D5q!~<{J"WD§Ī z*'$ i ev foS ber6_!sKA8ڈC|B9oEr`h7Ū(Sh!ɍ292=cSi'\%8&1s0v^BqvuƂti _^N+5z)Vڷ]j{57 :ɾ{1ΓٿÑ]2fqi~;ND-4%p1jQ9?~Ya^SY @ O%50.M A5rq))F'eI!rXy<3OwNe*|L@/ h!&o7s@=^t?[l(:_V4Ʀ,(Ffɤ'T+ z0 m8a%{vDЈHFj$G 5S"\ X~G 0*%| p>Y$6veƚDr"%5uE \:n@ }c- ϱ{nksy^J 5L838|Fw\a_8iEG2(M{f8%׀E}$:g'!bS`Z+qYn#3͑y{~>Yd@ ,^`NՠSmVP"f0MOֻڵKqö]o׆Mu\} UܔYi99PqR`r}̽t띡>]ܩz i2!j̽W.?yN7h;.|?U 7[Բd\ģqK}<ޡ$'^)P|mS5I%H.Α>,/0WD%N q[_#\,QSY*5%~ :}2炈¢h, ˔2`yK@V2T;Gż ѸP"5~:а]7!t_^;H<: 4p3!,v%gNB7ad^Ǥ"u|Qt+mDϕ15=Κ\<ש_ w7U!xAvsW_;>qDF`]ټ67]6*Fnͨݭ[4?ԦU_cw3 tW,*)VIJIMFZ21C`PUz"FrHyeC$.?$`@T (u Cp?'v PYsbd-JsV& ytJ~ J uK]c9MHsqt)֓`&82wBlK"KK>)-;Gh?ub h?K0da`܂+ 6ûkӈPΠ}+9-P8~O{`k!ҲEQ+ c00 eqb!Uvj,T+^: C[SNLZ9JB߫%(. ߟg\gA2['tn*P&ublԪ%;#zt'Qy YhVE;CO`7'8UZNkJ y Gz^sɍѯhlνnx@ld b 1#$xT@1BxZao{xlNF+_2oYˍG9p.T;2`- M谏j6Ә|P?$C';e)L(} W<ؾ#{LGG]I4時py.9yDb"oX3Aq#>v̇d#!lx엚Db'n.'3_l;E5ch{#<Ry7 @}fV^߷QS> iؒ$"@~qDU+DŠy&"8zw9O3%5P%L|WTC 0ML" dcGy"YuRݏ?)#|7,^Q﫜GƎ@bם~NL#8'<)m1ѳ4Su`;X7glHE$Cz1" }ܙO䷬Wx2 APyIĸRw==dE28RڤQ ugL2EXpP;Ob '.|MbZX8I7,T!7i^n\!JǺɌx^\ TǖWfN4''c"{]Zr2FoȘLi00Opv<TKjtCͳyd1HVJg4=N IƩ7R; %/x WN$"+ŋH&IL$60%t+Ge/¾,tMMn.AjC(X;5/̳pBJ?*n&DŽ\F\{~8.s j62?fI3LIh+Iwe*(z XF1ҡL0<3!m4pZ5ԛp\::la8x"ۙ]Wq9o]Nmc p;#!ړODՒX{ X~,@|`fp[7\p7!J 3Ae83վyɂgB CF#nx)`WlhN~ZCHE`5RMt.,~8eOH!iW1wm*\4=ˮ4|]25AͮJf9^Nhʣ]ecZLJC<ɕ|CApW<@E,wxr[Z/'Zt&kUo,ĬĐ`,!2.?@W]M|ް!pSQӔ"ʽf}O?l5 :?IҮQ'S~TN `anUN>P坍'^xpc))l pni7߱9t\"cba1'Okq폻XdǨ-Wޡ{\rsTQT))ur%<1#ҋmy98 O0hR=g[)p*Iǥ 6ZiF⫇n"9P'>36P_0=pFH{# } cƪv_P+E #¡UP=dbPK'Ylݚ08g ڿ5U`b[OBtN=wQ"\𕙍 ٲ&P 58C;KH "b^.:gExQ'[>cӜu 0nYB&nr!O+kw1O.Rܿy0ao96x)ҤqgxB>/{jjڬ=g.ί$v)e 曘;7Xөn'Y'Rfh>";=JQxg5%gxIEΔ/[rrӔ &EV oEX@ލ?} TUg!XO"7ϟvL1kEQv<0'd}nd}J| /  Ҕ2JU)0 Qb)Y d:=%s5=Kˣos˳6pę- ix*bݻ}?Hk' /Gzl Ƹ?BkL94Z  ׵iDƴBhHbL\ 5GpE + /෸etS ];Qx19P~jAfc)GݤNZ3oN/̓Z8 1oƩUeMw3P`325 B ʑrLq\ɰ'sl `Ɠ-f%ޥ1a"<_f`r2:[W%7@}kOe#](k^/e\ZjR=CL4 Z",$[*[$/ $qz7) &Y4I֒,<>\zCeNAۋ2s\v(pRj/U~2p h{?pG‡cltkB2J7Wis8ըT -Q8o}OObJ52O U0ݍɽ1 uT]I%%TBpWGUY#0Yĥ.azָb>WݞŲs|B>e ^Aqʍ 8E>ǎ$jIn#cTO9T*{Ǡo\_s3;:ϠHQN 44 {K%X bMƛYݬT"zRIZۉPZN_<FgI;~g7BIԛvLJ |7Cb=j[^N/w['^Yh-!6Z^ْ.ŝ-a'`GLc~q `Ag61 ϣ?Uyaf/F`F\9<'eUPEl;f*_T5MDlUN&kh, d Mp _Su=0;Cj;ĸT$pG|]8';e[xK(z_F2w=ՙBX86p =;IJZIz q*J;1 o gZڟm6CM'(f O2qek,nV2Qg]rt;Ҍ 䕧;k>9[XB ؟Ô ѷ:ǖw bՈQuRs.҃~oH(2#(]1^h%0< AGBC^߇~ZU^,>nު˰^>b6φP. IյG:&5vJ _,.ү1ޣUAYl[ьiH1bӌŀՓ1POyݩ!y(,MB.E0*^V`xۍl !-1ש7[n03rNʗ5 ٔә]#Q-3 d"@UkM]o]qP*,U eHs=M,kҳ%sgSϏ tL"'Cn暦gJ;}ע$rp}f;NdX-c=^GPvF+EvQðq4MsÈڀGc1RZq .]=!GE H0oBn1L:\F1!pixD G{t(LV6I5䔤ƋFr),/;35j-V $s,xKxPvS r yGLy BT:uELH?of%ijKC,_(YU0-f{0 X@zrƕPe,%S !Yy(WlWZzg߆ٔ2MKĖ! Y үؘbŹXR[@qT O Appg$1u6^0,+ c='CxIn=Bv5lճ'GOtEySz>`~c!Cr&@rn(@,R Fʇe@~_ d t,9S6?:)(WP4s>Kp BoVF#~׵4~.5#Պ]4Bo&ߜ =Q7nQd6lA@<:ViElD-Q4o2uj\cd.l mKKg:n`z96 1Eka0>k!g!V<hȐC7p/zZM2dwօ%T(|K)Q :w Ǜs_tn7r=V)̾QL)2|ƔUBʔjzӯlb{?C!?nuӱlyKlbST|`FwϳqWB %msL4,ڿ )dwIs;i.jʟ'tzkEUҨkX}qS>s67=sG&Jx/HG췸Ikh6"-'qf d/C%vl.et}b&U>1Ɉ)Oj>vOO1T!p\n*mh&y*T [n'r% dt /GOI΁}+W>QM͑@,T}= ٟAC _y]CО_?-u"> J2&n詵7K l|z&"csc"r4$¤`+LTNQKN'Ouy JƘ(lP NBvP7{SxZTĴhw: aBt)!KfP*b$\D/!L6+>?aE;A}a][>ъ8v`Lv!l$TsPZ 9YVG\OǢPYMyM 홙56 e&VreK#ը1e΃z/e{qFc|3LXc#fj ]f۫Dv6CycNr2"9hMc"yՄP}9Q+~)iqJ*U 8~)d/֜0<.Ns8|*,&(Hību0~ >Mm""TgC)IO˙ceɤaԍo~zg # |p@EN I1hfwPl֢" B؋{֢jHAX~f葏 ;TG*[YLZGƭwdoHbڤ7s Ź<:d|WnCkci\i"و`㻑7jr,}XwEDe.qrבP7>*FY %&DƏEvI A6vJGkZ{i4+1ŻxVBaeHHp9֙]0:K@G'2OAwkкZ)Th#=צWp-WK!gc<"z!0xlJGfAA"uEɲ=LrN =<Ϝ?TjxZkRu__3ްTh?Q.'-|Ե/~Ƥ5^ +UJRs'Nago8E/S"v y֖R;;" E_!F58;':ߧ;->#[/9"ys܊}!]Vw:;Z߯:x]Sa8"@Voea $."uv2)7 Fn=QGpo`gʕyQ))<:0g(Չ ddav(Ň4:fGK$WU`= )|A=xEGM}!vx-IC*P熒;8bJWEͽ0)W'M833`=9Y~Bw5!K_|=;رJ%9v d}:DOР)ȐheBn"А593.{C4ЊW#wsSUz$G_4(C:/T`yL:xt)"ugUvy?plH ff[?t?M78ndbmQ:wDCU1:sLL9+dDQq,1ylp ExuU4QJ¯u>dSћD;gk7ɍ 8t?Z%,_Qa1M uY[i8>io\鬫 w)Q޵U*w\ m)=4_ؓd J nmKy4\2㤔xr2f4УcﮒkREw>B&VIYx@{ !q0'׋S)݄o3;(6 rQ2\ȗqn$1 =\fPOaHj,h:|VeWPRCBr{Vhu4-G|țImUF ̈́V()Ӛ`'q*#j |j9kyCr;T>9/N3}Rmm: F7h1ݟ< 'Bj0*nqheo%{%ޫH uuo;m0#P9<MŵEqgKED2fﲵtQ0URm•b#DV&C|};ٗd7\~l@g+WN[e,Cf! LO?~YIT?$h gWa/[C ⮚Ki"Ȩz`c R#<#l%WK :B{?P" qj.w|W=qجf*nRQ䲟 sźJFH5 IGI4nĺs49?x 9LnBܖ}?S'n丳klVQ`^kF1S4UE0=T1fȣ09- TIXΕ6hu#@ G!@|ʙą б:lnT;`.~]+K,sgZk_ bUMk09*ּX::BYw9|&]b.-wAYŐ\n\ށćD*?Er+R4Ysn)|F/kA|uAg@ Co .}`SǮog5-H,a9 Eo"] UD {'R~y7ʭE{n' \iDgZvN1sPuр4pǛm^,_wX&R`:gӫvJBU.wd. T>1V{Su+:N2>-Oj0~s(?2{lh&6$[mMS;Q {MV@v~r( KTT)2ϰ2dN&~;)T|ވ  QlrsLY yR0FH U(ͅϞscY7n s[Q&꾻3MZ0 vy˙jt!Ui~VtpLϩN{IV>:#ްgt(r2CSӯ{@|<Ѹtp9А>!VDϺCsn4Wnzxփ2c4ea3<'aږfcr@wk-UkȨ4Se a6 H3[[BҍCXL!VCOt @h,Y1I*(&NmeIioQiWvDs2q}MzH8S(>MU>:u4JgJiY0)fJB )`V c=C%m$JvCMh&PN:%s,_b}PfgÌCC_1g 97@`qV.$ǶZ|Vڟ=ݖ-%O{:PE7P)kZrx(dJP"siPuc04 wLU?j))%HaFS:uT6S %TpL1yu3V;zgjQJ?N#TYPX'݃ؼ FZ/GGwAm\CW $T5 &pǸLk -Oд`_60|]PM#(AELdpLJVQVYN'3KCLL/;A!o6s~tKƼcڤkѓ虑eC[S;i5b| "i;&z蘏r C>u:bi[ĮH H_߫bqx^\p0FòUg:P4D%Dhr.Dg+េ>UK6)rN}x@[I/WƥO;C(9؅oA,/3j(Cl!GpȮ=|2JGtT&"цO } Bjߴ.t/eNB?WYUN,+t5Yk]ap7|:RLME9Ψdo~g(E~nNf&3!4M݋[< cO,i֑&y5DjFJoZ %aHzo828x#XԓoPRWXCmUk/6yO!I?CpҔf,\M\y\h EyN]_ۺL<Q8fqXpy j+O3&˾!sj{&^); 7Ns͔:s1WwPW!3nvH~T^zg=(y?h>U)]ytޝXsb.)MRkj&R3+P\lyçU,,kVQ600K~BKL=|J7gn9s+%˸9c@Pա_T-Z@ö,hmu%^Y'gÅɅ6Q1v% (_w<IywYA++̪]=q6QcQ\OHj/к&8MNBneЂXH9'V/gTKL'j< 0^9)Mf7&PQjO ,5uf("NlYFʟR'wߕU 0q{"+zEs? H$.=6) 7$JĂlQF#3x`zEkJҥWw#Bb0q&>y uJ=65FAR\v)wAz0Qګ?t;S`9:BXM7vXY^)ҪF*52Hܑ#W2ЃuR'\4!:uvVq["86dk3r=:vA͒]s@ c9Ko&>|!A=4,ˬjVVLQ?w\طNm%*3<ݣ\r>8uka3%'ʜzcx NVO"}UB44_Ϛ]!ޗ!,*.V "X1K@vQOִ4eyb2 ZnB:}A}O8>@֤^+T V#=,wk՟x W Fi|);-@8 7 ;]Ƙ]!P4Z|grL?/I)kKQm+8ޜwߐBN$TbDTPJ*=uLØ0 nQ >{bc׈7-]0k{Z7~׆yik80OWh30(?.x _zJ6\]dRp0/Ui@"31Qf֖g7ٔP("7(OkKO Đضlf^M (LiRxcig1|zHgQd"N %EB7k/<}b@92fqhaR%8]] jF]]=Tn(8߯"9u1YJrv(O%5,޶|R$NYhyF^&AԐ"@ ]*A meaKN:k زH ZY_tT$mb di gدැy#0։9BFΖ7D̶=\Fy˜o6IA瘿(PP.R}S;]]*^ljjI` Hz?b[zև15 ܠz5qVT߫۱a~| o #[0q1CvCi.u. tJڼKp5< U J)Xv1VDf9j , EY,4R#SoӑρhU 8{k jA. HNvTl@}űS%gX64W-$OI:'5ﴛfn) Ѧ_Czǧd ]9<Lnaػz}_ wqAbStո8#!7ZaKѯq I_͐\SyaR;x\d]rW,;_岹/4Q_%Ǯ.ǃ,P^1^JndFxfR{sJkGe?8]5E7gXPF>֫-SPċD|*ȣ@&w@Co`fq.Slx_^ hL 㝿-(g€ft)HTDtmMc li076 VueUϣn& V׃1|&q_O S%\v_lSC]6yN@0p'De<*iדpW %#?EqXfE iPu|`g{FY0Cu~ʉ_g쥳֪v-,_tOB-3, %QOhY|p%aPfrI)-6{\2keIؐyeM@1I S =N<,RWުlPqֺYjȖܕzoafl>mK0f6tmٴu*!X s꫽{!(بDKY0y+tr55J|/@Jͤ5)2Hعʾ+zA{,PGPyB4-p>jUi.x 'MqO0O ?m3Kzqxf)̓աR4C(7\8~BfY4GuYbܾxcغ?Ap?zpW]nP֩s_I,l #UzazkUsD2 ܵ(o xķ^ZFJTAyzNa܅ڭSUJ?&BI]go)B^U_ V1n&MoM(;聆H41$j6hT2̰AO{b $ a-ϿS p)m_*ַ:S=m'EAOzLa[rߢ90[+"OCt3 %۹C2<em0q_U_@Wiep|p2Nd $0ñβ ߇ ,<># ~wp%^`٨8+LGC[_ |= EGS+w5=r$'P-r}xٔhCAt$Lubk4_߯J=I \FxV@>r\@HiiT95lccGA4$4Cʐ&]{Y 6 6g D|rH ?݇,J?ee.ZFvԯuKH_o2YgJt[6+Pϭ\epQq/k|Che~#.zkYNh4ukcCCݣMŭ3{d{M=*Q ɶے+Չ<Րd;;4wB ޽->e3_j¥8ΠaC$ʅDf}}Mxi.o6R[[&IFYZ C}pGsK”y &~|_)hwg6 ¡V-L8]P@ڲŁ!j>3Q=m>w e2=-%:vLFX5T_߫}S35j5X=\CB6$5X ao(VƀMͺ i%ɊjǵF/bco %vfɷɉBk" ,kթILq,FAyǢcwJ&~azvS dbXX>Ҟ~4/ɱpmP<,hΏ_oj)ڎpw L{bd8<9.Ա]d T*ܢ#89\|F]Rr! cyrPQ%Di|Lk7 uF+$yBhD4}fqn0KP7hpwASըǬ-%Ud^ALc:Mz!`cէpKbNVoK{lHCrv]RxdB"a /Y&;\.e KiK ,n{~6C;Ҍ M8+ J{zGLNo*34 @sqb&i=Ce qQ\'oJ &Vr ORwgC*%-K6ʕ+Lj4Ppb |j~*|JJO}+fh5G~MMN904)Aj8-+Cѹ_~eueݎL@fbhDa]8MGKYYcH@)w?-âeCEZ;@B&Gwt{Z,sp #i]߫] S?3vbwrw؄ݒ (6TKxY߶!鈔]ix̘K2F &# r^\dOu{?r52(GM;>LW'=`(JV\)R#̴B GnIԊՀ3 @C-f?uKky*.҅*$ZE3#͛\=RVM^tbݿ?=!>8vc%^gfU͆2_( vp+ jT59E~Gͣ=h/8IQgڃWNZ]V ~dlZдݹm6Ծ`!c/9׼*U.ب3f%D#IݬAt'tpJ% k.=Xt[}Pt@:o񛌜G(3z ~ܙ\\?ἰ,L5x~qI]&=UXsJ<ZԢ 7dO3qZĿpTsOӘ`|#3 }n!J'E%}03SQ;_n7r۽wZX s?PS){s@_TH/xX9`4UO znlHi|7:tVssMx҃ ]N.S,$ɴ-ݮk=*Zi>4ͣä@Ƞj{t _0mQ)XBEkj#uo20uI?عx9zSWp'A$և/b  3}muril\7}&}oiJjy|.xdjlj M/Q0+I%$+Mj{olDnQG:y5 bΒ/dHcSEvW"hq>t&aI. К_@CpM2nvxlm"jBks0mvU1(`n{8˺s }RtHGhmCUKV/S<,;e<ք;hMgkũ G6hnv|j)? ^to4 (t,PZD/ )giɺr_duw 5|tWJ`@hېsTةG̒51EvK? jM0I`l@M׊  qgNZφEPq( OT&= :.-̠DYm 乐kK`GQ1_`aA.#OBNjьd ]z}}&i0EN?oOϠJZPKf}%VOc0;<~"OM\ְʚCvifT=Um(pY[u_:5i3ĒRd9 32T yKeYI W1';*|JĂV:MgIÐ jWHBseq>spl8 K o`hIKL؇öhZ8폸 JcAQhyZ*fqЌINgBDK V>y$r dO~+0PC٣f]<\V#]V[u r7 :f&A*fz H7nxAۢ Ϊ'??zՉ Gv3còmQѠO1j^pWNϲédXou/n b\2|&kpa_HoT/9H3,=U~14y#P':l@ rNӫO!:lBs8,;ɓ[ܠnplgMRGsr<ǫ^![09슋ߜdP~|pM #1J: ûcgX"utD#)n8l2^2qiKqKLjlF{w)R+p'SLN$X&+jסc3%X!VcŃ2̔Q~dKTjQXbpX;/(>OIE^Do8)r N(oͭ*!#kѸZs#Rú<@{CMɪ4$1<̗PM 8KsX+lA}Ș5N@.Gt(j'K$_LT1ںeLɋ^$Ȥ^su_3'Y%|o)r]噖l*(J ?*;AKSkPWU%HK&+4bSGL{iOu^[!^jCxx2^5yf)(Eisл7jBj%ϛԉhdL<:VT4 /YkR2~#]k zM' Cvrt׸DȧU7S{١Q ) ]-9)]M,˅ZMC{ނ蟭[= bOqF״miE䠵I4'h(IڣnuQQu?-zձ[ѾF\"Kz_%a`fnmэ zK"R@א>-QڨEBk(á洺c-~'uɝ3bGWխD*^ AmE_JeP3I\)-hj;s-my peRU-mp(i6^{jo74Xaprᙡ>mH0Pr;1lC4(-RAbkpxjx(#^N/=#gQѢr o7fR /cO)^ $#t!f)P4<Mhx.BHqŒ@!d&ylJc *oyEs%8PX"}cͣW h9r8@7qRN's,FM/"}:Y?{ѨkڒV By,k(W\Tޠ$t2{d@_Nڣ(Riф!A[bgEVVw,zȀ)=B{V3_"Ǟ5(TJ!xknJ&LZX4pƀ˸lXACf"jS1*Mi<ʘ_3WU_~^fϦQ^P3Oy5}Q*[ma] sז'LJqv&wR%dԠ^{y5oH@RxuR0Ú!d5#/HdHcH}iَ3Td-&]0W-_`6{.zeC7#~y=dǵn\)A Ph07\͏.(:XK$ X÷d'Uu\w8NdukOrR1RN@!,E#a|1I '*,_42vSyQ`f@8JBD 9otR蕺');压.|{X uرp'JAF?^nBP J `f^SWK!6ЪhÎ/d/BVїB>-f€c`rxnE(tbjo4k9D~!Lk0FM$EOĘWz!&"djF!̘>zp?-$9>o:H}Ư_%]ޏ/'ސ:yiT vd,[ˏL7lUV"x&I7esEKzQ%_yr =N~i#Py3tFPIk1` k0i*rHNLJPrgKJdݲ+)ܮhϱ4uYdnRl ?N$.B`+yi="y.baݐ_OXg_\I >d*4ܫ Uŏ tG{ې 5/7wKsJk޸!C96Ӥ!u]劉(ELd J8C!f5/n7&8^km6@nf2,lDRk#/< xhYN2@suq&j !)4z7yQF3;]؎#XH|ꌷ]%%~ :Pfu~ ê[?"BuZ_qKa94®m3Rh\J+]1 /nD1 "0FSL:, H H9Pm&8C'8ĕ7hEԀ7Nv' ʊ VH-˩*4@)<e| L PZ* 6֫.bu l(d9~҂@B{NAk̸G}H]^5k%Pjp']9EѶ[W>¦EJ$:b8WN]Q t>hFsl $`Ln=XGlxFeX$\(wSޅ BvNGy(IBd[ Y3HT}(šTHK_Qd>: my=ʤD3,c>6lB0۸c+h-`md+WCjmJ/X}lw kk!?aOwDǙ7f]asҫzׁ4Z zr:09&& vM͔X7j%)y-TEhMYQKx,J|v /luWeDžxΒ~7{eQݛA2S[B>ruc |'Gmz(k{ 1.Tc y_u7>Xͺ2?dOA<0a. S̲uZ1pꃱu|tp\o__zv YV 7ʜ*ݟf̽6uc)FcM` o$k9=r [>9WEk~^xoZΡ{Y\%$O(7oĞ~N.YNЋȔv_gV{Jg'-!8Ops 4(Xr"L 0}<%QCQ-[eI޸mP2xf ~#$F_-vqVPN]"q(G)ԏٟ8.7݌e|$2 "w;4%y^!BһMM5瀳,{K$1:yNRxb[WhN?.NkR,cc܇ruE㪱+j W2& Au&mHba|\ ":h.6({-M*"Ζ.7Jt~Zuw5fvkaag@&D7MS %^C#W#*8Ob;쨿H>\oK . r36I2ed/-uީ[D[?ۂ# 4>1A<+Dm1M9*F'X;V_3* AlyUu9󲕄K;Je27g-v6=Q_1MI:7X.߀ ȣ!+|l{fߵG'>1%Y)Zٚ[M#ƙ06T"RiRh8TPZ,$8ZT윟ӿJD|][n.OD<qXLKb2!|̱@\49f* { \ozԋ#W[Z4m7dO~sKQ Fp!AlrJjgsF |θ ZPT,j*_菸 &ZghJ4?K͑]s?~tڿG d/#sX:l}sDcߗbʫ1qƛOJ+ GQ7uȦGeG,$FvO$F(4oGO,V jEPɹ@dQq,:gIK&w:@9{e4'a*i1u֬YC[Ǭݰ:nMph)8 _tѤ1_cDX~ ?/L7 )hyOLg+WExycEB..1zxb7ocqޢ1rU_wWT%'|ua:-Ԥה/IĄw~8tgˍlïA)P0<5Jh>< L;`WRfKP\h} n;sŴqYҬwAPؒdb1BZ3ଟbAV0 }9*ޖ=U< ',m[2kЗYe"#O"˖F@9=O| K4J6_Ql*]mfz+r \:4s|#!Jo^'`DðPEtf0qK,rab@k:޲&V ՟@w8P17Ж4C%j.f TgNY<ג睗gA|sXW*e*/D4k;8-S@/%ZY#@8DR8ԉKZk0ǂz f %|>C؅FQoK_SQmPko mB#ho͸2=L=)&kTna$IK90%6iuBٰyn.(`~-6Je2f H7s>5g?'|on{ ²XF%܇pNY֝! ܵ2;niAJ._̍:GN@wDmiLǤ`P1\sTtRSeguTr׈h _Kh -=&l]xe#S(]E0^KOڦEbcS8m[wmu\v8!gOee.krip,\V!UJoܫcgtIh' [ cyyG(K6aJzF!(7I\&5pLp {{[ѤYiaE2졦'>qHnG;p6@=d5 .AXi8Ն'~UUx(f+Xz*J!ۓQ0(Ѥ.ޙRJwO~h~a/{4)SXדٴSf60!۰Q=O\$z'ߘF?ǛlzlQ>Q i= AÃ/,/As -/Rv婓*^^$*^7IH&@iHi-30 FWZC*l{ (-eKp3S˩I?Em*Sh2Σܨ-'<-2ܫT/ Wi؏  9ڌf $ˍTcRw8ћ#Nj?ċE>QQJ,& lYJnb6ַ}٘ߚĬ9r*nX1~'1Y{_uQ#9V&>Kc_i gOjB-pGs׮qH&_uu!8H&Pߓ걞'QaˏR)(N+?)lAd?dO_1S -R CU{rW:fjD|1AyBҳmX4Z9D9&+,B! nbVM|/T / _zֱWΈ _0v>B|"(*G9:} Gq]K ,Ṉ=kVRW\#MI7BH7XQ};]7 wy٥JAo+̳$:#G:]chc۟}օ #.v do?%PYz1ˈIpaG_PܔwNW$xd.&uo$@87 9 F\řne اQ9{K~ՙ:VeQ4h8-sMUS8~n鼻hV5JxCᰒb?<|yүpw$$1dGFwy|1(V! f {;(z(}Ԇ+#F6iRuf?ahj(y_.Fh8aT /F#RAKw0s"RI߲;ћcƕs_lA^p$JĿ^D3zFrF>T|awA 'Kkr{Ƭr2}Kk#\kx.M}rtu5!$U<aSc@iSx,o}C01%RW ,|{"nm->eJXM *lbcf)ƽ") M&PxNUGG (0e]+hLOLn w^$ 9ncЇLޜ1gJ'S޿V<(+54BF UY*c0 Q t ~o[ A$80X _FG') 8״U͋lN6_F>T 8{skpDJNN_c=rt&5xm$w3y@"*VUojI!g4؍)th|62y74~XڵXO#֩I\78~8]tƆI{&Z'Lo*Gj ,6zGm^h-\fͣx~JЩOhހFC5!p5wpeEi,UkzfipD/V ovz M }P z^ }(/e fqAn߁P'/-\~}s#N >{f9/;DJ?e}N:^t =~v(Wګts$oPT!]i,ȫe'EalWϟTLz]} ֻQiR< "Jc=K ]V,/*'7]]Q\LSrE&5`Â|۠Yz6?,Sl`Z摌m;rruX9Mp6Jv@ 2bx`rw-z|-Uf @Ps24\n.iar̞{0x*}OBIhX'ULܛbv=}VEy `Pv[OZS˃D:M l%$CEV5Uu4t '@ɉ9#?C w3( K# )jث8ϗ"Ȗw;e(Pքc#M|LSi3g&둝oJ6~mOfTxgoGȊ-[ev % la-YSFɳ! BJ3yq =o4TDhZo8 n[^lQ.%Tjʼn]JHŦI1nzeU\) &h@]8hs0u N |3ÚwDD#=SZ=/4~ -Ph>ܭo[>k4luyt o* @p{hrkq]af^p39 ]vd_&]bUAk6a@1îeH+"rbM_ybl[N]N;tv#\C",}OUKqśڤxd?JT v:GҺLfA#>zGk+Ӂ/r2xiL I3G} dRŬoS!Ʈ'Fw OBKd+4[ǓN:JVLpb8 =<猓e^" ^Gx!  1' 5~z;~3iODy`-P=ᘌC4}ʃw"-Ke$G6?gxcˑӧ} zI%+Jύ+>G(MDv'DPQ6Ʈ;&"yMʼLHeX ! )@ֵAcZ/~fʤ!fQ^w=x\#@2S鷻`}?_4>IR/2c~h$v"}O'O]fn掩$-Anc2{r Sjǚ=>2yâ0IF``܄D?WJZ;K)^{uW";+b\q6$8 >Z_J#\KjZP %'a%ߡ}  l^r¤emv u.2&ն\O|c)qp~ kTֲMw!! \'|LKC}SڞkO6żOww,BX]֒%4 ":b)shjD>MB!^(P"9b[Y(dFF&6VΞse,P"jWi~Fu8RUXhYoBk{=K( g1/1D C[dRZVQ` YxT@Fp#M(0reث%{9˓ke xi3철;` 23;0,d!m(Ee,eC (3ȌfDaVo4BX;>ЧFa%5XQV&*6=_3ټMc /ƩƀRa,tj!NܾdU:|1llBg$h6VZS4:UH7 .4-c~8.t +#ŰI#~6oJsV8xTݜ&{{jee&& nH'8\8.̓L;rL+dp8jLG܁*uz5 ʧZB+LзXDq˒R֕h!]Qt/od"qk5a+2L+%%P(;Muc ZD#pyZQ(@z=^UUuV1h>Z=ӽ+JZ-CYR$$0P}S~eӾ`σm~Հ@[=VjΊM;:4${Vhҵ3,"ΝXhLT/_ϖ$AuiԘ`ON`ޒD;uzE3%(ٿBi\J@G3J3%s 1f2tp3=0>&>S| Є\,VS*A̟e.Ҋ%  ֽG]D꾰t'c˭(Cpc\*<&pU6&= 2EN1iCxO{NvORK2ћޯKzY7 zF,UEQvcл\[A†(סjV@]s#O:c貋LFd2,#Rӆ>y`<{FHXy14SsG꨻n}qI^ؐ4u-qR2l~I7PiORʟ!K8T?>iek=\ 4Xhށt ^>4F8aL÷U zK]]jIbhfq`K[ ]02Bnt)/YgCTdg'6-{+>,O龜_2i*i. {EQ#}UO,{PqܟvF˨ϴQH|龜Z0X.NG@a {,ҶjID7'Ժt꾄7b"3R^~@ 2BJ~ew-&<H]-Ss~RT?Ce6Ŧb6zZz~;7SJ@VV0@Ey,^.$ 2M-ތxm~KFzxDw(5dܖ FA>*ԣόp@# *THl{ib( @l*jʼH%ǖeFhyh)@9Ņb `EȜKn8z ֏~5gnX9Zm/;m? qLSژ(Ec,n͘2iwfmnŚL6 V?`OgQ( 7R-ͅ)kόӐy>|sƊy-AnkП2/rWz3W|iIsMcp?6#*vib;5ʀOJ%QLӱIKFu~ @L0?<5k߮0I%5jw9DXK*k#:jWo V](d թB+CMia_ղÇnhT (E}FdM*YDWI2Opb1a'۷k])qMً"h?z6ڐɌct#hY)AbBY}:_g^I~Y5Unk/a;3PJɊ(ed _b!ZbLػQC x=WY6Xa>S+%,:Dzd v6 m5iTGF{~Oa{Πt:Xf'jG_l3Sw?^5Xo~<ܚ1Xh㇢!LוmbO,$´!.9 >:I˜6 *5[!<WBPHbaT:s}rcg/(p=k]b->ӽt`mE 3Q]Ym.q3DʢS{O{~/eI~ɮyVxCҥ;t[*XUaA6$^DҖtFߓ=) ?",k-0=FQ!WCdQs{Mµ 1h˦|Hnw,ӎYR2(5D[3D}1p? /wM%Iun9DmOOlb/fQ_+\VOd\$q="!$r=VjF)=Ӫ_!*ӆ}%DsvqP%Id G'7dGhS""k)7TzT_M:bưIgNN:iYxmjp@tڦ> R ̤MCH .TZ}g !x+:g9Εѕm Poobpє-j;eg5IJz;"M -: ggwG2QuYְ}9xQPcaF6?}nO*x 2Ƕn!ŝoڷ`ݮTpۇGX1>MCa\}}vV%WLvI{dln05"d cCDlÒX ;iR(B&HIn5R J X(@Ǫiy,wr a\gwLal|tL=i2@|<׏>46Vi$JMDH~Xq}Ie|`ݔOܴiɈ٭Ķ1: H P^D R,:p/* @;u4ɖ2V3ӈ!ީ;V]D) WdLn8KLCu+w]k𥡀Z Ih&HyPᗳ( S76uZy;Jܿ<y<FUˡiឨk(>K2jQ@.ݡ{%ֱ7 QJiQRkLzzF/t3Xد{- bPN/v_3ʗ}@eӗe-\]~0*ć ӃA=@.X&Sӹ uM)r[ tx| ]w/Ȍ)?9^kWxpRF]` xE!2g|*6Ȱ1WtSE"}KS|.øGqT(vi@ aNgso2Xnhۤ'~.LO hmz|=qC1J]4MʤiA xPDP 4^It#O>;OMF_SpYFukljc5H{ |E  )o"LE,<'|rA\ mRLbq\'qoR +qAhJ+K)-Woxw{h|elASV=|䣍&91`TOr/";s_mAq5UlS7OmwOC#m 6`CGږ΃5Mm hx ݲ:rl5FATv=Ia'D bz1W~đ=~}JNd{r/m@_\qg% pŞtz!L 6U.dƴ tv3ݑIr^x(h{ݍ?$g}94L5土1j`Vf>V-^tq@q-)߃ P=Ƹqcs!7,q*'2u%AGSB0"P;ȕhҢZ$:J=*EbҤ=:aVXGDOMZ~G=FmjԊG2f`; .NB2\>3j&=BB}ҩK^?!G~rSoAEȆO)2Ā{ ^"hLJHVƅv?SI&ɬ3ZI##*C{~ة?c0Ps2?!R%cTHf`r"lJr+2"!zJ}ш!}=S;.bε* P YۗcxۣxRaJ.Nq^ JӝKdW*.%VLU)T"m=R{dzn j^l݁S8LigMuaY! jTͱm$Ew*>|C ppNabz"rZN wS ]n~I?8yMlX}' z.:]mUrHdB'CܹiD ]M^[YOw^^mS ēH]Tg~xV[ OV" b=t4+j) "paGPUjJ KU>?_#{h"/3HTVzL[E08"$*&BZsCPu_fػ05,GGk~**$*~UY/xF A5 l9_JօPumfZaf]g]|)g%ygI(693Od;]X}%sv[P#]p LclweI;(9\g2^ o;! 5ppJ.2m;Xua"mjS|ր # "* E& "U"22bV)tO逸UZ?}[S[±,uo꼫z|n6YW KnSo֟mVwG3|\g#;5`MP\v)حy/%o.wy$D`ɘ^MHP}Fq}P@ ވs%jb S]wOhyu$] 2)@.so'mfӘb%ك M Vz7v*W5z^zCgO =]:uu->Y 2tS^ kqSa֬YKxs2On?-JߵqcZIo:@ aeH%U]MX0!J|)qZٞ`]va?Z =]K.Վ]rr25IuوYMVȄĢN- ?T/05E y%Y7pHy0pϐdm_!T%e+βv)JI$MtMQ3N gmOY?/9s7iJSG-kQڏwA[iil$-&Lqj=q2!9-k7ˠ͊nPopq 8pC95b*$^3%V\&×xTb:*vD'uoR#$ ,mLݤ Ȩp]U&7m:Ped JցB{mJS^0a7ɘ螎Dl*󩠤ް-?N~5LF9B3Bw}%|V'MkÔ>{]19Ѕ7ڪf~8z/xPH}GdRvo+-UP5pX:w GnsVNwy8۸|j!N2iHǔh?6 U30LBٹ9(VX]nke gV# (-Mbតw 7"2?'I_# @Y9G4*wbF~yFdV@v *R/~^of'go1č H*3,h/61{Bۼoԗ{:sZ*r6D,=I/IN  I(nMZnR5( ];xUn /NFܰK!V&"Xd~lXaߕBDDG:L]ȺcR1ԂTcgl@ءJa?F_1 콵s9}|sc~qr +QvGÏ٭Q0.ECӷAkZB҇cn)IQ|}][NSA q#^Z% NDl K2‚26 î>/݃+(s}n=VMf]RڥC+xJݍ=GYio6ӕ>\}GxIUk6LFO$g!ENr:xӰj.2 w?87inaq~;\h'Ho&q{I|5.gm@_/~+tpηJP #VBI# Ig@* :::z<'?ע@:1B"J2%R*kr7z.hM;xb7ǁ+HqIѧ,l&FMio^'µ9Ij[1@m R0 B,s=]vV$~Zɤ=9͊,u_;9< N@X+˞I-ñMP}'9@CE.C' UTFG 6&aZx䌲8x})Y!g.龂O̜* $ |:&k{goUȜ|j_b{iuT2Ug@yh>5x,1`y7g~\}n7hƮr h{buP L?X[v=B ! mK1}'h .n 6s2K3o"l\7Z%;ކ7<9aͣn_v1mLZE$3О-B|9Ǔ^ڔ!?#GK¹Buuw4j ߇8+xa']LqYGަfA/ >v/GT[ņ<^3T.$Ū6Q}b#մ8e8Z7{- vx[SLw,I|@7g]r @|q fYtF;|-3r V\g`dBCVԎ*01@yҐ jJ3*9b篙`2g{ AJ~ڰ%}U|*zַU'$I^䓦g߅I`6ʀx)o+E*cT 1g-j&10pldˋy؃#a]uGõrHuhe+qق3!q(6#yt*d]%DP0>̀p*^t & }iunX ]9lwɌ.㻯}gU+<6O d&90Q8H7zwWq]L8ise$w-f b U]ȯr\9G 顃AZ5Mxgl\ 8Z $Z4z $ Rz`'v -ů]W~oГqr(ũi?aĊRg?GSk9'S]ۋ$.fzlJSh)W-4oy^iNl.@H"\H1L}z0k"{ㆁX:x6q!yE1a]"dBf=4׿2o a'U-)iRį{Swh:O(-xɥ ߀bY7e+4sa q#iI u BT 'y*GEz:uۻFķ'GEĖl!4o0~Q1YUsyK㼁G<`") itYpy m %L}G`Y |tDJ4hN@2|6,@Eluű:>$%n%i:\~އxB;a>WdvΠFGts)5>tK[ x 'm7I'P(\'1ofqW^YSHhPCSPX6&oDz5z՚7vgRfMOaLJ3H5Ao庄HPɮqof}NX<[ph\\Q)s9Zb3L{4pM@8Vޏl"DZd#}:'<, $Fq`vQ(f,9O׉>ؙ]nD(sym86~λo48wX}*gQKF i>WR=[7`Ot~BC6&z5ݖKYT`_K蛍01(^|iEK~jm -~z(u_§Pr kt‡^rp47)Vw`DgAFXK1U^SF@yKgzĨ ~z-TVmIO{gHMgOK'5+ɭpEm`U?w A`-%D#-r>#{..SB=7}/ K~ ~NglIG{j$En!`Pش(Lաd J,9Hۚyl;3˺[nλ4O7ZcDq;( ϔEJcOsB =\T6 XMeF!vMOJ8:_uNR<9P4mmBKҮ~o2_ujÈv.^6~+ ;nOp[wtH0Wi[A((;':iWܺPS ?5$RI8=ZyTP_ڸy42{Wd;`zoPxOk`1P<ЖO#:'dSlTm4W CD"H/Fbz^s|Cd[M`dd8gPA$(R2RJ/ Vqa ?׼>p4A-0]@EȨ+`F;UF])+[8.2+q7-BOLrp.V & W?|()77h=դ0a\øvsq,j p\FE ^B7]ȿ|aT tj!wHm*Gf|SPCO=u Tv 8$& A韽;3xun9v{C (ЀzҌpufP:5+5n*#NZY2$zلMfZ!\*&˥B#߈SӔQ,nz ͩњFH\,98gBدDoT: pץ|󲒛"IGF^a,.ct- ʹTz)VdaKUpZ9@X1R=L O 2.ـ4X>\!BYNt"*[cIŶןQ䫏@a`WC1vqcN0Q5_y>,_ڳӨ~]#8~8qy"Ez]⼴t|b pHX8Sy>xm?fMLt ;8"P>%/boԷX*>j•̿X:Yӻ$OQt'V)kuAg.I<7l z}zjk\,5r˺ ]98<%sE5uXKDTv[A;2(1c=XnSQ]~-IIԬ\tr]^4S®r Zъ4 f )l"cұ2 +9Th${QQ8 > rb?++" $\@% Q^VZEĭƵ)b /pqK9g C E(?o9C~@S6ocJrgcX<7 Au>PrJS.T'ynW3C oW$LYQ3*cfFA WPṁ<, p~O3q 2EZK'ڧ(O1$A@/-Erm qE\59re-=c嚟=b4#C7@#q%ܣuICM _pAr@CUO@"S)?$q ƹon;w.&GhÖLr`2SerQbp)5luHgRޙm Ojf[JD}:VYI5}&^yQ^H$kw%WJTݞzmE!f0qn!q7lGZ iQhB [RRb:QPk>Ot 'V@6N)I u_Rw\~.+>Ź,b[7#.SΒvx6g\2A/dr:9fbii\H"3)v{^9c]R@RoHQ HV淴噫@ GrOL66VrK<@öٮ}2SZ 3 /x i57xe!ޅs=Ĺ Y]Η%m*+ C V Kfkߓbǀ~xgM (!ǷZ}J,ʎY|Kb1ij7nV\Dg O0ƥ@ӂ̕Q*{ 'BFb^曠z!Vfdk>bvjGvޖF'", \PP:&HSj%QnM&L̺ 6&W%8h#-4XtBDHjRO`UKM bn$ew!vVL " UCFO}I̒VV:H)Yژv$+ƞ+guy̱Vͫfك ̞Ng'4*LXЌ`>gؽmWyAUC*b^iVzzc${G2\SQ.9/6NL*I@ },eF[*BR^Kw6>B6F ㇝Sz\07Q|sk( M>v7bIO2֬ewGw)qp 2}qivEtՈsLRX% IX6̖0hAZ ߦ5Ub(dINa>ʦ̥ms9{h:A PTKG*tŒmkaȍDD> z{oc%Y tx-:-ġl-*^$tԑ@=q4_D:E ;D zW^JSφq8z{Z3㦱-dG?U7em*lyueùN׆?ӗ#Mvtq1 QabZ"I:"#"R2j@m {B7ʙ;0KRxP&#zѨJ>Cg7@22gbvʵARB0>oLZ6Xԁݙr- =+tX5 c~pNYkR51{UUA]R)'@_B);#ۇ on(/̆3}RKyk rkgoLR|2|"(5B젛yNXC'y fM>`J\n_rzPl=n{Y^@( b;Uq0Do%#q==AD8¡nZľNsy+[C>a?6پX  fN>FXн bgus }03#H`kD*:^.؎X(nT78$lgb$}d_KF/cw(  n =  ,CkWٹQ'U%0I/dt嚵0|5URcՅu$6'r 'nK5zS[4 [l1q I|Zbv|cB%bidȔVC%Q#|nkNѪw~HSΫeZwaۤN]S Z2!֗^ Ӎՙig|X4L}4P,[QgSLT;{Kiٜq7Wig$Gd+8(ۮ :RlnUK'7f]cy@1rtN{Lq-w*\;&8w݀Ԇ0O=#_ X!%=aR6TdW9\Z_ $c;N(iBVᖮVRAu5rxp-ίnR-$갧,ƐN?M~}E&nx;pzr4bW&^&IVٓzE)OgC0X/KnnJ,^;G{ڃ1c+5aUD C=Aڞ b* 8P82 w4RTrDtc` &WWZ*{-i,tZjH4A|kanUW~_\0RTi`&Md(ԔwG${! zk/U܂Qz=l¨~1}G{P+[UFҫO4N!ebGgx;;hD$6XO1Oc8{xosn:sc; *4 rWl;Xs|xmH#}[|l` ?e#Vtb#@\֙Dx0~< Wmbnk"BpQCZoRsx 0m QO7qa*Й[^]psBkʁ/hAWKCuu{t;\sjlwUw/1 nDuJ2y N\iyGRm`.6g4c 9k1|inI, ;"qaa!n)i.cw#KqΌEΟUVo92j=MeCa/o@sN(*DX7.\ˀnUOg3,MLbU5(1fXݱ4̾(䰽^ۚ讆 t𐤹>f fqk" J={!Q郝?Rt6w g?ʟUiՍԬ d+MO2(,ԫ骉oI3X;9sYlR+e}Jނ/+90%J(~PjgǡG3H_u&>O! {oҸ_s~@0b:/R#&P! 3aGams:b y(Sey~U A`ىO(MSrӆŨ^9BLO"%SK. Q4 j+8WϺ U%\J8J[ݑyab.*SYmPjn֨<$=q.ߢڸ 'jjzQ(f߈,S N;}iPvMH kp$h>(Fεّ_ENW1Ks,8-4]WtzCUh5/XF-¯SYb =%R#fdae.)(h-dA|x֛_*Y|\e2zЇ׺["b}VqqHHQT5#7q#󗍁EN UUpE$;zYtO/ sGcHCa(0-bUDPe$j:,p@ *C& õO2 $8k8J*tU%|eX'mf+7%?x0Vt)TwTs\K,pBӂM7EڣƯ.TP7lHRF9Ek=uiQ Y {*R?AX U>O[yY5ē[)l8P!څٝՆhzuQEͥDaoIxG, 8}ڟ+WVu7'=M%  jetM_y&:cP$qKNj'Wt&Nt_x\fF)T0Iy)j6$_ϻ&)7,?/>F_ǃkw!~piBh4N)s*ƒsijsI̕~+4O`ϭْt1շKg1`0x~X0T~M3},Y[_&ވ 3ژ6Ɵ[u2'w 7O]Q "Yu=EPr>x-0A,~1]8~%X|>11&J<(0fh{p#\ FCL3t`݆wt0r& 0AR?G&f1[+ӳ~Jy$FL ʺ+Wbڏ[ &roLǖ}#6M3Q.L^dD6*nGʕ{䷚.m?=hzI& 8qidP;f$ʮZk2vCâIlZQ.@/ϝ&u -NG w86J}|q,RWLYA/Q`@{P's!zp/sI?k3[xO=C PrE՝=;Mה7J@0QQ}Vc5!ȖpmgȢ4̻ &Tw"',7,V_g h }[|XÖ#j^o$>d?լw i AXStfgib8}#a HX8.hKۛva9)| &xÒp$IRVdUC0A 5ZB@Ll2Pӂ"R?_n8:N<&GKkeODK駣L`՛K*%lqp( 'T׀_0OZr Fz5@o;nKS^\aJo9u,^;ҵ^h6Wx^-c|<瘴M%|K}jr.8NIUO,|Gз.JI-W:4N"u>MY;ΐ*5* of4*;,.N M2Fɴz. MFm  x9 6TGGӖ(涮+G&J2W>H@턨Z<*\Nc=e_EjϿ1n>ZiYb(Vg`_j߁J=dyQZfZbeUڀv*r_D@\$Ch',ف/K-a?ĭ'&Af#mi)d-M}Jk^U(^PD)9'?FycF P{' !ͲH4) 볹48MߍG4 K6hJV>pq|fKR KlbigLݎ#c-X|oA0R} zzqs뱤elpwp*|{% qhYVc{87eŌ`$dV`32*]}SDĦ1ʎIyыVK?qzɩ4)B*ذ! c~ߓA>[|v|e~ "}+‸9nH\~z97XڄF%O-iC+jUn{) 01p`e7!Rb5T 't/FI~Iw.v^|>B i7ֲJ(V`24#qU.1=t!*SH"˜NZLMG8W$X,Xkq  E":fDXTD Z݂~,ܮ]oMN|VDQN:ޞΞ3Ÿm)1PTݳy|G6Nv3[FnwKfvAhYUK4mE~z_}sjYkL'u"&6MtpL¤e_KШ8zE%~gQN|% b}\Zʏf}>0 jP:"4 IappHsM ˤ"(>OVvimFʣ^A+ZKD8ہH_aeVVi5߫KƎUM"`rӰwTšeoK3[Ggôι?^nRWw4ʹIuBlHx%uZUeƽ Kza_ C%*Ot/]Ď{ROu~{D?̱V69Zl귕Ȅ(2, ]970fJ̓&oU>=|S1:yo3,? bH6zrkGۀhoRbm+yqY=(r#<"Y}Ta]"s1O<vyL8y33@,ũRIͧ-IPgUjj&Cx݉ [lL1)#)H,X?/&Ո:E0i3+7s)͐e7>پ*:FhsN NnB~]DcN\cO[еMU'EdplOLe\#TJeROڡd~l3ESca'!%`M;d&3'f42_^a _"6M64*|ZcsG$J't-e<|\;\}_N .T֌Mw` lgle?7ۻ\wp`>&g+XC$VR|wõ,BJ!)F^5 X,$8]4iÇW@CHv" @?Rԩ:T]"ǖ Jh2Gr%\O!nV7F#yh|/u~:bǺa"C ڞJdHH#ySWBQϑӧkn)cՏ!Ⳙޖ%#`l,iԃ|jDaV0ן!y4h]Zjf‘&^mtư__ɱ[>ZSj͑O'"O@¿ЛrO긼6l>9$U} PYX?_c+D U^I7GJ9*aT6XS8]c5k?d#)db%mP`ÆӰu* [ܖ,q ;;o)}SqRIa(D=c&QK?"$kP\[lAz'3Ma;?eiGi8 wtW؃S\~$5IWw酝AT$i h.f,^n&9M#>g97w/+zRX] @Lׇ%"pbr[HaaU#L/]{oDr8)-: ء ~ηm1ZS20U/kږ%*޼?L_J;<+;i1 'A/M )n}tuK&!r6IY?˩/>_1{I[]ߥy/ZZ9:%"F,HUnj?o6w,[!wú|&o 7' _,Urxi{MSnOKwebU$oDRjHg\`$1+ɓvC#~LoPYU >gjBB`_y/%8PT>燖­^iuF#I(cI./:Wڨ˴w"!9F%#\s!Ug8m>׍h8"Hf/pΧu45uFGjh[WS[`2݄Q a:F]! -𿭢!dC!?8VёB" v SOi&}HH1S^ƨ ;K+Ø@>uT8U{a5.h@u(dhߐ,hsNyEl!~UYE  `E/?tP(w&er2m#LD e~\} ]dЪZUYj г\&m!>ц-,J_H#FD=ڗ&^?UUyOp@g.<6%)g񴖛\* %HvTKz[07d, bo`HO$ , ` "ib<1 YsO^u`\i ث~(j( 1_*+Nlxvr7k ̗5ˇHGu`$35XQ I]3PLMTGy 3'tb`@ɕbr+p%Fv lQQKjUHxYLr3:M\vwf(a 70ط~YڎIΧRԩ%=b2rorسΚêaΗ(Ϳ3;l)RLu=c/YNf m;kCfIRZRzߝvN^DB&H)Ɯjn0b1rІD[^X'¬ub MQ 5}Ew1ڦSdsˤ7_.-1ڵqȒz.2&G%Lb4J[uj9LC8V8 ͽ ԩRp8 q( NQp؅jX^npN)%쩙lZ:yTWZ Q! <zӏLy5ԣ!G(nTq.C<Bf0,<1PXKVV$GTttZ͛dۦYLmMR1]$gi!d7=$Y'@ +˜0٫jE &8 ׯQQ)Yfɪ 7krUz۟;0Uڿ2g\cnE}v.Q~9yb<!TW/61ct5iB yśFKa锻{0&W MK[H2Z(KOs8U /FRnk T;"ۘi0rǺo^U*kHӕ\y-B =8]CB́A"b8'HTeuWKo!$Yv@#(M~yNfА+_A?Uvx:(N 1% >RR`M^n="&(6=CJ6ơG((S5(%E㿬ͥ9瑽R_2"Dɓh39'`dzFpU 5G.Y 3REҲ1}bsޮ6.-"Ć+ ĻU ܢeNBJShqoM JBA<CMƙo)JBH r|{~6䡐zNbOsgf"Y0.=pM;L쫻{>8j9'xY{}@!r} (ΨgЧ}6/p,ȩ0AWmԦU 砾A>3üRG]a.y{Y1h@< &?uYlgWm(tTS}ojHhΆcEnq >Ў, P s/c #v=O\'_蒒 9 }N/MHvs'\9fGe@nI(I<-#UłVfE=">&㓄q\Y‹oY2ŸX ?it଴ѱ0ANc(lnhlUv-h }^BϝΎ٬d"TWt&¬!ɹa}7OyG!bteҶ#|,Esl0Z=y*X6srS4VG_ZS5C6C(?&[dz@S)r FX J ۜ`dB1t?4wd7L^x.|i"s E1=@ʸe'(dso& {dZf$;:W`S qL̦EIIG?ڇz5bdZ#y.$qELȳ'`8_czxʶ &Mx0G?ie,FieFFgEhН)V  1v}l#d=tQ2lz)1_J=ˠol3f7'Sbj1E?&5_b|TRvNϋpu{+ǷRw/:Qҥjw: Fp>fہΘT29ȈWPe_i!0xm 0ƾk-iۡ. ݻ*+TaZ:_/.-Txܴe  u珬˧Kk#J79FG&]6]3d )dFq7q(R]HMm ZtF-PǞ͑T*sl-" j'>v9֐x6мfw[ѦisT(2#A@XxH–cCx?3g ,ԃq$ հd.zFQ+^-=2O`B-BdCMK+t;{ﶠC6XEw<4)SFmUl"r{&֞TO tg[ŐoAs@LmnY(v ԕ$|pY>.V,7ŅAy|6U9Epfe3\^O&HdC C( sNbbX"wC_gs ^-٣|;{5'U|PISvSsvS%x3> K#>^{pWȁS6NGSA<tՃ߽LIBFҧEz3JF)KhE9ƈ6Y#KޚpEWAkUu'[UkLc ~T-*HylB<~)W뷌nh5suVl-}^.I.2=w,# :ƪJƾ. jd,Dߥۆ+Q`dw7&&*ӧu2ƒL%M~\-yv9eslf^rl=?o W\DknKO Č3qb3eF)fB>l) |fD(WOפ\sM^$_(u{`1bMH(D+O8sb !&'RH7D.Dm2x|-킑JFi@ C#=]iKo~h]tAv+_Q[)Uw `jSP$(U'V2݌(%n:s_.PN2O[&AWQٞ*-:n'><\v?zQN,RSoIOo݁_~:\ _ֵk QxH6 >R0<El }'nZki%#oI$bC#蘘rl*Ҷa6ׂ/Tȋ:hSne Ő-3"X\ (?NHafl;5ԧ&ma[Zr}nl;pkb BAI8@<0Lt洵F.>+ŢxO(D'Gbz9vN=eԗYK6v*/`o)+.<2tq~,cb gU&{@<΋bgT ΑJUiGz&e)P&kZ BVX쾵6!(C,Ǒ"?HݷX0v́g=A,l.R4>*hhC= ۹t {<:>5^/b cƀyHd vk^dYcX',ijg,AVZI5*^Hq P!PpʣW mCT͡k]rdAG O=CP5_i9vB B.~gtlz@5kyόrw˃&M[DT';C =7rn6wj*f_6@H.,@$QHRyka2!.B08 2[݃?O4 8/T+t? ChVd0,{IK=.Ī6N'7zX--L@㶆_IQKR6ս8P;Q3 @!i$eO_Eh1 k}~2TrY/ga r&lm=89@~wIӃ"gX z*㭻ADԐttڬ] S@~=i q pt;: jp| n4W!u*/DQCgm75L|߽d<^ FmeA2;,v:i*F<@Hjhk~!/y{>LG$$@fS!ݮngGi_)|YQ7#|,|^t01l `6n$3/2H/ipBl1[tQHyqggS[(%5IrUifKLqC5LБg|K6x$-m)sT r@͚w ^B >w,Pu}0AixG5L_Ɯ7D;>{ڌE9+0^N*f߿BݢmNBXEQJ1W ӎ9eZ[~'\X2- .mB+xĜ;z_Ü5X-`QT6 qͽ's.2G|e|q8? !]²QDJHV4̓ F$W||.vfȷq!mŽAu dcxz4 +[dh>0L~"gY'Iዙ'XDK؍s(P@h~wNZ*@XP.p5lXlnIETa"RCX,Do7|'U3٪8 0k8.AN&׈ݰස@D*sɠ  ۽~c\ld}y璟+Y2Lo P,wR(xՉ.dȉ݈Pbx,k}YPuYp{p0'a7Er]lΏTjErXbJbLtŊCm9ٖH?Rq-5Ӗe~yd{3'Hs uCc=jA*!&z×tbbv-NE+e͗KoQAz x?δ]q 1݃H.se(P|\%VE5tt [Cxc(<™/!ͯc" XӅS~oKY'5<񗀳˹飏%Zf9XqYy(^ N9=/ܩ>"Nd&vyOG¼:J;R;~j~#u >s(}= s ڕ9 ޚ#Sp>(|#' !nPkH4TWܭ*iUГ:kz@.'@ktK5RsՀ_WXb$Wn:2gH?#,t|?þ n֔\Ǒ| } $e2o]렙v 67tg eROX}$4.caeJ>m`ʨp[1@P4mYcmZRC+1mUfjPI]Ō#[KιUמSNGa9P€Py?h\34,OpP-L+1߈PU7g:3C/怬:xǬ4ʴG_w\2BS9?Gk[ҧx ? vBtZ36*)f' $?0[_g[δ0POko6ikcx?Lwэfuq. & \-,@cͶ5:yaV&ʇQɹ k*E-sX-^  7@@Sd5sp%Ύ]b`vOVb|h/n!u~MBE8He1:Wˌ]7ӲTV2>PJG '(yx }6;6F eG4[/`o[:JYw/M'6m(~BTο \ c5"06aivi{etehS-| bE.ht:4_ 7!]$a /WэCf>' )U [[N(juɌ6λcp~Zث@^бƬ ӖT>39e}NFAIrs[QlAS nt̍i:J {6Gl٩YO#REwm?Ԡ0eP<1h߲IU5'ui Xl4ÈIrU3"B#:ˌY^󒧚cnPυT.IW); '&Z'*q#a@w%|UkJq{\!C,f#(tg g`hR{Q>qF #ްTa d2g ^oUb7#~w\)6L}J,шVwҌ^YFYKbu?)vr{Jo0t[4r 2FWS1uqPnQ ͉<]-+&͐ݕ|7Ψ3M)Q.v{66(JۡE#UE!NIpֆm'h^X#c*a)n!^i2ŽS rl9!N!Ǎ[l^G2^35R9d͏bͻae'4[x$my&Ey 2Y +n4q&e4`"hGX/Eqn9lGbR!Ę~Xh6H[b,/9~khRl3f}8B_P#Miyk:s5ݨҋg )>]ڑqҏdoGundm ;&]ZS}Bԡ{$ѧ +0oh +Ruqㆹ&]-{N{35h۸b~O7&VsbA_,Ʒ XR=I\uoΩǐEa)ڕl뿕?:rm=yHuat8sԌ(笶vi?Xt X3 M%#ezvKmdUqjw*)Wرuq9d6>ƷtT8M>XR\ʰߕpעSl 0514,hf$j={?g4W&V ]՟I?ۍs?i_;-qLDؔUB=WQxx6sV/uU9v%g|[*[|L,~OA9['T0&OH*0ƨ~i_t?XN[X}v?֯K4t/TKu\0iNLW^(>}[a,L/.xN3luI#\xERy pz=RJjc9iݱNP%MaA 0soÑ`:@^᨜]$1r?'V - +bYYQ~3!}}h㘳Kv3KC'xΓ\uruKlޡ&B_ֲBVS`CH+qD>fFoh! 9ol?3~L\D'sJ<=ɤAvTu]FL!4.u~JYj?=_,rՐчVڅ_,=ՅQ /:{bevHN Β/K< ְ{N`I 8 _ I@LbL! jCļ_D;:g5S6b"֊p@uή.D.u=eQ @q(˯._d)F%o'd΅"nqt;TTl\&QؿTfQXS?1# AjryGCCi^=:d&ie{ 4"ڼ٘ D-C9#Q8*HŀĖUuA'H7J@ƍ~ X4j C;L2a۟\i$ZZ;i,<, `z>"z)(>M& \* h&$n;f'h0\QJS6dE=Ib ^ɏS3X ޸ %7Nb9E@vV _!37;3ɤ͙`bq`+M:IHk,%#Ir9l`HfQ(3G%lt/sBS_@sh& ]uStSUWHOޱInaHU6υoTSUgV[FjHuL:"|1H ]a~A#SReA;eJ\1[ؙMau›C:em4jGNn/J[ECdZhR2Gu5'@I<Ճ'ɵ]=yep[=gy*8DYH6Db4QVӇx˙;u霁&(ZԏdN ]yoJ۫URe+oxn3e+|:j:3"Ih]&Yz?Oj4 u~EW9 ?9&yYwR-r)vYAPUbm$(_w~"'3X $AIg1hvƪiY#?}/-g^~'>Dh(m4ۼa~+p7@/@:[ޟUCY88%2TKBA:vPs\v}̿t| `4ιx*onե֮ßRVWCdkc8V 4(B6fpwFm@b'Q~bZS7F+vs-Ʒq.lKSJtׂ$ 1r Y #=@R bKgʪS JQ s"R1DE%`ޒPzC9A\jA__3b>l)bGXmx K(m}h!鈟ЭfEkYՈlHQYx*`)P2D { ]I#ΏflS(+96q/IEa{EpOjٴ>jdw$G&-UPṈtu:-9;o A-Yp! !M1h]f[QB "݈x/VyNI2n))Rcv79MnNOS{&hlDosbmP;4!݉쮧]|!$xix7KB87w}6qیQ]8pywf,]yf 5Js~iuvs SLap,>1J獸}-3Y'i ]lj\% ij{URxEs:/oꓨ+y ^Qr)Kn s /;Ii6 W NYGn]x&Yߧ{(."x(MfqalH_wJw:l"Fh NEu"2 Hx'ԛ^y xP?-cH1hg;*CAPd_tԂ܃_"[oBxX`ʻDy@ ח p4g3cJ11ZQ(QU}WB][9k]v I:$M)* 6SMqtkyb37X]j*VBӚ [+JlkLDd~H}KS(+ 3tp[-M% UV%1v'LQ"ւILڮXj87idp` GQo3(o]fH6Sa I{7w^55RުXl9h-ThfJ\1 "-m׬2S.-Bf@tsEt֤uӄ$y>c#Ak1 kԛu$n˟jn#h)@XWڲexTƕQdg}f٩ͦaK[:!߱8s[ MS^JF6ᚉ\Si~`A5~!6(">'܁KT;BjWz`@Gpwʥa~: BRw' |E{P D^-s{>ڽLS IԌ,t"E: ̬_۵ %% G""~K-m "隚%IrzȂGJ]`%wڮ 욮:2i@ĭ]ܾ+1bllI&b%7!s\{er^a.dH'͇*`s\ώV!Ucj,AyvD9C^'8JSGv)r0`päm.&X˝!a" [R߱KmZfA1SA@U牰ő}^v`F(X*sV W{_ΊМ옟W@$KΒjVsƇ TÕ[HmH7*e&x!~- xb>:*~nba4~dqLG&!]jn~Lg'mpc 5!CL> V#WDdQSz=HXmɩw**<^x M,@  4zFEEbQ4%k]C>UG:vsnd*~β+[TR'ZԱ$q&(pj1LW* d@wg3gg!Y3dƙHҫ~Rka7AYpSbD9hr8erjܪ|l5ۃ%b<^O.oGHtǎ.3Y"bC WVmR|bDd}Rq ki@"z"apڢ#KCSUU.$jd jr=i?kw`1Auݱmڢ*n86GgDvAc3E]K;̉^2S%b^#NAYJ갧 uPGS-^N@c 3D٘$1LyRܮ1מ ;S$ pi A>}fowܾIH(|YT Eq yq/=2T#x DWk rԍ=ϛ*w_RflA%Jls)PLR,4$!QdFeK|Ŏ+~7hMӒn?K _^#/\&MU%@(QXxeQߕ}-Di9HQu2~8W^Юf[{b]p{f~" ~ GMu"j+Zi]w)L59Hj n=WGWsC?i^Ejq_o͇lDNfZ# ƕ|ڕNIPDDkUL A!n먍ȹjݬZpAulL"!A5`7D%R1_$C >( 8%*+D2Eȥ)Qkr{?b峴&;; )#@1L|q1m\&zTºJ*RX^+8K8r"Ӧ[Q߄RK5ϻq\B<G|yw5uITp9'{|Rա Xz- (h( `2359 =ǝC8z&$D0u❣=^dkt}-TYY5u5s j7qA(,l#Yh v% lvvB`$6fAcF_)i_YT^#~ⰦqbFq% PeIV;Tf6="j Lٶ5wȠ˯L&dI}|GvV1ŘN d9jO .l *b &Wn9Xju4'ݝ+/1ێs uIoOн--J2˒y&K|}[u+1-4p?`D(aUGÿu?KH~K  'X( fr6_CcbAHf4b1PgHRhvrS +b`@6ꥤ͆ȕ>,7Cv/גj.eYVN-#ߟ` L CI(.,IhtG2vUA4vD>%C"!9 %HwZFA% hG3fc} @W)0ǾTct_gcל[.  J޲6t˝Ej+{a= :Њw}$BG߹ n{Tu #-L!|y҆8Vqm0D':7VɬٔktVfEi2UElb%Iu"@R&PB;}\~ j-w9c6d JmlkݸwjZQ$tw'ٚA"QBS;c[31W{!Ov6ImF DLiklsw @æ} r:&b'|n!VDXjb"i]#dNP(D-:V:wK %-I\ #,U)zS/N2+خ=gkkL˘.4Qy@a,< ``oTG=3%T,..bR򛟬g jFJPw";Y/4zpҪ*!?$kɜ$؇Of/a+B8ZGz4KUM\`z!lX#R)M]Y[bG V?U-i֦fK l Męa)YڃuTSHNq=tz;,f qmd$ط6ߋ,HIݭ`DFJ-a_NÀ;wM֦5cpd ZwuK ~-g{[ӒѬuU"5T9g)uc 08`B1U%#QqA'7 #?,vIu{AV*ϴK`j\PVFqxk~83+:x_^E,q='!4ȍ@BR&XvW5UYNRԆb y p2UG?9i4c$wW:7!'҈tRg%-P>uej ̷Y܈0ȣiD*Ӽr q4ooz2j]<+O%D_Nղm1QU{I Jdu0V)H%>1?LBiYEngQ2K`ڡB U$Y4k#_ (Dkh-A_iq)hkڬio=D8QHWמjRe1;<3 (.َ_? l>U?ucf6\c%pC"nY巂->ڽR=`E(bHjq㺰`OaUl=ٯw; $l}~t Kd7ܢQ䦬 !a{5sywVP$[ mCd4aԅ<&8M $f ĔFt廬 Q&+LGJnyYBSy&ˆ j[\~%o Hfsq|3 EG??0|%|y&h~>d\|Mh=Y6l松+$\ bbDeFOK+}j0r<p>.+R)1|#G JHlcK}X%8 8vuZn:PksNZ 1qI# 6Q侓xǦGKi >**nN>feR 4Vu(OP ʇW)?靅O9mEҥI'-h'"I[Ha܈jXr-u6"Zb9v[jWMm]8,[35Qk7T(jF*>Kd?ZKgG"LF+S~$ ]^"x5l090Էg'ɝ\18R>.c`YI> uc!ᵡeيmRM9~7E&T\SN%I'&ϊBW_XQf- ө~:r7cA`>6ei<zrϩ^ p짙 !x̉Qs:n^] 0CDlৣ|M0Q88дkݳ휉jr\uL==)ʗԎh n mWf^B$-3rT]i.v<Y[KK1Y~x.xo9Et^ő>ہ\"/1no] |*?Y^d"++ʡ }f>l 'IB Z2W%+R)*,`ze,3Qa7C&ndf%2+çg-Pn=)9AH)7#V,qʜTO%_ɺriѵtyBɣ4;Ner~GaXUۦ*,;φ$>qwHw!/m>pӯR,.$^eq"~DL!eлRPrz> dDT/| # 4eD]vIDG EJ;J҆gPqZB@M@M؅,@O JZ&1*KO Y 9KB\M{QvC`.N,Ni8Ao1?wjjs[ s!_T{?.cu~ÿ.u*uI 6L]c氈N uhiz3XR*}<]F"w.\+.tjӠ7ɅW$,N|TY9AjS/Ւ= @\xWE=%x2c͹nez*9YOa':jNJgQ!Z 1W=8;e$T2 To"VҐ[KR;oav͊|G^QEٚHIDdt2Hf4w'dix|JY/z{80hNq>Y{Gw4Vz X~e)7]ΩNj}aph>ޮP Gv6#|6暻>HĬbWdr̚2EJE+cWcs+~AXGr՛SodBc0UPk,F!\؊:. nrmA" όb4 G?_NЋ Jb;k\\btIET-R8P̦ 1;geTѫ,RR ,+y'- SE|$g:ԗp&~b[%UEŔHZy7y+R.dX3>وv't8}[QS?=  Qx p> ΢w&-6Vw>$9W}2idQi? dQj՜M  u=/Zm& UHnT5WɈr0RtF(:B6 ~NV4 ╄?r;hFU j= 8F+4D, H{'e/oBz>7_+0ʆ$E)Ao~߁Ɉ\]vf:"0Դ75~x e匄ʹNۍEyd?F1SUe53c " 1^%#!yZP<iߤŦ2!cn!q +~,7?< P/C:1?z Y[)\sֆƊˢY+r(Ɔ)/s'> %H,]jJfCRѥ .q/ÙׂTqMbZ>sYըh9 tB>!vɒ7͖'h$,^_Ed' 0̯I ;̛]X#3ZiN鮮zI$y *%^xdA8K*9ˍ|#9dpsM5 F2Zw%#f$f+IR2Cd(8qu쪡F ټW NS,y\lU=kfs9 ߲-Qjf t:ȍ{j`^57 Q2#>A0^ЧQ_3 'f3,?<4D5)i}|qLG\LY[/UC.+HFJQ}JsJЬD3Ў x)7(ur|k9n2 qVi &N%]]7c[Gz*ӆaKM{}2}"8B0 Y%#&3-!/5 XogJsCZG^Y@q"{q/`3 %_ ̛ӣ"銶G/tMH R#I~ @A&8'UAؔthC!Txa/ 3YznY!$@Y@^x*)LE=bR jS ԂcƫeQGS?[G~{C+% 0iϣJ?ܫCn&lV=1R.E׃T4 ,O>ThBҋJhH~1%a='QNMg)G2 Tº/w'4Cxyn<' Reb ЛiyʠZE/A hm)A}:Jݢ F~8RKua>EB&< QVWUr&nxm36 ,Oc{ZD-,W-9qW\15~:$pVf>=C0+Lp}|o_F)6aj= 6qz*UӪ)/s*[^jk*NRȣIjۄF7} u^G{xvHч_(Կxӕ61kfM,/"]qǐ`ƒH{ʉRh⣾]XQ&poXc|pXeR ij5aXw=/o( ;قu~p eAm-̊ -#.~ܹ-bmth,̏xHp9֛;ЪSxͯ`_c3f q`'dXCuo1#?= % f[[2iXjnRA#&jznug]_<}9{T6r_"m1w`Wvz[Aڜ) fy$DP+KD*\FIcfs~+me¨R"+B!)JrFtv_?wQ3|OD 8R`V>*3ɓ= d+*JtM5f5p;@/M~ePۍnB|(^WΩuW@q7 o$yq8aȺHd-^F:$3$HW5&S$EqC%ʺ)N#l]ܨOqޘhʞ~{cc@l0"m4/bUeAfSD@FK}X&aXU&e-s8 8yT=ZϽ8IFpH>Pn1e:'~k Ea-yw&+5T^wR!_AJȢNHJd bC,Ns0vmqk%QKxr"\EwCE}3\f79d 8i8^y7Rq+Is[zxhN>-p!u# ~>C"%K"X/OeJaզyxm^^/ Aml+=w&[5 =ڙ kۑnWKZ"Q^!fOh-\J+NY]x2KkLb{ܭ%xw@xɎ߽ o0mw2Fg8å4)GA«*Xjoym1KssGE!Ubi^I ]ؗw 4խ,T\y¤d96_a. 'Cw-x^{U֒%/ָU}NMCKOXj[E42k0 @QD.ǏC^:c_BdPTDNlGh';Ʋ TVao8N86ɋxj&+JD~].n Ћp@۶`F*v] y F< g>HK83]YNA׶`71E::wvT覎_͑L9|̂R3hBjʮx dt\تLta;^ {)UQݬ]^>3sX.1T @}F^*36 BhsG=E~>JßQPDw{F=}_ƨKZAJt x&6r=x6v012 %!i]Wc _37јT+*@EXӺUPt,V8 *r]oPce[-E\9Yh9:*}̏N(>vr< JJ!j#E̶9l|UTW$>8u(0]Jx7>͎vp+*VH}\}0bkT+UpU3Xy2GoKwĭk&&ð$3sKG\#mۙ^=L-X!U֧mX X=h`H-ê_fwXj; Z, \?Ķe8l3^b71L"6PPqy/$6XCNg/&Qu#=vЅ5A56q[]}/AH)OA(%i$*YTKLn$U&0:f/JX.-ݥw B&d׻B[{V)$LBf{>RRg4ukT^Jo#@d9Hm&x_M =1Cׅ=OpZ}Uzk=Q{H{a+pDx$6XMV}X d we[${amLUi`Kvmh.@iʏnw#\Bǿ2f-Ln+/4`}]e| @ /ZXF(= ` ֯~GD$3Tķ<xƖatRbƍ(FVtiAg&RB8͹"n {YrQb'5A*rdlp"u l2Ȁw_TBrޫ;N\E"<lbjmjm]g/Ivu>ٔ\1- ~ 5-cg!7P#a@`|B~b6@|x6mF_dX(5qo|џM-8xX'zqw7O3!v_}1ܠ?4wR0[^tݖ 1ڪiZ3,b.;jD"%hؓV}\ȷ&<%|i< h.v(Gӛ9,̳,.)An(&l]< SM~YSC PgZ/R8+=@Wh$_kFrYFKvWsh٘HrLE,*p;zW,&<0Bpk{\ sVLWKg;-p_dK3C)?3Ft/g+m>#Qr rL;!%FMgt'Dw[3ί|Di_pzMBeu)sb NoqOŖ\ɦoQ&Ϳ6I҇ō6(ː -Ed}w,jK h('E)bv !0`ZA cj`Žw0BJ̈р,%E kt2io_0BZJ2]XTsLx˼Rbc} ୦)-G,ĵRAHm֟"]ԈZ.jJ2G's:dn@ON,~7N[<0xF2 d7q6g]3jpZR('ϕp^Eg7-^n@[ y񱭱eR@7~"\_XR4-@B/ sNJ[^2?5?,M0h8jrʼ&Y+"߈cYiMy5CHj3xVմഭ7mnL#f4No4nRr43Pd"4h @6  N1פo'xCS+g E{j5mvh7X ӭDL6."eKw17d| U}}7ᦖ&+':`&NdY,hqKB | Fx!: M E+{Z]4&?r{0Io9 |hFXpbO$q:k+yUY4DO@4!(#H,ɽ0+al]S__SsȽ{42o }gQ T9`ZDx9{9fW"bp,;2oNT&d\Pǁ*"YvgO~o X֩e5E,`THh0/ZR(%&;IqTdY*6f:t}!eEc/xϿqA6Eh9 MD%ƒr t4*rӄdaϢi,} -dED3ۥ%}kN>126 J?j YH&KJA%vle.!uP MW~Xa~3}uQejl$lLk;6)[9nF&3cv%|Pɀo,nvA‘{Wg zz޵"Eh/':`- N jM(/&{(r1!(*qN&){l!3=N0jR'w#蒚+E6yp~ih5Fe0Cx׷,XC=)!YQ_F06NagQ?z0;,̏AnO-™eG =Tf HAIΛ{ ]erL,9MK_S,{%~)qVe e}\,K ǬQFŮ.FatMd8INke*a6bYؽ*{DBOU1@م@iD#OMgQc> Q63Bѐ2 k9*'JN ӫHR#!iebO"t)lfhpǯ/rN1=!lAuWYv!sH(t?'wUٙ)/\@ez=90 =@_ҥV9Pywex^ xΠ; 8_͎*՛%Oi1*P\@8 p=`Y At`4O\<^Xz')ÓZRY;g$Tu=r$Ц TRpC٨ތ5xS- twz3]=75 )͡U9tˏ$pwpuO!W A!Zdb,SLA8-%k.K#1\EJWa"ecrk ,HBO63(ol(rJI!\E4#cᑄ#""LJX~/'0;W$Pl_{yIC!%Hoxٝx'qW4$80A3mgh^S{U~`Ƨ۰_Ue5HPbЦq ŌGίE[|#B^g⣕l~ ?O\A+yG11D~@:.Kwg&3˜kufL;c %CCՇ▉1:5=S]jfndA{C!A}ل+ ()*D)7K"R59IxSG >} Cn~AFSΊzѿVQ^ "5YiOHJj3Y{]w fKkm4?GjfT|^_0KITz2Uo!t6†V` ;-|{+]K rp]{]( +"fTP43vcz0AK@(GK3wrFNr>w 7jKS~)ڹ[><,u:l0 b׷>=C8ߍoyR^M>8eٱH]$ ƖnG/mN@ ƹ8okXzӘ)էEW50yCaq6MzA e֝@tf@6.ʆp %P6Ox~Ed?Ngw̽Wl=Qd'&R#}WCbfoZIr5\Of囄qpy? -)^л} )LK nA)׶Ut%]j%z!͘`= [u ukdrE  ΁.!2J=a IS\:uNDUM瀋A2M0he7fcA^*WʇZF(WX%$AORJvルj_F† s2{Zu]^B;PѯJ{yg޵!5r 3"/OQ4d--eU>DϖOR7wGQr'6^Sv;1ew rUטb&~CKK|?v9Ed;K0H qY@$oi"#IӎM?(8ᶒ&>qPj1q5kdm [[␋7sQDzzCԤWh?uglKHӵĥPSJ 9EY [j<@UyTp3a#@E&tU͙eD)rtlK= L!ѻ6^D}]ORnyv%Q~rx٦䞓Zf<je )/`[Y " "Y8o׊Z#peUĩ0e ,x4 Ae ҄Nlqh10#G{X[Xݻl/Hj=N MMvDe&aBe(C$j7OBBaj = W~4cx!HU<( ¨E> i ?rN `4 ZռF3tYo TP؋*쵆Plf;iӦBR3ṇ8 *NHt)Z-G㒖8s:T WpگfT?$ 65Ζl>>ZfV; `-NIؐ%RMt]C^",-+<(Lcwgh]AM]bƧ%X?/E+ %)%*[p]EۢDJnx=Nr owHWH oVn06wag'D2J=-y#WuU \y#FI4<`o 5&5/ @"w33ZHRݿFXT^E oNL עr[uA`YLQP2ё;C& +0W⎘GcXqlN$bXV(SׯHa7޾3 P% \D/;92FQ4t{4 !֗LOtc#C@/@: 5 =LR=E D6B&HsUuh0cF #6l3;Ch,O:PNqZ\T Ë*Y++ʾ>̻"1WVn{y Y|m*7RVs 'q8wwѮ6w\JA|>NfI.#>葱/KTGS溷} FVNcmfliг+50ӴYSACV\c٨Ux1v!ـZ2T7j.4(v7"o$WzqgbcCkYJG("´=AM[Hc)1J.2SZf#]]cE9Hvs1>{bʕmd@*…izE3DGqO5s/uå#&_ysS_sghxWTַ娭'S#;$ l+rd.=.(Q< KO$G +%?eԣh4yOxy{ +e٠- C0f0]LMĹz=a*tlfgI릃CS0`V_UB+e4r\8Rv/+$'bK$cO־s8KYy]KwM MKHiu yn kn,YWB䬃# lēsO8E?5{F&1zDS۸"h g׸x4}' ^vp)4.ʫ3  E⿏^.-Hրw\7uV riB{mT.hYx(Ym1QUŔ*O^Lo}2$x=c"Y?<",vLu^Y%.FW %m{/nF5, =O8w&dmIm2higG8:Z~Q`1>6wAėy^j%$d,[d_R1+m 4!~HG *wkhh &}g?5=pG *OHu P~/nkQ%ڙC%0=UW5Im&[SA: WkEEqëNGzOI` ? @B"|M؁ӌ3$(o4\E%^`@%,a CD֪&щDxd,0蘎"[kDrSܻfU;P>aE"[iƇ=#&ʙd c1+' ?-Vrwp `vy[ݎo[egH3xV& ɮ:n_>a#wr!N.uT}& B^p\bd.]zXC>ŝĵ*o[;ɦ"1""fY6gQ#5NJYbfkެ24r[paPvLkPȋmPIt]؛T* 6N|A9P<|J>j#RvJ%g0}o~0dE$)\bIVcM MR~<^`m"I\eϷi2K&V.Z3@H?3fJ%% vrV׬n2GѽGQ"&{oD__&aFՄ-AQcFo;ϠSPN@]llZV'N)*HUBެ$bu9ɜm5i#L#_0hcF-q3.Lv,Ǖ56c"jQ[u6MC4̤lFdȂ!Ht9ڜA\d&c?W#k >I8 }73Qk{Aٱl5ji~>t"R>X=>~! N%Ol LcH 91Cٺĥ5tE"syH,]aɤ /w[H_7,#R (Îi*\I. =/͈g|[>Ԧ--:$ ?QW( |%N3٥y:cl'mVp v_ިPiuܞe7,X6[[>cWDӖ;mƔ|=~R} \S v|QrGO(5\rL"쮆I'퟽!EEb*KP%l@|ssFuD&&e%2unWXDe"HIs>`ݨ62NYsRv}L˴6UWP{B~':k^țlS`lz}]@A/7_m{k^ "g`lrTBvG{mYIN h+Ul(sƨBU Ϙ33 ^spQ㉛1WRZF~iw-]ucaCdlMT\)c%XoFzdYcENf%()QOOTg *vk(v}YuԲ̶)P3@/g t-9$VdF?%&'>hp}0 Uͧ#OڔK-D%GxY!=4q/ڙp$3VNS0:[oɥZNr _;g*%2̃]aA'JCDsiFie%=_F${Co*xDm+T^^[mPl^"(*]Ρ-}jolzhۑMƢL>܃䗦 Q^: `,F`I$ioMh<G3rR1HKU K#!'5!/L6^ub`/̃q]~kĥ7^0Dh64N8$TӪY{ȣB0al52nW5++?)vQe%Kt=b`7HkSco.o3Fm·W1za )?XD(W /X7} zCL'&ByAxMp&k(:IZL"c_,CƩ%!e_/r}mZ~z K[54dUywUy e{:z5{Vj@B.0x@/-t':Ǎ+[ibEtNu4ڰvY'B?;㜼R_{Y-=H>s*YAszvsѻ`lQk^w{Ny ;fd Vi-#o'|b^Gܯ%C^@8KJ)##If.o+.HOɒ;ŕS\ Ukq@HOŎ=RZHwzG[M)FI"ڗ{)zKbk[q5lK 6OfTx0866E0pifup0y+xN:>N>e pI4x`<MISQr[O|lT"Ѯo&~}niȧybs_Zd8IL"G):3Ү62`Yy= ksZe8kq5x5,1aPR&djU dլuX{!΋4 1fwLWX ]zHgX6n^1T_'zNT aO".1^=Q`43[ mx7~DžpViAL+t`c:^x M9WnWC*kƶ Y3jjp f=WJ5pOPs;T!`GFB旾i9ĩ/Vm,K WrmgF풲n'ƒ@8I+kFvm-&Ti,_uvnfO̷z"4U:=Nt;Y༎[7vj $y l&k4$H :n+uNrxԋ38N ?f"+Њ$RR6Ç0/a4OY^L\ y+FQ.tZ^3˒UE{ .i J ر zOj޶O dcZՀ#&rb [ކCu@dIEӜ(3bssYk3^bb6CHsb^̻sx>j6+aPxqYVc*._*u挬:Z/P nM@R w4hQڶGƚ0 M !Go{m=ڡ:s4zטS0; גAXXib fMn7ei !oYd2{eH7yS9TQ^TbxJ-%1UxHdw[9A~[YP2W.egF7!/ ǐ=22F.8N{GH31*{_xWe <".„",dr2W:XK;B)a.͟Z\)1s)ϻHMu`Φ ;t^58 җUd;ȀB}nQ!m^q_0o(;'|gMB`1 Ҷ`H#I졁-XS0R='Wv =h"~ <`(tFy&PKl@S5"BN;h[ yn!SS$"0m4} J{X$bpld Kam}k_nC߇A =.  DEg [N*pHTx tS;+hiMҳ 1\>F ,J$)X8ߤ@Rh-@ZDZ T օ,T\%*$lXO26V~:0W6Nak5BnB_rK!;L#::ihE@Ϣ?} ʊ/iT8bU4"bT [#;Qe8 p&%<&8#D|`C. kNZjL 3,ޝq ]{/Y 2b ƙGsP QsxJgC97 GI)5Xs15bSٍ;kPN@|0k`).t 0Ahm]C wXmHqdֽ NqD=PZ0;ʅY e,`۬1YY y`ipaj]t g]В7Yp>O ,}<,eB]J7m&bˍbZUm Vdٕ_lX]pwy*>ARq]Ƕ8OJ0sqQ{+"+-J9,F䡵9=v $?Lfi _°A_n;_ۣ}T.Y r 'lqr MLfD*;غ[ a,pk[vdl0..Dͻ]3K;nDEB d}~;Hz9ԾUsI)j,$~FV{963wu/zr_g1z!qX(MTɀ֮oI3'3pQ‹#oٮJStTNم3Ze K6!vz6i_}ȯhpHꙌmwA -gk! B"HԫdT{|{{McTT{!5`o{ fփ{nKGǀ{W%LJC} B( KUAqRƹJTj?(^IfW-!X=,z>u4Sr=CcWq;Vk"N*ȿa Xg0,2y`|O-G8թ'z C 5fhC[:TKHvQZ~X܄iF[=j F"#6Hf[<1EBC ab%SxҠ^%13dUJWzcu^z)h荮N}BxF~,4: 21:2uA'6a1k!9P-Md \.4+5rV硇Zde7wvF˱ꤵ( t8w2i%*(Q3B -Wa܄% q+ N&).Gp)tn0Eome:a)*B[=UΐbGf_i+0c;g Q^$jL߱PDgyj`>Ȧ(.R4ޑv[{n/|ĀD򮉐q5ϛaO%^p ,ѤM->iE|ebT5ۤ {D0;: gX1Lb˩j9^#7?&:PgBT%j f!\Ӵ;tj-sa钭~hIJ [RlhN{L؄m?3zm(OS;p'Y#ٽ=~b6sIqc;r}K"4xHfۗ,(?Љ[Rm]$?:ꗤؙ@&{aEYBqT`vάeY$MIEn-_Қ5/F*߄~;d!%qp>ϮWOvV2ٻ>An:KlVe"N~H2d ~ß^e\tX^Ds]4DHT +\)/$ⱆ-`DW 1z#~1κvOL)eu`Csr]^3lD̚yz`^Be M >3 unXWH1-7Ax'X fGaT@uW~|a6? ^ݯǴӚȹjcRzJmgBnͰx @n-V3@P0FU$j{!_o Iyt{Yg"팿JZ1' ބZQF}闾I`a,%<-[/ݘ딴.7C;J;rpz2dӏ҃&%P9dyi?Q4=8u͏\ƞ WK7 T!`%f\Pr)"m{`+˾}ЃJlXЬn J<ʹ쎠w3Sޞ9WF$Dطf3ÄLU9*B{%{yf@ckTX;;`;vjo!cr8"d^ Мiu׺ 9@qlo.]1mrO=X_e_c-|Ie[$>Hw'+sAT#`1z&K#nQ3VnOYxṔ%"eﻱÏ۸:cq^V4DSOǗß:>ߨu큪M`VfӇ8ݑL.בMS/Z|]haVekQdB(F:(9DC-QNFh#H-8e#uVQTAO]\ޑ2~0w}A_$Cµ[!jN~xsϺt.@ !fr>ׯYƘ"+?"$d2VjpkUsQ^ہ_YMA`]l=lqN7%Iu`MŔ۱?ꁙltMEF&H:|*~&30[޻FH v;%,@Γ7.o3i,CYSÈzNY0)RM=޹]3qy6[v4ݗ3 n J uxV3%CZ %ַ aֺ&p:VD6-CMm{V겕Y=-IF{ l.*vzj} 0@xh), YeHڲn"?R'RuЅ2NyҝgX5w^e UF}qטknm6~1v^xiBW0B4͗`P8/_^b)VYǘ")k{-޼z>^o`s|*'^VP''UJt.s 1vxؿu䖆k+Pmz\KTК5M }lgDTfS 0y[Iy#-gQUSV5V__ EiqmiݫJLW&r3kSÈG?dhY*ʿWv/6ccn#]RvTc ?=.]'? Zܥ<M?uNTS/|_Jc1Lkx/ NW `s<5_ O{V{D~ ^'8eTrE'}A7ES]J+L_n_eA(G:zD.TLLѢQ,|Qx'œ"\c+DLJ p}zɡS !3u ;+iB@G =ﲥrETm{t/y̔#[֤}s(h2ƜÐgU)"%nv屾BoEHRN]$aS[ik.QDO7$)SrZbHU]ię;3[ЗLۯEMbc !Ln0 x}RoPl:ڣDO;'JbZn nɧ-|`8#AݙGIq'n*]J 4$#b"W/jNm Tpjo*V4GH;IVsy oz.=4/\ݤcD $03p,͆";Fh1hڹb"/r|&/Dqw$gA(B@Ї\Ft[xZYAϒ$؅`B=>3BǠP=z B ^d"q ^ˬ{DOIRG:J}!O'ˏh|*HsK0^dOO/9}0)"l4u|۶|Ҍﵳ fzﭭ.zJc5іPVE;4VVjHXtUEziV{!ԏ7MfFzE nmK&YM_~OeU`=QC`T *#q7+RVYr6*cSyNmiw>9 9Dy#{MUxO7R':LiBZ>yF GkdR^L םnNf;TOJJ_siۘq hZrt)7soj7dK&g{۾G١1 dxdKbF- |rB, ƣ78=n()囆J] j'ǿKNTbW*9=ߢ/))#@(NpsdI_5V3OWY5f3!pFlM40PSjw]WX#܈@10*om_[$(i>榃ϴ !tt3Q qBt:{J~S,T2B{-܍jT2Y"\U7]ёx).ud~m 2o2q7+m6ۇֶk#Nn:|C5t^7H9%+C-f+v&BQߢe2I"M1UvmK;r5CN90A(NtZ ECLQ}~ct|{^ɼ̘}թ0] kq_[e=od@ U,7gdeGYKW4!9Vd_/MQTteW Jf_7eVwI_2 ŗ FUtA YrdI/A1E?+H z+YNlxEgkDxEeӋi78>3Lm'E4)jr ڢt笯ҴƹVGy/V4׶{vB3©KfFgM42Ͽ7!1 ~s9OyC7%'dpap 5-rbXUI:0SNmoh<iH&Nꭖ41>ʌc}!em"}A6ܦߩm,w#- 5! )`٫0T^GIHCVry.WX$ѧuZG3\Q bMjaA+SRoG]i|4{"uRӯg٫eCSx \fucWVŋ#ROLZqm8$>`;5uP2 g-E#pBͨ-m gxbxm=7Q׎{?Qg#V35|A4oq-3w|:-}BS&23WG5#O1*BQzkb&MǪ]b<{ 8gnom*3lrEKtb4#N.9Ϡ0YrР@-1ZBuPM8QSX=j-(K}p<&3$,Cn> olL02b7Wmj,7/?uN8p;S.Ȯ_>%U? ^q pqFCK9p23Ox֮0W_'/7K-d=d$VIK~fc_*,FV̞tgf&JEB$I+ShAچ;%hIAb,UL}"sӅNOlxCƷZ^V@+Xod OX|6N9|::9`-^΋bɉٙ$u$}zA~fX`x*]g0xCtݕ7wDI]i4|O>l$sTw= AҰEHYP*"u7&$slE]SЄg>7ĈP z 5G<*71LM0H0XIhzHJ6M\&(X]es:$}M~i7Z.t  *k!'wyaRЯ_=w`Ft]k?s3- Q˾(sV)qp_2\$0*+\E_j5Ĝ=Hilgy95j~|liK_>n)2,BڣCY1$7aZ5D[L|L3q? 2Vn(/5p/Ng}tգ JXnSX<Ȅ( ;mϠoKT*?,i7DlJ ^AWĢg%G u~d@vn_ayy`KH~Wa}* OCaTK z?y50Sqi-X. cOƊi4zoXܑ\Xx/C%ކ_u"㨝c%ఄi|#KW|wؑ SYkkhKɿ }OCN=} Qj&P„ rRr_ƍ Uf+^klN+1w Tا'ADa5^qԢZxݦ O0{5+kWP* >Y .d:akYn P\j*;*|cC U'ZD]V*X4ƒ%cԮI']+hUKרO6fvǬ^<˻uNg/E'HS: ; ̔Ob֓Z(W7Z o l\̗—nMF%NLIi#7q<|*lvF(4mp 0%j ΅uuMGT7?5I!8 Y52HO83?OTOy)}(Liq*Ӯ̾':8*=z@TDL5Ք(naVQĻ%% 1h<2чL3RϿ°\."n&]L&|eK0 V2 HݏtmPdA.]%kw%(TIkQ$mN*n`y"Zd2nnҜ WB=|%.V\rC(79cOtC]n=/noQ"b{}$ Gd͜"P ]f1s0. sro6߮, DpBN`E7ULׂsVAx !xTjNc],%>І'&]}q+AQQcW%1*Xw tR/"ctxNuOH nˊomAJ$ u0qgD{}mwdKWc7ǓN `g~pEEX70ĮTtN HҟߝZ*/%-^â3JF.@4Y"|mn4+ɶ=m4:(ADwRT}FuP<4<('VݟCuYI0Zj,~VXZK NCiONe̙V̠K>0kW҂[4e"])^fYT,{n{ /I rB0/e.?$&&hHjI5 QTc<{X%Ep/-7Ћ S4jt&5Шoknzhl "gbk}\ oX;lzo`,rLw22U?ScQ$~_`񩢭HVrşԄߎoz9N)y7bblafg ~SdH*. ~e|2BPq0KTgk?z3k?IX+tB!8RA 2>=κ5FGEX`ʻ7,Yaʰh= nc'Ve [紗؛%c VFAPFX#n<cu`|^jx|Ti h( h^=4}[ ]^34S/FnbԠP&3Qo8cbUS* BNf;,[z,hmNB;E\5o[,f#IHތX&StfiVH +] Q5"1>ަ11QE)2MgtT5;N#.۪pڞ]R('Xr(?F%3@ y5<P4'hj!۸H@@,F51s48 TcZp?[G =(PiutOhJJd$. ?PLTd*HԕxE+K5tZ/}r|2@ԉ=xnHn=W4 mj2aƧG *) .D9Vi/A>Hܶ>eZF s8ue![PZ̳RW I4AG zVô1ۗZdX5LVtaQCrU$?d3ųx kE]s!M9lg.P|O4xq`d9C , +C࠸IמUP2:Hr~-P"\P~tE䓌+ShnkCWeZ6ceQ7t"ylm3kyF/tWc;P,wLPTjݰrX;@h Fc˜g LHQt_:j#628e#[TIr7QӡAdHL:$$$ 6 ͽCt"sE!q !okJ#6xh(# Hùk܆6@۞nӺOI&>- ˯ /~\yYuBst&^DŽP5#R c@-X򊾐i OQX/_ZBT0oG*VYt]2wOJ}ɧAbwMg,a}xjڀˮ3 ՗\9罩(bB؄^:\>ҋ*=1]jI乨t]jSJ&9}'h؞j wcnsO۠3% tQ1-5^+LR{{<COvy~Pf4nʂ:Ds}['މC eHM*-"s|܇ڽHٓ< δ+(ႉy鶉CD|9G*yΆa̧ߴ= Q3M`6 HN2Wy* Nz2+oε)Ck[m>OJr"Ѿ Y^H PW_&#%UYɼHdv(YBN+`Nu`*0Wa¶/$@)r~\ v.̻Gz zn}v &?Aq*?@ LǑ RTV $,KtcSf#㈞6UYcШtb[;'B{PKWHp[=ɟbg ,J8;Te7rch/0z4Xo覩[C4}\@ dC*~L7^rΪ=Q8A:);٨ O S#Ӭ42"a R %T!dq[hv4ƴo5v(){ v߈rjأÖ%S\IstpVэGb҆Wnl#1N[HIDE'h>r{`k[)Dd!9ctoM$-rROW i t]& -X5"TMhGcx䒺t9r!:|JTnPћ`!Y @S!5R6paK1jӜ`ۻ[fɭl+xZĪ~G'-:ZIR;;gL@~hAlN#sP V𢌖/*FeԠ󱐤%δ4&&\awB!=w>4A*/|1ڨ/2mɅvV͸Y+2/(?rZb!&e(?U$xKI ')%y6BD&jL 'f6ȕ.}B&^~9G9N1Y1j*d``f&wt@씢2?КD#`%K~PP{ \jc8]U;-+YfEP",1ln ύ~տY:>)YL ~4 -5L gCވ XQ{QR4-&ϳġMA<;3p6zzQ/N2aEfY^!VI4c,p,WC|j[~*aVƽ& @㗽Wwmd6ɫ :&qΣ%NwNpO,Mx,':mWZ@[k"svf'c2SD::TN՛ήq"~aSw.rw\oYc76w/ߢ!V![]%Cpvs@E%dBqPXlnr%A;g#yn]F=WyΡU[dS,N=JPB*8zI&HѵT[BS;ý/Jqvfj@jV 2MW=`j R\V.Rck@Fv_8oO@LtI 2Q.k["Y3I;`hMeGx%Ӈy 1틒WKʱ\J*4{p@ Xhq]ʽ 4F1#m|H[H{jkRUӗxp޳D 0Y7yl؋%YB 38m{ |& p([A+[ݹ?QϜeR%_H+r*+JjNqfM z€^N5{N/2دm4wnLa{g0o1 [fLQwnc(fi{?B^RѾלZ4YءwJ#Rh\ݴv/Ϙ>,}S>-K: rJSoO1Xi)k%!+BpzԽl$I1nWsG+7,T+[x}[ÑT)Tz991 8'\j_@^gG#|.$K'Ⱥ- oZx<Zj21WW[y/ ;ӎFx1>ftץ+uuP݊?ch1>6 te 3yx#\'V˩ 0ͯ*}8mf\<4`<sF}a؅#Kh$vE+ tۆL U| dz{$wJjogRIAc$ߴ_߀ǕAr6'\#/u1tmڗ XO#1(@Ÿz ֧ eR"uu6hxaθ^Z*4҆Rp0>P|"O&,6!יqGf\日ac퟼ jS&#J92Q cr* ոq,@~ƏI^Z:TӒ<;T*`',ꨔߗOE+1*bȀP/uwKb8K%nA-$P~eܗz&++@@DGV< q bSce ;ȕ+מ֦g덂 :}Mb>$yQk&Dޒ(DM~^ ^zM?UKEwpnA1o(QKƲc09\sE^w%\,>?>f$ jZ79djշrpS$6t\zLRpaY/g+huc帜 M3& h$k'ǧeS8a0J%ԨЏ8(.6Od7G] 2SjrUoA ⦘c v.š-󷯝7wFHjyfJrISJLBaD!EJx;Q;*Z/(#A("'o>1x]?. >*~WZoL-jsj>[Nh|YI#`d*}Z NfzrgrDʣׄY*!`CW;išwc?%ۿk&(ڔf^CMuL]u/ %6d]_πJO_р&0GbC"'qhVUZ5M۵MJHKa?'VW]RB8%}յzDk5\ fnA-Gl d&Ѡw; Ex|g1}֥:(X1ې,S=̼ DԫP)e(6>d1`/V=p[ypGI, *=y :BfufҌÑ*/\ʳb̊x#-'IN򳀒"duGXc14qAܿ^ *"Be;s[$?iODW۹b~#N"9w¨xqH,Bp$?;PG==Nanf^B&[ 5Me#Ԙ|LQTRGà6=U LgKhv$뚼Հ qX>gKɍI}:hx<=Q']"&[KRZ}33XLܬ_@)9V<8 ND$f14-oݡYg)f7 p3Bဨ ~pcb*hۃô֒&{9$o%ՂvjM4+kNGBi/k+JOJ1q`ӳGtJb~[U`<ݝA8A{i(B"+緳ߧrqic ^vRtBk_qr&Q"gA&;ﹳ!MH2k}_c 4n4<i?RxƜ^ˀ7^C oiuB}+eqd`Hin#HDa15֘+d&s"$$- ij6Kf0=w+H~Ng'OWrä*JYy*gNCπiDCʽ HPq*qpD"{_6-+Zvэ_Ȳq)cm5kCjx~C֪\<H'f4wz+΂K%w4ZzsMH(tFfs'KsuHb..[Ķao-%VxP!%A OMcO&ahn:L{<:w܈4~81E]4O޴~(?g>[sy5@(S6F{BH\-RP?ΣrP8Wk6Jsqg!i/uRnbHD˜ʆŽb91+)/j)D[: puw%)`^=U7h =N1]ntj4Ew6;1/$Z/'ZӐ+Lz=KPmA }e۰ 77Q bQv%7;-KH#EZ9FM֣m6:0zC5 e;jeT i M9J^S& ]1^10";d+WWϘK.^RXN'Թ|4!r(V]WM64?>7 E) HW 6gl]z WgעI3P,Ԝ\mdSlj w"  C2p*>s) FCU\y_uv:-i 'pρƁi("}|{\1֎t tH:ܰáɥnP t!gCc$DˣLιT>ZgqΪn&\K4H}.a3l2AlciVxjPϷ uņM&%b{:z[&"Urɷ1NN%yJ)Q^mbha|ol2k85@p,o}Y9ʮ?A*ʧ)AhU#N\猍>*(-y (L*|%KfS b1䳘4xܔ[dqrsF _4@,9s }@diH07}Pj!e?jˁ믥/(P@*0 eS](Xpm\rCahC{nYP )nI?ẏAa~k.."MҦqZ 4N('7մ $"}5ZTIdT6S,ҟr:: ׵RXӰXx lc'#[֋."6ϼ 7\0 H'j9ƣ%4c;os[_bT}°k_ d-"OúK(!V+Z 1O]|ФX3}RXe=\\:W62ve?#Ww_q$EC\}3\W΂9~uBf0f,׆G_ We;<$G&zV(!'Z/Z .ٝ`ɧ%ǔ'K0ǻ7bp<8E86lbK\i[Œ__^p*L@vzm0 zwbFx}4Tiĭ̪ TƁݤU4ң] ]}5X4N ;^@F]mAt$:MFf  #p, ' /a-SGսpÜ)ylL SGiYa[o8㵥xhYQAVѷ= < qM:(sD~/JΥ)' oPLmW5t#ÈBzjK:4*bR_Ex{NWc=Fͱ{G#BI/X;3#%U51+(Q䝡>iGT ޵!ۿA1;J5_$6HzX5t{L*j8>$f,6ڤB^Jn]ǒ~KfQ$R~9nsmfP-!hO$߅>T~}2V²T}%ƽɞNV2i! AYa=T|°E/^O͋F8XHZRO2CM|s`q Y@ƶPӰ\šƀ )]FGJv׍C6\Ȝb5(ߢ[ڃi/1&j7͌C]{U'2r?OQpfRp[;A#S+ADMȪzSkA3GZ;ቄ|L"kTǠ%f$&2(~i.)xd ȥ0SOe: mE2])97۪Ή،U8טб!Ԕ v}A<{%3 =.cktczKJɣ@}n(ץuj~o幯Lp60.'RjwS^^­IY3L_mmt w$rF4Yew>Rw>Gt"SJ5`')Ű+~,gk!>meKd8HBPMwl{Fа("%){bӻ6`L/1ns$;oXR(jyUI7΀K:PIHgN@d^0/ 1NI9׏ Cz O\Zi_AH>Sq7bZFz% =.XLIf`8Oէ!wܲ|C9LU;4cQ"<*M]SZkv Yaɩew2[V~<> DxBH5h:Yd*sc0?6g۰G$邿W?΃}9y^}N_{>oA.=j`PUȴc5rF[Я@xU4f9rEV]U"Dm+91P5eY%/!:lr>:C}p~=uٿ[z{ GsݘkH|e`]X!Ƃ(:[AVvOu!3T[xju\.d\4TLYhf&c3_zrR<(ɽBRWD.М0I뺈WwLוZ0Ƈ*þxU(;]q7Canғx,҂Ae l'BSm"0ԁ&-G=|pP M|LBc|KVA,e.pŢqwT]k͒ D1weރgHGczٓ9n)OqqQsawI?N)?S5;h 7EvIPi^D( <2۴@`ӼV9!bؼG*lqw# DhBF훪Ʋ9N7/E 4y|9fcXY߰\'WUV\$ W >6똢m4%N+GOnxi*AP0keř`Frлh"gT {flb@\%;&BGٔp#k;YPW%(eeEDVVK4eCK~zZ2tb4M*cw|K<ߋAO3UMOA)Gu}=%"^m1PG5'ncp$F}S=@ ![-{w(jɾ`QsTRa{ӃGi ētyܜux;Wa}2ѱ#P Rola,5S K{ԦA[t/*TN5/ Z6+Xdƙd@@Oqޭ4qTG/io g)ҷDfxtm0FıU5<Je4W5 Nku84o6Wøy[BAnw1BK p)A0*ժDO!Do> 4uh,&V-)BlUIZv Ď~BYEMk;7OS'?y4ZDӈ2 ObXZMb ,y(t-<FN3$snY_TUSiiHKF1)ȼ >L#{r]ݞi$ M~M^.ojq̘3̥]cZy.( 7hwkMcP&.y7H 4أ&UvZOi2`sb^5:x&r_bޙN7}^c՜/ڬzTS/H!<ɢ 1xh"%ݡc("YWj3]JM{4k ^8{)W$PZM8j.izJ8!u$lJI,C`jC3"0(pgǝ,R"~ ",GD Ed "2`.!!\’LS2넥7m}Iq!a:x^vǵuck8 ޡGw-S u]^OɊM=dx@mU G|d-]Ts,B_51}V=u$ϗtS\9A>> -ʺ/Lv\W; [w.MpJĢ,žH-4N.J3w#N(=LlhFV3#!1 Kt|>g<$CrӰ'wg 1ΉIRdv3BlzͳgIݗiRMٰ81Egڃ7ꀗ'RbӚÎE?fiDcʛgD \>ԉ;X5spu,jvy#X4mqO#;⳴fw5F{n<9?8zZW;Bz("-K93~r# +%N3/P@y·#NJ&<ˤN{*WU{|͙ rEEN*[X>k˛rٚAFBhkMaoPJ ^-Zi3$|F {cKq{ѧԟ5Y>Ulvδ_=th w/JR9mlUP$v2+C*ˋ`+}Ms,uZ=3g)Ϲ ` &M}C&聚IMs0y8%h#"~̣͝X;. ͰBu\JLr4oH`nXkec!",-Ҏiv((+xPuzoT##m}C(-^F=j-be3փ/ǭϖ,o5= ס* -M<1/0e<w`(1!y,% LA4GX+t(خcw(fU'O9Ħ@ e@s.Bug GQRp ]*Ȋs!λ%@Sȳ? g~X<9g47ZL[|8V! w< w(N?lT..!)Z#y vPBw J-?WyDOw˧|v'r5񅓢3#v⹰ IoV/ZdPl<*0g^st*kIzTUI䅄BS/Sd܁Fc>:XWčL{Nr<'IJm"iJ樵a2d~%nq LE*`]n$K1͖r&$-PmRJoLBN5Ap­>kpEDܣw{3>-FBt)5 H@Lxc6pPPP$*߹r~(OrQ2U1w-O6J7EmT@LAsp0njS9J ^؎@ݬl(58CA`)lasۥ,/;O0*|?p }זCȥ\5+Iyp];>H{d&([hˎƁi@A!F.iܱ7^!:EI"K wy1zN*iwRSҐ3y3vP.fδyBхT0<l\ @A}W3mP3ZsmͷFlx|<"-ٌ"b S-@^Av8 (У5 v."0pU~#Lv TTg//L+70Tn7=,^ߺP=fP^ n풱FVx]C:h^_ T\/T^,S˔+T"\B`?a2H"雋*nw~ߋkqqQPzQk#Uy[&NLe"% x3j-{T[ht:h"g74xEkV¹Lr.ڢcn]݄*| unxX0TM.[g$dsK!6348Pfc$'NZPp@[SYPUaIՐ IIc(`^{aS {>`JU/'!S&sez*böѧU;;J1])GrWVXv4L m}737^+UBU͵{n~^DŊ%QVf P(Gb ɐ YR2|Il55ٓuDE9ۄqӮW}0PW3(x]Zص>,}nm#3И#1f];GV&; $CؔieMSo-AS{ dotw|شon39-Jej 5ÖrI:cGf?x+Gi6GE~ט ZVC,[#㜙'{~?U&x ]Ŵ ;PP. mƦlGv2ѰN9S Vot2fx&,\My)「äȻүPV(r#$[ah ݁0t2e6M춴S ]¬OʶRK,gdqxS*evz&"GW5 8,()\ëZAW :j궘=&ҊI>>f`z Vw+ 3?ITX2r>m{oߝ]7ܣmV%.{C":'Jc? I"=۲OwR= HXbն9̔Z_GuMk*eF6Z5ksX8]B) NZ%Mr;va؊ G@&/V|ԗ76iv|Ec*WZ[]l!ǡJĊξ2|U`l􇿹Ns$Y,mM>_31Zmp (yQAQ`` $5odPN1}MJ7}S脹5b-cTK^Sv?ꔲ r6uIbR$ٓJa6=KbfX[dfoInn$ uљ;6ш8>ski{Y?}>[R DBGvKvFkni^lh_Ptd8Cd ֶ+A({ ljLF+!-b!'}k7 w2 ?Ldl9p6af-^5go3-@^:IR#.TVk[НkpzZvaT̫:;z:( <1xx7%KL-/+{JZD[Jg_:Ql&w1]߹D̄(kDcb6qN[V@#&G|'UΥi+,[se|L 4dXܸMN)TZ<\V[`*_[.ƵQ٤`簪i .)Lb~#l/E _/t&iz &+W1]+ ,5~ƀjS6/!vĐ3 $ woېAj4vܫ&?cB3^Xw\*cjE))]Sf|'NC[U.\͹j#X f/Sb!eQ2γ~ulr ,Ld\da;5[r-̝ܺm';Q]sNg˲ҔK ||-|6`fI\   M; LMZx%ۇ V:Mv' >.cV T- 'oPboAlo$܏) c2yY( )kjZѮ7{t#IǙ [9gPt5:/, $aq"bq^XWm7tH8SQ M3wp).ofDžc4@kVood:me3%Rl!wBX>GaٺuK<`Pr%Nbڦ5MC'혁0@#{H*89zVtRZq#n F'zʗ7%=8x$-E'L O`W֙[Y\r1YǸMmKitlM!'ʁ?<XyIɀ"M056-~z7ސNW,Sd=U:c{xWU Wg"o|H.Ibho'ٻKB62٦2żd$Fs.@2Vn&D't6(iX{ w_~(In(=ΉuHCt٬{n`WRŒifSkIq?"$8NӨy׬&I(d':~$&Tdh J` qW7Oc ge u$TZb`rW9J N2Qsq{#1]Tua9uAC{d>|ydNEYv eb7Ud8@ c[s0/6]~Dq{P-<%kSVC.QT&'WL!^YDme+M˰q7$e!dcmRa}k-2o.WZɑ6`KR|kL喆`%YB?C+Ġ/ ZU-K:ٗC4kצ q]HVƪ2Гn ni3e2 - O퍮ma5U B8n1 Ka6=!{P+ &KiB)j#~q7Q W CIIAXJ+>#V l!jƃbϲ`e>ڪ-Kk \2ܱH)"PCLIFW} ays3VF8cv}gSgѷuf Nq齸G RS,)(v) #U$b_3fҬM Xf>[ (T+^jWZn!#Yl31ſ`BS):á媘Y y6iV1?-#SfhGEBHد&%봆B<%\%ە!MyHfT.kHYO}btto_:G"಴Gt {T~@U&1z"m>uviP0NWGv8bb傭^1|Ua+ݼWcZ*[:~5X)ad KH7UPap'N7 YBƳmoPtKUh³ uJu^vﺂv"YFVӈEvrk]4] Q[]g 0R|VqWVfSyn+3go`o1û.Uݎ(бawCHLS=4 9:䔰dd07 a- k%A\yUzGB $LwuzJ*uS"劀 }'Ү1vdynS'~Q}bW2VM,a4~77HrS0 iZ!n UPdڊQ4@7|82t}=4v7@ޏ(FuBWڕ!_ʩƀWh1ǖAȪyT JX7S{WIFax*={%~fj-rm ,5ciWE\j+iid<[cܡ[ XԜ˕o/tKMy*\$r)}"n}oQyF[VPɌ19"~M@fJcR;(?=QK.wSDU~JWg=p!k脪D[jNW5F}h\K&R5hɖh#$vMﯥTĸ4?'rzMR<'=CK/M@3cW` K`!¶X joT+ӧ*e>fSh ߐmh~ \?~2R;MÄWD>MZjz(q 5+W06OcGl{*9P/4;N\x47!HnQRE{}ƿٙ$e )鐻+D*ۥEa21+nC ;C(dDGwhtXchmHX*m}; 9EA=dꈛVnP0!_ }{۝%rpu9YYy)uPVd8cٵbKirX^-Ojno nEAAGqcWEY"]ٜ%C)U@GDCRQCW*(ѡSND~ w_8,ik<܃lAYzހ. ~pS KZ9:+ u{b=r]x(M++-p U =ҵkmk0{(Y=(\?#4aX?eF#A(d ֽ͔cl;[«։/kgNm.eD+1Nl0As"7z6வ,'l䢏-rsq1\ kf+pF'y'tN?΄ )N  ^%`ߩ_kuof[&KulX2!=WBYɨHօtw–EsRqtr] 4ZSROgZǹRc3b&d~yJn PAŦ*qUh-ghƜ #)q/YT=,'%B#3C9=!= &$y{R ;cr<"@ vn"{J9?7Y!tq۬LN@J1Q kIá/zwg[͚c&POU4-?=S1\zO[4> ~g!"#CXѿTOĐȍ'}ʬߣ|N;l.K'bQ!_s[.bEIucXP9h9sܣ] y6bzikd@gíW- @\_Jbee4c4^D x.TЅMHgt5̓Oa(N@V2?+Q`-`nhL wjN菐W7RM '%L,2Sm0Vdr ˛Y7mlgmv'}T a P򏭬'CH;+$|`2c13e(HW1:e^4 a[(O2^}-Aj֦R}Z-ye, }]Y#UoCy nM7mx%\XG+Wnuց{|v54ESײeVSO{[H-.dK"09LYz f0D o(`.tnbz2٬}ke! XpNn}ID#JNҔ22McE}vD=:]?weB&z4R԰Ig=q/U7#Չo$ń::p9h B%I,…!Ù$J`?NA"~of М0vNrֵMJ ؽ[<zCDk$Ic1Dh3hpG "xlݨnFc)! Ŷ\6Ex>8,[VۇM ZEaO*=aͣ4X.0x/͆TlӰeLܘXZ#9+}]r6t+-VmD&,\7JRc3VaP_0-iVJ;ios;0E ~CTw mϣ~Xů~J&p[wt吃\rm.8TԐZAέ҃uB>%[P'ZҠsj!M6=}e2`CCc>HS1m%UgD?Ԕ P2J6%rd]Z>uDZظ[EfۺUy/\SO>w54e&¤'Yor SS ͯF_s HxA_+wo8;#TJRن6x*_VM>@Oy|Z1srBj|Rd~9XHnDdNЀD?yU\f`zL?5`1w1.:hFIFD]RjeRX}DH+aw (3̮ZpC9eFB+IN`,z Q@xܓ/Xl>ߴ8|;k"etvUF'tWv"Kt+u}KD7^wI#k+Jk8T|a`W^ֆ25Dp̹+#~!-F~+.E[0,mA&Ւ GdHlB5?('"_g ^xbY+x9qZlEdg-2`/B%2Keb_UP)=:%M(A@9 h^JYe[ⳀFɮӲx!eɉCĭS-m6q14VB\J*D:^|j b5c:MG:m+W~u·AO rl{7M)}N޿mB2iY0k4^ڠWک@ϗKZ+er>1WaI<##Q>]NU**C '3- #CP׿}/.rq#ϕQBAtZPLnl.hf˘܃r$Qɳ3iKI}yPC_[GLۿSCvpp>q٫gڣKٌ_:/k{ԜqvpxF݁e^&\lrL];=`S% jz4>1CU& ͨsO7Gx!: XY#VҢ wſKh?Uk+~RB S(~axm:F@I'״t]^Y~CbvޟH%G:>X"gY2oT 'dFB/XRc$-!IEc;W-p(|gHK \ɘ5dZA$Mۺw>oG-jVn8Rז6z>/$-XP:?9^.6٪XZc.]ih@DY1OY&tj yw^(57d0j9F#)і $7ZL8@']*Љ:ݰ?z`{YV$B*;Ņצ~LCXa,Eᬛ.8;,ʭ//n_-G/|%T;HՉ r<7Xng#60cׂNty5֛abN杠D7?q9M5<LrG>Ovmi<\xug|{Jj;bD ydv-}g߆7ჾU(wD&yw2~榞hKrUcmIWVv V0ׂI0/yTU+jJq#->+Dɪ L@V=\)%VͮGЃ3;I<y\;gaE0Giee7$x֟B=N| OV]>V A.GCkB\PaAZYjaUw@*ftN{y9.vMf Xs_r <"f{cIcz!qskCo4rs^PP 1ڮSZ 37Sa@ 8W:מ; w?؆T~L$x 2p@+J4UQCi$s|BgD>aG{aTNB(;;ԋ6A*V~iv+w |O.Ehl ]Tu* b-U ]zXLCR"]"u%W7ݙCt$СۣLوհ"~$@>$_4(+C+L?LC*wuڒ"'%Cױ:a׾}Qbew=]hw#ARWrc08_.0 B^|cՀt ~d7?UU\5tZB@+W8#" ?s2sud Gf/M2czo}2S8M#T Q6UhYIô_GUk^+P? ~2_1v<|Uǃo/'р@s}rǥb{@J`cs!g@0v:JSv) .d\V? 5/;b"7:Ih. @ ߚx>AH(5\Χi]' 4r$-؄H!C/$#Yj%_Gir Q nlU+ ԾQ2"2)ϑdX¾HϧO-[mK!og4Ap]*9Zƈ -MSENa|5Ax昭;KcZl-9$h9/&r{&R$ ˋMw.]/w۩WuٝA|ʇ%&coV6G逸;T,'6qft$=%y"TA5ΥP^ g+FV?P ȖR K >){i$9ZKc۫FV!Z1 c P22v&[Y-<,zl Y:VH ;MSAK E֤)_1@7:{BnyD-ȡǂrlG8O%KB-}m ڰ4-/Ԡ `]a v;srhS=U/U%07p d,V-z{:JlK-FEIzWl=oFφϺzH^kl̘G;IZY;v'bLMļ X?F3UPW}jX>{h`K'%^G>fvrUVRS5=Xwwsh i{y|ڒ-z*2uqz)\٫n@'F֐&57\XHaڠ|\EHBBQGkJ6|1ܻڦxJ6J{2ɜqb'[k!c&XN3\K Xj t,U`u*O=*MXQ؜eAW a&"MՑ=>@6r`U6yE#\,1!݂K5*ζxt a;|4>\fjCJ0қK7 ;fG3i22$ei9ps쉡V=ZT(́5xFqS?'WաVY G8K 77 }ffLA,²uj,ödydnYF;H/mbFj=.ss v*vtDj"^o+(/ R,6T57_XN3FgZ9ۣ˒FN@x S}N@99rژj,8:~# Ϗ ZZ'nu/%%? + d$jẺdc9CS:/|ntXu.hm@gtlX(' @R颔F)h],MZD]c+K %Xz:ibxL"wx{u5ʚ6- MKQDeuz †ðL4 B)Eک*pJIu⁔M:ts_>FIٶF/~V"~X94M80cW%Rq>OE!z7zkUgK !n e{zV+'P-ԔNe'r.XU藡Nr3˛A,3DPx%ΐҧĞ\) Q{'<[^wZS`t,}٪Uxa|N77DdF&pC-ʝp𲮫t&n|*y\Xsᢌlf@l:"ċ]>=;,R_yJd5SklwRW59{V{*xV&xADP} T5#B4ň ;S/A1__K`(Ȣ}m^}v.^p[$f0 ;3)C+}f4Oߤ@0< xKxiy X}]oDLg9."rOQ HWDM/8^r&H "` vCCkבUHdzcLA)4N1Wu&M EL?[m4b^ AS#E+R-TܰC [U>j廜R*-/7 y |0e۵d?yY3Z"K X.Eo;Svh} C~*=iYgNzxtעtL{W_W|G}󍑢\]";7'gVx 9HLA*[A\O \RTDhQ~?{F&ڪ؛{#Xq0mM}94 MA`dHSZd_2%MVm`>4 0+уaGU:4ԗ׾ B+aU:;o#lAׂ=V$l EJ%s hWMR娇[|ouOht~ Fe+ʏ_ZS' Mqt_!9:gñ9,gk2jվ( uaFXꋅYU=HnpwSucKN@6x 1JFݳeL93YXcRS~C2@tyZÙTXZ_H+5ٝC19CQ22k"cK//%o#a|}Vi? I ACFnz` ȴ..{`P~Z8yf?EiXڌVt{ӓ-^3=%)2 <]7x-2Q쒤_3]졪ĤblV458+GjaQΥTRlM|BҙȘd<}Y]oN3@8 &h֚@<]hzQm#>WקT}Xq%;ՑMFԿ}1FJ􆆢9!UIУ䙸m=AfGˤb+=6eW9.mh—ޠc "yp1b(k,Jrfp "!ٕһoF[0F?`ezqzpVM8[y~8KslZ^:/~n8*.s_Kw! x]SK"\ά&z ǂdlUTEbᖻ}ߍh/(md[!E.gLhY>4x;Xm7@~O3DBy`Y%ݕ;i'DdsE6#Z%$ 'B^,B7 Ƭy/+Hi)U/(hMYCe=tU ʰP*<}Ŧq8C|Yqi]ojB1ZMwvbPlwLK+ 9Vr0eq}F2RJi=8MtXvmoNnABPmY W:%-*l~=!Xd5e2/wӲ[iXg=?GSo̕TVr:.Srr(Pk<&Tٟ]l>҈Wmi}u[snu~9|i icnD+s) 'wkkl^^+ {eCM[d`/ǐz,`To?*Z&Y%z8yě2.3Y%YBKrl LI$67?%Z x,PeUN@U[Rě:bcɝQd\bd'D8>.isy'K:,=Lv-E9|8}g B*nA o:OꍍrQA'g̛,R^;Ts\_7aW? > v%kýHe7B:Vަ|(T>ou)?& I1;IN tAt J|'"cm6&#M+ȫdp/O_6)A(b΋e2v럔r, jxJn\Nɏ^m2+73m8GV-2#":>7 M;'$q ߠː[E7QM!WkB:o$1<)*;6w5NqG;ٛw}TO"b ]mGdX/H䮊l:V4lBsA@'XlquXl!ъV1%rA|,^]HȨ_AA;9s4QLQ# S;3d^)S:ExļVaat%5 wlߔ&c|I%INVWI'|hX"!Åm|gpИd ̋XW(rO-g ދcNm5i UI߳sR 9ͮ.oD;~h:Mx XXC2Ef`rW{! +=^Ż]D,IWOi+xCgxC"}k!b`ܗkҹ'6,F%lXo۾T+mB t-@"#@#ɒM8dc\S:JV;͎4kj6?k/ӕ-6,>zFrUOi2S89 0rz^z[',2{㻐_ %D]ldh-.ԛmazEͿrM&<}EyStDMJ7oJ2v8#IjoӻA .r_%tn~d''6o 0CFJs+؋|DZ+HD<)n34T<3A~jEԴQr;ieJ1-Cn (^r`bQfWD=F4";Ŝa72FVt;wjg(`6zway$D"B.ՇE$;Qp;ت֌W._#~JD1 ]]GFӴgu^i-'BVzLJ`Sw8l%Xw"ͤt|јdlE _*mGfVRM]$Cl!!GcS en W3-piY =W #(vР6DFilޠ:a'ap b1kZ`m}`uu9嘔_/{J7'\%cfnT`cV wTdf^.:&;I+X@ r,IZ,1!Zi{ H~h8J};6U^43{g*M:z6S0Io\LMdF!yY)?y8)o& K1^Q|'j瘡XiFNa \~U~yk];"`^ᯟ˂f%X]Ȼ0:qd1dN&h=Y=rY!Nܪk ?NϲP&6%M1(}_.<bgUoQ0"YmhU}ƤS85~DJ"ow{yIx{е_.L(Ro>/)Z Fp]luCmWMK%!ٿ>daS niM^X%) ^x@[E pGQ J\]h\AwbV?=zC0Hmح˸6ҥ$#l/3*?i<1aqc ds5MVa*S˰N n~e=h_;P~fT8^ CEށ #"*?~5TG`i-DDoR%ܕZtz _~s_&^u7iSߔ CL y{I%閮î(;M+"|Ǣ2F3P9|FGfǽ^j3;أOf3`d>jg=d璇2D&~P.Pv+HPG8n'kNH*:^AruMKnՉ^&r޵jO 3V._pLǩT!Bv1%6!XG/g`ww.tRa /XE1:U^Hna` .`es*@?waeщM$MZdK .uY<&Ԡty\Ŝ_Ṙ0[SG3׹U# ʘ")a 5=:ao_5?}NzvB/@&{pLPH L)? ʇ-cb>'bJ4&VϼvMsvZXDcCFO`VȜ4z4Y9O^ɺ@(,g2iſb8c+/|o=JFpA(3!c{6 F|[$2'L`,;kĊ1Q5^w _ =h ᧡7?.}KO: ߊŸ7N aiwBøð~OcN'$} ΄@ ?eAJWvmݳaD! !p\$ΊRT' Y۝ 0v-v(7Y.aF E.'aivՃFɈBojbB˗F(~Q# [j8вHr=0vd3eOk}Կe3JlD`,\()NߕG98)HX3  Yl2BEIQSۘڽ{|}77# TLFfB*e=D|[{ x" sI_/[-Js&VV^BMs0!@=Y> Cf}bʓ]rVDۮqƼϾN6>o3ڬ)s5&4\UDh!{23Z٨! )MɉC M26V- rהѨD0 q^deޓ9#?2LO@.uVo;B5xx1R~=љDQ~*hcEMOVNW_}D#M sFL(ĐCṮ rݶDX$?w w熋C]R^eў(Z~yFrZ=b1;ߋMzB%at; ]/qI8__R 5tY_Yc'yגֽZܐ m ѷܿ{ ӜO+gW+Ylt<W )];Z!P -Jb<h&J|lZFQhԭ~2+<>)sI #ξm d7%& d t`> JwM6<=Щr13хgB8&PIt ݔ&x쇴G\/W 4}X8Ě.jpJgöH r-S%Fz=fSSrZϏx祌|Y1ErLEbl񥽣n| /Ɏ39?"{#z2 tި4ƖH-o^lWY{RYl8@ QQvMXk?},{De}A|6f39hTD/RTᙘ ő^v"eIL{=툫x܀M\]@>N˖A ɱ#6q9VVUsDd[rМl|Fr9:WӢc+zb~:RJA}U 躟?i2 AN_nͶ5s-LݫN8\a;],UgtJYVgG5-0 zs|ws_? Ful7ĊtgKE{݉L

ɫT:"SQAPsUs/,܂WoKxjo{Q;`u?yJLI1IDx]il#p(S 9Yo $WșζQAzP\un"b9xl9kQoU-BϽMv[)X(='ڜC.K`&Mxb =Jg+ ]r( NoFG KQ ͗ڨ\ t+f+2X !JO=F"y:yK%Ms{@*IEw y|Ԩh F/.caVQP.o&ĵ "p yhgض,.D<*R .~a5[jdQ?s=o>&?􀆠|s/Y]aFfb?Eҁh~D fw qJyG3KQo&WѫE~Qt̘yAt]q>J䫑T,⏃@.lc" @VxS[y3"[2*wFCEÔ \)yI^+rxPZPsĥXI ?g`XvN`= I‏lJ}%Uol[ED(%VM5?DKlϠlhzUv- H2P?@E‘0#ȔK0U<+KjUtq멋o5xGi/t-," xdkT|=-qjח=ݳ%-Q,Xps> eP{dJ5!> DP7W4${9tsT E{qTl%{`ghBkPFGl.9;m.Kk}V+;fSH W7gX_3@X2?n+S^We DP݋N`4PQ- VM%J3hcxkG$;Q5>ƻiC[{c2o_o aJ 8s )[Vf㕚p;mP\p97LqÓ!QaJ\ku&2.<cƅ=?HwϲlJt1Ȥ.Aua~IV|!P|( 2n ?*լpԡ_Py-Ww6!'yFwNd4sf''cxS=RiX>B:]9ʥe3z@Rֈ?ʼnuz1 ;ouDpFi"/kY)\Ғ7@O,F08Fºi'mzN0~y .A,߷ncKS=baUdZ456;m^ L=f'UVnMkѕ7B/ņѷF'=kx`Lj Z h}l,҅IwX.][Xiq ɤ\'GO25Yߒ!˲ 1V;IkK ,؆ t61JM'%+)=?~S8=#9t\P2@9*WΏ^G11Yq) _@q3Mvʃ bm2(>NT°(Ge;#U/o`ϟ<{ڙ,σOZЬdx3,CN^*?Ĩ4]5CkFKPgA~4+U<\ S?*744Z:)a) B1ʮM>_UP}$gMT~4j]V)U6_$鈽^ acmQTrs#e9Y`hnv8}vVatI~Ik* ՅΠ&QBx%'Ҝg2p"8NZ #$uUT(^o?AOCl{e&F:p&UBHNՅUFbX>i9}()`r>nw2Y|AM _RkW^`ءeLO> T: ҭvIʖ Y%0;ګ#<6i>|fMAKWN! ky·|1N`ˊ FHnjy rd'SevZR;"(j#Ib?0#y-`Ř)+ȦP38GFI^&Gז{v*Ì>1_YJMnfV :uS!#ھS/&Y׻u9jDq,U2T8^Gl֏7c'FfV΃@UB-U=He9H|x,vB:`{h_GΉw̌KVHOZ_߯kU hĒO/z+|I΀0v(l+#[RB7iQK"2%pE21rzKgc#تl,J"O-ciܠ̷*J?&y{)F!ڸQR?aEw̤78ѽ]rV{FqFsӂ뼈j5' '`Ԋ u>Q~H=@­ 1ĄFѢOuV׶01E-aG't%I5k,$2/Xrk]C0}ĭtX |`8# mRO[Hi8ty>NoiÞӂThs32R'J9oD .@,j .o*!b[E}|õ(V 򱄮HXD`$%B"ɖL/{pp)Q( ŶSf~CkXn#Hp%Zg;@y:0ۃ g'|MNc:OfeD qwiwqH* 3h8۞2Adj+2o34I /R&ցwJiwmOsp_̰<.[€O &&Vڽ῔~E&y+b3RWza(F8"5 t QyTG)dz0Fwcsm%UkS+K'nTam>,_UR++**"gyZ 9oV=AwAChN=c ddtT8bxރ NiOOfD/F (s'5~ ].KaOnޝ(v"r?C'e':^]SQd kk|n]2D%hFGE<%Qz^?5bc]]8q(ʼnU'>Z,C*ZbǸ#i{d|Џ|weꨄ Sx:ec,.;Ix Z$u2۰1"`;pGxBwEgTҍnh%IZQ* o}euUN9F>ŷW\^_kx+w׬Oanhc3jAy%b n+ ۜ9%˾*(i HB\rש¨CM=IRq-f4b^9wO!)wȜON=ƒ7WI _]k)Gf?Үp4@*yvVp;61W>ƓR`o{8#:%nzr^#"u s~`}Z > ~}zuǟ}>M`\J?>Rq$;Dt{6p ="rh mlA:52ji!cId(r+EcmI4iP|ĥ!Y6 Ky5yr#b>RzE5M7=ejIϏynI\9L\/~(ub26ZDm݃,b(R#9g鶐ʪozbWſxm%BxiuV+` K51% ͠$vG?,f/פn)YYD;:޻[G{M PzOx%1b-ògpQJ_^}afs#qZ[ּUe_7掔z9nLz& YR/LA #7>NHᵴ([zbGEx2ċ`AJښFdgc[qԊצcP墘RI'dY.x$c*/r Z1`z9"b/!zmV{hN}gޘs&ܤH-bFn9U<ݏtGRB^ƒ H>YL%o-{Pyx kP#75KXG /5{u@ حEOt{BW--Ѱ` yX^ֹwדsxKh9߷&Zُ8{Yij5pg Ņ,{r+ObҴ;QGwCfr`s?/(_,ۤ|( lk / 3ޝL:3(]A[ gٙ4) 'W_G@!BQ= *mPn1ԓR"6HR%|fFgR]{& dTc|Ѥ-ˁ~Zg*Z0V#XA^lC(}y߉|hJ6}k[uvOv ?9ǗŬMW7"_RRtY(62)u=9|wU9hdYYPFγ 32tGYDRKRcss4E.]ļI'Ԇ[ e\O0Wc!bGxte &;p{̻GN#='?j)7|+("L7l+E[V@/TǿBuLoa3q$:Ha"fWabN?ѧJ6_NOaIJ駆.Ȓ(w<}3thz[5u-01yoHǍ݉URt~9(51.vX3Tq}z| D-&L/_]n&?@L3H>D|YE7^THn_o{轆ĥ#&_bg&33wI Ihޝ{R]'ZON R`Y[ Mr_-F&o{zwKpUX']R1ʏju]rİ[piYK4{ZK/gnƥ?@ ' G슬 ;Xs`.3VYxriMg7j> HdVf4jm.cAf'4U6R n/ 6_aZkiP"$OKtrY2rgy\b9X ֤h%$Ʈ x^$qq~rls0Ӣ=(wW;sȮ#:IfhU9PVXRx<~P}}DԌN0ƯX4EPǎ=>`ѥ3< s&Frԁ&4}J OŠ.7+rs-)eէk3 v1FoݶO7ɏAy]w uwXkEn[xX[2ͨk[ӄփ m4U/s ƾNr~xjEO`YEG~.lrs!c=~'-Ǘ2%GP¸ieKPv6c{]@vo}FKVӭ[e!OҐʎd 6dr$]'!`yԢ@a^톜 _HX,XyךNMC鑋} en~݁kF9|svO`Ἔ 󇉶eRnx49uҋw΂<Ɨ[!aC,{Ok硃LDp5< u8CK/ĢiA` \ZtJAſrhLeW2"]ó &e"E#օ7h^ -P=jW] /' LIíu߉ƉAV /NrCarȐ6}H2a[ [_!#̠"5rz[#B,^Wfu] 9/ J-J$uҵX[SQl҈ysޅۦ5@Q $)Vu2Gd: 2aoeΝ3 >Mi. _ ޽yS,E߂@+ZN=Pބ>x!4ͷȾX$1pDަޥh N4Z$]wďofb@EK(u禑_HH#o6eI5$KߎFntMb@%B.%(#fa<];w=qHHR0XQռ'/rZi:U{ΞIܫmƵH)3Kz\Êyt] ؕ. &*q^uwfWݛ\keS~hʥԴ 0}_0lRn$8Y'J)5H9)OǕA>?X0ǃb+ KgtDLn ez5pkꙵ3Rwqx٦H58a.bge^$i-0Z?݊ßX' Z(ϛs!N, )2Ч\-+IJWJU&ˍ{$E٪ѫy]G#N"ΑukF2zY9f?pK_x.LXf ]33p1P-~a:}IZ m5ook mTJh>먋*|4d+ܽݕM[_? QJQT]Ɂ*^`|mPAN?tϩVzdiFJ*֬wA~nwM)0X|(`,cSlf7yc8y`9*LxP,&B@qL2FKV VpUiplM]Di[#DIW-lU]Ti7_*B4ǻbU N]B {x˦LzU.0s, Q:1Qp:Gm3Vw~v|NY@2<1&x^qpXPޙ]'7O@|t7F2ü֤̘ɽ,F$*91I\œJzg{{t~;Dm|G%שl^9O/W3;6-&827AD!vh;iyǶA?5ĝ0i蓚ŀãgBs8-U x& L[8!Q;U!,2e<sRG7%.,>SUCdy-ZO;l6>lL(s:H%g4 PU6k1I/83l-2eO -0,ps&ߍ ঐ0:9 T(Y̤XZuZM3j$TiWӵKczY^'3گdԴM5+s](,0p:&D%\[ ;>(vaҥ2 DM z?ɒ0|Y.'X2GU;Zw%P !8\Y]?;IbkC֛;7yh=_Αbjz=>F\3%QPK-v%Q[ u O_J@j&Epa=ՆQ@9铂X{E{S9cu8޷sbV(P5H üwP&ckKE&gX7X/cV;]l0X0t^&1^dCM ږc4ZBD Oz8KgEiIEhXsom7?~ _b烬nj!Zv;ɏH[o'fp㜇U v MЎ&wb‘}.!D sSqI5jUaBh\`g/X!w>zHdm?1DvnZ"9 bw:"]6T|FȸF-RvݏHg~" G l^)Zn*b}둓:0a?28\ӎfYtL%1dh9AL?"V`3VRß6*\԰rZ/i\Wg0[o4S9-9/zg+@sk=EBox3\;,M7 \CsTvy1}q[9ruSd)C溯|9P':Pw͡H!F\TKPw6'ؽ, q2QXF+{7e3$qĜ8 3DH$$ ~%ɠoշsb~vDt[`n 2Z,X%]A9C I<|6/oA{@!IX'g_:q/[6Wv$Mci3"GdfP2.h$B! dydi_ ?W ;/'ӆ"_>tR>.UEU5ˁJjL,@koP5 ,D; La C̷oW%29ڄ^9>FIȄ'aC~ʠW##a"IU*71v9M*r&sHꉎ O\ޤ6:E,RHnR3#PgIXHG@_(}L`~Dp$D:&#4C^O>!։G 46|W<:|_ѭͩ͹-e"te$f/]2cг.F'Ҭ+(2|^1O,5.#Q 5W8wsQhvY3vodkѲ?,A f$%m(#T#&3}8Φ%V_QTҔňgD)<8E@픥 pkQЩDJ };Qx G!a.26ؽde1%ٜnM:Ӆ-q2eqj.,}i,T_O=^ƀ0o޳9L = {!_%<'0 CXL87_)t6T|X,E݂f*W DCk\LyόXgꩰ0.OyAty9e_cKZ9u ~`ooOۖX.Afq5%C \DH@`lgl%pԟ!fko{b6q:4Wj'i #6 e.EG]M6Z;ӵPyo,ͅRV*IIF.?Z`wp'Z;^}M 0=;ut Ӆuitky"YfiJsfQ)b+jhi#D u:3PxvWl?wr\$&W"ڑ*< ͋3T]ȂWiǽ8`(f4F,{ס+<KͽM)9΢lb*Z֎7@ ".);hԨϹ6ܕwvae#C"ʹU/) #"}T̡?TlA0Qc[jL`ݺh@MjmM(K2N¸4DnP?Fr_aG+;oXfx\!إ[2Sm eNBfRZ}a|JK}j;oVXjqH 1*fW#;8m=A 0],?eE*}9޻Lm;pC|6;M}'#hn ΓW?t s*0h?uYȤ=+Դ198N1O[D#P͌ԋ&.>jF(狨@Cw 0:zEiH+[ 6E5:O_8,{dZ\S{ېz3|c _ц*51N0?]o<&q] C 0ەa6;S {(L1I$/f\fj935T{ s_LoE;14XT$՗&Th&鸞*—&T)9R e=AnqLaI,p}t Cbgb0}`5 MAE> q};D+bp>ƻ5t_: n˗$(=luTªAB(G:D5=A7l lT2af-Y IssJ)T䍣6K݋'!1𲂣c\Y"^EWQ2:rr]TS1z.EftH! lHѢJXYr R̅pSDWA:2dDŽ~g_m3ոx3nc+8…ԪKմ䢢Qt\!FM5`[g-‡'Q3F%4Y\MM{"E- cJ_: &ڂU|o"zn{GD cޝˉ< ˢjU1.;T6Z@ړ( STKدcK2Ffo䪿['d2gky+OQ+2ױy(5Y;zKٗx?ˁX=?F^U_` d7U`NG)XM`Q'{Ms٤V )S<ƍ_3NНzq 0jĝM!cR@~HPsn_cHDz'Kp>ύ{MB@xlԾ 0D B D{P89/`*k4وVl*!R=6| /_[. W,ެ<ȉ`I5c(d,*r>1\m+5d27\b}kTBVX;Xh!U+'Ŵ`ĎϚblp,Tg\0V5{r'C#Y _ha|u%2n~sHٝ壠C;!^iB+'q] M:Zkz], a |䦞/{ X#"Q`O͐ª9}l59V<jv9f,?cKhfLdGR!XL|k]`a1IƄ2*G#U섔w;u|zYRϞ 8ģS@ (L)-LLp BKU~ոXiu /Y,'sLǥj_=m7zuh"]|hZ- XW)/+.cc|\kvkĘ~< 7d%b#2_}1лbZBOe+j;Ö' iIJ!T*F7yU%jhBUTM%I͒۾?>-`|9sd;s/NY%̵t Y#^*4d1LqgQNRߋ,O!\LKs=y`ٿY!5Ξ0r/ccYD}+>s/So'~8/IpNnىc75 WKK ͤ|URPG'A.r =5J֟WnwgҲ))jbpL'h!BXJG*8ϩ0Kq^ya8N ݛPܰҰk;_?ͻր ,M#os#I$6_3]@8P2S4C+Tg~s;FdDa4~qu$M[(iﴅkB-5>L@2&6KtI(ld!j|o͛St+ Y8Og+`!#뇎Y, S$Mx dz>qOL=xhkeIЭB'|ұc_ZɿNslkzLj(ILaV6{Q-\}-~x(4h6Wr^iRMM '>P!JRӯсDd4L|:lO\C!W3- iFLQCxBtjvχ-U!P=BraK_gHa @ں0lDH>Cdrݙڰ=ؘrDК6껄Fv8WTe75IO ir:>pZOOx֑Œª|$<&L3bYYpt@v FT&%{Ё+4j?!#6\e6{1|1.{p۹m[DkmSQp[T:2-ёL~Ed *}` |8@ydeЍ;9>: X<-'-r?iXVW?{sdzpBP s$V䊐^#\Z ־Tg\&)V`6 2% /)_0]׫?|4ﷀWE<2X@@. 9'ҦS_``'Юr2ih-s|Z $ư.[ KJ)x,}nBaY8i87;j05Nc':١"Dً5$r RIEdk䏾q`Wc#6g_p?d18xa8>V|}qS ^-P|\V>![Q}E23]BF6R,\xN,|܄iGNwo<ܤs ,)<s@wZCu }Qǯݶᆟ@;S?N [&dF.-oK6>OܨP۰C|V(+&Э"ml8jR$݀}ؖD^47@ -<~RQm`ecnNZ~IvS&Ǒɵ> s(V˲i^LX_-ZUH.\:RG_jKT=k+aÃ{ WLEy.nbTbs32͙!7ЌTZrLG@BhXCoǐcR ە92t'@2, /F&kIv F/[JUzv7dyZyR\DP7SqnM|~%֫u`c=Ӓm?L:A vD˞gfV%o{ VLTɵ"p#FIdl5JD^l$2q.QCUlfżr4 xFly ,7 t~G*yq9?uPڢ8Pfk$@|/m hw9KG['&ND8lOՄ7Ņ,ҙ3A)lVlEi@vGA$3H+I!FX{? k/V.7{R~L*!-o Lψה?L(Jz/5?|q;]FL K9J#]PcY*t~1>Ɖw]x{]ljD݄ZOVyRN(D]~<1Yg'ڛT5#8f>]+_`D4U habuXg[a]W):ѠQ̷YdcfϜt3QZ|4zur&ҕk%.imw~R=e; R? Zƽ~j<_\*aG>]RHC!TCm<"WEFc\ڕ63EXBXoA*T2嫭i wT;S3@uJ}T,WA~N=vagSOm@9C{3ٽs+7LKӐg ADqݢ 9\=s!ү{n^ځ71ǾG2oZmΎ`Ww';Jw1?X$3+ )Ր۫~Ab-εr=ƞqGkq sF?q̟Zbޔ }R5iK{d[/^a zQ>BdPTV ;jPgt#kTe?tar<g@&Q:pcԗzioE 9jlVBeC>h`vSȉKfݡ#,GFOAKe q/+},/MZ }u]UCَ}G@H՛tM eoK':hXL>#6BogB!(5t+}-kw%FQ!c,YLVy,YpT'X4YʎPJ\]PMUbcr'F'f=buT1hDIuSU\OdgR\Yp*n Ck='όbL]ey]8,3y$'CUռ(>]_^9zޱW!ITcDX* =ii}a2X7;Q=ޗDSw@) Kxa>OsPy=u" է 7 d\2kc`U"Czz_*YI1]9|QTN%bIs0Vj(.'X+[[k!RY3<*Z>V&9 ;I٤+DIQ1>B$XBT *qui(p\#x~Ğ(hK ԴN:Tk7o2@luMmF ཤ lrŧf7N>RـzpMW:{ MXl_^ivpΠ M! zLiA<`m~Np2OF .soN!DBhDJN^r:4ǧO%sS7>nݑi*?1ī;8 K;4o3~zr93y!vKD6z~[HfoEM0%lZ#[BYeٳ!*ꦆ6$uq#{Hd`?LbgE[J 7کDG?Xoņ"~̊*Mb-Q)w%k[$At~]`F2^W+'Mikf |}lNT Q B$NO0L5tg8$sb7ݍ}. ).a8> جK}n@ev rD,yAӽߞ klMo&U|5Q$}hFBYH ]^}x%Ǯy 49J`,hJ;<$>XE0^r;߼!@g<+H Mt}K@Q*w~wF3wо*UK ;H0ҳj-UsUҖM].c |@k(~C*@oS VN T楚n Tm%ї>xq?n J6__ D _T1 l ! Q # 2㥉t?XaAFںچyCG[(>ߥd&jp&c'Шx׀ogD3ti%uddHKQ*WV E}#X-$e<8'ơ [ñ'[m (+`q!KfhcIUan% wPнxNuZ kڈ{KtGov:~|y|Num󄤧g xK3fp|ʀj@HsY~+XpS#SWX,24ʟo'B ҄$HnKy @jKtꗫP5@oҿHa#Q?PJ 'J/8KC2Upe^Ȫa^B*64hRWhtHw @ uF _1)D(K]P)%9+owNWE ?)=:.˯I2|sV2bUu Ix Єp 1^^SOoRxV~EE>Dڶ ܬvLdoU /jzU9eWwEvhN`@o;Y(93oԫ@Aݧl6'5/Udc-VE? N&X8ker\܂xM{b<hUgpew7+ 4&/wSA`aݩP,#bxy0d*+qݷwMBFt7K.gmvx@W9{^):3[Yc ȦWS6vDQq"9#Hв^Ɂ|H3л625o*\2}U>2 )ozuB.kv.ݸ.a!AŚmpG:f }eQ3& |o]Fb4[=8**>vS$3A tt%Ɛ%lQ7=|~ eGFyf,F[hkn@Sjp":^EZٌ]X IG6څ_~~LIo^es x|fS?Z1b!>N/ED|ܿx*:]Gx'CY~kq"%"cEp0(b_+kaqr7JJ0KZ42Sv0UXS"j_i14Cf LL0th3{bS5'^MWldhNYF«rBo흥-}emsȫ=O q _?Qe.ws(GtgE.b } *_mombJp Kt =#4Y! *6-ɒJjpNѻ };w/W.wvtyTql LO5.?rմ*dg"{*D%+PXt">oXej^kuš÷5j¹ڿ_eVCU,sө{Z~a#6+ tVx:/k,l0. $a%-WIY0/fq7ZݕG"ki_)cNS6QucUMNX:S e^T4R99a铩"VYk ,=FH;>w^ip8 ^^Ziorx{\pn#^"0sl pD8kQZwGFHmjp,nvj./E;VgxyUs(y=pW,!2ۯgL-yLd׼(8~<<S/iWbٻ5N\in$ MIf~I͊vl?6Q^f{PNa -on 6Ȭ0]M?YdHZw>llRǰ26pp^bSo@x S4MOhJ|lsVZ~mUXBa7>ezT Jԕ&lhuP+ )^ne1ɧe8׎AD(LqIlAtmx1"^}ӗg HQ2,{`#_h,!*_rJY<TD'.ڐ]q-@fտ={iYS8Ff,cU :?y6Hҕ.AI}Z@IJl܌(#Q#0=J(TDok0϶[=f$2Orn $Ac׻Kͩ0$A yidxk{D۠I%'FfJNd-`FVgx 6 ]h 2 riQ`MhJO~ߏJ t擀@?ͅ=@#[Wvp3AԽz@hx%T8kycN6YECaP?7l [ I9.Aee5J[D\?LyFk*7No Lat6vƤ?6I+OX: p3WV&@:6U?$ PwnS6+E`Æ%v XP\z1]g Fʔ'ʁ6Cd\4RuB@lTNZ},3WY pOW`.Au3} 4,kIk5%!T >b-emwz~tX_2",0#?,7k-u,yH[mfs; rn̪Z)}x^{XaK o%k͢ZѲ_x0(B0xJ Vb?$ X{ځR᷌ oQR6a2қ-ԂTM4=&grݴ9?2&..s!N#X<*֡D[>|}[铫W.iG z?cF\N c[a,*"z:5>Z~EZ+O/޽J9q.z.lTFʲ@;ܙT(?cwQyj fv?0(^wxl~8/j8fhHlJq+cpJp١aXx ~s\;G*@W\PrF3R~.-GmkҖͧ[|%@|bʟSs!)<:)`IúlJWﮎfܽx~ Nx\_A= нۡw28̺}jϠ=DDzcl*ΰ%jxQ2p >c-$?DS@9y,/whL C8x_A eQzāZcF9EJ׉$A`bm jZ@6/zbD\ً4ydW-[z܋a\;ՠ4ks%a^S'B8sbx{7N溭.# ڇRTuh\TӰkjnSəY :(}qHb5@Ȗe머U>bObLҙo>:%΂U\;&mMy+g@)scacK9깐ph/l{Me A#K3.OX*grHm6SB:.@Yp917tIem? yZ\(8zu=4͔l X(̱ˡ.5v;fpenĆ,(۬:&C9~' ^9D*,u9V6+|2ҁUx׭R3 h!C 'CLI- ܧ¥>΢f۔ýk* gIV&QAU4 l {[/T?mo(}[92Rlrf͖w~0!Z|f-8U(dd曟yrq{.(φ_;&bs޸ ΛLܤID6j?C:}6ՔͲofVkIz_EM(Y2'. +hT">(Lj&SNQ.ixe~绹2һw*?jzׯ3SջVVI?" 9zS=+x߲Y#;@6Y")Y[{~^ջE WGsw/&]]y&4͋G 1\uXxok hr(u@c9 4O\ ~$c&qWV1t2Cr3_ͮ ~eAe9boQK)rV&[ `u[\ %kAI1D!nPq[}!T9FRBo4]~gs?&_:WM,x6:2w0(ij?A6š8SxfY 4-֩eY:DZ'yL -:v У3_iƢYfS1KY\Nv,ע#ƓG7n9,!5V>t1<%0 G7N!rkZX׼~);ꈭ\W= bFwUou0 =C0*4VV7ְ g&v[g5{.Fغ0k7wf=F O-~ ( 4aK< o,kY#UEӎ;-iǑ^lOqOJ\EgI3/&R1Ѣw:x,ۉGYeOSxl715#@B$Hm49YeY*vzs'{EK[WA,KĈ$<;|E ݅@DE¬b.2ER90(fڛΟarǻEF&YNOyHl_ ;N0p9|5{zu;o1*4mb f]$$L Cvyʌy@MX:76NU aܷ~9FvI&ZHբ4Cp0 jYu͔< kyDǷR,F˂ϑV3Q ,5'Ob.QcsĢ~h={Uܾ%4p_s맑] ,J!>X;;jDs,*ӳ [^lF)Q*8[ {p׶u=;,gΦCNA?T=irpUS'f/wiWrGEYRx2J56Ω5ęz9X43}y~JHp/B.k58=ClzڇD;xX>_:#ckϷ x:,cV0 L [8ΙxKSrǀ$;Le9E`#]RnJ kΪ_VlT%޶DQ\ y}Jdn\a|PiN_:130IQv͞d3 Ɇ bE>߀T?Q^7M`YVBs箁q{:WE3m&>*!QKv;Mw׮zltU5BJ ?Դw=jkn6f_ze!/ɢUΑqH-.+a+l,h~diivC6G%+[=Ʋ; T ҁ/EXGp[kPg2= ۯofLVZɾ=` Q~)ƥ"o-b*X$Օ׼]R3٣ 2j8f3Lv)$2nNe"05/+g'IN{6M~A)sSpMIV~hAFh@дߨvF}b1FMk?-%bez5]no5\]zeMNɑ!k?(m*>Vm̔]R(m"П"'F}A)p `(N:%C#ފİ~{U.64IB$}1U]kjQ>3IPcl IsXueZ{4$'LӚ=SҪ2Oٓ IZ@i2Yzprr ܕP3GUwP kTZ98b7s̫N5yկlyy6Ə@VJkIbڑlgbyh!>-Q8@DWkCRs8:g/Í5ԓPXb/,h?ҧgқE0F/Yh`(t[Tm(UFj N2C?05Yi(r?k;[ݿ~[0,zyXjg"Оs^v NOhƮڶsI:/l=fz5E~"Z_^cD9ܰ»~M#._|y){PӲ;qzͷ 5ңl}$dh,TzHx4\M-Tg9zq[ꄵ,9EjL-|"c?Dɏ#LgX 2,/)Mq°8(VOCw$4uAVԪET5+'x)\״ΥF=ͤc9oMZT4+PkoeѺ}ϻ~0Oˀ}Y+QrdgDiqn2ԙ0UDNxW5cVEuo5F" 4qY"ٚ0_=촩tT 6mͧ&\"˻ǂ!,* KO7nnm4tzIG ]/چ:{@4?e+ZW}g5X FJnU2Nb_en"i ʛ 2 W`MhO.P-cfⶸo;1"ڼ~D-J.hA.(m.?*+:Z~>kٲ,$ -5êʪpH.s}Za?Hgj0c ӰxM!@gu|ƣI).r˨ID˲OF>7PiO8; U"'F=v/xm"F@OpȊ.'ֆ{T]xKA{e7QW!PaΩ[!,pMFUj>3)O{a֛$z;͎=̄!`W<}cпh{.J( df"Ch| Yp%8:ȫƾ .JϜ Qipė }ri81گmd/#{6ZIgҝqUnޅJ-fi5>U;?)-uea nRkgTmΞoj(;Ȣɬ53vܛYE--V; %v6nvx[)W=`c"38W3q^cĔ4R=Tʎ:b/{3q{Bͦ;nA~yƓìPC1>%VFtc#Cx2VOi>HZXH{M@XNNHژLX=Zz\DqGN}_Wf\ѬK5C8Q7rNj!LҦ4Ւ4Q +fm|K7cL hXhFt붓ETǿiw\ܚ'^7qyZ7A h]|EK1LFb)2ia>Zf1rsܩ<{t(F+QE8a*vN7H EC~+HF~Lk02=+el 9!h:0ؐ*j58 ^MAH\[I69mJ4ϬJCZB 3!9}j[>o+lx*uI_^y4#9^'Ri!H&P%{0f38=RbP@Orjc2xbPhYluRfLϨ\ݩz_E6M\＞1KL &K$ U;Nq A YTV?@8j.iI3N}f‡C5@V`sdSw-hu@QI$[ޥfl0?EěfG`f1V V:=l_J[Q-J?WP"zE My{?6.ʈFW%]pmH/V~& ;2ȫ5eˣ"_lC9*$8GH ٕG${WbȓPwKi#VsxgFui#3ɔ7@=y/+%K~U›ïzрLT|͚ĔlϥF@mQ3tQ=nrmڮII(wv7̓R6 *~4د4q #ʶg8ZEʏ!oՄNLlEQT0Pc ۤ瀻11&+8`~k#i;(D*ͣ\̐)E-ScĊlåse_bS:Xn_ A;m/|W9d7mJ‡PS yVJf_?R\s+0_s%Ԟxh4owBbse\d߀dx=b9}k[5FSyc ذJiףvX.q8$H%b["d 'H[WjNقv_pJlȫC$G` h!6tg][~ryx4/܅x krNz d^E)::8p`|ZOxDn5y+9z?W*Yw˞{5&52&uU^-V(SbLZ&!c-Z75%([=$i&?.P}t~G#  Y >&Y6&hP9>FAWZzG2,$?sh#VwJښG[d"u!4W1ˋ{tz뷫-8%MqYva]zi`r ):D˧L}TePɣ$I;{T{\S;j10r>ܟ1>qU_rˆk%g}A] ɐ` 1VE$D`~[2zMv&x%Pֲ6NwkrgWǡ?d g y{'`@̬ij3Agوs0_ @<ɜJDYZմ&&*t[ku"(ކ8wz3s%Gs(̿zr'oi~ހ?-2^_&-I:[2U1i`N)9qv3*cb&5Z~ < L~`g>xMPvorr"3~R7Ì# vz7#ydZ\;hGpJS=_I 8R 04˫UPeQcϽ, õj8 m@  nao`sr}1;$ޅ, wX)GoP7IlH~5P Q?QO ̸Td]ƿܗ2#k4W4![fL&lSv1$صv9^~O @|E `g;"y(4S˰Z;N@\Pә՘f;Ȭ=TSs+o@ZFy= TUJ+t6#f;A:~P](,zbMMU{^߹[Y{:BF_[;"+@CDW[k i+!2`LT鷽Õ >WY_X,)~yxi*}bg=(0wPSb _vS ;]vJ$3{F E-^Nؑb>9.Vs!xBFo.+tDѤa;#49!8 YG- ~i?A>UӰ x@qL֤ ~-3qԶcU^ gfLΊJf5!gY+`*aK ԋn&Cds<Һɕ9~jH >f/qݿ\gN`ef|14&3$CIԏ:IqC@PȋHS)L78[wA LIdyN-W~!=cm0:b*R敂Rjc7 G}'?4Fըxa >]ݜH6?"%Rqzcf^k&J`K-iosjQ/$&TAlv:N7P1ሂ) 5柫Qw媂A+(`GSBuByjzj U`j"0 =TcKN{miۥ0:%!)]IG;1[UZI"[/6%a-gZho *h] EiS7@51r^lDT/kfog՟L@'i[y dd.c  +4wsHCK~`,"ԏ|Q~qжoXI yj1y6VȊں(DAp7|!K d1W>}ATAql'">o{Kp-WJ۬SlGD*ɧE[)B=zegm I >ԥuؑ^ϵT$N58,/pLOm5B'-1rؼ-ܛwF|޿\-@ hR䧲|ޭFj%7emi Dun yyY|A4_*x)T`5#5e{̌o \>kDrKn}zϴ~ V.q5{"3)3LU6mJT~FC;+Zy8;O"32<&kʱJ{6J-^O_I4?%eN~x([(:8Ӄ`.'AB;C}:\@tރuD.vG!?VVcR'^A@&!cI 1٨k~@^uo3չJQquy?<N"6Upor%?#Rkeϲ M6>xW)0sR$z)P3&5\ tdś- I/Zg=_B'(>s#",=ݐqt,W:)}<Ջl43RMD u_A/@yQB&zy+pi~;zӰ Q@ϜxWodQhkX4m2ފsΡ;RFBMD6h<M(th[!#]/"17ngmD4`:eȧD*] 8@0^Q["@Տ2miD x6e`ԣȸg.fԱ.f&Fh\tϜu)ሃHNh, ԿyS3GzZpk6+A.Ts9Ew5=@L8,ֶSۃ49z#^uP^ {97ʇP})1s[$my`|ÈdKu "j% /rL;HSߘUjUt XX7 qGMwudKdw>XId8}*-H2opaVU$WDr@~m%_8\(2`|mg 6iY꠮ f "AsYK7q#ubaE,ʭ~9a.]٬5BNFRA죈c6$#3lH PƉ/!6j * K%\W2+r&´깃B9-}}/]}$)c])iäAr~vE7U=HtYϔOh6oC{D=HHƿXÙP!MZM7*I{9=@Y^g ߉Ā4X (錸rM>a!\tct5mj=0JMy$b~kb <`Ճ\&*v,׸0eSy>"u )M/yyy-s^?!+f/+{};1ֻS3` YJ=:ou:OpGitυLr3SP@W" mWX9/>\bO@:|-x(DUuImr7`M(*j^^]BT j>jXJ(ׄF=[A0 s'ϒhvfQR)]VQJY&c5}~2'Kʹ,SB;"!7Q֭:Cs}Ym~,#u,L\KEˋe0|(eJi%\-uaXaL1j#H#Xho%+/sd "@E'PaU5H~iAIJJ6XqrvPaE)Q}ܚ{ʱ ЋC~(Wg_F'}گxts WuE%k^g9 liޑ{fPpZ"{OK^hs;(8RM܇*-5\7cK`/ 3=ʵs1l|n_ieh|>m]Q?!2d0 2ȅۄR =H41(fw Q%N΁ߝzY$bN3xKDNU`ݣXPz++:Ɖe4+m ;чwF&;e\\.-a=P,z10UQ)ZjQ093-i 8ʔ5dݭx"cbZNr)&A\'48,ӟ&3+&]D=ъ٤(KCT&A7(6>8v=5eF/|U5" OaRs{CQgg7|7ލq<=B@N&>=L!4$;Tg6+s40A\VUϺhm>:u}šFcޅXLha2%8O[Ƞ}@C]7D6OݚoT2̯ڴJWfRI?O._*Z_qSKlzr&CgFI4'k&AWW9:ڢYzpY0!-3I}Tz UPٱ'RC~L8'bTGw{^e#<̣2ȳpt@2Wh74k#<dբ{Y ;'EH oV/Bde|2~f:<K5h,Ue'eU[M|= uw9%8>^w.\7c>Ҿ~jBotH;l-ݥ$5T]E1C1w>sǡ*_(ph@x'|.E,Z *­b|$AC KNxQ:d}PukXVKVPf+ aDd,79C8dEzC0GܑF٢CNLYE-:ᛲR3E:%,?rH$*ZVPBd%A<iձ8@쁐q{6{(B]`GիNփzqQМ/%WTj3#![FN&ߟ6z\\aqI]vQ8J铷7A+)L[ZH J|_F>%-'31J@I]uhpߣoҔf}2A|A͗Œn B5nt\!f~`}y6l_LOlw Ct%s0Hb@%Q3?{Wa!n? 3Dex66lIͲ WI8+/ ~tɏOKUPx'D,ĖV^/ Y9rwk7r H'?M\YB/GY% @o%l,8)YœW i)o|*p8*H*ў|5iHE_厳AC^ t1n} .iam>.T|cITq'~a}[ j{m+K N0dK7.Zxy~BD4'2cl;;4@_t{CH&t8~8EF4%`5Pf7 WJ"U{rM dӁjP*Tr.bn$K&^({F͜vH0 a$4q?'#*ʗi qzBC&)ȷLy2#sq]VBZ2swمQȹ,R]AA pߨ,!+޵bjHd1%ޮJnRKxqE3.B߽f6=]|x+4 ཆ[~.YQ{Ut ؔmt(;ӷ ok]CA?'gHڠz!ra\6#>-MQ嬫G߾DsU&Ё>4 I+)V  L$#hTF4e4ұz8*U:vrMٺ2!G0x h'cqPBQV&HF̢1H$RcntBx!srXMEd~-vf _)Vɒѣ[2h%j1sђ|3QQI2tL`wC2RR WA@Znѽ;7`hg>57w؜Dž#Ӵ:hYT!c crፅ K>#SB4I,`u=[&W$% njstkLc^DT te1Cjz^{@9$M&i + U J2"SoPCիlPm"w~PvAtDCO} 2d׺{0 j"B[!㰷 scTASX#ͥl7W[.%A[ 2D.j ʼ׆.YӑˤO*R!7:tbE\kVvͪpHTsGAW[&2ٯU GY"BV9u?#Rð9Ȏx@L|Ze/y6%Q<&U~dMl<.? k@+x[o^~k= 6yYÆY7OPYI7ym " (\Ugw /|6804CK]TpGvQ"$KNƯƯ,K&^rqXZBݥX P )*xʹ"G)GnG b,#@@Nq!uBd: \1 =i/ryq*NeĥiC^>X헀Y\(4^kr꺪>s,a}o ^l!)=.yU؋;P.*;2Z5|Ⱑ`^ߴx|M?@]@|%cI~|\5Cd1Wޑ>j.sQWj5EqY)ʈ@qME>JC4-&/,x͸x:'d,}Oʳ#Up[(Pܢٕ1j+쮃U4,'GK2H:'ˠ"^.oCnjϏe)`nm~~.۠ YKzhlQxjZ왍O%3nIQ]ёUtNR7EB-~PQ)sGuItҔ?8=6-H&Iqfpޞl1sEaP4)&vzŸy "O)Q `קIww53ɘ$8Y?ktA,縘n]@flL+S (1>;)je,nۈ=?aU킁.3 {Zı_f;Sbd> %- jK @Bl9/yiCE'cG17:c@}c:ͻ ^ oY4O L8Z"|vY@,PI,EK|]= :b^Du;uhWm"ng. u~ bw#ߗVRŏ|,%o_uSۆ `Yځ1J3qH[qgJ5Q|*GI~ NZpScD!9in :Rc3 KaR"^$N[!DJj2 Q$Vf~s U,ۼfHʱ9@v"]m0[ɀK-ў+7)r{A<7,9q cܱ}d='W -B`ވԬya}h/-D 045F'z]lJcnL'Mz0[It_]K<՘陁AWxIDi ߂w@n7'[➊UR`6rU!C]-P;Ȋi L0J*P2%h+ڶkjO=NS} D8}00y[4 55q1pxYnó۴23Oz}d\n{!-SOjb13_`WO0H1~]%o %^x/o$};TyIfyX8n cȯBm8ȡ$[IMD,wN^!f0T(zl.yL;1n5/'/ϪCTWU?F];Aci8PE>>4 ߱9R%qEe2>irn8WWR3 \8!H!W3H!Աe&'‰`bbnQ06{JF%g/3۝Bo(sIN_8eJy12,LHMu仅tr=my.8@KkmY%pb2.@'p ')DQJ+Hgk ׌ha iw8: |ዸ,9ppo)yk쏳4!I9?1#{J-N5Q[+)~Jed-1ZeElQ•llEWX TdqyY ~:]eh7S)OoepÎfNjȤ\6̠ _s -K qӁ#7 B]s"v5~OL; 9gݲC@zk'FHXj Z2d1vdnEi56?k(4,ӬCQ>.G@QFhovéZo v{ǘeHõ q[^dIG6)}NmPkEogbSINO8U<_'Gbͱ6WUXrzjexdK*fJ睱᮫j*cLszfEɂr觫olp+_ёTP :zw` *B䒅^x,pxeP00G+}i=VqՋaEVb# jň@ጻaӀf`ϡ˅;aFv->dʫ_kj=8D{gM (P(^n4ٵx ' ;BwWß {ԢHr<=,Έ7TZF ^O^3n&1ӿX6b"/bUȱҿ"LF2@V(&3:1XNOϿ.ݨ~+y/gX VޕȠ]*wErC<@+ ўMoD /D!A/y$)&\Z>]hv.Zpƭi%PMm?9A(d$㝇b?\{χyN &h`LjpJD3<- -+ ;)wEG,pJH2WdH'r~>JXW/pdMw?rJB 0ueD1vy<ZO}XP x=юy"-XC)%ȹ.qDg^֏䔣ǓҐm{Lۍ瓇.L=.@Wʚ.v^f5%EzZDyO$'uπOSW-0ܑ?V.[DHP/\Е;|?P rX '}9!_DJS˥c&F4?8z}^ ]`)iDAQU`9}>'QdG4y^66° r el7耷#'VkGk "S3Eh9p0I Spjc{&BSXIPpXDcGo=H# eÓ$\ӱʀlci9$QLacl;IIGA>dp#2?a:Ӻ%ˆSs7J /P+ /X; :Z뭌١=2`EѺLl4:|7gtX䜨ResY[AV+2/ÿMV*Dl]a47H32+gx' 4Tg4L0g[ ՄyIPGg"m]!drc+􂘡_|l|= h +c9 dHHٵ^&?[+D,X]eIQ52L1Y|v]T"dԽJƢť9bTOIp^"GTNE,T Hذ/g\1'"ŐѧU0joV5nz៬g&reWgii+Z' ?E34Ps:; xnע-EU/j=T*Yf+FDGDR?=2q&Q*sgٍ_)9QTUF~Kh. \!4HGiaA8C eǟndy2ha|U=!]INuߺ^sǭ>o'ITT HDCn`]"Kicpd?sROf<Cξ3o{SJ6T|/V4bn?!{MMѓj6S7spur bM=2uBF6>8Eዂ>9IN|tLq"${rhIB*|~^Ƥ*l5˕vG/r.{ͲL=c,ؿ|[JBit@w:]|/BTc,k1v+ Tvp^F`*xZ&>N~ZMR̥`$pX"-C> |)0^J RF@?|r8lx;V3[.^Gu[h^wp9q9KG(^93[$\ bd눁Ŵ(J(j2D8!#3BcRSZ4"/Nw8&u;K˒l'i TGzI.Hލ/c^t>۬Sf)^k(D) OC%: O(vcuĦmgd =32fQL4Ou=r 男 ⯧>t_r ]L0Ԛ0~YH:x sp ISoђ Fťh #j߿z#o/hOboBx5ϧ@׾rEbKJͩ 9xY-BE98KgԁvLtY@A竻ŷlI)R^wmڳ)O$dR 5'\Ь64[7AXD(LɒtGdZvPÊ>âRQSk3CSk!Ÿ`XlC"pL\ IK w%:nD rwV=]#qt2l^o%5p2EQ\^O>Vá޳}_ᆋ T~6ԦV쁬5# .  K#Wi ]$Ji^P~`}Ǝ"4^>"!ڕ(D1O yߥBX9.jGu4f$ FKJW)FIE^-B?nF$up2ƈs=h*69-! Lt݅S $xN$fv0ZgUҒͨ\s*ICRx}MWܞPϵ(xTr6LmR[JvRj' l.3- м.ׂ\0k1%8tXu8գLн?<^hXXHS+NQ2oSqMǨa>KE, L ]+%GD:ފ dIU, Ӯ4j8Ӧ;vз6B+83@W4BXGR#=+, )] 6M=Ae3Wq\ +9H+^OY%;1]Y6@n׏׏$7}Nx^d{ÎRfRm-lR,_jhf4>߈EщVʵ &هrY_J ^Uu>| 'Yy\`b:{M @ $ oTvC`8Mۼ .ﴬN]ҟI23@X]*GTXm@ cj%GM!NO]*Gj+q^N !-rѯ$X2 rVF2[3ثx@n.B52^7&QrB":!z@djď_kwq#m(@"Ǭ3t t/ M?4zDiU0w` .u{Fl14=|w%J5'8BL'+G>F}fvy|vQMh̙렂C nykԳ^>d?$ȼF dW,#}mw" -0ާ6qV1 03 Dhi >nb Vͭ yn&Z+`!BUr"%"Yuk&sCJV\`vOl)(\%)>f] GY5eTVɺHkY{ɪU|]S~' Vg4g5gE/pU5pSfK;kMJOlp)t8$q"ݙ_z tgu L(.\WdF2r¤aJg{DNhW>WW֊" TQ.r|-O(LW=F1A| $y쵺R?kJ'ti׾60i50,a"+^g.ͦ(o5(O!O/q:-{i36%27mH2|kq]0~r.Ur5?_^d8ZCXk'%TEc!rOplz{on;ʼ4gsx;U jeAUs Ͳ&%){;ah Sݦ|ĹZ 3uwЊ1!9hI_ms)QcO|5lT$WSEy@_8Uh*#i|K&wq+Gֈp^)?Yd.j\._ Щr r{k3|uEZdlHcVv6O0ϾD70QAg3m0p2pc.4W߼ЅiWx #gnV{avymdnj#~hc"7,p)胢ɛYBoD*=NF>E4O@ڋNyHu8vtv"G2ds9d&p )K}J6li\6Ʃa:evpnbk Cw~E$j`ޘӨ`EE-B8[` [~e( Rgpe~h9nTaK.qd:2 & kqE˸V+l;+eeJ|yUV[BEX[ o.̣azAz}I*$%ւm# V=̃u:@2gva03WKH=V>f#![X32漑jšelXei0_6HhۭuF$o~=pʾ;[ ѶxApSi+tDu^~,#itX[BE'bP3Zx8Jw* #cJ7 ;YPgԦUL 5j_{`ΥR_xi?IAf!zNc0M֤_@,:0!؊~(" _BwMۻu.%Bv0h)t6L 2lcoVXf\I˶LUC: ~5hiaS u˶,`8iQ D"}cˆbJ1ߔb߮tUH.:xI87tu\[,9~~{b{U*%Zlg$g'Zږcjk$l/oZ*(¿V *8z+T*2(AG=E:h|uo6KM.JХg @K %QKي^2 .숯j0Eb>8o3s+sy7PE߱"3Ns@w`5\i)=|׳FD#}Hs >˒MIgRW87S2">c81uj]#e}]>Qz %A0xtOo&ˍdX2ش>:!v 59ju&"t!rc:'ج#`7U sU]ucsLD!"?Y)QNl &Hۺn8 rwAh7:;*j҉*az wyݺ= YPpl.g'/^SL?s>B*6dO[{<6-Ģf) f=7ԪB] rɲT1IO,YEuЂKR5wz%+٢`R< %۷3/r3\őeX+9aڅ%S)B.BY%{fr# lʼ<. 0Eհ-~0z"H@ZoL#~@mb5JQKyEўG3C@g9_±/&}Fn"4$QSvWyGEJ<DZy+Q}_N5M[htEKc@rut&TJUqsy0ytEBLڊ3qk"÷V_XkkhjпPx<[+=fbc;9oc@~9q)J$. Z-К^:$^_&O,>X"k'H?Ƌ?Iw&, yYGB(Q%z6M SIUWQL݈yxk?˿V&Yθ4|?JiQ1Vt1U;Od{!\Ju$9 m h @ ImuVAK?p& 4FWP.5V6=cPsGiFX&vh-Sӹg|lӆ1(5fO f-gËeށ_`Ev,K-zAgl_Խ^g1"X!"/|Ll'  B .&Z}hE޷s)]$l #:hVjttᮕF5! D f YR&8C3FuPDބ`tK`` qZ qZf˝yF u,TI5`~w碽I}s汾.t}  Sns I[NՄXv<) 5+=ffd85&CUpĐ{P`ɔ/ jE=8fTɼWA[׿j@:Q2*~cοPi4?@L͡,dxYvCk103'5^UݹMXޞ8ݤǣS5U.JNyKgZ;)ԇl0T8ߌ.I~qMCg eF|4"5DOhaI1;*:;`]NxW{Cq~2J#CڎMҳQ-ZkiS|d2ËڽFK,A4>vP|3_!p}5cRUZ Au0 ֮Xj㴛-k-Vn?oRװb9k)GqO@G'lQ@P uJ x?@6Ldpo,;[Ċ] S!|+SFQnJ=eIJ_/;I+erbyX }H~2dK$ٰP)h(5 m43UCm"@$lg@ \a|uȯ;px@EѲh<QxSaP$.7zg56z$/9q͗ Aw)#fh~.V.,ٌts rpNl;lcziv EBsA,0ԱV)Q-e^#W6(œbOeQcQkҳ45srGj8jiT? PdЍ(42H4o.@B}VG1D' #T!Uu}'u _kz3j0VUDjpz,鍾HTĊ7ˆ<9?{R嶦,Eumh4ʧ9ɬZL*0+~؜f=L S+٢_U$(y;VF(1d6J^!.+?n{a|Ua?6GUOK6lrFv*'JO~\=ޕ+WRuyy0mJj^CFutK}wtm\Bw1~ӳͳT9fkvv$6QøaϼF{YbɱD /&[I0U!$ t&j2FsgoK`%s4f9frWjUrsN<_z*3 C>W0f D0'@qWߝpTw$/q-IJx D-jNSwaR bjilֺ{Opi>t#K+N>h⧌=uF}}tT[If|\dQ_7mq,x#鮙Y 7y;bT.`蠋U3kw&I!MHy'oWyԷX}CӴbFz]u(E%Оq4Y>SXM۰?AͼfOS@}8Iy@wzzKR(RNwN)w{12 VP&Kv){@WƘWa0RpD18CX b9%H q6c: d0)Eb|go DbU<Ͱy;q.A4$4eAxax9@% D"Xkjd:`o`ι ,gZpG.^iNJEBӹ?<7ȠɱٵR齙WXpwWB(48UR?̿SL. *2$G"eh 3VyfZsE l2|u2ne6°c& 6 jVumrvRXR]h:"@㎝2@Cý˂ @PL7'c!-9=,I|Sk 7נ2th[8%2ʥE.+a"SxTOSUpJlnyitɾf3mc"vA]tbMk 5*WTne]ppO!7%%JNtu avd9-yeDc䓝RH#㜈wY :CZ|0skŚ}b([(Bf*8{H$}G?R~o!MkP]a/xjqo-h]ٙ=d,ܒBaYz,nu84Vy8aia2a>t݋gk=W3z% v J&QO1&A"8ezW}U$g)W&)%~ ƊP]{1^K 2RY;PK5,Z"hL7r/oU35/jISTw 8Jq@$0"UZ99M<憜LƁ%,^͔xՋ6\u@rW]O͌6AslɐodG_i.eɢ j3ll0L=T-4Hʷ;Gŭx? ;pzCv Vke}=T7.>P9*& u*܌'>벹O8/{fzs-6s5Kt)w-ד&RpzpEܓ_W֯Cեe_`>ɾ:Meۧ6#BJ2~mD&&M˦Dů;dͳOg`&N^d^e&Y'F4`<XSxUA)ˀ|L}I^pʹ~@kz)zG$ #txŏY3,mN%d883H9 4ņ4WހFsG%9udUV? " :,NeK(.ELEӱ`Ḟ,h^/g^Y_AF_Yɷ*q9۬s7gDPw)j\F+["+#K^y+w Oa@4ȇ$\Y1  `RVtEgo[.:p+ ''/W:48Q@ r3&Xo>l=\=??eD cPT2byV@TN֜7Udco{QKN>"ŋ)C<.P}ۂ"~}&`PS6('5Ft% kV |]]jztwvQR.JsO?]8F R߶9A˿I6l ~*[Hc*wT&]`oIi&c1- JnYWPЉGsC8%eG'lZo%}a68vDZ`" 2MeCE%ݵ?q+Sj]FҰLΏ>pK14Ee%<٧K;J+8'M'x79C<5_T2auCiED}(< M!MvpD(XEPܠۨ;b4Ӓ~aKGu4?DJ7ײ12lo E 3m@{$1y~/Q#̫ToÄ_u?.94]4zjW ~Hv~su ms\7nX#hdz:?C-N}g2Qc8jtz"m7M/ ȅրj :9{aU$#{n󟣍2HPas* $_4 s%,bfDK31v<=biۺC߃W&**2Y~]~4`K{SGe`fS>ǞǼ2.c Lk:,WjoK/>=ƻqLEEht'!Ř(7߶51GZM&XC=SQ7H,#O ,num-]QnLY˳OțP1wBnuw>d&u.: =$}j $ u ?9:QW$Fe|?S%PhiCnL9EXDУ03*@(<Ǿ*oR./H"/ Wb<2VgȆ#$C)62rLY h0V{[>TS2ҨBй dVo{VQ1۽"?\Qd(Ħe[h=bi.ABmIs \õr܍꺟 :|%rɵ:Ac :D68 mQ s b黃'Bӵꪂ4KG9g/ֿسd?T$0>!gI ٻcWtrx*=rbIb:Hm( fC*\- WOPoZ3"vS6_3h=s~\aolR̆wd;C,_Z›+ٟY-k<HN6T,agM '9921oC.|^*h{EMO4G!,?.ȬOc\"ʣc!k /Eە@g|PeLQdj.*Zzp01`8aDe!9H[ i qi»۵ -¿{I Jw9rޢ$]VVTN yi!Re6F4uAaBu_yQZۮ0й\!ڞLԧ^Vq+ MPIIPbغ "[AC^"nހ\ENˡb6ApH4ZghQ1SKi7M/ gDp ]Js')HEE@_gb&!#!1w!q}tv&D?8E_' ;[(D1s̒!6[tsz[۱Bqhh-sLAwgzlN$JOF=GF aefSHlO[__.Z.pJXpJ1%Cxdy%zN`0@6=On5U(T$3)Wle'ƢK}r6rqTK$`e/&7SHV551l{СPL4v@eYQo^CPſ(Y?lZ9wA} VjI3|[rQ$g*SYof(M dSCqWrʗLޥz,^hBD"J%اhѰ9)ɓGŧРuFؾ!s?iP-odBp-dtW ~3yƆ^E?I&8İ<,:΀1%[P1 :=rڶy$f;%K|Gv M+U96q M ۝r?V.F~%p^!rZ'8_6oBH0RMˍ{b(Ѕ6&Q>ԍ\ukt#Rd8P򟱷\_JsG̼:Tkڤ\.cˀꄐ7"nۖi$-H*,p7` Hui?CJ C ?Oz(vVRPXRivkynEu3'~$nmJS@j[B*ʉ7Ł?"/ ʲ7ʉߑӶy[dF2tsKdvI:,>*ФfO X&ѽ^UxpEp$L6 MFMo̽zGW)[Ƨ=%iK&#/XFU% iAptx N~D@ ԕ5Rxj}%Wj*{!v̋cXP|;W,a*Ġ!a2O5Gb'k(ȷ1 6eC[!ЄZgU"TOGR P?*ق O(w&e4J`gEgXj\GS^Z=EJ׌(oDDJ-ͺJ( AM?qwj1+)[׮<TIմ i@˥3/ډl9«ۯst騌;S~E? v̓H/\"pu0-zxڕv簿l mY8 [Cg(\tS-IKf_ *7NF*lsx %y`~6TYY_(NMncfR)YeQGL T}\0HSx@RhxT3ye0Bc M8mfL3Z􍀉0׭~w6ΦGS(d,HwnH8kT",x'HZ|$:+Os36MRHSZuE@<&.EaUtYx)E2"t5|OgXC/ب @27$WeQ}./<㋨6w"p" A@'k 1XXi^n`e\A'.q7\S2ZW#M"~=)LJݸ~@+2n"5{j 2W 6[?: DA/ j,?WjƱ ķ5Vt Sf]&p$ /큁q/L.\Dv;IdyIx0A+}^0w9&<=*"YlvڨαZ Ev:۔Āѭа1o IgU=_VF#>$VLkPWQ8IS|ZcSHƿ3UNLspzK%T1 H1$ ɝ&m8eFͺˀ}-miYAd\+o놵.{F-@Q?6xC !^ zw/6 "c HCjFSṔu [g;]4öHչ#.rgld,b&|i-6fνF'~[rb"5ކP?<(S( j{lC3EܴoHGd?܅mz ~[gN$*kXyT)3Q˄鮕D牽g+Ljg( !=+ TAd%hb˿5֯$.L=n땒s PTZu)(L~]\nUMnDWPsnfE4o @,?gK$1#23PADH߱T1D#~UU$UY- `AQ@Ǵ _"`Xߙsy­ [Yw}^Os. l@E'S57i]au/ =fV3v]}ʓLi2 B;q6hUu%O:r=&!6hj4~p^)E>4L{bs.A[l2iDs):w#m;YTśaKy~561|y,5.ˠRk:ܥ&D4uP}-_^=~J ER c{:Dn`M-:c  [HGHMZ^)zXn(`/m2O{\T]uh̪t+ҲXNz $p☑:_ CJ!|\4Ԕ]7Ć|뇔>-5'Pc VCh<<< 4JtjBc4@d54 #sn"&Re;R3:A|G+%njμ%5out^s3УiI=Ohhr!7 m]iR-FE 5y˕󡽣3E.N0o9x[nꂣSP=8/BI^?>e{5)-yygv*>ywv_HPpR]{0W5]Td~YbSjݴV Cd\ZT;4L. [."hVޮl<<^pSVl5-HЎ_W8iAkPb㘽ׂw!n|3 2vs*:kqqUhZbjźb=P8([yQ C/&&dХfHi}ʉbK ғTdbPzǀR~)JZI9[OUH#(xSԶR#Qe?^UpeˡN4]f) z͎lq|zxfΰ?&UdR9>+ˊ=yen:k%^®RrABE=|~n&@VoKm| F<Ԥ[[|P鍢-4$W|DOږ3JΈ:e1<>-W$y@s5Z ^r]9 0?6˲˭b]e oV+-&ҩ헐ZWVcB,d0k.V,*U!C? 5T9}8*Og'z:K yiWuͯar;n֨A$;/|O PZ_Lpirpd'x2BvY6˒H x!e%"oۯ [ `A%$c'馃ZX|-.\i{,۱Tp6 p젢nAd|;_!9o^&NROmiV+Z*vӰEK)v%U !%͙ⓣ+{zs=Es ړl('YYMڑ [B6K,}!A[7}GΊݽL/I-Έ'˳(cAp{0 bJd~KL֬.:t ǿcv\*[8^ɲ~V X$SX72^3a r~͝nzט79щY~(EŤ6@&^8˳ƣ^OXֲ_aWNdT(ݏf0G8Ao?883MSܨ?(\s24NT@-Ot]0`HdHԔ_] )q5{p N)[ގY44E%Q"bBn$uB9v^䧯sikM:X+qT+<"e<28Bmzno6 vg3=k,'K]@n>*R@Ȳ,#.sY\..罿NIq})nC Kt=QkvF8p-~Ev==RUKՈXC'T.<.e.|Vj5ZK׏}5o!^P0K0ݯN'VXsD ݪ5U@{L*.mxN M&4Z?f%jg9 |TQ7Iw.g~ZOx% JMյQh߶Q>zsP rH|/-vDH)LN&QpD}GD׿ȣkd;4F@t2c**\6Zt:CE:C0̿ԉ˲V06ց6P3+{p 24G%]I;>O;6@Pk~1RIyX Yfyy)>h?PlN)?o,X{(sة~_ahV[ե`?Wl}=Pҿ=O[;my֌yPMQFo)!Sd|-ЀMD0>a]gu}tC+ 8#M!$2czQ h%-_ϚIT`24=ʌM|7&~ FH3I0a^tGDeF4"t wHmu u\32IK8$gv[I!ܕm7y)}& ^t~vuFCpN ;Dq'Pϲ!z_ۯi/a[p-UE=a2j*Z!'&A?Oi_"<pK =Vb690勩 [<Fwc@Ȓly6zYy7])h\_G68X7 iTTddA%!ῖZ^ZMVRlu+PF ,K_ycFwa! ,<-hحaJt~F`$ ܯj/X\شAf!v T>~'őb*:a&p#NzO ͔P:`z] r{qkKS]1 >>RvkD7ڻI hm` خ[?a-O3pAARNOZ_ g8\ ri/>L'$s3YagA^"6dBΜVݔ(ڬozJ :!ˊY̽"e7ehO- ^[_h kaʦ`TǯW$vgD l 3Ov Ls\FI߮O#SrM>K= 4ڄXRsnu/^muϑfHط70#􌳇z2UCTo7T9p1qANy\gr41? `5پ"U(k}ZuYIA !F'K."X<Ntf!`L4RCtİ&=Mil8Nj]D?(N B>0ۭ>auPa|!3!M-F@gyۚ|=><&%ݵpBM>1Y~5JJ,S^\n=[bnח_՟RWyPJ$*ɓ'">o7˳1_)~=g_՚聄o~~4([Q`z4^1@fl.p0Ma&BI#"4D+ n"s8$^wt'=K.n(qAJ `\Hf)eģM}ê=szt:RFg|,4 eCzcnh4 ^N)dvVN7 .,bHUvwKoA+$Lifw-I=s@ L{pr=0Lw(5kS8DU/C+! B@Xܪ !PS_0'k{ϫhԟ'Ld_-tIE"МY^LX­{a2G}Q~e Y ̒ 'z27E/lѠ@s3FM p}"333hjD ჌὜D sV$v6!&'Kto[Y+@&9--u#8y[c76_U8ώVX^RC\(ZfcP/l-KY ˻Q(6K:,FY׷|ԶD[[wxt4R%Yi70V&fcPjAi|q+hfDžUb{ I1>/byDlg9dwMxU P|صiw"u7۱X~pIÚd\ XP@q``V iNHyй"W)CGQOQ="MY헋n^yP6`ĥ2f% 'bx8xOtCLE[ӓyƺCl\Ҍc-~Qfd:EQu BeV!;~vLDzPk˪ԖZB9Pm)p4_UqV||s)Cb%寛,`f"yN)Ɔ̋zꎋntx@]Kt7"t5x+0!2Wwζ9N.{4M }DznB{To yNF#ȹr3x:# 6(_uʊJA2}f~- ,ҌڝR.]P0Q QΗO ^C4uTH<@oGyMzr*^o;#4~{\PBM > o4 Q *2'Y|7烵QU;) 2B kǣ[X]VJnv l@hS$~c<$Axo)5폫@d_!p | @`z) nPl`oo˽8`GS:yoQ7l|C e^ f B}5VCp7C8^3\)„sΊ~D:F g^ߝ۪PIZ}}GQa 0i㇎ >C $m2}YH'_>.oҲmݓmcUpcdߐqgp.,qR rjH LKC̏:V9uM M0 0i2nHf yZe$dٸ=״"ډESH"qUԌC^a8xnGDQX ֩qDl2fTSs\ `> 5#i nXIy<˚8q5vL|E|F:ZB$1\Ŷl7<U.[$Ϳ K QbusWB')nODyKzp;+ )!֩ ߘ߬*e=@[#帐;ex K938t\|'9Xx[ :-fh# C)J\4* ͵ʴ^O"̫[3ݳ#vگ[f@݅@!Bjg  wAIKJw&3HrOZ]GwbB=X~,)p};v:qT]ePTY xbhN(~|&`lm%4؁,®g=`MHwjEgAXk>RKYz;E>\y>U=2ɩXGcZ<v(>ߑ 5MZ+)x.iY :_d5I[#ɮ(k鼌 "ufW q&P̳]1&mN1!q]O_:b٭5{Xr➥Ű=sҞɂ'*@.6evdqXs- |M_`~{WI}eX:'O'f~ċ;>ށUz՟"ƻD*'lQKպ7)ʹϦڸcEKaXC&WG.@J C >Z$$]7|]٫<3S ˂t?d|$<&ovT^˓* ,;WqQW?͕i*7G_$6z] ԃ tb>ܲQbUE={<%>SkeKvR%?֔C2_Ď㍲>Fh!] 67D֫8W`z6'Uӥxj:3Af6%yn7 Ɋ4F j~h GZOCMB&+`"_\D j܄^9dF_//@NWQ:mDz@-iXg8+ YY t=kL޺3ʥ5@1VH?[!B[* M>.|R8**ٰ,tpX ծnW]v{-Z] Ծn3az썲KP⸋\ײTXYMk0̖ū\~ R׳MiP6:He?U/zԺfICQX;5adh5F6TR%Sbgf"F V223J"$ӕF˪|OQCP;DX x`y>EDGg!LT o'ݱk6 pzX1z )\`*: 8vSi)^P[xE`Z,vNu G;?Jypk듥as^ Y185oE֋9ujbK&c=-JC y 7 qݫ`gXp29[2^O~t#|HUEĜ$YNR~;N'EoenN };PM>ܑ/޶]+oCwL*&5U%ɠ}P]g(7=$Ǎ/Vw_z8)DiG<O^ǒ Nsm *¸ .&T7ISY[dȿQ sPK&KƊeexuȢAT(A G[zH"<]F:`&X|{TKCԋ]m3CȄgX j(޾+cmA\ 6:7yuty.{H.ufּ 5/rM%x5!iʁ)5uުRUրSͰyWm։~(F6LBׅuGV8oE7 ˁeU@[ds,P\Ș)pR?\=y%j^GWj^p CS]/BGTV. ~*Kb..x4$EO)&9"^'~IfnB\} W'&I ig 0cNEpDoe6кCllȟ!\z2ݪlϊGpIqYNgP`q)?݉#7r&gדoC eY|JtmIMR. &iHMSO.՜B̌oFZ!kw#Y<ɃͿ8hSkDң~^6}ڼl~pQ mgt{ f-c}hG<{1]iqbk-;t)t=1)IX-o{TMr*z(p(E)PPT8xP>7DXN1,L6F I,}$#pO^ *%J &kͻy8|lMu%<`n"͔ZQ%eP]Ѓ:3+y׳IB|{.k ipy{T 5PшF@/?#n?LA2Jb¿?A)>,M[8|:hE(efncI}L[5v:EM}rϤXNiSbQޛś (0Fysy }k\d-4~ UU]gSd̜zۡ鸾չ[hg(c[ĕ EŢQ&nY7c{.gZ 3|''`2d7 m^X{*B':C-/Fe鳵L+"sKaV20gb9B^#k>|A?,b9h<&\*9*TӾtolJGo &5#g{cV48RS!離˼_ŅCKE-hfTpS(bun"Z(gNOa+vM73{IjE>.8r}]yj\P-"*Ń04~/wl}Є8&a3̦nGH)]b/ЍQs5۶ nl tC  ?o9sĥK=D΍镗( M ^݃ 0#E~S,^Z]guywftR{1S/hWȯ@Uy{ߏǦ蚰-@ ĝ/!r cY:hU]iʰ$FgaJM~C뼂o*Zz>̖`Er}V Z{gO8gRg6u oz;@ov1|te$b&qJAT,>uj78ho~kM!N?3XCi=ˎF:/ {Fޘ.0%d6?ӱ[?!4l% 'x.?M ­b}8.A;4Ea.aW`Zߤ<:렢[ 0Xh6uvM0|OfE`T>h/ܝ1;:F##of36i{t.j UBC:i쯣XcnGW:̻V8!L |~d(MRc՜V2=plfG]@ AJ|BA%{8HדW]}"\E}%#W`N7o>+!.0#WvSVʋ٤{@a&-4_7T<,];hn2nY 2Ikc0 8|'gwN:iC (LkO}ۘҶ7W冀0mQʚrFB;0Jd1!hj6"0[]vE4: K#8NxwܺP}Tm%tM|rw6tENv o|7'{ VRDQ*3CoX;#B:fluʡ!J`qH~* j {R7v?dj+,zgrеmv ~74BP\TY/jW U}H'H0 E%D *hht8#_Husz3:f S;I+#A q}0, AHaș0>tcXOZ3=^'&Rc3:{r,b{r x%1UF)@ϒ%Va !wZ ;h$dw05U}9nb {#vJ/KwvŭdkHZ 4< >쩽 5"m}&F}V҇#1*6?KtY krukvv̀NG} @yQLpXƄˣ퉬뫸J#M<*]Tlc9ԣ~vj'ȝQWbLބ葈)4z^^hZm j:XdFdNjf2Ke}3j-(pp ىAh煡' W֯Gba|;Ӻ{$ } 't;HtwF_5Nq(G'(r \x6wbxXPO@]ӢK?wgaVg)gf)a=<:>EDz>pe" DA"K B8صusvx8]D@gXJ +J JM"CTkH+0>]*_`seBpADx i,h򬛷ٴ(B Y[!**\D ]M>A߁|os9]z?T՗ D Fݭht,ːY8a k 62nikGc/HnH QT.Rꪄgg]{Ţ $S}ʎ-뉍MSO|!ƣ==doxe[ud,w wPr1~Zm`WsTIxhI]5sȵ36u/?g}1D 5UO&=tP#1$C]=~CaP CV‚1l /3A( ?RQ]BD{XA;]]H*s)~({6h&uVߢȏ ki*J;y}Zya[nCQ,Yq%I]+Pb&5 D ^ho:yR5.9!mQiB3#JC/!WbtF~碐Fltv6bU6e>u)$2WGHg폁egk=e`Ǝ;ia?\+"_G}iGTaëJTkfNӗ~[?"?daA4ux]<ڊ/|3WL$D|0`5CCO7cv! e_;գ=?q iUH୑R$KNEr)GTQI/ =N|Ĵ}+hT,̆Ƭ$׀nKпӊ_"vH_ksl{,.ܩH7DYfuS&.ZKy7R(6 %ӊQ9j+9ypEv\؇`["2dRz>d8~hڇn 07ܨ}&(fRl$Bkn -([[1FFv*"v6+m`p6FU+3CuM U \wiKU@0Ek+oR Ks4 x0b¢F-< 0S@ fOpԍ{3'eZ [Q'E 9Ц̰_m6! 饽@Q?r)(&SWT7']\g ۤBVs,uz2EwnXO/kxxh8MPna8 OhWH/e_f.'&"%E_յ>OG {"TWתSM~Q@0웕r}d&^.O!tG(2~ؗ=y-j2L'H68NzPD7*/wELF05-S.ÈftߍcAqd\ܵ߼2k8`xD5E)6q.dQ|~4?6 QW葇$,DvZED9*te;ջwp}p/HږM¨i8sMz𢑅Բ]|񀯦 HVfZ$LbL݀}9~ogl햵DE$kHĒҢ1*oj+'wN(/aJrb/pU0"[~p+Uj6(t#]yn^_J,]B-eCV[t2#$b |C?81[%Os~aUdpC1XV# Lq߁*̩3eɦEXJtSMh͘KZk"Ҋ/Y+'['c1;e8%ZKJ'[756]7*Um[]?rp:YrlE囱[}GF3&'S+ eςq w, 21n]a$l_%Les}r%hA (hoKi==|18ntibܓ ϨEt #XkkՄ((;cb3GӰC:]5ZA!Jla趚eӏf9/e߭Ŭ'J@Mp.E<쎰?ῃ[*lK07*}Οqb:0:'6 30$C@g H抰% RћP$lݦ>dd@ŝSX+8DK\`["2*tɢ9,nQmgmEʎ4fg6.ޟc_hBObO)W bk7/[=?]XZuju5LF$po;K7HH k!Fo?]C.v;u0cFՇۑPEʵ agR*z L  \  b⇼\\x%lQDdm6cև)q-W$c9\˷Cq?@̼Re0\,MM;hru,=S`ʮI,qӷLiTT 6F}`(kS\˜ܰ`J !h0C'^;e㮨.43>T HN<_1#U'c7gKK-?* {> 貔,e4fڵL3/[=}N*>1;< [&*.,g5p˻@8TRb󘈴@#)fCA*k]#jSkNq%Z. Xj'tjWWR|6*;aL>Վ|m] Ɵ_#o[[XR]`y?ZYą\1Υq9VjBS["u3!M`ב406mםKz&A0f]"Ux˰.(P`lȱ׍Ƶ} I̚#+zU5ڹ{8tF.. jҤr%;M'8: œWv8j{ 'a.%M#ABT@Zu[\vsw'{ E  1Ƞ(kCOK;^Pێ|GeVp XTD MVP- K5h 5BBH׆-h (:n(&mV{T19oqnN9@Ƅڍ9PtEK߶!!N JU3m=a?qq19Չ䋉NZj>fx4 ~Y<+F;a}&JJUh[7%$TTcI]9ǵ ^HU^JL8<Aw:$G/^dY)ZiWbfzY'4ZeEGdn/MaZQ #6 wj@I>sp4鶎ج[*aQx_u d -ͼs `wZ2YCg(=Q'bvX4!.Hp%/aƐ:y-K19$v9fwOuΊ)=釅\pJ$7R^ ~ЋHAƹ,Thi\QNL40ٯ|m\̕j $+Z:Gr G0";hXX6tGh l"n47#zN+-dp~ f?py ΥWU|] 7 cw'YL3WNccj=ɘMxWa xc.H_vbLnqTB`ŒdVTo1G(~Q"+N(lXAףSf>4ӕڷSn7AG44{EN+D ND5%-kA4nC>[tRe(%3k%v9ugZb8P_`6Z9K۶ThN@2qnVYZMxl=OD\A.'--%zS@6gZhቡaVXfz){ՙ)'YX'pM^\L]ZNaj6]XSq?~ 5ȼ| yt|گv%݅wdoPb߫c'Gq$Έ.w,,791ot$p2A-1AF`e$$˨oChc׵>蛈^E+1ϩ];#xB' ";qC ؘQcw- _2FP)Yteٟ;9֩YI;X۴ 3tB U 湧V*1O*ԤZ! F$|&&CpKjK)$ onkpN%`ɵLs\JP/k8 9~/'AUB\ҫDb*>aohVO `F_ɇ5^xRwBsX:y$lĸ%"L֜*xm1_֚69NLUڟn~of -L7ﶳ_f]ubxL6X{[`k&8.X@+Lg"ƞGs^[3HSϚG68/!i^H '`\ H@OΘ\ё~'&*+{K΅*GR " FȹCElqByig[-8kC#E$b5o*`/QKzm]K?JSGu?hVD@SRIv@NYO³p.1t v`o7HV6p@O\5HKz~`bW2igTWN1l0ֹt)ۃ Pգ^Jk.Ǻﱧm'|"Tp[HG.2??Dr߰ Ģq ;[sͶh@cEǛ K f}q+ KZ7/wiQW#k~nb”_T:=TBQ]k阛J'.!𡍯#QE2$3jK̕xw\y)> {6wxYƐ'/k5IU;Q ~d ZKShrzr d)oF)2N6)dMe;o_̂&FGyG3 'F$;DA1F o{UEUe#yJ/ms[U}2w02:U(T冦[boa^'ChwZk"ӕz9gYig_ť_ol  \ݻ9bb8P ZP>:-O5Ŧ¨`C~)YE TZfR8~p{GAƲ0)L>vJ3A"$KJ0xv^+P5lOIÏ/&&;:ܱxjoԠN}ZZ1&O:t<\teJU`mG Sxq'C DvdofvxK c~K>*BAI:ߟʐZ+Ẁ ƛ)EX!Oh\w&lmJ)<_s(̺/ߑz;=ZNaGuNkLi,,MbG^x@H<:sD#aPsp--V4>vH Y^⻪⦼}?{@-ӤwQdwO4X4E6;WCv 9c ~\rfB&'0Hs_$%.J&d@c޾X EeM{,j DlO|<ΏJe[(32 'FxM&S+ln[p_[tDD|=u9ndE,;<"@e[w+`ao-=Eia-@ZrEo?2 upe ٟ|eZeC9#B"٣YA d}?PWd}iɷ-S 9 b|36 >I.pMvk7:tרVE4 5sJp_gS}C iIC|s%=r"CUb3Kc rZ"lCۍT7-@~Fڶw[x4^ߪqIUȘik-_Y">O@,K&ղɿ^I=S6}f[%1ÿ\ZRC,?_E `_^(W< {7 Q~n-%B/(ce #*B5(WA]H#KB4S YS0MRb]@j 5Ȩp㞄_\V*&Ur[Ի-6c}pe%2eleFZ@ycȏĖR]04UKiOdyW URdi{/C;.Em6SԉٜDޔg,/@vxRnJ=4<4Q0f:m04Au;TmL5tHq@ {{ GDB&9!\&UYq(dkp'[QY0 7mLAX82 Yvq" Nd8!cu%',U3/Pl$[ϖIoyao%zPBtXZ1'yxfrHS_ҕfؑӐ^&8Y\mQߕx&긍b_ϦqV&v\p?8 SDr|6-oȷK\t @ӞBwϐ q]ڬiǤ?( 됸9#?42tVHNˀEzJzgͯ|TG3LEGJ?mk`ej._O>y$#!>2W;̥3xN4UD:pе gM7Sɮ#pZ cPHũYO}@%*@RbpkO oFsՠPRge4xJEȋ f9/pmdqO ^"9z_0+ѬmfF~{T=lwb*n\Zb^ĽeDF4#+^G3_$ F 1C`qaQb>Ht#b@1?-r75.:iQ̠ѧ :ϩǂV38)|h-w]$a3 ތ fO,!?G>(0!W+B2^4 1>O/H.!q꥞iFv t,pMcQx{='PYF_?mv@%#!])<|dO'ˍUH6O%y Sjs rmy0O½TDZk|`Iyԛ(n#A2BOM , ] 4T;1ufžWj`@0y[T; p=4oyF) bt6D\[6o؝7y=4\ȯ \SgVhDxvq̆n\!b؏boʞvAX@i*wvɛH"' %/=L^*"(P LT\Iϋ G5D͕_ VNzTN3'Azݟf:ۓmׂ457BM9 ^4J]AUr"dHg4"1ed98)nQH823H*Kf"`Z"⧹B􍝔.0VmZB{{nMpћ[luu,GYV!T<~[:➬ 7lxHlh;xm]H9FopZܳ3<_n3Qt1k:mlgI{6^/즼B 0OtH)d{<M\']rOYRNP}yB/N$yƵu^s@J*?\L($Rc!F(pIo/ͣl6\w&.X$;X[F@-|BqND& ^ @_s%pͲQ3+9I(nɚv~s=Y0f~>A. h=iFh4W޻4cgiW6ϣwG-9zS lڄ;]g] JzzagAAJy0#.e"Mk 3}6[Qy^۵q.+{ MpEoWaK+ +duxI!&)2Q- O1,b2{&-Ot`8瘨ld*78Lq ڢLIP,eCb^O+SRWk뷗x[zmD#ߩd"7_[ȥ!x)?'gOGߵ90Z *zvDxW^"2>3#ʳ9:+g|CBvMb*@S]݂I&-RB2ecRɬlT1l>; .-MCmQ;(Ei)8xdy| %XO@\; [j)kO6'吖 a_:NiQYX &Q˰ӌq{7S>C쉣_kk j< 7/d3B^Y4R 3-i:nؑl,+zިf}k^`b-Hھt_\ o v1PV?@ĦR6寺Ƞ SwE&"#ΫS&Vu_qQfXI qp~wdEo}cRfliJV6T_l/X#U)t5BV.B祷hQmKH}LZ[ϔ͗v DVqr!ڠEyVLz{iUE`= i.A%_8.bG r*j\?N5ԥOqRQm_K!Ɂ EcB o0"Y;\x(GI ԌYUE†#T"kZOTǺ;+WuHnڙ=#XK˽a^4Rz`K,m%7}FM]-O)>)H|{-ɬHtEr-<2zvvݹSՇ=̪\z 2fL,F ݝ<N\:_>3Xq 1Pr8 p>8I_hUWFj.>{$=>KSL0hw@?cD~fk?\7E/:):OPxIu[t:w`[hT1ƃ0DQ5J)gSa^OףsSFxz|1ob>/R X^sR%8+ Ă RW.v3Ynq:ƵxD5P=v tLTdn3IX HGb;KMz(5j(T׋|;4o؜.mΥiΤ\ԪJR}mt=$E{lNRI8h}źA-ɜ `1"WL:1@K-!/I)٩}fD%s=l3T@zXk/Wg0x/KwI`b/:) N3-~Rm#/$ɬ?y{f^].0 GNvikkxUq;em֙Q}Gsmԍ=J[VhP=6\$Ғc;"ۖ>q$FzWK0Fi!|sAOC=#IƗÉeE _ KTRtglCt ay~ KEF%nt@j z:HjSS)ӝ!d{L^q%g,*:=T4Jـ:Tie:HJa>tTUr(2 )/w&r'k7p:b0o_xh\yQlZ1pi*@JIYaԁR>=<-Sy8C.-^%n搴R]OeII\s 0~Xg?>i&TҺg; ǗbT<--{Bi"smdRU?DٝNvRR B Ff{l9aWާҙƏNu;)ϻȖ18P$E&-V ;uc7#$p3U秙Ǫ*ru^q4'? xvBji"ｬlw)UꈃS3`[RqzY4%aʝYRH`waKaJ+Nz:b!,uFz'w 6;nb3mެ ) RGǭvlk8|oG~waO SFC/vg 6ܘRHYpYqFΚe"!}Κ$C:1: a-D!ads|*1SjA4`SD]AySVj @5I{rL.HfN _qҬf#<z10Ys qՉJvx%˄[tʏOKm񗙚=\Q%["4sX1$5⛙Ý;hm 搥\tӮ-Ck!5ЇFH(`jiyT{D? .b՗8;]פmU_L>sBoυԸ(iM$>XL/ WΫ_5LT  Gށ->n6l;#}z(J|eAqS䤢ik|YS*v "-G;ŭ4ta(g&Y38lSϖP7A?e;6*:Yf_\^;7[ M"`SC5jpZpGE(f*h$$󣈵t9>I9!pM{qY`umLw1*| l&i}-%~)_OtrRpom0PVB.8儚kvUtrF"Lu8]eW0,k8UO65cORu#|0@FWPxtN,9OoW̓olpڜJ%@$8kA@!fFouRmf"N ^ƹv7CJ퍄MghAoţ rs$dffs}n=cn?5.r|YSli߻CܸgKr6JdǝUf0W u{,nKnr$э(&Uг2#5-{MЄMg n~L)QE@h3{mb$]ZI%_ {"¿^\.Ku~qV|ƞN'|KŠvQCc_bVJ}R l3d}ꄧ: S~NS[F]pk*8̻59iqyjk^=?ABI9EE VnMPU?׌*s,+9x%_\$T&Sr޽8`u9Ꮯ][1)^pQ|̽uBF f4EmY`_II\JoѯD6C~V\ J9gGA(`~ >N݈ӑp}4~/VWQײE٫Uu0 "29MW7قK#%t nqDgDiU( qu';ӿdw&96 =Clm8.CgYks1nd{MIh0 )nXE72DX?xYLʠJ&2Z{C_: H{o;ڣ(^,9޹ѦT{CO5|?,ÏqD׎/^kz'lR~˳m-F Z-C+Lbej_Yz(!ZI>U9]RE1 M$}NԜ@B;TDRjq Z@T$TNPɊ{0Y&uTszN-&8U _}Ŭ2z͋6A+Vi* "䝊 3cP8ڔˇ,jt2C Yhf909ݯ4$OK<{* ǝW'JZ'3S0XR$^5'\Veބv~…63elVY)6,=t\Qs,Ԋ֏:_ǮkG,Iu3v|;vjA?7˼-)lY71oLZӪ x{-=|]5rdTȢMzoa5 ٳ,YkV3#y xǮ8{F6c2 ģRP9ސ'a*c o^SMop&V _ H}3gjz/|H /҃NF}  M`!]l|J1&+ݻ'ɭ`11 b(bR|>Z(X#6u^*uZDVPb/_Op)s[1( EIBFۦ*+{69_^nMAZy9H&{h y0mY^ 7s}8-'\-:w `mX1VܲJ(鉔,3lU)lbB #ҘfYǁ4c?UT%E@il1 q!?ƱJ L1/LM Zݎ;PZ4E7="oRSvHWJ V՝D[H]R%$]!ULZn@A@;rZO`f1i9~:EnvbA3$`d?3_`XA*47GE*_Gv3fhZ/lRd?} x ĄȮU<Іj\%Z;SFY:BT`7x&CyS9DTDZZ:9P nMTQ1/#|r~,.Z#R"[#bd-`c@j꠹VS/6fx>"wQ|'0l޵G).(w| =d-'qĵHPݒ`9P%Z5ՐfLL'/镠F^K)k2hB/\dzա۔tt,PN2ËW> 3a[bzʶ, ɩGoyߋ%g*rk@+P3)W)m ffM*3vk%&Lj5g"evLt7 o%q^ ?6|w xw H ud=rNpNfTBL}^j%L|XA<,&4(>UP; ;sK9E(}Z;ݗǗIcIdjs>f'aA<  (wc#D-aɫBJ^"jdM$?gaJxLBH߼훖Ħ$^A: 7|;< AD^ $sz᚟"vzS5#g0:PDR{^;5KqVyZ%'f>|^/:grA?Z5r^GM^)TFUŽ=XQLTxF?JIH#;e:mη_cg$.ʿذ\-A-U8D;aM:M:|*` l:`=bU:RK%1Wipw~B?SU%{cW\XT w4͙Y]^ٕsT/HWkDgÇz}rۮX>H]mA awuG[v`#0 AG`|H,講M V{T q#*E;Cw*1u6,R. 3F$:ޗc.\' ~3H#?KFv/fQuaC8DsI;Dv³>rt7Q&!+ 2{bڤQCZ\+PҸݤ:PϒVsu 8iuq2,P v`?.9nz:m4mۈ!lc@S,~oߵp*Ų٘z@}{KQs]yE9p5M6;{AZ̻ WQ0EfFVyŵ "~FC8ffH,TGF_[fJV U^΂  $ i~bp+B[R#OI ^{vrPFJF%(]ePYNg k>j$Ay@ńD(nϔzN[-< 'E|e%T?C![ ppa2 Jf$d?gWhL&pd"=%Co2T|𿫓nenWr Ci'(\0f8H) )%˨_n:Io(4oQ=<3O3[yabAXw ~-\͸*R>VAdo-ACѱBoOe5X h-D%va!4x2HT7#Ւ~>;SaQPud;+B֝9;@^癈Ups;/e_@_$dIE'Dpd(s(tItjbOaP-r= kVv\iO9x:#vl[e;*1G㩆1VP}h3 ؝>B@sO4@+'<'̌+d*f`s9/ ZI:<{Z􋏉I :C,0mB d>LFdJ"&veŬazp l3$X^L҆=yDbۊI((:?ǥ.]_k]<%CN*K?<4\4j*D8}d?rk;PchܼxpA+JVZc.2Hc>]@M"C WlfֽC//$ ]I  {8|g/˭I)smi4useDe[ogU)JJtٻ:%N%:Ҽ >WE5޼Id6/DkWvs@ }Aq!2/B q{X oé-ⷈRhm"Ec#? c5GSYt@Ӕ3G~3RU:go-qRH:,vGu\"jw9Q^,Vg+ KC]۷cg4d)W_Z7|@h/)ðBpôYvUU:(mID%[~D+ 0Q3l!Vb}|mn@ ӫ8-;kZ$>Gё}ꖴ HTpEV6[ h{/ŋLcT7enyU15TU-:blup_vS6!9efmSBJ{؆^bWkK6I8p@hPV>Q-0mAnڎ4P@ݝEohjaJx\ˆ1&°]!ZAy hl'E bo޹!Y^Ap_)RƊKA@7&~;V\#3Ab\"vP8U{ÓmaK}cYc}; t_}҆Fw]V!4N.>} ҁ]M۾g5t; r}є Sz3a.X8Cbف5qZir>tTdn!q_@tSte&k-2O^ Dc'v[ވ_GY=+ra:NB5M.Ff>6`32gߕc 7 .6{\ᣟZ+Ӳ"ĹF?nW"~d͵V=oEEulT≞h;Z$i#p  Y &-+n,I)+/(H~0lANЪayC|a!Ǹ*w n*n `ju5!Ggs f-Kk"aVRyO=H9TӃKgv=ܓdot~S;4d* j0QE%mPa|!h ;s*D!(0qhLJ-8gw1 x_37{O+ԯ|6>d Ήj+ysӲPNJ}{'4k'b;Jdo1$[|.J`C3FI2 bv%at#kt{'Xgd,*Y>GLl5W$& m6Ю61SpH`UuպK3۞h}p,}@Yΰx^@t!<U3v߈hWnnk(C*/)'V`r65t%,":a^mLoM}%Ky{?H)hs'LR*IVrhƍMNǁ;~jr$AɻmB}Wo'ѐ E :˭N-+iӽCȗpکٯ|-as* ":q5ﺨ7[EpQ`nLx-4{DPPrG}wl0p)›:h4é".1"lLY?Sd'rdDL lw v3B07V;a3 T> 2R Eh_ğDg]}.t̴#F1+5Q2͹9ƑI;pO⨠}>ŋx նP,C&gDDwv9$ˮ^uNunƃ_aq\< p8yby,Ȏn䨹ibouuKyTK6Jw״z?cr^XC7}DVI1O#T-Ջ 'ٱ8_`VU(NflPW?&L =ޢѭ *cCi%[ZÕ %a".7[ V֚=krGtLKlh)|s_!NSYqLPk_n03kl_SAԭH5!sMЌ \(DQtť|=Q)y1؂'޹SR4ռA93W*lF6dbzoq)R"z>Ť},ܳ8_' \ ?Pw@&Vh Ե8sGC Kj VO&V@@ޞyʮ y7A9gԄ#W> 9%gbh;|2)zdDHJpgU!P3\;MK= z8^~E? ^ שX}Om%CnOKhAEoRBq bFś><l QiHfZ׎ߕ|zcۢؕ`#xk.p1Y|7EF6` |GjU Fhi] H3c06yg2ވx~;Gx=sj<:N,H?鄸p?B:*4UD@O߈y&~S" 0V 6ƝN>MqvV,Հ1U쐮LfɃ 9ށ@()ņ ˆ%}t"ʑpmSFS@ sdgT<8,(dp{: +OJ"}faSI%}M{n8ZN=6J.|rY|<7_)Z%ɐ0%KuTnµL;7D(vTF!xhRkSˆ#_ǙR;QKmP\*ڐtMX`MaW{k˛+V(V*13%BN⽖M3 RU P7)jG:CY=@SN^IHknPf˺1I7,8WydIH9~Q6>(",uj%oc[5NlJzTZ}/<(;U/> h/?*\R̀1# 7_K{tDҴ_R ֍FwaP+/MYQu,2h44蝻AZ|}y'AKz-jU DtH6 'e\Pe: S.==]ϖ7a\&SӛO+E  Fe zȆyVIODGfгc:y.1NC_R^_9/! A}w?_뿹\f/\oUm/[|*>4)#&l8⽹P256L`7 i+_ _Ȭ6Zuoz(*8<_Xb)=]:\thH%Q}co) eU韔ֲ:4V 5ݱm]9P_;_;ia ڠy0`ߦ;|ie;#?ɮk֤n9 MT+οC&׮ʖ@AϔdPƊ^|!z(o]U3hQ&\"<`Du LZaw3?~2X w?|̚tKzTN-?_Ij\z^*@*E\]>'칵Gq3HI2L"'aa@QtbyOL(?s"RAtHŤSgJ/r׮|c,wUcUi(0'1ARZ1pCESq 1y}brrP$d4Z,+hZos(pz䄼y=.= 5`5UN[v1hS]l}Y4ehݳ߿Nvl>ԦL/eX0qw   e@XQL̽Bvѯ`ΜNU˫ 2bO%\z9hy^[<)_[ZAAZ*v xkBթ!Ŷ+w[`d@ڣ_`|`1[Sʚ z&r`sU`fALft{oW!OqFm-=.˞ F='il9+ _Mh^$&CXc3E\RJKUaiDx{Tt[c5J?%E!$DrE4H6B1tU-RölIۧa.eX`אp*{a-ωQP$\~-"Td{sJ3}pPJM92b^Vk"dbkz]Ge,2AKR:]zO?n{e`<=F|(>O] Re>]:#Ыx.P6ig-,l9T6iw/lq/G7S|y2zFu||3Xy[ih $ 6tS5mDltqOPu3F~:c*q՘w, Me|,j[%^&ڪ !Kچ%j\%es V\/PaKH}>%s(V/g;} 'L}˘܋1&[8 aY9Ɠ3h14tS^ mrgcQ# ÜYB%LvqNQLÛi˷;zUbt1}>ߊ>Kuރu6l ć.R Qie:Du jwזw[I (m"IZ[3od1#䥩0ҽM-ɟ*{Zp\ֱt ңASϽ]_.J:v6FGaaeO/!:A!L{q?@[wdR41a*:X/D3ꂃwtق]J F)h2nv6Ofhp \'& y{:7FQH\[sϓ*mhGQj-6yإf((홴T}IB9I~sÇQTvv2l$z 5 R'?o'd8ո4L: 5T}Gy|$x-Sں/LucH1_ rϧr巸 ܌wJRI|NB[97lo*@.#m ۸ӯn"dA'Tf@R 2,f|d@zO+m4sK^߂TeA) @yNs(ǞXNC<9N\'T:@%a RN#kW qSC .Z!/eˮcI2<CKJNCn8ܨ™S0msN7HMuADKj\3Wz>^xꐔ Ot3kakVo#Fj\F йp.")5b5`]]j-7jLFz7,\oSw eRB7ܒu![rhUXD-kL$ v|bc\XM B![!΍oV~=ƲEp4'V:J~BԝIҖ;ev*@DtWC=ly ?"B&C=?4oJvѥTղo㞠wc0$<9xٵ!tð}>6\PiF At 1H Ga5ǪCF9O얺 4-OVY6ܽl˽V#`K~2 4s@hh/ dKn"*i? ),x40UI_yϧ*xH$ttaʡȺ4ltjs> )lڈLAmcS1k@{@"עCޫܻ3a` u'ٲ~։%,S\N၀Pm|"Y%)C3tx ڂrW_ԡ6eWmTmQ6Zۈ^ _g>CmF'S8! nfABX,khR=0 6ɥ1꾱 AjAOUh>lw bVya_=bf FjSAbwAɷjפ%׻R;Q}hHP񻦕9n#Tr02(;% &WѾm\Y!@I&ԫ'Q`T:s~%LA:Y:o `T?J`=E}*CmNLPzp/s#Vͺj.?8~*QhN:XyE-R1,fH K覚qJB󌗆=i"dW Nh%%';7hAp2@>]Cʩ'I*.œgjypћtym $晐MhRUFw9fby71)NިAvnFxym uHhy۟D׮otgz߷Y#7 > %pklzLg3v 7g\k% #d;5p8lNi(!r[N4&_"`9vg j鲲sN_jhl\ՏUI5T=w]͓{0ˠ7w$HMh?eEZ{7!ݿ*޵ _S۹ $1" ׹Σ<24w㣈Gl#FG Rz|u \. KwS@'5E$ڿJ:`'D#l ( nF8A|dfuoQHQO @Ts˅~` $FUD|3U-V\̋97|῏lժ[:$qy@Xe &=\ژd*GU1r]>MhNbMWMRhçWr#a1Db:G)`ÝDϿ6ϹP?|FsMF݈*(ВRŌo:3.GN]WJCcK]"Խw`K Hʔ4 +o7!ɛW|SWte+E3fN0-ogdO  RæY)(F&˛zf R:Dǂ(Ǩ8mA?U뎜RNaq >̺ mҍyIW':F.oVk*_w0|B  TFL2'Y܂б qKFIY2 : ć0gycI7@lc)c?dljt9Tf>%ւI@%N2D~,\n l1$:niqevDr5e _Cǯ}{Ѓ 7A:Yk"j K&zvB+{X_i76>2bwQaJc [W oF&+U*);YLi g'T!,Od$9[L#Yۂ~įߤKSYe:GcD6Il ~]aVu߬v5ch^f[+ QAqg~m"}tWd@]L'6=ODPT 䮏ߦG|9ʫN'RmLM4WB[V/}}l"~@Zn0b1؈^K zQ_CȰK >5UIbH#H?SE{'U28'{b%r9G&l?ߥm[8^  vEbO6sa|,/9tOtQc?,&#I{8Un Pn鴉wE9oܽQk|Ξ_; a1P+YA^lG [L -uӏ];6YXW;A+ip8u tPkР0xs#k5ϗoFpwG@`}Z 0]H"4 ɇ׊FV0s?4nQ@p㉘nqI8u.IdISN*?x|K)~;#Z_Px [^5$:[/HI eOv8œcOEԂG<jyi2lXRf\G*\ʓoe`Wc7SQ́P$"9y}L+""i҈f,n 1XV6T*ʁT0짌 9KԲEW13/cSf|=Q֎B>E,nrJKlO&C8ǗAml pWfY׀_s[oTɼ><ژE)@ƒvX~]Ul+=*هn;bH-( ch/YNW=܅Ueq2%tcO"t:<݊yF.%vʙ]Gqm8cG>.zI zڑ\2[jS0ޏr v%؀O GNضmb? t҄ .AA\$?K߾Dt^KMXO<.0PGT2eCF"='Eh"@Q((^u W(Vi eҹ=%av( *h̠9kvg0?u{l 2tੇ=n (h"pG3Y?Ih|rɪ]a/?'UccJfۂpF/!R< As@hdE()E"G ECl?'T"p5wG:B&D^Pe΂Pd3x3JFU#Ul_QۯD<^Ѹbٌ1e0M gp1[~&:1L(k}." Vۅ=(k$ɐ. qZ LR*@*KD=4)|°Ng{U}20VQJ p֤-}vصGf JX|" :&xBC*4N6 )&J,/0@plS䍅# 坒q'p,~:u'rթ a %*JP.@1` " Η?VW*/p\>2ڑVܛVI^0iWM;^e4(Ԣi UZ> Hln'A]E` R㝬cRl^WF^ي4WfS0fan((T -ȕ6 6qH eD͑$|{n9FtU+7兵" Ȯ̚bKv&BTNmA ǖSrGbW9#luB-DVILGH 3/qغv/p΂ SBz$s*ZϨ''r>@օ(tŏP)h`%Ws1DqKW]@ck\bn0/SOU9vTT묷 xȭ*^ c 兮^7>2 `'*z2TĢ/ĄS@H~z{2w1?xjՕKS5 !wenX5]!yXf秺#bZW_VZܾL`3*D BK|spj rZpgДԚ ʑVC#ɯH$NnVX#_5OJ<2D{2I@b<ڬBN5)#Kg`(E=JР CbEcYQ dWXbhu'7)ʮ[ma|eJ o)U]}b_u җHeMhkg'1zX"fjs|yfVsroYyX55H P@&d|c#71( 711?Cmn*Ma MXWߪWk^BA6"es !!&С_TVa 'F㞫!-q(:cY$'}Ϳ`XSK{A.s@qr-s٣L,%Ig.,;S2a-f\LtKx"HӢk4{hnDyWdAy+O鏏U~Q +]4U2zՓ<*ŀᐟ94)YCUF+4:mՅW"sFU K]$|Xc BQE)fk2:ՕԃFK9#E!ezQؔư=\UU\|; 9C8M.6{T≠1,DrQLiUعL?FOT OJ3=74ǡ*y;KeH5xxiɱ#YJgjVtJmdj\ԙδrfAX:e 4>An? kLfbӀDRliق`(KPY*LaHxY-~*}05 lt4;jNHt:9,c[A_oҺkΕ˭ؖ5"p4 1 vQQo~hOPyE6#p ʼҡfdJw@lD$){-m"?owM1sΎ" u=x68u{XMm7 c'Hp b $`\N) }i]SDYicqHWw=q4R{I0q8ZΜ@*,V \,,!e5Jj]1fz :&~+\ѷ礫Qo{6,.j66U|^3b~Yq\#t"3d iq[vdqXecp%@*fTölhEpzÎiAZ,..m3!34D>qTڔ'k L\NL?֫zVOq5ߋCX&ؾևBY/64T٠y$.si6O? RhqŬ)|f۴%ssJ/;ͰE}80jeQ䃋 5X!ϊ?>ˊ& LWtXE+ ҡ0K.v[O3X<耮}R"%pRWW#?Z֡9\`}?p }Xaυ~J&ܢĈnblR,10UbɰfTBrXֈ\%1S2~p0-(fknS6e4 'm,jM݌};E˚<Fyy>HhY찲@"r݌8>c: Fxe#n/>:9eÍtb3 R1 /fdKX#Mo|ٮ"Ά͇t0wUzW Djnq>Pͱ&lׅɹOb з`\{HAooY56㩠C u9xhbgDV4k{TEX9rGW)c1;LEm]jT:!N]P'E/[-B!,>4& (3JOʉ@>uۍYQ؂#۵c .L+6 {*[uYšLurRN 1@UzbHw0tX`XDt7,!qSZ.+18VReר:…۪rV^&. %1V[A_xWh :g=<D|OpZW H/W+71z!L9h@c(WbI^gY4ltldtGV O `ˍ;0J5to܁4!!T%ڿ4CO̳!ʫkc8iՕ|$V0lGq 2lŷ,͙1㓻K`صm (O j n:;~I]LuccS'(Ov %)nsa{0mqD o#}8#!wm=!M!a#Tw֑'=.gr3/)9q^x-+S(EpRЛ79J|ƫop bpFLn(H1?|#X̊ i/q5@CM@cK rJ ޡ4^h΃D2{AJey(,8&][>2 \KnFX:Zo|RVL#qSзU8t Kϟn!^"f`{"oo[ ШBU̇S z -zVށnQeK0iEz9K*8y"nypmS!iʀˬסR%K9!jc_nܪ 9*vӯ\llU95^?id4P(%!0,~ʻo$" [Ω\Ci4T{v۫XcBv.,${(5d Fy^O\^CSyeU>q*Ow eiyψХɐn:]D꒥,͙h>3 *y$qet Yyqkp/WVns\ (tSA[1eDK M gq%|p) R mUB鞓^7DŽ?9", V= "G",갷c}[ DQc`쳾X pLaji'i8X_3 bpJ Ub{$1Nf  "%؟j/)]&PQg:FضcK*8}rs56C9[aT͖EVgU'#]ן؆v#]Nz{n@FqfRWqcQώxMcy<+HK2Ok:5sT) 3iI{ޠkFHj#mO$NUVF(\Hs103|D+b"­sŤ`YI YѕiU_.mω]{_G:(+t,eZ9cT|ƀCν(ꦥz{ }D3;ϛ)HLFHq} hKxs?m]݉wsgJiY0㖠4$mi^â-McioDz!]ձ|"6*;P u!_f6E5JND6@A"+k9QX_]+_?3RdwLoc>X,’(pp^7-yWQ7uKu>4m PPc%Y\pD pp@D1Ju13 ԕnW8&jyCgq y@hҨ:m;SmXTt\U),qQDyi|9z}%$[W}!7Яcɫ[~sɇ ȊΧF/4AŘFb/nFNUh 9_sκ^fdH4s')6֥g2@>Fs F]]dgFḦ9>(\kJ|`dqzB˶ѫ[~y\_A ;BN. /((lĖVOD$fdkթ aڝntq8$Spr?',fdӡ5s՜ Q4HC5Ld Z'Aߝ8Ӗ yG?K'#|z5ÜLgP;Ej6?.A;Ď{򹩳::C>Y]yd٨Ҍx("{;.Rd>?&NWH~#\9/[o* "*̭*Y{yuRptS:! #^&9$H%=a#: zsR8 %Κ Ɗ(>OoAz "qp8Sе'ϛv+^)yH'򹋩y ȧ'6ϤE܀dî"u"oJ `l`p&-V,k߃No 0cGj*[hnp!m/iJgǐoO[~q˗QDOOm='srRLf躊 :C)\zDY`كf`$^_l22|UKdIpqhcݖ#oBeLl]_(Jʲ 0dOV#!NE&yΟ@秴>9{&@?@^msP8Y#II2(e=*=9o΋VrI٫#ՒBļ"] HXF2EzVn)lvYNM\Ls Ң? @-D>ӣ|F>W*jB.ص?ķG @~N,qz*{ghjqy)g ㍊#+?O*:D5k{--WisוFC kMA ¬MToD}@4T--b._9*.^]}SMWQ=gE/b';6ap.E "wؚwQnAbV;6Hw-jԷE&uא]bnϵU6!1n%J7@7.sLz3-x_~*Nuax^㾈a6r_Rh*>A|*y%9%^E~"P1%-e*Ƥ\X 2b zǿB >)Sl ΢knKyR{W~?r  1\hE¹iCd~v è>T;:64J)ToH*@@ڸpܹ)n|I__%U?Co=Tx`8a F;隊C`aAsOl/W9:0qzwkuP1ArsD%a~'7~z/QGRi!zPshf) fXk"0xc~kUܺ@Cq @ /@3ȮEMz%p$)k12BGj))g%e00ʹ&B]O5#f_fXy[ه%W0l˲}o `z#AO3#+qt]3~]UmiGDCQ-D*w XkG7Q*_V#/|7**gwxHGU80B Ug-~ZvH *=TS"8FCԜى327{tqBAi~}0/B:.5q9ۮiY.<Ёt\6my>C&ZC*?e-Y֦ hg~`'/8xIC~C.r\lW4wB./vIVZK=qIґTyAAW4=3GѶp]NJC8X棄=5 k˥Yɰ^Uvf7xUeov̜8Hd_%]]26G.PjznNЌ7bcPPM+z!eawh=F4@f.ӤB`)cIWoЛ΢j!l{24Ln]ϔ':ڕ򢣀7M3,\WL(CS( Mrf@PL]5YM\/͈lW ə0bS.˿I7<`G \m /Ҧ0?tj|Q| 8\ڎʖez0Xz51񣃡GTS|dĒl s*rȂ(RJSJE}6^oMg٥D॰mwd;Ovc589i-LTWe7 he;CvnƳ{;uS0KJpOo27T?䭪N]D8i[DWw\:\ IˎASo6n2"rYf:>OO_kYHlnoFCov2JbVդVfQy|'.V)ըn`QH *Cm K48 ^Ζ5̫KثGg/qqԹ,[m=E lw?T(MuB#*#iMeR: UL60Q^um9 q%OE* 6?D~Nt{c*YLt{݃)) Gb9Ya+Տ6ʨ|,Bhd]ǑK:]wfީՏ(&K~@M02|VΪ@WYyd(IMrK 8e+nڣppf{lVHjqGڐ5ZGpgcjL >LGyV"P'h%4H 1h7sVlY0[Ƌ o=T] $mO<;~_KݳcVgCF;y).J_vk-ب.wBlIdh{Tj;`p7Ʌ>R۳qUv-, lc,+,"{+yo)3鴪@Viwƣrg~x2ϓ(r?aDfè[C/5ĪԷ>[:m[1`YC] rcTK jnjNB2{й{ۿDqP%uB-:/?5G-|sgǃ'.w `=)oQϒ%6cWN-ҁ6Fq]ϴoێm[H4vp.E`t:0ˀsq$i@~}m.?P;"\U\Qai \uG? }6pNl@#ÕUҫ~CX0iOņwsӱyTHM[S+XZ?w┚_4A8*ԧ"gDhǞ2r96}E<$qj[Bh{?a ђoLپe/),a;b3hնץ ECA\:ioMtۻ:)On$6Q^1ߠ&XeV6f;n1i'5B<ߐQ9$?ČkHk]R.7%b٦ }܉ ChثXƄjbIAyљ t,zeDH#_LK֙T dH*멒c0 ^$763& Ծv|qqb;oƊgr\t@ RQ0XFP@1tXWjNek\JSsՅoݮ(_1ݝ1; YuqЪVVP㷯@T,5*a߿>~{LU[nTHKC6+5&NI˰W{*D1cmRz"g^^ecLI+HO#AQkb^\xdI]?qj3k5%y7GÄPĚ_Mv2` 1&P5q_G[Y/:u#:gG&9Εe̘}uWAz;ٞ0 2mDeyUGP/|JI7cDJ_vx6ԏwx1QgBKLbrIa-kra0BO7Xh.ECm>bm&_m|ȄxEUfF<u.(K/qiAG,ԥn;y/ 0J BczbHbqDvܴ"{Ngq{1F߱vAK!|l9_ZwD87WzFȵ˛oʬ%2}!I`7P6p#Q1ޛ+ ҙ%P13hʃ;HϾBWق XSPK?!5l0]Ӫn..Htp$Kj{It֯p?ܨY) ֡V<ꜷ;qZ0ɀ,I^ҥdbwJ مq6aS,#\6ˊ XVeLe AQ`5DTT6nqLQ*ӾOVh pa Ģzd=+W)ۊGV .VF'nk'\ S)(9`E˳|liȭ^elrω5#Kt;z \p7]KO#9:yU=/*+':Ztke?zN9MD]Uq{nk~*^ iW.Az5jWLB{ƀ %UÑuci81i}wo6M ~W󿞗G1333;BJi1lg pf 6xc"~l/$gutr f:MV_y9!9%S{̟fkQCD 8o-[{JlzA hC"`tc SԴ<^QMnUmtG}d) K"hѺ|QD/pr-rtv7Ju,07<NIpvuah6P_߉oʇQ,E\eVcy*O|^{u09h[K<2뼜Oenߋ~%XBkMCF.MmE<("ҩ7aR>0P\53n0+1yiEC0r3]z2ZkG >HY!RTÉRF󿟇$Y $zh$w#DSIɱ%R~쎅,meиm(~M2^"_u;W3DHzyyE^K#z,ǐPGA@Ήc%Q|mH;=܈ˀd7>C +HYcEUdKg[۔ES!v)- &ŧtRctu7sM>BRSQoo[kz IpQ?C7!hQף[5kYIB {IzWQpԃ'%.j3 ή ΢›xJAkt~?Օ,FUwY;4K)"4o‚h"yR{: ?DȠJ;k-y9dmwוi>*8~^=ZwCCYnn_w;ɻ][9E Ďd3u2- +8s9A{iaNPka.hk[zʓ+K|iw6}qGs, ˅2Z| #QxqH7(,p |>۟kt\jpq*@2[tҖ۩bsஊJjt-@eEi#}(xl EgbhȜEH$`2aY"w>>i$Ȳ%Ab{5tbn]DT!U_@wt<\3p1*-z(dTv1ϰE;C%G! 4t!]Xܷ0_7a\zI~7*Lb8dAGppkׇ!ep6.p׭$*,>J5o6JtS6"Ro(BiH?{` Lꂫ&ٗzdQ[YDBN/Cu'CIq\,0TX iF)/K]&/0!I"?ax^6G&h4_w)FmXpԏ_PZq9vsa~ -!Lm0 ,I~&ӏaK6jlӿaq9رyy:o/ G{E13 첀Tsp\h|;[1߫)?+=1&pM\.ؚ,a!mS/Zzވ$\+§Ê2`/hy tWWvJXK1hki} }M2Ќv٪D tngqοQlq7< G[R&V8m/ hgd*"@*.ktnJ1FrhJcbN"AH:ҽPi[{L}Ԭ©2(@#9FQ>Hcef|so cqqWl CpԮH;D[yv-Ѕ^Po., '1 lG KsL5GYxZfs W ΐC_2b*dlGlN#`÷ӜD%%ܦ ކ31u?h"H^kװ`^11 :DD/4*3֛M^' ?2 kGpg,b ~To|Y@DB| i@ 3([9U7e!\ I=?|{Jhɂ:4@ԫiLL^yGoD) NCѺe3zh #L}uL[xb1bio>X.Ժ}K$GP0 ;I?/Cz?\$6D豷5 AsgqbCSvdDZgL +tRM[[%o|,.\b5 ׆ǔO3KO Lkn$Z^xxDL&#Zf9q6\:n>;ThdxB{r?|Dq;idmQs 74!n6G& &E,=$6_,}E v W^al78cgQ yZﱟ$GZ:df `NCݷl 4`E?@gjiEk̶k+D؄|+rȓ7 (WILIi#hpG Գ8=OV!x 5?ua2Lt7 + Vy'& )iR_VMB AOȫ`x$K束ڼkӎ!z7Vovy'I&% wW眗 mbuz^SR5utNnq/,{h85p~ B<8 4+*F=@Vgb.'dR8\aJ\Q9br䧽uoms\h%/?da?݊lYaӽX̿X c'`1=mLfԃ>Ņ\WJ1X"89}aAhn{`.[b$9:t:xL3uCmd&5:N[\ Isj'6/;񘱚oX7j`EÝHN{G6=`7FemIjzaTJ~3SYHFT}σ9 J?`=4;yeշ@XFl!H%+(h؈Aaa{m-an5;k=C֟|9b c\zs_S=LDRf&uoJ^7$SL#\ Ԩ۫R{yc{f3dmRMǑ藂;g؅ꦱWaUHwC:l+̋CfiSsvI\3Br|oMx% ~=z%jIp`#כUq_ jѬ'E=!PI%\P ^L=ukA\w*Op'H@ο\I̲ɭWs#dgj**!NY۪h[?B8% hom})Z%f0 QS,(LyهW_c!а(:T7L!:{2S2}ߚ ۫/|o {s%[5l4F`(ZV?OoIM | $D)А֟'~戤-):udҚzmL/HI9Ѓ6bN#+CO_D}@> # K= |<Wh@~Y$h,2sp?pD ЭmZ!-vfO$ x9WBԯW Oմ57Cѿ6fV{"$\d}:(>sCPX(ESQ[ףp$X27Amk FuKTlRV~^yl,9fWx>Sw|Z^Qź(LjJ!FpQhiY?P !M(HߝcsGN͹q.+qFճ2_G,adPđyhnՕPu;: DHpƻbE+0cd_֫֒=$ #n|n50ݽ<mPKDFͿY"ribCNe6ԏ"HиjBK) ?̌B etxOC aLy%oVW&YˎP57zt.˳[opTá!1܂kdlR8qd%IsbI Sm:eD~!#R7ʣL4H'}ֻA+@6*{aH,gO}Qiλ>U>yn5C\Gi5>zZEU3n_Bе,!A-|z2*Ho>ܩwzcʆj&@D[55am~ɘב#C= GtīʖrM`ô>T@ ڦmI'=-741AIZՐMY,9-Dy<7BEP FB5~ke80='*A9&:F2QSB}|,lĔzb'ak!'h,0Tk ]rE2nu!")zlV:%U9\`Q0$1=k5XOTsk0V wK~e50p%eЁRaȧ[>v9,ChYgxU٦sf}nR#o1徲v0a~fN@ PrS3][׆R dYg\ l&RqW؛gBrXH ]UB3 cTzGf[֦+"{"y 0 &HpD dVXG<'g澂mN=b{eF?iYbJ|Iz BfL]A bƦ$?[`AN %΀J$%쬴ͤySjQkVuwwIzWdn=/)#a r;v}ɆǪ9X,ٝy_Z8`~-‡ 9CCVu*"+FN=ڂiN#NO:Ƭ{w䐿MAvPDT ?=.!Qh@oj7)3i\`-@d4 {xC1t}m+" ͒%A6$镏,X<t)a)ѧ(?9W7d@Qh?ηrMP}XSO^+\:Stt+dǼd;WYKqdah,Nj.il=8T6_}b'SbL=9%A+ͯ:ow9|d>WYMH?;P\λx)NTTc^75/euucUdjuш8eTP eFeXL( y2#ak q[6S)pp ᗣ` LD'~ÿEs#&umtJ-i8 c ]"D. ;f ԉbH#ȒBqb'|cJЉUgQ'rTꦁ?_ܣ* WyI c߫Mq,CA;\3f켡Wa # ގ~C?ɫ;]]>DG4552F΁3WZpHѹim7X-Ǵ# Яgx I濉g,1bM9^Y{Kp|zvRK\`lkl5ĪPy ͠ y sd<0.L/rHٚRّsiI 1Ưky0lYƈ͒iɠϠH" IlyN߱{XDfE.\,)H%&n舌<w5}Z"B m2~%P:Zبe(tkg!3VXnmuvoa ƿj i+mfrV0aE2ZIO)}3Jr=Z܋7zQ~Ws𫿿W6BDQ6;(b8 %DoG@1 hL~+|X%S}y9E! sVZ{ kd ȷD2A جoyeURvy_!jhѐlL d\S{nvC9^28`;[N2o Ny&%-ݬ̫L@uGzuIΘv&xKH`g!i}6OlU !Iquc틀}!,2UhܸbW_)'E#l]>\qx}r0CiS~S - _> 9*7g?+ U[:Zخ7".cx]y'F{ A%vX ̗>i %M\x>r#OAtR CI|~K}Fᕛa)ǬI,xM!o4o^"GL"o6Zg"Gw\ɰQA*B$ }'F`ƃ RjvW1$ؙ|^FnK61XS5,7[{ >/=@ ʏACTΙ/6:e&l'!Ktϡ7$>\"*Kt;lB@: K #梧 5iR2Y#Q'۠J= Pd{Vu$8a]Ҹjb X7VjYucޚb[ίxhgۣxeZ:mQvKf3>߃~ݿ1ޖTt*Kɼ\zJ5pIRE5 n8y|S@ Gfԣ)1E9ﱏџaj:] :'+礃}w[S/t= 7^K QzMk+ݶ  + A6J,oJA"? MVSFٹ c3wp>D Qx]8`?kR |:jN@Gw|!0[x$;kCw\?k"%- zu`,Ğa!;,xNc u71@}GS:w$>9;B]γ~GFJ{sinekʗ$8D=Z;{mꗸikk%3G' 9Y6OP%o b~8 SN #@·usS>*|+Tb5 SMt1DI;X~0x׿[XEl4㴴^֙!@×\eGI_‹43obT6\ZciO$@#1%&tSVM,d?3 ^CRWB5eKM8+j6!f#}Dr瑵ԁ{*ǂW07l~KRyI!d2m]1F]\;աTw8V s[k[jES Ò4֗Ǿ =)+QA XPln]T8Vߦ&CSޏ8PnQ2 պ=E=rwQGh)M/{Jի.dY-)Aj>x͇?S&]ՠh_U|_@>$˟EˡP)Lf?#Cu|xiB|W-b|aq^G& 7*hNmjGSE#40\S`UdSl<i6X"Tgͯ%)} @$8,"Kz6-e_ oB[8xʳȣc<Rgu!YR; t H7_?} 5Oj4| 5}I+$j[ Bi hUiXcI"6W?yFea#^CwfI/|hO#.M9qMa\&!,h:"ɖ /$w?b ,u&4&<{%YsW+\HJ6oEx"C+@T7̭)Npa2I6շ*%8R ӫ~e,R/4ؘ S i.:1SM|dȴSLYi3$XJ1ۅzǃoA @\Żm|xz]rCu{@|]^Y&ALd\ZQ[f&G ջ=sx%ӣi.Bâ(>ЂVxTwh5.\᤼FxM&op;.wلM&h>xw *ݏ'( V\TYm|L,>m=4%+GDu̽g&2eJ%wG))Њ9~@oCPrH!©I ݬsA6IKMahtfF&lpъyݟa%l?$3Vlg0TXF̍Uf"U,=('D)U6 aI㴷ܸLVK}  ~,-jc)oG A/ {􊭡ߋ'z'Hgjj& 7 qaIy4rH G*Cګ'"Sa`MA1WpEd9mB}5N@bn;Q/=z?Մûȟq&{'8O|}~ԧ4\\ eEw^q= ,j3nEQZp8h=~e .yEvfi<SײM`x.ix+"ę=/r#҈X&8?4~[WɛʪoYW-y*/^dϚTcD/Rܿj:E`G=e%\J*Y;B~iu6nBp.ΏAMD;׸OiOf\\v1CG:& %3^P&R{XZ*R ;%Ÿ!|Y%w?TGBdBL+u:Ӯ3F pSHECA!ePA0c./*qitcR|KjF%K6k% L熷3I]"\kCƗue3f>>. MXh=bS,ߗ6LBdOr'kh裨PMiÏZ<^7J@hҊ59Dxāa:fʿSϪ2_zO=ci)U~&@3%5_W{|OJ}L6rSOO+Rë:Qn1?&ʜ5֍/ڥNg2'KʽLq"P 9yBG4 .^0MpYk?[ XP'ce\\A=??l>-2pRmDg83oJ(Y[s:V+L[">qEno'M"8}|Kyk7fc=n-aI$EP2)}K RRf(P΅6V56P n/[Y:"Fw'19ɀĄY7_o52Lȥݒ+h2\*n*X! 'Xx^@ߘ;fzh⨲ ץQ;'Ĩt}νq-%m0M<_PT+ $..#}^Sq|q :(mQ)8M t9i,tU!Tv+}d.^쥖EIX C.mJy1ISEY[1?X(2D?1=fFִ Q 3de HJ]묒ʫ2*^2X7pbR~ҐH 7#z XƇ[X?bzE}JRB,26Gx>/:cGăBCJ5ՋOnr4w -;$p&:ixU~- )3/#bSmnJ+KyæRQ-pb.'[RLUCk@\g߭c-#W,62MWi'OмN8 :P"xGVKjA +1%p1r\hV\|C ECϯTB !'€~F4o>*[уQ^}J+pFC;,"R`y]-,>׳ʭ~]` d3 i'Voy#'fd (: r%]7`{B@SZ[cQTj+>?& JQ,I~xˆa//IblCH@)RaZ <VC _ ނ7Ґ;{uW9 (Vd1n6k5UQD ?VUBla3l_/ o sm&s{LRk=4iB.v7*$"fd׎j0#hLlAկ5n\ AQihU-68ZȆ$ʜ{oj[b]tAS,~=)0|Z74c7x q2Y_ M$-N4=FG{ a9G~+uP^Z" Ajtz=4jYW0!A`͈+a()e9M"l6EXEAz%4Kz$`[)8i?^|gP\ƚl3ٲ/S 5l Q}b+V]!Af+M?EiGJ{pk/̛:5FRJM/>_wqWÀFKw$:Aэ(@nH[)ͻ /v]g+n7/܀rIWh>MSQ[2E)|v~/Ayd2а`'ƣ& ͸m\g vIVDw{LcHnZ8ce=êqbNDry' XЍy8 ~D~7Qp?c5Rӟ#5 3 Ő2snZR?W0{QJGYPw/ߵ,>~]C~+|u/DڼNҩ]1Èrb@Ɲ lRO$gAhD3t66%^5A`5w%* Cw#t5pO&+Xj4D{*z3pIJH۪Ozkh!G-bGe~D',>- jBh8_Y´VVf{rtr$8Ru}ZY`ޙpU-{؟0C 5.pfVw$t?}Bihjcv/IC`3 ?E& N2EoOy/t!,e7X)@ӉMaOd`&0P!ȴMB8 tPxV3$Kl٩?"Af: mpkcy0fOwhƝ2N!I%-Ru;X}:(REA?Je;ޙҿKK4fy"HQWrÛH)KI_SӐnA9FN򛏯try5ji4`Zvd׃-]Tvx]ّ[G,1KLPh}ǷX?xcbQ #vawrR5Tp2K ޏJp]Дb! F^Ԭ< AWkalR\_[o]ؔ#$I:0Toxjɨps_,5Чvt';Z* *a!$Ki0hɌf_[W4n@?2Ngy%X5l]X[eF&rCDe`c@d5zmRJ9ܯGnXJAdaM  2.U>XᜎOS"/gR/hgJpZ* OڍQ壓 BVhbƿVc$z'$F oW`"sc1nb> k~?;ycartjj煓^!V\:bɵ!z!7OAnnY+eFݶ'=!ita@e,rahǜmm7ޡĭԕ%xف7瑴.) YkdX,Ѭ1)残! 1 7CfDF"*Ljp&1^H, c%2Bf +f ?-i6<nu$o:xs牧ڶY$9 IbG|jӔ2A ?r+[fEQ8qDYˣꄊɠdO?8ohlr;CRVEDSAlZFPgcFd4]vNuSczHtTeVeIy1xZĻXqMxyOdf G+Syrv1Įj$uS+i=5u+0Zh H׏~r'v4]2'mMBZN)~Cp.BxLX8| e d˽VeYpׅ%9Ыu0F,elT\ÏrU XD@7e73\HZECS[YjT'MplV@zrG.0q^Ud[ܮK!HatZkL?`m SZx>/6?7ziy !2i[rR %x v;:Ys:5:/} >YhY#0W@H0BQ^7?˔ʊlba@αy;ZT#6G9ꃣh# y5;^H}IOR,p|Sl#=rШ7CN^X󘧔$V:Rp*G>*n[d؉um~HoGT6?^Ty܋t|co?c,*c(SOl4d]m4/v{}P${>(•cHB޺f Bb{ k:$Mx:]?z`7;}kAoCIiCM@ayؤGu1J]w{= 1sj >y81L0ts$mdViJ4**_I_\!ɲ$ [^i3Ս @cH|/}_mOD4H%KdyI}1sl8d|V̠e8#VcsF_%cC tgy%ղj?6akMs>៥r;*2j0ɞoMg8U>VV>)nϗ<'wbP<漒6u$#r:&Z༐nI?u$A;44>k1c}8 ]\S,]Ke *I\E Qh"iGdã:mOAukWBӗRv;G@S Q{-:6ULlc3Bp^ŠɘŦ3B8T `@`ZrL-'P~ :SqͨfP݉^@ Cor0ʾ#"8LN ^IА 럊i $e>dL8({Sûb\%ҩ9FVA9>1UrB=Ŭ_7-Hlb0~$үY(7a BNjX &/S#BHɖ;9n]9-^2'4Kg8s,E^Q^RP1p^ExJWQ.nȍS#D\jO]򱈼!Yq=ezo&M=nB!7;!D(bAWxӝ5$Zq-l&i.\̥3B,\:)YoM %kU8Ź昃&b7|\JI%dBK;o~|!RTݿGzh#ni hIb=D12IAZ$$6Hc_+R!bp!rZjk[ړwPk^n|“NkXxU.@` A8}G\͆y0+!Tx.u&U!55OY7K>St+`Eg6q CM0Nk}WgvIмsE>pZa2f,)%7ԠƥBR v$Soíb W`{|$Gp3yU='aXJ>#v^֋  H֏nciFkr>dX9>ԭ3Ns_BQ)jcUz5OP?RSzF-i-4lDcgZ7\Wa :ZŌfBo@]Ah)Ayǂ\#O $&dz;-Jɂg&6٭9DךBQ[01i܀~$ 1E@RH}W^֤͘,a~ͯB&(k$%Y;jf}Y,gRYRkK%Sn9+]x+C"||fҼ::3ÜG&?21(> l+qKH+vizں{f؟-p=B=x(}{O#[dLj~LsJ ߓo|06jv3\6xn .~Qln9w}(j}-[?wϟ>P|Ѹ #{o5'Q!p@ @PF԰f晆sDֆh3o#j_i|W]A!󧀾j(s8``k\b\OC%C,1ڵ=8-k%f"ڜnʣI.'e˷KO8ӪfY(э^Mc ={K%7^kgQ,`<4yIx|IUz\z.<) ]hFAI7(Q@~ lAׇXT mR4!#,WkN ȉ9{7S!) ?`0I[[z'DIo[᣼ZF2*َpulى{+L%6U;4|W;msr}<\3ey5L9`1&ƚg>zOXtz"C˙hd=F&aeL }۱`?|qh 4}᱑%+s5SݘUhEPU+kÕgM!/%A M;n?m&썾O5mٷ 2rs3S#56 W{7;efcO.zImD!axs9eм=)!o-i%KKȖo(N]a䲷12|84O80XsĂ9Q6VKS8cŒub]#I m$_[ȃ :H}vE6rk`,38G(갻'šR!a1?r| =QԗOOhGR՜nJr?wUd1Yg k|zա=էd7<׆h(5N q0ddx-l*dd[SpEzg޷đ2~ʏ԰ٌIr1}gSJGi:X^ދct9xY! 11p75.|J0R`l)okY1q(`BVBŜ >s֛y`JApE; ZCaK"w]4.>*Pa7{‡%ɝEqczr;;5 %r[ҧV?xpoAK[elU2ӡ0FͅLj&믗33' X  5~'?8$SCq3-62QQj.PFOAvUѱ,~>LĿG;!`S8 )0 ,Tj=3gelbj?Nw8 x/G}fvB8`]z ~t}plv kӁ&xK^ @*^ f_}zťۃ11%ܹbDUkh5g@P~8y voC}@/By=FHdw? =XWj ȼ%ֈ>jmXb HqK׮[d/736>jjmv&dՓRoQ?썌Ri#fE2,*'9AM :0u/Ǩ˓HcO{C/)29K P/#AmkD9-:e`͑ZJ"LI]|݁?9SՅmhWvOF_!W'@G9JRw-4ߤ elO{C!pRy-pL\_=vYv̩wnL- TŜgѤї;:wT]!ƩVz:kVG_F>EΔ D LOo"^WD[wkKn_yyvYbTA"M%tMnAzlz,MXPY;qwJO=:=r~lO$qO* |oeb^\a>F$vuCqX,)pXRk?5j=smŢn:JPh%771Wz-Lr\Y=#MŜ864.+bZ)O/+ d ][bJa_+-M8BrO`KZ_OPa%4Juat;Dyטlzgo/qfdO2r,ԆZR$Ք)a^1k$ Y r)es:rHIU+̏ p:t"ҊJH& esԽZ2Er}atg//Kiv_1 [C5؋|4Q::W* jqYZ\l 8hj֌! y.IGt,E"o *уp{Y+Ƨ|̋d] QoZPIa VVya)$Á:5|ώJ,!m\ф_o8Q.D1\nx[SuLŽ\m)%,hylj\p p@C%ￖ{]B#(êyX~@GK3 ڮ4Vj1:`~<]֘UV'Y@KEڰ7t{of,:(F|E_?ё{v)Y c:,L,Nߗt~ϨO_ s ?jCh5)<ޏ瓠S{Ոǰ9 7^xyFH)@4[‰'G/bey ϫj'f}( SMqp\⣣љpuX_xCgғcDCJACS1iY#MZ[יqUG7ޚu"*a4͠q1JF5;+(_xG݂;bIu9=ܤ˓ORiJB" "XYC5Oi]ֶrܐvaR4˷tS'i3҉x\Y-in_8~EJx[>QMQ˯57)E <m ;oz^븫@Ĵ w40cV`تö|u?,yd1EXHjXLT?#e)yn4pzwo&[O.18],[UWs#K-ynYu>¿%(+KK| ԙD)%j}`Bw4hnKHNȸ]4H́8`uHQ^50t!Sdժk bz^ϒ1րf$:7Uz/rUx ZAGi H,RNB\bN7=SNVdb!LbU;F>hZ)gOв ~Lq,Q4D\،5H)ށ19>nCs4%n'D|gV]HS<̔ꠜx_ҹ{4LtA\n4qj=P$/ӕ@7wdX U :R0xn4}xR_fcf@Gg{jzh^qԷ4ƬI{N8/mXDuyiyR&4ҷdfu[VI}_!޽~MFDrpxma h/Zw]0"HIKчiiv(q%X3='o/{Z;t$0@j zu³P4^P~M~fsZ`hg(s|i)*E`8>kT55_RIhs*;}'튁樏Tn(VĿHޚ\Ė C@7SF-OF&GzɝaI^dE~_ʼnI*<4I{95ls]P@YC+4Q)9|e^N:~d­UЗ{;NݤxmZWg8'snr>W#-/wJ H\0rBprGI (90M3G"j[YYJ$G 3$^H(Oɞݢ_QO#A6Ա^0G`# &>.B> K*ň]#.ۜ;6) x$]_0E/)J}_>cX<9W% dl>PY@s8b ,:C5MYVZ3>Z)Ig!>?n^/-紺[ ûYQGAP>*b~ω(^VN1;soP>yNA!\>Pd<7ZD/$E5osO.>JY N:wm+ЁhZ]]y(a*g/ nj:B0l-A=uv؞=9W0MM{_|/pBhN,}> ".o"ax0 aAj`$/-u y]qvq gɻ7,n̙Id֍2HiqtI5wdyDJ jn7To':dK;MM=,`'[>7t4ױeXsidczϔ `J-e,xJwwx<졭@c;uc9^q!@mIpg_§c  m\.iQCLWf_~0z2أ.@."͎rR9b7^KYObm{|A^ < zag/Bzk((&b,H7AzZUL&kI,pS ǰU W'-VCQx@|Otǰ77LP/4pfW ǛN$ki <PBs,]nJfˢg9Hʹ 7+[:1zL˱`T+dU$]NbW4qaW %vc%ؑ ]sodYT-;b=ґ92 ct::=Ƿt'3m t@#Qw^RsΤђVY+vt >ڛ_& (@3\.`aQr)i OMA]Ep݄i|EH-Mj9Ɖbһ5YVcK*!a"> mq 4 .Fún0v?ӹf e\"B0duQ sUN&}i.I,7ۊS1{+R&A0?ʯ}j+? šfa.)\9Ƚ6VEc94Gm(ƚ/ b[ Af{R% nI^Uۀ/} SNA{;l+pQ]Zj6\OI=m~ދKӔ'胥ĖBSa筆rKTxlL';SuRk' kIz kMYwg{N3y3_rF{H)\8 p 0i*t11K;VB#)d6*>n+d) :5d8nͤ]]3&?v04Ƈ Ϸ<OOAƒׁu4NT"hzhȅfu[_;+m9wH7ΉX*rm#>r/H`|VbrqgQ.)JrV;!F+ ,(gzTqז  vq~:}nq1 0?D(^spgQC+Z .Oe6:WkCZrg75(olzMZ(jB +:5qM5hRmqiO^f1dܯ4kA |ؘ_w𖥳%*&}fޅ{a͡Rqx{ryIgn2#mS "̑:oWް8l)+ou-W4wMi%3!P+o6m(Ж,O՛Qk9 @6PSufˬ.if <PUIء2MBske:A5o#M9C*Yq_e7>0d]iomʎtsm͹{MN12l,J򂦲\ґJ[U̸H*F7=N%Ky+ l8u|kF<vYtHߪ?٫dL\K97+I|c\WHeY_XkrYPpB_W?Kçb/n8YF+:0LdR?"W㜙s0|s\xe'S˸%㽔'V&}Yݗ-P/~P iA(=?$ZG[vR>Ft@2'MEvEz0[hrNΥGB$0>Vz aZg29.r7 mCˣ!Bc$AneuCߎfW_8*(=S,nj3130R9* jc*;ج}fDHz9kgP /ʼnbWV d ySAf#u_+KRȾ;[d54uD>lAh&)/.rycтml~ە|33pOнÌc:Fbq'; R!!m0%3kg4f y]pj@aFg/6.PfC|;ෛѪ]6?N+!{oxR7{U8Pa? |{fjrQ*k8ΎAM (7+ 9cW!q1[_x{Sڪ!Qt ns縿\ Yqо~2,\TVþ UM &6e}Pu_[bg'^5;6VYd0fI=~'~t, $\r]F#cO,)UFD|.0f~ N9Ŝ hj1ʉ/8^ؖHiYt"4@ELɢN]Sklp!ᘀR7BƘbU_ԛ10y}~-v ?3s!eUcǫW񽐁xq8}x*E+HHmJn ? ri& ۭŧ=>mb;l9+;ђHҧj#LXgjvwIMFE`{e OVJm@RH+sQþ$`xPIiůF@-*؞}Ng>|I4}&=٥ZRMtDjepR>jY<;[B'Ti_1&O%$?4!QZ-AW#'0άA5vPM,7ȆTy:À/i/RLjrIu#~@(7\0X>&"ّwudB]n,uچ i1H74$]vݨ6Jە %A~\$t5n[5'3GOX@moHQv6ԹĴl #BT3FGkZ p*F*q+7KK ƃUOJc%pb|Z cMDZhȋMoM4Lq*]rs5;ŎV`:t[]3RTZj-p֝sTOl/=UٔdÀIO R"`sOyvX0/٩`C虋 pRoEV`4 E}_8+h6XP{4̷rsu1%И6vF5ؘGx{˓;fJzorRß$! ?l뼀ۮuj[@s]U*xB yz?cRâ#%l&HZ8j wAyTKX(!n~%SAn#vsRip2='z ǖkA°FE_Mb<˥60Jd_$4Vy0 JpT&  Mq9 /8*gWۚʜijr %_2<7QKe3ٳqYԲ70(9DWɴQ@Ч1TUA`%Cp{ g1.IwW:S"&>`b=j&] W`:ۯ9ӲAioɮ2PeIYO^#k/8M`.^ߺ0 ! tB `3bB`T1!NeG{|un%o \QL+L])_D: P{ڟ_IR|M)n%`o2K)bsQo$adgKS?Cƙ J*T&<~^ אKt@8"*[mCO%6C{A@ %UɾoT/B\2v~0jñskO۩9[# { vQ^oem-tP_V(/a,+<*Jrԛ\z#:IMK:A ;oGTvԆ5 k!˰ڰz&m u3zT9,=rd &.(ݱMKGt/Jęy{:FDj9Mx*zwpg?{:h^# =ѥQeHln|:6 0]C0ϝ@(ǻ1O<ڭ5P3]^V/ZYVW&?3 }=J̇!D/g:Ԅ7.%y'uN3ʹ 4 -JR̞v3Ε4k50{@ X-)Уv.x؞ZCؼCE+Tl"qnжx Wtee5,Kj{]ݨ߼\r6"\^ Pfs\a>&N_گhIkfп?܄dY'ֹ$2g8'|$ǧ'u{/Ȣ )'A pwSz;EߖiApEFw!R#f?1pm̥0o)Hg1&Z8@ 6"GJ!_|W*ٕg|*M[PFiVu>r22? VdD-{s^zE=^'EA;h3D pZ8͗!Zс2/&[][u?3eQsx-ڥmr[V9KRJs$R]MKW0~9+>w(8tW6hd^_~k5č[ QR_me[&(pXM1KÔ;pnܻQ^{bĠi8fxA?:Yi6AuN3 } }C58޲NK"'9w,5G۰˖dLg1KЈl&A-Տs>]|BI K6' ÃiW a~no$mGzJYȜspHSS [y3o{{-ˠ:2&^fN*pI 8!%\ʿ- y͔X3!9`1^ȑK.ky`-S|A퉮V惢kCb7n{Z3V]+'p ,NS8H㑧V9_ngnBހ&KGH?Щ r1t`֍p|V(x efUh٣aAQ}4 G~Dc0Xx1i vUn/_)o # ۥh"4goWg}ϓ^&p䪢j߇/)@Oe/Paoر2.T %KB5 ﹤khC灉Ԉ!M:bVƅUEuY W4`r?[d:|;mMw@PG+OWrWnO6˕Tl-:?j[7E\46(Ιya4Ԅ{Yuff}wL2  Y%BuJA/wJ{8hUrF2XN ۧ2#,Z2qƋ\Bx0-ȥY@} Ey#drsuS7I.4&Aik1Pk1-72z7T"o3pO腐ݛj"і ~80#-Аli`^m3'lo*A[Fk]!͒.}oeNul[eŲYsqQ֐~4ۙy!$iGA%𻆔`MEiI{zoUhVjm|'w#vj;jXt\1ЮPBtA@Md-0Z!]]`dxj:_,Q) P6N-v'⧠ :^3N1YvB| Yl)շcʪ{tغ6"'gӳ ҏ*/Ե§AS* 6=xpo~.Y2bU <8n"Zs@٢gc?>\>:7 a_w1.Wvx]jޠO* &X3DN*x>g+IQ7N;vo}-OY=ECRaw)ik| |7 D5TMZ ̦컋 c>pB4~Oa5ԆJnH0H:y̤@ I$^3GK[7֡ Py?Q |8H͢q8 NL;ئ(PƝ_<ǗfL V_$jAF!P l:imU#ׇhWfp:4VA ;hE\]Xiv.S.6!DB0)iKęץhK}%3X܀ 7C'8ѵF<ԁǤF Ȭz l3Mg굘T>$C٠8cǼFן-]CFz**N+^(hdPp2 cE׭Q)0FaeKR/3 _}B!)KuڥbMClT3 .x{"ܸ7>é)\+wE=ߴ[ c o@15ն]b)&eqO; ~\N~žb#>ΝfOߌl]Yc㤛5ę pNIʮpiO[X9n 4_h [%$#(5v),ys(+FLP׈`J D,6sY AC%X7tbzrT\ 9I-@JzpAr႙:$5m 5oZ F0@uo}Jrʨt ޞf-m!n=[]M(CKVqwZ=v`3(CpRh3P*UN!͠ر;"(D?6cX cB+ Ƭ@+]ac̺uf jNFgWX1+!rxyaoBMĝj4^ZE8(t Ae])M]򘬬Ohs^DX&k<(.,V:z ^gJêM^;P6ZQ 5 (e86W s#ocmBl#Қ7ꦼ_.0Jy;|፣L>'.a /#Bu}x?c.:zS3Bi*,EFJw 8W - vH6[.58?KT*7 RuP Yߪ0ԉ`!;چu l8\ 33ULb4?t:S弅a \.eA\qDB;s)oXh`Wx&rx':k7X2ʚ ]~Y ֝e[%PƲYcsl (XnO cl:]c[PYlmn28Ok x]X' a4ÂFPO~7b}BsXymq,t%kȮ"_ ({b0(4%tqS=Dy{H\t o2ݍs?c;Jt. +tTȖxxaBsķR-͝3B,X#]elxK{"OYTTc}hPx4p'aǺ_,O@) ޣ_A*:] I+ ;a%hl.SQ؋ HקԈS2+r̺1 n9syHOl]jE~˃{pd4Eo #\HY6biިꄓ '0~lDX RRQM7)HA$x/-Y鑔vC1 /y~hO189N?B>D7l Mc$yΙO\EH_G9Tb΀ rkVaCп=e լANa;RM@OMQKLbTEZ^%uH #fr;-{]zf9{ܝeBj*AoE"GР[F:_i`-b _g s>:Q,Hռؘh8++L7Pس $M2 }+nZ|%5Dn,&Ky-=vT[p'[uvbl͇#/#“u+]lg 2^W LCQ{Fn֑o26oD =ˡ/5ޮ:.ߝ1$1N$Xë`ŷ|:o,ؑ_ߪ$HPT;]$0~,:˳a%aĄɵKm;3cH1a)kU zQmaz*`u[yKnjYP*w>oeo}L(Ffn1^ 64 ;V= wDS1%s(4Mtœz+ #y&n:eZ28k>_ީqmxr(9;R>Ld N[vS*`WqfK΢h%\^.5 Xfے%Л2X/5ɡ2lx_ TS7b .z%ҡڜ)pYfz:yD:}|Q6N$xzbK//#aXIkGT{}DBɚBJ[HP@ş[ܧ;"+L+m΅d-i8C8 t7x5yP DArN>* ^~0tI{!R M z*o KzKNp%eH/~Ys<ֹi߫ZV̫o\q3?R{#94bwdHᛌG-{ G) ΠP(5d/Tz -6#؈~C՗)8BuO!7q/7oR橡^K-rSϒB6 \P_h]moΫ*EpF3*%$FvS9+ԉ}=Ul:I1~6j]n1'_˫֡Ag 8\vɪep43JGTD'Y<#'$+YI. : >}roI l0Ozs| <oϗlQa VW%6x%> <!ee?JU[Z*u#jRR4RB?`\ 4OE|.u9FBUmـD [^iNFM8V RfgԱ[o]-t%c/h3܍>{sT$W5o7F;9V+ !__41TuWGl-ʔBd':YC*}kdif$y^5˙(&MӝU:%H6kKnpOk8|<WߙAX(=\4:>mMHP9y }ڈ Iho'̄ S1|1KE?f7( `T^½0 kWykz(,?\bQqNI6,yoT:{-Ἑ⍀E|$ux"?[VʹRQ᢯1(p,]Fgxg1Xo9QpGo$/}]jDa=buٷ~o68'%$9ǩ>Ӈ2D&Uƪ4J[s_WT"UXQSQebh5j;X.b`DПK "RlĂ M˙UdBYn qR7DPl} c-P)h/,}^Qc|`/cO1{'|>[@sgq<22D Srזg re0[ uߜs2mBӀPJ GNNZ,4>aIU(t8) ½xN _b[kUMM0?[>o$?%;(m&vգH/ԡq!*J'O\a0* #\$_8 * ~ANy2s+9_ AQO?E:ۛ׏4MswyݬZ  ǞEmοD 4Tf/:2I #$~>rG!QQ8.T|D}ژJl-@92L-9*\Y:bn5w\ Rߜ9*36[^/(b(TJ0G"?fY!L͈BPa>X|eg6}` Lz;LKwQXQ'ΞYX$ũ4.ޠJ E>K"|*?ưTr/TC H4>.L7% V73NN6trР7E-8 =C+8~4`;TcE{*^^uGSbuDC.>X_OԵ7h9`= ~pa"h  XTҺ=&6Ei$?S2u!%绲jZo&r!X`ϿC1W+&']57lL/,t8g6$ˆ]۫YR.$Zh}l\qۢ89 _-(I qŒ~6$AzR^}k,3v+ !$hWcIAz &BU Qk"hBY_Zޘ7Ou/zS(4" B.Rl7i:sNj^qIf=s2KhEH_˪B T#WՏ(pvyJX['M-\틽‡DjZ uV3W"v@/TP wD,NL*'eȥ-<׈ o?iC.n \3dSk +i'%q!ö(P_/+k|C$veJh͈gW en7ȱ(*/l-4ۂXo0_Wq7ؙΥ q AZu"+~#GjU}WdApl@|$$U?.1`\$* 4h#rp[Z,C\MEb*!>Tϟ3NE(Vƪ 9[#JK nʁb \؂oR3,mWM I+UJ vDNo?>UPg: /v+zδ&0̴g 0a0REjX1Bk<+(Ap>K}WvSzW>v&pu/xf s>n< h ʴ:M0$ڪcY;GWް}ӷDYLv+!GF-ǭh5^US|F(kf|6^mK.'^;otYD(j>(7,L=Ia%ׂLujdŅwdDF!, M Gzgsgt}g' dUu*)Vmc8+S$OkvO_eK,7ǻYe80_U9܃Vlj,8#I i1@ BO&ڜ߅V`r54#x&!r贻Ry/dCyauSJ6^83 U.o_ЯIWǎXY RF7X_;Q{c^3i+j E-$[,/AtjÒ@=uS ]W| ش㏛ D>1v>={+*˓*YGgMN~3IKt\hluy_'n!N|a+AM+(6<.Ke[\MLye-G$`Pe?$4? quKJVYfCjX/T@LȽ?4㏪R/t]di)MI<Ȕ34>96j!gjT<nAC!m/_iX%k)x3'&6E%8&%6Ĕ L$9²P1Eyb`*'Ks+Δ'ě=r2{Y/U({[OMɫU ^yK&khM+ܡkVP@ Y ڥH>F:[ VK2peҒ&鼎r&Obrn;y3^T{ TYڢ -bw 6o.#`E'Sxda_ɴsi{<.&T}GPn1yYq.rzR.zg$GC\.80NR){6GutOHzBM#\!38N0=>q܋5]DnM?"! c&A /8 fP ظgsI͖s!;;YϪcZ2μp5GlZ[<ϟ)a=&}ߜkߊ])q6{s:,]s} 7 -6i55?`+>oM?w ~M_~KgA_jO1g_ } ׍LV۫="i<3`^%L,ᄓ~%}`x EbY%ۉ/W|n?Gn6j>#^اa)7ZCs%7ƔLhTbv8 bu5 @w<@!h9|"#fH-c~QUli"1V/{rVw~+,AGLHи|f [ UY^@WZ2%T3 ~'͐]S(vG.Kl8{GWr0)RWY\"R*4e&\h~hOob@ly0r e`MoHEJ szaO1V\6 X**~ @gv|t7۶_Ht514M )!4f/= g,j;Lc4{.`_ \$#m ̧U`E(r>2[㧽3BwS`߫Odt ^(IBtۅ=|bh?:ǰE<%OF9wBu٪HmLVn's GR=%,g:TCL~`K(ރctobJmjZym;A6>W^\7)XJg|r?7Ҫc bGtj lDƤ+ 'IIkZ .(gߋɯJm?`.~D5M${V|7)9!_:.] Jd4vE i8Z/ueSSlƬxIYnG:\~"XäɷK<N˛2m#X̞ `z*BmQ[UPٗ~T綞 %!hv&V"D7hnSr_dq(>W}yGC+M2YP̀^%C9<8>w 9 }f!Xru;CYVP[ x֒ ?$k`LaRA0IґD# `gEFAKp9U>h$]K/֒WTvФ¬=3vkΫw8NAZ45\T[mQ.\u~ {0WEAK-R_mLx]pQw%,5:єtUDܮ XJҍ^;ppx3vå ASpm)B.@9o`LL}beWNSE:$:ק P5L@8qWL%?jFnBMFOz7bw=pifx!yݮϮu f9!(##Vg !/?jZX3Ny{>̻u 'I/=LkGBF Fbߴ4MYkSm3'$ 6D5N9=nl ]>Ni_3XY;jzsdghOVN4 .Eh)ؓ?%jEG'z?&HeDXC+U7D!{Y:yv0eQnEt,[3ȸn1:La˚jgS45Jzp ~PHPuz]ngH!EWꐵ] /t-8 L 5}Tj$jXtyUFZ _xĮ2{ڛY  6fMTh>#dd(_9j[iL3g9$sd J/^^vzN7|'BM9B?"y)S~QEhÜBrţxȘ"n7C CRh#һ= yf1_dM^'f$,ľ xhU}7b6 Ԅ0tR0CiJ9(źS+_=P'OSfYX:S O[ BӳCtE7p. >vѕIRn7t }ILrp:DS5\} -^OWܿN!k[t@=ls Sk.2v3J_U heDԡge"XI9? hA+Shٗyِx1r֊hև=(B̸ r;MДǵ2ہdCG哮K/x =e-%S1QUPy(襠 GA >FJ t$蹫nuiqѯBKpt_9*4lԿ߉.[ʕrˆL.~ުzGA)VvDg߇=ǖxJ0Coݙ23O>N?ς磧 w 1ږ6,y,m|yOhI(?F/uq!+`z>V8 ڠhH&%i#QbF,wXӵ f #ttK>x@.w?z6{qЈ:oaN0, ևbLjmxx$1  tr<)?xTUgqq>+Oo.]xEQřߏ6k9L8¶N?)^k )nx欛(͞^0)> )e2ᚆ-%ŗ+MQ?-B3N.3:{Ve ?39Y&y`+ <mNTT>\?Ŀv?͑^3A~w# }ѻPCeYL=Ugʄe=Oz-Rbu@*#lC>F'M*kӨp\Vt )#xYNNbv mg&i P%;&Fa*&i5`*)RRKۋƃiS m53>]5#GwUǹh#!(uo qѧ\$_gD'[;W. TOT)hS=i ЃzqUZ$S 9>#|S2,R,U+ Oʐ*{[ՕBNkLdUk&H)ēh?@:xľUu[Bov WNݟ|clQ *ϖ DdŰ+O(x2^{l_VUK$o7d?e/Ɇ3+q#e{l Ξukxeqns @(RJ6'^p(dA $n=[7| 2d5T0*0h]=ÌDJ=B6-!v6Cf>4%FwJ2X 3%3jD0S's ٯ>~1P]b[t=p\uU$~=qiߏgHS*4ȅuVC}K&HB 9.i$*s7I\ >LsќCɒ>38._[xAA.[A1I+dwj~Q <.bcu9_H^q^tLkc׻4+Df+X[8eLQ! |c_v1i޼ x(;XhqDd$JP {]>MCnRZ=oM{UI_ 3%*-cq(Tz:[|ʀ`8%zUn ",`4k/[ʪqa~USf^bik0[F$)x+"#n}P{{F+"}rhxĂdd,ɸDrG!ۛ7o,HbJ&{s\ hhWP*F~WhrNxZ郠QnAkC˭ſ /,Wo/a9q$i9>ֿE.{OһOΣ@U!~"q֑{5~2:"Ios6Rob"TlKS1#Ta'As wS'o@6a ,-n+ORJiYoc6!Hڞ9 ~IQ_3n_X> َhձ/mE0٘U4V췂o2x i%,W}Uc]Ȉ_00G31u_>}F) 'XI5;Z&Yʍ?#+f0PdUe7ma6ѴEN@~cS,t#[O?~WXZ v74CHӊep-ZܥUsJ_ji"f8P٪l~#"E酥 ,5\)]ן-“'=\)g9KevgX5RREԿQDWA0! ::? K^/s:$4&2;Rwe} .dtlyqA6mlވ#,EjT=69⹽笞nBe![ JD01acH!*y+}Yp]Pp1!(re㖾;VhЉ}6c ;,*hpexIp׈қLkN vi E:Qkwd}64ގDLǂ<#|(U!w{J~cu \Ṕi+l%i #J*Y7XN̚}Egn~&~Vi? pkK- H38JGPi65(4AdP8TAqi?}8m;jBU(Q1!db1b=Ґm{{l A'h1P[|ge|lĩ}M,Ym< WsC;N+Щw>6 mؿ̞/[`% W->9&N&$6(N>#js? wY6p Z& N4X@*Is(=hjSSc[a=!E# u 9b5|0cGi5 ϲe{UU{֧`Uc,.Nd_(/< ŸtJv05V"Z \ ˍ#HN9o3c o ʖt IܖT?BaDk+$_Lo  kߣ~Uԋ0r<ա[".?.:@ %},XT=;:UEV KsDS Dytk|\jJYs06q,kҬ6hlX Uҗ]N+@줣,7ݫn8yJxO)}3}PS!fxHƾ%X6gg=9C*T֖*7{q$@\T!b(du3e?C An2iCh;TP I)ݍscP WC-gEwHt˝TFӚ @s)+N#4;xC3z SDa3H ,6a./!IQPB@m`'UO 9_(j5nf9G5сOW lkͿ~тaL*y8A_S拵ƭ;x{ #=\eTFkHu6-)*Gc=޲,/)* Hv~3W :IUX=c%c v t;PnƎ)j`1䥟$(~܁9%+SJ sRE2AjJu!+՟5pRt?JdYFu}tȐ'E,Ki) au;]ˑP6 8w/3m\_qu2(OėЫj6`юyPض~z#h.?c X)Z3G+_LHjX]Pfk-nnRm /```^v6ij~f4<P]qr(GlCڐy m“qydl4'ZƵm ,'#Y|0:p;ϋbַ$P+-gܮQ[J4ېʽe^kZ!Mdwvdp\t:hpra_ӉrLv4 BI%=+ʩ=AzŎ^AMN"#IvcѷwGDd(&Ec_Q?8k7yч2SþV3R3z@v6âyI={b^L,u0uXzRjaD0u[ڃiΥ#G |QivnIBQvkrPU^ f_Ռ5NDZL5r)/(хmED])A^9Џ#E:ݼ7UWteo m^ʐڄ9rok<܋ 42"fsM*(G{ܵlv!?D EWkvnعt┲t%qE [?\YxDU.l }\(ˏ\ewipLF+3^w1/ϔ* 9|!4L9³ś9iI[tb70!BrAe bb#"aHq0#BkPsz?Y5yývtuɼ$Sk[S߉G ѩ\]AThZ^vWs?mQb%pՂ8mV+ ɊcV{>)JBPû >9 yK>u yU81E!N%F296%\CmyΜ.(5=o (mAetmG=]ϵe^<{?=`"ԉ]嫸# AqE5kfY ۾n(˖< pn5r x1 ZgN_MDxKn.;r7)7hD7?T$8Yٴ %r(b}OH71]lLw2;;k񂘻ЩI;oNU}L,]Ő-v3`fPx۶.w; t;_GVY{:S<r7AKG'Nя@ykjIŽW3!-l3Pwiq0͂ݗ^B(~`(bnJ%t4z;Y -5oD619Az ?>_n[ġn2fF[,[a0YD,0vĕ;2`u&]1=NUӓ~vKX!2}tM;eR/QJSو[sqzfIo=zwQ;N|2 'U 4%bsn `nJ eLwFR&vxph<R%/f6!{# =tO!K֤M*VR;HF@kDu r?DŽd^5t[$]Y# j&oS0 {i~Vmݠo˪ʛ>β=dn@ d$x$Nޡ'B}^ =Հ@2T; qGV:2nF>ig뜩eO ny3tC\~gKE~F~^?vYeylI]Nv*\*sn{({.ɇ T`!c,04Κ>SV_G"`sӣ`=(LOha>\Rbݚ[2"oc%s(қ!Mst!X+iyי_u-XBf_lD>Lk7_u1KAḟ-DM9s4@/0k.2M$|܋_*Uwz@LǣC2\hR酬7X "ø@(|)YO[ܯ#V}iɞNoŤMS[# tDŇO0 0Y[M2ŇnWlMT.kkym :jR]}Ѐ?Tu)ưFa($\%me@8$Kҹ5 p19/=,#)ҿVat;Œc?`gG$}?́^1[5z?6qv4OlrTݹ,ޤ>^mikYe87j8T) SoJ3^(Att@4r;@QBH1{xgeddnC[n JP":لDyH<]bO\1F#+Hx$cɴ1zW)4XޑUv Hh!̨cmv9嶏;Ξ!zKg-lf'W]@ʸ8zs Ͽ .2K1ё{q2h]l? εjCG\J?*"ɽD7N: &j"3,m 4`[skbk J"nRUEr ժ+R`1]3 市'2ALTuK87(+;ICf0?%:/NojP㝖-[]`=w޽OR9x=ZP82h]y6itSN{8a yE=7LqDSp;D_ZHL}dq1aĺo~( Ey)S.[hh kz ,J|hC{u<% V` =Лhv:TU_NlteW;GT2#k.qD1+?gx6l2EϞJ9\X>C\pl8 RHd[ iz~/5gC8Z:S P裔_ڸ9:9%aVEY9Jˆf5W 'X+=ϯ݃{O4K^N^#|8BI 6GYtrC6PM-|ڵۮ}G*U1}qU6bi~V]`mqcFMi½LC| 0w6浪'8]u +A/2(7V=-i@/KeќUT. u>wgU9x'"Dӏ"C6w*?͚ޤ`Uש[Sn>1yv8PBЌ ~gǔS+whB}DVKu3w ok1%s2̣ƉUxؒ[B;F%U4col&YŢLmGW0N(Q. GJG C'.F^,L#`|EJr/(>ʜ&>Z|:0yq)119>_ٟ7ÝŅ;hֆo~rӽV lg]wfeNq9_2-B;r^e{)v "~~[e>p^k;jiq`1zՆE p…$dcɱ+ f=ϙ _#:.|Aok#R43[Dٟ]~RZGӷ_D`h[Rs%S e!NdhgĢ~<7q?'F?6VhB%7!>Xe0tHIAqD%=5 1=o `M5Ryq2l.ޔN4[[՞~"yH ΓO.=9KVIB汖Gtѵ NIR^0 zw'.ƒ ): u22\['97.@|(#loCɢGZ(s{FdFg#̈F"Ti JM!Rz=38IҿxtmCT|{)X5UB`O\b1C mV[FKg5(h~z?hIq XUGNV'XџWV E'ATPRl \X?An+jJ"3$ӭ'XyD'GqhSd Թ.vd~dA/_ _NՄJzNPTJ6 ڊg ZCmU"G!uVN|ÍmbccO[I]mRk"йmPy{i+j]?M`yrȬ/<$06Sm*~l3*>KvZB[egd7C^_K@GMtmui?NOkpl -'k|VLOZ 1wz "eφE~χ(IE4]T=ҿ`ĻmIb7p PMJ:\G,],]? 7OL4zjj0DJ;:S)԰w^h(Z T5]@* Տ Ńf4хS{2GTk$&^֍nkE{9 ˈ`n?_TGG 5i$4Ѽ>#+*b@#- <| Kdm>uff;u)-". dC4˫6)AƟͿ'gw*'rI% z@-kF)[ ,?{5c\^_vXDO +_;hlzoÙEI'A Ż?&:>yp{ X'9u%(.'Bm1y7c;РᘌX|&&Zu0'Vy}%\ɲڮar^B) $`/nbdbNM#m^݉( YLGS8e_ 0[|jaNL{kFZ oHDQFBpH4g?t~PvGA-jHTh3{G6v"i9޷MznE+f:fvq|u#NЖrr;}q:ꫀ70H.RbȲU7$9O "=v_͂B`Q'y}c?߽8(ȑ݂ &acՠE~LkޟÝ>%6 KY*<Z'joi[gCAz{uʻl]_CuZbX:T `23ӎ&T{l"ITC8˶+_{t_fFE8;l>!<P]`N8}pI; FrV#WI# k&pϖI*] %IW:n᷼-.?\MNdXCujOwlBGe~ }7+,vUnAB,g vA KoW TM%R E9#5nRD" ZyǃSښ [b{(NהߋLoهٞC@VA0LֳAɆ}Wŷa㲉wUN ؼ/֘gT,,b=fB`$QuOMx}F"u[YB LQց$LeW!q+iy*%S#Uޢ&YuZ*1oj i s@gߑfpu:%C;W B\䜉Y/QDHMy;>c>2= 6H-\ax)q6/; ,5cr<#\uzy=t) C_($_ט>$W%\F. |k50)!R2} MI'z]>GS}T>ӉBJi⬶tQ^趻IB1@|ڄz5Z(ºgK[A%Y(>P[z*bO+ϤA_nA,rNVԵM 6,GWٶlZ >8ig,}Ts)҃q;m:rCo yW촾x?<ִca{|Aﺟe%0kLL-)7o1 @<իK5'9.{7yE!]Sx&LHfK~S?<*rōz%9yDRJ0D-,ccb(H3 szu氺BӬ2=FXzU1!w!z8BXO fJBV͒ c;5f~E&VXYT(oP9n l\GcHkB ݧ V/L#P̐Qv=Ұ>Fzu/ mvqn2 G ]ϛa({{ޤ8q}J߮?f{DDX~C (#wogVj'N~섽(^qCkFi.xֺ5B,N*x1cf1E$L!089u 20Ӧ*VD0VV5mQiyCVۉvU.&EZ݋ߘUF|Au2Dܣ8X/"fjb\V1$"&$ $ N]꿆J,9\ii!Tzvl}uY~^id֢ݜYAy4  Im'K䌏M,Hj@xDo҆>g;FNR4Ҿԑ/![wMӲ1:][OQg%i )C}/ iL}(2-M3]5ڽ$_䤫C\ 7`0$yۦˈ3*F:# ǰޱ-%?\oD% |xOWhP1p7|(uypkeb{kvhOwn͎ {0 amɬ@fI yI9SQ9zX|v{CBFj`%M26A|:A".1~e<,:X/% a յW0S 2_\-mONwGڰ}QM9x9_&˼h ;<$XnHW1*ʓR^1 ` έ0pqэYΕA$ @?t%2̑B9"|Z-STwK&TZ)EMd;~LvW%"@\_?[õFm#jnwtJx("*g ؼݷS\:dq;!E+ؚ|~2tIct@#7>-;QОhӛk߿Ix PޔN~H_"UCbwբ&n>_ZWZfTFLJ&ޕOq2:q"H$2@$3 N[+f9m@T[%C @aQD5,SL,y,>}al; Ei Bq{s1ߐ vH廉:\4R'bxuaRT. yUhAϠ_PDSU@[{?>}ah@HtϛЦ [7,-I\F-ĩ2fQKlG#fiF3(XaL][=12 )[Kt[ ;Sc 94٤&"$otdYHX+>WˑW]*R"B 4rwٝk=LlA%k.,zt,FyW21:7C=.! hˌ&e, -cc' 럈ZԱ䳋#^wLg1ž/.^ex?& G 4k\)s9tyit}19VE}A;X 1 *E>ީQB2W0xJ71t}e:1HJtUٔYGm~%믉 _Q UU(l{;[{8^qRPSX#}$QJ7!ЇycN$so}3 b$ryxd DSs>XGĬL|Qc{ bj#[>Z/ޅ*6aB;FcٱD 3 5><ҝEIݟ(Ϧ=GSf$ag{n@Q:*<#i94ڻ27 B,q#00f8WZpxal<(PH?#*X D>;P$s\udV$WMZ6mH8娇LHBAI/= ɷz{O_%e(5GVnTz /)؉ʸ!D:KObt?ACs#?H:S EnesSc:GCKH17~7H2$^7;7|{<<-{($A$ PoEP(v: EQM:j%5_j>Tث/,C\z ᛸ[.Խ'/T buGjQ*%l, 浙?{[kFHӖaC)ۄ;llom1 =X)F`;z2$86pI,T|k.0?-2mk$ջ/O"} (<84,Ncs!C+U@f^? ,"~|#7c'Z;jf9gNe]SSޤ;^Ny*sRmT8!&8(3\KˑtA~;yĤ4.*`t,tzdZ;B'W2f~)x;Wδ j ; i0Ƿn{JfHFX戃yht>Cgc*4X*߬+FзY"6) 2.Q8]@gK ݈UިRET#k:& #v(ĹhGp"miwϙCMDj QR7~l҉@e#Ϭ WL'2@T<э6KX0a6!qsc91Z(Cs,{`%L9S>xh{.J蓣FN7kPg=jX_>y}OL 8Azʋ^3ir$~U8ͅoD8 ,]V˝霆d/;  ']/jݺ,Yrxqi;~W q\N;_P훹ckhzýN9Pv EEvZ8+cZ.Y0s5[~Rk7LUtß go^AhM| m y<ا77H+-;c-+m, BJElYk5q;~[ ւQ7/d -Ne=[ oUrNL9x!z7uJ 8|!_4MF8|yJ8)UHok_ !9.g?8V8U&BƁO!D!n_э%c- e(;l5?>w7 g 8yv0LfD ~#XTWoq?oEvJ/PK}Ufb } 8\9gD| וnۻ7wl˷]'I#gL^hv(AZBݵ4uEhp[a)@WIxLY L 4 );^ %O؉65U U'K[A"Wnciqq_6nbera5 svErjEr:.gOĽH.RcJg0V'+q(O ^wh3=I _ Oca~dm@"M }ذw}ʳ}ۅh^ Q]v mG` #, $k뗂u%%9fU$K9cLMo"^{fnY_vgQ2SUރ3][E](uܓR5Ox`} bY/[Z/MOzEp\.<%PtW{\ gcyvq tTygJq?,:pFXbij$=brWTVJ!e|_|\,Umv{[E1D|U7T b.;bC'qkB9hV=QrsCV#:Ï;ǏR59( (+l #|%Usp\N]NѯMgٯ),նm$wC0JnnjV:$ѿњՁy?k"Zgb`e3\$۾:hv#8iNoC Lo ˤQ]}<+Ѝ  Fc}VYІ<huvDϧ@lȐ4K ;3F;8>g5qU0˳~9)V$Avo/{N3IRˤZSj BM32QdɳQS打Ĩ/Tŧ~@ܲs#xwZar ]RbiELm8ZgĀq>9 cf><,AM8 AhHț*792zzzJqZȃ &+c')`K(0Ώo͵7IIS$9fab!0D}(^ bMf!/  }(@WnBx.$73D:a|p@iBks"E7 *Ck8va:فf0A#~%>G(&O/)F=v/ώD  :f7fN0Z-P!{@#\^ Itʫ8K+±b'[cS,!=`a(01iSIf%,כ\5Ȩ&<,۸BEuWnx!zwN,Hԕ7z6wzwEqÍDui5s %[XYV&Nq~?B̃EVR/Ly])YB$6k~9ɞ 1](@}x̜ }ӧ?\PnwKo </Xt?ջ|p>]}e[ 0cQ&S2nY bJCq}嗃B0pK\Eqω*n:RMT ]Vu~_8pȆ­J2~04(A~Zsm`'nW%;Ph\`SqQkJE,*+fj] )2&iR"i[ t6\91B|9'B@ȼn2hB %U ?p69q{nbCJ4iZ9N5D0wQunmlߞE4f?$.@U_>dX[asRrJYBP vV"S2v{͢P u[^Dٞ7:{# 57u[z:?8:C*y9+hl&ÿrSÁ5C՞>ׅMI7Q!3_a e˂P*U+![O}C* hsN;\=%f EKh$[Aؕ@gm%SGp7 @o#pGJDrWpLf?V,PBk#KBJD&WPJ\lz^wfψSV99w|-3v8|QkxOmz$RF5dbrC 8~M_NiKc*yaV\Z@IxVcaدh@ȝGY}h?yy83>>~kȞJ6JWosj2vpIZf Gԣ_7ݍe:}d\ts.Aik )*^'*h@ _{_{zky^+szZpM4]υCl7CLx+pYK. BיWPE0/qkϡ쑳@UjɹU ?@ ZIǷsy|KQ$uóG~)~ri)`q2]Q[@[IH3ε7!䉘cUظO,ng [qYR90x'J3gޘ:.?΃V'VwYM\p08e'=ͩ(N@gꯉ_c)c;yx]2B 45 #b7P'ԶBYĽ з` 0ek7ǂe b6O/\YKU(s~p!)+s\Cuإ] slr:Ҩ؊{4 klC3`_@83ȇ:tpd^;8l8yVy-O|Z>k ňm)`5x ׄI@gzLeT4Bwk!|-*L٥Qo81Vś9VV* ΓA[1C̝!JJۈ|T6Z3'RHuDא~NN{_wEY6NWϢ sHI{95sBy%n"`0'<Fנg"W]xOاދsZ:Zi"ߜ'GM}H2 h13~Q^"jX袌pVi+p>-+V^ ^m{ftݙ=K&:\H֡Y)I@#M|NQ]6tZjhEґ#<GD&XqAe|t$3bXW|KϜؽyDd# F~8͝evQ CZ1E)Arps'^}~)08GlbO' J;ز!c^TO.h 6(B!t !n6N je \^Y2 |B '~Tβ8B3BMbe&)Dr5Qq5P=O~ٹL] NjL ) I!理490=Pk͎Y{f_VEoG#6xz<_*R$;A)Ur/PêǪ!㷴.{+X4e  -hsh)qh!E (/17oHuTEp*Qnb^CKer?)s:,ʍl09+ P]CkO5^W ,1;%jT%fU(rtdqKBq lชWgFq˿s|3YTR$ѱ0 z"0 8[~EW` PLGѺ$M0]Wqc;stV#bCwi':u_8U+`8x$~\mr9@B_h[ʛcO?XZ %g4SYEM 6 z(mB-p( &J!rT<웲»)d#LYI޺ +ރ~ũT?,훉4jVLFknmPMףDw1_Uݩ7rIHK=/mNl~'ӫe)3#xbeKَ !Fx&݋(jY q#KEϴ tӞDc+i >&#P=i~8`UzAk=%~k a~v򏗽GfO,!p M5mWv'VhŅ @&zHjھk?SF/ E Żx.[GPQAnCE!*8NQS` hf)ajX(ÊV\)1vƗd $k9u foޗD(~qR{71L Ag*$x,az w"7[nctfÍI8;L)I <>֓iicHjA;Z 打'ӳ$wqT1#kU2֙3X>P |+w-ڱ!.r2YWl"rU|@|?[y* (0O? "u E`3꜀Z6~^:U16Q%M패hs/f5-9S]~ܤ]Ƕ~|ęݾTG֗Ehу^Я7i'͵Z<7k++HI.)~D綊[R\b–%U eƵcR.k|GuKTAEEvoLwpk\U4<|_ '=,-ۙwe=>< QN])#0T@_9tE2(?K**J= H@dQ2#g%|ywf1)>YA!"իF˿bFn ͛g` "c즯KQJ` d Q."PB%2e]gX~QUQ1U;lT=Dž}Ox|9ێǧIЌWwR]$qu:{Fb a fCE/Չ" 䩶⻏(T 3ow/㯚ٿ'I&.+"o 49J3TahA hKL/7yOd[5i3ع&0r-SFG-H)ڐzY=[ =M[DkKO5tY'mSD=^qgOtW "gV ǕgXZhn_xQ,,6Ap oWCt7Dr 0qzhsA)f-'J{ȉษPnZT$ಖ5Rc;4Q:YP| /?'D(燎O: 16!kuI롥r^[v5jղD3b|P9`WY<xQ$Ņ1R3|_ЇiJi܀͑ alTrPPu&u.`ٖGK?hk* 0& ^?Z#/$0W:uWpr}0-;h6[r-PEԢ{4=!mmhk#؛C%DPض&0o7pW #ƿZVUA"hT. Dƅ7ӬWm^8B]EM^1|{Mݻ['!4mLfP?yGѝπ|PqbPYB:zqˁT3HҧRy >&m:vYUu9jRc!Lkz/l!3J~vSM.O_Dp_BP b(Ky W $CoeqPIѦ MsV1:``Gfo^" ;0s)yuo1l՟c$m/I$0^bw8s[PB|QՀV?dSA͙]0"&(\wE!D r{);u/ ՁFc8"dWl-iZ "H- d#*KS٪u nVU1o$mɸ=%7ؖ=w,0Q刱4Ηg ì:{RIY06&nÈ}`,7 UڡQ "E4eϸO40!Bt *F} GvYP{S]1X?"ZZ\s-ԝaM6߿9s 2)Ĝ@5ܕEx[ kokRgr/Xz*u*x(֏QS@ 7n$_+aW%2sJ6t^0 > aj)&5APa|s7*Ha?)47u\cO;&C{3/v 0盺:ܮšy`6኿ ,*P{(15@d`﷟ҀSN]~MI& ʠx4Zt\L]|cvh\|[7jm%|O}H2S%/b•ETƢcp#DuPf;/oZkde$f69{CKJul=TWI*m*N)3A%4HNRTtWaUal?$^ X鹊tm#Yu3׺Kbt!%̧Z iuPJ]urH^NL0t5]5ugﺢ>m '&0ef[ʒEM#FB'9"\9QZ{3_oB&H/ZAn/cJa~scd0ffhhl9LcOk7ʫ894%Ϸ۴h]\r+BizEln6F *Bu NP3&7R~6Eso(wbQr1zd6ʼI$"0>g,:Ƀ>G}@N5o1s<&sârˬ31*b`I<%꛲"34&AbbEY'ZYST r \W59 Uӗ9WS'Je<*ޖKٴ+/&&4,P4Q5({~Q22>"]8}E\읡')<[cҥ,"EN*ys/Gx 6*C+ \QKZ3*&#+9d ?L h(GEO'_fֶE)%֌R-q{1&*HR sINc=dJC DnskE{5 k* 1ACn+0; O'mFl-DO %Չ+z͡6n{$b7Dpd˪E\m]X54>=x`~5v:'=UfO)kS:+!U=]~JYnVތO&D5{K?%v'@{wtue흅]N$'4 hTD+ӪҪ !k}4So]~"WkO6/st|lZh䮤}Kbg $Z1Ts7>y٭rzgڐWin !i^!sF>M6-/% gIXrrk׬8[Q^D*ȅ9\'l mۜ(*I[LxO~)xh::rSBٔ^4:WTZ8SBXb_ zف3Ս&|6XfDa)CS&Xؘ@)s>#9;qukx9/8h X״ŵC8B0ި&"R{GE:LCջ'[dR}2)\&P*:BsGLqDŽNJ1ߜA"y3yD !j:i7VHjHaSBuy׷O/m߆_ыv?^>Sp'P|\zCQako؉m:t{b<-Yj+N%$UI)vg{m'n`3VL$ҦHPFf-xL5_s,aezy/cЁRd23[uUXOh.aJ."088#؛ ^ҁZlӂ+r,D(mɮ:]GW1d0j JOukoc;Zxz|Ӗy.$!jg_lj:~3XWWFB'p}v5s$4m8J0!oj0=F+i圳v:3pw%lu{sRb#`e rS͸UCZvאP[4Ofɗ{%y.@A dQ_y"&Rs|1Bp7 v(?TF N >%>9"(DBXŞ#XǦJ S&Z$J95RHR$up5!R@ײÀAWT kXr`E8+M j8 8M! N_ 606;u-ժ Ԥclspg=eBb%Ȩ%cΜi7Ta,nGߡ1lk[eEЩVkXD5&ɣ]ba,~Q%'Dэk]Jx2avˤ<۪0 Ԧ[F_ۑ'j&Zz] Ot\Sq"@A Vzirq]nP@Ss Dݭ4XjCl E_Iav eqBK++t"Zeag؋XHʎ"tXNVxMp6}Σph*RӍ()99 z,XV}=0Р(ֺPC!4b_D(V]SAVE ݉VgJ<ƚVFBR7*I}'ND lp=ԓ_#Z) <іbL$ciqax)L !9BZՃkBfx cX}Ú$j .?0M:*#( ~'>#_c ?1y&Yy$.`%ٲ̊=Ф^4(?=0M/L2lcT_o9jAT|dOWi xp|#ZԦlu D.[^b8ᨐ{oǨɫn5*B!C -"lm?H* PR og4 n6b,8- s891:rocqB"2u~ A^1'6,@_0ZN&s{|7?Ldj ܹW|3 |MϠ$5ğ#s>WDi͐6RZs9 +:j53|$bKAVSϣ>]P %ܹL m_p+p|Kƹt>N6u'\ y (\2 [^9QdzWVkR`0g%kwiKsS!k&>K*|_|gO0`|.ZyI,_'.7PΞ̶w+|cLv?hN;3%{SW~QݗZk4P~2y![⌕ByS3&3DFֆTGVǝH@zIx1&IJ'1A@IX~0z\BS7wm;tE6;e{i9be:R]t@;,M WDEbՆ VDF|{BijzY8<ӜK"ĠW ld^Ocm>)an1񮪋hf289q\?z{Q'_K[.u䀺蝎+LrUUqlڂGOWucD*3X]IWQ+D^eBpWڹq/de}$ cy\F[fUMbYEd Y'9Gp$˘vެOxi|AtYE.FviGMJˮEC[J1u'6S/u'a7.6HFm48UDVT"d;ˁ2&94 L@+ P`^rNieWVZ3R;]X͚s0H@ B58W`tZ}b5g*<L~8j _ |pIpP2:i{ Uc*N'" fN>puf끙9>˝?~ HzI#M1<7T{x3j9j5 "@(:zf&W_5w,+OPl)tM͡f1ZR^FȕvLAI#iܚXVJzj@ ;!Cw}u6 W6-qmoo戟'b;dG"= $ =Mfr+O EVh*X& %B/7}|Urчf-.$NΏbn$A! ,-oz(geĿdneTI ÷zTǁSLE/QMཱP6vLegW$ 16- Z7)laZg |#G 'TzVg3)PXUnbNtTC<(S CKk Mr'ỉ{77la#G#@em%>9Ԧy-__:p =Bڄrx`Mh |]ĹXeAsvBg|έy>ģ5mI#fM +VXE@>{&東(Ǟ7|E4>̧IV]ė AFZp& F~/6T2'+\cP)0gQ\a1אaqpw/λG -aIƃ0i$W8cx<(fӹ%W̃ v6Y:+MzScr4gˣsZ5D ,[WŚr>HtSP\ VеuDUghh'3DO4}"")1+wY@/uKE]In.qVVE>"xL Al nZ㨑PJ(@i=e(cդY"Wl|˖:xA͌\hβ 0ͼz}H+? Ǎf! PiD =mM3vBJ/?#7e\7>сQj oP\lR;!.3p<2lwt)"ˈp)y&FȪ,7 7(&m4˜WDQbסe:Ͳ .$;."e߬"5w;Iei( tD0D9[c`tHifzhq8u1d'riEڈYS.U1/wS"TG-M%.k3;9SԾ{<AM ͪY ppwSL+S f|v g*eiq_Xuk&BZ,O+S2yh"DCb}ɵs.![(S}10%WQUoZ)^߅7s j?ztw( cf`MaEڭ o#UGoMzM7ps#(Oݬ*iz玴\* =0h@,gZŲX y%Kf)(藄m8@FO349E|~A4 X񬬿qjc#.PKpO20w;9j" AL"V63JD8Kkf(EbnLCr$|HQO{xJugB?Kv)ΚZjc}t;U ` (kKZV,F@/SEQTخ-K=4V"s"FCM X]zǭ)m2mIU[un𓣒qz{RL}R(9+YN1kk=#e?G>X}1鎋!;$r?y^Z6m&SɃw'edUTOxZ(I{ 1anq 0nfƚe:j8#$(TTv"j[U%'1+ Q*>fP~z*M1FGʃ; rUQ 1bZ>S>kqFB竵vުW@iy5I[JEH$TC4eVY%tUV#UBiBW فmEeT+pԓt'su_Qf* -|7r.=}XW,+UkBEA,k*!5lތ&,7'IlpQ-)%$]}њ'|r#.P [{gOJLŋ!)Ж""J֥%0kƵC^WS#Cf!@Պ-7ٍї'!Y6r{Pe|UV)تCo&ʴD%H7xS-8XnkW18Uz v*TE[CLb4楇`̝wWxw#PW(̒,S4DZoF;* E'[^h蔶ޢ[VPkH8'dUiTE=AC[p:$,%$!݈aJ5{ ͪMP}rԊ;ǂmsX jiA 9,F"fqny\,U% c=f*m-=3 D$.<+kS4hFKst) mÕ+A5ê+k5qnK>IdSRTz8H2WtpV N,'ϟVfZ–6C쬴ʑ>I,>Oe:wnmP7qv xYUG<qCȧ^kl 8Τ;BN82f/2I3nhv#m8glJkZЂZ$BWM&"d8`Ǟ 3l띒v *?cŹg_[WTfUbL<}G`)+3~h`o#Jfp.rNtlz|YؙдŚmv2H|P+?M~3â5[LJ6k;e!E1E⏋pe_㦪$P `t"S6h?(gڎK)t9 BFqh*/#nڌ11;iHR6Fc7(q> \iY& Dz%,ҩKQbH?w~lU7+&>jUs&oKDkk ް+FRl>kz5"Zy.a LQHlr9{$׆`lA]טapwzp8qƭ(6oJJB IgmI[r2{a5yḅ |ˉ!tohsj(H[7y'ƂseL̫g#<jP>2/y_Kxj虈?bb2W|Td= ^l}K=Y6aqx$_G|QZ35`A?v^ɍFm$[0ZŌT-MKW1Gj}U0do-p>h{^{ٙf 'cW楥Z7b[8yr ;%tVK0~tKAR`׉*9$ aRP0Y8 cn%zTpCNqTC8nߟ}&8up&9| ¸Sa-*-:{:0o7d,J<"{:0<$fqki`qưK&xuNH'tR7dc~P0ozAc JR)o?1 ^H ̞.&w*]P$L艎_t)O]* oF(zw8d`U I.-`wsӛ?$.jѧ1A0AدzZT^G6Pɾ9¯AN njJ5lAÔ75dѿc >?i=Ķ p&zt7NkUH z `%*;,B6?JW60;m:)\EtȸEfPވ%y,e*μ/ 7iߤmfj%33̷u3-@ضWP6 >Hiךl"?}g#}=KUog0LqmoPTZr~9P"Jo1ÿRH+*T.i^;`gUWˠ0+)3~9_&72Q|K= x3S-DVtm&WU"#VR7 plf7jԅ?1x4T?xpɃ)wN*cF?aYokvzqq$T& @6C>Q~W}&#j&7IUA[{?N`. D.w=$Go(uVt> QTTYWۅ9q2%v78mӪ8fW>22"_,j`HTQHO9u6B**^e>}w}4gBwpHF۲e? |l*T 3oE:Nf 1Ϗ] &6C#_1 L wdE$6R;4ʯ3߹yB]8=6&8)_D웒ʱRw|&2ʿ%)$ωl <8w>iyC_o{y8ş>+xhwGl NorsKWi][C!r"#y=aϵNG!< E|Η8˱Y&6~;B@Km{T3i$t}PktP3/dwja`s=#Ա(YG/}QvFbu-.BK/zՆe|4{7X*r d^>]bW 3.)ʮ `r<)Lܺgps ﮔ)N|OՁņNM3sC(]/H 2_euj7.9M)eWN k|=lbXc@\GH]3cfE!#&5bf~.}TdҾ>=8f%kFWUA=EpHGƩQ\ƛ`I|?LKXeG/C^r?O]JEɄVp!yU+ţŌTqd:o ,I¨/HNRfᘸtʄ΃eEY֍ވR}e !GF\O5P!rKݤ(#qM(e RRgѦ2 qz ӕ=}O1PH|QOؚ֕Hݶ b?5}DdA !9z JҴhd@4ԯwmy1fš0`ki)N2Rt z!LETkplK ̫b(9B4XU-%ZZ9WiG٘R"QeeJC"ےu+s3B\0;a8ŝ4FN.C\l!ZwdQV3K?P=`RQ;AHưRv!L-OEmiKXeTw? ؖ.B@!^`Qc4+xR:x *v|}+#mByJ]2#B@' Ym䜹7oìj7M1S7WgX'n]CSk̕4UuHF ^_FI|x1/bjٻۨ[-7*%;J"t{&g:jFkf㨂%rSe@%h@U;F 2 /^^4aԩ {>h̋4wlrn#HGÿsc&Mϡ#Ƚf"w"6ԛ%eӚ9_4Ke焩Z _rg[vǮ??6t%bvt7AXBBvǦmth X46ϐrJ%{Gߒ@aZg:yɫnz- ~VDJ\s~YGɮQ979^QҘ[F}xIgEs`}sq% É1,`a=LdϠrnٚx'߰<+({ONvg91HɆ/uDp!MJr2TlVύ-77VF c PDHk\켑\(+Ww.I WC5܋j_gEő6D3"RՅܮnAxc=$ &Bʓ^{UGQh,mҴN#Lv4!t-]5=3 ڰ|A'm^m#HLDJxV_.SK7w( S_Վ=Hos_'x2EbCUdhWxꭷ{1fNwO kyNlDZ/qu`f.ږY_tXeMz'%PO)`8TKb^HXf˷gB1`'ߨ[ oItﱈWo;Ps[~mj)%佋Ā7^lANK\VSo9f+%BA~h|_dvFzYq1ϗ(Wk#]aH>^^AeuɭuSc(c;w$r\KxP]V_'-=,^fJEõ"E*{SH\!(hAހ"R~Xn}O+[B*1s,n/aGf$U|q7U+$ EXRAN~;לi@ 2E;NU*3{~_rJ_&셠 GmZL'Y`vak&3Dt*5̙S_mɐ.:iJ:S0"k ˌrVPsUƮ5G۸&$δ/+|)[FCRZ~3 /~nFbNcE|- X!|QD_p]Q9JgiB!$bulI+/Ne G\fs1"! 202,j=4" 8L U9n0tOP`^#q5oPIW@%oHbBVDžEGVs7U涘=DL*16}sU Hg:?nauT8]e;; "fR%&[f ϭdXB3Q!1_m1'yn5ْ\.3νi1 f*Dؓ2D\]:ipNɢG~ynb ,_LC3LkMZَ#-۽εnͭ@.r&5r-]oߕt̏E`B&pkNܺ ؗfKl8F]CH~]~׹Zvp1%'Ii?v舏%XUӏ?A!>,@|hVilG!ෑLOA'pd^\|bManVg?onR=!IpV]<xR،HRd%S[G'_DYړH l\+=/yaNmfN@ΏAޒ5LNu7+Z d]OcL{eD@;1:y,FKipP{z gdrKJ!dG~*cѥ&:E:'hs ԡwX#5N#^0yO1KÊ)L)I/\R⦟QɋW~gy|M>!w2LY5^=զ)1,H<ݜߛ`Ÿ'(#ow\8@bQmO7z^(;|LĔI+"n Nbt}@yVv3 ]]COg\;lH]Z'e  [LLΣ0w z~umdLB+ 9Qe) $4vTHV 4f4vܲFR=&pj͖|2p \dqf?beK&RJD{e~Q 3F= ΑjԱEFK"ּ_=A1Mt`}Sw ^Bmf* qh N  +EIs.?5Bb peo!* lL4f#`&g T:1sVoo`ri$|9. 6nOh'|F N %PGfuS\Yӹ%u˝eT_(>YO/+Gָ2okK6nvk;10ُ>y"D?5%mHLTێ$RzyxĪ73T0m[U Ck;ZۇDK[a$z6H|T%q%=EYCCgр-Qc  ɪppfD[ V\6J§aįR Z5p~NVl SfvAtR['I FK!EWtFcc#WqDԌ #{roڔ7 #4bx+p7\R) 'i:)k=IA = "Kߢy"(;hh~Χ=U!PyOO w6N#_u7;Mx2Z r#D_*?壾SlsrV{tI"Fz\ZH>]?"|(^dq+Pop.)r-y/fV`in| Qwյmp1"l5F"h(tTb"hgTnF1epw<kQ 7KeM}('ΙOR^+Ru=sHRnt nG|OJiN gxc)Fڎ=+2t`Ex'x'(эNs0p+Bv=Dͼn`R-OۍyKMJa0oӧs 6[w|Ws7ƥ^&Sֵ+|lhs,7myeڹ`0Y|YKHL0+,}~z~Ba(m [:kDxu2_F])"r%1 8 S"@)X3qBGgd`,,dpŖx$H<Xu; WKNm<;׏ĥ@.9 q]łC(hrDyqbj~s*o8,K_)0Nc$bhGEU7+\~5xFHnlLpپ4I+-+9V`a|*F4Bh0jR)*xL7^;2r BMa|k4J"~^N,ʱA ^V,ҧ"h ~%eŊnǰݬ,S/[;az'a;߄vS?("Wo oaTcAx'S3'LYg?">9G9 "j$Gv-7"N1h%<'C/#D^17hTǨW=&nدcqCkĝ8[vVٔ_s! ky""kwF>&7gǸ*, Fo\5JR5l Nj#[ sSzrDe%uOJ-iG9 |i_fC4}2! ͮ}Da|rWqB=zYF8]oVP@tN܀fݖ4 46fn>`t>yyQ),wf=&29s#cu0 F-02EOaEC^}áԲ9ý&/}NnyBY R6GdRЏxxp*TQ*p&\?1=p)W#6ۻr@לb֋GiًCilRi:nQ>,S[荽\UZy=3qٓx>6%Pf~UW6j` V_C;ɉeØ0Qgp镶eH7^N̝hz*&3X\sQZݼzoTi~GtIJ׻]7}D$4gdW :43ȣfhTJ h%pݯbb\!B xtb5YCih7)qYen{+&ۙ`jL \o.6ɨ؝>H}|VGw]9RōgFP ێ/NB+NXĦ*uxQ;a#Pdr'Gi4܈P;K< pSEBJG9/]WKzT=,|>wkM*'&j6a5W5HY+cN"o  kk}0]+}bP%nt#Ws\z R`IY!hp&Cɚ/͟4Ct;gj;Dfu20ABaQp} cINhPcQ"C;626TM%x 2:<:[zW3P=# d:w jъԃDϩ ^UtBU4$O" Ӌg/Jm)P! c#xE웘 `RZf7h;qALQ+ji) 0WϳryE ;7n#dM!7+CV6E%;}Xٮ`FYu۶lpFI /(UMnW(7Q1bBAikhD*cnwIqx1TiegVcEQzm d@JzSsƔbctɑZeꂒ|ZRDû3U v6wUzՈ `rǴz.i4g5gAK=8[Iĵ-BqRm o}ص˗::'tЫ}L{&4Yy)P]; Zs@%S5+5T}SFeDC[edbRV*0ax0HgcSܑ*](?qϓo#N:U^BIdF;3H-hSod^g.{}p{6T$tѾئM?2keEBoI6:C񒏕.~iV^4`44{|-v|̺V[ɉa !xp٥ `P"h-zI[~ОRXU՜rю=qk_Eb-OZg(A4 \cR:x ]Ci _Hy7T5.,q )cˏ:b9p~He\nH)nccN9z䙐jc0TT ~~xS[ۀ_a<9x5$|MGP&}^vyB,=a݂8_Vl)ɓu|Gҝ`/*[j$֋(`1 DQ~fE7Pxb埤Lcj*Q1GiUFQ@>GjB ?k '*˻ A[ޚ&?[S}xҟЏ1fw;0(eyTEb'SLbqqG)FZ "瑜lBzZV:13-9{K. )u % 7ߟ2t(-JےQ-Ռff0ѧPU@xG?S0G>f2ZMee@&#@[IMVEiOW+4`O/FFy#2݅ ;Lנj@j\׵2xqwIԫAe֤C)(G&nKmG 豕ih`QibdzV\5Z*Y;,AA"qrWz 'SeVy ND*⧱FͺlM* 1 ,<<>ӉS5U}S2 ȱZͧr -H5Yͻv(Fۦ=6SmҞ nCC(yẰE x ͕$Hmei:*Gs8^9G]5N'ΎH,vST5ZA"'^[2i'nW,FƼ\= *V0B j/ ܸ~~s1K8NĽV2b RjX^oU li'eƩ!g<|d@iLXߦX #Ċէ 0mص- v;X p!{y~L{˦MT ?!?\;`-/ghb`{:&ԉXϰH$$<^{tm;DGjԯ!ab'X-Q]kIU8ߑ|씨sN>6FE!im'įO~ha&ڗ1T u*l`odvjs3) CLJI\BC`jKfI`%!,1-jV;w6"[Ě"Fr C*ON~CAfo99a1ۭЩU\6ě"Z^.ѹ_S߄=74mz5p~87ڳ$`8U"lGomQ~Ǟ̑q)DkLk릣_9J/wzRڢA "@ @z)i1.hxO C e@t^H,3r%G"^-]7t AS'p0s" B,p'7 FGʖV-1UѽSF\:mK8$׀Zg0O;a;tp^p$ޝEHܝW5tx@#ۋrNk->Fg ,$`TewH|&' w i].C٫.SRque{F%svD2n BBlJܠqѹ@>97g.fXR ҧFؤ@Lxtʆ1d#P) ELw=tS?&fm5rM5t sG4 c&f ɪT<8Y.@!\w9a;H[ۦQ_ϣ łu>?/tv?LH](%=#_hDPifS)bK&/'B%.1ʴ.Τ VbLtEwpjLK&4кy{1vE?g׉OʱHcLHQ) @Pah;(G^Y >hׯБB7~dKr%$(=h8?߼ OGK`bWT;,6AESźq7j"T.kO3rDuSZ8AblG{ᆰ2;%WbNZ\wБ*"@3y~;P]{M}ʹڌu=\γ1O!S5Sy>̗*z_|YDciZO}N누 / Z<hOV2 ڸH29}8[,ܖ,P=RD8!_ ALT PKe-b~=)f`zB8Bƒ11E&7 B9gO왛\VX/-dߣCԒ!)j]#9 <&gO@4P>R$2`?mFX V թ*Bvx{4\'5=B*!"PVgI[OK[̟:e!UV[O]ֆG>zU]3nMPAx'P2@H{6QнG%dgj*.ԲofE ^T GWM8 ]ya^.U¾%Wd/Ga){)x'oM@,ilBUX!Aֆ?J}E,N'٩<2'/]]#%h HƣEJ_Z϶FǣcW̠ZУ.S(Q扴I[+ 9hM^!ˮL?]OXF)՟ќ5XU):$ђP8wR5TZA%rEm_uH'D139pu,ga-#Fb Je#2lZD9x.Jbυ>aށoYz"A*\#uTXw|AiWXW'H0YGϙؒ QL|];(? VCsg舿@zJ0UOqLCJn.Ѝ(t@hxRS-òaL2 ~|ݲ|}K^j HPHö! &}qd!완vF>%ؤM5; !zKVlMS>#wXb恓Ѵ=jg[ d RFϊߖ`0w4 ׳&UYBWPW&=w X²xDEXeeud{:fpO⛀/"ttɆU[ɴ9J5C7$8Rkcu}Ev`#e2YlKHtݙӿFsע_.<@z=A w}:iڵCGI4TlSJ8\0ALmBY"^vڸG.*23@Bny^w Է^4]g e "H_Tp^d.\~3^G-WU>0 剠<}$@9a!\$l*\ "ʽH7 P1Z6$vX_:\$HS5ÕEa:-lZ&&5T:gs; R0 DoJ}?ZU?l0Zb~9!jW>ӵf#OSU=%R ((7yH]2]n15a\EV<Ǹ=}lqKTaC1/GR@l78%Ug@yA]JT- Ie+A) &[8c4s~_NnDJЇ F Pb-? IA$}#[S⶘k,^F!.>oOD%{!&tz!#F%͈B`f},2XH"we{9\ܾH$-{5eFmӍ̼g'7p#e !1|J$7|U? \K5- ,)0#eU"! ʻl@S6R 88ӺE^V!ك%7dw`k hC[19(5W+AGCykڅ[VCϟ]ϘSK@>1;#Q{Ș%_] D<hʳ̨Ʀj}"hcwGF<rl,+CEŹΈ3SKn:=k x9KmIR,OtpXŨB2,\:8| @*YP@_>Z/ܔnӖͬ_&5SWv3x6r':O9 ΢N:~>|K23H*Nlm|t--Y8ahgv{"*qHYP|q<4H2GL}(z}3}eDD:"b[c@M*h\ .|׼_鈶$t1uBu`;DkKjV2[L5Ņ_ˤ}sG#b=PlV{] ޽Md\a{r3tor|v8CRK!)6qa!|z. VOP<48?'R˫Fb` b6y[pᰔje$x?ȘLq4j9BܐI`cy`"OGr{WZ2xUѱzG㚥tva&V|;=]O:3呁zu)CtHk7v3QYega5D5L*Sj2W5,]f!?ʶ:m/TM#f*g9tab|վ! g0<[j`Uƞ]X+'m7 Qݦ%OX>bId o-~ΑĆ7ߔA@pfvNHV4Aܴn@Y*G',rks|͍D[#wJc%({V)?1ybE9 #l CxLjǣ|19bԫ%] E Rp 'wM *@srkAکGb[ SG |SádR>Cs1|?;uV}JqT=27oԉ+Ơ~Mg3n>HrJr:?H;ǵμ0f:u](DRV\M?l:+vsDJtYur;b`u! Ű)9.ke~GºfhWpCrZ{WA?`pֻ_*-KN{_K1k Bar`b[`I U<&ڒܗ+aMH,:moQNհ[%W_7ÕesE͈jꘕڣݜMIwmݲ͑gWo ](pUKJCnŒ5N¦Pt/fLKgU_2[Re%+}(3. }aŊqݫr%hd(XΛKڲ1ЈO{>rL1Mtn)EMLo>=EZD~|KV2h>3ub1 aSR-3'mFK+B@?L^[B e/NH>y6` N3 .ߥO/ef5+׼~bK6QjiNxd$b5:I" ޓLi a!C鬕Gm&3 T^rZ#my[\4Y{OEG텄{^<˫ 2f$bVv>Jh/oP^`F流~m1f)D)3E5*}.Q|BZ;>SN%.g/Mg'@bgF4H e#Y-vcxQWgS_CӚoAHxZM;FM$ ܙ VvaCEj`|21m XR r̼a KHBJ!bXKUFUDuNJ dТU|G=/^ۢQ씗oQp8:iG Dvv&(ߑZ^Hny3h_D8m5@*$g,4WTD>Y gv(G~'T@O_E&, N+_":Rzx%XMйCHulkuMG䏿ńvW9,uaθd`_[ݓq:}\cþQN9%5ЉxҜ׷Qq7[aDk]4T8wXtL))`FR4mh֘ZxW7e\PVh2v$JWFQj01I/z aǃ:  K-4BfOk=5Tvye_ H>A(EiPo|15dt?dCP0U=We y:$OҸW)JnN1MQ;-Kx)5|Pd IIWp-/6ikhZzQT} Zf;޹tK Ao@j[\hA1jB}|t_ .$a7prjeoK._0ot<EH=BrjtȐXlM$_*Tm7q`MlbP*{ 2SZ6k]k,O 7q+S\/ @&˯*;Rs ɵB`ӣ B}WW?DB4,<*=W#i/+&sjA<ha]Y,rmd:qm$4o'S~;[\ Us@K!&>BʭckЕ ȝU&a,cF]xs ܫe)[3mc:E0Px~j.s WymK.Ʃޟ`*kyvZ_lI}L͋?D}Mt%J|j.^AnEܦpx2h,@Ъm#6k3[ 7#/޾30\^SxƷ V-gf7h22[(M\݀EK?PȌ3c>'B՟Ys<g9'鋷q.t!2Iyoieľv,-mKd.^W D /&a[7p ~ȃauA3~Nsj} ZZJO~[I'9v_-`KDgǦZDϔ)M痊4Cf> Sv̸@k#w#S칸Q?F)>?)iP$ */$zXq E 7FMR'bd~o-긞A*6[+'ShDvzY!rP`bfF>Hkh9g4֜vܹ&&10?< Fn[-'>3]yWG;9Ue*Y[2r 6y7i#/մ|+`5}D/RV-Q2r{9Whhk6)#=O->m/w~I[|<^_y@\2 A4i@ɽ;\}06"\{㱱i vPRbu=PRqG^ o}+@X[q=G3%Dz]!^j.E눢7֯xBډ@P"{N"jlPi>P۝c3yi|=RCBEUw%PڜrY*qRNd)kFF ZEk7L u'qm JTX!LBp%ȉjz =j0S,Vp[c87٧5Ч0X;q"bwu@.|&RQIZFHZѶ>wkbL7&$0&/x]ё->OuyǁӁB\'XR+=4u#Za4R Z >썲pR~Ai恕I$Ll=d(᫯MTi< ͉tYm@" wǸGZ$K SKj_VGq@<¡g˧E;58W5|<j |؁NY$z@j U;f5avT$ k3#d.giiGGl{bC.?t z}ɉVmVT1Y7>S*tfm,\fr,sdߥCUs%Q.{ws4{S|7M4D0-}/E\s60> ٷ6]2NW4s_Etv +QG]ބSz~;뗲]4ucxԺ 6oәTwt 4*Ax oj!SmKWGc_#M৕_TX^\o^}l=z/HV[r6: u'w԰B\d- K6^9Wa7if 3C  .쥙 UE.}!_mPILЏOt SqXæ5p[w.U\wɪ$M NC$[`L=^V{'8G)M`[<׼>!&^f a.>~ib2KSn#e4x4ӹ7l%h.VLIeA}ĘB1BA7S11-;2mҷxz%qYl.cZ#:L#ObdwLjUW t87OYY7'Ϛ$'pa>'}N͎Px[4x3"ovs-AJ])HsǑxnHq!ˆxf,S3xY|ё[W O!*/ Ыqe=;S0G8Ӿ%˯}0jwj=UkdI?`:?8 h/hkb\!3{J-&k4[fJL.1BDehB2QaDcO>X6[ED ]r_j1 ۃݘwGڊĖs_C1|DIsmU2}1+tz͔^g\ve:#&k~V'5U8m]:_Ac.}CAOӧ#p:1?kfnMe]VnHߜ (u3RF&jb*lL%tb gSXhY?}'%{2Hm,ivUU ۝m1$^|Wpo~+dn{#dWphHΏY38̤(r)@ĐWPLjjD2-Ĺ SP4uZ[r$=_e$[EU!lmSe5HH: Db?ݻBQufE'*瘖"[rfa0A-Zqʹ_P:iFOS_R&ZVu yGUkƵHqi % xyid%`ULo~"щxŶIt*LB!2l8*SU4Ml6n g ̬$WSeWXkU#-`$4я]r% 3#v>0k7N bZ] ]ƃ ΧqO#Տ1 CcV?0K2E1}I;n#QmS[&lnADCv UåY&A3RmG:Ӕ,kJ[ARm<2 ìoEW?TS8l̾zgUvHZݖr_u|8bAXDPGl|@zIg3gLenZbi,6Bg3rc(znIMplF;JNLF!^BЩ^"@ Χ\E7%pt{k<8zP.ȃ@ G^ >0l8í~v͡x5bTQ_)8w_j8*ҋ 0$` 5 gY$mʝQ#|/ w4%q7K\lBkO* [@SNC7!Qݒj!H)0Ily;x `tThUpec=c:T%G\.A;WW`\b\P; ꢑVQnLycRs5\$q #`oDCJnM}W6' ؄!TvIpIıhjGVidt*ւw7`A`Po\ݴmlu7kػDCJjKTḠːR BU9d>Q :1?|6E%WU]لՒi~H 8j^|q"Cw:0h5}Npئ+l=C3j,zPoJ/((ضt/cK<lU8=@ky{²Mr5gg"YA۱ӸDZTeF;',ϧtٚVRҁ Y+[{%Ƴwr%j3_Ucx,Tp˔撷 0Ic0=\Z?R Y0{C˩'uug%)0"n<{-`͇FVt0AP͏@뜜(SiTTY1= tZNл:[ O^%Ӕ-|;ZI"J妃@pC*z<"Ndo1hT5}w'KIO# [!ZY;dzŲg`"gJҙ}g: UwQ`<*Rq1IV䓩1!!Gҩ`˛ᚧ=J'b#64>j(~P wiXi QbLq*.B?-Jf"fN^' jjDs &-AO}BI<$z{xݞrs!&s˕Ê5SH?usm#qE+bD/XI+Xҏt$#?xP?P.&R#tU~5'u> FCKAR\de` $_Y"ˎiAR&?h%|$:[3xts 1w YRs@y7}Fu( SEפ".2%~l CCĝK;ŋʵsRcxG~>fDRXqu{bl-OB ɈSm3"WkB \cnՑ$x@rQK/D@)A*40 NZ6حPFHV-IS9xw {9D/ԧ復UcY#YaR,bh4LDŽGJEs6O2,mL&XO-V2Mِ0wnRtV#y3IAl/9k]8?~RШ\ez!m]L#T9􄹜SVXJ''O&~`Wҥ+W7س (;JwA/z$7{SEV0Og䉻oŔv_l|5GYn}y0kcX #jl@ SDoɽuG4-h(J3'b)ǤDW,w f'~2mHINFUPx}E]Ecu0SV#AQ rH;^%ۆQkt%yW>R3P >-Su~V56l9g 3`roB|7N]mJ|/z^6h/z^h(אU9` 􃤶GOĎ'qͥٽq9v&=s =`[C6rQ%3Kעb qoL[6`OI")LlDzc}/ ~uz7 .ko53pȶM/%p,{/H. CTG{$Cc!O VE 0M"dF=vDHwܙo #tV+`&xC\xۛjJrSOR `e`Ƥ@+_T%8 Xq){xs&.-76c!/?&08y UC{ؕݨ|PRܫ:˧S hʷvbChzH'tڏq*wwn2CSi 9Cw!Ns׎-3UGCEֲh(`vakcNlgQoDsKlj'#N3¾5&AB̔k 07ޑarv&AXQ#rH4g!ݾLk<=5҄R>iHW% eҸ#K%G˝~7죅wP$G2Tz1[*XEpn7Ydu"uAhr)>^{IԖ\[~h:oƔ3N T{y9zیhm]b"1r~z%mX2k7E]0Q_``V ۏSLv@Դr~ټ< 'C~aUbGFGT\UEeh%6cIagh."4=;'kލ1%{7M(=J׬d62Ć1kuєW87e>>[AF&zǑ&5ߔc#jJI9j璑E4\Jun,}A_^/\4On:lJȯfc+C% lk!{v[\sSzŜ}PRpb!y?2gB$rZQ={>Qo$ZٙNJ,a._#n4ޗNmc #bqsu 3 08jcNt"-2W]?$df.S-jɓvbmF鄣Sg󓗂q[,-9cXqٓ Iiž lm?^ NZ/ޥ1T|B`E<#{ԙ71[ؠOj,0=gocnr}?KXҢ 7b!z_: XJAK1z[ kJ23^CWw~Oׄ_Uj7i|wΑ\[akGJRH'`%\([ y7 ֨F9av@k7^Jz5uq=qVbBǸ_:E!;OUJc˺u&ʻ( <6 {CŵP\X˽][ƒueLwK,HX2 ǻ>Nׇ_HPm3mnۀBIOR] 1:4ךΓ;{e99Xr8[M[Fs ;mlZ^,ݽOI5[9vMq"YUW`th""5RoXZΡn2>}!,:D魡tX\٧ڄ _ǨH*:We̘͐U5ʈ JPBU܎MUita KSV/;(/nblGW12XB@ΝFD'̯;TIB<,Q "IX1gT2.cIﾋ 1i(Ÿ$_6-Kb6р!]ĺB. c+Q\iHLg;1iyt4Bǀp9 #6u~=@?Ugb3q}m[IM;:N$պ2$:z푷6rjɓ$~;D\13/ oT*Uf巭=|1^(݉xсgc{(m xf~(/m!qo:,o77~6,2\V;:~n ݎ ĥQ&mn'!Fd3t\*gA$;V֍iѓV)S!/'wSILyOz1! (nv$;%JsO% TMC&?ݾGPkd߫d:]_!& ĥ}#t⋍$_+ົ 6v|?S6^1@Z_; -TdڐFA=dnh@t.[pe`ֺJcP `i|v+/NNhpw#́&dWLKzE܆fjC}0c{ط'g78^ joZrŒ( e `ܹ a?L)aqEw)eG'iB6-K.PF(! -h:ΫFD^tpMWjDžԮ7Y3rBP[?xYpEe]ziF 4ԙ &˭$)j?nGRZOc@lKp@Pim ޤ8',`ȬEyh'$3&ߏ|sp*tDputH>N^< )mwꗞSZfE+ xFϭA45|佂b {aiN}JK2"Wu `aۆWpr &{8)NAua yBYqz+Y((,c2b/gʑ7Shsj/zF߳[r5JcL,qU#㶮Xon-WB.,yzX27 e]wTa 8,5ۛZNk)mbl۶ʰU=Q +|厤KcNMRq_CO$92Z+@n bTdz.-2tߧ||u qx]uA5գ>"wI3uaI(]Οlg1H&@N[[ffζ*jK";@ͬS0FD9 , TyT$fWӇts#(꫋XtRn ^W_~"ZQ$@]-˃ȺH<aW[hdherU9#Sc%DR=e}/06ŝ)s1rGE,`W54,^o`VZH 6.dY'|17<U3pd0)lʾF(Zщ·STPЄY%^JdMG& ?N]EG*d"N݇f##`5Sf H[8⸷mVF{ U\,&c*"(+ScRoK_k=Xp'-+nJ!Ӵy6`͡[llrtFQ]=_XPyAŎ%`aQBe*n'>|",XCZ5dn4Oڇ}0peb,-gt]l,-ةld̗D8詐'C9 h,=b:n *Zl*R4U3K<ﵞrͅ";'qEmë3W?JQf`Y- dWˈc/Y(^#huYz| ޮ k|6wVp#Wܖ=H7FbQ+Pzb$q0P݀q/Hka_yڒxmt _XhYtS~8o<\J/X?8ᠣHhT}ۚ%g(ljMS ^M'?+[K6KN)F M NOTFWCJ~ aI g9]+ %]$lɸiv_t5Kx:C1HuY}HʳPԨtHyBL ^gM+{Ӫ&p\_DdSAV˪)(t怺Y9ml{" WM^*k7 YY4%K"?>mU#vO?_j찳q_n\QG]GQhGp-fʎ"f1e,bCe}Q+n9ВrÙG,dz-]ƢCBxա"J%ẸN[ P@c!*>./Yi`pig׍WȖJ,t0YG/!;ov7v-箬9] s+Ha>(/*rMA*Nnf{^pxе'k?-JeC }~nr0 $_c:gi+Rpc,iG7r}r!y+3{97{,pCd/urN?[ V^@5Lvls5Ιi,~rDx;L*y튭odmeUt7Szq: U?ej祘Y7O=D9ae}ȟY̋̂!c;|b8ɭ]PS-4p_;O?:#zJ]X]}'V'j֢(wt(x*l{j#v2f}{~&7?ؙ [8.k7^mjf 3bS4S`n@}H_tHMR;ϣU)px,` v_J|1'hr@mX>mBY hLTc[GeHThx`{ d-|#iMU]Ȃb4mEa6Ly&_AWXiG[ԋc+JY@1Qʥ21hŦon&wfq~}UV{ݑ`;)D5Ҫ,ouCnh9™pMfP* ѷڥs!׫x4꾀L7]\> 8BWW{}u_GLЄ[-#cL6ns;Ik.Ov;ޚ\ǸaeиoX)FX +6he;!+?~qXgj|J ~ pgedF,ٺLng cq1|J#HmHgٳe;u^'ةe]%J7G |Ez ؛7A3OB C=^L*vWWVs6PV逋B.B6 u$h R>$>ߌq'Tv'e UuJҎ(x^ dތ0>{/XH,8EcA:nN +Y@F6Z~=sSE<]d g@?kǖǷ`XRFYs 9&GB6;d46B|? o 2)ժ1Bueܵ)N*f!c@mJ=}|JDX'r#K~y5!kٿT'Cr`NOTfiH tǰiQmPc%әTg)VLjj%Wi#N64$,5wz4jva!dz/ČNxZ dmc V'V]Yu<沗{{~3& `2ׂvjFrnYHU٧`6;Ot[К@mbg?e*GP}D㠨qΊfQj˝/Z͹Ϥ_Ƿ rn5%@%`[a0$t:D57~MS-;{C7:D[$ˑ6%zgU|e Tp]ڴYɟtDRjZD=U?2:_\g Utulej#@Mؾ"8ߴR'?5,s] 407O? շBA3r#eߧIIOl7((}Px[5l1Y֣ŦVY0MH]yِٔ:N]6洋,ӝNAbm)ˎ0:俾wxF~£jIo*7-L#[l"~i4Xhә`T?˰73Bܵ7"h臺kEL3 jmSs9QH=>`S#'Q#N'kFA22"WISOI6PGX,ן+}3_"WPgGRqΕnA [U"R-akT~ ǕAX)hM& */bJA @^CXdB[5:3:s#x_V!s剃y;BU =?HzB簈A)w{rlĮ*ɲyGq|S{YC'-=ԶLd5cs{!eX\cjxGd; 6UE8 'ϋ19G[,-={ߥ풀C+Ez8[= |+=y-@?ySfD#i>c; MKsKkMC1Aw-Yz(li*##Tcߛv8 =:)Cj)SdXu:+9T0pNZ0ɷ3t$(+’:x+HNz Q<>M)S s )"rdG#M䋮Ho]œ|ujRCA6L.32LQy޷S wJNAKj4&~qՒ2T-V\D.TS(RC!u&[sQ!nQ"j k=^ƾ8qMldIrf?BR"-)!lTC82@_3 ]8lKw\#X^]ZO:Ixr5uKG4q!Ewp$; 4uF1b szt ~p哬]p#0ckZ&Fxf'9df[>TǗve? P? bc U] /V~Ҥ9f_Ծz;Vj95쬄R~vƣ^[Oܧ';*FhϰB$-@O\UԋOgNwa_SGebiyV]Zʹ5QjO=ؚ3rA.>RY҅4\<0gCB\307Z=]ς ׬rg7%QN]j>8qJ+ڰɯtIL&}o$|c?|5v5jeCyRnC؆PZNysdJjŷF)QK5G1CҮTi~hDFXaV#fت'3@^,jZZH[7# G^XYSfe.4{YeGeUQH-/cNc_d8G M̡yݎ"+:G69iP]R͕}6>}@ Ga`oDPОs?QPW]`gԦV-PJ;[{7A~9HzPv,7392Кxˉ%a𗩢O4K\qX$7W8'd~=~H58I?!sbUY19hedž.)D OAS в\sF~IXOHyQƠ=E">{4 <"$~;1KZpMj+)ufs'хB4>)U+o0`؈ ]+ )x"J^iGU54W1\mlHz7];z.PXyzn8^J'}/|گ>z׳浂\3g92/^>N>!tV~3ѝaY.({|O? 0Vz;v>[S2G:)3I*u &zԂu.1x @tXl\]үKau`;cJ*O%2E0i;h쎅c;<6w\q s^҇^uv e!TOLy8mI^D=WW#wGi8'W`:r}/eB˗ DMN2U6GO𥃧`LW‰w۰%ZGy@ܦt6Nd@w bp3gĩ若uܓ~uUSo™_{Oz^oS`E jg9p5\ 2a[^7-QF3O]bT,~9MƋvt'P4,u(h lzԡ(M!_WgQr!%ޚYԎ "4\Mzc㞗{h{ ^s=6b^ڜ˂A7%-sy9ieH AD%=3&`"rRh\Jq?qGS(T.K+^[@Emwol h˜$AB6۶bV^VdhE"jp"v%DA!Q|;z Wkҗq(Rs0 Ch#c Tmr%9x{?z145&2ܐhcL׿ƲC96s^i9<@9G *XcԶErRwBفG7<-ie6u +hwSWD97bb%Č}P&ǤW~d;$Z ,VfɠjgBWb6M(2kҥkլζ̐C &ݬJY+* Ϊ>i]UZRz` 0)c:ӂY3ot'geڌcmA-S15zIt>6GIf1)B-.ȌZp@R9 ^vp12]t2!,AƏ/sIX/ kcɦ=;yF4ܣFVWV tmfMnF#+]Nqp0CqT/~=dזuK wZ#S-j_N+p#$u%u0 "K۸!Y^`'E2맔+uҫ*Z}ҭ5'3Y.KdD#n*7"izM;y vO!`UR?^kqK|RTtqcGث-!mOX&P(8>.'e3DGoЪ8KN ? 1KǨqmhB I#Rh\-R+> w'[GoJ^<+ch̩=zxS`+?YxkP(rc)^-e0iVǭ[ӰX]QK31 dSXtugN\Ssp@;TΛ;!䜷QxO[;iCrgJ[y5i_NMM/qYZHUxAZNJl<mu M^w@aSiX8ypZ$A}稫NMQ$Uu<T/x 0JT*J^,&xDxPʨ]'J+=G)l}/\7E@2 ݣB>:~Gk|ݯ_Q1D>؍v,Vu U.!ǣy,:οV1﨤+E},{u;N:e֐rl\dDzBΪ7QZ)rH5&3ظl x?8g 5q:I䧷ǝVCFJQՓQ;Ў 8#{N+jۋ\bJ-ss!O _~ĉ;Ffin'2 |.0NWlmY};u;ٗB;D8Ƚ{אmUЅOOL:0谟縌/&pQ,C,*CƵ`Zhn]oo'{)ӞP*!3(ON2;cf ۿQ̋7 @lK)* Z-nBxoe5+|ڴ3YfT>e fCb#2y>$> :@vSm R|M;ՒP@4c6`CD3#dE02Wsu˼]gTީ=rSa 2}fc8eXWs? TocRn>iBq=}pnDq!Fj>*<rEv-̀0w`ar̅K /x ( \<w`8 Hd]Dm{{uč&t?VM)\`3*Qo!.RxV.=`'+FE@DĭUϝg4UIk} ^E:7֖J2i6,a%CNI ւy{#oD?H8I~]& I}Pޛě. ՜MLJ[Q+ڜR/eqm$k'MV˛Қ^օlc:hxVufK j:AePΡ!'IQZG9krLK.=˾pjs t,qqtp%]lɞafH/'5G{7wQ.,}g@d,XVo,x_80\Z~sNI: 0#k[yB 2˩\1,N?17IMM>Dk\?1 b(8 ~H?$7qPhr\?^),Ԏn51*B-&eQFTg= Ⰱ4d؀ܿS- Ɇo\ʢZ A)> 1KE:͡AY`bK]FpI+)LJjXlz {i-ⶶaJXzH+bղUG2l)]m`IsEct~bVYP.D@i,'e etAU>~64@pJX QW 90)sUﬦIy6L/N|3g<ϨHT5ϔEZwиѯu*G e+DR4 17&ܶ~⫺,hpSFCs9U-^P_ h-; k&=In~T%F# #E S#T?$Vyy|_T:ס -{lCMǔt>Vl"B*7W2%svY ?]xKO&B.O|K X@_r@spx*& tm -.=]8JA RّW~X9.H*=?,L0\ΰwD'JONƃ WaGK>\^C\,/wZInTll t/r> W?71& {IudF7zJiA{*M;{ z^ҖY fRr-?dp(F)+B(/eVy5ٹe9;!3*+wswPL.s-f8&ʸp3ϳJx/FxЬmCYιq"2w3l U<,]g'tԅy Ju".;belB(<4fi# ePnh "S \4<6~b)K\Ol_Ӯ"%fF\iakR gJx'8$Ua)3W2jgx,Spki\=|;a7}´5:w/Ҹ0;k4tŠ)KaS}X-פlӰzMITB/ٽ=A:!WoC[1n̥E#t*rtx3ߛh"\I~H[}"T"'|!Ȫ}+ D&6Nl&EzVxB%]Ns6hdW5kS/b3:͠L{qK\S0P~.Wَ}-o~=*~oDR !э2Txkmi!NTp"?cnU5[ؤEȰ$RMzV7PΗ?U$ˮRg̾_S$)>ݮwRav?lJr Y1M ez z!rK+%ڸ N%DJ߯-b$,!/S*Iio ÊH" 4'bѾ빳x2hYMf#N" h6*{,ɠIB4Y^b`^=^hx7 'q?]`\cḹlլ?|7;҆@g м6^2ƚA-.B +kNRv|^ii堬HpOgQ>6I}{1&kbr5hd뤄K= y3@[K Vc$B8RCJ.E{ិ@;+ߊZ62)6Zӯ I~tjHhKDe؇קW_ cYOvY"w\ሪ8|u?CSI~Sh%w52QyԹcBH),نN*b)D*5o'@gUy#wL[^*5~{FB#!RLO>r)3y0Szq@hD) i:z2'f(MGҶUO%=(n3ɞ"`"k7XL0Bp%)y֏j`c̶Epad˫gۅ>1WukCwNT? 4o_gط'FڼK hSbU)x]o30D1Ao=*&`UA٨Ί^XuSsIC\ GDYp{1CKdʑ_eoOt.A8ГD#*.5!oUz=.Tc)8`v]zA}%M?&:e@H 9Uk-eya2zp;n``e=(6Oji㧘 z8Ҫ7h#x%= ae[iiEωTtqi7('g(+},06ÇԨhg2[wa*MĄ| :(m+:(G>Z&ꬕlΔ;%+L\q5 .5h>w*L0L1`[e(i֤iC@F9 ftP< 3J+k=ۨ)ۭāY?*4.'R2d&{={o5;'pTOo*E+TLLBi9vsz.v'6|sOh_.Tt\~Q*0R Ծ+HkѫcJ3݅~9l>4!\MnۭU)ô1DJ܁pދȠ+{ |0w WB*/Ha8J%/Ĺɞeuf@ەeHs1䧩-ya|,=l38;EkBR3箎^?7sdz!FT.1h2xz8jtV;)36V7^2 |AZ#0LZJɳ^<EcX;3('6rlPm$F͹~REc lRkwŽ*@%C EyΟN@k[nlS#nAq؀;l9I/4x9e;1nE b9u]풿}zY *buYA#Dy.p&EYIρN JkRk(N_yJbA 2$;nV *}ӮRtjVh/ zΠ>M3bc{䤰ηb6?1PLp `I!Px$QP{:)SSwx-8;{ @:*Q17qC~ Ă3$08/8"CI^ܹD=Ĥ(y NT`?}~梙(Is2ԯfy7=dΣZV Ct d̂8 PdF(c_TEF"TZu+V/e\a> ,63Zw ]f*O+vg@ tnk$Ne>\f4I+׎Pb+:noR2t!!9fM.i!\PwHa NN_j'~XIls: $1Ou\v Pqoinݰé YM< z` *(chHUZ}9@y!UM C9iYFTm ]]PY7/"4\ey=.{^] a7t'lD*+烕$;Na?} Joo hιpy ghj;$Eq8bJwprRS RTswd7Fa,lm۔4h +a`#,l2XCtw7~å-xR )Lm \+< y8;*~'dJ/= x^hۮR,;!RhsS!}>ٵIx4!,YP_wTW[BP9*Rp ?&;"WqY8@m@m8nD٧Z vNXغ.Le,kj8Eh[tk줴P,ktH,] =%ZX e_{o}h .wbpCf<(/nHibzn|nltˣw{ 1IM(HaX0vzi@{MYʅGF.+@[b@U KB|iRg'836l>=9%&#hߍKyHvP DI<T N=*qȔCm$[_5?0Igm?,5CP: ˯*ϒ7s%}!͑f߻9Ds{0Otp@,ݤ;}4%ŮaG!˅̤rhz;uRJ'R2 mn>\I` G:'D+婟аyv:[&3w<䑐k-ؿ_4y*mF y@҃4sBn#p"{{Иf&10%&3WE\WC~zŧeDN*+-`.)~ͼ]TBPI}aZFijcP ЯNF j]:hQT[sXfdr1N\›7JoQfC-Q>#yjt!QՖg/[)<~3#K/ L{(~妱8\ן%K[7Rɑ*ۊXhnz&u^>ش'b>NRܪIK_RG3L+ #F0lqeaaoc{D {h1A4{_Il;LWDq{4[\1~Sw6zFEԌ ТaXmgFUz7+rU0З#= ]9V`ܑxU廝DVW368I_)9{5~IdA$FP MpWc0P׊Y~d/Ɍ ˫ӡ7|h &`0d2Ȱzp6)56:Zj8oj2$foጧfX Wƺ13Q5C2r%oT$'E\'Ex$ZM~NڵK]L+Lg` , \ȯ܏4RwL֤2#{aG9i) H-Xjp>^QP͔11lG -RG@TE ϫ&4ѻak!{~)OTw,e+/^jw[UGb'L+vR1jb H$G4˩i/喔 JK|s5[d|K?Ddɋ$ Ԏ 9e>J_ejS[Mh*vZKJoA@+9=~D$Y*ndq!=)k  )E]>:'5w)BIqs/p(CDl_.3,lL@5s1⾏@ z4V4ۨVMͩDMrOxIvA󥴋{Tiļ-%>%B.*ܞ'3"klqt " |k7+xRb!ם}}K ~p 5z.?6qҵ{V=!BWŵC=qؾػqhg xqwc)f2'bbn(K\hc0grSK=4XUx9U ~M|PjQW*]TJ;;>(i[墯ZVi|cjYѺQ$=\%R~"F\r$rQz<\!3) ;NQ7D:OwNOzCs|G\.q*XLZ:y>%JDK׌t"NʧHU{T` cW/+c;x%6])gꧫtlZMHxA0L'ªhe =\{nrd^~?Íȹz<𤱜# ٢ѸA)5d:`͙R ]J ГZB=|0j|Fy ښZQx"=6.(fGJ~vIW1!A*Ù+-ՃB:$_ZI0`wRjGRq{>@ztd:B="tVɅ︵&)> H ˴,1]$A<֟ ZH77`Ҍd?~4Z𬼒i:1ڣUzL AՇw9|q ➝<6?cK|"!) .M | 7jD?帺nKv<K6i;-:dRʡMfu!XYA+R@_l=QK[[5B.e.-` 'MoX@wfE#'q%}Mt]O/Wn+oK?ݾŨ qycs-FiLp8tϚKw;6-1+?F }4Fރ-szue)}~t(㸿SрôeO~A}P~=X@EFDBq8Λ{JgH+ݞt[sZ4F 7' d/Z̶1R-m"lLS؄~(pB7u| (j$\#5qr-jqKBamdϘ[De_ϭ DZA$COe9;3-(4'N?lJ|cSWL6cOLcLc=]]ƠQV8<Y3݂jL&SwZTM{8~(_"Ia bڍ{P>2GUT:$;pP7[s"H $%u,EY;-CR^`O! ֶ8nfCF(tp8Xci\겍 #V̮_@;vxTxC@P.Les:1槆CN (2(,J+s H!7w~((O> bEʿos #C@u1<|z. )b?874!^ヷw}&gTO<U(T`'Jki19@sYV0Jo=jy_m:I|T˰$yOKt[5,/F)cs*8G/ˏ5k:wp+ nSn`W3I0y|]YrW5D{1m#aUS7JT 6ǣ<7r`t;x֤3S'8%35BgTc#a# Npt7 8VIyRDaYLsNp >TՇw(+Y!=AN3c^ ~NokwK!m¶ 31$U﹣X1WIuM`QB '$VnvF"r6dޗ\-Y_}󠛸΃9Υ5Pmto^.ڱѽ#?BcL\a-ș(o=KXV,6ME1Drj5#$g/#9x[lJ4U){C*{2?BF/8y`_ ~!S"m`d/OU׏qUu`F۳TP$'[a":\3˼Vz Fr5*a5t"X?( {/yN?}ضRnmodT}/wbxX&֧;6T˃}er{VX}<2!^ 4"(bƩw$Jx_]FOƒ'!-_3 2XM,WĤB4gǵj6QYy䣎9%-HF*]~:"~B#&;4g1 DQmw"Z[<b*:4OSh \𦝔Gde"|7;7fP3({]{l╂WFPrG–(e&e1fƠ1'U!ւJ`\t>KjQq {|dEUGOy79{u9  _]k ʋ y9C!Rjy^ܿ؊Yuӏth2ҫ 6f^zTJ?S'ߛGW$wTnB14>Y:dNR-|j7e(~#wat@*[I0ntSWjNgͧ=~h|VǷTiShL۲*7b?N9vB91oȎH3 }Gcy tPz.t6뗓WAI[>Da-8He+bڋ-MmEޮ~TDMSDhuExCԚAj)13F8gbVl܊߻40k>"]*yM%gkb4c4}m$X(<žiiVsip'sN"INY{~ޒ$ZE u}L~T ~ꏾk'RRf1g-(|?hUΏϴ9M-lo8W&w4Ni?m`]<vN~:EV 5Ơk)a^5vM.\ zT!`~>Ev~^}};HX?H0lU@3 ᣅ, |x|%ȚG3P9l9fi,sk hΫ7$.S m?zNu f6ju2bWx3fdYCC 3FE&ƁyE aVϯت Q$%Z/I>Y^k"f(ɨ2BnaLq O D{pYo{)_дRr)%4kv{QhOrxTPp;Y7նg#[6Rl-OJ:P[C>$ϋT.S>bG +ZF,qD|BY}.p ~v0ݴaNik+ bߗ{$&}\!:9O!#̙т'JYAED #-!yɯq{&y/pҎrk /Sq+;I v +)>UyY8$ȪhK6{)\6zPys.丁FCeς뚧{Y^-\ҁE!'hyx,ԃbE?w`eIٛˈ&).:(ӀVO݋kp\*JpŴ~űpև` 8[DHQK"WlpǡDTTUKıQEĬb>}B?eY)Z}ܷm?w6҆˳ `QDbS=H!75UBN.9Scx5N]XRnuruc‰ LqOvA~7LL}lru|l-=倱3sl͒ {0rxU{ qaի^U܂;ۑj&O_b+ ZeC"Gi'!}Egv#k^1$JeNy`Df:gK.DgSr8KܩuZoh\H8KB;SOKI6wUvHM1w;*D%hu"Kh* hxchJ }|K"6&9(a4:幉0JO`:b%a+. *rSISv'0py>0xqV5Twİ 0@WےA{0H2ܛiF:[^(*gUp@b5O#9R3hpc"}Õ}ju"WDleKE2 6H<kҕAv|xZ. a8q$5)Փt32ArplxO>bv%bV\! 9OvwVVPz[WF%߻yVH?xl~ڰYle,X phTCA.r ]T8>"[몗<16N޴=cMU 2/GleN'WLFaW#%գnf >bc{٭q*fH+y8jIB:2=yq6JN8lUK4g_Pc2siwjF.}iغ6Ԓfnp2Labw!ڦ)uu Vl˪DR}Kem%̾l'ϽCGA/5_kK[FBJә=+duEOqTĔ.!dt7`$COZ_8\wkKH1%>5f gmo*[#{zer|9,"]ђ6A4H66!^ M.m%ޔqޒGA*\fg]Ob|/}sNed/58d)b{KԄ>5N9u_Ƴ5El)^ANl6]k%r"IdG(=ps2K)3 pĵL&MH}f=K|nXW-!ZJ]0ͺRg@-(&PU<5Et#Ht$U|7c2l1i` ?sr7T"؍ %7'P,hTFEC9]/Ğ* PˏN{6?&LCDvH#=(/ )q@z4d#QH7:;eV:s䗕EyAT>e%J9K/kjCؕ4ԇ/ z7*` 37̑'VtLs5aeB!CY!8 vT.[{'j7.'ROjBn'ٶL"lwU? `vEV,}8ȽRRxZ1|8J,O.(9_ϙINZY cDT~NEmSz}J28q7(%GE)=emS%Uī?7d]I+۱tّOkQ2&in&ߠ;kSd }e!lbu3tߧ7KKy{էi:sZn0]l8R~J BJ eTc|߰' HD/eFYknz'YWI@:VkńL! Lچq ZƏ 6%&r+O=_Y&`8!KJMVSWb& @LlDsuzG{OXVe.g6pk'^]HycG[cS|췛 {+>ԿˈWa~"v]n.ݦsv7PKX1zhؚW\Jn<2XO$ Ў+8gd[]FΆp pϝ1a˅K$.#n@>\d2#6Tl%r_.7Wwa6TWD1Tט쪾8 Gɠ\E.hXE{8iJ4Zʼ5&>ǕH0 {ft0%p(v|.}bw`TqrQt'׬}&SG|*|B2mE\LGm̪vZhtc`QJCjgu&*,jp΋0IW ]#I}c4A8N%\N'O|g'I1Q 3Mg7NyF<Eq=sfߌm7*fp[By(d0/GDp rç uTRI׬"'i~ :? Bypq鹊^zwmadm,$Lm5_LuԬibKpUӢ7}KY ŀxWb,=dpȄ4zΠ+-I H[[Ud]Pл< OHѱ-=hl!/kLqTI&A\WGnPG&޳@no ĆW&[i47c!0dw)5j]/FcEgyٞ1\D:/5 ͷ:.K6:QbC/g =n>6P깓*`1֞#$z"3j0#Uq=n̟%&`j[~N= ʝ ;+G6%Z6庮6+CuY(T+v+Fihqȳ!LYs5PvViO,KF9,iYl3qR5[أ`wZy{TC 15&KQd7ҟۗg]G&7kERЧGYt{em2Z{O^%Lq2YeLC۾nH؛xo:)ELƉ`x8Ai30|\2(J/b _^ f$)N{}d21= n#UR9zR|N@fFw5v'+1Ϋ .cՊfO'WQgHR'?܅;d%R,ljC]]nXϩئ=}p;\7<0Quޣb,j]f~KUOaPDҵs׍F`snM+&Tf^X"-Ox?ypG-Hq}(̐x5>ZSU'2xꋥC|/i ,Ltdˈؚ.xtG"qF&|Q¿B u#Z ENFEÉ tJUxF -2P%C\j庹`DmH%Lj&yr٘5g7JH☨q͐ ę+goF9 _0Γh$u}_F{/; *5Iܢ/#ϙ>/n,n0ߣ=DCi@`]δh[!/s40id0}*}! Ox/,S6VMk6MSwDpѧ?i(6*D8P#;CGRFm%N8ڒ򱓀Y`JZL魖9|oxI;o5P ˆ=&d??>Whw v#TMG‴W{٫.^{KRj/L9ҐM8*4BFugVB:xЀ5Jn3k#nt =JX-\\" ]̛pdھXԮc`c}?VldH (Ц=CZObs&ز#7C^ mic@'[AOe#ZUyr5'~,|W=RU(`-wkD# ߍ V^1Xz%z );vj>Ʈ!.&B#SJS֦P &.s ҋRg|”\ezTk1}3e_b>Nb Qq WpR4ˌ7'Mݲb}?W4C#xW`H&[ ^h #a&=qj /h; 5j:5NG':(jbjle;VfL5oN.k[R}e .g1W6;Q|TtU"z+E!4[.vKD ;fG[ a[>wm7 {h%yN ꭍ0_Koxe%UE _Ǚi/i$yqs*V(]K 07 gqAPA59 ' e;X;-SJVx} bVՃ: k#wg%1)勞ݾpn5Cwa$v:/v꧕) #4/6~c9eӆE%tWK5ŵRW7F[n\FĈk8}2_⽳?w{!M+̓ʫo=y-9D7CpGF5gsrO &q<5X;<'C&,(R ;5Zrw~ z&FHOZz\WbZ22>ŋvdv*+bGoCM6d JRe^\4C(O^?L.pŠ Z/VS:b"u #fRZ.OVdu1^ikkI+B?CU'(&NԙqwylnMGO>Uy!ӝg Zes#|>T=|nF>%kJPԁL18VmEl ?2Vd梷~YХHډV7UPdJ; M_c|.y>e% vihh Y䎔18['l-PUb/o)<,>茯Wd[u3*}M3go}e 8hGqnGiO O*ʹ_w-LVp+T\X)wդJo$3D'OuvjZng@vH um}/y뙃 gF0*l|\mZ/^`$T-h}bnvT,vÑtXDT"m!tMu[!vovέIEox`rV}<{9.Jv[p Wxt/62[|y 1͕؟8B#]@S2՞ؼծ ӏG._(ռZ+ZsI"a9nh?#UEU<]:a-u:Q>r槷m>JБݽ^IK8 ' ]$s?*B]2JI3.ߤĀoڈH@L{%Kġ1]_~2<ielۖk64͠e s<ju̪- 4[3$Al-r,㠼ImZ h240rGuURr|{TWA*-’JJ0:G 2A&N\,P9A¸.no≠dSA-M[=yA%eƉ'0o*"{X:fF< @W2akfjSgqΌ gے_WJ}0捹EpSq |hb RICJe.fȇTgqͭ3TڻD#r4SG.7~W轉4"Z(+݂N2@$2n/w45bӮ皅Y'DtZlcbsS Nf`8hq6W#Kr}{v|qo${r."Kz,jW_IGyqn;?-2%}+L+Yg\ %:sTr؂j\Q7Z}a%d'`v9Sz5SgM>4z+}SI[6[&AΓUZ-,xt;5& ?`=Zۦ,G:tY@sv1h;4(aiߦ]ף웤ˌQinGA|Ej,O ] " y9ꆩ 60{E3,j$ {|$?Gu70m2ı)<h6ZD$4=gxЌ *,zOAB[lhK=Ӥ\Gs&TMe:KH[s*0lrCS1~HYL|b0JH떈.*:9b3䯷wP Uԇjuu:UvWQV}7Y"$K=<#߷+Xf ('Lrl/j'1nGakZNz(R×nPͻajHn‚:R߽S(ͲŞ?S0z b3S'2_r ##7/1٤=vs*]"!]NjѐߧXΫW\0R$*O㎚d.tx΢@^[?(&^LtFds.htWPL/3g⛺[%ǪqdN n2`.\m{uO}dPCgfk),S n])z˾O':ǃSAbo 趚7%R}oV-qc[v_ ҆w ^U=IjJrZ5+ T~99m"=ֱb~}SOUx`Ч",UW ºZ`G~b,M#nrY2)3ؠ֞@S[кPmqQ)WRJ<[$wi7kMc5MbEbite| lV/Fh>~#%&f2(9%,(f;9ɟ)vp(Ux5J#%S5B^'ݟ^`pmĺȣ.^z/aX?KM,~xsCS-;V|?1V;sJnTHF]C,):`b۳)|TgMD=t%L΁It,)h2ecuE/"Q`lStW!py'2Y/'O@O{ _XBgk>$<\j&=90CzŰH 7}d̀{Aׄ}O=WluUu{M:tBP}tAKD6NL#)*!Z U4H< G!.t9/s&ٺCi…/ 48c%V7Q69:$K.q )aYG*vY'gxhC 7y<*- 6}F_aGuh؁HQD ry,1g{5z}(ؼMT vW-^!ϩY+UqU0- >+煅2h7*3 [UY\ 3U~I-]pJh@~[eOߐ˞-O5ʻxѡNקZ1ޜQs渐;(MI$Vo׶w75ݶ^l뻘M4}L<^=Qvv"BÆvD5Xq(x6苁"w(Tpl43*Av |+Nyr:{arP`p>{^ȫT' SQo@*jug- 2>+āP!SUM1ZTiN>yb A8Mp: ^{s 3p^:egSaqޟ]-jdAj WF@-*IcB%8qs@Rd45JyPwt7lֈ,wU2HfKـp1JÇnnG@G9 vabBC`ҴTNhlv,N}Aa1wWSTCFk%9)oPIR26JwO=mAs_up,t(HDvħpI<׳4@,DSގ԰!>h9*AS*0&gzJWd?EuZVq/~:sqr{,CNI?9Sߟ@%}p*Z \\^k~, WVMJ(,ly(`7s*8VmJq":_A|Vɻ+ l1н - ؄OXى`+B .#!zL#n-W*o4{j(h~ც؆`Aрc)z3+sG~2|~rZf`L~sc x ,Nj u@| FLdͫ@wyvQf}V ( WCx‹cN#*ׂ/ И9IJ v\{$NENKƆ8i>-ox;+HA=+0XH&I-YNq5X)lb*[m(ϵnh6 )ha:o+so(〕ѥp;YNcC;/EBㄊ1HgnV}ci7mnPSPW-AꦪGQ؍ac9XT2V&"aW3լtTJU/ ļ-&6euHF vnw;JzC]%JNpPf.Z}s KAZ(nhW%#BLjb8qۄSo 9<5%v ͱ# TE Q b9 1XG%x’ ϭFPnT t*#~#o=IH?٨Ţo~^C~oTI27t!\gFUg]ljG)t,mo UOmw_?B34>ҊP;Gۻ tLxI"\x77N'FdX&D' [{)`F[^I]<CbOhDAB{);tP ׯ9Iڰj"7QX>Җ*Piцѕ1yHGC*xj!dm"{.-0WKv1ήߠ!/cD kVw>M"mRd)UZlzS ]6FdBH*Ob^fr$g<<=sC!_i|ހ'Ƒ]9٢eꝁ/L>[8}82rI>#ŐoW`p;wYܛ kDG;+we}hҁ1XB-Ȳ;>vxy%c.FJ01zaejĝ2파k|-HW{yRPp$cʔH7,$j(8]q{6Q 3k~s̟/F@Ɇ9[ĸ%sv^4ӤٕXHy#""%)Tw}geyT6EаZ_ׂz¨Vj$L.z9ɽ*g\7eM'DO^.8)+Zkf}yJgGYh3Ο0ϱm_Ú#e[ʍDl X@dT._W6*0PU|vVu?2QȥH`s<|L`xY OMW4=HDWfx՝\Rt 6,uyE򢢖)XedJ:?I JY'@Xn ϒU s8msr~XA[ !铅!Tfmx/M!wO=yu8v]`+U`%\^=*.e 4]njL^F[^u,ׂFgjZԲv귘Q4f= qTX,UÃ,aH2{D 's۞޲5gXzyD9Nq uz]*6l5t\3QdY 'mؔYn6 Tt`ϘhCGHNTUi7=SSzf jHjDBQ+Tm{I2uQtU.p;k7ד( )Mֺ,ggرP2l{(jtiA9AqX6/ :ɉP}V@h#M`n; t2k_scxIV2'~3CikāHA:)7Q}S#վŰ\ .e|;?E`N6*K /d07c(SK kJH1eΒ_ׄ̚N+!ϼ@bθxǢMe*jR$dSDZ걸v &g?S$Z>x'q;m^|zPu%<ҘUhFnW_zhbL8cryQH@4Q81[lA5Q(`vV". T$;_X95kri>ΣRxp&^oP:ΚJs Ҝm()17ɳg Qr:1/*[G8τ7EIqmV&S""c,$=7cNqI."B,%U>e`;7T٘+Ųd rܖtI#Y^֟,$Ȝ^0aN26 W!)ğI"Y>tNsGW~꘬PYΗ+%晀RU= &M,L 29YOG4<ĭO[WU~ku&lW^{/fUc:yy\mRY\w g 0PkuSzv՘˸Т`Xd9Z\t{j *!Etnɩ (cbJK{<| õCp¸ (b΀҃䃶+"=# Jϥ4.`mq&<͘'rC2||J p#**@]"ڴ--b1mGUu*c[}ЅN49GAIܵ;} ;9~9k畦נ4Ԁoc #D:-ܔ]`ʫ/%pUR&jz,'e ӑ)4PyO=;M@b$=m?IA{I"4NB0tNnk$(/ iue jU:8`c?2<˾Tqqze+E.8&NepK`_;3\o^00a*Ӌ>+g=u+oEYDV5qB .e^3]gRڋm쳉+5`v)S^ݡ7.ia$?j8[k>zbwi25g/cWj=e=Kvd}i[Ѷ 1 1q+H'HG^! =9g|`[ U j<7TxO[EE]g+-Y^Z{IHY9PzzM (f4\]н }GJWjyMcG:ZV@U%+n.v-C S d 6wQ) h =6: KL*^݋&\#rj${K" dB(VI T][Lێ6 ~-r_>1nL6=W:bq5X W<}\N`zH#($&Ӂ.BQ׌ .&@czV ԸJM3$w q('G4,lJ*rl]cXt!exv+-$̛d+~dhxE$!+d?e+fwLl^E$3Њ>j0KƳ'ɖWJyX n8YUnm9mn>w#Cx,i&_ '%zAGV .ơ$̜˔JRɄn+Re#TO(FC4ap+z3]FOW9#k2',22h/p!$]Shxɋ fkgV@GLG?/< Wv}I2V١ V.iF=؃`Sm3S9 )h:t'+AP (ׄ RD~M15ܯվhY$ۏC}>[!KbZcSƣŹq U.X3c<9,!"lϮ`MJﳿtMp_1tj;g " /V.:'# Cl)? "v0MŞ+jau8?K;m MnT[#S0a#,,e5`a0R"?Bt" d%"PIgԌ5||EA Z SL^]0WnQ\ IWO{.'9w@LW60<^/_*x&WMT:$\+8.eb/ V:gt%T"^<[l&²/}E)ς.Գe0ykqc]&a[GIOVUM/!T/edXU Oo1k-_f e)3c0MnB}Vb5C/٦ߩk؀4o`r8 \H(F81) xR NqDŽ &+T~b5w3]Є{;5z 1K{hFI~;!5xUd| d)e' kI+ |,Y%(hB̢Aٺ#)>ܑ|+ΧgKa̾&q1ҝ1W)*U8MЇsO'TLvӟrRH*\K% >*$&o1U\ bjN_M ЃCŲF$S*5W5Z?d5q!qfأYP씵3wugSSOc̐ay%bqXvcᴎu ކV#>~3&\h=uJ}>1|3SA7pѺ=Pf鏴69o(U'a"@.{2>sP fYkl8 WhʱOe&) )U^^/Ik#׻«O mVi&#dxgRX:X4f 嬃CIo <ȼn歾R}$[{Q y84dq82q6\H]G=E{AfDŽv/3!\low8\T!dDV#iUInV*cMl{(t #IV.t "+껎>ݿگD; S4*0W.krS-8q+(bU]-Dmn&׻1EeAJfDUwc]YĬM[30Q 3H/CdgD]fL4&uR~ɍ!n%0>v9R177Ȃ)Yd'*d"Ƨ'C4g6V chNTaBj C@؝O]6fرO\wp=YKM_Sp tÒ*ڑ ¸~7kII M>ݐe.4Ϋ#la_p9 ;9NSpEbf0誡l5LL!3{ٰLA g<^E 7Cm׈/#!tQ~ 08fq.jl_ˌ/|'.;=iUʋ Gs9M`VȍuYuxKu'HuSot/L1NBFKl;ĭ>_A &(}ϬQKg<=󊾰1엨!oX@%@P1 .]Ӷ_ Q79c}1< },SOse\MY#ǀJtl{C|w[Mur'LJӽ- H2xZJ^V|!{F8¿1ܾ̿~~mQ .Rvz~%*}>=J2q_:rV]J׮ !}tʡC6hF'&уpMM3"p,1WC4bor zd>PMؽnGܺ0rWZI |ԩOQvLpG{mjo]=[(NΣƎ“,Pi'=;Wv:"% g@UlN`G_"E+ P{GM> Icj8/M,_rש ZI'{f%]hzXP#+urbX dnRSrͦsCH8߯6P% ȓqK>9-VtgǿĶû:Z^Aq *0E,R'"&Z.=f= P@&m ՍJiş-m#Ue8U[3șt!9+ZNQ%&(902-h t\A'A?Fjo:N-hW&B܇_'g̍M&/#:j?2;aG6Cm1\egeqvn>M9]zCYͯ]Y$Jx:Dzzn1@2@]jA;z.:s$ mEC\Wa"DNZ:~K G\C<_01w(N+0⾔7SNT :+^n?KW`;oY/kbyes;B91SqSxz^Lgf]i%FF[&1Ok1goV FZ>ihzt'KZ07qN삧 *5(컑 |VERcOyz=Eʬ*Ze[|ڛ榐4+*Vє]/sEpXԽۑ@^zI|l@ Sݍe Nz/PW EǏ|(sc24?h](9D&`4 ?Y59@,檞b'.l,|s pΒc.M0IS ,mMjY: ,YDxd\ *^H!g _D<ޯ#:uOMb'aĘZjA%*V3 \[e8 c=p&,xvc;JO76BkԦEIw-a-~۽-Őpz\`nhU4^=h &|)+k2 [ɋ͵DГ)\Zbp|6']^}JC ie4 !a|MEܴ:MDx (!%`"J 8f Ә9i:El/SϞ\҄0IϽ(A>w(cxh{-ux6Vhd-BAsR:mͷ)+^#xF/Y]F吽R(h3;Ok뾔O(Sȝ'{"r't5"wwOkmd.w5P bۜwA8;1qR%HO&ls-V,퓴^EO}t{4f*vxmܻ=9+C~61S,PX$OJFù]+9E_fol)YcvvΛ5/mȾ p ykj @@ 5a4zڳdŗMi=ژ1.Y``al|$B}cNq,X ^F+>?"i̳]OζYs;(281lݟ᪗}&;߁”"呄B$hmVXq F՗i'doZ~Ƕ+5IGh6@{K]gΦ('q^m M3)P9{&uu~8dkƍ{cLr b\q`wO6n5sie]Zr #6iֵ$LVDQ>mL iىsR.heRThM!5X6[`x6pHY̎-̟|pC@E,$aR67 Π2W;~Y I47 BXl GqNUhYٗf9?oKVO9 n"wf[S%"D!w(=0w4@)#w㓾Q::P~nI^JdpkkHE4l159x9& 'ߏz`[5!W =*_\6\m*SޠL`jcκDlE,ՄJ8wf6 {nRFu# Ќy? n@ZXCfHԜ?y86:i+/:SP2roemȋj h$&0M22 g LW; 9@*qA.]xJxЎD`A7U^Њ5m)x#}үf,D`0Rk/WMojI$x]Qwp/ 3~>?E;ˡk ZtHČjW) ex7@dɑ-Z7Z /N2p=X6ʹH<~_o <8hh^M"< tO֍.{Pi0b4ž[;GQHʜy PE/G-=rA 3ѸfwcA 4kv"6Y26VhoJ-ie͂zoN/BJ$ϔ襓ⳓUmM G)FiwS.yDrɔvNHBJ_z:M*¹&`4M؈md9ST#X3~' eެe9h %PSBELMci߶>&:&> Pš)t pBW%3ބJT٢K{v#(wGy/A;P-2D?% 9`5ɛam5*#ΣV >,X!23c<3\<<Ŭ1hތ8K鎄yelݶ=/#@OLLR~fVz㝮0]p-Tj8;U}yN]IpɲKJmzug .{a^}xPc_V+;K 09kXKK\"xh KRbJ5OmO7%A~^芪VhSz:T7? r:K8.",{Œ˼Gy綥OW=j;Sh`B322"^HϘ_QYqF)7<zLR|Q=tEF W Xb*CKm|>f _ǹЮcQZHڟB` |%xmxɪ\_.׏԰=g춬B nuN/ҹQWEIJQvmpm'm屪ݾɅU8*@-gl"[{|݉* idK|w= l{A}<%_˰$sARy;ORGB'+;Afe6|N]`l$+mC3mɜD'r7GԒjy/sKaVAχc[Cl_)x= "2y##`sq%E7,Vt:c#/xsLVsan~Pjy i/lM %FO WxeD+>Íz("/g,kvOgkn2睗-|jL++5v:_z3s/F<]`yRwam+pў%YoNCrud7rI\ZA|ϘPpp6.en) ڑv%xZ_ ~x&םd:oy_4VR# [RW+%](i!*{i"FbWmÎX4N$!օ"82Vlx=XO] VDd`L7;DFNbh|~ F]|\sśX`:~W<ke?m(/3߯rl'o w,ZGXfK<0#VfF © BChDxeYEDMTQHz`J)D-bɳXcp#Yu]"RwǫQt6G0 6)2u!@,ڜLj<>͑YWwfKuV0:џ~3l-hC`AW3<#Gߙo2˙8e]n@q"w8*a((~H~m:TO378$Ӊ].pVlDl#w頑6̗F #A~"`,:~mo鷕V)9>t`KGO!N]J bB:KW.!Ʈv( LD$O/#aZ9%Rd)v$ /8#szp'!cMMc2UX.T#q왗U`/_e(9 * xag9 bv&%rƫ';Y] 8 8 ޤ$p(!6?Bv~ܗSΨT%{>̥]Ҭ[ZzVpJUT$ nVM(F{cKG5 y Ӭbo .v%aZf6^pΑ@|e{d黳Nx s0?t*.U_z8pN,`IH+ &Suqs ^qZT܌B7U*iEr708~Me,ؘ ~»~{+ L&1ė\<^+s}7.O߰,A]d Uו1E&P[4h#sG:AK=,3Xp]ZVWsL` ޢ1&x"Qeuz;"Tꂦ܇2}k&ÎHuA ![]&5 ef%*p&ٮANmL&$0 7o*'GA6ÔiUٺKSԭF𧻓MZ@"Y؍y?]yz15rbJrE+;(wΦBqb -9?ٰ`kHF 0֜gc5ꦚZHBqIX '"s_a2SSP!  =5w]񤶨=WYm矡Y σrcC5(4],8/_}=l!kt~}X\\MҐq!ئZP:h޴U7 V&m:[ ҋ40$#\KǕ9:̡v[3:_'aU*)rC=z9-U@H \;ó瘋NC  UDaBd͢)a:l`ˠ"Hm#ΉE27"Dj`)'ZFQ58Fg;! cp_N%4X*}fh_yqΉYH䤞S\K-:øcֻgo^ M3Ȝ"z|5}7 L!Υ;fݹq>>X;Q DC:eM8#=1yL_MM'6^g"I`c .Gebq9+ASK3N @x'0Dg{ E3, VHZ cb4zsMo"l nCfɕye9Ĺ*SnL F)S*vַvHU^xM*08, B͍oUuD))t;*i<\߁򈃦*;$OyGZD@'({SAP.qrGэo1ޛX$Cӯ.̸. p'j ט;TpBmdHjB<අu.hK)}s;*KXAw\|kD׻|o҂(6aZsS@\ޜ1 1CmF0CS Lt8DUffϯ_Lw_?i(pvP`T=r"34BG)k|=qGhQ_yXt2xCݚlq IM_ 8Їb]!9z}bl=ႷdmSVt@{!LiC4Zkr͊J6:l7`M!ҋnڅL+$'o-s01d_pFHqC~+is%[-` v.g:xb dwaZ)mpG9 d=2 QCz3q .q!$CQt ){4dPümQzSP-l:u&)Ϡ~zjU{DШ=Wc-moΧ*볖ѣ~TLpo_`7jj54{!SCNv كm|6;w,4JWg:~ Љ:b~,Gujh{d5$l7euG,Dq%(R `%$T `r%bY/ufqYg gf>?w2^@DI]i&Ua1hӈ_Z,%[znU\^RHbop34J'5. Rc ꞒJ.{Z1EEMS@d&v+* 啶ZWZ}5r9y9r65~6q Vs{g!X&<̣o8}2FVH'p2qeZyxq׶ŚU̙Pþ{,"TV@h2neM 7| @[@c[n8:f!;A~چ2g?BOд|^BwT.Cpܭ5粣b&?$/(!47ZEA+cR"@N+(ic\8 $Ec~qKk*ia*X}7NCшQiO*/s ߯ȃ,pi fĚ7)ERV }hzLԫb\ǎM_Gz4NNF+.`},Olz =,<Ԋ:F}Rm/9Q2<Ȗ4ӥJK.l44;Pq:8-39ߘZhYL :l~ď /P{%ni#^cm'm^sēm?|>Efr༖#J2Y ԖY.0, ɹOlN}*-"+R\X?- :* 0M_JkW$fpF&0pPd8vCda@EbIiZ~ɝlLF9g/AG@"ϓ|~vx<8t;I@xpPxHO 1L8)ա $`ty QK$Rk'*w~I,)yڤmA28aq7w{Ӹ]RzrqgtLR8{*6rOxgYdf1&8+?qyH*6cqN[LtcG>0Rp߲A+ ?Ѯ h$56ҕg)_Sc2VM hsg;YV7coQx=v0"ԑzFi֑!3 :J 4})4OأI I~)`nΟjdӰ Br>YiZ^썻7_Sֱ84z$"((E:^\e#v\ Ԝ\m ؇W`/ؼ5'KvF?+]KAħ;p| L$fIΜ5g~Eoi{9ڧmw%:U{v]Sjl)5a\Dl1qҾg-1B+#N/'M0.򻯢"tE7v DpV=S[_={;hc\ЪVB`7I{&>T%,bz *⑃)K] ? ˗!N-;18r ?s۝+G`\tP n^1h~[Pz蠔v~< 24ЪYvCZCu3Kb} ʒ3pʎ[b^rҰlRnQaExQNɇ^giSo[-ulg8sgsQԎtmf& 1`ʿ.(RbdfuˏlƁ* S@SWrzTjo`oX z%=ɸG LV7gP ȯ#D"z)b媩0hzlԘC+J?wIBrX.ҷxxIڹ[U3$\2P\^8ڟE jȌ sފ!ClRky_΃a} #44c;~HfDv*cYpr]>:dr -nfŞa97 -^q7!Q(2씚9c͋.ϵj\2r{r[>+kQ3֬@ō9@$N}Y9_WZi1h9u۸s н k-Jl+ lŠtsmI{V#0x3iw |ٲN0ѳdf$oFWԗqҽs@wD?JbpRmW8xw݋<ݢ~~>Þ 8I;(uqmli8{Ig2RAU<]{Lcj8!$АE30OygE"ƐsMߐg6tWL^p9Q}\! y~1V@A7g0֖ axbEyD+eEN/ MEjڵ.~3O;ͮF (d?p'H0E'B.Ҏ>qy4tQ_RIc-olx Ēf78o#݂Iܛi*r0Y DmKI8AUq., +vTsKby vx̰F!6JrP%ќ0*.z1$̯@QU_6'& .g(l `RAՌ }CvF_, 1LtRAj]y]n I * W on'[~(__tȱb;.I5,sD7E`ՌX&)g-bv0&g$1ܢsۊVu9173[% O#[tiP, y- C Κ] DX Oy&!+14}DS^? =ξ.qAe rQM!v)|d#2F'u3|3Nq2H{Zߡ+0 .> 6c3u737MP̰5pqJGgUVz|&]n?QQ=*9曤}- Wj_Kk[m&j(ckGn_זUsepm@;i=GsUd eGB2=1'@XB5G~s}ʇx wy M@c#a@B%RDܓro,ڞSb,0bb+Q%^6w£hhF"°': B]J"xVX{dO|҂ ^8OŸD³{< `ZMcD'Ce<28Cy2xUk.﯏%Ꭱ caP0lB*Z{ot^7tuRHL 0zy~6+Bsa*=^ɕވJ-%80jEZiaa!^x37ZL3ﶝ-֌<3v2^eӋd QDVq -iCyZfo}+?$Y(PE6)pWD7~@~Dʢ(s[ID4d+Lr]8}JM*}ݵLԛ' 3,$8ߧSָ33?s@̰Fn)i( Nj(u|RsT/V!aE*~)w@xKcCȳu5ŦI%aΦB~u ? x{R+O: =񣋀$3ի bSKO˴gx+RySvwIv`ٔys6%;.+#~uj&O&TF<5 |f=74@ӷNJÌsO8X`cɄDr׌й\S)RǬE0,unpu Pg",7d+ @Sm̫tSf%}+Fܵ0NYʵ=w--J7Lgc9S5c4 >)D#zc,J9_ұ#$xG b1%9q*{FeZʴb I )X"!zVΠZ" g0]ЙjH l& ^׍Tb) ^=%F6xIN^{YG;D䷒WN+T Bt:mBnvZxv>-%\ z$r\$f˩y;@}=xBuYXԞA41̚uj'1&!FϷ8^Qc{߲RP905  Ǵ"C[nF9Z LO+H,q硂Z a;37ΐA"B<_:y*_}T4CVLZ;]YmL' .2 CGe_CO$L~a4QRNAT.¯|.$<)PjT iOasɑ/a!Tp [ՑEC6b"1op([_'TK<*vկo%Rh u.K4\Tg|Ӛedd4խ7@?Xw˿r&*ձ,j/x^f۹ :~7JjP:+_wpG|}Ԇ7$wnD}*PAHYg+zC~jGUkQn'eAKB O3[kMCB'uݨ!#jϪ9hE1g|sޞ9 iRYZhS EkVj)C)s즖HXPp<*FQK-Ip?;_^G}bo1fߓJzx*dtu_p5lgBp(<.ǛUK$㡃Yf}Ss 6P[S\f5ŗ;[:SrYEfRoENBy]uh<}_mj MOH}»Q+Ě*r4 툮+ @_p;Fm!O2i}ByB[n7Q",}y1StRo9!RW^[^4nCz wD(C=4'k N3z령- =;#2 Ӣ*M+?l+},pӁ>_D_ςObz;T6Xzp,t@#I<#{$9t!}&7KXzRTHթ6K+CcUp!Ωb:HM ̋g|Cް"*+4ko>vKPQ+=W7k!ġKӤ lOӦs'2P$E&^#ղ3QrY^yu3HqY5\8W%j/1RX=q3aNG/ #Sng:OPٹM(KߛJ^,J܋6Lʯ,v$V{}ODa=H6}ՍX}))E:IֲMSXԅ4"kH vmBC!ܬ"sxF NHuWêz# Sw { kf=~ޑ,7zua_"Ano{*//N1`S.t ʮLȯl46 /N:|` ï6%=67V~υs␊'v*>b"R A*#֥w>>Љ%Yd\称K١Bt~ q!8kj'!u춢F߰h"&741|.<)]ujg1ה˵ ÑRYRk9)3./<;6B,:>)FMJoOE .caa6фty1?0߸B<ؙQ$|340B*37Xf}x9BQjڳ-M+: PL;sK٩X3i L27(E9ag22.ŸH҉'eUO[+25nl`!4/P^VM ҇9Ơ͔7Y'ۿb혈7= v>|/:<H< $y%P#d+/*Ccv BGd77=y ,D\XkmX}&pGZC5hQ$RRc/X"ǝ0KH/yHQ=Hnp=~jU(m| .!ȎTG L2RB^">'G֟t; ZoK rg>嗲'yhc΄LJ|wG`G05ˁc&/%&`m66E,K4ZCrK{ֳK4'DgOLxѰja?{9WVˇ_ ܲE()p"$Z.T-*O^u6֓~=cg&}%Hp);Af!3(:[CRc5_F]p9&Ŧ?dL) 4l d7!'a~|ё!FIGŊI CV3g/J"ksQ0tg!|4zTL!gL9iF)ȇҴU[bؚfif^7)Z/3U:lG(f-qb1 yvf+^;8g'rvx;׸WVvP',޿+3K# X}+*f%Uߵ(]LJ{40"4T롱d:Apy+9]_ID]ȟN,S6(9n&G2qYrTKlX핚EX{PTPxMWa]Z 5_nm+~~3@֩( 5T/ي%ᚠmVDmtp?4+˜0#if,hQ}X Zy)SO!;]Bg5v}+ >_rۜaϫ\޼.P쀕ৠj$֡b=cދsz& Jw8 *L_(bDž-} l=$1\ ?a7cd@gR0-7.=#hM( H XqaaÝt\͕hqhs{nZoJB1%# ~ΎQ XyLRLqg:.i>eP&pTl[֫CHԲ0nI,! %8)e*{[S8]aczs*)#Vz;_Qu)ܩq&o^  U5<'-9yjp gRov$0Y$p]ϣ.g>֔eh/q֑"3`ȥh[?&6>M| W@<ٶDMkOKC6[AY' (c[1 z|M/~K*p1-t.>5A֗pi y riml@Xbe =Was9v^;&:8x\7CBs|;}5yTĻ 7^,ι/ىMֺ|7*WO[nkB){V > C}?S8m$9;?L4_X+swNzSCY{+Bz bB>GJYमfjf7ȅ-npUzggup!"4SW$UfƟߪBC[M:}sedYCBؼkC}ﳻ]Ng};Wk"uDj8ȩ,MnzơX>G}Um"/ߘt1<o[a/6cFgU l[1 ;:ks5%a:l2<)9B-b$ ܩ|3:"KW!  K. ujX5D‰ \n\O{"pUS)Wz ̆CSx7 \j у&C`Mio%W`Ȇ_) RMLy$8)+@,dc?vd41yei+ DAL iiӿ95]:THaN"W0]VShE&' `ig}Ր/Bx4ETDyQp޾4G⒕u#zVHž˞Cn$m$%C ngҌ\`_t*HhRS~sEt,0f0#NL&JP^)Cv̾X%5,hZ"(-rƥ[U;N+b-Hsǟ5)@Pzy(Nn{ MW۷ElȀ894kA¬4nJa85G v&Naw?Gk()K1 EX.l*KXܹ}mOt<7iv T6zɾgjc3 w|^M@9٣G5kAe&o7[S:H͛Jẅ́#Zܚ ^xᭌicJivuʆURKiSTCm>wwK>[#er`m2D [Jє iz8P`vGh$=Nx,)u=Yx*ϑ _mL]FϪ,2C#8*[VR5 9TMOsR&V!  u:ݹɸp-ו0 1J"Rn77E1b n{9^,t䛞AMdg*dxydtZ8:[~9qI[hN6 ~' 0M 铆HN=`:߽V@Du؃ZB` qvY1 e3x-~M;̖ 8w*҈( V6s VCfJΆ!+V0/d/#v;Wofؿ%[\twF*a3KA&n>˯ g9O"_aTb7PU g_ @L)Ca|9 ߏ?+O` aRW~gLcJ|_ Q y,NM{ ǜD*pGݯW 8If|DQN1Ѕ$zLCAXa sjie˳:ǗُKy[%«x1=%5j0?[`@2bUuVrB!/bȼ Vq~@=w|C|T>+*[x!3WO4?]=l":-jB,vh A@!wp _Cs`KgT\}j1Zr5VnxY{j=*.nâHy:V,.sXjق UYd&zftjq%1n\/{}}{qÙHu}kTbt_#㜖a[92_c|P6"Aoy/Q#a*o:mԆ͡`e 0 r׮ h o 9_2ji;\?Q﷬0$E5wnQCgoeoiy8+d :7)\7(Z8 t)!qcw4c mtb2SO.2fm@L[:u渓0D"_w ^_!uPbr9'$&! ۦא`jsB6`ʗ xWAb[Hce~.Pq/Ark>A!9XN>XHdVZWqSF j/B-C~[&ܘBUFHϚy##GC.4[_0PY -K 2P% } mXnb1*=z@O`3w ax] PI5DG%"$Ie'q ~x1ElߣZl,.lso n)&iJm4Xy7\*E8i w+*{ZigMS5 J@аP5vFI5Kн _"іﻅؽpx|h#Er.8c n):7hqc`Xz4tl+: sB5ϏfE6g+X̓n߄_g-!I >%!Nѭ~"BxGۂb#߱T0 pZ}WrBu5Oڀ3cJ!ɯ_?*3CGό\Co}%f%lQ$APph>O2FhpN%d[p7DK+D")4ݴ˃װ-JW΂)ܷ@Z$wƄ|<,9,4*If0j=TeM\C/a/C -l S2I%mKǡ["I7B  [!CX4+ݪS5[B Fi(_ `;O(*h1(zr̙ jRSWS[ }Hf.RBNtʯ"S$Lww>OZŖ[(%ȹ#x:W:$]Na$-MwIiddW3>(5ѵxQ/*QDp$@H029䒪TvٴZ5Vzȇ6A7h,ԧހ .]3:("tv RyoW]Ldke6Upy2i,?T`p!.SFcHP2QLAQ*$%艥%`!QU|5 K3Er~,X6w"Pg> O,ri*Īͨp]",8OT4s|տ"?OQY(me'L~"Rn%H- gW^0gc(T[[ā.OsVT^ŤK4V:gl,`BۈYt dXcS{%ߟv $>4#0s&l%/,a`:_nI_RQ,TV~'_'`ў';.UɺBy7vP%HxjnFm 5"56>G3vztHYm_'hYs9Bd[v{P)Iž)|X`F([ym;P Cʝoժ J&jm:Mz$>,&轱s aBHvګ'7ֹ uɦlwbv' OpK\-;=m,;EhA@/>lbj^.I14Y@xu=x蚂[wVĹI4fl*|9@ƒ]yTTA`Я)B&K VȗvAMIFKe6^(U̓ 9@Cy :$\,5oiXwqͅX޵Xz\ ^!o!+hok}:s"9` kZpBkԌb0PQRZ&cv|5L8%m *[]T=գNwX)Ojٚ P3e)@OQYKE_(E ϫtNMe+Yq 5;0^uP{׬MD+(Ѳb,SRHIJԞ2gQ:"wB*6!S$9eFmW y˃KM-Fޝnփ ҉բB \Rr|H`"u2@RU(, m0ؽ#0NO 5=sGv% +~h)GPH,n{LR<.s|q$ѳY KfxZwL_È&|Us"a'87B3Y#֯%Gdb|$`wS#-Gma; UWQ C_:O$s_=OȻrXk!y(aq֙*hi JX^ΫwjMuqN+!V> sZq4m_K'nnϐ &\5pǂ#қl V;Ql>tK~F"]# Da mYby3 l8r 4Lx)&\g?ʮ#{thM[qA"'l_-|u=@aJo/KqB$w ̗VDٯ.sgn"}~>r2sEc ve o;dxIΕcϗ=-AVPo$[=?S-lf^V@l^6|W'Jag<+%QV\AX˪=~æ A$R'1Kvk5gBٌ%fk9Yx筡p\(Sgm9ɒRo\?p J0+*lނC".Qnޟ yvPN*T|Ԟ€fA»H3OHɧ_L[ͳL%O}.p]O`0՘ZODd7^r}!o!s@2z, }plk4 I$Ulr _m 4}9b>Sx{A!{6|cOf Ϥd!b; ]J"V\gx@5-ºh߲nhitYUiZ\$*fsK/Sv"3ϕ3Aq`11`)US,g2Fϣ~y54p)14Qkuǁ['K`|;Idv`?6S9|.rr@O~ˬg+%gx0Xݝn"ZdaXg:Fo._.T^8sg)CA@Iu0ꌰϛBWOC!Je<Qfzm~D?4iTo`HA׆]:p_NI hiO+I!ݗgl FU²4EJK:{AƴnF`4K Y%uSLmn{V'}⹱Zn _,H1S/*9t|s~=Ny#$~1*7/㮮;4J1Lټ@.EHnh`@7OX1xnƧ9#4` *'O<3=}np; 2e#f35҃k"EC^eIhWiO@GrBDu@EOՕSnZzwzt^uX;iT., k=wɝ-C1c/|з Ivj קh] ]$r:,f5Q  DRnkAs(eB嵼֋zE2W Έw˛} y ?':qBK*RsQ seܓmKη5*=F#ẳӖoN`z]o+X>{wֈ W3?V?[ D|SAWy)ds߃ts c{Qfc@(g2P2M^gV:(P|{Zi0Oůe./2֭6b+d`:q/xIBȳh\.Y~8ްqwٿbv&X ŨHKHR"StfoOy;0L?l^܀O Nvc%E؞ih`>:'4ctZv(~[q`Xar¦ eSJw3Q;j j8 ʿ8;ZϷ.]O^7#3~r;*[>5 c;&U'?y⻹Kq MC-A1kd6umW&4K1X 7 3-O*w/D69p,D/>`%.wlj6ʅڠIp&(u`بq|0W 2<{RAj\L+h״ZoO9ޔW;24fʙܲ8™tSNb.duL^0-(&t܎pýf=$0@o.'/;)Zqђ_wjVho<zXdc㐸F|'㕢sUMu#mirRoWuR- yDi:2Ȁ}p,jO nҊx K{d $d3_]#y<%+[ik5Zf5PrX~F9A;w.%y]]FsZԳ؅ lj HX3RnS>k dix1k#3?"u>95plTj7nF)RBo؝W,SP^[]Ru2M)$9zʈpʰ ͤ\!oZ0g6{.'O9 /M/: ?AY\q N1{J|M 軶\1oȝ5imM<eY hs-a6m=~=A^z!Z]{ E`5Tt+%$o4cd" bI]O 6tkLhxaޅ[, q?~̈4YgE'm;lzW߸7]s%R-lq %ƶŚȘ n3]'Snk Wq#N`Wlvp b(:QYdifybZ]3\AAruuI:D 8t… O]pΙ @$͖w>e.^> dB+j/#&^ե@]UwԎ* , h¥ zs`O'.2lQ"^ALs_.@Xh{|la^2NNK{]>oqϊ41aCh NHK2"h/Xy4@H_3K#MCia_pbHx[X`ͲT2jWHؕ i-<$3{_pge,Κ[[a t[t>o`KWDEKz5Uun(4TX@WT|X6Lqt-?$0ԋP?20z<>DkpIV;PU,&{TGRrE)ZzoyS vET5B.;5X`q끲"āZ/lEp4Z\6*p=;1Avz´&;6 R䩑ԴbWQIMm5аMtcjL)Xګ0_>pd}O(%S#2#2y #ZXyq(ъCL+ub@5!m¤)1[J,<_PQ;+ۺ{x}`\4^5㖡̔5Y93!R`e>rH]9!xSRGKnR^3IBFFMxR'™Lpg\,j ΢F7+TNboU!zor-]N6G{ /ΐˊ`N\, ;wh4H ]C(@BGԈU|ʪ HEu݋UnYVhV9AGdCul_3dzhX9zY#X8K ڗAoEK tΈT5ʎb<$E%DZyPbb훰!6?9~%ZMr׏JlfqWo̿#?z`ef0bW҄Uf DsTf]Ä, ?@`9X\E8a2f;P}L;5OEsoW#_JAލk[}8uQ5=v!x>u's[f) MF׵u8Wz;Ha005_L8lP":vX}.5f(pJDlh%"H9I(v]b_?O8=aD"jth㉣j_-Ymt-[&"yOg0\ L> 2HsN*6oW5ڊo)$.sy˒hqW }a{ur5ը9 N-ƒ)]{YVXG>e{O4 #fw%6PkWou\@:,j4, LEh6;pAsH}*ZczUtѠ VfY9_9A祄aRMΩ]u^=jcG5Ō$Q`'Ru#9Aju*0p0DZ_d1$+P% 5:gA&=s.OP]uSco9si-7VPUfv\Y"tpU<>ȴD4}!w6V a3rH%)SN,L~o2ޤ5@AgWr1i{hm.:}JJ7_˰|l0*2@4-|taP"*H\ D[$`[S&-fAH*Jx+#Ȟq?^?6M;Kj*:=eЂ -:qog"'ʅs};#xf@0 '78Q4F6DV}dtС,ȃZҵ?D+oa7hmFq 0,ϏGq:\7)TЪ>^c;88 K99C/?c􏹊>՞h[S i~EeZ*Qrv^Dwji,{1M|J 9͎** vtY.?iBP~_kj9p\cG,l,fʹcϛ?j~liB2zv0)L5Ysl߰tX-ջ_k_h5Heg>h`=U (ec˼nT2%ں@a.@-`Ziė㩵כ9RQ2I-3w87_'2 NFud0,.Jk] |Bu{ yN>,F땣8sH=H^rDdsnMBX FPQ[UPPJ% 2܊aܮ8DXN޷&H¹W]N2DŽ34+ˍ>'F^J?,6{N "PPlO8/'"I%\s(f[Z!~5Yo_3>bBz\~O +e@Xqm2*tȞ׻<'@dHΰHW y*o۟Gؽp1h@w{*d0 wˢh`/$TU˪rl UهyM喦=40Z .4ݡ> 1zg'c=iefC? ZfIԪHz*)!$"FxP'O{V΍2, Thn_q}ߊ?d0]@|6MQg'0jP8g_G9,I*%I[n-T0c: 8LToq' #FCD"n9.ҬMmRL{<̅Rx\fم'DPε1\njԔ-@$2Q-_`nd>S=$r5D9cZյpm'+rR"-7n6OE/FAW:q0xqI]'1mv䘤T--yO_ oTXM 4oG5zZE5V+E?/6e(o ؞w3@y 2x(`9SGH {o4t#s4OݍWzː_Hմ)R=4 rD* j]#یڑ4glt(>",x n^[jl,c MA{3KoqBSEd6!fOwU~x_B\ z_?;iܓ$mR~Ua -p>;T4 d޼O ^W ihHJ5T̟#)R\dʗĔo pHDr˗]q4iᏠ6BxT,! 5k ݏ>)^ .#@W'4<"5K4y]Ӣ>^ ,AIƔǗSDP7PP̀! ~f=kT?G?BPdBO94Yj8KeZ|>떪نȺͨLv+CBm!˓Tĉ+0sY=6ؒ2_f9u4higuMWވ#v%0Mptg.*TqםI8k#h=\;ח@|*cAh띓) +OX3oٗćA͠T h$l״ZM5dB 6=;22N916*l^OYut$ :Bv?cXozT/I K;c) baC袕@"~Orov,̊>BR!8OO =B=7 _Y9 O^ |Z#JVymR '.Vixq*l^G%tCfL9oCbZB4r%+no5x>jӒZ~SZ`+3|ڪL怰i~&|~,nL S%3T٣e!cӹ9T_x\ *^Ap6E7w1{j=OD RWoB%yrMӨ3+o[䗚toY8{ M> My dr^*kqf?b by쐧:hA, K8|WT!;P Leړ>$2% m.l]%a|tpC׵xUDx)b@gpWp4k~D"Կ.ݛ9 f>5X.w] 9' @va#sᒅ.bTvP=b7;qZ4x}Kq_#K3*[]XjT0Agw7(&&!ry'!#:g복b=D j6ә`orq+x)aV_?%c66mV~/77p^@>z;T:irv4o爠!5/h<[ _7f"$YI=a :%ks(F;E3xd mL䀢:pl>u@QLӎ;  iYiFAzX-@Sf\xx}OG-KT)wLo8:Im#| ~mz}"{ %K+<mQ߆' mJȋ-r9،X!k;޾U5l <̼⬰'[ZWOڀqXb ߋ9O;\hZyFY>f7(_ 2~ LUM!dT48g܀7K " -)+¶p?n_6=ԻNہ&[F9=H`,qD>Ak* l?Ni@f ,R# 1k`7 (+ο#skbp-bJM>s _Asj0|# ZOoeK\o :Ρ,~>| YT5K&2NC3%}/yЭCx(t1*kNj1|9_U8de釠3^HR&~t(;~>kpo׎P2 H~K> b ec#ߜ,=A{7bPνc7 &;m7(W /E#GsuϚBl ~1T0)Mqt4H]WVcB]`=H)LOyK1'':YA8]s89OtaV@\b؄S%T@jgRɊ-^Qrf*owF>R{u-Yds0z\)Mp$]>fR&K:G u&U/ws5dL 0.MZV),d.|CX&ͻ K* j%eL xZc@mn2IږCS93.Wc1P; V*h!):k*28Iӕ5$X!ZS0#V[dz8pqP$wQuEo a쑩NYg>^>μ*ޔ23xΠxfT9{>9#Yn^'kVױ, Sq50[9#Ժ}7Vg6|/C+nj^Ҩ ;>4{l^r%V&gpbCϤC̭qZ0l&\ҰdH3h5SʙNR:lnYo 斚*JP(OFo\v|'#kb>zDrx6 9 8Sgdr̼J*,CO8G *i,Ѷ  \c! L]oPM3%s1"_S ? tq%fW[Wo3̼/H8F5O}7gp,um^D풱‹vr-{+"@;fk$5Wfb8(Կ/ǝ.eR>}J%ѥ҆Ѥ}8JG+!9!"΃Rb[ P}FMnoٽ4= "4(upS7?01d@\uID z=6aݳ jrXⱊ2rG ĢWw>Xy*G-Q>r~*IVLxLStXQh uU8-=pq&thIUtiJ@ݱbԁ%j7ceQYzl+OY^$ 1}`ҥV#CU1P~bfEشaGG G G5i2* StCAqv2BccIGAjʲab7`RNF/e) f [-#T_FA,$R:MZ~ ۞"I ^L, _p#7R嵼iblx/\`X1Xm$@saW}Yw|,\, Wle3z W@f˧ØOji:ΝweKَi+>LXOZ$ igz.ˍ8m-yA&x<*ZX3r~sQ6RbBя( SH ړe'DAOiѳf\Oa7\_ .+0[B FJUz{гcsr Qw ??tWv=|xl\,c"Ԓ E8" !嚰^'s톒⑆u-DMv?m׍$:BwXU@*pXl*ޮ(IQo:x2ʣʘHߟd*@PyF*l.C5/. A{{Bqavا~V+8*8ڔI=:j!DyYzI8:"y$&,`G uG*f`- W_=\'2&j֡|x!KLrlr†'UA;J]bB Eگ} ao>fQێh9nkTĜtX5HbĤ6܎܋ޣxZ._(ȌBXjف,X)@er}鴀͑{kXdMqgYi4Gb[o.Jەc!Z]Qu|łt >+3y f)dj.\򥲂qS'GUl)V=람f$tf=gD9# VEDN\4W6QBDy@p2u_bbOD=pH8ܛ4pkΒ$S~lËj}M8F]:b5eqEJkvW]`v^iښRB /E%M}J5b7T4p!$Ʀɛf_JZØDBT !$8OP5̳_q|8gwxeeh-$VB5L$Hy$Uߝ* onj1gb=7lw68u{ @T0ל.>0#Ls̊q !%2wk;M#LXH6~'yJ E@s">IDυ%eah}o\fG |%K8+x3 1<:3zJZ[ XmFו5/7`s\n}  |u75?[]U-TbCBL7jjFoGյ re `l,LY0ήxokna1$mJ8_ %4$PiǙjFK/A8{Ԯ-)v.@]2hr![][yí "Sj4nˈ~e36I9+S\/jtCm] RH㻹]NghFW8[<+D=wp˪ܺʄMUɭڌ^(8u0;bb:V?Wk(v"^g4lTx+ttyx56/]vвtT_ՖD*XhkcC:F"K)DD>%߈+#ٹ(]􅗡 ,42c%kQ)b+ڠԦgN 9y6̀# W"RU~SxtEH/P9[rdZz $*Kb?c*ik5idH L[5F4N9ۆMdar8e0v PJ\8UK7dCMHwᓟDq$\>^[iضz'B'c/N\De >[)!j艆f5{h<{V܎^\OޝM M[wie8l#塚5d{0ڨ]N_S\ՠ@WQd^=MWٛlh㋳{]Ax*51+蠽txHN)Ub _Gfgt/w?ӉQ`L;e$2\ J | |k׿ǒ{qZ^C,s#K26T(^Nj[܇&g(78{w-ݴǯI/bXhӍp͹>)67w8f( ^8sH syL|hO'_(Hsp<$b}/+ NP9q6A8źARsFL%|&2ˤʼn43lL2}f:&U$BC+@EܻbEe.g4%gXv_(Yb}xJB)JYRY2GY*}Dz YR 9tL}ox' 'SF J,d.7&shi6h. UEOyWtZm8gT<]L?_+VT)DWbu% `;\e#'LBJt u+bxu+Ø YqQA^С~n٥mI+GxwEF[V^mFߝaNyaR@c)ݫfA֜sSXIWA&M L :EgJn]lg5GtF U5Hŕ%FfΛq}$?*V`@40\a q6J(vd ĔP5]ERrXb} 5 Kջ; QtY0GmsKpnzήpZ(n3mZzwhqeC|g>R^w s€e'`m(:yš3[҄c TqB$pQl<~1hQ.Z2-vuڃ?2nfP UfgYW4doq.PwNACq2^ Fn [.<*:zٺT.r=XGITJEYu#3kIaN a FTmRx%/.f::hGUrj keSϽ!Y &Vm8دݐwǠ#D=jXڄ; R 2$q&n++^3\3J'ފ )fڰm;ä O8;{}Du;1]dx[R帘+*q9])s5>+L̜ @ _z{wkb8S?lKGF-qp)ڧ8Y; `&~;˪"V%k43 &A^hhf#lvR0hWo<z2 QP}s XUBx wyT>l8HVH߾CWrB-qg4y߳5L"(҅k ; jjb5 -QI?R3;2Msvߌ`K88{du؍M}`n]I_13F[K ς&U@tН;Pvv7&;v kVߠlHwj1:ßrwOINDgJ*hy$$ݧkeА_Vgh*1H}74r6bts`9?'dHD WVXgf +J$PbftF#5;\ݲΏOLA Q! JZ*YJ[uff# 6}oUm[)nc2:f Fn*3>vD91[-F&pxyRT〿==뒛Ȼ hv@/izU4u}ׅ"Uf Fk6W檧 /}zFV ^vß8'6x,mRϿHk@̎gBZ:~秊W="4F ^ΕGjkëAGOt,u&@Y B_;r%EDM$ߦL>Rk)-zs{n n@Hƻmk*XH̀'΁H1fjm0EV%2'ʥ %.blvUk!e5)Λ!^шqÆ`7 J 0R|C̚hd2s"۹p+.3a}:GѢS#CǪB\|o-s^\}ߩ fJO ߑsD]ľbւGp*%mP51]pnaY'6)F81J»Wa*r:3iC)7[:gͿ MCݥ&%乎;q% inJA{rs1$\P\Ӊ~vT<ӯ 3G lՑ>pT[ۺ ٨:JwZ?e|u{Nw޳'9%Qk <)CO9E V0ЂOLTM2f)b~oi 81K'-wffzodq3oE>s(ZDނAuF ΟK h8ot%"Ō(;킜Bk/ou|/uRI#M6/iPN{ (h=FjGFlw(R3x7*t[ w@ޞuᶄ #80 ]pøa34V`jOp+ z""9LޗYOꐒ2'v F8R_{#2AGۊ_ uEn>52 d]boL( ]L+&26dXFRxj^n6YMWXp]:mHG; 29T@#D svHyECdPE>~÷) iۆo/C"/wT.J,3(3:+˂dRC5ĨbiCRHN;'Vu! "Ⱥ7xR(Iq:5W&; (ۥT\'ۘy/@Kbɱ6&AȽESߟe$A;r3~-vBfrA5FuJrZd)B0!m*,JQInI [ 7P:尻MD`%vV)؆`JkPM^L-Ā3lӗÈ6tK 5}xk":_~>8%>jJW۫fv!G0<g~8ZUf?&VM Rcnc$rf6j6 C oRs-)\ECg bannJ_[G(#pNPFyoo_QITg Z?ң5tgk] r>K6"Ƈ)3H8=cS4kx.9V&S^l8_ am) 9m'y|?ch+4ΰ W^yW fy X3gC%2Ss0xOJ.\hn>—LvLRd|IVkDh`L{*ʤꢅm7,mQ5>d kPB K5%ٗu>3߉GȐ[K[@x9wy#`9<䘽.FϏS\)>|G҈ -?n{k|=3ۈ*4=LgS`yFP%dqKvpUr|27$.-|'cؠEԱE`WhݹWc0V!I$#H)H?ַqoDe-͌|qSOVٜBŻX󕆔Jp9RȢ箕!=_tBL$-ihpAq),9x&2-NrkNPxjH8ć5̛zhr+1J.l=Us <%LT=g$*#nC{鐯@EN$c+-no;aOӣy|B??e ,_lI+<.QG׀m=)Cd}xLF%DMQL1H9}#)quTc*Ky9&nJ%;qNɇ^A> \&8R*yݮWrzC*Ͽ: 8iGdJgFID&DU S$t76|5ȭ1 ,˾L.FE#|xZgHgD֗ &u m;xto7iGwî޺YMm #(UYyws݃4N c29e  8qd0di70x{.jND,ps59m0˙vK$!ie 8"WYBR\z kYn_N~Lkwg2w=tSm9nW%a;7h Eܭa͊ϳw`13*}-8|:з~ESP"FlrpCnup>⮧;*/t+`gt:CD$UZDo%lV{38$r<`!'UHɡپX]YTUOa_R=KS_s[p$pW60~L}6%(ߌ#aXӵ`'\;-$obe -zCZ|fi՜Ls;" |nf>l.>Xb:͑iïd@ʪ`e),0s3wOͿu$_KqBTuߝuzh W!t^({i/d6' U[9kg5Ш((e;Es=e4зN*,rY(h*vHz,Ʃd@P]&OB)n Jee)!J?5?gQA b}XoH,K#8],A_mK2JWY8b=u{ ]$f/@a͚ 5+f߃ɰΛ-r.oSCmCƈo1LN(l ]Vpta* Qipa/W_Ҟr_ jd9nŰ]${We}mĎAYvGr=d CWmTʹOhfĶrӂ 8z\:SdjQ0^T=UסoTNVʓجt0cجI$u,  1w>z ]˹,g@EE 932>8g r,s}߯Y]ɫc~1"=EՏ\/ۜR&XaŦEiA+V+6j-K+/aAƂS㖓JC(BE5?OZ/T&EAM \( sK7[cLQQeHf4>X!.w腝K~`>AP&v4 U67]ɀƍxk/9@0o3 P |dāo4+Щ7qp <~ď2F0u&ch+HJ / .m99?I ˡ F1^_q?f#HXL}d+ X vh-ԙʱHCqJӔLߙΛPJid)YA[Z#d=n_IW!y.q*{nN*W ly(Ғ:}OWсKAL=[|\Ժr.P<į\G gqi2(7]>$Hy {R5[ 9;苄_ D&RW?c=!?J\v3NG"a(hk"{@ZG|6Smofݾz,Y|,X smJ~O ը?2&evX0Y3b"O3 R-JѝR@тѸHʣa 'K@HWՈah ^ -ց#GB#i5,*Fh e6ëU~cν]H]E`*ٸOyDo{DkrT-DHaR!pwKz;UxK`QJV{ÛRJ&:̝q}| nGb~wMFB xZ= >Fd੓Zj.1 9?Eo=ݨZ cHg]!G׬$v>67l۴eD6%W,6il#o@g;I ;5Z.Xt#6o9^2yv x"Vhz쿴IgOΒ`AN,Δy1V |PlNz9Ux &wS([o6UɁxixd5֭0nXJt [Yq*pIyc6vʶks3kBѨ}lIh*-?бT"#wKvn kV|_uT!!髌k=kf?SG ȏT1xD6ӝdav|,kVU>nr%v_fmP+0Ź֑.j c2s59}#x0 |ʂ;E?bBcUod:y*FC t@d!eKLU#2C]c皉>65 `"}ʦȍL5qP~gPR#{ N5)y^ghG08%-Î"KV!a2rG}욞2gfMhv!r(29S/4L3!BD='6u\AX\ pFz\_T_jd,^Y Q3&o Jlһ\#)a3  ҁ[+j=Ioy¶a,h*򒛒cYp#`z$iۂ|*56@Ƴ,Y\pw`%8c0H(4~w6^(?b;&{hG'Jy$K15>`Zuz*б _iV SANZ^OT>9Zwk. Az(}9.{.Т"X5?2gi?-l"vV^,B~j,{B {S\AFNT詹[HAvZϨ FiBA7Aߐz[x}Þ<%Kl ,(Hȼb y,onִhU㿡Ǧj*|b%ާiT^;@wTbH{-xu|C:}{aL(NW˸i qgyuF%lvk XRҖ^Ch˧Elql UY>̳bTl͑>sSkjuU_"CR3!vek4W&~t(;o<~C]I&0;t8ULeلJ6>do9^phi;jZ\!,Yi_'$CgN~{Y`VtAa~}^ RA\=$m7r [a_3)CJ5_^ώ[eO2J="[Kk4 l@ZK~\Ow|pRwm#O/Di L~ ~f\&ܸ S qَw's,43Ε{(`]mk[A3KE|3鳗ot}"+l!YL QBȜ杅I|i؄#/3S`ۗ1UwG}FqWu${ֶEK6I2j2A[=-P]hf~o.\j)* oV~.k8K1Y}SzOeu(j R IZM o;[h_wҹBaI?Z{UlB0$5;ߘNG [3Ȯ##y{ҧhVh$wB7J}:ц6X@ ~JГԞn #dUCMPӮ9,8(ԋR Nk[hb(x~akγМBfc5[ 2s $=$%\d% #=8naiܥEB 8Tϡ=xp8P$0`4,ShQ`"ڗoT ^<[[ʱ #,wwUc hŖϜj^y723o7&W|% ?wͷr M 4}K5_FvRIMC6l~RXD' 3 :Hy͋%υ=IۆCq[R>-5tɂl9zj 7mi$R3ծGIXԙYm9cz dĞPB,cX?Bgee+p>ƖlK ES,-q֖#kl7ijK3,3 F1=d)? K[ǝwd|g[ѷP?:XKA҈ǿnT+˜s\~l}Kh 9[YՇE54 e)Os*$[r$գ=CSKhwCnOp8D[NjeMmS\L:v[IN?8;~VԢF'r5HLh"B]g3/,%e8qu}|sK }8֭6[DupOg/F-}>/ua?u2Et929i@C{%F7Y T,Ēx'~r áx?[KNkx|ʍgeyZ=ȭ Eɺ3Žހv 43t]4˯T5 qи_텙g ȹ:+":v2]9?C;N)k𩧻!= o ߮`3Oٺ%y%9iE2YP& ߩVc}rqI ( o^zX:e%9lϱ mIDEDzN}E  !ZūWpƕHbVb =vxTfQ2'FtBU^< h~㲾: }q\ҝ+r\1fmkK?!p1Ys>&4=,\'d$/}.ڴ&ܟ-'Ѯ*,RbϳVпVy7G>mȤ&0LJf=,:POXx%cP%P])sW[^?C#]|Q=]S,w GRENg ϼr/J{ziBYpTNs@#Z8z_U&sNSUbEN«f@_6N`&[Yꃪ'j7lr$ }"mq-0Ai_JhuPh&Nf`4Yl31IT=<8UR?m{˝VZ-9<Aў`B=GAm@s~Z5Ž,$%db7s|?Ԧk@+DUO˜z(̪"GcWVcN5>QX{˜Uh`xߥ% !!?ATjPȰ^N's 7>/4'BTѹ@Hs %&gURӜdr.@i6FA1GՊ¸!XőM= [r@B!0j"ipf0%B g[N4߄pQ&5.w 2;3g^|cwG~ b ʸfmn]rU1In>͇L@?;` (-S)3p,Ps;/~o,`PҦ0,-Ѻ>B9)m>Z&ZoMzw-gi${͕RY"$8vv 4P=F$oo[44OIe ޏ2hJSrX)1態`8~>)zl?|Ӷ<`YlPD+Y>@zV4PXfq Pp]nz)z3x B>Z\O_)zÖ*NtV+ J yp-_f<7 \Om 녚hc48GA6P,q:Iep|+16~, /;>Hb,p䐖fnR`(12VDacp[Ⱥ '8.=bo!֦PxE|5Da[dfiiJ:tͨrPCu~Qw3&B孵']l} HBN^n$Ɇ J~io~v<xx$y/$|T,5Ͱ9']$ݘtOQ|FpKI%V wtYv{j X@"z2޳cDzoye'ibqzA!s2:JK*i?"wd,RNR{*?s,'t䄄~8@?$\dX.5 ̭&_ݧPkEA@7EܰWʾDzo5ڍ6utr0tZ$I ?ֳn#{ Q2cmoK %BCM8Zo¡[luse($"*=Vk uU)D70a+<.)fSymyy$d@e-1!cԀS:㌘^9XFBWUTw5\q[5R*/=,ZʧҐM N %edhRs!+^#Yj]) V4AL ?kvG(Y"聥.&"k'TiӾOT2gJ1 I#1/'&L BT{4Tx>Ĕ+ -筌U%^ZA^aNa"Ea}]V_t8FCD@E7qr`Xiy8 7hdOC 3 ,-iA5[#6yaRg,O+젖ʕUn<{Jye!s94jsN2q%@9ss$o,AW)¬wԊlҸ/=WҼY9b d;] %Փ.n& +hUjuFE'f?dt_ޡ!r@PFXVۢRgF%FlE)8` U*sZHO,'o,wy9lPw(bK<3bmlpe(av)|#}Ă$$544ߌqPХ|f&-.6Tjbuұ t8 7yIz(4>NMބ?Um?TERnZ:2YJ*xX(_P<yȣ>7G̺_&$b\PoBQ\zciJKroo*]q`"?ex;qApB0nwr$U\}nQK !~tǷ'+IjpS$Ld(J猔)głGw]@0?|p&܈UU6@[c -"^qr x CУ Wy3d~]tz$T!y[2P@^Np'G,EJ.VNkdW7 9T?ΩMAOM|Զ{I ' ;7琌(mri{pPGxOQڕ CQgl. D& O]O5aa;76&pPySiCb3Ho$:fN7 + |8s$ ,؟wv(C ۟+m$mĖ2P=#hr[5D6! ˑ0*MI\H_;L*x9 awzXz_ hoIo/4hcWʶ.NHӷo.F )4ԴRr=G}} %ދ!PJ9A>n4 VBpu#b<ϭ٣ ^2b`}!k{Qۊ.e+VuJ2 %:4}qHXu(ah@+U8~w0\k{2ylL/c%1n"O\h)Z OC*"ZL%LT8+ ! qЙ1v8nynp;1#pwFG/w&ʃ" s(EeqLhx^R$$~y9jZ^ʍ׻ş"]m"MیM#zɑgwҿ٢/2N9:!8O/<QÄzE#T8;+uNѴQV97dr6kg©w}BʪEY/zo/eYd) 1 8-CH4`"\\v!p>ݯFM=jƘO٤HI]r@~{%1fo"MߊВ mA*@G老~sZk! < Ξ6C9OZy? J>Ū:|. IZ *>Y\]{<7!E\eđMc$aT|jw]V \M*>v&{xwɽev΅ΡuBS7ve"&Z#r{ʥq55EZBJ !v:lyoS ]_(?\ \ኈӢPqIʬN v{D@Ipg$rHĻ Cܛ;a z^r+NZ97 6aQVmZhϖ2F6,l|teY߻Pع?O,I a@PvƀS10Fz+a։KE>y3x՛v:a7wڸe:"owƍh u9*.r=Y.5 +0SQm?f_ ݷ{^ye0';Mo cxmJ=\5'Vo Bwj%MUU﶑{p+#R\9 k3LOs~ynkMnuLj_ȵQjO16*N.J =@*M$[P3ooHlM=f˂LC]~=>IrmBql_Dl$f:Qxv!a]$BO/~骸aUO<@%ףkĩGP#y|pct0Y+T9gY^ox ps2Y/ dpiK>Sh|"Qy6@!9(ZrsQr#iy9aS' TH_~",y㎩':$r$8a|djE:'Xc\(Ϣ[z^e2IpRE~gJ$=ns2Pv}PJ*"LPҮUrװPY8bSdeX4[O,3G)ծ}UpsiJČ9G(ֽn.E"%Uvmcw+781' D}q=@u槣A:薴f~hqIŃB98N~]; ꕹVmdc̤O@Q:Z}=5]ST7o??2T G0倨CI(Ix ɈD\}%L𣫚P׌%#.xM;jshCf_1}m5O;O<ӯw?k5)@DiCࠚGMb:c Jdc)A|hi̲x[ ~DR>#z;j@/5 pJG3$ ?hK_8\)IY-޻+*G(k?XfCΐ5,Ғ;v *%Z&`g`_JcUMKdb '?ʌhQ) TП6-Gek,$W f|PV SYz9Wzse&KJ?7::H-M-D#7ĞZqtNJva廑c2@@oNg5yƅN%mx.m{{/Yй4DE{v|&_A!.d%H;M4Fz'x]]jBCJ#禧 hsxv-rWC򙺔:lXMBG\:TȌm!TPݹq9+F;xOepl_y C}iU9LW猑ѪJ玶Cx;<Dpmxq1!^ps y߬זp83ːBD]Y*WS8îh7WT[2nz `zKu"|̖Kt3ȯ)(/R^ș`Ty빬V-jbV+d(3~0K)x:v=w^^Im(d+7ߙ9g+NoiJeV&裖]{-ڒϱ(H4F1 !QH<^Xl_ UAy{}[42[)k6Kł^T87XtQrZ"OJ U-r֣ڬA[`󡼁dO,JjD=֮pb<`AZ%߂tLTB#l4Qx2saurN* `$L%|۱@!afm7\fb$!HeX pR~ZT熱-<3o ,9v)%B!?=-%a }ENMb|/s yzST +0oOW-1v<,6MBjV0sX1ZkJ7*S Tl?^rPs lfTmbB&W9Be 8M<ZV)YULxņ2]&o_AU2C(z\Ocu=I|lSXyaZf 'k;&0{ #\ PL\f/e_n=-$XS5Xq (][ xZURv},v*WFe՞b 5jqUEz{ bݻ#A#-#e`#'o*~H ~%\&:/ XBJ^$vH읪絡4IP+@q=j2\O` ih,ZJ#m9A.:|+$=eXSu^SfGXFA+C/xĚ ;6o|}KᘀpTb+u=6z5ڏes{Dw;yu.R Eegv@ӡM 3ժ lCˎHL~^4!h δPoa&;h48٩X}3 &Xg{q?ʮ]6mb{ $ QlUe"i*~H)5uˤ: Cb̮9 AY*.~T3|9 3UxX-lCۀ6 O}GBm=`Ń$GͿ'-hJδȣ%FTəa|wڇd_qryps)B6n ~|!lRRCqAߔ/lۑcv4yR@l4[ (@C !O7e;mN(wf98YwQ!Z[/ j;pxyqz2jnBiՏrz)LzxY730ffF%cv&FڛVGgB*B%ԔJ1C_[Z!{F鰲04y5D1qUo .rOcBpDv>i ./752ߊ!y/MS||Ud8[Olz _e1 Arxe r2YupF<9=C0'Wh_ `ϐ6ku8Uې^E7|" {ƀ&Zb9ataDp&l}`d.i֝r5?ЎUMstH9PBeQ4-i*AKK()1OriY?hP6`V2Gűv̂Ƭ/ލS;ECalz]p.C PGdrBK0eY-2ZlLAI5b4uv5Ў&zpg~'}[{YŐ@"6-"3*o6Z-5bD+,1$ nTQz;j{i)"d}1j5:wRWrC^yt D5K1 #gT лLp-7=( GqJȺe.4 tw,8<[2=Y wTXUK֘Dj1T8QzCqaBoJfCym Fr%''oSX5ph$uoA2ÜY. ;,sL-̯#_`8Ǚ<;]6_K gWf->'7!x04{!vafnY g*>!Cf0/}gl$| \Jy 7Yc?<%gzDhOpKG0D::0 jS}UmmUs9谴I~Ox.D4~CV5})Rv[&R*3jRp@l[mŜy"V"u񖰿ZXfLUpQ0'JzXgx𢻊aӦ腻Aʾ0K8Ì21q<($Xfrd:)/YuiVOPԌ ,vyy򽿩L|Ţ6Y,ʽzy5dʺ% xYX ߤ ę8Toj|>A#$<^ LUr;f aŗ<Ba/*BnFfp^kT]b4't>f~N١Eb)fj_3v_=f~0>nKe>ӸG tmҿxcs!3hYU?+!IacOr .f?ǐ{oUNP%Ls}lsXxXn0//D1.SV ;9k]:6%gr߼+}vVG`H/SG<~=ۈsJ]'=w&$ܲBP[v6K}bf­20XnTm>N+AEWضbZBZu$hJ,H7 S:L+:g/]_/ %zջY_bwM2Pts ؂썉;~:{$.B^2-ʦ.\|;.eVD x+ o rIt-n]edEW(k7sԗbsv9z-hBgGGF'r3rsTl9 6j,1Xyx|m;*s7.bZ9ݯ-+  5o'0>lsrZ;~tF̑y/!ׁ8r+gՇ^s\o. xSHh:u=k䧖nC4ulh&ah+5(zB5 ڟY)0˼Qwtk~w[Whb;=QLgu3Ͽ^^t\/6m|K4g^qyS'-p"c7zn3&^v+׷KP!J3OMwxչFyaT*6G2JJk6z'͋oE $I;ӆGvEb-_/QvWDjnvuw } yK0 #S7AfV7f>@I)r]-<XJ6! ]!!ja2@Ԥ~g({ X4psFs:ʜ^P94~XD&ãMh!y8hbOfusT'ʠٝ tsx йQ ?y;Ъo(, >1SzD߰vʄ{7Zԯa,Fȟ&ZLeʃ4\T<[rt[0sgE[`3i͎yV`D/{Aуv[-'m@1xf'>b* LeA.?:򥿒"%NGlHU/:NKJzDwj3ڈT&cNm; c֠ -.WF4@a-'\=U;_n*5Ts:D=`e7nf%dMafz*Rt DllMA0~s"aTgiMpQu;HC(D\[dQT|Ubh݇EɅ׳0:r ұ@24'0+lfZX}_w^WPIC>, 8)_3[ii:ndwPkTsQ̢Ŵ'\aOũs2IJ#ʩҭK }i`Br8ntS"#C#3dsP<%]c+xj' ,١:K驡x W%8HԷ[Aj+a&CG(#ptDt u0ƨKp %fc7 F!6f?0yh(L.ou? nr1Sr$Vż@EG&Y ;gƣ$դkJCBy+䟶PUC6FB+d.G)VbοIP`'`4?aCj ).r׼Nˬ8nBl9'& %R&n;v@>ǣ6b blO y-` +e]7Wp89PH;{:GDa@i1s;X$]c,!wi -wʧwkv=lN&foA@;xL{4#ca,-r1D"N3# 2&ۘwg'@H&k39XlʎERt! -lD1S%paVuNśHtl"Y[M! 14EzHF(0CE9J`f;c.*C.=d 7oA倸dojWLӓR&B$ȣ16{Pi||0PɧKoG{i['H$"Mo,yAgg'06aL|jupP=;v<0$6)L!&VB ~Ꜣö{6Dp/FlKJ HIQ傫! ɇV8 "Mg3;'IТX[C>q -HzG6US@Q8Z~kCgcHFVl=a%]ߊ(cEfL-ޭ01J 2o)z1/z~`0+ Ӱd-FDz<$ox(2"Crdk L8 H aB̕„܍U pXr4:Q=*0 [PQTw?`=YaϭDIQg?!7oZX֖zwz4hB~hed}jt{# QkAx!2_({@XCgp2߂*eYr59&\D=sY;cK[&XmLvu+Ǹx=cH}͎%[Ib-U.8'sE C b\yGrv=_r5 y DE`ղ@X5_J[\7( t?fp|an(w2%oir:-1S3%bˢtYdB(ysB5„!Oh9x}yX7FWRL^vgN}[L?l7rm?ܧMxBY%۵ؒR! V6e+:ÅE+-egu ;/4o9?RM݀@04ax^`S+VGł"Ev[T=SBul(oe$DXIs3&W)PH.7`mG8 "4IU*f)fQ7T{buXD!k.|IKMEp aRNTXPv'v2ySm/<Ԋ*{j$ZE\^&A&X].q2u䪝\AԈfڭ*0 jPF*?G:"1d5l(xC39PQ>A7;yXK9MK$7XKLx;@nl,?YMb_cڴ͌6-FjE@հBg49I}MRH^vt.6*σ2$ SқV*0;BgslLyU =j OzV'jr$膧u?}ͪT?bAƊxQU DRFA(mU0Nan(]b#' \ I()tvV4dٗރY`Jw eiC?JE>ÃdAlA=\uOL6$?pi}jR ?+aAcSW7%$5$,$4 \馅OLzAMZjDj#~E/>fOjݗݚ8Ηbq00=ڟҷV%_5 viV;<óϵs2=K=&E,x9)ڜKE!$4wNF7<`ZL\:4 r2Q!/YBdcUv'JŹ=""2bzo\UY݈*qxOwpE\5YU 'jUV/^%-63gDflp Cpcf#*ʹF1d G5Py+J+q Τcng ygpϛpU d5~tnG&'v0%:Q*Q(]$M=޺N/֐q|F]`VLO|7)$>v* )5R&VQqe(qÿQqhh6}^ӊwϢ .Gv^ jDۅFo+~iS^w47DU!cO5^mX:] 0TF@^Sy}c^+4pMLDW>~,B0aFeN?(Ac`OJD)>4SQّY FcM@[ۄTP%Kߌ!9[ec88İtw;e9gc?ϰ>ڼLWф;ŧҕIjvɀU>^V(CS UOv_O!)k(dY\Pt{F{RhYI,!0E񇹢hLA0'>V>2PtvcꇲԈ'gKDAg?QMppZp#z-V4OeȵY 6mh6?5x5T3+5*jNHHeO4gjP뭋אtt!n)LhWFEi\ - 젰yOqSz!1aWeނ<NV5;~N/F np󸃾D67\0vKyXq1{NSM;oLZ˯,:;+x(I tTa2 tiuGf*G\UdڣaʩDbR8`^'K-t9<&< /^PwGV eӘ!I.`gjS|0xC$|~r;/6q퉒2aGtq? :sh3W\-R?`@qv̚TN_ax.ys9ێ\uݑ%X=s4yA\¼QA;ɠ}%b(o'G{e1-6dO_VAfzxaL)60Af{ ϧӃj#p4u8`֊F];; N`$tx]tc ݢeRfÝ˻E@UeUWDTfS4v/n|uҩ.6OrFڠRVthY<mCZ]4tVg{:HlI Wo* |!]9s[ sp /ś^3e"xr[NR9m3YcrCG0 2A^S k!Mw%pnxا @ gH!kIb2neeUHԨgs8䞸q)R. PVnjHBĠ Ym0"E۵h9y`c4Ƈ=Z&g{1 ;yukyQcGIc|³'s'Fv aǛւ<`*L,ʩ2BżF)l;o]~eH&xo$qn ]ĂqfxlS`՚˨~^*|5D |wgDgJSZi=)yAKyU"•2S@Y/D~r^*=R\ 阹!a;#`ppa@Jν>o|zj-C/1P!!f坑&U]X3FXJ1u[dJtS2&ZzUr`3sRwDL(]PROS|u! @FgS>>C82j82ŷjnyTo]=sWxSHcy |F/ͻmS,X_B(hg+֬M@ bHo<"+ [|=SZmt>pCLR6 $ӵ*<"{YMqGvgog }YE@j5@V弧Breg&H]*ǀ'75vT•1Xr2Rt@s^o$y/a_OhWB= k&-ѴE6W0%pwR-({i=MD2hvsKAbSύ4 ՠRt!ds[=9qMUگQ \!{y,bYP4hRG hڥ#!tzu$dq bFX "~3?' P 4avq 5qZb- \6-N]pQ~* `TfoBqJuxb T{i^֕*flyf|1$Iu=Ss!5|'H pFwx^ ,vdW8X#ݯo9hW̲gۉGs-p]Q@2kёL=Sښ/E[6G#w:W7 pt6P-Ho#o}ax`Ph؊AI5f 2R ./ ֯{429?H1, 7UErxZmWjToGt,A7H{+= 9X$lW`ԢG:S.@˒dK0D E? m5*xs; jj?X;B8 }[?Ia _";OVPESgDlB̩k'hcmyU#bNla9^~˸u]S/zjԐyVl՛$N;'#s W.K:q٢r懺6=2>6^5qEH0/he jhf&L6>vb񸠪tj*,Y(m>'܏hn˷gT33NOZK^3+&4-v<zF3@q>d舋fBZZEuopD:Ј8uh Lq- Q|(L92f 8dw]ҋoGütqχ Tb&gڡ(CwaxE(R}ڠa?ѼpQ[/R]^(&8clCYwvdxu+ BO^q,i1 A%c}r_]@MW!P@W-*OG޷ $O.??Ui|/X41衄k(ln_ŐanEq,4"mA0[;A.!nOT+7 YVBߛگ1jΊeQa2: ݅ %?>.2Lʑ8KP ^xp,<,&N^fA .Dxi :\-D`v]^VFT&/swCq<¨+ʞ?6k);l5 Zn'ջ1_q(eԋ wa_AZ1J6NBu&;7PFY'>>cJ5!Y7~~ן-*sPhv:a#׼u}nQ?ձDֲdRX'>cU1ľJ_J?"4PvB7e4|"Bf @g-)#oW;.^^ݾ up[:V-'!\&/*c~Zag T|[B-$jJwe(ܵ%5}I4_ }b鋡ƁJ l4cߋjN'd9Q<nklmuPGHHz2^DWCWޫ0#Np\yy;gJ~ sR>CPNyTA6:/S k/5{43QbȑIuLJj ^am,ZHariM"g Jwtk$K\>nFRߌU[S/ ?J?a¹N#^S6ʃ]fpo I4<`A:{llKO84EP7ujN_1'hYj7,-Lƙ;N۳51R3=~Wć)Tf㊻Mm2y =e(n Mp՜ht/6'Sj|׆=5[IB!C 4L%uenDZjQ)%3%AD'bίڎddmH#qZ| wLQF$$W#@]Cg+q|6-XmOs5> کNBYvTD%;O*aIC789 }L#(ԧ鮭XO$imCߚO8v/pG⟯Do6p#u5}Ww%^_j3\*b&uWWrW_9{//?"GK>Z+a{ + ?b`İmF@Tin Ѱ=WMm* dkGK:/:ʎ@3Q)DrK8 Ѐtr1 5bO&kƙiFuop FjR8ND)]$Z)&.#M0Ƽ'Z]>בV{X2gm9or9wCA֭RC:qhY1sZdݰ T)O@c2GOG~C- $JijUR6\M<Եȧ*l`TrRHء8T0?k<#רU`zUZ2ݎO+cm9+Jr[}F{m;2bh^_y'kglpv`Źo^z+jY#k Ȉw( =Wbni:T̲>]-y5UzzMg.'p\]-p>ϕr_}#5dY=ՇI[$|;KP('dܞ*ZĎU\Cp Ntk0Gn9Ff0mČV0(p&ե<dY 4V~.;YB`o6w݉ z[, oDuh7D 5-Sv'bV΋T6 1cBBី5;6!첥d%HN '&"9d&&o]TMlX#֢H Nۂj"j1/n8 %nj۾;4IJgvt𦍸u5?{wg#&?D5 K} ƫ_` :}/\htC( [b{WN"LL;1|w&m :Pç"QJη5bk8Zx<1a:\@Mc 6[(S"#~ڜ0*+kOb-VtGHì gD !4sjҤcelgJːdoiEV L7FttMh/h{FH:nHYåmL`wƓ˭7ҟo}vh¡9(ތ хI\tפv_H .^6+4/IXB၅&,eAovJ!* /6g%3Qg,yB$Jp]4E>%+JNqt e_c{|ߠd2u9o8.QoC V)˹X J[)ZPO_#| `pw޽i#aH+Soƙ$w;;!q&j=#5:\|^rNL=x} ? * (;\u]%'Q}M; j W+_'qR@e4dAI#fkˑ$&;&k.Y!tqu_w9I֬ y[U|*ʑ0Z1@=p"s-QM-5| WovK21Hy^0*yo%z|ߩ/Wm9gs$:LCu4** kCs5i1׊W =_I"*w<TUŗ@MKߛ M.S_RYw#0]#4p94>iB^ܼhJ+ .&jȚe9Sq18 rP4oR; 3Гs,4U.NE XpP[_X8Z>M1Dւr]@G-{\8UZ0:g7.^tSÊlWU"6͌8:t]RDoҬh4m|ظ6+xb=,z,}^V49wI i] aEy F VMI !ĩEv!T4)a*>7:Ւ1 />Tw~$iBN" mMi8jα-rN2.ڝ(enLg3TY* VA }9,QJa}Oiȭ9&16B󛑞ŌE6$!W<9 GwZ!rpNMؓ] E9]2u.iT'2{` |E45襋75Ϯmr:E𴳏狊s(̟j} ]YbSۋnhn*Fc>s~a= XF<}:fq*?f ) -T2/:nTru)Qˬt`R[E&V`{93yuɾ-'}rl-, ,.N*Y1`!͸j?܉ d  h~ 4xGܰ~J܇l5.43/?/a4f!ef_czge䓋YVsDFY$C5O-ρ'1.{dzf‡u2PFU??S|>u'A'P .5jҨd`:7Yޚ}UoLcEÅHjK'S&٠á#g'hEeA{}ﱱ.7Uw;y@0;Jgk(l]d`UP,ZxGֹC9[NXo_ N~mUCa&k>"G!ZXxg`g%;ittY@6t!1_++"ul C52bgjK|~xlzp3' 8+*ٿBzBOd2DF`R SQyE}n Qw/*~՚=Zx Xhq8>T"%aoSO$RX4:?#dH㳲Rc^a?b öf u[ev׽sopFkO@7c,ۖH6rFlԺ.KuΕ>)-)7c%0&Cm1渄xS?w霳Rln)"qcO%DEOtZ a@ c"]Ie<RK៩id|y@A;_]b)6(x#DBRH ͫR4{`iJqv%D[׉w̵/*V?! f%K3M Ij/J#fWi(|^_dX 4t3`G/T*tZz]ܓԒSQyJPFN]TM70cЉRF)M @[`R#,w[*Dan읔hSnjd멺;`4v(~sZv(:o&s.N:4q.59\Lo*xVR]88u<ތI~ߘMYb D|Wsw~ܣ%{ζs/]ϖ 懫ےFlz.anbjxi ߵBKȹݾ] .\|L/2F!kuQ)1%b`'v¢`sl^jsXei=F]%V'-;9oiE_#NIgX֏BX_2r00Y4PC~7 + G;QN.UgTw2U)/~\B v43d\ xzk?S6"A#t\̤Mt$؍\3f-Jr{d==[ LNP[ЏTCx:]-wDL .C+)Vz佰 d L1pܢ{HNF볌{6WY)Tf|m7}QkQ38P%ko|E]-j}ͣrD k W}>;m᪓,@HI֛!O]ɺyOV6?2x-nm[l!4iR,a~״rG]?z؅*A7:WV*bjrtJGX4 ^9x  bFPEKL$zE3O;Jo<^-Ӹ))']|FNE7Q?G@sofyXɾݸbsw(l QmN`iڴDQ$]ՐīVJ̒Vi>U~A_)98 i0@AWfK6_P 'e譓W$+6+`iֵJ=|;H¢r B"jCĹ'8$Xtv|t/VaIF7WYg$~AyLԹǟ(ET2 2"ӱ6|.%5 %}-*ԷtOݨ^%>vymȍPp*eױZT1PZʋӀ@1q03h{;'{ źC*9j{57]ѕ ;Mg0K(p~Xͭ4le- pqJO$#AO?jJɇU Vi }3SU7#8uӆa;&&F5s-jbGNyqq<\lV-tBgBl/ctQ?sS~Kcѕ ȠDkZ*V{L7 ʏ`>vD[e^O@l?SO, wa+n"@);i]٣x$EJ ݄h8q޸MljN2H8M }L4 ß(?ZY0%j)ow ?-2AƥXO H[IjbV ,R?A=Sy/ Z aWdz/Xz ߁S'UqW]i7| [EXg}iH~ݭ.W\Qxmum NVsGud]$&>,$P~kCldU ~ff ۞y:g|=2w=n]2$z"7O:Ѽ =::zhX= AGDˣtw(_#2fHӯ6|D(Lr(Iϕwq8qCwf ̼-<#W2տ1 7XE8v"YB"b/U>/otXozO'(IF\i .s 1yBZPB v1WQ7-DMµGu+HҘw HV|VUiK2J+dޘ8uٳzx[dF"BθFF TAO bkWfi1vՈŭJتRrvMb4 N'ITa Pn<@(=*4lED tv Z!H2l֮DE#Fm- !xSv{ֵ 0 Esn]5,b]}Z%s O=FuAD/j軁%P~nfQ>=duEł#YaQ{VN:4F'υt)EM0/y h1.r> ՔE3[(8-SxJɸpe"Fi`AeANl~lf*j:#T$ZMV)d]ZƥQtA@= Q*nk-dz![ABJ_רYw*]Me79#;6QkvHyogfK0O]?jKRHL%u_d+I3:VZ.Z3 WZ ife,|K2eA8fϐמ`P6;/[=r+I~esbK1tÉ8'Z~v(њ@0־5Q`xL~E07728cF 6{\B׹CUM[ Aڗ wKO@ߚ ֏OΆl BhXYY)`L][[w0^N [N=PtbH sP;#5v*JCuV*T6-3kǰqg| :-ysI=u$ܛ^K{;v,7Okk2BKlmY: ;G2[z<$4WT.ZJ(KtkC/.Ľq4F^YB'TarnR C;5 '{X49p`X g!1"8}^aƉ]GxChvAhz KG S5S24TH"=߮jgr}S&-(0]8̾3olS"ޤp6od;M8DNCnzZS\.E)mXjxw&dj77|׍L ;s1)22Aa)N690,2{a1+﹑l3蟜y!=nPY1w>J w+Ď g2AAeQ-5 jQZ,oGaf!vQn=c4Z'@~g`v|Ց13B`zoḗR>3Ion !ԻQYV6kh\GŌDrLZP`|r"Y|yPsRҕ[Wh5*htX"דb$=K,f?'"844'\ +]äCZdߘ}/g?pYJ}F ~ͱN2D% Ql+ [PO _Mn"=<`?%s uBӕftĜ%qw-RfY$<Ԧ5_J0MڨǬԗ{(--S8\GAQOçvvfiL;=-O/ ı'9t灛F16m%܇vW)Pǘx0Y͓jP9 hj4 {0 7}{2Qk+7Q_ړӯϰ!x\;iOUc 6y=8Z~56m4\nӽivC]-2y­oҤ1|H }3R3*N57{;֌Ŭ6U/8o>nfN{y?k e@nr:b-ײx$:}4[<^!QQ4S)w@L(N"]43s|^# 1Vf"e;ksZp jAn4cÚ ,r@[9NFBhQrS&Š)i1El^m[]- k\^nJu٢-+mF6[>dCK{NٔPd؄f>(NfIM?:9&v{b@y drBp~:D9F(4 퓹-fHh+'h|h|+c:NsvrºPVQP~ [݉N@&;hgU> `t.iVc 2,LbucMDdv ;up,c2pC<\q]B3Uv"QQD Aρ~B TDk%Bpz̷M2|O>܎RRK:FlY(<3@1w"򍖾5M:_;Eme]|^!ą.Mv;8A' Xm\,[#>PeEVq}P_ԟF팭L3K"%;blXƝ7iTk5\\g-%SqycQouӸ2FTQu+W^*oilކ`n6}nݎK"s!ߦ,RZ=o_D78DVjf eޞ[=c uwk Jj-Z#`yd->c " gX%fΛ(j IȻMY蜸Ck68ոvR_'`ur̃D %2<'v||F3֚?f o(/|M|VTDՌkɳq\t҉J¢?E4oy[QDz5jWpn =z%j, b} 1;&*&_JK`zRRz#aӫ/8z,5jw2q`>&`T AE j*@|yXB$*c%l.:(!ܻO)0E)5<& }HqH[GK.$Ul:V \B'enY.w_L[IVXiiR3S=C3婟/&]8$5??Ӡju.a3{$>':I Sbm;h(1ҭ&EЕڪKG*C;Xd {)|Z]M/?w&NZ*k*Ÿ-8aju!A?XjAmwN#Fb ήZ<&HOj@/Y/H 6K8;Z1Ix?uX_Lg;8UhW#,vWWEH??Xɱr"R7r@fqA`A@}yF3QdC&Xo+j `Sרcć^րFZ}$a; )i:UN%VA`CSב. Q5ʬE܍>/*=KnVHEghЈ/<,O/ 2YQx(|ALdJw4kл5|:f<_y|iIn0Dx)N6$ÔBEHR J{kK8שte"ˌw@H ^DՁkԍܙj||xϚ'M.3MsH-pgИPE_Ĵh'BXArmhp8-[zN# X!xH5bD˧u,RkG+z&W)8s)"]LY`S\䤡rK~hҧ;!<>K 1DږcUqԓIeBmFb!E5Cv5$tGoMrH`)m _]!= m8أȯ<:1wr5?*6j>P9K9ApcZwgYuQ9}hU19R#ӲUHIjfgPG;|Ӈw-pU8rMl3j vĐ a_6uP6*]$ :hh'_#xѨUcdEHc8t Ce},E|V2 PI yl ZI+GXB ]M6mk(qauN/rHqJC8N&oxN,L U{ l1#UD2.>ћc+XPhuL¬XA-+n.y !`Zo4zGå.2d0KE?f*kyP%f6pPEFON^F271Ol7r5k3PͪE(FszƋ R[LmM>Y7\&1wtX䷧4h*AZyӃ}}GV0QQa5ePny& ?w#}a<=H{6gj϶yl;_dD gGΠBa[%z>PO[ygh{chkm sjוg4)6ʑš**ȓt@f! d2#~b"9:rQHK YF~E'_H2 ud|dJ%#~%J9zu;N0m|*{DԵLS_hY1yԉӓ=Hho@V%vVPŎ4;)Lb n?PԘw) 3|8KmI_$VA`XS:MO'-?Rg>~V*`A,8*{zϸAw5oW:&c χ]K\CBwYz}I&`@DbnIۋ0) `]rŢʉ_{ye÷acu՚ӊh;޹roh !݃%f6U/yA6Ztv>y.G҂izR (x 5KP{~vݳjvɐrL aM\F]b@}!!-(pAt'Nn,]JxFHHd[[:S\UX 8rlS;עJhu *P=Qkc/o""g-: cgs~{NqXyc^ĸ¶ ]&e zz+vvbfAr LX \R<$ٺZ$ha00|U\$=.ZüebPxPqm1iAFIVR$1p53c'JQpx Ns6}?y,SwL|δY:!}J:jdN8YpR'$h.ytgEF)#z`zɻ1;dk:yOE#X,R>VMkdN`qCHtQf- x-I;+L,47? 4'W)x5i@~<5z$8(ax#GT!X;Ȣ(EO` =t U uC( +iN9gX,`kh\B6#x;i$ibF \pV `'+=Ő3/v HcJn"]\%jdP Kd\LP)8nݤ"};cp⽛H˳ֱ7]1C "x:)S$ /5`7~+K(@Y0R(Zh'o c&^l ѰyЋ5)dR9MV!9 ix}Uw4/5頀YӲIZνewh{n\РgUd sD;f~|8P3eXtPif=AMES%Pp©wqܥeN ª)VZS5&MMض@i*tP߹ͮdUeŞU6Q3VP/Yˁm},KjuDia@5JZ@얟aMyzlSވy </"o ٘'pMv/ s-RxwwP_ȭ~B8_2Y#t?[B5;pl:qv`e& ~2|944\f0kRqe5+,#+]1=џ|+Й']DM۬XA3ŏz/Bw7iϹ@ AJ`{v`$ℵL~N$utKŖےOFAHOn_w]c,rbt\5iJPiPٺ],c$(N = 'J&^Xqs*"KpE&/V]ǯG'ѩ TF0Ȓ?_6|oG#t1>xܴyui0dW#91u& jI48@C5?ۮՖkN@üʼnvQKzfrέmCs]v;(ߧ5XYԠ! / }l9) ǝԞV`$tf _Ɲɶ`2l]K8vћrY3ZS /m= Y ;CIfຨ7r"ѐW]8IkOi%QG0;՛Әg=r3OU~<(s_{@vpY'asU>iE|xzr@=r cj!`-{;,EDzcZît} ?M>*v,A{j.ɘYez((&$T}dRuHF[}ik %m^|Cհi55EsBS,JhZCud5nC_ K@D^Il/\ GZY ? Z).G:*//p ˵Vz ܐ_Xk}{.6*3r2v\>PL8^w]s⌈h |2LdC#z2=-pE2:/Sܭ Q1C#mF0”$-C?&=Lˮ:.7B$NT7i*0nϫd>4s"*WX6C7JZ°Iᱭj]t1*V e~|̲+k[KnCbI)E@\&npv}j[QϟJUg m$iW\+k즖I!<2=f@) ӛG(-ԟ2]96KQ/sZ OӰz~09U`;9 PnjiThdls<ͬ:@ EKVHV k3$Dc:gQzP]Pʬ6 & ֶhQLIAPUiA%%GAþ[nD`{L[we?1 ["ixLdKsGkvj?|+apBbߢ;,":_b1^ o˺3O>E fMڑ'08Ul15H^]UG!{Ԧ]r]eOȵWV)}uX)>,l[\'vϗz˶ 9^sIReE,ё5}$NshgxTVƗiĔ^LJ.l9s軽ejۭгZmc{(57Ϗ5$eFpIМCr̎+ni ղ.S9_NekO9XB:NeԠa y]WO[x'sռn: )p5yݕiRHt!ߍ(20sZۏ×#73(Y&$xNO/^xm]!?#Ueod#ͬ7y+(1;\ݳƤFxՆi,ԑ1K`u0 /)Kl2Oyu;4r!9#Ɣ--+JS;DԐÛ客޾k] +HwS]wc%az.;.]d{9CCk Lt^s:H+cL`TTLZ3dߝRA%NmZ(2tf7$?Qt /ptwd d_xvDŽiF| ?oY]xM)qk0i_f;HG>0LYϜ`@6t ceqlm 4jO˨O>V7upN;Q?hXs*h^e,s ;suQgrBMZnW g=uYZv3 .[*DHaIlq˔̓7Q5WM gIJ_RTT+;ߤİnz+"-+oD@L#99Dr"b $-]nDmW.(a*03Va n K%ASɢܚ.U`IiOu~7Qĩz K־5}.sDS *Ց57[oׇfWҧdD\OOFesH:jG 7I\M_:颽`ұaсb;׈'=6iQ'rD'Bn_ke32 4/5UV/AoHXtg,ˆɁ+ɉ .@z;Wki4NE97JzBFΙ;aAuU|hęMg 1.8EN7ICnbkb7(Ph!ŗsS=e=U^ "Sr>~X9meDtPFAo~3@6lEL9 Hf+ؿ-ќ䵸hlċ+13jpshsnr!1]O6Iu13E@,145pYI|[<=Q] ?x(!)vm.tӞCxԛjH7 Vy_CTIoK&Z\1 R"o)ѵsU a < ={gmmzZ"R-KѬ9'V^T@+}]t@,'55s8|)h}KT9IG{ 6aC}Vb[)zxO 럼U3ˡ<ʊI~+[D/:y/?],h-_ij k'*3J[[/ߒX˫L❳eq'oU."&"|"-Ҫ ;\FHd%\KZaGQcF8J. jnh#(q_)uV^=b+fSew]b2OBgE :(ҕ }?LHVVluNJ wg{ؓrkbm:+Hp4u\n\A o5HWDcî?:suFzW+OjIŻ|ӽG0 C`^ƶΓNME0MVůEnqP1cv8Isiɨ2N4ڳruIګM|YS$T.MҔEM:W:k0YW J.lzU jS@Tm|ӛ'Bymt%;AS/j4,I׃;U 0J;W;,q`imt7?/76Jcy zrgRj'I|s Zrɖ}2M ,L#.;MUW◁nլ]PdKNVE#1Z?}՝ "hETĦ;%ȝjY:4xiL=;P!-vtjː?9M=2 1%f™}uRY}j5i@[hD_5VIfc~+Yܪ!~>y"j*4eLl7Dy44QF~W ea5߫g7`I8m4dV~T,qlo|%*#|< WZH])BQMR}(|fu__Zܝ[ڹ371j!d/`A,gLv<@FwizeO|؜|I mn2d/K"GKL[6aH O2HG`ӯ$d:x"߀T5 *^YB&ꩆ-m9cK jd:M0-Aym&lGg s/lc#t!])aAm-Ņ|@'tH(uZI)&FX`{S Ř \< ufC-/8bVrI-`1HnIq/' @HȩAעH`}e/"5p\?:g짧?Dy3/}b%/Gu*s"6'҂I|k+^ul".vt.sY$T@qHizƝH #cpWKloqɐ'f⋙&Bz$xPu۲hYX"3Vby/My=0t8:+׎G^PRn9"\hf ked\ Jնr&J]IhƷL䥙~jhovjRSwa4ק98oInXĂc0$#]M!nVBy0I+Hw[~-y˨'*0~qE rF));C^tw8%Urpgě?xD0(N+R\?9]1+W8)m~uȟoIA޹~f~Xe) f Sh=@ LPéuA/0jأy#^rĉ]C<)}pUi|A?i@8n/#Ot↣68g'`9&IYDR|O>xLA TzЖ5 sNHGLaq+TsjZ <\j[4Y$mٺE²/Z3n%6v!L"d!moͳޓB0'^H۴+YQQV܅WQaqCZoe% &9@'n+ʮ08ףpYC;k&%C+?]o j&άF;$5#hr"[F>3Uv6k"ze/F~12lwڦlaDkfASJ93 f.tl .QYnrP pV7'z@W.c;hlo!O71wM$( އSi;geYs9khOtɭs7,=F2pZ śp辘|jwnS p*|dĠ`+v u Hh2̄'̮N;f<5ѽncc8]Ng!9Đ0Qճ.tdiFmt:0$燼.~S8B" x.[yߴ0Ii9ƕ"VRL% 3@rY2ZM"5MY2I `*w5/$~`?Z6d s)5{I 1b@^(,‚ر2.2dHlBʸzh(v;/2{p@},Z)`9Pɞ<^$HTU:_~xR>mڧ'-J β mA\GAuaC"s*Gw!o4j/b'K( ,J$Co}99דc+Z.]%+шgIэ=gtˬ>l}zQ&<KMsX<}0J *Uz27 xT.5vz`?HL4r/B@Jаt¥ %aԾ?`G?~ٺ:V8E p}oJ*Pfrd 1IG;gkb#NEJ(H}whfϠF TB)웏fxK0W(m :#,~ZϮecV&?V#9,#6_i(1m}F+1rhX0,8ĵiQ/#,v]La弱RP~u=j611I6-%뎮F|o./`owD{oV<Ä/t]')>_Zh-Cg1-~uQ'=D'q_WaD9ʙl8),W0LȘXy#V*lK*Ӥ MWy>OK#zz~{\-XqkDskA6d(9Ԁ^a2}+YU9}HH(זg3bQ},nDU%F~9d3zAdqQ}v85ϖJC y {nZNǢҫt5 2K.w49L⓰dZLp8rmA'pWCɃWţP v3(zgz̘Vuzۑ4²oG:RD}˿KPW˪C ><\w_̛$p/ڊNذ}O+<+PsRO:HpEUA~|B,'ܡf\F0p OsBP0`Rkqsg{$E~RLYޞD&3 ӠfŌawFVgsb߸}5~@B#}d|(#(]߽~.qÎ\Ţ <\'o*pK>yX؀·Vo7~IR9Ue-?ߵ4z(\4tcd-bv\׋o{21ȤPXk5RN{Ʈ/H6X\[˥zVJsl><^*Yh,FߠO 0uOү<2|<ЇdͶ"Sb{!wJEGI{_UK& ćEmv}[.EYNJ9pɧ`˾֐1&\a\J݇Z1UqfƊPq3>5Bp3;5!u.pS{JU 2/ e DҸL95lcPr"YPiY_ë1H፛iȺ]]Yee\-_5^i`QRrg/Hb-BLM6"A5!4XC%ኻ t!tJQ(K_*#t%Rr= aE2>Õ+OmK1ћ/sr?px%l7OGC߲iq1%.ƇlH -xpa2\d^K>c] NEJ@clveDdX#ԯVYyY,s0b@ @3 :묦ClߗiL-*C}THFt'G.JBuO j\>gQRGAGŬ.DҥeUSBV{H^17eQr&Mg8`b)WbY# 1dFs,8MOU!/;p G;0@AAm| iS|48] ,Ÿ=Ɖ1]z.9~SaBaz 쥣A!m絝#2]rad]Sj/ 'Ѐ ]?+Sf/7~HBg7[g[NљL0\:Ln8M R~)[fEmm+#RAh&ѓlCql!aIkܜoʯv XȽ0߂ҧ8FFmA#o*#zUo.xN:°;uƩ88HT"HX+i߂M3SI|I#m$\ʓWaJ9DT.U|OA9$O3E QcP,tqd3C=[8B)Ipsń Ge2`&apI 4&q p!E7^2kOU"Fr=xjWw@mCR)uP-,6;+^⪉ݼsQ ΐ舎.^(l KߠBUIc|r?lFίc{>򀡡%y^lr@ ia`DtpPI?zMg["a ϗ@?F{k&#T]c#R'2N?]<χA`MJ7['*Y #ymL'ݠdb͐P?Y<}+tmZF {?q˂`Z+/ݞw6nL^rIP+ f;ea I EMZǧ K2[xYUr|5Fy)0+DGD(FnDQrcɄ%͕] N3SvnljKVaC= tsV2yq>#۶%:gf^<75`T4*1xnVa "X5>fJ^GL2׍"ICɛ;UhSGUJP+N;76@rT+щ"m,NGbBűUjB0I/-27W4zX?z_X .#ʗ6dE(sO}!0tj +]^sf]n x: wHtw8 n {쇟=u"̞W "qheZϬP<>{?3?εJYe2q:?f6gN8wkUX9[zwL\<ėTa3˿\{c ~ g0qZDb[Ul(Q}7Jςm EF7L쇯S})fx1Xnq8@`$'|r[FZ{o;RʉXà3o5$4$_$-sq_כ~@L/ 2|=0P| e>'Ujv|aWle5qmBJyΦ/$ַ-ة}CK ,kaf?=$F|6=?w*%Z~'Nᬮ~&Uw C6^S,P2->i"xЄȰ9 Sa!0c+H-{E[p>z&?uɰAu 9Lzcn<;ꇘ{ܜ)#=wDWŠ[$yא&n@q B.,_j,.78J^/p)2uV](?(x@q2R!JϿH*sPǬ_i4.o>_5"- |!{ə9ujovH-˨?1"a}h,c$E~y8!?oTv;O=VC,[`q(@v\4(TaLש$ ':7n CIª:pж@n9KB4 ~dmi!x|&}*S0%j7yi+iɋ XOȗI8̩Ky&Oh"tjS!/T--T#SZPbgD@H;2vl%uaWݯf8"JtD Eϛ6Ȱ(.c4_Љm[J:Q&g}71ʇaf  Q^Ojy7 :|aI.ker3aB$>Mz&B\ǟ;ң VqoWp5Y[qHHnta+.*ʃW;@dvZޒG1@Â{ro436yV cNjo"nD&*&WEبplCsށ}c5Tg*29 (3&+lfo!AFjP5su8Kkhv.o}i >\ 愑 tFcFZgLE2}7GA]8`=$Cn:7,֠1l f9!Ŏ- c|2ˣqc}m"m<6k6l}閄#֧3z7vɧe.]Tύu[QJٞ4h6W`GZ#"=u6^i&b8^0d:b~憏Vt)fx5t10!Phd>{]dnz~3ǩƘ up ,2N \m/ÀWrBXp oCX(d~3/(G-@갩6S/`i+m|k!TC7 $eIfIDno,'@^x]@\=FQ3M;lbQQ#P,6f7tz~x.gC:D7ggP% 4bQ|InћNJzzt.8FEϐ^ V&)江Ǵ`Ռ ЭR++;v K폿hi*jpMNՑnn/vI *;2(2~Cu)d3gC(x 0`JކOIޓ5ص,A~63w >"K"@eB2!DRPˍ̄=? 1_ tRCI'|}js&RWUǃ@S59/4YlS , &5FkTh9i`8ʀ5ILʶm{Y8жo-B3P ' RJ~(]M7eHi)-uϸlyGλwҖ[8຦{msf ]Lp%P\ׂ>38&< րQg4G\;ZD`&n)F^}AHf"q }^ s<3nu/mAr#bՈSâU~zS0t`gv nтjSE“&춠fA=;uܫEL!UU)b4?[a;&tTc~33_oJN,|0wЊ%8R.0HwPG#YleY)ԟ"u yBUt"HNJ Pd$)%y3蓝tap)ndQg0[k fd>x#Z5/^eGZnő-X&׬\Ǟ'#YQl*F c!AI[%, ݮml|SZ8WJmg]r "uq݈B\elJ@& n }  qKnA>JK!?Oo.<0Cez\ʥiY-Vກ%M7C]@(=:i'_-!mu|~c%1+Vg) (>c=EhLŲ~uxҭ"V:,cYro(AQ&]ݍB2OYߊ&y(n<ԥMhJC%Wj咉G_5j(}o^lIv8K f>o Cf<氖=^K4=v;{qXYW눦{\ţM*]'P^۹ (fhFa֓)XWg@YJzv#2*l;:ʆːd4YJf@71M! 8p4u@Hs{C` >|xZz$^& @'0si;k)6…WHe>*t#-cA0DŽf[C7ws4HM ƙ=Dϊ @lZ[>kλZM{ YHܯ` eԨ/ʫ*1?랞QW[.9=MR7p*ktIӂۆ3VGx#Ғ.8E8x I/V#K5 3?mVە㎳KI$D2z"F+}&U)-k܁)[< cR\/ќU5) b*~9y.=߯^|~I b/rx2rZ*toeJ!҄!ْ('3'e)5"`"!_02f[\idUANxRvO^s$ؚLe:^$R<B>51zYm,zs("2ߔz^J']m1yK<=3!:8S&6[[}D0nJm 5:wxVK9U^)2vR/<Fd|詓%Be #I[0sǠ lRX-֯̈Nr7N`(~K?[ 5eBJ2gV/nV"!˜!pAtwI /4X?W?]F=2LlH%$^6ϔ'E/P$bN[rI;L]qTu*B]ئ*n~#qg^; hb @%ז4X NI̮n,,>OPtɎ^G +VE7U2թH@(f96OR7X ږzt6TS-UfYtp)$\w>7š&%c%N[5RBhb:V{U AflnP.8Tf3nz t1ʟ^aK!Qw'=dMFiq҈%(n:E}J#f,><870ӁCa}ֹ 0nl8 CyJb([F0Z5o=sF}J,cߒed9JQޡO*L (nSiPJӑHsaVdaϟX0'>`.Sorv\ ґ^]zŘ90wE<п$^;s 90z_(}w1Mi҃=ztȌe?>7q{%oI2$_QPzNը({=xJ,hc>mi"U6:~ą7QSY5Q\`vԃ| gZNPMg0ss^ԚJ?;]IC'&*ODaH]-.Q?$Bԃ*K?AK8܈3?$!# !aCݺ4k`|Ʈq#ɜL%[+j #RYK##cW`2пpkERl괙aQ+_̐JNQv`Bi+%E/b*#,e1IDZMԕBBCAjH.v$0$G.tXbFXUWeeю~lqXxQn?5R#]}ê;li jeGW̛6y(GHU矛ŎA.IhUt%4IU1^N(*)=w8ڽ!js<('EzXfq̂?AVŖG7W m>F3Šyޑ it@NvGq̵Rd?;tsU8< [_L^l1G]^8X@{%'$ӺO& qJj#%o# bU 7̓tppGcVC7zs9s莘$,6Y乷hSx}Jz ʼn-ӂVj+W\`b*@s?hkCZa) c@. ceyK R~b[]J(VY. 曰3QڳM6&N.% |^`'qe4kV["Sl 5\KM=bfJ?ϩ}IQ=VY5ifJ3DrF-Jm4$x~ gi ^/Okj&Sa+؋96?BIE&~0Ч+k2%?:;NC8ȭ;v11 7"TD]OvPF0_tIBtOCW]1+.[vtNa˻-\"ELeddx1n+v{v1ă9I2ax?s%@FY('Ɖx1|\F M;b ׀eWӓ^xkxմДbf&|۞Uz Lf-c/?jo^pZ(OJ+6$vYBM:H) erg)kq x\uJ>5lsw#iY-P$=tfrKT3V2J`~h5RAyts(=sO_8`A9>T){pL`l`o!\;?fved?n52֤[,F&NM(&TZz>*:dkTr࢕.z9!V. Fj `H"mNaQӂ^]Lȅ&ڦT*C\c%,Wʥ2}r'R/&q|pz0όuXʬϣPtH<-)Z'"qsBZ%+mK6A`&YKGOsbnpյ _qF GZy-J&oCyy4*|?rI\hf‰7tH*Ox&xxw4$H\$XR }*7Ynphwi@(ľ:={QKr`vNnœ/" ޠ$l"o" gQ $%6Ό!Z~ʵ0GIAi!;"8xV_  k2×E-+vVs] q7̝*Cc/e_}~/UBL4z}T.9ٔ3 7zżbD2ԆY 0~&;l8@|ŪTgze4 l` NF 4݇3 _s6n$C]qec&#S5,&ȁ9J4֌JcX8 ?Z)찏w wwKrT,z4Pٸ($ӬFY 95^˄v~,uh+[P:Կ A` au/}ļ- BN$KOL+pvJ'})4i8* }<iL2ՇVSq3R/n bM'C.gO3[LX'lz֦={k LL>A_zCeno=:Dm >B)Sƛjլ9#]KHd <Ҭ\Eݞ #H+H 8R'SS%#p{£m[ Ps#s`Deo^J)tZ<$Y Q|jclfa(n͖7ǫ!:ⴈ)_WLĪooNJ~3Xm0cTPxM@oǝlc2@U($QcSKVTZpPRPuf|Lu2H&g&8r b5RQAL*+STO(zP 9h{߿b>ʳ鳩:, ct@o%_[T[ЧB% hqldN4 3>9\6SBj.e4wƃs?^DGLx %!d2aN]݆$6M9 ٠"(Cu3!O-l{w=cX7:/wz1wnkLkGլpwD!*ޔZR>@J#ME؋-a.3|ze޾_Sq=z*'NMy*Jqb^ؠθP}s-0c"{4Y0Xu^| -AcM(k3$|c+j@~AZ|rg#s1Ӏ`\tyQ+z'ࢂ?dPݪRl2xB<2oV6S'v;&I5vYhqUUrlLjkmBc/7)N0җA#GՀ! qϕW1(R]5h8yN9%9wۯz_YzNNnּ ʸhXg@ M939bS ϔA^Wdc*\-f#0 SP[hZǶ_qly~5Hn7RX5:. ~."ש5{XAYF;?Zxf޷-o1C"~K̹-Ug)YOM{>w򎾔q3$5nV4σuZw#Jt́5'~1a|bpB8(3\=@ ^aج UgQlţ!Ĵ c6OYm%/"FJF$O@t 0U7Wrk9x\VBf*Nf5+Q+|k=@x4PQ)vG=c䏊 QdE1usfY?&kΊ#cUڟoL^bN|;[KS[()e~kRbXsJwd qS%A)HKE0A_[ՄX v9W=/.\Uk ;Krsw ˷5t&ʏ15 Tnpc]w^i~pLz+<흤BF+5.>:b+QJVw^bqlLKwޞXRnY;0V 7E B -@Z`}r~Ξ^Vs2$&Saܭ\d/*zilFcυeZȷID0&Ees^}"ѱ_*5` xCEجz'$uH𷼒=˥}`;Ry\Ba30%Ѐ(/x0\6 X{ e(X^e>7u=:N+VtwSp$̎pQZ5HQax)&ཅ_IfdL4f?rT'D'C ,p*W Z..fw?OavWGt9>3`d?n;cX;E6]d@1,zhvA,IN T*X Ձ{]n47K7DBEWV@%ADu뙽P 4o! )YgY9uŚLYV 4=&f\fNŮւ1yczX x{<5_?08@-EȲkH[HKjA~ K<'ϖ ./ѳ8 SFXs7*; ,7qh9j\;O0t:JO֯2 U˱#wdɄ ;V5U~`%M)̄#8>0Lp.Z뛟1(~ϕ^']P]΍>P=N{Bn4*"i˜;t]vwьe>@Ay,vw81ܶ'iZ:O'QQScCB:ؾ$AQxQ=mjUJlʃ {cф>.\lB$ixvœ g X񢫾bt'@)ʌAdY?Kӿ>!9$CM隱%ZAZfW*dsZZ/;R2A[{K麤šNt\T.~CM "b#W96W#8xhxf(.rS7+*VFT(BOв[w< Y-0s Bfeܶw,^⾵";NWPWܬeufCa/sRhސO G:PdUp4?- x!X>3_;#j_hOG^XϴRX/l=ӕ*yd~-їQFF"'JGEhxC~X}K/݌ 0cل'uq'{\N䡩K57|C|u'!z{&+kSP=i?&xJsӲFu0J~26"RdLi08OM2׫9ڗ>7K9`,J2YS1$ ^!&Siٖv{f1W`Ir}bc`gwjDq(O!rMpn)! He6 D<.&TX!׽XJ*`)5\qɝ7$w!\%,[yB`b*df-B.Uqk~ݗO&5^gL,WᶘfxEj #-c aG;Ri۱xqÑkU6Hcm~o۪Xn0!>^ :|*vd1(į׃Vx4>tIm'].9.b9$/ָ[fMq /RWI0:eYŰWntW-z#*~1w6eU9N)3Į2OsSGKIWve T{FdLw&ċtF 8ljSkTk!Gnh˙ FP ~hGqo=lXL 1ʵyu첢IINҳ/O?靲GS:WK EqqDaAQF;:&=k5PMajx%WwC?IzzAvd)gP]}  Uj;⟇ݓqÆβ+3,Y+d#Ep\CTC&SW1Du_!~ƞO8,Ð%|% yE2MOtnlcXBUBPѢN e5MZ8b$3Z1OQT76h$[X0I!6+PMe[qUoXWJn 2:E=AtEܽȌv+nyq,x:ޓ':c>˂#dP &\4xVC 360fo΀/9_zeƝa1iM2,퓹AgԨVw[ަoKfz}خ.H6 Z2 [; ;3KJy̌wN6 sW ٤É.^h ӫitq a#iSKs486m(do՞y + GɊ~ӝ\!g׆!Ygm{^3mp6v0] vd<ÚR7BWm{B{DYY[k Wx[y= ꥄ6jieRQ.-ׁ}ܷ)}*#JT:91KX#0_S,(^tXӍW6NۙiUd*W_}-DZ+U'Stma(`ߌ,IҧqxrS%\L}x$_Db&m%LbEP4i7y_( /?2KO9lG m CpK6ρ_2]Ix ,)0l?5erF%O^Tawe^V_'Hzǩ.g:*]KH[6t![P]$'r^?SSlY&V[M)y͞!Q6?mVe0_]U'/fǫNFRϥᖝS+^i.P;5Ig?@\YӚe;;`*Xηh > zE:l*2/w"X:} +SӨ53:h̨JzS0Q!W!Vf5gNXB g4ԩ飉+-̯ZשgTU_1A604ixzY'V+zM 6N"(ZPuWvξu`7?;R8̴>tތSgJeObHUiE8гt>V g& Y"ߙ?txڷZ"}u^ǡiWTSx='{@b5 D9E쒽d`P0oZwF 4G:}ܣ˾*Pa~bQ+f;`G$Fȱ'e*.66,lڣ`C$&;tuq->2^q?"ێ W40(£&"mDHJRMH d()j{:i}u0,}x`Bʵ8p}Z:lY.tSǬ dnExYoъ!\twQCxȤ9j 02PS w#8gmGm0$v!u춎)6rӻDNK%lX[n/V=,H`oR G'@'lh|iRקLpt!熚F C{9ㆰ")2`臏[q1v?.tp#ԳO^ק~fqz-La/ǩxwQ|WC˴ɘVdD_J{ ~_(ѵG9S0W]DbEl`Tn`vnA(?CZK#y(--.#)b4:4ѿd]4Fr0`sqغ"c V)1g./> `GY=ɲ[&8)rTǿf1 u#}љ%] -uFA ӴɵrY`tcgc^[}3hR 3kĊRB* K|L IpҘ,9M Wfo68mD:3s.P2&RuXA\h\ͮB?5či@s\r7f~Т 損7vg$It}>Q9.ο\Bcϟݮ¯,S8Sbp2]G2NƀEX|0>ȏR~zEMMRRYl/ۜv r4 ({c # ӖBM*YSKB'bÎlk|׭V:^=bkÍPBR{?n?!f~6*+TrM3^7t۶z Sg29a)tB?>Jቼ9APl@tJ<}qZ]0]Sq+)_JZߙbh?vaWH8\*OZTGȼ4?3SV01Bdgr@hGqآ*㌀FXK a0"aD\{h,Rx%u>Cۃ܎<+?:)e'Ck` ,C?1I[$O8G5{Vڣ*J[4+ wBFf"=/m|eHr$I$EѐQZy{ɸ c&~Ph*!}:[9=s#}-~x̖j Rį}GL}QXyb^8)}j;)kز=A@ <"1e<@z!h{ {379_}W$ /4@S8* NYsfнjl=Ь 9 0wOXq$tWE, t Vq/l5c_gxU5>; "@It) ̆fjTy%=nl5BۉGHoЈ1>F0%=epF&"iح*L\S_+Xi+N'( - .Gl0{Vi9d5 &/yŠk=ӀS\dRSko'{q{< OV>*K9 }tD0t`v9F =_-5KNVpS:^*' if]>Ŝog}Hn4hu@:Ȁ=#lӛXU7ó7ǣB?`zIdT9?bdk=M):/,/~ر=~{o`#cI5s^$ ʇ$.S% uKDPw'[ǿy^@YUs^}tG*<\iyS7*HjP}~wY]SO.h^y/-q% /wU`D|<f~S٧چX\Z-VJX@N_kBm (6XԳ!0A? % ,n*?{Xm+F.ZDClۺ7pO|'N׺ƬO2Wv QFhcr}igRc/ av]ưPB! p/͌cW#p})`'`99&ER!LFV n[fRTʵjE ns#eU6.Xu ƘTT MSӆ&~)ʊd) $θYƚ.kk|_+Nʘ0Cs*4FRm>B 6g/kxsl2qY1QiOh `)4+l)e|5獰iŷKޤ+Ґw 'pM|@8Ҡ.EiB~9eurD:)fPظ_yaA;1vؓuXJ2SsLNbXgGQPl p<$?S QE%}Fܻ51(MFY61MJ iՇ5>K C_c(6*x-zANc>wgi)~r(ܷl3gsW~;;{!_&4'򁊉k,89Mpm.>.hG FZmTnm[D]uB#7l^E#HW9**f\œJIqP<Y#wuLR,Ycl!IL՗6~! Yxo: kPWݞ|1ab:VQ*G{ga&,ʡ2!;TC {K4![񽚔) Boc8,LvOȬ2h$uq'Fv7ihVDNz}>V"F$#P‡͒hu*>AB)1%֣]SrJǵz ?9QÝ8ʚp[Z/|ju΂</n?tGPci[JYjVdW(d4vcݻEq\xHϭnD&nP_4[Ԣ4PXNi퐎2ʇ@'h[u'sQT"מvS'H%I|[me$Zxq6 'KT!MOJ̙wh{p\YU !ԋv\YEL^ޏᰕvҘϾQ5CcBvt!\O_}0mo{Y3-D)AqoWS{>&P߭=F%Bub5 ǿM,.kfBLj`*m.C% ( d[auI{SRpVqs@a_Hʐ(o.dP"jetǀ+頿s?yBFs^.ЉoT6N+[F6!8>ɷ[bCv䘳#nD Jn"¦yWG,iC"/>gnnmt_`y}d(ГFց ?ےIׁ@'{{ k.{9(VBM6yR?E3a(|jcw2~@ɒ x_F؎bo7'S_)YGw$;J >e[;p%[7{*a+`v!*$S>3JuNٻs1WvA'3FՀ4R뛵)7bm3`>N<lHW 4T(q>F;pogjC nz~"<ѩ4ztikVpG]wp"AVߟI5B߿dPc弌:\E`cy5܈/ sֻ KpB=UaJ 9rG\\?u!+DTp\0f\,cKLR7;]u98T1q0byҗbྱj(?9= B86o AYS yW̃|?hR7O(ta&{|5G2໏Y/Yl'U0V/WΊA"<&,?K3M>ޘ¼u6=<įW61̇~Vy6_-/Y߽Hn) utfaI^`2$i1 F-b^h̲oYEܠ9O !(2v|h@3eC s^XѰá^Ljxi@B&l:YlƑ̩/kƨ.X&)"F(ugF{15Qv&튴*l$/-0VXx@m7Bi?zwNÈﰉM=|Y[*5l.5tZq꯾7'_w 6vU=/Pݦ7<@Q䴲zΓ9AH?`hfcv[7Lԁr:fpmyBA9.Eg:n.҂?XYv ` 8Kdyim'_HZӪ+j[LAY7d-NT#k(v.{>% 0VX~OFUD%|c*1{M{V98FMzAW+-ђ{)Dqj?GgyR`bo9ǿ xͺںRdP `R;("&B!:{~W5$Ej ysJH!N 6F/w`PFd$8Gb` f`YvE']lCῷ/ёhz:eq/' CgpYR " t$}(\ngCTZNqع$~Mvdu-o(!޸@ODLsxsJ|%ԣ k'(|9Av'- C̾aXg#{Tr+O@U,.^qJlz|qmu^QAΡD_xkVP^k 9-@;ϣ8Ayf "\ ,1r,y1yvyJ}}"q޿f2)Jw6݊_7n q0CܟhM8B6#( ,L&w'1'#jbSRet3زӆqLwñYnxr Hi|)w(A>J$;9`ܻSo}|Ny# ζE:I$y6@T| CƊ\r6_k=NvwWCF[FM\ڑlTh/7@$ϱ5r> bL=4ma4UIR`K?#ɭJjPyLQ>-3dhTD7T r$9=j؊ G8^ɠ3X&aTDZ1I_ҡhN X #=9?=l} tbxlAҮ5X@дjUҪ|K1Ԭ?M*`"3pk#6#Dnm^YyWoKDc49QdөBCv kk @(M('>?P.fF;M9C,_Kqkboz-]?G1SWVIҡ;Jy(P `/ ;gs5"(ZbRR>clJK(*mgIaZAx8V'3n3NmOnsLBWv5}{p9T^TC۫O7VMɑYAϣXϿRLVsCWa3iUg?* {%h%[#+D8,̙BPȫ g Z$SHwmm{+s*~ו3H=mbx@Iaa`FgDǭTp/`; X:x^MãcCh|FjX%{{ԉ`!xD-*ƺrKb~%fY0:%8nMF#Cа>M[٧g7!dV/&|ٶCvO&ǟj.鐥5%7\IqcM 3UlyTy3xY/~#aT1rR.b݀Cq*./h+9¯1\\!YKXѬV<@@ WT!U2 W= fȰP~;,>܀?Z>tvE;EK0D]:wdzGW ?̶wڌT/^*;8Wz(V`Wbb"wTNVՌaYG&-x(g;U*ۧNs-O)BI6WJXEg8qq=l$iL3Qس Q9k fHw䢒 9?P\8tj|85zwdۑ t3RpFk&#6+q+(B0+DbQWflU؍shU щDo IQbl 217<9@ ⬁o ?GH2{5@4wYeN 27Nq*c"ߜ[V_0ߗktX )*A8i,OvT™c ?̣bc^2Rc[ ^ 8xwչ K 0nI5똸JyY:MZG^0@BmZG95ֶD642@c˅xD@U}R,Q')!~t:v:sGbs?^ukN 38D[=i|tQP4o/yb1;efY. thBn"xAVRzӀblgY6 aD{y a5իSF 8CgPgL UBofQNJvʏrJiw} v5T+솄Jԃ@$NG9<=h: aX<^ yNh\Dӑ@攝~Dbj5d<٘0X^\nh62*658o%2X?Ъ$F9L_-KP~BTWL}q{əY\-A`t?$ tW {I@ S!N -qit:4ෞbD~u%tqo[)\_>pX@R, L'HJ߱f/+0ӓuRFDh:N|L7?Y.1U,|sasP-=E-\d*t3& 7Q%. Xn|zrP!'^W%EY03-K:K%sSةI7_pp v44Pzڄ9J="bK'_'0JvNGЋZLYbPՀ qJ;@v[Ei9`FmzkC:67d[Ƃ!9,3 gIMqq,_)~FoǛCO)'qqNE9ilGd|܏5ݬy5JJ雉E/L.NBsXDEFMW)AZOZrwl2u>2 ‰@l3^%aǀ~OF_kQkbF t2rU^`/K؋O3^6ɾ~ek@l+%A~VYc)2mIiYV| H9ֺv_a%1bOknC*R}EۈW9= fRbeQhCQ< sOrwj.&73.nzR}>Yp .]}ps\ɏN#C" ~8+Yv+g5iX˚j~| P{)"zbL3 jlK̙eiO-0K ڏtaMXr$/IE_LwEcE5S~mFttZ4}GDzn!>ξ O֎se#lh)caT[` S3-!}wD Od]=u5"~!5ِ;pr tK=mZoxG͇ʷEQDt+-_{iVߑz'+j̵TH§!LіsA,Uku Z '$m3i \uQ)SWMb'.`d_]=.c4#w$TPuUKERGgQ$xRt`>{%e7+N Qppe~NDvc/&38{W^dJg-GXzwF77:,`]45j=/1%ԏalu 5 =lRw55ށo~+)5ߛ[{(&n^E0J#cUZ,HNo"f ޼/g[%۽|TR[O ` tӟ ~.[u@ .*8~6eRYG#qI;"(UGy{Y_l Mkz,F^ mݡSsi3W1$~ 4Ѽ#;"/`cJ]-=g!G5Q6}$MNAFV9&u&Ek?(W ?Ʀl?{7ݙۛrᕜ,xmE _YZt*(j{V$!R\N浓i/k>LFaPn%^Izd&in s&+S|h(s!$r_Re9aj[Urc{fcϪn@;A,N#V+K|1_ydv0=s*aK}"GMRŴq K,R>Ckř'B !Um,J> b'$J#5\hfP(X&2^؅,ĶUcB@b@IdL<"j;aY{lF*BN__<:/I-}6d701`vҤN/G[̩09 ȴϽÎb@+uO$4Q8ǒ?o﷛JKPT?oM`qrS m4 )J@}\圚 ^ÇSX֝LyًG?6aHgĿM̋@#γ̶ٲL}wRG:Rt4M}+x/^V,;#Hz`5d|#ȠjD{e]XBG}lwKkaF*ClsWKuT|=A)r3֐SzcII̙0x9hФN:r5%8'ay&r⎳T.s# zqg,د5 n x̬67`?ͦY'7|GJ#kt..1-^^݉"HE a`uMKWB@_놕? `FSKb-ո2/: P٢Dŧ*-hS'V:0~ȷ4|gTRWAe%WBUqRaA4J%'(X+d5aTb~VsņLnkP9_!#E-M+^jmFqyrїH,ֽՇ.y+?KhfIT1 ^3PJ@Ai ]^̼Ă(C? ?8Ǡ~iRc*i|B3=Njx|qM5T@@]Pw(7e3y%z(JBc4ø5L#rfDǎ#XpCCT!cCH[-ƢC\5 SBEo3ٶ伵L*5ASuH;燎 O M52cU*sqaɵ5g,l)7;^ 1%^ i3’,`VT(ƍx1V:C*Ltɉxk)|!zu1ZAѺtXM8Ch$mVY ?CU?/Q-YREI5j(K]Ύ9GEKeXX_,᭣c7!&Smf3-ex}^K-MuxO4:L}OtVU);lH 4LPb9KB^1/8W TQ?Kp*k{k Mbij' ~KlLjn@ \cj"WIO;ߡaܱj` ȟw<ܖ OڍB1pR[X~no$9gx: ̟Mm_ZGRP0u;k[鰣goj;j7iS.DZ[€}>mݖuj I}Ԍ*ڄP#(qML[j V+ g}%0 Y2WIiQ6q>bST++ϺjmMaW sFHGqaU!^ŒvmֲP9'#BV3-= FeP)x⏧3f&Falԏ׫N@D!i\ˡ6F2k!Q4!eAM,ͦ@pb]7Y6 :E^!e-kyߦ_؅+VNն>I Ylߣm}QL6Ɵbz 6BG/a1nƏ{yGj#1CHFwL;/ p'b#Y#$xf|۩1$Yqz9 bRRR|Ӷ#՝nSỈѮz, T2л2[rл|Źank|QėuŚ{DQ ԓ0~[٦=dzӎ?*mBm#© k2 Nfd&qxJ¢7WK+AFG1+t4P"2m4C=G]`6ڻΔIefar ]Wy`E"3w}y{ Q6' g%GC:I*TR3R`6L3h9~-7/nhI[ˮaӛ 뀰.ZtVJ!QM¬Wr;Jc~s.wL|vy2sܣD7N+߼OBi@^ǭ>&Yh1 eLsMp#t7C!y^7T9~iR4O(c.$9u+U{EXOv$ 75,whdv7G@Few[6w=|<=26Cن7wʰ=Zf깍p .nMXoA+!46<) ;mT/,+Rx-M7brݴV,ͩѺR>OnTD2 6cXx4ߔ粒)ABG|P깱c0^UH?4/@Pyd_&G!T/"殬$O }Q/M~2iN냤z}zT!lX@Q.w63dz|'] ?jFn'_@Ѹ[50*;a f5F%$xFK ,s"6p qŴ=`Tx]tP'D‡tCGQDt"( ;XR˟svR6ѭ3{uI`fxJSO/E?P<|Cz@'jdo!tj=dǻL /ݳj zH{xx0c%&ˋxY u4h% 's]=nv%E_"މ]2}$I.ߴzK\Z핑,7:h!Oˣ`ōojhlrr H@4LX(Tv fG䯥9^ b"Sd~QOMrbC\x#y KrpdSS 4{ ǞE呦 x+;B<ݶ33V)IKA %JڮG;\?^ T^X \L&VoaUr󝜂6k~2mkYnl 7dt3 g+gf[*<~WW;{m-+?㰛RĔY=!Bz ,OСM;aZ L2ϦKݙ {O 4V!"€{|D y2p_J9q*IQN"7  .+ ʎ Cts$_T,}b/O/%-E/V$yV=lE𛔏H^3N2k&4ן~ $SF9EF"QAc -<|cht_ $Վv<_~RJ+WayT"kL$QL^lXJJw5Gu$K(鬘fB$u+/ݑf+(ɹXN*zCXnKEMDh5@sS%3M)rL/2g!?tR i̮ /Q3bBUymRNR^U{NMI㈦xc )I{1}pWŰX>XUI]T_z\^G]ƺ%f2 TݥS+?FV\5~I4Uѷ gh1-B4_m }6YWl;h)iEX< зI{&S0Q-=a+ZhElTU)?#͉济Q:7` O=J\(FCE{v6t&aR5]NkM^SS;w!\|Ue&hujLh*}10|t5BFzGDxݒZLѬl\x4ϦbxߝZem2- ;Ԯ=V}Ww\(yuxs(eϡOY Э(ň* ?p`Ws/}ƿö|PտeV rCFsr&!P6Vµ6!K4qk{"7䑑\sq{e&ȣ MtJlDА_8`4,\5逤oWګuh2=,gt&Ù[Z,$lW B;_yPu"u]hȝKeh\=GZVP!ܚT/0Ȭ&IUrB 9)x2\ҡq1\M;!8ǽ>0=+$0%< Ծ%Ó:#, ?t+LId$-!]1epYaZr/k-= u &h<ߑcWJ4J72bxD\>5J˻s%xt6M^X!3!쩖A"|m=4? u;jH.[" ]tأt#nI""/n8B[,vLZڎSF7ٷ/MZ\r3,g@`x2ζ&ka>$is5n|?MO?Ehq:ߥv5~*?]Am%+^<&P(*ֵwA>d ;f29%^ ބ.ak\gZ^FztFi*džѹ#JY <2(A_vӦR E\+54~*Zl5#R5~BR<S8~H\JH<\:35*:\t͟o(kZOgkVL /<;ӣjF焗"jp#Í$⪙$8UL6|'F::3NaN@qT~jyj]׬]Rsi"o7 Gŷ[|Y*z~jOR~՚C @|$2KhdT6\'m aJ#yO9*w`{8}1gPd s- |y7G)pdpgpIlm'@ ^^t6G +Qq5:qCԖq =KyxF.b0ft ߒo2ĩv'0Kn)Yj%?c1S-lsLz[ 1Q"PM|WԦrwD咺*Z]jƮt?L̸ւ<8='{ =k\im'/1b G#pކXf6xfѤAfR{HV5$V"mdI .,BXw-j%>:裬rHT'Ze$+YI;qmZy!q;OJ É!_SoWqsJ=6CSG=@N~8bA)7zZπ'i3~.q@ܹaU_!@]b~8_48a’~i?O9/zsk"YU;R JAzn,SU1۶&M`~IcG/ydclH f͎_2_o'eVHtGu9N\3QUee/Q^-g9F1BPsL(G;:-̣@VyCi%PtflNVxDɝՆ7 P \f6 T%S|2ƛedgGRi%5~ON$DX7&55vQ2^2*+)0-|{S ;SDu  \)\dK&E&u9>pcOα>G@tXR-k#Y!ل_{\L\zykZ*~_Q!&"qmW},BNc3EFE鎚ҵhxm?fm[/wvj0W.2?Lݪ JI$= JX.^+!*gب-P&uwd)fA]ܱ=ѓ\5; bUiRc,jV6WCQ[n7ηUhM4b ),o78w Z8\;D;\t亨*kao,fS}m7qDˌ~jPȻK8d=wb Rw L 5wҖ ϔymf" أoг (DL=lE{niK8yK"ʒ(n# cZ~,to"Ov; +.SCH)~ң}O,|%M ?z޳f)|9 Cb5F>z9yeFNdC~L%lſ-F-uPͫե*jS`ŠjꑮU$d|_= A?6%51czAke;n+:Rx #R:ZAЬ3}k`zCBiʲ\^ȪiEVG/@φi_f%^̘x,{bFM)( xzpev˩OQ`r'3ą$y=kn )r.n\3CI.t:s\q<IK_OOwB/aA㡶R]+2j3cvua}By|hQ0Pl#=׉9 gKnGtgBYrzO[`]>6bڔ264?vEP۹ckkJ<ZzEM 33- qɫna#Ma x}ޭb gKh0Y_Kb: Gf t6ܔ{j4!'b~m(x.4gx!p=yT7f=sJWTY*Q"Զ`ԁ77/Ʒt -7Ko' yjj]f\V $/|`:v)~+R Gu_YpCqyx \ Ԥ}+y4v֎c4V`41K$zd=]`Nߤ=XhNܥmA| ?ĝӣ#w쇯QQĂ]Ҋzy5o=6 phʊA [gM\ZC26{1a8_J>,ҸXJ[;ķ] ]ºs@>jt'Ra` Q=7 M =&F kk{{#+qёŬr05rk??f`{TUC13|҈ؽMfLdYv¨1=A_7Ax`ۻ]T[z㐬M ŚG_%O*bp:BVI282`0}NCNB--9iy5JH§ T_Flq/ݎN6FqlZHѐ3}èДiرU`ܾwG(ٷX(6kJɳÌFvey~ݷGE_ځڋX ӊ2+7r8BB*gD,+Y o+ql9/,vNT|yw3f.٠;oojʣUC`>RҜ5أ="Xz:޽hZm ~rJ >@Stɂno^v_-Z H";ڸ]e >ײ Rj͉HʄH~5l]ywp #]oD;;HD7`)C;۸ӈ7ap`.z:6moL8wc]^3xI/~RIvI+xg|cS!H$'nźnz! iXe޳]MPp &m,3qξ"l˚_U,sFq_$Ac(=@ȳnW"/tr;` vXj4䍞8]pE3S%F6mwneVҹ/ ScfUs {+w:VzyBEjSy:8p6? %2.uD%<'>p¨B-@4m:!BD5o!7W\ s)%p^yYM0_F}wa(mb1`|JNW 6~5@嫖zȩ߳N Eƙ$M4hO,Tf-W 8'"~Zړ$g\;;Ph,]mĶ(.,IF4E붅"ks/-GCW&<1th',u>{t/@;e@[ OCU JxSUNc*LhTx뾨_(%-=]|Q4 ^rUiN:vctQxh)ōg+8+%O4]!F:)GQ̐_fA5'>jZu0N6u+#)A"ǷpS>x2+=x%0.ۖdv25|HaD*}n9`XI?@dhH}Z$Fn"/+a<Ιn`jIs.HHJq[s@#c"b› %ytULLpSU)X(]RW:S6zdyFQ]RKFU4ip-՛;uB@^ )JWGvq2%"u\ږuoUqzj`{]sU 2y6Жdd*p[t$-zH \^d xV QNӲ IX;|_-Sx__t9T+='<~eٟ@TMTy@gďH _q*cL zplGBb\i"GSMBӣ}xjZRaN|:Jr+-aBʼ oV솳t?iձF"6TiE,ąq,0ǃpϏU3o ayP@-]xl]9/;~Gs |(/2[&̚D}:"L$ֈBL"'>2z| ) xAGyR#2.0tPU Ui?=L$%9TOz=f)l/ Ah+7<"V|zu`+gDaJ jZi]Ԝ.S&jkWܽn!]fy=A{p*-/yDhSP#ýc|iOģ8fGh84xLGLJ$ xۍWO#A^B!)c3=2A[fHEoZGMLwWe@AI&<߁2rfEz;YN|8Pw&72 jNq! eI)tՓ fu Ye =v?NqaqGFēhJ/ObAU#{ݗ!S2} +{ 2_6±OeA!7_C%-;z¸\g x~D[/L(@SNA "K.WDC|4!՜̈́eERwGT>qU6~/VmpW R)rB&=dYRݷ !<ץ/uj-IJɤi879zF@>&]b+t{tڀ16ʎ5]ςFޥ)DB7c[2g[.J /g(1}+ 'V;WU ~N&6et<}p&); !جHy:Fx L8(F Q5 lN}L5Y((3Q' E/ng ޟk7fH j) |J/?ſnl(m\DMh0dLeCa¥Pl`zJ8bjB U܌;1owA(lpSTzJgKC_x=`M8oJg(Pul鿻yw =7ly_:u8BZE}d┢~#Yƍ/'IY \i|8w,UI2j,a{қUp`=)m/*O=[zAn>, L2y[&xU$2qV1&tЖv$P!txk*PEL'!$ C~q| sꄱU SyܦL>Sk.~Wr9I<-^T:^甘Y;;N/Sj!A!* b-v;4x dt7ءqNNȕ?j"}2~:]ʗQK^ Qokr6p:(Av/洿H( mDQ7jL6o:qNުN$z<4dP"v2"^ JuC1}ZM1uKaDŽ[">k\֤ސti}cgAlmЏwr¶)~8 VB0nt#bV*7C(ppj"d92/\ ؚb9EVS$#wG¡?e86{yn[aOMNGTzj\ӱ`MI_ ƫ7[BP ,\?1|lZ}F.Ē# f5/1􅘓2% ^Yu^zXRZ X[H{}A[ϼKޜ0WѡAͮaS}HSyU_^ \.%lɇ}b[Z-Py %'b?J_SGp(*+ ex0VЈ`*3 qh3?{[~Kx0k/vT2*8=V g_ٍ8k ]V[ }OϭŶI^yb6?!T`vȖnX\p1wmo*.h |Y0 }5ȸo_?P-QmlRAVތJA0NVhO ˗1w +$7D>|Z V~6yՏ#ӸweJ,͙+\tBvSh SRRWmT[ȏIdzRH>sV/D**KZNvvT7t{UQ'3י=d ";VܣS[T<2~$"N^O(aQ;&0X-oݟR92eſ}6Y$MZl@nь9?o\.f D 0v8`* m6atԩ5]omr+;wa)~nyUīSV|](03A>M6oNOcrJ+NE؂ M\p`Lȶ4 H3;k6#tЃY]V/޻p,w&L/ ӭzׯ#1?@AZtmOdEA1.iq@MbI4H$_Jd?{nϯ܃H_BZޖT[t"䂢.фJ8EDՅZ`)kV,﯋ȧk\iMHG/ ut(I"z:ߌl7o\I^] g_J-ITn9G& ny~r+r$6zv_`Cs%/1^vB 3Mϫ;dMgvC#rB(xkeIǓv,=2(x9bXˡ#]Gǟ0VlzE,|!qS/f˲{:1xuwL{±@'fH.)WR[&培&1eۨ cn/)!hN#CFh`51C2!9hjHe֝8 nL7Sm`1EU~:mbiwut C756^Owx>XZx|B޺R;5Tx3 jl,5ܝ)2 YZH*TH82־]l4jwҰ(Yn3ԑv䷗M\"ޚb(bI m!Rv| j0%hv d³c\R*1/FӺ-w&}?R#mbLn:$ 96YJ-9{d 3c{x9_LQ$O檛[ivf=$7#/Ԣ] N=Ÿ# jM Cy$[\/icvt1ռ-Ar8EF+wv)eHu\޾.-U-CB]E}@+)w/"wfz"f{ bupJ>TR4HlnzM~Ι9@BY]y|>ȅ/T k:3Wk5Ն9lZ/vm2`FF[o'g7fhMP(StHS(Ae }z|J3ڠh EHFw`֖ګ5s>c1+vÛh^@`)lTAz?Q-s*FB+)r!Y^U=ú.G Hߜϗʵɱȶf@7GkFrmyj̮з]?k$<"k«} mSE&9LWt2ӈCh bs.^E14:tn,a2 4ud؋>L<|"{Ǟ$iV1 ׭>+H^yr!"JؙT6n:UM@s`n `B4،^}B,&}42*gz\d5|kM+ɆT8`7K,0h' չ >3 8J[`/6'Q0R^9hK!ꏐ ptyo:RTI`׭E];ٯ_`{p=؇ɲP,a\ ҎɖF 1?Ը7񪒽cV(Έܣ^YDNB>_öZqTiNXQ]rݮ} XPM$}NDL!cӽNAq6FfG'N#q&9 :m ˻O4mu*X0-5D[6fu3c \[=G-z :#[[U%*:W߆+,ksd:8ҘŸ[=ܱ:qq;ě3w7mVuqe6zm3;t4N!NKpnP1+ܩT#_6 TĶPPhy􀬓޼=(%QaڌFLJm|xpOVzB?lakS^VˇzEiR;!zRñ\Duyzd|u.p$~N4 t==¿ZdTb]F-M߅wz%1v5XV|FVוg]n7Nh *aEsaUAz~G7oPOKFkU_G ĉ&ZYQ*Z-]u趒46_fસ0BgW (^͕ڣ{ʎ.#iFPR̀Q#IsB5 qr/7U5on߀-`8^<-~cո#:uRfpgMݛ "`A3yZZƃ-M&Suq500kLߒlaVe~돻ǵg; 7v5.@#xŀe@#X_(3uM"`_*PZ _WJP6P-O,L|1G"ͬd.;$ Sqz) U5Q[zp`d ó?¡QiW9u/3-c»wds25B^I\D'\Dxl„+zVЛ|f=8!;A3IeYOCоo!mRu&AR~QV+!m&{kΨs}V5uEЬpZi,w[ƛɪOqIbIV6`:&; ڴ= hiVl3梅Ebicn{D]Ydob`ZVgoF`VTsCT x-;FͶdK/s0%Bc,"JɄ ,ΨK!u dWPè_K D &w4_C?7c#TP:,޽bd USX ďI=-Tr&EV(uR#n%&^;` akKNlF!I#kվnLQJ9i5fa/ҤWgtT̯M],\4,ӵJ¦mW2R9(DG`u\P;RWQWMFyNyme-{队'8`fl|JJžD.ٕ'EXSO>B  a??}e" & 2ݱ0vڵ3]A sOCr!CirP:|Y"@7;M -픘}*=B|B6rɐ:\Х_DnoFǓsi*4o-WhCH*v)ؕ6{BbZe(?| sB+0AX;E-EԞx*N_uS:u@qMvT^E<@Sft{@*smԝ6;ē_/ f| =Rݙ.Qk$>vಊ9,#J#KEVM}{)N^7YF vDK+4π wKV&X%a\ s:ǁy}dO$6MSuVr]MwYIV.,_=aB7}ҹ9Q:|hNAZ #fC?<|Mj lᚢZbxVuۨun.Un>#wz3}qh ҷ5"~Ơ@)F@kްUa"z/1O\'5]Ѹeg \) /f(ugcX&t N.hWz⚶ hU nLmW, ̈́,z//$Y[tjLc3h]{lmR3idۗ j/2z3N6e\f1q:z*}L|qSк9{t|݉^ |k?=U/N:3cXw9Q΍{IP"WAڄB ~a,=ZDtB2 qU˓Y([lȔVyf6>īS7:Y@Ou10v1SzqnQ u`ce.x?H>4G@ JC!$%f)FZ^Vu#|/j0yͮ$Qz|A8M =ܞ!S xU@!œk߀#)NM.SjdkTqSX8iQ_Q#5Y9"?l"ƷS1?IhxX,8b  E\QUgu*Ab ߋĸNܛ+ ^{T8ϦCY Ć\D9滣X_Bڟ$|v6/D2£V!DRBevPQX̄@0Gʦu76c=d'VL+TÝDF -T`2mPw)$BpQ/J!*"}S[tX|cJay~KMY@>:v V~OzŪ'X*>k^ddmRrl "=J8y Gsc&1J®ْ~lj_sv]mHOVDwe\Om$G.<"9 Sկ튠d X\eNL9bPk?aɡ? xQtwr 3\T4W,,s'@^tJyHm([P+j <-RT8Ƥӽ{±,(i%7BL%3`)&va7 - A2 6khK|NKSM=ɽ3aέޕ*蛔DP/*Zv3"7~eSXԢ.y~wfw{<|HfڨTf ?br&n;n\ #'P2C%'w8DVObe9 ^D6%:9m{^+v#ƝW'gRdh7hum4mlQM+2[jB9SfL>{Qhxn%c0V%m||4ݖ44 u|ڷT*8Ŋ.t(CGTݭe K(˥- ѡ?|_rB%eLDXwP)̐Y=7 u1mjMTЪs9r3E Ja2!TkHBٌ­Ueh2jh+FC R_JD(f6w9hMwQbd砘~bCkX}, YM7Ρ`:AFr~AM (jbnNь*\eIeRB.[XGwiɯUi^JMB<ҳ?'k[jW9.00SCR}pflN<|&4$Sk }9tN71w:Ui7hil<vHˍI0 倂ˌuL{uF87eNݻcCQZV|ɅXK]A֊E[IvJ[{eJ wGGۙâ_8t~ zA!r|GKV'qG[%ٳ$A"3kB_^T ];a5?0Fr1#K9_W0}7"7'F׺(O 9c15q&HĦu= ?j=wz״vg.3ݘMu8Ͻ>z'ڣ<+ \O҉JO@>lmU9ؒJMn/[D>1_$=NP-7 ~ᒖ^6CptN1M`4]nG=#vPO#:BY><^Lju 364_AIgr$#WunGO~ LI<5ۺdcѮ醾 "ɎaS6N,hjJ-Y~R`򵵈)\RvU ;K3Emkya24j||И\Ѹ/sW5[ɵxτ7F/Bډ{P#n Ӟg5K ˛NzE]lMHopa;yߒsJqR9wټt¾].#+2ؖN)+ad {>OkDƼg> Xbx_7B"qIb ceߡ)sm%L!;6NYtΝ0"#KY,m}yCzng e!kQkZJHlUlh XǬ\(#MWyb@܃ ޵TmDV\Fל37g9q LMAR"!/>-"Q5O#u_sAR>It]N4 {6g!K 'Xb#Lc&B <Z6[޿h j(,H5 'Fe&"ۏxuxAt:LFʥ<,q g(; ~he,mn_hR.G<2_l̒eAn4ԗ&I+`7/d5,*tlU"0nyL2Zdm[ƖoǍZx" G=)׎ `\;WP%qy0a]'DF|pč4s'qUSxg{~xBc~/7AN^[OdP?:A/3i=Vԑ/,^n8쩠ۦ 2s&qYn\6ZSEME7 * 6#~rBSy8zU)E8TOH['qX4ŏ[f0'”*'plc7nV_BH[Jۙ4IG*8ZE-e `QIg2=G;q'6?=r5*=犉䒁e 5lCv:QJs ޓBz Tc@s(;#?[C P][QR}9G:-liiރ3F!דp|=׋_C$;M%/{~œS}MRD|au!f#4Z bR˟ b' Al!/ o8.Uޠ$н7qUCF;z4S[<CL)6i8?`;5.Bj1Z4=cBnUpX/^EqDMҩ}}-b$=^NF$rqgKwoЇ<-qU5\k"&KpnMh␭1!ֈ0})D3 >ҰKPiMV69N=H-lGfhg(2d^3vJH@қ7[4#H+aawM 5ʗEJp%n6a9ƅq»o0h>5YTJl'RNnYB<Ɂ4F&uTJ^zϨ9(iE6(bFkmTjϢ fU^R-ȽbatOU&^ d.XΘ2ݓM&&"ab@#kꇇֽIld/Eu<8yr/.}Ơrn)&^9FiaPy3I(CUL{z7B=SjR~8"q椎g/TPGRu@FT `Gw(1Dt,P_Ʈ-|wƀ.Ѣ.r dypZX|64TqZ`bjACe> /6]R$(g4- ߩUj܄,: Jw"e>8RJMB><ʣ{OEbNM iS}%|sRʇOo|y@iC{ߞcAgYAgc\pփN4cSVʟ8R`&.0;c';| ,m߆ʃ|c<]VtWr͙ך3 SO *vf/> ,?N{".ZN-0JqJua60t\MV%9Ǻ_F/`7fmqr7(Ne䕆~@ 4T8l]d٢:7GsR93dnoCޯeF/?XJuUXR$>T2%0wu/NWm804'Z)ڊVǞ EqCaXFVLG g* a"ǹNe,?P0 G0D,֮Y x༫L[;$ -LpR.\G$5fP ezl~Lk-L\c5x$ |OTi0e vpClN_9OԺ ~ +u>i)Ð=>+ ɖf CJ_`~@.ȔoJ}"*a)k# Us^֭d*9[J0Dp ǛjN4JieX5k״Dڛl̔-p:]6bǼJtC$˪'of#/\6žG5 \s0`='aC4x&u$͕Xǹ} E<+Պ#TUx'ᒙ(ӈ:uI|o1/@]zbD22ҴyV^<6Qt oW'* Ыp 6g\o |qw(zW-1 ֽOrfZ {8gV%>DWw']u}/S,1,¿,uK2@CTj- bOwV"+`S}52w"XH:Fڽ|A6rrcQ6fv摒B}+b\e'%ę#gv 4('d* ӈ)_MoI[n9oVHVԋT*8Hivٜ$Q/O'U q /g $EE{ #9d3_.J>;kۏyom\wYL# O'yq  >WtcCn?'ކ+sUư &v@@QN4xZ {+حF9UXʑ(֦ z  dId :̄raIo)vt|aB$;c$*JCE Ox xVMp۴1{nj`a"CY(6cޣ+Xw ?V0ygYg% :6|7pK \)v4,է6z8Z V@NKš 8v?ɞ),<=Hq> 86/,[CSgB koc12>(}z>Imggy]͔g#t5KbtEYL\y0;ݫ{81dtÎqQ}nn@7pȧ$)joDbMYOEǠd [sj9';&9w+AKgHX);b|َF$<< &7ƠʩTN%(b&EK"NtGQd~fƷ3Fo-) dV:T2 9(8M>߷Ik h (SH|"!nJ4žOPE'4;sֶqHHRb1Jr`AelE(noA(t"_vdOsGAwnKBY-?մCcS> +˰YN'}a%MʾLPp6nNSP~?P8(k%P %F$A@V7x}Dl[sΡ0LNp Pc-#Mq8Agm9Ba%OZ}%ތtRIa_l5?\QX,oLZ*I<ʕ > k_)Y 2lpC*^,'8JxeVf7::?dT6# HohUҳ:sƉ{`P]EOn f`]Du;2.1vnfZH# zZ Qb6kOh ~w6{}r\!ŠJ+ dkN r=Э$R(i (sv@ t03B$V{=eDCIF!Q~:j[XnM`8n8]Ko jROvL@-%Kd!ބV+&r'<9M똣$=`}OSH#nx3k^5`DJƯWV߅1ã RB̩L.<#ޣ/wj9*P}¦,^.?}1C/"l/`wԛ=6cUF0Ӭ?6"DC q}X]GmkBڄv5e  5|Li/{Zy9-Mr$[^rqVRS_ Χ81>"Ԛ:ᆄr kCuiOY rb@^SmU;[g1`_ D,g)~3^pkrUmG|D-L9\K£3egůRa[~;{tF1%a=k$7s|/֍X+5mdjeAW^mU%2@,N*j!f4ז[Vfmdn38,T2U!w;,_$Py0niuUgӉ"NTrk6 ͻFM>C_ u~طdpA2| 롨;aX1+!. @1*ݯ9ס1Z@l=FKBtMr<:~#,Rj ֹ[X @=#m^ca),+*gW*#էRDaH IJHb$Wlʳ? 3$eVK#J IT?zU:o C~_Y_F|?( gs";K:ъM5\a ,sI.CKH\|V(^9rA4``v|w\-R2,(Q.i1FO&%*ҀȹXrF[ؼwy_,s% 6B~ǔI` 䶃h]4:#9˿GR"~5j 틚3^vk)>f3Q/`eh hh^'S(ʊN B)qGAnjbwgϙ+=RQ=o~P,Yq.]\y׈~Cb4Jx+pC7_he52:fs9!A!7=(ڄoy^z _~%ˀC Pw~hnkx[;H-'vԎ!p '*)0S;#'\7&Vm[@G Ga+2ƭ^77 "%B6ua[G*- 8`% \Ķ.Y%FIO(֓НrVs ]i a522VDlA3j XIBX1(VG>@|F'0kdzMb(l EN,*g>K,O]G*j2BuYu$-MOujɰ1>$ʮ3Zdx >,AX4 kNE0}Xh"P#i,OCPŀft~VHCӋIރL э93~%k" (!PpQ0>f%n9Dz~g|>uyH'?4d4%ۡj.5 b B-eF\S5e/۬]4 ئ%ud*B4 gqbb)f{T\e=/9t`, ;2RCe5'U NVN#8g?IYq"*rR] Hxw? 5Cigq6Z|cv c8/IʎF7+ʇcKє |@Gu%X:K-r GǏ2npǀW}}7/\kxߡGw:^?*UiʼnH@0 Tb ER˟v ʘy-viwHک"E'!(L㫚ĒjVO#zGΏR{k/t+ Vdp߈Xt#1}7)Cpd&6:x$&<1F3XDE"XтkyW}'6^O󣩁1X|g<'͡_ F_ȪqI𼉲q ,>-y\FTE8l|)?zsD"6d5vR{V*I03(BDi,20cno[UΉWO>`uTS+b+zxp3 I`u.{mΥ$)nntm*Bi@ӆ!&r`b䟒OT{^\̼ֆ-QD$zDLMHۊ݉-a*b$MV;/\99wvɻ^M tBr⹙)ݔ+3_Cu< %b5"G9t ZK5>}"~ζVjOh+ù(ZԺجM m> ;Œ5w:>>kWu ~cx> 1 .DXC˗ڕq>$llz><U[j :q6Fx%Lt _x;H3nQ>"5"mW}+>zbP5"ɞ!n e11Y+_*2 oW|_zB5rbP͓Ygz <#O0#NB[/ {X%R!.1e БN: R^^'WE 9(kWCGlբƄoĨnnȟ*ρ6i.yM? T8e0GZ#:|,tI%J_Ɓk?=4HzvUJVNkh(Mt?UptM wVtQ%*IRLqUbA3t:ʁR_n7lD xjL}:_G=b=Q]e!`nXc SR %wdDlq F'=rU&I(bȑAa ;Vgz;Gı+kf[g8ɗ4mt6c@'ýD* .c'VcHHEDg푝f= 9^LĔ%?v+sbY%1ߚ_y\%&$ogjf#& aؘm:t{H7vi(=&aHa]~W+Qݸkr4Mt^0OC& wP ֶt|Ko "5Л_.w BL‹?r #a}}r:',?4nJ~\׭B6O'Z;oA%od 6:pjK3!5Yum2XF~<|nA F"(A0#JlՔjBzc:g1Y_0_H]b Y#Pw-˦k #0G@?r{󏳗H T\_ha3Ma5j8 ϙI:$7[N='Π69VveFOhNtNYQz%"ȱ#Tm|;"vLΘXg쌪2GKa,ҍ}?p(?)2c0K(N!cxr44^O 'G%(֚v"&DZ>x<޷y@Pc;N~TYgk+BptQ^2Q1M*7 D~ L.mSCXe'L$S2U_#&s [ 4RFn1g=tƌKЁ7fz8$qVX Sr`Xwbs !Y}*y,~()p%2 lH?Dم$t<>:'GOtY\JfI* /e)I >_aE5)dZYڹj)ϠAZ?oy`qdʉDꂘ4Pu9QWb=%qDCwm#] m}>-/^KjH6z}YIm.z !??j75*< ֱ qH;GR?L{!ǾN?(PQb$_M, Jn?ݝ8Xjv6 Bs9_ZKf3`c1ķӾj2,L _׬})iuۆP϶^Jh&&p[Ƿ2<]h񟐒2lg3p'QeJߴsuU:҂heN%_bwq!aņ)Σks!b^sxf/N}T~5xf !0…Qkxjt\~6x#vq>axs6eF/ITtMXea奃r.t խ0=ԄS80_*x!c6/^7"*r0MZ3H9&vm"V.M11:Iܿskb` Yht3@Do,oU< qٿY^;sLǷ'؆c@;i{j)Y.m:DuQ3iמGv-pS VMb͌Tvt^8fU볻OdE4?3Z-M<0 m11/T.k{]w[OVU5PKxc5^L1Ef}dǠ\}YM7 >?!MǮ1t+9b觴iX.=JFE?3J yGL Pȭ;]%^/Tf9!b/u1Պ[7Rxq(zP'N Iwj(%0M䀐j@Yɧ4O~0j9 f6b|  ]U|;pE2 MGmH LOf#ɳtiZ`2ANI4ŽDfB_ er^_O 6Vف5⼀JVIulQHcqRο~l / t2dEj$Dw`-^o8Uh JWȄ jmĄĄ@JLv7V[xY+v((xѳs)8teT&_V =[@Hz -ʹvT |+Cz60WIi pRXNo,cU6p42[A3ɦAEhvB7HG$O) }F]~!_u)_"ҜFk|A!GcX@s6TΜPǚ-֡3"Eĉh^ 75{P8v&Ɉ(vE|Lͣ$(+܊ϻB%@'$Lq39ccuzl&Bu\.2Kc@UdTMш[By 8VCfÅUZD~\c!prDڋ:4DWG -BrNWc+Q!JZ{'T@{tg./Oxܡ ;ۓI q^!еh8˷ѯ9 n4O~A$',q'GNMp8 ssc{{:m'/7Ť%EGM1G>H*ޯ䈐s9jpIiD xdb3BxX-r9䠈jR A;dZ_DJ/&K\ ʼcȗ[z͊v6yn|Hn%V3R/D[vQyFwEȍ4߉qAnwюAuЂd}_-<눛gA0ky)䐏|q]dR $_BGEtKsnuI-J%+j4ϟGB@y?&|iz>9^,skb6:dzHxJg *|ӷ˾+" )Ԁ첌GL445;苬v^|#/O^:yX|6boiwJ4fz`tei>Q(ͼȅrG3cdw.gv+ j sU#2%V#OykxP]eA4+"DStEO-नd(m_NܲHi#8c|L95hۆy@V{eϖ87Rf#)c{M d{u% flD^yG0F-/ONQԝAXqȂv> CD$om+f]:NXWAC4ˇMBzVL;@ԍGniLnb;͐s `(3O6C ۘI_YP)Teܭ{E~wo a~*=NB;H<.6wG'cLj{Ө)(Gir :2YpًzIecϖ6C(L65`leFA_-zl]z*l.>XO|+.WEIWih{b ;uޅ%~ٛRz8qIk JV:_jWAR<19@lqx}Gpq-ig.k'Y&lqy%'e=ь=0EĒ+WLs |cAXo<[HY,Ix'4E!}5~1s GaB/X_S[c^-/QP/'dܡJY(ʝx*׏і[VHG(͈&[[lL}W<(۪zz\[M:ɒLeI%@\vn1mH?e]%M_z^C ?UAyurQ6m:ɾO>B 4 gBTXS7tո| &Hڡr0a)9́JReh}W מ1`.>־43^8M pv4{.?^C9b8`/MG)Kf%`6pzm~.5. )`@])O5uC+F-~*QBxK٭L ~$.p`'``zV" RIB,o7"!}zeZ3O`5+83J2[MddsjO!Ô/<_o(&] 6z.+ѥ5(Xvqmh), _M7t|r~o#U앯T0>=.C/}̩˩Ř;/+s!yoA b[=Kh[.HCuHAIxo {w`|%'+R[ئQ'1- ':h0(%+_* =U0緪^yRqHML>s[ tOӏ_!!-ms\7jd_A#[cpͧu2,P\dmGqS9霯r9TC1q<оI"wN6&`|xsWCt|y2k"1E& NCIkTiw$~jQI4)yȺ`)@HW50"OtƕulVW, UX"{}-z`5FS^h-':T<q3YF@I3,yϲ92OF5'lBrS=/T*_1P#9TC<ƹb תe>ΨWɠٸ8فX?zoa{m͏XFas$ ص Bz/rqAhL»XE^FĒ>.#_|0D#*8Cm?cI7&՛|vD=zaZL9KQ w% o^-[i{"o8bNhb͉v6YEt@{ͩ/Vj4 pw4]8_XZ'H4/Q>wRIdB ۦD#bN@e8utT󬤃&>d5iUzv&Z?4n!k[M P g9dѕU􅻳BhHBgBɇ2*/V6*E*۾&'w cRvR\GP!΂1`+G̋1Wх[}>r? wJ2=\I`ӯ;a |잣3x5Gi`0`x0'#T8yZM`~Cu"b\}wB\2>'߉&/0!]/{2'ՃTΩ# IF d΄$N p*P5̘h2X !`y웕i| ^D㻸]W MVpHz:''E]g (J"Lٛ~M AP2F2]ܸkB*"3i| )H͂׾;jD _ Hǡ ]p6* f G2Ggpz·/AjzGo60U;nbJ }7[aKTqf wĚJ^ )QpDdf;>hƝHrl@#]|+%Ɩ3+Zn~-k6Pcway7L9&$`qOxCFQ;kR`oՁAV6bKʯ&.'*zf1&ܮR5F_ăupԤON>٘3^/]0gFcDW?I[lz0O!.-D_y[m NjZ9.:#<߁bZ>T" %:!p@iъw)8Sf!+50-}fSu.^KG !2UAnI>a#ƥ9n̤/wn&_"<t.P;-NW;J<H}ၗƧvU1fE"NdNvWcw SG c#(O÷;^gMGQa -(Í@=m͵7MNwE?X52FzM0`*ehd7Z/yc\ƑJ;lYx*蓍UޚӹjlfrF{`$/ſɲ)ػz|kY= Rg!aB*9 4܌@e@C)5N W,J‹qrefQd+-MC7!SmT'ҮUX^54"J>vM#Ki2 O`Ekـ'Uqmj.+'lv<hmt?%Vhg 2{Fz/SG^n AG'p,c$ߡ&X8|rLp%eXkmt1?.Z}V eMW8s?pTǠi1J@Ϡpt5 mKc M[Z^%DBdҍa$.퀟dS:&; .Gw4\o wQЈޢHf}[֋a9/ک+j4iJ*D;oidln[OGDA`ႦIR YSy>lq[yh:dOGH5 7[qOM}t\' lQx8>F(&V>T`=_Bhм@ :y. 83 ?8SSqm G(<|h6*CJob;3a2ؒE|.0xxC>5J)6!OmJs (h|b³+P gdqF;4Eڂ1@_]qvxԉB9oO6J5i+)F櫿!ɍ'0v2. 2*Gn3TpU-3?$5ͬujSռ 'رd9;#z=_WME`%DS"-é.{`ddƅv>ãF^`S8P<TioxXEQcru q_kQQc}<__f1|9RS!OƘ')>lN Iv^~mW\wOAt}څ"R;֒0;/QTMnQhۚ8҃pYNn|X\Y7O&N(ޗr+/-  GK+L_?-ê4 tEd}_ۏ@8.Eĩ˷k"[~n7a`[j;# gaÙdRay}!:xDRy@qHu8dAQ_8hdqpC*z)-Y[֐hTwɋ[\ p< s)??t NFջ*}b!bA^IT@jr9<|mk@pS0(Ky=Xۋ6ƯH|c/Šbblx›bbcY{eAu/Ѷ~x JaS nw&2+Rh?&.eēr(ZGQIp-]S}MMH2]5"?0 nY~]?zߊ葓26SI/PgR>bf߲='t{܅rعtG}'[*..`~jKXIޣ|j06&ȆITu-2./rᵎ7E!(4zMNȣl 5'qGXGݑ҅-&_+o&;l>% B/qHAw\k䮐Ospb*$8 jcwuXzo c1QT]KrF(,5]|přQU_ډx hH`nM8W(0p`xl =#M{ d"%XmۦFEڄĂ.Zw1ϻ_6CSrOPl'!wT5 X! 0g9jsgJpTѧ@Et|e֘%AL8Z"< ovh(t "IfpIv)MpܝڤR:'gzs=w; @D“:ʒ6[ lϟtFSœ~xuiLW !M@]xo` YseSB`,O9ӫ6b (!kIĭ?ʧ1g- emeٮ,^?u0E/h/TRzj=6fwCv4a[K =fMgԶw6`S߁݌ܗH`mu\,K6X k=McH654şWsN;OnR(答,u<^`؅!ÂphKU^;G~̺y;,iCfQanٯMncU2AFLM] 8 eZL"JUlH%5ܒh\6RQw8{ه#Ak\r.7yS+.;s8ljmH=a":u܇jߴ"eㅌ,EbEwTΦ$gYմ 6q89Ja$v2ҡmrd? N_Vvt":'&#e@܏^%tFtFƜsk@-IS)^3{'S.=\uF nxALyH?E3*渾,F*{w:$ozlF4 tκ[L =|>J5]:J)kxp?^:DZm&ePz7-aK^rRôZ3{RsM[' R*9'6=e&{ҴvUy^k7: :SOiqbijFf:xjLR! n݌2.4VAPYI.dC3o,ǤnL39f#_xp295 AJר](jDN"u|+|kwsϤ$h2<"{#H(}5 j{u#C|"N>(DKE-\m.ChK;R4m! YBhٓ,swY ]m>Ǎ_v/j؆TQi۞`'m*vSږRMB)_J_̄?rQuumBzg7h,/l>FKOY/d}J o%]Dq[d!97 ^{=H@{BaabLR5@*۬RQ5=cB$9ViIYtUB_R>⸼8&\flX8϶pkHr,RT+aD  '[$ [Z?A| 6'X'm&BAKYH1ٝP6cy7P/K?Hf"LFc&1mYWnY^YGR5g=NҾ2|?n&jIeEr3Z"j~ ;x tnnyo<F9Y{0ZI+sT"1PH?^ ġ9t1C3JA)]^[N 7o!ڐnE9N^=?N3K9oq383{fVTEARfK=sЂKwxo3<|GpV.,zmE{'ybN=J_BAi+E O#/"ĴAv\+lZ[;ۉZa9(]'ag8ri!Nw|!41tke%k.*\G H6p%jßG3kmc )*a+XqkhCV1Yf$i_kȜ s9k"۰˨Ɗc@Gߐ3UF]wuWHR64c+8 _ΝYio|}at;lqtifn(FHphJ+$#E^zAsh>T LdqՒ1ْ!,6N/mh{UI+MrŔB}-6S޿~sK=6vn4S(uk ?Rvok.L.{.#`sW{kDޓ%}cV]Mmw|A+꼁e [$~ͷX獗mPՓTO_ΑxTxz1jO|!v].??H*`X[9XRs]@ARf_ŽW浈bJÙwU=; Vw-80Ô7?-@ANMgHHʨGq?H*l,)]J a 9o &fXpXz3k t `u.[g w HXD@"\N?hSj) "H3>Ca{9&(.V鼩uU~Y+Uq<9EM)@ҭ#` m pMŷf/Mtv/jHt)zA@ݮ\Ľi`~ԕ龄68R.Z*cъ֩役rz *4$p[Vן%q[Ŭ$ުIiEh`ϥ%RrRGXZs8{"oӥG=&4_,d [vQ$:<4ՇAEnu^xGmsw8J#ڡeG5*DNW CYĄ'z C@((v&jл_ +j o߽W4j|%IJPMơ3N T7y>; sK-,M^-Wyxq=ƻn 4JBM4EM~q.4(+Wngyb {@30LzgVJb36Q8"R`!iGd Tn~•kaZií'U8juU6^SQ?c&{2#\3M3* HX~X^Q2[ne#T`wNAw1=jle}BkSCHB&w&!yx޷6/d|Wrj $ "֟ɍ\x~M&W#:ptR{tQ4`da&q/2F3} ) )anJ́LA[FpԭzqEr?E-y:~0h8Ykk[b\inE3 -Q_E͡09Gp|AZn!Lo~_ ]ڲ#r<8zVqv3c|6**^KZ]%ZC;3_=)2o4ŀ g DAA>åqt 2 HL`Lɾ]_܁#ϤANnxAC&Jj .K3-oҬAw&"nʿ/0ݥxn%ES iHv'Ld> o%) X@}*X)cH)UZlqHrd|s=6uuQ^?S lՋI&͚R5Qvagrp8BFʯO&CbQ?JP 9 2zx}،Snby3e̙i\ uzSF}AO=c7R7y< 0L>mggy> Ag 9%xAV~h (pN:H}\Xal)Ogd#Tv׹:bgK߸/|ߚMEj}f1H~EriiXQ~mAtT6IIYː2c`LktMiOZSe*.K<ts[}sᑝ; _kͼ2`Y>3/w! VJ.r84C7% \|$P־NkypHmiS#? Gs'+zے]L$)pWecjmZ$D1aPԠkpe <<^[}z.xy>%[/k<ZfYV;m.肉I9vQb_}Z=VՔYԻlPMcI4s$ #|;ld{X'}֢v$9W582i|biE9㉠48W2Nv _^(kP=U qsJ keh 7E@}Ki^#]ޛzny ׵d(ʨ!d^Bv)mrÏ;U;YeCfKSٮ=j}P=-Ak.TV/m \1\jUb)+$/%KP::>RnˆDq|iB't/$E@ L$ۍHۖ +vQS L_4XcUN1[Kn",x/LKf‘&ά"qMBk<ܯ>gă3ĩKߙe\Z$!.Im-c:y%pvIjG*>oJ}5|gl "TV5*VZLnݙx"CCkcMXE\_rG*n\̨@~C4ZgVO Y2quOJ^ji՘V? Nwb".=1fWnnhUzG[/$9?:qd [o"Nq8^G݇HS;.d79eS#aGG{uNc$[t1I31'Y21ZI/B9ɂ61(zɤ F5|\t |-F?=Ӕ'smʈ^P!מ -hRǍdZ˔-> ީh#7l{ b(װ#(?q<:]>HԺ Jw-E*c۱U:xl[w 0L7Շ§h07JxDo =m]\$Ե{$\}!&`LqLYIkcK794\KY߈SJzF_ ^k[peD9vCfaL MRD+O E)LtLX2 d7; Tm;L_ UzmѼ=C襀sCLK oXvBXbĐ SI|>Wzab&ҙr}c5 a2T3Kc#uGЉT<ݛf qØp[*[-YVK'Qdž09yIlKvqHM/B;.O-L~(i[WX6ɰhp~bB FVL@'zZ鐧:9"AF|y^?C>"N I/e!1 DX ֍GN2cG JAyn6@p1 x,e/9\PX"E^ ƇLMt1_cHuNzFe&);Q2\UT A+(H?ƪׂܖYR=9k9JA8(bg(vܨ@O1f}ssr3p=7E rM5P7 ~ >{\@-+:'9 x9(,+`&əfDޏ,x@1@% <_#|(z\_rW =[8a87@/@bWCS=Q`) ?\iXOH']M̳%8^:y10Z$R\-ޖ1fi.@8ꕹOz墰B=uC*7Wot}KUc EM_TJ2WG4zdJKo5 :Q6gի8_g8$?[,% N8vf_x-װ0/7aF-5gFM߆ đ`W臫BsUy1#8e@u4ń{iSR\sI]NL'vN@z8^A{PDGHگ=d;53]9i(Gui,zį~rZOgr_CQ*/ᥬ Ja\)T }>g-}C*ѷQkOas31{u1Qݠix1F͑W,0Nl!UQЪ0C29_9x{hN)%Z|cT_eq> v%n+F06/U`~Po252v~*zԉu[6u=" @^^ {  !䐜xGF"J窏{mu>^n[BW |Edf*@_^B'3OTEQwwgB3_?攚9N3"ThH s陟B")9X_tt`}3w zs~*:]vv9Y rPUrwL*M\уŜ |24'6#WƄ42!m:Smwʇ\2B:c Kv&~)\&kd{kةC>Ee<Oj95Q1iifH R>"69L+r4<V=L@_ CV.D  ^dfp O`ũT f \9\BF7ccXHtʩJ[-D<ȟr76{+Һfn%h#jA-+d 1ZSI@"-V0,7*[^*D %F9P 1t`\EmL4ɏ;N fU;Jw'H6IY/a^Ht7 KQœB|C- Iw68:(x`aX,qU7 ]0(qUp*aD[𔈼~Engst>e:([PiV1>Y_$kax f_ʯ<\z 0]+Tbue:55$^rz 'Ys٘wsw0Bqa%<+jqAߣ^Js۶@rrn),G<]rYtS3l!AV~=T2,a('ǃer,aVr&z"vԪK${wl|R/%ji*a0GP#3ʀpF%Ӌjmb;dVŨ&;q5m|n !િTyhݦN\E#hm\sANhMk ~-rjR `ؖ6="Wq1Xل3O(ኝ2a^C4%IZM^/:Jh^T`y[h+f J]y=$n&ShGemo{:0kfZ@CSUFa&YYkKV>LHO.D7Pt잀H!A I"eEЂBeu/La0!:2~,7HvҺ6eף\ !Xs᪮Ƙr-Iuwm8阅wӨ,;x[܋^;,]h%@CtA(wnJy&YpP9j;yAJƙ oI;=Cd\GR"%&&6ǹȠ?^w22Wg;P6"+՜и%O=6Y ܯ )|ܳ-x%iGشywH$=,LdX㖎b+_ d~ ϗ]šZP$O1)K"-BUySGX?ySԴT<1;U,Dh}c/xWOqv1]bN#m8LB+?c3f-ψGG,pxH<ꢈ:2WD$E4 q.nBa>tޘ 0Wh_gƙiBAк$;Xf^|=&S,0@0zs ^{jI|3d:(f˦6 ᠨɶ_+.ze]ҿOm_]4>V.R2y_I~@e_mcU-'ex[+=U"g$r")QyaVgwOZҖ~ed ~́2M( p&QԓyШf9PK rY?%è~ ZLmև2BXvȊ8eCȅ 0܅ly vpuL7nRĎPӸο1t?=`?ۙ ϒ]kD\ #%\3uԨ a6ƛ߾{NMڹjuӾ5 UO5 4QQŜeJ#[p?|>-yVR h~q2-t_a#e6Sr8~V=HV}[z-H1±w(ĤXi/2:<<,uڌ蜀IɛN["a wd\+e~S2Jx:Yx ݂z(bSAA4o:jE]ސi rWطJSHC-m:lc]rʤKT!8y牛lz,B= CZa 5"l˿sE{<QMhl&BBpJA.};ۘVYceAw>$»*W,pt@ۦKb bXt>>֗w9P0d% +Zb[Sm kaVʘr1c79ݖKؐ("B¯(۞/yQ}[]VۓyԔsuVp׳|ؤnޗ_` j2P/i Z{=O2??[*!~(\ƒ>@60mcRPt'[ƆK)TT֎¡nt1lxI3JjD"&ܹysl<{?4\r:Q]YTONn`Zn3eAa1= H;dZtkcTI\>?yAiK߁n858^mFT8Iq&F #FjiYcJ93TbJ؁yw[.K)FSq)h:M"9!N6(\zg ؏A 1dIqW݇h }{"΍"@=2^Ľ_7Ґbaxo+dhQ +׳PbC4tՌmY˝nXrĨ5 zlƽ'ߑ쬘x-IaWBZt+[8}(\7y햊rwA`R@CS 'K9٦VAoDwJ ͔7.:.JZ[,#6@nAKaתئ-g5T>\g$&M}6 x ̼H%T7k `/JF['S[&w.B)m\Y91]C.m=pKJ rݬAw1&Rh}u41Dע)e e]7O 'i7nv-B,ھUQI 0hA+F5h}ݗu)ڈ4ijǁt1T#z7Ȩ޽K۫N!gA tj8yxB T8 2X:Xϗ0F.02tBT{ F<=,uUHGdnUv?3 In#|~cAO@]kt`"f5*-'Ñ8iY$>ɐI!H/U%)01!MiSvxЄp`q21[ ' _N"?Bљ؈z[iba$H,mB hJ ӕ$rT}C /.u9k,8GY64Δ5} ukz+)xka]gmbJp{gGPRuT#% H>:iĭ8&kw=>EqD |"íg@g5y%NTN8(n})yQ+M>Z&KDgs;*C_ Ǻ;~^Ȁ[\D^n*jJdk¯a dדLB[ /!TsW٦C\+E$^w|3A`Z&oI q7N(RJ4J 85ܵ2}?i2[sR]CZhz'6&Arz e&y6Ϧq]/?I6/ ~HŋQ.nhRBa^փA + _k#UÉ.%:?G 6v P;@]ya},~x7[e9M{a!"T36X7q:q!`/ŃX/l< c=vsKpY|hnr+I~:-[&=M8)\xɪ8\57D&[Rc[{ؐJ_H(`ҼԼ(*n.HHAuAkLw)4TsEN'xAPGY p.'`"YpE$.Y{Zn0GvO7A;m*#PަَL ::aJǸ=ID-D 9(f{˨ܱ>K%[U);'SslnBg}Rxֲ{p7 ` B@X9O='UK^,-I3"  B$R@}`Cvfmiʭ2OUJL/]MƗa 3 믫c{v4dehP@f;ͣ7~5Ѳ%O*&쨣6d!D[Ȝ(fG*tEOE"e/(P͙-wȋ+ΞzH*jZ$T f\k2i蝯 %gŰ(2JzIKeM> Dd)NIrUjPS)]?)Gǰ{Z!,զe#>vdzts/~k?" >;uTjCNFܦK /,';v[v{;.ʾ=!"y"==y!hlFQG9n5l#O sNuA+O" pgɉArf] ނYC-[qt?Z/{!QX}/[6q6u̢RP)AMx -S]Wdh|$r##6itnrdN~/ B8WBD4-Bb|}FmߑY49ÿk۸P6~qqXgU'qsY_nņ\ܬ9],E]!WG븒-U4=D6>ftg\p/{-_P6 ǻjBbh%w*Xw HT U㈐LUMk}wa)9P;X>1'kk?\UـgS}TQ -,&e(D 妃< E47 n^ڇ?@4@ >.BZ}`[D2S0 #kNwy)Vqc =IcU܋+YYF|g"s,~)thHHls.;kim'CB.c+C\&`̦4PT"b i7eY^s:>ՈSº?Y(tBbR򧋠Ӈ`8Gp-8I⽣%4FPKZA@ >B]88Az?ˬ`ZҶ FTb=t@0ſh-{"bxiīsQ]W~2>CSKAE_$sgN Bq~g`#2dR@S$!sUYC:wY~= /:HaK=څQL 3qG]i`lFh+OM׺bܽ YS?Md5]~!'hzA"bH S9["> +FX:Y~ !7Ej l_tVz+Fn"Sd %׫m Cĝ} @KO" +<jy^;g iQnWG'IűBod6C-G SasdA^V|2Ԇva*8]6ZGY$)Bݹq=*nVi&-kһ;z!fwG,,0+oݡmzq6uo eAel2:*RPՎ@l'CGūm""Ccp(ۏˬBXTrKGh2:H]nycoC vTRR%g4ʅ# k|5;ӥisW d7Ub񘆓Wc3&%pR[!hFXy%w` :y^Fı_<77p )oaHNG}WҴ©vP6u^JL/] RʤJ ȺVoV Xh'+rD ̞W59 DJBC=ʑ_]34. #;EV7Ap\KSUsuCC-D F C0{tI@:YMM}\Y^v8=xh/l`/dW91-M^yZ~hG$ x;sR/SmHstr`0<:%L*L@'vewig:ؚ[P2ho\jBL+tgRe$Bm{&e9dbPܺz@`s=ۙBWob?9KF ʟ;/Фq&]i~Os{E_e)E82c9г[LrK4c\u]py]}bU-w(Vew;obF;<$lתrb'UVS╍#<| 벝Js|)r0K&IzTׁHroz?x$2;gF,a3d3ܗ+oWOsUMT'aV)u͙hx0hO/!g:¡C_Qx3J[1g_9{-)zR4zjѕMpV}>^ 1~BadLaBv熥cP|0(}_؀8S|bh=EPy뭄i_0!=:iYb.*|%m:,s9j\:ۋoLG _< >0,W N܄"|pD aG>V[E_Bft}B^ ٟ4Y[k$+(W>QOpN>3'R=QjZ3f`e d <>Gi_%lJ)]?_s ܒj7P;{X5xH ]F̤.3"+j 3g3 6}ϵ/"=5r?%*yR--2e\T6HSds1Ng-@r 2񧶓*7o'{\>4za,p0 1Z=gw MkJ뇣B,XLIE}|>7݌1V 'eR$UY/cd*0y\ eZZ/VHix]&]yp wF j: H`;=vzFBTzd2@/=],mbN 5G 4j=,0vMcel'tGv') e.BT:Q5 6i ɥr-.L2Ph 14MCu+%zb1 H6.[mfρdrn[z~)A ȥ}m*hԚ!K_Eò @*{̱ڪLJW0&![3d"K0P磼a_in|}w~_wTh6ػS{bEp'a;w8"K,7Aq+$nX(p>z,pCtUw^G&!NN>/pq (QɹHiLpQAY3Lylb۪hDc9Ƈr1&q9Ҳ,Bakv@eX%ב염gwd5>eՒ ѹ>cuUoRaMO?"Qy"M !sm3l4}Hp#a$5] 6PH_[+%2?ruiH-|xհ>:l:g^[8e6=֬9,;fў@gU(=&m-E|zI`PUcYc(,pn)VN1?@.E}oÊRHd()Gs$_ِx֨G%FT5cs;G X&W}gl86gw l$T Qe9Kd|;,)L"ȹǐy+:32b/,"5)?sڬ΀꘲`nu$ J.4V;k*<{CJr0BYXW\7#`s`4||5[B `Aq,3VY² d eiPi~CF&EOH ޸ЏʑA͍#J3\2߿@|5[Q}BAɻgAP/^ ؒw >i_Wtu(-Hh\ʧ|- YK7: ? '}`H\(I;{q&jKxFZryڨQ]Dh%4ds+ۈ^5-~ oQ$Fv>ltбo+HO Y*%_P*^u5auWtMGXuLq:kLoJjp]然CE1 k` "{=f %=vb"<(?nyyhjik~cqBq@?)bQHtiP+G>3EFpK2a|MLvV^gbX>!!%L6i,>տ`Ui}t=DM]g77O4P̭38Aiۭ[*}.qYM^pp?OzH4f%S1\Y:X]'1́fЉC)yW93r!qE V2P9'e &pӼxJki&ύXWqBƶR$n*DkƮ k~ĹS3~b ѧ!R ;. `ɒ_JVC՗rƬC&Z }B(yBerOh?/ɷ^ ^:ucfI*ĉb5RدP]?uþSWLf0p52Qq*VX0eq6!ݳw !B '`.30/,n~B\̼SGYjjelQФ0$&5jJi[=Ѩ֥M_0*,ax wE&Z&n}6!FBE@d0=Kt? Y > LWk6<mxY 9!q>E::^UAf Ȇϋ ,go/e΋2s;NW ۇ{ X߀e bq\*739;bGychA>+h3@THW _R4ns幕Z _tX:lS2&#msb S Ѻ?0 shJ ̭ϗ}qAu]m# 7XfVY3k3A4C1|Hs=B (wC&  ۂI;qX& 6=' C\dYڌ1J"U!P/LVY4N+J(n0V ,ŷ\{8r6O'^ݶK r@9Tq ޹J;/ɟX-TkVۊv299p=9.?-Yl㏞5.w"a&.iesUk#R X478#G 7B2Y]ՠ}q^ /\iՀ?Adpaқ% +үWj9N݀ޱvu\ L|onqԚXRܻRBOque'&IY62α&)aum噣(&,VEQ'/0'#Fh!4 BpG'؜b˳ K({;9۳lMߐo^*^.W dQ?2"4Z1lZ9X ~9/az#C_94I>Qr)FeKEf!˷f9K8m!NDMt|q !#-Wn=@ AV7A ~}Zi[(J/$ Q!4ɇ8Y^XLRfO@ԥ"; w4zl;c r?wU˨lFڽJ2?ZVpu/$TyFv&Gf"ȯܾl};xRMWY/͑ $'w2UզAGAPF[j 9lI$['8iAN^EMGt{2\`u29Y#>*|0SM./4񕼉+xLO7VLeC̍_[ yR#T-F]v2Vmxxํ0w BIOp)E4O2i_Z*Q˔nz9:oG Xs ֦-Q%ofI2^S=]Fa͟o)î%&D/@Bgi)D,yͅ땦,xTY#xK3[3+DN;U*n x_/ H-=^{!c%O{H^.Gc#.k6/ɑ Bs_p(3IYmqWnBQ_F/Pmg.1ĀSu\ZvqD'b!_bj usׂPмCc&bA_}Q(S-v&YPZ"cru<p/xB_ʅ~|#KíuCi1yζTkm=$N)z& 6D(^/rMN/S=t鰴13؉P syjБRinl-1yf5O~.k}F% *&ܥ Y %e8NVm2cW~iY 4ԽZ0BL߇W2~,#|MQ^#i&̤(vW !q_Wxұ`%( Ԇ6f>߷bM?)Ιv1 o,ٽ`4!ތݾQ&+)I;J74>awXtGĆx$7ac`W2/xht+9O\ w||P}ǽE,@RLO_NCDYNF1m,,4{ {;' o%_+*j 酸чnDyW+%>3g'Zwg6Yn!YS]0):ݱ!0ꏈvow UFgQՁ0S,> Fw4ji>|uֿDb#aȠxS(&{n׭ft2CL^-`goP9r:jdQBlMۻ B=O0(ɹu|Ԩy}0N*ҽ):FO{FF(AGn$e`d )K> B-᥹{Pp'8'ɿ95v9SɅ]Jֈ߯6㽌6gDYÍ i [ q$ y3eS`w!i6Ձf'yש(Ϙ\Ŭ4LӪFI8 q&-7>@$xns?sɵ Hx]6hOFJIuBw=[i]~Tzo;TIP(׃SiN ERA9~'#P/X!hkTe,;< &ŋW6Уz@lz|:gT(̡ Z%7nr x´ZQ_f)?3fГ[s&Gz߬˶c7ZpOVR cZMQ6ɝSqQЉ&9uyP$6[ 7֞ 4)QגSk kY4-k(=#G(́/1xOe19L;k4E91/wOf kcDS5-ʻVSy8GJ%|!MјJ: ({McU-ats3fN鰗e*A%ue'Oal*?9IfHQVy l !ެK{ιߖq{+zv~ǽ:dmWn7Dw j))?> j rSe~d!nτ^9oh(eSRƮ,#=Ƒ-/Tt ms  פS DþWG7=T ۚ X%(5\UWQ "_~W}laȔ"#|Ou܁lfW TKM`ߍ\8$"OG~]DJf7fܗ;ތ*O,?FKG:%}$:O#S.FLDڝ~SELB}v!@𨨴_Ef֡.%MqW33HJ1 CTb>+* q?ntCp)j^1H͹2vڰ=ӴeKP0)52;>`A~>mce03}reG_%n/iEH[PYc!Hp"q)]?{` b,-%<"CTtabR :$t N:)#C(Ew6&-37bZ|} 1¿9|n18EAtlxv=vOjiȨ)؏ˏOkcB&+~%:;ϼSkwL{n tt.WdԷc#q2-(Gi.+iVLlƅb3%/S6b7 ̹>vg?Ut72PBɤciK}9//=p>hY˺ />}VYk 6u%нBԗB&o29svChsera0"[y A:aBkTjP["^p(8 )5]CӰW}*l ;ZT8}G^cN&pNJG\pub }U'&[}-z##0`?` `;R(AHJ1, ,6`7<`>GPe$B_r Ԛؽū S?ʴqv{.ŤTcƑ`hYTGbbIj/Z7އ=U+BXk͂b)e{}W+kUtm3BKQ 2=BQڡ*pj YtA,9-)?U?!sg6Sҿ|k|e-DH^>'iqo)m]ewG#T)u_hnf1EDǴEvMVoTHDᰖKkL.o Z*}Ii"uxKb0iZ0%HaI:(ٛ`P h0F*pG|&1ë1bU&vu""s9RҀjO1uyr-;>ـVJ'e[DEEC!ѭN([€DUא C%Ų~}Uh}*<̅`}t1$țNkxNCGEB!&$L;* /s7`5D*4q̻2I9틬,8<d~M؍C\aI 'r;>&˱c'd2Ӎa"f&V8fӥ۔nɥK2~Yଚ ݪ,&۶qaPp=(O};%YŁ18p<π>G6K<=CWvHYx@n9Iƪ$VԆSZ)|lj=ԝGۓ}i 11uLkKIK 6,!puS>c\PWa`0&&)eTn&KuC5כ7k97HXLT_רDOdI9{%j1Vt0USϾ~n &$k?H\V_JaЀ_^w2^:22-9į%Ufʍ0^qr,T8pL0H] Lf/CM=K"iJ trxq}Y)a?u@LKhG/l26'}zS?U9<(Ru|gWM]ƪG5ʡ,-יђk^P:~lյ<ҥ= ,/GpMndЬm% jpJEGjۂarcQ")x`ٿB+"jf``y {KOh}_0u|NѰ[/:^#a}Iy+j[7:E=O#th~afDl#Faͬ2?MaC":^W CsʇQ12`gM ,n 2ožE&c)%vIZ= mڨ/i?pU(:s A#pZN΃ 3~c%1mbNۆ&ѪyԧMbmc *Bl~pBL7 +wȘV76vqSPnȎ3=_c[}1҉ hQlmÑ`lB椽Hщ8E]A\SڇwnrmJM[C $՝3OM=j2,[֖zHVAn7ipybh*!+=)~8 32\= sVPDrX)o)5W??Ѫ5ܛݝ~x0Z4n])1i \l񖬼aEr7&oz3P]1N7|׌SUE_ yBj}ٲ]ÞQՋN^[;#]eKu๜j>?Ti \}ji6nV;WXQ溒T1(_3yMY\n;XtuvBJ;V˻poË~&vdƚuR|K ]+ 9tx8~bS2A%ھu;{9F5A -Id( EK<yG`Xp2`>XxWeZZuK5$QY9=Q&`k]6 + - R&hz@)㿘~gv)#UCt/I+bq+Jm7Sizb C잝P"kjDygfa~߯e Z.2E#S:2=Ej0Ԯq,o.Nw޻)ݶ7%Se*фfqFPVmic:~w`}`[lzLt Av2p~S2Ihˡg(Wgv=!&m:ū a:Ai4D!@1^!}.X98,iOf܃'+Sp=\)1uYx.i9r)^CQeu,]zD~{>n$:>jȔ!`ULUK. mH{/yJMXf25 6BWO6@O*DK=hBKa-K2'-MĤ(Ku}'ꐗ;3ÇD~n4Ⲯfb܌Pb)s8@MVp&Ge=HXXUW=&\1wcĩ"B#*SEB%7l%4pė*ϡhӉޅk{VwLS@6Sz#J+J{9C D qg.< 2Tu-WΨa$ z'ccP*Ýj!)GNp=#_CȚW :*S?ʾtoK*:K )2U{DgaW;U|h9sR;nZC+gFyaTqPPBj! T֒2RH/:}WTyjgj`A-*~!vLiyJKzc''m3T`Qk4e /+tf]gk!ZZ4j"]Kr>Bn vR]W^;Et#9[߈3jZ8g&<<YW8 ||]&e8!PRd&*b8eSQ~T("Wx=g ZCƲij%!%D.Pfmti\I1)8~<Aq}X?on C'(x58>().\=37boÏsš=uEek5K˺rzF 9Y(? (|509tk؈=gυb.Oz:%K5 GX Ck&uHSNBuvR2:bfYwF̵h?Tw)Mל\%iA@6/rMbxjH<VT <g//1x; wɁ 8km)l1jsl;]R= T~_[Af|VUNnaҧ}ШA{(8G[iLCVۿ`>ru/S3T:eOƄrr0A 9Ƽ-K2E Y#3݄FsmYA ?'xNI|. Z{ӋI(V!| &[_)ίI%V Ns U }ד*1+=]:(fs2c#G)0QcQJ '62[Z8;2`uҍԼGtU97uZ(czIzjQL<.JRVtS&,S(Z֍7ap_:nr@bu"Jcxtq|i`g¦W:'?oʙZDܲ,3Id29l@/[aͤrz5,ky܄kXRn+153e5όhUUk#PZADEZ{9-fzAQ0)Ł;$=ARw 0FNWj@ITwo'p:ﯝiD_s ~a:Ta{(gcV:@p +;$(J#42[̥+R="NouAmA(tSr j,pV+Ԗ*E8 _=0UdεLt_}J:H ])fe{ w\Va6B06dvg%s)c;}ƿ .b\""eª}i/ MM+5KEu~Wm<''kEg<e6>yi'SQCI#۬-wycܡ»fo}$sy>ꋀ/DN%OY* 0#UH)%x:76"plJm\WBD!Q? M_.!'*)A(\N2mUU9("ϬUr\dAXb|W!BN~ pz6#XɜdnA_כ`ZG3)O |[v:I)-Ȉ6FGQiK\Bw8hoDD|Kk䓋<7Sep(A  + کGKDl,b03"x4*f OW" I6 4cjCRN"g8/I +3U/IdIjɕ]1' 142{Xd2ktcQLX,)6@=jybrC;1!ힷIa{"&R"mpr0#"uXo #:߱%L7VUØ?vϙ|:ϜI<ɖT0RZ>xp' b31u$%EPZi-D&7# 8s oX8S y^Osȏ*G2]N (ѤedH͸1%(7mjb&,$‰Dџ~zeNnQCY<ݾeiMGu3ŮCKg}$_IcW7!E2!ҌBFzogDF%*wf9tdS`=Oy=O  uEL1YJ]VWCEN,BA5^ߟS(dL Vuñp0R%H zxQo k5Yvi@-'y}Fιms{D 3mOyh 2=@`)n،@w~6GQUp\IyKOpDN,OPY:_ D.+O %LvsW ;># ~tIHR&V!*? E7g b@۩ɿ$[_y" W &G?n𐞋04]χk=R qoޯ=@ x/t>xv]–g }@NZT3G7P9CUȈ^ǣ>atр*(NfC/)N,@jZn^6Oe R~X{o&P6^1w P|qe%_>s-w]E^i~*8[E"Fpy&U@R9gǔpP Bt^D .HzYVc!+YGC!oJM"`*,@.Yt ߹PRy7h'2)mV,AbԗP8O >e<u{㫝C'S8N}L"&jӝ)f.1e8 HaT]:jxMO^=L7 B$Ş[il/o7{X4wsxu>ϙ9fִݗ|y8pءX^_h!=U3=/\;AB竱jA@~pRjʼnYa1BQ-mڑ;Nf(or8Oen~k5yb)YdS d4ɳ`7(Bvvy+L*WCc9e8Y vC^m']G7*Q@y9c8ڱbЫjb$+9Ga/B{/N< C`A: CR@()YBA;yf^VEwQC|?}B9Mǒ6=_Q/ =R, bȽy3}L_ۼ@ynw'fstcOPKAd2֡Yfw.a5wtZ`#I~ L(m/G\}{0' WAˏeB`z+ʼ(?pHRM\O~. ĎMcgIF}Cb'H1lP[U~V:$+vO+vp;.I 7"iTH`RlQx>e DMVdo40?jYVjE9u 2S9 ޑ JTN#7Hl"x4P d8(Å9MRV.uȰ}ytur3X+2P# }CC$)3A _8uN";Osmm |̈8ơU(O מvT\)vD|dfcf4vMąMPW n@5C=&vz X1dHp0[JA_křW>hQf3f9y>K -2O7x|={l `HPMu\jP>)Y&~u3md[!`^ٔ&9W~iXqf8&@lܾ2>봉1wW2keL|[UNmQkco۲ <2>ߤ܎J ˢ:|mYҷMGG E" DNFk%v o&S+mTsKR>wNk˦yi5B`4p\FwEH_hH̼6Ok(wPlo%k i2r{dk^XOp渖]ϊ9/f<菆S%b M6 DgnY2u.P.d+Cx V'WsϧD}_pMI/߻]:V?XP^{wGONE #@bWBx2O`E7m0vVRHpJi wI͔j+m;qd`tt-WMt#f}dZxT!'~;4q/Gs{!liGK*p#b ?"ڀ\o@UZD#]rlVʿ ."BuQ hl:K~N> ]`С 0KT :lunfnbܫ(7 h/4+~ . tp\q<6IBacaG)x1ݡMapH1{yi̓*-P̱EǓC 6 VW 0h11{^؜㑋gs9^򸉫a4;]b8}Uoo$7͎kZpgo} _Z.Ogؓ`.<]a9{q$!YZl$Bp{mqoDcxT]T<Ԗ/$$\^o3VrGU)^QU)^ \KJ,ibjxqYS{C8ώkRRy6-9bzjЂ^zvzF.|$im* ^ѱ࣒FLcd &;_$֠YQ,[H'cNbJ#_ 1%srld#͊"^"̒P#zV[6z}4a2b*I" lHdkj6zNi+h%Q q@ T]@LkzlI#}f+OmN!glh5ߡ_HC4o3sW] *9X~_J J}Zڸ zWQ);_lȍD"9#[ ^WKᩑ 2SPI$IM 5nVɱ _&F^+%C,@qƮ)57kjghIkx`'_V/_ߕT\9 qo(0?-a)1 d2np@T?8ah=UKhwGtbZ:r>IE澃ea&-a)UmtL'?7׿=Jܸ^(oJ,V2+Ld\dB%B1P%;%mۄNQ,"dphv7pJaFbQXLVi}^fꂚSa[=*49qұEQ nRvD)G(,]YR*^PqIC2XKmc` cqOM Z, (>Pے{|i`1< / +(6gyCrـט@m泧+P "R1=7dp+WyOgAZ- }KZG&6Yɸz۝z =.2cGD+"~I}Nfhة²BIm Yb5VBo )u&U0q5@ |vn/']٫3<)D -e쏔|).לZ2}˥[5AnE-Suw+XqWb %q;$:lx*Nq#|&i_N!w*ZS#=R3F+P1[pIsRzi,8؅(=%-_ {# 9ʟÀ̻xlpw4T BT3lgbxRCQ9oY bp?*F7%ڢBr~l /8}@G1HZ`48 PN(MV6 ? E` .uBjRVOf6:#mR%D BP&fC&㩊 )\ShgvoP|pi/gݫ}0ůE= Jz,§vXDk:",!7A4K]IkPt&H}ёpj m|RDk6=7W 1ͳщ'O:dzgl<3d@Fšՙajr|- 3`$A vPlݵC_!;8B` =CW#bE2{^{=Qٺ~Oα(IkAT'ӉŪ{y1~i81u :?)OcFJxr5u]1w2 M~XI@ 8[!7]J[u[;'XMd=v{ P72i.0okn/W5m13_VNZ݊D;zJgD(kT1^vh%;uS{E: ШϼC*0?fB@"xbI2RR_)Y!MĴ`E^>8Q4~ @Y|m#"0aսaE~ H.Ebil/*H  } g^{(ؼwz ZE++XU1D|;$Y*h\ tmuB~ Ƌ&Z9<0)O[xW!J8@!F^l*R-ް%G=ļuvb&Tor]+=Bt>+4ow:.zJc^Nap < rI;:™5dO<Ӫ\HLc"brUi@딛Cӣګ=7a'AH5;/T?gC dyr:'GuՓdJ<@-+lnM`5da*$Qh`2mQ>E17NuoOة.rC/ i!WvHvj["{ $ϤK-| 'J bUc3E3R@'JKaS>X2 D`1. ߌ$ ['K' xmnkb\`x(#p̧yL-w^hDzVo/;t8nhcԳ!L &ϬgEL::"JwUzh[(&$2t+6ɴsxqإ `!0CIKzE z)$ۥ?zM?[wP0)+9s*(сeb\:ՊU_U>@x:PIg?9[t)pB0Z- XP^Rvr@.S);M9chyBπD+i0.5$hI*Ve{.a)~Dc҈BL VCxoVi0h%EηA0iu-j^@M Iȉ(y_6.B`a`|Z3Z{IХcvcq-z|56b /jK8hRU}Pip@ }B"Ei2DzP=a >F)4qELvTͥ xZu/Y=q _eIy niiLx)t0Ғ;Ynh Q}UBj?9 ژG 8O%wbǿKN_<~|rKHOf\tUjs!#B+%Q;kTU ȕf9%fAd~Ê))ljBD>:ܭTqe I<׉uQLCZ|ټt8"ao՝ CtAҴ uC3s<*c.U`sM[SrLOHE9`T MT#Levs1hoX"mϧo֛#t:4o ĺZRw5TʔsX`>Oe A+x( D ㄤHȩB87UeGS 篲o g` V֤aTJ%sGWn(j.y4C vN,ׂGkc|Po;HLZ7ѱdWSrS*,h jԼLrVKu4iaInvqE6C-A9>R ߳h]UݷVnb?'!&2bo]DfOrCj|?;f܆ӮEJHj%t2xGZ%5ZU\%1:ĵ"|| ^fC֚H!͘\m$(Y 09,4X>DqyYsMBeT.X2!f1f>$nҶlDFP.A.r 1]aMq.M! 3wOSMQL<nҒ1:X-l6&ڣܘFoq(w xQP|͆LѼI} > [ .obN]\]!#;w_g\3EV?KIPүуP(Z6+zPdRz#zc!j#fxk /qy׭֜Q V*KA6~چ'PԹD)DXUƥJWcҗ"4׸3d,o/.ujj3A/Ơ N_w*£[{(e -$/ %0]'(ڿ4fc=$U[%l)o 5hV`*|$ۭ\P?o؀w^gcu^dH~̘U~M%OX&F~Yb߬-:]y(0P #MT&]ĺsP QDgtC:Z>͐5rpXʲ,qz܍s2F@>q/d]b>)x y>•B1G|1 zrt~.N3hnd/"Jh]&pr|N/x{'MWWR%T;_]ըvcLzZ?,Ն"!⇮)·TgTV͔B,)>{>:ť.$39`BngGYGR1q{k&DrbǥLΪYhhވGHt+n3gq~miD2K>w;(7R<c؆/@˷UJ=`W*g"{FyeltXګh;V̦ 1l92|2$G~꾩+O[0*&nB2.`Ssf mͿH?Jz*X198F\ӲHW _ W,?~{|N+.֬E(y8~BPپX9FiRm[ZUT@0Yp`Ц`uBsR1ם??c=bϬ4x=3vu{2(-cFbxiMWH^N_Yh~nXB1\Z\hvH `K48YUm# Rɸ/C@C{&,38`o 7*hi)˘07:L1V*6xSu)f#^:3rF~#~C-/Rg &LDgO(hLX?,bJFԓ".t'ǾڢRӒ`7?-;j"zHMB'uh|2 ᒋzF@岄dBGO r:#iV`-ųMNQ(<躗Us+K\K3=C ހCI+ң J=`m,㛥['? U=^H"8>\}B㈥"(m!inL|c!}]p4ս \|E1EA,.g^[vI#z=ŵaU z="nͅu4ma}B(˾a㘿\>h󥧉Ƿ4.+/:e&Vz`()ލ3!1,/$w,~mV{5Ęqd\d&~?쳍<dN:qqJ\U75ÎZ LQJq(,z廦xm"1ܯ,͠R aC|LЅCe-YVϢ;ԩIE_+)%2VHQ1X*~G]AH՚-{@\ m34?(E5D?j9x8] $Nlឬ`٣-zSKՄwAK=!M[jC6s."G-X1MĺN/c@ $45_`G>[J t) \⋄ԥ b+9PKj jW/,0, ٦x80fSF$[-F4U}1wqO-sMv gP䴏$,;?TQkZ::jԦX\CԶ38\N.JDjcb]`sGpmELxP#r/?4ڼ8 2r<;v;a;@ ! JwT.0('7rO:epeGŤ%}>R˟M_n@k%81J~W<>6|(֍2`,AΓ+R7OĤ],7rqI-5w'P+bdhzg{#]W [i4@Y3XA$w:V؁|]<vRl w34ܱ}6gi_p)"81y{娤3/)B =h' V!WgVR_>>Zܜ0.Y.oJ> 0)]ZfJ`z gTԾ%`}*+ds |kko`"q0nN>^_UA}B##Kk:V:+:8]tC g!$&Vcf7#yߟШUҒ1<ۮ?"iA..C]sd;k&兗/e crswdIiB#P(,,eԠ_Co ,#zE;Кs(󌩂Ҩ U;.Dv݁CcL4Cu ;RJX+o~ N#Ws\6Op8ygKXY+4;k3!y'_H h~-&F_< RN :F}N6dmweqTrѠAa9=)oF*b|‐;zU+ρ|٥X?|I^Z{򥁃{{GwgXO#C5'r۷atM'\82O#E[7O-id2 oƊ=Rz7I.JCToϨͥH+:fMg %G$ ٌf47&lWCɍ/Ab傪#̺P",ⷝʯd8N-0cR Y*!Q\u.L͛qo'9R746ɛ3υ?RF9K45qܞBSNfjbfpӴCA@d"程Uj'Q>5˽ mZ)jQ@8ɻp͚Podt煁h^S$eMV .*DlaK8l<DRCrj.)exyq.{[\_*|˖?F߻VvDC{ol}+:ۂtp'j=W֭,kƞ˶E/SFLYS*90$ȱY%Y/Tf8"슦@Us I}gH@\ uqVѢ-9 $@,Q5F:SPa||J T-hߒdz'R?i'uݮQ:;T*k[~T'})PCm9|_kViVy_[n4!NX~> igsߑv 'ӖkLJomtlOޒ~VzFXˊB 4b$Mplj֨MNhZPa%EbD%&BufEIԚlm``ijj6kzP^WdѲqa sWORCkGB* /l%.FZ .Y~aO~ewbl{x+gy#y BAF+()4zֳߦb'\C쬕Xɻ ^2!CIO*I_A0J[g1F5*pD"Vx>×v FVKS/xҀb'GVm옘|юx>̘6ϰFڑ[$q rJؘLff]8t:IDE ɸ٥#e*E'TM%-<)L70'?.~ Eb[5 YkW ViH\{sd;@%/OԸ-bpП3EԞR=& W+}ZW vP;e Ƀg~N*GN,_VX)#\M™>Ue^;6xѺ;{%=He˪ifDZo'B6`>2#_7DE>O|Q((貜|B͠e9 ~)7`F/^F _FS޳HUR"l~:AU/D$ !jD; <f t5ȌbBRH48 CygZX9bNLfbk$CG앱e`rM҇%~q&H&:o7D*&W?o9)Taݔ )!C}XrNÕ'nj3Hm~bzEdtS)(QAo˲{hj bIX~FԿ_xlEWp5Ȓ]Wf]c'M$SгҮP{.Ḥ sWH_zzdp*Y}7~zjX IjL0/NkN,?-ó OG{ZWf&<(m: X 7(ooxY#/T^ #ZDƎeRl9b=}n3:<ۍ8J<5OЎJԸw-.w<֤|\Qm\z4%?xjnIgS0`wאho5k ߞ{>Q)`qZJ41`HS)?m/3IXZQl,řEZ'QU?Rѥ*k`DX(ds->$RBBwNrBq:*Sļ?drrpj\cv.8k莇& J/PaP#1\Ýk}}X2lUc/ƵDE֚?Ƭ\+ +|>R` A=/+!n ڳ9^zSndv 8hGϼ]_4K W./VэY 4"S1QUx`u]UkC^T_-e{\D _d^hw\i\"k;axi(J4 ppp %C,ΜI;A? ,EJBg/`eBr!uo/{?5X6~lF=f:jtKs,|?5F-\ !.ْz}DvIyR-a>|ph}cOE5:bPQɐx=뜪7/h->jz-R/i~!\|PBOҔ_)` ./ 9b;jo5, t!&낋Wx?HK]q#|h ~WGLd3(H6eS:|i_Â'ڢct:9-a3EOڮÚfPoTPI`tA7tCuH.V^poGOP{Te/}|ys1GQEpdR9SfcT1 l&fVzL_H+^Ŏ'tnM#U#G} o\h5ZBܤl^c[@vJ yy:n|z3r_)yѥJL3}v3ݭ ;}!)ysTU-YYjvE{|țZ&j8B߾N@wd'+YĹ$ZTLxD62/1YR aݡ *x>)Ve/޶2[˱j-ZmHx|2\m24Vg+2P:~qxJyO6j'O&u4!JTWf`r3RGM`tnQ\,Lb˾Xp"_Jwq]2! _ʾw[{=;ˀR+:S)8rP9 )=FB;kFMd4k8 @Kՠeb|\ 9Z?+ 9R$隦dP#'|p ̻:6`FoZ0)aSj@`0w_3WՃ"'xka0OChT#Ǹ>!l|&^3L+Pzۀ(TJ- !?Ls?$m`V } _f0\@%LvLQ+K'8pbRNc S]4AĬ>F  \_H] *HH_cŅۨpnØsF6Sx?( Qd|$_!EqDdG`.Y5-TKDV.yⓄx8G :Mcg@ᥩ.SO'TtI uŘiNlw`Nļ)/p(g_xQhp]ns)5* C`wʱH+{.i{<Lۛ+cŊh?^:7T:OCM$(ZGkjsMD%m_LЊ|@Mg`1N^$gw]_;%ȤО2);&TfHhxG =Ad 9w a Bk*ض\_j&I%c{:iz@]!T|9X$6`޵JO s.Bi HyUX>+KW #LF;d`Cp}e;zfVW*O3mH StS Tː΄Dvtب&G'}W,1H\F_;I Wzp.NxRծhq2լi<{ҳq7z)#m *Sc3o e|!Ha_0?ak{% {^j"->zI'q[HBF"qC ެklb<)ogҥ?~XdF 2Hx`UqvaHhF-Ƌbꮭn^33)\jS~`^[$4(/~6E%3ʰҊ lQkLp7kZ1%}tduyZ];5%c>K|YC\dd7`c8+G :F]s>g0RjOW&&Yb4ȓyno o2!pHŒҳoFY;|YAzj#G#+d#>@d\Lo 㬍FXd 2Am'`l*i`) bD FyAiDV{XDxZv evDcSN^P EK(cN+jOȗ=%dװw]F?lCSvőpK9y)#['cM:NiJrsCR+:7h[>j$Ҟ^$6F|#g26"#Hst(3czBX =^?=Xku~ =Ĭy(T#O f@K2JK4~Y2Y־LkسUDhƚgw-8~.r8u HlmE0 !ԣpe[Ȕ-DBpoڡЩLoco7ٞ['L8[͑pV% -7e.ED6G#Ca<=b,۵M^dV|"ѤEQ5 ʿe͂UKj Yq\=v;劂d̳?j$!iDqѤvճ$Q9Ei,QSWV/ *Їk7Gc@m(S@\;f_zi3b%ylOlPH8 f v ݠQrq?sT7*El '45Hc28 eKK"Ap?]>i6wϙ(saf|UuՖ>+h:nwy%G?Uq_N[!bKB)ͩY]UX5 %שccM8 P/`bcsj1.b | ymoXennjD[ 8  ?B~pcI ,>pmD1 }+݆*%33^E4j$tH=,&B[N/tN,D#{i.0\$b,;<ܵAYw-}0Y1ODQ%n|,rP[f^%3 VzN&,XB8S 6QŖ~̱N;Ko=P4η:٭H75A_-2-. xۜ^S1e6DUZor8~6](H5 ?a39}261l̰pPJ3[ w ; OX.۸L"~%g\35_  { /Dշ[J6U6򈯶 /!8iL PʀuUb[بGdjY@n'><f۝;-0ܖk˟WۖFj#TPsv z+}q'H *(rnp.N ~\9d}v)@w\kLSN{x2A7%Q5?+1cU5wpYмt+:3|$rvCG,3B|ykSsgAq+N {+yL?h  c0H]ʁWioN7HArH{,/dbx.6^"ߥ(ǽ5?+i;Dٴ6QK7Z~4}dٓN 'o!@qas){ϕHO|T%b?*M~D2qtGzANBX[/KX재 O۟й] Ns'Hh>vE5[td[Ȅ^IݻRYټM]yAI}m蓝WRkH{b.c}ZA"ӟ9F@RW " B1bvf2њ"VmUZ6($ fO& 3O)Z*DZo'v&j"ɘl1MְA6$PbS`qws_XQ+ͺ tuc=eGܧFPqLy>ম-QZ1N 7UFBbxә5]-J 2mmC⻪m~tq}'ut6MSE:}% u2wy%-KvǎG[S{iԼSt_KzMsJ\0ZT܌¨8>Ka\je2Pd7??}6mc$lX}-1hn%YaA7x=,dN2Q1kY5^sZ aK\=K|0 5v1~G+A + JΆN8Tt&D|m4_%⦧Ҕ0wzw@q^Rc<j>"A'm/0N! f*7sL3tFOBVjnx*>˘x9 Aؕ!ϙN(Qɣ易R]i[uni]p7 Ѿrh¿k~EYxrN^l:Xc$8JB:i/zvפ|c]S Z˵o1dH֔*7Sr "$c)%6 WRG4[Y_|ݢ3c yW'BGMܚgH@}"Rł/b釬PLx=^m!_[f,2LhÓ4(,r)U!F5\iT.b-'ɔ Ci?ʧ ~n0Lվv3[MoELuگпʈcIČ_'֯5r9*O‡"\a]dh]E[Q ֠B2N}V'+][k*:3!?8V(j%k3R~ڀJLy W:i88v C| GȐs3,iGe"L6^g\吒|Dv༩MZT }9#]y\eG$IC^5gcxtys~~溰JNה/d (r)>~XZl lrrgUwETRxli>C4z;; 9k 4;AG8f]S1ܐs^TLg'fVtoZH1z}jC@-mz:?+۲cxGVDnWn ~֏Bo5n)U v/L ؜~4lSQ ľXФp3pb˚Z]ll6w7KU"tDVx meUphK:&;fv-6ǵ6#pNH\1m#_%{g.N?p- G3( M=ڒl;,z)?ooBC!>ÏxAknYrЖ _x]Y'^*poVtf]QIY =/ֻbԁ/z$;6@_DHX$k.77,uqnX9UurNK@~vlWw{ɨ eJCkf-,aPY18a[ A<2eG.t E]m8tgTaNJncMK#4ZMTzP:3 }jPRAB4gYX}N8Dv50U鑜e7E{j6 G# ߗn;ktw}y:]yt9L?<|;wш(?"ymkx! w,[xqkɒ`(:Nj=;;2G\{XMފȒ݇#}m#_vsfEoK^`i`2oP]+A4Wك:{'#Jkq-c!, IpO>1FO1'G_|GO ?9۲ڻ,é5׺SP#Z 98cy#ߜr m_@Ɠ<-* ⶪU"@4NO>~v]SrNJ|Iϻڰc?RQ[3`IYXJ oF4uj3%H X iSDP#tPd[vazYD6{V~FIҠ d _`jH*&2=QSmMAhNQD\ϴ͔Z$)7Ġ?=>?MD(W_Ҡ/Jdkg=GC_/wP5=q/ 87>RYf۫«caQy/.&F]ûy:#M#"!T )HɟyOE9O}'>TS hW42fŭƫSyaVcb$f4cSL c7hLukƔ/Y[{^ͣ,*<_xc ըz<]X3V?hBS_Kb:!U…NQSv% tHy^yOL4~i*yܽݪ?4p <dp0*C˧pf*CJ|VG;W'Ld,SX7>}DP(8}ɁޱيK_pwQgE ]`F( o\o eT)U=DHA{a閶T("ivW{DlTnB U-`ϯ1؛߷ | ڑEMhY[vEV=&C7X )plLl-Ҹ~m;6>ݩG j3lS1#b ;$ڃ:E) s [HLƬOFZGvlc9vaI'w: XZSKa1YHWo{խ\NHO&Sj%-p<]l> z1$\A tci dm{ pmG !%x,6kj'G5.0GJ&VɌgەy[Jm'Mݿ$Ps z7ah&,;M)2Jy#8O몿\ uOHM%OKi6"͸J%/gV^ze KEzj֖Chf{S#KQn^}Uyu:eoHzaky3,zq-*\CXԹ~slRj>ЪqK#'+S:ϲ5QYf[vN+_N_އ[U5q$# lp^8qLT560cg4=-=rg9"hJ᠗3p ;;n詪J>>~o͚l:d#<>e-⇐}ʑ!mU7"dg5'0RUd=PA uS#:> 'k s!ҶD4jn幕Ʀ?r qmcx¸<ܮSp9'k%̕6 )fJ U54#a儦s4WZ qZ D&mZjKI/N|]ׯ`/S/H晴'rS: Br5.O2!`oR4:*)rґy/x1  j.O'e~r6)wNێ`#P#b #׊g?dID"{꙽B sy+ ZAeƫ"$nm / ؠ U|y`z}a!`.by@NpiB/J4YZKR<wxJdK"Pc'l٪ƾaY2CZK#vsj0&" F0$jجg[:L7p ?ƶERp,eߜB a헁=Cǖ#: 96Tͅ%nkO}-t'tT:~"tS^}NB0\J3^Dcc5 m(yDbCQt& 1D{hnhϼ5"hYkr ?LYrTb l䃥oC Y={0U̪s]ɇ8̔frh1z@rm ;AN6;Z 3l0 B-4@%>uL@mRCM.޴d_=JY>P(rW wϙR`g$ DV5H=os7 0E0!p(B@Euk 2&u6R6,H>; mP\k7tahފ$Z*AaFf@{4Jwj~\ g/ Z,,`$;|*S#) zN,bgʞ2\ezmo_T;FD PʲlT5T[N: m$קԣ=?H]pzpI$#ZRu rzh<^OLS^bUe`/>\أ~ڛ{6/32Vw#uR$/3˥51;|XT#=Wy3A=_]O\;eA՗ &3G>y?N7 Qѭ[/2R㍑=[WX̌ae3s+:І=J* T=dfՐ#!JfmƙIRe?)ށŹèN8e~e S{·Qd`5_|z芽VW?O,hZI%]Uʭ}ؠQ s)sJӈk}Rwl@,"[oM37Ɠ"sRg(b[/s532 uL&5k?ڜ,߬].syL['6e ~-h PIcCМ&17HpN֭dv-*`NGcޞ`zxрTt `y?W1:O5 \?ܾYTk{:' 8aҹ. XVm[RX{oUډNPoU?=vٳ5vA{\ik%k|kG1Rʧh g87)$ABX</S| -[$ v!Q8c g]"mjRʗ᱋{>I;> G,|b-T]/5v 4]6 լtY90KHzZA1)@2ѹm>A&dzȋ1 ˂}ousnҷ =3\bA0rO'+Ip:lđg]ڝ($p`&WzbpHġOuoXKA.`dG5p~ 9(R:䨶y{:ACVd*Fi AlӨ|10) M#c`6LqEN5]9Ɲ3U^Ȯ!Ɲ(q 09JGFMҦMGw^1E<ހG5 Չudv$0<(: %c6nBʮMM&0ua1Gz(-˄$=4d>#70{EWq%?*ӟ!Ǎ5+`mY#mJCNLncc|`">`/aoňRdr}NA2mh0pQV[ˍ_~>mm5gD. ?ԵXylp.2ac{vRĎUlӴ傧깙^Ü$̉&zI= m` ā^H`Գ؂4ʗ[TgåӒF$8l'4gC+VҦ 4ӔB2&yE tA #̽Jֆ "?2~?sFV|NiO&Ÿ12 3SG+&O w`mX~6dM^f2J <F4ѷBaK+e2WЦ1<5?BlrHe3:TvlLFsa/Dڸ&[dkcXK&HftR{<:p weroᄙ]6 `r5ʉᇨ qI$$w؇daqbZv&y z 7$fэrrĒCѦg|k-mkf1?iYQI.Anv/"NNz*& 6_P sI}H.f𝙗p<o+ʠ@=(g` QM~4UBO^ˎF̹bh(JaEFY!kĨ̛995X@&f'lLǯqxV iD(|EH]Mzr]>܁ex&s׏I6j֘n+|P6L-?Rw]aȂ)WrgH;gcQfȴslUIf"ei^?ۭ{K*Ks0Rz<ٓhZ&AO5W2d/3]3Y9((52vov#}5#< hW]@E=.\qp7XB"In^ V'~ꛓiNl/P E=x~2, d_<(9zdD~=èha̴g~*q?B8yݗj@8" J)dLQcc4u X7lk؆-[:þe^0Պ$IG2 T:{O=;p|W%pufNW!]=0\Z ^g 40`"!j7}{>=<(t+2rR,s]I}Lb ;' 4>+5.'X#{Np}i\|z)o^{ 2ipd],'<}B 80sOJkTwgw,G[׷NCTm3Wl!O[\r.sN|ЈzJ!Ӄ+~p̐7(alF uDlBgm\w /ׁߙ+6Ir4_{}AO15#ƜiwQAíw7Su‚76 %eI@d\Uٿ}|O%C7i`u&vY&#'+*FU6):JU HuҲ;4U 0iM+As? 2zJAqlաh)ZBNǓD{.^yB%84C5[F'}zyeKn`JٞVH:΃/1͈(Z1{mpBxKYq=j?]`dVض#CWcIC\&X+ Z:0&.l!؀aXٺY{uZ<ѲVmuGI>dGf7"x >_-o8s[[=o"vS_,&qN CY~ZOuY'Tr8 r)Ŷm>Hkͣߍu:Əq#9I)$q NV3PW"ZBX ? ]Uo_q鲵2\#> p`CUO1Z5H`.ͫٓɎ獌nm;!"JZ2~\٭^z.CwB~Yp瀼{&U3%_WL#F`wRU Cs`&NWC9X& 1&֭b-ا:]Ŵ K{D;6ړ*)zRj /WJ,)ML-ܑ=@hZ(7=U{r(F ң!NߕkPnm#6Dp=z^Ahwz7h7ޞcim"_DS=`آS] F5e*:|@j4zܕmTҾDZשl 2$1?CQ[͇{ΉvHnvJw2AvѬKuy!QSdXQ#DkE{hGc"i` $.y=u%K{B׼IƮ` "4R1d̸ֿP:aLXt8 :7IvB=}5 Xipu1%Q;F\egh!ѷ(0~x֠R<]}9N-f uYj^|hC\JygM*aorޞJj=1Ttd[AxrX!;&y 쵁 El)2c%_~ճ| GBw$:>A!e`&ܑ +=Q2;%:u3b?4lc2\OxJ6KSsWXf2;8B(|Cqit:R)hɩYjKJ-(r3[ exk+CP f&=Q8MdmA3dg4ٝ.KyT!YEk6DLLk19sV{bUpE*~*ĩ=š8HBq$P|mfY[=*_'+= :%:Wc9f >eAYmṟ x66^9tS`n 8gp.X }aobWYg{ϡ(}tl ݸک\zԯ/fg c/)vB[ ti"?{|TeBӛ$jtGXG5 ".ȶK#?>kU5-B}dc+__ SZSJ5̪_p%udUzdR sl~Xjz`7{}KM)l@W)J$ 7c1jr~ߠk|GsZ&WQ;%1?M, NHkzb[A=XN=uB_q~X ߯;m3N8ی6ILsSvWT~&aV,];X%\sϯSzLo^&~èu!i.\Txhj>ut=OLD{ɕxyΣSϖoD&p 8&\‚j)}ϊC d|uUUg bkYWW&t0IWPɼNeϲe tEK*}>`֎bcSʙ9Lqqjz / S讴Ao&*GRKy۠tMjEXOE$]blR 4{,N!QͣMSjb]Cc9.VuqDkBd^i-֧K:ĬPSlpW󃟮\qYv W >Jcbʝ-Hn 8/ E}vL \Cd5vZ[F<쁽Hjߵi^1LxK΅"̜΅3T=f_0sU{ = 9>{@= 4t.@f0dM%,mٙfu.%9ǿ;CFϞ/qw,_43Ӥt~u%+1KDfz艨Jq(o8&60tr4+PdJ#wJִJ ѯ[a=$ДolG qYh! q}`.FJ\A6X?EzW${2g(6$ 6~-0\F1A;ady=8V h6sa W@uZ٣aVӈӀN[!LxmzRU34Ic)E0?D7{ƱO5)eq r~z42?7ưbR`cFÿ5Jc)@# z|CyD쑦#e3Ĕ '8VE)tu H' %PANмj]_JnH3 hk Dxhv`h]|S*? +0ם! {z~wdvu\{f \\NL7f_ IGqG1 `__J7)Wi'>@;knƕg{nDgɉd@DM{_ KV~pyOCifaܤZ`9; cOxd;Iԁ|CNj"REg:.t B i֚~wv-WV ;iCy4"[$’A&;0zA_;ɠ݇p5ㄟ.."txNUxȗ!,fiq0H8UypW2#^pzk0狼;NF7Œ)spMiߘ,_ޒˑɠO!`{i0vAh-KJ3AP 󡆺dcI ^qz*{U6o 9GZCc8]愻WAJB"Q˕Hg1sȖ-0cWb)K9t_21`9C&SX_,/Fίաe-cJ9 `8^5i͎/iIN2UN}W+ %ްj :^)%b&O肵b_))$}J1<1ȋ2$A qU(ɘ EG@W).&?AFa '=;g`Z2?/ޣ!׻PGWX>3\/֢Ch)r5M{ <+*<&Mm&}$&0`6ES9)rՆNf$9+Y H&198#@]1t9j-V։5.|\zЮ8 ߨ>Qrg.atIǹF(O\-U^yUju9 (|  PO /f(:RXFƒkvѵjb!M6ɩH[(c2K~2۷K|̶-VR/^, 8Q džFzQ!bLD-2ϾoDUwM`ٵruFĠMďvYz{{.7ZRd昘Ô1dRg䣂ɦR2UPv zu `6n;;>HOB*SˢMϡ }õ;XۆIFy`LbյqlL:Hϕ%7ehk>TVU; b4`YlBc0hb@=:wJ% 4EhNMʹo$cga\up_hw3@_0;nэ?V##.HPM Չ+v c,lfx`hA(ϝZ;ߌpߙSWO܌Ʌzp˽R?aChm_/.|ܧ_Yk#Α y< R  üRB^SarN;~`ɸ"3fL\[Aǫ:Z5HċhOueZs 򦎇 m9K*yQ*xb|'@AZ[Tv1H#/9(3gXLEv̒:Bda&F`+ ǁMst[NY hm[Ç,dl 9'7e|h`0q2 je*;ֶHiϮRLX*ۙ# bYĆt2*Yek4-IҕQ AcR,r"܉yОS vH/Fbw~o'8 GH73cIh(A_CJ[ >쉽]-(Ԕ}[_V}Ǚ+-\|pVh$]FB* E8Ms%A4[zP%bb!-1nr=-}.+g]8`6pcq6!]D%~V]ӆIZJq[3 =6'3XA =,&6nھ`R׎ŤQv_?u㈔\ph[9$0t2׍@2|ІJ]v;3PR_+a@ɸqg0Qk ij_% _~`G>sC-y3=,Xz7VἛubo0/~HPՋ0 ;dYA5Bipfa0՜{(x?Jw~1rMMX4p0ѯf&W&{m6qeo/.M&~F2ShHQ$("TVSr.4,]P I۟3_S VgMF '_-9In g/Oe 2%@Wu+sv\W\ܡr@O EQhJc|('4,:B@OaprJPX l?KO9오+`MU.`y!H:6E2{̓"BF%?r0@ꃦѳp774U27L70\e?FʤNoYAiѭ!Bm1\,nh؝ow=N*kռ,E0Ol fi ̦O r>98^fbAƹ[y}A :Q#\W8Cb:@~Ƞ _Jx ӉQ Mk=lE@7Q_wxQ5n!Ƭ_Jj-TT+'E$8M7]twfv1UGdt(6q&@"y|hEΩZ@+\M$GُnOaHҹvlѸ?"`0hBijicGb}g4oy8>["OpuT LDaReN"XX[q>; +8a8[=9DLQ_TROx>}V0=e ~8@R냴>!n3ܯz˭ n'"Gf:=5ש3Q?goWOɴӂ_sUVe}u|/!g!DzO~Q+ݢ:}%Q[(Zs#k;#t.ڊL# L | "<]R5f3=>䆵gt*qB/VKhMQKseAϭf|'(^cWRAM z4nFhSfGBL5*it>:ׇvNUفycղ7&ʍ!K_!$ K*.-)ZeT܉zׄ?G~5 S? nQ8eo`*)ȂM*Ъ1un+b:${|`k8 (8Ne㟷}Ҩ?MΫ;Q+ĕB%r u4gd Xe$`6i|U~]&E$fwk:Pin4fE Qk!"ͭi/Tg.DDsb͏SSDVMZ>p sT|x0)t1h73? !Ռq <61>[-9ʻ)a&07/ g-]_QH4xGnrws$ߛ+RІDuR=J;dr1{`Lϸ#|Ѐ(%;~)q+p(曌EiȂAdM*8ӃY!ݾ߆ 8r\lu-{& n- I2uZ"O-b ݃OJMâq 3xɣ3m2W, J{,Ԥ0qOJE"w]b)P$-Ed5i'`Ơ1PBRh ȝ&vkJ/}=CzXbkr ~ 1Km4w5,@j\]IiƔΥ˷CEBh>&۶s@U*ԑ =B;j=ҮECә\ h|^z(MևVnp&5 _ L5,r qg8J/0 }P^z8 ]),_P/)݊ A iKZ3蠭:'ܓuq jm~R\"$ulQ!7oc vR;P &$k!q zh$hࡀ5a^6ROcuOݷ4sM0"3 )huFp'}\;VusVL:~ Y7/*SchƝ²9@j%oZ*b;A(jo\A%qr5|x&h4P S;̓5a%4-L%Cɹ. RT" #eA> lΗXh6I 33\ۍ~ r`ڻ9򋗛/ӯr3JڱB-7os_,zEdJAVY2<ͩLɪ@,aZ W}˚Ao9VcSN[HdT` -[&"U5 Q*uH>hJ$q5 >!#o~ {F z'5 HBfo/3pnz3&28[i#Z%r)`6_:F9gn6e?/6 fS8LC>dam5щvvĈg#JԻRC0쾣pbQ7Uݵ@6ݑYg?I\cĥ[lTpt _LGqdAw U;)qҟ1!;I& Ͼb,tєjw,hh8$l/Q mMTxp+ A F5-"SJD B7P0beh){u*jMyӝ<³͓Q'UݿlziV5U?kJ"4HmXsAp΄6m>m=4u{h=epZ*G1z.ypI_fꂗ*vĥ$~|2hK ^$(E]-uEĜKK-ߦGC)*a?b*|p! 2q.RܲwvT~9)o 5mʡx p$w#9 z>E}E:2v.ц$E^/Q˩;o%kʶ~z }e (8DR<ۛ OGcR$oSNrqA\w-/ Aѿ"CLz'3IfԻ}@  ~d&"{w=+Le=7ʾg9;O7eKgN.YB82 .p ?ʼn?C 4w8,; j++cM%Iy-s7mvҨEam&8čpdF.= PgU3bLk_u`b`c AmMHHp"c/s.zX*i4BXN) V.N8 ExH8BW-3OY;ԁsa',`ӪQzfۦBi(IcUFjK @c*XĬt$L-vBsl(fe-fi>ZF;O\DyWt%K="yhPG}m? hτG%ea={4|+'/|Νe_#@#0ؔz0~@Gj#Ay=sx SLl}OM+qooKv2h 5<kCkD&|#C Z] դ  岱ӗ1u1A#ͽÌn%/XI3D.B^xg|s'ʋ4\CDEݢeоԶIsgr>j,3|diY,|=6&CQ`Dy5'qplPm=bx7vd5֥~@Q( >o9%)4DΗLeƮM#`;̆`38sɿ1=E"w_bOgqr 4Plp#$^T"|00Iխ0X1j_~;Oh*FGE_fґIg%WNaІ~"Xʷq\sR3J_#>yxn";P+КO#6TK*`rtyT^K0%J5 w{:d;X9JD4 $ Wт#k*\6z/:ۄ=O^a*ߊ V٥s& ݲV&MvGH'ئlAkŎl cZ6dΉWAZK@b zpu'pMǑZ8]I$IyN\0((cPV%8-(9D"gNf'_LLuo՚5^~TBL\J YmEͱ[p,IMu0/}u짘[! =ӣ)IqsH-HX\P)[<>WSDݬ R45⟃PFN)׳5ԞXnzv~̆_3005>F+jO_JRY+VD0ܺi>CWkj 9QXs4co)W5>M5ZISbb|=& X$Bj$ge4<м {iLR;нm 1V`fh-,Nxн|nh0B2/It>0o VJTev֝wy$3؟iyb42:7qζ Gt%~c~iA<$I+[#vV沚{VS}g³*iY'qgg,as;07nb0H $d/;.0fO+بpA?g '069J"T^hʄUۢٮV.͖3,Dl=u Nil=3YA IhXQ9m$ߦe&x|7ֲؚ\h a:֞@:_9̘wr02x]YtdtM5]6U6<2,,6vX-g,f2)/z'ɝV6W_!5UNrWD#൨ KO3LU=R!-0~=G1̏!psd8,޸r[qlc5|IKݶu`Ij,k"*gVMP[/*6z'\AqJnƦf&lvk9.>Gv&aB`~;(v7$๾USܮvgC_ Ng$!%+ D@9o} P ,O v8z(<7Wl2AN.| N<:fv8fkf㓥ttd\{U+卵4¾{IWe殓# +gц"M2|t%:Խ?y$QtjRuQaC{ħ҉UAt*UcDUΆIJ]4ZV .UřճOkS9~sx/dB9ek1ib(QqӠ8vU8ws 9Rfo9fy}x/ˢ}[KLVwKZoF_Q'[ŸY0\t%$r(6}j(_1OSNܼvjg^OVRxrI6.0 [ pÚ0U>Ty1Ń㎎gB.uym켇\lJN߮glJs?5bQ9% %k|QVLH.&EH(AȗR\*aw!, tiKc'Y#(~8*+\ K$k a|rp&U4 -Q4<*;u|>'XOW=X#Pc?UP?b|eKmÔ;=J!.ۓ*i*6 i$mrnX%,d\VCظ2`s=P"ku.{kPM1_2tS .wwOӒE?rO=LkuWzS܆#>9 '"U3e"XRh}nZcS6sdE\V[|T֧ڭ~F [oy~p]ӌQAjQ EP-]HhqHG=+__b)W ^B;W2ULE~p'M @WSZ4k1<直s'kwܡ7n5ˠ{ +;;}U6rܡmNjR[aG8V$ݙvlK5r"]tW$51'Kd:bl$&^뫜^. ]~ھ`=C@ALq`Q`uH0^',| Z> FN9AS}{_fN6;){\;:R&B`{R`~$:BP*д? VŐ^}ȀxK HPDJwIIޠgΤ(Y/ՕTHf}$e_v͘W7cID0#BcX`|R/ w4HMj& Cm%K;ُHֳ5mbv!}wbΩ]/#ݳ:tOlepDe:%>L2]R'l.!즠ᇘ-1=qH-%Rݷq mŖ2:eV&|*@M+S&vl)1ȅ  ܺvi>nV3;)a_ RK#lt:4O&# X-5qr94>"µ'^ awb[U raԫ@ Gī_onLf MX7Rr8PD}{-b!lW#v"İ砩ܗ|=F^dW_ڲD$6f}a/rHllK4 ,FY8ށS#POrR!XvKoQ FvSC9:LZ/ŚmIDykŽ ` x4twYpY8fЗyӋk}J=#wBXT\om~~kj"W\wtowwzx|kVv `R =V !J3/37:sGHn<J2.ȨsVƇ i CDtsƓ#Bt } !m' s,;?;Mz# HCm^80ϙd;^(iDz-ˋ6=6A;uwjɯ!JPwhCMw6|o ܕ~P(Wޛ|&F0|&pSBU0,`QN%Eh2d50- k3'fe)-y AGY2930FݹD6<׏B#'6'%o`$ZkjI-`Fgqq.( Hg) 4Ӣ0CѨ>H7d]nW]QRW5k=ȐUt<$#Ǚ}G'A20 `pT=-mHV,7~YKYiDc ȜvHPAoo/x &Ne+QpDُ"B{-P81I%S+dӃKxO)(_E9 Oj,WwAPS! U\)+<bHFk%u٫k}Z~@4Kc1fE rj ^F#,+epa1QBV ||2e×#1h(kjo$AC9%1/mi3\It;) ]3$ m-(sce.s (RaJ˲$ct\haö_mNp6ݘvH=Jp eձ+AÑ[17[jF ӂ'nc'S6gFKMN g:\ژjp-?aGŧ:q>1,dҶZI~jS)V ]E|GÅ4*0]@˲F$U,"s?\Fp< ݞ~ 싙 RKG6⓼iShiLA*F4'=/?KfazSE/R/%hZ2 '9\#]*<8q/l` if~,I!rFOB=r{u2abMY(v\doc.{JeBÇZ=jM..ؘ@ ! ~}Yd$K,߲9{dRjnQ6`5fuVbsU·nM+(jYN-rMs+Q x2ǟVQ?ܯX' ^!I{J=3jRCs0w*-h(ð%7wT DXl&KqGtS^$EJxEd]ȝLO+,>A1^V +B=AmFf.)P9U1>e ,iles[:TǻHP)x&k|oq,Ⱦ8|R hݜSsr817|{=MX0f%E, }_3;Ʃ)t&h:h[Z>+6G-Nϕ 3#b:7?)Wmu/n ]en`/4ŭ%l0HHxb$֌mʵ7f*8ՒߗhMªX y[D8ŷ}zbR}FgM7γ%u?*lCNɥSe28tmtk<`yF/lgӖCZk2L4< x=b룹.)Z;QϢC*%exKP$[ݮ"=m"Bf* v.Կ<žOjNܙpJ{[çd+d)8S/9gKE kǗ0.Gt^4nuFf):T HDln=5`-O|A(5D!bky+wz9sP=zN9D~8_kw轠qyШ(߿ r~#{&ACOuQ9tp)@jmRex]"}/ 6 M3[S4/ƽȉkmeuaɒTwL6NkO%7C:TG>T^¢?`H%FYC.mĿV<R1bwqg w>o5\k]Z)S12sɽhО.FʅHE`b}wے#4NF.fմՊ ;Pk\F(Mˆ~/Og"||b.q楆yr;]k@hEdm!O7pzԲ6śU~qXHʙ%rʦrշ5bOH>尤e)<~}mF5&לA]̯zL:sbMϭ!HTaÝ4x"+:`7s 7'4Orw8)՟*JXmd JeENJa VVNh&_ȿV\9*Y/[gjySvAADXfb_{I90E3;zQ9ė_oCdΏk+k IwKhn>"q~=c&aƼ%_TeIuVV }[\9\btXsՍl]Cy`1e/hURn:Zs, ?iNWhbN('/$]|xw[<Ω3ctM1R+XYn/*}IbGSGkcer=舾\8uyaK:rxӥ3@#."䥬۬6lC^,%ͺ,NA3?g2!t *F޳vȁaQo'x2Ӽ4.GKlBä=v%`.Ca3\%?dLeb5CO! L48燍4Ab1/c%Ici5u 0J1͋b#wXM T"*SSc+)?sb&[oZӮLkrfVN^] >cIk0YBQ,U%,_/g .XiBAQHSmj} ?m{=7G>;5w:Ac%M@W`(ιXFfp>$/ؔ@(A"ء>sJ,9FaC?o v[0[_HvoSyb䴋ۂ;*v?Q9ʳʏfy?RP`&%%v ڋ|IK՜=dCLp2'(/0;4tIH& F) Sl[#$A8LvJw4YW+W#m,tKV,BkBM2ZiM/]-X;ew] *?Z0.Vn#]0g >8G6PvE_Ғ7 ӉBGz]$=.%D\bЇX^nve5-&#̢[+[}C@Yi0UmadxUE"yJuOخFÙ <܍NCm5v61>N2ndT™3)q"AjSU`+LikXmL,AB )O6Z|YrG8S_=[x#lew:6)s;{П~hdn>`͹YM y)\U9` Qq-pqX=qצhcouy+5)L虺;ɸ0̧c:1yd h,vMذ>_NRJ6V0*$H-NWnvy=ёFr7YtRovkTwe'd86\{G kx Jv/t aQe㮶 i0e5z/Xo 1 \I4{3c/z+r̋o|Lq?i{ĀRJ4MihQ DDBlXQQtSC)Ȳ}[جCИ ތ(,ås 0i%n,9G,Ё1Gpizz|lxٜV shèDW"U|؀r eI86oaGv:g{zuef?U׀JXui0^3lbCVJWFs,Yg mУ=7v8Z./$BAhA!aÜP3:mlSotjms)+`)> rRZ#K%Ʀ 8)j曝 SaZ&^@I+fn§O޸Fd_WrbXF_c`9Fa 6)p/,eTRӛE /$+9)*軆vh,;+F3V[U?@$>g}.")CK,:ϬQ7֘ џ4b =>bPǸvwiX3O` ,3 aSURq9kl=w{Զg\YTi_F=#}׋0?4 *iJjgD2j"Nj~(AExlSzGZ" =vs2v6#G>-1ʠx~r>;ɔm[gI2$ o밒'rdeQIa%`wL" ?я9 @KQjHgܬ}=IY~8$$`e6mhe?*$mfnjF9r<}:? 2'E3@Ɋl5 tX=OLO`bth,dfR=jL+<1(X"w:V=CkM"p. mExe`zѻ&LW``QK,LW . j 8Mkk rL4X7gy #'4$ ,bOMq$ai2Gg3^(]rKѤf37`=؜Tf\IҭѦqIY*G>0DaYeʓaaG&X&Ɍ?dx"v*Hl~W(An*1Z߾Ӂ[LKlFȅpZ_!]ϐDb/3"r@bfR[E5{7EjQO'gDS}|dvhL7=9Fsgެ(=} zˤ6ţoQZ(c""g2viF{u%g|(s=:PWUSE0,2AeE Xʪ h_:sRGҦ^4+7qNU.{*d)|"lG,BF&coF-{3PjE#̵|(-EK{p%B,"8idKamߣ^}lceoW' bbQ58-hǡ?׿3|. 佦$*4X:(,$dY.ѐq)it֙'cm.8DsT+w&lDX G(dzQwNX  ޚ:PIfz'-uRB[pGף1qQK|-ZZf(;}df_ֳNqJ ̔d\ =zkO*4==gwztW< 5D 01B`)YՖqx[lze1q[a[0ELg]5բH [/k"G7@#,! +@+ kYS`h.y}P=iSX0 ( цue|ii['V tn:ءX%SM! B}Gj6%0p9}S;y+ƥpiwLIa'm,}:){B/̖P+xr #kQYk-a QBߴJ\IO6YOFMؙb-_H`] !|ͯ)8!L0N7C^x5VHr&ՇUU{Q 2tr^ZP-F f.t\١k $Z23S.qa +]LqĻ*tw>6~qxu0y GQћW1d{&~= *5?KEhZt}#*T]v1Lإ<(4CcusIb p (ɗL) B[AY Cu9-c`p_撥. 16ZeowXeE[d!OG=;MB3=wE<'? jPp%U ('oٻ(H:8okX rp6̶]IAz"?_PW9H_D4^0 (H2żѵό>6\uKh2{^mq']ooC}py\WZh\8 [2u2J _\ѠXs饯 ~st|ZyjE OA^,<!pk_pƆz0e4-iub Wth ve$<.b3"HOnkC}M<}S8%=8ٰ ϶X韔oĥb[APiyhKN;/rI|̋RPU {6Zw~10clטK~`flȅ4Qtl^#1lf2F=3ȅV&{L&>cMhFvm3ߟ/5%r]lOr`tE4NB>$H|n 2J3W`V#a8~ W:e*͸qn~A c$;6SpUO/4ȗ sHJ PzOdA:DuXCs:%w ^/E=hE|ӈ`oB뾠]AEOfK_:d`?M_:W#,65#"DBa CL4G[/F9+XbsuBR{g! i.Vg\a#CfsT&IUaxBşhk;D>AH1ά_of,Z!$fYVӕ$p5ყ\jIߧy19 8'v,(s񰋙eg;wl&ZGE7>qYwЊcƁ*EoP׏.LF'In [,e}KUs1N{ L"j-bz3A!XUSZoZGGb.7:g?IPF5| KoO?kě+xLQMecd2j2􊪞0`B`@,"1쭰R4yuͷj=:kic4UBFqܟ9]F pRw7;RLi</A<`kNj>?,Kfu!&'/=IFUeHMD  'Ȧ3}&7!tɰMN,=|d|C¢qL/o~>/[`C}ݔd' a, 0Rh PQ i[8ZSS1RgyapλEhy]5I AF*K ?mwK0@J`1 C%6n5'" +M q܀E3`V;<ڪrc:F>߈975Wޭ@+_g2?hj?SE_)M33x,k{;gm /rj摄2g̈aƜ]2e 8ds--T3FG_eEF@K ^g#M*0?-ə;" 0ױӺ%xZF<bӳ6%ؑN1` Fwo9sG4jMF{*ug(!F};\; bEϸwY^`^p!-XpяĒMI3*>1z J=2?7jzGXpr+Pn*lgZi`g #v{. j^-o܄aŢ=vPʡ9y@x] EJhiMUg_kOL!lOd޼djSză  W<u!m. :h WLGby]*b2 y 8;, dӐ, 0XejSo[0:""c>D͌{ \uOQGn7]"7Ǻrq/[(~:;-NpI6j4k.d~t2}4kM1>u:vɺujKec.4 6 ۰@_Y*lP^kEPO..Le"v;%H] /9⳸Rע8.υb) :M|aV |-ዋ_MF(}/+tI.H:8'`:}B{F:d"san+s,z$*FCze!Z!|H)1zo ?/G>)E&teJj[Y#0jL)N$JHl+oDC`S1@ʼ]m@2+*d{暶TU enHJPy^ G-Ex^fߩV*A1~=_+ >smF3 3-နY8N4 L\ְ$8dٍDU(,5: pޒ% ExXp2踉,:𼥒4^VU#5A\*#ڤŐ+YmO D7t]|.'3ۂ!dўŋd _~Y#z_a=gS!3dOQb0Z0hM 'uQ]K>x I0пn.5X[|0>B+;YLBGE$yQ)$j55ci+PMQDeu$41ӀeY^&V bUqGsE2y%>OWrԃJhZ-"2~&5.=/+l؜|֫u;e?Aԛms'/WM}9E dXh'U|cBy;3e#^w=l[/c=d\sȈ,L.T$xk8fUmB:8„ې5ЈT`;B 7Hqt ,Cm•}ţ \t|c@X˟i4wjTm#(S|L76j-ć5Xc"iٽ)Fj7,Y'NI#KB˺fֹ_tw]ͻ7,$e@t}~T y΋sCqm?pgB<>f[A_`KJ35ᆌ7Su::[J' |ɂla ݻZ]4~1A(7I 9#X9wH*)[F:θy47+vhn]UAۻhZ#qT+|)d>C6"g\+}β^1mo$U5i0c>ߝleE soBd~h==T9"kÞ7ڊ[0:%Wk>H#8+}l﹄lmMP!`T2#e-,puBtD';i!j\m2+Q6KGQi%ŷ f~-?3˪  S;lh11!:qP nKVWp&>#ݎV ~FE5:OPe!`XԕG&#6*T:￫Dkeۣ(,1MOLӶ3BPfVKC=`s=mb_3 v!,g 9bҥo !O",u+~Jɀv(`/.SNVv, 0`#Jgeu@9""~{iZ? AwfRYлmS'`0'13KBɳ_9P <nW8jwvf$7r6` +Ufj€w .pC53+4xds`rMvXq:^ƺ»iнYSgQ_?.BF O8MaoiDZ+ y.A;LJrR3OyO()?.4? 4{V۫X֩Hs䆍?c_KaRnӯ%u3H9"e8jdjɋC;L55|w=GνmHaW}Y+O7SèIuHXU_ӂIj:m&; bjtg*evy<)UlD< iR3/J@U]pgb:E:ӗ@M믖& &v s*6;I4ecN^1$:9rzGRq:dvI.r鲄O#w~Ez dd= J5"`j1FĿ6+pmVΣPvsH +(;r-hKLg0~#㱙)ќ&3409Ȕ7?x4#v,bt"M: ҄]H>$eN& BGt@ݏ:h$jj]ϔxPbIohjc Fiz5 gwDy8]#ʓ7b%~<4FFXv5U FzսPmNDߺ~g5Yg?+D>I˥͝*`5Έq}1Ρg@xFeJ89|¾O sБdieQkNNm&MHPO8f@0Y IvKZv{MKN {sJ_w)+?K6 gmڑ6WA}VnPEk]G3,ewPB\h|.>)HI=%VC[ɗ zW]\}p,kU)dNuP6G0}jU9W-xE, )N z /):CFj r pdrԢ7#+B鹟sgf<!}DDNUX)uW+p9<Y/Rk0U];1[ _&*nֈxTfVXT%33D+wFw~02pIxӐEࡐő|rQlB^9ϑR ;9sz Y&pIZbuݡMksv=â7{U=2Gy֌TNÉM%?.ntŠB_oSГ J]7}.՗FKhBP4L#}bډOZh*܌Fʎ5uspG_ \aM'wnKCAT5 "zl/^T!$_a%yqA LyYs:sv]@Mho kL}OY< x ƨZx[Sc[`1 '|0A4LWR^8e,wN28}"˂BĴgݰʚӽ~Knsɑs<9a2SlxfU}nR=/BU*GE6x$,&)]p5ye+IM6job~D]Z% ]dSi)Ñ/;(:pՏiϤDt px؍Uqd˶FAQs)(לik1Ì@U_ AY# |,Hse{ 'DDCj$)!X#!SB+Aդ=Q:[Es$[-VA%OIBqqVc.X9@Ŵtmg:5K>kԕ "WQl쫘ωͲD(M{@$nV.9I:*@d?L\XvT z5f MsKVҹmb-zY` 14~qFBk<`dㅿ (儳KE,Z<͍pch@Qn7zw uAsv+$u ѽDנj4sng vVhzDJvXKYb"WĘ |})y8o&nsD{SlL4/ݣc'Šw]C}@𮝉QX/U0Wm`Fu(㬸͇dRs_0u6ٕUۖs.Te,?^~Qѓua#*HuE?ZW˄?(+(Ԥ"t9⩴@^Rz5s{Ns;œ6m:Bvq׎k9 8;fdBlcHf5U=ۨKPCp5/SxJV06#.WCka@Qy! Ty 4.dp .͍HAJ6iaF23׮M9N7lR|L2x@%4ztev3':@*͓TPw*d95n%*̞\S 4t27V?Bj"V%Yl. AT쇿gєFƸXW|ב'_)G֝l@e|R+7*nǛڋ1@_$t1`Qz5*̯oyc:^Ern9d?ۂ ;j@PbQ;9ʏ zmEAliѭ c f{S 6!)RTsFK%ẽzHe1.hf׿ZiKJXR@blI1#GK:|~f@R^j%.Hcvj愖xIu܂դljίX E$Kcd}SڪK U0N M7eT)107)@ iy5!4Xr32|ٯAǰı4<Y_PdTcnnSRҭpF}I|Et"P}Az+Ȑ{pL=ώ[! E4Y:^,Yłdq_'Q l G,ڗg+H+݁~gzRm1}-Yb%=,JDv{ FyN1qrɚe2AGǫMJ% h7]L!zϠXoNgʥ qj7(dW8ʕ^?|B%9lKRj!C=*THrN e&4ZUr50f~)]Ah4iY{6n{tP! -鿖#9L ȳ͂Tu1,h qƒ0cE{N62dܩ0~Bi!c#k1&JxHRKLnHzg\҅vd(nnrR3;[A!KJbh!]_>w"qKUx71(Y(`AGS̠]1Trۈ؋HB|0JLZӵs~َJ*0HՇmYaxẠqāi%}Rr&m8hc~5 9VA˪P5#TG7 [G:mzrj,=J+T3'/WU6k-'3+Lv3 ڣzT`Dݔeu(_IBf?/߱"Ng. D+GK; _vW]և:Ou WcFNuL/,Ŀ #Vdž\&sk-K`&zϕ /b֐Tb jTTA[GX(ϡ0d}[c\7|ߘQԃ=1AΑK0:!];:ggO v' NB7šEڹ[a/'뼧fKM7Fpͭy>^֋zb p? װ {h8M/ODuGLbQ:uvuͪx@;=Yއʅ|9ppڝ / "egwi}H!E1%ZJJkCZր[}Æ&%4"Mhv\a*ɩK/8˙KnƗZ@3=܌ A# HZ) ^qS[(om.î!CFw (k4CɻȖܦ]9 R CE}Nj"(AWm{io܄#aOP)BG43B+n¿j2,!l9؅p0#D0O}IvEҤ]^(8+ywMݻcᄅL $$pG6{Yl2,Y|Axn݌[JL|QU>Jfb=x/ѪFJaii&dC9Ay 37V( t5Hi}0%ؓ ^9O𺱬KO3O)r_љ7HL/^Pl_5-c!GڦoLފAcX+V 0ì Kwк9*HCW ̶:ZAVy@a`3]RfYkcR`m%2*D|<=aC֒Z_LU5 tyPR!VSg[eypv[j=V8=Jiqw#c@rEQWlMߟ%lEB:fY04$VPTZ6Ef.)w9tWQQҊ=OZ:1ïTƤOv¹wm{!Jߚiþ+A[13+D+OF]? 9D7}JR{qPh^|i1V^^AGǜ!lzX')tT5YҸ0v_Tb?>Ⱦ/"18vj>?d{bm@ o>)d #'.\|_u^EQ$L&SgY|d,T*9mbh4+cj'P> 1m[OćO[3l#*sxtIZRJ UЮ ;G3yfzKTO vく{zy5ʁv]T_Ž=]SfXm<1F$n. ŗf=|4VK7 "ijn\ig8򄲸28=n\o`We)(؏>9LP^"ҡ`5 L|n.L䲷ٺ RJ"d: ^qӉܨZAG͡dᣣ̅sLG07ܣY#66r 'f5bFPIkk]V WGiW!3詽)}-^c3mF="J*!Et=fQ/B;t[t+OJKWcWd foĉBvAWux]nC2)sNX[zH`R֞fAS^04:~͝yQ]{UwCkWl~RR?W6lzytF#s}Z_( /Z YCjWif'[f1JbS -4S1CL'-dL وTv -mSv^`Z$L3W[Gjn0cŧ,wP,symmIRG1$U#Vl$|%(|&8]\H9m0 NSI{H@wb6uxETzIQc $zp^{'̇n9հ V-x#zhu.]6$y[MhYxJ(Qԅҙ#P^Mzi0` j^M:'o&\12e4~j IeI(TMQC^{7e5غ/.aaD+14`_DcAo6 &4QdRq%㱟)UW@dm:Ȳib;*1OJDI˗&ZNt'+igl/K5yClGw ~%_#1WIjȊQJԵRphD8~zH/\Bb;G$xh8vhK(PP/qK DGrǽhp*d5R̐?e%ieb}3[i{Yt}סjU˟""rh(b桴ą΂3ҪdW\c3.Fk!ZH}/gnKPW+?'=gXXPsJ*!{e= rT|ŘlHTߙ=fctc6V״O`ckCbswI,c{K\ R$]Wu'(L@Ug$X2= Oo襊W#r7 .'r>mRHTU}#$]pYj^"h\XeԪ*@W|PdoD414j_QnJz4f0pop hhDʛ6{YME #Kyu"+bNx~M~"ˆ(Q{0XG^K|TD1S utRTRosH%ݿZu#w?zsM&ha3I}x3 My !wgy .6?+A]FZ6<z&10ug(pL3)-QnC3#>K[Ed S2㽴[YURT_FهLΉN/0297NˮMzm$K`Qjw'Bw MEz€k?P/GS:T䙚 $FbPUq˽>ʱ6f,Bj$l2;(7ӕLZ~; :GbN˴AC'l|uˡ:*,J`H>ES#.( aa:ĉFiĶxz SI0d,oF"HH O#@}﫧U?ky# 0(~W`bCҨ,(_UA$EE)( )/WUxGz4"k^\y JXsTI.6'\ti>O ۽]yҸhUJns23и@Nc'Y#H)(_ v 1cEGrSADbܫ-F9Rfg6DŽ)r{/ֻi*T&x]BtB#+ZKXD0폢6C'ےȱK*Da4h#e慏uUZoo1xrT.4 #UdB,o6V3|(g>aEshVƿðIz~ 3KogAmnGc:2&7ƒkSyݦSM<{oH'sQ!;SȮџuI E5L/0mpsJ)b&ԱWՌ؅Ɲc}%*RMΔwt :'Dfzx7gˉ_C){O~Ɵ]=q!QZMo޲O 獂ݟs>\LfFP PrqKbu7O-%տ0nmB`?c>/n+sAJ _GAz̰ WEVE*OCK-8,4CDBjN&"x*r/ F+)=-2 ԫIֵ a Xױ[aIO[/?g:kA#{[Y~VɚcĺYݳomϓibUJ(̉t_8th v=N:k ;= ݰ@i:$683vLFԚmu{zUXȍzZ\J_O{U1Zټ~A|'IwN(v`1#^}_tWoXz4Bs>%MgO߶km AG0М2G>j @8Y} юٵ`X͵=5  Nw]4ې%RQ8ˏySBil I]5Y70HU d=% &){hLnGt‘'[[YMeĮT S&5P@V[5g;wd>;>AF  aEeWy#ʰצ\:wY4KWjZ.8Ķ5r> ĂdZ=S,/D[9cD`r/x_66cl-[|#h ^7:Oꪖr6qIK>i\p2?Gxx.gݵM}qӚMCBjQ܀4^A1IR8Z$ j.[,Xլk.4r|bNvf%$#9_l`>C%TШTX'1M9f#E{jNpX4a7"z؉1n7nO Һ=!wWY3" ,}Rc6no.e=攇 b@nN/S޲38a 9-(';Kt츻_2s6nU!@ 8$ņU"hwMcq, i;V_D*X$mrf=նu G5qrmxНǙ("%gN0-\w=}_mW uUͩ{v(\kĭ%i3ѽfbh̦mu(, S֝QƄ֟d OP~|zx$Z/(=/He*h9_id۹nsy$0;䍔}Q6K#cH2ePV+:d& tgJQb1y##ڡ{)s$$jL{(FpPC#7 6qz~InїbL}a]z F0nҏ`JAB?%;.g zlȫHJ;36{զRɘS_?I\ [/bT*m+$^ecgX!3,(xiJa Bu vSZǁXv qNi~U~_T)lrr#~l!(FV74J驤#%8z_W%C77e{yl1~՜-6l.see٦I7Z@< ԏ_KjHB:lܥp1b63qDSR9# D>yJv- UY2 yA"W'zIc=p  }אXzwqczJ?{*y]]6ȁo.y 4ӛ!`u}([=  *5}<~@Ey;k}RɶLxLIcqT9:?+="鿡SdKa0OnBjz䔌/3Faot$+'M\㸉O%{xT'*YtPM8}TG7Xj)qhcM4蒒&yP]K%ɻׅflQ_hIuyR0@FUYTtrC,K8p}{t؉ӕҙz&?$G\|:!eRX]Mb{hK,:C)k{NvM{\!#.Go|G譑4reԲ8Ro I ;oUŦˇߎ4d$A+Q6͑@>Tzqm-Uf??|Ip uSӚ}YH𦨩QhJ,յ.-$OP4ѺȚb34D.}-m-o ort+ykF_Ȁuʃ5k8\v-^ҳI!HKk`Ys030IµT^~ތF>J*~=M) ̵}&x0vBYR%m,Ơ~ީ&}yAxЅؚイICLGjyo5nuoU3Rl.tT4}egD=:xu'"4f#Jc+>_sS]7f9iF&~# (گLTX dr?OC0 8}/m6E9Q0.Z”`ԨIhuޫ7>B|,D>T5&ۮ"u)X3WUjf:eHZ"_RE+qɧ cUblZN@:c}Ӳ͉U[r[JuS ؽ >4e$h[^38nES]7f&`׉h z.i_'}yPZJkisvQZ4E !ڡ&15\LƇc,=lvL SPRc*lF1z &HTV]Fp}5: 8(;azSN`+9%dVƷgS Uo NXpcNd]|w !P0K"=VΨVJ=/$sMcpXj' :}k#:YBJ ^u|fk OܻmbGOe7/Kyd4ܒ/ ݚId?VW:b+5d"FH0A5ra1-,= Jo2SU=wmc*<[$vyEO,(ZmaQ6箂D{*R]PN]&l=7)%Yuki,M i'H6Gp x8v?z9BOu(4":y15:NCZ2X+2ѯV7MtR½Oӥػ3NȒ.O'㨩\#ʊd$Ȧߑα(MW{9_CևIyT!x:XT9*Tq0&}#p(6kڡM ~!B[My0 U/{KB-^#Qt/[?25fh3͐\$a-(4Vbyt.4$(Avݟ\YO1O`.'tyjp JϠMo1z5gˆ,N TV}Iݲ+ݲ'&RѨ 1?QvԼ6:3kLS']IhĮp%*_̷pgmC%♵8sx?M'-Z+gzz}+@ &Y/ \ C-"$?dF(FX YWjM Y1M: J$5aٯ2[BZ!̨?zp͛pe;BNSS,FxL0ݕ]?}HG@Hx):_v!7$_3;gŪ;NRs7kLe.@`DR Oٹ9/9籉ڿh.#gwaF侠i+VQP1ԎGߢƪ앫Ό*g@JhԌ(b0LO T] <9D 6gW^xY>:Ē_5k |qF~A$8B+c 5ecQZ5*FXdl[ʋKQ 4\2ԁ#)1/ 10LiWQ*!'+baU3RjcD' =M}~<5~&~9B r (W_`!BD(@(#u龖j8Sta";4g"ZMyL%/`ljaeWC:X !J a%yBv46oxs{6~B3[i ;*E{7ݻK m1Y7zŦxvgs ,DD3fqnڂU'-EПFE'䓱6L 'Q#cfIBq6H9`M_ƨ[kI&8f7BUޡs;C2{ƻbJQR/`ZByPck X2~,KHL! Z"?3jYm5neo}T|p+kd,;o'X]\cvVZ*ɠNi<5{I +oI&*5gӝR8I?d->Z~@ f+ KcA;QL.3_K3WI/z sq[S=m!%!'MkV=`N}b# Y—3/kZf7dr*09 rEc+J*hxAJXU]ܪeSX{ )'()t2s,C륏+up޸uRr6nq3閉.7ߍd":(͸G^ԇeB`B?! ]g63Dw&:M{<@|~WF\bboE~z"dF<ATLisy7d')SdGMdZ 8;L`@/|"0Bɾah1ipST |V}fY5.n02ٕ\Wvf-6ꢬ ؞e vvN eVuFpn cɭfo8J)"js2X&W5lALc҄h]-" U;Y*-^eZlU^ `Yu–tRKcRr*>J@ O!p_p6gBIA+!INUfDݚDr3)ZԺjD 8ޥ/$x0bΖ0}ʆC=00؛Oäiy_$*a3EBvN>}#e jʈ3mŕNN!q1hy= ʚ |hk=BeC1O[v͓X{̳9X?ꛬJ BP"O~8fl$lh43[Oɟ]'rj έU3D~kD]Γe3O{{) ՎR@4N^ Qwn>TJPv^s Io/y54@w!Eq[h*:4*dk5/Q< 0wrĿqs s8ϏlW^L..:pha/ sA'8cJn:cwL,Gyͳ˕k,pF982ҐWFIE[@s]yJ TY\@D <^nO~rmìpwI\רM}tg +%q_#!p~[\V,lkټ/9zoWAv~KB&xl=}_WdfשE*ICyIIVI46I;lTX W(wQ rU! B3{DQvrUCd()n_ :dXߎ/B֝';R բ+Ng 1t-/l5KeD{*_ay>qZ-eQ3+L 7$5.x+hVDbG B8͐<@1udB6Nڍ+uzM"\8TCu( PnH<_S}žu?b01aU0V[ ؿ =uebHYZAn+~uvNAX,rٻu{!Z=iiGDjBdMTRnDQܿLdhY`!@q=-﬑'JH ᬱ"FyGM0fNsX2cڳ%YV)PyIبʃ`=Xo%"MCNiDtڦQL AϳJ56RZYzvb0GvE虄D::1er5_n`ԑ8ڢ%' k ?=wA/VECVjCj;EXL`MT-DA2*Ov1P.!k+k fbq=ԑ4'VrˌByJŶY!nQCLfHtX`ηNU 2G;G!ȡu"2*\\:9*>_-ꍷqa 0Ț TtFVaPghvUVMګ, 0qA"o2\'M [+h:}5IL VbIFwq-Go(d~A,70]ruޝc`t1:D9h5c̑?J 2^_@|ajpG,9sݠ6XXKHؖLL6 gvCe3b )`'lKT0nՎT<:OsuRvF#ؾvr_Ņя6tg_;3v2IN(듹~t00;Tv\CeoRRJO+e[9 ^yv#s3p羟ᬰY[]vאiCBLiaѓ  ׳ Y%BcEg* j: ,~Ԩb5k#EkD:1ꊒu@Ǟ\HC [@ :&Y*YhA*QK7gT{ `-Qn9hpsPH<?$qϤ9SQ&Mq7/ȔM51K2Ќ@/H˴j6׭80_6QB I7-W P2k j2_+‡Ex%$%nRrJeR@^zHt=Ae;m[B;ʌ/P<߼ 7i\w畦Kπgr2ND9>=>̪>TnEaOq8pHP~1ӌFO5 PRgc {ϜDE8 z8ȤxԃΈ=،rs?8+MKX) w NSRsqv֤|jMP4]ml[ZnQ)]/˶GNK^go BRvH2s[Mq:]Ȝ X3l݂dဌۃKc4{CffqQ!c֍S0,ҘTUxAwȟvw(őO\ zx2$~i~Yx!* Ug|Sw'7T``J*0.2Rȱ{-G;y\^bwz0yAYReh)Som)k?3x!n>9)gQcAV}z h;&*6m~q=b8h8akƇGn csYgVɁ}L8!+@RHEՏcd~ g=']bp6Hn#Uyqw-(͟xN$3E²`w [֓Q+?˴__1X3˫,q(Fֵk(tP=>3* 3(+3+4c qsI,ڭyJLXAqc.`&ty,fjD*p(mzGG; %<k7VΣ'- $}xn{mSH:Rwq#=7@i +Պ#W*nkvđi(9ֳm4hf+g%K6tSa0[{yˍf=p"Ti6"coJ{89/W;z潪Ek2ꑏ3+V&v5k?N "j02qSׄ/A1T ՊvLw3j~u*UlͶwZGHB{E.~ k&?ՉrL9Q4^uʐfƴ[vns=I2J62H@x–}Ct"A&z󣽯?1ʌ /pKʜw)/}(Q efh/\=-·=p.3"RV%XRVuRB:MޅP7!z0hA;ϣk'{ַmwyt"cҥgIXQ䧵2)p"j5um!B)pD# >r>ŕ> j/0bf;qU[0~P%:PN$ ljx@6F4"ߠ9 %pjdIM O-l??8$Ӄg_&9l `X$a8``^E5]:F @\ ^|a Rߣꉋl.|kUdk.Y 3$G'-DMÕGg0#J(sgЧJ[pXl -' 7m"F|@+ .jeC,TVL|q>p6o6Xň.nTr1.O cs*!.Rw;N3=$>n} `5g<Σ ۣc!4׉P(oxϗH ZBIq'rQbaR&*w|AOJ&L0$}+WB^6FfB&:V䯵: Zd0Y&9LŔ!؍(kכz=S3A<\&V!m:nB1%OB{cWpD@RWy 3u.̆o)ӢN5FvF&}$[|R+9-K*e+=\,OSiIOȻyR.x1eyhG3L~۱dzFS#@0>$otmC`l{hc6[i8J;[C?m:ߖC2bGX #7Cԙ*HyIx#;\b=`Ys}3XKQ5/e{Ob0z)DK$ꅅ£UJ*D_m|#${\͕ƮVpKr/x1f v#OWL5Ǚ4UvoL?@31='aFf)q yd-jXҧ릐c9Hh.*7F3n]RWĝ}&YcʓatD2ORwND|h@ wqطRR"ogJfBqNB}7@Ƌxm?rڏ^=׎pM#,:cJj޲"!% dout>'1م$'C['ls"T,3L!?tK/4ͿB`s @.Y#C$`T)\̶$v,t&O݃P@-njS{ChעN#:~ @e~ P)Y~C,F*%br~^a((<4ԋ$9r. aGדX$Nt^k(9(7b>hBapޯǃCckzMs^1M:@o7IQiqX)f+Dj [v~'rrOV.6Ӿz9/.oey1aBe3ؼߨ;ͩhD %VAU@22ziQOJ3\ ٻ4E)a cXOFh\eӧp#.Bj~ Evl5Lcppݧ#SޫG?itP/Ll`|B!MxfQ!{=bDJ cdκp$Swdkngwƣ [J,4w9:zA87Er?_[%aNH=AG^}=ښ .W }% M)|l`س|UBDW˜4{w__sWQ"،scNo [a{xqqJfٿ}ǭ2@=LI^#nZ1L8p+i,;o% {rޠEK$T?+;h@T=-o=D|)В3cF)GyC8^?=2z(Dujg6Juq|7m5g, 0eBT^-j2hU';@ ?@/=`U.VQue!=H4G+ogzu0LĿF אΕ IG%YPoq|Q6+*uo{md>xsj{N!H[,jL&!憮5){ҊlynOe:`h?s3Ւ,.3G0qO5zrQ6B0 (| HU㖠ܛV`YBU lCg5b{=,"tg/e/Xw<+}dq5':GBiG )d,(p/Xe^x\:b;3Wɹ-]P>EZ j?,>[JovS53U[^ RçaQIVM'5$/ﾼˁ,}:8<.=q9>H%7֜-Ugav{ٰ$I{/4svkOr"ٮ>Q^QY ۷[owpfz1FT,6>$C=y2b_-b|0H*ϵS&<'$3lF<&U:Δag8'=*8͒YB$D Lh^e[U\B)vt4z,~D+tr2q⠲ؚRߞAXܐ6BdlĜK{vN)gwj}8SpDɞL+#f-JhvKaq{ |pK>9 m79$QuvFg 3`:g"Ηk: -rm3xG}). b>*(#A緄e| sW>q4+оEd>č`mܦO[8iۨs-<{y}>@Zqb Yd[ $tx#]3yD\DR8c*1Ӎ,}6 Z$lo*/|~vlzrWn@NtHכ::fX -㝿X1ZW`M/wDhF4%k65gٗJ>r f)rC{[wb\}+E/D];F&P8yW cx&S]{TEgl8qg4WahݦnYN;;Sۧ۳wa*+ŝT~Y$:Iƛf,VDzxtV, )|#u b&~s׆t22 A<`V-5,3f}/t++D6qe6ޱi%`n|,*!UKcv!`qɀC]J\v>tK`XacX3Z^6D? +gQXU`2`P_.vR}c (KAs9?:9=ZeI#욢#0wjquop $3)e{:WBצqDӔIO ܓTPіm!#C5Ms B:ڻp <3uF1Yxcj_З-W(  zin -9wv 5޴@-iFi([fҼt8){'9uVoT޶[IH$ {(|`=o^8xD9 >c9?5l/*L9Ҫ;j[oS {z" zee yRjO AQgB B [U:Q,f cW 2yc} 뷯ժP/&s0Q{"Mp9z=}_?yVwrm`o;.RX ? ^^º*hM]5 @,Ʌf:"SoV|^P/\`:1Ip'7^LU«=?E3goveG_Č575/jcPC'>v bRedP~Ul{:Y@i:!e>[¢Mıu4϶֌Vfl SC8מ/*qlwfqoz\pmaǓ(EײПgsei )]r*Uh¹𓪕Ш+=X\aӡf28<#p}NrQuRzEeτy i$έe`xq7Ng|~6~)[Ƴ@[vXC0Oz;YiyP781<z d5|~YC#VA|C0pAJ8mכ`7)Cqxsd}~.Xfy473Rggr:f<tyi, (ꇢ- >}Yш.I(1!t1NxDZBXTaIh O! 1eN8ҳtMyrj3t 0aĿ()-OzSI{rnd{s<˔#lM8NDe twei eUH1,XT*Ð/!\62m&(K&mkpƈV637s lYzdxɓW7 7+ C`egťC Zp~=}6(@ 4Їi߫?͘#o~?2b#Bg hFB P7UfSaQISv"no$vX8 z{M-g*`vg݌QzgpBSb#lv$p7nO)2WRam~i;ЍIvSLp~.V.dxZޅ1 l-& */n)qW}#m%D I~D g4I|5信=1u,!t*[QUk[Nk+pI OgaDwIKX%Af"@]_/IC5Dtz]TIyjU깪HYxX$.\{X0wt6f@BV.2MDϘp/%P͂xI1c-"K,U;~1r^M4l\v$ P%P-یrS'v2?K&Q["^Lv Z$'mOtxg"$B{zF" 5p ,(/0gcSx,_ld8Me !izfţ%!U%Sw.axlG,W>7e[ }"IX+썸-{ Kܽw(3Kaʦ 3!Kqʹ,q I j߷4YRbO$Ê yא`,'ꫂ0B{sky27K#qݷ|?Nƾ~FZVr'Ί?d}6sTwLj61By12G֦MzTƇ-mF}AbA-vt ?ãgCh?JYA ]R>,D) M;ʮHc  =x[΅zOA :w0eFr 'Jk:wPc{Z eĪ|y],H" A LNv Lk.,j!G,͜8q6 n,I]SY"f@JP+8*@XpvQ27-W Ȏ@[ /àw|*fR %3@Ȣ@| Dgʌ־V|3d Cښ6l0?|9;TT. Q +zt·Rto4 'E@9-G%*}ifg $S3뽂5MdDJyw: jp kG_@0YWg8Y>f[‹G<;(,`}aNs?> ei۞:TG׽:+hQb.Y^|F@5I t.:~-^(l~hhTcG+<װZ %T%}] /Ix0IIV 2 Q8I?T!5xǑR{(PӒ; @0%=d[/W~ل^ rM*޵$߸(h};R3ZFeTBF1RY*R hQ4;RXvp"b*&5>Ef\zRgmZ #eF{*<&jVzPb4+8{dBm}!>g;EoF5;:)=2~kr![ìR{sოH#ڞa~jXfk~-wr\XG}$8|7y^L(V Sp%XnVOИ2sm\p^n}yACwD8]e*ӕzLAaP[2JN(X"RҀ_91掘;GiElNg>)ciF3:J@ҩ0qǭtQoc|1f<G:ÌOQv[)[b=tvєc*mWC89HV{ 7RDtg?Y' fh(u>̑Od0nxKzM y׻<[wR݈k,|oZV[2pr4q9M#bXW}W =ß8oP?wa*YPNzukQ譂G5D屯*KOZ?&W )x{>v[?yg F[o.ūZ[Vĺ@Z2R&dTq1[DC~-w%yP%q #ޗ9_Z楕jE ک r>2#/a&A#xE xbK?2k-vaF9啿^]A Ĵ|)0ҸT1^VSuX\m~\nY"+S|끘@4",Ek l*J  %) ^tG\:&L9"RGVI;Wy>O7d#Gąs_?Nk*1fėtX;(k2m~%vxhl"Ġ&y9a҆]4Hl~$Ot~s:= Uԟ$98~D!Zea ;{&Pf=Hy|r_wW7RE`7-*?'DY흡1QdF]yaYXJ ;4lbx-)g2{"Q/ɅF č"l0] X:i%X qg~`H{~iĝ>BO9eZpA#qaŊNq6u9PyԢw[c(Yww'BЦ%Ru4B:W?ﲼTk}K"տ#{*ob{2fTR&}/$5|z':s6WZ~bː_C\,&3gN6}_fDcTl;5DѳRUذ%_AiP} GxhQK9jˌ ?inB-g{B3i*q+h+&?*7beYEch bkˆaC7C y}@U;''|Y;jp0C+C} JRVk_Apq<z^ BE-Z]תCL5I}ĀEv/7R((Of`⟃{Կ7?h7j<'G$XK}U4mhE\ݠ48p&MQ/"=S_ERB{(T}Y;:Ӊ;3SA=?q [c W'bA. =ytрۢR@LL BfF9 avݮ<v~Enxp"Tg 6C;cW+D uaq5ɩ],^\Z~m"W OG(tG?V !zX+2~m\ZYlH^upoK#4:ֈ|DhJ|?6~}僱&oV`kN#EA&Bv* UU賈Y|YH۲nBci}뺸4IK5 ؋7S(;,p0&C (Pnm?g8%ۻF1\qꢬ%@e]KcJJb5lhW񝣩Pge-T@t+ qf>$;_W8ЇMVu4B5`,kŹP{}_-Y38Bו^D>Rt7A@=e m&[~>$۲W>xm/GXng [C~e{n~К*S՗mU,)x$nݴ[qJsby#b*:O@(Or`&jKeD'; u͞#Mt8WN"j]i*Z# MdԣOwC4n# ak#XSū%foEUm EdD? <t>83MZf(:"96)֨Do37cr׵h1$$&~q`h!mTb|$ceIJO,F@uF Jdx?g^4=D_a TdG6Rg/ڨ &}mT>1ꡎ}ASH2L,pp_\VR`L7%GtCqc$: ط_PcRhרȊv +TN]Vv~qt.xj;m2}*e_u='YxY{6E@"$>7,@`Qs*-d#Wz2Cg3Mu+3WѺkp2-rT=oYхpJ ʁkjNx,諰!D^|]%0nj~g&вD,79'ibl(An)3Y20O^/{)E<БM5NB . i뎁v ј2ieM7JސFfLO6z"/O$4CBq͉(K@)أYZZ'Htg9w$r6H'J%bZ*b^2rsC5WO!Ȏ|f;d{x+Pk<1S"|5{STwZKۉ(PgֵRcۅnasJ_O 24HM[Hfw8O[2,z+LK)<4E{ʵGXAJ >`?ToUhk"ȸtS-lcS0C[*;%zSXqqޞ2"+)]:R\_h\uAC9m<ſ_@s/vQ-vԷm|O 䃚{}%xm` $֠)f1i 7]!ryK3Bq3kxf2ےZKMn[kc-MIrcIwY` #$Hۨ"2ãN, Q++(荓`y Wr*V9[rH~fT5FE6Y؟?. 0م;?k,}R&s Mx2aQ-Ρ."3cdd=֩]vȌ3 1[EbTγȌ?Qpb;J9Xּ]}˻5 de\ԶfUfDQiS*K8ҹ_eX,i5QayV£=nT9M頵1 ?1/@]T0B{ɂSo5мwCy ly8;+HKr|S:-}HpsÈ rn7O>NTi-3H-^VGᰳ).S%wx@?%Ndq@5ܡ(޿$ _uIi~_=sx;R#:nн_PU@afi*GaWWfRpN/Rh[靥[$hTA.7#~`~݁"Y,*CafHb@SH :]{֠.u],`G^p1K$"DzQ̕]q99|,>*yv7sè!ϕ }uvA ez?ZG52ܫbֆ$.T#֨#k#"tqACsg+MDV?A&P"䠐u_HaM*ʆm"#q1Ϲkߠz3d2[ )ո٭rwjg/afY:,\؃f6Ai1aR6?h*7 =TGJSaPke! &(^S,yP㼝wLSΞ `beTZDAB䇴(žbZiH mmֻҾF%5g>=36&e@Ֆot;$JHBli2aȑ0{gmKxylGM0m9edw0Ϲ\3Bs]=̨u*J0/7PU_(`828<NcKWIro[Jzn:!U$23 AcJW^2M$_%T{ 2)z/TO~얠h9.#Sf-@3D #bh`0u_#FVyq5Ϻ8'"a;>t@cÇQR?cect mp[M$yZx[#;dKa *mSCWfТQECz# %FK8#|6/C1Y<T#]"AY(5'j.Ez n߂l!4ڲsb7nWSU(F@ l Ei?AH=U6m.a ,E^{m v{i72ͽJo|s3,/%Ҍ*-`תE.>j‹LQ);GVs ŵAz`h=EcTQU0"]`@ʿ {!LBqYoC|mjXfI,$.{vP]U͟Jr~a׿6v0[, Bt}tEdP$&2ogs#ܞk&@( ;^0k-Q0q2c_9^g͜-UFa%?om+e6Ĕ~uõ^U ļTSQqQVD&c o7DM ' yЈ@ȯ8sFg-~ڣ@5\=|1X8!l #RD15hUd' _|ptjmW j-/ o\'d.n.x*؍ھG%0+/ 6PFM_-S0ˌ7_aP: InF(UX5#g,,8ܛfE`(N^2TFhpC2c-X.3iB0F}=KPd 荥,ebL`bR}dK۶(JCQ칎P_G-.I<2W$p[g3&@B0A=)W" S -~Vl(R <:LSKmC+.xM/`X:YG?"|wpmuπfw)^dWB`~;,=<4\)tU~9VJlmK``&APk fWTm. pa?//eռHp̭L(O*'H9vOl'ꈖutcPP^+C2 ~2uYo {=cm;[0t~EBNpp1S$I_b5.Z($K+o5RMiZBp⮋W"l~~52J$(:5z"LFԴ7T%5 LP#yTCm݋ɘsw'P,  :THqV"`m;A`L|ɌsnMƛbGKj}Ij!~32h'yO7Ò76)7 - >yl[hGE%La>(kÙ.X{S5ޓ!&VZSߔZ0^h}u8{qh݅v¬p/D1қkVBuk*1^YL`zL$t1_Vs: ⓃdH!t+ymA3K<Ta(=7߶D% Qn3~LX0le>陗ctQ BgX&!IeK #HSќzTȴx7uD(IPԅ7le#\3͚"U\>#z4+q2B[dCd嬵5c8;5[^H_R,b_a#p2Wp<ד$ѸM9OI)\5* !&Bm# +W|q Kuu:+EIz %%#X^CV ȫ:)l1W3f0ʣH`'lB*d hǗ柯q&+ (D+5bzzӡ{kv]F#?xɮ0bnqe⬴{l%p XRvl.;n>1HG/%JuMs$p”:a6鲲˴,ůh [c".JK 6+B+綏HQ!\&ijgdlL=q #,V-=q4;M sҌ ߘ"4Qa@~уOF~!jwpNa/!}%wg_;r&K󍥄O`=02ΗF\nv}Aq>Л!4 zuJ{X;|YT]>מ@7z i1 bz3]ք﯑zX.C3zn\ @J N{S"Z;GCՊzZ'I lbx?i|L11cQji|q2a"c<,6ѼjhR_B$?0Ei<̪i 8.M^Q@d/e2;YDl\*GfI'݇eNt "%ɊDU,wQv6dшA?*92#x_HX:C;U:Ԋn/Ҍg384oh)9Z` yÃ#蘢56]^p]x3e U- -,jfxc(ɞPT-{]A)!IX. PWHK.m!hFWA٩i ɋ<͖$ e- kl{YI%fyIj~vmsFYŸ0jB3S>zgh<JZ=2ˏKm#sF0O*"r1 E; /ue/m27I}jwzL7X.rGKIzA_N9jx)&#)> Ͷ\ Y\<1n<\EAo %& ^&iZy{l@D-MNE45OY@}Ⱦ=Ss\R 6וr 4#3Z-t\wA);LF+UZ{UPfsXqU A5Q+жW)ᑣ@E¦6kJY=aٲ;?րK{}U.~t@,B﫽4gb/ɃzB 0ϯf.gb>-rnԆik^ʢrd꿍\KDks#ܪr.;8dإùkTaiK :8f_.z/Ae}"s3O1 m١v ˢᡧM 24'G#,SCi^(Yjxe-&7dВk9y[C[ #T~g Uj8$*LF)ҭlfb\`oUjF>&|K9u J8xDٰ=۱座(Gl/aCC{y:vfļA @\]g\ДիHZD.gbE?nc\{њL1W̬8*VF'~@FN92N7zx#h'Egx! . TU9]GMD<9+-LE\(e2 OWY?PA,d?|Z51KUԩ_>թ=w NZqZD,?4'`?!x]/} A_?Å Y5t0ӲZ #R)JWe>RrkbY CE#<א_[e.\^@`LҀK5GO2/ ]t-%AԈ(-Wr TJ,_B}toA{7z!a)ۘ<ti`Қq$ ){ >76yiuıc5 +t=7S0 {K:+',pe'_SÝSU%eM*aݘŴp+r/ki=Iąd=YnEKOh{0j! $*{mvuPO_͑"9xۛ9S)71,`IF>?q\Ym<,7jC!bș*&a^$ wb8=<{Cχf+S9H ɋC^V{M+CC/ HUA5ډULU*a ]6HϤ0<긅"z=e(6_ >M=OhKukw`z}/Zm34ӝ$:9pwk .H^}H(pv]J`*4NӅcp+ P ZB{&?u-9GMRK~vZ Tu{Qfg3_`|QqUчBQ}dw_2sVzLش $m*y6A e\!C5lZgr5Dc ߺ%*xmH4ZD6C 4gB|L.m$5^,nWr"~SG3ngj@4"K>>rCX]|_L68+%\l]oP͙y^ a>W|€boZoG~X?rE⤈TE{߹/7iyޯ;_1g0 5iA2K۩h^bsl|4dt{(w0?WFCWbs%{_-B]))xF*2rI#;N&zXɪ3+f_ pQә :jHkߢ{zz;cb`E JnBy0*>EkHv遟knE\-u`)h-ⲥiL޺m*&p `x7/;4}kfbFQ mȈdh,U-DK<,ވONO N ^͡cTrI ,:V4j>-vہOE$R+lt,{;^V͕|5{E`&ԡb'?[q" /i&0G{B`-'7+].o!>‚F[Z]McONuz<޹( "F߁׏2'/L?[tm@\/SATRAԆCTҁ6F V &[2?3R(aS]{\e) kǙk߰Zu8Ǟ)X@UD@]UrY(3We'x}2uu e/^T+278֕xqDeyX_m&bD*"\Ew!t2r{v3C?=eEm#GpjE25I7ߨ)!M|Ũj/ !I^ԂC$ai\9{U#5A(z^}X]¬,ť/ lŨ =~lFfR$E>1stj8ā8&jwVZa /r].!OVSrBV2I|lWN}،aSM`U_V+ ^hKgNcF+Nq:51 { "1^:ݖ+#\hnnwqv%P7;t_kcg`x/3,N-QPɱ3rT,I*i !G4k0T>ٵ2C;i=Mfp5Lᛛ܏+Q )&q3,1MxNvCk?٪"/s: b/Λ /T̀%1ZFZPDAiؘghrHߧa+/1DI`Gu\`o /yM;Fof`*W.| Zhb:|zohI}&꓿gCWKQ1mZ_!3ᴜ Os/ LUE؃A3/gnɣҘEҪwQ]-gvAĎtpWr?31').|ݡ7d@+{!/IZd>';+RqF?;׿9nΟ=5RI`2険K^O9V;AYMwvZs_W_:O<>KvCr_•'HQgv c QyQ)FǷdJbv`56 Od_<.&A&)9-PAoˊ 01[Nky6zrǩuGQpl^w]+؁0,®JRV\mCsm;aG+,Hon b() xk_qY 'zB oKzI!kF7)ϒcy%jb4isWަ|Ua774YFo셿1IE\3)CHYGHv5S$}(~ "GhŚioYQ? ',4sU3Mw5nWF YkN "2La1)ӟ#~/?A&" W ՃGʭ>JMzo ڕ+x49!&E oL}VRQP)DSw%7`rTB~Y#!dsA+E◖,K,]DEW+@!|pXz*.%v޹G79#S/OZhP`if0yѹ _/D~ƫ%ujС*jʵ1zz Ϧ=tXMY˕wQ [?eȶKŗi<Klj[81•{O S..nG EIcnjdyIo5 K` 3`OXUȗQ2` /MꐫgD}6,kI=t-kCԯiЎoOInEW&dhӫh]5a 0g7V.X1*3G u|c=}AqoV1j λ'18:k><'0q-R#XB|"ns&6,9h:Unq{X&PQ2-]R3q6 34F35O n9ϖjB!p(YvuT;Ar'h@gs^. 8+<rnja _j00lk4Ae+$UVzq@2'6| ?>x$+iy2?a)i k,r8xW۞aiyHc1<}Tboxp*” 3/j#~DžJ==-Vٶd_Bkkp84CSc yܖǃ=HeI0P^KO ڏSGfŎ 5a5[SThz#7YiFy"%`-7v?JjN*w9+Nr,GM Z5^lM:loCDL #<BF*pXg7!}gH#<&mja_9xs3w,# =ւc@5d."Bo&:AA##jiveQuN~DU[\ƌjxo Zݾ$;rď߯7wWCXa13 ׳4S!Z:d vaӷDl_VU4S g+W:3-îP^1(^O-_bcIA`2H7[~e)D'᭍NưdMי KIaQ똄K[^cN QKro?tUL5@5L,9@H(kδ, >ژMI- T(:UXvet@8GaNm|&[_vSKeӑI Y~O!=IX,#[Dn*I2gȝr̨e(! U*״#Km07x^VX >|gԷ),{W-:O@3֦YHЊaQW3!p?`ǹ` _"īkywNtu옪Cn%M\ŕo#Lr R]dt _Q3D-~ #JE~>_B:Mx{(KRykyvȕS!@"J d>;ZNfMvܚFu>T؇HK|RR9[2TrIX@Z',ØSO T+="(Tdtx6)4ƍd|-[fUc[.Bon\4*xNȧI"!'Y),pV56:"%? ҕ'iy.;M!ڗf vT}9nne/@$Vus-%b~Kt{b{Gqr$֪SCs hf]%FΨ 5?>xji'}H`Ѫ5/%^AnnZwg ѩ+`V\ݯx\b6PC7(&}1e})-w*@CFhsQ$6xhQΠ0q94ʷ.eP>ܫKi?uoJ̳wä'(@rXa amG A!,&0ba~̆RNVC"1tY8[lE;C5*9W!kUq)q~І&p !f%\"WGvQȾyt5 qGvh)LJùU1㙭V.k9B"CPAqzpu4 ^(Hc5`!2Y[!u sT-D`4M&_GX̥Y H ~K6ہd:' FOMj 櫯ى; QJPYJ˟82Yȧ Fѧ#Cj.:p uJX7~uǹzΓb9_E$;گ&uzC#:Am#e*0uvO֡:۶Zk9&KM@'FIvs\mB_ -|jf*^sM|m9{\X'@lOb|\=-_p AXF5ko|U-z@&e}1+I,ѹDr{a`o.- ^wM<28x3b=?3Ν)r0w[Äo| No+ GGj#xl)xwH I.˴CɞzI_)OqXښS_D1DЊ\tgp q" glk^QpK>$o o4+1A) $xLiKalr:'ibhH&a̕"?$u -k((]GP^tci~kx'r1/O2E.6j?4zеxݣac82% ڱ0n #^7ePl aq ?l?q HCT5RݕbSw'á`<%c:x[zיK<^E Gr2g '}<؊aKZTz!^1]IGYx-A+=aןdC&&!1) 3{ѸR* y^eU_zKY8Yi.?Xq>obkaW6i?Q|3X͊gܴBM$gJZ wޤϵR&jTA4deOΆFpIGTf2{N/Ů=c+Bm+dv =ǩ79w!7߇=Ow`sB=#5+if۔PW! 4] \l&}3{.pj:WAT u[;z*Ci[u4J)WxYc6iE.7Kxa7O,$lQZtt?]w9ILbdݞB6?ӉmW=]V#12uR8XUٖ !fƨ4b!y@B[VuY]>Jۧg^=@uI Mje$GbYEiwȖ`rygkVbjIL]pu1&X ͚/lUɍk`.{D]^ɄL%QoEh1 f}I1f;im_̓a_iY+Qvg?:ⵤEE=}1 jQ> p,aG+/Iu6\;khuP(bz !tmqO@VlI:". ڧ*^/:])LcVgV5vaD>C\.̰.Zp1Ѵ@{x|Ac}[3t`qEVQKtrCj/*8Ut$$L:{![tf8ɋu{C}@i0x`KhMeQ}Ov!jmf,#{2O^ 8faHv(ctL?q%DSۀiT"!٢tuu*,Map$vKGHXxn;-skRvz1m< ƺ:&h\%G3vmo.4rܮ`R1H"2C;h,+bu}-񬥧5q17d#i%\Hw,b8pD}09NeL.%Fs˓فiۜ tr2BwĜ i]݄&g]YUIƙH&G/pYW`}h&e+_LT_gpƲ,d]3db$(AfPvsHF$ @Qv O.0`j@W2Q>OR[Aa{o%`ʅw15!ЙVId-G oRHuG__54цoowlOՃr9Ron[`쮀tӧG=r{X{̩XPTzŇoZZܺui G bjmZaZȸODi0M(LJ3a-6^x] %#mNgMOc.ft+>4nOɂk g֏Ywհ^SU\gRDTRZamr,K@q_[g8x hя5*bq]tcN'F, :OgQکՇKO4>K RJbRIofWΟGg;i@{R~c]Boo o7j'D  |+" l (ٞˇ7bYy69uyKswe̊X]g;D o9AI:n|\&}l<@E`ѯ>"7 ?LasrA]t]yf[zL&YYFGU^M7v{`"vV(0&ޭqy6Z= bX"|M>T6F#NƓ=^gWM;QC -`Y/P$LzW$ ᔟ]e[ܐz*'(V+uZ)$>G/0CSi:O~̪x u,ODdCYx#|8 1`e2Iign`|75|q,R|X!6M }Cp!Mwԭ,Y^fCB,'Gk%îܤFO`4b't刉M1uB~Y+߮I:KJ4NWlZ!Q*ri>3;?%c`]|gWR»1K0:Qv8aR'SVZE7Q<-3a5dD{;hjA4j."E'Eng>y 6"MzDLWc/ɛ QEr8VVz{c(= .KG̻mz>8BLe3~u'QG-D>HLt~D|}/+C+ N6 Ӏ5*_H9P_? HC8J u@QOQv(A^F LػyKO;\N6$?G4_Cw-D]H.W#da2t.%ؕKB7mEʰ \M&ׅ4{_Ek r<~b@~l͙!W=yd i㳿? x-Mx,5&[W$v梐?Ѝ)@d~B.9X6Ùm~t: _{~3ZB<:ُCq"?x9x3m>'AmzRH(Dq3"üv;5r~adm'EKx.o[>~*4jClGԎ5UK2Y).g ~EB^it;qw:6YwyYs~la ^X{U 5CP䘠{8_+,` I' U 4&ַ7 4tIijrY Yww-_aHk@(K ,ۢ i&(| 38{xSZ(Kplkcǯ tn:b܌Iq2Yi^l֖ XieS][D(G ACh|{drߵ.7piTbd3AP2cy Ev` *B_{N_;<|NնnoM9:F%,Nl;Q~I%9:` uRoB!:'=/\ɴ@T! 77>2ƸW!vo!H}rد]u'Hf!ADѻFji]$O(}<&(X!U,#^-kᙜyAZ+EB7%op]P v2`?eߚv)d]Uڂ[l4$ag+FbIfQ %fWiANm/}lڄPī:ϗC4,B?zbhjMEW:IJp37Ey-}3,)Plidy]*SAs4>si7t7_p;0^XW3C|tG`'}Ƅ 1ޯsN.E&/NfZ)Iٚ#eYD-8[J-o\HAk[Imܢh0_64'q7sn4~߯,N:l_.," _N/"j dTu\h>qyMHH70bCK6S ##I>9S9[Hhf{دC2!u&#qso4=["ZH@3sA2`eYS%|cs Krqia1Ty0)jBM{KM=K?[z1>|7;hŬOD7€e@5}ÊllӚRlZ_M¸E}YN<ۅ4P9|>[驵s_TlB<6Hh%0B6AȢTyJ$x+!4X@83ĆI,ߘ ~ JmN/?Sl}OPm iNEcq5H 9׳nhѯj|b^2|$nE8-cҊ\\,UZN5WmU^6cAB {pH=tb46|νh=64ipay8% ѤJT0EEhiKnKVV}L=D_N" GkFʝHƯl&TT!a o8>i%8aq e0"\g:'!Qҗ Ǒ,ۺT-0Xޭm+=j FߛsK?CG(xg!fW<*\[+8'CP"59uxT c0T s(T#8@ -rzxYѧݟ {=ɩ-9+P-};P*zSbmM(F|2ͧ$ P -MMk]f.yinӱNQcg.G\cjtJ+lZ"mT`ž"œ# %i:+O3Z]C9Ogl/MzUfMw#1.r } 3@@p|8@'-q.@DÒfnL>Z9n |\+~hnl۽gq,}{|P+h껺[~BKY =ֿf"zogLRh=Vmg1%6+y\5g[a\{zl)"u$C^;"˅g|W֨&v]"c&_=O:K?ǭtv!;Y Lz-&`]Лn4&=˒˖. ΫyQbğ3U7gHc[F,?1< 3Xr 3Z5Fgԙ١hOy`}u@Q#U} {LwMIJ+QI?tqT-80mc(kK 7 tk¦4Llj-ـ@J_?t5_\/zY_c*Z߳CC!o|.b@\n~`ckҁ^N661b (T97g$[)Tp.daJrACL8/GtaɝvA8wk)+̛Z.{[}\Az Ѳm5B1nTuQE8P_q|3c:Etχ`Q)N-8_t|x*qؾVW`Zu$˼pS/8oawaTs8bYVTFf_ ݸD> m q-莆#E|߈j(SCr l,][dAGZKMֈۣ mvlf$⶧r2ʮ+4*?Ej R1\)߀BG1x;Nl [)#Mx[֛Q(dw%ŋ aȐ+sB741zSKOѮiMi9ֱ_[YSiëՂXEj{0mjIqe0/:\#:$Oi%^(^cQ|o=we٥yH[a—?_fw|)”J8w=G8VشR1u-䡪`IlN^[ܙU:Djm/\d⿏^1 P0 +UC}frXdÎ7Ǯw5vYdhs 9v7 DoT:oH|fcrυI ]#9jqfi[H_DmI#'p${IV !F*x +>b2u~U$G擅h6u9Os9O;.Ќǟt&`n濍>_ߚUw.=J W+1ǝ}/$eֈ! &0-YPA &wJFhͱ/Dv:VzVd4;D]:<YJ<_ejUاm :];K="鍃HS%-@bO)0Eє5x>7Ynr5K)įlWꨒʠwŤs_Qb5!J ;rsB!<-@05Xd%#uv( ^bhժP×sC3;}B4 y>CXh6x=$ [kS/Zu﨣1 P)irA<aGgŤQE!cD#r]D:nBD`aWERA zj2_9 G"n#چSU_%r>%6ؖ(|$$z3pA#˥Nn ٿ3IJ "dν5;t8U29o-4(ba8 ^n}ju`lޮ-QN:-Oݒ|{{;BO/19&a*b5&'c!V?r\}ߪ(/r_O%)u,?y.{{Ig:(-R>6dLJjrhc5zwA̢s*˘y-<`4%e= Bf J48Kj߽ ׮;]_ʌ.zJZ.p xS8 6 +},6H)Oq\1(rXe NZ*PSsg' -q1J=S= s6v| oͭC{6ݦ,Yvݹ9D6?VCWw "#mY#oF1({\ti`fi7Hgl)E]l6J5 \Kq{6; xcX`VhJ#5A4I4~B"#wܦ#kـINm 'ᗐbWj #E$耿Z*6Jpb{йp W1WD;(@$!\\ c*W͚DAQF^wS(N2JneF)5*+11Mgckiqs#;+&>cF{[X, z"#NbdW5 S}4}ȹ1a4AzQiq aGXO?ZG/|1et t:m !nafyg>Cr%BGt=WxP/=]33i3s+ol5{T~ޞCܓ=Jme@cexlJ夙*rvxX;JiaVN񰐣mE?3t.{ƞ㹳C :>oI iŃkp>:ptS31F3+"0 P qOC K'j&'϶>PLp~ t|¤+8شk!R4Et%JLH&zEwڟ\. cPBdI0qc?ZpP<vAKb=%D~ֹ?RfaKf^ . ~jP18 JS1B(#Q6q=&y0 #xƺh~#P/`to 41O 47۱&0iͅolipOp #Ib @7,Jw[$DbhA,sWJ_ %Z'ce:'0%O'#:SB`izBRe~lac?v +4Shoڤ2ɾ-2a)HfB5e`s6t0^,3j9뉷UESo!}7~ [t˄wSK'3 y^]bcŏ:^a0jYyc U TB|fQzߢ{ўBƗօ=9J羑CtM&đ , iCu650gȦfgO/vzdexӟ2Tabt9*I|^n/:`ė7J=)TtEvu{ϥ>̳lh]aoRQs,c.mK1*%//8cgc6̾2JqhgKJ5?qpx(?_Sw.7MDɠ6)Lޫo6bhxP.O"iŤܨȐ(spBDW3 #`(t۝PٻɱFK^١_Q5 /{]FN5U+ .&"57$SPu5*5 H'xә5ToLg]De=n-*P8 ևvh-'yJη{qaW:RL*7Oщ~قA2 uaf&[!/$O/- 8\>Z 1tq1E~ scMސ-XU'u]ݛ 3 8FZ}}+o1cA@jXM;(#Un˧ң*0dC yn%)Xzv5wng c7KBeŘuhc^Qf|9߉+쾙#'okOkCYwˇQvzfLW3<m;8 ] ‹#Ζ9M\ydpJ`-SeA4kpG;Z,Gޠͩ*o袟%F@RS;ٽZ'$PVڏiH{n [zZ 5~'6$؈Ο[nUOR`97v&sEȟ?|$7rⶳ0rA_`䴀5m~eqH =A;݅%†0-Up6(Mwc.oX} h1Fƿ1nd[6Jɩ4T D Ϣ E^f& 7esV$a;C`J>y9gX 1{HcVOfG իad@aZ|HP'6}(01Mt2>ش ᫧7[]6J"v.4ߩfEF T]ybFr}to42/jq_ d~sO>&pI-yWy+x#oZT -&jI#YhBB\v+JWhzP_:biя,.mZeXx! 6\5s5ΑAw5N{VܹTQ-|B\3&s1ȌUW/JyGῇJ9N wǸ̒#mŊ[37(oMl7njGa`#}ryc; t|lE$I&%K3LMj2*·s'V=Oi6gԈiJgFo1p,x 4S 0ě7ۄ(u]s9̌EⷆۑWo%wzhdy73g\D龥,m˴ת*ycC` ҇'alؐAqB_gKv7g׺ Pen{=/R_ m-|痲v= u3"|7Q$e] F|5ruk+Vi?q,1."_ X zTȑt':`~ڷz/u5 %c,&r0tQc`bLPPBV6%WY2" {7yLe3JD_ʽ;Cr6i~}(@0bN7$5؄J aJ-nfr_oN3rxQdx zBkQYwطEkR\<* OY9qR\ɖyo׈U n֍p$n\ 5PpwTZ;d gG}e{g z xd $xc$b0O YBPVrvcSgVCZGH(Y:—"yW,exup7~ϻ,RU s<;OJ? [a3lDCoC+~ٿ1z&'g4ƳG2IUDߦ%sbH &8G ٧+a> 0ePkyiܔeo>& 1O])Dohg#2ndL<-ɍZfG fXni2jNG1 2̃)❻KT' nYJ?: K`]T?{.FF-AԨg]@3J(dV<_]?iOܭm1F(rtC΢,C 﫣~pІjuÃRIP=2U*VzYȂVf -]9*gdȂi.9@4ƣu™'9K +gD};éSn%uEӥ~ J}R;`OSl[~{-;q۪!I5Mg"?4^&dP@iT)P']n$?T[mgL2~Zis5<lux`ݫ&LD1{P &>q)"WuRae1rR%Ik1s;--/Qjv^m~ŁZ> 7 {Zs`y(•sI!zE«2}W 9i bi`R+ϗ(Eu9p-0AvM^ln4sRzc#/7W%|n |G䌐[MޭBv:FK#` g U0f@pyAQt_)'OB2ڲ=R4maΤ,Q\Iy/1F`S?*Hm[=B}4w:Qͽ܌M|x!ˆjtc}'- [ a7q`r&׿sjY:ݟ F(7j=::ӵle ȳm!:x ^xh2x>4hAT )kz=<BFKȕ_ tK\ΎjH~/3PʬK׏2Vyr:cB JGC}ɿ _@l##oW4ҟL$#BB4ݰC%2kL@إ9x's@ӐC')G8L[\w7)("|\~yUs(5/qz*8!^Ub6ƌ~}@. l2/0}!p2!0O-f pq|wzj$`)UߝU%sqQ]q{u!PNrgTUYgG|r><}۷j0(tU[Y_'h]ѯKУlM-+lQ OgД/׷bFUALc\akӂ&.?C5E}1BZZUj<4]NFΨEDR4ka4?yɈD컱"V2c5yPEVEsw6YĐbfahe'=9~*$_)u<WkktWLv^u+8#>~(52[bƗQ"m&URvNAtb۹Ʌ dۂx>v`:d%BH,1huL aVS)ALMPƲݬHi#}d$@aNMH:%A:@X[(/\*MXK^dJf[S]p_+tKUgAyO6哇pF7WK_ p`Q`F_=pB49F&2.yqTYover"aXۛ83}Ey-{;Z]Ld&ڗy!Ab}u9{~(߿.ڱ`Ii` \)kζ!Lg8{0G"l%C$j1jF_yNl7Zʅ|Tif(v!Z=nK=ZN 2Ƿ_iFbuiͧZc-( -oBE(3WK'B#uD 69 :mnYwg]jTw2#wJVghU-BT[FbjJ=5)7Ge)&XXn~ { c^@}odI::kuoj6?Wz25|~C[hIQ(mY. -oQK 3}tc39gpD=|6jg\ye8ݸc=]z&d:ٙߖ<4C͘: ?7{3SQkrV%>z0R#+Nٯ2s%NJ:_ |iad^4fO!7{ⲳa8 >rrG8=UX#L8TIs!}BS^ήI#爝]P6" 7 ք:WKxo=x/w Y_΀.\ND\er7wxaȞ-Bhz'ȂcHza,dUzG?=3Էezw. `jiiP A0L!=Hx2K4~4X5W17 u0D+a[䷭KɶIIey;^DD ՟oX/5$`t6cL0 j$)Ŏ5Iu늇݀S;DDܵpdڨǥLАaÎL΃yhʱEWpr^C4X/^gb׵uo|ov8 ŒEU5 Rl[ gZ {MH*8uL >UrOhdDx !JK-:*(39j.~)^#Ux|Wju[?JD:O:֎t؋ hLt0Vj2؎Cxyj)O΂o2TzMӸ[Ȃ0w31|lsCf}(q*5/dn<) /EWY *,fH[N[!{d@@Ax;o f-i;O8A(ԖjJM~RX,_jMi/=l17qr|$[SN&X\J.reNF:X??t{Cx;j+' 9)j`.x"Q@-hKu 1Fmr=ۑ Ÿ1>?c͑^yY8rQ b%.W9 D]Toԭw5qk1hҠlKo$l/i Iu%m ~ĜI\EN:;W=6t[H6Z#y`Eۉ~}nt*4^.>*;[`[toͫ#S v}"IEYْ̞ుy 쓄=x񜓔$:-N ^p5C^!Bs |eګJ*E r0}"FD[tu{9J֦G#kWq>$JO?Xl 4O<#dUUq"ΗN#  ]'i8UȟQZ!; \lcL Q6r`w{*\=- DFiڧAH|n_W[d) F7OAy=J?=pD0| L:\Pp]oxЖ o 3-\7)]((,:K9CR8$pVԺ&tZ.RޗFy[#_v!&?K}(TeWnO] 5?ئ,,5do(XqJF)}mLſI4۞VUcWB(ǻ |h}HM x&{?%R?\D }? Ku-18O 4bF}ic<8Zp@k,nS=NzO99zdqEeև K%nzrhAŇ;HD 1-kBnvŪXdK%$VIL`:ȆV[JW'c|!)*rGS8U2p<?LFg@gr>-`<;{QՉ1E1|A:^ nd:NLѻct $m< KB*Pe!ö\XUG=*vInMH3^p9MT]8g؁qư"m-=_"> O>zAh>[@ $]/+?",:&(/ $FG 5SЇ&_Ujc,GfN|R1[@R\h?:*g>á6ր!E;T9F<ɑ$«va#-?uV*WޚQ$,p)-'FI[Js1zh wB)Ro5OбF&)%2l*A_;2:_mU&d-c51kڏ,s J3hrW&uG[ޱ#8ٿ/,RW_>1FFr`T/RjPH}oTd8r9JwppO$M '`]w4Q x`75\R Ei`:=jx|>Nn P0iz5Iؕ ^ y& 8D@%vהҿ h~uyo.0KL6 |̠m'?"hԠv ]XCJY;. z/"iovlz ,9I®w<\OPI6cܺGߊOR{t1yO)'hKSҖ+qWQbNБy z&/ˬFwgU9K-@ԤӇ1MuP_|2bNVym]+MOp /e%ωM<8.mԓj6 "Uv!Mّr.ÓF>!:Nx1i!~OAc;kݫYuBRݲg*GۦQ8Ss> HNM 4 dP9/>PLR,gЫGCi(@:΍vTʂ"`lE_ұlyo.&[{ĩJΣ w ɐr!dzGC6HĜۜ¹$~t-|(_WcmaMR͕gulu$`$3qش`p?4B2y%U]ôG>s/u7pQ ^  0$H(&g,x8e໹T'@, 9EC^k%};b7sPtwf4LbEˑ=:4}r5S46kֱ*/CknT /R3Y @7s-꾷Nr%ʁANf"xA)ZS^Cx3^ ;M/2R'=ҡo7+W+* .F5oz"}̱?q<1xHekP]8Tˁ&K+Rp=4 &주;GU;N vKxH6h -q"A"!翑-z%(,v@dd鵯LR>8a~EZG7O8İ*l: |q_JĨM4te ua=;3| "ScTnKWVTlD$/cc{#aNmΐNz O U,"w1 \+IeiI.h 0XT[ʕj4rY{%kM+n{na)a+A`}tQёLX%W'{+#M8"'@0΁yitI"RH-9r?>N_B {9'e!&}5e5NQKM$VXs\ݼ%1>}XSl&Snm:OĦ%CT:u;U#9$}LRD!.RE|W79-y9@vtٮ,+] X7]AXg]s2ej];GA|w9yL:lʾJѵ3د9&MzrYE ‰c&i>h=T史cO=V2DO8Л4ȳ, is@}x8sA4E/3ipM2_9K$)ah]gKC:XeFНvX":w~q1?a@tcfr[(6ZFxR.Bt+7D-nS>F26GYQ(u[>5U,KA. k}()ZIYSEI|^T%)!@("eW0N|$vg(3HvO+T=S'Uݞk]LB?hfNqkvޖR4F88j+,%{LG*|j/>=ɦp&*~=<' :/`hzRU%2>ǯKyL͔V.%F̄ly=HP ,52,il*Pqۛ_JPDF { Zd4&i |ceG &kL}-7Q6{ęrsb tld"lN˛KzļP@NGb-ȩ]ԀR*%4k9Ƹ,1tZ06[sԛ8t>0k$,'? g bOe';Y\Fx-㭋psi5}u`FQvwG/>S]];tԜ~3BB#TDS)u\q/Z۷j$dX01|<#NIc?}ϑ (k[;O}O° xK,liUorYjY ԢS"eEAsF] +qL?ujE>M/gO[#1Tߩm$\ hX$L8ⳤ%`EN rx|t"^G JSv@)Y&pYI][f.Y`<ȋazRZ 5*#Te7 ̖;"@uQo\'db~OyVZMNңP5]O fA6=kt* Z+h4L0WjD#SgR*e{E*HJWUjN`|LTT =x0fԹ+{ְ(Vu_茙9Ф6*vUQ}4H8B~<ȚrGFt g^* vn+2:T+6XDn& Yt5{S0ؓχ%/VfrL"?_A~6fDZdѴ@}Cm1{\ 4! :YRc¸3~[t L5%VඵSMd[|f:2n#Y+{*FwA ג,^Y]qU91<[?Ng41c#5P_qN UbUudG]1b5(+A751WWM-&H|@@BJ <@@sAN@4WFY +;#dfqDjhCx#dӡ_^N%3EwzV(uq'sUy'.[^p_@1;*|{4E7ƑwR$\nv:N[zH%u>xCP`=2v-ۊCwHg1#-!~\mٌ  y>6guGr} cp 190V9\q"laV "޷YG&f~o,MH `2%}w "hEpwiᴫ\q5#qi{/׍_vLWllOb9*Lv:ETAJJQM"%Zk~[X>qк1fOrlҖB@ġjl7t1&9u{޺.* a) 4Yc b9]b+ Ҡ~*:!1S^Z11;]R#%j\yjJB=ǴjQ OqZc/( K>nہdKc_SOѾV&v"mqj(?[m2*:0qk{a3y&Jbج͞@\|i=f.Dps3R`\5I8B@t/o2 n cqK>Ovm|tmle,頣(*DzPOi2%lxQO'Uf) |Q@/HfO`_dq7|x*ybg`W#QM3 ? rsNJ5߃>(o:ҩ<=ͷT9Ôwu)>+7PSV;b4.9Gc?iJQoLkW;|68ѾעӍYN$Kk,Eo{->P-ud. j/(ߔx@*)GixZjP/Epp}.GTzއ놺M sFO\◹O}:~M(B%s|YG-v]7V[9vszNe&HD1dke0ulFCHDlEB4Dh{ Sa6L_Y,"4(1l{Gc7Ý OST-EEkUiS&V4q`P_:*K9f.88aK#},hp$&9;f5. ѽF Քl3?/Iz&8NS!_ aE/O@܁_-$l `X ;>`ZCRqu6FtS*6XW{rI7I ) n ЧC\REAϖX_~~gC D;j%*W N ^A8K?hhQ o}w3nkI"pM&psus6*O/ݝ;ƚ9xb<ziF>l?j́nk 3:5>NߪDfN믓DVsZ]j'h%\QوPHXQ#0R=;.n3jTȹnQYswZ5|ȝϑ10Z(0FO =vV,pϜQxq18"^y?k畼37wW[uyVDWa֐̈\|Ze#aHcpno϶Cd(Q䱻ށyiz x]f[9iIo'CU[)="ƲWe\("PLy{ΑQ[7 ォ1<6I0)VuvWhO#*YC"XF'[3i^C@z߽5>{B[I:|t|&jYd śF{BS=cD`зmV͔:g {ƖB1-JPn@`Q/z"ݏ|y)˔0E^SJ4%eS a LH|PɐGzSGaaf fDEOJ́U=Lt QgH/ RCgGPt%TW$犓GsǻBIbe2')ҝ."p8&hSy  "TPM\c v5][oŕbk#TgdB!xy}LwmIgA LsNj d:B'H?ĝo&;=c8ɤLxd_Vl=ZSQf3u\[Ly mSZ!zy\]Qz\ L px'Q Us3ӕT?>|T.Dgј~G3} 򥯛:W*hX oBd̒vmQd=rۀC)/ V$uy/L-h>Jxu{T53X:7Pȋ^/.hbm1O+$eL\VEէZ3:B/ezɤNfzLu;) :)ڀ5l$''Mވ6 kyƬ 7LQ:Tp=½'H %D4'}ɸ򫁼˽zWf~w؁^S W="b !?p@ 7ñ'ޭ4`ZAy}^6ZSӭ;F\)[+!NdSgAӹ_)ࣕ>&cߩ|$, |Oᅃx?dE* i 2H Z! VՃ57oE>{]`@K) 0"ud^W- XzX Bj3zҷ-rca3}UiRmg||TdU>[^jDۋ8Y>%ۭA$37G zH]V;y@%h ,4>NOD)`T4Gc sSHSoS4"iw"4$Nq D42Imcz&Ƿ4v װf++29_.vo9]x"'ngJB0B*)5#!?BߋX} K%Fd$v`RU1zX} ?Cp (ƽq6)+`ؿxmMcPF}dzյL1hXO$\9\ʃh }WWqJLΞ}8{]!Tc,xfD^G&FUv?9 } Ӽyzl (nIKF3*Đm':qT[Ky fǩT ʝFywEμҼ6)Ρ~CSƵlޤV i1+p !´bUyMi#ꂲM>@fMpMہꘘC%T*%xKh8^odw&(.@Qj9.*ar((~Nj+Ƈ$h^,T]wDЅrPB>JQ@4P|{WWV Xi #(GJ{1Ū_#(mC,I*< LHmBYI$(hθ!w<8rUb:ҿV5#&&xl~5a:#]sJӠP ll32 oMtÎtnз^hC|@ ,f(Fy9({ex_Q?۬~W:Z Czc/o ܾ *5iUfS9ȖI{#b%?{bL&+>e[;,7t$H\''BqowއNU ;7Z uVmO\I$Qd,(;CWơ/V8Mkvwl0rJ#LGLTY`Ae&ZUMfL]Ǹ, {i̲SBW~~C$ ݨ&dIY _BZyf)_籌Ԍ})b/Ef>72;w_ N'>@xJ%[a:az옪+JTyy7c남+T٦,dv>L-i0`߭K l+Xho:7qyD:ZVQ J~oBoCw㐽e>9t` G7%͂~Ҿ3)K^X̖2e}Ж[ekXAYFVgTbRhbg"eta,gK02'E6و3O&y,lK 9>r xj<}A2R`G*e8ӇqHG(LGބO?L1M7~+ _DbT`+2M @Զ6\8uNsu"DOJ,H Kc!Ee P;f})M,wW溮*6ߙs8o5_~\ssзp-pݚ4!%+Ŀݥ=O$Ç((W]&%8Saf_vi4DeQ~ͥ`x{vU䝶)*Iϩ'3HL+N\^8Jˇ %:e-vR9Mݮς_;ש5+uW v&Z)6^#eL:meshi;ʩ{$`y7U:h뮦^('ܲDN!93CHS0l@w[ j6x(OcUar ε& k3T]a Guy8Gs;6Bbvb9' f*/%ƏG#oy|,Nn RZY(8R%RawcwKHM-â41߲ wE}}gl]f|<`ueR d&UVo)UQv=An/eOn#zFJ`.{\E@JַQ6^)htPhs08|_ɨBDT6Jj T[:ON,w|PULΕ dRI9?//Б",ԍ@ J}[ˍxgaN9dB m yᙲΏ =. 1] áWR"2ݑ >ɂ!Ҙtxo~5-t>8JcZ>5SuXIZנݮdN-T#Cp7ovv5V@  Lb"Pe%\& lڋD-dzmy<0ً,n%lyI*K2ڲ)+}Z_3|r5|KBMhWS!%qh HMGhla6^6>˧{ᨵT  /L8i[3cQvzީ&$8;N1* dVzv2`P-?ɼT4XߦGV]Q--{/X!ff)΋1 n @ЎZ~ڇ@A^꧈*P [Ȱ'TqE+q''ꡉ c` !۵`ܞ"C's&Ӝ3kCɶDnXAEjÙČtǨ} +m{L=y+i1f|=pbaG<4S$9{*ƛ-KEVwߔ|^WP9` i-O<7<9$tO Q^͗?QPj~x.}3su Auq$A}z~iU}J͌ZdKCle'ɤm} E#GX0E*I$rRvnlXgCdp=nZO'ړ,@Z}ȴVlDOk!i@^T BsZT W茧߯zНWAYʞc܎4ohcf,tb}Tzt%/r֓QP7?g׷, 5AA"{ a ` A[d8xCqx/L5W 88ΓZN/`sN94E!NOIҚ7gvj&2*Xt@x`uC],C=Phf(z Cy/fZxjs$S=87Atn^H`J/q~J^@c1ܐ,۬NU1ج{6g~&Sw NR4hTju!4E'7c-1yl9D6 ~c☎&[ʸYvRitق\Z>jS[24jw6Gg, {kS2 8.)BPhfOÄU"%3]T/uDcCeFr˗05{$=JE;VOG"]^ʿGB2Uʺ bN;MSoxlzĶ |K-[d A@/^Sѱvc7X"*z)x/+5D{ ݃\o[!y2,̂ d(CH&}7&u,}VW`](ǫ/L:9rW^++{>D7l4Nw)vޭqz99s@u_"/&юKc$ Е̙+&ߋVp΅ !*"vEo|kBy E„>NHd [q2hWF9CaG/ c=jpǥJ4lCn??Xƈ-!iq$yI} 3JAWhc{#K& hԽǯ5m?5e[Q,`(;IT5>R.z.؈:oa>? zŭCLh± &W-7J7[I0Mv=pd@@D5A+ug[emuט:ߐ. fY,$P[A3yUY> 0!OAGfb{%%At?ϊt0i@^bmKC hѺ=u犀Z d'^pdp~艹اez_-M(rI-X+g h}b<B{0cƊ^_l<E;kgk=g|zVqj[$ȸÁ u%l'L{KG A7MV۠x":spA#j-5$^y胼s4GD3/L.1+j\,ona{+!JH#C[{zZRpE= *MFpke* M*#oLP;/r˟_zU aQ)F 6 @o9)4xE]44>W-Ӻ%qWoLI^X4g!'aOo~y G(wfGޘlW/ nqQo _Jh'!f+y~qA1t*1?DuF~5m=3ⓧ|/6ыMLRdj`PF`uGdrYJz^rt/|o"8Tsnayy0뙖jD?R[ՃU>F,+׏[,"P4LkErV'Ufs*k3xe(<86'#hʚ#t\Eybn{"s0d5N݉Ґ1X2)ɬ)˸n&7B~b6G(t-\ɩ3@Cr S2k2I-_.FdU&TSX Ux^+*>yi>nÁ|Tڷhk ƚSS}f¡"JKӂUٜy( yVn<΃r)R:4;CnCi{1P<2 SHIw $slEd,aGy΄>؀ݐNo3]/0o3,uLuQo۵g1& !yetWư=dt³6J"rJp͘؁=pN-å,߶,F Q-Լ{҃PЬ<б GMx)_, )jV;^cE,qpkflU1%,&c43(),b~$ߔWFjEč(KMfrlhoYu PQj-! nK 6W ~4vDM/&HS!# < S6-Ͻ|I/<;f5 ?l>tlrbH)lk4Mh714fd]X9'ًU52$b!unA _Dí@]IwYN kY@+a<,jԟk2X _Ӯ*mY ý4Zi, ¾)]-4xoܑw@('Kl\gg厶flrNLZ$W{dmGlb4ҽ0,zn$4Z轈m $}lZ@8'vox=搱Ux'cK1S'%ώ(ttlknpbY*$gUXcXObbpti Zyۂ_h/llؤh!c]HX^.@]B u)A;g&?Bycys*=JZEk=CFK$4eלW0,W* Oʮ.SUwөՔ"ak|{Uޛr!n.O@r "0 0]Ϯ?^lȪRK=xGP*ۏ]8os+jzY0 FSnBpe &M y҂碯MYSw=)!*$ %BZᏈ@ AA9ɢJNVG(js߆2 "iW+'~O$+~[Fi# CN ?n+]1 &ySAT[ﴷi$12 ~rG.iHe*=Tۗ,X7=a!yq כg \Wl6,_¿~h  ;9I(#ҵj'hD _0[d i\`b*lq8gi>aC[Xvn ʇ9peѩ7f)5ײN;Ie-cFmB>4Nsɭ}9O轑yf1iƅ"LVjX |i}jS9F.-~W/YD?J$9".322sBwP7lAo5*c,  m8(#ߟrO ,] Q  gZ3,TSs40(ük{qA^Ȑ8AIضޏ˱wY)V疗'#P_%h;Hn_&jXd a"Y_05#e8#KAMlXԧ[zšSd):]NTdg #ą6CyӸA`B,!d9B YK5,kMliICs%nqB9+fśs1_kW]QAڳKYz>xM_ /%og?s-{؁gvS}ndțoYV9Az40>%t[x/vAyHkC4HCʻ(ھL]c]qd f[!754Nqe0ȭ'N6Try_Q?]E%]ѰïkTXBab"UiJ/ֆ~N${1rB=)E. !$*[? }7tM܆>_2/.[j]1ʺk1ν.&C mU>ڊV$o}oL4]Sm6Iu0w]0#:I|}Ctt!?=@tiSǢY3. ecTH8R^G|.}06mw C"p!Jұ`A\C44rъMDuBPp>/JY*T(Q"'t@yį-BnDBEGB=ݭ CKiTqkF뼦WZrreH2 \`i+িP&] Q.{*ʃiSyZ# {NӾk[ *pH ٖšRI~(ʦ^Y):T*)Әd!* $CB.^-XkoLiE6JEaUqcY<n^ȡ6LugvIc'3`W,7;u1XM<܁@aՄ̮h@[ou(0a֤ul}p3#@\{l `oI$Di PVq1(CVIϝ2G- ķBf|3]Pέ t89M9SOy+'r߼hJ6Қ(IP;JfFg:u?"VnO .ݘ"2+`=ۍa|,<>R (;<{vYWߎȈ ZQtJc벫vd{m[@jPM|B ֤(s S*+s׼oN.-ƨ8c!˙Rhm2&u :F]CH $Th.eґ₎hS-h.NCLG9P&ˏ AQl<{pJ +mhfYZo  ~/t=IjݭIq \m&- % fS]_`ɝFXo-ǫF;0H,woC-aQ__UEv1 p|FRyX HV0?ׯF-1Mn<ơo2-eob2h!Ed VC\q4-*a3&sD: ZAx(f(#s+1|:V%bB<|.VstK[&rc/cȼQ,9!6 rZ)w}_y/pL10oUU+_撞\o< h t=%jm'5O &|Qku7T q]:L@vI]Dj< B6'Ϸ\,tq63Od7 Z +fus`m0 ԏecFk" T ;yplgߕml\ش 5(rsUm 7^ɊA= RYp|'ՐL[`!;b!tzWt ئRLCwc*=jKE R$)Yug#i3tg!JSJ^KZIV+t(i W~ڬ ʦtC* hX߯=J){7A? fcXX%_Xɜ}}:*ŧ!2!6l3~1ȃ?_ܳجV<B5JR$MѲTB2|Gn@VqV =q O"wNԓ8<<ֆSpg/]9KVն[ˮhrYƭ4wYSG1FSWyfU!͗{x}`{WWL9!74SI Ia#')>Y Fr E 9l!a0N8;+Kpz9aq85LTAD0jߘ '#g; i"f,n9.8RMg5K@q 8=tY1z-+P\ nl#}Cc=y|e -|`[Io Nbh\ߗJ\(Ge}FӋP}XsxL @_~e$m XWE? 칋6S ϊHO KS\beۑqCd tNXbh9~3-M &y*IOoyԅRrZ*"p;tmU.D4;(j&0[+شY|-3i&W@۪߅:v9c4ʳ %q')R^ 3@+@a<;_BSf+@ܵvAlK ݑ3r*-5)kx?ciǚFn7~ѧwIY:M3cX6@Keuk$[BMeJ%ыfg2eeUJ$;Mh<)򦠐`l*M;Hmeiu VR2/\7v)\~y6m ǝD1rhIgJ#OX%,yF >zs&dJ:Oû.rжm4r,J gA{M,3΁cz6d*,[PNхS/{ uP a+k,v {iPnbTm;\ח8BӁpJ'-z?3J Pl3Uز,C^?.SVC 8nR $8;Ѿ9 >MF9NRSA<`I_L|5^H!$ֵB^C6|)E|:ҮAy&OI`f.Ǜdvk(B'{Esz$ ,{ۉ蚗{u@.o gf!ǹW'~/ROWa;SpzhG2046^FX߼^ؕ) fgR}vDn,\Q qZZгsp;|f *\Ĉw4}Zg>$㞒7fEsAK!ƒ9eo& ~)Yl.L ! 0ڹ]JGP1hR8^Sl lFs>`3{sy#>iOػ`ka`xkCL{m:SkhUd# =Ӫm*L Hb|sa!ksM&0Fp[fFX׍B>^fJbPʄZUzCrAl\ Mhrv$0$I0@JoP= K˔Js;@ᥩA58"A-MkeRwVWScx]>~ `F/pl 1y1ۂp919XD%res,r38ØP^b;̞?]LcQ)DCs}'[%$>fiρNsAqÞG*r"]1sX3i,- Ń%Jvԣ. HM{f}Z؊t'aDNG~ uR{D;=;*=ͿXv'a`q!rh@j?>ZA^MA|PF'->Voc IZј&PտBw?V1H ӟɑf昉'ԷYY):|.CfGNHAHq˞w="طEpxȰkn59؀jݦ2N֫Y(ՠԠ%c=dx o;)b5L{$pP/Sj щyCMjɷɥCBܳt\Qd|XϠZ^p!m_D 5gQԢ{A2T?:հ%1EY;OK7ϭcf2֬JjZEoĒh6+2i۩^[6* ]7OatRՠP;n-!:OM)TNs+r ܸkPרPif=2y'=-JlŒqe;ZHNO@䟌1_@ھ(,sK|jWK4ߗp'he fJ-(&؃Yݙ]lʗhq)oqhj5$h{ĢoѢ> ֳ?S;/{>hi|Ha4m=q7ZE,cI0"²w|K<9!n͟5qWk8A~Pq'k L5unn>nꗷ=Q;Eʛ%^wDVμ U?/j cz)lj7I2/Է8'bDb8ƺJ {Un I(Fdᰤ{91f8tW#Ni=5_֖9̼=jI|iw-lZbDE9ex] "=1Hr9QDF}Q .گWx,XE#wPcZ5,TFE'ͤ\aK҃8ͣ:J-?g'cJYJAf5iy<XedGܬIm~NX b`&yl?$fI1ěz+@NE3zY}SKc*Q>J%3~ațRy9+ٸW~nz\z]oFj"'-GV6)'` 0*4a&`&k~eV)~+A:;5.)>¤ H"<`I D89dNǡB*dz|(RN}.E*lo%QN_p] :۷"c#x"&zhq{O bGEbBY1 ܦn\q?sb|(̨AT␱{IyQ`c'lxӏ)ѿJEtx=ƣ;4deP?% "{)_ߖ7&M+GMu@h`3<l9IxB9"5z/Rlc:ھ="?lHV[ӝ\#C=݄|ZwJ|,'=@֎!Y?}nxpr+ $A"(. OPkdK+IsxTl;TI~S <>jh@y*IHN `!8{Ʌ'q]vR<5"TIaGY%u{'B{j?{E eD V`΄K;H*R #1XF+)=5\go`dDzbnlK`ȭ49Ξn_ӧNE̍8cXApwFQ9hB%F2s(.6,]ѵ:i"T;75qF/1̽J W|+<Ɯ ]@L ``ڄ?3K3X&bgp=|o fB['BZ<{4T#9+^AJS:ڍsq,d1?V{$ao=dOMY{N}kKM`BeMƆЊ-\?.uIq}MR@xKlM _$Ţҷ:h CšH4kgp;+.e$`j7`^id3j\g^|vKr(JϻVDH4(rmzB ?w!a#hAaS,Y}|f=\; F*Nnh.n{AZ {LR6iHP3i+:+gΕr ˤP5|KRʶl[#s9lr<-DR#! LnxRLUImMVy SdyP3I ]j(͒qXLfW=^?Q^r':D43<N- n`i$JC'5I3qW'{j [~uWM9F?0e^87o]L9 2ap[qlwSr]"[`2 `>8|0 $ ͽes+r#ճY2tl2D,L_(I)k+L-0oU;5|4*ZwlűȢTG ARK-  )֚0A 1K5>g!7,b9%}W"P.Wät kwW̅AJqgX3+*fc\k;rfR" u\pUD)'U;EKI@޾9#_Q FZTR!|,}Ȭl+l@R$q5h|@IVmjVM~`^| [$ſb)J<fi\EKOo:`6?8G/]^fۑw'v ~&x}!ݦ%CD(^HLQڋ(Y5Z%,x䂽mC] ЌDido޹aEua2K, h"5$iOBT1RN{D6L *i슓iJI*=OSi*D|U8? =yd:"&8u_`[)ގvg7""/=(wCOPxӠf8 ꣒F]5+c,wh]P+ȅUWЬVc\#9וvrHe-6KFwlHؿ*r[hު# a0\ViFpAE4#柣候" %-V$؜仁AfnV^IdQ'#+>B7EhJ`p5nD.4\/n)R`_>3D$yp+UVm)"Sc3+1rNc6cTSDIB(ʸE/Ae-׻>z%uѬ5šȗrDD_vt]*T,P =3J~J}˾ !x[c) |2㉙?~s5fS3L-J21Wc[}Îzv޾rp5g:> ɡz?>6N`VȦn>` 04WM\Dcl^Zo4ra&oj%L>DZNPX~Q/x AzUHEnHbd `Ni+[OBe3,.7<33Њ,FWG$4 R{H g 3?6XEZs'L+4`Ln^S3zY+p|Q-7n^GSgExQ sQ ;;i~=?JA.Jޅi5:6ds7(\^}iL8SeSs} [_ 'َ[eJ jAh7%Fq#u-W~ ;LN4b Gy*\:dLOa쿶T=u[Unu DvkmD@T~+byEKVgf)QslPD_$ h+gFcJU#: 8bo9(V9a7i5uD/)L#4W眳By!v"]`:#,[m-]h1O[+5LMkYcRM0^aQ}V ps1/sc qڂ6Bw#Vvjz[/52شw"3iO痹;_LHzm3m8>{*tt \;?b%Ы/hQe}TEf8 pPԭӬܧv6H!E+[3-. I2N;` 6d ̜!ZøyWS1&y$pocՍwa^u(k| l6D~vt: W}&/ -$hl$ﾏSi^UX'u0Y}Y1zh3<X7^G MfXOu@=V^0AТLp>)W~7` b@ i0;2]HQʪt=F-j6xc![uk?`X~Z!z[_KR5! ^2/&J#W5FZ:y<}{ZYW5=q2tj&U\m$bjz[["sI'caFUH{3$ErO3Ya,O `\Ȱ>F<{E uL!Zgbgl('cNX4wPgg^&аHl!-v|UcK}kcTedQpm|9a"lScU&_^)Yq*0}!C_eCg < z8jճִ&a~|Z jWm- Pib eD+9d{SN3$DbWWcVibZt(@,oj$ݖfCV^.vhہ;6NŌz^m4 i3IW;aii\tf_ji /nc‰}]&%ۿ|E<Ɋc:]B%k#g 1vdy:l$%j_:{Øq( XW.v#:&*x ۍOnط)il Snr.S.an9jZDU9 f# 3򆚨67nq5e]ۼإ\=v 1!F2-eX)_Z2&Qqq%(-FA{mNS,[Syo$""B'; xӉ 'N%ly RC Ba^g"voR;`-q]v={*QL;|B> M Κ.’#R*hkEVV嵚 5cگ$Y^2ny "|ܶ 2UP覜%6|U&&[.R,h@O Dy 96mIy$~ `%c{^&YY!5r>pLuG,huRZBCH;iO9ngjT^l}dN.gis -d?BkA&9S^oP*.6. !=PHnX28(1=L۱ 522,-[t_[;9ďaqj \ qXh٢_ZpE",ݡ_蛆 h Ѷz4B%7ejJ zeQTgJVPټd:޵dk2na~RM-`7p9}pۜmV^($𾕥 `Q3'ҽbNPp'.: L/|bmTJ!!׊:JH@*-eK0s :D(-{Zw]pA/צ=ﲨ0mL& v-(~TdR?X+6C* 4s2r5/L,WK3[{!N\#tPu0}M޶k2E: )5ڹ$Pr0OňLϪ g:9Km"@y[kCC 53ʭK `(t GQ38Ey/ZbAѐd4!w*cXCgU[2gR7R ]escM}# cᲪ 6@YM2LZ$$$0,mAJTi3рͻyuSCutSZmK[H9O=jȮF/Ġtڔ4%'smBL:s7å $bImBbGnZԴ ήi6u(]o@PahE:ˇ_gwg9[ MY2\oaLz_8Hh[szgydh="L^b өk Ja aL>.#s)s'hsx}R0_Y> 4R1j"dc$" wF̏*$Nf7l J-m^ݯ E7{19X,WjXKJ:gQJ^g/Z̩‚\i)\R+i>xj# **eHN4د-u3#x䉊EL_kܬ+~-UW7A PnR#=|j` ;Bw&g (.3SZk(S,.̩ #"8؈sO!MIC´9.EdfRn`~ r]?ꝚlA:o1d}wgE[9%;4thɪ؆#/<#ţ,y@RbZo гSfL1kӂƕ>=$˟,CXPoy vpegyB["%3ڸP ;]`& eaߓȡOkPiإ{T5n2' Xv;!B1XKbN(EIpy>D2'rvpVOk~-3UBźA7MrE.E ֭((-@g=,̸Зw6zHQV[s2@׮"97F| m (n6\[_.b^]jCa mpH7,LX9Cqu-lAw f8o#clk = wƲ1>:,;k}KCϭ \n^jtD"4ce{(X;2r&Xg tȁ*&0$R~-3"8ZFN(TYAEj>-e/0؎U ٲc^_RWnd2i#+Q} עCTqXIo{~3/E.wp5&v$7ˣ-O|m%Q",v.Oe?9c\ZGsYtzE LS:$qb(zLr{1`àaŵ蔏2Pm/\]=4Q|hI!id/e~R*\֫Q+d T 6s=&:/=?q8<1li龋a8B/ѦEø#IӞN1~K_% < Ʒt3luc݅.a_U?)$t<.cOU'78Gqt:W$USe7BOG:mj"X8O/1QfNzهyDZTh͍ok"J`(9.3:ϕ O7WNΕ71SݭE_@Q,XD~(i!6F w{vTuY͙HPճJMi+m5B-t92R/>`߰'y_dmFX`9ʕsSZUW8ؓ)NnZ'+7ݞwNH(*2[.RjZ`A{(q_ a 2 ׏8aYCXզq75 aa"ƿ-Gǽ?THc7Z7V[bopEE{&NJȋ@(Pe!?OtBqa8{i2%C vDIE 3QMf!DnvgRVlu kڗĽVNEǬ 5 D BÞZ%˝5.vc5~653sڦon Q,|U*,4`P9Rȫ7_n}1eE4Zq>$^P0e~"BưqiHz|ZE'Fd/-ì,}m[kO}y5]# 7þfTC7#l!0J&]J"g]RBL\ jN(6(UZ^=ÙtKI<BL+Tz{BQyPA^ ejYXo z7*gS,}2v {҉V~ܡ\-rk>p#U1HpW``L|2V7G 0fupBA(R#ݎF(\0i[JEø9=+{"{"P\ae Z9)}$8&Nm?x6 ʩ8}j\d yZXaZ{'.IM@РP%AJp5?Kw!u [Cf9˔pV3!_d+7Aeߛ* 7B@Y?Q]({+{?FrAQ)Gygnp^A ɉr5a{-!}3H5N ! o Y'$iQW_B}A\a#add prOKCH^T1JH,:e!֫ iZ+I‡$FstF%̐?4ޟ-+b0w1$.AblBPiF]2O"/gA"q MaQS{۱S,tB;~x rE%2;ՅH)ditj0jmeR(69"Ő7$)O%|s,+-2q(%&ɞ+X-Q|=SUhyE3Gm D HƊ7 tjj"UYmpk;xϭdRv58$0!vL8E|hJThtwPl{N rB9/$1_L!Z y=Dl,EE3۪_陖 ˕H{3t:˝Hd,yi joE ;YAϱ3h;yi^Flk{g9ҷÀב76. @4තVL}bNrdzTu)L[X7粦ޤAS%3GqƱ#q-|n ?3uVIX}J7=vۣO$H|p(( ʣ߅jy[q | yӃ2bIUT,ZD`#_aXC . ,mlM0EQ*,HILےЊրC_J V/cs( $ZnߤWVW%͜ tiqc(I!$zOܫ>)S[|yUY[;$[hO3 .5,P#>gJqIU'/>=(q DhDCVFlb|$ciԸ3<=Ȣi ̥YrA¿8? L") %㫃]OWZI? fX;;ZBI=+iB:0xS[nɓ :Z$wZ(<Ÿ>40D0%E`q8&}o@&O 黥͘SXlJ6ɏ1"6"Yɳ3ꆐ'h;&3'Xy5Qc ANݵ`3n"ϲ{9nO9ṙ4_. Ct$_LCSC=G+U0h[`"&%8L0"$ip*Ԗ2%Օpw_1fORlx09Ơ7'AV0ŵvyՁ.[^GUttݤ90r8^ {қQ`>l$zSNTFCdl  N^\:|8]E2$#7OAK4l LnaX=lRְq5OǫE7!$c'R?)z=4J A,f/C׌z`s;,ݾVVuܷS >.^뼵 L&bHurMo F $$}MvboۆY$f>D䃯ݑr5ڛD NIR~+bfaAWTi14m5qloy/6L'jTWr͹!\5. C0e!&9ZRo'd%<5P{4]D;yCh g7#ثhy!׫+\8[L%?Q&Ⱥ_\NP ѐj~,c.lL5 Rx|F yK~)3jJHbyt H\P1PwA="HwvuW _jX'«dr CʧoD{%UIa識;9<U8sH 2PtL$ Jt?E<a R [k}]9{ i-[l?XѠ1get9 7Zy+xLj+=rHJ?ܼ[@R4Ob:!] 9PH/ wv#҃Sw=e{8dG߳X%B( X8S2QfV*&M**$8r^H:G&fg  -q]b+XO)aUV9IfcvО^3r8*"w*$Q N᪋piAHbJ>elnquʃ/KQ|4DT8ܹm}x}Zϔ=2 cѹ$uU_|q51P(WiKuώt5 VTFpLVـ!'R aExW=#)=Mc&mꤟR"j<:Y,2'-.,cmA`>?Os )azyd ˩sFR ušANc nin4T<߯Y@ !z- %.KzwFb- H\b٘Gҡw@VZ7=s%LBTJN iaiYؙ TJܘX#@⫘;Ӛ͎U;yRԕS~0J9ksQP!%I[hoxoAcyB[ן 6|ZL3^6i\ <\>>Ll4ܳ 6/-; q \#(t5+뾜2'+; (r'&x0wkN$*>o';r\9e";x,(ov=L@v;1%ҵ"DB)L1 >)`QL3EYݫaGrRّ? ˈ"~9ÜreP*1%E ^i`byz(l6TBykLZxXBPa%d>#xo\rRCKDb,}%)̱phΔm\iܨ1roG2)VaXvq,p$fb.vZ!VClV{Q!<Q`DR~]a}9-{~au渿9)^jrQ9&ET쒥q 6cT\+' P9L ,+2iA_]tBT'㹓.쀌q(Ex냃R! Uȍ-)ȵa.>qavmljx3=,>)_a49]1b"6"Y<H",r|T5.&Pؓds%K{c^̠`hjv1y:oejЕ\Vǭm{B<]:ZPj?FJYB۩%W>"ծLFz !ڞFD>m84qV_}aP^m->,sxښn^H.]@M"ObPŒh?WSш ty':͕1X4Evo)X7| bt[Bٖ0>*dB~biC|mӸ2d 1ZVQiɱ#IϵOvR 4ς_DD 5Ą6/S3;U{u)R'ﯨ}q<:$t{uržuK L1BLrw{L q6FfZf-dRN[ucDO12Yn <f3/υ=YbuB^&EQqܘN ~{'{-2~(Z7T AN@ sMBn /^Ź'97H{mnRDXyV>*%6K>j5O|M|` 0s'g~%d?]7FPix2;wAB?W M5 i#E1#i:rE&XYvY}?wٰ5HOUsp^#i-8}<{zOsL'Ž: 'WzbW/1TRՎf@c1 &ߝzܶ>'ܛ29R\ȓogQMz|*ʧVkځˆD_ɮV&d{XmngCXxkOԭ4@؍  :#y>"E_iÅj<1 w/2 06hl\[u6,L1#=lTeV /q!4!4,s޿w".0]k)BCj-@bTnglpU˚p[ .DwsR?;eE9?D~jhE#'FDG]&uY`7;1c[\ k3ʾgXEmĒE KZ/|85t]FckkEzY1jAx@3B=ZxWFdlKVUA ?vtw, A`Q3I"ˊ'7oƆ&Y*S_v>D7TCx =oR!-l8 5n>jZU'+mM1 VJ ˵E7etn&} 5'|jDyYGiC, vW^@xe|,nLn௦}{F~֬b׸|C VR AljcTtd &΅*B0@kD\Q>:3X,u+0u֓jZ©os oϭ0L`9ufX;T{`J#eh"u>kWԜʡBL&!6ۋ8rj' UlK_xuFf蛒j}rfwvidJ/Ni|], ;S,"ZdH$ f\ŒC pTӏon]ixTY-hNP85B$V>D># Dؓ/3W1uua1*er% FOE?^sngiȖ%A_7Xs!#ö3 )rY׊UՊNPr4rW@Mrk#O[fQtG_/l$mp6z(5]K쓈 C+uZq]#$0=T0p|K:&h-#.w};A՛D,z+iKpcx2ت9ztr`9I*˵P:}@O&▃q>z1Aݤp 2bޤ|@pj)>q]ɼ4xA.R>9] OizC]$# 9hVv'F84!߭qNd'i>!{b cɹ +hLLHKZ gB>#^ 3ia;; {g"1 ޙM _dkaHjzpY> VnyNׁ<ڼ[9YDnV27^rUM!axySձֹ8 6`R3S8WcC5x13ƟKhth`>c|@k$[ܟY#K4Ã,]  oH,{[S;_u0Ohcm\>bJm,(< +W&L. Hp QhsZ #eW3kps\Ew-:qK YCK:f$PN݀. pͿuWu3uEqckBI}0W6KXD?%v/,ft&yw9^}T} S01h`($L_kueP%.cK! r 7K^> o(*/-hě-B 8d]gX vSg+R-~ 6I)PD>^)-c~U!qrND߭ >υd:̈́æi>:k9;I:Cү$z5Ockܘ_R,AGP&i3[ ^Umm^K`-?ڿDQs:+y!# u~"Ufixx?9$ǩM,7B+VcKjjcgj*fjeJT^wUe4׃ƸJC^| <kE޷7'q e/Ɔz>Hi.OtTyx`QX3bcg,.<˦#!XltK ?56Y,JfNe77~zE̱ɯ^wqGUoϢ&\6y$Ҝ >&WQqLEa>ۿOXl!Ad< TbmhEոJSg?ڬTyo&w=DU+KLeG%tƜ>a>&U||@U?PZs]M~> 'fS^WmT ,ـF{ѮXS"cY܉1~35G^y=hShi_Ψ>̱v:ZG=6ETJw?%(Ѡu-lL݆Ur^eh52xyg^ UDT'M7eNUGM0~p| oAE/5|̞u6@yJbR7KqQƗ,fgk/"&$p4pk 33$ݓ|b:wqêhxhE ;W‹n.̋X Cp6&tZ$\-@ȳ&M 1 xseBW\93%/.QڝbvW# ȍm JZ ~op]iO5%x1 ܗ p6]i$<:;8EbB`sOMݟzFĬQDJD %y *NՍԩF &"aX4kYɖ>f$8g~]D4mHR|f߿/VAjAcj, HfQVt$A3J0 J5 T[w09YW+&,ykk@s*&qB'`Lwe:PþF"M۱XQ 2[ӱ&-'I3o(PqSӧT nN)G2=7_> o9U%ll |˧̊,k_!6081(*Wy(Uf;lܲG>tQDѐDDU9%Fg$~I{RZQ#0{-)hLhK @MIl9-pk7f+Z2-Yl_2DRq?+h)C`]MؖЇ"f-ph+icRύ8K$=N 򖨂؛j^/t89NHN7漉sVL(֠C?ƐBuŻa%.r]9}>ֽDr)*@#X+OdwYjCGcϒqa^?J[m KI!MkTT?\rU2_s-k>êp p ?ǰaQpe*a]<}   $h HQ[ئT<`=i [rU'}S_SˀHgJns&R} ik }$RǢ0qH[!je{8@5rօ`> FwtM#Y$ك\:bKqe5"[IR. E6t\27[NUrgUSA8Ud1Cq@زz)d# 8*C^pkW]ݵB Ϋ¯F.\UY^drD=dLc?eMMomTGǪVs*RE2oqXO{Ip{NcK0\)q@u~~l:)eU߰TI">]tS wwdÇ$?-=>l tp>w2V>)]F)v01AU6&]je,f; nؑzt1LAGA+g=1+"e)t\جѣO-XIGa0knC49Cc~^jkTn?5JEuo эfг8A~oաU&Bd(g-jvp8rZtkhm}1 ~`6 ,lDT}N"ϧLY5'ՈyӤni 5z;n>ߢ0܅2b9{[&OD<}Vug#7U2ZKtx 뭉a#(쀦*+A mxDAf1Rb⌄0Uqg[\'sKIr<گ~ſˮ3f^nϑY^ Gf EM,N5EnLiFP칂\D b]|c^2ps隰]4e gbbB "ǟM ʀ#EFC ~fyS:_~snfM0!wvcL\:ܫK<cN0.򰎢ޗHXzU*lMsMQ`vR(RL+C9lNlѽ*4-M 6񎅖B +BGmf%VoT>Ѭ,B!WXvZAeZ%DBϒ-7K9aR;y\EL L8M״n VhCb$]7#3RvGb4*vlcEǡNGj0oIo9 RT+ﰩqs0!P@;a|d [,<:UҺ/x#v[JiE/OyG篵xˤUn3d,!&X>y3ˮc ӱ0ȱr?)ᛱh}& SKUU'geeqۨEd,kyDN fw/Aey β&M\Yí,\Fl/ [ Y:- o'T/!Qjī!օ <T*.; ([w4zp߃_!3m@{潙NıL$͓W>+ vڽq% M`۪u{Y߻^|4-Q!n[?K» jPʇY-o6P5ã`B[ZRHǨL&ogzkR>Yv`TXx眇 CO uo|.m9wh;zv%JhH#IL087 ǢQ5$I Wl>"]u|5Δ5M09}(R6҅'{pnKGNDOJ)3iN6p/gdȐ\$r<߶V.^<uXIXgu,l Ce٧且Gtr(ѩ&2^].IF:O 3v㇨DѢA6àY VfS)쐄M]gʪ<jv*fCU ɆNjTڙNܽaQ75ӞU}M} b,UPo ژO\RHvM[ R*GX552@u4~=cv֊6)΅VSipM7|01ku}j˻Hh)k'iaHI-яA 6{wNSn-=p%hX.oEt*?ٌ!b#:ZK4&Up$|[AlN"+#-@U`O!$H|YMhNΩ˻\wi+ V8^(n2W|>#TICOFv"$°qՠޘ;CWwBOZ4OS鉘z`nN4F糍;A oXU=dZvԁGr}1M5/) 4}Pm+VXg#1  _^6ٝj `FQǮ=*ll#{(Mi^Ve^%EZ?f66/Cr)1}j(DM C8By@~4)6:f W?z !}ĿA;QX/.pRT92Blμ[?vXǸ Ce_g(1yItsSN ٵb1wYP%FEms sAĽge}5EXrL׾h?H/N6t GۜL߫H+|Ћ&+/ 'Cm$;dʃ` FyV qLz̎1J};/J3?DD9}+vPf)GӴYCeV٧l))L͐p5|x0QJ4lR|+Ȭ"q3W*TW{?YB}:D`%R]Zp*:<OL,c$Ǩob,>K\fY=^ؓaY;nׂ]᜕)HiE`0EĹ\EVKbLvGBs2ÛvO&#{\^e3Y29O2˧MD»g[s5W<32 TvNH@R&hlHy]©4}|\'ZONTtY/Чg+ H1-$?j؛@pNW|6zTj࿇ԙ1Tҟ]<\BLY\7ͭfƕ |-eZw0<3!<_ڂp4c΁$D"/V$#>Ak}v:(9C~O$՗*UBc:I{ W ^(UQmyEE\& ֖7/(p+ж- w`qC@fؘ:\"|3-L@鶭QC> Sk/!Ƌ eNa3I[?9 Rבqmgn Gkk0Zd -2̢ʹ* ot(F 9!:#+HJv')gdsoMI݆֚` 8#~jUVhθ%5WW@0n:j^Bve*Tr"еK=hz `}:OJ#'NjJn_m"g mJ<=)w,Z@1+8vF)!Y2LUDz(`!q8p.jxyr!n#ބe9(F4ݢzjAyd0vתr|>5=D)AI~ՒE)X\t .*GĮ_z "WGqZ;o85 ;?|>g'xi!u5b[1` ,VZLϗ0n~)V(5 Lh6X#4㱛'7"ᤔUzvscM(N-Q- C 07a|PI*$}~jlwjvփƊ&stJ %g0oJe4S:*:rDVDxMc aײ@w YK<,uuLN":qQDѳSlXƏ9"K*X6 eٝXt&:"~#QI vnӸs} 7%tu$ۯH'*9ܾ2X(nēne~NTBi H# IMPuaLύ3B˓6 zdzZ&W_I 5TCAEiiT8SiPicx1̖^MxRs|=$ q1sʹmcn* &8;BvJl*+~vVD_ t>g[/1q눥ȃ6h]cf$Ў{A=J;X"G'+%HPpTF7*#y̳a)=y=uK3ԡ 3}$Z2e:Cȷ),}dp2jĩdBRHKDY!G>,mde!PܦqΈ15 b6;&Yc[ 1ЛT@mޘ~r1oG[~#%{fqs@uW,9mOe7j0~5hCl;B':f=֩"c7 xwK!}ދ)&HN\Z}Åj8;|kKJ6{}J^ǻH@ٷ)@f;!ζe#\>Ss;C4E|0Y2PjF8Aoɞy|SwϯGpfͿ0Jĵ.'$KP,_ٱh5maJ6 j~t\WPXY)v״E>s؏⅒GW˶p?6bl(")0L9I1~z]@0eg֦I卧Q47gZcWX--p9敜gNOW`}j!o(}:2riipYֶ_!^&Dr]Z_w5VFҹpUYωV :Y]A7dG}/9eŭܾ<ީ(\?ln6RIۼ͹+閽{yΓ3)#ngZ97]m>9^&X=kL%H36:SN"em cV{_\[bMo6"ISC52* v\DV g(l @J5nCqu^tB/'^Wy‰Ԃr+;')؞Q(5_4_Z4a_-]r4lOǹxh+ G0B#WAe/B.oC ٛPFD|R1Dz[Y2u?5QDdA9E~Bxw / }#lwr*npӐ?WUO3\բН3ģV gm+Ev!4  VeɿLZĿSָ J'Kq&b]iJiŽ 4qՉۜP7m[,@Tv9(v[-qm8 fn)̑䥞[},ÇrKWI__9 /乩Qu_w\nXz1,DƎHl:v'n|;CvY6 KXֶW`);}Е @`3a .ll9^tLXƝOFUx_f2Ce <|kahS҇b.()dޙW{*=Xe\0/ .gpdg:Gik6EGk;ʗA:ST& 0[*#];<42j&CAL8%JƂc- Mt vGPRvQ~m+SWu!k ypLoi)a3 #si߽+el&›eD{,.Kiɔ-S6Hx K(ە?ô +zt< s  cKp |/S˅)LvV"ldbT@4I8C@gTfhXc+#R8k#vhx$ 8=0VWFhנKmzYQ xb$CL ӣ͍uڨD#X7.i;[N{}a\+-`W?+Ӎ *|1qoie IbmVfӱٸ kޗcq5Lfjtqj[8 st$]=6οs <};K=<4~ ʸC?MPR*P@gP=yxt^%|hk?[cmSpnfgF2_ZexmMd(m+%_m np'vSTۂZH'})W[؞UY}4<dmWd@{np\D?(ptUo L-a.dAh.7ե GAJQy;%8L.cFNa*O@ME#ͧ$~X3o + 6Z>w'?|fR*޵jgDq!`*`]{3dAz!y6mS L`aISkQ1ͱDֿ"E~Rn wDl @?ftyXz&q7>ugA R*0`_#' v(r@MݜcSi:S6`lAx>2v;{8l۱!R}Y[ gN 3Wݶ:E jO^ &;7[WMÉ ]I,fijp k-6X v_t}Ij2rvۆy=#?;gd+V02M9֚dL5ie&AG;HmbG3g3y_!57K7"h mm`~4TlA'R9UA(&#þ{<\l<m.o2$> c|UoTGg2anq Zf,*̴PɎ.mA1sYD8~Uf+Z!kt$V*z yVS$u0 b~nfr!a=V#bq.!^@UAi8 zL,M /g'ah=RFXlK[ kYtk"z0ǨpͶ9\-c ͼF{(J*N#Sj 56bߥp8 YYB~"&psAB=XS/Uh!nE2 sOӍ^,dGDiti[ YBƅwK߫TŜ\R "T- .-Bv^6kPܛZ$E㛐OAX xLuҷNO=w/fLZZN -' g>|Vo4+ZrUid_QP_R8CԣY >)?(7b]1@qh63U`СM>noӖpi8, Q̝{|uxKswd1BObN!Z\彽1hQ4VF~Pb h6Mw,7 ڇkPui=r Խ;y'Tƴ/Gx( ׆x+[S[?Rwkz7$lŁR",;9ES*q ]au $(=d!Pt<Hi ߨ㘅7m>rt nmqߌ(2;F1=Q79|v, vDֆ,E7[r>$]F]E3~ZZ]+qhJoAאZ`K3žz6جg|х޸tڸ \w>ʖ$%nOB%DJ#JZ; $_ROQ?]{Z5 G09,y3P[,/”3kwu/ kP̄gmW1 +P;i}ca+ pa1% fKQec|m>C>.k *=X7r9m 'گ%ruxސںXćWQxx~@@ UnN=+ˎ4pM#EkPĨZU4vtdItѾ)v2p\O\™8ҝc_=!6g;Mի"=mAXzddGGj1t"a2ѵ+O F}JH΢6лeeκ cP p#ꀽ|th}&}{2]cܖܙz7+7=A͓ udm6CBKbHar]PX̼ 3fC(XyuC]q:|-c1MAE‚Z~w=H|m{r e_f[zCd$KJ#1bDׄbFo pnmX[aOhQLJF?2ͯuH=: oXm,šQR\K7˸KP^ntRln͙YD ̑5%r?}YŦ[Pq Of# R/j:ιR7n5ֲ ە^>([?:YIlT;* 5&_5w jZ[=?-f "rhڝTj%$F@?p̫eOc~I[ZDkJXC\`Et|ؑkPv0#:Ds%/0t|iccHn) ˧ɩ tm  kHX)=KCB1@.CIMdִK S@߫cRl}^xFOɱ(vb!$;XA?RΠORp9/ 0rd0n!cCuQAѪU/PSľ_Po;W4GӴ7fX=&SL[0,Njclp*uqƃIrUXgd>(&c pbЦqѫZ}xVa~ĖY~naL ./{pq& ի'5σ 2SN;|w1%6㍈EsMdFGl+УGc"\G,߃!amXD:GJ݌&ްK{gFu 2r p(fx[^ 2WƊQIJ;yEUcXʡ7QNC%WijGHv.ºI$Ҽʚ,w4g)|koH)psp*q4.vr3p V*DsvPՉ <$$9lq}ڿ!9!^Rڴ'>a㏁q,ʑ`1ߧc%pfgޱc8A;ܚ6gH i_heN%Va,\mc|N/Y \0nj6]k)u 8xꗬu)BY+@cQMFꜮ Ddꋨj$jruT}r"/Xm'=rrN$pU\tGR?Ln=gXt Vg_ډ-,nc zPiB,Ud_ S -/Zs Yݒ2Vr;qWb/]Vއ\х/Ywrav 0+Nu~B \O"%4˩<V'_gdO K>ofbQDz$T-)URm== Ař^sHNM܇\xN-?eUhA( <ÄF:P:QfL8rT;5Zon`tlm()0V:6{ɨ{jvbاgE#kEYh +GaJ 7mƑtKN|_ܣhݨ``-e7XROx1 BCXi5d%*ֶʫcˊE3A멌j5'"F}yMmՐps0fA1I+YS@hރyZRC}E5?:Sb{:I-c̴6 lK۝4IF]PvL5!Or)>s:;X;u˗/Sk]WCe^@N E+4;)ucZE|:J=v-Rdce"UB)eӯeP8F8?'Yb~֖=OAUnHzwk=؉R C?sM <8Mgkx0NC=dXe%d6kP΂Mrnv6Mk-LG=G#yĘ|E}A|/ll2CpވV {~zAM~<: Uhs3|i)+ q7*hDηX%YP״./ZxvOV1,4ȗvSl=F@ C_\0Y5/4VsG}ADc0sXZV~#+F%l=~veo9kŶO%>:|wJcmcy'0gCj[N>X̉&9W0x1LBaGzuV?ﭧc , 5$wraRQ v7CTNjH>nd.-}²*kݰW/t"ƺHQ`~eTȜŏCY-GN3u*g/@T GҌ;Rw< :]կ5)7T[ë ^|3́k5cďj´PND[A~nd}(O!#QUo/޼̏o,)IDK.P.cV_ ރ;0[IN-ŔJVU؁ J MLl[)CxW?=&X)AzFS>@dS Kʪ ƍBvS)SI6]F,v!`ȁsR[oʓF{,\/;pקY~8#Y S~[|(~J Xa[9v (? ́N*/MVIz37:\dIj]ƺLo4;T6ukO&nc ok/;Դ ]Rzҵc^~!w]{^hbun6WK96R|p7oφ>Ეި~QIO%44hS\nhm"O12]tE[5fTSDȞNJqLlF/蘖I\IAH,=;|X% |mW$ P IO3K]ʋi>7E6Epzt̻sJ8֪mG?[1;yHd7Ee(Kȑζ BWv%UV6Q8/ 4EtLO];)  Zy0\!M8fGD3{_1#ށհTf/Bnbbbů6n[ǡ#{* A~M:XJAKu2 S7*Q^>%[Mob 8{T!l% A"!czo#km$%[ЊlNcQ+_0-L3@[f;+U6ɨ,6?̡p]i&bz) _1_]yFdZ"AB&&ȟ?dj8b{}@^UQ/B'.K!W>7ҥRds~qNF㟂).8N@&g)Yk'"7z 6EhBڦ?Y)Uj`ȟzp%3h_P" QouOv>/H7ꂃ^G"T!hY臠/U#|*$LF!Kz'r[`)ڏ-ovޝ<@v3ٲ|—a h/q e)z!C`{u94f:~z4\# K] ՜?w<;w/rc_;3΁JgasLRYEXf7؏>y @} T F)xHiϡ.sz]%vܰ~A?~AS' ^_ך| h?G*sYӃ$pr!%*Pu=ϒA)0P25wh /Ix ͉v+j_?4t ʑ|s%ؠC|1lyRjGKd?{UF4cڃgzۿITVUa^\ujI3k/B9;h#M>OxiGHG 3TxU2ع u|uĖ1vM]s4ՖYnڐ,a~غ'b1a;S㮾VzIZt@.}Pw\>f>ebEؖqy<߰Jg [X͛$06iۡ JO8.^>/1+ s 0TİEUJiȾGt>!$6؉zxsO14K&'S ْ&ZT43.kޮϙ3@?wчM CDcDВu| y$$hC "K5e”\㎬vN)5\yHVĪ" '?1^: \ON8LѠe .<044蓛Xd$Mo׽ 1e.yVQH߆B!LY )*eg>KkK5sE-_$yj(/kY~#Gcq;3v-F%*Y= fzQn-랽;yF7,1VЎݳJд-ky%B~%-]HCp!/n6Iі³˶i-K<'PC%h[:(IN 7ָw)F^9!j@m #5Jdu mfp]="'sQ/=(fՈ1|`P%Kהq4"Z2k{y׸8~8(㏗7~}S`S']\IB$ .YlԪ> СMPߙI"l#SU MvS#Wn3UenA#F.Nx%%et%xUqi/ kOtϺ8;ךvp<x,){b TӎkdDc+z=4$`]@O)4 #:TK;e uCDHQeܶй9KjVEV < _+:5s$ jTX4eU{ JnjUѽE_K-lD2[QV\SZ~q.lic^& + _F0k.u82 &3Mt'گAI˛bgi̍Z":uE${Ĺ#'~b[|0ghњe z_ j~JCmNʼEPE ޴9AW>6(hopZ `EsQTaL,iܿ9z£7JԞz?S5/  !1Jjv-SopD(U6ngvkHwtjz.ړ; BLW87Qb^jq럳Ze}| #YjCZ|}`XGġ_ ˃7U"YCw쀜s:+J@$3A$f(9Ҫh?7J9q)~͖gOC&+cİZr1#Gl9oK]d(/`saڰ0{CZ5!Gusf?Y1gt&^=.su5F(K6(k=% ChPmN|px+nH; *mu6ZW1O=8ST9m|h - N{.0w ʹ0y&; iUڴ2 +$r׼w{3]-䈈x~qWn=3kw%7K?`I"^RϨ%Ir7U kHO5Õ9pũ\I@;s91[Ţhx;xlT|zSe=zU~Ԧ4-)b9~P^oycoQY/p ϔ|sjHȡxp߼o[.>D^Qm| hYm.CB@r58H?r%TZ(ޜfOox̀ƨ[z?d]uEV/h}GUnCn͏o"fG|p =Av.FcZQ=9_crTsFiM`R ajEnK߿ ~N}VXNA2]WA\Amq*r]Ï757Ÿ!.jF-i+.?\[{=\58%h? ~{ 5f^z3DT(sTz2'Hnv0Q}ָa<59*ׅ?%gb-Exd8S)fɔXǏEЊѨRu vEˎ]r&LcY4]g^\SAPz|(}܇;y wwʴ=XGTC̏5SЙ(;b{P,)&-^7T%B4!r%%M _l3:~VRJ͵&)—R1m)()Aan"0WG_%= xh T%͞3Z: Y;JWo8=*X7|g̖"XO QKSS /+_F7bt^y5s 蝄3ꖾP'_Jt:;-ݗQE3|an+1{چc0@ugR;(l-8;; "`Jв]S^xF{If_&pC[9P?rԻ"&*$5/Byį)쉞V)PN=WY݁>_W⊲xDpV}DX`{(KCR\dd?MVȨBIa ?Q;r?U>y)7iG ɑ*4w hJ%㒕ې2OoH~C)~;qqt[܍X.%ԘQjaaQ#L۬ȕ;<IV\}"2>Q> j g ?xm ޻Җ,,K}%] 45<\'R|'qJޗvux1Fi^ѩKnԍJٲNdco0"e%@AjeAmXRb>-qaxN߹ex&6j79chqzVϢz*5.:!yy} y橃7zԞe3' *Si"e9zԋ!6$-^?r(rIT'ە;/R+0^,Di)p.f )*VJRR`gc L &bF)>n9o|뙃2wPi٨;o&Md GuCvxd/]8IU*[ (YH\:iȗ#' 5d=,1oáᬆv%+:n*CRF@W!蒛^efIт~5=v̵aD bh^ɥ龤mD%%\k f#U9-8c=ֲqS#6;1ήv'+L.a`?u-*u'6 ز<-pjGPN{3[}bPla8#t/뜿SH|BPnֲ4S"u) ֕_$fK=YN%.Ez2zuf<_li Wi ;g'P jEa 9ʝ$/(?F^C͊SZ,1 6Zc+5ı`rXu =a6+~}ynMF?c)uNߤ)d}Ј1cW'6i!0{oМE$,#h]s%v'sLBJ>v X^HD(MZFЋG_s <co̯wZ.^%nEg l)n2%KW "g {`c6B PziQFnPQ\E-fZ7Y)!]G;wIʭ`s3ּ]#b  mj r.EiNbQIk*BSD:+8;dݣpB6a!dK!I*ᬒN8=;Nmǁ809mA ](LV".n\\4I:رݰ`<XZ q!(GR}AABe+OE?/ 濫PbʛӪc{ٙ4Bp=Ec%W ' }[Gz,\^>RQA#b7Hm揼ὯDv-&ސ%aWQodV8[HRNQ͔ fI6^X1yrϹ/ƫ缾t˃ys94d^ ah˶m:x)Jo:Y ATIHʐ+lKn22*ZG hO@ wxk˴1\iV\)οaڠ4r'[8(˱ \X8(T7ܛRo݄.TkMJ `khq]+b{^~ Jmbd+?qE|'DK ᭿lnw3 ~uzw=P0Z 6ofBRԚ-qLE .O t@G03 P69Un8\eHum"?[!'4uk)a*PijfK5DHOHc;(W}e}XU Vxq>WY3 |D _Oy{CFnՔf-x/Ɛ,J&MW<Vl ) iЄb&rw~ImZs2ձ]U㠓9fP=57η ?GՀg#P))*U9&qfF\dE|65\05K3#mlm lezsɒn~ 6~66xyˆP9 Ts,qeK/?|LUxn:ѱNsb?Js06^m7ߒ$[!мtK8cLߎ׀=Aq~]g3IcIR Ñv  Cur>^Z jEUfDI.3~ESIO 6i2C\G :S퇄AȔf2W4PG.=A}@.yDӈLJe-l ,8|AVHzobx:\ mlc2x2_ZDUszˡvët /fHgm1FD</P"H,Mg(e\,& f?OvL ի xò)Ѻ'c3l.^_YQ't~?sWǹ8f$F@IL!f+0 yH^C*@|KsMl{MioAQL*.PZbm.Հ\"EMpB( 6n G$?t)\Ť|!_ƽq M} TNjDz 2q̾AQ{T%x ^[##YєkM$dL[{rp:⃟T 5+%jt`<(t_ߌXhi=L7 \6Q$HRjkun.lնoOxwD.=>B*|Ez*w)|8WԉaYd:q RB_aR+р-@=0 r5h+B Ŗ>(旅dHE$v1O$fcMWeǻ2{-')dvu iQE0]qTz{,%YQ~:qCwfKn+ @ JTփ8lP&U*t3Z9mXT!IuKT3L)~F,^ESI ؋Q-YyfIKDWBHCssB#'-TV xFT/Ζ ],!12CvǛ;u1je<1@RfT8&I9*jk8G b`z9Tf YύyfY[Pެd&hw!+(dkswLD5ynD8ޡЃ,;5sao5OkFo]٘O)m-ʶ 4}oEr^'PTj (D=HS\ː $w>`DY%'X?CbD-m\\{݈ZyE=(wc'ͤ[-SB$"(d|=P5I+XH*S%u$nŏl艏7%̈́[՝{02xV7KyKB!)>);&$o͎٠ hx5.73OiHJȥ~i?4?y3 r* !7D3pw9IS}XD4Ĥ3F֨@yTP'+]&i7yyxi6%^ilbuAQfF4jVC-n iPy͒ҏ56~1-E\H CR5ٶ4M[d%= hbKyrTsIuy >|"y?Ϳ6@Qx('1?j5 7!7Sfb&'m=xtR*mEN&Y>Qwfկ7?iZ4`xeOǖ`;t ".U+(8AQA$-'gv'dwcO8$ë$g7l.HSb7FHf{SWY#V6C' 6SLI Rݽf8|"إVyyR~] kYӂ^X}N uJ|ˤOI Ԙ-XM_O*%\ 8N<**m7r!;Q3xZba`Xa]X'W)GF(M.)-\ D$VWйbPi%b/NboAnh S>!/J**=fRoeAE+Tp+S2kJFji-4 %UO -’ݦ? sNșD`=-- t;Nޢ=׸!tKVKV=YF-B:LM#*!mUi]zأp·>EYdȅrzC;H|f9(õdb_\) v$_9[ Ua󓊓4s+ADyA*x<+w^8cnqbo٣#ڋvCyPʌOl=cqҖEt|f"dϞjoMZ^U;L(!g|[!|sQQWD]S#'YPrZ KEJ;Z^{ְHoۨ y}\VDOwD Npԝ,a 6QxjTQ'RYY+),ָRy՞)\&ZTK\ƻ_9֍# q)leğuƌxw}zi (E"v\+l:T %̫؉{6~3zрtj*@PN[$K^*Z=^NeV신TjXM0@JȄ3`֐%譒K}}ݎý5X4I6נߟ "L41, Gb>]~8:mYhmI#,*n)2⻀þq|i>{ W-EwbbvZi|p\. }X>5슡b6ҷ{`N:6k_eG]v- j~qߤaZaC)ݻvTշnsDrVFh;ȝDG`>\ulkW= [֢uEsBcpVybfA8[/-q$ ;xGO2oyp$&Fݥ'Mn@YhSyNq&&('X Ker̼`oj85m|\FsZX>!:۬$B禠Ie~~玾?]_BIoPe4;@d!nha.mLX1erI> ;BɩOw4ww3yiw/{;5=Žҩj'2s GJY~N~Q NMV۷9] U!EEH5td+ҽa=O!*ď*Jc bs m N_ M{љ'ғ2pX0T #rf;CM!LJq R9m@Gn~ unE=UMx:xlTW*ue;IjTLo lƞ>\٠(>k\CǤ;ǖ/>#lJj3_Y_g*@uew?,W%$*$',r+ )r᳄ɸK$-fKtHrR] v0M,#7#k-9, r%@iKw[.mB9uc`- eeTԵ@m(pVkmi+~"C$"te4Ck>SŞQ醮Kl)|\>uȖu}2pש/G LUvP6־X =~e\O"`rE? aNfوxsf=o^] BȦLr^{x' ).+xNFCr^B- 9WAmUx3P>E?qKmOsNTk{ O!@߈Ϛ^+esʨ[EdDɷ߳حa X!/ ˍx L"_sVoχEf%G~Q@uHQixHS&d/eU rcpgZ>KG妺"z x[Obiϩ.<;tTx,C{\n0Jlu@E&,DT1w?} U2k }_V6zdbg!SEž"%Lzɣ<BvO b阶HÄ uWI@ﾒhd%5) >j<@eg*e8ZǑ5$)B 07D^,d;"w%b hqiUlM0# .D]7ILoO'evv$Ǭo%8cک{X|r2 ̅E/oA@xXQ?W|ߦFrpJ<.i:;!FR*}ů0*JG+lZnF/ie\sxd7s|uJ-?41w[!R*Ϫɒ8(kKItP]0 ' *ݏ;$*!9tw" _lGVnz4B>!Cu腥Q(5Hَ DvVq97Q.L]nM)vGZ"+T֞7կ< j?]h*>SGy iE^4 ;y8I=5~r]YV*"5]>fd.Ra mF~7&tt+2ː}^^2 v{A 2iGn#vC`P_/ǘ1.> *K5RMcu5$;]Bc%Uo]K&E4zޫ>|35/ i)VϫiIJ?4gKŸirW7N;ۏ8b`+cbx`~̝6Gkz8W\8cPb,5If / 1n-xٿrd׀{^F;z4r4H<<{rKX'kT$'/rq{R/Hɑ l E4e5%AuQ&sR76z*|Ŭh^^h#MBƮWƸG[m+ qe;t ?xr1f©j4Qw5 aR\)cI뫩= :&>U9j>ԣa"ejڇIu"k;ÅRv2zmW8ݠ MKV33HaPyиK'X|j,zSJ|્37|Vh JmfInc1l唓d!1LQq[,{)d&2sn"]XZqOX B.IǑS靲/%b`|:2CҊ)ql~;mLM>iۋM,|o@Iph:o>SQ֭ Bϵ~s{+\eu6=yIBpIr^ELıqg3ޮK)Q ϏO0u "o҇clv;w%pQpī?Q3 O M^}t| <*"E$Ԟ 2* Yy'e]kgOysiK ~^j?깠U!WrSJg'^\*c<1[(,K-=`0 oB 9sV- ƺՀ~Y<8tb1nRXs/` 3tQ5$M;li8OVbc+TV4she'WoSrx_ $T#L. y=R 5}GEr g$JMM0+w KkzdX(zA3v0d(Wd ]nylQ%(k($]*AP@5z O(`۟2 $Hh%1b=m?LޢK UrF0 AxۺsQ7t=3$b; iMq\x6ҵ _'<#ʷaX{{*QHïܖ lRxg4K} Q(6>Ȱ]4䐁yL$XhbmKnpj%J0FnqX5PѽFӕvr< 51O  ஄ՠlO1jUFkŒ5!tnRJ2==] ^5鴇 J鍹(73j Pˉ#"]; /? g+Ι_Pg K/ŎF*## ,k¨$B#NikTٚH e&m{o#&eﷃkhorbjqZ' p MKpäA&KH(c Cߌ @{ړ+qJL%d$V,2[m}7)82p!S3T0B`gp ^v97YOoo;HIi9OP%X @>,T]7I<\d{\-,BܑU0J6};zO K)&N%.?~(XD`KQ [p$%ܐ`FkGYIFZS'5Ck=mGb3x.{Qsoc@:{IPDL DP{^3mk\b*$4YoqՕRyu,TjY)\5b$$eSserײdX#tkZ>0slW5yXEF+gPKG8!vQq˞:ix0@bKz-w ꣔ La"|/'.An4I{)9eN׏GBȩ~{+k9F, XM"<@ĩg)Ԟ̫O߿R9Iq}L!kB2.3l ?_%yA)ןZqY& )E ōG; W'dbG:zU9LGlZr 5| LuWrDUYxꭰ%sb/%&˸͢(|LvwZokrTj w>Ml H'H`/! P8{vChp5rZ7Roc:Ijz11ו߶1}m by"XT}_5 zaЅ*My0)-H3&ΉN4Z` {EEE$;X^J!lA b+ej- pTw#̡Yd -UWQ˽3Ն=2K& sBnJY2=,CR =**<7סxP)"tM\d}fv42\<Ya WjV4¯"vK?T\$[!$>$Wa[s35juTrDuWΟ(j,K ~zNG ]]99Ch7՞A1 Wk t(;ڟ¢j B\apF i뫭Beܕ?240ZjzΥ[vG7y{Hƥ)Fy7 `-TMebVB9A@#ٷaIb=SϮǮd5(0BM ͓n< ]i)V tOYN,e]!П?8ޅyiI=>m |wm4O05G[w<.(L.=Gn4m?``^ڒWߡŁCy,EOvJ-V⼝u$ҁIvWR+% @iQTq;d.a;cvIhǤr~B#6,2$/Heq#fRj*b^nC%wD@̙@_MN}ʒ{Qhik`ݪWA$(;=F*tʋCQ4iW륛l5'y4 UEA@1M2M ?^/Ƈ ;@Ë&Wb1۠dx[2S U<g_gI1ړ/b~6KГM.!lfo$E$ }|ˉ!p Ф "0[F?HJ؄#Ю:'x|UGU޴lcsN$ōOg:>֏U0J03ڈq&[2= R~+g&*%Z΄ #xo7 p&7L3uSgLzFuDlfl A|xʼnMƀ6^ [J!{Bk/'OD$k;>)*ف) p!ԛvԢl ^%x oI<þR*(}'"^ebL\v Nq ղ__-,q^% wr7?PJ8+:lC5)"-q`d-t{@@c&fK౮ũ{/kˉڥ^Xlip\RVaA2 ENJOo$$ ݷv~Ħ}e?d;m \3%ubOS%g>e*S`ϧ(J.'*(Zӧ^|#Gf3֮"bԉ'4Jz?-iB%n? )}vHX+<Vy}`r4,s" D 8rEC1mw|!./hc5%,F$ uO+OL]s ߰q8#-nO1k]-"ecO?XLFESPiHx.mc*H$q7.1M^}ͥ~3qҌ$Ѡ?̰p_-mpH@m AӼKV{%{ >g8ȟfxfgtm6t}S/ _U/#5Çdes;6'~ IG>xUƼ6-+aMao/r{ֶI.:\XfA{C̦3yh~t|Ƨ~|rzb=Bem=P v):il %j9zLvWX8PHpL=dxa!NQQd./uBR`Yg-AD(WJ+bx/Vۿ͇XǧwXe߲@)O2pJ@OsGN9>JlZ]Mu2mbk/38鷃ٱAk>SrFuaEXGlO@B"iaUm* 4gG\KH+>;A[򨍣K|Rqrl(<#ښ4KKTϵXy҈HE@.?nLțǮFF8~hehp9b$_'&y3](>2ħA/*0T*Y˨SGi%'quWwO{X2}' Ռ\D+4[S)<~PsBbq|B"%k!C=zF3Et #cuCx>NXPJܞ8]kx&bO2m*q))ՙ(HI|x[K|)ޕEAy07 j7UH= % zդ{`{ȯ#|y C JM Z8Zv6c}y47wCh§<]ն3[qT^ߪꈮPx1"G; 9A|f|0?>QE)2%Y6RYږ+ =W&GpT$:"wR9BS53|F*K_JbhMJtg`sdf\VхWP.Rtx N!LѺpՈ(׃toeN#}S:[,.KjhE췚B9>,áSZL4L<>!<bK )q~rl ,C:Ilqd2 ,h1kȨS:Z?,u\9?O?Lf/s3]{2KMěXnZO@_x$M;6J7%AfH$^wB,d-pys+?؄ VrB䯢'$=8JQ@"riT0;k;cvpq& gᵖDAprb!wl6J a&e+l6P-W]$>á:ڈfqVzdw[ xp<˧iaWôgFVvj2jY)+`kQe]S ~c>Њ%N6re&nfv)jqm5zñ7FZ@,I\mEGވf}ЉHf&˃MEмGΫ)'S3=D!%ћM=5l'YaZq?FUzfn >y'tEaBv@ԭF?UoK(U;;E 4ym* #@#6Fpgl޻8r[TzC^uXϹyM`pSNN e7|T9M~+V-숲0^2ލF<̀h `F<@d`wgSf~Mb@6'8>ӔBi WaĄQVMet6Rꎚ7ґH!o5N.U o3co˧ov/XPQ'j~A %.x% .Sh_*HSUkdg{` #jRV#b[gY*`1>~m2q:sTGDeHS)rOJ EOx 1 T=4lnS>y17TV" Nb[[XV{ w1_EVD{dkD~[Ӯi2agn%WOg a qMI-w֠a0mu,N'ϗTt~:ϐ }\i}/Ԓad=L}3!2 8jɌ ) 6Zr˸,|y9zd-6H6Qc>ϯ X@kcֈ F]Y(lt\ m:] ȺKkV:- rs٤8t7 Mue(c~v=U:HA`הVJ6* Oe!1,2?OBm d gaWw< E`sAr)yuPXzIzWXvm $eߔ|ĺL3LfdVAtmn|W )>7E]5c׺$=La'uiX#$F靪6!`U0kg2w I/%VISLˆyǔS^:gf Q3uq$nqqLM}0E߈Pp3*Z ɔ++Lph`IĚ%bͅTás2|}L}ˁМMLe+¸)jE2TngNilfb.ț0BqKtr(I7+qY{J`vA.pI#(cN`Hd"נ qyrDDSK\k{--Ɵ8bywPz$'X=˸>iMu=gZ;B nVCÔk*VqOψm!ԸqWT{ 漳 |^iBpfUqna,_ݕK^fr_! HK3oS[朴goI@RyCSY,7SIvke:LW9,kMDzv J5u#"#mqRmHUSG=m Jf0#~>Kig PA.V7sێIpp;窂u^Ξdi_Iw9e3|@yT:) ts̳6Bq"JD-쒈yX:lh61tO9ϺIlȃг=!HuRz]I&E*nm`F(U>42&5 'kok)$P@g[8ܟ2{!dOQ}Rkp%Q0U8%̳y qPP ɱATj͙,M,4I}ya`ٞjyjEG@JO9C?^/1ʱ ֏]F ?`>*.+#cōyKh: Oh19\(/Vd yhT`fE R\MFy6 n0% +4[=m:Mڟ)tPi`CC~G nZI5%q8oY;@jIp@R.2 V+]@lYW!Mpۥ4y9EbaMOKr'+(81{fޓ4)&x p)"#w;u9Q]$9|jJ eUWrcմIɕclGcS65w(RQj&=/md&RpC!/0 V+D|FRGoNR*GrvA7 MIdL'@ý/GZRj P4v[PZmc[bAqi-y!jQpr KZ֟HQw 6JMeԨߏm sGU>?U^\.g_P . ٦νBLt˃FBTEw kXetpXu1.)χS.w\z(̼.0& On]Qef4($udƙp֛Ծ"x++դ"u [p͖yN"l|pgN4i&Yoy$Kr/Q"3RjORk&2pQ}7.#,rh) 1|pJ~̱s~&:"t-<*QL;x+JP gR묻l6~r7|qz_G-L8!թZ]'(L_3 i)žVx pʄxaw'+`c.ץ J5P"j<\w NO=T9طO:6ґ(zxѡ7T$+: yɛOBwB< C fi I'6^)',eRv[cG{ zn*sj9hkt/rxVF㨪<}F-P/Dt@wfn@R?ncЃ@KJ%l,w98&x'޶F*܂ܵڵ NR7 ߉0T!-/~yCOoxJy_%[X.h9X?g KDTvʦTk>yv kIwbQ7R0ל25c??]gdRi2?{(~/VE8x[;kU `7 / 9E|;}5Bmf/:B bˍlVojxNnښ q`س.mhC߾CD&Ck v[[ SfbnaZħONQdC86b.,Nw}LJFFhQni6#BIZO'{GQ+׆~^x:W`Zs;T={R!okkԈAYrSpPKc lބkijf]ޞ n pB sG/j4CrJYzUwߴ hoCqĎd'lj͌B&.ǀ(ˊ%mYbY5EOgD`*F+Z,J R 5~Q%o Xk[([3GrOc: Qedž$>E߯\̯XCk'9wY\& _[x' r AC%[sIdP)uY_CSa m_u/3a>wTSL!>yBM?$$(Ic3jSEjve 1C+TtZ a6 A_E9Ԋr۷8guqnf96Pa B\tH:dEU>MF`--,HMp`CʡAP)2= &s8!٬-R'[$ۄYI{b,:.y..fG@_ >LDם7V{%8zI2Ԇ?@I!Ք8k2=u![bί?_$ivɪ e;ƺ$1L'c\̫|sdڕ,GsRjy-( ]+JB_#*ҥm- ?w1؂=5^xW$j&! Ak)k%oG{VGWpO&XH Ny3c2D2!W6_k,21#?DͲ/]/H<,njBAMUq6F/ұ{.$$NԔ~>:!F&\za7 2s`гgV=-%@@)U뫢`8 KLaWş25x=^=*+kk~Yi6GwO*@PdQ#m˘O#Ptmoq4HONeo,D!XmsP%l.p-U?'~7*L[qŝVvKrQqt/^%>*߹;lh-.Xrs^ X}cDƅSD&P7s uN`Wt3)l#~I,C@WDv`A,q5!Gw{m ͐߫y$]rQ?ǚ(30aќ<2O ~ՆzpJF=T'_lrqgxΡ0"-0U۝REtp;/ J'஌<{S <<.J[V*ױoMNظ'WAX~!lFƫﮭW`q"dɕ)d }DVC5q8UnvNJ.Xq}^l"qGC/F̖ :%(,y^+c월 DGySC)gr&PC,_xw ›pc#Scm8F&8m}u:K^[f:OmVLC*5*0,)J{] pX6XyϚ ӠG{71CUP0_0?A:F?6,2!PӶ))SL)3ڏ3anJ͊U  l) 1aQ0<<%*u| ؖ6=xKm?Ռcr|ta Kichk]Ks!52v+#mxZ, 64 {F́McoK3FX4wcGyD83w@̞5ou*y:nn/۟|ÅDlaoii~HGDŹ|x>>_&QxeUNy|CSL]?%l$_$OT -gzk1,:M1YZEvK-e2W{DDkZJ$qv\[Mi =Z*9Wm^6ϳ50EleipXHeV]x#t9B`| 3Di^MZ^aȕ Hߟ A0ɞ4 L]z:,SHஉ>*G-,4+~3,ڸJ1sӳ'2$S} SNy19ª*kp"hXW}{v?x8ʝ 8\}zG:"~J4czpqԁ ?KV ިq &" 7Ev[*x%@"-*ב^-r{U+\< >"I|P =vn#7PBfҰr!@֞~ЦW./!6?uq,΄<=Ye9]l`?"q u*J9)D>gp36V2zFB$!#&^o鈲Ccس hwOg8Ձ߷0p[" (/ +FV6\| Wtw\)0|9'#dV@!GX7ՇSjޮYȗfn8cll՘6[+9Ȑ]#Њ OU'SoJ)KA ac6|(\:4ku*F*U3Z[vGOMJx"N!s,kW"52`8pCz];oi{I4䠞ŝlp Qěsd P||L!5* :+WyjJL{̄BShʐ4ڳu;p 7܇h=ɉI#U3V `*Dt2UtҢ?aTj-UtْC ѱGD9M٤RkͬNXW;5h>NKHɜ+Ҋ޶c8OnXnA.;^G'm/I[{-J߶H_PLZjE;y{J>ΌFRor5'+Mµ+ y8y)Ü;gKp>ne.8O\.TkSZ&ûUh6_Zx J"]R}C֩%,U MlU@ҭۻBz Ktדe2Pº?nUm 1b.S8}PLĞDA frlZn4H3z aF R;~RխrBȀ7Zh=j,QG*]zUv.4TJ5/hwBP# vj*p`^QX ifTm a }!1~]S$|΢aДv+qR]>8#V5 mh&Q"<{NPKQ+Dh*-3?UׅkUHD _Aa){DU<{oeB`f9gyVH;<]$9̗ O]drٌ"s%umgWmINV D<Ҟ)@q{P2W eEK9'fJfVe7R#ZZٛЄ5x^7E}0%U!QP?Xq'S.`ܕ땬 eX<+(9pIPs1}r @$ A`[Ck60|ě8^ YW@VfҠo>+Է)Ju1Y!TNW1iK(Iu1`gKY0A%,6\!'PCǙ[=)\~ _1[5 $5EJShH仌<@7бsӉU@fUv(F B5%cgJO0@Շ()/3ISnqb"MMvgfuk 8 *±}Bkg_9 sOmieϡ ]m| -pxV>c JluYj/bq8{)Yrח%&O\]ʔiYu3Ah>N32Y 6< 3tX*o=l'.ŅeCucO4#elwnd)[LI4;M;s0˃]nx[WQ$U~I(i 8 M $<B}Fd[pp3> k$qv^>)) 7Ӵ ;G59h)B^'kPwULc4pu^/![W=}Pr)eo]ĆR INy+Q`ϚACl+{|}^cLLOD3 ~#.21j'ET:^6%qo R;9'1k}4xTf>8x4\z_AFhvzHm,X|Ьl3fmπ߫r+*VDխ劣K\ppk!ZozKtH[_m\ }ڮۉX]hӛX"+6$7+uu7aAXD3{~$0-稴z*1 GFbwKi|"9`LU*Q7l`uV-jz~?gÉvF}gzLzi piː/3 .9{-15Bf@*ԑU)R3Hز:<RjC" l-ߵ((Ƚ'%P e}YEOn_=mCf_%n)Onʅ3J_]+,w 7Gɭ[z@`9k JP kfh+raL[2vk QNŖ?$F@ pi;ܸ3^|;Z ρRzŽ={yqV DE-L6{N %K(vۺ[." vdC  S_\+C Y: ؆ž K-#$HEZ1wM0C+X5Z+i[,{?*dEB -l.Z Ꝧ 8m2ޔ MFX 7yB[I$gTkG]h.K@F: %WȒE7YC-O4v5 ]ǮFGOO0E1U |"k[2:u>ᅇ8C6B)kk 9#4` *rEZ•ȎX5ډӆ+ALb-9K!j Jq9L1F"jϰZ't#.Iu@Hl T\VT,<j;igr6,}Hu[bqn3vxز`)@$e5"d9MJcFu(h^]k>.<.B+Bo< uQLg} Aǧor bO(ޒOeb$яYlߨ3}W$fmHvO#: zB/i6f+7#\|ͷ5ͦ<+.[_d)Zsvk\|`aj5?@ZF?y )SSoNJ\:„ v#p H("Նchdrn=_Ȝ q|oփHj8WnZg ˄tZ@z :^ZL,zyˈ'`s#pBLf&,^/2 x5|ҋВ,3g67ehd rz.hh/|n@ UMTe,sʼn©cFE-'(7O,S&<c"J+0;J_zqM ~x QV#̝MMX4@a6a~b/b,mnY=5EyYrv/3wXUh+Z,#CQe V5Ղ#-Qƭ2 l^e~0\%Yu-pl昛gDz6WlW74+;2aD{ 4HnnO`=4MI{>:֖csQD-?ƴn4s0̧4Jaq,BA4`Oa$[ 7nJ?G!# ƹ&JW8D'l7BqemDhjeӫHx?CeWCd A:vfZK6A03~r ;<۵-/W? >Iu4mHlV]1vսۡ7BH6Чfj >,.M:s6*|;?P ,F{ڃ^m>քrjaKs5JA!7J!N\2r^$#eB~یk_r:F8Vz7Cf0(QO'cey!f/rcC%]zcbSL褼rܳX>:? 69% MH֌YjaAqw5c4CT ¬!<(dMa\ܞNyʍ=-5kIm꣇Qv'݋[3ѵ&@>Zߜr]%?Ķʞ{QPΰ1)v=qi;'(FОr@e3|97&e5  n#X\<)0ܮbC^J4e[ß5?gY|rx#l{A縲O#huW\%߼oP}Q^@WuM@o~f݁Y=Д(VV>W!eV03!Cd4P٫_0iAy;j ׻wI *$lK9Qs^G Wh \-:ίVQݗeY)/d$*SR2m:?hH×!1״~,?qX "aG'8xTm/ejs~z&g_F$`"2l3wxZRdٵFL i&w&g9رze?!MpZum;XhH.^ڑ/Hp/> U֬SgiԂK;jOFY#5rk10aMCH^!w˧z ̞ _ί2~[nX/ L9l4nq *Djkk>0~❆ ̩٘"LLq蟬 Ʈe{ ]^A>ky~ˍwX7׺@G*c?b.O̬{X*mHkVY9V BʞIxS|2Wٱlx 飂lA>.Ѕ13s'@bXeլWjXO_`sĜ΁KӘhyRn^e.S`լ-!]6m\ͅ u͌?Z_'1 dM3M|'^j].ߍs" # '5pQ mo(KuH~H5a ZzIC> uEaLSG 0);iƀ:Wfh̑V-㩲3oZKVR@ 8]OB:6S~x$r#oN4<9⠣؝3I1k$8NbqYu|c;uKN\yp^~X{PEj?u,C-3z 'D m'q?T0:g5&ej1 ˳T@6阌Z®kO$~7;`j*lmV# јnEp0/>Wjlb8!rG#{kXQGT0[+]dQMdccCy m[-M~ѯ 1\ÉqJ>?~:yLh? Vr2IYK"]:o`O4 mWP 7<8g7\)!Ήq>P>3xw(USxK붎PQEaW*D˃4E9B+(4M6?j,2Tm:m~L.Rx&퐀f E\39ʠX}cz*QW|&LiیEsmڶY:ςCK#㳑K5K*ZdB^ Ew9>tXA FJdCPJ[t8gR0es8BW)a# Z,ZInLNmDz,qfm ;/U2r% `dp#jiպZAf!c '/pŐhn?.,.b5xѢu9ݪz2ʿl6dVbS?oe+ t8ۣ0 JFVgHрHp&y'@1g|qP-gV:ocb3՘bK/u ~{=veZ\QakXTǣ}?-{F=3UUIP ^ ډ{a*nس7\V},)L NXJ=Uw#ߙ_,jU׶- \ڿPC=w[U9<(F0qIi+0Wea4F|vs?q- A_|;`5J2E7mN8, o٢GUgȠ8b!aBZ{f+v*F0Ecmf6s0̱.wyhF_ew<+n:R?H-l{T殺FxxÎHJGg>~!wMrkg:9uRUnPh3"2O_Jorl܂l:e-)Q0n d=$Lb*w\V]TM!2%O[G6nLFGEd*Ƴ䒞:+}FVuTY ҮC8 )LHDp o4* @ =-Dܶp47QBetv| >JJWFFwe:xn!kدhd_1%}5pZ~g 6i#$Z+ zHOq<7x4sGěZUy"XU>eNW=h!2au/{')̧4 S=XdLG[Ii*y)\++>v$2D.ʈU^+h])L8fy2L=ZsFg6'[7bt{yD#L7BV9=Xm*d~l kc;;>\ T`¸PCl4A1e89;dgQtk/ +. dT#"]8zkBЦm* OFCy-+Һ 1Fm&@7|[vﱊ5[-PG:IXp&;E A l vM5:h.WHfA\qòc f||'(}94{Y(LyOdpO k,&U2- ޫ¾p,pcQe\t=3 Qtyzz@#t y Sf3Rնlq§0r7佟V5f =,gێF 8xz\Ѡ @`4y,fb&AQ&V1~i1]M &֣V}xX#2 @OyK@ݎn`$)w-&lEDa5*ӵyB{xX<@8ז8q[Vσp!mj:W%S0˄u%&xWjrɌ<ʴ1{6"3dR :#Vl.)Duߎ,yX-w(-=7'feVDWIzsoS5dׅߚmXp_ R{f<5)@XxevvVǍzk8hp,A8QDc͜0iȿݍɆq2k<+Ň96v0  qjS &I3| @E;3h86^d2)j뙻脚+jCiBu MfybHRt a*5slb) dvc0B[ᖐ1;9kaWsjD' ۺ:@Ia1.YO4}YF#R=pr?$NRzzrqpD~G]IrS!ژ MX'_AzaKT0"sqpd'lM/RT\vHY^؆wjYQp_Ɲ-KERsM$xJ am_;AX?^jA_b<aaKlyaחI omePpHgŨxZZke$))6i{[g i{4hTSӛ?HQ9.kIaٗP#{ tΚ=P 枧w7?nWSü$B>C5$cͥkPM1vPr>)zeFK4-WYEy/$&ަktW-JyvW'/0pyfV>Fᗍ5Q2tBIf_ꚛYI7퟼ $#LAay,qAKrdGfRdKLn>_o+iafLfTfb`9+"ѫ[k!XY \`_Mfej"HV= ~nz4cƇE[jIY$}8 +!瘲t03}kyßE<қit=(WN -XHyB"l,f "@tZQHq(L9G|GiATyyMWV-F+pd]q]Vșd 9q IZlݔ&vYd"UGuy(9sN^oL_}ٟ7|Y;n|+zkK[y}óz J(}WPo=27v+Y~*ݦRVG% _Y/<;LO8O8 98o7M`n39WNA5v#^H_Xe[89i;WSc;86m0'HT"Ƽ;pDd=`1I]+XBMlΓtx}k҃$ 'DžɅtቶPH$<J_C6ιЩW?y?BSj g,ޏ9wWLl=C|±lz4ǧ( j[[[I2c.hg*Ҷ"o+0 ׾Zf$$\o?ҍIHDضa _k=d5jWu>2}(0JOA+aX[p2'`M09Dۘ)JQ6c(yb^^[M vFrXg6a)<}@˖pL eu!=̫^|Hb#-0oRc]:>u(mM* T%f/w od&_)ޓCbLV]Y5bJ]b ̲d?yU =NgVśOCU5N;ꣶ>82`Jj"HGxcnEy;˦{AW#B܃c0lIX|e+q 4:2 IjAV/8DMgxOK T|l).ףZƙNhqxjÏ햍"zǍ[e+Tz2!' [ ؃1`hyC;8,e3GԮ܉Y_v_AC^ﲒNz2@CoZTy+ha$j$es/3,-o.Цؽ&=Nox)a;F&Q4z frIG!ѐV!٧8{xGݕ 1#PA hI  ZhTg_u08SI3:} #0}8=J=ȤV~yDPG 1D]As^yi)Vx Rd1"dvX0a\?zcY2-ʵ Ք~ 9~'qnWŞڔ[:gK`gԔ PRQYJXy9-K;ȇ@&N={뢝Nb[*ZPdO}4bttJLCuIҐOs_[!jx7. -vp^`ExL|zRR>,"V#E6 %> =1]%qN߾>#4"tn+[( +D(mHkpN8p,ԝ T+7H׽jA,j\lz >D%BquИ\R,`նV S&9r`k}X13C&T̠~=LLwϠb#KSG-IIXob-Og'Hh`| R24\j7T2088Y &OH3 {bzyvWp_kPڪQDh1kI?K8%<@WjUB̤tb!Qʽ`1 eAtl'ѳw|d u7a%Wֻ5N9@KxwfdlӈLF5iEdG53Grb~U=6C' ,m6ll;k C b͚H0GoA;]//S5_1PR59GE[dL 5n-\:XO $":i?d(]:n2Ɔ Ӡk#Z6ټ@I.B)Vn3 :e*|]=NZ;9jw/V\ e `Ms- : Ϋ=OW;wy=<5:+x0B@Ć pcC ذ(fIjo~*HdO^uz+2Gyi}[RMg!o"_uMݫ![Bxu嗬bNٓo\ ^[߰ лz{+ {Β^\ L=>8 ~_1]%oK'PvGt00`Zis~QJ2Ti4j Y~-i$I/e5;q{MjE%=SN_QwX=Հc4,.V^0'ct!v=!@gk2S^K\,.v /m )g`K AeoyRT,CI,AvB= $j1\\z>NU`%`&NZbv ڿDMa6* E 7Ԧh|ǖhw_y3Tͺ` =̔ rt8.%1`=dVȯxi*Ƙ_]MElb|޽VL~p5tb+ 43KBD3:'&+}6O60*YҦ*uQ_drԘB`ny䇺@p GAoMjޙFv~[sBAlXp6 )wr ]&VK5G]QI73>4,i{+{w-`壑{T/y1$X̿&A}i'5DqDϔ~'g#Wbl9Z~:h(,n>ܿ'ڷ6tظqQ*=ml(dzőبfeݒ=G飾Xk29 l\ΰJfxzk^pVY;6@r;0z5_`_x֠Mj ֖kX?*mlwkpd%_>C :|mle߽WT]6 JGXɿta'GƱ O𜓇Z?6]' $6|#`kWw;F~wa7/p9NTeLY:FHkx~IEHwelaL2vS Lif1f_ezvRw}&yev/Ct4p]G+g>-06j#WÐ[roj {nSab<3T0B\ڞצXq͉Ǵ;oVp·ֲ8) RTw)&9B%S|f/RnBS7Yc$;PO>D7kqR`ڽya1QtboX}4X(Na]':o 0 BBzڛ~,*>u6x :PIܨ~*dB١!HibcšT7%w:dXs88ϥ? JKtp72?d_ʊ8,'*n.,Q2r3:D# 9#!b0j&~_V~*{'uSh몐`6VVC0|!%M~3b=JH5\Ws|a)< BЂ.[~0h#<GCyEb&K$5d@9aMk'zm ]Ki"{$,5NKu/zF82E`􂥀v9@bsx([ {KK׆'ŷKQ1=sct߻VpAąϘ<p ZP^n|b2;RݡfgTgԈJĽhFc"-D Sڊ_QV j`RSg w3‰;16ړ.d&zȺBd "`5tǽ J7zXWI\F.p盲}fc*z{L뇢"knO4t)q /q )Bk%1o iSF$[cS^~)mj`T5*X%PXlW:uʀoYNqd{dI5r0ڮWRF"9}a8k$KR◶ ŏR4Y[0|?#G"eavQ?Q~vhÝ(:KkI\ JTKP)8ۑ> m'{[MGFuWFAls\hDtte <33%ү,n /rffMT֗{HΜ#,5C&/Q ؋.e$, 8Ks>UPdu=-40%:VF9mkU"sAçT o&3 MEtxd) S#oǴwO$+wܕ A`}UJ>Ryպ@At N*Q(ef,TW ƣlTřxrFIEPCb 9h 4N[KˀKkoE>H^d>o1ҕb ʿ0@D3<69fM 'ض`KORw⭛DW¢KoZU/釻(B" G8KE!D*bJzJ4%N f`@!Cͥo^~'\h9甁XOe5{);cb.v/37R]Kn`ufuOj(2Nxb?똒^-7&V?fx1KFeC?kJPTv'?mdhnBQQ;QHy!,ZR#mz\,(5\RmR7q N@x^ uk>(2:=1p|`m 65,<(IČ:!ݲיKrAz큇Kvqݹ'),$Vg)H2h.9ؔ۟M:B܌ EϜּ9ytki,:@/٩9 0q_4j`ύxI"imf10Z,,[1Cbt8n9hF>1@T2n!N>ZNRO*;`! `O4-/⌆;D9RL.Qb@F>A ձ?}r`dbXL@h[H;T }de%:/Z}*<45[au/۵n.ZQmQCzVEknyЄ{@[/Dl"w,"n{nw7NU[{гCUl60WU,45Da`@Ր|%14 3ʴ A4nbEF.^$J|BTɺ͆ qek$Y^ !j d)&=e AȀըAx7]H\˜ {Oe 0\V9s2w>)_{Kݿ90 KYI+>shbd;~W $阸!}[%`7YTM>й_B﹪O:Pe`c:6{qQ*11Mz,ϸ.*!آsN+-JeIBP>IEXZqEŽ ܺ" zGx[̎ԯ:, LU2:7YŴlyZhB&3R\FJ;[gS*I#&>i0b-n[N6UpRLGU퍜"xήB6D]]82PRCTVp}+SN@B:,{^IAK.㖐˿ y,k~!an"^ &Ӣh;#hԈ^w^̮(m0XȪw4M3gXmmaBqPuM5e/e`/+!;B H0JIiȸ_4 6*cCo1[&0a!.&ZA)qO#S;/6!~:G/>ɭRI?hc9Ig,] u3PzTq Ci CJfдs;@0h$ 2@iWC+F( i)SסWNZsU%M%\(@Nv ^s[fNzVOSNAAHĢ$&ӕ3otED4TѭXƂ&j"Y[%,Ħd73KM86s`7KT^#ʓ<TM]5vx)blP`u Q؃Z=Fx7 sVmalO1*ล  7jݽQW\ ޳=ue%)bl,R"]M4`M) aD>gC S̡*Δ CB. ,?##Hrӄ*lS9;i}罃o&ajd [p۸իU$Rw˻/tszDFc+)Ϣяse[}𕃧9Z7 |ϩpF]kbVϞMt.‚=*^) ltW9 R}o'fP+EIΥhZ :I_!*M;/ n[r(Y SqwJ .= HJg\+ȕ?/!Bsf"Ϊ P`n` jewH|1^B.-uJ.\Z}"g@I *R]x%qWWxZ34]L>]v]BAz\HkI]r6O9VzH7>#V fv KCBl5m!DO12iʙ#iɳYjN  8&9".Rz^ yO#̅*4J-k\?JbttH?ƷP| EoF,uuQMlg+S$>_A96dbpPu*ZP5K4+/H$BlgUhF+M*V z,ޒ1~ߜ&d] 1$2S^1;0/S pismqO(+(d{Q 5P5h%!{cHgϰ٣3쫬QrL- _`57jP zE\Q0T^zr? ۍ1u?V6E bASSÜ!jc/ـ]K,z;!՞%9ԫ:Ƀ hZ$6H- 9$`.zmBg'bE\INcY$ )QNoQ6R+r+Bep pi ?u>9&])-<TAM2\+_9{ȴ֚(0OLz6 (N{(񱎗bsF:*GU3Kldh|&?,A&+Or#cѧGI z?>QO\MXe/h.JeNB1D $wW5H<k٢ʫWnhPg+yBŻeHU^1 @lɏ=)Z׾ybXWxtٮ?4#/5/p ACXDHoȭM=D{9< [ v o޺52hXؔVP>),@M6y`ccXmk\- X IOhU"g"ӟ)_h.z\g'3J Q:Ͷo^bhe3#:0* Ze(-"9'̻uGv@Hݮcş c:OZÂu.DgS.!3KF],*֕ۛ[k/^@:؝Z}0)M=_dH6Id=B7r5&Sj`ez 07И*DB.[\ "m7/;ۦ1{OLTm,Uy8cDO+wi uT ij9);OA QєIh:>ĥ:$5*۵ή}qʸb(f>I[{3*+RS=д 0*\P`6nT,eTtN|\\S3!--{8Wһa1[4b{1LԃAPJα.X+,C@֕ȖAh!io.v63!x)y [Aw\7r1;9u! ƴpdP:8 DS}^h]rq Bk` ]Ȯ%,7z^/X\ Gꍼ\ G9 #3Mp. .m3j%dֵGz= ~ln7W *e laA?Nnz{b}BFQ(/]XeHüE||KSJ\8.c\k"YqIss,H / FD 2.Y'*04jֳIh5%-Zנ(g#UWw;ἐt9(yK]9|poQ2|h1+ 6j}g|o+tfa7;i{7H6>}vMsj4 Q@w@4_j5swP NJUpT7ۣ|) YM{lرp~węI1K; 4LA86fW0[pN(k3N0H{&J&n?d~,6/הY-0"|' +aO t|]/p@ "3N ub0,mt4M)mObV` 2 -uş?W,%,M 1WgpwV6+7DZSBc gP$ڊx^>ҳUj\II#x\hR&c'xb1HKP fKWMKaoe]T%bJQںH$9+=C̎ ';O )kਓa$Ҁv%Z 3T$3!YXkͭo5iKHǭIT-rM3o"8ާd>$[*7'tS Ҙ[#JaSRwbRqBX=M^|97/b]?rsW(ϸI Pc!pfRXjn:swİhb[1x&k4 8{ ~{Y xy6l)6[vl5U 0iwEbbB#8@TK b峠ftߋ@"M#$2; )|EgLtYʸV<2)B #.FkU5PV398esMk =\\TbCXMT \'pJ貴8bIE;8Zݭn%t{٣N:0wByj->.VɊ3G8p N>FIݽ_gh\7f&Z-óJ*Ӵq=qtR 3zk[ȃA%|m8slT!k|vdlΣƒg.>w n?s/@uf~P5s^*He-9Kx`Uܜr0Xqt\q__m{QG#E!ǂT$#H2xC\sWRօvB Yպ3DhNsGY4K?(ʹ7и^x {wnSD]0RP>;dqE"^6 ~/\D'!|s}RϟssV.a6UJ(u $@٤J^ jf<vJ\G &!iٶU5|>!v,#U"y߶h{X֦q獹J@9v"cqV?nzH۶DjnZ.Z>^#a fD#j `s yN(&1/2ݖڑE!6'nLȜ^=|ѡ{Y;Illiv>z诺Q-j+  3A(G"«iK fu:-}({лjawF:B;x(2t`TTx ԋ3_( P='|RV@%Ǯ{ v#ЅUe4^W8Rֲ/- *q ߤ{ӊQ02'xV:7)!§e|1lmMNgK-H*><7ݵz:,FnjyK5JymGdeXE2-C:D5@.Qސeq&rVO@DY_NTR]ʅKRt%dW}ӵJΖ0RBT >rlQNƢD82 nOEWҼn WɠE񤹧|QRW't옽8oɀͶm4yF2Q3vw Sb*8&}+$zP$$T l[N+d.CDSdAgj&uF3j|s{rvCNS IfVw:)􈧷]}o%?YCZ|Z"`GEbUL)hcfmksrhNy5v/D/Gѓm.Vz vp/,0KoD}oGI]د YM8oQc>qH}u'=& FɭZYuE"ktZq#uHLbkD.#{F-vB}@C=Gd>ݡY?D4pԖlh_yLbx<w bA"V`ğh{X2/+qv [\rH؉HAf8܍zz?|j AjM[& lJ_H՟§ʱN1I4,W\ЇG0G@."BY1>=kܝN.x3vKC㞵W:m58%=Zl90&YՓ>O@]G6?[#j]G~5HnI}cI@[ɂ?FK!1~V/CmLP)W s)Y 5ɉRuP ;/oR2G2ޯ*3lld8??62rOnMi2&)l7gP[O _V\T^cp8J_#}7j$S?qlg{GX |)ۨD8 aCؽhpfR@.aN2,9Nrkq/1BgUOX_ĥpez4pbL>1$@JUP1q]ZEd{||& ?ϵ!YjjuSF =@HU䨤/U3}FVWeW2 "O<ۙiLԠ f|PD a&b(?zlWVtwU[# >٧yV䒙]-i!$/<rf(46yoi4Y!ߎ4w`ŅRz=4%<4mr ݰ^6m"aeYǖmԩ؆wh| XN2 xiδ=\ ^""Y?1D+RsWCh"/ U~?❎ U- 1l˜X>hq@/7Ɨ"j+l(-- D0h LmZPXR{u$ ƍAE6'/X5ZDƎMj_)9r!%نxEĂclkG 9Cj<@ŃWbYUi&&4s>lum{U6x3h^a-z BȂ49OVŽ粉6l5\ҝOإfEܰpcڂE-fw#`AʺBKQKW:FlZ$=tfbޖ"DQR(ӳ˾G.o*I6B[ iSd< l%^L#l.s73!xx85 j Ak(t'ɕm])8BJ(afcUHhgh) k2N iɄu+g0v;"GȾGY Y{et(H|ǟ3v>wf]/iL94qR:{9EzI %Ad EgX?E@>d(NϞ*@s`5Drc$ϔC5houW\e*VC CT )aaE! .<1 10?Ҥd!N3[T67cf.D`\7esU3&rѵM)ݎ*4(/'nf l3eL"hoٌk#Bə{tZ'4԰z퉟zX6b\\rD-n^"Wk 2Nk uJ|۳YiɸօϘ>u4^~@FqPl?#ї ϞMdXHk놙n`s=F8%u,Ȑ7[i1@WnKҲռ90u`& / *ߛ'͖ XWشZ1A(M "jOÎoIJEڹ%\LΜzJ/)H޽>گ '!@r~8^#x\TgS8PѺSVp㜚a;b} m8:ܪ쩃$dMxE,#}v2i97杛ԛUn`BZ2֜W'W{Z}!v@! >54F8mOq싕R9*3 x͟P,:P!<,dkwށԺe͒wHt]hVk\2 *9|ܲ"(ICNcYq^3WQK^ɿۥ-;E8mcz3R ]=P45J;[ArFu9v"6R[m :^{jXDz DUasB7Cgã'KfxI0<׶!A[1+fuZDu ֹx%PNu|Q lnhm#9|%J'U/9sďaփGk"d j<  (|R6NT{O4XFEeYL( d" # !p&(:-RypDMж"NsſQ+}a0PuDB(g~wkA{Y80=u> ѳ:@2.] X"-1l" &LRdbh~㼦;<9jF2HFՆɳړC-ź4]B S-$OZF&Y-0.?ǧUc\79..T%j<7ki~e-1]2N:@74:R:{Vs%9)Fr\ H:Iйk?| %_|$Ӟڂȯ)bS2jQLJeUV°a/HT"/yߒ<^*$ :4JcǯET:PG-2.|~Y^MLmq$Q*di'P/@ NWF*2N،bRyI/oVF@<"MF8q-l챵2]Rb9A)pPA5!DzC[Kr_a_&(56C Eh"vٞ.u$. T- pVuǭo74}izi|ui NfLSg<4xT1Ž~y,3G% &!u=ۇ?FI;g[hq`WwEnu[3٫(0x~E3TN V 鰳1vXg *XWlx¢%Vfu K4梜Ps"W@.#N#,[b;9bH0.2ϼ'>w1䲐;# [jvA+[f[;2-^sÚCU#4/@ Kx8:UM푒1T@&K`)|#?L\M6lt.^ 4vְV!sD=|C!<׌+Jz7OKUbnj#~IT"&m&p(yL2!mq E'0[e0IV?]2|208W1Jܠ"B]aTv=6?g5+v}ʩ=z]>ܲm_ƿ@yW@j^1b/CBfzx*JGS* aLfa﵃:S-( ^MYk74C_? iCTĐ+(g #Cn*ޟ~ k~ˆ"Z0/D^KQHˇ|A ꮶ WJn/Gօz3UZu fS5V>`49owi |cBx7X;R_eFq/t@#p\}:PLNĆ+u3tP"GZnfoU`_s.~ӝP#T6gYVÃc@tMcxn9aTTqMϚ+뽫!! 8Ll.h35Z @=HIL%xaMc Z1Ԝj tI tIcvh*&.&88Cn?>ј.=@߉GDZN{nf%UQ> MQk̡NOHչ53Mn%&byj3KIYēԴRMuG4#>8Jٕ$Fy zu#{}hbr-FiL=n$֕8}?)C6-WlBث ;<g}TWGgZVf}^̞C]QXRyq85KN57!ŗ!ƹX7]lC3n+ W *~3еx \%LCinB\]jo?L}KdIC䩕ArL^(JQpCO@bXttRdLXMG=a_ ޵/|JЬ ZI]eޠ |wiü/`~>`|̔MP0(JðS9I#7!q~8 °/}˶| <2/@-P_;`Ó Ng=%W$+ 4!h`ivهǿM- M{nD¥Dn < 77w}Wt{m ,Pu5 j1EBIhH0|£KME퐝@ݣy:btczOa A+BM*ɭ㊧@ܒɹr4,,]i++2 k.@hQf_`"gvPs~NEYY =]$*̟Z8~P' =qΣcQ>F?у=@esc8zE5Ꮋ~C5nnDǟ,~pNwV\4lQ/Y;s >Y V9Sa*4S 1sG(/Ya!b^+"Q`DqY#[Cn Ԕy3"5tv^UC`8ZPA| X+BZr(IgJM-(LQ7 nCBQ1ģE-cc:NN_ 'w%Iȶ D̙Qb2ToNEP ȆMKjw2yq3%zowP%Ħ,beذ`~J24ˁQ< YɠMm `r.vAOo@~l6\Bȍ9دD[籫NUO!}=޹^lG2MnK߆fV6O)!UxڢI>azPuH- _mE j$'# uԄ62¯GHاQ(=BEe!9?_1 fpK +-e)j#p+~Rv`M9N__ۮ+EMjqND7TwŎ;+Ԉ>wIMxm xK{,HIt/$Ů 2%mP)M|eƻ3j%6| n_t!3?<+AQE[pHJ\M_BJCE16h杒fHPT &OZB)Lcir (K5 z92`O1إ+U1 K1%Qޫ,RwԲd|(`^3atMl(ci,ĭW6r#h{*^t ]?c?+;R+cZ_oZ拮jH'",ؒ[9'yYcپl 2x4f}ηr|1{..asZ #~ȩ\@$ƧCM Y5  P>y Zy7A-)ɮ ?7~k޷ ݘ#t((kАBȶK#*B$Ny^yMb#S2.@Z;M:n:UJJndb%k:b~u%F ʙ舔ǁ0bd} Zf~KO-xhwJƅ*aWikӶ`~sFKNrA>h,R%7P~sݢ'2i{ hÐ^#qL?kPwT~eYl܇M[(}forHʠvŘ8A ~f8ڡa%iPOl[)W";9_7mNͫg$<G. A|v@wwp8Vw9tT Nzf#>GIy=2D#HoL\GYmBq B^PV{;"H&t""$~}g #3 eHȌ1Lk=px_6G6 nПQ bQ4wdzѠ#);u odT~^ 5꾳(eh֏߻WV8o ܑu]e33[fzD. 1BP()B9wER[WzH1߁h MPbW_6fjϜh&X>/]lypMj$< #Č/4Gaý-?0)0_$Z(jEr ;n:#17<>bE[l!mվ@\psΓmTL}0xXzEQ,Yo}a>Ç/O12v*1p *_:CdoBNŵ);MBVUIKmCǓCAX ,~]6h0&``_*HNc&~f+ez;5_]ݧNžw+|/QĚb-?%g .LϜZى-xiYվ{z-cD@}#Nw@N[γjDZ $ޗ%`ij#<$؏EmoN튚^S嬻%h4E&_uyMIDXIhdOC<_ٖO |TT@+՞R;hUg 1U΁*YEXv '&.ӎώU|Qsi Lr9ԒzSv ʏf6#;qrzkL;CCE.1WPln7aO6yh)ރ+9S!`HWr2(G6 !{ќHo-E"Y[@T}6]ĥoFve$Or|9בQk/[;=_!װZBP%c?w Xzuu RIaCi礄y՘(1S*EA4׫&.yDD/ Qex|onH1E8 zR: k lgnNlH,˦r(uַD|_UxZPPbqZ\ 6C2,ޮ^5֯fSX]-Jw&lA;>B<4ݡɉcmE0rbp gzp]|HV+ˇ[vISyNz'SY#>>y*a_IeF_kQ:!^RMeRXi X 7TlbZjCDwׯMr?HlZw8Mf="_/L_w۔2>V6 {_!GZ >Ok2 =#v똫6ۆZADz˟ _q)_c~%Mڢ]h%ץ55N^am'w 3OZs,ACD(kGJ|wpİsxc. +ӨVF ˙̰>]|k}eKT!B4sq)סdI141sli FzJ$1Ţ:痕VvYdb7  ˜ ߖ+tkNemюa.o񡣽b֚ _k9ళv 0aFVw(>W9_{<82BϰU {8|!MڑY"Cl@ήK\;$-`i6O Dz91BCA^Dp1č2/kFA6#fw XẙN0Sug␀d)і ^vUJde-%tl?f=քYPDꔤL./uLu^u3 n'Nq.jYw6 0ap1* Į+'f)ϡ&_9'~ LF߹ qq1uZNA,Z|*)g.,K_[a(LMuQ}^9`˄V/` Sc_A7ЛP j"'N?L/6-bn^b_Z>ܠhDKP/!6AJJ| `p㡳6]n&]Q0ȖN%߼&-Gǭ{~՞6»c&|p]*bpm2u6%@qPt^Դm*?(Ai'I.u.vEX8/<*|./ժR炼EF<~x| J<-WKMNºiCpCF VU b'shr^n}]Poo( P7D=O ( aQ( *-_` \ƪE#p!-yPu&l"TPnг{e>m48"_6%mmʱ;Lckt돸((70ZPfpkv䉧p2@vHco7]`~Xz]Mir/TzYE~7w;'@M% Oޖ2ë<݄Kk 2 u҂a`d?+O`)aP?(Qd>(uEλe~BGu'j; ^F v6od)'E n ׼hf)K.wPZdIQ&_E3Q_WkV%MMe7}8(\4:{1_%Bv3Twx׮,g"|A*obmV.{Տ &QM|5D/%<*Q{#jUtzK1fs~oQ.Hi;_=fvJ"PM_#ђ.Hq6 'esj{D4msDB>a:_LqA\}XR;M?ɑ02Eڰmjr)<1'7nV5FUD ˆ.D;d#&Il]Ada|M HtFࢅ谓'I\Fg~/8 Y[bƟеR&pl;$t tq_]7/ m\]Ĵ":]_xgk)k"gK-2i}82%UN*0y;k6BK~Coi6ő A}3_WRP!q\ڙMOlÓR/VrQ@T?XIQdycSYBԼ%B6YZ%& о,h $bdGb^K,(a0aE.dٻS:Y4Ų?5uw#7[ g ̚%rşDK8[F-%x6uvְn*i=Uzv烃8B9k?p9sѽ8`gbl{eyXQ'5jֈSĩS)#)BPEj{Ɠ% ),5Y._BX^LJ$KٗH$z˾1ýǏUHgŲs;Ж1VaBvۮ3GSytF eK9}P:[.C22 Z6 }+j:⻽;vS0 ^h1=EzgST} ,M戭pq)T.#XIV 5FTӆT&4X 7(H_CNJO|ܝ koJmҋ:*2z¢թJ ֖2l(d.޼Qos:bͤy=G9gYb{ܤ=0kU[WyB\rxK#"\tv5@(%(-0KOѴaqڠs6#%ӞAK[|:1(\N}$8sp4 >J`cD! O4MH/WHņɜ:O4΢[AO޹쬭"n\j8"."by_30PfuMF`}ضm[֭w؟,Y!^ $^C|ARb~)54̒"ݿ`C ?jX<@k[zܵ8y !eҊ\~aL[qMYW~] 1.~ų8=y cE&rcڇ (wjok [vK\Cn9&rF át*͡0y1N)ZzqCHϐ] L]7H'/c'G/#9oF^ܫg!όd5M&WHl:ʄQ,_̇Mkˊ4 .i^o(D̩[Ə'[>]rh&ݤXp1W$@KA8Irf') Ќޙ TO +z,Yl[sW~nQqYTjIlFv ϕxtX}'cV_0'I#cT"^ $ו/ູNOJ6~)|.tt.0&y=Ϲq~ /5Xĵђq24E0/UW {CzŻ;lʘ$;SP;\=JQAv >0- H>m`|tWpAz*81^?ޚt{Sr3Cf)sFS !V|xXP3C<]`b. K.{]_D!ENqXY.VQҍѵN/ $y VjxK]"&.AI uѓl%{ЊV2 ZžZPX>6 D'} AnGWSŻ Ƒ贛5583.JbF"#+IψK4#f/oeMWg0F=;}C]e IXN~n'h/ޮɏ7tuGca (iMVtqE)tYHYS~eEi|MGilco_| 罰(߷a_ OVT6&QSCnNUL8dfm *n:)` fm+P!U3+K5o_ǭ1>EWm&N\|-hld$cJwgRݳ|5@DUdD(Rtu`anE]Iuam#er#xpk $g^suM"m<{gN8o Ġ:5  rjʩlcL~膷l>,7ʺ&=Pe3ydžFеB0&V#2 x$&:KVxnFiH8B̟G)Lajy%`Z&ӰP=EV'XنXW+U[H<"\C xtϤFÿ.Cmg6n ^'gڜtq@",g5WdLq%s@" >}I#t59r UJGĄ.͐Ujᯔ57c1!ݔZP2F]A;_2r N-?O,xI_tOf=n*d=)mU  =8GЧAÃȴڄ'ŻOG@ f8F\fR,Ň8\a<$]aWcCߨREz=<b|-s;`<&z14x y٢K1 EytnZdǼ(:q )IU@@{?i*hWJ-wCi^v h{,0$c.#9k,Rȗ{sİIpi m47v(jx==WT"Φ @A|P 5HW0٩5Hl,nSW,7¬YGWΈc=IiH캑 t)p @;zsֳ(%ҝ[RDmKܳX.W!/DYHѡhQ _0V{5ȫKu$>G2Z& gHHQ0dUjQ,kTD jCbHE_1M衼5kZp*wk' '/j+)HZ.nu ?JpZjغ7}G\+eUEr,8r '-vB ިT.dfJCEoWN&!̲ G, 񵐜||x'eO612bjlt߿_ KpDŽXvDG!^tDד puźB d KwBݝTv^>Iz@.`!UK̛Ms̩L77 Kgi # k kmB _h> .URutпyawXxΟ ]+fG?~tx-_Kv佅TmzO1]'uqф2$nV^?O"C4RQ^3s!&d41Ą% 2,_FoAͬhL}W W4ӷ)cU%|-ڇ#g`ZuxY,wTgfXk&x|iO 'Hq ߞ{$rcH'RZ0[eNm ^eo>g,J*xchyKPl c41H@//wDpD;]c1r:JY0nk96O;+^T>>t ZGv 莉'$PTwƊl8.KvExu"En LBTy n=cf~]@5PJ/V:Vs-hvӋqX fat8II*9*2*m;J./rÃqHsUAu C;2aFMKaGwR+98L Q|*/䪯}HTܒ*0x(B+٭N|R5VWs<'p`-ɸ\)W ]+U}B>OW onpQO ˾&>pUVRVS`ժSWEC.qPwiYu ؍gބ}6CF9 U3TNiVRSx:1W% l`Kf3kOHmhg婖Mt,{ hQFܠw:<\er-۸IkZDI[aŶ {{*7ރ-q ri#n+6e;С%`ǁ"&Nvr;\[_`fH\ۺg uj9@j1 F \_ܹQV 0a(VB`O%<| v ^mdϝ2]'o!`4gzMve)+$\͝@\@DҒHn6J'X;3(RzZ95G{rǟ>|?Jۉxj/kYКt5Φ=0ݲP)Z1|x5bd{iBG"frazDX3w;2((:Ͷ]_oPhg@D+ %d20ӹC(瘙{2)xJ}4@١ ΅n@si I=hK7 .aCWʷv}dn W>p|b]6$kS:i\xsųwE?[pl\{HpcY3EK0] ʿC\=SJ{d 堌e`OSZy*܌uהctmBpRaLl;9Χ ,.}m"{ތK T&;qc@')x;ӹ>Ί-OI ʯd}nn&{{3~I^Ar]n%=ceP[>^qbP$?c="}T6Ƀz]Vn DB+Hĵ*=PM xѓp M Q69OU7nn>IlPq B5 r|åڎ0O|naa <<.O}}x8BPh#~o˃L̳ſ$?#UQ֒0R0o[R-# Dуİ'kt~1 2c7p1Buڑ`6 ͮP28]Mu+#ML߶B5v1-R6n'Z]02%mv^$A?n mH6Ԕ*M / ~h* ?Bj3f+M<]Z"QhPb_Y?&hJƍ_CPUZ_iN~_z>j8O )Pj? R^`%2|%lNq3|Eo+k9tg{G9obMlDAS czܳ7}T(r#XAӲ"jG0e mcCN5rd6j%xSL,q%j;d;Jgߣ ElduSzC7KXz2v1VcnbHő|F e$,EW[ueޚHfNTDӎ W__KbqU**8@١SCVW@suao4u1Wq" !z|ۂ s-L/5ѯnQi+a #'/'Pۜ|IWY}JD{ΠU_te>ͭg: l+2X5}Zw!ar_:@h,kobecjA M`Z Gx녮 9o7CC,sfA>#$٠'q1ڡF"wqi{Zљ>_֫Lz1g߄ᶋMBmdJ^.9˧r, X+s[T 1%0 RMt v!vYX I$|l xJKnF"qk,BGc&;QLqIN"K!}Z` 4wQ\$1@m]^5p VFoMqBUش=}!?ΰn+].>~icnZw啰\0\`UEP5L.ňcN .1VDF(ڌ!hc9񔅁.M-( Wǹ+w~2g.?R.54x@7v*J螣AY]x1=c84_f="s$in3 nܧ. `޴KL@(1XH-z"i,I7߫gf6Mw.JK;K0ޣa)t >ssϜ7|zaqy([ B~uN-~CDKW L-C~! ѬʋujD'D]!Q?*|PBq[<"q2Q D,n,qJwzԑn:@zl@x@hNzaf5~jy WܵV^0P<M[0)g.1 ?nyLWb{*[d~Aȿ j&BYz5J/}df%:gu:b:vVxU3ەXs7+EۯdnT# ~ c] G} k/_S)mDP7h[xM6g3o2ݏHtn+$Em <(ʹZ۾ DW+KRydN% h W`Z՚%_3\)ӳC;dM8lcc+e Rl-AO "J>_M l#.^{O#+ZE<ڝt*eQC>YEDW" y4{˺#jV$Kjq[åmLW,u/UJʒG݌!Dr)T_{hJ :yh\sO8\КB|`gԮ&%@(}X 04]1e_V$IqBV1$% a꠺곏5PK*cg]iЏeϫ-%S'zVgIJRV5 2!Mx8^}dmnڡ/eHYߺ'Ǩm P6uׁAkoV SG S@FS3RM%%vNAgM^Wk#ޅh?(d;zҀ BK eѨ%4:h";L1G =`?d6ǖ_PezX4]')춘HY/, [\NijϬB^SwRcec زKFT s. ؓvCy 𩢇I@)C<Z7p9U&Yi:6eoB51|Q?o/D8#! ݎ }wlEG]-Sl#dvhk*è]=SGȬVX7^ N)A̿ D-yA;)Eʘ ˱g8ܦaJ;%qa tAaQEH<_٦/fB'aюs| '+i%R,F\4*n,K;:l^7TatQ5Rt6iίOeဴV?9#n6]8f$X3m[8:|T`)d F gr cy"7>py WN͓@4eAJnzJT~pIZj1"L~.'p$*_t=dUAbsӭ! -IBpRck15;'B/6{C~kX2EI3(/ 8@pVRF vlaqǩʀkY ng`W_xfzU[rvcbX+[|H6u?oD1ƃ&gA֎,% : T{R)i򋌥u'x}-Ĵ2TgYn[hzC_M^b$]ֱ' y%L?(T;>:FDrP'ߝ2 ?xMcߝɸ 6\JPdhH4100.1 Lf0޴-pCvmhMgY cZufh|:Ktex:J]HZl]J ; Mm!wKZԞ,8Beԭ:8"FS F'^v]–VqaCL~Bv"Pa ϯQ1u@oY>:A]& Ѹ~er22Dd5\6ٮ(Gstse-UQsi^y{@2;/{ElD|`[s Y![vdž>v4w4ipE֢N~)B[˩#,)([*4&j"R@^r&av;Tr&M?WUE #|i2\GNSjۅ&]KBdS/ VͶ$}e/aH|ӂWܘ:PsN uahzc9*g| *vQIp qbҶ$ŝf- cH4BOZN6ClEp xU$8l!g9!rMm&?PtuzPtbIW)l((vҞ̺Z+dʢ2M9M1 TyBT0GϖAӾgvr"Cϯm4=gV˫N_O=ZON8vg2k4a7A~]$fˌ$/v d`HFiZa;I!:LqLO3#Ri ~ [$M K|^a" @-3_=}b0;ApZeq?=JTjYbΠ sFb{wbe7U{'n:~(ų&.@yǃјN 8[i Yop?p1,̫INe4@ChC |JyBHߍ|Bj_MQÍȳ-R-l|jFv j^|kP-Ϸm./;gPԎNg#Bu>BtFVcD>Xf.3r}, :[+~B쾢*xSEG`:pP]7Rj=> !n#TcTPB>ל;SCo1n5F#ՀH,rVf@9QdAmHzK:W4g!{Lݩ;(My;%e+o޶I[udm\PkLwİs<CG`؏}N':p\'C"]VQqsz` ?gF<ӞV=[ut4Mܞ?}_߽=g רS xw&@K؏]zן% {[_*Xгr t/I- f؟Pl#˜R_4h$JsȕZP`S]*Q\SNRb K?/^2#.;1⣓<#lf XMHc)Otgm}@3fL}=Bx߫PlΖUqͪT{U1L> Sd ScrƷ($|}.&$ӛh[XA̘T!n \& 3WH~9f ]b~RE[ coj5)m>]C;.u`lm*| `J(Ҏ>M۟?5ÚπY#oB ckĕzZx}m:xyu0:HHRJHkQQoT /Q?QNm -x~˙ȭ1I8)>8F#]pEpZ@V:]Bģ,x3Ѭ-T/o0Sݓ?n;Z$%H,Ч -4QQ|[7`y[HsNQUa>ߛJoK!M7H_csBjͦu̮s:eh*`|jvֶ]5 o7w ~iB>˜YMah;Չ;*biRB_^5&nD2w/dM8?JnHZsclqxU&a0L?,+?V'#S1,34+Ht2ud"Ϥ1BP9tP*w M:zӡcw]cc}UuK%cOb1QY 37 uzٔsj{@|:LKxAϋ].jpdO3ox&|`,OrU׾W&K3FEMѦ^Cv[HÜ~w.ǹgRBVS7~霂mCٿ62(==3O;dZq@Ŷଝ=Þ;I͜&=":/Bb7c) ^;OxxI PdHvTV'1vYN YL]F7wWQs9ܧv C`u]6q ُۚ'JlcKV[3_KAU/V)y U-b~e(/q$R |d#Gvm5@˂'&4E2jPAgٯK832G׿m *Q+!dOI1 S}*UMõY p K?%rۦ}v,god ڈC& )rb~#)Uּ leS}(ԜlV0!BFB<, t\!I|_D8Q%ϟ*Ǩ tB:Y~}\O!G|&p6D x}@Q$T V ]pouʌ@т+*>%[iYiCL#oz:A)m,4@s+ {7b{7y}٣p=ZΤ+(­Jo N3-XoJnN90rkB;F]^x uK%Q~8rݣȘ0+i% b3+a3nBo| $ogzhϠ?MnCOlPeÊ 0k: fmoQ;y"HTXv>!7L'J+H`|I8E"+lFљ C2W"194-^I^X!m1)߽d0CCeK99G;E 7]~B_<)-UmI0ηf(JOGd^%-y(w42e 0-ޖ?jō'ꛂND"r)w0ܣW8T% y6 .ml!vG2YB$PSM>}d4}Q>Y>xL**Xˉc:f/F : KF1wF)mB#HRjrh7NB[/>`0.~fv"*y}o@7Vu,ǘ *1j"Aw>މ"T 7R7gFW `3q"e^vj~-n'7 D ̈́ZwPIEw4۶Izq^wu"DRB b+'tjCf",4GX]sY'nFwu un_[g/'7-H8:8.:%&,W։*rBBV'#Ju-^?yèCgjd GSF1_;SMJ/drT쭃\X7<"/-0$^Z$xpsKFk8OuB}d>{u_URfcszmt|Z&j(Ȃ4ePT2m?ҟ>^陡`"MޡQ%7@cR+{Ͽg)Re,B^2)c,k@Сy6YDf-s]vT)P N c\ EmNO@|D<_ @KϠRw6X@+m~=0#&;? lg4]>IYs(ۿOkJ#`ZD1RFUtb)LU祾>n#B$#NQrN,/d">$.y]XWLIw˨?iU`SǎKqKf\Exnճau/K3+KʦFVfֵ4 J*U%"sljw> Ύ'}N|D h%%,rOD"Ri%K'Ҧ혨`=]|5DM.fޛ8hzB |^bKo}>qtJ;bJgbc"C02R aOQF:dYͬm=Pj }QutpMS.U<ɔGO9m&b Y0) u1>>lx~/?θ۾X"YZݕK"{NjV`5ο߉g1l=t)u65?PAZVFR;Yp{`YLW$ 銑>Mί 8a|G8,,{ى݀&oo ԑeʮ:0ӵdC {[Vɾ`8?dM!ƌj*HFjs=&1)y{z#D9⒭S/#-ԎJch&)[ݳ )p1Jaտ0x4I8wS)V؆!9z fT9kzob?GgImV HRfeRy~U *5w>mK /q^'l~xPot_`qb6>yt( Y?D/v5RQ퐡a(+lw!4xWǛ<)n=KYA9G9kNnabAa%"6,Tq4h4=R1n_n@L旣<ؾ_bf\  ȎT}U岭dd(g$7TMmi`sskGbd D꧉z}Zߤi&C6&[dj8Tu6_ lV`g{=êEc?e9\5+򃳯fvi֟,%w9@ +b5eP>޴_0ԢBԂTWÌ:﮴ډ^C{%գIy1-Flq7Q&s6[6B 0ݞ5a`@o[T/X33mqθm-w~i}B|$(G3w򞦼[:缜k# @M;[ +%#λId!k L-ª[HK/B[8^jԊvJaI7 n pjwu,^\o2-k}R81RXDk QF$9D{b074]LosS9OBvƴ0үĝTk~i t:gIH-mSϰd>ǣҞʧ:.7w"z"'?q~/8)}cR'!N`V{S4edzmW M(Әl!Ųdi&.ip|4M> nڜM$jnxjy !UcsCI6QzqFb'ʁaLX(SwFF4ȿz72?RuPkv{l5P>|PPBạߤ=l$g~wnY-ϓ 9r Z;Kcƙ u >gq.'p{x6y^{K?<5YϛP U; qj[|LL,I+qD{#1xkuT+Lwp B'7`xa5LQ  =NAixzYՍabN+Ym3j)~ N!xB@B$ToE֡;gy "sGQqQp߰KO^"‡~OٗK!D5<ӧNKvl)/P2ҺjƢT!"&к-k˃*v`^Z"!CμXށQB*Ǭ5^1;7 ,l^y I[axq; npw EN#4JȻVQ]4ˀߚnYnݟ>[SZ!yzp"!m*z""t#pL7Gj9peL8Ipq-gcM,kcA6-k‘LGKWtWIػ{cGtۙe.#|p,CI.Yh[oD=o)`F9+P/d 5@HIn(92[io]R47=%ZI% ju4|v#rf4Xn_S̙IPנ8HZW1 91, ೏Ha4ħ.Ԟ^ai ` D縒W3B!YW6dV T$保Of/ݿBX3_ryB[r"h3\oboQ _m5TH"HPlP~o|qeuǣ5=W>D#7n cVodZ|+aViKK :H. =8e$M֌a../Wd$)-Kq֠{?X_CP;%On¯TL`~ĖuXS5*IḌn9"vܨӖv =U{(Ngm212a 3躺 =P XPQiϳs's2sC 7j'T9Oߩ#FdEE( mЅU`UO8\^`Et=uQгo[ wc/ݦqO͎1J")5X` NOkD߀C 7ř!IaA,3e tғ ~@Rte6G}ux&]HLu۲gm7&*jhނWgr8=AOٷED+G\Io] ː~l%e}q(ƂI![4}Hkg%3'T| e8gJcAK?z{{=8;e$dz^_NM^0OuV*?< uӂނJ˟9u4z ~6!4wy>fsאguqyB+RB!i$8hA>ZyncX4pzb:J2V+e@J.ą!~>ΫHRZ(FSXh9BQIT- f_WLqQei~+ʗ=v('~;[N4 ,%#,vTKOkyz Mo͔Q;X#@I.cW{зm>Jf['`ilZW_!xtZ?.p,f5s9^@ߤDdQRJᏊu@rwH,Ez6O$tS&f&ss֤(h}隌+AsifBnvիDRW*Rx)ݩ?h4zZb#hhK{D>P|mžTz-8844%*o2|7`4ܸ&>c. ڰ4N"~~rì7Ĩ4-XyO}y~zɊ_ @;AT_K1K[$\y-Z=XRlĂr%߁M1{$x#|w #:ѫ 'ձy+ F(ov1̨YϮYsOdm'I?V=<_ݜ% k#A !+5(yM3߮Ns\Pyڽ9+1kp9̳rz?) ΚUI}m7:jxiv%v-/)9%Ʌ zD)U]gX޶F ˕L2sE#`:ޝIv\A4C%+AJvc|coA':`c<-`0pt8Νir̄^f SZfuЉClvTY:8Dz(r*iK˖an~ۤg '553ɐnq x]?Μ!(.4fٺT67աs+;d=B2uȐ )< 1:C8MV)F#S= ',fkq:RBg^էl0KOZqoWcP^'1xb;C:Й؞ ^- ۛI Tƾ0 Q@6meT hc8 4!<uo/o~ O? P"xUGnD:#ڃVxj&5WnVQu1" s` Ǥ&wVQ 3E[Àm"9Dy_y2ŇSQtMJ}L#`uۜWn(L v!(̞0陸$N*J;bcsm3sKo_QX; e?2TnD-*!o{6)~xs~ImuCun` O?HI?z ]<i^GJ3[qI1פ]l=pc¾NQQgup/ ת(]P47^ۛ ߯5HK.U_DG`{I`MclÔcWvIj0Rܰ7}fy L} HϘFy2FdwIn=,ޯ!VOic9?"mp' '|v]člQ3v N&veeG*d,o!`z!%|pHsoa /5[@<.ċw \gP5;}` &8mbH+$@:R+]oVvL@J#}nS=$M&~U @E\@A(^ł:W9>Cb#$ Qär9 o= ]+ ]hHOCV=D#5|P .dpvKUeRqqXL;8o[M4v`qTJV*_B4՗)5[i˜Գe][)LSIiNW2XeQYq1{CKh|auT#f6)Ɯ*!k<<~{&vZj97 L-a6a;/8h(%OQ6厨Dy6ݻEz<..lmR r&{S˹R#`M=e{oŭoɲRO(HvP_gK.)oI@F+jTk9;o撚 ygN]A:7̈AMFLmW6KY:GS\ȯ hIocS;~A6c|ˎZ9*\Pz^@ Aw_X"&_$"!dmĉc?&QÂzEU4(<ÿ1.%ׇAd C~ÌaIUE dȼJ_Dkgd^ili\校 .ü#@O_ ӒYMѳq+.$~)V*[U/Hm_FIn#ͮC}Jf˪V> ]BhOr{;?5~ֻq@أȶW(lslsR7RNT/)MD&`:4e֦唘'NCRrEAt62y~\.R"d`PѠ @! #:WCE)*>Ì 2;㔯yy+ޫXϗ<2r9s9 7l\jg 5N1xSu(Dk*{N,ןI4a1%FcSGq^{~|5"X2C<خPD<ݲy=VW= 2![vwnDߝ7xZpߌ}"F ٮ֐BJ; hQd(vH5p*e$8,[5wc$~˄OdG'yd4F|u\lSƪƇAȟ?P['^("mX?};32=lqԧo@7&Ay;vVO`=#ْ;W`E Lخڷ#lNK[pqZęZYJ͝Y5!V_hZi ͫdʼn!< `z` o_a;0b+'e69} %< ꬭO|U>fȺOfrXqEeYm+EFcye53yM:юO_XUz|? 4_W:in ɿ-b^+6AUcVF -1FWTDsZ)vӷ)fluz:!}eg!ǫD!:ɪӖùjY rGZ@?g3ګ́d;X]'6ǜC)cMŻ0P[uM6qFS%ǚG_YDJۿA\jSpYRwbuyk_e@BNDi_׬C''\,/-{X4W=Ŗ @+dۺ?PC>*8}~Tj521QqqmG'4Vۿ` fĂCM5qlb|6Ýf잩}UVrNpyMQ;D1|N*#Q@ϩe :/9/H3#0u_PZ~IZa" 0ȹ~Ssz{nDĊ@ge<8ܛEJFp=rlL3?Pڞ{;=#$\FS$$'o̤ëE&v* δn4mA/t9B#>d-fW5'H1H} I!?ąU=ޔn#lwf#C܄_=BR k.SMTTȂ&V䲊k1}Y{kGv^ޏF;JnT {ݲL<@TF]Cnf."ɡݳMZ*kH, 8G7:Mpg*)%n VAdD͸Ts#V ͱe:W6C>ke23-+s#Lpeޢ.C)UW35ޒߵqwW]hhQ,!L/%A&,3U&RqÌVuV6ur+H[!Gzr,WZ  2A)6 -=l kx((R8nS|8dD'yaW?0;JuN&3M%e-6uN?)PR{RU:D)@ɾPwMV!: ROBZBfM@d/mgO:{MEE3x$Z{.z,bn`ӛ@7R?غ,ti DgxOumdxK&x^! Y;x;EHf75Aj9y5DeҜ6Z]тI&Ayggy6T[$X|}pewTX2@ |3Eא >eâǺ/-)\@ǜ&(R$E?I ([Rks9+ RG*9zP!nxeD[=)6:BŀaJzz\(PXF9*`)O'twrRG?#vahp=.MAR}O*{kY ~38Y !D݉k1 s kѾlG)LE6?j`xhHL?;Ő@KJoHIT2>h* }>$+x. #;5 V ='Ձ|X^p|͚]~-G_}{P#?%jra/Zwh8J 49Q1}I[GPd L-d)Z.n}?,iFRw?TaLݖ jXar:g'?sy k|-aS d]^Η$o<˟ Aԍ`KK" 7;e}ȏAAz͖'xTih]2~,>bMN6pjUXRe?s$J|IQ5+t+پeA@h5VlH[Vx]4s'mC4;p\@KNV)0{xd#$z|hP,:c+v>8`+7kl` e9:``{};ˁra/XyC@@PP.OU8K8" z$"=5FAnQf(?&f^ ˆXe'JKʅY'K +%2hVwZd}٪nՐ)tJFUuB5U;fY1o߂P m~S/g^r WDtF |,uZk7gG6⥃[IC{E{YgB>%R@=X+T ] ݽ:}Dj,̛0m3 0HI֑F|VSSȭ/-&JbET'H!]9RK8ղ|)`_#$3y\TYLcJ\nyzjnD^ғ,sfK!J';)S@.俦~/$2$mV^|]Fb),_ !!cl(,R{v5MsY.}Ns'k*F%+󃡥8 ><0\4e2)ZGBHl ̫*G e+?> Hyooc|X .ا 43 WGA1ɚә)3@&9E(onKUuW tnrDOD41xҤuB 8=)NL%1؍|+<:+B|SU ] q"WrU|0shiIN_q޹7,jKߋmyє7Ӈ$!% ^+D5@0a!!hvF6aĮ0aCAR>>QH[RaEn{ik-b35?(_.L:͸-LzF.{ XAv8ֻ v<7LZ%m`*J@(}x5Xti_Hʼn 4Kw<RoG|>#sL5rR Kak!IE'$݀B|>|j@gqH[`ٯ5YP'P;~ۄ>ä%k>`a;r OĎ~<}sؒ!t'7:f9_6i8QѰb`4Ĥر2Ӡ}hq ؾbd΅c=R _&沈8D Mg tҭˁC~򼏪CG9&c Rnxg@qFh܍?iCDAYI7I^C| !7fI+Ȭ.陧#>7ȼ.92cGG@jܝ`ttlOou`+V-RkzlhIJZL Z˩!̥0NF=$O]AP/;h }MZ !NoʽImJ>#?j X@g\ZDLyUKeB*dH~a7>bϧ)'/57gjfZ w܅RlU˞ #|DC O3%?qm9Gj?,Y&ԩ7T!W} }VxiYٛnD%^:cTÍJPcq[5M cdv)c,9h= w~桱b{; aG}n1A}k k{a]Hb S9˷S/U3_ xs$=m엩'K |UhuGsM0-KROsP|Gkf6K_B){YE,GM/kr#cv=#JZ3?6,LC1ng7-9t\prَgZ`?|fOcGW&5\6 xهd2/_m0j ˠHq qspu4L\e[$jL,7|=)|>vʓ!N͛z&]}lwJnv6xYh~C 'xDZ ;v4P=Ⱥ>&)l"/v}j5N}$*:wG.Mͯ#[ԹlC9 Cm4,~^ѯ)"&3V#hc"s:JsnYZZ@Nc(:YH k6瑶qo&,8J(QS0ޭX[Ԛh@mfRzW)&b;z\ D4T"O!@!jш*jk}oQ4 e`c 9ĀEU5sܫls;9,/y3-0h"f\D7*GN(nn'%lWFob1ɪC&=EـW5ҷ.Is%Z$.lh$C ٜ&\wK,]wH:ؙB{"㻵귌\8j?pYOiA{{ѿ 8%ɲŴ@!~Dś92o-QaY)ӓksxˀƈn+[CQAD{} ?շg}i\7%AMf.-=n Ȍaj{@H{BdzđH:q_ܭ@#jW8\ 6QIwz<E{v \[…U!Qu5XfM ̵ TV~ŋb µf/fx$;Lg#wSQމ^M?vm?+'S>0;7s.c4*PN*lEBFp_NdN Ͽx I&x c\.줚VU{h/GT4,Ϝd@@^I,2$-2O:@#j&vk>*r(͹ɯ %h qjOS}XuU_v^d_!+aɶɉ9\+2<Ę`_~ %`e(5Ŗ gRb"Rq,Xe90JRa0X@URO^ppPJ#= izA۞ٕf Jv#Wܔ rs 9{vjT^%Az fH9RlwTD֍?Lةqܥ EtiA3 [ՓZ8bv!lx2Q$hP!x~ 8_x:, 龞)Ya P֓%3HK+t0& L,,6Y*O]]gA?t#L2b$-ѷ.m]kH%m<` J(ɖ -|v.+3%3o-iЏtJu&Ŭr`[\"˘FEj:Sw}PnrVx&u:i >X4*e[!NDpOޛ:* ܐ,(S-0}E-4yQu',>\ebi0A!z U(䛤 {3mGNa-Pd1J[&NYZRmJcsQ(z^zޭݸwc:ۅ,~n@lUR"ik $-#Gj9쾲({CڢĪY+ Ʊ4SL)!bQe0rJt !NOt>.9R"OB__4H}I&P7ۅENT!t}kN˄;C_TOGoY~[%[qֳ4q}3{>vixl|Z~`[,Lý]]I1YU8SƀFL;:!◊ u):[QB9ɟt@skQBā]/e/+Ȭđ&,~D@ɷ6 T+i?.OG^5` ; i OQUW3^wkSg=K뺯PpFUfH2߀ |4GȖcV(k_ zG+U_$ྒT-AtI}4 ͚.ȒF˒*aV\?`+s<}.4+y()^<~~:~X(r|[h@#v9=BÔ8&<[+ye'8$#rE^a8)i}S1+W責l0s=]`ju.VP 85/f/ 5+zCŮue 0ޣb E2QGpWuUS}!R7m{?K0<4/7j?y4UV\paO7 Vc'yP]O m|S|6$5neEUZ[2pȃsGUpw  S=O8tf"hJ%0myNbO$'de C70TUk[ݲ[Fz,ul`si Z;w`Xt>b Swo+D-bK䅳Of AG{%mŶ5sפ:[u:nȫ;ql0auWx(m]݉IsPCےUB҅b9փcשy-o{Mmz^U5=CR?ѿǓUq}t$ lyuw_ޛUBeRɖz̿FjG'0ֺ.DYCNv&>@Uz%O$+[ǕΧF$b';-CPV+~.KQ2O2#Vs*^Q6'E(Ń:ZMS~jfo &vyg/VͶ6* 5*3 a4cqǗ9eHl5K或=:Ԙt|-arcE!yxxFx=Wx ^s b ރWS#izpJHus<&a>TKoD%b_34 FK'c2LCdˏp37kSqJ] {w<[쯤5~@BkZt2Cj1\RꇤۮIFվD^7~V.ypu[|\t?.Z e8[u5_ `X5J:LM9-f3]ƨ1vu%,)qAL e'އܵt*.&i?]B`:ԐēCA5BпM[}|/I`&)R,!19.0ů?.[灜< ֠Bbq=pLY8{ӣ`*=ro W-P%efmQ,G@^ٮWL#2 &zе^ a6~9:҇pq1ccE5!m4hēFZ ]N(` ,h3W5"l[7x2*q>ƃG\Ulp~hCizu0X)v URMO z%RX<,y#1uCNι~Qe}NC4C#y(Mz >ul痓)<{f9&?~ơ Hs:SvW{pdRc\#' M`yF P)NӿE+a#n~K*?Cޚ''H.ӣX(ee~5n:kJ:TmOᓆLK4xoS('yH}F$;"\ H=Sv=y輼ӫ SGaBE`aF;7)[CrhL!=~G'h+X3UZg>b jtơjˈ;l^Z?= =O8q-|G^SJ;m,Z] dq"3drZJwU9s' 66x{;:ր~zKԹO5fawK\|tȈp#_7nw4XcȁJ.$tW;]M:)`}ās\ eNU2S fK"ԞrOHG Q v|$\*jAᖏ[mfdi_jmP#1jp]u55]C~- Cg\Mk\ͧ=RxyKէB7I`ױ{Qrڲ'QC$W}5au I .3 f~'vY^ŴnTa'ˤ'd:ȅvֱb>5懙(K8ֶ2ol"X؏M$M!zC][7LR5,u49=83L`Z >>|"W}5}8a_JkwKIit\kɐ۟2 PmQP!Qx iۢZ).1c+>Oٔqle+@~Y:4LgD\TT/<}n7 0U٥Rg@nP؂˖FvIͣTm'%z,\ *)<贳.(F8498diB=[c}֩Lm/'E*)UU3,Q ?%<}i9aIDR K(j WķX潄Ps ®e{3{M Q5f2}4BJjs i*  ӯD(9dG,xݘD.{T^~˛rûrQ\omdM?N Ӊt5]pc!uy;Q"D4J1=T]Ҋ7?x/hD6vZ֯(\\k`cٜr|RuH.lC$(h;IcU$F\Rt.XXRM[&r֩v؍=3_$CY"/R_+e.d/XiYS_8H{Af ID (-? ?Chrl `ќĮG"qaQ(;&4^ V/fR RqC䵖C*׋+UPP-ě8ej/_rJ6 @ rӁ゛ӐX |K xz:`tˣ@,81C%0_V=kY{[?PTXʧ\H:yNV *(2nV}\*Rȧj?vK$nA( q ]YwE?wCDM@AiCf m-#y9f;m6<*h[Һ@v[Jp\9~HC~/*GXʕrhek]oĀvWɠE=IV/DIq^Gz{Ñ_<Le<n6fXw^N.sLJy^M+2E؞){46CaOy3 l2NTs~!}?+Y x+G+?~<TbkHVt|WCYKb}v=y9nzkܿRi*%)*Bt\{ yܱ+\(cM:'6*nKPg q+H/`Pn]e{y6 L֘hVVgS\bkR-@֠:linXqȃhC ዲQo} @lTCn1TSpݼ uPgo;q"(g菛dZX9ˌ9-0 X#-T FlrCM[wb4dfX-pHǻ ^OD hR$ʫ5q6 <;VoX$9)|gMPTuN4suspk;>%ؙj'|~a?Hc#\=J(Lt%y2^Zbpy7AЃU%H$% HGwiscq%3V \ *)*$Fׁݱ5+K8zQhJm0to3\^'3ȴҫGw@?M!'2'M OѺ7/y,zdVP$+}8E T0P(34d+(i Jaup1s_zBA*E{ QFkF`?0J}ࠝ(g򺬆 A(Kv,C3y{\EF  t`åR *)^^2y??ƣӛ1Y7q#uw 2O;p<8V;#!vA+Gw(Z, 9Ưiw4;GxdPz_dx7*aU~Q|nO &JӖ踡[LAYOh: o/o(+f+b pxZ bIh5agtn}pP窸#-aj Jlb?72B3dc!Tf 4#sN'/NŒTl4㋑8HW=.J,bʈUЩ 0a %Hqاw=E[-dgRxudA=H4P g?l߭>-B^.2=]O-ɪHw#d vT}vov",7&{o)A iDE&-OwCChBkKO6̐M']Ȃn.5$sUWmⶋV ޫ 6U>͚GoF39ޚZT^zIb(^j9|+!c ؜~ GKY ,39~Ʊm(ޛ{{< ͝AcqZxX -,ẪtRY1!@ 7?L1:2.RK6U$@- FҜ{}d רr?m(7:qavD}=ؑ;G= vtx-/| @*݂IKwG%ES{Y{^_Yp?҆:`GfdqZ$ɋ\o 0]__6?fU}`(fz5E@xٳD0Zֵ$_!Y{fV1}:_1nl7^}P+ēThY {U4R6ckqs뜨   ۪ޢ$O`/#XHqqw`DBRKB¢ck[9Vy_E:1P:v_j4Bl9+ &BX:pf (5sqJuwmqTgBsʤO8's=b8Z@F5I>%Iy|!q.<‘@ȃl Íd(򖊵ָ짖di\Z40!&9שA* f>L ǻP> { R \/`v eK ➇->Hx_ iNƃT Z!efwjeio@ɑx)VS6ݰU ?e[CȶD+Kk,5 ʤO`XFUKG'UӐi E|jaPV 1yuC5S]] Hֆ' hMok Ϊp?UwdԀ֬mEO00isg7Q%>&B4nNl_?ɭ})ȏpB:{~ǧh^' DUr+:ИFN6ALL-~ -}rE<2LݹB:[":2(xJqȴd:wېX#hYl3GP=w պ^2hDFo *~lV^n\1t֠T+[>uRaf>VKYފ ;ڂ&`8H`%aCϼ X#vr{qPNoBX珁as݌ݜUTǭ/m{zN[Vê_]7mGvXLn͐uů<1TEliDG[ l9伬'(1kzddF >mĝoK|=Paah'bg/YT}1o[Z% K[/gκ*߾8H+ըyI'XQJ )YNij;&ly&7Tɶ~Fl+hb:x02"+ ع| 1&M=WXx]~U֪GƉy%k_Ύ9p XF;@ΟvG nVw2qﵡ7Z@2@&hҬ}x GMi '% t[qRU!SŤD$NEbkI?U^ +pO0mFP,er~h/J m *գmNuc'אFR?Y#| i#Du/Rb) V`19-b1Ⱥ84 P-+Ch%^*2 :Ҁ!r뮗C qϒ4MmMV 9ef搀K*j3yck݃aٍ\fQ km?:͵\ԻWWLV]S%-F(Jzەﻑ j#V7⹕6Hюk X*>%潇xFk(lȰbfzPX q}a4F&C6%|JFA4~E[J/bZ!f  iL)\!y4e0@ |EA]*Uֻ5xQ>fLZ-}}[sb8`)d6Ng.Ҵf{,sf2oCT! Mc, ^tf)2F2ٓ60p9|ŠBY0Ơ¸7?b;փ=TRk ԫonN'Qx8PPj2f$XE,?/v'4yBuu'vg~Щ3(#%WGrFϢ!)@!䓬(?iG?+Il t8%wE\Q d(&Nᦻ̋c} FQ_hYQ>-<}" Z-b_ԖabI tEʗd3\sVƯ4J<a͙Eـp>2*tZviM|dTӞ0 HN@,xmYaQ2_!R6նZt:祛yo='_ 2iA 6P &OtgL.jtLy{ U (i=csxOXj8o.]j|㭯v󆞡z6͹&&T*u(Y"I'JS@-t^5dH6R0%rT@Hڳߘk@@agZ3!{HuP@ﺓ#D4Gz6c}gѹ&ea4BE޵jSkx۷3ڪ>Aى^}fPG6bj Y=3 7cӫ Bk EaX&ba۸.1 ˲ L<ē8F&Rv6,}Nnc);(t| il*Üf!x謯+=< 'Yn r~s(킝7ΞR).7|lOΑ'>Im[e@ •́}ucGVX0A^r>rbL (=b7ejV|@_HĜJP%gPj,)$s5ze,`hP 27 ?k ghETr~,e|+jW,X|*Zne)'= B{"a;J(Pen KN>JT#rx'̷E!疃"Z;0c,Fy?,6a z:wkO=ֆy@)= lFXs|Gd?߇^OeVtr31-{ĉiTh_1x 5ftqQ "BJs9z ̈́δ߱sEq8tk^\`Vcw3tx`p=ƂN}ٔ x*(񅓁OJyk$+aybvϦ`!{KhY eqG^fQHSԎ&du\t0@؍#,^<!~h52+IGKEċM? P$%rb\kF+DU|0HqQlh`߹2@,0*PiWhq ÙMӚL#58b"0^pFlWX&-PqK%B+ llix(v=9e4aH+DBK@n 4CʞqȤ`:]sοE5ן 4$<^(#CR#Q_ )3?ILՄt=߃G UV ,|SI&+!?iz&Oń-ABr-%X%8Pfj?M LjޠJ±=]dz`@[y/.zn(otA LuփhKvhG{v/XWM3$鲨Bz`K3Ѿ|r I"l+eZ<lY/Ҽئo6Kkڙ};^hxRz&d:y󒸃0졍܆NSqK7e{Dӗ'bUX7$4GNd,=(! Y\HYi>sp5 Op]|26@)V􃠶tw7G{Kb!oqZm9O ZWq̽K4JM=؆e2NR Z zd(!dBf"f-HiWTuKM>NHKnl-;Waaw[F}x5$@jێk+)SC7fͅV Ae/FؠE2+׉J.3[aNikX7[&w6[5v&ߑlXIu9 ~Ͱ*@ඡvȎ n'3!R.TA&wq&Rg fV~9-K]d"TAj-~(W>BdW%KLi *`Jk|-l`rW]kyw "/ a<m{f=U9LeCbipu gk9$Z&Qз1l!!ReCr m6/IЏ@d4?7u1si) >^tJxFjQ2qz #I|bu٢6&o{pеP|l*4"Lx޽4o كO %]tB])5U叁w5kEM[xizɈ61U.P/5t詺yLRxópܕ|4 {rF&˥C!kAsn鉸t2AY]I "J.N+dgd}[پ 5qsXg<>Є\E,[ \C#GoZu,E+wEVGx&'ρ՝iѨ&^zk-i nr$F4þy0.Jr imx!I\T-yT$!:&:t)qob>1[ JEh}TF {9*]Z);o٠(-a1~s1Y<$ӦQT GcD[Qt q7nY̬' Z?wTAsF0fZ#K+F%B=đ[ß&H˒`xGF6fț)u:ʹ,4_nԳVtww)ʼn xj^0O>q2tZySI燎X\DұlzK^Q1UG5)݁ܠ̒qȍn.mIP6wujk8P @ mTiK{~^;嘟DXQb͘Aq{e(]F:`g7@KĆ&]nH 2#%קyO*䞌. ;+/ 򒼐ߍo겟:*uDvL |Kk30CEjqC}ܓ NLtP$v%zɦ{MFdY8]ݝk !8G#I6'܍@` Gysf?Wjȴi= }Y`A* C |gҿlq-짌P< 0}InSxiZQs:`cGzP RPBv@)ϲFz\].ul"@ჟ_AˊM0S g✽(Jk5M[܅, jlI؊4wV c0; *kƐ2{#SA_NJ ְf>r U]51B?z2?#ܻuf\׳ǷBZ"$#籔 ha j]즌uGS#Eeάӥ"8E/.d,DiCvaU.? ?cGb-4@隷C|nTjxtD7?|o-o*Knn^wUh^yTo_Lc:.}0௬Љ VmIM%& 0!/!hC\MȴcK1 ;y3"K6##HLEу鍊(3A'1F%a ,S*?zSS6 `-j]mV縪2a^u?'VV< xE lXci,^dY%T-|7V<5y_%Տ2L@.m"1ͽB$X6boEV|W ^ӧ37=*cyq G9o-2td\򌳧u2gV7O-h#}@]rV?`s>:mƅ}uo6-eh#?7DKeYV#%9)6RRyLƸxO%Q65e[Z7Gp.LSZOTi`[OP m`x͵UA ~ ìy)`n}18Ip*SퟀK;xVƘi@/֍^L̺k6NV;̕/ep6~&(eA;-tC<oy l]s0t9^ٛ;1(3-kW>ۀ}a6* i1~\Ytt]H|;FlzU 99Q$MؑKyFzw`C~>k.A*[$wBTlh'LDF/Am)Q*1CΪ ~n\sz57njr]p wRVr|1^lje WYcV&Tr?=Tr9XLpߤ躛^(Z+8-lͺ Zy vxбtz:hF"S㠍6@a[\.t<8u4#'kQYEd=5kFU$[q`I"] 㿊[N\v? D5SCitA3ɋcd{(]>yssD'JCPm F]Ny~1`Y$XeOSbΣʮ*\ɲ TtWuQfhUJ1gCuF GG"ڽ>/HK;|āC0r 4_SD*:7U1^dG.)|l?dz0oJٷeC51G;2޳fMȻpJOl^ѵ8ѾН3.=0?rEИUǀ?OtMI2~1hj.;.06mt!ȡOpDYs% Ыs ]N53Qyj#:t{Ei#IafawuJDsBFL8]_)F8>pAT)} 8c iɪMl#?wYO-m;\+ԯ̓N p='4Gy|:l'2LRR;ڝVEzmq9N+ Aجެu:gE̹C=Cɱ6\džPpHק"vVBLMjfq@&`رXȂR:w'ZǎN}wOGwj dA96pפ59̗ӽ/4|.4U#?I=gixqu8G|,E[[3;Ykk`7FOʄW͓[.k~;>}!Ul#:Lʭ$>f`5G|np>hF@6S1V ;оrݻ.(*h5%*sͥ8zyIt~P 8r\VZoiWӚh PXRB",ی#j v蓔hw8Zc:(PL+vi1+iUҜm԰XRCu_ V%.0%w3?iuTW,<`wd2 6)57x+)s#|e#k.`h*o5W^W!BQmk_C[mtzp)Bd\*hM:t;ͥl]x(ZXWfݕd' FTEP&XZ(R{;z,Ek)aGtJo0صɭ!`ʢһ" A%Q;/NYJ0dNWrdT vG$r̈́Qna䍨Ө+k!Vi 6^k#f+YAgS4S 3x:C) 1wSgYFgoCsON>}G3GJǛ0DKm^IF=Crc-854;VDC{ھ­ҷm,/ǤQ|a-{p:r]FN2:Dވhk}F\!w_ £m)&)є9\\:R;F-ƚfI?0(^XE2:*YM-bop=Qnx2oaU+ ڂZCe:!ǛʤL,p{G'{x [!Ec ZrDfھ6熚 |Tӧ1s.sb>n.Qi`ksGsMt-Jy1(ka wxi+lɇ/QU59р#VX"(32lE~޼'75T1O;R6UU[@Tqb@&`;nX2Ioܜ+M;GN~: o.}62)!n^x)Zd t =h-G*}ϙ8zSv4јZ!s'ί7wGĀBtSmX;mg2H<(g#wZ6M)lkOˈ[n0INr N@e%`"B|$IiFl,VMGwSF'/gb?lc<&U"C!ɣbVzJr`7Ŵ _eUF/ @-xY$SlA~PyB^^y d EtBv;59;VG8K߀*7-y6Ϻ T,]?䒽[m?-RN]rƴ]oШ͆1XNn͉Q3C^'zGxrr ~akh9#.g&س.Ψ/3~qiArl+YL\BzLz."w6(1B!gJ=VIX"%٨]g ͼs`oS4n;;P [</xkf އ@'f&G .` ڭaD2TUG Cօ{qޯ 0wWOaGߞB>U?p#JJP[ܻ}Ί :>kJ>EKr߽F߽4 ap;Sg5f{ϖw !~FԦ)F068AOA*L 8)&hۇjF2U:1<:g {[#hSᅁn$pNKh4$·\^fZF#ap(|9^rgr\v՗ ?]nI+"+js~`t#/s$:n9J|$V3p}>.UL{Y98VEik kf]_'75YY*W#R3`M?ڥi4T /kn` `V,*t4S@|e1it^XוfVDVzʽ8~jsn͐ϠSg̝(ڢ z4I{ Is!Hhjp<|[|^T%[.OC{4/d !32غXG/T'G:s05Ƴ*z!mL:łrfd*| O˗τwB2l̅xw8u eh|_Kftw es뛪z{IєITg҅5{x %qx{ G3whj}~\ؑt&PRgS<+у_iG_+))@H[wvt`wS07DSO'٪deڳPvSu7-w]fIWS0(+8x'actP`Yl[bW`b~5ڧ֣dm]uN/nl@$u".rBRt@6:]PTgi!w:]V/]RY\x? -B.nG†PAc9>bmȧڙNc}fa/^F߇zv9r ]?h^:gxn` PT{mS-x+^Akes{` Ñ5Sgu4uR4J~7j 8-&>I3trDq2*pK-STؘ'ox= &L_E_ w\kV(q?wt+;w3t?N I)}G e{o7zj2m"`/Gl[Dx1ek664L@BhMI]8]^`n&_0,j? ;߼iÍ)ϋ3 #J̀cwCmlai)!Bh:$oSu5BEK`ph,L Ks(sHآZ;;,k; u9l4Ka8n_L~vVVC@ZvrO`б~B욶i:JHc1g1dDRS3J\qݻO $,?.kQ΁|MP`Eؑ{N=(eHG\54eR>>PWG)^WLa_b5n x]Ay~/%i1 \,T>eM3]D^/藚:z &|&sie !Ƌ1 XEn1s\^0qLXȝPNMΊ e\]ܚ|*v N)'E}GM>:=U$OAf—vZ8;ʉP՚RdY*CL΃GzRY64&}&Aк-m*VbF<+67A/iӝ^W?ҚVhhSZP̈CrCPr:6&wJӕO! XK2tpBIdVs:$g#281 tTI󱈣?``|h)e ycnϹ/3d 'ZG9;oP<0I1oaF!Htȼ20ONiL{\B1x0愖pЮXSk-{vǒ5?zVPWͰ+U.:IErT(Z."^>NIBCqoǐd;eC6ʸ67I~ޘ͒E!TLuj\p Sr$Dd޶52GN&堟/)G$hWK`kEZ";L&)^@r% ,g "}c?)TGpcT,!긹vٳek7׎t0fx؏ I؏dIEq"JmIgfO}rD,p-5qASGi8wK พ/zdXZ#-7O""`D/8l@m;v>KJ$:\J)et:zS2H}܉&7$ MO= )=pw=ts2`a };0wD= hfd[A7#w%' 28 yZ;'qeS@وJ_6t!k=0.o]6Fbaͼטdu@'<`bʄ S4>߂%qX϶|^̈h0X 0LUV ΍5<왠PN8Gwͭy KĜuEU7zƜ=4`8 B}^/ i$/:6S-*8v,>v1IoW~W1[txiBv^ ?BLt.eפZ!fwM hg.qAOf/2sY; D-Sm|#0s*¹y* Қ~P5#>.dW(ǧ*bɗʬnIil_%_G@eĜnjv]tn2!F ǠHMx[W#yB7IXѡsI;'hKE:ᓶo+7D&ދ㰀mXtW⻠_x@]9<|yFE.~_bw]}j -e\ԡN32^T%\M#h&`Co\ KmpWsJi2M]IƖfK+(mo-%?"~8aEG&D >PX3,ypP\isB{tHp (Nc_ҁId3s )qRU>nMiU-b yma"g6mݼh{Ziy'9GJM#Vabi2Yt7~C}eDӄYhu~ԵN=Z2!<@Ceu"6 l#S`fH6Az|xb%Ժ K) zX;1#II*E|iD𳘞zylBC2| ;QA{>._#d962Ɠ a_{@ '-3/rU?G _-fDU|.Wts} ;fqhWM&t4EHybLX(du*Ϭ OS,QVb<7A,1h`>_joaoY%yv'Mo2ꞓ5*M (xx1Ky"vAdeɬZavR %*k.1MlX1@02#pR8 oT ,Vҥ{_"kD%xoh7ʂ_7qRyCwNCl,m'A:]$t@CC2Rqeu] Tp7_Q c UXuOduçLjY\ꭦ{ JaGÐsޝ' IzZ/TDr|x[դ4/"(0,.9AZ6 An5>O2>@ܨPBˬ8{tDlj@Č8l}6$GJ}x=q Vm4BNҜBt%G^g=,4"<))% VͪNZ0 |TߙO噠_#r1f+0~k]wxN-L/P̉:Y- TYk&8Um6m96W%C| IJe%O !3]YyН,$'| t^_JY2kKŚUɄ;Y1g@zEDž _)'\  v[kDGY#?߆-__H41H=Y/1a֊:utlWzydλc30}Ɋ(7uԁ*5.NlO#zs ̦bSxC U-‹PDBPzd9TM) ojBvq\^0~ۮNȎ{D~i,%a5; 2J"4rg}F`пThWAaZ9jcFFW$LE_TiKbݺ% ZH^Z| =<?p#Yne/Tc% `6~IhBj"CCU؂m=pV!NgMUK-UI|&,*]JsD.ZuPB]?iFS4n|d дLQN:yDCY@ꆯmx.pL^F[M0 ?DWքm0Gω\J )Yu䨏JOJ⦁J7tux2$0E{=KiCtw!iӳ5 tl7 2T8#(:Q"S 4rA~N]xZE#H;J;'@$x<~IU>AB5$=52һDH ivPVL~"X?58yC\ XON3;!Wl6y,cz#TV`h_."##z)o牶9Rpt4_F8 ܈9j&)2x"5??0MTAlc yZJ!$ZG<Ʉ=j$'Nl/H@t,%-l|_Ms]d%AlD_Xhԉx2mv=ϋSZ mep!hЇW/8wz"#?)еhiȄ=gD42zqwTVv^ ;pyQ}R AݠgNH`#FRV;"}4$/>[h/ly9ӵY*8#i47}YwȄ&WHSB["=ݜ zޓozeȬo%"qp G T*rw\Zm]Ͻg!24bGߏG\FpuX-81vXVR\n#<>& nʼNImY`7WcA1z`M 'ZR.wvZ@!^c4]&@Q.mo0.Heд_/wO7s)&,$l$ucM4Mn:ܕ6)?͎!Zh]{zƂNУ,6vL% 'f!oU'r59y?Ϻor3$?Q4iäz/k*rJxhe# όT4ak` ANH-HC‡= شm˼O&E7͉L  o}KcЀ|vjۊ(1u,Rak ;VmTh\Zw7m9Ƅ֐&Y{u!pO J6ӂ HlMhW>p^ ܸr/Vmqu޻& G64\E 30`f]}|N"+YR[POX&eP}aGѢl6)P]j3kڗB:JnT\2) SW5-z`i]]HP׭I3*Gd7>XM=QZJ]`1dHakSQ9ͻ:w_LI3$ʐ @'G ".Rzx&f)4 wZ (Άw"'_+m,D*m}k"‹iRN;JڗQԺ%=MGkQ2%lp}qZ_I^DbGg-);=sԒaʓ}Db^ڠ8{Zр]tZv~ƻp?/C6zex0'*jdT~UfIC^9EfA)B(3QZ\\ĐV)nAN7ZDoJ;n7/=emS"-!aq%6o:@++l&G1tXaO x*44`WWȳs%peӝF*,ӝNLpR6$a; mɖ!nGά*,+ΌzPh 7:eSفb[ 3eء/6H_T- m!LvĮN7n0Nݲv5-$rg^|zHs\o֍A@ jgK*XŻH& ZUy h)Q6#I"0O+]uǔ~AŠ~X.v)ż7CB w lci!m+ Gχ:(VK#wE5䅳,L uةc_{ܯ^wP0Bb'ORFHL !12K$h9>frw1u$7^$ǫ_BZUN?2֐A/xg=LR=FbwNHE%ǯ56A~8,ؙkpDe&y_bz#9&Kަ!Tְ:#i3J;yh u*Wy ,wMЍlTtv!BϮ8{*c^Li~t X$rtZ:w, U}`Ȑr[B109Qm'i~HΤΚ;/H==T7{9 8q_d.!YJש,PLWicý547Qd" ϫ\{uGxzb;|H Ҋ,Ɯy{s@pzclef.%yiVZQD ]Ҝ*r[LZ9C7̭[ԝ5f4͐rɻetq NkI"^K@ZU`D_:[}-g /H.Va[0sS#r$4pd@\QcG qυv-X p &zW( ?m컃qH%trt ;d:3kW,^GJLzGB|w(tb(IШU"Sp<<(k[ r[ /HHӻx eRe 6oa+@HL"e 8)KQ*/[ (N=:HhZgq kAlEx!Y8O$vL&0)o1/ZW_':ޗj6^zλ7y 5~4O3u>rb \*`Ӕ6I-e0! (2 +( 3LǗ:vkA gf쫰"ҋ2 oS98!f|&cERe¤X=uF杒=[+ζ{x2!C\x ^2(yGk@uIR|CO8tk}IoSoP8:g)Ge!:i.[^k?l,*Xމ9N-¡3)`"=q+.|I"pHJ?zӿ{鲢|O7l|txxo Oo,xwJm <h Js"i;]\9P%,A:Sc0ld3޷lIq 1 IeP 2^"v=| =ЦC;g-[袛{/l_1txW`Ki*@~qO>&_**nXJzѰFrI9)iļՔ!*sj[XFq}dNQϰ[oƹj=+ 5lސo㑶͗5eV(昒~gԆ@W|U4ؐ?yo/3ȃ%!K-Po@Lav~D.w֕%;dܹqu‡+Ț|<\$5@N.RG5`;Q=r ; qm#^}+ucCdq;v+T ȕ1pqUft7(\ l5+NZo)N"$*|χj&Z6~CslC50j3p#PFXooh" hwΘu,wqc^.[55!:ݽ<Z$Ft&$}ADoZUte*5 K+WF M#" ߍo~P7X W:yίUYyMD=TQeu=?)Mqᨱn^3/t`v{>"w{D6-H`2G郒fe2S4 4^?]}znCQP*]WXws5>g:ʹn=@$^:N0urfmpav/"ns0r_33){aJ} $j B>o>,SuNz &mN'9 }sh"ջ)DO=o „R%[ Ff,=hm$2)$}T!'һ QbC3`rd/̷!\~4Jc!=CX(E&qQ̺GѪP.с T/WX $17|M9=]흿/ ?kuwtMt<@_ӽn3)pRvJQL,X-V~:\BuL1woX˜ZJW3NNŽB< P[ 6=XWU_}6x;X=]zٍVm<8))z|1G0 adI:JP-"cxjIU u>ꦧ ܸv]xQ?xwyU6s{Ght[TV\+RsÑ[xlOWk76D?#q VKO%M2AQ3@1 ȰIa<%lHևK7Od&i"̯2w7ì>ކ_}}z Wf7Bٛ~7L:C57XTb@n(xr LvJ|i]Oҧ.SPb4s$t]Yvp3>1H+9!uKgjĀU>\hJi=ђ%TO7Yq-\6@eT)7#%{^rE~SJtӕb P:1'4⩵*1Z7+ZB!1!E5M-Gnc`!|I)D`mK7 Mq/ DTLV +Y2uu^67}tuoe= "WAQӻY8HL lJ݅. ǁ*mcpѪ ڕKyUD!+-vWjzQrX $~/?uJ !,R8ӿ(è *ߞN S jlnm>XR"Ǡ0]PwҶ+,,et)wpGئPLl,{4e~̧fttTU,wnr9كoaA 0ҦيrjH~:IAu)\LI| {2Ab34+rshWծ\De,3!R,KrЇ h| \k2q4f~k-UpcF8'5.~Wc@iarDBQ[n`bD0ˆOޚ=9%.t]f .tYnYj qwdTG'qOW+AiN׷;+*'Doh4D8"кU?9u MZ4y{viuj@'Q"o)`[٤c@e]mi:ЙFKO?vt_OݿDBR,CQ3D9"!|\yF!sc~:X6zzځ3,bOe;=Ó>}4rNPP"Vtȹ|rĥmn;j,@t9M֦ȐyLE/8J31Z{(ò 1QMkϛ:@[E4'Hqyo(-.gYmqltLPd]VZhwd"GX -VV5Ub:mW3DKCA1nf@_H|X >ZQ KN`ڃLQYN ( ^n ?l79<:?Ta;apZ9 ^9.Spp_l1%?gGa&TN6WHfU#|1Vl,.QaΩcZ*eͦX;8wtE88οEٰ- PiلfV[UmTBߕnv&g.ч mK!a"01CRU렏A [qWUt;X iPqt^L2=&\_98 u`"9dVqW3w[U"#\t4ᓤND404"Q L!F3*z7g 1\:C F4bCi|I>I&3Sa8 Yd{ʫh,N0vJz"n,q͝1TQY9]DhHD4T&?O^fA(//bd4m& c_K'UXx !I$8Πf'bsgp[2!%yƠ=yn4c ^*#OzZs [Xڸ"[~3mdXpEj0ɍ[#NS?uǷ9)_ $5|N`/t' 앶"R^KPT)'mGd+֚5l7!'Ksi|š71{:p]22[e5|Y<%0}1 mv0*0fK9ܛ5*qYSUMbxlc8z,B3S3^g  %@-;׬Tĥޥq>z1rc/ 8ӐwK/g.z)[˗ 1ٹSiM8?fYjomF:gٶ;߆t^}5LE]SoՁ?bԀAQ/.^:»F9J'Y/˞s#1ζ~m 1p/ʷmpv`^LJ]i,hQ -ehpGZxУ,/,btB]}Si0!q%D _Z9:%ֆfK'oF9{ݖTlokx19~zT =uC֝V"pTl70BK.m?:4]bK;h^"<)Zd>z,CCqcth..'(-ֳ,}뀧d$fd`NNRJCϪѮyZ&AUU ZeGDxf l 9u/.E qݰ@,Wk{O~{W[_l+ՆaީB;ōt)dˮP5g9*768rcpu8/b1'ԋְ?5 g1(pB!Rd%"/qCOH9<xM.`A4Hq"c(G&bje[;Oatώ{&m!W̽Έ%vEk0؞k4 )kI{llȝ︈<_am\s Tcy{y~x=Y籑_9ɓ|4j$xhoy ߡcA-vEzcKY=UEޏAH# QDcE-%X1ٹoGsKparSMs}\;& cH_ό LZUHǦ/B r|f[ @xfHGD֬`'~M 5Bzl jr^2jiF3n^+Ue|ҡ&n0.\˔67xh,fO72n%4'~ 4x3{zf' iFo1y$ټ|(Rt*ݳ,y$Ɓ߽ZDF4К ǧ(O g%{04rΝ]BV [LtkMV.uo^ a+q߽nn1D̟~Nj<75"Eڴ ıcRl?L(qO6ClL Q+aVuDЂ`HrDyW}˙VVe|J`r2j޴,|PqG2oHX-H9is_4,Et)Lo.RmD-(m,\`#&\9>b'/X' Oߙ^Zp]U6!fFD$$cY9\? Qik(@@`-X'gS$ Y[N,;HLU5F' Wf[,N\l7W#^Ep^݇w[ouo.no>"#z#>K "͹5>o*1 vR^lVP33h3swZUgC! fsBH⽡L{nɥ/~e0.0~œRyHXKDfC*V IJ,2>\w;(ۙr(3K%L)Ҵ`G|u+8H/n}5wjɻa [4nQv@[Ù؜BܑURC[4|Vsc2_)@Sw!#]D;1jAo{?|d^-MXӧ|Ckj+hfzȒ7<|k[ncB.BB%-9%O A3,cX$(/o7-),61XEhM ;rP`/1 N'|6T75$@rv -p?%Մ^%]@/P?뤒KFO!;G{,*`\G&s?c@7,:Yǯk*|X2yp>Ҷ8|ED눒`"v R(.|c9\qaKBp,3N0oz.ޣqnlDXSt>hGze 2)z:<ߵuE^(NqF߽kE;wٿL.p:yAܜ߰T6ju7[:M%P\}*%n,.LU*/rA}Û>̅S;_@I;twC(XҬ{X*"gA4={ԿǍlY:vZ{; .HHXtGC#uښv̊h!7|IsV8p h^ e$`uib9*rCSLseS MfCv/?]#NKVnN!ܜ K6nyh\G8&Ji^W"@ݜ%H6Zh(-WׅF3 %܅G*ۧwMߡޙH:ObܵJ~@E(!ۥ2~Kj:*c+Y';^rj˫tmVc5Y7ZxHaQ̳F&Fj1(G8C ƴ{}55Sb']χ=) M`,t:@\ٻ:9߭y j錢#a;a`N'ZI 喋޵-s4>*֒3s̹iOTd&zoF7Qu4D-CO ϢBJF.j> #gׯ0gj ]g Z ^$,<ZG_hp8kVz| ^>۴V[L.ϒ_ziM @d]-3eKj,ܸ},)*ʧ܄]|e%7u1E;.mBIUYWe7 繗Bh (p|V3-1KU^=,WڜNxᨍI6]th"Ν=~Q|V@[ T_|sZ*JʜEs9FǓE1=D,gQlN!|;]aN0j7\|7//gm#&wyWƬdB󸾑X} u1E*g_2@9"3soj3&[$xFg|b'`O0k$L<JVNYj6`b`Kع--[Hoa_rZc7o@=VE:LZ)jf5lSe"F%'>茹/* G*$O5 "+hȉ\Xu(lIÓmۢRt̓__MkC فk&П|&>V qu(. M5=Kj;)|ZE5o]C3 6a0#<.0]n]rU\>XwK,t5~ $ O.Ynw@7i 0]l?|mc Y C^-۶~s Vp8v|_ƁcPkx_&2wWib^68'iNO&ZcƯ_I@iӢMwxGbvKW_coA>0E%$]` k-oPC\7_Lk}{DҁdiL>S 犀4SM!!⒦=ɯӈ)u[lx 2koS;lྫar=1؞ΓdBg89;'֤at-e2;5աcy7Z8m]mzYkeseղh?h#p= b.H7[cC|y>)6/6-4ʳ7 ѤF2M8. = zE[%wu >?~{E*ڙ@Z [ѴP-U#4NW%vﲊc榇a,aviPFy)glyN0fn 1v[Mo.*Wۤw-4#v_Jk։ڈr-Z-YxB?b ?1W[=:fL+"y ǃ5,u$$CY|}?n*EDJ"Tڟ'I)Vnq^EҒ㡃vsiryfxlVqs\ReZ> Po b2\ƺ).$dn܋hMvALs` kMNG'oέi=nN\&_gPxp8ti&r"$$NU(S{5S5+Tyd~VӲ/Cbz}zÐ_yHK65T;uP'#OK$MXB?|öDA>C?Z{WF4sB:u1K;fJ! l2*oϛSsKWb¤ Y!C/珵PhJvZY.@e^D`Wg%zr݁MeQfpR *J?OwB"7k`z Y.qE`"h hz;ƛ?$̋D;Zv'U}FVdb|b:3Euζ-y+D`gF=!!+ W9-O0&m< +.3SzjCqɽ,GѵU#1uۗA9W| qFCI<: ϓ2P-;͊K)EOE\>1j-J!\5Q4?i'D!Y*Tol\ӉyTK8FoB/I"Pn< ȖfX pDu0ge ʺoL~*4Nj,( w wgήn>rlu7^rsZv]r1b#̾5KԮold-$®X^rP bTUqS=+t]IH` 1LEІ.+B Co"h`_8Ҫܤ3@w܆J]U3 !.RrF1զtPH|H.br}w*u}AcŌVzO kڢ.:>AoV}l-##q{=f0q?/k+G٤-F6SX;$xS^7ZSH!aTRʨ# Yy U2L,)P`hhЗF_TӑzHfmYܮp ~VR£V*z[3̄c>D#¡CS"*b.J(_Uv0kiqMOųxæd(m$SF6K;yߥ m}$Qs#.1JJI#ԁNeAm5%YVYնCw <ɍ)̭Z0WpJ.p 9 $ݞR*9,#gxwjcNd y̗ Y[Dq탌IqgFV@>!d3Wxy((oeS.ўOPHU$a1wQ7|US*4~Wڻ= CVmS;"ۦ|Z'N`(![%DEz53+U10):+WGOL/cC1ӼLtsgM1{o| 4z62o(3O/_*bޚ밌@$ԅA^S"Ȅa)и7zZ춘[f\(d1C@swq2=p=zEy` I**Y&:,2~ESSl8_WrO<(\6%}kJ?<)P9 n}2G$Mqm&eЉwp!߇ޅ^Rd,,%{v{5ۙnolNj|u.~Vk[;O|~FIYǞrtm՝ɂť$6s$`cyDcv^c{zhQ#y@;蚅`19zecc 1M-Y G8fRxE ё,i> v+4r̙1?fYUllfAwsRƍ0:%0&A(Oa"ѩfMI 엿Ɠ_bQ *^ve~?{=x`[ۅgĜv$/z yyte_MO Gr1O }N·xjF'2IYG,84\ *ͦKi> 4q>ʣ3<|i6i7iZqK9e9"sTgD6̒o酀9jaex'd:Gs__4ԯ=7ޤPs̮M]AR)]o$nD es/ohę:9e_aϲM.Va传} O~3^ҩf q9k;uO#>axύ_F`+/oeY+3﹔ZM>W(5MxvVfղ?p4^m [dzZyp8?HNPPt!(͝쀄A1ٞӃ ~>J=ů-@#LvݙE_"j򭗝Z^_|Qa3`L@u$؁13WmI %n`N.M#A;S@sxc@gB6Ӹ*]{_|*W/zLOϳg0s?ﱼ>RM a yϠv'[BCoYZEvSO1GJN@K55AuRU3$q`DBis$24~ӎVܻuV'|YY:pD ro"z<>̖g ƬܷoN@K ˜> ;>9nH: "EO ]"#r3qb :$;.R_1 +{:>Ϛ(Gp1L,dWMt ,h0jxUy} nNSk" Mg0fNU=/Ea+p2r'b>u“jLzn?5>XHKh Q2+Ͼ 9=]喡Is6s(.3T3i86 #J.zo Fz`BTD[îUS"D,-j9uF-&֢7P: |Zer3mu^/\{8'l$^p->$]7hS:6H:ĄqpVpFt*xӆȯ&YSGiԅHC`KlAKwi6LkVoI`bp&i.^D>- =cpkߎMJ#28||RB 1 QJ@~!ORdbf@KdOp_`'̆../76_6~p=,n"Mw B)>u$)Vֳ`WW4"5։yP@K[d40.!#GZnxBڿxtnm˵.#˃ IT"1~\s*bBTuE~B"&cޒ7L(TV.I@JCTّt T_OƬtW~C@Qsu0Y<@dEͫC#F yD8({D sgd'@ 6PR O P<\~h#w츸`Ha4蜩]#I3nqmU;V('?f:4WA{L09mڙhz{gy78ʕ9Lcy[Án5D321ꜫ=`۸zRBKlg*HLsF+;#_j?`iy0 ~p|i#S$*u6:nY!'R& bQF&;˸FY阴Qx1ڂ])D];M\=1.3D#b7 KȼoN(QqkM$y|[96:jz߱{^UW9r\N*5')c߿# dswuv$dB@ 6_L*`U #]5&"_fR7]kqxS-fc^@t:Jzɨn;Ư{ʉJkV_m}4wk7}/.qnّ)+ J|2I9l~ ]CѮA)/bzcjwZ͔VX2"3J Cۆw;d\ӝgv IkW(⻟P[|JN$3"40$^cgWoא22WYhGBR_b78smP;31Z \/MnKEgO$j mZKQ(kENJ߯:OBu;.ZդѬ\:R#5s=O^|'byʄj*8&NPA.yקF W@3ub->A59Fti@)*Ш٣G(33j"e.2Dt&V$7cg>ENZ*(ޝPަ 9#F*{6ՒdfX8G_J!(r4p5ju0'P$ԘDHw7ݞ W g:R+vˋV}V^>X%MiTy(quA kr6Y^iy~N-h3UTw%0 ={gU4Ze1hxFOzM2.h Ӵ DL ~=6h`K"!$q&_5o,ܽ0ji^|FuՄJ% }f;;Bx/6%cҢusB`gm>12őᑐ9T-bG)hp;oжKB|Kz[P|(+R|. rю{2D6L`E4ԟnCYbMS9$bR^TC)Xκ\w- 05zf-@:~F݉y)g:2%Br<"k@&9 VQ\WBӉgBI]g,8D YM̭rY$1j<\zݶ)T}JLJȍ#tY_mE ַ3 Ti#x☟@Kk !aSP_11_=^T> Z錆s7'Hmm:ˡtr`y۔Sƣщ+M &ƥpl2RL Om@ :shohAЛUy4@E}ّD&.=54ke+YƸ{h2ds=7VJl t%T= @9O 'd䝁 ^DLsl85ð:82%jJr0-kVpqADz׷ld#8}"ScG8b-W%7Ī^ٚESm 0EZ&<5IcWj.[)"Nie#yPЗV管Ǯ+ In6)Bkϓ*Q QgC=ܐr`YB fK+D MskҖuONP[2d%*n$7s0[Y2.83 Q,$eF+GZ]0khFd7aMy-OXfHCʤ'QY0pU^F:cF~<_Hg0 qs{[psM4`[c;$(9PsCg萹܍ w* $kƍ=gDF, +?Yʅ,4U0M Q +jۃ pfbQ#s4\V~ӈZ<"Dk,.J韄hsRU|iz8$e=R6bdӬ97覉`DuMXt>Z$^rPg'\ʴir1լhC$$Zg$c@QHx 1нǡb2@ڵj|Ct'k_QJ'.ɋ{p#xM{K9,S&GS!<Ǧ3(2pE>@ w~B،\ d翈5N rxMnNPXQLs$!{,`oD3RON:kPD:R[ۚ]5pD=[$fOH}OqQIݕTq'U"dKc3m)qAxk=[wOz &(Iy,&rb8k6o#O'XZUJFw! !jZIt~I}'R4drOHhgcPE4M4>6JdC Ft0 9(Ze[ k3|`@as#X×;EjР'_p\/`P_F'8f_~%E~9)xGDDc!gueFzy:o-JJ2͞"Ѣ*u"E90vLQ>oJNd,4b2wB&"\cB=Ue[WlB-8ـ3005-6.0u<f^_ΕLľ;(4} Tt>& '\;5_@=)&V.GW]tSb5 C/MoVmYtoo6$B9+ԜSh1`|NUK?ǽdIiⵇ_9.Pk<$O:ϝ5ViU'~6ܡ#fgĐ4cHUEz*MRgM u5+WSl"}#"2Jr}1؀{6b?BMA_nŎh#X?6j|LazdW_xP e }D h O`r+q0ۧdzHLs9W3~EbB>ן('nw6nURxsǠBR6mQ#91k !>E&ss.1M8#ŕ\Aw<&b?.?oir0p`ِ~G5Z"3Fߏ<:ڢ: e0& dž)e)!zė0g";Z%Hd;U/RsZ? +"5BOo: x.Jp דF&#$}V{WIb)X#iQʆ::TW;E~pg1[ky ݶ%V`Y5CP.92'cYD_9)[ܵ$nf~G JvXPa,تsuaDo HL~F)Kb@vНP r'4w8lҽ[7jU4ZP+HeI.O0%1C>1sXj,eHuPlz E#n~".'RMYڂ3qjnQ,VIJB@MyѸY\Nu(EH{3_Ct+c^p76tB[@#8Yg [ؠe/Ѕ&RgP79%PQX;o_* Q8Syϑe:qֱ?$ӐGԹtE-]Σ{XLyEKZ<.B.raC IyaŐQ+S߅bfu8_N|HO6"SZtBdB"p)Cc%\zah=V'RZ r-@;n4y9%ΥIEzh+gN6nK]q}X𜅶uvW*lKlsujz 8HUzΤqݣcνU'lO`kkp{!4٨mHa_9(`.ym$n0DHdHDJ];IqT@˱(hⰌbK(=ӢTv(4t8"E5 [n7H$`ej>/o&$zmQH\' /r~pTy 7` ᱐C?4[G5gLC*VPY-y,59mt- +-&_FKtb*ěd؊8ޫcwdKP4MLxA~,ǸOPr[9FF{Րo3<aP]Co?_)H[̋"L;מJFˣiu@X^2xCF>M[F;Зn>OZ?B}&@ć Ÿ(k{[ ߛ0J??ѐ9G"_w$_0_(\d$VC.jp U+e=pCSIlM"Nᵔ斻˗)rpe]K& E''wOi!?%N{[ C]&Aw ~" oή!yZ.^ 1YCzCkS{־;T=v/v ;NDx*F"0JhC9Pe,=dϘmPN0K*)ku JÊ5!.8{K40VrJ=GZ-J%v:AHiZ_5KyYUƁ͹%n[NO77T 4Ӿ#`J_Oa-oz-edgc}bHQSo tq}v="mw":”VL35.8KuKps ܣwjkPwH!L& 3%*.ZIlmx(ͅ'wOOMJ*,`Z@M~"XOUPPT M+`UTR+}^ٰBG?\E ! M)DT:Gx _pN|荣`1 Zl}L[qf~Z Azd,efN.hk#2nqT.Bn2'LsZ4h6;\H3s+gp9P<I Nc;m $YLX !J)cXk"W3!cR5tQ@E=Ieir9܃w$V5erN׾·TYT` /M'M>Ŋ)cILx~ u ~UL@O`3}f}f9X [M$K)ȼT~ȧ^I!{0WLoBrW K\ȝgAaYf$h5;=m'Qt`n ?bm,ï:f*F#eV"]T9JwIs2 2/ tCq>W1]͛M>消 u*B7+I7J*935Yt1PN汚u0dvj~:r{<Yn}.J p͏ XCmdS%SmR蟵a&ٷI~Иl;]GӛLbx <]c'/7xzŠ4 pĜ]ik67lp8Myҥz~\wM V`PZȻom}B-] e\/B fjl:tkhBpqS3 VH fW$Z'*rPQ?Eiu;n ks=hCHZGU1o^Yڇ3o>V!N!U?^|)h,|DQ?}r͓3iqsK&thIkaeǯ΢X4Lyl$^n5YY2G3"L|9 &屍wO?EFJFj+~Tf 3Yh>3RZZJ*.N1:f*X'ݧ*8?EsomI'9y6#RS0CU|Z&53=_BAЖeOv؏ylO1e|V="Y3cfcIb/4hy M Y-l~[֍s17 ` $T!RhiG +š˩C5_̠X9BhAJ~z~늢]ҙ$|B2iƊS Dj|CyJe+Ȁ9?ݗHaZ4;ݤ!-z7xozL;b)΢VLRMl%{g*)b;15_ZwDƲxp؞gzL1I8\G,=q4sՏ`Vvh $,\.XAҌƶ[DҖ_}}k@lUV}*q&H0Y 4JI$2q^r%NB `IW$7/텧;cc`V8-1"TDLz[F2Vo*$W~SӕMiU=+8*ou뱿_)Ͽk^v{'EKy#_C)a#:N=v)g dq( /&];ps#&\ Sb:$-^>f/r隋>RpWYL u|4'9nZkcx!?!w;A =Ȼ">M з;yk8 _p;̣յjlcՕ:t_"RPA뉮VG9o 6,nx%T1v ٛzC5,~rf%?T o e [,q|&kw˛ѯi6mFY=:A Y750פw|w >z+cV7]y㥧Gjy`ڢڶ< `;*, K5DL~㱴C \`)Cc`oų3PgxhrC<;B:F4.j,ZkHmVFGbSݾ(DZoAn(Ixt-ql~Fc>h=BX u(Q\Iـg\8z@IDZPvC@()MJ$kVwb ;w QkOjNY'JufDN_]zW/}WFcZ;ҷqgNH&p3G:;b)-d a$dD\B1̙eM^J,0 =P;#)B=E@3~K$NkYG9X2Ȓ1%XUl!+L`eQqgRܒe5h۬=r]p/KZ}hE]w%+l{'C@fn8i`@^J9q5E4 K$v3R UJ8CSl[lA_`H˘0mXt"Hj`C =R84DW "|hZZg67M-t_o\rnXAZ/@}knL>/:һׅl=90OkAsMo_[89*LTUUq&Y5pKtvuޕ$Fl o㕓YtwVHjh_o;WE&[4ãM IUN7гx³<zu,Hv<;} d-ܘQ<`pVǖ7u8~ԝK5*+`GqmzV` 1HmY2ڋ+1؞ړ6S_㋛}{#\d|U1BYHdj(Їof\4bFw%|]+`"z6ܯ_h1t4X^fu(xX}^[҆폜8̢,FãS,둰K3v~9kǀâ2q{M6/fre# Z{t?=f]2ϱbUхk*u)EiᦨI4;le0 v^rOr.vrk9Wp0ȺtHnTi1@$A EzrO ٥BgJZSoP+Q;?$q=@pPh]* s[C8㭆dM2<|M;@Dz; KIo[HG!JCZ4ѧ 67HF8gz iҼZ'tS8;bZ-έ{ɕTk o mG.}X* *?|]>)UA wlJ"R}^(+ĭy.C/4Lvr46o"(;Fs-M%3[cPclLfr34Wx]XV( &v a^-ZSӞ-ϙ ,w&e-xu&:|?YOb" C Czo Xjb d~\cbEJX7!'ygIQfg؞_%_XlO5>'=sF6b5QiZ0?$<<S5Ii\C)~3 kO.T_m(,"7yo,J_OTC05SɀQ3ľ"04rmc՜% B-2HI[1ʨH a@XLXҳgOt7GqhG:((Yv]v4<{hPdBԥdn1t sOIb"üw<K=!Mz Ȣԛs?;1[{ҙOk//&g0JǹD}"⣂Ϲ4t|B{ x .v8-kwvdw;AcYP+Tf\_vJ|Mp]v}{h鍶s/@V0w%$rOon[S{ͅc{/o(!hOj&%|y6GTl.|9CdFtcFzx%DiouKӯI'XK!I5]Y(30KX & ŵŞ/$-6lTס2\JVܨ]5~ 7F"0|L%Hm <+06*i&*vTT}2xTӊ̓"0f jqA mnBŘMbw^z:!:~@khzҷG e }AN"AmjSjPAͮ_.qQ͕.jE */{eo^+*a./9@@z{'_P qk[[K؃lF,Ļ(IjsBn* Cnp,Wb1!נ,hƔW m̍Qp:a|%hNM>D/U!3`pVӦA 86OoU;Q4V[ >iߨ㕨UYt. s> |\Z/h+^ XAbRC"4 Q0F_g;ZKs1ZtJXcQ{N&d:[u+} L|R=%Qxdp$p;^4gU:ƸF'@ywMvFZCX[,@/_8V]/x$ۗBi6}P/ \`URo 1e<-}L!L&Eh-l@dE|4m]DxbȚ(X܌* n޵vLA2AT k"[:>­i+6ܟjnJ ,{G_t,ݰה0J2vVf+sw&Fuڝ.CZk<! )s1_qTH^AhGĉQjRA=BUy}Ygz.Xa^eG&-,|k!"K @+e=CY,&k6L'`f|[ {LXMe:CM4=S |MEe|㻓0C4KKq)09`f#ۺpj,lU`@B(BqzA~Nq2lFp/ϢWvꃸE?gڬ H W "qBc!6HM6+ Vy N{4SAwTB͝80fQⲔ1Y^JjaU4.#}QW} |vld ^h^@:)кeHwtf&xмB&K;Tc$I?|'XrVz x<:mS0Je%RD0NMe+;=&Ms*5E?0~k?A-Q`%X[c_Kj?3?נIv~MfnoBz*Ԓ/9q69xH(t:6}> NM6V*|?Q*V\pa^6lnz}2x:ZLUpcwB:vب]Fi뾫{7&{(K (\ X3;ߐ0W=6sTbg}צc9tHV̷gfgOP2CHBnl-yA0J#a45Q? NJ)\[ x̭Wryg\p6t2Êp'L9:{s i{"&e#MT*QӣȫG{_L~7b Ibq<mmfbuky|ߧ(u {y(fT!o?vmZ/hb俜जUCfKzO 1KwЁz!YfUft_2vw%LK$"aͭkHP<=͓Bj"SF7|<>$`&ѫS$[kh1m9/F0=m)-r[$ ,R'ҸH}zо|P-n$$E5EfM=yCYM5!Hu9pqƎؾ׿渄iGH.gmP nz):D1`۩eT˨QϤr u 5Xb.3^@ V>G9]b"榽D,Mx!8ED0YFlT #NɍNXP!3\j]PiQd|@$Nlw y6$[F߸yA;2XTRaH3 p\Iߠ-4uCG0h^dBJ<짡s!VX9?wkrgB{dE3 ֊~wv]BKY>n;Yw ND>>vT \R 5DT4 oUї=halY2ptWz& Q R+) PC0A/:aVsq:RBӧ̞D"={ я9|uk'~1_jMϻJNS {Yr[qx -]Ƃ̍.U[zP[0 +MU]C{زSx??Ve/tDa(ۧ!n1ombT{ualNOkK_:=yN_ё[yi,g>{d}fxM }yBڬOGt\p+50ibh?T\٧=+_s…Z[OAY‰גkм'rɽ3=e+\[w{AQ?A"}v|{XQ b O%#ȫYP ?; ~J"ՙ~Pѳ ; qbulNq $Y)HbOr(>@3辥xw!>" -52a; Ɓ3ZP1kXvlEFVKeDc;q̈́Ms络 }ɍao '3Dyw{._= 0>Ɯ@i\7Tnk?)z9F_WZc#[ $.̫Ol2PJ`\#f.YE{};o ៽u,G>@=hR96dl31(10IPr%Mo_SL,5R"{53 Ū7QMhD;5P, +^wƖ!9&G.C[<= ì]Ӌb-Dݨ_1cHOCM6Re^bЫuϖ !Ƃ'ʖ|0_M>" JнLw| OQ I&IU`@ ؐiu {V WoXMM x=ǹJ]~WQgP,]XF)QuOK jX_Dò ChUY$I'0F0g˜ *!hCq̈TW ]e *arر:2Wi 7Y.FkelGWuVo:84qCTwj{e0cXt;21&`"{ak_[Ş_O_S T: U lSTj6 @@q[躗/l PzRP],06mY IʑG%тfzlRv <5:+;?IF󥃮Ws~í| sf =pzf~2jJ`Vi OFokCm/W{n&cVs0~xXXaa:x4 6>9%T%@J:r׷/CL;8JXh0("K%5{tփlAaV>YGJA-8_t3 y,7 NݫثK@w3*s \| 3.784E3QȬN1swnŴBSk9/4Z1!lAr}Oo;(zz;O&6_}>`K~>Ǜqd#VrŸ[`R*Gƴ2eQ !\F*cMXr+A2NR)ߋB,!13+0bmc0E38 4!;mnlMG"1հ6@#ZQɁbZQD.hV5-*rTvÆAPV]*jyDJ1Yw !.T4rhb0O2jw;P2,[@=u95d^½d PLHjIt`JX K5%ӧj_=2 |搘c#E{qRa9o4LKЊv1u7qLV=~Jy }%K:b+znltUDZl9b*tZI=^59̯:tGJtM#E;z+xe;Eu44`ڛ*%ݚdk|D/0J 5+0 ԯ Oʧ:LQ(#ٕ3 %XpJe#D!TL8#hK cĪ넉\ŷݮfjY 緵Nm8:~)>2u/l?CLpCD %f4c4+ !PũeѵJ0X9Qg-PԄ-ZZ =iJ27_.sz{hܔ(&Rӳp1D>=WtiM | kZO([ӛZȹШ0C.JںY vK+Y遼iY ^/ PW8G[-X{t4hR]h5 !&S>j.ͿE5謲dr×w4D81lrr%"홚p-1ROB'GJ7q5;VNPg{ɭĖĤt98pQT+:w\m/b c(9e+@D!O*>z9p^ӈABi3բ8}#Y F[8Ǘrt+]M ֮$nߗ.[*Ŧܽ Ȩ)v~ϐqۜu^ ZDiW?R/z﫤d.UXX@k7=7C"GCjf;xb_N=E~S FMjxc'Lsx\mRCZf]wN2ExƏIm7UF|܎zd,ݗ-cj'ua3`ĂӬGb(5ϳ Op<^v{Yvăd8$"`pPv/'evIH bHK֖acwX?A(1a`Rz;^haɷ+1z\,~Sq} \<>¼w0oWo"w Ep9T7E6[ɔS<n Qv#:ΕCmq;6K?`Sfvl]$GU^`fؚ%_nhrx= ? ]1.^#=D]J#=8EC=l7 '%I'O*^j1d/.Oy r(5AMiH M0Ged6>2@)?XiiF_G$vGS-^~y^뮾0O>D"G?G/cy1{smCUi@[I`}cNK?L.IbL64Fjʾ|lHdUo%]tɖvRP *G>$Fl1kJvt=96S8E|Fhٛ =AyN#3)-V^8M,9!|~$ eXޚ%~^z@d~ \Z dzcO{^yQ^A!w) fBr #j-ۻ'HjF1 NBcw)FdpUQ(U/p,;%Nbk٪i `.2c @{F*(0:H\! =VR#ccDHz Y< 5_$Z^moq QxtlR@R"ߩ!=m,vE_Jz.RXR/fq+$;;K')tg!3#tf"ꟋPbnVRbTsS(ҏБiYo̒en}UaTԠr#Rz l% oD"ºH`_y>a&(nR%sEAIA{5r1tګ:Ȧ ߺx::(e.z&[=UFV\B]@g1|_=VNE8 e)짘'o`v\jڠ*ֱw>/Ui*/J%#:3C 7A5&&`xsKa>$!krb-)fL#oKj!dnV\I,qaxMMߣH9C؋ .Nk U|}t|r85| XX%7iƉ0Gшk؊4]xK.V@\W  MȘی,pƯ=dv`pX@ERj= aPl!4N~jz돜򖭚ͰFg4J)Tw[_P [_>Ύ-4InӠ^XfݎܙlCF>Oz.E55nqYy !I.PSéc|-#bEP.- &?4GCt|K!9f]ܜ"(W]e GڪM ` LQ';8 hYGEXě8:(.I۱̠@t[7646c܏fPDr~ rsu]3a)>8:gf.MMiD(}&lwǟ1?fcҝ}FJI?_1 9Ih7P0 zhMz%D1/yj1h`ŗD?(YisEd !z>a/0^"6HLEU.rwꊕ~R6TndW5=Y".X*57UNr`=P~? })1Erb6ʵt]Za:&q)џ+Y= >AW(G$:%f`pTL蓃rr4C#FdVaw4*g x\ a pc1J¡MnZ4C]p]ʰ=bx.OX&s8Q3C $A} y\:)N:VB1l{075d ( Va#"s {yvŮR lD`qfLta~")[Ȥ* #V`f0"bS6IgTdK)_"~Q'4#w/`[CXEQy8j#O<Bٹ-bچ<Z0m.y,ݚ(!c3 <`V[m3|󩮚؉8u PDurǫ8$$shVJ8Z#bsW2AoXOF&磔A;%Ub,Wdʜ?Bl?XCwb{_FaLgc7k^G՝YP (l<P6(J6QlgO㔟GVid EH8@ˇѭ>bMmD¯п6/adZ*e2B1OlQH8--+íg]lt ?qa~XE* ޓCbRCn3 lY< O:׹Tsh6K.ҝnlOv)ʕ#c5:SFG3/Mz8@QH#o-n0|Ur80@FʥJ ! *䉦ē/s]}T>ӡ2ě~w'4r`Ï.]8R' yAƵA^cf'xӕ(4NF tN$R9qt]kxt&!aN=B n̋ 6 Qe(n+G.nN̖%Ĩeqᔟp*Q}(c N& v-A_.^m*[bIhEe#?r׊=/GA`tPՑ/`ݥ°z٧`eCwn$!pI|sx%䋩.XȗU]n%2to_b=F%83ɷ >.v钴^,2[!AR^*n.ju_b^zU~xi{Rظ&w-i"SczeU拉"1Jwǫg|cIy&:ldvΪ8<*:#H>xmW6ܓg:fILI2Hqg! Ėsyf(cf؎̤8J-x8ӈ1CVgi[9A_4Yc'`~˕@rK=RSS)c84.{K`?8ZcZQuK IcW u)NBצI5*7^υ{y<[πȅA ӊ#iuy f]n+կm]-}CڂڜAVeobe [e+dQ,nӋS g]ʉ .@tC %s#fmE#2ˍ&cI C@:U@mqu嶥袜TL^gE%vCx''f? c4/oE(D1 Ԡ MA?|i`!`qh( W'9r!dH^ff$J0^w,sTm퐕'y$W(21KؓP|wqK[g.cNYԠMI*F&"7Dt7m~ ];6y AcE'=ߣ"5Q⽂G ¸oLu,-VKy  P l"0M^˘ 6,`x]::;ٖg99 z Iyq4KEe0.bC)$[$9o\^B>uF~$ }m=NB$z. .&vj@ ڡ%IIgW*!{,p\3[O'VK}^ v42I^W`3Z/ {դf9,&10/7CoPwzvbJ>9S<3UDFbW`^YkB#g֢F^?[j(HC0hYh^"i-bUEL6[HHS9 Wv}v>3՛hUxUn,`bvsY6I;m9Ԗ<\#f+$qӽu912 W=ڝL2囃OociK.Go?l}Gdt;sXKs@N9%JǏcsaM·f9+Y7`4zN/Cx 3&pCװ($ƛ_ br_o0SA Gx^pQ~o*xp+I-{ތV^H~Hps?#ӯ˅;.o~b-df-m޶JmHͳC @ʌ Sbm26dy޳-ȽP_uR7ۈU}T&l2,7%ٵNo@kmB?81{" ܏ca*‰b5ji)N"_3(.K oSYӛ w~Qim e>=ܴѺ)/Oէn݄LW`MUf*QW.dOԧ.B qBxnw`&lC/F/IQEq:At>C - Ի`@OmF3nZ1VMf8ev8*eykK)F=o?NF{|ܡ߰6AI1o<=# ѤKHʗӈO$\P`ݎ5 .Ⱦr>]wl_a!ѓ,R%EUd.} ~ 0>M C<ӂEr8i&>PFZ7%jah,PWiF}vo˛A\)3^,X0# >O/ԭpz%HRB OI!^ $ wK`O|M's8S1(p~Z# _m 5jS/Y(/(xڕ[Fx.C,4b@[<5.`Pi*$^/N4H8 ʾe' '|D!0؄wkc5KVXD]jEE|q0Ku1']htM H?V%ӯ\]uS}kcFG 8Ya|z2W?Sy[9k ݆ļ*s:o Cդق[cpܜ[SL4Ac )C΂Lb=sOU]g/\. \Em\K( gDVO(fG2rQw\E] D$:F=]Zc*ꝕ%4 EA*NhWOb~bS̢%_p\ZCFfYg^8,PTaopZU-.FMA}\_讜8rBQ {O?0 O$l?TU 3q~ x CGvQ%8ܿu|ʤ$ డzIѢ])\l0Tj9uȾׯtAL0gJܕ9%N=U{0ƒ1mdQoYצ.chN0载l] T]J/1P@$2-AAOis9M²H]׺O~>*zhK3cZ@LYOUPsvh/s?gILTG5hQs DL1$%:'wdƬP#AfӵU6E~/X<]M8rD'1%.=LC9PX)`ސw7ӯEJupsf|2{ C)%ݞvSYGe[Z{JܴC|raˑ_ԎN˙crΊ?$Z#gA-d<=4;@KcZͰ1uAoϜ<$=sn0wχDu˃Y"ލNFB  K"{Ю믟/}r3WcOgf誆; -S_G \B j+*&rd4? yQ]*}\74?N{G|S9ҡ-r~4D~i4֊W3%B>er[QF6ۺ"0>~2-ЬX+=8XrpN'+Ʋ3.RvU?+|wSL-'.\.܍ZC(BB&dMKA9)w@7onGyԇ{F 2w#oek8l,&]a`809?Cm`y(_w-Go]9 Q[@G+<["E]xɲh_ǸҨg/jͲm&D\3XX w(v/* (&cxZED{k1 φģ܄Z'ҧ0Q<%{[c2Xp:kzo(9~jJRx5P*%צo|2OC(sa-L"_Hb&*<3|ȵ?J(|?ͯ Rdd$UOq1kH#hrR0`mĜߝO$Ť2WS܈@onMۆ@>˼Ar,5,#0zT{4m&Vu@Z^E@E õ!oμT9CL'ݹ]ӅރZ _͜ JWFIIx`D s`pLxdu8/WDW>`4kvmg/KM !q+}:>sP䕦Q t"dLД3UtQayj$jq+f/yW%z?E,Wt* Mc8+%o9Fe]f)*r(H:9:t9O e0! #5>1K.qT|qb. ͻ8$h^:6sLm7+zLG[qb e9WէXmԃ;=n>5GrlB5OCE ~ ?~炴W#w >V)]x3Kx: YZ